last executing test programs: 8.481679327s ago: executing program 4 (id=238): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r2 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r2, 0x1, 0x53, 0x0, 0x0) 7.908128806s ago: executing program 4 (id=245): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) lseek(r0, 0x10001, 0x1) write(r1, &(0x7f0000000180)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) write(r4, &(0x7f0000000200)='1', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20020055}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)) 6.92384703s ago: executing program 3 (id=247): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 6.270692356s ago: executing program 2 (id=252): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xc808, 0xfffffffd}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 5.228529564s ago: executing program 2 (id=255): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r2 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r2, 0x1, 0x53, 0x0, 0x0) 5.037264417s ago: executing program 3 (id=256): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200600) 4.1993673s ago: executing program 2 (id=259): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', 0x0, 0x0, 0x0) 4.012810831s ago: executing program 3 (id=260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xd4b7, 0x4, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x912, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x17, 0x1, 0x107, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x2, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x4, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x4, 0x2000000c, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0xa, 0xac8, 0x800bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x7, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10010000, 0x3, 0x7e, 0xe3d, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='.wecuri4y.capabi'], &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 3.996162789s ago: executing program 4 (id=261): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/4096, 0x1000}, 0x2000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) 3.723678429s ago: executing program 2 (id=264): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, &(0x7f00000000c0)) 3.683534412s ago: executing program 3 (id=265): openat(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xc808, 0xfffffffd}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 3.397184951s ago: executing program 4 (id=266): prlimit64(0x0, 0xe, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 3.244167192s ago: executing program 2 (id=267): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r3, 0x5760, 0xc) 2.924900284s ago: executing program 0 (id=268): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x800082, 0x74f, 0x6f6, 0x8001, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7840, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 2.500252874s ago: executing program 3 (id=269): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240), 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r2 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r3, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r2, 0x1, 0x53, 0x0, 0x0) 2.407658973s ago: executing program 0 (id=271): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0x1c3902, 0x0) sendfile(r1, r1, 0x0, 0x200600) 2.177382649s ago: executing program 1 (id=272): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r1, &(0x7f0000000800)='file ?evio.c +', 0xe) 2.085654366s ago: executing program 3 (id=273): sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x4000004) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x7f7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) ioctl$UBLK_U_CMD_END_USER_RECOVERY(r1, 0xc0207511, &(0x7f0000000580)={0x0, 0xffff, 0x0, 0x0, 0xffffffffffffffff}) syz_open_procfs(r2, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000180)=0x200) write$dsp(r3, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) lseek(r0, 0x10001, 0x1) write(r1, &(0x7f0000000180)='100', 0x3) r4 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vxcan0\x00'}) write(r4, &(0x7f0000000200)='1', 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20020055}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r5, &(0x7f0000000280)='0', 0x1) socket$nl_route(0x10, 0x3, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000380)='\x00', 0x89901) syz_clone3(&(0x7f0000000180)={0x23800000, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x482, &(0x7f0000000600)) 2.06642756s ago: executing program 0 (id=274): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', 0x0, 0x0, 0x0) 990.955957ms ago: executing program 1 (id=275): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xd4b7, 0x4, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x912, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x17, 0x1, 0x107, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x2, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x4, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x4, 0x2000000c, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0xa, 0xac8, 0x800bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x7, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10010000, 0x3, 0x7e, 0xe3d, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='.wecuri4y.capabi'], &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 893.523969ms ago: executing program 1 (id=276): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/4096, 0x1000}, 0x2000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) 890.616318ms ago: executing program 0 (id=277): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r1 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc040564a, &(0x7f00000000c0)) 656.413031ms ago: executing program 0 (id=278): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', 0x0, &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) 547.999027ms ago: executing program 1 (id=279): openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) r0 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x103000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={r3}, 0x4) bind$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0xd, 0x0, 0x1, 0x1, 0x6, @broadcast}, 0x14) write(0xffffffffffffffff, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) setrlimit(0x0, &(0x7f0000000100)={0xc808, 0xfffffffd}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 451.048408ms ago: executing program 0 (id=280): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x40000) r3 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r4, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r3, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 423.309881ms ago: executing program 1 (id=281): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0xc, 0x100008b}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$video(0x0, 0xfffffffd, 0x10bd00) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f00000005c0), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x48}}, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000001c0), r1) r2 = syz_open_dev$ndb(&(0x7f0000000040), 0x0, 0x0) ioctl$NBD_CLEAR_SOCK(r2, 0x125f) r3 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r3, &(0x7f0000003140)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003180)=""/4096, 