last executing test programs: 4.857662568s ago: executing program 2 (id=199): mkdir(&(0x7f0000000100)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./debug/usb/devices\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000000440)={0x2020}, 0x2020) 4.420341011s ago: executing program 2 (id=204): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000009c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000a00)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="ad022bbd7000fd1d13250c00000008000300", @ANYRES32=r3, @ANYBLOB="050008000200000011000a"], 0x74}}, 0x20000000) 4.297328056s ago: executing program 1 (id=205): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f921", 0xcc}], 0x1}}], 0x2, 0x4000900) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 4.080422501s ago: executing program 2 (id=207): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000000100)=[{{&(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f00000003c0)=[{&(0x7f0000000680)="fa61", 0x2}], 0x1}}], 0x1, 0x20040804) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2, 0xc3072, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000140)=0xffff0000, 0x4) 3.216516919s ago: executing program 1 (id=216): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 3.057800733s ago: executing program 2 (id=218): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x1, 0x6, "45c230", 0x40, 0x6, 0x0, @mcast2, @empty, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0xc2, 0x0, 0x0, 0xd1, {[@mss={0x2, 0x4, 0x7}, @generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0xa, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "2b0b9b0aa045499925d926f4c9c76cae"}, @fastopen={0x22, 0x2}, @window={0x3, 0x3, 0xac}]}}}}}}}}}, 0x82) 2.391004251s ago: executing program 2 (id=222): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r0, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) 2.15437558s ago: executing program 1 (id=224): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f921", 0xcc}], 0x1}}], 0x2, 0x4000900) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.989763515s ago: executing program 0 (id=225): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x840) write$nci(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="07500d0eac057ec0732aa4bdd6de7100000000000000077497b8d51192acc36236995d9eb7eca31c0f123490ebe403951f2c2588616f89bc7271"], 0x857) r4 = syz_pidfd_open(0x0, 0x0) pidfd_send_signal(r4, 0x88, 0x0, 0x4) 1.621684758s ago: executing program 2 (id=229): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) r1 = syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000080), 0x3, 0x8ac02) syz_usb_disconnect(r1) syz_fuse_handle_req(r0, &(0x7f000000a280)="03680f2a20da68ab7a58c28b635d19c32b6efabb6ae3b5eee5a74d8943c613539e166c8baef50500824343a2f05093a5c21f746caefe9f9bccd83cca0fc28da20e2706308c61398dfce5f54ea9f266791ba29a4c7da158637def8b816aa296815ff13c06d632df45feaec1fd272ec1b510eaf58fe6b26cc36df3ecc0f5b1f258a190304e2519dd39ba9f5bc1788926ced5202e3b1e3afa16ae0b5d66dc05b36d3a00f72e5f318f8bdfc7eddc94238c50031d0657a22445ad0b3b90a86b086eed837a00bf0a3888bf61b4db57d6d8d6b286bbb13ba3b246def60ac34241eb843f89fe77d7e3e52573e90d791f21d4a8dfcc24ba95db60e2135634c02bd4b14535285df4fbe381ec036d876c4c8057c79371fa9717414590890e182a7b9e0ab927812083acf0d04e04c20c0555c8ceedc5bcf9b0e814be6eca98ce7b2f9f17d098bea541b75a1617c09fa99902ad746811f89a1fc5e6a80d77528247d6c104395715d2c9f9102f070a295f20c4307b9e848d3928b50985bfa2486893139761925b8fab96d26291243db23c4fd4d96864f4db860731a4e3e10b52d8d0487f5a8536cb4507dbdc111570ad0321b918edbc52807c2e0676d3257553702d9c1bd6741e9cd5cdeb3b8f636b6eb02a3b0066d7f677d586de5018850000f000ab3960f6656fb98039ceb6400d0299c356fc22b7298ed157c667bed5563fac2192a8ff7706a9e58d9d2f92632d6b25d8b090642e3f323bf7ff4d8264617a43a97099dd7347fbe3b1c439737913f17eff57f3e1ff4fdac374fb554e9a6a1ff32daa69507698d660d8d5f591801d8e4a9309342c3dc84966dbfcd2652800200bcb0dde9d456b7a07c5409f4f5387d0150daa34dbc865c6108d34dcc51eedb277e9638b43ce3c9afac5d7aa0f8542e58b0a84632a07557b041845d0012cf016ef065f97660b731ce1b79493de71def047277a3ae6d4a0d86591847d3475926039848c5baf6e1b43bc83053855182423156e54cadc8c85089265b49da853d15e5a701fedf2bf7986a723abf72e513fa05cb178345f2fcc859df49e74c8ccef196000a05cb090f22986ffb6f8f74ab41d2d88b6b535507a23b03d2fc2743f6f69fbcd43b8ff52b1ba32fa0137d542c515569b7f486f8ffa02ad1f54767f51701eb4c141437720884d529a57e17bc2837799124f7f112f42bd90f5b435d7a5d7524f7667bb7a6266263e62bf7ebf6896888d584c65a530b766111f078630d8629ffa91acb5ed02498549bd7e042acae0fab7ccb23278088a364be3da9619d91e1061bbaa9b33c3c5fbbcbc725ce8c2cc9ab0f2b4d30078040d3ca79d3ca056c360381ee87e743dea73a25ea2b4843f9ef280feb507f933fb556c718d8bf8f8618db72805b65d381b319f65c745c1e5060dae2f498852e79aff8dd9c88fd939a31871a430d3ba96fb118c79d1b08a397af23b1a188d1802106f588c768a1e6c9d244ac9a38d2a54ed50f19b78bf25e0ae1f9337ceaa8ff5ca8640104b19bcd643b51501d4e03ed5ffb383e7ed0ab78d540ae10bbd64fba1af59a4190215b7d10230992bbb4ff618d8284a2e2446990511fc2bff07cce9ba94a11d3db041e220e3d931fdf129d8ec2c9b17d6587a0044c9e09f52848db43ddc0df94513cc9e94e9d427623502a910deea0f21d86b16366769a46bf0d6d9fc0d2cd6b98ed885e9e2d765bdd051196bf20bd27c46ec902726d96de352c346d904fa00d63b67d272f116dce489f9d636cef61b441b9c113addec983b8b2fbdb2b32049e436c972b2fcf5140dc7b094c5047cb6226da700b72aeb3febdf16a75b6f61a311f606251c99b377c775c8fb3446ccf25dc4cca24290b3939f948019b05c80b5a6382112f63e0990b324c16a087c72aaec08796afc769f678e3634100a5a9da8215cb5d7a6a6b50a81676ef4edca35595b11f9606bef2fb84fe1f0a0703c886579f09986086f0dca6eb8061f9a74c79c1f758684a7363974b14561b9d2efdaba6c4cd8cb70627da1e195fcae3d8b2fa751278e8f220c83e677e14731eccd6fe0c357b011ed88b6df0c266b383f224b8e95384e401b717030b1227582d0d1042bd90377c4f2c7206a19983fc5905e4eb87edb6532b26ca9e28e160202606d19d9f5da34762f4b3fa842d7bff382ad70dcbc411f8b3e4cace8c8e0c72898d24023545e0dfdc4176209276a535491ce11c045c57b45c40f19b12dcf6ffbf78ab23e7fe9bdc404cf47db9855f2b835e1fce57debfa071803ec38da3c77a904080a4c737ce2b20e14e8449762f1ca0b1ce71779d2e6ee5299e1cf230e8070045c23c1d0e52f66fe9039f95cdc0b448dc12d24de39157934270345991948fce921b5d8e739315cc75d4b3b49928437b88672c1a7770365207b43895f45909d5d972f48aa66de609152a5afa2c7d75f0a14189d0409f0b623eab3b6e7d81025cde140893ed71b6f24f5a36d21dafb62af6be9da845403bc8ed36672efa74d7da19d5794cb4b79fa1c86940b1890c012e14b7c3bb261f16bdd99efaa9819b0bc00af842a6b94c6086d15b16ab81af9331ba3a5bd6941ef35239e85455ceab02c598ccee8fbad97ed37daebfe3b26a5a6c9eda5f65a1cfaf7a1f1688267c812a56c552ae11b465dac030e18f9008ad03cad80bf2cb91a7d99dcfa54d323ae0a4c3a6dc0f80d7ff703870610a945eb0ab5b6d14e81869c8872f6b123d98edcf6bba10d76d35cff4b0bb73db8b6695a8351785bcba1e160a42ed367c4da727da38f91562e941e5c4fa90cd585c5f1cd3a7d6892f18a5aa3c74a4fc00bf5909267489b937a928d9d8ff92530b5226eedf8ab9a957e5ffec45bc3a55e6955b38393ce52892655265d1f741e0b744808eb568a08d145a8bc5ada9b079f6d0bec5fc2ace0502b3f926372dff49478fbd10451f0de4b3d1a63b9d4e17ade45628d2e9dca041fcf7fc1e105e1fc44089fde9caf418ba8454dc361df4a59e1bd79143d280613e3c79ad18e922a43e199aa5927bb9553dd31e6223ad19bf8aff6e1dac8b3680feea3138bc61742b03f047b3d77039c1a4c2d05bd89c4bc12a1b83d78b4e7023f690fce6a44608c423d8cbc2e80942b9d9df2f4bf5606640fa47692f3e003885983a73e1dc313b243bbab5c3c6348afab796da766044ba142eda5a9d3713e3eda8c54c1708909