last executing test programs: 15.39502198s ago: executing program 3 (id=39): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = gettid() gettid() sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) connect$llc(0xffffffffffffffff, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) 14.986932623s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x7, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newnexthop={0x24, 0x68, 0x309, 0x0, 0x0, {}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mount(0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x68, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x0, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x40) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) r4 = fsopen(&(0x7f0000000300)='smb3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000c00)='sec\x00', &(0x7f0000000d00)='krb5\x00', 0x0) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='0000:00:1d.0', 0xc) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$VFAT_IOCTL_READDIR_BOTH(0xffffffffffffffff, 0x82187201, &(0x7f0000000500)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, 0x0, 0x8400) close(r5) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x8080, 0xa0a93ab7ccbc716c) getpid() r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="485de80010000d0428bd7000fcdbff2500008000", @ANYRES32=r7, @ANYBLOB="10000000000000003fd69924595b85d462726964676500001800028005001900840000000c000e"], 0x48}}, 0x4084) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 12.257400754s ago: executing program 3 (id=52): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x1a1040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000280012800b0001006d61637365630000180002800c0001000100000000000000050009000000000008000500", @ANYBLOB="cf1d7baf2015c99e6d4f5f57b46bdd5c6203dc9ab55a0dcf4fc420b65edada4f81353e7e27c333695df8ff12d0b5cff0f1e5abf19dc488be56775687b3c6e1536844b0c67ae23dd4ba01b24fcc9095270df7abc4059fb0f542"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000003e400"/20, @ANYRES32=r6, @ANYBLOB="04040000008002004000128008000100736974003400028005000500090000000600080023000000060011004e23000008000200ac14"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 11.320080393s ago: executing program 1 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x9769}}]}]}]}, 0x50}}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', '', [{0x20, '\':,M'}]}, 0x9) mkdirat(r1, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev/ttyACM0\x00', &(0x7f0000000240)='cpuset\x00', 0x800095, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0', 0x1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x2, 0x1) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {0x10}, {}, @queue={0x0, {0x7a120}}}], 0x1c) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) sendto(r4, 0x0, 0x0, 0x20000040, 0x0, 0x0) sendto$phonet(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) get_mempolicy(0x0, &(0x7f00000009c0), 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x2) syz_usb_control_io(r3, 0x0, 0x0) 9.067273292s ago: executing program 5 (id=71): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(&(0x7f00000000c0), 0xc) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) 8.541871844s ago: executing program 4 (id=74): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) mkdir(&(0x7f0000000040)='my_configfs\x00', 0xc) mount(0x0, &(0x7f0000000100)='my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='my_configfs/usb_gadget/g1\x00', 0x1ff) openat$dir(0xffffffffffffff9c, &(0x7f0000000140)='my_configfs/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x101800, 0x101) 8.464587789s ago: executing program 5 (id=75): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000540)=[@in6={0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x1ff}]}, &(0x7f0000000140)=0x10) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)) syz_emit_ethernet(0x3a, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) syz_usb_connect$uac2(0x5, 0x8e, &(0x7f0000000000)=ANY=[@ANYBLOB="12015002000000081e04003040000102030109027c000301032004080b000201072007090400000001012000092401ff03071c00060c24030101010101"], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=@dellink={0x34, 0x11, 0x1, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x8500, 0x2}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syzkaller0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x0) 7.454040607s ago: executing program 2 (id=76): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a00060008021100"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 7.411838243s ago: executing program 1 (id=78): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)="e5971b1e2fbd641ffae0eaf5a6c670a973724bdd2fa755c3160e970b200c6bdbae0f88fc30ddda2adae7f5b7ff3b5d4022583318e5d8b982d15986f083c114f5a271d2fbc51d13c04c6a99446037bccff55daac2dab18de7", 0x58) 7.364867108s ago: executing program 4 (id=79): syz_open_dev$dri(&(0x7f0000000080), 0xa00, 0x801) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfd', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 7.140666007s ago: executing program 3 (id=80): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) syz_usb_connect(0x2, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400ff0160291d000905", @ANYRES8=r1, @ANYBLOB="79a9"], 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0), 0x801, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) timer_delete(r3) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r4 = userfaultfd(0x801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x9164, 0x1000, 0x1, 0x359}, &(0x7f00000002c0), &(0x7f0000ff4000), 0x0) syz_clone(0x500, 0x0, 0x0, 0x0, 0x0, 0x0) write$rfkill(r2, &(0x7f0000000080)={0x0, 0x1, 0x3, 0x3, 0xfd}, 0x8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f00000013c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000001400)={0x3c, r6, 0x637, 0x70bd25, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x1c, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x2}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x2}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004c010}, 0x4004800) write$rfkill(r2, &(0x7f0000000340)={0x6, 0x0, 0x3, 0x0, 0x1}, 0x8) syz_open_dev$usbmon(0x0, 0x8002, 0xa2000) r7 = syz_open_dev$audion(&(0x7f00000002c0), 0x3, 0x1) write$P9_RVERSION(r7, &(0x7f0000002200)=ANY=[], 0xfffffcd9) close_range(r0, 0xffffffffffffffff, 0x0) 7.080939103s ago: executing program 1 (id=81): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x9, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) socket$netlink(0x10, 0x3, 0x13) r3 = openat$vimc2(0xffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$XFS_IOC_FSGEOMETRY_V1(r3, 0x806c5864, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='io\x00') pread64(r4, &(0x7f0000000100)=""/48, 0x3c, 0x100000000004) syz_usb_connect(0x2, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e131f8104c1302007eac0102030109021b0001000000000904000001098b7500090583", @ANYRES8], 0x0) r5 = openat$mice(0xffffffffffffff9c, &(0x7f0000000240), 0xc0000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001200)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) syz_open_dev$usbmon(&(0x7f0000000000), 0x0, 0x101000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="28000000100001000000000000000000852d4549a38d7379c60000000000000008001cff68"], 0x28}], 0x1, 0x0, 0x0, 0xb305e06d8ab48277}, 0x0) ioctl$XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000080)={0x10, 0x126, 0x7ff, 0x401, 0x8}) socket$inet6_sctp(0xa, 0x1, 0x84) r7 = io_uring_setup(0x115c, &(0x7f0000000440)={0x0, 0x8270, 0x40, 0x3, 0x117}) io_uring_register$IORING_REGISTER_BUFFERS(r7, 0x0, &(0x7f0000000640)=[{0x0}], 0x178) 7.021828266s ago: executing program 2 (id=82): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) r1 = getpid() syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(0x0, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') r3 = syz_open_dev$video4linux(&(0x7f0000000000), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r3, 0xc040564a, &(0x7f00000000c0)) mount$9p_fd(0x0, &(0x7f0000000300)='.