0x1000}, 0x2000) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[], [], 0x2f}) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/per_cpu/cpu0/trace\x00', 0x0, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5407000044000701fefffffffcdbdf25037c0000040045803c0701"], 0x754}}, 0xc000) 353.591173ms ago: executing program 4 (id=282): ioctl$TCSETSF2(0xffffffffffffffff, 0x402c542d, &(0x7f0000000040)={0x800082, 0x74f, 0x6f6, 0x8001, 0x40, "1ae34e0626788a22b2fb12dab240794233a5bd", 0x4, 0x2}) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x60081, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCSETS(r0, 0x404c4701, &(0x7f0000000040)={0x1, 0x0, 0x0, 0x400000, 0x14, "3eccd8000000000000000010000000040100"}) r1 = landlock_create_ruleset(&(0x7f00000002c0)={0x7840, 0xd, 0x3}, 0x30, 0x0) landlock_restrict_self(r1, 0xe) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 36.005066ms ago: executing program 4 (id=283): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a\x9e@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e*\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x50) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(0x0, 0x0, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_RELOAD_REGDB(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x501, 0x70bd2c, 0x25dfdbf8}, 0x14}, 0x1, 0x0, 0x0, 0x20008001}, 0x40) 35.11545ms ago: executing program 2 (id=284): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, 0x0, 0x0) 0s ago: executing program 1 (id=285): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) syz_emit_ethernet(0x3c, &(0x7f0000000080)={@link_local, @broadcast, @void, {@llc={0x4, {@snap={0xab, 0xff, "9b6f", '\x00\v\x00', 0xf3fb, "348a05a6f275aee9c5b00a586fdbd8f21346971c2a901cec8360741c5c09d7c01700000000"}}}}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00') preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000680)=""/122, 0x7a}, {&(0x7f0000000180)=""/54, 0x36}], 0x2, 0x3, 0x20) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r0, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000180)={{0x1, 0x0, 0x400}}) ioctl$VFAT_IOCTL_READDIR_BOTH(r0, 0x82307201, &(0x7f0000000700)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f00000000c0)={0x7, 0xffff, 0x0, 0x0, 0xe}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000012c0), 0xffffffffffffffff) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, 0x14) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) r4 = syz_open_dev$radio(&(0x7f0000000000), 0x1, 0x2) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000240)=0x14) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x1, 0x6, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000090000000000000004000000180000000080f654000000000000000057000000fcffffff95"], &(0x7f0000000780)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x61, '\x00', r5, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$VIDIOC_S_EXT_CTRLS(r4, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0xf0f05e, 0x1ff, '\x00', @p_u32=0x0}}) write$binfmt_script(r4, &(0x7f0000000880)={'#! ', './file1', [{0x20, '/dev/loop#\x00'}], 0xa, "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"}, 0x2a9) pwritev(r4, 0x0, 0x0, 0x8002, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00') pread64(r6, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000300) sendmsg$RDMA_NLDEV_CMD_RES_GET(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="60000000091400082abd7000fbdbdf250800010001000000080001000000000008000100010000000800010001000000080001000000000008000100010000000800010002000000080001000200000008000100020000000800010000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40085}, 0xc841) ioctl$AUTOFS_DEV_IOCTL_CATATONIC(0xffffffffffffffff, 0xc0189379, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, './file0\x00'}) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r7, 0x29, 0x37, &(0x7f0000000080)={0x0, 0x0, '\x00', [@pad1]}, 0x10) sendmsg$NL80211_CMD_SET_TID_CONFIG(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000740)={0x38, r3, 0x10ada85e65c25359, 0x0, 0x25dfdbfd, {{0x6b}, {@val={0x8}, @val={0xc, 0x99, {0x7, 0x69}}}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TX_RATE={0x8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x4}]}]}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x84a0}, 0x5ef768c147daa5b0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.175' (ED25519) to the list of known hosts. [ 79.863944][ T5602] cgroup: Unknown subsys name 'net' [ 79.974369][ T5602] cgroup: Unknown subsys name 'cpuset' [ 79.984732][ T5602] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.563690][ T5602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.990858][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.002703][ T5627] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.008681][ T5627] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.009491][ T5627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.012998][ T5627] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.015659][ T5627] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.017954][ T5627] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.018213][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.018302][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.027875][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.030866][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.033348][ T52] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.040952][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.040960][ T5616] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.042676][ T5616] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.043653][ T5616] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.052839][ T4932] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.053962][ T4932] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.119648][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.129995][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.167312][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.176984][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.185104][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.194218][ T4932] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.203049][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 86.038150][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.038858][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.039919][ T5612] bridge_slave_0: entered allmulticast mode [ 86.045823][ T5612] bridge_slave_0: entered promiscuous mode [ 86.107446][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.107863][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.108257][ T5612] bridge_slave_1: entered allmulticast mode [ 86.115738][ T5612] bridge_slave_1: entered promiscuous mode [ 86.141416][ T4932] Bluetooth: hci0: command tx timeout [ 86.146296][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.146584][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.146961][ T5614] bridge_slave_0: entered allmulticast mode [ 86.152602][ T5614] bridge_slave_0: entered promiscuous mode [ 86.155313][ T4932] Bluetooth: hci2: command tx timeout [ 86.155322][ T5618] Bluetooth: hci1: command tx timeout [ 86.220436][ T4932] Bluetooth: hci3: command tx timeout [ 