last executing test programs: 9.806165043s ago: executing program 3 (id=4): syz_emit_vhci(&(0x7f0000000240)=@HCI_EVENT_PKT={0x4, @inquiry_info_with_rssi={{0x22, 0xf}, {0x1, [{@none, 0xb, 0x0, "6dc079", 0x200, 0x96}]}}}, 0x12) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448ca, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448f0, &(0x7f0000000040)={0x0, 0xe, "a465d3", 0x3, 0xaa}) 8.972630903s ago: executing program 3 (id=6): socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee6, 0x8031, r0, 0x215eb000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newtclass={0x4c, 0x28, 0x100, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xa, 0xfff2}, {0xa, 0x1}, {0x10, 0xe}}, [@tclass_kind_options=@c_taprio={0xb}, @TCA_RATE={0x6, 0x5, {0x0, 0x70}}, @tclass_kind_options=@c_ingress={0xc}, @TCA_RATE={0x6, 0x5, {0x40, 0x5}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.462139776s ago: executing program 1 (id=2): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="b70200000d000000bfa300000000000005000000000000007a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000050404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000496cf27fb6d2c643db7e2d5fb4b0936cdf827fb43a431ca711fcd0cdfa146ed3d09a6175037958e27106e225b7937f02008b5e5a076d83923dd29c034055b67d5b310efcfa89147a7fb0a93d035f2f206d2ef831ab7ea0c34f17e3ad6eecbb622003b538dfd8e012e79578e51bc53099e90f4580d7be3e8c254a5cba117cbdb9cd38bdb2ca8e050000003a14817ac61e4dd11183a13477bf7e060e3670ef0e6a9f65f1328d6704902cbe7bc04b82d2789cb132b8667c214733a18c8b6619f28d996d60a17e3c184b751c51160100000000000080148b9a31ee8dc8b544f3c4a532e60a0ac346dfebd31a08060000000200000000000000334d83239dd20100008000000000d858e8327ef01fb6c86acac12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e957bc73ddc4eabba08a406f99f7b1e1ad828267d4eadd3964663e085354133f7130856f756436303767d2e24f29e5dad9796edb697a6ea0183babc190ae2ebf8aad34732181feb28cb0bae7c34dc5e7c805210600000000000000c3dec04b25df45d4f71ab158c36657b7218baa07a99bd50499ccc421ace5e845885efb5b9964e4beba3da8223fe5308e4e65ee93e107000000f8ddebf70132a4d01776839b8eccf707882042e716df9b57b290c661d4e85031086197bcc5cb0e221a0c34323c129102b6ff0100002e88a1940b3c02ed9c92d6f64b1282dc51bb0015982730711c599e1c72ffa11ed8be1a6830d7507005154c46bd3ca96318c570f0721fc7aa2a5836ba99fe1f86468694f22cdf550ef091a78098534f0d973059594119d06d5ea9a8d0857382ec6e2a071474cfc12346e47ad97f4ead7cf70a9d1cdac944779dc08a705414888700a30e2366c6a06b3367a389ca39059787790017b0689a173db9c24db65c1e00015c1d093dab18fd0699fe3304000000323e9c7080397bc49d70c060d57bc88fbe3bbaa058b040362ab926150363fb099408885afc2bf9a46a076b7babfcddeff8c35030669ea69f5e4be1b8e0d6697e97186f9ae97d5670dba6623279f73db9dec75070cd9ab0fda6b069ef6d2857ca3e4e6068f1bf710d133d541da86e0477e4a6cc999dc21c3ef408e6b178e7c9f274d7fafc8d757d33dfa35aa2b2ff7f9a7d365e63845f3e1092f8dde8af3904ea0f4b82649b83ed4fa0f873339c4cadecc13219ba7518aa4f7db34ead13484742067ab743c1d82a5687f2ed690000010000000000000000000000000000000000000099d4fa0000000000003f0ecdc7c82e72919c91d2039afe17e95edef8ba72205beff7771bcb293747b88486cacee403000000a2919a4b09e168e4e4d5ff2ed893f2e314679fa69fc7e0cf761f918725704a01c56009a9f748e5aaf30a10bd8c409b1870c1f75e26b45264e3d3f8e0048e55ae289c2f884d0766cddc76eb7f601110ff39053c262279f4ef00fbdb8c328615a9ec84f27a9f3938ae736138b8c1ec220c1540bf3d162dc1c27fa30f0dc60b9f257db5d1c7ed2efce676a93110904d5e055af44664b53c764d61443f73552195c7ccfbf9f03c44432eaa3b7501d4239354da8de21eada75d3a3afb2c76ff0700007976694b6a0f0e946766f57544ff52cef0dd811bec4e3c0a30f2d7d19d26d201721b8eded3bc475958dd498ee2b2d6146e33fc0de1dc2e0516ac565ddb1d4ae89e671282a2d3066ac968c7d7d7db195f255b1b4a85eb9ee0a3b68c9e209756623adf685dd715d68ed1274b4d5502f512493af8f98c615cac3666c58f785c3f758be352a71871d5c081197d37980e4f4e26b5476fb20407ff7098b7174bef66fa03a99b5c0c20b378065fac4ef9ac2d0d804b9400000060e5d3f1749f6aecf69ba83a71caa9bdddc679f1b826f74b6563a4be1fd82b73c8c2bc65f63982b951fb058fd3c7b6341c4580376b2c16bd94d2da66059de81abfa15eeeae3b0ba38d8bb1bf032c73f1285e21fff5a1d138e061b1dc7bbda199b5fab8e0719e9cd69b47dcb52b0be6a3a73afdf328132e1d4f21065716be0c53a23940d07188b015fa341dbc92231c8b5e5717eac184f46c9f61b69f55cd2231bcf821052429a1f250e8b734be0605a15f25923d599544b319319ff0a32621019347df460a098119a6f47eb1bac47946d7a009cbc6ec74c19a93cc7c7138b28c95270116181fd5f5533d3c58104d2ad0e10d3663488e664401453f22f0d76d2162635365258af61ae1f46f4a7866f302d91e3f7c2781f602220522e84602a939a8d5e4137ae31ccd397404dc72e06715a6503d4d865182803ee6725da7293b23daeebefd6fce7411c9624a7e8d5ba5a13e1c32adc4f3274497c6882a72475e4280a4d9a47c003c6ed3071330c58145be813a10788a720a6b5a498ca2b42496c479a0a71e2f6f9bad8c84bc6be20281bde0b348cf2c60538a505ad4a0510eebb023e4954c9eb6cd70627f5c03d867dbf3ad5d1f1dc852064dd0efafc3df20ec8faf3d194db76127f88f284fa1b71ab964fdd2474471da76373e65e9a8bf844bdfdd348bc7d00c4c7e7abc231f8cde79b7a6c5aafe954b8ba37818e40c14b36f2d7c23f9f614576b689436fef2f27f8b1e756e00262e22bca49c43fd73e7e99b2fa44a8c1df7ffffff735ad6c5fabf082e0df0f8ba7e24272165f2f5b28230c095162b82