last executing test programs: 7.918623867s ago: executing program 3 (id=207): r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0x8, 0x9, 0x1, "43a71a87b4be18d94a55dd2813c07bba1ab8373f96e32d018577ededd3b52e00", 0x34324142}) 7.681466221s ago: executing program 3 (id=209): bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-512\x00'}, 0x58) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mount_setattr(0xffffffffffffff9c, 0x0, 0x9000, &(0x7f0000000000)={0x0, 0xa, 0x80000}, 0x20) 7.643707495s ago: executing program 3 (id=210): fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x21800, 0x0) writev(0xffffffffffffffff, &(0x7f0000000640)=[{&(0x7f0000000200)}], 0x1) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, r2, 0x80000}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='numa_maps\x00') r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x0, 0x34) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000080)={r7, 0x0, 0x0}, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000600)={0x0, 0x2, 0x0, 0xfffffff8, 0x4, 0x6}, &(0x7f0000000680)=0x14) fremovexattr(r5, &(0x7f0000000140)=@known='system.posix_acl_default\x00') r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) r9 = fanotify_init(0x200, 0x0) fanotify_mark(r9, 0x459, 0x10, r8, 0x0) r10 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r10, 0x402, 0x22) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) fcntl$notify(r11, 0x402, 0x40000029) fcntl$notify(r10, 0x402, 0x1c) r12 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) close_range(r12, 0xffffffffffffffff, 0x0) 6.461646763s ago: executing program 0 (id=215): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e34, 0x5, @loopback, 0x7fffffff}, 0x1c) 5.957435273s ago: executing program 0 (id=217): socket$l2tp(0x2, 0x2, 0x73) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000140)=0x3ff, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') fcntl$getownex(r1, 0x10, 0x0) syz_open_procfs$userns(0x0, &(0x7f0000000340)) r3 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xe539, 0x800, 0x400001, 0x40000333}, &(0x7f00000000c0)=0x0, &(0x7f00000001c0)=0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x7, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r3, 0x847ba, 0x0, 0xe, 0x0, 0x0) 5.669382702s ago: executing program 1 (id=218): r0 = memfd_create(&(0x7f0000000580)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc5\x1d\xe7jDf\x87@\x8fg\x15RJw\x82\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7g\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05', 0x0) ftruncate(r0, 0x80079a0) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0x2, 0x12, r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) syz_clone(0x100011, 0x0, 0x0, 0x0, 0x0, 0x0) 5.669246732s ago: executing program 3 (id=219): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 5.475079612s ago: executing program 1 (id=220): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_buf(r0, 0x0, 0x28, 0x0, 0x0) 5.310037169s ago: executing program 1 (id=221): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000640)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c42200fd9232f5aa6a361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa3dcd5b9247a915378e6492e5b94073dcdc87e7c794fb262a7e9ee0b943", 0xc5}], 0x1}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000cc0)="cc5a4dbac0affd0a979c63ea8352d608a51fc8625318716ddf62b7752be4540c4ac7d344c53a3ad28313abc2437b60b03c0e587cafcf9a435bf90c618351f70a828238fdf90bc5d36c7d614b82552649954e0185662defd28f78449f073bad544f586136c5076a6f0f1b6fc9adf80557eb44db1b41824e9ef104c95e999766bbf27d74ad5d8fa63210cde65d384dd3e87c3fedaec3144d1ee66a0eb0750363e346cb9556a649fb246dd788930dae6109df6b9955bf8af119b5c9a86622af4ff8b5949fb90f8edbde416d046d61512fe4c453bb601a780e1bbc00dbedc5e50d3cd9bc920810eaefd5f9a171e9d32ab46b42e3e78c60087318bab42e94653cbd9e52fba37c5a31d095500e91d02256f101e82447e34733220cdaaabc947f5b815080b5214c94a06fe96450ea42f48006c032b24d9e8d722841b7c7244b1d2cc012fcda1f7472fdbabb673ef862e349359fad715b3f5cef6ef951abab80a4a0f5f8574395c5820fa25d07a119e23b39a87cb3b763fbfb0491121eec3e05eacbe7835e79e76881d1179013622a2a6421d51c974e6abd48a9882c8fcadbcee369346a9ad948fd5dd8f87496a30a9d888cdbcee8f3592dd691", 0x1b6}], 0x1}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000140)="a7040f7dff0a4fed838b52a29c46952dfe5aff84e281448c520c4b0808bdb32447fc2ba20baa8cc06a99aea4a4221e753e94bf215e02377273", 0x39}, {&(0x7f00000002c0)="d0f28c036a8b6293adbae6a1f4a98928a2efe08e665dac369f8749c5c15e9819ef3627a4cf2264401c991774440846e7b4146eca22035546a286d4571d16423012a6cc000f8a5fb3c2555ef48a1e7dc5a9c834f7dfdb9487e74566a7a9e2262d739ba78f19916bd9efee8442b70298a91798f9186dcd1a9e63316e7d18debc6fe4280aff3b34", 0x86}, {&(0x7f0000000400)="59233b75f9898a5e3d65e9a97a89e9e8e1e6bf764de774e88c9c89a1e91fc07edeb783ef957ba5e2bc45ca7d4f548d3047668babc1aa77359561ad300aa22747c2c20e931f550338780b4ea9c94cebf4782a806c6597cd580c33aa71e2", 0x5d}], 0x3}}], 0x3, 0x54004) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 5.161350254s ago: executing program 3 (id=223): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x10000}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x32}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7, 0x200}}, 0xe8) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0xb, &(0x7f0000000000)=0xe1d1, 0x4) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) mmap(&(0x7f00005f0000/0x1000)=nil, 0x1000, 0x2, 0x31, 0xffffffffffffffff, 0x2000) r4 = gettid() process_vm_writev(r4, 0x0, 0x0, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r5, 0xfffffffc) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x48, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) sendmmsg(r8, &(0x7f00000094c0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000300)="eb", 0x1}], 0x1}}], 0x1, 0x80) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r7, 0x7, 0x0, 0x0, {0x2, 0x0, 0xff1f}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) 5.021139947s ago: executing program 1 (id=224): r0 = syz_open_dev$sg(&(0x7f00000003c0), 0x4a38, 0x201) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000900)={0x53, 0x4, 0x6, 0x34, @scatter={0x0, 0x0, 0x0}, &(0x7f00000000c0)="eadd2f4ec268", 0x0, 0x4, 0x10002, 0xffffffffffffffff, 0x0}) 4.807168998s ago: executing program 1 (id=225): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) msync(&(0x7f0000952000/0x2000)=nil, 0x87abbe8d1cc6ad9, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x44810) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xffff}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) msgget$private(0x0, 0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x1, 0x0, 0x0, 0x3) syz_open_procfs(0x0, &(0x7f0000000000)='numa_maps\x00') open(0x0, 0x108843, 0x98) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) 3.433586447s ago: executing program 0 (id=226): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0xe64, 0xb, @empty, 0x1}, 0x1c) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0xe64, 0xffffff01, @loopback, 0x7}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x24000881, &(0x7f0000000100)={0xa, 0x4e34, 0x5, @loopback, 0x7fffffff}, 0x1c) 3.212300648s ago: executing program 0 (id=227): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup(r1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.732788896s