last executing test programs: 2.283579422s ago: executing program 2 (id=63): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x6, 0x7ff, 0x73c0, 0xfffffffb, 0xe795, 0x5, 0x5, 0x1, 0x7}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000280)={'syzkaller0\x00', 0x0}) r6 = socket$kcm(0x11, 0x3, 0x0) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f00000002c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xc, 0xfff3}, {}, {0x8, 0x7}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x4, 0x20000000, 0xb, 0xdc}, 0x3, r8}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x4015}, 0x40488d0) 2.185385904s ago: executing program 0 (id=66): ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x7ca, 0x2, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000016c0)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.706635337s ago: executing program 0 (id=70): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="900022808900d98078003c807100200029ff9b3009a4ab5b7d5986cd2ba2c85b6ed1896451f8ef9a87626ab2c28a09b36184b6efeb4dfc2a4be3b2be8914a0390a9aac1a6d0999e48272818f5df67453c214c6de31379c14c3265826decab2050b6a7e2865c6dc16562b4a6afb54f0bb7a21b122e0c713c08af2511e3600000004000a007d08006700", @ANYRES32=r0, @ANYBLOB="000400"], 0xb4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='dummy_udc.0', 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 1.705897526s ago: executing program 2 (id=71): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400508c}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f00000009c0)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="ca", 0x1}], 0x1}, 0x20004014) 1.366387695s ago: executing program 2 (id=76): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) bpf$MAP_CREATE(0x2000000000000000, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x1ec) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000500)='./bus\x00', &(0x7f0000000540), 0x8, &(0x7f0000000580)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000005c0)='./bus\x00') r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 1.363355895s ago: executing program 0 (id=77): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000001440), 0x40, 0x0) ioctl$PTP_PIN_GETFUNC2(r0, 0x3d13, 0x0) 1.18534441s ago: executing program 0 (id=79): ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x7ca, 0x2, 0x0}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000016c0)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.17828385s ago: executing program 2 (id=80): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x37, 0x30, 0x30, 0x37]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x31, 0x30, 0x30, 0x37, 0x34]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @desc3}, &(0x7f0000000f80)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x62, 0x30, 0x32, 0x30, 0x30, 0x31, 0x65, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x64]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, r0) 984.079585ms ago: executing program 1 (id=82): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000006, 0x204031, 0xffffffffffffffff, 0xec776000) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)="91cfdfef", 0x4}], 0x1}, 0x24000840) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f}, 0x94) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) write(r0, 0x0, 0x0) 983.564605ms ago: executing program 2 (id=83): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0xa, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f00000001c0)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000400)={0x4c, 0x0, &(0x7f0000000580)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0xffffffffffffffb3, 0x0, 0x0}, 0x400}, @increfs_done={0x40106308, 0x3, 0x3}], 0xfffffffffffffe5e, 0x0, 0x0}) 983.097255ms ago: executing program 3 (id=84): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000640), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000680)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000006c0)={'syzkaller0\x00', 0x0}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) close(r4) r5 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000740)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xc, 0xa96}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400508c}, 0x4880) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000940)={'syzkaller0\x00', @multicast}) sendmsg$kcm(r2, &(0x7f0000000980)={&(0x7f00000009c0)=@xdp={0x2c, 0x7, r3, 0x3e}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000a80)="ca", 0x1}], 0x1}, 0x20004014) 826.619939ms ago: executing program 0 (id=85): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="900022808900d98078003c807100200029ff9b3009a4ab5b7d5986cd2ba2c85b6ed1896451f8ef9a87626ab2c28a09b36184b6efeb4dfc2a4be3b2be8914a0390a9aac1a6d0999e48272818f5df67453c214c6de31379c14c3265826decab2050b6a7e2865c6dc16562b4a6afb54f0bb7a21b122e0c713c08af2511e3600000004000a007d08006700", @ANYRES32=r0, @ANYBLOB="000400"], 0xb4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='dummy_udc.0', 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) 826.208019ms ago: executing program 1 (id=86): socket$inet_udp(0x2, 0x2, 0x0) syz_open_dev$vim2m(&(0x7f00000002c0), 0x52cd, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x1, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x8, &(0x7f0000001400)={0x8, 0x1000000}, 0xfffffedf, 0x10, &(0x7f0000001440), 0xeafcf7e0, 0x0, 0xffffffffffffffff, 0xd}, 0x48) socket$kcm(0x11, 0x200000000000002, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000014c0)={0x6, 0x1c, &(0x7f0000001580)=ANY=[@ANYBLOB="bf16000000000000b7020000ff8500007b2af8ff000000007b2af0ff000000007b2ae8ff000000007b2ae0ff000000007b2ad8ff000000007b2ad0ff000000007b2ac8ff000000007b2ac0ff00000000b702000002000000732ac0ff00000000b702000001000000632ac4ff00000000180200000a0000010000000000000000632accff00000000180200000a0000020000000000000000632ac0ff00000000bf61000000000000bfa200000000000007020000c0ffffffb703000040000000b7040000000000008500000045000000b70000000200000095"], &(0x7f0000001680)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000640)='/sys/power/pm_test', 0x88002, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r0], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000000), 0xd) 728.256422ms ago: executing program 2 (id=87): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000580)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x35}}, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000001840)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001900)=ANY=[], 