last executing test programs: 8.691675374s ago: executing program 2 (id=365): sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) socket$inet_tcp(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x6, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) r4 = socket(0x15, 0x80005, 0x0) getsockopt(r4, 0x200000000114, 0x2718, 0x0, &(0x7f00000000c0)) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) syz_emit_vhci(&(0x7f0000001fc0)=ANY=[@ANYBLOB="040800"], 0x7) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r5, &(0x7f0000000100)={0x1f, @any, 0x1}, 0xa) shutdown(r0, 0x1) 6.168155968s ago: executing program 2 (id=378): openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x8a241, 0x0) io_setup(0x6, &(0x7f0000000540)=0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') io_submit(r0, 0x1, &(0x7f0000000880)=[&(0x7f00000000c0)={0x0, 0x300, 0x0, 0x5, 0x0, r1, 0x0}]) 5.832129321s ago: executing program 2 (id=380): ioperm(0x0, 0x8, 0x8000000000004) syz_emit_ethernet(0x44, 0x0, 0x0) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x20a00, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.720037694s ago: executing program 2 (id=384): r0 = gettid() bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) timer_create(0x0, &(0x7f00000002c0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x40200, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) preadv2(r1, &(0x7f0000000180)=[{0x0}], 0x1, 0x0, 0x4, 0x1) 4.101186803s ago: executing program 0 (id=387): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 3.386915265s ago: executing program 2 (id=389): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000140)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x105}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r4}, 0x38) 3.173941712s ago: executing program 1 (id=390): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x6, 0x7}, 0x8) 3.161494054s ago: executing program 0 (id=391): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103040, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 2.096588751s ago: executing program 3 (id=392): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth1_to_bond\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}]}]}], {0x14, 0x10}}, 0x80}}, 0x0) 2.02803352s ago: executing program 2 (id=393): keyctl$clear(0x5, 0xffffffffffffffff) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x10, 0x0, 0x72000) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000001200)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101290000090509"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(0x0, 0x3, 0x8c4201) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 2.009841442s ago: executing program 0 (id=394): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) 1.991873294s ago: executing program 1 (id=395): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 1.873182279s ago: executing program 0 (id=396): r0 = fsopen(&(0x7f00000001c0)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) r3 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x1) fchdir(r4) 1.872934759s ago: executing program 3 (id=397): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f00000002c0)=ANY=[], 0x0, 0x100, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getpid() ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r4, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x4800) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000200)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) read$alg(r6, &(0x7f0000000000)=""/35, 0x23) sendmsg$SOCK_DIAG_BY_FAMILY(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=ANY=[], 0x1bc}, 0x1, 0x0, 0x0, 0x8884}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) r7 = inotify_init1(0x800) inotify_add_watch(r7, &(0x7f0000000200)='.\x00', 0x400) 1.01189901s ago: executing program 0 (id=398): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80000) sendto$phonet(r0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x23, 0x7, 0x9, 0x5}, 0x10) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = getpgid(0x0) flock(0xffffffffffffffff, 0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) syz_open_dev$loop(0x0, 0x4, 0x28801) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(0x0, r2) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$unix(0x1, 0x2, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x44, r5, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x81}, 0x24044884) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r7) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) 983.277914ms ago: executing program 1 (id=399): sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[], 0x18}}, 0x0) io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 857.53936ms ago: executing program 3 (id=400): r0 = syz_open_dev$ndb(&(0x7f0000000280), 0x0, 0x101000) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x3) 767.974552ms ago: executing program 0 (id=401): socket$inet(0xa, 0x801, 0x84) r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f0000000100)=0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000140)={@my=0x1}) quotactl_fd$Q_GETFMT(r0, 0xffffffff80000402, 0xffffffffffffffff, &(0x7f00000000c0)) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, &(0x7f0000000000)={{@my=0x1, 0xffffffff}, @any, 0x0, 0x0, 0x8000000, 0x0, 0x6}) close(r0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc080}, 0xe821651e0a1b45fc) fsopen(0x0, 0x0) r4 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) dup(r4) 759.400193ms ago: executing program 3 (id=402): r0 = openat$comedi(0xffffff9c, &(0x7f0000000140)='/dev/comedi2\x00', 0x103040, 0x0) ioctl$COMEDI_INSN(r0, 0x8028640c, 0x0) 720.652257ms ago: executing program 1 (id=403): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000240)={r1, 0x6, 0x7}, 0x8) 657.104175ms ago: executing program 3 (id=404): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000004000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x18) syz_open_dev$loop(&(0x7f0000000240), 0x5, 0x0) 483.814428ms ago: executing program 1 (id=405): bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x25, 0x2, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x7fff, 0x0, 0x1}}, 0x40) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000540)=""/67, 0x0, 0x4}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/231, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/57, 0xd000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)={0x1, 0x0, [{0x0, 0x66, &(0x7f00000001c0)=""/102}]}) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffa}, 0x94) 483.090218ms ago: executing program 3 (id=406): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) r2 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000200), 0x4) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000440)={0x50, 