ago: executing program 0 (id=228): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x70bd29, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0x7, 0xfff2}, {0xfff1, 0xc}, {0xfff3, 0xfff2}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0xb6}, @TCA_CAKE_WASH={0x8, 0xd, 0x1}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010000104", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x80000) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f00000004c0)={{0x6}, 'port1\x00', 0x60, 0x20000, 0x2, 0xfd, 0x1, 0x38e, 0x7, 0x0, 0x0, 0x6}) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) syz_io_uring_setup(0x8d2, &(0x7f0000001400)={0x0, 0xd80e, 0x3010, 0xfffffffc}, &(0x7f00000001c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) socket$igmp6(0xa, 0x3, 0x2) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x2000, @fd_index=0x8, 0x3, 0x0, 0x0, 0x14, 0x1, {0x3}}) r5 = socket(0x2a, 0x2, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x10, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3ff, 0x1, 0xfffffff8, 0x0, 0x7, 0x7f, 0x8, 0x5, 0x1}}}}]}, 0x58}}, 0x44884) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd2d, 0x25dfdffd, {0x0, 0x0, 0x0, r6, {}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x2c, 0x2, [@TCA_BASIC_EMATCHES={0x28, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0x5, 0x1, 0x669}, {0x9, 0xfffffffa, 0xfff, 0x0, 0x8, 0x2, 0x1}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x86}}]}]}}]}, 0x5c}}, 0x2000c800) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2.4015344s ago: executing program 2 (id=229): writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000100)="390000fa461ad7e48489bffa560200130011186809fc071200000f0000ff3f21000000170a001700e0da8979d2fc6ca9e48270faf047145bc79e0b9971bcbedac0eead49dbecf96eebb1", 0x4a}], 0x1) r0 = syz_open_dev$sg(&(0x7f0000001600), 0x0, 0x22c01) ioctl$SCSI_IOCTL_SEND_COMMAND(r0, 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64=r0]) 2.192931781s ago: executing program 2 (id=230): r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @local}], 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0x26, 0x6a, 0xa, 0x3, 0x0, 0x85, 0x6, 0x29, 0x85, 0x0, 0x81, 0x4c, 0x2}, 0xe) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x0) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e21, @local}}}, 0x84) 2.071244973s ago: executing program 2 (id=231): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000080)={0x0, 0x2710}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000002780)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, 0x0}}], 0x1, 0x20008004) 1.916525458s ago: executing program 2 (id=232): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000a, 0x204031, 0xffffffffffffffff, 0xbdd8000) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x0, 0x6, {0x0, 0x3eee6d3f9d1e2d7a}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0xa, 0x8000, 0x1, 0x0, 0xffffffffffffffff, 0x2}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000180)={r0, &(0x7f00000005c0), 0x0}, 0x20) 1.786961551s ago: executing program 2 (id=233): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r2, 0x8001}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) setsockopt(r0, 0x84, 0x7f, &(0x7f0000000080)="010000000980ffff", 0x8) 1.557526744s ago: executing program 2 (id=234): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) execveat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x100) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000200)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r3 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x8000003d) mkdir(&(0x7f00000000c0)='./file0\x00', 0x16) chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000000a00)=[{{&(0x7f0000000240)={0xa, 0x4e20, 0xc52, @local, 0x4}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000000)="001036ffbd0a077c617f9c475f9526f9f1ce846e737358f5", 0x18}], 0x1}}], 0x1, 0x4000841) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000004300)="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", 0xb5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x0) accept(0xffffffffffffffff, &(0x7f00000003c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, &(0x7f0000000100)=0x80) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sched_setattr(0x0, &(0x7f0000000380)={0x38, 0x3, 0x8, 0xfffffffe, 0x74b1, 0x8, 0x5, 0x6, 0xb0, 0x1}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000683d544a941000030400000023f35620", @ANYRES32=0x0, @ANYBLOB="00000000420000001800128008000100677470000c00028008000200", @ANYRES32, @ANYBLOB], 0x38}, 0x1, 0xba01, 0x0, 0x4000050}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r5, 0x6, 0xe, &(0x7f0000000000)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x1a, 0x0, "2431d0edd9b36cb74d7df7671eacf04be3b08353efa3641776f56c7556fd3713097bd0072577bc6fefb4cdc9e94e420b0ea4fbc5b07a32056eff5e6c42784b46ddab72b1b8fc87f208ad6db80d8dfe25"}, 0xd8) listen(r5, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="aaaaaaeaaaaaaaaaaaaaaa0086dd6000000000180600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="600200009078ffff03030800"], 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000001c0)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_ringparam={0x33, 0x83, 0x20000a2f, 0x401000, 0xe, 0x3, 0x2000000, 0x1, 0x3000000}}) 981.372192ms ago: executing program 1 (id=235): openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b000100000000090400000101292000090509"], 0x0) ioctl$FICLONERANGE(0xffffffffffffffff, 0x4020940d, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_open_dev$audion(&(0x7f00000011c0), 0x3, 0x8c4201) 38.481776ms ago: executing program 0 (id=236): inotify_init1(0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='fdinfo/3\x00') socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xc, 0x8001, 0x0, 0x9, 0x4f, 0x8, 0xfa11, 0x1}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) socket(0x40000000015, 0x5, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) capset(&(0x7f0000000080)={0x20071026}, &(0x7f00000003c0)={0x200000, 0x200000, 0x0, 0x0, 0x8, 0x1000004}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x4, @loopback, 0x7}, 0x1c) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000240)=0x40) r5 = add_key$user(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, &(0x7f00000000c0)="ff", 0x1, 0xffffffffffffffff) r6 = add_key$keyring(&(0x7f0000000540), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r6, 0x0, 0x0) keyctl$KEYCTL_MOVE(0x1e, r5, 0xffffffffffffffff, r6, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000bc0)={'ip6tnl0\x00', &(0x7f0000000b40)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x4, 0x7, 0x50, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x700, 0x7800, 0x2, 0xb22a}}) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(0xffffffffffffffff, 0xc008aec1, &(0x7f0000000240)={0x6, 0x0, [{0x7, 0x9, 0x5, 0x2, 0x0, 0x3, 0x1}, {0xb, 0x6, 0x0, 0x6, 0x8b9b, 0x7, 0x9c1c}, {0xb, 0x7fffffff, 0x0, 0x4, 0x101, 0x5, 0x10000}, {0xb, 0x4, 0x1, 0x5, 0x807, 0x2, 0x8002}, {0xb, 0x5877c6ba, 0x5, 0x0, 0xf1, 0x0, 0x4}, {0x1, 0xfffffff8, 0x1, 0xa, 0x5, 0xd0b, 0xd5}]}) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 0s ago: executing program 3 (id=237): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x1000, 0x10ffff, 0xffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$kcm(0x2, 0x2, 0x106) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(0xffffffffffffffff, 0xc028ae92, &(0x7f0000000180)={0x1, 0x3}) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, &(0x7f0000fcb000), 0x4) r2 = syz_pidfd_open(r0, 0x0) setns(r2, 0x16000000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.111' (ED25519) to the list of known hosts. [ 72.377985][ T5754] cgroup: Unknown subsys name 'net' [ 72.547900][ T5754] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.179185][ T5754] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 75.821084][ T5766] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.840022][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.847719][ T5769] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.855311][ T5769] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.864632][ T5769] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.872836][ T5769] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.880278][ T5769] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.891551][ T5769] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.911997][ T5769] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.919626][ T5769] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.927800][ T5769] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.935933][ T5773] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.944353][ T5773] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.952217][ T5773] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.959760][ T5773] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.011008][ T5769] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.030026][ T5770] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 76.038062][ T5770] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.046610][ T5773] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.060493][ T5773] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.076846][ T5770] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.090599][ T5773] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.100490][ T5773] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 76.108480][ T5773] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.493584][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 76.564983][ T5764] chnl_net:caif_netlink_parms(): no params data found [ 76.747749][ T5767] chnl_net:caif_netlink_parms(): no params data found [ 76.769843][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.777119][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.789598][ T5771] bridge_slave_0: entered allmulticast mode [ 76.797351][ T5771] bridge_slave_0: entered promiscuous mode [ 76.810590][ T5764] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.817727][ T5764] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.825157][ T5764] bridge_slave_0: entered allmulticast mode [ 76.832342][ T5764] bridge_slave_0: entered promiscuous mode [ 76.847544][ T5764] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.854873][ T5764] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.862120][ T5764] bridge_slave_1: entered allmulticast mode [ 76.868979][ T5764] bridge_slave_1: entered promiscuous mode [ 76.876331][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.883650][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.890866][ T5771] bridge_slave_1: entered allmulticast mode [ 76.897727][ T5771] bridge_slave_1: entered promiscuous mode [ 76.904826][ T5774] chnl_net:caif_netlink_parms(): no params data found [ 76.979001][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.996168][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.019212][ T5764] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.083525][ T5764] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.123333][ T5771] team0: Port device team_slave_0 added [ 77.132217][ T5771] team0: Port device team_slave_1 added [ 77.154526][ T5767] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.161899][ T5767] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.169010][ T5767] bridge_slave_0: entered allmulticast mode [ 77.177554][ T5767] bridge_slave_0: entered promiscuous mode [ 77.185544][ T5767] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.192959][ T5767] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.200855][ T5767] bridge_slave_1: entered allmulticast mode [ 77.208182][ T5767] bridge_slave_1: entered promiscuous mode [ 77.228437][ T5764] team0: Port device team_slave_0 added [ 77.238889][ T5764] team0: Port device team_slave_1 added [ 77.293729][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.300868][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.326939][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.351652][ T5774] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.359007][ T5774] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.366371][ T5774] bridge_slave_0: entered allmulticast mode [ 77.374159][ T5774] bridge_slave_0: entered promiscuous mode [ 77.394167][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.401247][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.427333][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.451529][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.458602][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.485570][ T5764] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.498136][ T5774] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.505688][ T5774] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.513326][ T5774] bridge_slave_1: entered allmulticast mode [ 77.520603][ T5774] bridge_slave_1: entered promiscuous mode [ 77.529050][ T5767] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.541711][ T5767] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.574431][ T5764] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.581698][ T5764] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.607848][ T5764] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.657767][ T5767] team0: Port device team_slave_0 added [ 77.671913][ T5774] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.687209][ T5774] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.698828][ T5767] team0: Port device team_slave_1 added [ 77.728484][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.735505][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.761836][ T5767] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.808934][ T5767] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.816129][ T5767] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.842855][ T5767] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.900703][ T5771] hsr_slave_0: entered promiscuous mode [ 77.907201][ T5771] hsr_slave_1: entered promiscuous mode [ 77.931324][ T5774] team0: Port device team_slave_0 added [ 77.942570][ T5764] hsr_slave_0: entered promiscuous mode [ 77.949425][ T5764] hsr_slave_1: entered promiscuous mode [ 77.955617][ T5764] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.963790][ T5764] Cannot create hsr debugfs directory [ 77.990119][ T5769] Bluetooth: hci2: command tx timeout [ 77.994658][ T5773] Bluetooth: hci0: command tx timeout [ 78.009228][ T5774] team0: Port device team_slave_1 added [ 78.042602][ T5767] hsr_slave_0: entered promiscuous mode [ 