0x20}, 0x1, 0x0, 0x0, 0x20004880}, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) shutdown(r1, 0x0) sendto$inet6(r0, &(0x7f0000002f40)="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", 0xffc, 0x800, 0x0, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f80)={&(0x7f0000003fc0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x44) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000004000)={&(0x7f0000681000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000004040)=""/220, 0xdc, 0x1, 0x0}, &(0x7f0000004140)=0x40) 601.938694ms ago: executing program 3 (id=88): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000080)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./debug/split_huge_pages\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='/,0x400000,0x401000', 0x13) 581.423735ms ago: executing program 0 (id=89): r0 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r0, &(0x7f0000000940)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r0, 0xa) recvmmsg(r0, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000004c0)=""/30, 0x1e}], 0x1}, 0xbb}], 0x1, 0x0, 0x0) 525.848706ms ago: executing program 1 (id=90): pipe2$9p(&(0x7f0000000080), 0x800) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000010029bd7000ffdbdf2500000000", @ANYRES32=r2, @ANYBLOB="100804002010000024001280110001006272696467655f736c618c65000000000c0005800500"], 0x44}, 0x1, 0x0, 0x0, 0x404c1}, 0x40040d4) 446.808418ms ago: executing program 3 (id=91): mknod$loop(&(0x7f0000000340)='./file0\x00', 0xfef, 0x0) execve(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)={[&(0x7f0000000580)='\x81\x00\x00\x00']}, &(0x7f0000000600)={[&(0x7f0000000640)='/dev/radio#\x00']}) 401.329659ms ago: executing program 1 (id=92): r0 = add_key$keyring(&(0x7f00000002c0), &(0x7f0000000300)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000340), &(0x7f0000000380)={'fscrypt:', @desc4}, &(0x7f0000000400)={0x0, "00379bce195566778899aabbccddfcff00112233445566778899aabbccddeeff000011688e0346d524b29db701e5ddeeff8000", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000500)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000580), &(0x7f00000005c0)={'fscrypt:', @auto=[0x38, 0x30, 0x30, 0x30, 0x63, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000600)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1000040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000680), &(0x7f00000006c0)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62, 0x66, 0x30, 0x5, 0x36]}, &(0x7f0000000800)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x42}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000880), &(0x7f00000008c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x33, 0x66, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x37, 0x30, 0x30, 0x37]}, &(0x7f0000000900)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000980), &(0x7f00000009c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000a00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000b80), &(0x7f0000000bc0)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000c00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000c80), &(0x7f0000000cc0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63, 0x31, 0x30, 0x30, 0x37, 0x34]}, &(0x7f0000000d00)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000d80), &(0x7f0000000dc0)={'syz', 0x0}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000e00), &(0x7f0000000e40)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000e80)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000f00), &(0x7f0000000f40)={'fscrypt:', @desc3}, &(0x7f0000000f80)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000001000), &(0x7f0000001040)={'syz', 0x2}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000001080), &(0x7f00000010c0)={'fscrypt:', @auto=[0x39, 0x34, 0x31, 0x38, 0x30, 0x30, 0x66, 0x65, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000001100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3a}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001180), &(0x7f00000011c0)={'fscrypt:', @auto=[0x62, 0x30, 0x32, 0x30, 0x30, 0x31, 0x65, 0x30, 0x35, 0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x64]}, &(0x7f0000001200)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001280), &(0x7f00000012c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x30, 0x8, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x30, 0x63, 0x31, 0x30]}, &(0x7f0000001300)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000001380), &(0x7f00000013c0)={'fscrypt:', @auto=[0x39, 0x61, 0x65, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x31, 0x31]}, &(0x7f0000001400)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556c778899aabbccddeeff", 0x3d}, 0x48, r0) add_key$keyring(&(0x7f0000001480), &(0x7f00000014c0)={'syz', 0x3}, 0x0, 0x0, r0) 266.896773ms ago: executing program 3 (id=93): ioctl$KVM_SET_DEVICE_ATTR_vcpu(0xffffffffffffffff, 0x4018aee1, &(0x7f0000000140)=@attr_other={0x0, 0x7ca, 0x2, &(0x7f0000000100)=0xffffffffffff73f6}) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000016c0)={[0x60000000004, 0x1000000000, 0x80000000000005, 0x41, 0x2000000, 0x0, 0x2004cb, 0xffffffffeffffffe, 0xa1d, 0x9, 0x5, 0x0, 0x3, 0x2, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 249.722734ms ago: executing program 3 (id=94): mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f0000000480), &(0x7f00000004c0)='./file0\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000580)='./file0\x00') mkdir(&(0x7f0000000100)='./control\x00', 0x111) rt_sigtimedwait(0x0, 0x0, 0x0, 0x0) rmdir(&(0x7f0000000240)='./control\x00') 213.539554ms ago: executing program 1 (id=95): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount(&(0x7f0000000080)=@filename='mtd0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='jffs2\x00', 0x0, 0x0) lsetxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'security.', '\\\\\x00'}, 0x0, 0x0, 0x0) 42.911169ms ago: executing program 3 (id=96): mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000d00)=@filename='mtd0\x00', &(0x7f0000000d40)='./mnt\x00', &(0x7f0000000d80)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000f00)='./mnt/fillfile\x00', 0x101042, 0x9d) 0s ago: executing program 1 (id=97): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYRES32=0x0, @ANYBLOB="900022808900d98078003c807100200029ff9b3009a4ab5b7d5986cd2ba2c85b6ed1896451f8ef9a87626ab2c28a09b36184b6efeb4dfc2a4be3b2be8914a0390a9aac1a6d0999e48272818f5df67453c214c6de31379c14c3265826decab2050b6a7e2865c6dc16562b4a6afb54f0bb7a21b122e0c713c08af2511e3600000004000a007d08006700", @ANYRES32=r0, @ANYBLOB="000400"], 0xb4}, 0x1, 0x0, 0x0, 0x200048d5}, 0x4008094) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$tipc(0x1e, 0x2, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0xfffffffffffffff9) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x40, 0x2, 0x2, 0x3}, 0x10) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40ebb373", 0x39}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) bind$bt_hci(r1, &(0x7f0000000240)={0x1f, 0xffff, 0x3}, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./mnt\x00', &(0x7f0000000280)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./my_configfs\x00', 0x117) mount(0x0, &(0x7f0000000080)='./my_configfs\x00', 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) symlinkat(&(0x7f0000000380)='./mnt/usb_gadget/g1/functions/geth.usb0\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./mnt/usb_gadget/g1/configs/c.1/geth.usb0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000540)='dummy_udc.0', 0xb) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1000}) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x5, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000fdffffff000000000a0000008500000005000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000200)="68000000000905040000000000000000020000000900010073797a3000000000140002800600010000020000050002000600000008000500000000002c0004800800010000000001200002800c000100706f6c69637930000800020000000002080003000000001e", 0x68}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.169' (ED25519) to the list of known hosts. [ 73.806548][ T5761] cgroup: Unknown subsys name 'net' [ 73.955186][ T5761] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.264042][ T5761] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.889646][ T5775] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.903067][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.914533][ T5782] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.922944][ T5782] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.931252][ T5782] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.940764][ T5782] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.957763][ T5782] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.965703][ T5782] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.973365][ T5782] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.981374][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.984269][ T5782] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.996619][ T5782] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 77.004522][ T5787] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 77.004689][ T5782] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 77.016335][ T5785] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 77.019818][ T5782] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 77.026842][ T5785] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 77.033271][ T5782] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 77.040928][ T5785] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 77.047419][ T5782] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 77.054590][ T5785] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 77.060809][ T5782] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 77.068574][ T5785] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 77.089481][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 77.472161][ T5776] chnl_net:caif_netlink_parms(): no params data found [ 77.580295][ T5776] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.588180][ T5776] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.595602][ T5776] bridge_slave_0: entered allmulticast mode [ 77.604173][ T5776] bridge_slave_0: entered promiscuous mode [ 77.614551][ T5776] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.621799][ T5776] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.629078][ T5776] bridge_slave_1: entered allmulticast mode [ 77.636990][ T5776] bridge_slave_1: entered promiscuous mode [ 77.661876][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 77.679440][ T5773] chnl_net:caif_netlink_parms(): no params data found [ 77.721903][ T5776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.749324][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 77.761957][ T5776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.850942][ T5776] team0: Port device team_slave_0 added [ 77.883734][ T5776] team0: Port device team_slave_1 added [ 77.894103][ T5773] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.904011][ T5773] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.911379][ T5773] bridge_slave_0: entered allmulticast mode [ 77.918670][ T5773] bridge_slave_0: entered promiscuous mode [ 77.942784][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.949983][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.957170][ T5778] bridge_slave_0: entered allmulticast mode [ 77.964072][ T5778] bridge_slave_0: entered promiscuous mode [ 77.976423][ T5773] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.983813][ T5773] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.991144][ T5773] bridge_slave_1: entered allmulticast mode [ 77.998264][ T5773] bridge_slave_1: entered promiscuous mode [ 78.015406][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.022661][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.030138][ T5778] bridge_slave_1: entered allmulticast mode [ 78.036809][ T5778] bridge_slave_1: entered promiscuous mode [ 78.074754][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.084244][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.110583][ T5776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.133064][ T5776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.142566][ T5776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.173358][ T5776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.195172][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.202486][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.209784][ T5777] bridge_slave_0: entered allmulticast mode [ 78.216490][ T5777] bridge_slave_0: entered promiscuous mode [ 78.240598][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.252842][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.264003][ T5773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.273677][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.281630][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.289300][ T5777] bridge_slave_1: entered allmulticast mode [ 78.295988][ T5777] bridge_slave_1: entered promiscuous mode [ 78.323000][ T5773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.366101][ T5778] team0: Port device team_slave_0 added [ 78.392796][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.403520][ T5778] team0: Port device team_slave_1 added [ 78.421083][ T5773] team0: Port device team_slave_0 added [ 78.446538][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.453551][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.479806][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.493302][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.514434][ T5773] team0: Port device team_slave_1 added [ 78.526054][ T5776] hsr_slave_0: entered promiscuous mode [ 78.532588][ T5776] hsr_slave_1: entered promiscuous mode [ 78.540346][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.547326][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.573727][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.627047][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.634355][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.660537][ T5773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.682962][ T5777] team0: Port device team_slave_0 added [ 78.701166][ T5773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.712496][ T5773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.739168][ T5773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.753346][ T5777] team0: Port device team_slave_1 added [ 78.810122][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.817107][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.843265][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.856167][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.863373][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.889328][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.913385][ T5778] hsr_slave_0: entered promiscuous mode [ 78.920241][ T5778] hsr_slave_1: entered promiscuous mode [ 78.926433][ T5778] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.934782][ T5778] Cannot create hsr debugfs directory [ 79.010534][ T5773] hsr_slave_0: entered promiscuous mode [ 79.017024][ T5773] hsr_slave_1: entered promiscuous mode [ 79.023406][ T5773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.031370][ T5773] Cannot create hsr debugfs directory [ 79.092323][ T5777] hsr_slave_0: entered promiscuous mode [ 79.098813][ T5777] hsr_slave_1: entered promiscuous mode [ 79.104904][ T5777] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.112835][ T5777] Cannot create hsr debugfs directory [ 79.148707][ T5784] Bluetooth: hci0: command tx timeout [ 79.148720][ T5775] Bluetooth: hci3: command tx timeout [ 79.148892][ T5775] Bluetooth: hci1: command tx timeout [ 79.154356][ T5784] Bluetooth: hci2: command tx timeout [ 79.426672][ T5776] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.440254][ T5776] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.465488][ T5776] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.474781][ T5776] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.541978][ T5778] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.575555][ T5778] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.585624][ T5778] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.601081][ T5778] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.673589][ T5773] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.692355][ T5773] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.702414][ T5773] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.729126][ T5773] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.805378][ T5777] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.820678][ T5777] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.833192][ T5777] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.845707][ T5777] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.916216][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.942654][ T5776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.994780][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.009552][ T5776] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.033300][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.040810][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.054523][ T3452] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.061719][ T3452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.096101][ T3452] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.103310][ T3452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.163964][ T4126] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.171149][ T4126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.192698][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.206527][ T5773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.246710][ T5773] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.263024][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.285624][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.292754][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.314746][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.321872][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.342627][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.349868][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.369988][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.377158][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.475215][ T5773] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.761245][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.893363][ T5776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.916543][ T5778] veth0_vlan: entered promiscuous mode [ 80.947401][ T5778] veth1_vlan: entered promiscuous mode [ 80.987007][ T5773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.035542][ T5776] veth0_vlan: entered promiscuous mode [ 81.054239][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.091611][ T5776] veth1_vlan: entered promiscuous mode [ 81.113481][ T5778] veth0_macvtap: entered promiscuous mode [ 81.125719][ T5778] veth1_macvtap: entered promiscuous mode [ 81.180545][ T5773] veth0_vlan: entered promiscuous mode [ 81.191085][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.214896][ T5776] veth0_macvtap: entered promiscuous mode [ 81.224602][ T5777] veth0_vlan: entered promiscuous mode [ 81.231149][ T5784] Bluetooth: hci1: command tx timeout [ 81.231224][ T5775] Bluetooth: hci3: command tx timeout [ 81.236543][ T5784] Bluetooth: hci2: command tx timeout [ 81.244082][ T5785] Bluetooth: hci0: command tx timeout [ 81.260937][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.269812][ T5776] veth1_macvtap: entered promiscuous mode [ 81.285279][ T5777] veth1_vlan: entered promiscuous mode [ 81.295427][ T5778] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.306081][ T5778] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.318533][ T5778] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.327245][ T5778] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.345497][ T5773] veth1_vlan: entered promiscuous mode [ 81.380747][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.393286][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.405251][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.446470][ T5776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.457929][ T5776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.473683][ T5776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.503499][ T5777] veth0_macvtap: entered promiscuous mode [ 81.517352][ T5776] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.526757][ T5776] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.536202][ T5776] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.545017][ T5776] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.570395][ T5777] veth1_macvtap: entered promiscuous mode [ 81.604807][ T5773] veth0_macvtap: entered promiscuous mode [ 81.633573][ T5773] veth1_macvtap: entered promiscuous mode [ 81.661331][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.664985][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.677538][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.691642][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.701673][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.713284][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.724517][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.757337][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.768090][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.783346][ T5777] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.794097][ T5777] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.805396][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.827410][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.827689][ T4126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.827705][ T4126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.858174][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.877609][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.888270][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.902882][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.913556][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.927302][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.965937][ T5777] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.987933][ T5777] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.996647][ T5777] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.012543][ T5777] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.092063][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.106939][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.125985][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.136671][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.152602][ T5773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.167204][ T5773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.183057][ T5773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.197774][ T3452] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.205623][ T3452] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.235015][ T5773] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.254241][ T5773] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.263438][ T5773] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.273314][ T5773] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.406410][ T4126] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.428036][ T4126] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.517217][ T4126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.551669][ T4126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.560392][ T1140] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.584088][ T1140] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.586309][ T5844] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 82.644031][ T3452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.676594][ T3452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.771912][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.820715][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.010970][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 83.308107][ T5785] Bluetooth: hci0: command tx timeout [ 83.313650][ T5784] Bluetooth: hci3: command tx timeout [ 83.317887][ T5779] Bluetooth: hci1: command tx timeout [ 83.319262][ T5784] Bluetooth: hci2: command tx timeout [ 83.467275][ T5869] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 83.632821][ T5873] lo speed is unknown, defaulting to 1000 [ 83.648680][ T5873] lo speed is unknown, defaulting to 1000 [ 83.655700][ T5873] FAULT_INJECTION: forcing a failure. [ 83.655700][ T5873] name failslab, interval 1, probability 0, space 0, times 1 [ 83.676933][ T5873] CPU: 0 PID: 5873 Comm: syz.0.12 Not tainted syzkaller #0 [ 83.684186][ T5873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 83.694278][ T5873] Call Trace: [ 83.697599][ T5873] [ 83.700552][ T5873] dump_stack_lvl+0x18c/0x250 [ 83.705279][ T5873] ? show_regs_print_info+0x20/0x20 [ 83.710514][ T5873] ? load_image+0x420/0x420 [ 83.715060][ T5873] ? __might_sleep+0xe0/0xe0 [ 83.719681][ T5873] ? __lock_acquire+0x7eb0/0x7eb0 [ 83.724743][ T5873] should_fail_ex+0x394/0x4c0 [ 83.729470][ T5873] should_failslab+0x9/0x20 [ 83.733999][ T5873] slab_pre_alloc_hook+0x59/0x300 [ 83.739029][ T5873] ? __lock_acquire+0x7eb0/0x7eb0 [ 83.744060][ T5873] ? get_device_parent+0x255/0x390 [ 83.749182][ T5873] __kmem_cache_alloc_node+0x53/0x250 [ 83.754573][ T5873] ? __rwlock_init+0x150/0x150 [ 83.759347][ T5873] ? get_device_parent+0x255/0x390 [ 83.764467][ T5873] kmalloc_trace+0x2a/0xe0 [ 83.768890][ T5873] get_device_parent+0x255/0x390 [ 83.773836][ T5873] device_add+0x2d4/0xc40 [ 83.778170][ T5873] ib_register_device+0x1018/0x1350 [ 83.783381][ T5873] ? remove_all_compat_devs+0x260/0x260 [ 83.788932][ T5873] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 83.794951][ T5873] ? lock_chain_count+0x20/0x20 [ 83.799819][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 83.805051][ T5873] ? lockdep_softirqs_off+0x440/0x440 [ 83.810442][ T5873] ? __raw_spin_lock_init+0x45/0x100 [ 83.815738][ T5873] siw_newlink+0x9d3/0xe40 [ 83.820172][ T5873] nldev_newlink+0x5a0/0x620 [ 83.824771][ T5873] ? nldev_set_doit+0x490/0x490 [ 83.829626][ T5873] ? lockdep_lock+0xf5/0x230 [ 83.834280][ T5873] ? aa_get_newest_label+0xfd/0x5c0 [ 83.839501][ T5873] ? end_current_label_crit_section+0x170/0x170 [ 83.845746][ T5873] ? end_current_label_crit_section+0x170/0x170 [ 83.851991][ T5873] ? __might_sleep+0xe0/0xe0 [ 83.856588][ T5873] ? apparmor_capable+0x137/0x1a0 [ 83.861623][ T5873] ? nldev_set_doit+0x490/0x490 [ 83.866504][ T5873] rdma_nl_rcv+0x6fd/0xa60 [ 83.870942][ T5873] ? rdma_nl_net_init+0x190/0x190 [ 83.875998][ T5873] ? __lock_acquire+0x7eb0/0x7eb0 [ 83.881029][ T5873] ? net_generic+0x1e/0x240 [ 83.885539][ T5873] ? netlink_deliver_tap+0x2e/0x1b0 [ 83.890745][ T5873] netlink_unicast+0x7b1/0x930 [ 83.895520][ T5873] netlink_sendmsg+0x8d0/0xbf0 [ 83.900297][ T5873] ? netlink_getsockopt+0x590/0x590 [ 83.905499][ T5873] ? apparmor_socket_sendmsg+0x8e/0x330 [ 83.911053][ T5873] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 83.916342][ T5873] ? security_socket_sendmsg+0x80/0xa0 [ 83.921800][ T5873] ? netlink_getsockopt+0x590/0x590 [ 83.927028][ T5873] ____sys_sendmsg+0x61b/0x980 [ 83.931805][ T5873] ? __asan_memset+0x22/0x40 [ 83.936403][ T5873] ? __sys_sendmsg_sock+0x30/0x30 [ 83.941440][ T5873] ? __import_iovec+0x5f2/0x850 [ 83.946306][ T5873] ? import_iovec+0x73/0xa0 [ 83.950841][ T5873] ___sys_sendmsg+0x2a6/0x360 [ 83.955532][ T5873] ? __sys_sendmsg+0x2b0/0x2b0 [ 83.960341][ T5873] __se_sys_sendmsg+0x1d0/0x2c0 [ 83.965202][ T5873] ? __x64_sys_sendmsg+0x80/0x80 [ 83.970163][ T5873] ? lockdep_hardirqs_on+0x98/0x150 [ 83.975366][ T5873] do_syscall_64+0x55/0xb0 [ 83.979783][ T5873] ? clear_bhb_loop+0x40/0x90 [ 83.984458][ T5873] ? clear_bhb_loop+0x40/0x90 [ 83.989138][ T5873] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 83.995037][ T5873] RIP: 0033:0x7f5c3339e1d9 [ 83.999458][ T5873] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.019067][ T5873] RSP: 002b:00007f5c315f6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.027484][ T5873] RAX: ffffffffffffffda RBX: 00007f5c33625fa0 RCX: 00007f5c3339e1d9 [ 84.035463][ T5873] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000006 [ 84.043432][ T5873] RBP: 00007f5c33435888 R08: 0000000000000000 R09: 0000000000000000 [ 84.051406][ T5873] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.059375][ T5873] R13: 00007f5c33626038 R14: 00007f5c33625fa0 R15: 00007fffce4f6d98 [ 84.067367][ T5873] [ 84.149695][ T5873] siw: device registration error -12 [ 84.399718][ T5888] FAULT_INJECTION: forcing a failure. [ 84.399718][ T5888] name failslab, interval 1, probability 0, space 0, times 0 [ 84.432021][ T5888] CPU: 0 PID: 5888 Comm: syz.3.18 Not tainted syzkaller #0 [ 84.439293][ T5888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 84.449366][ T5888] Call Trace: [ 84.452650][ T5888] [ 84.455582][ T5888] dump_stack_lvl+0x18c/0x250 [ 84.460276][ T5888] ? show_regs_print_info+0x20/0x20 [ 84.465484][ T5888] ? load_image+0x420/0x420 [ 84.469995][ T5888] ? __might_sleep+0xe0/0xe0 [ 84.474591][ T5888] ? __lock_acquire+0x7eb0/0x7eb0 [ 84.479619][ T5888] should_fail_ex+0x394/0x4c0 [ 84.484307][ T5888] should_failslab+0x9/0x20 [ 84.488904][ T5888] slab_pre_alloc_hook+0x59/0x300 [ 84.493928][ T5888] ? call_usermodehelper_setup+0x8e/0x260 [ 84.499648][ T5888] __kmem_cache_alloc_node+0x53/0x250 [ 84.505029][ T5888] ? call_usermodehelper_setup+0x8e/0x260 [ 84.510753][ T5888] kmalloc_trace+0x2a/0xe0 [ 84.515212][ T5888] call_usermodehelper_setup+0x8e/0x260 [ 84.520756][ T5888] ? __request_module+0x600/0x600 [ 84.525782][ T5888] __request_module+0x3bb/0x600 [ 84.530636][ T5888] ? module_enforce_rwx_sections+0x150/0x150 [ 84.536615][ T5888] ? dev_load+0x21/0x1f0 [ 84.540860][ T5888] ? bpf_lsm_capable+0x9/0x10 [ 84.545539][ T5888] ? dev_load+0x21/0x1f0 [ 84.549805][ T5888] dev_load+0x18b/0x1f0 [ 84.553982][ T5888] dev_ioctl+0x79f/0x1140 [ 84.558322][ T5888] sock_do_ioctl+0x239/0x310 [ 84.562933][ T5888] ? sock_show_fdinfo+0xb0/0xb0 [ 84.567807][ T5888] sock_ioctl+0x5be/0x7e0 [ 84.572153][ T5888] ? sock_poll+0x3e0/0x3e0 [ 84.576609][ T5888] ? bpf_lsm_file_ioctl+0x9/0x10 [ 84.581547][ T5888] ? security_file_ioctl+0x80/0xa0 [ 84.586668][ T5888] ? sock_poll+0x3e0/0x3e0 [ 84.591092][ T5888] __se_sys_ioctl+0xfd/0x170 [ 84.595691][ T5888] do_syscall_64+0x55/0xb0 [ 84.600103][ T5888] ? clear_bhb_loop+0x40/0x90 [ 84.604775][ T5888] ? clear_bhb_loop+0x40/0x90 [ 84.609469][ T5888] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 84.615384][ T5888] RIP: 0033:0x7fc8dfb9e1d9 [ 84.619800][ T5888] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.639413][ T5888] RSP: 002b:00007fc8e0b54028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 84.647830][ T5888] RAX: ffffffffffffffda RBX: 00007fc8dfe25fa0 RCX: 00007fc8dfb9e1d9 [ 84.655798][ T5888] RDX: 0000200000000280 RSI: 0000000000008914 RDI: 0000000000000003 [ 84.663764][ T5888] RBP: 00007fc8dfc35888 R08: 0000000000000000 R09: 0000000000000000 [ 84.671738][ T5888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 84.679707][ T5888] R13: 00007fc8dfe26038 R14: 00007fc8dfe25fa0 R15: 00007fff12cd4378 [ 84.687718][ T5888] [ 84.995549][ T5896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.023478][ T5896] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.027710][ T5898] syz.0.23[5898]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 85.388846][ T5784] Bluetooth: hci2: command tx timeout [ 85.388865][ T5785] Bluetooth: hci0: command tx timeout [ 85.388891][ T5785] Bluetooth: hci1: command tx timeout [ 85.394285][ T5784] Bluetooth: hci3: command tx timeout [ 85.442796][ T5906] FAULT_INJECTION: forcing a failure. [ 85.442796][ T5906] name failslab, interval 1, probability 0, space 0, times 0 [ 85.456320][ T5906] CPU: 0 PID: 5906 Comm: syz.3.26 Not tainted syzkaller #0 [ 85.463558][ T5906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 85.473628][ T5906] Call Trace: [ 85.476912][ T5906] [ 85.479843][ T5906] dump_stack_lvl+0x18c/0x250 [ 85.484534][ T5906] ? show_regs_print_info+0x20/0x20 [ 85.489734][ T5906] ? load_image+0x420/0x420 [ 85.494242][ T5906] ? __might_sleep+0xe0/0xe0 [ 85.498837][ T5906] ? __lock_acquire+0x7eb0/0x7eb0 [ 85.503901][ T5906] should_fail_ex+0x394/0x4c0 [ 85.508591][ T5906] should_failslab+0x9/0x20 [ 85.513102][ T5906] slab_pre_alloc_hook+0x59/0x300 [ 85.518128][ T5906] ? slab_post_alloc_hook+0x86/0x4d0 [ 85.523411][ T5906] kmem_cache_alloc_bulk+0x52/0x5a0 [ 85.528616][ T5906] ? rcu_is_watching+0x15/0xb0 [ 85.533394][ T5906] ? kmem_cache_alloc+0x1a6/0x2c0 [ 85.538439][ T5906] ? mas_alloc_nodes+0x2f8/0x8c0 [ 85.543389][ T5906] mas_alloc_nodes+0x471/0x8c0 [ 85.548166][ T5906] mas_expected_entries+0x1f4/0x320 [ 85.553374][ T5906] copy_mm+0x7ee/0x1e30 [ 85.557531][ T5906] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 85.563526][ T5906] ? copy_signal+0x640/0x640 [ 85.568132][ T5906] ? __init_rwsem+0x122/0x160 [ 85.572811][ T5906] ? copy_signal+0x51f/0x640 [ 85.577405][ T5906] copy_process+0x16c9/0x3da0 [ 85.582091][ T5906] ? plist_add+0x3db/0x490 [ 85.586518][ T5906] ? copy_process+0x98e/0x3da0 [ 85.591283][ T5906] ? futex_wait+0x4a7/0x5c0 [ 85.595793][ T5906] ? __pidfd_prepare+0x140/0x140 [ 85.600742][ T5906] kernel_clone+0x24b/0x8a0 [ 85.605252][ T5906] ? create_io_thread+0x190/0x190 [ 85.610287][ T5906] ? do_futex+0x2ff/0x3e0 [ 85.614625][ T5906] __x64_sys_clone+0x1b7/0x230 [ 85.619398][ T5906] ? __ia32_sys_vfork+0x140/0x140 [ 85.624432][ T5906] ? lock_chain_count+0x20/0x20 [ 85.629291][ T5906] ? lockdep_hardirqs_on+0x98/0x150 [ 85.634503][ T5906] do_syscall_64+0x55/0xb0 [ 85.638925][ T5906] ? clear_bhb_loop+0x40/0x90 [ 85.643606][ T5906] ? clear_bhb_loop+0x40/0x90 [ 85.648307][ T5906] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 85.654210][ T5906] RIP: 0033:0x7fc8dfb9e1d9 [ 85.658626][ T5906] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.678238][ T5906] RSP: 002b:00007fc8e0b53fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 85.686653][ T5906] RAX: ffffffffffffffda RBX: 00007fc8dfe25fa0 RCX: 00007fc8dfb9e1d9 [ 85.694625][ T5906] RDX: 0000200000001440 RSI: 0000000000000000 RDI: 000000002a000000 [ 85.702597][ T5906] RBP: 00007fc8dfc35888 R08: 0000000000000000 R09: 0000000000000000 [ 85.710567][ T5906] R10: 0000200000001480 R11: 0000000000000206 R12: 0000000000000000 [ 85.718542][ T5906] R13: 00007fc8dfe26038 R14: 00007fc8dfe25fa0 R15: 00007fff12cd4378 [ 85.726530][ T5906] [ 86.177902][ T5763] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 86.395580][ T5763] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 86.421601][ T5763] usb 4-1: config 0 has no interface number 0 [ 86.437170][ T5763] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0x80, skipping [ 86.472389][ T5763] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 86.492985][ T5763] usb 4-1: config 0 interface 55 altsetting 0 has an invalid endpoint with address 0xAB, skipping [ 86.507174][ T5763] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 86.533644][ T5763] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 86.543370][ T5763] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.543376][ T5914] Bluetooth: MGMT ver 1.22 [ 86.585446][ T5763] usb 4-1: config 0 descriptor?? [ 86.600684][ T5914] jffs2: notice: (5914) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 86.619360][ T5908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.626864][ T5908] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 86.641792][ T5763] ldusb 4-1:0.55: Interrupt in endpoint not found [ 86.815565][ T5898] loop0: detected capacity change from 0 to 40427 [ 86.858106][ T5898] F2FS-fs (loop0): invalid crc value [ 86.884847][ T5898] F2FS-fs (loop0): Found nat_bits in checkpoint [ 86.897419][ T23] usb 4-1: USB disconnect, device number 2 [ 86.996675][ T27] cfg80211: failed to load regulatory.db [ 87.045771][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.2.34'. [ 87.242628][ T5898] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 87.693284][ T23] usb 3-1: new low-speed USB device number 2 using dummy_hcd [ 87.969577][ T23] usb 3-1: unable to get BOS descriptor or descriptor too short [ 87.989640][ T23] usb 3-1: config 142 has an invalid interface number: 251 but max is 0 [ 88.020843][ T23] usb 3-1: config 142 descriptor has 1 excess byte, ignoring [ 88.047551][ T23] usb 3-1: config 142 has no interface number 0 [ 88.084425][ T23] usb 3-1: config 142 interface 251 altsetting 11 has an invalid endpoint with address 0x9F, skipping [ 88.144092][ T23] usb 3-1: config 142 interface 251 altsetting 11 endpoint 0x1 is Bulk; changing to Interrupt [ 88.170095][ T5777] syz-executor: attempt to access beyond end of device [ 88.170095][ T5777] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 88.185491][ T23] usb 3-1: config 142 interface 251 has no altsetting 0 [ 88.201287][ T5777] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 88.234366][ T23] usb 3-1: string descriptor 0 read error: -22 [ 88.252978][ T23] usb 3-1: New USB device found, idVendor=6737, idProduct=0001, bcdDevice=91.80 [ 88.293699][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.310691][ T5934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.337868][ T5934] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 88.359318][ T23] cypress_m8 3-1:142.251: HID->COM RS232 Adapter converter detected [ 88.398391][ T23] cyphidcom ttyUSB0: required endpoint is missing [ 88.569923][ T23] usb 3-1: USB disconnect, device number 2 [ 88.592431][ T23] cypress_m8 3-1:142.251: device disconnected [ 88.597964][ T5775] Bluetooth: hci0: Opcode 0x0c13 failed: -110 [ 88.667523][ T5775] Bluetooth: hci0: command 0x0c13 tx timeout [ 88.874414][ T5956] Config c/1 of g1 needs at least one function. [ 88.888595][ T5956] udc dummy_udc.0: failed to start g1: -22 [ 88.894471][ T5956] configfs-gadget.g1: probe of gadget.0 failed with error -22 [ 88.910409][ T5956] UDC core: g1: couldn't find an available UDC or it's busy [ 89.092177][ T5965] capability: warning: `syz.0.49' uses deprecated v2 capabilities in a way that may be insecure [ 89.773251][ T5995] configfs-gadget.g1 gadget.0: HOST MAC 8a:55:31:9f:d3:7a [ 89.788338][ T5995] configfs-gadget.g1 gadget.0: MAC 96:92:54:9d:e1:ff [ 90.078239][ T2133] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 90.278854][ T2133] usb 1-1: Dual-Role OTG device on HNP port [ 90.299651][ T2133] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 90.318723][ T2133] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.389481][ T2133] usb 1-1: bad CDC descriptors [ 90.420105][ T2133] gspca_main: spca501-2.14.0 probing 0000:0000 [ 90.435619][ T2133] gspca_spca501: reg write: error -32 [ 90.457678][ T2133] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 90.476500][ T2133] spca501: probe of 1-1:1.0 failed with error -22 [ 90.670904][ T6040] syzkaller0: entered promiscuous mode [ 90.676439][ T6040] syzkaller0: entered allmulticast mode [ 91.036742][ T6061] syzkaller0: entered promiscuous mode [ 91.042631][ T6061] syzkaller0: entered allmulticast mode [ 91.053945][ T6061] 0: reclassify loop, rule prio 0, protocol 800 [ 91.194327][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 91.375482][ T6078] syzkaller0: entered promiscuous mode [ 91.384434][ T6078] syzkaller0: entered allmulticast mode [ 91.439983][ T6077] binder: 6075:6077 ioctl c0306201 200000000400 returned -14 [ 92.123691][ T6113] 9pnet_virtio: no channels available for device syz [ 92.163826][ T6116] jffs2: notice: (6116) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 92.279129][ T5778] ------------[ cut here ]------------ [ 92.284901][ T5778] kernel BUG at fs/jffs2/nodelist.c:462! [ 92.296983][ T5778] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 92.303092][ T5778] CPU: 1 PID: 5778 Comm: syz-executor Not tainted syzkaller #0 [ 92.310651][ T5778] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.320729][ T5778] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 92.326646][ T5778] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 32 99 07 ff e9 42 fe ff ff e8 18 b8 ae fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 92.346263][ T5778] RSP: 0018:ffffc900040b7a98 EFLAGS: 00010293 [ 92.352329][ T5778] RAX: ffffffff82d8d898 RBX: ffff88802c1c9040 RCX: ffff88807af90000 [ 92.360310][ T5778] RDX: 0000000000000000 RSI: ffff88802c1c9040 RDI: ffff888076d02000 [ 92.368284][ T5778] RBP: 0000000000000006 R08: ffff888076d0236b R09: 1ffff1100eda046d [ 92.376280][ T5778] R10: dffffc0000000000 R11: ffffed100eda046e R12: ffff88802c1c9040 [ 92.384247][ T5778] R13: dffffc0000000000 R14: ffff88802c1c9060 R15: ffff888076d02000 [ 92.392222][ T5778] FS: 000055557efac500(0000) GS:ffff8880b8d00000(0000) knlGS:0000000000000000 [ 92.401151][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.407729][ T5778] CR2: 0000001b2dc23ffc CR3: 000000005fc20000 CR4: 00000000003506e0 [ 92.415699][ T5778] Call Trace: [ 92.419005][ T5778] [ 92.421927][ T5778] ? jffs2_do_clear_inode+0x314/0x390 [ 92.427299][ T5778] jffs2_do_clear_inode+0x31f/0x390 [ 92.432493][ T5778] ? jffs2_statfs+0x370/0x370 [ 92.437160][ T5778] evict+0x4b7/0x8a0 [ 92.441049][ T5778] ? xa_load+0x64/0x2e0 [ 92.445205][ T5778] ? proc_nr_inodes+0x230/0x230 [ 92.450050][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 92.455246][ T5778] ? do_raw_spin_unlock+0x121/0x230 [ 92.460463][ T5778] evict_inodes+0x64a/0x6e0 [ 92.464965][ T5778] ? clear_inode+0x150/0x150 [ 92.469549][ T5778] ? jffs2_sync_fs+0x97/0xa0 [ 92.474136][ T5778] generic_shutdown_super+0x97/0x2b0 [ 92.479417][ T5778] kill_mtd_super+0x23/0x70 [ 92.483932][ T5778] jffs2_kill_sb+0x96/0xb0 [ 92.488355][ T5778] deactivate_locked_super+0x97/0x100 [ 92.493738][ T5778] cleanup_mnt+0x3d7/0x460 [ 92.498159][ T5778] task_work_run+0x1d4/0x260 [ 92.502784][ T5778] ? task_work_cancel+0x220/0x220 [ 92.507809][ T5778] ? exit_to_user_mode_loop+0x3b/0x110 [ 92.513266][ T5778] exit_to_user_mode_loop+0xe6/0x110 [ 92.518551][ T5778] exit_to_user_mode_prepare+0xee/0x180 [ 92.524094][ T5778] syscall_exit_to_user_mode+0x1a/0x50 [ 92.529546][ T5778] do_syscall_64+0x61/0xb0 [ 92.533951][ T5778] ? clear_bhb_loop+0x40/0x90 [ 92.538622][ T5778] ? clear_bhb_loop+0x40/0x90 [ 92.543290][ T5778] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 92.549195][ T5778] RIP: 0033:0x7f3e5bf9f417 [ 92.553624][ T5778] Code: a2 c7 05 dc 62 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 92.573234][ T5778] RSP: 002b:00007ffe4f0ac4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.581640][ T5778] RAX: 0000000000000000 RBX: 00007f3e5c034ccb RCX: 00007f3e5bf9f417 [ 92.589626][ T5778] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe4f0ac560 [ 92.597593][ T5778] RBP: 00007ffe4f0ac560 R08: 00007ffe4f0ad560 R09: 00000000ffffffff [ 92.605556][ T5778] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe4f0ad5f0 [ 92.613520][ T5778] R13: 00007f3e5c034ccb R14: 0000000000016812 R15: 00007ffe4f0ad630 [ 92.621490][ T5778] [ 92.624501][ T5778] Modules linked in: [ 92.663098][ T5778] ---[ end trace 0000000000000000 ]--- [ 92.674715][ T5778] RIP: 0010:jffs2_del_ino_cache+0x2b8/0x2c0 [ 92.692616][ T5778] Code: 07 ff e9 51 ff ff ff 44 89 e1 80 e1 07 80 c1 03 38 c1 0f 8c 4f fe ff ff 4c 89 e7 e8 32 99 07 ff e9 42 fe ff ff e8 18 b8 ae fe <0f> 0b 66 0f 1f 44 00 00 66 0f 1f 00 55 41 57 41 56 41 55 41 54 53 [ 92.713143][ T5778] RSP: 0018:ffffc900040b7a98 EFLAGS: 00010293 [ 92.719263][ T5778] RAX: ffffffff82d8d898 RBX: ffff88802c1c9040 RCX: ffff88807af90000 [ 92.727257][ T5778] RDX: 0000000000000000 RSI: ffff88802c1c9040 RDI: ffff888076d02000 [ 92.735282][ T5778] RBP: 0000000000000006 R08: ffff888076d0236b R09: 1ffff1100eda046d [ 92.743357][ T5778] R10: dffffc0000000000 R11: ffffed100eda046e R12: ffff88802c1c9040 [ 92.753076][ T5778] R13: dffffc0000000000 R14: ffff88802c1c9060 R15: ffff888076d02000 [ 92.761879][ T5778] FS: 000055557efac500(0000) GS:ffff8880b8c00000(0000) knlGS:0000000000000000 [ 92.771104][ T5778] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 92.777722][ T5778] CR2: 000055f6fd371e38 CR3: 000000005fc20000 CR4: 00000000003506f0 [ 92.785704][ T5778] Kernel panic - not syncing: Fatal exception [ 92.791993][ T5778] Kernel Offset: disabled [ 92.796305][ T5778] Rebooting in 86400 seconds..