\x00', 0x0, 0x2000090, &(0x7f00000006c0)=ANY=[]) mprotect(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x6) mount$fuse(0x0, 0x0, 0x0, 0x820810, 0x0) r4 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x40001, 0x0) ioctl$BLKZEROOUT(r4, 0x127f, &(0x7f0000000240)={0xf400, 0x1000000}) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r5 = openat$dir(0xffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x0) r6 = openat(r5, &(0x7f0000000100)='./file0\x00', 0x101003, 0x153) kcmp$KCMP_EPOLL_TFD(r1, 0x0, 0x7, r0, &(0x7f0000000040)={r6, r6}) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x13, &(0x7f0000000280)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @printk={@lu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}, @generic={0xe, 0x4, 0x7, 0x40, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) 6.997539573s ago: executing program 0 (id=83): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) 6.894575546s ago: executing program 4 (id=84): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'bridge_slave_1\x00'}) write(r1, &(0x7f0000000400)='0x5678', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) write(r2, &(0x7f0000000140)="e5971b1e2fbd641ffae0eaf5a6c670a973724bdd2fa755c3160e970b200c6bdbae0f88fc30ddda2adae7f5b7ff3b5d4022583318e5d8b982d15986f083c114f5a271d2fbc51d13c04c6a99446037bccff55daac2dab18de7", 0x58) write(0xffffffffffffffff, &(0x7f0000000900)='3\n', 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) 5.725906754s ago: executing program 0 (id=85): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000500)={r2, 0x0, 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, 0x0, 0x0}) openat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x44040}, 0x800) 5.724255044s ago: executing program 4 (id=86): syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.428737515s ago: executing program 2 (id=87): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) 4.237161154s ago: executing program 5 (id=88): mount(&(0x7f0000000000)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./cgroup\x00', 0x0, 0x410, &(0x7f0000000100)='barrier') 4.236300355s ago: executing program 4 (id=89): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff00004071041e080001000000010902270001010080320904000003ff000000070581034000010705820200020007050302"], 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/ttyUSB0\x00', 0x2, 0x0) syz_usb_control_io(r0, 0x0, 0x0) ioctl$TIOCMSET(r1, 0x5418, 0x0) 4.194555129s ago: executing program 0 (id=90): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000400)=ANY=[@ANYRESOCT=r0, @ANYRESHEX=r0], &(0x7f0000000000)='GPL\x00', 0x2, 0xaf, &(0x7f0000000140)=""/175, 0x41100, 0x23, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x87}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000000002) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) sched_setscheduler(r1, 0x1, &(0x7f00000003c0)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000e00)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = add_key$user(&(0x7f0000000380), &(0x7f0000000000)={'syz', 0x0}, &(0x7f00000007c0)="6755d7d7969fb9fc1becea875e2f11d27cd624d936e00e9591d0e6add3afff549497460125d514a706536572d8e85457582b518a3e88828de6fefa1fd65795bb2b2d6c69683820ded3ba58dbb55c09d7cf1d1418a28cdf560988a26af009f69abfd9b656a40acd80fc9fab1d5eb220afa398e7cccf9c1f98633237980417acfbe4f0c8c2bfb98622b1ccd04004f6e6e3c840c34ebe49be1e03d1156bc0c79f306c5d9f", 0xa3, 0xfffffffffffffffe) r5 = add_key$user(&(0x7f0000000200), &(0x7f00000005c0), &(0x7f00000000c0), 0x390, 0xfffffffffffffffd) r6 = add_key$user(0x0, &(0x7f0000006c00)={'syz', 0x3}, &(0x7f0000000980), 0x0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000100)={r4, r5, r6}, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000000), &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000240)="bc30a071d8bcb8794f5d8e1334b133b0cc64874f1a44052e038135", 0x1b, 0xfffffffffffffffe) syz_open_dev$video4linux(0x0, 0x3, 0x42583) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000080)={r7}, 0xc) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r8, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r8, 0xc0045006, &(0x7f0000000040)=0xc) ioctl$SNDCTL_DSP_SETFMT(r8, 0xc0045005, &(0x7f0000000640)=0x10) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@can_newroute={0x26c, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {0x1d, 0x1, 0x2}, [@CGW_CS_CRC8={0x11e, 0x6, {0x3, 0x1, 0x58, 0x2, 0xff, "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", 0x0, "5c8d03000000000000002a5e15c8a95d29e5b2ea"}}, @CGW_MOD_XOR={0x15, 0x3, {{{0x3, 0x1}, 0x1, 0x3, 0x0, 0x0, "54831bdbae1d82b3"}, 0x7}}, @CGW_CS_CRC8={0x11e, 0x6, {0x68, 0x54, 0x4a, 0x7, 0x5, "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", 0x1, "798088d20d3f2464edba999c4ae849b3a80d5b48"}}]}, 0x26c}}, 0x240448c8) 3.753873403s ago: executing program 2 (id=91): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x50, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2180}, [@IFLA_IFNAME={0x14, 0x3, 'veth1_to_hsr\x00'}, @IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x80000001, 0x9769}}]}]}]}, 0x50}}, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write$binfmt_script(r1, &(0x7f00000007c0)={'#! ', '', [{0x20, '\':,M'}]}, 0x9) mkdirat(r1, &(0x7f0000000000)='./dev\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev/ttyACM0\x00', &(0x7f0000000240)='cpuset\x00', 0x800095, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/fail_page_alloc/min-order\x00', 0x2, 0x0) write(r2, &(0x7f0000000500)='0', 0x1) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r3 = syz_usb_connect(0x0, 0x55, &(0x7f0000000180)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000100)={0x7fffffff, [0xd], 0x3b}, 0x10) openat(0xffffffffffffff9c, 0x0, 0x2, 0x1) r4 = socket$phonet(0x23, 0x2, 0x1) r5 = syz_open_dev$vim2m(&(0x7f0000000080), 0xffe, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r5, 0xc0145608, &(0x7f0000000040)={0x8, 0x1, 0x4, 0x0, 0x80}) socket$inet_udp(0x2, 0x2, 0x0) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0x62d81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f0000000040)={0x0, 0x0, 0x0, 'queue0\x00'}) write$sndseq(r6, &(0x7f00000001c0)=[{0x23, 0x0, 0x0, 0x0, @tick, {0x10}, {}, @queue={0x0, {0x7a120}}}], 0x1c) ioctl$vim2m_VIDIOC_STREAMOFF(r5, 0x40045612, &(0x7f0000000000)=0x1) sendto(r4, 0x0, 0x0, 0x20000040, 0x0, 0x0) sendto$phonet(r4, 0x0, 0x0, 0xc000, 0x0, 0x0) get_mempolicy(0x0, &(0x7f00000009c0), 0x6, &(0x7f0000ffe000/0x2000)=nil, 0x2) syz_usb_control_io(r3, 0x0, 0x0) 3.534523199s ago: executing program 5 (id=92): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) 3.142846398s ago: executing program 5 (id=93): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000016c0), 0x1a1040, 0x0) ioctl$SOUND_MIXER_READ_VOLUME(r1, 0x40086603, &(0x7f0000000080)) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x1a, 0x14, &(0x7f00000002c0)=ANY=[@ANYRESHEX=r0, @ANYRES8=r0, @ANYRESDEC=r0], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz0\x00', 0x1ff) socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(0xffffffffffffffff, 0x0, 0xd0, 0x0, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000240)={0x1, 0x0, 0x14}, 0xc) setsockopt$MRT6_FLUSH(r4, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) mkdirat$cgroup(r3, &(0x7f0000000080)='syz1\x00', 0x1ff) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f00001e7000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x100, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'ip6gretap0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000010000506fcffffff8300000000000000", @ANYRES32=0x0, @ANYBLOB="0110000000000000280012800b0001006d61637365630000180002800c0001000100000000000000050009000000000008000500", @ANYBLOB="cf1d7baf2015c99e6d4f5f57b46bdd5c6203dc9ab55a0dcf4fc420b65edada4f81353e7e27c333695df8ff12d0b5cff0f1e5abf19dc488be56775687b3c6e1536844b0c67ae23dd4ba01b24fcc9095270df7abc4059fb0f542"], 