last executing test programs: 14.687522441s ago: executing program 4 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/vm/drop_caches\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='3\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/devices/system/memory/memory35/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='offline\n', 0x8) 6.397708483s ago: executing program 3 (id=36): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x800) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) 5.256687171s ago: executing program 1 (id=40): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000440)='640\n', 0x4) write(0xffffffffffffffff, &(0x7f00000008c0)="3336300a08395817d23684a439848be961ac0e6e165a1f6b5aa757732c2e81cbbeeea370bf94792c6ec3ae625afa847bd12bb66277d9ed001c068a2fc9724150ee668478dac8dfe4aed393ddeb264f4c6af1678e7d422900000000000000000000000000eaf8b440f174", 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='460800\n\x00', 0x8) 5.240875482s ago: executing program 3 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:01.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:03.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:10.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:1f.0\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:1f.2\x00', 0x0, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) 5.150914604s ago: executing program 1 (id=42): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 5.037306457s ago: executing program 3 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/snd_hda_intel\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200)=""/4096, 0x1000) 5.014415587s ago: executing program 1 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/psmouse/parameters/synaptics_intertouch\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/serio/devices/serio1/protocol\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='synaptics-smbus', 0xf) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/serio/devices/serio1/drvctl\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='reconnect\n', 0xa) close(r2) 4.858841441s ago: executing program 3 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) 4.689284825s ago: executing program 3 (id=49): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x324, 0x2d4, 0x0, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4, 0x48}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(0xffffffffffffffff, 0xc0205826, &(0x7f0000000980)={0x5, 0x1d7, 0x6e, 0x0, 0x4}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000010010000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r4 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r4, 0x2007ffb) sendfile(r0, r4, 0x0, 0x1000000201002) 4.636708437s ago: executing program 4 (id=50): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) truncate(&(0x7f0000000000)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r2, 0x114, 0x7, &(0x7f0000000340)={@generic={0x88f303904c695b34, "bcac4c60c6a5927b9af7454c7649e8bcecc721693603cc5098dee5b71d6b334034b91fcc2e3f101d81e951af1d6487b68285d7095ec6b74cee5a42c47c19bfb0a221d79fb94b158a3f864885ac2bc93b6407e5b7274b1ba67b3059da239420e0f70a6c6cf1d1a0dcb57c5963d22a172dcb4ce3e718ca09ec9a5fe6328189"}, {0x0}, 0x0, 0x32}, 0xa0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r1, 0x1, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0xd, @bearer=@udp='udp:syz2\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x48044}, 0x40000) mmap$IORING_OFF_SQES(0x0, 0x1000, 0x2, 0x109031, 0xffffffffffffffff, 0x10000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket(0xf, 0x5, 0x7fff) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r4, 0x800448d7, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000280)=0x4) ioctl$sock_SIOCOUTQNSD(r3, 0x40106153, &(0x7f0000000000)) futex$unlock_wake_list32(&(0x7f0000002940)=0xfffffffe, 0x601, 0x200, 0x0, &(0x7f00000029c0)=0xfd, 0x4) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000200)=[@in={0x2, 0x4e20, @private=0xa010101}, @in6={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xb6f}, @in6={0xa, 0x4e22, 0x9, @loopback, 0x5}, @in={0x2, 0x4e23, @local}, @in={0x2, 0x4e21, @private=0xa010101}], 0x68) getsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, &(0x7f0000000140), &(0x7f0000000180)=0x4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r5, 0xc) r6 = socket$netlink(0x10, 0x3, 0x4) writev(r6, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a09000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 4.578863908s ago: executing program 1 (id=51): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x800) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000400)='./myconfig/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) 3.605335422s ago: executing program 0 (id=54): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640\n', 0x4) write(0xffffffffffffffff, &(0x7f00000008c0)="3336300a08395817d23684a439848be961ac0e6e165a1f6b5aa757732c2e81cbbeeea370bf94792c6ec3ae625afa847bd12bb66277d9ed001c068a2fc9724150ee668478dac8dfe4aed393ddeb264f4c6af1678e7d422900000000000000000000000000eaf8b440f174", 0x6a) r2 = openat(r0, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='333333\n\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='460800\n\x00', 0x8) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x3, 0xffff, 0x0, 0xfb5, 0x17661de8}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r4) symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00') 3.575590023s ago: executing program 1 (id=56): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 3.572456463s ago: executing program 4 (id=57): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./disk\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)='00', 0x1) r1 = syz_open_dev$loop(&(0x7f0000000200), 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mount(&(0x7f0000000300)=@loop={'/dev/loop', 0x0}, &(0x7f0000000400)='./mnt\x00', &(0x7f0000000500)='qnx6\x00', 0x1, &(0x7f0000000600)='mmi_fs\x00') 3.565477803s ago: executing program 3 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/suspend/parameters/pm_test_delay\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0\n', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='freeze\n', 0x7) close(r2) 3.465448895s ago: executing program 0 (id=59): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./s\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./s\x00', &(0x7f0000000480)='sysfs\x00', 0x0, 0x0) readlinkat(0xffffffffffffff9c, &(0x7f00000004c0)='./s/class/sound/card0/device/driver\x00', &(0x7f0000000000)=""/1024, 0x400) 3.463980635s ago: executing program 1 (id=60): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000940)={0x0, 0x0, 0x4, "80000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.347647748s ago: executing program 4 (id=61): r0 = syz_usb_connect$uac3(0x3, 0xab, &(0x7f0000000040)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x10, 0x103d, 0x100, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x99, 0x3, 0x1, 0xd8, 0x10, 0xc, {0x8, 0xb, 0x0, 0x3, 0x1, 0x1, 0x30, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0x10, 0x1e, 0x7}, [@input_terminal={0x14, 0x24, 0x2, 0x1, 0x201, 0x0, 0x1, 0x0, 0x1}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0xe, 0x0, 0x3, {0xa, 0x25, 0x25, 0x7fffffff, 0xc, 0x180}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x1, 0x8000, 0x1, 0x2, 0x6, 0x4a, 0x9, 0x10}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x7f, 0x4, 0x0, {0xa, 0x25, 0x25, 0x400, 0x8f, 0x2}}}}}}}}]}}, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x7, "07002401010002"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x7, "07002401010002"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x7, "07002401010002"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000240)={0x20, 0x6, 0x7, "07002401010002"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.347482898s