ceaeaae9b1713b5f2ee68e2b53d44bd84bf6960157e96bbb96b5e10d66c87e7a9a7d53c281d88ebb175a4dbb82130e6870980e47913110f091d21760d985afd3163f2e6880682432f9b3b97d57a9f980edfa1116a3d04d58872a07d6a7e12db673acd2f7b8988d833e71943fe2c1c65a3cf355e5b91114052f8a398d8e10c96b955c56b55bfd3ecf0af694c71a03f2996c15b1ba971de1cb9c7e6a0000000000000014783ef54c51199317413f98dca8ff3df3572a7d9ef5f6103997f1f9e4b0c3970bda50f6c0af58dbd6c031b1a5a7512c58965c514adfa17d31429c68db50a93d88199defd3b4625fea426ff9293a28a544a6a9e24d192d67a1b3c6b14c4ec6d164e902ce4913843d65d841973468729ea12bf6d3499036dbb66718f3497855c3baa6cc07c0fa388ec9df0617c1a28ef5a595ee267a76175b8a057e6efaf4fefe46def451f2858fe71a53e77b1a44e98843bb3a40102da3703dfb9f61bdcea2fb810b32d52e2157a150a63ea6135d1cf6f864c2e68884d7245bc5d61dc5a114d10ffb2200040000fc1e3865d17d128306d1b81884a934cb0000000000d367000098a4526e6468987dbc63bff7590eb388afaba43d811996333eef7e9f472bee293f0c40d434b8be07cbd52325296e22802493edb5c590ad208bac683a8b2d4c9d2d57ff846ae8c422e0b28546671f11d8157bb762c91f3fbcca8e21589c92446ae65d408c0637ffcc2d44b615ce003dd1e12b085e186d069a55c2e96efbe5024d61a56a36d988c0f530043a6cd72af0fcd540a9d4e293690c5e697b3a1480e46df5371bca1cfb28a57c1b3c956ec81397e81fbf870a673804220423f52ad8178b9fd04bff816e00000000000000000000000000000000000000000079aaf19bd1e18f582aac5b83d76bd57297512fdcdad18bcf2455bc80394d8f34e2ef84733038f4b6ef516d7baa99f24f2f100fc46aec9dc19b30fe9966b7ae563b6459d86fd3b4c7173f06387517e4189f3fb09c069e20220354b054f2391efe55a0cc7f738b3987ae033ceabddec65ec31f98c7e0858e8d411087889964b8fb3c31f74fa7b2e6e1c1d84a46d8be8afff1ac67eb2da30294d4a0f89978d4e2137319b6448da45bd00eb23aa5be1d566782b5a4aa291a854a4932bcbf472fd1175b521edb1763bb7dae4a124b0006e2ce4799519b3dbd3c0109b17fe2b4b87f6ad4b7176c9c1959669ef42cfce81fbc6dcdc7f9bde1a66c0b3cf9329bfecf0217bda1b72924ee9d90a3bd0be833f206244b5ba0648309018da5442ebd22bca0363183aae9d38f80638f52015cab5a8d772f9b92cb2f286783fa976f7d215136cae0b0b0539dc7dbd56035a69807514c732763f542f10401e65368b821b584fe2f82c94b2f5930246800000000000000000000000000000000000000c8ed77d8ac9f28a2e8f205900241ec8872fe3ecdf73abfc4024298a69649e17f3fe5ebba1e17f2f280e6d3f094cd3448700c5ee102b5d1b04f08ab2e5272990646eca26a62431e8c942ea2c0c621b4821eb5beceee6d53468852159452cf47aead473a8638a4d1ce2d4c6df1074e8cb3ec16149e6b4b7ec1a9aa1b63f41d08afd3d885b98330e25eedaaf5f361b2e81ce0c52ee84a2b340afdc59b177921e2f2a99132b82ed3291196038fe9a4f5a5dc734788c71bf46222d266a48628774c87b88bf3dcbea4574a87726345587e1e233fd4117063d183f477cc53c52a3fafcb998a96cf9f61cdd9ffa82d648880552ac506811accffc85ca34b262ed983d4645f4657522ed32b278891c26d5e70d41f9a5c8df8dc163fd84a81af0020a10fe53ce940d350d62b526f198620abdad179a273682175da1d9d82fde7eb9a45b566e78904238d00908b5876b4ebfca376d631b9b0caf3f1ef32ae87507aace4715efaf840ebda28e741a8b6b29eed5861168b4e1b3842f6db4443974dd0f0d4ceed9ca62fd2a839a8150335dc2b9640825b83c8bf4f931a51b093bf2dc84809af7c14f04b58d64e4f852bc49cf1126567e11f61774559bdbcc500000000000000000000000000eab10c8c592cb6f1ebccd9eb16c155a0666189eb16cea09f164363456645c9b7c168bc214615a7e94ff3d53f85c6396c42050f3205cef3009458f33949efa6a583d87795448b8b21ab6a7ca4bd8b0da30dee0af8b3a0f3cfd0ad9a8e7819b2057e2e5d8b453b6f743f8fc4dee677658958c4d4663ddcdfd0fc44e996665ab5586a4eb40a959fb0dababa05e776c29cf2443ad1d2fa0920288db88e645033ae1a4357078810d20bd93b8194214554c3f8c6efd61bc40000"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0xe40, 0x0, &(0x7f00000002c0)="f6eb094549002060009b8538a4ba", 0x0, 0x806, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_emit_ethernet(0x4e, &(0x7f0000000500)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaaa8100070086dd"], 0x0) 7.564824855s ago: executing program 3 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.usb0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.usb0/ep.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0/ep.3\x00', 0x1ff) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f00000005c0)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000680)='dummy_udc.0\n', 0xc) 6.890997045s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='config\x00', &(0x7f00000000e0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='config\x00', 0x0, 0x0) mkdirat(r0, &(0x7f0000000140)='usb_gadget/g1\x00', 0x1ff) r1 = openat(r0, &(0x7f0000000180)='usb_gadget/g1\x00', 0x0, 0x0) mkdirat(r1, &(0x7f00000002c0)='strings/0x409\x00', 0x1ff) r2 = openat(r1, &(0x7f0000000300)='strings/0x409\x00', 0x0, 0x0) openat(r2, &(0x7f0000000440)='product\x00', 0x2, 0x0) 6.229451138s ago: executing program 1 (id=9): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x20, 0x0, 0x0, 0x78, 0x18, &(0x7f0000000300)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x0, 0x21}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x3f}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x0, 0x13}}, &(0x7f0000000600)={0x0, 0x28, 0x50}}, 0x1000}], 0x0, 0x0, 0x0}) 6.229345136s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usbip-host/match_busid\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)="f601713fc8dd2aa8916ba7bc44d62613823fb7fa108292fb7c2b1bcc8e5228be745ff913", 