last executing test programs: 18.895629994s ago: executing program 1 (id=18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$FS_IOC_FSGETXATTR(r0, 0x400455c8, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) write$rfkill(r1, &(0x7f0000000080)={0x0, 0x0, 0x3, 0x1}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 14.883526615s ago: executing program 1 (id=27): r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) sendmsg$nl_route_sched(r0, 0x0, 0x4c840) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="20000000010301"], 0x20}}, 0x0) 13.811126962s ago: executing program 1 (id=31): gettid() prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() bpf$OBJ_GET_MAP(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x64, &(0x7f00000002c0)=0xffffffffffffff11) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_mount_image$exfat(&(0x7f0000002bc0), &(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x21cc46, &(0x7f0000000380)=ANY=[], 0x1, 0x1536, &(0x7f0000002c00)="$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") socket$inet(0x2, 0x1, 0x0) r3 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETLINK(r3, 0x400454cd, 0x8) r4 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x1, 0xd) fchdir(r5) mkdirat(0xffffffffffffff9c, 0x0, 0x1f1) renameat2(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xffffffffffffff9c, 0x0, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 11.167136149s ago: executing program 1 (id=38): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000140)='ext3\x00', &(0x7f0000000040)='./file0/file0\x00', 0x4080, &(0x7f0000000a00)={[{@stripe={'stripe', 0x3d, 0x1}}, {@discard}, {@nobarrier}, {@debug}]}, 0x1d, 0x5ed, &(0x7f0000001800)="$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") execveat(r2, &(0x7f0000000100)='./file0\x00', &(0x7f0000000400)={[&(0x7f0000000240)=':-(*\'\x00', &(0x7f0000000000)='/dev/snapshot\x00', &(0x7f0000000380)='discard']}, &(0x7f0000000580)={[&(0x7f0000000440)=']-[\x00', &(0x7f0000000480)='\x02\x00', &(0x7f00000004c0)='.\']\'\x00']}, 0x1000) 5.16685743s ago: executing program 2 (id=53): mount_setattr(0xffffffffffffff9c, 0x0, 0x8900, &(0x7f0000000680)={0x70, 0x7a, 0x220000}, 0x20) 4.822201038s ago: executing program 2 (id=55): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newtaction={0xf0, 0x30, 0x1, 0xe501, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x81000000, 0x800, 0x0, 0x0, {0x8, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8001, 0x0, 0x400}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x3ffffd, {0x0, 0x0, 0x0, 0x0, 0xffff}, {0x4, 0x2, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0xf0}}, 0x4004) 4.656951602s ago: executing program 2 (id=57): mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) unshare(0xe060400) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r0 = socket$unix(0x1, 0x2, 0x0) connect$unix(r0, &(0x7f0000000000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) 3.931084021s ago: executing program 3 (id=63): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0a000000560000004200000002"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x1006, r0, 0x100000000000000, 0xd88d02a0}, 0x38) 3.699701636s ago: executing program 3 (id=64): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6(0xa, 0x80003, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 2.545318636s ago: executing program 2 (id=67): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000018c0), 0xe0c81) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000380)={0x8, 0x4, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000ec0)={0x7fffffff, 0xb2, 0x0, 'queue0\x00', 0xff}) 2.304842651s ago: executing program 3 (id=68): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xe, &(0x7f0000001500)=ANY=[@ANYBLOB="b702000003462000bfa30000000000001702000000feffff7a0af0ff14ffffff61a4f0ff00000000b7060000ff0800007e640200000000005502faff037a20000404000001007d60a6040000001000006a0a58fe39000f00850000003f000000bc600000000000009500000000000000a81bbfa32d51a7d0679fd43041097666ab982de7b0efc5733ed236e4add6de094e0832aaa6912a8b2ce571c4580034fb000000e3a94bd24d2eb3860d808922433e3e0f242a46b3009a54f4077db0d4968a384b0559c7919b893d3b72cd6c832e986440ff0a7e8620cb231ccd00000000000000000000007777e2704653f620b2272c3c7fea60491073847c4b7bbaed91f33fb382d91ae8e18c9b6c9f0322ec5f1c7cc5869ff455896712198c4e2ddf8b86e714229527ca40b24cfd6a1f00e891728807982d90e116bba29bb70900000000000000c63ad2e7402f9cb424ac416e66af9ebbfea905d37cf226312cb81e48439cea06e7fa5e5b3596301460142f83b464d9e57dfdb06dcf9101000100130033d649d2110cf2e1f4682c24a314447c5e0807f0b1766ebdecbd061772daa52a38539295d3fea7a7e669441e1ff04114dfa904fb43897f8d9c3c287acba716973eadf1bf9cd0a38edc345415c42d3d2dd3339d32a5796cbe8925efd0c81af69a3e97588878d7ce18b68bc37e061d33357d6a39d33c702576cc2a8891663e3776c7a37c5c962e12102f237bbf60c0a3bf07d55b3888418de2b2ad23d25395dd4ccddf247dd2c712e2e2eaf7d432e968122cc5dcaa7ba330963b7093a58a02dba114f75e1ffd5c2912b51949b7d4b67300580d854c280206bfb93122fc776aadec51a367658100000000000000b148a90000000000a2a283801ff218538cb12c72b56ffb6b7a062581ec749f5700000000009f1f5ab2e02739ccffff0000360300005cbeaf95c7d797d6e094c4a3aee025bf43cebde7e7cdbae9b1698e19eb933d81967c4d0e6d5244c1ffb0e97628a88a5e37032f1e8f6c893e514f2b3e1028cd404a1d8fe6569da0385e65e4d523166c4213abb8dae5b1409317f29572e788af92aedb0287f2816e301fc8a24dba6fca8b270d44fe65e7bd90a5fc16387bcb5e3df18d7d2a33c72cfda827b8926a6dc6bc19ce398cb8fe48b11b7f93e6fdfb040283c9627bd40909ee4307c4197b15797af17845fbc02846d2f8543f65594cb535a9598eb067b21111dbaa58b19a52f3f12880128d08eb477ad349ca214bc7f80000000000ffb52da89cff41552996e20a585c7d265bd749eeba040fa7111c84142757709d7c475fac2839beb833327db41c6b647c7ee9ad419a6c68dd5c2ce4fa23c280518fc6e54d1b055cae5492e8c4cdd314a49631a15de2bffc920dd74e670794c3133bdfa17d809bf956f1af51cf3c0711792d3071dfdaec3c66053cdb00028f6fba8da8f53de39a5999e56fc26ae866674627c8a53d3fd245050060ed40782d1d98bf1e1f5dfd4d1fb399624c12732e300818b222ce029ce01055f941721226e3e5f05d2837240f8f6831b6ef2a02ec64aae1eea9cfac06d8b7042e8ebdc69a0d4a14281e631d06afc99d397c5b67b290344e347c953806b298f288884335f624378b3748a4a86bbd0a62127b2c28ce3737661b98bd45965b537ece7bd4e365ffd5567df4d02034c8d488a49c6fb1a0a02eaab2f271d3a14e44211e4ff602d146f72355972860bdd14719d65301964d022819b75696ce47534c9d989d69a445095ff8fbebd2c84635acc333f2aca4623cfe9f9e6c3f9fbb4374c08e