0x50}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="6000000003e400"/20, @ANYRES32=r6, @ANYBLOB="04040000008002004000128008000100736974003400028005000500090000000600080023000000060011004e23000008000200ac14"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2.04235807s ago: executing program 3 (id=94): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000580)={0x20, 0x0, &(0x7f0000000500)=[@request_death, @decrefs={0x40046307, 0x3}, @decrefs], 0x0, 0x0, 0x0}) 1.467582273s ago: executing program 0 (id=95): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf251200000008000300", @ANYRES32=r1, @ANYBLOB="0a0006000802110000010000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x8854) 945.351075ms ago: executing program 0 (id=96): rseq(&(0x7f0000000180), 0x20, 0x2000000000000000, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) 815.791207ms ago: executing program 4 (id=97): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x0, 0x0, 0x0, 0x5c93067603d2de2a, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200000d0}, 0x94) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0xf9, 0x8, 0x4, 0x0, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}}, 0x10) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) r1 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x40002) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) ioctl$FE_GET_EVENT(r1, 0x80286f4e, 0x0) 767.996665ms ago: executing program 1 (id=98): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000040)={0xffffffff, "42fce3753785050006be000000000000000000560000000000000800"}) r1 = syz_io_uring_setup(0xf03, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x0, 0x51}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f0000000280)=@IORING_OP_POLL_ADD={0x6, 0x40, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x4110}, 0x1}) io_uring_enter(r1, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 519.973899ms ago: executing program 3 (id=99): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, 0x0, 0x0) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000080)={'bridge_slave_1\x00'}) write(r1, &(0x7f0000000400)='0x5678', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f00000000c0)) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) write(0xffffffffffffffff, &(0x7f0000000900)='3\n', 0x2) socket$nl_route(0x10, 0x3, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) 418.613631ms ago: executing program 1 (id=100): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 399.156833ms ago: executing program 2 (id=101): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0xa5) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x8042, 0x0) fcntl$setlease(r0, 0x400, 0x1) fcntl$setlease(r0, 0x400, 0x1) 153.918127ms ago: executing program 0 (id=102): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000280)="5767c331e895cd135c5b7feeffd9", 0x0, 0xba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_HANDLE(r2, 0xc01c5869, &(0x7f0000000500)={r2, 0x0, 0x400800, &(0x7f0000000440)={@align=0x3, {0x2, 0x4, 0x1, 0x502}}, 0x6, 0x0, 0x0}) openat(r3, &(0x7f0000000040)='./config/usb_gadget/g1/configs/c1.1\x00', 0x2c02, 0x160) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0xfffffffffffffffe, 0x1, 0x0, 0x0, 0x44040}, 0x800) 153.426756ms ago: executing program 1 (id=103): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x1, 0x2}, 0x4) syz_open_dev$usbfs(0x0, 0x76, 0x101301) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000019180)="97a1606ab58e71aafe5bbd52e840795961f2e9bf92796ccfdcc9d98f213a79f8ae9e01ffe3f8244b35cf18d01b8c6e180c3b4ea4621ea6b4c9288ef3adacdb4ab3164b48327ce7f5cd1500675135b589d0e2aee950702e249496924544e16375ed49effa0d77130827b59112bb1a75f51bf79b85d72479b725ea9ebc7cf8092aab09d83ec9ad5a1afaa8c319af9b98fb6db1acd8a1b2170fdbe041c9803d69426f4a5e803ec8d96f5c295c264ed29d47927ae4438cf7defb2e3536e4075b691cc208f41516c4a6212f4149ccb4") bpf$LINK_DETACH(0x22, &(0x7f0000000240)=r1, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) prctl$PR_SET_MM(0x41555856, 0xf7354000, &(0x7f0000ffa000/0x3000)=nil) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$usbfs(&(0x7f00000000c0), 0x76, 0x10bb41) r3 = socket$inet_tcp(0x2, 0x1, 0x0) set_robust_list(0x0, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x80c01) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) readv(r5, &(0x7f00000001c0)=[{0x0}], 0x1) close(0x3) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r4, 0xc0105303, &(0x7f00000000c0)={0xf7, 0x9, 0x6}) setsockopt$sock_int(r3, 0x1, 0x53, &(0x7f0000000000)=0x20, 0x4) 133.932565ms ago: executing program 2 (id=104): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0xefd, &(0x7f00000002c0)={0x0, 0xfffffffe, 0x2d1528cfe5a31ee9, 0x3, 0x255}, &(0x7f0000000100), 0x0, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r3, @ANYBLOB="010026bd7000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="0600cd00000000006c00330080200900080211000001080211000000505050505050"], 0x90}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 0s ago: executing program 5 (id=105): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x2004c040}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.201' (ED25519) to the list of known hosts. [ 94.116802][ T5592] cgroup: Unknown subsys name 'net' [ 94.234205][ T5592] cgroup: Unknown subsys name 'cpuset' [ 94.244186][ T5592] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.948902][ T5592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.173032][ T29] cfg80211: failed to load regulatory.db [ 98.661749][ T5620] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.669964][ T5620] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.678468][ T5620] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.690576][ T5622] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.700390][ T5622] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.710773][ T5623] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.714174][ T5622] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.719081][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.727869][ T5622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.734608][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.750156][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.751571][ T5628] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.758268][ T5623] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.766113][ T5622] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.780553][ T5622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.782478][ T5629] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.791793][ T5622] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.798722][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.802823][ T5622] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.809615][ T5629] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.818086][ T5622] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.825887][ T5629] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.837144][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.845281][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.849200][ T5622] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.853401][ T5629] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.863838][ T5622] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.873577][ T5617] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.880967][ T5617] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.881922][ T5629] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 100.849488][ T5622] Bluetooth: hci2: command tx timeout [ 100.928993][ T5622] Bluetooth: hci3: command tx timeout [ 100.929049][ T5615] Bluetooth: hci4: command