last executing test programs: 10.402350573s ago: executing program 2 (id=201): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) chdir(&(0x7f0000000100)='./bus\x00') open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x0, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 9.858249853s ago: executing program 2 (id=203): socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) 9.766272356s ago: executing program 3 (id=204): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xd4b7, 0x4, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x912, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x17, 0x1, 0x107, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x2, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x4, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x4, 0x2000000c, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0xa, 0xac8, 0x800bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x7, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10010000, 0x3, 0x7e, 0xe3d, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='.wecuri4y.capabi'], &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 8.966385073s ago: executing program 2 (id=208): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0xc) 8.477386507s ago: executing program 3 (id=209): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 4.926732802s ago: executing program 3 (id=219): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) socket$inet_udp(0x2, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./ffs\x00', 0x1ff) creat(0x0, 0x48) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_capability(0x0, &(0x7f00000000c0), &(0x7f0000000240)=@v3={0x3000300, [{0xffff4a0c, 0x7}], 0xee01}, 0x18, 0x0) pipe2(&(0x7f0000000200)={0x0, 0x0}, 0x0) write(r1, &(0x7f00000001c0)='functionfs', 0xa) read(r0, &(0x7f0000000100), 0xb) r2 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x28182, 0x0) ioctl$AUTOFS_IOC_FAIL(r2, 0x4c80, 0xffffffffffffffb6) mount(&(0x7f0000000240)=@filename='usb0\x00', &(0x7f0000000280)='./ffs\x00', &(0x7f0000000100), 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x74}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0xf, 0x8, 0x7c, 0xd4b7, 0x4, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x3, 0x5, 0x912, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x0, 0xffffffff, 0xe665, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x4, 0x80008071, 0xa, 0x17, 0x1, 0x107, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x7, 0x9, 0x7, 0x4, 0x0, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x4, 0x101, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x2, 0xea4, 0x4, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0x102, 0x3d, 0x1000005, 0x5bea93c3, 0xd, 0x4e4, 0x2, 0x200004, 0x1b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x10009, 0x3, 0x3, 0x9, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c93690, 0x80, 0x3], [0x7, 0xc08, 0x4, 0x5, 0xfffffffd, 0x40, 0x31d, 0x9, 0x5, 0x7fff, 0x9, 0x10001, 0xb, 0x4, 0x5, 0x5, 0x42080, 0x1ef, 0x0, 0x8, 0x4, 0x3, 0x1, 0x3e7, 0xb, 0x5, 0x0, 0x2, 0x4, 0x2000000c, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfb1, 0x1000, 0xa2, 0x7, 0x2000ad, 0x5, 0xa, 0xac8, 0x800bf, 0x1, 0x3, 0x7ff, 0x12b, 0x6, 0x1, 0xa, 0x7, 0x2, 0x1c, 0x8864, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0xbb33, 0x7, 0x8, 0x5, 0x0, 0x6, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x7, 0x3, 0x0, 0x10000, 0x4, 0x33f3, 0xffff, 0xa622, 0x1, 0x80000005, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x9, 0xffffffff, 0x80000000, 0x5, 0x4, 0x4c8, 0x1, 0xfffff000, 0x10010000, 0x3, 0x7e, 0xe3d, 0xfc, 0x47, 0xb2, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0x8a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x2, 0x8, 0x5, 0xb1e, 0x6, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) lgetxattr(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='.wecuri4y.capabi'], &(0x7f0000000340)=""/170, 0xaa) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000), 0x0) 4.920621237s ago: executing program 4 (id=220): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48050) readv(r0, &(0x7f0000000040), 0x2000000000000213) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {0xee00}, 0x4, 0x9}) write(r2, &(0x7f00000001c0)='my_midi_i', 0x9) 4.649723778s ago: executing program 2 (id=222): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 4.609346456s ago: executing program 4 (id=223): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe, 0xc}, 0x68) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050) 4.520714834s ago: executing program 3 (id=224): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x0, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 4.452387755s ago: executing program 2 (id=225): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x121302, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 4.32427854s ago: executing program 4 (id=226): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./debugfs\x00', &(0x7f0000000600)='debugfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debugfs/dynamic_debug/control\x00', 0x1, 0x10) write(r1, &(0x7f0000000800)='file ?evio.c +', 0xe) 4.288124518s ago: executing program 1 (id=227): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r2, 0x4, 0x800) ioctl(r2, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c49") ioctl(r2, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100") ioctl(r2, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg(r3, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="66bfdcf8156709246ddd266fa0f213eb5a3351", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r2, &(0x7f0000000080), 0x12) connect$x25(r2, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r5 = openat$cgroup_procs(r4, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000000240), 0x12) pread64(0xffffffffffffffff, &(0x7f0000000340)=""/69, 0x45, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000440)={0xf4243, 0x2, @qpsk={0x7, 0x13}}) 4.132535609s ago: executing program 3 (id=228): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x40000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r3, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 3.925137682s ago: executing program 4 (id=229): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) pread64(0xffffffffffffffff, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) 3.583794587s ago: executing program 1 (id=231): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, 0x0, 0x0) mmap(&(0x7f0000582000/0x3000)=nil, 0x3000, 0xb635773f07ebbeef, 0x100010, 0xffffffffffffffff, 0xfffff000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/comedi4\x00', 0x40780, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, 0x0) keyctl$search(0xa, 0x0, &(0x7f00000000c0)='id_legacy\x00', &(0x7f0000000100)={'syz', 0x3}, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24044800}, 0x0) openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x404c840) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r3, 0xffffffffffffffff, 0x0) 2.391111574s ago: executing program 3 (id=232): read$FUSE(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) pipe2$watch_queue(&(0x7f00000002c0)={0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r2, 0x5760, 0xc) 2.364494378s ago: executing program 0 (id=233): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48050) readv(r0, &(0x7f0000000040), 0x2000000000000213) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {0xee00}, 0x4, 0x9}) write(r2, &(0x7f00000001c0)='my_midi_i', 0x9) 1.898641594s ago: executing program 0 (id=234): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e21, @remote}}, 0x0, 0x0, 0x23, 0x0, "e83ae75240c2d6d8ec87bb53fab0910000000000000007a5922406b64cddaeb9d339ba3c35dc0a08df8e61740b7cf2d4e499d58654a4cf0fa0ce1f830c3079cffcfd00"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) sendmsg$inet(r0, 0x0, 0x0) 1.885816402s ago: executing program 1 (id=235): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00000001c0)=0x420, 0x4) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, 0x0, 0x0) 1.660049803s ago: executing program 1 (id=236): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000100), 0xc2900, 0x0) sendfile(r1, r2, 0x0, 0x201f00) 1.532743871s ago: executing program 0 (id=237): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0xfffffffffffffffe, 0xc}, 0x68) socket$l2tp6(0xa, 0x2, 