1be5eec12c329a87d335fd7a52a4e4e7c2e57fa2f0df9500347b300f84230783cb665f3fa44f5d6fa987aa93c2619ef4977f9e4d38adec323778f3bc987533ffd85fe5417398a3001b394fccbd2faee83b5e2b8a2dd18cf067b6198366283c531b3ef336a84e825c63b9bc7b98b4ad6a471692224adef86f4c9930169dfa133e22929d5a27e10bfbcfe7c02ca451afd74d26f489e0e09cf1b596ae0c959cf26cb0c8114a9311b7f2fe2ad977074ff5f62f6777a20700414ed03ba3d7404eadd43a62ad1173491a5c099290393e1f85aeb3886fbb7f6646212054a850d58a71c6d6027cd3a5ff22e98672349f9bddb23622e2f19b39e51ced84524567ec1fcb233a2fb85371e9b08b6fd4adcd4db148ed26757123a0e604bcf6ffdcc303956e1805f1746361bd3eeb55d3fefe6ac274c2e6c78963430118942d62a465698e600dadd81a53ffd29358746e8db2499e3fca62b0ff660b0aaeedadeb194a9217e9fed2ce04cc24451871d5bcd76173ab7123cc27eef33dbb4d3c3bf1fc2df68a98345c15667388c5000000000000000000000015000000c0459f900702908d4979288d06c7159ef2663dc7ea9302b10bf2da21e3990ddf20a38adc1fd15124310daf2461224cfbfd5e6265d012d60fc9e39209ce3209720f8d7bf39bf71d0d46ed6d51eede797da70cf0b7463cffc8557f9a2e15483dbafb146a3221c20d51f172cf2eefe1e6b28cffc1e40a789d5513626f5c4fbf65a2b5a093634b806b7ee570f70f624ce8c02d4c1ec7a9370f42a807f1d46fe77be0637a8007343b7771788f64b36cab94a99243bc780702f98f34a80f81aeb853f97c3e9586805d1a240d7e870b15defbc6b21fdc98a79759c9b8375313deea0000000009e38e9539d6b9507b6f3f8d29992d080a13aed8879a1f2cb3475be3376427f89d432f7fe7c0cad2ce38427fc773cef47e00000000000000000000000000000000000d09b8ee6321377ffcb6cc386f8704ae9ce6c11b4bb91d0097ef2b77e0cd28af1222e68c2745eca64fa40db07f6e5925224069d14395f7170ab9c2d396f7510f65ce5b0405d8951a70a37117d13c5b2f684c52bff2dc895f5e06e497adee9de0012dd140c592137c90319f8a578007b57aaba3fb93d29a6584313e5b58f8a71cebf77a0891f3633dba69588ec728e785e6e4431fce5a143451c7a51c22b1b605347db811eb9a461f4ef2612181aa8cafc33a4552d4550a717339bdcae1d5c2e78d0a2f550a865811c0162d6dd0b5f834b6295f2a2b0045d8b0033a878daae3db955f2689e3e13842a6219da4e38dc4a14e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000040)}, 0x24) 2.280333942s ago: executing program 2 (id=69): r0 = syz_open_dev$usbmon(&(0x7f00000005c0), 0x3, 0x40) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000000100)={&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0}) 1.254623938s ago: executing program 2 (id=75): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000080)=ANY=[@ANYBLOB="201506000000210200cd"], 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = getpid() r2 = syz_pidfd_open(r1, 0x0) setns(r2, 0x24020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b1052, 0x0) syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) umount2(&(0x7f0000000040)='.\x00', 0x2) 917.034916ms ago: executing program 0 (id=78): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c00078018000180"], 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 731.193251ms ago: executing program 0 (id=79): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c000000020601080000000000000000000000400500010006200000050005000a00000005000400000000000900020073797a310000000011000300686173683a69702c6d61726b"], 0x4c}}, 0x0) 617.530744ms ago: executing program 3 (id=80): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mount(0x0, &(0x7f0000002200)='./dev\x00', 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 544.471715ms ago: executing program 0 (id=81): r0 = socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x1ff) openat2(r1, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r1, &(0x7f0000001600)='dummy_udc.0', 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r2, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_IFLAGS={0x6, 0x2, 0x13}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 394.76747ms ago: executing program 0 (id=82): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x10}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xc4}}, 0x0) 337.051951ms ago: executing program 3 (id=83): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xe}, {0x5, 0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x34, 0x0, 0x4b6b9d28c5b9a46b, 0x70bd25, 0x25dfdbfb, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @local}, @L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e23}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40004) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r0 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 235.100733ms ago: executing program 0 (id=84): socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/configs/c1.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff) symlinkat(&(0x7f0000001300)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/configs/c1.1/hid.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000002200)='./dev\x00', &(0x7f0000002300)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x1ff) openat2(r0, &(0x7f0000000040)='./config/usb_gadget/g1\x00', 0x0, 0x0) write(r0, &(0x7f0000001600)='dummy_udc.', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000002400)='./dev/hidg0\x00', 0x800, 0x0) read(r1, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c20000ee86dd6015690900132f00fc020000000000000000000000000000ff020000000000000000000000000001242088a88d"], 0x0) 174.412585ms ago: executing program 1 (id=85): writev(0xffffffffffffffff, &(0x7f0000000300)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560aff820fffff5bab00070000002058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809", 0x3f}], 0x1) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e000000000000000000050006000100000008000900010000000500"], 0x44}, 0x1, 0x0, 0x0, 0x42000}, 0x20008881) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000009f, 0x0) 79.049467ms ago: executing program 3 (id=86): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000002000000000000000008082295"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0xffffffffffffff6b, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x503, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000440)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) 11.145349ms ago: executing program 0 (id=87): rename(&(0x7f0000000080)='./file0/file0\x00', 0x0) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x3, 0x400, @remote, 0x9}, 0x1c) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x4) 0s ago: executing program 1 (id=88): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x1f0, 0x65, 0x0, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x1c4, 