tx timeout [ 100.941057][ T4922] Bluetooth: hci5: command tx timeout [ 100.947586][ T5620] Bluetooth: hci1: command tx timeout [ 101.007954][ T5620] Bluetooth: hci0: command tx timeout [ 101.323350][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.331642][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.341202][ T5609] bridge_slave_0: entered allmulticast mode [ 101.349926][ T5609] bridge_slave_0: entered promiscuous mode [ 101.414581][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.421951][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.432184][ T5609] bridge_slave_1: entered allmulticast mode [ 101.440616][ T5609] bridge_slave_1: entered promiscuous mode [ 101.628336][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.691669][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.806517][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.814700][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.823215][ T5608] bridge_slave_0: entered allmulticast mode [ 101.831329][ T5608] bridge_slave_0: entered promiscuous mode [ 101.839724][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.846945][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.854235][ T5625] bridge_slave_0: entered allmulticast mode [ 101.862379][ T5625] bridge_slave_0: entered promiscuous mode [ 101.915194][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.922563][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.930064][ T5608] bridge_slave_1: entered allmulticast mode [ 101.938066][ T5608] bridge_slave_1: entered promiscuous mode [ 101.945647][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.952858][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.960422][ T5625] bridge_slave_1: entered allmulticast mode [ 101.968606][ T5625] bridge_slave_1: entered promiscuous mode [ 101.978247][ T5609] team0: Port device team_slave_0 added [ 101.991815][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.999010][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.006282][ T5610] bridge_slave_0: entered allmulticast mode [ 102.014394][ T5610] bridge_slave_0: entered promiscuous mode [ 102.060056][ T5609] team0: Port device team_slave_1 added [ 102.074149][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.082006][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.089433][ T5610] bridge_slave_1: entered allmulticast mode [ 102.097230][ T5610] bridge_slave_1: entered promiscuous mode [ 102.221715][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.234470][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.257722][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.265016][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.273438][ T5607] bridge_slave_0: entered allmulticast mode [ 102.281513][ T5607] bridge_slave_0: entered promiscuous mode [ 102.303709][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.310969][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.318296][ T5611] bridge_slave_0: entered allmulticast mode [ 102.325959][ T5611] bridge_slave_0: entered promiscuous mode [ 102.336982][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.349573][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.359872][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.366873][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.393111][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.405894][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.413531][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.421244][ T5607] bridge_slave_1: entered allmulticast mode [ 102.429520][ T5607] bridge_slave_1: entered promiscuous mode [ 102.439894][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.450089][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.457235][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.465029][ T5611] bridge_slave_1: entered allmulticast mode [ 102.472976][ T5611] bridge_slave_1: entered promiscuous mode [ 102.506059][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.513319][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.539506][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.566723][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.678739][ T5608] team0: Port device team_slave_0 added [ 102.687285][ T5625] team0: Port device team_slave_0 added [ 102.696881][ T5625] team0: Port device team_slave_1 added [ 102.705705][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.717555][ T5610] team0: Port device team_slave_0 added [ 102.726784][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.738953][ T5608] team0: Port device team_slave_1 added [ 102.761299][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.773852][ T5610] team0: Port device team_slave_1 added [ 102.783287][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.913474][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.920847][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.947099][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.949109][ T5620] Bluetooth: hci2: command tx timeout [ 102.989566][ T5611] team0: Port device team_slave_0 added [ 102.996159][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.003674][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.029912][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.030038][ T5620] Bluetooth: hci1: command tx timeout [ 103.040544][ T4922] Bluetooth: hci5: command tx timeout [ 103.040597][ T4922] Bluetooth: hci4: command tx timeout [ 103.040631][ T4922] Bluetooth: hci3: command tx timeout [ 103.052611][ T5609] hsr_slave_0: entered promiscuous mode [ 103.069698][ T5609] hsr_slave_1: entered promiscuous mode [ 103.086050][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.093385][ T5620] Bluetooth: hci0: command tx timeout [ 103.099050][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.125296][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.138753][ T5607] team0: Port device team_slave_0 added [ 103.145488][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.152578][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.179143][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.194971][ T5611] team0: Port device team_slave_1 added [ 103.201921][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.209188][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.235561][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.259991][ T5607] team0: Port device team_slave_1 added [ 103.266456][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.273456][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.299578][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.396723][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.403791][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.430365][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.516864][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.523925][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.553720][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.586467][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.594389][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.620860][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.688938][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.696003][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.722039][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.743183][ T5608] hsr_slave_0: entered promiscuous mode [ 103.750837][ T5608] hsr_slave_1: entered promiscuous mode [ 103.757121][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 103.763459][ T5608] Cannot create hsr debugfs directory [ 103.777773][ T5625] hsr_slave_0: entered promiscuous mode [ 103.784784][ T5625] hsr_slave_1: entered promiscuous mode [ 103.791771][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 103.797512][ T5625] Cannot create hsr debugfs directory [ 103.876605][ T5610] hsr_slave_0: entered promiscuous mode [ 103.883463][ T5610] hsr_slave_1: entered promiscuous mode [ 103.890064][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 103.895826][ T5610] Cannot create hsr debugfs directory [ 103.997398][ T5611] hsr_slave_0: entered promiscuous mode [ 104.004089][ T5611] hsr_slave_1: entered promiscuous mode [ 104.010634][ T5611] debugfs: 'hsr0' already exists in 'hsr' [ 104.016371][ T5611] Cannot create hsr debugfs directory [ 104.100382][ T5607] hsr_slave_0: entered promiscuous mode [ 104.107115][ T5607] hsr_slave_1: entered promiscuous mode [ 104.113703][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 104.119762][ T5607] Cannot create hsr debugfs directory [ 104.738084][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.753513][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.789078][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.800401][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.809146][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.821767][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.843580][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.855804][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.927947][ T5610] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.945391][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.961815][ T5610] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.972421][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.980812][ T5610] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.993733][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.002436][ T5610] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.009423][ T5620] Bluetooth: hci2: command tx timeout [ 105.018492][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.088191][ T5615] Bluetooth: hci4: command tx timeout [ 105.089886][ T5620] Bluetooth: hci3: command tx timeout [ 105.093689][ T4922] Bluetooth: hci5: command tx timeout [ 105.099548][ T5615] Bluetooth: hci1: command tx timeout [ 105.164869][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 105.175945][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.183164][ T5620] Bluetooth: hci0: command tx timeout [ 105.195085][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 105.205507][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.230128][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 105.241954][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.250841][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 105.262208][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.377556][ T5625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.389519][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.414957][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.424051][ T5625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.435170][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.452827][ T5625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.464134][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.474239][ T5625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.485125][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.605660][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.621195][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.653169][ T5611] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 105.666883][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.682809][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.690233][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.708254][ T5611] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 105.722109][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.745077][ T5611] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 105.759685][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.770482][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.777629][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.795652][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.816475][ T5611] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 105.828985][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.890799][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.898309][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.966739][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.974040][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.998352][ T5607] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 106.010689][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.031449][ T5607] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.044160][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.053614][ T5607] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.063933][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.081319][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.097485][ T5607] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.109336][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.187429][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.271331][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.278652][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.332413][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.339616][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.366559][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.533946][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.598008][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.618524][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.625786][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.655445][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.662756][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.790063][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.841646][ T140] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.848892][ T140] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.896949][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.942168][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.949424][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.069875][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.099195][ T5620] Bluetooth: hci2: command tx timeout [ 107.134372][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.141605][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.169045][ T5620] Bluetooth: hci3: command tx timeout [ 107.174700][ T5620] Bluetooth: hci1: command tx timeout [ 107.182728][ T4922] Bluetooth: hci5: command tx timeout [ 107.188427][ T5615] Bluetooth: hci4: command tx timeout [ 107.248643][ T5615] Bluetooth: hci0: command tx timeout [ 107.265848][ T1114] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.273043][ T1114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.486337][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.726557][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 107.842410][ T5609] veth0_vlan: entered promiscuous mode [ 107.931521][ T5609] veth1_vlan: entered promiscuous mode [ 108.125523][ T5610] veth0_vlan: entered promiscuous mode [ 108.240439][ T5610] veth1_vlan: entered promiscuous mode [ 108.275997][ T5609] veth0_macvtap: entered promiscuous mode [ 108.345409][ T5609] veth1_macvtap: entered promiscuous mode [ 108.390266][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.472706][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.544229][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.591179][ T5610] veth0_macvtap: entered promiscuous mode [ 108.641270][ T140] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.664937][ T5610] veth1_macvtap: entered promiscuous mode [ 108.685258][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.884502][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.903364][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.955614][ T5608] veth0_vlan: entered promiscuous mode [ 