0x73) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@ipv6_getnetconf={0x14, 0x6a, 0x7}, 0x14}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="58000000020603000000000000000000000000000c000300686173683a69700005000400000000000900020073797a31000000001400078008001340000017e5080012400000000905000500020000000500010006"], 0x58}}, 0x4080) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140fffffffe0c000280080001407f"], 0x44}}, 0x4000050) 1.506648223s ago: executing program 1 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x1, 0x0) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x2c, 0x0, 0x309, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x8000) fcntl$setpipe(r1, 0x408, 0x7) close_range(r0, 0xffffffffffffffff, 0x0) 1.40401452s ago: executing program 0 (id=239): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x2000090, &(0x7f00000006c0)=ANY=[]) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) 1.161275192s ago: executing program 1 (id=240): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="0018000000000000000c0000000c0000000200000000000000000000040000000000003203b9437337b3e819abae9262aa4e3cc6010cdb7218854b92c6320ed6f5fa515fc3b7b6723e26a10857128f168945054047c49b2cbacc896df6ae486d72f92dc0caa8f8d1a3a0fe48455445506273109b6f41c84aa48f98bfda56158c5b980dac"], 0x0, 0x26}, 0x28) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) r4 = syz_open_procfs(r0, 0x0) sendfile(r3, r4, 0x0, 0x100000003) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r5, 0xc138fd03, &(0x7f0000001000)="04000000000000000000000038010000000000000000000000000000000000000000000000000000000000000000000063727970745f64657600"/315) r6 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000000c0)='veth1_to_team\x00', 0x10) sendto$inet(r6, 0x0, 0x0, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) syz_usb_connect(0x0, 0x63, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000404c17aa5500010102030109025100010100c0320904000002080650000705010200020007058202000200090400010408066200070501020002000324010705020200020003"], 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143041, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r7, 0x40305829, 0x0) syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100), &(0x7f0000000000), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.081429694s ago: executing program 0 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6(0xa, 0x80002, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000080), 0x4) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) fcntl$setstatus(r2, 0x4, 0x800) ioctl(r2, 0x8934, &(0x7f00000002c0)="657468310000000000000000000000cf06000000c40ff3075b04dc727a8b9bc395a2e0f662de91f6b95cfbf004c8bcf76d2bba4f29276179f5ebe0d3a4f3f508a34cc0015792690151925b083904b755ffaf8415d5ef35b2493f5f97b125c30dd2e8148024e60cb8646ccf3e8366fd7469577f7ca0419d1e0dc47d7a3ebebe4a082cb14e418d3362f11cf5a9abaeb32c5c7ec13b30f73137654dcbcd47d417c366a317c4a41a13a00483208bd603042496419eb89e36febeae1a31dc8d9a717905c1b4a09e8689719b2f1332e09f336f2a4c49") ioctl(r2, 0x8914, &(0x7f00000000c0)="6c6170623000000000000000000000000100") ioctl(r2, 0x890b, &(0x7f0000000140)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00lapb0\x00\x00\x00\x00\x00\x00\x00') r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmmsg(r3, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000001280)=[{&(0x7f0000000040)="66bfdcf8156709246ddd266fa0f213eb5a3351", 0x13}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x4020044) bind$x25(r2, &(0x7f0000000080), 0x12) connect$x25(r2, &(0x7f0000000100)={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}}, 0x12) r4 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000400)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000c40), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f000000dd80)={0xa04400, 0x0, 0x0, 0x0, {0x12}, 0x0, 0x0, 0x0, 0x0}, 0x58) r6 = openat$cgroup_procs(r5, &(0x7f00000003c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000240), 0x12) pread64(r4, &(0x7f0000000340)=""/69, 0x45, 0x9) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x1c0}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008094) ioctl$FE_SET_FRONTEND(0xffffffffffffffff, 0x40246f4c, &(0x7f0000000440)={0xf4243, 0x2, @qpsk={0x7, 0x13}}) 264.411793ms ago: executing program 4 (id=242): socket$netlink(0x10, 0x3, 0x0) r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r0, 0x41, 0x1ff) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, 0x0) read$FUSE(r1, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000000180)={0x50, 0x0, r2, {0x7, 0x2b, 0x4, 0x19401804, 0x2, 0x1a, 0x6, 0xcccb, 0x0, 0x0, 0x1, 0x8001}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close(r1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x20842, 0x110) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000020, 0x11, r3, 0xa64c000) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) 206.377905ms ago: executing program 2 (id=243): openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) statx(0xffffffffffffffff, 0x0, 0x1000, 0xf0cb2f4a0c2cfc5d, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000400)={0x5, 0x2}) ioctl$int_in(0xffffffffffffffff, 0x5452, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x1ff) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x280000b, 0x28011, 0xffffffffffffffff, 0x40000) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000100)=ANY=[@ANYBLOB="1b00000000000000000000000020000000", @ANYBLOB='\x00'/10, @ANYRES32=0x0, @ANYRES32], 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000023, 0x13, r3, 0x0) syz_clone(0x4021400, 0x0, 0x9000, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000002040)={0xf0f080, 0x5}) 95.037054ms ago: executing program 4 (id=244): syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', &(0x7f0000000180), 0x2000090, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_tracefs\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='my_tracefs/events/task/task_rename/filter\x00', 0x101, 0x0) writev(r1, &(0x7f0000000540)=[{&(0x7f0000000080)="30bbe6d8b7191e2c76d77785fec0a0efd2b53ea526b37b14fa9220db03d1fac0b73b0f0a21ce5280accc8896d93a880e8721fcb3230d3a1d1b35560762e8269b1bb2266c3feaf9c5b59aeae41b5fde2f28d891ffda7e94646233f4e80b9ff2507f07db3ee231cecc4f81c70d0c5a37b16e6b254ad7bd22e49ddb83263ace4aabe6b0937a16821b6895fc98", 0x8b}], 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.0/remove\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='1\x00', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r3, &(0x7f00000001c0)='1', 0x1) 0s ago: executing program 0 (id=245): bind$inet(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f0000000340)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @window={0x3, 0x0, 0x4}, @mss={0x2, 0x4}, @timestamp, @window={0x3, 0x1, 0x10}, @sack_perm], 0x20000000000002a1) r0 = syz_open_dev$usbmon(&(0x7f0000000000), 0x6, 0x200) ioctl$MON_IOCX_MFETCH(r0, 0xc00c9207, &(0x7f0000000080)={&(0x7f0000000040)=[0x0], 0x1, 0x7fff}) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x48050) readv(r0, &(0x7f0000000040), 0x2000000000000213) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x1, 0x0) open$dir(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0/iface_name\x00', 0x40280, 0x41) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0186405, &(0x7f0000000540)={0x76, 0xff, {}, {0xee00}, 0x4, 0x9}) write(r2, &(0x7f00000001c0)='my_midi_i', 0x9) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.150' (ED25519) to the list of known hosts. [ 76.216923][ T5604] cgroup: Unknown subsys name 'net' [ 76.308258][ T5604] cgroup: Unknown subsys name 'cpuset' [ 76.316802][ T5604] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.856688][ T5604] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.456052][ T5625] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.457858][ T5625] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.462496][ T5625] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.471560][ T5625] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.472054][ T5625] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.472291][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.476862][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.478119][ T5625] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.479627][ T5625] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.485716][ T5625] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.488041][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.492487][ T5625] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.494397][ T5625] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.498482][ T5619] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.500750][ T5619] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.509798][ T5619] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.520806][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.533732][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.598280][ T4932] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.602182][ T4932] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.612977][ T4932] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.613839][ T4932] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.627475][ T4932] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.635935][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.639031][ T4932] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 83.498497][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.499535][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.499927][ T5615] bridge_slave_0: entered allmulticast mode [ 83.506623][ T5615] bridge_slave_0: entered promiscuous mode [ 83.526642][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.526749][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.526869][ T5615] bridge_slave_1: entered allmulticast mode [ 83.530802][ T5615] bridge_slave_1: entered promiscuous mode [ 83.554776][ T52] Bluetooth: hci0: command tx timeout [ 83.582957][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.583072][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.583207][ T5616] bridge_slave_0: entered allmulticast mode [ 83.588600][ T5616] bridge_slave_0: entered promiscuous mode [ 83.617506][ T5629] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.617922][ T5629] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.621261][ T5629] bridge_slave_0: entered allmulticast mode [ 83.628179][ T5629] bridge_slave_0: entered promiscuous mode [ 83.638240][ T52] Bluetooth: hci1: command tx timeout [ 83.638254][ T4932] Bluetooth: hci3: command tx timeout [ 83.661609][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.662011][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.662380][ T5616] bridge_slave_1: entered allmulticast mode [ 83.671304][ T5616] bridge_slave_1: entered promiscuous mode [ 83.714283][ T52] Bluetooth: hci4: command tx timeout [ 83.714662][ T52] Bluetooth: hci2: command tx timeout [ 83.726973][ T5629] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.727107][ T5629] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.727581][ T5629] bridge_slave_1: entered allmulticast mode [ 83.733037][ T5629] bridge_slave_1: entered promiscuous mode [ 83.777434][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.786903][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.820130][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.869562][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.906157][ T5629] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.916513][ T5629] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.916695][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.916798][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.917914][ T5617] bridge_slave_0: entered allmulticast mode [ 83.922951][ T5617] bridge_slave_0: entered promiscuous mode [ 83.971954][ T5615] team0: Port device team_slave_0 added [ 83.987675][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.988069][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.991110][ T5617] bridge_slave_1: entered allmulticast mode [ 83.998595][ T5617] bridge_slave_1: entered promiscuous mode [ 84.018322][ T5616] team0: Port device team_slave_0 added [ 84.034770][ T5615] team0: Port device team_slave_1 added [ 84.072704][ T5616] team0: Port device team_slave_1 added [ 84.089092][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.089514][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.089866][ T5614] bridge_slave_0: entered allmulticast mode [ 84.097371][ T5614] bridge_slave_0: entered promiscuous mode [ 84.129397][ T5629] team0: Port device team_slave_0 added [ 84.159976][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.162410][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.162766][ T5614] bridge_slave_1: entered allmulticast mode [ 84.171200][ T5614] bridge_slave_1: entered promiscuous mode [ 84.178763][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.178812][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.178898][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.197079][ T5629] team0: Port device team_slave_1 added [ 84.210640][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.216115][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.216156][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.216220][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.265046][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.265094][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.265156][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.349514][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.367093][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.367148][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.367175][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.429946][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.429976][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.430001][ T5629] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.483506][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.493286][ T5629] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.493323][ T5629] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.497357][ T5629] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.549012][ T5617] team0: Port device team_slave_0 added [ 84.556301][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.588948][ T5617] team0: Port device team_slave_1 added [ 84.628859][ T5615] hsr_slave_0: entered promiscuous mode [ 84.631783][ T5615] hsr_slave_1: entered promiscuous mode [ 84.644418][ T5616] hsr_slave_0: entered promiscuous mode [ 84.648172][ T5616] hsr_slave_1: entered promiscuous mode [ 84.650072][ T5616] debugfs: 'hsr0' already exists in 'hsr' [ 84.650166][ T5616] Cannot create hsr debugfs directory [ 84.711780][ T5629] hsr_slave_0: entered promiscuous mode [ 84.715175][ T5629] hsr_slave_1: entered promiscuous mode [ 84.717128][ T5629] debugfs: 'hsr0' already exists in 'hsr' [ 84.717179][ T5629] Cannot create hsr debugfs directory [ 84.718647][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.718696][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.718759][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.736826][ T5614] team0: Port device team_slave_0 added [ 84.751544][ T5614] team0: Port device team_slave_1 added [ 84.760678][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.760720][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.760791][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.894234][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.894275][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.894318][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.903070][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.903113][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 84.903176][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.121975][ T5617] hsr_slave_0: entered promiscuous mode [ 85.127941][ T5617] hsr_slave_1: entered promiscuous mode [ 85.130800][ T5617] debugfs: 'hsr0' already exists in 'hsr' [ 85.130847][ T5617] Cannot create hsr debugfs directory [ 85.177407][ T5614] hsr_slave_0: entered promiscuous mode [ 85.179956][ T5614] hsr_slave_1: entered promiscuous mode [ 85.181749][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 85.181819][ T5614] Cannot create hsr debugfs directory [ 85.619424][ T5615] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.634555][ T4932] Bluetooth: hci0: command tx timeout [ 85.642330][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.651668][ T5615] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.662213][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.669828][ T5615] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.681082][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.697336][ T5615] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.707271][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.715556][ T4932] Bluetooth: hci3: command tx timeout [ 85.724260][ T4932] Bluetooth: hci1: command tx timeout [ 85.776290][ T5629] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.788615][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.798118][ T5629] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.804885][ T4932] Bluetooth: hci2: command tx timeout [ 85.804915][ T4932] Bluetooth: hci4: command tx timeout [ 85.822482][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.826664][ T5629] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.839188][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 85.855298][ T5629] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.866019][ T5629] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 85.949009][ T5616] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.959579][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 85.962325][ T5616] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.977800][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 85.985540][ T5616] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.997574][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.015762][ T5616] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 86.029079][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.155850][ T5617] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.168565][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.190761][ T5617] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.202434][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.222785][ T5617] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.232858][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.241726][ T5617] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 86.251792][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.272017][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.374619][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.384916][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 86.396769][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.416562][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.427217][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 86.441583][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.441721][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.460360][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.470976][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 86.479302][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.489228][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 86.511333][ T5629] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.523149][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.523381][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.592448][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.612077][ T5629] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.642245][ T38] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.642481][ T38] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.666672][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.698057][ T38] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.698323][ T38] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.743625][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.743755][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.806164][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.806397][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.931028][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.082032][ T5617] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.109742][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.109868][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.173820][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.173946][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.293085][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.413113][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.469877][ T1005] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.470013][ T1005] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.513989][ T1005] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.514122][ T1005] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.716409][ T52] Bluetooth: hci0: command tx timeout [ 87.793974][ T52] Bluetooth: hci1: command tx timeout [ 87.794032][ T52] Bluetooth: hci3: command tx timeout [ 87.874384][ T52] Bluetooth: hci2: command tx timeout [ 87.881014][ T4932] Bluetooth: hci4: command tx timeout [ 88.190539][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.260872][ T5629] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.470831][ T5615] veth0_vlan: entered promiscuous mode [ 88.489828][ T5629] veth0_vlan: entered promiscuous mode [ 88.522881][ T5615] veth1_vlan: entered promiscuous mode [ 88.544552][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.554072][ T5629] veth1_vlan: entered promiscuous mode [ 88.661335][ T5615] veth0_macvtap: entered promiscuous mode [ 88.694298][ T5615] veth1_macvtap: entered promiscuous mode [ 88.751624][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.753123][ T5629] veth0_macvtap: entered promiscuous mode [ 88.793102][ T5629] veth1_macvtap: entered promiscuous mode [ 88.803273][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.844956][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.875589][ T83] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.883436][ T83] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.950560][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.960143][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.975309][ T83] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.979328][ T1005] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.017028][ T5629] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.086783][ T1168] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.086884][ T1168] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.087014][ T1168] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.145222][ T5617] veth0_vlan: entered promiscuous mode [ 89.196984][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.197030][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.225490][ T5617] veth1_vlan: entered promiscuous mode [ 89.253974][ T5616] veth0_vlan: entered promiscuous mode [ 89.264140][ T50] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.300862][ T5614] veth0_vlan: entered promiscuous mode [ 89.329177][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.329214][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.351239][ T5616] veth1_vlan: entered promiscuous mode [ 89.401699][ T5614] veth1_vlan: entered promiscuous mode [ 89.411009][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.411041][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.477990][ T5615] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 89.498050][ T5617] veth0_macvtap: entered promiscuous mode [ 89.515657][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515701][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.536860][ T5617] veth1_macvtap: entered promiscuous mode [ 89.621496][ T5616] veth0_macvtap: entered promiscuous mode [ 89.642808][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.658783][ T5813] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 89.679987][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.681037][ T5616] veth1_macvtap: entered promiscuous mode [ 89.741038][ T5614] veth0_macvtap: entered promiscuous mode [ 89.773929][ T5614] veth1_macvtap: entered promiscuous mode [ 89.795896][ T4932] Bluetooth: hci0: command tx timeout [ 89.834842][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.868269][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.886177][ T52] Bluetooth: hci1: command tx timeout [ 89.886258][ T4932] Bluetooth: hci3: command tx timeout [ 89.929282][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.956336][ T52] Bluetooth: hci2: command tx timeout [ 89.956396][ T4932] Bluetooth: hci4: command tx timeout [ 89.974314][ T50] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974382][ T50] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974502][ T50] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974608][ T50] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974706][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974807][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974899][ T50] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.974992][ T50] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.049553][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.083532][ T5821] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 90.110965][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.119796][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.165008][ T50] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165092][ T50] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.165134][ T50] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.249026][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.249077][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.335804][ T1168] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.547497][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.547568][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.733348][ T5834] 9pnet_virtio: no channels available for device syz [ 91.758445][ T1005] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.758486][ T1005] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.827344][ T5836] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 91.846381][ T25] cfg80211: failed to load regulatory.db [ 91.917931][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.917973][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.074371][ T1005] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.082925][ T1005] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.115071][ T5844] warning: `syz.1.13' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 92.763920][ T5735] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 92.936436][ T5735] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 92.957506][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 92.957553][ T5735] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 92.988768][ T5735] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.988814][ T5735] usb 4-1: Product: syz [ 92.988855][ T5735] usb 4-1: Manufacturer: syz [ 92.988876][ T5735] usb 4-1: SerialNumber: syz [ 93.066184][ T5858] loop4: detected capacity change from 0 to 256 [ 93.077949][ T5735] usb 4-1: config 0 descriptor?? [ 93.120613][ T5858] vfat: Unknown parameter 'shortnameed' [ 93.137451][ T5735] hub 4-1:0.0: bad descriptor, ignoring hub [ 93.137506][ T5735] hub 4-1:0.0: probe with driver hub failed with error -5 [ 93.201069][ T5735] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input5 [ 94.200463][ T5854] Set syz1 is full, maxelem 6117 reached [ 94.762521][ T5876] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 94.799640][ T5875] fuse: Bad value for 'fd' [ 95.404959][ T5735] usb 4-1: USB disconnect, device number 2 [ 96.337519][ T5889] Zero length message leads to an empty skb [ 96.472729][ T5888] netlink: 24 bytes leftover after parsing attributes in process `syz.3.26'. [ 97.130094][ T5906] loop3: detected capacity change from 0 to 256 [ 97.148232][ T5906] vfat: Unknown parameter 'shortnameed' [ 97.400079][ T31] audit: type=1804 audit(1786391159.104:2): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.36" name="/newroot/7/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8590 res=1 errno=0 [ 97.437203][ T31] audit: type=1800 audit(1786391159.104:3): pid=5913 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.36" name="iface_name" dev="configfs" ino=8590 res=0 errno=0 [ 97.696710][ T5920] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 98.415097][ T5922] 9pnet_virtio: no channels available for device syz [ 98.660169][ T5927] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 100.077017][ T5940] netlink: 24 bytes leftover after parsing attributes in process `syz.4.44'. [ 100.241214][ T5952] loop1: detected capacity change from 0 to 256 [ 100.248845][ T5952] vfat: Unknown parameter 'shortnameed' [ 102.478103][ T31] audit: type=1804 audit(1786391164.184:4): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.50" name="/newroot/9/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9536 res=1 errno=0 [ 102.486391][ T31] audit: type=1800 audit(1786391164.184:5): pid=5958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.50" name="iface_name" dev="configfs" ino=9536 res=0 errno=0 [ 103.569783][ T5971] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 104.171814][ T5974] 9pnet_virtio: no channels available for device syz [ 104.458341][ T5953] Set syz1 is full, maxelem 6117 reached [ 105.438972][ T6001] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 105.754446][ T6000] netlink: 24 bytes leftover after parsing attributes in process `syz.3.62'. [ 106.148493][ T6006] loop0: detected capacity change from 0 to 256 [ 106.264304][ T6006] vfat: Unknown parameter 'shortnameed' [ 107.209470][ T31] audit: type=1804 audit(1786391168.904:6): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.65" name="/newroot/13/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8749 res=1 errno=0 [ 107.352558][ T31] audit: type=1800 audit(1786391169.054:7): pid=6012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.65" name="iface_name" dev="configfs" ino=8749 res=0 errno=0 [ 108.888086][ T6018] 9pnet_virtio: no channels available for device syz [ 110.802265][ T6052] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 111.207840][ T31] audit: type=1804 audit(1786391172.874:8): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.79" name="/newroot/16/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8802 res=1 errno=0 [ 111.236039][ T31] audit: type=1800 audit(1786391172.874:9): pid=6056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.79" name="iface_name" dev="configfs" ino=8802 res=0 errno=0 [ 111.471804][ T6059] netlink: 24 bytes leftover after parsing attributes in process `syz.0.81'. [ 111.502596][ T6060] loop2: detected capacity change from 0 to 256 [ 111.510921][ T6060] vfat: Unknown parameter 'shortnameed' [ 111.648141][ T6033] Set syz1 is full, maxelem 6117 reached [ 114.682943][ T6079] 9pnet_virtio: no channels available for device syz [ 115.068974][ T31] audit: type=1804 audit(1786391176.774:10): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.93" name="/newroot/17/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8882 res=1 errno=0 [ 115.100329][ T31] audit: type=1800 audit(1786391176.814:11): pid=6090 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.93" name="iface_name" dev="configfs" ino=8882 res=0 errno=0 [ 115.733644][ T6099] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 116.001653][ T6102] loop2: detected capacity change from 0 to 256 [ 116.008583][ T6102] vfat: Unknown parameter 'shortnameed' [ 116.828249][ T6121] netlink: 24 bytes leftover after parsing attributes in process `syz.4.101'. [ 116.854807][ T6123] 9pnet_virtio: no channels available for device syz [ 120.381129][ T6144] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 121.095516][ T6147] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 121.376411][ T31] audit: type=1804 audit(1786391183.074:12): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.109" name="/newroot/22/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=8972 res=1 errno=0 [ 121.376500][ T31] audit: type=1800 audit(1786391183.074:13): pid=6149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.109" name="iface_name" dev="configfs" ino=8972 res=0 errno=0 [ 121.725028][ T6155] loop1: detected capacity change from 0 to 256 [ 121.753453][ T6155] vfat: Unknown parameter 'shortnameed' [ 122.173751][ T6151] Set syz1 is full, maxelem 6117 reached [ 122.248106][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.115'. [ 122.312144][ T6169] 9pnet_virtio: no channels available for device syz [ 122.625988][ T6173] fuse: Bad value for 'fd' [ 125.504825][ T31] audit: type=1804 audit(1786391187.214:14): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.122" name="/newroot/25/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9043 res=1 errno=0 [ 125.504905][ T31] audit: type=1800 audit(1786391187.214:15): pid=6183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.122" name="iface_name" dev="configfs" ino=9043 res=0 errno=0 [ 125.564196][ T6187] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 