last executing test programs: 24m49.838739138s ago: executing program 32 (id=20): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$sg(0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000140)={0x6}, 0x10) r2 = openat$drirender128(0xffffffffffffff9c, 0x0, 0x600, 0x0) ioctl$XFS_IOC_FREE_EOFBLOCKS(r2, 0x8080583a, 0x0) write(r1, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_io_uring_setup(0xefd, &(0x7f0000000140)={0x0, 0xaa32, 0x8, 0x1, 0x75}, &(0x7f0000000100)=0x0, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r7 = getpid() sched_setscheduler(r7, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, r3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r9, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r10, 0x0, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x64, 0x3, 0x300, 0x6e, 0xffffffad, 0x190, 0x190, 0x190, 0x268, 0x268, 0x268, 0x268, 0x268, 0x3, 0x0, {[{{@ip={@remote, @local={0xac, 0x14, 0xd}, 0x0, 0x0, 'caif0\x00', 'ip6tnl0\x00'}, 0x0, 0x130, 0x190, 0xffffffc5, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "bdc74c01369df17d17ac76fa5f9b3bfa0c34430d864040bc25b2b73a59aa6ecab6b1d2cc05e3182f64694d7d05fb8b8c8f56627a54f905d564eeeb8334f650ca0f3c44f7fda4d20a55050342ea85ecc8838e7088de33582f36a0a375bb7008adc297a5ece1bb2df53d17bef26bb6f800", 0x7f, 0x2}}]}, @common=@SET={0x60}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, 0x0, 0x0, 'team0\x00', 'team0\x00'}, 0x0, 0x98, 0xd8, 0x0, {}, [@common=@inet=@set1={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x360) syz_io_uring_submit(r4, r5, r6, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x40, 0x0, r3, 0x0, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0, 0x80, 0x1}) socket$igmp(0x2, 0x3, 0x2) syz_emit_vhci(&(0x7f00000002c0)=ANY=[@ANYBLOB="043e130600c8000700ffff"], 0x16) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="674cca217bb4236c83f33ba287e7879c0674862fcf3cc1e67376c6c857085ea5", @ANYRES32=r5], 0x28}, 0x1, 0x0, 0x0, 0x4c000}, 0x20000000) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000280)='\x00', 0x0) write$UHID_CREATE(r0, &(0x7f00000000c0)={0x0, {'syz1\x00', 'syz1\x00', 'syz1\x00', &(0x7f0000000040)=""/94, 0x5e, 0x0, 0x0, 0x0, 0x3, 0x10000000}}, 0x120) 24m35.65843891s ago: executing program 4 (id=43): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @empty}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000002100)=[{{&(0x7f0000001b00)=@x25, 0x80, &(0x7f0000001980)=[{&(0x7f00000005c0)=""/160, 0xa0}, {&(0x7f0000000680)=""/224, 0xe0}, {&(0x7f0000000780)=""/9, 0x9}, {&(0x7f00000007c0)=""/54, 0x36}, {&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/68, 0x44}], 0x6, &(0x7f0000001a00)=""/126, 0x7e}, 0x7fff}, {{&(0x7f0000001c40)=@vsock={0x28, 0x0, 0x0, @my}, 0x80, &(0x7f0000001e80)=[{&(0x7f0000001cc0)=""/106, 0x6a}, {&(0x7f0000001d40)=""/88, 0x58}, {&(0x7f0000001dc0)}, {&(0x7f0000001e00)=""/75, 0x4b}], 0x4, &(0x7f0000001ec0)=""/119, 0x77}, 0x6e}, {{&(0x7f0000001f40)=@sco={0x1f, @none}, 0x80, &(0x7f0000002040)=[{&(0x7f0000001fc0)=""/66, 0x42}], 0x1, &(0x7f0000002080)=""/75, 0x4b}, 0x18b}], 0x3, 0x10062, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYRESOCT, @ANYBLOB="b9054c79d199a222ef7d0733352d6cfb42fec2a3cd519eb3abbdd4a6f7344f68705fb5c25589a6820941184b5d7aa28b53a3a8d9db4821ce1f8aafb63c3d86b142ac437d3430f2bc1c7f1f03592ce674303bc6d0f822025ce287b98bb1d0279fee00004d78aaffc0692aabff1835b47e78a7f85c40", @ANYBLOB="fab0817dbcb5f31a2c001280110001006272696467655f736c617665000000001400058005000500010000000500040001000000140003006272696467655f736c6176655f300000"], 0x60}}, 0x4040) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000200)={0x10, 0x0, 0xffffffff, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900038073797a3200000000140000001100014707a082b178795ad1"], 0x7c}, 0x1, 0x0, 0x0, 0x25}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0) connect$inet6(r3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r6, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="640000000007010100000000000000000200000a0900010073797a3100000140000069ff0800084000006dcb0800014000008001080001400000010008000240fffffffe0c000640000000000000f42a0c0002400000128c00000000", @ANYRESHEX=0x0], 0x64}, 0x1, 0x0, 0x0, 0x1}, 0x20004020) setsockopt$sock_int(r2, 0x1, 0x2f, 0x0, 0x0) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) close_range(r1, 0xffffffffffffffff, 0x0) r7 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r7, 0x10f, 0x87, &(0x7f00000008c0), 0x43) 24m31.944070854s ago: executing program 4 (id=48): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 24m21.726356155s ago: executing program 3 (id=59): write(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) socket(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f0000000780), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x1d, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x12, '\x00', 0x0, @fallback=0x17, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0xb}, 0xe) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) timer_create(0x0, 0x0, &(0x7f0000000300)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x66dbf000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x4) mkdir(&(0x7f0000000000)='./bus\x00', 0x74) mount$overlay(0x0, &(0x7f00000001c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') open(&(0x7f0000000040)='./file0\x00', 0x84242, 0x1df2a23c5997fad6) write$FUSE_CREATE_OPEN(0xffffffffffffffff, 0x0, 0x0) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x12443) pselect6(0x40, &(0x7f0000000040)={0x9, 0x7, 0x1, 0x300, 0x0, 0x10000000, 0xfffffffffffffffd, 0xb}, 0x0, &(0x7f0000000100)={0x9, 0x3, 0x2, 0x2000000000000, 0x0, 0x0, 0xfffffffffffffffe}, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./my_configfs\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./my_configfs/usb_gadget/g1\x00', 0x1ff) 24m20.309176101s ago: executing program 3 (id=61): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 24m16.115802168s ago: executing program 33 (id=48): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r6, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 24m3.726790384s ago: executing program 34 (id=61): syz_mount_image$ext4(&(0x7f0000000440)='ext4\x00', &(0x7f0000000480)='./file1\x00', 0x9, &(0x7f0000000000)={[{@barrier}, {@jqfmt_vfsv0}, {@abort}, {}, {@noquota}, {@usrjquota, 0x2e}], [], 0x2e}, 0x5, 0x496, &(0x7f0000000e40)="$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") r0 = syz_open_dev$dri(&(0x7f00000002c0), 0x1ff, 0x191003) ioctl$DRM_IOCTL_MODE_GETGAMMA(r0, 0xc02064a4, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/stat\x00') r1 = socket$nl_route(0x10, 0x3, 0x0) ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000240)={0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x3000) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x4000004) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40010) r5 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000040)={0x191, 0x258, 0x300, 0x3f, 0x32, 0x1, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe07, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x3}) syz_emit_ethernet(0x4a, &(0x7f00000000c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa00810010000800490000380002000001069078ac1e0001ac1414aa0702440c0cf1ac1414aa00008001000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344], 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000002000010000200000fcdbdf250a801000000000030e000000080018004e204e201400bf002001000000000000000000000000000114000200fc0000000000000000000000000000047a7ef2822ec3cabaf0934890e7cd296b943fc836830ac64de5d0fe6c43a00d05570c05b4f79f3e140953881cc6d8a393117ea00b886f7fc25d6fdefcd955b6e554fcee7a743727b4"], 0x4c}, 0x1, 0x0, 0x0, 0x10000050}, 0xc800) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)={0x2afc0, 0x1c1, 0x6}, 0x18) 15m42.292775811s ago: executing program 35 (id=649): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0xa0800, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r4, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) 15m36.946718137s ago: executing program 36 (id=662): syz_mount_image$ext4(&(0x7f0000000080)='ext2\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000340)={[{@nobarrier}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x7}}, {@data_writeback}, {@nomblk_io_submit}, {@data_ordered}, {@minixdf}]}, 0xbe, 0x472, &(0x7f00000004c0)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_link_settings={0x4d, 0xfff, 0x0, 0x38, 0x1, 0x37, 0x27, 0x2, 0x4, 0x73, [0x8, 0x8, 0x5, 0x80000, 0x15, 0x8, 0x4, 0x80000001]}}) 15m33.875691905s ago: executing program 37 (id=664): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x280b40, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 6m29.919730192s ago: executing program 38 (id=1447): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000440)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}) write$cgroup_devices(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) close(r1) close(0x4) 6m25.406603459s ago: executing program 9 (id=1477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bind$inet6(r0, 0x0, 0x0) creat(&(0x7f0000000f80)='./bus\x00', 0x31) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22fff6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f0000000000)='proc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) 6m18.390832821s ago: executing program 9 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000800000000000000000000001801000000646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000850000000800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000007808500000010"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 6m18.02522335s ago: executing program 9 (id=1489): socket$packet(0x11, 0x3, 0x300) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) syz_create_resource$binfmt(0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008e}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, 0x0, 0x0) kcmp(r1, r2, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) syz_mount_image$fuse(0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0) 6m16.815369031s ago: executing program 9 (id=1490): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 6m16.060691271s ago: executing program 9 (id=1491): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='3\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc) 6m14.985316458s ago: executing program 9 (id=1492): prlimit64(0x0, 0x1, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x1, 0x4d83, 0x5, 0x5, 0x1, 0x8, 0xf1, 0x1, 0x0, 0x45, 0x80000000, 0x4, 0x4, 0xec, 0x8, [0xcb, 0x3ab2]}}) 6m12.823179515s ago: executing program 39 (id=1492): prlimit64(0x0, 0x1, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x5, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x300, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, 0x0, 0x0) capset(0x0, &(0x7f0000000680)={0xffff0162, 0x8, 0x27, 0x693d, 0x6, 0x5}) mount$tmpfs(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0), 0x2, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000040)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_cmd={0x16, 0x1, 0x4d83, 0x5, 0x5, 0x1, 0x8, 0xf1, 0x1, 0x0, 0x45, 0x80000000, 0x4, 0x4, 0xec, 0x8, [0xcb, 0x3ab2]}}) 4m37.113024583s ago: executing program 8 (id=1624): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) capget(&(0x7f0000000000)={0x19980330, r0}, &(0x7f0000000040)={0x0, 0x6, 0x4000, 0x8b, 0x2, 0xfffffffc}) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) mount$binderfs(0x0, &(0x7f0000000280)='./binderfs\x00', 0x0, 0x2000063, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x3e, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000000800)="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", 0x500, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x0, @mcast2}, 0x1c) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000d80)=ANY=[@ANYBLOB='utf8=0,shortname=lower,rodir,utf8=0,uni_xlate=1,utf8=0,iocharset=koi8-ru,shortname=lower,iocharset=utf8,check=relaxed,shortname=mixed,shortname=win95,showexec,shortname=winnt,shortname=win95,rodir,nonumtail=0,errors=continue,nnonuage=936,nonumtail=0,shortname=winnt,shortname=win95,obj_user=errors=remount-ro,\x00'], 0x1, 0x36b, &(0x7f0000000a00)="$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") modify_ldt$write2(0x11, &(0x7f0000000100)={0x1d30, 0x0, 0x2000, 0x1}, 0x10) syz_clone(0xa0001000, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x40, 0x0) 4m34.743445765s ago: executing program 8 (id=1626): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000200), 0x3, 0x4fe, &(0x7f0000000dc0)="$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") sched_setaffinity(0x0, 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, 0x0, 0x0) setrlimit(0x1, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xc842, 0x1) pwrite64(r0, &(0x7f0000000080), 0xfdcf, 0x404042ffe) 4m34.353341984s ago: executing program 8 (id=1627): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nobarrier}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x582, &(0x7f0000005a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x1cb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) pwrite64(r1, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x10, 0x800, 0x8000) 4m34.089558582s ago: executing program 8 (id=1628): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m33.811238118s ago: executing program 8 (id=1629): socket$tipc(0x1e, 0x2, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0xfe, 0x1d0, &(0x7f0000000ac0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read(r0, &(0x7f0000000200)=""/189, 0xbd) 4m33.303710791s ago: executing program 8 (id=1630): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)) 4m32.774182545s ago: executing program 40 (id=1630): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x205, 0x8401) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)) 4m32.567976521s ago: executing program 4 (id=1468): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5678', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='3\n', 0x2) close(r2) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc) 4m30.809363456s ago: executing program 4 (id=1637): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m30.543321063s ago: executing program 4 (id=1638): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x14, 0x0, 0x4, 0x0, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x40d0}, 0x24040844) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r1) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r1) sendmsg$NLBL_CIPSOV4_C_LISTALL(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r2, 0xc53, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8401}, 0x40004) 4m28.814241128s ago: executing program 4 (id=1641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 4m28.330486911s ago: executing program 41 (id=1641): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x9}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x1000, 0x0, r0}, 0x50) unshare(0x22020600) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r0}, 0x20) 4m28.000689989s ago: executing program 3 (id=1493): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@ptr]}}, &(0x7f0000000100)=""/189, 0x26, 0xbd, 0x1}, 0x28) setresgid(0xee00, 0xee01, 0x0) syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) openat$rtc(0xffffff9c, &(0x7f0000000040), 0xc2440, 0x0) ioctl$TIOCL_SETSEL(0xffffffffffffffff, 0x541c, &(0x7f0000000000)={0x2, {0xc, 0xa00, 0xffff, 0x181, 0x100}}) connect$pptp(0xffffffffffffffff, &(0x7f00000001c0)={0x18, 0x2, {0x0, @empty}}, 0x1e) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x50, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) syz_clone(0x42164000, 0x0, 0x0, 0x0, 0x0, 0x0) 4m26.718871472s ago: executing program 3 (id=1646): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(0x0) mount$bind(&(0x7f0000000040)='.\x00', &(0x7f00000008c0)='./file0\x00', 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m26.377948681s ago: executing program 3 (id=1648): openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000200), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000008340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0x490420, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r0, &(0x7f000000e3c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000c0a200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000500)={0x60002005}) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'batadv_slave_0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xe, [0x7, 0x5, 0x80000000, 0x1, 0x4, 0x9, 0xa4, 0x0, 0xb, 0xb69, 0x2, 0x4, 0xf, 0x6, 0x5, 0x3, 0x1002, 0x9, 0x1, 0x13, 0x800, 0x3, 0xe3bc, 0x6, 0x9, 0x4, 0x7, 0x5, 0x8, 0x0, 0x40, 0xd, 0xe, 0x1, 0x8, 0x4, 0x1c03, 0x4, 0x7, 0xbed4, 0x7f, 0x8000100, 0x8, 0x5, 0x11004, 0xa, 0x5, 0x79b, 0x2, 0x0, 0x83, 0x4f2, 0xa, 0x7, 0xf, 0xfc, 0xd7, 0x1fa08606, 0xaf5, 0xaa, 0x101, 0x2, 0x180001, 0xf, 0x8b, 0x5, 0x2af, 0x6, 0x5, 0x2, 0x6, 0xb, 0x4, 0x6, 0x4009, 0xffffffff, 0x4, 0x100002, 0x8, 0x752, 0x1, 0x4, 0x0, 0x10001, 0xe, 0xfffffffd, 0x6, 0x6, 0x9, 0x80000000, 0xfe000000, 0x0, 0x2, 0x87, 0x1100, 0x7, 0x4, 0x81, 0x5d102cf3, 0x5, 0x5, 0x5, 0x1, 0xb, 0x1000000, 0xd9a, 0x10000a, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x4000000, 0x4, 0x2, 0x3f, 0x8, 0x4, 0x6, 0x100, 0x80066cd, 0xc, 0x8, 0x1, 0x0, 0x6, 0x3ff]}}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) 4m25.821292216s ago: executing program 3 (id=1650): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57}) 4m23.799102738s ago: executing program 42 (id=1650): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001200), 0x8a400, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x110e22fff6) ioctl$PPPIOCSNPMODE(r0, 0x4008744b, &(0x7f0000000040)={0x57}) 4m14.132486948s ago: executing program 0 (id=1671): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 4m11.065388678s ago: executing program 0 (id=1676): ioctl$TCSETSW2(0xffffffffffffffff, 0x402c542c, &(0x7f0000000000)={0xbfdd, 0x0, 0x8b, 0x2, 0x4f, "30418071ff7ef88c01004400", 0x4, 0x100020}) r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x800, 0x0, 0x0) 4m10.765043475s ago: executing program 0 (id=1677): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/rcu_normal', 0x149a82, 0x0) write$cgroup_int(r2, &(0x7f0000000040)=0x1f00, 0x12) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r3 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x1e}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4, 0x2}, {}, 0x0, 0x6e6bb9, 0x1}, {{@in=@broadcast, 0xfffffffc, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x2, 0x7}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) sendmsg$key(r0, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="020100000a0000000600000000000000030006000000000002000000ffffffff0000000000000000030005000000000002000000ac1e000100000000000000000200"], 0x50}}, 0x0) 4m10.103889692s ago: executing program 0 (id=1679): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/iomem\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0xfa0) syz_clone3(&(0x7f0000000380)={0x2140280, 0x0, 0x0, 0x0, {0x20080021}, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x58) openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='Mid', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='2\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0), 0x0) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) syz_open_procfs(0x0, &(0x7f0000000480)='fd/3\x00') mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x8) 4m9.734430552s ago: executing program 0 (id=1680): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2a) mount$bind(&(0x7f0000000280)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) chroot(&(0x7f0000000580)='./file0/../file0\x00') mount$bind(&(0x7f0000000040)='.