86.226987][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.228388][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.228875][ T5614] bridge_slave_1: entered allmulticast mode [ 86.234257][ T4932] Bluetooth: hci4: command tx timeout [ 86.237561][ T5614] bridge_slave_1: entered promiscuous mode [ 86.324170][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.324573][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.324977][ T5615] bridge_slave_0: entered allmulticast mode [ 86.330028][ T5615] bridge_slave_0: entered promiscuous mode [ 86.346559][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.357718][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.408487][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.408913][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.413979][ T5615] bridge_slave_1: entered allmulticast mode [ 86.419518][ T5615] bridge_slave_1: entered promiscuous mode [ 86.469477][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.501449][ T5612] team0: Port device team_slave_0 added [ 86.502077][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.504081][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.505332][ T5620] bridge_slave_0: entered allmulticast mode [ 86.508921][ T5620] bridge_slave_0: entered promiscuous mode [ 86.528207][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.557732][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.567445][ T5612] team0: Port device team_slave_1 added [ 86.582469][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.582875][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.583235][ T5620] bridge_slave_1: entered allmulticast mode [ 86.588164][ T5620] bridge_slave_1: entered promiscuous mode [ 86.644677][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.684727][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.685021][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.685405][ T5613] bridge_slave_0: entered allmulticast mode [ 86.691470][ T5613] bridge_slave_0: entered promiscuous mode [ 86.721799][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.721868][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.722001][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.768927][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.773191][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.773654][ T5613] bridge_slave_1: entered allmulticast mode [ 86.778479][ T5613] bridge_slave_1: entered promiscuous mode [ 86.786680][ T5614] team0: Port device team_slave_0 added [ 86.811166][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.811208][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 86.812135][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.830932][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.870506][ T5615] team0: Port device team_slave_0 added [ 86.878716][ T5614] team0: Port device team_slave_1 added [ 86.898057][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.924176][ T5615] team0: Port device team_slave_1 added [ 87.000042][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.059639][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.059693][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.059719][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.081439][ T5620] team0: Port device team_slave_0 added [ 87.093362][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.094775][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.094817][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.094892][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.156774][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.156828][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.156903][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.169402][ T5620] team0: Port device team_slave_1 added [ 87.217301][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.217349][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.217394][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.266932][ T5612] hsr_slave_0: entered promiscuous mode [ 87.270064][ T5612] hsr_slave_1: entered promiscuous mode [ 87.352972][ T5613] team0: Port device team_slave_0 added [ 87.378043][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.378092][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.382757][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.396459][ T5613] team0: Port device team_slave_1 added [ 87.477281][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.477330][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.483175][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.506854][ T5614] hsr_slave_0: entered promiscuous mode [ 87.509907][ T5614] hsr_slave_1: entered promiscuous mode [ 87.513264][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 87.513531][ T5614] Cannot create hsr debugfs directory [ 87.604588][ T5615] hsr_slave_0: entered promiscuous mode [ 87.607463][ T5615] hsr_slave_1: entered promiscuous mode [ 87.609379][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 87.609431][ T5615] Cannot create hsr debugfs directory [ 87.627965][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.628024][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.628050][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.692560][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.692608][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.692635][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.800034][ T5620] hsr_slave_0: entered promiscuous mode [ 87.806790][ T5620] hsr_slave_1: entered promiscuous mode [ 87.808741][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 87.808803][ T5620] Cannot create hsr debugfs directory [ 87.958097][ T5613] hsr_slave_0: entered promiscuous mode [ 87.961890][ T5613] hsr_slave_1: entered promiscuous mode [ 87.963852][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 87.963871][ T5613] Cannot create hsr debugfs directory [ 88.222691][ T5618] Bluetooth: hci2: command tx timeout [ 88.222764][ T5618] Bluetooth: hci0: command tx timeout [ 88.223142][ T4932] Bluetooth: hci1: command tx timeout [ 88.300424][ T5616] Bluetooth: hci3: command tx timeout [ 88.300807][ T4932] Bluetooth: hci4: command tx timeout [ 88.413813][ T5612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.426280][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.428818][ T5612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.443975][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.462302][ T5612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.472620][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.476549][ T5612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.491435][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.586129][ T5614] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.596505][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.605838][ T5614] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.617266][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.626035][ T5614] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.638227][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.642153][ T5614] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.655377][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.756430][ T5620] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.767185][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.782031][ T5620] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.793695][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 88.796255][ T5620] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.809925][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 88.830458][ T5620] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.838912][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 88.937726][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.957235][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.968444][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 88.982613][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.994191][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.015804][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.027631][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.054382][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.065540][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.110637][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.156024][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.166969][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 89.177755][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.188683][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.189051][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.209839][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.219710][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 89.236845][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.248367][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 89.264268][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.264428][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.284881][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.296052][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 89.322545][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.374801][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.374918][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.401744][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.401871][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.493337][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.562714][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.612446][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.652444][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.652705][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.703548][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.721962][ T27] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.722087][ T27] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.765730][ T27] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.766125][ T27] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.837894][ T142] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.839916][ T142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.977042][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.099349][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.153118][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.153356][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.228508][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.228756][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.303058][ T5616] Bluetooth: hci0: command tx timeout [ 90.303125][ T5616] Bluetooth: hci2: command tx timeout [ 90.308745][ T4932] Bluetooth: hci1: command tx timeout [ 90.382432][ T5618] Bluetooth: hci3: command tx timeout [ 90.388029][ T4932] Bluetooth: hci4: command tx timeout [ 90.704624][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.836282][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.988229][ T5612] veth0_vlan: entered promiscuous mode [ 91.055497][ T5614] veth0_vlan: entered promiscuous mode [ 91.089567][ T5612] veth1_vlan: entered promiscuous mode [ 91.146925][ T5614] veth1_vlan: entered promiscuous mode [ 91.344954][ T5612] veth0_macvtap: entered promiscuous mode [ 91.385945][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.399164][ T5614] veth0_macvtap: entered promiscuous mode [ 91.415858][ T5612] veth1_macvtap: entered promiscuous mode [ 91.435100][ T5614] veth1_macvtap: entered promiscuous mode [ 91.505199][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.536322][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.551793][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.567102][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.580004][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.613779][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.691489][ T59] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.903911][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.913061][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.913115][ T142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927056][ T142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927186][ T142] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927295][ T142] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927401][ T142] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927507][ T142] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.927606][ T142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.967916][ T5615] veth0_vlan: entered promiscuous mode [ 92.007554][ T990] cfg80211: failed to load regulatory.db [ 92.022456][ T5613] veth0_vlan: entered promiscuous mode [ 92.068472][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.068519][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.078064][ T5613] veth1_vlan: entered promiscuous mode [ 92.094153][ T5615] veth1_vlan: entered promiscuous mode [ 92.183383][ T5620] veth0_vlan: entered promiscuous mode [ 92.197738][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.197783][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.237156][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.237217][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.259611][ T5613] veth0_macvtap: entered promiscuous mode [ 92.286271][ T5613] veth1_macvtap: entered promiscuous mode [ 92.311651][ T5620] veth1_vlan: entered promiscuous mode [ 92.333251][ T5614] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.371589][ T5615] veth0_macvtap: entered promiscuous mode [ 92.391138][ T5618] Bluetooth: hci2: command tx timeout [ 92.391192][ T5618] Bluetooth: hci0: command tx timeout [ 92.396740][ T4932] Bluetooth: hci1: command tx timeout [ 92.425860][ T5615] veth1_macvtap: entered promiscuous mode [ 92.449662][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.466298][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.474584][ T5616] Bluetooth: hci3: command tx timeout [ 92.474637][ T4932] Bluetooth: hci4: command tx timeout [ 92.618584][ T5620] veth0_macvtap: entered promiscuous mode [ 92.629007][ T5812] warning: `syz.2.