c5da89ba67d29cd7f409c9b759cba316c42028754e3cb6eae2cc4f6d66982f212320f199b2e837bb4c54c54bcdcd2ac240ef6295d38e9889b4213819ef0f9aba6ceead4e0fd2c4becdc1f8ee3049831996c9a74a5fd4e12a1fd21ed47cf27e29f9d61e4b673d88914c36eefa53d3c49d94b463b7f8462c1951dfe33c10993d5cfcd0ededd50ad55009528f1e79fbc2fa70c3338b32c40ae3bb45d7079c7ae8433fb1aa19affbd3fbce0cb5ab0d557afb3be036856066eea45c28e93528b35477fc97fe9ff3641e5bb0f0e46069eb653c027daabff38541250081c77e0e3a1d030a73289e771cc41db10819af60599b5df0ad978fcf0b46af821c6b717b265e07d3a85397ea94de26f510290ddb5df8fcff76fe624843c8577802809c145916afce01d9dfdfa8bf07633e98f14fc73d5ef58ae5cb0c308bc74ca38259692a1cd4cf16752786a1c816f24612c27393d7e40a2df9a3dfa23a0c59613c8a7ccdd97c3fc67ecab94dcd8cc4b4517ed2414d41ce574074ffebd156e3d65c4421b0f339bc9f29abbfe49db62122248cf96b74d9639b3ef9d935cd81315a7ecfb0dc6ea1ee053c2e5c3615fbc10782f16a564fcabe1df70da7de989e00eedc346cef5b5cf880e9d563fc15302f056d37f98a939fd1dd5478b4318c256e93b77e31f87d8f7fe31755191b40d778ddb2ada1480bb9fcb96a09783fcf2c2c9fac2c3a2771dd0e2fb113cd460ee2c9cf4a712f04eb1b1a746091109f7ce0655e1ff7781fbe853e3d03bb91c9d8f4f416f5745c6b607bbf72786bd3c0ac4761e6e6d70f12dbefa1b13542086f793b72c6102ac06e75be17bdbb1efbf7e007f07f9bd433fd9d9cbf93e760757b792f15231895561fe49d9d683ccc066f38af581422b71702627162c0f0f35c36a61eaaa92129114b7334281e35fd39576e51d8593c149c9326e0c710ea4dcc9ef39a432a48ae1834f5046b954f9c033d6035cde0dbffe3e97f48a1dc695f4b2f6fe5d4eee83008318def105c37e11c9015670f13417ed036e68f6fbfca2a8289829677feb23079f3f2ee53b26e491924fefc1c50e54f288a8c4b6ba6d319054c3a9e39e14bba81b423acbd44b51279bbea6b0bb2047325837ce8b2191454f52ffa2cd04abe89e3de5bc102e9fdf740d3efd975bc9503af796e6aeee711ef8797de5d507a964730aa70cb9d3840054d4e1ffc57de378b511f7649666a54a6b3d91ed517198d76322bf99d13bef530a43ed3f13196bf2def6dcfb39f76471c75c5779bedf105717e546057fb478bfd24e8fdf3c12d028b542d1f424a9d45bb9e026e6098eb1cb0a77378300ec1b4c9f006aa4dfb7fb5c57cf1b035cbe96009ead1ca25ea1e5fae40312a4e9fe250684a1c8653bb303209e0fc6a498f3a08f6c5b946378a349f3aea45104a2badb8a45f500bb4f0f6cd620ce794e0f390e1cb7f2f1fc0039f4250a577544a6862b47bf89eea3a8c1516b7a9dd111c2ca719190e8feb1a7079e9fdfdb8224dc50791c986825469c087c8f081616edaa4193e161281aa68b7286a364cbb336b2459f0892e57c40afcfda7d16ea1877efb4e4b0d4b5c31e8cba15066903d3a91bdc7fb64452fb9843436110596f0b038da167a86f97d32c807270a1c994fe88e2517e11bdd210dd982d3c8158459440108308a936c9d2370b9d157c3f9caec36ff05bc40b37f095edf33bf4fad440f38c3f52129456936c07014140be5618f4e9d07b66679238023390cd676b1a3a28d0e90d5ad9ef13a31fcdc5a435454309367c437424e340a1f91c6483bce1026d85a16fb854252ea4ede39a4e69702ecff76432de508e064eda0df9f263a25c0f626d1c1ffaa6783be2975451ee936cc2178648935a924f6fb2db2f8ba34e348920d903114520918cc6872b842e3744fc18d1363583a107ec7b89c7792c0d8069e12f873f6d668f6fdeb47b72986914e45c2b061c5c936c73c9bcf1475ea0d25edaad21cf193405c8acef3bff4e4f1b2b321d70dba59e856a8849c2bba9508bad775370669b2bb7f5e53181af8bff525e13a4935d7e28b997b4ff15da9e36f1353a154ab701ad15420786daaf27ba7e122f7b825c668185b685630420378b4142ec4e4242c2cf0bf6e143f7e55cb12fb9dd59a8df9959ce4fc5fff68ae7174977a31ad7fd644bc94a20bae76f0af474034990fdfec8ceca0e6cd93fe21d84837b7e9d74c17b6d3054f0c008ee05764745fd8773a0c1c31bb3eef5b7e261b54805b5c805a4eeef05c812fcdede200442e7340c63490645ebd09c235d5c52a785542526edfe3875ad08267faed1d0a15236f00c6736b94c1a3821302ff610697ad7becdbc96f54b55138b585cd122e0d5aeaf43c9ba373e8aa1c1297e3415552cc57cd60ee1f3c04500ed0eed37775c873de3066c034c176c67c5bfbe9899a47732030855781341374641da058eee61d01d11b9db8f19fd4558957897340e32cdfbc39713f1f439be0638f614cdb5361433a45a6ff024e39c94141dc5403af101404ce5f2efa97b90d9ecdb7c361785dab977feded32554d1a74d5cbfe2435be7f0329ba382455c2ac11fbe29fe3826796d4bea03dc53a37f63f5be2773f83faf282f0ae24d9fe5762b71b499fd37b4ce7e71f93c3a983f80fed477708bbf2261c89893c4b76e34fac9b42671b6cc81678cc867f53e8c3ec47716206212743ca0c4941c2c61ed3177fccf85921e998d2b826df751173944bb07eeaae4001f677a0687a2550eeac8bb5128ecad9c7b6a514596a30b8292fbacc09ab488193507b6785d7a35c979db774b2c413246f1ae88d35d1914b20b8fb501034321642fb0b0baba3378e4c31fb5e247c177e573295df0194462b99079a436400ba1be2e30d39b8714c0fb2bdcd981d5a5cd514f8d4f14e4e0437108630355d8f2b60a6d18cb14ceb2b5d0704aa6e93e180bd79cb17e176bc4f81a03db12a03413de6189896955bb9e3cc69b6f9a50a7eda3742527f98c71d7ea8ba75e253c2b783f7104813c619949e6a0765179b1b9cbe68b703335ab5986928d86384357a2f4189f4b4ffcd61a3d29709bbc93b5371f0e7798cb72ae4c17bcee24f8e566f2777803c3d182d15a63ac40063f0ccdf4bd790404524eae02eafb6b54c699578486490033f0be866c74a134083003d330498658ba973ea674c4a0ff158403987b4c4752b07c8637a119b019fd5093406960144445056f6ffe73eda0235dc1871bb6058d4a9feecac628265689d58a81453d33290ab56eb691f3180d0288449f41844e56f5c6cf522d4a5866b24fb9552fde71946c4d25dcceaa41cfddb5a33c51c54c0a0a5abd31be8fb6ec53c1d14ba648e183979dbd0db01b9e51ba3803be7e7d3dee752668367264c783f74838121797ae5706ef3aa460682d1bf55808c70e69ae29d7683368470d08e7e9a1095305dce250b5b4bd48c02e098d241b1089736e8306a737e3a1a93e554cc3ab24672b8c74bfb8825004ca869e347f873de14575493836662ad741d79269904f905d7df64d0581ab8d76ee51a32d72ccb719f3a25c0a856b5bd2b2a1269e208d70c32e1d5ad0dfdc0ef43f0230e95eb85871eb4d6033abbf0be7025382d878eeaeea73c94270e79bd5757dc1bac95236a62545cd467830b12dcc30d7cc81e889d360d073db40058e9a1c7b41fc53e67740bc984132a1452cf7d000378f14ef93a7eb0dc9bacf23584ad6761139576607f8214757f71fc47b2944127116ca3e83b9d9643bce8d7bb44b4d16b5d5cff70a9e1114cd920b6fc1f409672648ad56ac3136ef0a314adb458faf3d3f171cb2fc513d76e43e6bda2f1a68e6fcf4a4ecbe6bc87716e2a82ea0c4657983ca0caaf8d75fdf5b0d7930e4f3e95eb1271485f938e7ad2bf0c97b7c11745de45518a1e3a74341968588558e7197b407d24eda0671ee28f219e4c5f809a7ea6f9f5b9705f4634a96112eb262bd5967db5237285b865d3f64516495ea6d1ec20dbed7af02362370bcc98671a61241fa1ef5b3095609d66ecc16010f6f67a280d1c6d215ec224ead17d68bbc9bc64b363b5be9b479b7aa2cbc8587a6b48cf653fde7a262a11ab3a10356f55f122310feac77c32ce0994d6e8a70f1c53331cb473a8e29427322fb6da292c4443b1678877f1c981fa05fbdef96520e5895aeb2a3a8e62652f9d8830c3b144b9598873e2ef41b7ade943807766877d609972cca74855eaedce07cda35b50557de96e736ca3107c154d31aeee78db214687b9964517bcd2c6c9ec047514b45c831aee4588166dc3ec9ab36bd1033e74b3d02d731c5bd84f659fa9fe55cac08c12cb999a2e64fac52f6cb7d1fffbf45d9a1126787d0060fd1be563ccbc278ac97dab0c1bee664675f273f5fa429bdc24b21ff1cf0a3ad3c687fb07ffd88bad6ab6c6b422a43b77ff76f96bf405c07f8a667bb8ff54d6714aaa21ceba2e78ce03146b2ab9f49e6d65081119b8e7cf3843e91349790d2b975c9f9c305df0ab4f2b1b2f30f629313cc66a325e4037f38f29842ee5781ba73d2f30f506cf7ff2237a72b4075aefa32cdd5ba0ae4e65cb6fa47a3e06f0d5f684b7172d6b58f5f7d783c4122db4f4b8b4f9d3296c9d115f432710c29d40dfca0010ecbe2f42fac899911d65c84f08aaa1923c8add5af518286211db14e1187a8839f3b2ae8bd914eafc16a576bbe3eba6271a4c5b3170c3f543761f11f1326a05c575bde1b5c6afd3876bea4fbb649071a95caf74de9f7b3421803ec351f934b8d0932ce72a13abf3627d9a396c10875fc167ef1ae98ff92af9ca366033c99d30306fd540a09d67d26ab192504e7c09f9e4d06287a2b1748f1761ba3c16d9d08be7562b7351c4b4679f5d4b38681bfd86c7f2003a9749b20b602112a95803469f5d252c564912b55c4bf3409298dbd066d877cc70a89b484b9ee6bb836c9acd1e53086c4be85e9a3bc5969c7016db9c72b68620c241409d06f4d7f72fe2289c9b4921055922783b8b886bc22926b7d194820af2b90e3c60e87e1a7851f38a970c07c1da120d1da75de2bb994ff7d05a313522373326f160914a9589711e0439d694f5221afe8cc118722ce4927e9543e61a12a76bcf2da1d01a0f258095d32063387349b4e9f253d8b73c6e834b6866f8a56b4797b92d521fa732aa0d55c8e9d6c56011ee6fb450853dc564d18e97c463609c27a63f9c91c46d7bd80ace4edc0615ca342f43ca3b3d0cc36ed52b7d1f457e5b4b26b5eca0d91abe4f1a42a2eec40ec2faff1222f71dc226d6344e947b45155691205c09913fc3c6ab3fe76f4d1b11fa45869e20694b5f0a1074780a07332764212533b797dd24d8df157d4172f91253b77eb2ec90c8222307ed59136463057b7f469116086410b7503b44cef401c47811c1390060da5b3321d34096b67468a7702978d98d4bd721c18a25ed541249638e90281dc8e3565dc33e66d7b832a9bd62c02c5ed0e92935c92472499653d2d842ea6697c733ee80d775884074b3a0c250a4aa021bb6ea93514f9cc5f09feb5719d270cd184e364ca966f1416e10f111bc425f32a993fc5cd75503f99d89d91d7ddc6dee70193057cb946e5fbf8663c53e12cebffe5dbd4a86bfcf5f35f0d8aa43763a60e00356b4f8bc2bca01b02cfddde38f0c4df1e7f98709fdebc5abb5eb9631bdc3dbfcf15517fabcf16931eb7381e83713b081ad1947274d4896ee8953d772e9e71f363b6f1147317bc739ec128e4ec865f8f0ea34cd5ff19fb2c28931d2c85846735358504ae9161535cd7890e8b95c814cfec116b78e6d0eb5097cd4f35888121452e27391d865c15f0b986925d0d0c623bcbb4d8ca66603720253af17853967ea5954eb5ef0dc43de185ec4925026c680464e66d1caff1f4c7c757bd55ec2515ffe7183e3481ff6f626c2228a3fc3d15f63e4bfbec76a2a170206142cbbcf204a1cbfe0ee56eb47dfb79c80894c0a0fbf8a2955d861678fc2f8f9ad7a28052197b5992bced1273658da5b1f42fca48c80883600c24d8515a0c7113deb4c97df918ab64bca16a0c14f2547dc91d5ce4f884978c95fe54899f77ffc20a2c4b27350bc451bef72a46d8e144ad57a8d5f8ac039f58b8a53ea1f3fd5fce612a171bf82ba17c0681cf46ce5c8181a522ed2e986361903903159643046c7be1787dac6ccab09d18a30997541dc6e9efa260f1ff0392bc1890f19d8bb725f4fe7d8bc618f46e0c23be6b9ca67777dd3f5a89b41ccfb11a526a3bed045a2906f86cc5186a1db7a70391261b694b423e5a44d374f9d3720330e083574083f8950b2b35c8bb5b6c0a7fe259f235dc1c069d4581a9f0a7451890561a0829bb290de6aefe4d243ae0b00ca61a1dc4262bb4951242b21d88148eb7b6a9718d6433274f2b3c9bcdbb6d5df67b48ff42692d8cd7f4b7f41728de68ea1ce0f3e4a2843c5b9ffc43f69b8a0445dce44081f5b443a327084b0d00d07cbdbbfd2da5d67bf8d4bb4ee408d17eeee48b61decd06bd3dac9a1adbeb069b49ec96608b9179bb3af4c10f2ade6778b31fd4c22c2961cb949a64e9a8a4879c550f8d8783064cb304511e40e2e562ba83c08ba8ae011a784ed9db03db5527a7aae222c856c8df0a94f9c4def0f94244c5b8e3db9f39dbd337928e24d9d8562f231fea72116c01089163d2c5f4ca17faab20b73c9957fa1a9af20837a804870034d4e64281125b070d8ee0dbf05f95e5fb079e2a57e9af977222e90b664189114dccbca81ee58b7de90a813768a2049052b339a608d3e9966bdb3b584291fbf7694a7d1dea7f72ca604894e6cca5d326ed5e48c15eff5e6a8cc11c40f84ca920d79a5c55d07001909bf6338921c656a39d59d03f62bb5b8870189f0416ec8c317b03ccdcbbeb3e1a9bf2661813f4966b57eb56a2757de5f7745851b5f7bf75e41eb1646e61a41923c5c0e58c2ea478d95b5c39c450744aea0aad3706fce684cb7338ff3dacab60e8d968f0e6fc070693ae3ca16996b34a50afb7e6e377546ae28dc8de7a2ea3a657b4b0003a91a488e347c61971d62f32eaf843d4d4c4f86cc4033c1244c8408def09188dde509c629323f34072f9089a3846680894e8b000a03865438b2ea212b68fdef7f17583f92014eef2c8115a37c9c82dee06213c1407c1433690f68cdc8e91971104039dfe06774b946f43b68b7957a5ca3ee763eafbb7437850eb0a285c413bcf6965232d593d8da47a2a06abc635ae38e596a9dae55b43f341bcc6fe72d79b453ac1c259da37f64cbc1f1508caf280aa6a3f4cd2ff5564cc5a8727f222431454a5ac93398a29fb95b4e057686cd6fcd920992f74e5870749676a36e043bec5fc1b0fce5563affe9addfaa3689e857383ccd1f2924080449d2cfb006e855570b711c1dedd1df2629afaa3806f4ae229a9a8ef1940ddf2c55dac7812d2374c0684b7ba27b2f0849ee4c055d2b8ccc8e41c593378340d7546bb974bc8032f220b37099e3b04c6591c40d2c50a855a491e03c1c9cbb32c400f6104341262d92daaf3e2c04936cf28788fdff8e0a77770a9deb9089a9e32eb5d9e2581aecd98f83881ca8e7d49e603556dc03a9aa19a8f3a4735aaee347b25ea35b36fa57484c0b6d591979b4a3da894fa0c15966d6a5e02e397cccdb9c314b504372b81ef6913877767001263c05dae362b49e5928ef36f554ce245b4111486417634f1e7f4530a760ae6ffd3123f5736ac12c5bf506c5dca03079c0fd0776cdb56c938cdf480fb9b97b1685dfa3be6f712aae107e2dda726bec137b2ebdf56c0fcaecca4350bd7b5c84d57f29c2a2c99ae10c30cece4831d71ae4ee3362983cc816bb6cb9225b9db08503a1be23a26a0425a8628a2e718feae5df91d829f27966f766b623a0a4958a57642aefae259713733670d5b1d027fb8eb2d0d3a0b4acd482076dfa09ffe883f556b2db2262bc0872e1bd713f100dd7a8a8f2d725b46e09c625d513179872bbcc9a41e596a18b2471d977f4ca2bebd06cdaba31b70ef25e098f214fef16f16f725cad4311eb91457fdb70b471eddb65ecafb1e2b03c5ff21356241e3cab2c8ba601f9ef1aec9006b7cd0b81da29be01cb4c1d52e563298e373013886ebb1889bd5616647c6c418ea6bc1f3c0853b65cae48467b35f08318e3a9d034af7224cc3520ab1ece7751ba15407298b21e4f84ef7c23d7993739403d4f116cba2d0ae2d4003a28334c461c734d4555105b986ad0af28aac36c753ab52b91b7e23ae3ab07d3b170fe53a2249efe5b65463a3f237cec72091b04005f95a15ae595191ba39d0ae1d91d8e00b132ae9339884bc57bbb79978a308e1c31c5f213b092f380a7ba58f55869e9c29a5a6e7a7aa4f8d58e5787cc05e5", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x0, {0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x200, 0x0, {0x5, 0x0, 0x7, 0x1000007, 0x3, 0x0, 0xfffffffe, 0x8000000, 0x0, 0xa000, 0x10000, 0x0, 0x0, 0x734}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) 1.529845509s ago: executing program 3 (id=230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="d3b4dc81", 0x4) 1.453906937s ago: executing program 0 (id=231): socket$inet6(0xa, 0x800000000000002, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x240403, 0x0) syz_open_procfs(0x0, &(0x7f0000000240)='mountinfo\x00') socket$inet6(0xa, 0x80002, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsopen(&(0x7f0000000000)='cgroup\x00', 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000001, 0x12, r1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r2, 0x541c, &(0x7f0000000000)) 1.264860289s ago: executing program 3 (id=232): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x80000, 0x0) 1.264017199s ago: executing program 0 (id=233): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448d4, 0x0) 1.14358329s ago: executing program 1 (id=234): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./my_configfs/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', &(0x7f0000001100)='control/class/fs/h\x00') 1.065912187s ago: executing program 3 (id=235): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file0/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000e00)='./file0/usb_gadget/g1/idVendor\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./file0/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./file0/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f0000001300)='file0/usb_gadget/g1/functions/ffs.usb0\x00', &(0x7f0000001400)='./file0/usb_gadget/g1/configs/c.1/ffs.usb0\x00') pipe2(&(0x7f0000002000)={0x0, 0x0}, 0x0) write(r1, &(0x7f0000002100)='functionfs', 0xa) mount(&(0x7f0000000600)=@filename='usb0\x00', &(0x7f0000000500)='./file1\x00', &(0x7f0000000700)='gadgetfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000d00)='dummy_udc.0', 0xb) syz_open_dev$usbfs(0x0, 0x0, 0x2) 1.064921593s ago: executing program 0 (id=236): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(0xffffffffffffffff, &(0x7f0000000340)={@val={0xa, 0x10}, @void, @eth={@broadcast, @local, @val={@val={0x88a8, 0x4, 0x0, 0x5}, {0x8100, 0x4, 0x0, 0x3}}, {@ipv6={0x86dd, @tcp={0x1, 0x6, "45c230", 0x40, 0x6, 0x0, @mcast2, @empty, {[], {{0x4e24, 0x4e22, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0xc2, 0x0, 0x0, 0xd1, {[@mss={0x2, 0x4, 