\x00', 0x0, 0x0, 0x2a05004, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000080)='./file0/../file0\x00') 4m9.515525658s ago: executing program 0 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=user,version=9p2000.u,aname=&']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, 0x0) 3m53.972039s ago: executing program 43 (id=1681): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x4028, 0x0, 0x0, 0x0, 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1500000065ffff0180000008003950323030302e75"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r2, &(0x7f00000000c0)={0x14c}, 0x137) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000004c0), 0x14000, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r2, @ANYBLOB=',access=user,version=9p2000.u,aname=&']) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xa0, &(0x7f00000001c0)=ANY=[], 0x1, 0x0, 0x0) 23.319962886s ago: executing program 6 (id=2160): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}}) 21.633619359s ago: executing program 6 (id=2161): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000880)="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", 0x55a, r0) 17.559310535s ago: executing program 5 (id=2168): r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1802}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f00000002c0)={0x0, 'syzkaller0\x00', {0x1}, 0xb5}) r4 = socket$netlink(0x10, 0x3, 0x9) preadv(r2, &(0x7f0000000000)=[{&(0x7f0000000080)=""/18, 0xc}], 0x1, 0xdc03, 0x2005) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) 15.353087012s ago: executing program 6 (id=2174): r0 = syz_usb_connect$uac2(0x2, 0x7b, &(0x7f0000004080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0xe41, 0x414b, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3f9, 0x4, 0x9, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xa, 0x3, {0x8, 0x25, 0x1, 0x80, 0x39, 0xc, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x9}}}}}}}}]}}, &(0x7f00000045c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac2(r0, &(0x7f0000004780)={0x14, 0x0, &(0x7f00000046c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io(r0, &(0x7f0000005500)={0x2c, 0x0, &(0x7f0000005380)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) 14.503267594s ago: executing program 7 (id=2178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, r6}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) write(r5, &(0x7f0000000100)='00:00', 0x5) 12.903641195s ago: executing program 7 (id=2179): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, r6}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) write(r5, &(0x7f0000000100)='00:00', 0x5) 12.779752418s ago: executing program 2 (id=2180): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400), 0x0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='3\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc) 12.418408738s ago: executing program 2 (id=2182): epoll_create(0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x320242, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 12.015415338s ago: executing program 2 (id=2183): r0 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f00000044c0), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r7 = accept$alg(r6, 0x0, 0x0) r8 = fcntl$dupfd(r7, 0x0, r6) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r0}}) 11.991676179s ago: executing program 5 (id=2184): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000200000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 11.97073479s ago: executing program 6 (id=2186): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x20400, 0x20) setxattr$security_capability(&(0x7f0000000140)='./file0/file1\x00', &(0x7f0000000040), 0x0, 0x0, 0x1) fdatasync(r0) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) close_range(r1, 0xffffffffffffffff, 0x0) 10.460615138s ago: executing program 2 (id=2187): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(&(0x7f0000000340)=""/243, 0xf3) keyctl$clear(0x3, 0xfffffffffffffffd) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r4, 0x9c3fa077fa966179, 0x1f, 0x0, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054) r5 = memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) fcntl$addseals(r5, 0x409, 0x8) fallocate(r5, 0x3, 0x29c00000000000, 0x20000) 10.274818063s ago: executing program 5 (id=2189): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, r6}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) write(r5, &(0x7f0000000100)='00:00', 0x5) 10.220421455s ago: executing program 6 (id=2190): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x1, &(0x7f0000000600)=0x0) io_submit(r3, 0x1, &(0x7f00000008c0)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x7fff, r2, &(0x7f0000000140)="b7", 0x1, 0x0, 0x0, 0x2}]) 8.662373236s ago: executing program 5 (id=2191): r0 = socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x800}, 0x40000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='tracefs\x00', &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) write(r5, &(0x7f0000000100)='bRequestType=0 bRequest=6 wValue=0 wIndex=0 wLength=0\x00', 0x36) openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x33, &(0x7f0000000140)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x10, 0x5}]}, 0x10) 6.632291258s ago: executing program 7 (id=2193): epoll_create(0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x6, 0xc, 0x4, 0x7fff0000}]}) socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x320242, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 6.596169539s ago: executing program 1 (id=2194): capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x3, 0x80, 0xffffffff, 0x80000000}) mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x4) lsetxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000440)='system.posix_acl_access\x00', &(0x7f0000000580)=ANY=[@ANYBLOB="0200000001000000000000000400060000000000100006000000000020"], 0x24, 0x0) llistxattr(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)=""/17, 0x18) 6.249171548s ago: executing program 1 (id=2195): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) listen(r0, 0x3) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x0, 0x41424344, 0x0, 0x0, 0x5, 0x18, 0x1001}}}}}}}, 0x0) 6.052047173s ago: executing program 1 (id=2196): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x800) openat$vcsu(0xffffffffffffff9c, 0x0, 0x241, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) 4.949342952s ago: executing program 2 (id=2197): openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280)={0x2940, 0x2, 0x10}, 0x18) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000001c0)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r6 = accept$alg(r5, 0x0, 0x0) r7 = fcntl$dupfd(r6, 0x0, r5) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000000), 0x1, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r7}}) 4.847508244s ago: executing program 1 (id=2198): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x3c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 3.262624885s ago: executing program 2 (id=2199): r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(0x0, 0x0, &(0x7f0000000880)="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", 0x55a, r0) 2.724375669s ago: executing program 7 (id=2200): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000bc0)={0x1, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000400000000000002000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014002000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000ac0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000000), &(0x7f0000000140)=r1}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000020000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$inet(r3, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) 2.617224292s ago: executing program 6 (id=2201): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00006ca000/0x4000)=nil, 0x4000, 0x0, 0x3, 0x20000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r0, 0x0) 2.581300203s ago: executing program 1 (id=2202): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) rmdir(&(0x7f00000002c0)='./file2\x00') chdir(&(0x7f0000000040)='./file0\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r0, 0x0, 0xbb) 1.750782504s ago: executing program 7 (id=2203): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) creat(0x0, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x3) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8090}, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pnp/devices/00:00/driver/unbind\x00', 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r6, r6}, 0x4) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r7, 0x5411, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x1f, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x10, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r8}, 0xc) write(r5, &(0x7f0000000100)='00:00', 0x5) 1.701512256s ago: executing program 5 (id=2204): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) write(0xffffffffffffffff, &(0x7f0000000400)='0x5', 0x3) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0\n', 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000940)={{{@in6=@mcast2, @in=@remote}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f0000000a40)=0xe4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='3\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001600)='usbip-vudc.0', 0xc) 185.910805ms ago: executing program 7 (id=2205): syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="666c7573685f6d657267652c6e6f666c7573685f6d657267652c6d6f64653d667261676d656e743a7365676d656e742c636f6d70726573735f63616368652c696e6c696e655f78617474722c636f6d70726573735f63616368652c6e6f696e6c696e655f78617474722c6e6f646973636172642c6261636b67726f756e645f67633d6f6e2c6261636b67726f756e645f67633d6f66662c636865636b706f696e743d64697361626c652c617467630000635f6d657267652c6e6f626172726965722c004b1c091f21dfc606226168fd668d440f", @ANYRESOCT=0x0], 0xfd, 0x5531, &(0x7f0000000540)="$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") symlink(&(0x7f00000008c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000007c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') unlink(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') 172.437495ms ago: executing program 1 (id=2206): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x40, 0x10, 0x439, 0x2, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002, 0x44100}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_TOS={0x5, 0x9, 0x6}, @IFLA_GRE_PMTUDISC={0x5, 0xa, 0x1}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40814}, 0x4004000) 0s ago: executing program 5 (id=2207): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002220000090582020002"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000140)=ANY=[@ANYBLOB="200de5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000a80)={0x2c, &(0x7f00000008c0)={0x20, 0xa, 0x4, "4b624ca2"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000600)={0x24, 0x0, 0x0, &(0x7f0000000500)={0x0, 0x22, 0xb, {[@local=@item_4={0x3, 0x2, 0x1, "dd9cd384"}, @main=@item_4={0x3, 0x0, 0xb, "78007a82"}, @global=@item_012={0x0, 0x1, 0x8}]}}, 0x0}, 0x0) kernel console output (not intermixed with test programs): 271.778553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1272.031622][T12155] device hsr_slave_0 entered promiscuous mode [ 1272.093651][T12155] device hsr_slave_1 entered promiscuous mode [ 1272.123585][T12155] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1272.152051][T12155] Cannot create hsr debugfs directory [ 1273.280068][T12245] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1529'. [ 1274.957491][T12250] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1531'. [ 1274.978520][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1274.995773][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1275.330303][T12051] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1275.747551][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1275.797827][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1275.927142][ T4322] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 1276.022266][ T4288] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1276.033602][ T4288] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1276.043649][ T4288] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1276.053138][ T4288] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1276.061679][ T4288] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1276.070725][ T4288] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1276.117190][ T4322] usb 9-1: Using ep0 maxpacket: 32 [ 1276.124268][ T4322] usb 9-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1276.157120][ T4322] usb 9-1: config 0 interface 0 has no altsetting 0 [ 1276.163913][ T4322] usb 9-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.00 [ 1276.173505][ T4322] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1276.183576][ T4322] usb 9-1: config 0 descriptor?? [ 1276.280854][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1276.325875][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1276.398399][ T4322] usbhid 9-1:0.0: can't add hid device: -71 [ 1276.404592][ T4322] usbhid: probe of 9-1:0.0 failed with error -71 [ 1276.433208][ T4322] usb 9-1: USB disconnect, device number 5 [ 1276.442634][T12051] device veth0_vlan entered promiscuous mode [ 1276.472864][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1276.488734][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1276.533535][T12051] device veth1_vlan entered promiscuous mode [ 1276.664718][T12155] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1276.726247][T12155] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1276.780341][ T4413] device hsr_slave_0 left promiscuous mode [ 1276.803934][ T4413] device hsr_slave_1 left promiscuous mode [ 1276.817310][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1276.856245][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1276.885172][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1276.913493][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1276.954716][ T4413] device bridge_slave_1 left promiscuous mode [ 1276.993167][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.022976][ T4413] device bridge_slave_0 left promiscuous mode [ 1277.032804][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.147458][ T4413] device veth1_macvtap left promiscuous mode [ 1277.153582][ T4413] device veth0_macvtap left promiscuous mode [ 1277.188665][ T4413] device veth1_vlan left promiscuous mode [ 1277.204896][ T4413] device veth0_vlan left promiscuous mode [ 1278.097475][ T4288] Bluetooth: hci2: command 0x0409 tx timeout [ 1278.448521][ T27] audit: type=1800 audit(1785981099.214:13): pid=12278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1537" name="id" dev="configfs" ino=75684 res=0 errno=0 [ 1278.863382][T12281] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1538'. [ 1280.177181][ T4288] Bluetooth: hci2: command 0x041b tx timeout [ 1282.259240][ T4288] Bluetooth: hci2: command 0x040f tx timeout [ 1284.013319][T12303] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1539'. [ 1284.825437][ T4288] Bluetooth: hci2: command 0x0419 tx timeout [ 1285.906811][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1286.334312][T12312] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1546'. [ 1287.251282][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1287.474370][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1287.628383][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1288.215685][ T27] audit: type=1800 audit(1785981108.974:14): pid=12328 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1547" name="id" dev="configfs" ino=76467 res=0 errno=0 [ 1288.606033][ T4413] bond0 (unregistering): Released all