ago: executing program 0 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='nfsd\x00', &(0x7f00000000c0)='./nfsd\x00', &(0x7f0000000140)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='tcp 2049\n', 0x9) close(r0) 3.234799791s ago: executing program 0 (id=65): sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002e40)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000200)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4}}], 0x1, 0x4000000) read(0xffffffffffffffff, &(0x7f00000003c0)=""/68, 0x44) 3.027006126s ago: executing program 0 (id=69): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640\n', 0x4) write(0xffffffffffffffff, &(0x7f00000008c0)="3336300a08395817d23684a439848be961ac0e6e165a1f6b5aa757732c2e81cbbeeea370bf94792c6ec3ae625afa847bd12bb66277d9ed001c068a2fc9724150ee668478dac8dfe4aed393ddeb264f4c6af1678e7d422900000000000000000000000000eaf8b440f174", 0x6a) r2 = openat(r0, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='333333\n\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='460800\n\x00', 0x8) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) ioctl$FS_IOC_FSSETXATTR(r3, 0x401c5820, &(0x7f0000000000)={0x3, 0xffff, 0x0, 0xfb5, 0x17661de8}) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f8, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') syz_genetlink_get_family_id$tipc(&(0x7f0000000780), r4) symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00') 2.333265173s ago: executing program 0 (id=70): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x88002, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0xd) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) fcntl$lock(r1, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2da, &(0x7f00000005c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3d}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000080)={0x2, 0x0, [{0x10, 0x0, 0x4}, {0x10, 0x0, 0x8}]}) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000002800)=@nat={'nat\x00', 0x670, 0x5, 0x324, 0x2d4, 0x0, 0xffffffff, 0x0, 0x0, 0x378, 0x378, 0xffffffff, 0x378, 0x378, 0x5, 0x0, {[{{@uncond, 0x0, 0x70, 0xa4, 0x48}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @rand_addr=0x64010101, @loopback, @gre_key=0x3, @port=0x4e22}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x1b, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, @port=0x4e20, @icmp_id=0x65}}}}, {{@ip={@loopback, @private=0xa010102, 0xff, 0x0, 'veth0_to_batadv\x00', 'batadv_slave_1\x00', {}, {}, 0x0, 0x3, 0x4}, 0x0, 0x70, 0xa4}, @MASQUERADE={0x34, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @remote, @icmp_id=0x67, @gre_key=0xe63e}}}}, {{@uncond, 0x0, 0x70, 0xa4}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @multicast2, @port=0x4e23, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x380) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$XFS_IOC_GETBMAP(r1, 0xc0205826, &(0x7f0000000980)={0x5, 0x1d7, 0x6e, 0x0, 0x4}) connect$rxrpc(0xffffffffffffffff, &(0x7f0000000100)=@in4={0x21, 0x80, 0x2, 0x10, {0x2, 0x8003, @multicast2}}, 0x24) sendmmsg(0xffffffffffffffff, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000010010000"], 0x10, 0xe000}, 0x5}], 0x1, 0x0) r5 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r5, 0x2007ffb) sendfile(r0, r5, 0x0, 0x1000000201002) 1.356017946s ago: executing program 4 (id=75): openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) socket$kcm(0x10, 0x400000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000000), &(0x7f0000000200), &(0x7f0000000000)=[0x2], 0x0, 0x1}) 1.22243498s ago: executing program 4 (id=77): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040c016df05000100000001090212000101008032090400000003000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$radio(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_QUERYCAP(r0, 0x80685600, &(0x7f0000000200)) r1 = syz_open_dev$radio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) r2 = syz_open_dev$radio(&(0x7f0000000080), 0x2, 0x2) ioctl$VIDIOC_QUERYCAP(r2, 0x80685600, &(0x7f0000000200)) r3 = syz_open_dev$radio(&(0x7f00000000c0), 0x3, 0x2) ioctl$VIDIOC_QUERYCAP(r3, 0x80685600, &(0x7f0000000200)) 1.106934533s ago: executing program 2 (id=81): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, 0x0, 0x0) fcntl$setstatus(r0, 0x4, 0x800) openat(0xffffffffffffffff, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000080)={0x0, 0xf5, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000104000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) close(r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, 0x0, &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000440)='44100,48000,88200,96000,176400,', 0x1f) symlinkat(&(0x7f0000000580)='./myconfig/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./myconfig/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f00000000c0)={'pcmda12\x00', [0x100, 0x7, 0x2, 0x1000, 0xf, 0x5, 0x79, 0x3, 0x80008, 0x6, 0xffffffff, 0x1, 0x800008, 0x5, 0x100, 0x101, 0xfffffffb, 0x9, 0x7f, 0x7fffffff, 0x89, 0xca9f, 0xfffffffe, 0x20001e58, 0xffffffff, 0xf39e, 0x3, 0x8, 0xa6b8, 0x0, 0xfffffff8]}) 248.326824ms ago: executing program 2 (id=82): mkdir(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x43) mknodat$loop(r0, &(0x7f0000000200)='./file1\x00', 0x800, 0x1) r1 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x718bb647156ec3b7) chdir(&(0x7f0000000000)='./bus\x00') linkat(r1, &(0x7f0000000100)='./file1\x00', r1, &(0x7f0000000180)='./file0\x00', 0x1000) unlink(&(0x7f00000004c0)='./file1\x00') rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file1\x00') 204.348085ms ago: executing program 2 (id=83): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/config.gz\x00', 0x0, 0x0) 123.089207ms ago: executing program 2 (id=84): openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) 122.894367ms ago: executing program 2 (id=85): mkdir(&(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nfsd\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='1\n', 0x2) close(r0) 0s ago: executing program 2 (id=86): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000440)='640\n', 0x4) write(0xffffffffffffffff, &(0x7f00000008c0)="3336300a08395817d23684a439848be961ac0e6e165a1f6b5aa757732c2e81cbbeeea370bf94792c6ec3ae625afa847bd12bb66277d9ed001c068a2fc9724150ee668478dac8dfe4aed393ddeb264f4c6af1678e7d422900000000000000000000000000eaf8b440f174", 0x6a) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='460800\n\x00', 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.21' (ED25519) to the list of known hosts. [ 72.756376][ T4174] cgroup: Unknown subsys name 'net' [ 72.889198][ T4174] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.572458][ T4174] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 76.257955][ T4189] chnl_net:caif_netlink_parms(): no params data found [ 76.300596][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 76.349483][ T4188] chnl_net:caif_netlink_parms(): no params data found [ 76.360205][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 76.413239][ T4187] chnl_net:caif_netlink_parms(): no params data found [ 76.521883][ T4189] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.533196][ T4189] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.542176][ T4189] device bridge_slave_0 entered promiscuous mode [ 76.584417][ T4189] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.592024][ T4189] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.601174][ T4189] device bridge_slave_1 entered promiscuous mode [ 76.613004][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.620274][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.630602][ T4186] device bridge_slave_0 entered promiscuous mode [ 76.638706][ T4188] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.648578][ T4188] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.657876][ T4188] device