126.714113][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 126.745658][ T6203] loop3: detected capacity change from 0 to 256 [ 126.759618][ T6203] vfat: Unknown parameter 'shortnameed' [ 127.051045][ T6214] 9pnet_virtio: no channels available for device syz [ 127.251059][ T6216] fuse: Bad value for 'fd' [ 127.993374][ T6230] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 130.762010][ T31] audit: type=1804 audit(1786391192.464:16): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.139" name="/newroot/23/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9089 res=1 errno=0 [ 130.778559][ T31] audit: type=1800 audit(1786391192.464:17): pid=6234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.139" name="iface_name" dev="configfs" ino=9089 res=0 errno=0 [ 131.159089][ T6242] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 132.295954][ T6253] 9pnet_virtio: no channels available for device syz [ 132.654042][ T30] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.838682][ T30] usb 4-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 132.894641][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901251][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.944025][ T30] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 132.957443][ T30] usb 4-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 133.011112][ T30] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 133.015424][ T30] usb 4-1: Product: syz [ 133.015478][ T30] usb 4-1: Manufacturer: syz [ 133.015527][ T30] usb 4-1: SerialNumber: syz [ 133.082378][ T30] usb-storage 4-1:1.0: USB Mass Storage device detected [ 133.120641][ T6263] fuse: Bad value for 'fd' [ 133.140436][ T30] usb-storage 4-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 133.169226][ T30] scsi host1: usb-storage 4-1:1.0 [ 133.569000][ T6270] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 134.362485][ T6276] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 134.547959][ T31] audit: type=1804 audit(1786391196.254:18): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.152" name="/newroot/26/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=9148 res=1 errno=0 [ 134.548289][ T31] audit: type=1800 audit(1786391196.254:19): pid=6282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.152" name="iface_name" dev="configfs" ino=9148 res=0 errno=0 [ 135.052245][ T6296] 9pnet_virtio: no channels available for device syz [ 135.252195][ T987] usb 4-1: USB disconnect, device number 3 [ 137.676487][ T6322] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 138.369445][ T31] audit: type=1804 audit(1786391200.074:20): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.165" name="/newroot/31/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10251 res=1 errno=0 [ 138.370425][ T31] audit: type=1800 audit(1786391200.074:21): pid=6326 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.165" name="iface_name" dev="configfs" ino=10251 res=0 errno=0 [ 138.803837][ T5735] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 139.568351][ T5735] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 139.578190][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 139.578241][ T5735] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 139.597048][ T5735] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.597113][ T5735] usb 3-1: Product: syz [ 139.597152][ T5735] usb 3-1: Manufacturer: syz [ 139.597191][ T5735] usb 3-1: SerialNumber: syz [ 139.624843][ T5735] usb 3-1: config 0 descriptor?? [ 139.656303][ T5735] hub 3-1:0.0: bad descriptor, ignoring hub [ 139.656365][ T5735] hub 3-1:0.0: probe with driver hub failed with error -5 [ 139.676519][ T5735] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input6 [ 139.754536][ T5773] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 139.859207][ T6348] 9pnet_virtio: no channels available for device syz [ 139.904472][ T5773] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 139.915798][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 139.927861][ T5773] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 139.943717][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.951924][ T5773] usb 2-1: Product: syz [ 139.956661][ T5773] usb 2-1: Manufacturer: syz [ 139.962062][ T5773] usb 2-1: SerialNumber: syz [ 139.984892][ T5773] usb-storage 2-1:1.0: USB Mass Storage device detected [ 140.001837][ T5773] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 140.010567][ T5773] scsi host1: usb-storage 2-1:1.0 [ 141.620646][ T6370] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 141.673918][ T5735] usb 3-1: USB disconnect, device number 2 [ 141.755100][ T31] audit: type=1804 audit(1786391203.464:22): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.178" name="/newroot/35/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10311 res=1 errno=0 [ 141.769337][ T31] audit: type=1800 audit(1786391203.464:23): pid=6375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.178" name="iface_name" dev="configfs" ino=10311 res=0 errno=0 [ 142.003557][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 142.031839][ T25] usb 2-1: USB disconnect, device number 2 [ 143.034644][ T6405] 9pnet_virtio: no channels available for device syz [ 143.513810][ T5773] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 143.716074][ T5773] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 143.733026][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 143.733588][ T5773] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 143.808350][ T5773] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 143.808450][ T5773] usb 1-1: Product: syz [ 143.810967][ T5773] usb 1-1: Manufacturer: syz [ 143.850053][ T5773] usb 1-1: SerialNumber: syz [ 144.179071][ T5773] usb 1-1: config 0 descriptor?? [ 144.278737][ T5773] hub 1-1:0.0: bad descriptor, ignoring hub [ 144.284777][ T5773] hub 1-1:0.0: probe with driver hub failed with error -5 [ 144.338783][ T5773] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 146.409446][ T6430] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 146.445859][ T5773] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 146.694495][ T5773] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 146.704898][ T5773] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.704969][ T5773] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 146.736225][ T5773] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.736984][ T5773] usb 2-1: Product: syz [ 146.737060][ T5773] usb 2-1: Manufacturer: syz [ 146.737098][ T5773] usb 2-1: SerialNumber: syz [ 146.771383][ T5773] usb-storage 2-1:1.0: USB Mass Storage device detected [ 146.819239][ T5773] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 146.831183][ T5773] scsi host1: usb-storage 2-1:1.0 [ 147.016072][ T31] audit: type=1804 audit(1786391208.724:24): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.194" name="/newroot/34/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10218 res=1 errno=0 [ 147.020380][ T31] audit: type=1800 audit(1786391208.724:25): pid=6438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.194" name="iface_name" dev="configfs" ino=10218 res=0 errno=0 [ 147.587176][ T6455] 9pnet_virtio: no channels available for device syz [ 148.048916][ T5738] usb 2-1: USB disconnect, device number 3 [ 148.166715][ T6468] file system registered [ 148.698256][ T6477] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 conventional PCI endpoint [ 149.267541][ T5615] ffs_data_put(): freeing [ 149.272342][ T31] audit: type=1804 audit(1786391210.974:26): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.207" name="/newroot/47/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=11322 res=1 errno=0 [ 149.357811][ T31] audit: type=1800 audit(1786391211.034:27): pid=6480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.207" name="iface_name" dev="configfs" ino=11322 res=0 errno=0 [ 150.043811][ T5736] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 150.118751][ T6495] netlink: 24 bytes leftover after parsing attributes in process `syz.1.211'. [ 150.194461][ T5736] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 150.205659][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 150.217288][ T5736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 150.233945][ T5736] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 150.245247][ T5736] usb 4-1: Product: syz [ 150.245307][ T5736] usb 4-1: Manufacturer: syz [ 150.245336][ T5736] usb 4-1: SerialNumber: syz [ 150.264098][ T5736] usb 4-1: config 0 descriptor?? [ 150.276481][ T5736] hub 4-1:0.0: bad descriptor, ignoring hub [ 150.276524][ T5736] hub 4-1:0.0: probe with driver hub failed with error -5 [ 150.301853][ T5736] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 150.461236][ T6500] 9pnet_virtio: no channels available for device syz [ 150.579068][ T30] usb 1-1: USB disconnect, device number 2 [ 151.956329][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 152.126653][ T30] usb 1-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 152.143212][ T30] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 152.144400][ T30] usb 1-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 152.185952][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.186093][ T30] usb 1-1: Product: syz [ 152.189214][ T30] usb 1-1: Manufacturer: syz [ 152.189287][ T30] usb 1-1: SerialNumber: syz [ 152.554947][ T30] usb-storage 1-1:1.0: USB Mass Storage device detected [ 152.677993][ T30] usb-storage 1-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 152.691486][ T30] scsi host1: usb-storage 1-1:1.0 [ 152.822391][ T5616] ffs_data_put(): freeing [ 152.917136][ T30] usb 4-1: USB disconnect, device number 4 [ 152.990330][ T31] audit: type=1804 audit(1786391214.694:28): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.220" name="/newroot/52/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10512 res=1 errno=0 [ 153.019103][ T31] audit: type=1800 audit(1786391214.724:29): pid=6529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.220" name="iface_name" dev="configfs" ino=10512 res=0 errno=0 [ 153.221070][ T5615] ffs_data_put(): freeing [ 153.388549][ T6542] 9pnet_virtio: no channels available for device syz [ 153.917511][ T5736] usb 1-1: USB disconnect, device number 3 [ 155.103702][ T5735] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 155.287866][ T5735] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 155.299044][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 155.299091][ T5735] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 155.326058][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 155.326100][ T5735] usb 5-1: Product: syz [ 155.326131][ T5735] usb 5-1: Manufacturer: syz [ 155.326151][ T5735] usb 5-1: SerialNumber: syz [ 155.366977][ T5735] usb 5-1: config 0 descriptor?? [ 155.374396][ T5735] hub 5-1:0.0: bad descriptor, ignoring hub [ 155.374455][ T5735] hub 5-1:0.0: probe with driver hub failed with error -5 [ 155.408981][ T5735] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input9 [ 155.682214][ T31] audit: type=1804 audit(1786391217.384:30): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.233" name="/newroot/43/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10602 res=1 errno=0 [ 155.695505][ T31] audit: type=1800 audit(1786391217.384:31): pid=6576 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.233" name="iface_name" dev="configfs" ino=10602 res=0 errno=0 [ 155.916120][ T31] audit: type=1800 audit(1786391217.624:32): pid=6582 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.235" name="enable" dev="configfs" ino=10634 res=0 errno=0 [ 157.537467][ T987] usb 5-1: USB disconnect, device number 2 [ 157.603984][ T5775] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 157.804456][ T5775] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 157.861325][ T5775] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 157.861411][ T5775] usb 2-1: config 1 interface 0 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 4 [ 157.938365][ T5775] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 157.938409][ T5775] usb 2-1: Product: syz [ 157.938441][ T5775] usb 2-1: Manufacturer: syz [ 157.938459][ T5775] usb 2-1: SerialNumber: syz [ 157.957295][ T5775] usb-storage 2-1:1.0: USB Mass Storage device detected [ 157.981730][ T5775] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 157.983182][ T5775] scsi host1: usb-storage 2-1:1.0 [ 159.084825][ T31] audit: type=1804 audit(1786391220.784:33): pid=6620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.245" name="/newroot/48/config/usb_gadget/g1/functions/midi2.usb0/iface_name" dev="configfs" ino=10714 res=1 errno=0 [ 159.151303][ T6620] ================================================================== [ 159.151322][ T6620] BUG: KASAN: slab-use-after-free in string+0x216/0x2d0 [ 159.151363][ T6620] Read of size 1 at addr ffff88805b0abc60 by task syz.0.245/6620 [ 159.151381][ T6620] [ 159.151409][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 159.151435][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 159.151460][ T6620] Call Trace: [ 159.151473][ T6620] [ 159.151486][ T6620] dump_stack_lvl+0xe8/0x150 [ 159.151523][ T6620] print_address_description+0x55/0x1e0 [ 159.151553][ T6620] ? string+0x216/0x2d0 [ 159.151574][ T6620] print_report+0x58/0x70 [ 159.151600][ T6620] kasan_report+0x117/0x150 [ 159.151631][ T6620] ? string+0x216/0x2d0 [ 159.151656][ T6620] string+0x216/0x2d0 [ 159.151681][ T6620] vsnprintf+0x74a/0xef0 [ 159.151710][ T6620] scnprintf+0x102/0x190 [ 159.151732][ T6620] ? __pfx___mutex_lock+0x10/0x10 [ 159.151761][ T6620] ? lock_acquire+0x115/0x350 [ 159.151795][ T6620] ? __pfx_scnprintf+0x10/0x10 [ 159.151826][ T6620] f_midi2_opts_iface_name_show+0x70/0xa0 [ 159.151858][ T6620] ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10 [ 159.151884][ T6620] configfs_read_iter+0x2b7/0x620 [ 159.151913][ T6620] __kernel_read+0x4ca/0x960 [ 159.151937][ T6620] ? __pfx___kernel_read+0x10/0x10 [ 159.151968][ T6620] ? rcu_is_watching+0x15/0xb0 [ 159.151993][ T6620] integrity_kernel_read+0x89/0xd0 [ 159.152019][ T6620] ? __pfx_integrity_kernel_read+0x10/0x10 [ 159.152042][ T6620] ? __kmalloc_cache_noprof+0x14b/0x600 [ 159.152066][ T6620] ? ima_calc_file_hash+0x40f/0x890 [ 159.152096][ T6620] ? ima_calc_file_hash+0x40f/0x890 [ 159.152129][ T6620] ima_calc_file_hash+0x451/0x890 [ 159.152162][ T6620] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 159.152212][ T6620] ? generic_fillattr+0x575/0x840 [ 159.152253][ T6620] ima_collect_measurement+0x51b/0xa00 [ 159.152291][ T6620] ? __pfx_ima_collect_measurement+0x10/0x10 [ 159.152333][ T6620] ? ima_add_violation+0x336/0x3f0 [ 159.152375][ T6620] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 159.152406][ T6620] process_measurement+0x1272/0x1c10 [ 159.152445][ T6620] ? __pfx_process_measurement+0x10/0x10 [ 159.152491][ T6620] ? irqentry_exit+0x218/0x910 [ 159.152519][ T6620] ? lockdep_hardirqs_on+0x7a/0x110 [ 159.152547][ T6620] ? irqentry_exit+0x218/0x910 [ 159.152583][ T6620] ima_file_check+0xe1/0x130 [ 159.152614][ T6620] ? __pfx_ima_file_check+0x10/0x10 [ 159.152648][ T6620] security_file_post_open+0xb3/0x260 [ 159.152682][ T6620] path_openat+0x1485/0x1d60 [ 159.152716][ T6620] do_file_open+0x23e/0x4a0 [ 159.152743][ T6620] ? __pfx_do_file_open+0x10/0x10 [ 159.152778][ T6620] ? _raw_spin_unlock+0x28/0x50 [ 159.152802][ T6620] ? alloc_fd+0x651/0x6c0 [ 159.152838][ T6620] do_sys_openat2+0x115/0x200 [ 159.152877][ T6620] ? __se_sys_futex+0x3a8/0x450 [ 159.152902][ T6620] ? __pfx_do_sys_openat2+0x10/0x10 [ 159.152935][ T6620] ? rcu_is_watching+0x15/0xb0 [ 159.152961][ T6620] __x64_sys_open+0x11e/0x150 [ 159.152993][ T6620] do_syscall_64+0x166/0x510 [ 159.153023][ T6620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.153045][ T6620] ? clear_bhb_loop+0x70/0xc0 [ 159.153070][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.153091][ T6620] RIP: 0033:0x7fb5e279e0d9 [ 159.153118][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 159.153137][ T6620] RSP: 002b:00007fb5e3734028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 159.153166][ T6620] RAX: ffffffffffffffda RBX: 00007fb5e2a25fa0 RCX: 00007fb5e279e0d9 [ 159.153190][ T6620] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0 [ 159.153206][ T6620] RBP: 00007fb5e2835024 R08: 0000000000000000 R09: 0000000000000000 [ 159.153220][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 159.153233][ T6620] R13: 00007fb5e2a26038 R14: 00007fb5e2a25fa0 R15: 00007ffc70eaa258 [ 159.153258][ T6620] [ 159.153267][ T6620] [ 159.153272][ T6620] Allocated by task 6576: [ 159.153282][ T6620] kasan_save_track+0x3e/0x80 [ 159.153307][ T6620] __kasan_kmalloc+0x93/0xb0 [ 159.153331][ T6620] __kmalloc_node_track_caller_noprof+0x4b0/0x720 [ 159.153355][ T6620] kstrndup+0x7e/0x160 [ 159.153377][ T6620] f_midi2_opts_str_store+0x95/0x270 [ 159.153399][ T6620] configfs_write_iter+0x337/0x430 [ 159.153421][ T6620] vfs_write+0x612/0xba0 [ 159.153439][ T6620] ksys_write+0x150/0x270 [ 159.153457][ T6620] do_syscall_64+0x166/0x510 [ 159.153482][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.153502][ T6620] [ 159.153508][ T6620] Freed by task 6621: [ 159.153517][ T6620] kasan_save_track+0x3e/0x80 [ 159.153540][ T6620] kasan_save_free_info+0x40/0x50 [ 159.153558][ T6620] __kasan_slab_free+0x5c/0x80 [ 159.153582][ T6620] kfree+0x1c5/0x650 [ 159.153599][ T6620] f_midi2_opts_str_store+0xc5/0x270 [ 159.153620][ T6620] configfs_write_iter+0x337/0x430 [ 159.153642][ T6620] vfs_write+0x612/0xba0 [ 159.153660][ T6620] ksys_write+0x150/0x270 [ 159.153678][ T6620] do_syscall_64+0x166/0x510 [ 159.153704][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.153724][ T6620] [ 159.153729][ T6620] The buggy address belongs to the object at ffff88805b0abc60 [ 159.153729][ T6620] which belongs to the cache kmalloc-16 of size 16 [ 159.153747][ T6620] The buggy address is located 0 bytes inside of [ 159.153747][ T6620] freed 16-byte region [ffff88805b0abc60, ffff88805b0abc70) [ 159.153769][ T6620] [ 159.153775][ T6620] The buggy address belongs to the physical page: [ 159.153791][ T6620] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5b0ab [ 159.153812][ T6620] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 159.153838][ T6620] page_type: f5(slab) [ 159.153866][ T6620] raw: 00fff00000000000 ffff88801b005640 dead000000000100 dead000000000122 [ 159.153884][ T6620] raw: 0000000000000000 0000000000800080 00000000f5000000 0000000000000000 [ 159.153896][ T6620] page dumped because: kasan: bad access detected [ 159.153911][ T6620] page_owner tracks the page as allocated [ 159.153919][ T6620] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5614, tgid 5614 (syz-executor), ts 97288225398 [ 159.153952][ T6620] post_alloc_hook+0x1f9/0x250 [ 159.153972][ T6620] get_page_from_freelist+0x2205/0x2280 [ 159.153997][ T6620] __alloc_frozen_pages_noprof+0x217/0x5a0 [ 159.154021][ T6620] allocate_slab+0x7d/0x620 [ 159.154049][ T6620] refill_objects+0x2d5/0x350 [ 159.154078][ T6620] __pcs_replace_empty_main+0x2c4/0x6b0 [ 159.154106][ T6620] __kvmalloc_node_noprof+0x638/0x820 [ 159.154129][ T6620] do_replace_table+0x18c/0x610 [ 159.154158][ T6620] xt_replace_table+0x2c/0x140 [ 159.154185][ T6620] __do_replace+0x161/0x9a0 [ 159.154212][ T6620] do_ip6t_set_ctl+0xb45/0xe30 [ 159.154238][ T6620] nf_setsockopt+0x26f/0x290 [ 159.154289][ T6620] do_sock_setsockopt+0x17c/0x1b0 [ 159.154320][ T6620] __x64_sys_setsockopt+0x13d/0x1b0 [ 159.154351][ T6620] do_syscall_64+0x166/0x510 [ 159.154378][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.154398][ T6620] page last free pid 5614 tgid 5614 ts 97288140720 stack trace: [ 159.154414][ T6620] __free_frozen_pages+0xc8f/0xd80 [ 159.154435][ T6620] __kasan_populate_vmalloc+0x12d/0x1c0 [ 159.154458][ T6620] alloc_vmap_area+0xd1a/0x1420 [ 159.154488][ T6620] __get_vm_area_node+0x1f2/0x300 [ 159.154519][ T6620] __vmalloc_node_range_noprof+0x343/0x1540 [ 159.154539][ T6620] vzalloc_noprof+0xb2/0xe0 [ 159.154558][ T6620] __do_replace+0xb2/0x9a0 [ 159.154584][ T6620] do_ip6t_set_ctl+0xb45/0xe30 [ 159.154612][ T6620] nf_setsockopt+0x26f/0x290 [ 159.154639][ T6620] do_sock_setsockopt+0x17c/0x1b0 [ 159.154668][ T6620] __x64_sys_setsockopt+0x13d/0x1b0 [ 159.154699][ T6620] do_syscall_64+0x166/0x510 [ 159.154725][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 159.154746][ T6620] [ 159.154751][ T6620] Memory state around the buggy address: [ 159.154763][ T6620] ffff88805b0abb00: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 159.154778][ T6620] ffff88805b0abb80: fa fb fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 159.154793][ T6620] >ffff88805b0abc00: 00 00 fc fc fa fb fc fc fa fb fc fc fa fb fc fc [ 159.154804][ T6620] ^ [ 159.154817][ T6620] ffff88805b0abc80: fa fb fc fc fa fb fc fc fa fb fc fc 00 00 fc fc [ 159.154832][ T6620] ffff88805b0abd00: fa fb fc fc fa fb fc fc 00 00 fc fc fa fb fc fc [ 159.154849][ T6620] ================================================================== [ 160.576974][ T987] usb 2-1: USB disconnect, device number 4 [ 160.595255][ T6620] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 160.602470][ T6620] CPU: 0 UID: 0 PID: 6620 Comm: syz.0.245 Not tainted syzkaller #0 PREEMPT(full) [ 160.611658][ T6620] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 160.621715][ T6620] Call Trace: [ 160.624998][ T6620] [ 160.627929][ T6620] vpanic+0x56c/0xa60 [ 160.631930][ T6620] ? __pfx_vpanic+0x10/0x10 [ 160.636446][ T6620] ? __pfx___schedule+0x10/0x10 [ 160.641339][ T6620] panic+0xc5/0xd0 [ 160.645111][ T6620] ? __pfx_panic+0x10/0x10 [ 160.649576][ T6620] ? preempt_schedule_thunk+0x16/0x40 [ 160.654980][ T6620] ? string+0x216/0x2d0 [ 160.659158][ T6620] check_panic_on_warn+0x89/0xb0 [ 160.664127][ T6620] ? string+0x216/0x2d0 [ 160.668310][ T6620] end_report+0x73/0x170 [ 160.672576][ T6620] ? string+0x216/0x2d0 [ 160.676751][ T6620] kasan_report+0x128/0x150 [ 160.681296][ T6620] ? string+0x216/0x2d0 [ 160.685479][ T6620] string+0x216/0x2d0 [ 160.689479][ T6620] vsnprintf+0x74a/0xef0 [ 160.693738][ T6620] scnprintf+0x102/0x190 [ 160.697996][ T6620] ? __pfx___mutex_lock+0x10/0x10 [ 160.703040][ T6620] ? lock_acquire+0x115/0x350 [ 160.707744][ T6620] ? __pfx_scnprintf+0x10/0x10 [ 160.712526][ T6620] f_midi2_opts_iface_name_show+0x70/0xa0 [ 160.718267][ T6620] ? __pfx_f_midi2_opts_iface_name_show+0x10/0x10 [ 160.724705][ T6620] configfs_read_iter+0x2b7/0x620 [ 160.729846][ T6620] __kernel_read+0x4ca/0x960 [ 160.734456][ T6620] ? __pfx___kernel_read+0x10/0x10 [ 160.739605][ T6620] ? rcu_is_watching+0x15/0xb0 [ 160.744406][ T6620] integrity_kernel_read+0x89/0xd0 [ 160.749544][ T6620] ? __pfx_integrity_kernel_read+0x10/0x10 [ 160.755383][ T6620] ? __kmalloc_cache_noprof+0x14b/0x600 [ 160.760950][ T6620] ? ima_calc_file_hash+0x40f/0x890 [ 160.766168][ T6620] ? ima_calc_file_hash+0x40f/0x890 [ 160.771395][ T6620] ima_calc_file_hash+0x451/0x890 [ 160.776447][ T6620] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 160.782036][ T6620] ? generic_fillattr+0x575/0x840 [ 160.787097][ T6620] ima_collect_measurement+0x51b/0xa00 [ 160.792581][ T6620] ? __pfx_ima_collect_measurement+0x10/0x10 [ 160.798595][ T6620] ? ima_add_violation+0x336/0x3f0 [ 160.803734][ T6620] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 160.809213][ T6620] process_measurement+0x1272/0x1c10 [ 160.814540][ T6620] ? __pfx_process_measurement+0x10/0x10 [ 160.820208][ T6620] ? irqentry_exit+0x218/0x910 [ 160.824995][ T6620] ? lockdep_hardirqs_on+0x7a/0x110 [ 160.830223][ T6620] ? irqentry_exit+0x218/0x910 [ 160.835022][ T6620] ima_file_check+0xe1/0x130 [ 160.839647][ T6620] ? __pfx_ima_file_check+0x10/0x10 [ 160.844887][ T6620] security_file_post_open+0xb3/0x260 [ 160.850307][ T6620] path_openat+0x1485/0x1d60 [ 160.854928][ T6620] do_file_open+0x23e/0x4a0 [ 160.859461][ T6620] ? __pfx_do_file_open+0x10/0x10 [ 160.864512][ T6620] ? _raw_spin_unlock+0x28/0x50 [ 160.869377][ T6620] ? alloc_fd+0x651/0x6c0 [ 160.873734][ T6620] do_sys_openat2+0x115/0x200 [ 160.878435][ T6620] ? __se_sys_futex+0x3a8/0x450 [ 160.883307][ T6620] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.888551][ T6620] ? rcu_is_watching+0x15/0xb0 [ 160.893330][ T6620] __x64_sys_open+0x11e/0x150 [ 160.898029][ T6620] do_syscall_64+0x166/0x510 [ 160.902643][ T6620] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.908728][ T6620] ? clear_bhb_loop+0x70/0xc0 [ 160.913426][ T6620] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.919339][ T6620] RIP: 0033:0x7fb5e279e0d9 [ 160.923781][ T6620] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 160.943426][ T6620] RSP: 002b:00007fb5e3734028 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 160.951861][ T6620] RAX: ffffffffffffffda RBX: 00007fb5e2a25fa0 RCX: 00007fb5e279e0d9 [ 160.959872][ T6620] RDX: 0000000000000041 RSI: 0000000000040280 RDI: 00002000000003c0 [ 160.967861][ T6620] RBP: 00007fb5e2835024 R08: 0000000000000000 R09: 0000000000000000 [ 160.975848][ T6620] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 160.983847][ T6620] R13: 00007fb5e2a26038 R14: 00007fb5e2a25fa0 R15: 00007ffc70eaa258 [ 160.991843][ T6620] [ 160.995457][ T6620] Kernel Offset: disabled [ 160.999793][ T6620] Rebooting in 86400 seconds..