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.643939][ T5813] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 92.673440][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.687736][ T5620] veth1_macvtap: entered promiscuous mode [ 92.775995][ T1169] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776463][ T1169] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776608][ T1169] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.776711][ T1169] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.013842][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.550488][ T27] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.550741][ T27] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.550947][ T27] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.551093][ T27] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.855300][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.927477][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.939528][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.952414][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.060663][ T5773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062065][ T5773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062112][ T5773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.062143][ T5773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.270026][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.270071][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.376138][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.376211][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.735510][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.736337][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.833751][ T27] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.833801][ T27] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.721397][ T142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.721438][ T142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.035845][ T5809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 96.043064][ T32] audit: type=1800 audit(1786391360.929:2): pid=5843 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.4" name="enable" dev="configfs" ino=8675 res=0 errno=0 [ 96.421071][ T5809] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 96.548644][ T5809] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 96.574208][ T5809] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 96.659598][ T5809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.659717][ T5809] usb 1-1: Product: syz [ 96.659832][ T5809] usb 1-1: Manufacturer: syz [ 96.659889][ T5809] usb 1-1: SerialNumber: syz [ 96.849377][ T5809] usb-storage 1-1:1.0: USB Mass Storage device detected [ 96.861451][ T990] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 96.935684][ T5809] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 96.955291][ T5809] scsi host1: usb-storage 1-1:1.0 [ 97.037974][ T990] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 97.040564][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 97.040646][ T990] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 97.061899][ T990] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.061929][ T990] usb 2-1: Product: syz [ 97.061944][ T990] usb 2-1: Manufacturer: syz [ 97.061958][ T990] usb 2-1: SerialNumber: syz [ 97.170144][ T990] usb 2-1: config 0 descriptor?? [ 97.209664][ T990] hub 2-1:0.0: bad descriptor, ignoring hub [ 97.209801][ T990] hub 2-1:0.0: probe with driver hub failed with error -5 [ 97.231376][ T5855] Zero length message leads to an empty skb [ 97.302512][ T990] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 97.477015][ T5859] file system registered [ 97.770614][ T5809] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.920762][ T5809] usb 4-1: Using ep0 maxpacket: 16 [ 97.959427][ T5809] usb 4-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 97.989193][ T5809] usb 4-1: config 0 interface 0 altsetting 239 endpoint 0x81 has an invalid bInterval 184, changing to 11 [ 98.002867][ T5809] usb 4-1: config 0 interface 0 altsetting 239 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 98.017853][ T5809] usb 4-1: config 0 interface 0 has no altsetting 0 [ 98.026411][ T5809] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.176209][ T990] usb 1-1: USB disconnect, device number 2 [ 98.631986][ T5809] usb 4-1: config 0 descriptor?? [ 98.952102][ T189] usb 2-1: USB disconnect, device number 2 [ 98.964411][ T32] audit: type=1800 audit(1786391364.039:3): pid=5871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.15" name="enable" dev="configfs" ino=8760 res=0 errno=0 [ 99.016056][ T5877] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 99.345279][ T32] audit: type=1804 audit(1786391364.419:4): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.18" name="/newroot/2/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8765 res=1 errno=0 [ 99.353024][ T32] audit: type=1800 audit(1786391364.419:5): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.18" name="iface_name" dev="configfs" ino=8765 res=0 errno=0 [ 99.677744][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.4.20'. [ 100.681042][ T5892] syz.0.21 (5892) used greatest stack depth: 17424 bytes left [ 100.875649][ T5809] usbhid 4-1:0.0: can't add hid device: -71 [ 100.875800][ T5809] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 100.906592][ T5809] usb 4-1: USB disconnect, device number 2 [ 102.514331][ T5919] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 103.177395][ T5920] fuse: Unknown parameter 'use00000000000000000000' [ 103.587824][ T5934] netlink: 24 bytes leftover after parsing attributes in process `syz.3.34'. [ 103.598345][ T32] audit: type=1804 audit(1786391368.659:6): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.33" name="/newroot/7/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9286 res=1 errno=0 [ 103.633138][ T32] audit: type=1800 audit(1786391368.699:7): pid=5932 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.33" name="iface_name" dev="configfs" ino=9286 res=0 errno=0 [ 107.117165][ T5960] fuse: Unknown parameter 'user_i00000000000000000000' [ 107.469255][ T5961] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 108.329606][ T5980] netlink: 24 bytes leftover after parsing attributes in process `syz.1.46'. [ 108.340716][ T32] audit: type=1804 audit(1786391373.399:8): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.47" name="/newroot/10/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8924 res=1 errno=0 [ 108.352302][ T32] audit: type=1800 audit(1786391373.419:9): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.47" name="iface_name" dev="configfs" ino=8924 res=0 errno=0 [ 108.366378][ T31] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 108.550587][ T31] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 108.562795][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 108.562846][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 108.600897][ T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.600948][ T31] usb 5-1: Product: syz [ 108.600987][ T31] usb 5-1: Manufacturer: syz [ 108.601007][ T31] usb 5-1: SerialNumber: syz [ 108.640361][ T31] usb 5-1: config 0 descriptor?? [ 108.651709][ T31] hub 5-1:0.0: bad descriptor, ignoring hub [ 108.651766][ T31] hub 5-1:0.0: probe with driver hub failed with error -5 [ 108.679692][ T31] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 110.498647][ T6010] fuse: Unknown parameter 'user_i00000000000000000000' [ 111.801990][ T5722] usb 5-1: USB disconnect, device number 2 [ 112.248836][ T6023] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 112.297586][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.4.61'. [ 112.353880][ T32] audit: type=1804 audit(1786391377.429:10): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.60" name="/newroot/12/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8991 