0x0, 0x0, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, 0x0, 0x300000d, 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r2) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c232000, 0x3, 0x2}) timer_settime(r1, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 1 (id=407): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getrusage(0x0, &(0x7f0000000340)) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c09c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.103' (ED25519) to the list of known hosts. syzkaller login: [ 83.032259][ T5756] cgroup: Unknown subsys name 'net' [ 83.168698][ T5756] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.862184][ T5756] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.698868][ T5773] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 86.723837][ T5779] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.732676][ T5781] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 86.745462][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.756086][ T5781] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 86.763219][ T5775] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.771729][ T5775] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.791601][ T5775] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.811663][ T5781] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.822333][ T5779] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 86.831213][ T5781] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 86.839009][ T5779] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.846668][ T5775] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 86.850777][ T5781] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 86.861657][ T5783] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.870414][ T5779] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 86.870817][ T5781] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 86.879516][ T5783] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.887891][ T5781] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 86.896703][ T5783] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.904560][ T5781] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 86.909659][ T5783] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.921570][ T5781] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.945215][ T5779] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.474734][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 87.772864][ T5768] chnl_net:caif_netlink_parms(): no params data found [ 87.848955][ T5766] chnl_net:caif_netlink_parms(): no params data found [ 87.862473][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 87.874020][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.882285][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.889699][ T5767] bridge_slave_0: entered allmulticast mode [ 87.897329][ T5767] bridge_slave_0: entered promiscuous mode [ 87.944524][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.952091][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.959318][ T5767] bridge_slave_1: entered allmulticast mode [ 87.967872][ T5767] bridge_slave_1: entered promiscuous mode [ 88.105146][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.118363][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.146763][ T5768] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.154231][ T5768] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.161809][ T5768] bridge_slave_0: entered allmulticast mode [ 88.168858][ T5768] bridge_slave_0: entered promiscuous mode [ 88.216300][ T5768] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.226659][ T5768] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.234037][ T5768] bridge_slave_1: entered allmulticast mode [ 88.243249][ T5768] bridge_slave_1: entered promiscuous mode [ 88.267535][ T5767] team0: Port device team_slave_0 added [ 88.274103][ T5766] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.281607][ T5766] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.288864][ T5766] bridge_slave_0: entered allmulticast mode [ 88.296305][ T5766] bridge_slave_0: entered promiscuous mode [ 88.348666][ T5767] team0: Port device team_slave_1 added [ 88.369658][ T5766] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.378304][ T5766] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.386032][ T5766] bridge_slave_1: entered allmulticast mode [ 88.394714][ T5766] bridge_slave_1: entered promiscuous mode [ 88.416253][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.423578][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.431474][ T5769] bridge_slave_0: entered allmulticast mode [ 88.438793][ T5769] bridge_slave_0: entered promiscuous mode [ 88.447849][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.455514][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.462825][ T5769] bridge_slave_1: entered allmulticast mode [ 88.470213][ T5769] bridge_slave_1: entered promiscuous mode [ 88.479590][ T5768] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.549902][ T5768] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.573792][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.581071][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.608362][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.623855][ T5766] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.633867][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.641186][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.667840][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.682360][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.699809][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.723620][ T5766] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.752660][ T5768] team0: Port device team_slave_0 added [ 88.829219][ T5768] team0: Port device team_slave_1 added [ 88.838806][ T5769] team0: Port device team_slave_0 added [ 88.848574][ T5769] team0: Port device team_slave_1 added [ 88.858883][ T5766] team0: Port device team_slave_0 added [ 88.868576][ T5766] team0: Port device team_slave_1 added [ 88.933636][ T5767] hsr_slave_0: entered promiscuous mode [ 88.940513][ T5767] hsr_slave_1: entered promiscuous mode [ 88.968441][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.975757][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.003585][ T5768] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.016240][ T5779] Bluetooth: hci1: command tx timeout [ 89.016260][ T5777] Bluetooth: hci3: command tx timeout [ 89.022474][ T5781] Bluetooth: hci2: command tx timeout [ 89.028320][ T5777] Bluetooth: hci0: command tx timeout [ 89.077179][ T5768] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.084437][ T5768] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.111830][ T5768] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.129670][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.137331][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.164550][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.176850][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.184102][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.210410][ T5766] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.223520][ T5766] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.230687][ T5766] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.257001][ T5766] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.281602][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.288707][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.315312][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.396082][ T5768] hsr_slave_0: entered promiscuous mode [ 89.406852][ T5768] hsr_slave_1: entered promiscuous mode [ 89.413403][ T5768] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.421675][ T5768] Cannot create hsr debugfs directory [ 89.494279][ T5766] hsr_slave_0: entered promiscuous mode [ 89.501748][ T5766] hsr_slave_1: entered promiscuous mode [ 89.508397][ T5766] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.517259][ T5766] Cannot create hsr debugfs directory [ 89.554626][ T5769] hsr_slave_0: entered promiscuous mode [ 89.564323][ T5769] hsr_slave_1: entered promiscuous mode [ 89.570976][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 89.578664][ T5769] Cannot create hsr debugfs directory [ 90.004234][ T5767] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.040230][ T5767] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.063365][ T5767] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.074353][ T5767] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.139794][ T5768] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 90.166515][ T5768] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.191741][ T5768] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.225612][ T5768] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.249411][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.274336][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.285993][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.303418][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.417586][ T5766] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 90.428832][ T5766] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 90.452732][ T5766] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 90.477528][ T5766] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 90.567616][ T5768] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.624758][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.644243][ T5768] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.690468][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.697988][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.745010][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.752218][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.769076][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.799659][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.824461][ T3505] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.832144][ T3505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.864891][ T3505] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.872508][ T3505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.909601][ T5766] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.925751][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.971623][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.978818][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.015930][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.023210][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.052667][ T5766] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.090145][ T5777] Bluetooth: hci0: command tx timeout [ 91.090423][ T5779] Bluetooth: hci1: command tx timeout [ 91.095754][ T5777] Bluetooth: hci2: command tx timeout [ 91.103104][ T5781] Bluetooth: hci3: command tx timeout [ 91.128026][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.135267][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.203606][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.211162][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.389718][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.516572][ T5768] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.682926][ T5768] veth0_vlan: entered promiscuous mode [ 91.744035][ T5768] veth1_vlan: entered promiscuous mode [ 91.856274][ T5766] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.869338][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.898961][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.914067][ T5768] veth0_macvtap: entered promiscuous mode [ 91.938711][ T5768] veth1_macvtap: entered promiscuous mode [ 91.979721][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.004421][ T5768] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.041651][ T5768] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.052657][ T5768] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.063086][ T5768] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.072393][ T5768] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.127704][ T5767] veth0_vlan: entered promiscuous mode [ 92.189436][ T5769] veth0_vlan: entered promiscuous mode [ 92.206355][ T5767] veth1_vlan: entered promiscuous mode [ 92.242769][ T5766] veth0_vlan: entered promiscuous mode [ 92.264640][ T5769] veth1_vlan: entered promiscuous mode [ 92.272200][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.286132][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.325260][ T966] cfg80211: failed to load regulatory.db [ 92.366139][ T5766] veth1_vlan: entered promiscuous mode [ 92.378412][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.406512][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.438020][ T5767] veth0_macvtap: entered promiscuous mode [ 92.477528][ T5767] veth1_macvtap: entered promiscuous mode [ 92.510978][ T5769] veth0_macvtap: entered promiscuous mode [ 92.522580][ T5766] veth0_macvtap: entered promiscuous mode [ 92.533773][ T5769] veth1_macvtap: entered promiscuous mode [ 92.568793][ T5766] veth1_macvtap: entered promiscuous mode [ 