0x2, [@TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_ACT={0x1b4, 0x1, [@m_tunnel_key={0x1b0, 0xf, 0x0, 0x0, {{0xf}, {0x38, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x3c}}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @rand_addr=0x64010100}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @multicast1}, @TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @remote}]}, {0x149, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0x1f0}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.119' (ED25519) to the list of known hosts. syzkaller login: [ 80.423989][ T5763] cgroup: Unknown subsys name 'net' [ 80.563733][ T5763] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.239824][ T5763] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.844075][ T5776] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.854236][ T5776] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.875223][ T5776] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.883358][ T5776] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.891564][ T5776] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 83.900307][ T5776] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 83.908235][ T5776] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 83.927017][ T5780] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.935261][ T5780] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.946529][ T5780] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.954733][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.962926][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.048085][ T5776] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.051257][ T5780] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.063613][ T5780] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.077248][ T5780] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.087402][ T5780] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.095316][ T5776] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.103659][ T5776] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.105841][ T5780] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.125224][ T5776] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.133060][ T5780] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.141084][ T5776] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.151272][ T5780] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.483868][ T5778] chnl_net:caif_netlink_parms(): no params data found [ 84.658542][ T5778] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.666472][ T5778] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.673995][ T5778] bridge_slave_0: entered allmulticast mode [ 84.681439][ T5778] bridge_slave_0: entered promiscuous mode [ 84.697382][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 84.717055][ T5778] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.724297][ T5778] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.731707][ T5778] bridge_slave_1: entered allmulticast mode [ 84.739345][ T5778] bridge_slave_1: entered promiscuous mode [ 84.800945][ T5778] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.838728][ T5778] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.855706][ T5784] chnl_net:caif_netlink_parms(): no params data found [ 84.881168][ T5782] chnl_net:caif_netlink_parms(): no params data found [ 84.930602][ T5778] team0: Port device team_slave_0 added [ 84.970329][ T5778] team0: Port device team_slave_1 added [ 85.050858][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.058242][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.065803][ T5775] bridge_slave_0: entered allmulticast mode [ 85.073052][ T5775] bridge_slave_0: entered promiscuous mode [ 85.081585][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.088824][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.096132][ T5775] bridge_slave_1: entered allmulticast mode [ 85.103459][ T5775] bridge_slave_1: entered promiscuous mode [ 85.119233][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.126672][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.152695][ T5778] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.188144][ T5778] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.195254][ T5778] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.221779][ T5778] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.261201][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.283335][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.355754][ T5784] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.362999][ T5784] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.370699][ T5784] bridge_slave_0: entered allmulticast mode [ 85.378559][ T5784] bridge_slave_0: entered promiscuous mode [ 85.387501][ T5784] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.394653][ T5784] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.402133][ T5784] bridge_slave_1: entered allmulticast mode [ 85.409729][ T5784] bridge_slave_1: entered promiscuous mode [ 85.417052][ T5782] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.424238][ T5782] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.432077][ T5782] bridge_slave_0: entered allmulticast mode [ 85.439906][ T5782] bridge_slave_0: entered promiscuous mode [ 85.451996][ T5775] team0: Port device team_slave_0 added [ 85.461519][ T5775] team0: Port device team_slave_1 added [ 85.483979][ T5778] hsr_slave_0: entered promiscuous mode [ 85.490724][ T5778] hsr_slave_1: entered promiscuous mode [ 85.516022][ T5782] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.523176][ T5782] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.531210][ T5782] bridge_slave_1: entered allmulticast mode [ 85.538963][ T5782] bridge_slave_1: entered promiscuous mode [ 85.590424][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.597581][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.623945][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.654719][ T5784] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.664702][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.672446][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.698673][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.718912][ T5782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.743143][ T5784] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.776566][ T5784] team0: Port device team_slave_0 added [ 85.788262][ T5782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.830783][ T5784] team0: Port device team_slave_1 added [ 85.861975][ T5782] team0: Port device team_slave_0 added [ 85.909706][ T5782] team0: Port device team_slave_1 added [ 85.919518][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.926748][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.952766][ T5784] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.970913][ T5784] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.978020][ T5784] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.004199][ T5784] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.015940][ T5086] Bluetooth: hci1: command tx timeout [ 86.030498][ T5775] hsr_slave_0: entered promiscuous mode [ 86.037191][ T5775] hsr_slave_1: entered promiscuous mode [ 86.043419][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.055939][ T5775] Cannot create hsr debugfs directory [ 86.084975][ T5086] Bluetooth: hci0: command tx timeout [ 86.117540][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.124665][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.150738][ T5782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.175161][ T5086] Bluetooth: hci2: command tx timeout [ 86.189803][ T5782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.197333][ T5782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.223361][ T5782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.245837][ T5086] Bluetooth: hci3: command tx timeout [ 86.345726][ T5782] hsr_slave_0: entered promiscuous mode [ 86.352999][ T5782] hsr_slave_1: entered promiscuous mode [ 86.359660][ T5782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.367431][ T5782] Cannot create hsr debugfs directory [ 86.401819][ T5784] hsr_slave_0: entered promiscuous mode [ 86.413072][ T5784] hsr_slave_1: entered promiscuous mode [ 86.419798][ T5784] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.428375][ T5784] Cannot create hsr debugfs directory [ 86.690813][ T5778] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 86.703481][ T5778] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 86.747569][ T5778] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 86.759059][ T5778] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 86.868140][ T5775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 86.883368][ T5775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 86.898188][ T5775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 86.912058][ T5775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.008221][ T5784] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.020491][ T5784] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.037363][ T5784] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.058151][ T5784] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.158294][ T5782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.191488][ T5782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.239983][ T5782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.253226][ T5782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.360655][ T5778] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.469582][ T5778] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.491616][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.499095][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.532514][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.539737][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.562121][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.620211][ T5784] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.671172][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.730293][ T5782] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.759896][ T5784] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.796421][ T2895] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.803576][ T2895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.816616][ T2895] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.823810][ T2895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.849107][ T5782] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.887503][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.894671][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.919139][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.926383][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.953919][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.961170][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.993358][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.000571][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.086203][ T5086] Bluetooth: hci1: command tx timeout [ 88.163002][ T5782] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.179545][ T5086] Bluetooth: hci0: command tx timeout [ 88.245591][ T5086] Bluetooth: hci2: command tx timeout [ 88.336268][ T5086] Bluetooth: hci3: command tx timeout [ 88.370813][ T5778] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.551151][ T5778] veth0_vlan: entered promiscuous mode [ 88.618465][ T5778] veth1_vlan: entered promiscuous mode [ 88.758444][ T5778] veth0_macvtap: entered promiscuous mode [ 88.788141][ T5778] veth1_macvtap: entered promiscuous mode [ 88.819625][ T5782] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.849827][ T5784] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.871398][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.883969][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.911122][ T5778] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.946604][ T5778] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.956719][ T5778] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.966273][ T5778] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.978220][ T5778] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.049857][ T5782] veth0_vlan: entered promiscuous mode [ 89.123508][ T5782] veth1_vlan: entered promiscuous mode [ 89.133365][ T5784] veth0_vlan: entered promiscuous mode [ 89.168337][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.184761][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.223961][ T5784] veth1_vlan: entered promiscuous mode [ 89.232788][ T5775] veth0_vlan: entered promiscuous mode [ 89.292032][ T5784] veth0_macvtap: entered promiscuous mode [ 89.304737][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.317769][ T5784] veth1_macvtap: entered promiscuous mode [ 89.323906][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.338720][ T5775] veth1_vlan: entered promiscuous mode [ 89.375950][ T5782] veth0_macvtap: entered promiscuous mode [ 89.397718][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.411588][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.433465][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.448319][ T5782] veth1_macvtap: entered promiscuous mode [ 89.482144][ T5784] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.492952][ T5784] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.510667][ T5784] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.520715][ T5775] veth0_macvtap: entered promiscuous mode [ 89.549945][ T5784] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.562138][ T5784] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.573224][ T5784] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.593066][ T5784] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.641423][ T5775] veth1_macvtap: entered promiscuous mode [ 89.670681][ T5837] syz.0.1[5837]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 89.689608][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.693815][ T5837] loop0: detected capacity change from 0 to 256 [ 89.711614][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.721600][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.734329][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.753085][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.795153][ T5837] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 89.819340][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.836223][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.863337][ T5782] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.889177][ T5782] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.901328][ T5782] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.912301][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.924253][ T28] audit: type=1800 audit(1785532661.935:2): pid=5837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1" name="file2" dev="loop0" ino=1048583 res=0 errno=0 [ 89.946637][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.956780][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.969608][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.980398][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.992971][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.010967][ T5837] exFAT-fs (loop0): error, invalid access to FAT (entry 0xffffffff) [ 90.020276][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.021807][ T5837] exFAT-fs (loop0): Filesystem has been set read-only [ 90.055311][ T5782] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.064107][ T5782] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.073710][ T5782] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.082844][ T5782] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.100006][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.111434][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.121624][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.132442][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.151299][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.163503][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.173772][ T5086] Bluetooth: hci1: command tx timeout [ 90.188659][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.255578][ T5086] Bluetooth: hci0: command tx timeout [ 90.261185][ T5775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.280540][ T5775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.289670][ T5775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.298904][ T5775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.325304][ T5086] Bluetooth: hci2: command tx timeout [ 90.405657][ T5086] Bluetooth: hci3: command tx timeout [ 90.465302][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.473206][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.637387][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.694929][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.384845][ C0] sched: RT throttling activated [ 92.415250][ T5086] Bluetooth: hci1: command tx timeout [ 92.417531][ T5776] Bluetooth: hci0: command tx timeout [ 92.420905][ T5780] Bluetooth: hci2: command tx timeout [ 92.485045][ T5776] Bluetooth: hci3: command tx timeout [ 92.920691][ T3064] cfg80211: failed to load regulatory.db [ 93.111662][ T2917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.126824][ T2917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.638195][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.652690][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.669742][ T2895] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.695142][ T2895] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.226296][ T5851] tmpfs: Bad value for 'mpol' [ 94.628693][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.676126][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.259583][ T5862] tipc: Started in network mode [ 95.264698][ T5862] tipc: Node identity ac1414aa, cluster identity 4711 [ 95.293912][ T5862] tipc: Enabled bearer , priority 10 [ 96.362827][ T5871] loop2: detected capacity change from 0 to 128 [ 96.435677][ T5871] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 96.475334][ T5812] tipc: Node number set to 2886997162 [ 96.489037][ T5769] udevd[5769]: incorrect ext4 checksum on /dev/loop2 [ 96.633192][ T5871] loop2: detected capacity change from 0 to 4096 [ 96.659491][ T5871] EXT4-fs: inline encryption not supported [ 96.710793][ T5871] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 96.772399][ T5871] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a802e018, mo2=0002] [ 96.781660][ T5871] System zones: 0-5 [ 96.819427][ T5871] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 96.842726][ T5874] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 96.889877][ T5872] loop1: detected capacity change from 0 to 2048 [ 97.093186][ T5854] loop0: detected capacity change from 0 to 256 [ 97.102158][ T5854] ======================================================= [ 97.102158][ T5854] WARNING: The mand mount option has been deprecated and [ 97.102158][ T5854] and is ignored by this kernel. Remove the mand [ 97.102158][ T5854] option from the mount to silence this warning. [ 97.102158][ T5854] ======================================================= [ 98.118366][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.168059][ T5854] FAT-fs (loop0): Directory bread(block 64) failed [ 98.205052][ T5854] FAT-fs (loop0): Directory bread(block 65) failed [ 98.214467][ T5872] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.267137][ T5854] FAT-fs (loop0): Directory bread(block 66) failed [ 98.299739][ T5872] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 98.321208][ T5854] FAT-fs (loop0): Directory bread(block 67) failed [ 98.329147][ T5854] FAT-fs (loop0): Directory bread(block 68) failed [ 98.338320][ T5854] FAT-fs (loop0): Directory bread(block 69) failed [ 98.345452][ T5854] FAT-fs (loop0): Directory bread(block 70) failed [ 98.352128][ T5854] FAT-fs (loop0): Directory bread(block 71) failed [ 98.362015][ T5854] FAT-fs (loop0): Directory bread(block 72) failed [ 98.372626][ T5854] FAT-fs (loop0): Directory bread(block 73) failed [ 98.445688][ T5854] FAT-fs (loop0): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 98.488207][ T5775] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.039578][ T5894] loop2: detected capacity change from 0 to 1024 [ 99.049527][ T5894] EXT4-fs: Ignoring removed nomblk_io_submit option [ 99.207850][ T5894] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=6002c018, mo2=0102] [ 99.219010][ T5894] System zones: 0-1, 3-12 [ 99.246901][ T5894] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.920156][ T5903] loop0: detected capacity change from 0 to 4096 [ 100.958289][ T5903] EXT4-fs: inline encryption not supported [ 100.980610][ T2993] Bluetooth: hci4: Frame reassembly failed (-84) [ 101.048417][ T5903] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 101.122862][ T5903] EXT4-fs (loop0): Test dummy encryption mode enabled [ 101.206236][ T5903] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 101.256058][ T5903] System zones: 0-5 [ 101.316974][ T5903] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 101.333006][ T5890] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.642443][ T5778] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.975271][ T5780] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 102.988380][ T5086] Bluetooth: hci4: command 0x1003 tx timeout [ 104.904485][ T5952] netlink: 12 bytes leftover after parsing attributes in process `syz.1.27'. [ 105.871779][ T5967] fuse: Unknown parameter '0x0000000000000005' [ 106.404725][ T5974] loop1: detected capacity change from 0 to 256 [ 106.504340][ T5974] exFAT-fs (loop1): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc20ee313, utbl_chksum : 0xe619d30d) [ 107.739882][ T5990] clocksource: Override clocksource jiffies is not currently HRT compatible - deferring [ 108.766353][ T6004] loop1: detected capacity change from 0 to 1024 [ 108.812757][ T6007] fuse: Unknown parameter '0x0000000000000005' [ 109.254206][ T6013] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.417276][ T6026] loop2: detected capacity change from 0 to 512 [ 111.563543][ T6030] hub 1-0:1.0: USB hub found [ 111.581557][ T6030] hub 1-0:1.0: 1 port detected [ 111.600595][ T6026] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 111.639103][ T6026] ext4 filesystem being mounted at /8/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 111.780990][ T5782] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 112.041380][ T6045] fuse: Unknown parameter '0x0000000000000005' [ 115.279680][ T6083] netlink: 200 bytes leftover after parsing attributes in process `syz.0.59'. [ 116.905150][ T6106] UDC core: g1: couldn't find an available UDC or it's busy [ 117.226197][ T6114] netlink: 12 bytes leftover after parsing attributes in process `syz.0.66'. [ 118.288434][ T6139] UDC core: g1: couldn't find an available UDC or it's busy [ 118.670387][ T6145] syz.0.77 (6145) used greatest stack depth: 20840 bytes left [ 118.735370][ T27] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 118.959444][ T27] usb 3-1: Using ep0 maxpacket: 16 [ 118.977008][ T27] usb 3-1: config index 0 descriptor too short (expected 51443, got 18) [ 119.002783][ T27] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 119.033003][ T27] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.063029][ T27] usb 3-1: Product: syz [ 119.071156][ T27] usb 3-1: Manufacturer: syz [ 119.077361][ T27] usb 3-1: SerialNumber: syz [ 119.093080][ T27] r8152-cfgselector 3-1: config 0 descriptor?? [ 119.355320][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 119.364213][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 119.382559][ T6157] netlink: 8 bytes leftover after parsing attributes in process `syz.3.83'. [ 119.391549][ T6157] netlink: 24 bytes leftover after parsing attributes in process `syz.3.83'. [ 119.400854][ T6157] Zero length message leads to an empty skb [ 119.425737][ T5811] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 119.530658][ T6161] netlink: 'syz.1.85': attribute type 9 has an invalid length. [ 119.644387][ T5811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 119.664020][ T5811] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 119.695017][ T5811] usb 1-1: Dual-Role OTG device on HNP port [ 119.709658][ T5811] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 6.06 [ 119.741181][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 119.792117][ C0] ------------[ cut here ]------------ [ 119.798095][ C0] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 119.805464][ C0] WARNING: CPU: 0 PID: 5811 at drivers/usb/gadget/udc/core.c:125 usb_ep_enable+0x263/0x440 [ 119.815552][ C0] Modules linked in: [ 119.819518][ C0] CPU: 0 PID: 5811 Comm: kworker/0:3 Not tainted syzkaller #0 [ 119.827060][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 119.837168][ C0] Workqueue: usb_hub_wq hub_event [ 119.842275][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 119.847720][ C0] Code: 49 8b 0e 48 c7 c0 40 bd 7a 8b 49 c7 c0 60 bd 7a 8b 4c 0f 44 c0 48 c7 c7 00 bd 7a 8b 48 c7 c6 e7 8b a6 8c 89 ea e8 fd e0 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 