bridge_slave_0 entered promiscuous mode [ 76.679297][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.687152][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.696354][ T4190] device bridge_slave_0 entered promiscuous mode [ 76.708907][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.716213][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.724347][ T4190] device bridge_slave_1 entered promiscuous mode [ 76.732901][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.740520][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.749348][ T4186] device bridge_slave_1 entered promiscuous mode [ 76.757330][ T4188] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.765889][ T4188] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.776896][ T4188] device bridge_slave_1 entered promiscuous mode [ 76.818994][ T4189] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.845348][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.868639][ T4189] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.879506][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.891573][ T4188] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.913511][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.923602][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.931396][ T4187] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.940620][ T4187] device bridge_slave_0 entered promiscuous mode [ 76.950800][ T4187] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.958732][ T4187] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.966996][ T4187] device bridge_slave_1 entered promiscuous mode [ 76.981430][ T4188] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.006595][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.041708][ T4186] team0: Port device team_slave_0 added [ 77.059337][ T4188] team0: Port device team_slave_0 added [ 77.079991][ T4190] team0: Port device team_slave_0 added [ 77.090004][ T4189] team0: Port device team_slave_0 added [ 77.097154][ T4186] team0: Port device team_slave_1 added [ 77.111735][ T4188] team0: Port device team_slave_1 added [ 77.119949][ T4190] team0: Port device team_slave_1 added [ 77.128207][ T4187] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.150447][ T4187] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.163869][ T4189] team0: Port device team_slave_1 added [ 77.196108][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.203442][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.232317][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.277949][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.285636][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.314731][ T4188] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.328594][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.337206][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.373924][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.396216][ T4187] team0: Port device team_slave_0 added [ 77.403533][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.413705][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.458022][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.476783][ T4188] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.486099][ T4188] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.519282][ T4188] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.543007][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.551404][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.582886][ T4189] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.598487][ T4187] team0: Port device team_slave_1 added [ 77.607855][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.616002][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.644674][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.664052][ T4189] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.672180][ T4189] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.701510][ T4189] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.740070][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.748398][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.778458][ T4187] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.809911][ T4186] device hsr_slave_0 entered promiscuous mode [ 77.817895][ T4186] device hsr_slave_1 entered promiscuous mode [ 77.844891][ T4187] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.853372][ T4187] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.882469][ T4187] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.895008][ T7] Bluetooth: hci1: command 0x0409 tx timeout [ 77.907308][ T7] Bluetooth: hci4: command 0x0409 tx timeout [ 77.913894][ T7] Bluetooth: hci3: command 0x0409 tx timeout [ 77.920517][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 77.929940][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 77.939157][ T4188] device hsr_slave_0 entered promiscuous mode [ 77.947015][ T4188] device hsr_slave_1 entered promiscuous mode [ 77.954250][ T4188] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.963759][ T4188] Cannot create hsr debugfs directory [ 78.016212][ T4190] device hsr_slave_0 entered promiscuous mode [ 78.024792][ T4190] device hsr_slave_1 entered promiscuous mode [ 78.032135][ T4190] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.040432][ T4190] Cannot create hsr debugfs directory [ 78.051558][ T4189] device hsr_slave_0 entered promiscuous mode [ 78.059757][ T4189] device hsr_slave_1 entered promiscuous mode [ 78.067045][ T4189] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.077816][ T4189] Cannot create hsr debugfs directory [ 78.101979][ T4187] device hsr_slave_0 entered promiscuous mode [ 78.109986][ T4187] device hsr_slave_1 entered promiscuous mode [ 78.117975][ T4187] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.128275][ T4187] Cannot create hsr debugfs directory [ 78.491544][ T4188] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.503462][ T4188] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.514874][ T4188] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.530609][ T4188] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 78.592226][ T4187] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.611527][ T4187] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.625275][ T4187] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.645045][ T4187] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.685794][ T4186] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.716449][ T4186] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.733890][ T4186] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.745165][ T4186] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.809320][ T4188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.836057][ T4189] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.846736][ T4189] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.858763][ T4189] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.868545][ T4189] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.917243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 78.935421][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.976906][ T4188] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.987546][ T4190] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.999023][ T4190] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.010522][ T4190] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.022080][ T4190] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.037075][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.047780][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.058284][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.067815][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.101392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.133988][ T4187] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.158564][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.168445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.178797][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.186747][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.198135][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.208615][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.219089][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.228466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.238390][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.263385][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.280014][ T4189] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.297189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.310777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.324241][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 79.334052][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.345655][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.355513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.369729][ T4188] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.393588][ T4187] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.408653][ T4189] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.424073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 79.436214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.446098][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.455295][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.464335][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 79.473807][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 79.503364][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.522686][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.540815][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.550090][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.557796][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.573435][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.591138][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.600819][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.608119][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.618620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.629260][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.638701][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.646616][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.656002][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.664602][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.682958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.693506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.705096][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.713941][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.725958][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.785024][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 79.798145][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 79.807906][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.815244][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.827518][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 79.838601][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.849067][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 79.859343][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.870311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.881016][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 79.891552][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 79.904352][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 79.917042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 79.942966][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 79.956314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.966983][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 79.972937][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 79.981291][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 79.991992][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 79.992632][ T13] Bluetooth: hci2: command 0x041b tx timeout [ 80.003153][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.008983][ T13] Bluetooth: hci3: command 0x041b tx timeout [ 80.014588][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.021610][ T13] Bluetooth: hci4: command 0x041b tx timeout [ 80.036189][ T13] Bluetooth: hci1: command 0x041b tx timeout [ 80.037133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.058342][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.087607][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.104557][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.116105][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.125597][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.139983][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.149570][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.159758][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.172673][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.182180][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.193731][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.203631][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.218337][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.227866][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.237425][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.246123][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.255562][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.269709][ T4187] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.281289][ T4187] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.307056][ T4189] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.320589][ T4186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.342079][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.355621][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.373493][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.381874][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 80.394198][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 80.404370][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.414972][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.429814][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.458925][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 80.499390][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 80.511138][ T3059] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.518669][ T3059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.537899][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.548385][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.557759][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 80.570199][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 80.581866][ T3059] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.589199][ T3059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.597448][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 80.606770][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 80.621130][ T4188] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.663764][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 80.683589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 80.706303][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 80.733346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 80.752191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 80.788654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 80.800035][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.817638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.839367][ T4190] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 80.857410][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.895556][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 