92.598868][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.609929][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.627371][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.637615][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.648777][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.659633][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.670736][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.683373][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.717255][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.742994][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.757698][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.767860][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.780627][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.791748][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 92.802744][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.816888][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.842008][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.859675][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.874541][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.884291][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.916498][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.955392][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.967416][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.983580][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.996123][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.015087][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.032527][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.056833][ T5767] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.072537][ T5767] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.084683][ T5767] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.097653][ T5767] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.138791][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.160915][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.172765][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.183570][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.193629][ T5766] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.204324][ T5766] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.216577][ T5766] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.225481][ T5779] Bluetooth: hci1: command tx timeout [ 93.231487][ T5779] Bluetooth: hci3: command tx timeout [ 93.237461][ T5779] Bluetooth: hci2: command tx timeout [ 93.243523][ T5781] Bluetooth: hci0: command tx timeout [ 93.270540][ T5766] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.279549][ T5766] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288818][ T5766] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.305663][ T5766] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.288962][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.318376][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.396776][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.426375][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.585112][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.609434][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.628928][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.639654][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.799971][ C0] sched: RT throttling activated [ 94.831819][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.853401][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.068569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.110259][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.806832][ T5773] Bluetooth: hci0: command tx timeout [ 95.812426][ T5773] Bluetooth: hci3: command tx timeout [ 95.818060][ T5773] Bluetooth: hci1: command tx timeout [ 95.823803][ T5779] Bluetooth: hci2: command tx timeout [ 96.670722][ T5876] random: crng reseeded on system resumption [ 98.503386][ T5892] syz.3.8[5892]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 98.777902][ T5894] Zero length message leads to an empty skb [ 99.380581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 99.790266][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 99.799075][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 99.994983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 100.003843][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 100.199741][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 100.209127][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 102.350876][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 102.430796][ T5924] netlink: 16 bytes leftover after parsing attributes in process `syz.2.14'. [ 102.454094][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 102.547071][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 102.708134][ T5929] loop0: detected capacity change from 0 to 2048 [ 104.014787][ T5927] tipc: Started in network mode [ 104.050508][ T5927] tipc: Node identity ac14140f, cluster identity 4711 [ 104.059281][ T5929] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.071975][ T5927] tipc: New replicast peer: 255.255.255.255 [ 104.079237][ T5927] tipc: Enabled bearer , priority 10 [ 104.145026][ T27] audit: type=1800 audit(1768444280.458:2): pid=5928 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.17" name="file1" dev="loop0" ino=1367 res=0 errno=0 [ 104.273863][ T5931] netlink: 12 bytes leftover after parsing attributes in process `syz.1.16'. [ 104.292689][ T5931] tipc: Disabling bearer [ 106.695232][ T5935] pim6reg: entered allmulticast mode [ 106.711956][ T5935] pim6reg: left allmulticast mode [ 108.272214][ T5939] random: crng reseeded on system resumption [ 108.367394][ T5945] loop3: detected capacity change from 0 to 512 [ 108.513389][ T5945] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 108.540332][ T5945] ext4 filesystem being mounted at /4/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 108.815882][ T5945] Quota error (device loop3): write_blk: dquota write failed [ 109.059255][ T5945] Quota error (device loop3): find_free_dqentry: Can't write quota data block 5 [ 109.170676][ T5945] Quota error (device loop3): qtree_write_dquot: Error -28 occurred while creating quota [ 109.207652][ T5945] EXT4-fs error (device loop3): ext4_acquire_dquot:6949: comm syz.3.20: Failed to acquire dquot type 1 [ 109.267916][ T27] audit: type=1800 audit(1768444285.588:3): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.20" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 109.387450][ T5945] syz.3.20 (5945) used greatest stack depth: 20968 bytes left [ 109.448213][ T5768] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.240506][ T8] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 113.477864][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 113.486964][ T5968] netlink: 12 bytes leftover after parsing attributes in process `syz.3.28'. [ 119.686129][ T6003] syz.2.37 uses obsolete (PF_INET,SOCK_PACKET) [ 120.020785][ T5841] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 120.186100][ T6013] overlayfs: failed to resolve './file2': -2 [ 120.248463][ T6014] fuse: Unknown parameter '0x0000000000000008' [ 120.890092][ T5841] usb 4-1: Using ep0 maxpacket: 16 [ 120.940060][ T5841] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 120.954716][ T5841] usb 4-1: config 1 has no interface number 1 [ 121.002888][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 121.044377][ T5841] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 121.078185][ T5841] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 121.146590][ T5841] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 121.156139][ T5841] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.164680][ T5841] usb 4-1: Product: syz [ 121.169000][ T5841] usb 4-1: Manufacturer: syz [ 121.175152][ T5841] usb 4-1: SerialNumber: syz [ 121.246986][ T6023] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 121.253811][ T6023] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 121.301435][ T6023] vhci_hcd vhci_hcd.0: Device attached [ 121.632682][ T5870] vhci_hcd: vhci_device speed not set [ 122.500068][ T5870] usb 35-1: new full-speed USB device number 2 using vhci_hcd [ 125.022540][ T6054] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 125.151957][ T6024] vhci_hcd: connection reset by peer [ 125.170834][ T49] vhci_hcd: stop threads [ 125.176136][ T5841] usb 4-1: 2:1 : no UAC_FORMAT_TYPE desc [ 125.191266][ T49] vhci_hcd: release socket [ 125.231108][ T49] vhci_hcd: disconnect device [ 125.294424][ T5841] usb 4-1: USB disconnect, device number 2 [ 125.314797][ T6009] udevd[6009]: failed to send result of seq 10683 to main daemon: Connection refused [ 128.990099][ T5870] vhci_hcd: vhci_device speed not set [ 129.099349][ T966] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 129.141697][ T1188] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 129.154654][ T966] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 129.172462][ T6071] tipc: Started in network mode [ 129.201211][ T6071] tipc: Node identity ac14140f, cluster identity 4711 [ 129.211748][ T6071] tipc: New replicast peer: 255.255.255.255 [ 129.218759][ T6071] tipc: Enabled bearer , priority 10 [ 129.241628][ T6075] netlink: 12 bytes leftover after parsing attributes in process `syz.3.53'. [ 129.251026][ T6075] tipc: Disabling bearer [ 129.392556][ T1188] usb 2-1: config 0 has no interfaces? [ 129.433581][ T1188] usb 2-1: New USB device found, idVendor=056a, idProduct=0063, bcdDevice= 0.00 [ 129.456242][ T1188] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.490917][ T1188] usb 2-1: config 0 descriptor?? [ 129.807181][ T6077] hid-generic 0000:0000:0000.0001: pid 6077 passed too short report [ 131.895596][ T6085] overlay: ./file0 is not a directory [ 131.999582][ T5870] IPVS: starting estimator thread 0... [ 132.211633][ T6090] IPVS: using max 16 ests per chain, 38400 per kthread [ 132.396643][ T966] usb 2-1: USB disconnect, device number 2 [ 134.136873][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 134.155483][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.503164][ T6131] ======================================================= [ 138.503164][ T6131] WARNING: The mand mount option has been deprecated and [ 138.503164][ T6131] and is ignored by this kernel. Remove the mand [ 138.503164][ T6131] option from the mount to silence this warning. [ 138.503164][ T6131] ======================================================= [ 138.779121][ T6131] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 139.445103][ T6139] tipc: Started in network mode [ 139.470281][ T6139] tipc: Node identity ac14140f, cluster identity 4711 [ 139.477577][ T6139] tipc: New replicast peer: 255.255.255.255 [ 139.490207][ T6139] tipc: Enabled bearer , priority 10 [ 139.507139][ T6139] netlink: 12 bytes leftover after parsing attributes in process `syz.2.69'. [ 139.517735][ T6145] netlink: 36 bytes leftover after parsing attributes in process `syz.3.74'. [ 139.529575][ T6139] tipc: Disabling bearer [ 139.997139][ T6152] sctp: [Deprecated]: syz.1.75 (pid 6152) Use of int in max_burst socket option deprecated. [ 139.997139][ T6152] Use struct sctp_assoc_value instead [ 140.788235][ T6156] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 144.345217][ T6184] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.85'. [ 144.536477][ T6188] xt_NFQUEUE: number of queues (63489) out of range (got 96768) [ 148.236186][ T6213] netlink: 36 bytes leftover after parsing attributes in process `syz.2.92'. [ 148.520573][ T6214] fuse: Unknown parameter 'f’' [ 148.606670][ T6209] process 'syz.0.91' launched '/dev/fd/3' with NULL argv: empty string added [ 156.202025][ T6264] netlink: 'syz.3.109': attribute type 10 has an invalid length. [ 156.308605][ T6265] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 159.261750][ T6289] lo speed is unknown, defaulting to 1000 [ 159.267835][ T6289] lo speed is unknown, defaulting to 1000 [ 159.276126][ T6289] lo speed is unknown, defaulting to 1000 [ 159.287540][ T6289] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 159.303080][ T6289] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 159.504056][ T6289] lo speed is unknown, defaulting to 1000 [ 159.511742][ T6289] lo speed is unknown, defaulting to 1000 [ 159.518898][ T6289] lo speed is unknown, defaulting to 1000 [ 159.525809][ T6289] lo speed is unknown, defaulting to 1000 [ 161.499536][ T6302] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 162.305773][ T6300] batadv_slave_0: entered promiscuous mode [ 164.160177][ T6321] dlm: non-version read from control device 122 [ 164.833762][ T6323] netlink: 'syz.2.124': attribute type 10 has an invalid length. [ 164.841762][ T6323] netlink: 40 bytes leftover after parsing attributes in process `syz.2.124'. [ 164.894883][ T6323] batman_adv: batadv0: Adding interface: virt_wifi0 [ 164.901843][ T6323] batman_adv: batadv0: The MTU of interface virt_wifi0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.928477][ T6323] batman_adv: batadv0: Interface activated: virt_wifi0 [ 165.004229][ T6323] syz.2.124 (6323) used greatest stack depth: 20872 bytes left [ 165.162082][ T1188] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 167.133004][ T1188] usb 2-1: Using ep0 maxpacket: 16 [ 167.174884][ T1188] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 167.237655][ T1188] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 167.276653][ T1188] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 167.319996][ T1188] usb 2-1: Product: syz [ 167.324245][ T1188] usb 2-1: Manufacturer: syz [ 167.328972][ T1188] usb 2-1: SerialNumber: syz [ 167.361279][ T1188] usb 2-1: config 0 descriptor?? [ 167.410301][ T1188] usb 2-1: can't set config #0, error -71 [ 167.429781][ T1188] usb 2-1: USB disconnect, device number 3 [ 169.810090][ T5870] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 170.035487][ T5870] usb 2-1: device descriptor read/64, error -71 [ 170.321854][ T5870] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 170.470504][ T1188] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 170.540104][ T5870] usb 2-1: device descriptor read/64, error -71 [ 170.653598][ T1188] usb 4-1: unable to get BOS descriptor or descriptor too short [ 170.680799][ T5870] usb usb2-port1: attempt power cycle [ 170.694084][ T1188] usb 4-1: config 129 has an invalid interface number: 135 but max is 0 [ 170.713748][ T1188] usb 4-1: config 129 has an invalid interface number: 5 but max is 0 [ 170.728143][ T1188] usb 4-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 170.769021][ T1188] usb 4-1: config 129 has no interface number 0 [ 170.788741][ T1188] usb 4-1: config 129 has no interface number 1 [ 170.810075][ T1188] usb 4-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 5 [ 170.830033][ T1188] usb 4-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 170.856716][ T1188] usb 4-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 170.876301][ T1188] usb 4-1: config 129 interface 135 has no altsetting 0 [ 170.883855][ T1188] usb 4-1: config 129 interface 5 has no altsetting 0 [ 170.896807][ T1188] usb 4-1: string descriptor 0 read error: -22 [ 170.906113][ T1188] usb 4-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.00 [ 170.915378][ T1188] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.942954][ T1188] usb 4-1: Quirk or no altest; falling back to MIDI 1.0 [ 170.960102][ T1188] usb 4-1: MIDIStreaming interface descriptor not found [ 171.140084][ T5870] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 171.194228][ T5870] usb 2-1: device descriptor read/8, error -71 [ 171.254672][ T9] usb 4-1: USB disconnect, device number 3 [ 171.490039][ T5870] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 171.550161][ T5870] usb 2-1: device descriptor read/8, error -71 [ 171.854873][ T5870] usb usb2-port1: unable to enumerate USB device [ 172.281235][ T6376] comedi comedi1: Minor 0 could not be opened [ 176.543420][ T6409] batadv_slave_0: entered promiscuous mode [ 177.013620][ T6413] netlink: 8 bytes leftover after parsing attributes in process `syz.0.148'. [ 181.882728][ T6461] overlayfs: failed to verify upper (36/file1, ino=226, err=-116) [ 181.906747][ T6461] overlayfs: failed to verify index dir 'upper' xattr [ 181.927106][ T6461] overlayfs: try deleting index dir or mounting with '-o index=off' to disable inodes index. [ 182.713047][ T6465] futex_wake_op: syz.3.165 tries to shift op by -1; fix this program [ 185.310119][ T8] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 185.550171][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 185.818015][ T8] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 185.845829][ T8] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 185.859740][ T8] usb 4-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 185.869464][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 185.881655][ T8] usb 4-1: config 0 descriptor?? [ 186.712572][ T8] hso 4-1:0.0: Can't find BULK IN endpoint [ 186.936971][ T8] usb 4-1: USB disconnect, device number 4 [ 187.499548][ T6511] syz.2.177: attempt to access beyond end of device [ 187.499548][ T6511] loop2: rw=0, sector=0, nr_sectors = 1 limit=0 [ 188.810811][ T6524] tipc: Enabled bearer , priority 0 [ 188.835735][ T6524] syzkaller0: entered promiscuous mode [ 188.850198][ T6524] syzkaller0: entered allmulticast mode [ 188.869877][ T6524] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 188.914891][ T6524] tipc: Resetting bearer [ 188.937017][ T6522] tipc: Resetting bearer [ 189.020802][ T6522] tipc: Disabling bearer [ 194.864831][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.874967][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.160151][ T5780] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 196.480067][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 196.810938][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 196.819838][ T5780] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.127825][ T5780] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.176044][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 197.187467][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.213890][ T5780] usb 1-1: config 168 interface 0 has no altsetting 0 [ 197.240159][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 197.247884][ T5780] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.270826][ T5780] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.310001][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 197.341659][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.360864][ T5780] usb 1-1: config 168 interface 0 has no altsetting 0 [ 197.416890][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 197.425973][ T5780] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 197.469332][ T5780] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 197.484851][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 197.499035][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 197.512812][ T28] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 197.527500][ T5780] usb 1-1: config 168 interface 0 has no altsetting 0 [ 197.704675][ T5780] usb 1-1: string descriptor 0 read error: -22 [ 197.750094][ T28] usb 2-1: Using ep0 maxpacket: 8 [ 197.755538][ T5780] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 197.778351][ T28] usb 2-1: unable to get BOS descriptor or descriptor too short [ 197.786481][ T5780] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 197.867552][ T5780] adutux 1-1:168.0: interrupt endpoints not found [ 197.973452][ T28] usb 2-1: config 0 has an invalid interface number: 88 but max is 0 [ 197.981948][ T28] usb 2-1: config 0 has no interface number 0 [ 197.988859][ T28] usb 2-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 198.120051][ T28] usb 2-1: config 0 interface 88 has no altsetting 0 [ 198.197406][ T28] usb 2-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 198.216852][ T28] usb 2-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 198.241324][ T5780] usb 1-1: USB disconnect, device number 3 [ 198.260274][ T28] usb 2-1: Product: syz [ 198.264672][ T28] usb 2-1: Manufacturer: syz [ 198.289795][ T28] usb 2-1: SerialNumber: syz [ 198.296641][ T28] usb 2-1: config 0 descriptor?? [ 198.560194][ T28] usb 2-1: USB disconnect, device number 8 [ 198.810548][ T5780] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 199.010064][ T5780] usb 1-1: Using ep0 maxpacket: 8 [ 199.023336][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 199.033321][ T5780] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 199.046371][ T5780] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.071784][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 