slaves [ 1288.848163][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1288.858653][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1288.876040][T12155] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1288.894657][T12155] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1289.069313][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1289.090411][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1289.140701][T12051] device veth0_macvtap entered promiscuous mode [ 1289.258473][T12051] device veth1_macvtap entered promiscuous mode [ 1289.404923][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.436475][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.481596][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1289.522204][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.572804][T12051] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1289.607341][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1289.638668][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1289.668944][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1289.713303][ T4366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1289.732694][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.763802][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.796207][T12051] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1289.841145][T12051] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1289.920853][T12051] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1289.974168][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1290.002987][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1290.052120][T12258] chnl_net:caif_netlink_parms(): no params data found [ 1290.085326][T12051] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.113331][T12051] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.172101][T12051] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.184110][T12051] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1290.275492][T12155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1290.459038][T12155] 8021q: adding VLAN 0 to HW filter on device team0 [ 1290.477383][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1290.488118][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1290.762315][T12352] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1554'. [ 1291.715470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1291.757673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1291.811818][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.819052][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1291.837561][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1291.856360][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1291.877840][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 1291.885112][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1291.961900][T12258] bridge0: port 1(bridge_slave_0) entered blocking state [ 1291.994350][T12258] bridge0: port 1(bridge_slave_0) entered disabled state [ 1292.024791][T12258] device bridge_slave_0 entered promiscuous mode [ 1292.040212][ T27] audit: type=1800 audit(1785981112.804:15): pid=12361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1556" name="id" dev="configfs" ino=76843 res=0 errno=0 [ 1292.095359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1292.115917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1292.182382][T12258] bridge0: port 2(bridge_slave_1) entered blocking state [ 1292.202677][T12258] bridge0: port 2(bridge_slave_1) entered disabled state [ 1292.228317][T12258] device bridge_slave_1 entered promiscuous mode [ 1292.277864][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1292.287814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1292.309053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1292.329012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1292.375080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1292.398394][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1292.427778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1292.462696][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1292.696233][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1292.719680][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1292.760019][ T4280] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1292.777313][ T4280] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1292.786212][ T4280] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1292.794343][ T4280] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1292.803726][ T4280] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1292.811697][ T4280] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1292.966445][T12155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1293.231697][T12258] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1293.251052][T12258] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1293.334664][T12379] xt_TCPMSS: Only works on TCP SYN packets [ 1294.183903][T12258] team0: Port device team_slave_0 added [ 1294.274524][T12258] team0: Port device team_slave_1 added [ 1294.387645][T12258] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1294.394696][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1294.914493][T12258] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1295.278839][ T4288] Bluetooth: hci3: command 0x0409 tx timeout [ 1295.327769][T12258] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1295.334798][T12258] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1295.491371][T12258] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.720833][T12258] device hsr_slave_0 entered promiscuous mode [ 1295.758497][T12258] device hsr_slave_1 entered promiscuous mode [ 1296.797773][T12405] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1562'. [ 1297.023608][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1297.043543][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1297.084090][T12155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1297.297151][ T4288] Bluetooth: hci3: command 0x041b tx timeout [ 1297.403293][T12368] chnl_net:caif_netlink_parms(): no params data found [ 1297.511909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1297.535600][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1297.695908][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1297.738020][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1297.793619][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1297.828187][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1298.104643][T12155] device veth0_vlan entered promiscuous mode [ 1298.246294][T12155] device veth1_vlan entered promiscuous mode [ 1298.334599][T12368] bridge0: port 1(bridge_slave_0) entered blocking state [ 1298.347254][T12368] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.368964][T12368] device bridge_slave_0 entered promiscuous mode [ 1298.399555][T12368] bridge0: port 2(bridge_slave_1) entered blocking state [ 1298.406822][T12368] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.428197][T12368] device bridge_slave_1 entered promiscuous mode [ 1298.498144][ T4413] device hsr_slave_0 left promiscuous mode [ 1298.515997][ T4413] device hsr_slave_1 left promiscuous mode [ 1298.548166][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1298.576679][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1298.621116][ T4413] device bridge_slave_1 left promiscuous mode [ 1298.641727][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1298.670020][ T4413] device bridge_slave_0 left promiscuous mode [ 1298.676352][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1298.737736][ T4821] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 1298.949669][ T4821] usb 9-1: config 220 has an invalid interface number: 76 but max is 2 [ 1298.965882][ T4821] usb 9-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1299.005620][ T4821] usb 9-1: config 220 has no interface number 2 [ 1299.027329][ T4821] usb 9-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1299.041012][ T4821] usb 9-1: config 220 interface 0 has no altsetting 0 [ 1299.048244][ T4821] usb 9-1: config 220 interface 76 has no altsetting 0 [ 1299.055553][ T4821] usb 9-1: config 220 interface 1 has no altsetting 0 [ 1299.068197][ T4821] usb 9-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1299.098179][ T4821] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1299.120264][ T4821] usb 9-1: Product: syz [ 1299.124648][ T4821] usb 9-1: Manufacturer: syz [ 1299.135694][ T4821] usb 9-1: SerialNumber: syz [ 1299.387499][ T4288] Bluetooth: hci3: command 0x040f tx timeout [ 1299.404942][ T4821] usb 9-1: Found UVC 7.01 device syz (8086:0b07) [ 1299.419010][ T4821] usb 9-1: No valid video chain found. [ 1299.424715][ T4821] usb 9-1: selecting invalid altsetting 0 [ 1299.466226][ T4821] usb 9-1: selecting invalid altsetting 0 [ 1299.483593][ T4821] usbtest: probe of 9-1:220.1 failed with error -22 [ 1299.499686][ T4821] usb 9-1: USB disconnect, device number 6 [ 1299.763903][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1299.848066][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1299.929995][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1300.089206][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1301.338913][T12470] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1571'. [ 1301.460162][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 1301.809892][ T4413] bond0 (unregistering): Released all slaves [ 1302.083499][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1302.104988][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1302.143118][T12155] device veth0_macvtap entered promiscuous mode [ 1302.169756][T12368] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.206087][T12155] device veth1_macvtap entered promiscuous mode [ 1302.252795][T12368] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.423956][T12368] team0: Port device team_slave_0 added [ 1302.489023][T12368] team0: Port device team_slave_1 added [ 1302.605919][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.647115][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.667180][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.697267][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.735684][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1302.754457][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1302.766480][T12155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1302.794988][T12368] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.812992][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1302.887462][T12368] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.927509][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1302.956352][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1302.997768][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1303.007957][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1303.019275][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.031436][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.041997][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.053097][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.074195][T12155] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1303.093312][T12155] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1303.109245][T12155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1303.124873][T12368] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1303.141733][T12368] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1303.193016][T12368] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1303.210874][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1303.234361][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1303.258450][T12498] netlink: 'syz.8.1577': attribute type 16 has an invalid length. [ 1303.266340][T12498] netlink: 43 bytes leftover after parsing attributes in process `syz.8.1577'. [ 1303.303257][T12155] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.321030][T12155] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.354739][T12155] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.384898][T12155] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1303.507558][T12258] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1303.571881][T12258] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1303.589135][T12258] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1303.642208][T12368] device hsr_slave_0 entered promiscuous mode [ 1303.668762][T12368] device hsr_slave_1 entered promiscuous mode [ 1303.697188][T12368] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1303.704850][T12368] Cannot create hsr debugfs directory [ 1303.728732][T12258] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1303.797153][ T9192] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 1303.942006][T11776] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1303.963290][T11776] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1303.979658][ T9192] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1304.015350][ T9192] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1304.060998][ T9192] usb 9-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1304.093404][ T9192] usb 9-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1304.133392][ T9192] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1304.146850][ T9192] usb 9-1: config 0 descriptor?? [ 1304.221187][ T4413] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.278407][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1304.398634][ T4413] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.591793][ T9192] plantronics 0003:047F:FFFF.0021: unbalanced collection at end of report description [ 1304.636075][ T4413] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.639236][ T9192] plantronics 0003:047F:FFFF.0021: parse failed [ 1304.694264][ T9192] plantronics: probe of 0003:047F:FFFF.0021 failed with error -22 [ 1304.709266][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1304.731643][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1304.813256][ T9192] usb 9-1: USB disconnect, device number 7 [ 1304.871041][ T4413] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.957659][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1305.818669][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1305.825088][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1305.886509][T12258] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1306.113300][T12258] 8021q: adding VLAN 0 to HW filter on device team0 [ 1306.130701][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1306.150156][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1306.217818][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1306.237536][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1306.277036][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 1306.284204][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1306.338036][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1306.381144][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1306.418091][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1306.447281][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1306.454771][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1306.487670][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1306.527757][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1306.614208][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1306.631535][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1308.207330][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1308.216385][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1308.243948][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1308.278034][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1308.327629][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1308.358197][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1308.407691][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1310.130816][T12258] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1311.716378][T12368] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1311.772718][T12368] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1311.948270][T12368] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1312.017207][T12368] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1312.136952][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1312.144875][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1312.235512][T12258] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1313.269913][T12575] netlink: 112 bytes leftover after parsing attributes in process `syz.8.1589'. [ 1313.275640][ T4318] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 1313.310894][ T4413] device hsr_slave_0 left promiscuous mode [ 1313.341464][ T4413] device hsr_slave_1 left promiscuous mode [ 1313.361354][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1313.387543][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1313.464216][ T4413] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1313.477072][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 1313.483770][ T4318] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.520613][ T4413] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1313.565765][ T4318] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1313.607247][ T4318] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 1313.659667][ T4318] usb 3-1: New USB device found, idVendor=0499, idProduct=1053, bcdDevice= 0.40 [ 1313.671584][ T4413] device bridge_slave_1 left promiscuous mode [ 1313.697618][ T4413] bridge0: port 2(bridge_slave_1) entered disabled state [ 1313.711487][ T4318] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.762284][ T4318] usb 