0x7}, @generic={0x3, 0x2}, @timestamp={0x8, 0xa, 0xa, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "2b0b9b0aa045499925d926f4c9c76cae"}, @fastopen={0x22, 0x2}, @window={0x3, 0x3, 0xac}]}}}}}}}}}, 0x82) 916.218179ms ago: executing program 1 (id=237): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000000)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x800, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x100, 0x0, 0x0, 0x0, 0x54}, 0x9c) 753.187463ms ago: executing program 3 (id=238): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000700)='o', 0x1) 405.707168ms ago: executing program 3 (id=239): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000880)='dummy_udc.0\x00', 0xc) 405.473695ms ago: executing program 0 (id=240): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000080)="d3b4dc81", 0x4) 175.144311ms ago: executing program 3 (id=241): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x160862) socket$nl_xfrm(0x10, 0x3, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) open_tree(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x801) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x8901, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000300)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000000)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), &(0x7f00000001c0), 0x0, 0x1}) 48.940742ms ago: executing program 0 (id=242): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f00000002c0)="91f8", 0x2}], 0x1}}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001e00)="03deba91c25995772ba981874cf3617e5a5f26d296be0bcb1ab619b901e1588b23e68431025b444671a918fd8ca862eb4494e52e10561f1dcac08771bcb099d2ac19ac81be56580fbf8a31fc043df05d4f9a1ca963f95a0dad514caf83c851eec544ac66993e0aa8aac7013f19af84202254eadfd12b56f2ebc32396500466e9f16d358dd5354ef69bb8caedf66a220372311a092a4f03a336f27222302c6364b738a58c3b8e99d1a40552dfad46ba272544c0b39ebbca7d1da95fc74f6010956a8bb3165ee8db3867d1f921", 0xcc}], 0x1}}], 0x2, 0x4000900) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 0s ago: executing program 1 (id=243): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_configfs\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/usb_gadget/g1\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./my_configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) chdir(&(0x7f0000000b00)='./my_configfs/usb_gadget/g1/functions/uvc.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='control/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000d00)='streaming/header/h\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000e00)='streaming/uncompressed/u\x00', 0x1ff) symlink(&(0x7f0000001000)='control/header/h\x00', 0x0) symlink(&(0x7f0000001400)='streaming/uncompressed/u\x00', &(0x7f0000001500)='streaming/header/h/u\x00') symlink(0x0, &(0x7f0000001700)='streaming/class/fs/h\x00') symlink(&(0x7f0000001800)='streaming/header/h\x00', &(0x7f0000001900)='streaming/class/hs/h\x00') symlink(&(0x7f0000001a00)='streaming/header/h\x00', &(0x7f0000001b00)='streaming/class/ss/h\x00') fchdir(r0) symlink(&(0x7f0000001c00)='functions/uvc.usb0\x00', &(0x7f0000001d00)='configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000001e00)='UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000001f00)='usbip-vudc.0', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.78' (ED25519) to the list of known hosts. [ 87.154269][ T32] cfg80211: failed to load regulatory.db [ 90.604025][ T5585] cgroup: Unknown subsys name 'net' [ 90.845457][ T5585] cgroup: Unknown subsys name 'cpuset' [ 90.900836][ T5585] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 92.879708][ T5585] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 95.413169][ T5602] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.446989][ T5607] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.473787][ T5607] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.474075][ T5610] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.486163][ T5607] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.498602][ T5607] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.500889][ T5607] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.502782][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.503773][ T5607] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.507009][ T5607] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.508766][ T5607] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.528093][ T5612] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.528332][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.568520][ T5612] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.569386][ T5612] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.571445][ T5612] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.593205][ T5611] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.595261][ T5611] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.611089][ T5611] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.612264][ T5611] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.611267][ T5605] Bluetooth: hci1: command tx timeout [ 97.690070][ T60] Bluetooth: hci3: command tx timeout [ 97.690341][ T5605] Bluetooth: hci0: command tx timeout [ 97.770092][ T5605] Bluetooth: hci2: command tx timeout [ 97.787852][ T5601] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.788851][ T5601] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.789066][ T5601] bridge_slave_0: entered allmulticast mode [ 97.793898][ T5601] bridge_slave_0: entered promiscuous mode [ 97.848740][ T5601] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.848985][ T5601] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.849184][ T5601] bridge_slave_1: entered allmulticast mode [ 97.853572][ T5601] bridge_slave_1: entered promiscuous mode [ 98.021717][ T5601] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.069308][ T5601] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.100155][ T5599] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.100395][ T5599] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.100568][ T5599] bridge_slave_0: entered allmulticast mode [ 98.102759][ T5599] bridge_slave_0: entered promiscuous mode [ 98.169793][ T5599] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.172484][ T5599] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.172791][ T5599] bridge_slave_1: entered allmulticast mode [ 98.176342][ T5599] bridge_slave_1: entered promiscuous mode [ 98.222726][ T5600] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.223164][ T5600] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.223438][ T5600] bridge_slave_0: entered allmulticast mode [ 98.225611][ T5600] bridge_slave_0: entered promiscuous mode [ 98.305624][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.305854][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.306015][ T5598] bridge_slave_0: entered allmulticast mode [ 98.308182][ T5598] bridge_slave_0: entered promiscuous mode [ 98.318803][ T5601] team0: Port device team_slave_0 added [ 98.319206][ T5600] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.319513][ T5600] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.322895][ T5600] bridge_slave_1: entered allmulticast mode [ 98.326950][ T5600] bridge_slave_1: entered promiscuous mode [ 98.355404][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.356782][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.357423][ T5598] bridge_slave_1: entered allmulticast mode [ 98.361494][ T5598] bridge_slave_1: entered promiscuous mode [ 98.369205][ T5601] team0: Port device team_slave_1 added [ 98.407089][ T5599] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.465013][ T5599] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.505190][ T5600] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.528952][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.535154][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.535172][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.535196][ T5601] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.548086][ T5600] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.582024][ T5601] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.582041][ T5601] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.582066][ T5601] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.620959][ T5599] team0: Port device team_slave_0 added [ 98.683998][ T5599] team0: Port device team_slave_1 added [ 98.695183][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.700517][ T5600] team0: Port device team_slave_0 added [ 98.743901][ T5600] team0: Port device team_slave_1 added [ 98.818009][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.818022][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.818037][ T5599] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.852857][ T5598] team0: Port device team_slave_0 added [ 98.882173][ T5599] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.882186][ T5599] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.882201][ T5599] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.893136][ T5601] hsr_slave_0: entered promiscuous mode [ 98.896976][ T5601] hsr_slave_1: entered promiscuous mode [ 98.909041][ T5598] team0: Port device team_slave_1 added [ 98.912407][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.912423][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.912447][ T5600] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.964882][ T5600] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.964900][ T5600] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 98.964927][ T5600] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.042625][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.042642][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.042666][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.097451][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.097463][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 99.097480][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.181321][ T5599] hsr_slave_0: entered promiscuous mode [ 99.182874][ T5599] hsr_slave_1: entered promiscuous mode [ 99.184223][ T5599] debugfs: 'hsr0' already exists in 'hsr' [ 99.184299][ T5599] Cannot create hsr debugfs directory [ 99.247927][ T5600] hsr_slave_0: entered promiscuous mode [ 99.249604][ T5600] hsr_slave_1: entered promiscuous mode [ 99.252185][ T5600] debugfs: 'hsr0' already exists in 'hsr' [ 99.252210][ T5600] Cannot create hsr debugfs directory [ 99.690234][ T5605] Bluetooth: hci1: command tx timeout [ 99.729370][ T5598] hsr_slave_0: entered promiscuous mode [ 99.731874][ T5598] hsr_slave_1: entered promiscuous mode [ 99.733669][ T5598] debugfs: 'hsr0' already exists in 'hsr' [ 99.733693][ T5598] Cannot create hsr debugfs directory [ 99.780377][ T5605] Bluetooth: hci0: command tx timeout [ 99.780418][ T5605] Bluetooth: hci3: command tx timeout [ 99.850071][ T60] Bluetooth: hci2: command tx timeout [ 100.451311][ T5601] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.502477][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.517862][ T5601] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.556274][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.559659][ T5601] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.597621][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.624458][ T5601] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.658631][ T5601] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 100.813812][ T5600] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.856281][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 100.868269][ T5600] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.907176][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 100.909774][ T5600] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.955866][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 100.985209][ T5600] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.016281][ T5600] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.202226][ T5599] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.237069][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.249407][ T5599] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.276746][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.287207][ T5599] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.323859][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.358723][ T5599] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.398777][ T5599] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.564006][ T5598] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.604956][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.608453][ T5598] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.636320][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.648276][ T5598] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.683473][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.703357][ T5598] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.747445][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.781466][ T60] Bluetooth: hci1: command tx timeout [ 101.837004][ T5601] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.850730][ T60] Bluetooth: hci3: command tx timeout [ 101.850767][ T60] Bluetooth: hci0: command tx timeout [ 101.931839][ T5605] Bluetooth: hci2: command tx timeout [ 101.974600][ T5601] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.017782][ T5600] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.044146][ T1472] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.044298][ T1472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.115052][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.115276][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.185687][ T5600] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.236214][ T3394] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.236732][ T3394] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.278636][ T5599] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.305971][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.306149][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.429621][ T5599] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.498206][ T1186] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.498310][ T1186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.534742][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.596335][ T3367] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.596529][ T3367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.781308][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.866002][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.866251][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.963044][ T1472] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.966555][ T1472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.776267][ T5601] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.850006][ T5605] Bluetooth: hci1: command tx timeout [ 103.933069][ T60] Bluetooth: hci3: command tx timeout [ 103.933131][ T5605] Bluetooth: hci0: command tx timeout [ 104.010087][ T5605] Bluetooth: hci2: command tx timeout [ 104.195400][ T5600] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.225841][ T5601] veth0_vlan: entered promiscuous mode [ 104.348555][ T5601] veth1_vlan: entered promiscuous mode [ 104.516583][ T5599] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.683475][ T5600] veth0_vlan: entered promiscuous mode [ 104.694558][ T5601] veth0_macvtap: entered promiscuous mode [ 104.763328][ T5601] veth1_macvtap: entered promiscuous mode [ 104.811574][ T5600] veth1_vlan: entered promiscuous mode [ 104.843271][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.904080][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.948635][ T5601] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.951628][ T5599] veth0_vlan: entered promiscuous mode [ 105.001554][ T1186] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.019424][ T1186] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.038938][ T1186] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.058279][ T5599] veth1_vlan: entered promiscuous mode [ 105.070731][ T1186] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.087574][ T5600] veth0_macvtap: entered promiscuous mode [ 105.184829][ T5600] veth1_macvtap: entered promiscuous mode [ 105.472940][ T5598] veth0_vlan: entered promiscuous mode [ 105.515559][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.594529][ T5600] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.597146][ T5598] veth1_vlan: entered promiscuous mode [ 105.608745][ T5599] veth0_macvtap: entered promiscuous mode [ 105.637564][ T1472] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.637587][ T1472] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.677040][ T3367] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.677772][ T5599] veth1_macvtap: entered promiscuous mode [ 105.704098][ T3367] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.725431][ T3367] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.745537][ T3367] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.879522][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.879544][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.046451][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.213993][ T5599] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.226292][ T5598] veth0_macvtap: entered promiscuous mode [ 106.326487][ T5598] veth1_macvtap: entered promiscuous mode [ 106.391730][ T3394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.435391][ T3394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.438966][ T3394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.489612][ T3394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.552240][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.552263][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.703092][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.896189][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.911853][ T3394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.911872][ T3394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.045257][ T1173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.102803][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.104329][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.107960][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.251932][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.251956][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.960221][ T3367] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.960242][ T3367] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.368295][ T3367] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.368317][ T3367] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.795489][ T1472] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.795512][ T1472] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 109.116253][ T5777] syz.2.11 uses obsolete (PF_INET,SOCK_PACKET) [ 109.765622][ T37] audit: type=1800 audit(1784970164.017:2): pid=5785 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.2" name="idVendor" dev="configfs" ino=7094 res=0 errno=0 [ 109.773404][ T37] audit: type=1800 audit(1784970164.047:3): pid=5785 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.2" name="idProduct" dev="configfs" ino=7095 res=0 errno=0 [ 109.776722][ T5785] file system registered [ 110.417603][ T5794] process 'syz.3.16' launched './file0' with NULL argv: empty string added [ 114.285039][ T37] audit: type=1800 audit(1784970168.557:4): pid=5847 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.34" name="idVendor" dev="configfs" ino=8213 res=0 errno=0 [ 114.286323][ T37] audit: type=1800 audit(1784970168.557:5): pid=5847 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.34" name="idProduct" dev="configfs" ino=8216 res=0 errno=0 [ 114.899782][ T5864] tipc: Can't bind to reserved service type 0 [ 115.344931][ T37] audit: type=1800 audit(1784970169.607:6): pid=5869 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.44" name="idVendor" dev="configfs" ino=8261 res=0 errno=0 [ 115.348900][ T37] audit: type=1800 audit(1784970169.617:7): pid=5869 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.44" name="idProduct" dev="configfs" ino=7964 res=0 errno=0 [ 116.227842][ T5889] UDC core: g1: couldn't find an available UDC or it's busy [ 116.403825][ T37] audit: type=1800 audit(1784970170.657:8): pid=5893 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.56" name="idVendor" dev="configfs" ino=8008 res=0 errno=0 [ 116.458949][ T37] audit: type=1800 audit(1784970170.727:9): pid=5893 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.56" name="idProduct" dev="configfs" ino=8302 res=0 errno=0 [ 118.759682][ T5917] UDC core: g1: couldn't find an available UDC or it's busy [ 118.810835][ T5919] syzkaller1: entered promiscuous mode [ 118.810873][ T5919] syzkaller1: entered allmulticast mode [ 119.119050][ T37] audit: type=1800 audit(1784970173.387:10): pid=5926 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.69" name="idVendor" dev="configfs" ino=8327 res=0 errno=0 [ 119.144533][ T37] audit: type=1800 audit(1784970173.417:11): pid=5926 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.69" name="idProduct" dev="configfs" ino=8328 res=0 errno=0 [ 122.248603][ T5946] UDC core: g1: couldn't find an available UDC or it's busy [ 122.345537][ T37] audit: type=1800 audit(1784970176.617:12): pid=5949 