80.906216][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 80.916213][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 80.926250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 80.935373][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 80.945465][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 80.956294][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 80.966974][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 80.976154][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 80.988075][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.997752][ T4187] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.041666][ T4189] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.063978][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.071944][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.084108][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.094234][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.120033][ T4188] device veth0_vlan entered promiscuous mode [ 81.138314][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.149026][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.158587][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.169087][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.231498][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.248376][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.260681][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.276365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.293936][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.304321][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.318944][ T4188] device veth1_vlan entered promiscuous mode [ 81.341871][ T4186] device veth0_vlan entered promiscuous mode [ 81.353965][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.362179][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.371748][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.386845][ T4187] device veth0_vlan entered promiscuous mode [ 81.405401][ T4187] device veth1_vlan entered promiscuous mode [ 81.433277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.443446][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.454264][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.463756][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.475898][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.484153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.510567][ T4186] device veth1_vlan entered promiscuous mode [ 81.524932][ T4189] device veth0_vlan entered promiscuous mode [ 81.533256][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.543838][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.556669][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.567800][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.580017][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.589315][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.599659][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.609125][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.625271][ T4188] device veth0_macvtap entered promiscuous mode [ 81.665395][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.686962][ T4189] device veth1_vlan entered promiscuous mode [ 81.698909][ T4188] device veth1_macvtap entered promiscuous mode [ 81.728864][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.744758][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.755989][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.767764][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.777223][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.788294][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.798907][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.811354][ T4187] device veth0_macvtap entered promiscuous mode [ 81.839758][ T4187] device veth1_macvtap entered promiscuous mode [ 81.878255][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.890399][ T4186] device veth0_macvtap entered promiscuous mode [ 81.911236][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.926078][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.959879][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.967801][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.976737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.985742][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.994686][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.003497][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.012215][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.021463][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.030915][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.046157][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.055343][ T13] Bluetooth: hci1: command 0x040f tx timeout [ 82.064756][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.075160][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.078770][ T13] Bluetooth: hci4: command 0x040f tx timeout [ 82.085629][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.091522][ T13] Bluetooth: hci3: command 0x040f tx timeout [ 82.107624][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.108034][ T13] Bluetooth: hci2: command 0x040f tx timeout [ 82.119250][ T4186] device veth1_macvtap entered promiscuous mode [ 82.129995][ T13] Bluetooth: hci0: command 0x040f tx timeout [ 82.144157][ T4189] device veth0_macvtap entered promiscuous mode [ 82.159793][ T4188] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.169918][ T4188] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.179312][ T4188] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.190755][ T4188] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.206725][ T4187] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.234124][ T4187] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.249101][ T4187] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.264028][ T4189] device veth1_macvtap entered promiscuous mode [ 82.283457][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.295140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.304784][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.314165][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.324255][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.338447][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.351782][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.363581][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.380143][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.399121][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.414596][ T4187] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.428770][ T4187] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.440250][ T4187] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.452046][ T4187] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.485925][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.497610][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.508796][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.519670][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.531969][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.544436][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.558480][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.570100][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.582827][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.605784][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.617407][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.628540][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.642356][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.653780][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.670517][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.686282][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.711113][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.721537][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.731354][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.744036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.758818][ T4186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.768297][ T4186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.777961][ T4186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.789316][ T4186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.816347][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.828088][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.839321][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.850744][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.863066][ T4189] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.874303][ T4189] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.886962][ T4189] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.909347][ T4190] device veth0_vlan entered promiscuous mode [ 82.933730][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.948463][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.959500][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.969215][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.978190][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.986693][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.000639][ T4189] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.010497][ T4189] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.021848][ T4189] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.032159][ T4189] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.090936][ T4190] device veth1_vlan entered promiscuous mode [ 83.241717][ T3059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.251018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.261419][ T3059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.268999][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.281675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.290983][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.302204][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.315619][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.326579][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.343719][ T4190] device veth0_macvtap entered promiscuous mode [ 83.358619][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.369041][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.392613][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.400796][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.403252][ T4190] device veth1_macvtap entered promiscuous mode [ 83.444566][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.457296][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.468335][ T472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.477849][ T472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.488541][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.503661][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.516857][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.529000][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.542311][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.553957][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.565977][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.578260][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.589809][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.606052][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.625231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.632141][ T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.639315][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.651794][ T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.658686][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.675934][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.687872][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.699830][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.710296][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.723599][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.735082][ T4190] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 83.745984][ T4190] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.758248][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.776229][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.788459][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.798258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.825231][ T4190] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.834488][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.834511][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.853430][ T4190] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.862773][ T4190] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.872029][ T4190] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.899643][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.953283][ T3059] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.961698][ T3059] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.999513][ T3059] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.040113][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.060013][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.123857][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.133342][ T4268] Bluetooth: hci2: command 0x0419 tx timeout [ 84.140295][ T4268] Bluetooth: hci3: command 0x0419 tx timeout [ 84.196779][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.222465][ T4268] Bluetooth: hci4: command 0x0419 tx timeout [ 84.234289][ T4274] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.258616][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.277933][ T4268] Bluetooth: hci1: command 0x0419 tx timeout [ 84.311472][ T472] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.320914][ T1328] Bluetooth: hci0: command 0x0419 tx timeout [ 84.353183][ T472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.365006][ T472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.203133][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.208248][ T4313] FAULT_INJECTION: forcing a failure. [ 87.208248][ T4313] name failslab, interval 1, probability 0, space 0, times 1 [ 87.311752][ T4320] overlayfs: failed to resolve './file0': -2 [ 87.311862][ T13] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 87.379984][ T4313] CPU: 0 PID: 4313 Comm: syz.3.15 Not tainted syzkaller #0 [ 87.387438][ T4313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 87.398053][ T4313] Call Trace: [ 87.401471][ T4313] [ 87.405143][ T4313] dump_stack_lvl+0x188/0x250 [ 87.410733][ T4313] ? show_regs_print_info+0x20/0x20 [ 87.416493][ T4313] ? load_image+0x410/0x410 [ 87.421411][ T4313] ? __might_sleep+0xf0/0xf0 [ 87.426663][ T4313] ? __lock_acquire+0x7d40/0x7d40 [ 87.431926][ T4313] ? mark_lock+0x94/0x320 [ 87.436605][ T4313] should_fail+0x383/0x4b0 [ 87.441182][ T4313] should_failslab+0x5/0x20 [ 87.446079][ T4313] slab_pre_alloc_hook+0x51/0xc0 [ 87.452454][ T4313] __kmalloc+0x6b/0x340 [ 87.457641][ T4313] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 87.465165][ T4313] tomoyo_realpath_from_path+0xed/0x5e0 [ 87.471443][ T4313] tomoyo_path_number_perm+0x251/0x6b0 [ 87.477662][ T4313] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 87.483713][ T4313] ? do_futex+0xdc2/0x12b0 [ 87.488631][ T4313] security_file_ioctl+0x6c/0xa0 [ 87.494634][ T4313] __se_sys_ioctl+0x48/0x170 [ 87.499823][ T4313] do_syscall_64+0x4c/0xa0 [ 87.504713][ T4313] ? clear_bhb_loop+0x30/0x80 [ 87.509980][ T4313] ? clear_bhb_loop+0x30/0x80 [ 87.515231][ T4313] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.521598][ T4313] RIP: 0033:0x7fcfcf914159 [ 87.526278][ T4313] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.547177][ T4313] RSP: 002b:00007fcfcdb6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 87.555988][ T4313] RAX: ffffffffffffffda RBX: 00007fcfcfb9bfa0 RCX: 00007fcfcf914159 [ 87.564503][ T4313] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 87.574049][ T4313] RBP: 00007fcfcf9ab06b R08: 0000000000000000 R09: 0000000000000000 [ 87.582241][ T4313] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 87.590608][ T4313] R13: 00007fcfcfb9c038 R14: 00007fcfcfb9bfa0 R15: 00007ffdf37c07b8 [ 87.599245][ T4313] [ 87.672405][ T4325] page:ffffea0004600000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x118000 [ 87.711108][ T4325] flags: 0x17ff00000001000(reserved|node=0|zone=2|lastcpupid=0x7ff) [ 87.749482][ T4325] raw: 017ff00000001000 ffffea0004600008 ffffea0004600008 0000000000000000 [ 87.786205][ T4325] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 87.957524][ T4325] page dumped because: unmovable page [ 88.230161][ T4325] page_owner info is not present (never set?) [ 88.548945][ T4313] ERROR: Out of memory at tomoyo_realpath_from_path. [ 88.569919][ T4321] ceph: No mds server is up or the cluster is laggy [ 88.570800][ T13] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 88.907201][ T13] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 89.445670][ T13] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 92.206199][ T4364] overlayfs: failed to resolve './file0': -2 [ 92.224076][ T4365] FAULT_INJECTION: forcing a failure. [ 92.224076][ T4365] name failslab, interval 1, probability 0, space 0, times 0 [ 92.302049][ T4365] CPU: 1 PID: 4365 Comm: syz.3.31 Not tainted syzkaller #0 [ 92.309526][ T4365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.319797][ T4365] Call Trace: [ 92.323219][ T4365] [ 92.326848][ T4365] dump_stack_lvl+0x188/0x250 [ 92.331963][ T4365] ? show_regs_print_info+0x20/0x20 [ 92.338755][ T4365] ? load_image+0x410/0x410 [ 92.344070][ T4365] ? __might_sleep+0xf0/0xf0 [ 92.349094][ T4365] ? __lock_acquire+0x7d40/0x7d40 [ 92.354331][ T4365] ? mark_lock+0x94/0x320 [ 92.358910][ T4365] should_fail+0x383/0x4b0 [ 92.363642][ T4365] should_failslab+0x5/0x20 [ 92.368669][ T4365] slab_pre_alloc_hook+0x51/0xc0 [ 92.374443][ T4365] __kmalloc+0x6b/0x340 [ 92.380161][ T4365] ? tomoyo_realpath_from_path+0xed/0x5e0 [ 92.386368][ T4365] tomoyo_realpath_from_path+0xed/0x5e0 [ 92.392389][ T4365] tomoyo_path_number_perm+0x251/0x6b0 [ 92.400129][ T4365] ? tomoyo_check_path_acl+0x1c0/0x1c0 [ 92.406629][ T4365] ? do_futex+0xdc2/0x12b0 [ 92.411784][ T4365] security_file_ioctl+0x6c/0xa0 [ 92.418473][ T4365] __se_sys_ioctl+0x48/0x170 [ 92.424743][ T4365] do_syscall_64+0x4c/0xa0 [ 92.429810][ T4365] ? clear_bhb_loop+0x30/0x80 [ 92.435622][ T4365] ? clear_bhb_loop+0x30/0x80 [ 92.441857][ T4365] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 92.449714][ T4365] RIP: 0033:0x7fcfcf914159 [ 92.455809][ T4365] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.477672][ T4365] RSP: 002b:00007fcfcdb6c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 92.487163][ T4365] RAX: ffffffffffffffda RBX: 00007fcfcfb9bfa0 RCX: 00007fcfcf914159 [ 92.495350][ T4365] RDX: 0000000000000000 RSI: 0000000000008933 RDI: 0000000000000006 [ 92.503538][ T4365] RBP: 00007fcfcf9ab06b R08: 0000000000000000 R09: 0000000000000000 [ 92.511514][ T4365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.519705][ T4365] R13: 00007fcfcfb9c038 R14: 00007fcfcfb9bfa0 R15: 00007ffdf37c07b8 [ 92.528082][ T4365] [ 92.531273][ C1] vkms_vblank_simulate: vblank timer overrun [ 92.548249][ T1108] cfg80211: failed to load regulatory.db [ 92.660803][ T4365] ERROR: Out of memory at tomoyo_realpath_from_path. [ 93.193276][ T4368] ceph: No mds server is up or the cluster is laggy [ 93.213748][ T4267] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 95.747342][ T4345] syz.1.22 (4345): drop_caches: 1 [ 96.781826][ T4402] overlayfs: failed to resolve './file1': -2 [ 96.993599][ T4407] input: PS/2 Generic Explorer Mouse as /devices/platform/i8042/serio1/input/input5 [ 97.132595][ T4319] syz.4.18 (4319): drop_caches: 1 [ 98.331433][ T4437] blk_update_request: I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 98.349304][ T4439] overlayfs: failed to resolve './file1': -2 [ 98.357531][ T4437] qnx6: Unable to read first mmi superblock [ 98.465187][ T4444] PM: suspend entry (s2idle) [ 98.665687][ T4444] Filesystems sync: 0.194 seconds [ 98.833512][ T4195] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 98.863111][ T1108] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 99.092767][ T4195] usb 2-1: Using ep0 maxpacket: 32 [ 99.162430][ T1108] usb 5-1: Using ep0 maxpacket: 16 [ 99.233627][ T4195] usb 2-1: config 0 has an invalid interface number: 184 but max is 0 [ 99.358334][ T4195] usb 2-1: config 0 has no interface number 0 [ 99.420370][ T4195] usb 2-1: config 0 interface 184 has no altsetting 0 [ 99.652743][ T4195] usb 2-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 99.671847][ T4195] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 99.689345][ T4195] usb 2-1: Product: syz [ 99.694137][ T4472] overlayfs: failed to resolve './file1': -2 [ 99.694597][ T4195] usb 2-1: Manufacturer: syz [ 99.707487][ T4195] usb 2-1: SerialNumber: syz [ 99.862457][ T1108] usb 5-1: unable to get BOS descriptor or descriptor too short [ 100.554505][ T4195] usb 2-1: config 0 descriptor?? [ 100.596567][ T4195] smsc75xx v1.0.0 [ 100.612573][ T1108] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 100.623238][ T1108] usb 5-1: can't read configurations, error -71 [ 100.782384][ T13] Bluetooth: hci0: command 0x0c1a tx timeout [ 100.785223][ T4444] Bluetooth: hci0: Timed out waiting for suspend events [ 100.831919][ T4444] Bluetooth: hci0: Suspend timeout bit: 4 [ 100.841057][ T4444] Bluetooth: hci0: Suspend timeout bit: 6 [ 100.864105][ T4444] Bluetooth: hci0: Suspend notifier action (3) failed: -110 [ 101.002654][ T1108] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 101.373995][ T1108] usb 5-1: New USB device found, idVendor=16c0, idProduct=05df, bcdDevice= 1.00 [ 101.398724][ T1108] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.634070][ T4497] overlayfs: failed to resolve './file1': -2 [ 101.770976][ T4504] svc: failed to register nfsdv3 RPC service (errno 111). [ 101.781436][ T4504] svc: failed to register nfsaclv3 RPC service (errno 111). [ 101.865739][ T4188] ================================================================== [ 101.874997][ T4188] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0 [ 101.883277][ T4188] Write of size 4 at addr ffff88805f92b050 by task syz-executor/4188 [ 101.892592][ T4188] [ 101.894942][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Not tainted syzkaller #0 [ 101.902935][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 101.913473][ T4188] Call Trace: [ 101.916796][ T4188] [ 101.920194][ T4188] dump_stack_lvl+0x188/0x250 [ 101.924924][ T4188] ? show_regs_print_info+0x20/0x20 [ 101.930650][ T4188] ? load_image+0x410/0x410 [ 101.935204][ T4188] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 101.940835][ T4188] ? rcu_lock_release+0x5/0x20 [ 101.945748][ T4188] print_address_description+0x60/0x2d0 [ 101.952206][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 101.958382][ T4188] kasan_report+0xdf/0x130 [ 101.962976][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 101.968983][ T4188] kasan_check_range+0x235/0x290 [ 101.974398][ T4188] nfsd_shutdown_threads+0x89/0x1a0 [ 101.979745][ T4188] nfsd_umount+0x3e/0xc0 [ 101.984508][ T4188] deactivate_locked_super+0x93/0xf0 [ 101.990722][ T4188] cleanup_mnt+0x426/0x4d0 [ 101.995894][ T4188] task_work_run+0x125/0x1a0 [ 102.000863][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 102.006758][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 