0x24) 6.025654169s ago: executing program 1 (id=10): prlimit64(0x0, 0xe, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="8580f83288e1", @broadcast, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x1, 0x5, 0x1c, 0x67, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x11, 0x5, 0x0, @loopback}}}}}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r1, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x20080, 0x80e1}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) 5.835593999s ago: executing program 3 (id=11): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) 5.695211947s ago: executing program 2 (id=12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) bind$bt_hci(r0, &(0x7f00000000c0)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="03c9"], 0x7) 5.061105264s ago: executing program 2 (id=13): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000080), 0x0, 0x2) ioctl$FE_SET_PROPERTY(r0, 0x40106f52, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x11, '\x00', @data=0x6, 0x9}]}) ioctl$FE_READ_STATUS(r0, 0x80046f45, &(0x7f0000000040)) 4.568236397s ago: executing program 2 (id=14): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000240)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty, 0xffff}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) 1.32999242s ago: executing program 1 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=ANY=[@ANYBLOB="5000000008021100000108021100000008021100000000000000000000000000000001000006020202020202010182"], 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000200)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @val={0x10, 0x1, 0x21}}, 0x21) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val, @void}, 0x20) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x99}]}, 0x2c}}, 0x0) 1.147003121s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, 0x0, 0x0) write(r0, &(0x7f00000004c0)='\n', 0x1) 1.033032428s ago: executing program 3 (id=17): mkdir(&(0x7f0000000100)='mnt\x00', 0x1ff) syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040a00e58684000010203010902270001010080320904000003ff0000000705810240000007050202400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) 892.174874ms ago: executing program 0 (id=1): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./my_configfs/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000300)='./my_configfs/usb_gadget/g1/functions/tcm.usb0\x00', 0x1ff) mkdir(&(0x7f0000000400)='./my_configfs/target/usb_gadget\x00', 0x1ff) mkdir(&(0x7f0000000500)='./my_configfs/target/usb_gadget/naa.1234567890abcdef\x00', 0x1ff) mkdir(&(0x7f0000000600)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./my_configfs/target/usb_gadget/naa.1234567890abcdef/tpgt_1/lun/lun_0\x00', 0x1ff) 0s ago: executing program 1 (id=18): socket$nl_route(0x10, 0x3, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x970, 0x1f480, 0x0, 0x399}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) io_uring_enter(r0, 0x8ae, 0x6933, 0x17, 0x0, 0xeffd) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts. [ 92.060753][ T5588] cgroup: Unknown subsys name 'net' [ 92.270285][ T31] cfg80211: failed to load regulatory.db [ 92.328834][ T5588] cgroup: Unknown subsys name 'cpuset' [ 92.394056][ T5588] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.417932][ T5588] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.266886][ T59] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.287373][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.304958][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 97.331543][ T5609] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.351131][ T5609] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 97.370412][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.370740][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.371524][ T5609] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 97.372022][ T5609] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.398006][ T5610] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.400893][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.412593][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.413137][ T5617] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.432814][ T5617] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 97.480283][ T5609] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.487125][ T5612] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 97.509033][ T5610] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.510537][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.522938][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.524257][ T5610] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.548517][ T5610] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.552387][ T4917] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.561663][ T5606] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.571928][ T5610] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.640806][ T5610] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 99.626947][ T4917] Bluetooth: hci4: command tx timeout [ 99.713436][ T4917] Bluetooth: hci3: command tx timeout [ 99.864364][ T4917] Bluetooth: hci1: command tx timeout [ 99.864505][ T4917] Bluetooth: hci2: command tx timeout [ 99.864588][ T4917] Bluetooth: hci0: command tx timeout [ 100.627020][ T5602] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.627423][ T5602] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.633155][ T5602] bridge_slave_0: entered allmulticast mode [ 100.655752][ T5602] bridge_slave_0: entered promiscuous mode [ 100.659355][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.659506][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.659695][ T5600] bridge_slave_0: entered allmulticast mode [ 100.662095][ T5600] bridge_slave_0: entered promiscuous mode [ 100.689323][ T5604] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.689710][ T5604] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.690188][ T5604] bridge_slave_0: entered allmulticast mode [ 100.710724][ T5604] bridge_slave_0: entered promiscuous mode [ 100.766880][ T5602] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.766990][ T5602] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.767145][ T5602] bridge_slave_1: entered allmulticast mode [ 100.769136][ T5602] bridge_slave_1: entered promiscuous mode [ 100.771325][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.771429][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.771563][ T5600] bridge_slave_1: entered allmulticast mode [ 100.780694][ T5600] bridge_slave_1: entered promiscuous mode [ 100.817814][ T5604] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.818201][ T5604] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.822791][ T5604] bridge_slave_1: entered allmulticast mode [ 100.844873][ T5604] bridge_slave_1: entered promiscuous mode [ 100.855245][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.855370][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.855534][ T5601] bridge_slave_0: entered allmulticast mode [ 100.857508][ T5601] bridge_slave_0: entered promiscuous mode [ 100.948070][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.948337][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.948487][ T5601] bridge_slave_1: entered allmulticast mode [ 100.950587][ T5601] bridge_slave_1: entered promiscuous mode [ 100.953310][ T5603] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.986967][ T5603] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.988703][ T5603] bridge_slave_0: entered allmulticast mode [ 100.997471][ T5603] bridge_slave_0: entered promiscuous mode [ 101.090426][ T5603] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.090562][ T5603] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.090695][ T5603] bridge_slave_1: entered allmulticast mode [ 101.096807][ T5603] bridge_slave_1: entered promiscuous mode [ 101.126150][ T5602] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.129915][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.135501][ T5604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.202242][ T5602] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.211927][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.224852][ T5604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.228280][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.322161][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.335337][ T5603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.416293][ T5603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.419782][ T5602] team0: Port device team_slave_0 added [ 101.422487][ T5600] team0: Port device team_slave_0 added [ 101.448747][ T5604] team0: Port device team_slave_0 added [ 101.489216][ T5602] team0: Port device team_slave_1 added [ 101.491292][ T5600] team0: Port device team_slave_1 added [ 101.496306][ T5604] team0: Port device team_slave_1 added [ 101.504172][ T5601] team0: Port device team_slave_0 added [ 101.584153][ T5601] team0: Port device team_slave_1 added [ 101.586442][ T5603] team0: Port device team_slave_0 added [ 101.669438][ T5603] team0: Port device team_slave_1 added [ 101.670681][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.670693][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.670712][ T5602] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.674913][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.674955][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.675049][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.688679][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.688725][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.688888][ T5604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.704109][ T5606] Bluetooth: hci4: command tx timeout [ 101.784413][ T5606] Bluetooth: hci3: command tx timeout [ 101.862579][ T5602] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.862593][ T5602] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.862612][ T5602] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.913836][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.913855][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.913883][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.915817][ T5604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.915828][ T5604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.915847][ T5604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.917007][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.917018][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.917036][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.949526][ T5606] Bluetooth: hci0: command tx timeout [ 101.949653][ T5606] Bluetooth: hci2: command tx timeout [ 101.949711][ T5606] Bluetooth: hci1: command tx timeout [ 102.148037][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.148050][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.148070][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.786139][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.786153][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.786173][ T5603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.852106][ T5603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.852120][ T5603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.852142][ T5603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.027872][ T5602] hsr_slave_0: entered promiscuous mode [ 103.029109][ T5602] hsr_slave_1: entered promiscuous mode [ 103.046159][ T5600] hsr_slave_0: entered promiscuous mode [ 103.047168][ T5600] hsr_slave_1: entered promiscuous mode [ 103.048041][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 103.048125][ T5600] Cannot create hsr debugfs directory [ 103.061692][ T5604] hsr_slave_0: entered promiscuous mode [ 103.068589][ T5604] hsr_slave_1: entered promiscuous mode [ 103.071243][ T5604] debugfs: 'hsr0' already exists in 'hsr' [ 103.071300][ T5604] Cannot create hsr debugfs directory [ 103.132092][ T5601] hsr_slave_0: entered promiscuous mode [ 103.133185][ T5601] hsr_slave_1: entered promiscuous mode [ 103.144811][ T5601] debugfs: 'hsr0' already exists in 'hsr' [ 103.144865][ T5601] Cannot create hsr debugfs directory [ 103.372091][ T5603] hsr_slave_0: entered promiscuous mode [ 103.373199][ T5603] hsr_slave_1: entered promiscuous mode [ 103.378564][ T5603] debugfs: 'hsr0' already exists in 'hsr' [ 103.378649][ T5603] Cannot create hsr debugfs directory [ 103.783512][ T4917] Bluetooth: hci4: command tx timeout [ 103.863455][ T4917] Bluetooth: hci3: command tx timeout [ 104.023687][ T4917] Bluetooth: hci1: command tx timeout [ 104.023723][ T4917] Bluetooth: hci2: command tx timeout [ 104.023749][ T4917] Bluetooth: hci0: command tx timeout [ 104.291661][ T5602] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 104.362999][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.377776][ T5602] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 104.407629][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.410977][ T5602] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 104.437728][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.467947][ T5602] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 104.515650][ T5602] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.695208][ T5600] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.738797][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 104.753422][ T5600] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.789180][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 104.801359][ T5600] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.828195][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 104.869122][ T5600] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.908760][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.075153][ T5604] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.100438][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.114657][ T5604] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.150056][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.164637][ T5604] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.188122][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.226247][ T5604] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.268091][ T5604] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.496662][ T5601] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 105.540950][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.573515][ T5601] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 105.600659][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.621481][ T5601] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 105.649903][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.698065][ T5601] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 105.728262][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.784931][ T5602] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.863437][ T5606] Bluetooth: hci4: command tx timeout [ 105.905488][ T5603] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 105.945071][ T5606] Bluetooth: hci3: command tx timeout [ 105.961955][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.984164][ T5603] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 106.008752][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.030328][ T5603] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 106.068323][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.072957][ T5602] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.092129][ T5603] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 106.103927][ T5606] Bluetooth: hci0: command tx timeout [ 106.103958][ T5606] Bluetooth: hci2: command tx timeout [ 106.103978][ T5606] Bluetooth: hci1: command tx timeout [ 106.135935][ T5603] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.188309][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.188956][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.247924][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.248490][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.297768][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.416691][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.479996][ T5604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.487688][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.488248][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.547891][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.548404][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.633030][ T5604] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.737981][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.759080][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.760125][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.880250][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.880477][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.961390][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.020497][ T995] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.020946][ T995] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.074124][ T5603] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.131386][ T995] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.131522][ T995] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.321269][ T5603] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.436807][ T4328] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.436970][ T4328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.545494][ T3308] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.547952][ T3308] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.774471][ T5602] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.290665][ T5602] veth0_vlan: entered promiscuous mode [ 108.478029][ T5602] veth1_vlan: entered promiscuous mode [ 108.541715][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.889246][ T5604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.910179][ T5602] veth0_macvtap: entered promiscuous mode [ 109.007347][ T5602] veth1_macvtap: entered promiscuous mode [ 109.132196][ T5600] veth0_vlan: entered promiscuous mode [ 109.207418][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.234938][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.281819][ T5600] veth1_vlan: entered promiscuous mode [ 109.314989][ T5602] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.344627][ T5603] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.390522][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.434206][ T1179] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.442388][ T1179] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.476878][ T1179] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.517402][ T5604] veth0_vlan: entered promiscuous mode [ 109.750739][ T5604] veth1_vlan: entered promiscuous mode [ 109.893128][ T5600] veth0_macvtap: entered promiscuous mode [ 109.970863][ T5601] veth0_vlan: entered promiscuous mode [ 109.996521][ T5600] veth1_macvtap: entered promiscuous mode [ 110.108201][ T5601] veth1_vlan: entered promiscuous mode [ 110.129263][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.129287][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.235410][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.285229][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.394299][ T5604] veth0_macvtap: entered promiscuous mode [ 110.396995][ T5603] veth0_vlan: entered promiscuous mode [ 110.398971][ T4328] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.430085][ T4328] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.430619][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.430638][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.481729][ T4328] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.500133][ T5604] veth1_macvtap: entered promiscuous mode [ 110.513476][ T4328] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.636152][ T5603] veth1_vlan: entered promiscuous mode [ 110.701335][ T5601] veth0_macvtap: entered promiscuous mode [ 110.843565][ T5601] veth1_macvtap: entered promiscuous mode [ 110.936361][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.995668][ T5604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.111814][ T4328] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.118770][ T1179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.118817][ T1179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.119258][ T4328] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.157413][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.158136][ T4328] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.191035][ T4328] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.264156][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.271081][ T5603] veth0_macvtap: entered promiscuous mode [ 111.439255][ T5603] veth1_macvtap: entered promiscuous mode [ 111.440543][ T1179] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.495198][ T1179] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.514702][ T1179] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.517842][ T995] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.517862][ T995] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.522585][ T3308] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.806337][ T5797] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 112.288445][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.378276][ T5799] Zero length message leads to an empty skb [ 112.579638][ T5603] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.658821][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.658840][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.801358][ T995] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.818788][ T995] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.841981][ T194] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.885805][ T194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.017806][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.017823][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.361774][ T5804] bridge0: port 3(syz_tun) entered blocking state [ 113.361919][ T5804] bridge0: port 3(syz_tun) entered disabled state [ 113.387439][ T5804] syz_tun: entered allmulticast mode [ 113.455020][ T5804] syz_tun: entered promiscuous mode [ 113.461132][ T5804] bridge0: port 3(syz_tun) entered blocking state [ 113.461301][ T5804] bridge0: port 3(syz_tun) entered forwarding state [ 113.738247][ T5807] sound umpC3D1: No UMP Group is found in FB [ 113.739314][ T5807] sound umpC3D2: No UMP Group is found in FB [ 113.740336][ T5807] sound umpC3D3: No UMP Group is found in FB [ 114.188320][ T1483] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.188344][ T1483] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.574408][ T37] audit: type=1800 audit(1784934796.387:2): pid=5814 uid=0 auid=4294967295 ses=4294967295 subj=_ op=collect_data cause=failed comm="syz.1.8" name="product" dev="configfs" ino=7760 res=0 errno=0 [ 114.692535][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.692557][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.264817][ T4328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.264839][ T4328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.433704][ T5736] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.722641][ T5736] usb 1-1: config 1 interface 1 altsetting 1 has a duplicate endpoint with address 0x1, skipping [ 115.722684][ T5736] usb 1-1: Dual-Role OTG device on HNP port [ 115.757017][ T5736] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 115.757047][ T5736] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.302520][ T5736] gspca_main: spca501-2.14.0 probing 0000:0000 [ 116.362341][ T5736] gspca_spca501: reg write: error -32 [ 116.362362][ T5736] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 116.362459][ T5736] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 116.690258][ T5827] bridge0: port 3(syz_tun) entered disabled state [ 116.944845][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.021219][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.389461][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.405374][ T5827] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.545888][ T5827] syz.1.10 (5827) used greatest stack depth: 19808 bytes left [ 119.587982][ T3198] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.644542][ T3198] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.799813][ T3198] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.841785][ T3198] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.060447][ T1199] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 