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.78" name="idVendor" dev="configfs" ino=8139 res=0 errno=0 [ 122.355128][ T37] audit: type=1800 audit(1784970176.627:13): pid=5949 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.78" name="idProduct" dev="configfs" ino=8140 res=0 errno=0 [ 122.559906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.579900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.589913][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.599900][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.609896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.619906][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.629899][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.639897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.649897][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 122.659898][ T0] NOHZ tick-stop error: local softirq work is pending, handler #80!!! [ 124.373836][ T5971] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 124.587799][ T37] audit: type=1800 audit(1784970178.857:14): pid=5974 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.88" name="idVendor" dev="configfs" ino=8453 res=0 errno=0 [ 124.615683][ T37] audit: type=1800 audit(1784970178.887:15): pid=5974 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.88" name="idProduct" dev="configfs" ino=8454 res=0 errno=0 [ 126.957449][ T5990] Zero length message leads to an empty skb [ 128.958695][ T37] audit: type=1800 audit(1784970183.227:16): pid=6011 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.97" name="idVendor" dev="configfs" ino=9239 res=0 errno=0 [ 128.961652][ T37] audit: type=1800 audit(1784970183.237:17): pid=6011 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.97" name="idProduct" dev="configfs" ino=9240 res=0 errno=0 [ 129.069648][ T6013] udc dummy_udc.0: failed to start g1: -19 [ 129.077915][ T6013] UDC core: g1: couldn't find an available UDC or it's busy [ 132.339564][ T37] audit: type=1800 audit(1784970186.607:18): pid=6040 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.107" name="idVendor" dev="configfs" ino=8617 res=0 errno=0 [ 132.382655][ T37] audit: type=1800 audit(1784970186.657:19): pid=6040 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.107" name="idProduct" dev="configfs" ino=9346 res=0 errno=0 [ 133.696697][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.696831][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 136.313104][ T37] audit: type=1800 audit(1784970190.577:20): pid=6066 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.119" name="idVendor" dev="configfs" ino=8644 res=0 errno=0 [ 136.314779][ T37] audit: type=1800 audit(1784970190.587:21): pid=6066 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.1.119" name="idProduct" dev="configfs" ino=8645 res=0 errno=0 [ 136.596023][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 137.185272][ T6082] Rounding down aligned max_sectors from 4294967295 to 4294967288 [ 138.598812][ T37] audit: type=1800 audit(1784970192.867:22): pid=6092 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.128" name="idVendor" dev="configfs" ino=8725 res=0 errno=0 [ 139.287386][ T37] audit: type=1800 audit(1784970193.557:23): pid=6092 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.128" name="idProduct" dev="configfs" ino=8726 res=0 errno=0 [ 143.046590][ T37] audit: type=1800 audit(1784970197.317:24): pid=6121 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.138" name="idVendor" dev="configfs" ino=9500 res=0 errno=0 [ 143.047994][ T37] audit: type=1800 audit(1784970197.317:25): pid=6121 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.138" name="idProduct" dev="configfs" ino=9501 res=0 errno=0 [ 143.746809][ T9] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 144.081682][ T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 144.081765][ T9] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 144.106047][ T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 144.106077][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.106095][ T9] usb 2-1: Product: syz [ 144.106208][ T9] usb 2-1: Manufacturer: syz [ 144.106219][ T9] usb 2-1: SerialNumber: syz [ 144.555994][ T37] audit: type=1800 audit(1784970198.827:26): pid=6152 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.147" name="idVendor" dev="configfs" ino=9601 res=0 errno=0 [ 144.587115][ T37] audit: type=1800 audit(1784970198.857:27): pid=6152 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.2.147" name="idProduct" dev="configfs" ino=9602 res=0 errno=0 [ 144.878128][ T9] cdc_acm 2-1:1.0: probe with driver cdc_acm failed with error -22 [ 145.244264][ T9] usb 2-1: USB disconnect, device number 2 [ 145.339290][ T6163] Invalid logical block size (8192) [ 145.603737][ T6175] ======================================================= [ 145.603737][ T6175] WARNING: The mand mount option has been deprecated and [ 145.603737][ T6175] and is ignored by this kernel. Remove the mand [ 145.603737][ T6175] option from the mount to silence this warning. [ 145.603737][ T6175] ======================================================= [ 147.604894][ T37] audit: type=1800 audit(1784970201.877:28): pid=6185 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.157" name="idVendor" dev="configfs" ino=9634 res=0 errno=0 [ 147.746676][ T37] audit: type=1800 audit(1784970202.017:29): pid=6186 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.157" name="idProduct" dev="configfs" ino=9640 res=0 errno=0 [ 150.324281][ T6208] overlayfs: missing 'workdir' [ 153.168561][ T37] audit: type=1800 audit(1784970207.437:30): pid=6224 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.168" name="idVendor" dev="configfs" ino=9692 res=0 errno=0 [ 153.194522][ T37] audit: type=1800 audit(1784970207.467:31): pid=6224 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.0.168" name="idProduct" dev="configfs" ino=9693 res=0 errno=0 [ 153.695451][ T6230] syz.0.170 (6230) used greatest stack depth: 18152 bytes left [ 156.918910][ T6278] syz.3.188 (6278) used greatest stack depth: 16744 bytes left [ 157.345019][ T6287] smpboot: CPU 1 is now offline [ 158.780903][ T6320] netlink: 60 bytes leftover after parsing attributes in process `syz.2.204'. [ 159.019382][ T6330] netlink: 56 bytes leftover after parsing attributes in process `syz.3.208'. [ 159.586595][ T6344] binder: BINDER_SET_CONTEXT_MGR already set [ 159.586607][ T6344] binder: 6343:6344 ioctl 4018620d 2000000002c0 returned -16 [ 159.775015][ T6347] i2c i2c-0: Invalid 7-bit I2C address 0x00 [ 160.615211][ T6367] netlink: 'syz.2.222': attribute type 4 has an invalid length. [ 160.685598][ T6368] netlink: 'syz.2.222': attribute type 4 has an invalid length. [ 161.745168][ T37] audit: type=1800 audit(1784970216.017:32): pid=6398 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.232" name="bcdDevice" dev="configfs" ino=10077 res=0 errno=0 [ 161.770126][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 161.919647][ T37] audit: type=1800 audit(1784970216.187:33): pid=6404 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.235" name="idVendor" dev="configfs" ino=10102 res=0 errno=0 [ 161.963470][ T10] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 