102.012603][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 102.018323][ T4188] do_syscall_64+0x58/0xa0 [ 102.023445][ T4188] ? clear_bhb_loop+0x30/0x80 [ 102.028461][ T4188] ? clear_bhb_loop+0x30/0x80 [ 102.033377][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.039452][ T4188] RIP: 0033:0x7fa197713397 [ 102.044330][ T4188] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.065536][ T4188] RSP: 002b:00007ffd90dd2bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.075438][ T4188] RAX: 0000000000000000 RBX: 00007fa1977a84bb RCX: 00007fa197713397 [ 102.085134][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90dd2c70 [ 102.094587][ T4188] RBP: 00007ffd90dd2c70 R08: 00007ffd90dd3c70 R09: 00000000ffffffff [ 102.104075][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90dd3d00 [ 102.114871][ T4188] R13: 00007fa1977a84bb R14: 0000000000018dad R15: 00007ffd90dd3d40 [ 102.123449][ T4188] [ 102.127398][ T4188] [ 102.130923][ T4188] Allocated by task 4504: [ 102.136344][ T4188] __kasan_kmalloc+0xaf/0xe0 [ 102.141960][ T4188] __svc_create+0x60/0x9d0 [ 102.146888][ T4188] svc_create_pooled+0x62f/0x810 [ 102.152706][ T4188] nfsd_create_serv+0x2f9/0x700 [ 102.158416][ T4188] nfsd_svc+0x132/0x9e0 [ 102.162785][ T4188] write_threads+0x2ea/0x350 [ 102.167735][ T4188] nfsctl_transaction_write+0x105/0x150 [ 102.173812][ T4188] vfs_write+0x304/0xd70 [ 102.178438][ T4188] ksys_write+0x153/0x260 [ 102.182986][ T4188] do_syscall_64+0x4c/0xa0 [ 102.187942][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.196282][ T4188] [ 102.198993][ T4188] Freed by task 4504: [ 102.203618][ T4188] kasan_set_track+0x4b/0x70 [ 102.208799][ T4188] kasan_set_free_info+0x1f/0x40 [ 102.214013][ T4188] ____kasan_slab_free+0xd5/0x110 [ 102.219991][ T4188] slab_free_freelist_hook+0xec/0x170 [ 102.225807][ T4188] kfree+0xef/0x2a0 [ 102.229817][ T4188] nfsd_svc+0x7cf/0x9e0 [ 102.234592][ T4188] write_threads+0x2ea/0x350 [ 102.239645][ T4188] nfsctl_transaction_write+0x105/0x150 [ 102.246024][ T4188] vfs_write+0x304/0xd70 [ 102.250962][ T4188] ksys_write+0x153/0x260 [ 102.255571][ T4188] do_syscall_64+0x4c/0xa0 [ 102.260761][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.267146][ T4188] [ 102.269547][ T4188] The buggy address belongs to the object at ffff88805f92b000 [ 102.269547][ T4188] which belongs to the cache kmalloc-512 of size 512 [ 102.284656][ T4188] The buggy address is located 80 bytes inside of [ 102.284656][ T4188] 512-byte region [ffff88805f92b000, ffff88805f92b200) [ 102.288794][ T1108] usb 5-1: USB disconnect, device number 3 [ 102.299547][ T4188] The buggy address belongs to the page: [ 102.299588][ T4188] page:ffffea00017e4a00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f928 [ 102.299614][ T4188] head:ffffea00017e4a00 order:2 compound_mapcount:0 compound_pincount:0 [ 102.299629][ T4188] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 102.299658][ T4188] raw: 00fff00000010200 ffffea0000854a00 0000000200000002 ffff888016c41c80 [ 102.299673][ T4188] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 102.299682][ T4188] page dumped because: kasan: bad access detected [ 102.299690][ T4188] page_owner tracks the page as allocated [ 102.299697][ T4188] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 4189, ts 79935005706, free_ts 28712159407 [ 102.299724][ T4188] get_page_from_freelist+0x24f6/0x2670 [ 102.299751][ T4188] __alloc_pages+0x1ee/0x480 [ 102.413372][ T4188] new_slab+0xc0/0x4b0 [ 102.418281][ T4188] ___slab_alloc+0x807/0xdd0 [ 102.423811][ T4188] __kmalloc+0x11d/0x340 [ 102.429400][ T4188] fib6_info_alloc+0x2e/0xe0 [ 102.436052][ T4188] ip6_route_info_create+0x455/0x1220 [ 102.442595][ T4188] ip6_route_add+0x24/0x130 [ 102.447634][ T4188] addrconf_permanent_addr+0x6d0/0xa30 [ 102.454423][ T4188] addrconf_notify+0x827/0xf20 [ 102.460187][ T4188] raw_notifier_call_chain+0xcb/0x160 [ 102.466576][ T4188] __dev_notify_flags+0x194/0x300 [ 102.471985][ T4188] dev_change_flags+0xda/0x1a0 [ 102.477149][ T4188] do_setlink+0xca4/0x29d0 [ 102.481588][ T4188] rtnl_newlink+0x15bb/0x1920 [ 102.486569][ T4188] rtnetlink_rcv_msg+0x7f1/0xf10 [ 102.491684][ T4188] page last free stack trace: [ 102.497108][ T4188] free_unref_page_prepare+0x637/0x6c0 [ 102.502920][ T4188] free_unref_page+0x8f/0x2a0 [ 102.507914][ T4188] free_contig_range+0x96/0xf0 [ 102.513168][ T4188] destroy_args+0xef/0xa00 [ 102.517661][ T4188] debug_vm_pgtable+0x321/0x380 [ 102.523353][ T4188] do_one_initcall+0x272/0x730 [ 102.529519][ T4188] do_initcall_level+0x13d/0x1f0 [ 102.534912][ T4188] do_initcalls+0x4b/0x90 [ 102.539819][ T4188] kernel_init_freeable+0x3d5/0x560 [ 102.545960][ T4188] kernel_init+0x19/0x1b0 [ 102.550743][ T4188] ret_from_fork+0x1f/0x30 [ 102.555296][ T4188] [ 102.557784][ T4188] Memory state around the buggy address: [ 102.564150][ T4188] ffff88805f92af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.572929][ T4188] ffff88805f92af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 102.581677][ T4188] >ffff88805f92b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.590236][ T4188] ^ [ 102.598142][ T4188] ffff88805f92b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.610742][ T4188] ffff88805f92b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 102.620861][ T4188] ================================================================== [ 102.633152][ T4188] Disabling lock debugging due to kernel taint [ 102.648472][ T4188] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 102.658183][ T4188] CPU: 0 PID: 4188 Comm: syz-executor Tainted: G B syzkaller #0 [ 102.669661][ T4188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.681811][ T4188] Call Trace: [ 102.686438][ T4188] [ 102.689656][ T4188] dump_stack_lvl+0x188/0x250 [ 102.694546][ T4188] ? show_regs_print_info+0x20/0x20 [ 102.700192][ T4188] ? load_image+0x410/0x410 [ 102.705458][ T4188] panic+0x2f8/0x850 [ 102.709523][ T4188] ? bpf_jit_dump+0xd0/0xd0 [ 102.714223][ T4188] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 102.720822][ T4188] ? _raw_spin_unlock+0x40/0x40 [ 102.725879][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 102.731876][ T4188] check_panic_on_warn+0x80/0xa0 [ 102.737389][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 102.743269][ T4188] end_report+0x6d/0xf0 [ 102.747722][ T4188] kasan_report+0x102/0x130 [ 102.753117][ T4188] ? nfsd_shutdown_threads+0x89/0x1a0 [ 102.758974][ T4188] kasan_check_range+0x235/0x290 [ 102.764418][ T4188] nfsd_shutdown_threads+0x89/0x1a0 [ 102.771670][ T4188] nfsd_umount+0x3e/0xc0 [ 102.776999][ T4188] deactivate_locked_super+0x93/0xf0 [ 102.785294][ T4188] cleanup_mnt+0x426/0x4d0 [ 102.790103][ T4188] task_work_run+0x125/0x1a0 [ 102.794873][ T4188] exit_to_user_mode_loop+0x10f/0x130 [ 102.801469][ T4188] exit_to_user_mode_prepare+0xee/0x180 [ 102.807682][ T4188] syscall_exit_to_user_mode+0x16/0x40 [ 102.813553][ T4188] do_syscall_64+0x58/0xa0 [ 102.818962][ T4188] ? clear_bhb_loop+0x30/0x80 [ 102.823824][ T4188] ? clear_bhb_loop+0x30/0x80 [ 102.828815][ T4188] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 102.835850][ T4188] RIP: 0033:0x7fa197713397 [ 102.841392][ T4188] Code: a2 c7 05 5c 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 102.867724][ T4188] RSP: 002b:00007ffd90dd2bb8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 102.878048][ T4188] RAX: 0000000000000000 RBX: 00007fa1977a84bb RCX: 00007fa197713397 [ 102.886902][ T4188] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd90dd2c70 [ 102.895806][ T4188] RBP: 00007ffd90dd2c70 R08: 00007ffd90dd3c70 R09: 00000000ffffffff [ 102.904185][ T4188] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd90dd3d00 [ 102.913878][ T4188] R13: 00007fa1977a84bb R14: 0000000000018dad R15: 00007ffd90dd3d40 [ 102.923878][ T4188] [ 102.927750][ T4188] Kernel Offset: disabled [ 102.932527][ T4188] Rebooting in 86400 seconds..