78.049814][ T5767] hsr_slave_1: entered promiscuous mode [ 78.056485][ T5767] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.064939][ T5767] Cannot create hsr debugfs directory [ 78.101323][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.108328][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.134643][ T5774] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.148174][ T5774] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.155458][ T5769] Bluetooth: hci1: command tx timeout [ 78.156015][ T5774] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.169477][ T5773] Bluetooth: hci3: command tx timeout [ 78.189530][ T5774] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.281501][ T5774] hsr_slave_0: entered promiscuous mode [ 78.287938][ T5774] hsr_slave_1: entered promiscuous mode [ 78.294707][ T5774] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.302397][ T5774] Cannot create hsr debugfs directory [ 78.647097][ T5771] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.660045][ T5771] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.670376][ T5771] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.683817][ T5771] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.756320][ T5764] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.786076][ T5764] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.806283][ T5764] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.816763][ T5764] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.877821][ T5767] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.904296][ T5767] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.915342][ T5767] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.961519][ T5767] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.996368][ T5774] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.023819][ T5774] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.034699][ T5774] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.046918][ T5774] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.094267][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.172259][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.191634][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.199138][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.218823][ T5764] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.241203][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.248334][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.288305][ T5764] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.341018][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.348195][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.369249][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.376563][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.397760][ T5771] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.424269][ T5767] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.477759][ T5774] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.493137][ T5767] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.543833][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.551087][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.577212][ T5774] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.596908][ T3448] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.604135][ T3448] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.632023][ T3448] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.639189][ T3448] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.702703][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.709917][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.892700][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.983591][ T5771] veth0_vlan: entered promiscuous mode [ 80.028948][ T5771] veth1_vlan: entered promiscuous mode [ 80.070197][ T5773] Bluetooth: hci2: command tx timeout [ 80.075659][ T5773] Bluetooth: hci0: command tx timeout [ 80.106096][ T5771] veth0_macvtap: entered promiscuous mode [ 80.153218][ T5771] veth1_macvtap: entered promiscuous mode [ 80.184329][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.202470][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.213960][ T5771] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.223681][ T5771] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.234575][ T5773] Bluetooth: hci3: command tx timeout [ 80.240146][ T5769] Bluetooth: hci1: command tx timeout [ 80.249230][ T5771] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.267012][ T5771] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.305610][ T5764] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.410640][ T5774] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.453669][ T5767] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.493381][ T39] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.505148][ T39] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.555292][ T5764] veth0_vlan: entered promiscuous mode [ 80.577718][ T3448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.588336][ T3448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.618103][ T5774] veth0_vlan: entered promiscuous mode [ 80.652996][ T5774] veth1_vlan: entered promiscuous mode [ 80.663338][ T5764] veth1_vlan: entered promiscuous mode [ 80.693443][ T5767] veth0_vlan: entered promiscuous mode [ 80.738931][ T5767] veth1_vlan: entered promiscuous mode [ 80.801026][ T5774] veth0_macvtap: entered promiscuous mode [ 80.837430][ T5774] veth1_macvtap: entered promiscuous mode [ 80.867454][ T5764] veth0_macvtap: entered promiscuous mode [ 80.896190][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.912907][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.926520][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.939222][ T5774] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.950294][ T5774] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.962081][ T5774] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.972816][ T5764] veth1_macvtap: entered promiscuous mode [ 80.986662][ T5767] veth0_macvtap: entered promiscuous mode [ 81.034323][ T5774] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.050953][ T5774] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.064130][ T5774] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.073276][ T5774] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.086404][ T5767] veth1_macvtap: entered promiscuous mode [ 81.123481][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.135305][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.151883][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.169899][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.191212][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.246664][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.265296][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.276338][ T5764] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.287141][ T5764] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.301214][ T5764] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.325776][ T5764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.340975][ T5764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.356472][ T5764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.366296][ T5764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.382559][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.395124][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.406345][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.417346][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.427445][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.452828][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.471457][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.538951][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.563170][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.574417][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.589710][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.624950][ T5767] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.655972][ T5767] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.680914][ T5767] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.698212][ T5767] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.725325][ T5767] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.734175][ T5767] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.750588][ T5767] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.874533][ T3448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.919577][ T3448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.956016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.974042][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.036593][ T5855] syz.3.6[5855]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 82.090251][ T39] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.098151][ T39] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.150181][ T5773] Bluetooth: hci0: command tx timeout [ 82.155664][ T5773] Bluetooth: hci2: command tx timeout [ 82.295859][ T1305] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.306374][ T1081] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.315046][ T5769] Bluetooth: hci1: command tx timeout [ 82.329584][ T5773] Bluetooth: hci3: command tx timeout [ 82.357661][ T1305] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.417046][ T1081] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.425827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.648470][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.677924][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.830128][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.346820][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 83.357988][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 83.889653][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.898479][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 83.961268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 84.189806][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.198151][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.207652][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.229475][ T5773] Bluetooth: hci2: command tx timeout [ 84.234957][ T5773] Bluetooth: hci0: command tx timeout [ 84.391450][ T5773] Bluetooth: hci1: command tx timeout [ 84.399705][ T5773] Bluetooth: hci3: command tx timeout [ 84.950761][ T5827] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 87.417987][ T5827] usb 4-1: unable to get BOS descriptor or descriptor too short [ 87.448646][ T5827] usb 4-1: no configurations [ 87.462318][ T5827] usb 4-1: can't read configurations, error -22 [ 87.636906][ T5979] program syz.1.15 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 88.175149][ T5989] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 88.523548][ T5991] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 88.710412][ T5979] syz.1.15 (5979): drop_caches: 2 [ 88.744098][ T5993] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.544420][ T5756] IPVS: starting estimator thread 0... [ 89.639441][ T1203] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.649455][ T6015] IPVS: using max 19 ests per chain, 45600 per kthread [ 89.874691][ T1203] usb 4-1: New USB device found, idVendor=0547, idProduct=0201, bcdDevice=11.64 [ 89.905078][ T1203] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.941617][ T1203] usb 4-1: Product: syz [ 89.957862][ T1203] usb 4-1: Manufacturer: syz [ 89.971793][ T1203] usb 4-1: SerialNumber: syz [ 90.003029][ T1203] usb 4-1: config 0 descriptor?? [ 90.038756][ T1203] dvb-usb: found a 'Nebula Electronics uDigiTV DVB-T USB2.0)' in warm state. [ 90.112000][ T1203] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 90.179887][ T1203] dvbdev: DVB: registering new adapter (Nebula Electronics uDigiTV DVB-T USB2.0)) [ 90.233293][ T1203] usb 4-1: media controller created [ 90.324948][ T1203] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 90.609562][ T1203] DVB: Unable to find symbol mt352_attach() [ 91.033081][ T1203] DVB: Unable to find symbol nxt6000_attach() [ 91.070898][ T1203] dvb-usb: no frontend was attached by 'Nebula Electronics uDigiTV DVB-T USB2.0)' [ 91.199034][ T1203] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input5 [ 91.317852][ T1203] dvb-usb: schedule remote query interval to 1000 msecs. [ 91.389312][ T1203] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0) successfully initialized and connected. [ 91.438412][ T1203] dvb-usb: bulk message failed: -22 (7/0) [ 91.468357][ T1203] dvb-usb: bulk message failed: -22 (7/0) [ 91.544890][ T1203] usb 4-1: USB disconnect, device number 4 [ 91.788697][ T1203] dvb-usb: Nebula Electronics uDigiTV DVB-T USB2.0 successfully deinitialized and disconnected. [ 91.870337][ T27] cfg80211: failed to load regulatory.db [ 91.907279][ T6072] program syz.1.34 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 93.128093][ T6088] tipc: Started in network mode [ 93.145346][ T6088] tipc: Node identity 16ff93556e17, cluster identity 4711 [ 93.173760][ T6088] tipc: Enabled bearer , priority 0 [ 93.619443][ T5827] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 93.672749][ T6080] tipc: Resetting bearer [ 93.796134][ T6080] tipc: Disabling bearer [ 93.957013][ T28] audit: type=1326 audit(1768046535.726:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6099 comm="syz.2.41" exe="/root/syz-executor" sig=31 arch=c000003e syscall=39 compat=0 ip=0x7f13edb865e7 code=0x0 [ 95.779661][ T787] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.089519][ T787] usb 3-1: Using ep0 maxpacket: 16 [ 96.115185][ T787] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 96.151277][ T787] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 96.160685][ T787] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.168929][ T787] usb 3-1: Product: syz [ 96.192361][ T787] usb 3-1: Manufacturer: syz [ 96.207608][ T787] usb 3-1: SerialNumber: syz [ 96.240235][ T787] usb 3-1: config 0 descriptor?? [ 96.260193][ T787] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 96.280732][ T787] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 96.910032][ T787] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 97.000510][ T6118] syz.0.47 uses obsolete (PF_INET,SOCK_PACKET) [ 97.361611][ T787] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 97.402640][ T787] em28xx 3-1:0.0: board has no eeprom [ 97.504136][ T787] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 97.532182][ T787] em28xx 3-1:0.0: dvb set to bulk mode. [ 97.545929][ T9] em28xx 3-1:0.0: Binding DVB extension [ 97.577698][ T787] usb 3-1: USB disconnect, device number 2 [ 97.633570][ T787] em28xx 3-1:0.0: Disconnecting em28xx [ 97.657819][ T9] em28xx 3-1:0.0: Registering input extension [ 97.665271][ T787] em28xx 3-1:0.0: Closing input extension [ 97.705029][ T787] em28xx 3-1:0.0: Freeing device [ 99.058612][ T6159] netlink: 4 bytes leftover after parsing attributes in process `syz.2.61'. [ 99.100328][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.2.61'. [ 99.579124][ T6165] program syz.2.64 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 100.176413][ T6178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.68'. [ 100.708238][ T6187] syz.1.72 (6187) used greatest stack depth: 20944 bytes left [ 101.042834][ T6202] netlink: 24 bytes leftover after parsing attributes in process `syz.3.78'. [ 101.388758][ T6207] netlink: 4 bytes leftover after parsing attributes in process `syz.3.80'. [ 101.482674][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 101.692950][ T9] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 101.707543][ T9] usb 2-1: config 0 has no interface number 0 [ 101.723320][ T9] usb 2-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 101.745013][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.771966][ T9] usb 2-1: Product: syz [ 101.804031][ T9] usb 2-1: Manufacturer: syz [ 101.809941][ T9] usb 2-1: SerialNumber: syz [ 101.816485][ T9] usb 2-1: config 0 descriptor?? [ 102.040449][ T9] usb 2-1: dvb_usb_v2: found a 'E3C EC168 reference design' in warm state [ 102.079055][ T9] usb 2-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 102.179953][ T9] dvbdev: DVB: registering new adapter (E3C EC168 reference design) [ 102.208452][ T9] usb 2-1: media controller created [ 102.241094][ T6204] usb 2-1: dvb_usb_ec168: I2C read not implemented [ 102.280181][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 102.360547][ T9] i2c i2c-1: ec100: i2c rd failed=-71 reg=33 [ 102.559631][ T9] usb 2-1: USB disconnect, device number 2 [ 102.587819][ T6224] netlink: 'syz.2.87': attribute type 10 has an invalid length. [ 102.707443][ T6224] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 103.042820][ T6233] netlink: 'syz.0.88': attribute type 12 has an invalid length. [ 103.279447][ T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 103.483292][ T9] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 103.510259][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 103.527577][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 103.542410][ T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 103.575461][ T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 103.602893][ T9] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 103.611564][ T9] usb 2-1: Manufacturer: syz [ 103.618758][ T9] usb 2-1: config 0 descriptor?? [ 104.070750][ T9] appleir 0003:05AC:8243.0001: unknown main item tag 0x0 [ 104.093252][ T9] appleir 0003:05AC:8243.0001: No inputs registered, leaving [ 104.121557][ T9] appleir 0003:05AC:8243.0001: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 104.379772][ T9] usb 2-1: USB disconnect, device number 3 [ 104.531216][ T6253] fido_id[6253]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 104.755156][ T6259] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 104.808330][ T6265] netlink: 136 bytes leftover after parsing attributes in process `syz.3.103'. [ 105.144520][ T6275] Zero length message leads to an empty skb [ 106.295966][ T6301] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 107.719446][ T2135] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 107.999351][ T2135] usb 3-1: Using ep0 maxpacket: 16 [ 107.999390][ T5827] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 108.129402][ T2135] usb 3-1: config 1 has an invalid interface number: 7 but max is 0 [ 108.166770][ T2135] usb 3-1: config 1 has no interface number 0 [ 108.241108][ T2135] usb 3-1: config 1 interface 7 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 108.251111][ T5827] usb 4-1: Using ep0 maxpacket: 32 [ 108.279068][ T5827] usb 4-1: config 1 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 48, changing to 9 [ 108.302254][ T5827] usb 4-1: config 1 interface 0 has no altsetting 0 [ 108.308977][ T2135] usb 3-1: config 1 interface 7 has no altsetting 0 [ 108.335376][ T2135] usb 3-1: New USB device found, idVendor=eb1a, idProduct=2885, bcdDevice=cf.00 [ 108.338892][ T5827] usb 4-1: New USB device found, idVendor=05ac, idProduct=030a, bcdDevice= 0.40 [ 108.376931][ T2135] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.377137][ T5827] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.434866][ T5827] usb 4-1: Product: syz [ 108.460421][ T5827] usb 4-1: Manufacturer: syz [ 108.468645][ T5827] usb 4-1: SerialNumber: syz [ 108.525323][ T2135] usb 3-1: Product: syz [ 108.570724][ T2135] usb 3-1: Manufacturer: syz [ 108.620193][ T2135] usb 3-1: SerialNumber: syz [ 108.708909][ T6299] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 108.744884][ T5827] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input7 [ 108.747705][ T2135] em28xx 3-1:1.7: New device syz syz @ 480 Mbps (eb1a:2885, interface 7, class 7) [ 108.821794][ T5827] usb 4-1: USB disconnect, device number 6 [ 108.821816][ C1] appletouch 4-1:1.0: atp_complete: usb_submit_urb failed with result -19 [ 108.847386][ T2135] em28xx 3-1:1.7: Video interface 7 found: bulk [ 109.108713][ T5827] appletouch 4-1:1.0: input: appletouch disconnected [ 109.450552][ T6331] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.459170][ T6331] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.889992][ T2135] em28xx 3-1:1.7: unknown em28xx chip ID (0) [ 109.979084][ T2135] em28xx 3-1:1.7: reading from i2c device at 0xa0 failed (error=-5) [ 109.979134][ T2135] em28xx 3-1:1.7: board has no eeprom [ 110.056151][ T6354] netlink: 8 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.056180][ T6354] netlink: 4 bytes leftover after parsing attributes in process `syz.0.128'. [ 110.084247][ T2135] em28xx 3-1:1.7: Identified as Terratec Cinergy H5 (card=79) [ 110.084427][ T2135] em28xx 3-1:1.7: Currently, V4L2 is not supported on this model [ 110.109576][ T5756] em28xx 3-1:1.7: Binding DVB extension [ 110.152058][ T2135] usb 3-1: USB disconnect, device number 3 [ 110.152795][ T2135] em28xx 3-1:1.7: Disconnecting em28xx [ 110.164109][ T5756] em28xx 3-1:1.7: no endpoint for DVB mode and transfer type 0 [ 110.164130][ T5756] em28xx 3-1:1.7: failed to pre-allocate USB transfer buffers for DVB. [ 110.164151][ T5756] em28xx 3-1:1.7: Remote control support is not available for this card. [ 110.164184][ T2135] em28xx 3-1:1.7: Closing input extension [ 110.174841][ T2135] em28xx 3-1:1.7: Freeing device [ 111.759578][ T5756] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 111.851418][ T6374] syz.3.133 (6374) used greatest stack depth: 20432 bytes left [ 111.941218][ T5756] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 111.979864][ T5756] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.038808][ T5756] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 112.072748][ T5756] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 112.109978][ T5756] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 112.123158][ T5756] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 