res=1 errno=0 [ 112.383737][ T32] audit: type=1800 audit(1786391377.429:11): pid=6027 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.60" name="iface_name" dev="configfs" ino=8991 res=0 errno=0 [ 112.825980][ T6040] fuse: Unknown parameter 'user_i00000000000000000000' [ 113.641578][ T6061] netlink: 24 bytes leftover after parsing attributes in process `syz.0.73'. [ 114.549019][ T6069] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 114.991823][ T10] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 115.064441][ T32] audit: type=1804 audit(1786391380.139:12): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.78" name="/newroot/11/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9500 res=1 errno=0 [ 115.079410][ T32] audit: type=1800 audit(1786391380.139:13): pid=6086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.78" name="iface_name" dev="configfs" ino=9500 res=0 errno=0 [ 115.197235][ T10] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 115.214580][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 115.225867][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 115.259375][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.259425][ T10] usb 2-1: Product: syz [ 115.259461][ T10] usb 2-1: Manufacturer: syz [ 115.259482][ T10] usb 2-1: SerialNumber: syz [ 115.324392][ T6088] fuse: Unknown parameter 'user_id00000000000000000000' [ 115.348318][ T10] usb 2-1: config 0 descriptor?? [ 115.364953][ T10] hub 2-1:0.0: bad descriptor, ignoring hub [ 115.371214][ T10] hub 2-1:0.0: probe with driver hub failed with error -5 [ 115.386620][ T10] input: syz syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input7 [ 116.909195][ T6111] netlink: 24 bytes leftover after parsing attributes in process `syz.0.84'. [ 117.766083][ T6125] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 117.906172][ T6131] fuse: Unknown parameter 'user_id00000000000000000000' [ 117.920613][ T990] usb 2-1: USB disconnect, device number 3 [ 118.105105][ T32] audit: type=1804 audit(1786391383.179:14): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.92" name="/newroot/17/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9210 res=1 errno=0 [ 118.133897][ T32] audit: type=1800 audit(1786391383.179:15): pid=6135 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.92" name="iface_name" dev="configfs" ino=9210 res=0 errno=0 [ 118.487724][ T6146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.96'. [ 120.323253][ T6176] fuse: Unknown parameter 'user_id00000000000000000000' [ 120.726945][ T6179] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 121.103239][ T990] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 121.284361][ T990] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 121.300705][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 121.300742][ T990] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 121.354998][ T990] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.355071][ T990] usb 1-1: Product: syz [ 121.355106][ T990] usb 1-1: Manufacturer: syz [ 121.355162][ T990] usb 1-1: SerialNumber: syz [ 121.404662][ T990] usb 1-1: config 0 descriptor?? [ 121.417330][ T990] hub 1-1:0.0: bad descriptor, ignoring hub [ 121.417388][ T990] hub 1-1:0.0: probe with driver hub failed with error -5 [ 121.473376][ T32] audit: type=1804 audit(1786391386.549:16): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.107" name="/newroot/17/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10326 res=1 errno=0 [ 121.500450][ T32] audit: type=1800 audit(1786391386.549:17): pid=6193 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.107" name="iface_name" dev="configfs" ino=10326 res=0 errno=0 [ 121.527844][ T990] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input8 [ 121.586261][ T6195] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 122.070392][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.579410][ T6220] fuse: Bad value for 'fd' [ 123.631791][ T32] audit: type=1804 audit(1786391388.709:18): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.118" name="/newroot/21/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10421 res=1 errno=0 [ 123.631868][ T32] audit: type=1800 audit(1786391388.709:19): pid=6229 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.118" name="iface_name" dev="configfs" ino=10421 res=0 errno=0 [ 123.912064][ T990] usb 1-1: USB disconnect, device number 3 [ 124.030407][ T6228] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 124.390340][ T6243] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 125.499304][ T6257] fuse: Bad value for 'fd' [ 125.856648][ T32] audit: type=1804 audit(1786391390.929:20): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.130" name="/newroot/26/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10487 res=1 errno=0 [ 125.882512][ T32] audit: type=1800 audit(1786391390.929:21): pid=6269 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.130" name="iface_name" dev="configfs" ino=10487 res=0 errno=0 [ 126.710605][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 129.948618][ T6286] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 130.115345][ T6302] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 130.439001][ T6308] fuse: Bad value for 'fd' [ 130.629734][ T32] audit: type=1804 audit(1786391395.699:22): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.142" name="/newroot/31/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9818 res=1 errno=0 [ 130.660427][ T32] audit: type=1800 audit(1786391395.739:23): pid=6314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.142" name="iface_name" dev="configfs" ino=9818 res=0 errno=0 [ 132.504000][ T6345] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 132.769567][ T6351] fuse: Unknown parameter '0x0000000000000003' [ 132.914203][ T6349] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 132.946281][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.946456][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.131147][ T32] audit: type=1804 audit(1786391398.209:24): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.157" name="/newroot/29/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9921 res=1 errno=0 [ 133.159258][ T32] audit: type=1800 audit(1786391398.229:25): pid=6363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.157" name="iface_name" dev="configfs" ino=9921 res=0 errno=0 [ 134.878087][ T6386] fuse: Unknown parameter '0x0000000000000003' [ 137.247151][ T6400] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 137.594137][ T6401] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 137.652249][ T32] audit: type=1804 audit(1786391402.729:26): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.169" name="/newroot/40/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10030 res=1 errno=0 [ 137.654323][ T32] audit: type=1800 audit(1786391402.729:27): pid=6406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.169" name="iface_name" dev="configfs" ino=10030 res=0 errno=0 [ 138.028806][ T6420] fuse: Unknown parameter '0x0000000000000003' [ 139.395484][ T6437] No source specified [ 139.655227][ T32] audit: type=1804 audit(1786391404.729:28): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.183" name="/newroot/31/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10776 