10 ce fa 49 bc 00 00 00 00 00 fc ff df [ 119.867388][ C0] RSP: 0018:ffffc900000077b0 EFLAGS: 00010046 [ 119.873575][ C0] RAX: 01a31b0875f4cd00 RBX: ffff8880256f80e0 RCX: ffff888078f39e00 [ 119.881579][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 119.889580][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 119.897577][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 119.905580][ C0] R13: ffff8880256f810d R14: ffff8880256f80e8 R15: ffff888031ae2cba [ 119.913612][ C0] FS: 0000000000000000(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 119.922607][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 119.929241][ C0] CR2: 000000110c3fa89d CR3: 0000000018ea5000 CR4: 00000000003506f0 [ 119.937260][ C0] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 119.945277][ C0] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 119.953271][ C0] Call Trace: [ 119.956576][ C0] [ 119.959452][ C0] hidg_set_alt+0x12a/0xa10 [ 119.963992][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 119.969403][ C0] set_config+0x735/0xff0 [ 119.973781][ C0] composite_setup+0x1df4/0x33a0 [ 119.978848][ C0] configfs_composite_setup+0xc7/0x100 [ 119.984347][ C0] dummy_timer+0x1309/0x3420 [ 119.989110][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 119.994168][ C0] ? lock_chain_count+0x20/0x20 [ 119.999070][ C0] ? dummy_free_streams+0x520/0x520 [ 120.004300][ C0] ? dummy_free_streams+0x520/0x520 [ 120.009525][ C0] __hrtimer_run_queues+0x525/0xc10 [ 120.014771][ C0] ? hrtimer_interrupt+0x980/0x980 [ 120.019916][ C0] ? read_tsc+0x9/0x20 [ 120.024043][ C0] hrtimer_run_softirq+0x177/0x290 [ 120.029199][ C0] handle_softirqs+0x27d/0x820 [ 120.034005][ C0] ? read_tsc+0x9/0x20 [ 120.038109][ C0] ? ktime_get+0x24b/0x280 [ 120.042565][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 120.047367][ C0] ? do_softirq+0x1a0/0x1a0 [ 120.051905][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 120.057142][ C0] __irq_exit_rcu+0xd3/0x190 [ 120.061762][ C0] ? irq_exit_rcu+0x20/0x20 [ 120.066308][ C0] irq_exit_rcu+0x9/0x20 [ 120.070578][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 120.076255][ C0] [ 120.079229][ C0] [ 120.082204][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.088221][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 120.094766][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b 6f c6 f6 65 8b 05 9c 3d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 120.114416][ C0] RSP: 0018:ffffc900045d6e00 EFLAGS: 00000206 [ 120.120519][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 01a31b0875f4cd00 [ 120.128528][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 120.136526][ C0] RBP: ffffc900045d6e90 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 120.144522][ C0] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 120.152518][ C0] R13: ffff8880b8e295c0 R14: ffff8880b8e295c0 R15: 1ffff920008badc0 [ 120.160539][ C0] ? _raw_spin_unlock+0x40/0x40 [ 120.165440][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.170240][ C0] __mod_timer+0x9b0/0xd60 [ 120.174722][ C0] schedule_timeout+0x183/0x2d0 [ 120.179609][ C0] ? console_conditional_schedule+0x40/0x40 [ 120.185547][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 120.191557][ C0] ? update_process_times+0x1b0/0x1b0 [ 120.196968][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.202202][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 120.207435][ C0] ? wait_for_completion_timeout+0x26b/0x5d0 [ 120.213447][ C0] wait_for_completion_timeout+0x2c6/0x5d0 [ 120.219288][ C0] ? kobject_get+0xcc/0x120 [ 120.223846][ C0] ? wait_for_completion+0x5a0/0x5a0 [ 120.229193][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 120.234783][ C0] usb_start_wait_urb+0x1ea/0x580 [ 120.239883][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 120.245747][ C0] usb_control_msg+0x235/0x3e0 [ 120.250550][ C0] usb_set_configuration+0x12a8/0x2150 [ 120.256070][ C0] usb_generic_driver_probe+0x8d/0x150 [ 120.261570][ C0] usb_probe_device+0x12a/0x260 [ 120.266469][ C0] ? usb_register_device_driver+0x230/0x230 [ 120.272394][ C0] really_probe+0x247/0xae0 [ 120.276946][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 120.282187][ C0] __driver_probe_device+0x1f5/0x390 [ 120.287537][ C0] driver_probe_device+0x4f/0x420 [ 120.292639][ C0] __device_attach_driver+0x2ca/0x510 [ 120.298051][ C0] bus_for_each_drv+0x252/0x2e0 [ 120.302941][ C0] ? coredump_store+0x90/0x90 [ 120.307660][ C0] ? bus_find_device+0x300/0x300 [ 120.312670][ C0] __device_attach+0x2c1/0x420 [ 120.317477][ C0] ? device_attach+0x20/0x20 [ 120.322101][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 120.327165][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 120.332402][ C0] bus_probe_device+0x180/0x260 [ 120.337306][ C0] device_add+0x87c/0xc40 [ 120.341758][ C0] usb_new_device+0x995/0x1550 [ 120.346571][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 120.351474][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.356749][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 120.362008][ C0] hub_event+0x29d5/0x4a80 [ 120.366599][ C0] ? hub_post_resume+0x120/0x120 [ 120.371581][ C0] ? read_lock_is_recursive+0x20/0x20 [ 120.376992][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.382250][ C0] ? process_scheduled_works+0x975/0x1600 [ 120.388033][ C0] ? process_scheduled_works+0x975/0x1600 [ 120.393792][ C0] process_scheduled_works+0xa60/0x1600 [ 120.399402][ C0] ? worker_attach_to_pool+0x370/0x370 [ 120.404902][ C0] ? assign_work+0x3cc/0x5d0 [ 120.409526][ C0] worker_thread+0xa5e/0xfe0 [ 120.414166][ C0] kthread+0x2fa/0x390 [ 120.418268][ C0] ? pr_cont_work+0x550/0x550 [ 120.423017][ C0] ? kthread_blkcg+0xd0/0xd0 [ 120.427650][ C0] ret_from_fork+0x48/0x80 [ 120.432103][ C0] ? kthread_blkcg+0xd0/0xd0 [ 120.436722][ C0] ret_from_fork_asm+0x11/0x20 [ 120.441535][ C0] [ 120.444588][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 120.451885][ C0] CPU: 0 PID: 5811 Comm: kworker/0:3 Not tainted syzkaller #0 [ 120.459365][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 120.469446][ C0] Workqueue: usb_hub_wq hub_event [ 120.474506][ C0] Call Trace: [ 120.477807][ C0] [ 120.480686][ C0] dump_stack_lvl+0x18c/0x250 [ 120.485438][ C0] ? show_regs_print_info+0x20/0x20 [ 120.490665][ C0] ? load_image+0x420/0x420 [ 120.495216][ C0] panic+0x2ca/0x720 [ 120.499150][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 120.503887][ C0] ? ret_from_fork_asm+0x11/0x20 [ 120.508909][ C0] __warn+0x2e0/0x470 [ 120.512942][ C0] ? usb_ep_enable+0x263/0x440 [ 120.517792][ C0] ? usb_ep_enable+0x263/0x440 [ 120.522633][ C0] report_bug+0x2be/0x4f0 [ 120.527064][ C0] ? usb_ep_enable+0x263/0x440 [ 120.531893][ C0] ? usb_ep_enable+0x263/0x440 [ 120.536694][ C0] ? usb_ep_enable+0x265/0x440 [ 120.541494][ C0] handle_bug+0xcf/0x120 [ 120.545771][ C0] exc_invalid_op+0x1a/0x50 [ 120.550305][ C0] asm_exc_invalid_op+0x1a/0x20 [ 120.555193][ C0] RIP: 0010:usb_ep_enable+0x263/0x440 [ 120.560601][ C0] Code: 49 8b 0e 48 c7 c0 40 bd 7a 8b 49 c7 c0 60 bd 7a 8b 4c 0f 44 c0 48 c7 c7 00 bd 7a 8b 48 c7 c6 e7 8b a6 8c 89 ea e8 fd e0 97 fa <0f> 0b e9 e1 fe ff ff e8 e1 10 ce fa 49 bc 00 00 00 00 00 fc ff df [ 120.580233][ C0] RSP: 0018:ffffc900000077b0 EFLAGS: 00010046 [ 120.586375][ C0] RAX: 01a31b0875f4cd00 RBX: ffff8880256f80e0 RCX: ffff888078f39e00 [ 120.594401][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 120.602400][ C0] RBP: 0000000000000081 R08: ffff8880b8e28c53 R09: 1ffff110171c518a [ 120.610410][ C0] R10: dffffc0000000000 R11: ffffed10171c518b R12: dffffc0000000000 [ 120.618414][ C0] R13: ffff8880256f810d R14: ffff8880256f80e8 R15: ffff888031ae2cba [ 120.626455][ C0] hidg_set_alt+0x12a/0xa10 [ 120.631003][ C0] ? usb_gadget_set_state+0x12c/0x2a0 [ 120.636409][ C0] set_config+0x735/0xff0 [ 120.640779][ C0] composite_setup+0x1df4/0x33a0 [ 120.645763][ C0] configfs_composite_setup+0xc7/0x100 [ 120.651250][ C0] dummy_timer+0x1309/0x3420 [ 120.655909][ C0] ? __lock_acquire+0x7d80/0x7d80 [ 120.660965][ C0] ? lock_chain_count+0x20/0x20 [ 120.665893][ C0] ? dummy_free_streams+0x520/0x520 [ 120.671123][ C0] ? dummy_free_streams+0x520/0x520 [ 120.676345][ C0] __hrtimer_run_queues+0x525/0xc10 [ 120.681594][ C0] ? hrtimer_interrupt+0x980/0x980 [ 120.686734][ C0] ? read_tsc+0x9/0x20 [ 120.690854][ C0] hrtimer_run_softirq+0x177/0x290 [ 120.696005][ C0] handle_softirqs+0x27d/0x820 [ 120.700795][ C0] ? read_tsc+0x9/0x20 [ 120.704911][ C0] ? ktime_get+0x24b/0x280 [ 120.709380][ C0] ? __irq_exit_rcu+0xd3/0x190 [ 120.714189][ C0] ? do_softirq+0x1a0/0x1a0 [ 120.718729][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 120.723967][ C0] __irq_exit_rcu+0xd3/0x190 [ 120.728614][ C0] ? irq_exit_rcu+0x20/0x20 [ 120.733201][ C0] irq_exit_rcu+0x9/0x20 [ 120.737481][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 120.743154][ C0] [ 120.746117][ C0] [ 120.749083][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 120.755106][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0xc0/0x120 [ 120.761645][ C0] Code: c7 44 24 20 00 00 00 00 9c 8f 44 24 20 f7 44 24 20 00 02 00 00 41 c6 04 07 f8 75 4b f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 3b 6f c6 f6 65 8b 05 9c 3d 6d 75 85 c0 74 3c 48 c7 04 24 0e 36 [ 120.781314][ C0] RSP: 0018:ffffc900045d6e00 EFLAGS: 00000206 [ 120.787414][ C0] RAX: dffffc0000000004 RBX: 0000000000000a06 RCX: 01a31b0875f4cd00 [ 120.795439][ C0] RDX: dffffc0000000000 RSI: ffffffff8acacbe0 RDI: 0000000000000001 [ 120.803433][ C0] RBP: ffffc900045d6e90 R08: ffffffff911eb56f R09: 1ffffffff223d6ad [ 120.811438][ C0] R10: dffffc0000000000 R11: fffffbfff223d6ae R12: dffffc0000000000 [ 120.819437][ C0] R13: ffff8880b8e295c0 R14: ffff8880b8e295c0 R15: 1ffff920008badc0 [ 120.827453][ C0] ? _raw_spin_unlock+0x40/0x40 [ 120.832376][ C0] ? rcu_is_watching+0x15/0xb0 [ 120.837196][ C0] __mod_timer+0x9b0/0xd60 [ 120.841650][ C0] schedule_timeout+0x183/0x2d0 [ 120.846553][ C0] ? console_conditional_schedule+0x40/0x40 [ 120.852493][ C0] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 120.858503][ C0] ? update_process_times+0x1b0/0x1b0 [ 120.863933][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 120.869166][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 120.874405][ C0] ? wait_for_completion_timeout+0x26b/0x5d0 [ 120.880442][ C0] wait_for_completion_timeout+0x2c6/0x5d0 [ 120.886291][ C0] ? kobject_get+0xcc/0x120 [ 120.890848][ C0] ? wait_for_completion+0x5a0/0x5a0 [ 120.896185][ C0] ? __init_swait_queue_head+0xa8/0x140 [ 120.901778][ C0] usb_start_wait_urb+0x1ea/0x580 [ 120.906851][ C0] ? usb_api_blocking_completion+0xb0/0xb0 [ 120.912719][ C0] usb_control_msg+0x235/0x3e0 [ 120.917529][ C0] usb_set_configuration+0x12a8/0x2150 [ 120.923052][ C0] usb_generic_driver_probe+0x8d/0x150 [ 120.928565][ C0] usb_probe_device+0x12a/0x260 [ 120.933474][ C0] ? usb_register_device_driver+0x230/0x230 [ 120.939417][ C0] really_probe+0x247/0xae0 [ 120.943980][ C0] ? pm_runtime_barrier+0x14b/0x1c0 [ 120.949225][ C0] __driver_probe_device+0x1f5/0x390 [ 120.954578][ C0] driver_probe_device+0x4f/0x420 [ 120.959656][ C0] __device_attach_driver+0x2ca/0x510 [ 120.965080][ C0] bus_for_each_drv+0x252/0x2e0 [ 120.969978][ C0] ? coredump_store+0x90/0x90 [ 120.974701][ C0] ? bus_find_device+0x300/0x300 [ 120.979682][ C0] __device_attach+0x2c1/0x420 [ 120.984490][ C0] ? device_attach+0x20/0x20 [ 120.989111][ C0] ? __kmem_cache_free+0xba/0x1f0 [ 120.994185][ C0] ? do_raw_spin_unlock+0x121/0x230 [ 120.999432][ C0] bus_probe_device+0x180/0x260 [ 121.004340][ C0] device_add+0x87c/0xc40 [ 121.008888][ C0] usb_new_device+0x995/0x1550 [ 121.013691][ C0] ? usb_disconnect+0x8a0/0x8a0 [ 121.018590][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.024137][ C0] ? lockdep_hardirqs_on+0x98/0x150 [ 121.029374][ C0] hub_event+0x29d5/0x4a80 [ 121.033854][ C0] ? hub_post_resume+0x120/0x120 [ 121.038828][ C0] ? read_lock_is_recursive+0x20/0x20 [ 121.044240][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 121.049476][ C0] ? process_scheduled_works+0x975/0x1600 [ 121.055233][ C0] ? process_scheduled_works+0x975/0x1600 [ 121.060986][ C0] process_scheduled_works+0xa60/0x1600 [ 121.066599][ C0] ? worker_attach_to_pool+0x370/0x370 [ 121.072105][ C0] ? assign_work+0x3cc/0x5d0 [ 121.076747][ C0] worker_thread+0xa5e/0xfe0 [ 121.081416][ C0] kthread+0x2fa/0x390 [ 121.085525][ C0] ? pr_cont_work+0x550/0x550 [ 121.090246][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.094870][ C0] ret_from_fork+0x48/0x80 [ 121.099327][ C0] ? kthread_blkcg+0xd0/0xd0 [ 121.103944][ C0] ret_from_fork_asm+0x11/0x20 [ 121.108763][ C0] [ 121.111956][ C0] Kernel Offset: disabled [ 121.116378][ C0] Rebooting in 86400 seconds..