112.139330][ T5756] usb 3-1: Product: syz [ 112.159309][ T5756] usb 3-1: Manufacturer: syz [ 112.184756][ T5756] cdc_wdm 3-1:1.0: skipping garbage [ 112.204647][ T5756] cdc_wdm 3-1:1.0: skipping garbage [ 112.225153][ T5756] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 112.239370][ T5756] cdc_wdm 3-1:1.0: Unknown control protocol [ 112.339449][ T6338] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 112.530917][ T6338] usb 4-1: Using ep0 maxpacket: 16 [ 112.547266][ T6338] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 112.595868][ T6338] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 112.611513][ T5756] usb 3-1: USB disconnect, device number 4 [ 112.618872][ T6338] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 112.637130][ T6338] usb 4-1: Product: syz [ 112.649490][ T6338] usb 4-1: Manufacturer: syz [ 112.667648][ T6338] usb 4-1: SerialNumber: syz [ 112.690452][ T6338] usb 4-1: config 0 descriptor?? [ 112.737527][ T6338] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 112.758295][ T6338] em28xx 4-1:0.0: DVB interface 0 found: bulk [ 113.376496][ T6338] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 113.779365][ T5756] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 113.820895][ T6338] em28xx 4-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 113.839389][ T6338] em28xx 4-1:0.0: board has no eeprom [ 114.107035][ T6399] netlink: 'syz.2.141': attribute type 10 has an invalid length. [ 114.141508][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.172410][ T5756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 114.200242][ T5756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.243560][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.262840][ T6338] em28xx 4-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 114.269095][ T5756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 114.302506][ T5756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.325852][ T6338] em28xx 4-1:0.0: dvb set to bulk mode. [ 114.336183][ T5851] em28xx 4-1:0.0: Binding DVB extension [ 114.360062][ T5756] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 114.376201][ T5756] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 114.428680][ T5756] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 114.477435][ T5756] usb 1-1: New USB device found, idVendor=0451, idProduct=5152, bcdDevice=c0.b9 [ 114.518632][ T5756] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.578783][ T5756] usb 1-1: Product: syz [ 114.592604][ T5756] usb 1-1: Manufacturer: syz [ 114.605756][ T5756] usb 1-1: SerialNumber: syz [ 114.625841][ T5756] usb 1-1: config 0 descriptor?? [ 114.666328][ T5756] ti_usb_3410_5052 1-1:0.0: required endpoints missing [ 114.700469][ T6408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.743063][ T6408] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 114.893307][ T6391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 114.909073][ T6391] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 115.445891][ T6376] em28xx 4-1:0.0: writing to i2c device at 0xfe00 failed (error=-5) [ 115.560602][ T2135] usb 4-1: USB disconnect, device number 7 [ 115.576179][ T2135] em28xx 4-1:0.0: Disconnecting em28xx [ 115.762551][ T5851] em28xx 4-1:0.0: Registering input extension [ 115.819079][ T2135] em28xx 4-1:0.0: Closing input extension [ 115.906974][ T2135] em28xx 4-1:0.0: Freeing device [ 117.200621][ T5756] usb 1-1: USB disconnect, device number 2 [ 117.704420][ T6445] tipc: Started in network mode [ 117.704481][ T6445] tipc: Node identity 8a8a8e9d0207, cluster identity 4711 [ 117.705067][ T6445] tipc: Enabled bearer , priority 0 [ 117.728596][ T6445] tipc: Resetting bearer [ 117.750732][ T6443] tipc: Disabling bearer [ 124.697535][ T6548] process 'syz.3.178' launched '/dev/fd/-1/./file0' with NULL argv: empty string added [ 124.971091][ T6552] netdevsim netdevsim3: Direct firmware load for / [ 124.971091][ T6552] failed with error -2 [ 125.002461][ T6552] netdevsim netdevsim3: Falling back to sysfs fallback for: / [ 125.002461][ T6552] [ 127.827968][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.0.186'. [ 129.558719][ T6591] af_packet: tpacket_rcv: packet too big, clamped from 3956 to 3952. macoff=96 [ 129.839397][ T8] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 130.951296][ T6615] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 132.269487][ T5851] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 132.330147][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.369848][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.429130][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.456410][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.472043][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.518113][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.546079][ T5851] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 132.579109][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.586389][ T5851] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 132.636871][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.656810][ T5851] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 132.700144][ T5851] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 132.733804][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.760589][ T6605] ptm ptm104: ldisc open failed (-12), clearing slot 104 [ 132.784076][ T5851] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.822334][ T1281] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.829376][ T1281] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.888153][ T5851] usb 3-1: Quirk or no altest; falling back to MIDI 1.0 [ 132.935335][ T5851] usb 3-1: invalid MIDI out EP 0 [ 133.139610][ T5759] udevd[5759]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 133.184140][ T5851] snd-usb-audio: probe of 3-1:27.0 failed with error -22 [ 133.230849][ T5851] usb 3-1: USB disconnect, device number 5 [ 133.754321][ T8] usb 4-1: unable to get BOS descriptor or descriptor too short [ 133.821764][ T8] usb 4-1: no configurations [ 133.826495][ T8] usb 4-1: can't read configurations, error -22 [ 134.057355][ T6630] fuse: Unknown parameter '' [ 134.095952][ T6630] netlink: 36 bytes leftover after parsing attributes in process `syz.0.203'. [ 134.225057][ T6643] capability: warning: `syz.2.208' uses deprecated v2 capabilities in a way that may be insecure [ 135.569230][ T6661] loop4: detected capacity change from 0 to 7 [ 135.602305][ T6661] loop4: [POWERTEC] p1 p2 p3 p4 p5 p6 p7 p8 p9 p10 p11 [ 135.615698][ T6661] loop4: p1 start 1851875945 is beyond EOD, truncated [ 135.639800][ T6661] loop4: p2 start 1633771873 is beyond EOD, truncated [ 135.651632][ T6661] loop4: p3 start 1633771873 is beyond EOD, truncated [ 135.699199][ T6661] loop4: p4 start 1633771873 is beyond EOD, truncated [ 135.718967][ T6661] loop4: p5 start 1633771873 is beyond EOD, truncated [ 135.809358][ T6661] loop4: p6 start 1633771873 is beyond EOD, truncated [ 135.819351][ T6661] loop4: p7 start 1633771873 is beyond EOD, truncated [ 135.862112][ T6661] loop4: p8 start 1633771873 is beyond EOD, truncated [ 135.890224][ T6661] loop4: p9 start 1633771873 is beyond EOD, truncated [ 135.902398][ T6661] loop4: p10 start 660144128 is beyond EOD, truncated [ 135.921200][ T6661] loop4: p11 start 