3-1: Product: syz [ 1313.766617][ T4318] usb 3-1: Manufacturer: syz [ 1313.823399][ T4318] usb 3-1: SerialNumber: syz [ 1313.904765][ T4413] device bridge_slave_0 left promiscuous mode [ 1313.927441][ T4413] bridge0: port 1(bridge_slave_0) entered disabled state [ 1314.086404][T12590] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1592'. [ 1314.137355][ T4413] device veth1_macvtap left promiscuous mode [ 1314.143472][ T4413] device veth0_macvtap left promiscuous mode [ 1314.204102][ T4413] device veth1_vlan left promiscuous mode [ 1314.248515][ T4413] device veth0_vlan left promiscuous mode [ 1314.459735][ T4318] usb 3-1: cannot find UAC_HEADER [ 1314.540377][ T4318] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 1314.655247][T12347] udevd[12347]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1314.683968][ T4318] usb 3-1: USB disconnect, device number 13 [ 1320.901501][ T4413] team0 (unregistering): Port device team_slave_1 removed [ 1321.111599][T12628] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1605'. [ 1321.206336][ T4413] team0 (unregistering): Port device team_slave_0 removed [ 1321.482602][ T4413] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1321.677923][ T4413] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1323.208374][T12656] xt_hashlimit: size too large, truncated to 1048576 [ 1323.273177][ T4413] bond0 (unregistering): Released all slaves [ 1323.690574][T12662] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1617'. [ 1323.994932][T12368] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1324.245671][T12368] 8021q: adding VLAN 0 to HW filter on device team0 [ 1324.313519][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1324.338388][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1324.402875][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1324.434032][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1324.495556][ T4371] bridge0: port 1(bridge_slave_0) entered blocking state [ 1324.503254][ T4371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1324.645493][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1324.692431][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1324.762545][ T4371] bridge0: port 2(bridge_slave_1) entered blocking state [ 1324.769834][ T4371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1324.910395][T12673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1324.937464][T12673] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 1324.980665][T12673] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1325.099740][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1325.143712][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1325.218754][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1325.313544][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1325.385406][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1325.456663][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1325.502810][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1325.553588][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1325.645183][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1325.688024][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1325.732239][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1325.778364][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1325.830588][T12368] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1325.851154][ T27] audit: type=1800 audit(1785981146.614:16): pid=12695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.1623" name="id" dev="configfs" ino=78669 res=0 errno=0 [ 1326.006344][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1326.033225][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1326.137975][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1326.155205][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1326.206234][T12258] device veth0_vlan entered promiscuous mode [ 1326.244748][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1326.275002][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1326.345558][T12258] device veth1_vlan entered promiscuous mode [ 1326.574128][T12700] capability: warning: `syz.8.1624' uses 32-bit capabilities (legacy support in use) [ 1326.647328][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1327.059205][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1327.438075][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1327.487837][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1328.212853][T12258] device veth0_macvtap entered promiscuous mode [ 1328.318711][T12258] device veth1_macvtap entered promiscuous mode [ 1328.453666][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.536478][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.597138][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.652998][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.720726][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1328.827122][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1328.874971][T12258] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1328.921370][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1328.951440][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1329.015489][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.057162][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.114482][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.160533][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.201115][T12258] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1329.236600][T12258] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1329.297526][T12258] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1329.337927][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1329.346828][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1329.431836][T12258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.467195][T12258] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.475986][T12258] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.576911][T12258] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.634699][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1329.666028][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1329.727343][T12368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1330.088062][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1330.107921][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1330.183717][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1330.199154][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1330.238711][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1330.257923][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1330.287983][T11826] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.298212][T11826] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.309066][T12368] device veth0_vlan entered promiscuous mode [ 1330.401427][ T4328] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.478923][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1330.561891][ T4328] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.604852][T12368] device veth1_vlan entered promiscuous mode [ 1330.641323][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.659655][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.696471][ T4328] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.757966][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1330.767535][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1330.800150][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1330.892382][ T4328] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1330.968682][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1330.988428][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1331.009932][ T27] audit: type=1800 audit(1785981151.774:17): pid=12743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1632" name="id" dev="configfs" ino=79101 res=0 errno=0 [ 1331.084710][T12368] device veth0_macvtap entered promiscuous mode [ 1331.141213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1331.173613][T12368] device veth1_macvtap entered promiscuous mode [ 1332.799531][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.841916][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.892910][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.927222][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1332.961506][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1332.997304][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.017191][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1333.038180][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.088783][T12368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1333.100359][ T4288] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1333.111619][ T4288] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1333.120300][ T4288] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1333.127366][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1333.130650][ T7877] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1333.145996][ T4288] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1333.153692][ T4288] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1333.166654][ T4288] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1333.247341][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.274608][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.357121][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.387478][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.431938][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.473391][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1333.846948][T12368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1333.973760][T12368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1334.308487][T12368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1334.325275][T12368] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.334169][T12368] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.350049][T12368] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.367135][T12368] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1334.531059][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1334.548300][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1334.987928][ T4371] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1334.987955][ T4371] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1334.988300][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1335.208853][ T4413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1335.216816][ T4413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1335.224749][ T4288] Bluetooth: hci4: command 0x0409 tx timeout [ 1335.352240][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1335.440621][ T27] audit: type=1800 audit(1785981156.204:18): pid=12787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1644" name="id" dev="configfs" ino=80170 res=0 errno=0 [ 1335.714863][T12759] chnl_net:caif_netlink_parms(): no params data found [ 1336.799624][ T4280] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1336.810487][ T4280] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1336.821496][ T4280] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1336.831900][ T4280] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1336.841158][ T4280] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1336.848630][ T4280] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1337.095141][T12759] bridge0: port 1(bridge_slave_0) entered blocking state [ 1337.164133][T12759] bridge0: port 1(bridge_slave_0) entered disabled state [ 1337.197458][T12759] device bridge_slave_0 entered promiscuous mode [ 1337.300042][ T4280] Bluetooth: hci4: command 0x041b tx timeout [ 1337.344844][T12759] bridge0: port 2(bridge_slave_1) entered blocking state [ 1337.352418][T12759] bridge0: port 2(bridge_slave_1) entered disabled state [ 1337.370571][T12759] device bridge_slave_1 entered promiscuous mode [ 1337.391251][T12809] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1647'. [ 1337.586124][T12813] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1337.895459][T12759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1339.316393][ T4280] Bluetooth: hci2: command 0x0409 tx timeout [ 1339.377480][ T4280] Bluetooth: hci4: command 0x040f tx timeout [ 1339.519642][T12759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1339.830334][T12759] team0: Port device team_slave_0 added [ 1339.849227][T12759] team0: Port device team_slave_1 added [ 1340.002226][ T4328] device hsr_slave_0 left promiscuous mode [ 1340.053695][ T4328] device hsr_slave_1 left promiscuous mode [ 1340.074065][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1340.093853][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1340.135644][ T4328] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1340.147281][ T4328] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1340.187631][ T4328] device bridge_slave_1 left promiscuous mode [ 1340.194633][ T4328] bridge0: port 2(bridge_slave_1) entered disabled state [ 1340.239761][ T4328] device bridge_slave_0 left promiscuous mode [ 1340.246093][ T4328] bridge0: port 1(bridge_slave_0) entered disabled state [ 1340.403497][ T4328] device veth1_macvtap left promiscuous mode [ 1340.425568][ T4328] device veth0_macvtap left promiscuous mode [ 1340.433620][ T4328] device veth1_vlan left promiscuous mode [ 1340.455650][ T4328] device veth0_vlan left promiscuous mode [ 1340.606401][ T4288] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1340.619854][ T4288] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1340.630395][ T4288] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1340.648247][ T4288] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1340.655958][ T4288] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1340.664896][ T4288] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1341.287978][ T27] audit: type=1800 audit(1785981162.054:19): pid=12846 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1653" name="id" dev="configfs" ino=79412 res=0 errno=0 [ 1341.377620][ T4280] Bluetooth: hci2: command 0x041b tx timeout [ 1341.465621][ T4280] Bluetooth: hci4: command 0x0419 tx timeout [ 1341.648882][ T27] audit: type=1800 audit(1785981162.414:20): pid=12854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1654" name="id" dev="configfs" ino=79417 res=0 errno=0 [ 1342.617617][ T4328] team0 (unregistering): Port device team_slave_1 removed [ 1342.670718][ T4328] team0 (unregistering): Port device team_slave_0 removed [ 1342.732157][ T4328] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1342.755775][ T4280] Bluetooth: hci3: command 0x0409 tx timeout [ 1342.802069][ T4328] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1343.241102][ T4328] bond0 (unregistering): Released all slaves [ 1343.343627][T12797] chnl_net:caif_netlink_parms(): no params data found [ 1343.364661][T12872] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1657'. [ 1343.375947][T12759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1343.398974][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.429390][T12759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1343.457710][ T4280] Bluetooth: hci2: command 0x040f tx timeout [ 1343.499011][T12759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1343.507906][T12759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1343.564223][T12759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1343.586359][T12877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1343.597353][T12877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1343.810176][T12797] bridge0: port 1(bridge_slave_0) entered blocking state [ 1343.853901][T12797] bridge0: port 1(bridge_slave_0) entered disabled state [ 1343.931551][T12797] device bridge_slave_0 entered promiscuous mode [ 1343.954637][T12759] device hsr_slave_0 entered promiscuous mode [ 1343.983937][T12759] device hsr_slave_1 entered promiscuous mode [ 1344.033513][T12759] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1344.073134][T12759] Cannot create hsr debugfs directory [ 1344.109162][T12797] bridge0: port 2(bridge_slave_1) entered blocking state [ 1344.122065][T12797] bridge0: port 2(bridge_slave_1) entered disabled state [ 1344.161568][T12797] device bridge_slave_1 entered promiscuous mode [ 1344.312872][T12797] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1344.389048][T12896] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1344.402020][T12797] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1344.428316][T12896] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1344.588080][T12797] team0: Port device team_slave_0 added [ 1344.684383][T12797] team0: Port device team_slave_1 added [ 1344.732297][T12797] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1346.055268][ T4280] Bluetooth: hci3: command 0x041b tx timeout [ 1346.058974][ T4289] Bluetooth: hci2: command 0x0419 tx timeout [ 1346.084817][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.226126][T12797] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1346.248724][T12797] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1346.255741][T12797] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1346.289786][T12797] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1346.451483][ T4522] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.785798][ T4522] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1346.809731][T12833] chnl_net:caif_netlink_parms(): no params data found [ 1347.079510][ T4522] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.319966][T12797] device hsr_slave_0 entered promiscuous mode [ 1347.342765][T12797] device hsr_slave_1 entered promiscuous mode [ 