161.963496][ T10] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 161.963520][ T10] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 161.963534][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.024395][ T37] audit: type=1800 audit(1784970216.297:34): pid=6404 uid=0 auid=4294967295 ses=4294967295 op=collect_data cause=failed comm="syz.3.235" name="idProduct" dev="configfs" ino=10104 res=0 errno=0 [ 162.192617][ T6390] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 162.595596][ T10] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 163.094154][ T6427] [ 163.094163][ T6427] ====================================================== [ 163.094168][ T6427] WARNING: possible circular locking dependency detected [ 163.094174][ T6427] syzkaller #0 Not tainted [ 163.094180][ T6427] ------------------------------------------------------ [ 163.094184][ T6427] syz.1.243/6427 is trying to acquire lock: [ 163.094192][ T6427] ffffffff8f180ce0 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.094236][ T6427] [ 163.094236][ T6427] but task is already holding lock: [ 163.094240][ T6427] ffff88805da70c48 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 163.094275][ T6427] [ 163.094275][ T6427] which lock already depends on the new lock. [ 163.094275][ T6427] [ 163.094279][ T6427] [ 163.094279][ T6427] the existing dependency chain (in reverse order) is: [ 163.094283][ T6427] [ 163.094283][ T6427] -> #2 (&sb->s_type->i_mutex_key#23){++++}-{4:4}: [ 163.094303][ T6427] down_write+0x3a/0x50 [ 163.094316][ T6427] configfs_depend_item_unlocked+0x153/0x420 [ 163.094330][ T6427] usbg_make_tpg+0x1f6/0x590 [ 163.094347][ T6427] target_fabric_make_tpg+0xa8/0x6d0 [ 163.094358][ T6427] configfs_mkdir+0x4f6/0x9e0 [ 163.094370][ T6427] vfs_mkdir+0x408/0x620 [ 163.094385][ T6427] filename_mkdirat+0x289/0x520 [ 163.094398][ T6427] __se_sys_mkdirat+0x35/0x150 [ 163.094413][ T6427] do_syscall_64+0x17b/0x530 [ 163.094423][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.094435][ T6427] [ 163.094435][ T6427] -> #1 (&opts->dep_lock){+.+.}-{4:4}: [ 163.094450][ T6427] mutex_lock_nested+0x5a/0x1d0 [ 163.094464][ T6427] tcm_set_name+0x2b/0xd0 [ 163.094473][ T6427] function_make+0x1a8/0x360 [ 163.094485][ T6427] configfs_mkdir+0x4f6/0x9e0 [ 163.094497][ T6427] vfs_mkdir+0x408/0x620 [ 163.094511][ T6427] filename_mkdirat+0x289/0x520 [ 163.094525][ T6427] __se_sys_mkdirat+0x35/0x150 [ 163.094539][ T6427] do_syscall_64+0x17b/0x530 [ 163.094549][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.094560][ T6427] [ 163.094560][ T6427] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 163.094577][ T6427] __lock_acquire+0x15ff/0x2e40 [ 163.094588][ T6427] lock_acquire+0x115/0x350 [ 163.094605][ T6427] mutex_lock_nested+0x5a/0x1d0 [ 163.094618][ T6427] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.094633][ T6427] configfs_symlink+0x59a/0x1030 [ 163.094648][ T6427] vfs_symlink+0x18b/0x330 [ 163.094663][ T6427] filename_symlinkat+0x1cd/0x420 [ 163.094678][ T6427] __se_sys_symlink+0x4d/0x2b0 [ 163.094693][ T6427] do_syscall_64+0x17b/0x530 [ 163.094703][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.094714][ T6427] [ 163.094714][ T6427] other info that might help us debug this: [ 163.094714][ T6427] [ 163.094718][ T6427] Chain exists of: [ 163.094718][ T6427] gadget_subsys.su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#23 [ 163.094718][ T6427] [ 163.094740][ T6427] Possible unsafe locking scenario: [ 163.094740][ T6427] [ 163.094744][ T6427] CPU0 CPU1 [ 163.094747][ T6427] ---- ---- [ 163.094750][ T6427] lock(&sb->s_type->i_mutex_key#23); [ 163.094761][ T6427] lock(&opts->dep_lock); [ 163.094770][ T6427] lock(&sb->s_type->i_mutex_key#23); [ 163.094791][ T6427] lock(gadget_subsys.su_mutex); [ 163.094799][ T6427] [ 163.094799][ T6427] *** DEADLOCK *** [ 163.094799][ T6427] [ 163.094802][ T6427] locks held by syz.1.243/6427: 2, last CPU#0: [ 163.094811][ T6427] #0: ffff88801c3d8510 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 163.094846][ T6427] #1: ffff88805da70c48 (&sb->s_type->i_mutex_key#23){++++}-{4:4}, at: configfs_symlink+0x3af/0x1030 [ 163.094881][ T6427] [ 163.094881][ T6427] stack backtrace: [ 163.094890][ T6427] CPU: 0 UID: 0 PID: 6427 Comm: syz.1.243 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.094904][ T6427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.094911][ T6427] Call Trace: [ 163.094916][ T6427] [ 163.094921][ T6427] dump_stack_lvl+0xe8/0x150 [ 163.094938][ T6427] print_circular_bug+0x2e2/0x300 [ 163.094952][ T6427] check_noncircular+0x12f/0x150 [ 163.094967][ T6427] __lock_acquire+0x15ff/0x2e40 [ 163.094980][ T6427] ? __lock_acquire+0x6df/0x2e40 [ 163.094990][ T6427] ? lockdep_hardirqs_on+0x7a/0x110 [ 163.095001][ T6427] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 163.095014][ T6427] lock_acquire+0x115/0x350 [ 163.095031][ T6427] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.095048][ T6427] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.095065][ T6427] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.095081][ T6427] mutex_lock_nested+0x5a/0x1d0 [ 163.095095][ T6427] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.095111][ T6427] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 163.095127][ T6427] ? inode_permission+0x2bc/0x5f0 [ 163.095140][ T6427] configfs_symlink+0x59a/0x1030 [ 163.095157][ T6427] ? lookup_one_qstr_excl+0x1d4/0x360 [ 163.095170][ T6427] ? make_vfsuid+0x49/0xa0 [ 163.095187][ T6427] ? __pfx_configfs_symlink+0x10/0x10 [ 163.095204][ T6427] ? bpf_lsm_inode_symlink+0x9/0x20 [ 163.095220][ T6427] vfs_symlink+0x18b/0x330 [ 163.095236][ T6427] ? security_path_symlink+0xf3/0x310 [ 163.095256][ T6427] filename_symlinkat+0x1cd/0x420 [ 163.095274][ T6427] ? __pfx_filename_symlinkat+0x10/0x10 [ 163.095290][ T6427] ? strncpy_from_user+0x150/0x2c0 [ 163.095305][ T6427] ? do_getname+0x151/0x250 [ 163.095323][ T6427] __se_sys_symlink+0x4d/0x2b0 [ 163.095340][ T6427] do_syscall_64+0x17b/0x530 [ 163.095355][ T6427] ? irqentry_exit+0x10f/0x8f0 [ 163.095366][ T6427] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.095378][ T6427] ? clear_bhb_loop+0x40/0x90 [ 163.095391][ T6427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.095402][ T6427] RIP: 0033:0x7f9ea2b0de99 [ 163.095414][ T6427] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 163.095424][ T6427] RSP: 002b:00007f9ea0d66028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 163.095436][ T6427] RAX: ffffffffffffffda RBX: 00007f9ea2d95fa0 RCX: 00007f9ea2b0de99 [ 163.095445][ T6427] RDX: 0000000000000000 RSI: 0000200000001500 RDI: 0000200000001400 [ 163.095453][ T6427] RBP: 00007f9ea2ba3eaf R08: 0000000000000000 R09: 0000000000000000 [ 163.095461][ T6427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.095468][ T6427] R13: 00007f9ea2d96038 R14: 00007f9ea2d95fa0 R15: 00007ffd09c0a448 [ 163.095480][ T6427] [ 163.877562][ T10] usb 3-1: USB disconnect, device number 2 [ 164.330412][ T5605] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 164.330440][ T5605] Bluetooth: hci1: Injecting HCI hardware error event [ 164.330715][ T60] Bluetooth: hci1: hardware error 0x00 [ 166.410006][ T60] Bluetooth: hci1: Opcode 0x0c03 failed: -110