199.210592][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 199.287684][ T5780] usb 1-1: config 168 interface 0 has no altsetting 0 [ 199.409402][ T5780] usb 1-1: config 168 descriptor has 1 excess byte, ignoring [ 199.468193][ T5780] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 199.490534][ T5780] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 199.503703][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has an invalid endpoint with address 0xFF, skipping [ 199.517624][ T5780] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 199.533920][ T5780] usb 1-1: config 168 interface 0 has no altsetting 0 [ 199.552123][ T5780] usb 1-1: unable to read config index 2 descriptor/start: -71 [ 199.561005][ T5780] usb 1-1: can't read configurations, error -71 [ 200.041834][ T6634] netlink: 72 bytes leftover after parsing attributes in process `syz.2.216'. [ 202.154136][ T6644] loop9: detected capacity change from 0 to 8 [ 202.669694][ T6644] Dev loop9: unable to read RDB block 8 [ 202.675652][ T6644] loop9: unable to read partition table [ 202.681799][ T6644] loop9: partition table beyond EOD, truncated [ 202.688028][ T6644] loop_reread_partitions: partition scan of loop9 (þ被xüÿÿÿÿÿÿ„É) failed (rc=-5) [ 205.517510][ T6676] kernel read not supported for file /eth0 (pid: 6676 comm: syz.3.227) [ 205.529314][ T27] audit: type=1800 audit(1768444381.848:4): pid=6676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.227" name="eth0" dev="mqueue" ino=10492 res=0 errno=0 [ 207.750735][ T966] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 207.991551][ T966] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 212.136349][ T5779] Bluetooth: hci0: command 0x0406 tx timeout [ 212.151518][ T5777] Bluetooth: hci2: command 0x0406 tx timeout [ 212.157652][ T5783] Bluetooth: hci1: command 0x0406 tx timeout [ 213.641256][ T6739] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 213.819240][ T6746] netlink: 32 bytes leftover after parsing attributes in process `syz.0.242'. [ 215.790313][ T1188] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 215.935237][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.1.245'. [ 218.082076][ T6776] Illegal XDP return value 4294967274 on prog (id 49) dev N/A, expect packet loss! [ 221.350066][ T6807] input: syz0 as /devices/virtual/input/input7 [ 221.854936][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.1.259'. [ 223.892989][ T6820] (null): rxe_set_mtu: Set mtu to 1024 [ 225.122274][ T6820] infiniband : set down [ 225.130970][ T6820] infiniband : added ipvlan0 [ 225.182232][ T6820] RDS/IB: : added [ 225.187345][ T6820] smc: adding ib device  with port count 1 [ 225.196819][ T6820] smc: ib device  port 1 has pnetid [ 227.499331][ T6855] mac80211_hwsim hwsim7 syzkaller0: entered promiscuous mode [ 227.520396][ T6855] mac80211_hwsim hwsim7 syzkaller0: entered allmulticast mode [ 227.542553][ T6855] netlink: 'syz.0.275': attribute type 10 has an invalid length. [ 227.633830][ T6855] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 229.393891][ T6871] fuse: Bad value for 'fd' [ 229.522263][ T27] audit: type=1326 audit(1768444405.838:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.579000][ T27] audit: type=1326 audit(1768444405.838:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.629999][ T27] audit: type=1326 audit(1768444405.838:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.690158][ T27] audit: type=1326 audit(1768444405.838:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.730150][ T27] audit: type=1326 audit(1768444405.838:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.772625][ T27] audit: type=1326 audit(1768444405.838:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.826099][ T27] audit: type=1326 audit(1768444405.838:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=46 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.890261][ T27] audit: type=1326 audit(1768444405.838:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.913642][ T27] audit: type=1326 audit(1768444405.838:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 229.975558][ T27] audit: type=1326 audit(1768444405.838:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6874 comm="syz.3.282" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa16cb8f749 code=0x7ffc0000 [ 230.070215][ T28] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 230.260207][ T28] usb 4-1: Using ep0 maxpacket: 8 [ 230.275345][ T28] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.285868][ T28] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 230.298898][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 230.315701][ T28] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 230.353584][ T28] usb 4-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 230.372196][ T28] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 230.398121][ T28] hub 4-1:1.0: bad descriptor, ignoring hub [ 230.431746][ T28] hub: probe of 4-1:1.0 failed with error -5 [ 230.438244][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 230.473914][ T28] cdc_wdm 4-1:1.0: skipping garbage [ 230.515795][ T28] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 230.555853][ T28] cdc_wdm 4-1:1.0: Unknown control protocol [ 231.584653][ T6897] (null): rxe_set_mtu: Set mtu to 1024 [ 231.604034][ T6897] rdma_rxe: rxe_newlink: failed to add ipvlan0 [ 231.858489][ T6905] binder: 6902:6905 ioctl c0306201 200000000080 returned -14 [ 231.871314][ T6906] fuse: Bad value for 'fd' [ 232.002127][ T6909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.294'. [ 233.883467][ T6919] warning: `syz.0.295' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 234.052948][ T6922] netlink: 4 bytes leftover after parsing attributes in process `syz.2.296'. [ 234.117493][ T5781] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 238.493486][ T6957] netlink: 4 bytes leftover after parsing attributes in process `syz.1.305'. [ 238.500298][ T966] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 238.750231][ T966] usb 3-1: Using ep0 maxpacket: 32 [ 238.792277][ T966] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 238.828145][ T966] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 0 [ 238.872582][ T966] usb 3-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 238.890103][ T966] usb 3-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 238.906023][ T966] usb 3-1: Product: syz [ 238.910859][ T966] usb 3-1: Manufacturer: syz [ 238.915533][ T966] usb 3-1: SerialNumber: syz [ 238.927149][ T966] usb 3-1: config 0 descriptor?? [ 238.952831][ T966] hub 3-1:0.0: bad descriptor, ignoring hub [ 238.973662][ T966] hub: probe of 3-1:0.0 failed with error -5 [ 239.320485][ T966] usb 3-1: USB disconnect, device number 3 [ 240.101346][ T6983] netlink: 8 