res=1 errno=0 [ 139.685992][ T32] audit: type=1800 audit(1786391404.759:29): pid=6449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.183" name="iface_name" dev="configfs" ino=10776 res=0 errno=0 [ 140.962358][ T6464] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 141.147057][ T6471] fuse: Unknown parameter '0x0000000000000003' [ 142.257620][ T32] audit: type=1804 audit(1786391407.329:30): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.194" name="/newroot/35/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10825 res=1 errno=0 [ 142.285469][ T32] audit: type=1800 audit(1786391407.359:31): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.194" name="iface_name" dev="configfs" ino=10825 res=0 errno=0 [ 142.386436][ T6488] No source specified [ 142.401341][ T32] audit: type=1800 audit(1786391407.479:32): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.196" name="enable" dev="configfs" ino=10856 res=0 errno=0 [ 142.612777][ T6494] netlink: 24 bytes leftover after parsing attributes in process `syz.2.195'. [ 145.793557][ T6526] fuse: Unknown parameter '0x0000000000000003' [ 146.870044][ T32] audit: type=1804 audit(1786391411.939:33): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.207" name="/newroot/37/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10911 res=1 errno=0 [ 146.870124][ T32] audit: type=1800 audit(1786391411.939:34): pid=6533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.207" name="iface_name" dev="configfs" ino=10911 res=0 errno=0 [ 146.992320][ T32] audit: type=1800 audit(1786391412.069:35): pid=6543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.209" name="enable" dev="configfs" ino=10937 res=0 errno=0 [ 147.114003][ T6541] netlink: 24 bytes leftover after parsing attributes in process `syz.0.211'. [ 149.132566][ T6571] fuse: Unknown parameter '0x0000000000000003' [ 149.210427][ T6570] netlink: zone id is out of range [ 149.210614][ T6570] netlink: zone id is out of range [ 149.410703][ T32] audit: type=1804 audit(1786391414.479:36): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.222" name="/newroot/43/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=11380 res=1 errno=0 [ 149.410785][ T32] audit: type=1800 audit(1786391414.489:37): pid=6580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.222" name="iface_name" dev="configfs" ino=11380 res=0 errno=0 [ 150.716940][ T32] audit: type=1800 audit(1786391415.789:38): pid=6590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.224" name="enable" dev="configfs" ino=11406 res=0 errno=0 [ 151.923407][ T6611] netlink: 24 bytes leftover after parsing attributes in process `syz.3.227'. [ 153.198813][ T6625] Config c/1 of g1 needs at least one function. [ 153.214456][ T6625] udc dummy_udc.0: failed to start g1: -22 [ 153.221841][ T6625] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 153.283275][ T6625] UDC core: g1: couldn't find an available UDC or it's busy [ 153.287327][ T6634] netlink: zone id is out of range [ 153.287850][ T6634] netlink: zone id is out of range [ 153.643123][ T32] audit: type=1804 audit(1786391418.709:39): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.234" name="/newroot/44/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=11509 res=1 errno=0 [ 153.643197][ T32] audit: type=1800 audit(1786391418.709:40): pid=6639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.234" name="iface_name" dev="configfs" ino=11509 res=0 errno=0 [ 153.963866][ T32] audit: type=1800 audit(1786391419.039:41): pid=6645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.237" name="enable" dev="configfs" ino=11537 res=0 errno=0 [ 154.054220][ T32] audit: type=1800 audit(1786391419.129:42): pid=6648 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.238" name="enable" dev="configfs" ino=11129 res=0 errno=0 [ 154.237325][ T6653] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 155.254720][ T6667] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 155.389254][ T6667] socket: no more sockets [ 155.579628][ T5613] ffs_data_put(): freeing [ 155.671369][ T32] audit: type=1804 audit(1786391420.749:43): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.250" name="/newroot/50/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=11617 res=1 errno=0 [ 155.705843][ T32] audit: type=1800 audit(1786391420.779:44): pid=6679 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.250" name="iface_name" dev="configfs" ino=11617 res=0 errno=0 [ 155.785938][ T6680] netlink: zone id is out of range [ 155.795350][ T6680] netlink: zone id is out of range [ 157.076061][ T32] audit: type=1800 audit(1786391422.149:45): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.254" name="enable" dev="configfs" ino=11206 res=0 errno=0 [ 157.211922][ T32] audit: type=1800 audit(1786391422.279:46): pid=6695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.255" name="enable" dev="configfs" ino=11229 res=0 errno=0 [ 158.510068][ T5615] ffs_data_put(): freeing [ 158.975791][ T6725] netlink: zone id is out of range [ 158.975933][ T6725] netlink: zone id is out of range [ 159.880792][ T32] audit: type=1800 audit(1786391424.959:47): pid=6737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.269" name="enable" dev="configfs" ino=11744 res=0 errno=0 [ 161.285180][ T6749] socket: no more sockets [ 161.309746][ T5613] ffs_data_put(): freeing [ 161.467064][ T6761] netlink: zone id is out of range [ 161.921021][ T6771] netlink: zone id is out of range [ 161.959945][ T6771] netlink: zone id is out of range [ 162.462856][ C0] [ 162.465268][ C0] ================================ [ 162.470404][ C0] WARNING: inconsistent lock state [ 162.475559][ C0] syzkaller #0 Not tainted [ 162.480003][ C0] -------------------------------- [ 162.485146][ C0] inconsistent {SOFTIRQ-ON-W} -> {IN-SOFTIRQ-W} usage. [ 162.492019][ C0] kworker/u8:4/59 [HC0[0]:SC1[1]:HE1:SE0] takes: [ 162.498381][ C0] ffff888078246260 (sk_lock-AF_X25){+.?.}-{0:0}, at: x25_kill_by_neigh+0x10d/0x250 [ 162.507788][ C0] {SOFTIRQ-ON-W} state was registered at: [ 162.513530][ C0] lock_acquire+0x115/0x350 [ 162.518168][ C0] lock_sock_nested+0x41/0x100 [ 162.523077][ C0] x25_bind+0x209/0x450 [ 162.527366][ C0] __sys_bind+0x2e3/0x410 [ 162.531839][ C0] __x64_sys_bind+0x7a/0x90 [ 162.536474][ C0] do_syscall_64+0x166/0x510 [ 162.541199][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.547212][ C0] irq event stamp: 286122 [ 162.551561][ C0] hardirqs last enabled at (286122): [] __local_bh_enable_ip+0xd0/0x130 [ 162.561588][ C0] hardirqs last disabled at (286121): [] __local_bh_enable_ip+0x71/0x130 [ 162.571701][ C0] softirqs last enabled at (285850): [] update_defense_level+0x10b/0xcb0 [ 162.581813][ C0] softirqs last disabled at (285851): [] do_softirq+0x76/0xd0 [ 162.590884][ C0] [ 162.590884][ C0] other info that might help us debug this: [ 162.598967][ C0] Possible unsafe locking scenario: [ 162.598967][ C0] [ 162.606467][ C0] CPU0 [ 162.609775][ C0] ---- [ 162.613077][ C0] lock(sk_lock-AF_X25); [ 162.617444][ C0] [ 162.620927][ C0] lock(sk_lock-AF_X25); [ 162.625464][ C0] [ 162.625464][ C0] *** DEADLOCK *** [ 162.625464][ C0] [ 162.633626][ C0] locks held by kworker/u8:4/59: 3, last CPU#0: [ 162.639897][ C0] #0: ffff88801b06b940 ((wq_completion)events_dfl_long){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 162.651704][ C0] #1: ffffc9000201fc40 ((work_completion)(&(&ipvs->defense_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97e/0x1630 [ 162.664979][ C0] #2: ffffffff8eb5c6a0 (rcu_read_lock){....