1347.355909][T12797] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1347.365552][T12797] Cannot create hsr debugfs directory [ 1347.422067][ T4522] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1347.470573][T12924] netlink: 71 bytes leftover after parsing attributes in process `syz.0.1666'. [ 1347.679231][ T4319] logitech-hidpp-device 0005:046D:B012.0022: Device not connected [ 1349.190183][ T4289] Bluetooth: hci3: command 0x040f tx timeout [ 1349.246811][T12833] bridge0: port 1(bridge_slave_0) entered blocking state [ 1349.359757][T12833] bridge0: port 1(bridge_slave_0) entered disabled state [ 1349.388724][T12833] device bridge_slave_0 entered promiscuous mode [ 1349.486206][T12936] mmap: syz.2.1669 (12936) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1349.564321][T12833] bridge0: port 2(bridge_slave_1) entered blocking state [ 1349.580821][T12833] bridge0: port 2(bridge_slave_1) entered disabled state [ 1349.608373][T12833] device bridge_slave_1 entered promiscuous mode [ 1349.758514][T12833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1349.796823][T12833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1349.935501][T12833] team0: Port device team_slave_0 added [ 1349.945680][T12759] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1349.992762][T12833] team0: Port device team_slave_1 added [ 1350.020842][T12759] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1350.301858][T12759] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1350.391104][ T4522] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1350.440461][T12833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1350.467254][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1350.537155][T12833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1351.199002][T12967] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1674'. [ 1352.121839][ T4288] Bluetooth: hci3: command 0x0419 tx timeout [ 1352.235323][T12759] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1352.270496][ T27] audit: type=1800 audit(1785981173.034:21): pid=12970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1671" name="id" dev="configfs" ino=79564 res=0 errno=0 [ 1352.493532][ T4522] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1352.506889][T12833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1352.515407][T12833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1352.544574][T12833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1352.823915][ T4522] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.051526][ T4522] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1353.195693][T12833] device hsr_slave_0 entered promiscuous mode [ 1353.238696][T12833] device hsr_slave_1 entered promiscuous mode [ 1353.297174][T12833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1353.318999][T12833] Cannot create hsr debugfs directory [ 1353.611841][ T27] audit: type=1800 audit(1785981174.374:22): pid=12998 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1679" name="id" dev="configfs" ino=79705 res=0 errno=0 [ 1353.747994][T12759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1353.838536][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1353.848910][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1353.875879][T12759] 8021q: adding VLAN 0 to HW filter on device team0 [ 1353.985572][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1354.003034][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1354.016146][ T4463] bridge0: port 1(bridge_slave_0) entered blocking state [ 1354.023411][ T4463] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1354.044165][T12797] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1354.152992][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1354.169266][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1354.185142][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1354.195729][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1354.203012][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1354.237335][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1354.246748][T12797] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1354.377701][T12797] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1354.420945][T12797] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1354.498932][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1354.543609][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1354.591448][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1354.616614][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1354.800167][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1354.821060][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1354.863999][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1354.918247][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1354.933338][T12759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1354.969804][T12759] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1355.874109][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1355.886519][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1356.609521][ T27] audit: type=1800 audit(1785981177.374:23): pid=13050 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1687" name="id" dev="configfs" ino=81939 res=0 errno=0 [ 1356.854964][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1356.866221][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1357.205838][T12759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1357.982260][T12797] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1358.398755][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1358.412983][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1358.471769][T12797] 8021q: adding VLAN 0 to HW filter on device team0 [ 1358.831337][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1358.848221][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1358.877690][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1358.884872][T11776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1358.917624][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1358.947267][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1358.977306][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1358.984518][T11776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1359.023094][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1359.358190][T12833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1359.407353][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1359.416512][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1359.441434][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1359.789676][T12833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1359.860136][T12833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1359.926340][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1359.945473][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1359.975214][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1359.986420][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1360.016316][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1360.797722][T12833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1360.924790][T12797] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1360.966841][T12797] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1361.006218][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1361.028005][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1361.047643][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1361.078388][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1361.097822][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1361.113941][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1361.139055][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1361.220396][T12759] device veth0_vlan entered promiscuous mode [ 1361.237980][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1361.267923][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1361.305321][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1361.975066][T12759] device veth1_vlan entered promiscuous mode [ 1362.140224][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1362.168464][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1362.850054][T12759] device veth0_macvtap entered promiscuous mode [ 1362.919793][T12759] device veth1_macvtap entered promiscuous mode [ 1363.025186][T12833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1363.772878][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.811214][T13125] overlayfs: missing 'lowerdir' [ 1363.817416][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.837171][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.857399][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.880897][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.902648][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.923863][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1363.957153][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1363.980040][T12759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1364.018191][T12833] 8021q: adding VLAN 0 to HW filter on device team0 [ 1364.039405][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1364.048989][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1364.068377][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1364.076085][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1364.127553][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1364.147985][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1364.188174][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1364.217997][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1364.467022][ T4522] device hsr_slave_0 left promiscuous mode [ 1364.527035][ T4522] device hsr_slave_1 left promiscuous mode [ 1364.587124][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1364.594635][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1364.694332][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1364.734565][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1364.800812][ T4522] device bridge_slave_1 left promiscuous mode [ 1364.808032][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1364.897640][ T4522] device bridge_slave_0 left promiscuous mode [ 1364.904012][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1365.259464][ T4522] device hsr_slave_0 left promiscuous mode [ 1365.357131][ T4522] device hsr_slave_1 left promiscuous mode [ 1365.437312][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1365.444870][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1365.524032][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1365.543411][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1365.618459][ T4522] device bridge_slave_1 left promiscuous mode [ 1365.624861][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1365.737599][ T4522] device bridge_slave_0 left promiscuous mode [ 1365.743891][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1366.047299][ T4522] device veth1_macvtap left promiscuous mode [ 1366.053564][ T4522] device veth0_macvtap left promiscuous mode [ 1366.067220][ T4522] device veth1_vlan left promiscuous mode [ 1366.073195][ T4522] device veth0_vlan left promiscuous mode [ 1366.472750][ T27] audit: type=1800 audit(1785981187.234:24): pid=13158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1695" name="id" dev="configfs" ino=82216 res=0 errno=0 [ 1366.547377][ T4522] device veth1_macvtap left promiscuous mode [ 1366.553889][ T4522] device veth0_macvtap left promiscuous mode [ 1366.567336][ T4522] device veth1_vlan left promiscuous mode [ 1366.573247][ T4522] device veth0_vlan left promiscuous mode [ 1366.899395][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.905822][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1366.954403][ T4318] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 1367.139103][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1367.156184][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1367.177128][ T4318] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1367.207339][ T4318] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1367.227259][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1367.257744][ T4318] usb 3-1: config 0 descriptor?? [ 1367.691449][ T4318] plantronics 0003:047F:FFFF.0023: unbalanced collection at end of report description [ 1367.702239][ T4318] plantronics 0003:047F:FFFF.0023: parse failed [ 1367.709220][ T4318] plantronics: probe of 0003:047F:FFFF.0023 failed with error -22 [ 1367.887161][ T4318] usb 3-1: USB disconnect, device number 14 [ 1368.757397][ T4318] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 1368.947329][ T4318] usb 3-1: Using ep0 maxpacket: 32 [ 1368.954673][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1368.974067][ T4318] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1368.985247][ T4318] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1368.994826][ T4318] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1369.025211][ T4318] usb 3-1: config 0 descriptor?? [ 1369.034689][ T4318] hub 3-1:0.0: USB hub found [ 1369.245467][ T4318] hub 3-1:0.0: 1 port detected [ 1369.863415][ T4318] hub 3-1:0.0: activate --> -90 [ 1369.879340][ T4288] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1369.893482][ T4288] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1369.905458][ T4288] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1369.934077][ T4288] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1369.944173][ T4288] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1369.951637][ T4288] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1370.266862][ T4318] usb 3-1-port1: config error [ 1370.276003][ T4322] usb 3-1: USB disconnect, device number 15 [ 1370.816508][T13170] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1370.825466][T13170] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1371.088832][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1371.368152][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1371.647643][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1371.950084][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1372.018553][ T4288] Bluetooth: hci5: command 0x0409 tx timeout [ 1374.097434][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 1374.103569][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 1374.149617][ T4522] bond0 (unregistering): Released all slaves [ 1376.177298][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 1377.969711][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1378.267222][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 1378.269790][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1378.567626][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1378.858354][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1381.040754][ T4522] bond0 (unregistering): Released all slaves [ 1381.460714][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1381.471900][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.482770][T12759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1381.494853][T12759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1381.506481][T12759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1381.536226][T12797] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1381.546949][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1381.557805][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1381.568474][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1381.580896][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1381.593911][T11776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1381.601122][T11776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1381.613545][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1381.856103][T12759] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.874028][T12759] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.884054][T12759] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.901630][T12759] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1381.979278][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1382.015274][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1382.057746][ T4463] bridge0: port 2(bridge_slave_1) entered blocking state [ 1382.064937][ T4463] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1382.130599][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1382.174552][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1382.188281][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1382.218553][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1382.238085][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1382.257865][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1382.358228][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1382.379228][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1382.422058][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1382.526784][T12833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1382.598384][T12833] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1382.611413][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1382.628132][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1382.888732][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1382.911166][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1382.947756][ T4377] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1382.955750][ T4377] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.014388][T12797] device veth0_vlan entered promiscuous mode [ 1383.083915][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1383.108292][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1383.148177][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1383.222956][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1383.258039][ T4463] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1383.348107][ T4463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1383.352658][T12797] device veth1_vlan entered promiscuous mode [ 1383.365025][ T4463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1383.428541][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1383.438555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1383.467734][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1383.516097][T13167] chnl_net:caif_netlink_parms(): no params data found [ 1383.612949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1383.661536][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1383.712396][T12797] device veth0_macvtap entered promiscuous mode [ 1383.751605][T12797] device veth1_macvtap entered promiscuous mode [ 1383.805036][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.826242][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.839039][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.857502][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.875422][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1383.886282][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1383.900062][T12797] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1384.042368][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1384.052536][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1384.130380][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1384.166180][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.190255][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.223449][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.252911][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.293625][T12797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1384.347081][T12797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1384.397364][T12797] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1384.468618][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1384.479127][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1384.533505][T12797] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.558418][T12797] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.597017][T12797] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.628933][T12797] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1384.669259][T13167] bridge0: port 1(bridge_slave_0) entered blocking state [ 1384.676478][T13167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1384.719403][T13167] device bridge_slave_0 entered promiscuous mode [ 1384.762770][T13167] bridge0: port 2(bridge_slave_1) entered blocking state [ 1384.797539][T13167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1384.828237][T13167] device bridge_slave_1 entered promiscuous mode [ 1384.956430][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1384.969473][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1385.031813][T13167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1385.326071][T13167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1385.351882][T12833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1385.425506][T13238] xt_TCPMSS: Only works on TCP SYN packets [ 1385.997377][T12833] device veth0_vlan entered promiscuous mode [ 1386.015509][T12833] device veth1_vlan entered promiscuous mode [ 1386.043918][T12833] device veth0_macvtap entered promiscuous mode [ 1386.129108][T12833] device veth1_macvtap entered promiscuous mode [ 1386.160171][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.218545][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.279966][T13243] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 1386.288403][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.317050][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.320878][T13243] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 1386.340299][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.358594][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.369428][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1386.392412][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1386.424856][T12833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1386.441237][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1386.477413][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1386.566030][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1386.601176][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1386.630640][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1386.640161][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1386.665814][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1386.697032][ T9192] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 1386.726043][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1386.751189][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 1386.777930][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1386.804796][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1386.828084][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1386.850109][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1386.895097][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1386.905254][ T9192] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 1386.920762][ T9192] usb 3-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1386.947114][ T9192] usb 3-1: config 220 has no interface number 2 [ 1386.964124][ T9192] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1387.039885][T13167] team0: Port device team_slave_0 added [ 1387.046924][ T9192] usb 3-1: config 220 interface 0 has no altsetting 0 [ 1387.077242][ T9192] usb 3-1: config 220 interface 76 has no altsetting 0 [ 1387.091293][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.110431][ T9192] usb 3-1: config 220 interface 1 has no altsetting 0 [ 1387.127778][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.157504][ T9192] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1387.182326][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.187316][ T9192] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1387.213712][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.243089][ T9192] usb 3-1: Product: syz [ 1387.247603][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.253447][ T9192] usb 3-1: Manufacturer: syz [ 1387.275689][ T9192] usb 3-1: SerialNumber: syz [ 1387.280716][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.311299][T12833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1387.347155][T12833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1387.381700][T12833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1387.441241][T13167] team0: Port device team_slave_1 added [ 1387.521043][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1387.533743][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1387.577588][ T9192] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 1387.584089][ T9192] usb 3-1: No valid video chain found. [ 1387.597942][T12833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.618657][ T9192] usb 3-1: selecting invalid altsetting 0 [ 1387.647925][T12833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.656720][T12833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.693595][T12833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1387.715277][ T9192] usb 3-1: selecting invalid altsetting 0 [ 1387.726703][ T9192] usbtest: probe of 3-1:220.1 failed with error -22 [ 1387.752980][ T9192] usb 3-1: USB disconnect, device number 16 [ 1387.918480][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1387.926479][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1387.934518][T13167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1387.972271][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.066190][T13167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1388.089166][T13167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1388.096530][T13167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1388.244119][T13167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1388.334001][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1388.482546][T13167] device hsr_slave_0 entered promiscuous mode [ 1388.560357][T13167] device hsr_slave_1 entered promiscuous mode [ 1388.664432][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.687109][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.704332][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1388.760552][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1388.834597][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1388.860364][T11826] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1390.540756][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1390.646494][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1391.000626][ T4522] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1392.570607][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1392.881692][ T4522] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.209210][ T27] audit: type=1326 audit(1785981213.974:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13288 comm="syz.1.1715" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7eff4a79e0d9 code=0x0 [ 1393.289482][ T4522] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1393.301611][T13295] overlayfs: failed to resolve './file0': -2 [ 1393.703051][ T4522] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1396.298030][T13321] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1720'. [ 1397.408098][T13328] overlayfs: missing 'workdir' [ 1400.438971][T13167] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1401.908781][T13167] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1401.975901][T13372] bridge0: port 1(bridge_slave_0) entered blocking state [ 1401.984816][T13372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1403.485664][T13384] overlayfs: missing 'workdir' [ 1403.655976][T13389] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 1403.718680][T13167] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1403.821799][T13167] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1404.036893][T13397] overlayfs: failed to resolve './file2': -2 [ 1405.543434][T13167] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1405.668886][ T27] audit: type=1800 audit(1785981226.434:26): pid=13422 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1742" name="id" dev="configfs" ino=83702 res=0 errno=0 [ 1405.766590][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1405.792609][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1405.834941][T13167] 8021q: adding VLAN 0 to HW filter on device team0 [ 1405.991308][T13435] overlayfs: missing 'workdir' [ 1406.020341][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1406.039544][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1406.071609][T11137] bridge0: port 1(bridge_slave_0) entered blocking state [ 1406.079077][T11137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1406.103974][T11137] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1407.363953][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1407.380273][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1407.407924][T11776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1407.415162][T11776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1407.433442][ T4821] logitech-hidpp-device 0005:046D:B012.0024: Device not connected [ 1407.451014][T11776] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1407.476891][T13441] tipc: Started in network mode [ 1407.483147][T13441] tipc: Node identity 7f000001, cluster identity 4711 [ 1407.504123][T13441] tipc: New replicast peer: 127.0.0.1 [ 1407.514285][T13441] tipc: Enabled bearer , priority 10 [ 1407.818922][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1407.832738][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1407.874052][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1409.088074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1409.140108][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1409.178503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1409.360902][ T27] audit: type=1800 audit(1785981230.124:27): pid=13481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1754" name="id" dev="configfs" ino=82941 res=0 errno=0 [ 1409.525319][T13488] overlayfs: missing 'lowerdir' [ 1411.295024][ T9191] logitech-hidpp-device 0005:046D:B012.0025: Device not connected [ 1411.331905][T13504] overlayfs: failed to resolve './file2': -2 [ 1411.417932][ T4319] tipc: Node number set to 2130706433 [ 1411.429951][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1411.456040][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1411.489289][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1411.528293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1411.570120][T13167] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1411.820789][ T6673] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1412.055513][ T6673] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1412.084048][ T6673] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 2 [ 1412.203341][ T6673] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1412.306117][ T6673] usb 7-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice= 1.00 [ 1412.333829][ T6673] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1412.344683][ T6673] usb 7-1: Product: syz [ 1412.412257][ T6673] usb 7-1: Manufacturer: syz [ 1412.511681][ T6673] usb 7-1: SerialNumber: syz [ 1412.714402][T13511] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 1412.735934][ T6673] usbserial_generic 7-1:1.0: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 1412.867034][ T6673] usbserial_generic 7-1:1.0: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 1412.895167][ T6673] usbserial_generic 7-1:1.0: generic converter detected [ 1412.929642][ T6673] usb 7-1: generic converter now attached to ttyUSB0 [ 1413.049117][ T6673] usb 7-1: USB disconnect, device number 2 [ 1413.082413][ T6673] generic ttyUSB0: generic converter now disconnected from ttyUSB0 [ 1413.123176][ T6673] usbserial_generic 7-1:1.0: device disconnected [ 1413.467767][ T27] audit: type=1800 audit(1785981234.224:28): pid=13534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1768" name="id" dev="configfs" ino=84086 res=0 errno=0 [ 1413.527406][ T4522] device hsr_slave_0 left promiscuous mode [ 1413.554738][T13543] overlayfs: missing 'lowerdir' [ 1413.597519][ T4522] device hsr_slave_1 left promiscuous mode [ 1413.687225][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1413.707565][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1414.319438][T13552] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1771'. [ 1415.227841][ T4522] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1415.235988][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1415.277722][ T4522] device bridge_slave_1 left promiscuous mode [ 1415.284035][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1415.548153][ T4522] device bridge_slave_0 left promiscuous mode [ 1415.558269][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1416.297061][ T7] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 1416.487140][ T7] usb 2-1: Using ep0 maxpacket: 16 [ 1416.495505][ T7] usb 2-1: config 0 has no interfaces? [ 1416.521587][ T7] usb 2-1: New USB device found, idVendor=046d, idProduct=087c, bcdDevice=b0.7a [ 1416.561533][ T7] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.591386][ T7] usb 2-1: Product: syz [ 1416.605894][ T7] usb 2-1: Manufacturer: syz [ 1416.622904][ T7] usb 2-1: SerialNumber: syz [ 1416.649293][ T7] usb 2-1: config 0 descriptor?? [ 1417.673150][ T7] usb 2-1: USB disconnect, device number 6 [ 1417.727420][ T4522] device veth1_macvtap left promiscuous mode [ 1417.733787][ T4522] device veth0_macvtap left promiscuous mode [ 1417.757811][ T4522] device veth1_vlan left promiscuous mode [ 1417.763940][ T4522] device veth0_vlan left promiscuous mode [ 1418.235474][ T27] audit: type=1800 audit(1785981238.994:29): pid=13586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1779" name="id" dev="configfs" ino=84141 res=0 errno=0 [ 1418.357337][ T7] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1418.547896][ T7] usb 3-1: Using ep0 maxpacket: 32 [ 1418.555084][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1418.598234][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1418.618102][ T7] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 1418.638511][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1419.213066][T13596] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1781'. [ 1420.108201][ T7] usb 3-1: config 0 descriptor?? [ 1420.158537][ T7] hub 3-1:0.0: USB hub found [ 1420.359055][ T7] hub 3-1:0.0: 1 port detected [ 1420.997424][ T7] hub 3-1:0.0: activate --> -90 [ 1421.449240][ T14] usb 3-1: USB disconnect, device number 17 [ 1426.002432][T13633] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1793'. [ 1428.340265][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.348038][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1429.514339][T13667] xt_hashlimit: size too large, truncated to 1048576 [ 1432.437947][T13684] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1805'. [ 1433.708209][ T4288] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1433.720012][ T4288] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1433.728853][ T4288] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1433.738852][ T4288] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1433.746633][ T4288] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1433.754459][ T4288] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1434.235872][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1434.588169][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1435.139200][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1435.647136][ T7] usb 1-1: USB disconnect, device number 4 [ 1435.857224][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 1436.057998][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1437.417206][ T7] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 1437.640453][ T7] usb 1-1: Dual-Role OTG device on HNP port [ 1437.647254][ T7] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1437.656749][ T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1437.892799][ T7] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1437.937102][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 1437.971796][ T7] gspca_spca501: reg write: error -32 [ 1438.002055][ T7] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1438.059788][ T7] spca501: probe of 1-1:1.0 failed with error -22 [ 1440.286869][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 1442.327962][T13779] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1828'. [ 1443.118860][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 1443.259011][ T4522] bond0 (unregistering): Released all slaves [ 1445.789756][T13804] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1830'. [ 1446.135043][T13685] chnl_net:caif_netlink_parms(): no params data found [ 1446.830958][T13685] bridge0: port 1(bridge_slave_0) entered blocking state [ 1446.839540][T13685] bridge0: port 1(bridge_slave_0) entered disabled state [ 1446.853957][T13685] device bridge_slave_0 entered promiscuous mode [ 1446.878248][T13685] bridge0: port 2(bridge_slave_1) entered blocking state [ 1446.893280][T13685] bridge0: port 2(bridge_slave_1) entered disabled state [ 1446.903772][T13685] device bridge_slave_1 entered promiscuous mode [ 1446.960236][T13685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1446.986855][T13685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1447.156411][T13685] team0: Port device team_slave_0 added [ 1447.377200][T13685] team0: Port device team_slave_1 added [ 1447.471347][T13825] xt_TCPMSS: Only works on TCP SYN packets [ 1448.624689][T13833] overlayfs: missing 'lowerdir' [ 1448.813631][T13685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1448.877359][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1448.924181][T13685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1448.963309][T13685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1449.030386][T13685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1449.082510][T13685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1449.277068][ T4319] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1449.352531][T13685] device hsr_slave_0 entered promiscuous mode [ 1449.467989][T13685] device hsr_slave_1 entered promiscuous mode [ 1449.477119][ T4319] usb 3-1: Using ep0 maxpacket: 16 [ 1449.485195][ T4319] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1449.527297][T13685] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1449.537105][T13685] Cannot create hsr debugfs directory [ 1451.031259][ T4319] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 1451.060676][ T4319] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 1451.087189][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=5 [ 1451.148982][ T4319] usb 3-1: Product: syz [ 1451.153629][ T4319] usb 3-1: Manufacturer: syz [ 1451.217108][ T4319] usb 3-1: SerialNumber: syz [ 1451.883566][ T14] usb 3-1: USB disconnect, device number 18 [ 1452.678014][T13879] overlayfs: missing 'lowerdir' [ 1456.017293][ T4288] Bluetooth: hci4: command 0x0406 tx timeout [ 1458.492339][T13920] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1861'. [ 1458.527591][T13941] overlayfs: conflicting lowerdir path [ 1459.068432][ T27] audit: type=1326 audit(1785981279.834:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1459.215210][ T27] audit: type=1326 audit(1785981279.854:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1459.397364][ T27] audit: type=1326 audit(1785981279.854:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1459.573094][ T27] audit: type=1326 audit(1785981279.864:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1459.731957][ T27] audit: type=1326 audit(1785981279.874:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1460.017619][ T27] audit: type=1326 audit(1785981279.924:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6f1459e0d9 code=0x7ffc0000 [ 1460.109372][ T27] audit: type=1326 audit(1785981279.924:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f6f1459de42 code=0x7ffc0000 [ 1460.220766][ T27] audit: type=1326 audit(1785981279.924:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=10 compat=0 ip=0x7f6f1459ded7 code=0x7ffc0000 [ 1460.295327][ T27] audit: type=1326 audit(1785981279.924:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=14 compat=0 ip=0x7f6f1455add1 code=0x7ffc0000 [ 1460.364583][T13685] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1460.399850][ T27] audit: type=1326 audit(1785981279.924:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13952 comm="syz.2.1870" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=435 compat=0 ip=0x7f6f1459eec9 code=0x7ffc0000 [ 1460.727193][T13685] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1462.172434][ T4288] Bluetooth: hci2: command 0x0406 tx timeout [ 1462.276603][T13685] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1462.537155][ T4522] device hsr_slave_0 left promiscuous mode [ 1462.627174][ T4522] device hsr_slave_1 left promiscuous mode [ 1462.711773][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1462.770472][ T4522] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1462.847571][ T4522] device bridge_slave_1 left promiscuous mode [ 1462.856852][ T4522] bridge0: port 2(bridge_slave_1) entered disabled state [ 1462.977589][ T4522] device bridge_slave_0 left promiscuous mode [ 1462.983935][ T4522] bridge0: port 1(bridge_slave_0) entered disabled state [ 1463.046474][ T4261] usb 1-1: USB disconnect, device number 5 [ 1465.942078][ T4522] team0 (unregistering): Port device team_slave_1 removed [ 1466.257321][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 1466.931446][ T4522] team0 (unregistering): Port device team_slave_0 removed [ 1467.277559][ T4522] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1467.627582][ T4522] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1469.200081][ T4522] bond0 (unregistering): Released all slaves [ 1469.628744][T13685] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1469.743061][ T27] kauditd_printk_skb: 64 callbacks suppressed [ 1469.743081][ T27] audit: type=1800 audit(1785981290.504:104): pid=14023 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1892" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1469.744260][T14023] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1469.780082][T14023] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1469.789803][T14023] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1470.741236][T14057] bridge0: port 1(bridge_slave_0) entered blocking state [ 1470.748497][T14057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1471.552093][T13685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1471.708992][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 1471.731630][ T4739] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1471.872666][T13685] 8021q: adding VLAN 0 to HW filter on device team0 [ 1471.923781][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 1471.947085][ T6673] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1471.979365][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1472.042052][ T4377] bridge0: port 1(bridge_slave_0) entered blocking state [ 1472.049308][ T4377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1472.142546][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 1472.258672][ T6673] usb 1-1: Dual-Role OTG device on HNP port [ 1472.267386][ T6673] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1472.276575][ T6673] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1472.304954][ T6673] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1472.313930][ T6673] gspca_spca501: reg write: error -32 [ 1472.324956][ T6673] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1472.346187][ T6673] spca501: probe of 1-1:1.0 failed with error -22 [ 1473.818372][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 1473.841847][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1473.934751][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1473.942069][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1474.013187][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 1474.024588][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 1474.035974][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 1474.048180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1474.118083][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1474.188058][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 1474.223230][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1474.263368][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 1474.298963][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1474.342720][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 1474.391930][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1474.442838][T13685] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1476.982747][T14124] [ 1477.574205][T14132] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1919'. [ 1478.962074][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1478.977750][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1479.012594][T13685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1482.014494][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 1483.516854][ T4529] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1483.803503][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 1483.822795][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1483.875479][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1483.898189][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1483.930012][T13685] device veth0_vlan entered promiscuous mode [ 1484.213657][T13685] device veth1_vlan entered promiscuous mode [ 1484.704946][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 1484.785417][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1484.896597][T13685] device veth0_macvtap entered promiscuous mode [ 1485.127536][ T4371] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1485.153899][T13685] device veth1_macvtap entered promiscuous mode [ 1485.513928][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.654446][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1485.799213][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1485.950581][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.081720][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.221102][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.637077][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1486.668586][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1486.688455][T13685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1486.912121][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 1486.951475][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1487.020422][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.059491][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.110443][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.153068][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.218168][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.270794][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.333996][T13685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1487.412645][T13685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1487.489489][T13685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1487.657000][ T4322] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 1487.697372][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 1487.719493][ T4376] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1487.785545][T13685] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.831078][T13685] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.922034][T13685] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1487.993787][T13685] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1488.257068][ T4322] usb 2-1: device descriptor read/all, error -71 [ 1488.390814][ T4529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.419558][ T4529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.493161][ T4377] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1488.551990][ T4377] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1488.577049][ T4377] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1488.617769][ T4413] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 1489.814704][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1489.831823][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.997319][T14266] netlink: 112 bytes leftover after parsing attributes in process `syz.5.1941'. [ 1494.965675][T14295] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1947'. [ 1497.420049][T14305] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 1497.429514][T14305] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 1497.439353][T14305] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1497.477395][ T27] audit: type=1800 audit(1785981318.184:105): pid=14305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.1950" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 1498.060592][T14327] af_packet: tpacket_rcv: packet too big, clamped from 14 to 4294967286. macoff=82 [ 1499.634617][T14349] overlayfs: failed to resolve './file1': -2 [ 1500.506819][T14354] syz.2.1962 (14354) used greatest stack depth: 18128 bytes left [ 1507.367096][T14440] netlink: 112 bytes leftover after parsing attributes in process `syz.6.1984'. [ 1509.512776][ T27] audit: type=1326 audit(1785981330.274:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14453 comm="syz.7.1970" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1b14b9e0d9 code=0x0 [ 1510.455250][T14468] overlayfs: missing 'workdir' [ 1514.023241][T14505] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1995'. [ 1515.938335][ T22] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 1516.290595][ T22] usb 6-1: config 220 has an invalid interface number: 76 but max is 2 [ 1516.302987][ T22] usb 6-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1516.314308][ T22] usb 6-1: config 220 has no interface number 2 [ 1516.321656][ T22] usb 6-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1516.335181][ T22] usb 6-1: config 220 interface 0 has no altsetting 0 [ 1516.342364][ T22] usb 6-1: config 220 interface 76 has no altsetting 0 [ 1516.349667][ T22] usb 6-1: config 220 interface 1 has no altsetting 0 [ 1516.374080][ T22] usb 6-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1516.546219][ T22] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1516.761845][ T22] usb 6-1: Product: syz [ 1516.869671][ T22] usb 6-1: Manufacturer: syz [ 1517.066196][ T22] usb 6-1: SerialNumber: syz [ 1517.523691][ T22] usb 6-1: Found UVC 7.01 device syz (8086:0b07) [ 1517.532817][ T22] usb 6-1: No valid video chain found. [ 1517.539320][ T22] usb 6-1: selecting invalid altsetting 0 [ 1517.569963][ T22] usb 6-1: selecting invalid altsetting 0 [ 1517.576062][ T22] usbtest: probe of 6-1:220.1 failed with error -22 [ 1518.316170][ T22] usb 6-1: USB disconnect, device number 4 [ 1519.614408][T14556] netlink: 112 bytes leftover after parsing attributes in process `syz.5.2008'. [ 1519.787330][ T22] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 1520.002308][ T22] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1520.033299][ T22] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1520.076803][ T22] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1520.096679][ T22] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1521.523517][ T22] usb 2-1: config 0 descriptor?? [ 1522.031545][ T22] usb 2-1: string descriptor 0 read error: -71 [ 1522.058440][ T22] usb 2-1: USB disconnect, device number 9 [ 1522.417765][ T4319] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 1522.627239][ T4319] usb 6-1: Using ep0 maxpacket: 16 [ 1522.645762][ T4319] usb 6-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 1522.686215][ T4319] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1522.727066][ T4319] usb 6-1: config 0 descriptor?? [ 1522.751329][ T4319] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 1524.659789][ T4319] usb 6-1: Detected FT232B [ 1525.328631][ T4319] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 1525.360197][ T4319] usb 6-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 1526.308712][T14612] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2020'. [ 1526.514164][T14097] usb 6-1: USB disconnect, device number 5 [ 1526.539389][T14097] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 1526.598625][T14097] ftdi_sio 6-1:0.0: device disconnected [ 1530.257130][T14097] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 1530.468869][T14097] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 1530.510827][T14097] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1530.593478][T14097] usb 6-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 1530.607932][T14097] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1531.516953][T14661] netlink: 112 bytes leftover after parsing attributes in process `syz.7.2032'. [ 1531.562201][T14097] usb 6-1: config 0 descriptor?? [ 1531.587423][T14651] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1532.031546][T14097] waltop 0003:172F:0501.0026: hidraw0: USB