bytes leftover after parsing attributes in process `syz.3.314'. [ 240.586168][ T6983] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.596058][ T6983] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.605181][ T6983] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 240.614046][ T6983] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 241.244079][ T6999] netlink: 40 bytes leftover after parsing attributes in process `syz.3.316'. [ 242.280681][ T7008] mac80211_hwsim hwsim3 syzkaller0: entered promiscuous mode [ 242.288357][ T7008] mac80211_hwsim hwsim3 syzkaller0: entered allmulticast mode [ 242.351352][ T7020] netlink: 'syz.3.320': attribute type 10 has an invalid length. [ 242.413285][ T7020] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 244.210759][ T7036] netlink: 'syz.0.326': attribute type 4 has an invalid length. [ 253.430334][ T7108] netlink: zone id is out of range [ 253.456555][ T7108] random: crng reseeded on system resumption [ 256.402041][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.408828][ T1286] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.784464][ T7201] netlink: 'syz.3.374': attribute type 4 has an invalid length. [ 261.803663][ T7202] netlink: zone id is out of range [ 261.814677][ T7202] random: crng reseeded on system resumption [ 265.517423][ T7233] mac80211_hwsim hwsim9 syzkaller0: entered promiscuous mode [ 265.535576][ T7233] mac80211_hwsim hwsim9 syzkaller0: entered allmulticast mode [ 268.082664][ T5780] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 268.272087][ T5780] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 268.299143][ T5780] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 268.319506][ T5780] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.334427][ T5780] usb 3-1: Product: syz [ 268.346450][ T5780] usb 3-1: Manufacturer: syz [ 268.369349][ T5780] usb 3-1: SerialNumber: syz [ 268.444486][ T5780] usb 3-1: config 0 descriptor?? [ 269.108996][ T7256] [ 269.111409][ T7256] ============================================ [ 269.117715][ T7256] WARNING: possible recursive locking detected [ 269.123967][ T7256] syzkaller #0 Not tainted [ 269.128415][ T7256] -------------------------------------------- [ 269.134599][ T7256] syz.2.393/7256 is trying to acquire lock: [ 269.140523][ T7256] ffff888078f6ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 269.150087][ T7256] [ 269.150087][ T7256] but task is already holding lock: [ 269.157579][ T7256] ffff888078f6ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 269.168197][ T7256] [ 269.168197][ T7256] other info that might help us debug this: [ 269.176465][ T7256] Possible unsafe locking scenario: [ 269.176465][ T7256] [ 269.184466][ T7256] CPU0 [ 269.187775][ T7256] ---- [ 269.191083][ T7256] lock(&chip->mutex); [ 269.195272][ T7256] lock(&chip->mutex); [ 269.199465][ T7256] [ 269.199465][ T7256] *** DEADLOCK *** [ 269.199465][ T7256] [ 269.207658][ T7256] May be due to missing lock nesting notation [ 269.207658][ T7256] [ 269.216023][ T7256] 3 locks held by syz.2.393/7256: [ 269.221073][ T7256] #0: ffff88801afe54e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 269.231763][ T7256] #1: ffff88801afe5238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 269.242533][ T7256] #2: ffff888078f6ab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 269.253043][ T7256] [ 269.253043][ T7256] stack backtrace: [ 269.259061][ T7256] CPU: 1 PID: 7256 Comm: syz.2.393 Not tainted syzkaller #0 [ 269.266390][ T7256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 269.276500][ T7256] Call Trace: [ 269.279830][ T7256] [ 269.282791][ T7256] dump_stack_lvl+0x16c/0x230 [ 269.287513][ T7256] ? show_regs_print_info+0x20/0x20 [ 269.292753][ T7256] ? print_deadlock_bug+0x435/0x5d0 [ 269.297994][ T7256] __lock_acquire+0x5d40/0x7c80 [ 269.302909][ T7256] ? verify_lock_unused+0x140/0x140 [ 269.308170][ T7256] lock_acquire+0x197/0x410 [ 269.312904][ T7256] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 269.318616][ T7256] ? trace_contention_end+0x39/0xe0 [ 269.323963][ T7256] ? __might_sleep+0xe0/0xe0 [ 269.328616][ T7256] ? read_lock_is_recursive+0x20/0x20 [ 269.334059][ T7256] ? wait_clear_urbs+0x184/0x390 [ 269.339049][ T7256] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 269.345526][ T7256] __mutex_lock+0x129/0xcc0 [ 269.350077][ T7256] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 269.355615][ T7256] ? usb_free_coherent+0x5d/0x90 [ 269.360685][ T7256] ? release_urbs+0x3fe/0x4a0 [ 269.365413][ T7256] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 269.371057][ T7256] ? mutex_lock_nested+0x20/0x20 [ 269.376153][ T7256] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 269.382263][ T7256] snd_usb_endpoint_close+0x3c/0x4c0 [ 269.387825][ T7256] snd_usb_hw_params+0x1357/0x19c0 [ 269.392983][ T7256] ? snd_usb_pcm_close+0x300/0x300 [ 269.398097][ T7256] ? snd_pcm_lib_malloc_pages+0x2f0/0x690 [ 269.403837][ T7256] snd_pcm_hw_params+0x835/0x1c50 [ 269.408887][ T7256] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 269.414465][ T7256] ? snd_pcm_forward+0x6d0/0x6d0 [ 269.419683][ T7256] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 269.426205][ T7256] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 269.431464][ T7256] ? snd_pcm_oss_sync+0x349/0xc20 [ 269.436539][ T7256] snd_pcm_oss_sync+0x363/0xc20 [ 269.441450][ T7256] snd_pcm_oss_release+0x102/0x240 [ 269.446713][ T7256] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 269.451980][ T7256] __fput+0x234/0x970 [ 269.456028][ T7256] task_work_run+0x1ce/0x250 [ 269.460667][ T7256] ? task_work_cancel+0x240/0x240 [ 269.465752][ T7256] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 269.471798][ T7256] ? exit_to_user_mode_loop+0x3b/0x110 [ 269.477665][ T7256] exit_to_user_mode_loop+0xe6/0x110 [ 269.483021][ T7256] exit_to_user_mode_prepare+0xf6/0x180 [ 269.488634][ T7256] syscall_exit_to_user_mode+0x1a/0x50 [ 269.494244][ T7256] do_syscall_64+0x61/0xb0 [ 269.498798][ T7256] ? clear_bhb_loop+0x40/0x90 [ 269.503698][ T7256] ? clear_bhb_loop+0x40/0x90 [ 269.508618][ T7256] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 269.514580][ T7256] RIP: 0033:0x7f73e1b8df90 [ 269.519056][ T7256] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 269.538731][ T7256] RSP: 002b:00007f73e2a0fb70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 269.547203][ T7256] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f73e1b8df90 [ 269.555267][ T7256] RDX: 00000000008c4201 RSI: 00007f73e2a0fc10 RDI: 00000000ffffff9c [ 269.563297][ T7256] RBP: 00007f73e2a0fc10 R08: 0000000000000000 R09: 00236f696475612f [ 269.571326][ T7256] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 269.579455][ T7256] R13: 00007f73e1de6038 R14: 00007f73e1de5fa0 R15: 00007ffc569bd618 [ 269.587656][ T7256]