}-{1:3}, at: netif_receive_skb_core+0x33/0x2b0 [ 162.675065][ C0] [ 162.675065][ C0] stack backtrace: [ 162.681001][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 162.690324][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.700411][ C0] Workqueue: events_dfl_long defense_work_handler [ 162.706901][ C0] Call Trace: [ 162.710212][ C0] [ 162.713094][ C0] dump_stack_lvl+0xe8/0x150 [ 162.717736][ C0] print_usage_bug+0x28b/0x2e0 [ 162.722577][ C0] valid_state+0xbe/0xf0 [ 162.726861][ C0] mark_lock_irq+0x36/0x380 [ 162.731449][ C0] mark_lock+0x117/0x190 [ 162.735732][ C0] __lock_acquire+0x6b7/0x2e50 [ 162.740547][ C0] ? kasan_quarantine_put+0xbb/0x1f0 [ 162.745875][ C0] ? do_raw_spin_lock+0x12b/0x2f0 [ 162.750937][ C0] ? lock_acquire+0x115/0x350 [ 162.755667][ C0] lock_acquire+0x115/0x350 [ 162.760252][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 162.765444][ C0] ? x25_kill_by_neigh+0x103/0x250 [ 162.770609][ C0] lock_sock_nested+0x41/0x100 [ 162.775410][ C0] ? x25_kill_by_neigh+0x10d/0x250 [ 162.780571][ C0] x25_kill_by_neigh+0x10d/0x250 [ 162.785557][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 162.790970][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 162.796504][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 162.802265][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 162.808208][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 162.813627][ C0] lapbeth_napi_poll+0x42/0x90 [ 162.818485][ C0] __napi_poll+0xaa/0x330 [ 162.822859][ C0] net_rx_action+0x61d/0xf50 [ 162.827504][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 162.832656][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 162.837899][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 162.843270][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 162.848256][ C0] handle_softirqs+0x225/0x840 [ 162.853060][ C0] ? do_softirq+0x76/0xd0 [ 162.857432][ C0] ? update_defense_level+0x10b/0xcb0 [ 162.862840][ C0] do_softirq+0x76/0xd0 [ 162.867129][ C0] [ 162.870090][ C0] [ 162.873057][ C0] __local_bh_enable_ip+0xf8/0x130 [ 162.878224][ C0] update_defense_level+0x867/0xcb0 [ 162.883460][ C0] ? update_defense_level+0x10b/0xcb0 [ 162.888874][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 162.894657][ C0] ? lock_acquire+0x115/0x350 [ 162.899385][ C0] ? process_scheduled_works+0x97e/0x1630 [ 162.905181][ C0] defense_work_handler+0x2d/0xd0 [ 162.910246][ C0] process_scheduled_works+0xc4e/0x1630 [ 162.915850][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.921881][ C0] ? assign_work+0x3cf/0x5d0 [ 162.926515][ C0] worker_thread+0xa47/0xfb0 [ 162.931159][ C0] ? __kthread_parkme+0x71/0x1f0 [ 162.936155][ C0] kthread+0x388/0x470 [ 162.940271][ C0] ? __pfx_worker_thread+0x10/0x10 [ 162.945420][ C0] ? __pfx_kthread+0x10/0x10 [ 162.950055][ C0] ret_from_fork+0x514/0xb70 [ 162.954693][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 162.959846][ C0] ? __switch_to+0xc89/0x1420 [ 162.964562][ C0] ? __pfx_kthread+0x10/0x10 [ 162.969205][ C0] ret_from_fork_asm+0x1a/0x30 [ 162.974028][ C0] [ 162.977308][ C0] BUG: sleeping function called from invalid context at net/core/sock.c:3829 [ 162.977329][ C0] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 59, name: kworker/u8:4 [ 162.977351][ C0] preempt_count: 101, expected: 0 [ 162.977366][ C0] RCU nest depth: 1, expected: 0 [ 162.977380][ C0] INFO: lockdep is turned off. [ 162.977390][ C0] Preemption disabled at: [ 162.977398][ C0] [] update_defense_level+0x11a/0xcb0 [ 162.977437][ C0] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted syzkaller #0 PREEMPT(full) [ 162.977463][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 162.977478][ C0] Workqueue: events_dfl_long defense_work_handler [ 162.977502][ C0] Call Trace: [ 162.977511][ C0] [ 162.977519][ C0] dump_stack_lvl+0xe8/0x150 [ 162.977551][ C0] __might_resched+0x378/0x4d0 [ 162.977584][ C0] ? update_defense_level+0x11a/0xcb0 [ 162.977607][ C0] lock_sock_nested+0x56/0x100 [ 162.977635][ C0] x25_kill_by_neigh+0x10d/0x250 [ 162.977671][ C0] x25_lapb_receive_frame+0x1b0/0xfb0 [ 162.977696][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 162.977722][ C0] ? netif_receive_skb_core+0x33/0x2b0 [ 162.977746][ C0] ? __pfx_x25_lapb_receive_frame+0x10/0x10 [ 162.977770][ C0] netif_receive_skb_core+0x2a6/0x2b0 [ 162.977798][ C0] lapbeth_napi_poll+0x42/0x90 [ 162.977823][ C0] __napi_poll+0xaa/0x330 [ 162.977855][ C0] net_rx_action+0x61d/0xf50 [ 162.977890][ C0] ? __pfx_net_rx_action+0x10/0x10 [ 162.977918][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 162.977952][ C0] ? __pfx_sched_clock_cpu+0x10/0x10 [ 162.977985][ C0] ? try_to_wake_up+0x8c5/0x14d0 [ 162.978014][ C0] handle_softirqs+0x225/0x840 [ 162.978044][ C0] ? do_softirq+0x76/0xd0 [ 162.978071][ C0] ? update_defense_level+0x10b/0xcb0 [ 162.978092][ C0] do_softirq+0x76/0xd0 [ 162.978117][ C0] [ 162.978124][ C0] [ 162.978132][ C0] __local_bh_enable_ip+0xf8/0x130 [ 162.978170][ C0] update_defense_level+0x867/0xcb0 [ 162.978191][ C0] ? update_defense_level+0x10b/0xcb0 [ 162.978212][ C0] ? __pfx_update_defense_level+0x10/0x10 [ 162.978238][ C0] ? lock_acquire+0x115/0x350 [ 162.978275][ C0] ? process_scheduled_works+0x97e/0x1630 [ 162.978302][ C0] defense_work_handler+0x2d/0xd0 [ 162.978324][ C0] process_scheduled_works+0xc4e/0x1630 [ 162.978380][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 162.978410][ C0] ? assign_work+0x3cf/0x5d0 [ 162.978437][ C0] worker_thread+0xa47/0xfb0 [ 162.978472][ C0] ? __kthread_parkme+0x71/0x1f0 [ 162.978507][ C0] kthread+0x388/0x470 [ 162.978540][ C0] ? __pfx_worker_thread+0x10/0x10 [ 162.978566][ C0] ? __pfx_kthread+0x10/0x10 [ 162.978599][ C0] ret_from_fork+0x514/0xb70 [ 162.978634][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 162.978667][ C0] ? __switch_to+0xc89/0x1420 [ 162.978697][ C0] ? __pfx_kthread+0x10/0x10 [ 162.978730][ C0] ret_from_fork_asm+0x1a/0x30 [ 162.978770][ C0] [ 163.182863][ T32] audit: type=1800 audit(1786391428.119:48): pid=6783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.284" name="enable" dev="configfs" ino=12398 res=0 errno=0 [ 163.391248][ T189] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 163.560278][ T189] usb 2-1: Using ep0 maxpacket: 16 [ 163.566147][ T189] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 163.569146][ T189] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 163.575589][ T189] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.575614][ T189] usb 2-1: Product: syz [ 163.575629][ T189] usb 2-1: Manufacturer: syz [ 163.575644][ T189] usb 2-1: SerialNumber: syz [ 163.591568][ T189] usb 2-1: config 0 descriptor?? [ 163.604098][ T189] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 163.611916][ T189] usb 2-1: Detected FT232R [ 163.805312][ T189] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 163.807108][ T189] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 163.809201][ T189] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 163.822925][ T189] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 163.837604][ T189] usb 2-1: USB disconnect, device number 4 [ 163.844519][ T189] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 163.846998][ T189] ftdi_sio 2-1:0.0: device disconnected