120.060482][ T1199] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.099466][ T5848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.162201][ T5848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.184445][ T5848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.479965][ T5614] usb 1-1: USB disconnect, device number 2 [ 121.003854][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 121.006254][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 121.041655][ T5858] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000c: 0000 [#1] SMP KASAN PTI [ 121.041681][ T5858] KASAN: null-ptr-deref in range [0x0000000000000060-0x0000000000000067] [ 121.041713][ T5858] CPU: 0 UID: 0 PID: 5858 Comm: syz.0.1 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 121.041742][ T5858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 121.041755][ T5858] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 121.041802][ T5858] Code: df e8 1e 88 00 00 8[ 121.041802][ T5858] Code: df e8 1e 88 00 00 89 c5 31 ff 89 c6 e8 73 f9 59 ff 85 ed 74 0a e8 ba f4 59 ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 7e 66 c3 ff 4c 8b 6b 60 48 89 df e8 e2 87 [ 121.041820][ T5858] RSP: 0018:ffffc90005a2fad8 EFLAGS: 00010206 [ 121.041848][ T5858] RAX: 000000000000000c RBX: 0000000000000000 RCX: ffff888026b90000 [ 121.041863][ T5858] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000060 [ 121.041875][ T5858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.041886][ T5858] R10: dffffc0000000000 R11: fffffbfff1f5f247 R12: ffffffff8ec97440 [ 121.041902][ T5858] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88803d023000 [ 121.041918][ T5858] FS: 00007f51545046c0(0000) GS:ffff888125c42000(0000) knlGS:0000000000000000 [ 121.041935][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.041949][ T5858] CR2: 00007f7279f93ab8 CR3: 0000000037084000 CR4: 00000000003526f0 [ 121.041968][ T5858] Call Trace: [ 121.041976][ T5858] [ 121.041983][ T5858] ? usbg_make_tpg+0x147/0x590 [ 121.042014][ T5858] usbg_make_tpg+0x1f6/0x590 [ 121.042056][ T5858] ? __pfx_usbg_make_tpg+0x10/0x10 [ 121.042086][ T5858] ? lockdep_hardirqs_on+0x7a/0x110 [ 121.042112][ T5858] target_fabric_make_tpg+0xa8/0x6d0 [ 121.042149][ T5858] configfs_mkdir+0x4f6/0x9e0 [ 121.042179][ T5858] ? __pfx_configfs_mkdir+0x10/0x10 [ 121.042204][ T5858] ? generic_permission+0x2bf/0x670 [ 121.042230][ T5858] ? bpf_lsm_inode_mkdir+0x9/0x20 [ 121.042261][ T5858] vfs_mkdir+0x402/0x620 [ 121.042299][ T5858] filename_mkdirat+0x289/0x520 [ 121.042331][ T5858] ? __pfx_filename_mkdirat+0x10/0x10 [ 121.042363][ T5858] ? do_getname+0x151/0x250 [ 121.042396][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.042419][ T5858] __se_sys_mkdir+0x34/0x150 [ 121.042449][ T5858] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.042471][ T5858] do_syscall_64+0x174/0x580 [ 121.042494][ T5858] ? trace_irq_disable+0x3b/0x140 [ 121.042514][ T5858] ? clear_bhb_loop+0x40/0x90 [ 121.042555][ T5858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 121.042575][ T5858] RIP: 0033:0x7f51562ede99 [ 121.042598][ T5858] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 121.042614][ T5858] RSP: 002b:00007f5154504028 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 121.042635][ T5858] RAX: ffffffffffffffda RBX: 00007f5156576180 RCX: 00007f51562ede99 [ 121.042650][ T5858] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 0000200000000600 [ 121.042663][ T5858] RBP: 00007f5156383eaf R08: 0000000000000000 R09: 0000000000000000 [ 121.042676][ T5858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 121.042687][ T5858] R13: 00007f5156576218 R14: 00007f5156576180 R15: 00007ffdc49b81f8 [ 121.042709][ T5858] [ 121.042717][ T5858] Modules linked in: [ 121.042746][ T5858] ---[ end trace 0000000000000000 ]--- [ 121.042765][ T5858] RIP: 0010:configfs_depend_item_unlocked+0x96/0x420 [ 121.042796][ T5858] Code: df e8 1e 88 00 00 89 c5 31 ff 89 c6 e8 73 f9 59 ff 85 ed 74 0a e8 ba f4 59 ff 4d 89 fd eb 6c 48 8d 7b 60 48 89 f8 48 c1 e8 03 <42> 80 3c 30 00 74 05 e8 7e 66 c3 ff 4c 8b 6b 60 48 89 df e8 e2 87 [ 121.095716][ T5858] RSP: 0018:ffffc90005a2fad8 EFLAGS: 00010206 [ 121.095823][ T5858] RAX: 000000000000000c RBX: 0000000000000000 RCX: ffff888026b90000 [ 121.095872][ T5858] RDX: 0000000000000002 RSI: 0000000000000000 RDI: 0000000000000060 [ 121.096189][ T5858] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 121.096231][ T5858] R10: dffffc0000000000 R11: fffffbfff1f5f247 R12: ffffffff8ec97440 [ 121.096384][ T5858] R13: dffffc0000000000 R14: dffffc0000000000 R15: ffff88803d023000 [ 121.096436][ T5858] FS: 00007f51545046c0(0000) GS:ffff888125d42000(0000) knlGS:0000000000000000 [ 121.096480][ T5858] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 121.096522][ T5858] CR2: 00007f515633b580 CR3: 0000000037084000 CR4: 00000000003526f0 [ 121.096568][ T5858] Kernel panic - not syncing: Fatal exception [ 121.097293][ T5858] Kernel Offset: disabled