108.980773][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.003794][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.087475][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.119942][ T140] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.141177][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.167791][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.224980][ T5608] veth1_vlan: entered promiscuous mode [ 109.287978][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.329534][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.374005][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.383764][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.398825][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.428329][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442123][ T5625] veth0_vlan: entered promiscuous mode [ 109.566839][ T5625] veth1_vlan: entered promiscuous mode [ 109.590733][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.629395][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.655245][ T5609] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 109.670002][ T37] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.697415][ T5611] veth0_vlan: entered promiscuous mode [ 109.720925][ T5608] veth0_macvtap: entered promiscuous mode [ 109.774581][ T5608] veth1_macvtap: entered promiscuous mode [ 109.802463][ T5611] veth1_vlan: entered promiscuous mode [ 109.941961][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 109.943496][ T5625] veth0_macvtap: entered promiscuous mode [ 109.954768][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.965235][ T5841] warning: `syz.1.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 109.990227][ T5625] veth1_macvtap: entered promiscuous mode [ 110.011428][ T30] audit: type=1800 audit(1786369888.184:2): pid=5841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2" name="enable" dev="configfs" ino=7891 res=0 errno=0 [ 110.027570][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.086647][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.129506][ T5607] veth0_vlan: entered promiscuous mode [ 110.209897][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.228526][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.282216][ T5611] veth0_macvtap: entered promiscuous mode [ 110.306893][ T5607] veth1_vlan: entered promiscuous mode [ 110.323066][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.341450][ T5611] veth1_macvtap: entered promiscuous mode [ 110.365697][ T5846] ======================================================= [ 110.365697][ T5846] WARNING: The mand mount option has been deprecated and [ 110.365697][ T5846] and is ignored by this kernel. Remove the mand [ 110.365697][ T5846] option from the mount to silence this warning. [ 110.365697][ T5846] ======================================================= [ 110.473447][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.487185][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.495876][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 110.535610][ T728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.567601][ T728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.630332][ T5607] veth0_macvtap: entered promiscuous mode [ 110.678488][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 110.686635][ T9] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 110.698861][ T57] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.704596][ T9] usb 2-1: config 0 has no interfaces? [ 110.708883][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.721767][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.732160][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.732471][ T5607] veth1_macvtap: entered promiscuous mode [ 110.740710][ T9] usb 2-1: Product: syz [ 110.757168][ T9] usb 2-1: Manufacturer: syz [ 110.764373][ T9] usb 2-1: SerialNumber: syz [ 110.769061][ T57] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.808948][ T37] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.818124][ T9] usb 2-1: config 0 descriptor?? [ 110.854341][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.880966][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.926761][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.985973][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.004534][ T728] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.024883][ T728] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.093562][ T9] usb 2-1: USB disconnect, device number 2 [ 111.145154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.153942][ T728] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.173413][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.208036][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.308585][ T57] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.338109][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.373191][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.469240][ T57] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.508664][ T57] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.717022][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.725615][ T728] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.766147][ T728] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.769183][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.781179][ T728] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.940397][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.989040][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.999442][ T57] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.069759][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.113672][ T57] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.257049][ T5869] Mass Storage Function, version: 2009/09/11 [ 112.266291][ T5869] LUN: removable file: (no medium) [ 112.342399][ T30] audit: type=1800 audit(1786369890.484:3): pid=5869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.12" name="file" dev="configfs" ino=9070 res=0 errno=0 [ 112.388741][ T5873] 9pnet_virtio: no channels available for device syz [ 112.411164][ T5620] Bluetooth: hci5: command 0x0405 tx timeout [ 112.425508][ T57] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.104629][ T30] audit: type=1800 audit(1786369891.264:4): pid=5875 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.14" name="enable" dev="configfs" ino=9436 res=0 errno=0 [ 113.883754][ T5899] netlink: 4 bytes leftover after parsing attributes in process `syz.1.22'. [ 114.228802][ C0] Unknown status report in ack skb [ 114.346738][ T5910] veth1_to_hsr: entered promiscuous mode [ 114.420121][ T5759] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 114.609057][ T5759] usb 3-1: Using ep0 maxpacket: 8 [ 114.633364][ T5759] usb 3-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 114.659346][ T29] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 114.665679][ T5759] usb 3-1: config 0 has no interfaces? [ 114.770158][ T30] audit: type=1800 audit(1786369892.934:5): pid=5919 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.30" name="file" dev="configfs" ino=9134 res=0 errno=0 [ 114.836093][ T5921] 9pnet_virtio: no channels available for device syz [ 115.033860][ T29] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 115.352892][ T29] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 115.471870][ T5759] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.483255][ T5759] usb 3-1: Product: syz [ 115.499703][ T5759] usb 3-1: Manufacturer: syz [ 115.504456][ T5759] usb 3-1: SerialNumber: syz [ 115.515954][ T5759] usb 3-1: config 0 descriptor?? [ 115.725453][ T29] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 115.805896][ T5759] usb 3-1: USB disconnect, device number 2 [ 115.988395][ T5910] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 116.934435][ C0] Unknown status report in ack skb [ 117.376235][ T5957] netlink: 8 bytes leftover after parsing attributes in process `syz.3.42'. [ 