HID v0.00 Device [HID 172f:0501] on usb-dummy_hcd.5-1/input0 [ 1532.127216][ T4319] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1532.228651][T14097] usb 6-1: USB disconnect, device number 6 [ 1532.781759][T14673] netlink: 92 bytes leftover after parsing attributes in process `syz.2.2022'. [ 1533.689702][ T4319] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1533.713672][ T4319] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1533.836559][ T4319] usb 7-1: config 220 has no interface number 2 [ 1534.181648][ T4319] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1534.411083][ T4319] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1535.221319][T14666] fido_id[14666]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 1535.287163][ T4319] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1535.294304][ T4319] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1536.791174][ T4319] usb 7-1: string descriptor 0 read error: -71 [ 1536.817120][ T4319] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1536.826244][ T4319] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.964327][ T4319] usb 7-1: can't set config #220, error -71 [ 1537.021422][ T4319] usb 7-1: USB disconnect, device number 3 [ 1537.074988][ T27] audit: type=1800 audit(1785981357.834:107): pid=14696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2037" name="id" dev="configfs" ino=88369 res=0 errno=0 [ 1539.517163][ T22] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1539.707198][ T22] usb 3-1: Using ep0 maxpacket: 32 [ 1539.714595][ T22] usb 3-1: config 0 has an invalid interface number: 188 but max is 0 [ 1539.794843][ T22] usb 3-1: config 0 has no interface number 0 [ 1539.833255][ T22] usb 3-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 1539.950001][ T22] usb 3-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 1540.007168][ T22] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1540.066636][ T22] usb 3-1: Product: syz [ 1540.097299][ T22] usb 3-1: Manufacturer: syz [ 1540.102404][ T22] usb 3-1: SerialNumber: syz [ 1540.592103][ T22] usb 3-1: config 0 descriptor?? [ 1540.639831][T14727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1541.055372][T14727] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1542.639769][ T22] asix 3-1:0.188 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1542.681547][ T22] asix: probe of 3-1:0.188 failed with error -71 [ 1542.760410][ T22] usb 3-1: USB disconnect, device number 19 [ 1543.034282][ T27] audit: type=1800 audit(1785981363.794:108): pid=14754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2051" name="id" dev="configfs" ino=88928 res=0 errno=0 [ 1545.180258][ T27] audit: type=1800 audit(1785981365.934:109): pid=14780 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2060" name="id" dev="configfs" ino=88979 res=0 errno=0 [ 1545.645598][T14783] xt_hashlimit: size too large, truncated to 1048576 [ 1549.475213][ T27] audit: type=1800 audit(1785981370.234:110): pid=14818 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2068" name="id" dev="configfs" ino=89033 res=0 errno=0 [ 1551.230102][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1551.237231][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 1551.419279][ T27] audit: type=1800 audit(1785981372.184:111): pid=14848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2073" name="id" dev="configfs" ino=87987 res=0 errno=0 [ 1553.968569][ T27] audit: type=1800 audit(1785981374.734:112): pid=14896 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2087" name="id" dev="configfs" ino=89151 res=0 errno=0 [ 1555.636903][T14920] netlink: 112 bytes leftover after parsing attributes in process `syz.6.2094'. [ 1558.208830][ T27] audit: type=1800 audit(1785981378.974:113): pid=14945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2102" name="id" dev="configfs" ino=89207 res=0 errno=0 [ 1558.577013][ T4288] Bluetooth: hci0: command 0x0406 tx timeout [ 1560.137882][T14968] netlink: 112 bytes leftover after parsing attributes in process `syz.2.2107'. [ 1563.257145][ T26] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 1563.331379][ T27] audit: type=1800 audit(1785981384.094:114): pid=15005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.2117" name="id" dev="configfs" ino=89294 res=0 errno=0 [ 1563.466972][ T26] usb 7-1: Using ep0 maxpacket: 16 [ 1563.475195][ T26] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1563.613461][T15012] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1563.694427][ T26] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1563.712378][ T26] usb 7-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 1563.721822][ T26] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1563.730872][ T26] usb 7-1: Product: syz [ 1563.735245][ T26] usb 7-1: Manufacturer: syz [ 1563.740162][ T26] usb 7-1: SerialNumber: syz [ 1564.336609][ T26] usb 7-1: 1:1 : format type 226 is not supported yet [ 1564.346463][ T26] usb 7-1: unit 3 not found! [ 1564.405206][ T26] usb 7-1: USB disconnect, device number 4 [ 1565.227819][T15023] netlink: 112 bytes leftover after parsing attributes in process `syz.1.2120'. [ 1566.211200][T15017] udevd[15017]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1566.697122][ T14] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 1566.899087][ T14] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 1566.918534][ T14] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 1566.961579][ T14] usb 7-1: config 220 has no interface number 2 [ 1567.005828][ T14] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 1567.123240][ T14] usb 7-1: config 220 interface 0 has no altsetting 0 [ 1567.141585][ T14] usb 7-1: config 220 interface 76 has no altsetting 0 [ 1567.150571][ T14] usb 7-1: config 220 interface 1 has no altsetting 0 [ 1567.169957][ T14] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 1567.210704][ T14] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1567.249862][ T14] usb 7-1: Product: syz [ 1567.270639][ T14] usb 7-1: Manufacturer: syz [ 1567.293222][ T14] usb 7-1: SerialNumber: syz [ 1568.086214][ T14] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 1568.103768][ T14] usb 7-1: No valid video chain found. [ 1568.132808][ T14] usb 7-1: selecting invalid altsetting 0 [ 1568.209380][ T14] usb 7-1: selecting invalid altsetting 0 [ 1568.215223][ T14] usbtest: probe of 7-1:220.1 failed with error -22 [ 1568.297056][ T14] usb 7-1: USB disconnect, device number 5 [ 1573.517313][T14097] usb 1-1: USB disconnect, device number 6 [ 1574.503066][T15098] mtrr: base(0x10000000) is not aligned on a size(0x0000) boundary [ 1575.487066][T14097] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 1575.777906][T14097] usb 1-1: Dual-Role OTG device on HNP port [ 1575.797022][T14097] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1575.806154][T14097] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1576.072940][T14097] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1576.083749][T14097] gspca_spca501: reg write: error -32 [ 1576.092604][T14097] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1576.291141][T14097] spca501: probe of 1-1:1.0 failed with error -22 [ 1582.413969][T15181] usb usb2: Requested nonsensical USBDEVFS_URB_ZERO_PACKET. [ 1582.471196][ T27] audit: type=1800 audit(1785981403.234:115): pid=15182 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2172" name="id" dev="configfs" ino=91460 res=0 errno=0 [ 1588.436971][ T22] usb 7-1: new full-speed USB device number 6 using dummy_hcd [ 1588.649233][ T22] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1588.677822][ T22] usb 7-1: not running at top speed; connect to a high speed hub [ 1588.722676][ T22] usb 7-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 1588.729089][T15234] input: syz0 as /devices/virtual/input/input14 [ 1588.769407][ T22] usb 7-1: New USB device found, idVendor=0e41, idProduct=414b, bcdDevice= 0.40 [ 1588.796596][ T22] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1588.837023][ T22] usb 7-1: Product: syz [ 1588.845781][ T22] usb 7-1: Manufacturer: syz [ 1588.865296][ T22] usb 7-1: SerialNumber: syz [ 1589.032480][ T27] audit: type=1800 audit(1785981409.794:116): pid=15243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2177" name="id" dev="configfs" ino=91602 res=0 errno=0 [ 1590.783232][ T22] usb 7-1: Audio class v2/v3 interfaces need an interface association [ 1590.865789][ T22] snd-usb-audio: probe of 7-1:1.0 failed with error -22 [ 1590.902466][ T22] snd_usb_podhd 7-1:1.0: Line 6 POD X3 LIVE found [ 1590.935977][ T22] usb 7-1: selecting invalid altsetting 1 [ 1590.949607][ T22] snd_usb_podhd 7-1:1.0: set_interface failed [ 1590.965712][ T22] snd_usb_podhd 7-1:1.0: Line 6 POD X3 LIVE now disconnected [ 1591.007705][ T22] snd_usb_podhd: probe of 7-1:1.0 failed with error -22 [ 1591.083360][ T22] usb 7-1: USB disconnect, device number 6 [ 1591.107973][T15258] udevd[15258]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card6/controlC6/../uevent} for writing: No such file or directory [ 1591.156400][ T26] usb 1-1: USB disconnect, device number 7 [ 1593.077034][ T26] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 1593.268246][ T26] usb 1-1: Dual-Role OTG device on HNP port [ 1593.285418][ T26] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1594.786926][ T26] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1594.818817][ T26] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1594.825412][ T26] gspca_spca501: reg write: error -32 [ 1594.847340][ T26] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1594.854341][ T26] spca501: probe of 1-1:1.0 failed with error -22 [ 1597.561333][ T8515] usb 1-1: USB disconnect, device number 8 [ 1599.227981][T15330] 9pnet_fd: Insufficient options for proto=fd [ 1600.237145][ T8515] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 1600.457611][ T8515] usb 1-1: Dual-Role OTG device on HNP port [ 1600.464000][ T8515] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.01 [ 1600.506997][ T8515] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1600.562182][ T8515] gspca_main: spca501-2.14.0 probing 0000:0000 [ 1600.591200][ T8515] gspca_spca501: reg write: error -32 [ 1600.621542][ T8515] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 1600.657145][ T8515] spca501: probe of 1-1:1.0 failed with error -22 [ 1601.082072][T15351] overlayfs: failed to resolve './file2': -2 [ 1603.756349][T15368] [ 1603.758772][T15368] ====================================================== [ 1603.765830][T15368] WARNING: possible circular locking dependency detected [ 1603.772941][T15368] syzkaller #0 Not tainted [ 1603.777394][T15368] ------------------------------------------------------ [ 1603.784449][T15368] syz.6.2201/15368 is trying to acquire lock: [ 1603.790556][T15368] ffff88807bb8daf0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3af/0x1c40 [ 1603.801458][T15368] [ 1603.801458][T15368] but task is already holding lock: [ 1603.808898][T15368] ffff8880174697d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1603.819068][T15368] [ 1603.819068][T15368] which lock already depends on the new lock. [ 1603.819068][T15368] [ 1603.829598][T15368] [ 1603.829598][T15368] the existing dependency chain (in reverse order) is: [ 1603.838689][T15368] [ 1603.838689][T15368] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 1603.846336][T15368] down_read_killable+0x4c/0x340 [ 1603.852045][T15368] mmap_read_lock_killable+0x1d/0x60 [ 1603.857906][T15368] lock_mm_and_find_vma+0x2b1/0x2f0 [ 1603.863684][T15368] do_user_addr_fault+0x2e8/0xb20 [ 1603.869315][T15368] exc_page_fault+0x60/0x100 [ 1603.874584][T15368] asm_exc_page_fault+0x22/0x30 [ 1603.880091][T15368] fault_in_readable+0x13e/0x1f0 [ 1603.885695][T15368] fault_in_iov_iter_readable+0xbf/0x2f0 [ 1603.892119][T15368] generic_perform_write+0x1f1/0x5c0 [ 1603.898102][T15368] __generic_file_write_iter+0x148/0x2a0 [ 1603.904325][T15368] generic_file_write_iter+0xab/0x2e0 [ 1603.910295][T15368] vfs_write+0x482/0x9a0 [ 1603.915241][T15368] ksys_write+0x14d/0x260 [ 1603.920590][T15368] do_syscall_64+0x4c/0xa0 [ 1603.925619][T15368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.932111][T15368] [ 1603.932111][T15368] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 1603.940863][T15368] __lock_acquire+0x2d18/0x7c40 [ 1603.946332][T15368] lock_acquire+0x1bb/0x4a0 [ 1603.951429][T15368] down_write+0x36/0x60 [ 1603.956171][T15368] process_measurement+0x3af/0x1c40 [ 1603.961947][T15368] ima_file_mmap+0xe9/0x140 [ 1603.967043][T15368] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1603.973260][T15368] do_syscall_64+0x4c/0xa0 [ 1603.978430][T15368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1603.984921][T15368] [ 1603.984921][T15368] other info that might help us debug this: [ 1603.984921][T15368] [ 1603.995212][T15368] Possible unsafe locking scenario: [ 1603.995212][T15368] [ 1604.002718][T15368] CPU0 CPU1 [ 1604.007538][ T8515] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 1604.008103][T15368] ---- ---- [ 1604.008111][T15368] lock(&mm->mmap_lock); [ 1604.025411][T15368] lock(&sb->s_type->i_mutex_key#13); [ 1604.033459][T15368] lock(&mm->mmap_lock); [ 1604.040376][T15368] lock(&sb->s_type->i_mutex_key#13); [ 1604.045891][T15368] [ 1604.045891][T15368] *** DEADLOCK *** [ 1604.045891][T15368] [ 1604.054118][T15368] 1 lock held by syz.6.2201/15368: [ 1604.059362][T15368] #0: ffff8880174697d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1aa/0x7b0 [ 1604.069906][T15368] [ 1604.069906][T15368] stack backtrace: [ 1604.075908][T15368] CPU: 1 PID: 15368 Comm: syz.6.2201 Not tainted syzkaller #0 [ 1604.083453][T15368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 1604.093580][T15368] Call Trace: [ 1604.096978][T15368] [ 1604.100036][T15368] dump_stack_lvl+0x188/0x24e [ 1604.104848][T15368] ? load_image+0x410/0x410 [ 1604.109424][T15368] ? show_regs_print_info+0x12/0x12 [ 1604.115003][T15368] ? print_circular_bug+0x12b/0x1a0 [ 1604.120285][T15368] check_noncircular+0x296/0x330 [ 1604.125289][T15368] ? look_up_lock_class+0x75/0x140 [ 1604.130473][T15368] ? add_chain_block+0x9b0/0x9b0 [ 1604.135470][T15368] ? lockdep_lock+0xf1/0x1f0 [ 1604.140142][T15368] ? _find_first_zero_bit+0xd2/0x100 [ 1604.145481][T15368] __lock_acquire+0x2d18/0x7c40 [ 1604.150396][T15368] ? ima_match_policy+0x10d/0x21b0 [ 1604.155593][T15368] ? __lock_acquire+0x7c40/0x7c40 [ 1604.160760][T15368] ? verify_lock_unused+0x140/0x140 [ 1604.166015][T15368] ? ima_match_policy+0x10d/0x21b0 [ 1604.171192][T15368] ? ima_match_policy+0x211c/0x21b0 [ 1604.176574][T15368] lock_acquire+0x1bb/0x4a0 [ 1604.181152][T15368] ? process_measurement+0x3af/0x1c40 [ 1604.186603][T15368] ? __might_sleep+0xd0/0xd0 [ 1604.191314][T15368] ? __se_sys_ioctl+0x48/0x170 [ 1604.196275][T15368] ? read_lock_is_recursive+0x10/0x10 [ 1604.201712][T15368] ? ima_get_action+0x71/0xa0 [ 1604.206502][T15368] down_write+0x36/0x60 [ 1604.210810][T15368] ? process_measurement+0x3af/0x1c40 [ 1604.216247][T15368] process_measurement+0x3af/0x1c40 [ 1604.221511][T15368] ? ima_file_mmap+0x140/0x140 [ 1604.226369][T15368] ? aa_file_perm+0x112/0xf00 [ 1604.231376][T15368] ? mtree_load+0x100/0xa70 [ 1604.235974][T15368] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 1604.242188][T15368] ima_file_mmap+0xe9/0x140 [ 1604.246749][T15368] ? ima_file_free+0x3e0/0x3e0 [ 1604.251577][T15368] ? common_file_perm+0x171/0x1c0 [ 1604.256676][T15368] ? bpf_lsm_mmap_file+0x5/0x10 [ 1604.257784][ T8515] usb 6-1: Using ep0 maxpacket: 32 [ 1604.261679][T15368] ? security_mmap_file+0x11b/0x180 [ 1604.272230][T15368] __se_sys_remap_file_pages+0x55a/0x7b0 [ 1604.277928][T15368] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 1604.283257][ T8515] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 1604.283736][T15368] ? lock_chain_count+0x20/0x20 [ 1604.296722][T15368] ? lockdep_hardirqs_on+0x94/0x140 [ 1604.301972][T15368] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 1604.302380][ T8515] usb 6-1: config 0 has no interface number 0 [ 1604.307732][T15368] do_syscall_64+0x4c/0xa0 [ 1604.307766][T15368] ? clear_bhb_loop+0x60/0xb0 [ 1604.307793][T15368] ? clear_bhb_loop+0x60/0xb0 [ 1604.307822][T15368] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1604.307864][T15368] RIP: 0033:0x7f939cf9e0d9 [ 1604.338274][T15368] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1604.351495][ T8515] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1604.358004][T15368] RSP: 002b:00007f939dde5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 1604.358131][T15368] RAX: ffffffffffffffda RBX: 00007f939d226090 RCX: 00007f939cf9e0d9 [ 1604.377687][ T8515] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1604.383689][T15368] RDX: 0000000000000000 RSI: 0000000000004000 RDI: 00002000006ca000 [ 1604.383709][T15368] RBP: 00007f939d035024 R08: 0000000000020000 R09: 0000000000000000 [ 1604.383724][T15368] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1604.383738][T15368] R13: 00007f939d226128 R14: 00007f939d226090 R15: 00007fff5c53fcf8 [ 1604.383765][T15368] [ 1604.508732][ T8515] usb 6-1: Product: syz [ 1604.512985][ T8515] usb 6-1: Manufacturer: syz [ 1604.528742][ T8515] usb 6-1: SerialNumber: syz [ 1604.549279][ T8515] usb 6-1: config 0 descriptor?? [ 1604.568751][ T8515] smsc95xx v2.0.0 [ 1604.964725][ T8515] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1604.985919][ T8515] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1605.805396][ T8515] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32 [ 1605.821875][ T8515] smsc95xx: probe of 6-1:0.67 failed with error -32 [ 1605.840337][ T8515] usb 6-1: USB disconnect, device number 7 [ 1612.659393][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.666023][ T1280] ieee802154 phy1 wpan1: encryption failed: -22