1633812479 is beyond EOD, truncated [ 137.051072][ T6687] IPv6: NLM_F_CREATE should be specified when creating new route [ 138.705474][ T6686] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.713179][ T6686] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.719779][ T5856] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 138.929434][ T5856] usb 2-1: device descriptor read/64, error -71 [ 139.249574][ T5856] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 139.499400][ T5856] usb 2-1: device descriptor read/64, error -71 [ 139.636250][ T5856] usb usb2-port1: attempt power cycle [ 139.741240][ T6707] program syz.2.229 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 140.069597][ T5856] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 140.078546][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.152279][ T5856] usb 2-1: device descriptor read/8, error -71 [ 140.290889][ T6686] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.429440][ T5856] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 140.753989][ T5856] usb 2-1: device descriptor read/8, error -71 [ 140.939791][ T5856] usb usb2-port1: unable to enumerate USB device [ 141.399653][ T6686] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.410182][ T6686] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.422837][ T6686] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.437673][ T6686] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.449568][ T5856] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 141.661626][ T5856] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 141.682759][ T5856] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 141.709362][ T5856] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.722279][ T5856] usb 2-1: Product: syz [ 141.726482][ T5856] usb 2-1: Manufacturer: syz [ 141.742873][ T5856] usb 2-1: SerialNumber: syz [ 141.768421][ T5856] usb 2-1: config 0 descriptor?? [ 141.788764][ T6704] netlink: 48 bytes leftover after parsing attributes in process `syz.0.228'. [ 141.926442][ T6719] netdevsim netdevsim2: Direct firmware load for / [ 141.926442][ T6719] failed with error -2 [ 141.942872][ T6719] netdevsim netdevsim2: Falling back to sysfs fallback for: / [ 141.942872][ T6719] [ 142.251350][ T6721] [ 142.253739][ T6721] ============================================ [ 142.259924][ T6721] WARNING: possible recursive locking detected [ 142.266109][ T6721] syzkaller #0 Not tainted [ 142.270544][ T6721] -------------------------------------------- [ 142.276683][ T6721] syz.1.235/6721 is trying to acquire lock: [ 142.282600][ T6721] ffff8880250bab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_close+0x3c/0x4c0 [ 142.292149][ T6721] [ 142.292149][ T6721] but task is already holding lock: [ 142.299521][ T6721] ffff8880250bab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 142.309531][ T6721] [ 142.309531][ T6721] other info that might help us debug this: [ 142.317577][ T6721] Possible unsafe locking scenario: [ 142.317577][ T6721] [ 142.325015][ T6721] CPU0 [ 142.328290][ T6721] ---- [ 142.331572][ T6721] lock(&chip->mutex); [ 142.335732][ T6721] lock(&chip->mutex); [ 142.339888][ T6721] [ 142.339888][ T6721] *** DEADLOCK *** [ 142.339888][ T6721] [ 142.348029][ T6721] May be due to missing lock nesting notation [ 142.348029][ T6721] [ 142.356344][ T6721] 3 locks held by syz.1.235/6721: [ 142.361377][ T6721] #0: ffff888024c7a4e0 (&runtime->oss.params_lock){+.+.}-{3:3}, at: snd_pcm_oss_sync+0x2a7/0xc20 [ 142.372023][ T6721] #1: ffff888024c7a238 (&runtime->buffer_mutex){+.+.}-{3:3}, at: snd_pcm_hw_params+0x15a/0x1c50 [ 142.382641][ T6721] #2: ffff8880250bab30 (&chip->mutex){+.+.}-{3:3}, at: snd_usb_endpoint_set_params+0x6d/0x2b50 [ 142.393089][ T6721] [ 142.393089][ T6721] stack backtrace: [ 142.398976][ T6721] CPU: 1 PID: 6721 Comm: syz.1.235 Not tainted syzkaller #0 [ 142.406253][ T6721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 142.416345][ T6721] Call Trace: [ 142.419631][ T6721] [ 142.422563][ T6721] dump_stack_lvl+0x16c/0x230 [ 142.427286][ T6721] ? show_regs_print_info+0x20/0x20 [ 142.432570][ T6721] ? print_deadlock_bug+0x435/0x5d0 [ 142.437775][ T6721] __lock_acquire+0x5d40/0x7c80 [ 142.442637][ T6721] ? verify_lock_unused+0x140/0x140 [ 142.447838][ T6721] lock_acquire+0x197/0x410 [ 142.452339][ T6721] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 142.457803][ T6721] ? trace_contention_end+0x39/0xe0 [ 142.463005][ T6721] ? __might_sleep+0xe0/0xe0 [ 142.467594][ T6721] ? read_lock_is_recursive+0x20/0x20 [ 142.472965][ T6721] ? wait_clear_urbs+0x184/0x390 [ 142.477923][ T6721] ? snd_usb_endpoint_sync_pending_stop+0x30/0x30 [ 142.484358][ T6721] __mutex_lock+0x129/0xcc0 [ 142.488885][ T6721] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 142.494356][ T6721] ? usb_free_coherent+0x5d/0x90 [ 142.499312][ T6721] ? release_urbs+0x3fe/0x4a0 [ 142.504012][ T6721] ? snd_usb_endpoint_close+0x3c/0x4c0 [ 142.509485][ T6721] ? mutex_lock_nested+0x20/0x20 [ 142.514422][ T6721] ? snd_usb_endpoint_set_params+0x407/0x2b50 [ 142.520498][ T6721] snd_usb_endpoint_close+0x3c/0x4c0 [ 142.525790][ T6721] snd_usb_hw_params+0x1357/0x19c0 [ 142.530919][ T6721] ? snd_usb_pcm_close+0x300/0x300 [ 142.536036][ T6721] ? snd_pcm_lib_malloc_pages+0x270/0x690 [ 142.541781][ T6721] snd_pcm_hw_params+0x835/0x1c50 [ 142.546815][ T6721] ? snd_pcm_hw_param_first+0x6a0/0xb30 [ 142.552369][ T6721] ? snd_pcm_forward+0x6d0/0x6d0 [ 142.557336][ T6721] snd_pcm_oss_change_params_locked+0x2144/0x3d30 [ 142.563784][ T6721] ? snd_pcm_oss_read2+0x3d0/0x3d0 [ 142.568928][ T6721] ? ima_file_free+0x154/0x450 [ 142.573710][ T6721] ? mutex_lock_nested+0x20/0x20 [ 142.578663][ T6721] ? __fsnotify_parent+0x651/0x720 [ 142.583788][ T6721] snd_pcm_oss_sync+0x363/0xc20 [ 142.588678][ T6721] snd_pcm_oss_release+0x102/0x240 [ 142.593802][ T6721] ? snd_pcm_oss_open+0x1b40/0x1b40 [ 142.599011][ T6721] __fput+0x234/0x970 [ 142.603012][ T6721] task_work_run+0x1ce/0x250 [ 142.607615][ T6721] ? task_work_cancel+0x240/0x240 [ 142.612654][ T6721] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 142.618656][ T6721] ? exit_to_user_mode_loop+0x3b/0x110 [ 142.624131][ T6721] exit_to_user_mode_loop+0xe6/0x110 [ 142.629428][ T6721] exit_to_user_mode_prepare+0xf6/0x180 [ 142.634997][ T6721] syscall_exit_to_user_mode+0x1a/0x50 [ 142.640474][ T6721] do_syscall_64+0x61/0xb0 [ 142.644907][ T6721] ? clear_bhb_loop+0x40/0x90 [ 142.649596][ T6721] ? clear_bhb_loop+0x40/0x90 [ 142.654287][ T6721] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 142.660217][ T6721] RIP: 0033:0x7f436998df90 [ 142.664660][ T6721] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 142.684269][ T6721] RSP: 002b:00007f4367bf5b70 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 142.692690][ T6721] RAX: ffffffffffffffea RBX: 00000000008c4201 RCX: 00007f436998df90 [ 142.700666][ T6721] RDX: 00000000008c4201 RSI: 00007f4367bf5c10 RDI: 00000000ffffff9c [ 142.708644][ T6721] RBP: 00007f4367bf5c10 R08: 0000000000000000 R09: 00236f696475612f [ 142.716617][ T6721] R10: 0000000000000000 R11: 0000000000000293 R12: cccccccccccccccd [ 142.724604][ T6721] R13: 00007f4369be6038 R14: 00007f4369be5fa0 R15: 00007ffe6200f5b8 [ 142.732606][ T6721] [ 142.793274][ T6729] mmap: syz.0.236 (6729) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.