117.387683][ T5957] netlink: 'syz.3.42': attribute type 14 has an invalid length. [ 117.729860][ T57] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.929774][ T728] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.207907][ T57] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.251795][ T57] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.344544][ T30] audit: type=1800 audit(1786369896.524:6): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.45" name="file" dev="configfs" ino=9562 res=0 errno=0 [ 118.401189][ T5966] 9pnet_virtio: no channels available for device syz [ 119.323156][ T5759] usb 1-1: USB disconnect, device number 2 [ 120.253059][ C0] Unknown status report in ack skb [ 120.603737][ T5999] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 120.755839][ T6001] veth1_to_hsr: entered promiscuous mode [ 121.032716][ T6008] syz.5.64 uses obsolete (PF_INET,SOCK_PACKET) [ 121.070414][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 121.335998][ T5759] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 121.594096][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.272172][ T5759] cdc_acm 2-1:1.0: ttyACM0: USB ACM device [ 122.495624][ T6001] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 123.295032][ C0] Unknown status report in ack skb [ 123.305214][ T30] audit: type=1800 audit(1786369901.484:7): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.71" name="enable" dev="configfs" ino=10347 res=0 errno=0 [ 123.657523][ T30] audit: type=1800 audit(1786369901.824:8): pid=6040 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.74" name="file" dev="configfs" ino=10356 res=0 errno=0 [ 124.504029][ T5338] usb 2-1: USB disconnect, device number 3 [ 124.647970][ T923] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 124.764637][ T6046] netlink: 28 bytes leftover after parsing attributes in process `syz.2.76'. [ 124.819471][ T923] usb 6-1: Using ep0 maxpacket: 8 [ 124.836931][ T923] usb 6-1: unable to get BOS descriptor or descriptor too short [ 124.838975][ T6050] 9pnet_fd: Insufficient options for proto=fd [ 124.863035][ T923] usb 6-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 124.882544][ T923] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 124.924774][ T923] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.952614][ T923] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.979646][ T923] usb 6-1: Product: syz [ 124.995542][ T923] usb 6-1: Manufacturer: syz [ 125.015879][ T923] usb 6-1: SerialNumber: syz [ 126.469724][ T5338] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.268942][ T5338] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 127.458306][ T29] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 127.490864][ T5338] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 4 [ 127.582781][ T5338] usb 4-1: config 0 interface 0 has no altsetting 0 [ 127.611495][ T5338] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 127.635088][ T5338] usb 4-1: Product: syz [ 127.656817][ T5338] usb 4-1: Manufacturer: syz [ 127.679278][ T5338] usb 4-1: SerialNumber: syz [ 127.685512][ T923] usb 6-1: 0:1 : does not exist [ 127.710590][ T29] usb 2-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 127.726246][ T923] usb 6-1: unit 0 not found! [ 127.739492][ T5338] usb 4-1: config 0 descriptor?? [ 127.804957][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 127.864713][ T29] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 127.918677][ T30] audit: type=1800 audit(1786369906.084:9): pid=6083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.87" name="enable" dev="configfs" ino=9791 res=0 errno=0 [ 127.987708][ T29] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.004514][ T29] usb 2-1: Product: syz [ 128.042786][ T29] usb 2-1: Manufacturer: syz [ 128.077169][ T29] usb 2-1: SerialNumber: syz [ 128.125524][ T29] usb 2-1: config 0 descriptor?? [ 128.156925][ T5338] usb 4-1: selecting invalid altsetting 0 [ 128.178583][ T923] usb 6-1: USB disconnect, device number 2 [ 128.268810][ T5759] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 128.471314][ T5759] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 128.549880][ T5759] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 128.573852][ T6094] veth1_to_hsr: entered promiscuous mode [ 128.586996][ T5759] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 128.620721][ T5759] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.647341][ T6096] Zero length message leads to an empty skb [ 128.777085][ T5759] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 128.898599][ T5760] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 129.001011][ T5759] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 129.111474][ T5760] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 129.157323][ T5760] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.208095][ T5913] udevd[5913]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 129.558209][ T5760] cdc_acm 3-1:1.0: ttyACM0: USB ACM device [ 129.750371][ T5760] usb 4-1: USB disconnect, device number 2 [ 129.791764][ T6094] vimc link validate: Sensor A:src:640x480 (0x33424752, 8, 0, 0, 0) Raw Capture 0:snk:640x480 (0x33424752, 8, 0, 0, 0) [ 130.830645][ T6113] netlink: 28 bytes leftover after parsing attributes in process `syz.0.95'. [ 131.063810][ T923] usb 5-1: USB disconnect, device number 2 [ 131.135686][ T29] usb 2-1: can't set config #0, error -71 [ 131.177353][ T29] usb 2-1: USB disconnect, device number 4 [ 131.248884][ T923] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 131.289935][ T923] spcp8x5 5-1:1.0: device disconnected [ 131.522771][ T923] usb 3-1: USB disconnect, device number 3 [ 132.368532][ C1] ================================================================== [ 132.376735][ C1] BUG: KASAN: slab-use-after-free in llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 132.386144][ C1] Read of size 1 at addr ffff88802b6a6010 by task kworker/1:1H/1631 [ 132.394229][ C1] [ 132.396567][ C1] CPU: 1 UID: 0 PID: 1631 Comm: kworker/1:1H Tainted: G L syzkaller #0 PREEMPT(full) [ 132.396627][ C1] Tainted: [L]=SOFTLOCKUP [ 132.396641][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 132.396669][ C1] Workqueue: events_highpri snd_vmidi_output_work [ 132.396746][ C1] Call Trace: [ 132.396758][ C1] [ 132.396773][ C1] dump_stack_lvl+0x100/0x190 [ 132.396819][ C1] print_report+0x13d/0x4b0 [ 132.396881][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.396927][ C1] ? __virt_addr_valid+0x239/0x430 [ 132.396973][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 132.397014][ C1] kasan_report+0xdf/0x1c0 [ 132.397059][ C1] ? llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 132.397109][ C1] llc_conn_ac_send_sabme_cmd_p_set_x+0x442/0x470 [ 132.397151][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.397200][ C1] ? __pfx_llc_conn_ac_send_sabme_cmd_p_set_x+0x10/0x10 [ 132.397239][ C1] llc_conn_state_process+0x3ec/0x1480 [ 132.397287][ C1] llc_conn_tmr_common_cb+0x2d4/0x880 [ 132.397341][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 132.397383][ C1] call_timer_fn+0x19a/0x610 [ 132.397419][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 132.397451][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.397500][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 132.397541][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.397583][ C1] ? mark_held_locks+0x40/0x70 [ 132.397627][ C1] ? __pfx_llc_conn_ack_tmr_cb+0x10/0x10 [ 132.397671][ C1] __run_timers+0x757/0xb00 [ 132.397730][ C1] ? __pfx___run_timers+0x10/0x10 [ 132.397778][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.397832][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.397882][ C1] ? _raw_spin_lock_irq+0x45/0x50 [ 132.397937][ C1] run_timer_base+0x114/0x190 [ 132.397981][ C1] ? __pfx_run_timer_base+0x10/0x10 [ 132.398024][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.398077][ C1] run_timer_softirq+0x1a/0x50 [ 132.398120][ C1] handle_softirqs+0x1ea/0x9b0 [ 132.398172][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 132.398220][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.398269][ C1] ? _raw_spin_unlock+0x28/0x50 [ 132.398318][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.398363][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 132.398432][ C1] __irq_exit_rcu+0x162/0x210 [ 132.398482][ C1] irq_exit_rcu+0x9/0x30 [ 132.398531][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 132.398588][ C1] [ 132.398601][ C1] [ 132.398615][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.398661][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 132.398724][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 96 90 29 f6 48 89 df e8 1e e0 29 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 ed 18 f6 65 8b 05 ee e6 a6 08 85 c0 74 16 5b [ 132.398764][ C1] RSP: 0018:ffffc90005e17b38 EFLAGS: 00000246 [ 132.398795][ C1] RAX: 0000000000000002 RBX: ffff888032805038 RCX: 0000000000000040 [ 132.398822][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5870 RDI: ffffffff8c3ff580 [ 132.398849][ C1] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000000 [ 132.398874][ C1] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000000000293 [ 132.398898][ C1] R13: ffff888032805038 R14: 0000000000000001 R15: ffff888032897000 [ 132.398940][ C1] snd_rawmidi_transmit+0xf1/0x130 [ 132.398987][ C1] snd_vmidi_output_work+0x111/0x390 [ 132.399055][ C1] ? __pfx_snd_vmidi_output_work+0x10/0x10 [ 132.399122][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.399170][ C1] ? rcu_is_watching+0x12/0xc0 [ 132.399234][ C1] process_one_work+0xa23/0x1940 [ 132.399285][ C1] ? __pfx_process_one_work+0x10/0x10 [ 132.399324][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.399381][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.399434][ C1] worker_thread+0x5ef/0xe50 [ 132.399480][ C1] ? __pfx_worker_thread+0x10/0x10 [ 132.399521][ C1] ? kthread+0x13a/0x450 [ 132.399554][ C1] ? __pfx_worker_thread+0x10/0x10 [ 132.399592][ C1] kthread+0x370/0x450 [ 132.399625][ C1] ? __pfx_kthread+0x10/0x10 [ 132.399661][ C1] ret_from_fork+0x72b/0xd50 [ 132.399722][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 132.399777][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 132.399825][ C1] ? __switch_to+0x800/0x10f0 [ 132.399861][ C1] ? __switch_to_asm+0x39/0x70 [ 132.399918][ C1] ? __pfx_kthread+0x10/0x10 [ 132.399954][ C1] ret_from_fork_asm+0x1a/0x30 [ 132.400023][ C1] [ 132.400037][ C1] [ 132.839220][ C1] Allocated by task 6121: [ 132.843573][ C1] kasan_save_stack+0x30/0x50 [ 132.848379][ C1] kasan_save_track+0x14/0x30 [ 132.853147][ C1] __kasan_kmalloc+0xaa/0xb0 [ 132.857763][ C1] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 132.863173][ C1] llc_sap_open+0x120/0x3b0 [ 132.867698][ C1] llc_ui_autobind.isra.0+0x2ae/0x580 [ 132.873134][ C1] llc_ui_connect+0x582/0xdb0 [ 132.877818][ C1] __sys_connect_file+0x141/0x1a0 [ 132.882858][ C1] __sys_connect+0x141/0x170 [ 132.887457][ C1] __x64_sys_connect+0x72/0xb0 [ 132.892230][ C1] do_syscall_64+0x115/0x870 [ 132.896844][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.902746][ C1] [ 132.905066][ C1] Freed by task 0: [ 132.908777][ C1] kasan_save_stack+0x30/0x50 [ 132.913606][ C1] kasan_save_track+0x14/0x30 [ 132.918375][ C1] kasan_save_free_info+0x3b/0x70 [ 132.923676][ C1] __kasan_slab_free+0x5f/0x80 [ 132.928442][ C1] __rcu_free_sheaf_prepare+0x5d/0x2f0 [ 132.933914][ C1] rcu_free_sheaf+0x1a/0xe0 [ 132.938437][ C1] rcu_core+0x5a2/0x10d0 [ 132.942694][ C1] handle_softirqs+0x1ea/0x9b0 [ 132.947476][ C1] __irq_exit_rcu+0x162/0x210 [ 132.952170][ C1] irq_exit_rcu+0x9/0x30 [ 132.956426][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 132.962076][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 132.968063][ C1] [ 132.970377][ C1] The buggy address belongs to the object at ffff88802b6a6000 [ 132.970377][ C1] which belongs to the cache kmalloc-2k of size 2048 [ 132.984431][ C1] The buggy address is located 16 bytes inside of [ 132.984431][ C1] freed 2048-byte region [ffff88802b6a6000, ffff88802b6a6800) [ 132.998322][ C1] [ 133.000643][ C1] The buggy address belongs to the physical page: [ 133.007045][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88802b6a2000 pfn:0x2b6a0 [ 133.017119][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 133.025629][ C1] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 133.034140][ C1] page_type: f5(slab) [ 133.038126][ C1] raw: 00fff00000000240 ffff88813fe24000 ffffea0000a5ec10 ffffea0001e01210 [ 133.046715][ C1] raw: ffff88802b6a2000 0000000800080005 00000000f5000000 0000000000000000 [ 133.055309][ C1] head: 00fff00000000240 ffff88813fe24000 ffffea0000a5ec10 ffffea0001e01210 [ 133.063992][ C1] head: ffff88802b6a2000 0000000800080005 00000000f5000000 0000000000000000 [ 133.072842][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 133.081617][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 133.090312][ C1] page dumped because: kasan: bad access detected [ 133.096717][ C1] page_owner tracks the page as allocated [ 133.102505][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5610, tgid 5610 (syz-executor), ts 104181300719, free_ts 66201160868 [ 133.123980][ C1] post_alloc_hook+0xfd/0x120 [ 133.128691][ C1] get_page_from_freelist+0xf48/0x3530 [ 133.134179][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 133.140094][ C1] new_slab+0xa2/0x640 [ 133.144266][ C1] refill_objects+0xe3/0x410 [ 133.148872][ C1] __pcs_replace_empty_main+0x376/0x680 [ 133.154434][ C1] __kmalloc_cache_noprof+0x479/0x6c0 [ 133.159848][ C1] rtnl_newlink+0x126/0x2380 [ 133.164460][ C1] rtnetlink_rcv_msg+0x95e/0xe90 [ 133.169417][ C1] netlink_rcv_skb+0x159/0x420 [ 133.174192][ C1] netlink_unicast+0x585/0x850 [ 133.178970][ C1] netlink_sendmsg+0x8b0/0xda0 [ 133.183743][ C1] __sys_sendto+0x48b/0x4e0 [ 133.188380][ C1] __x64_sys_sendto+0xe0/0x1c0 [ 133.193158][ C1] do_syscall_64+0x115/0x870 [ 133.197862][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.203767][ C1] page last free pid 5362 tgid 5362 stack trace: [ 133.210085][ C1] __free_frozen_pages+0x79f/0x1090 [ 133.215324][ C1] qlist_free_all+0x47/0xf0 [ 133.219871][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 133.225359][ C1] __kasan_slab_alloc+0x69/0x90 [ 133.230302][ C1] __kmalloc_cache_noprof+0x265/0x6c0 [ 133.235694][ C1] tomoyo_find_next_domain+0xc6e/0x2010 [ 133.241252][ C1] tomoyo_bprm_check_security+0x12d/0x1d0 [ 133.247155][ C1] security_bprm_check+0x87/0x1e0 [ 133.252183][ C1] bprm_execve+0x84b/0x1730 [ 133.256701][ C1] do_execveat_common.isra.0+0x4a5/0x580 [ 133.262790][ C1] __x64_sys_execve+0x93/0xd0 [ 133.267484][ C1] do_syscall_64+0x115/0x870 [ 133.272094][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 133.278104][ C1] [ 133.280505][ C1] Memory state around the buggy address: [ 133.286149][ C1] ffff88802b6a5f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.294207][ C1] ffff88802b6a5f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 133.302532][ C1] >ffff88802b6a6000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.310586][ C1] ^ [ 133.315166][ C1] ffff88802b6a6080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.323244][ C1] ffff88802b6a6100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 133.331316][ C1] ================================================================== [ 133.346048][ C1] Disabling lock debugging due to kernel taint [ 133.389603][ T30] audit: type=1800 audit(1786369911.574:10): pid=6138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.103" name="enable" dev="configfs" ino=9891 res=0 errno=0 [ 133.455246][ C1] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 133.473923][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.480284][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.783502][ C0] Unknown status report in ack skb