last executing test programs: 8.61745993s ago: executing program 3 (id=82): syz_usb_connect(0x0, 0x47, 0x0, 0x0) r0 = socket(0x1d, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000000)={0x1d, r2, 0x3, {0x0, 0x1}}, 0x18) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x10}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000004) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) 7.701256254s ago: executing program 3 (id=89): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) r5 = timerfd_create(0x1, 0x0) read(r5, &(0x7f0000002180)=""/262, 0x106) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{}, {0x0, 0x989680}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc43", 0xf) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x13, r6, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 7.657994587s ago: executing program 1 (id=90): socket$nl_netfilter(0x10, 0x3, 0xc) pipe2(&(0x7f0000000180), 0x80) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) r1 = socket(0x2, 0x80805, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x84, @dev={0xac, 0x14, 0x14, 0x10}, 0x4e20, 0x3, 'lblc\x00', 0x1a, 0x40c, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000200)={{0x84, @empty, 0x4e21, 0x3, 'lc\x00', 0xc, 0x9, 0x63}, {@private=0xa010102, 0x4623, 0x4, 0x81, 0x12d5f, 0x3}}, 0x44) sendmmsg$sock(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000940)=[@mark={{0x10, 0x1, 0x24, 0x3}}], 0x10}, 0x1000000}], 0x1, 0x20000000) 7.387338215s ago: executing program 3 (id=92): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, &(0x7f0000000080)={0xb8, "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"}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) writev(r1, &(0x7f0000000180)=[{&(0x7f0000000a00)='A', 0x1}], 0x1) r2 = getpgid(0x0) sched_setattr(r2, &(0x7f00000002c0)={0x38, 0x3, 0x10000000, 0x9, 0x8001, 0x7fff, 0x6, 0xffffffffffffff88}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r3, &(0x7f0000000380)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) listen(r3, 0x5) 6.774089101s ago: executing program 1 (id=95): r0 = memfd_create(&(0x7f00000000c0)='-B\xd5N4\xa6Ey\xdb\xd1\xa7\xb1S\xf1:)\x00\x8a\xd7Uw\x00\xbc\xa92\xb3\xbb\x8d\xac\xacva}knh#\xcf)\x0f\xc8\xc0:\x9cc\x10d\xee\xa9\x8b\x066\xb8G\xd1c\xe1$\xff\x97\x8f~\xb90a\xa9\xb2\x04K\x98\x93=\xabQ\xf7\x19\xea\xef\xe3\xe1@\x84\x13\xefZb:\x8f\t\x01B\xec\xde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@Ip]D\xd6\r\xac\v#co\xd5\xb9\xc806\xa8\x99\xffs7\xa1b1\xb1;i)j\x0e\x1e\xedI\xa2\x80\x89\x1d\xd9p!\xc86s\xe07(\xee\xf9<\"\xf0\xc8\xae\x96J\xe2]\x01\x86\xb7.<\xf5N\xd3\x94W1\xff\x18z>\xa7q,\xf7\x96\xb8{\x8e\xbf4\xe0\x95\x1ce\xe4\x85\xcdi\xed\xd3>\xeb\xa5\xaf\x87\x90@\xd1\xbd`^\xfa\xb6\x9cj\x13/\xc5\\W\x04\br\x17X\xe3\xfb\xc8\xd4\xaeX\xc9s\xd18\xd9L\xbf\xa0\xa6\xdf2\a\x99i\xb1/\x19@\x1cq\xeb?\xc1z:\x913\xfa8\xac\xd3q\xe4vPGU', 0x1) r1 = dup(r0) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 6.300307089s ago: executing program 1 (id=98): mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x158) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000002100), 0x280449c, &(0x7f00000005c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000093c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000240)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xffffffff97422012, 0x81, 0x6, 0x0, 0x1, 0x16, 0x0, 0x1, 0x3}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000006380)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba5234400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000b60dd7710000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e8ffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff00000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f4000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000048636662867d08f50000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff00", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x0, 0x80000000000000, {0x0, 0x1d}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x40) ioctl$sock_TIOCINQ(r2, 0x541b, 0x0) 4.145799644s ago: executing program 1 (id=106): socket$inet6_sctp(0xa, 0x801, 0x84) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000680)={0x14, 0x3, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}}, 0x14}}, 0x40000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x2, 0x3, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x800}, @NFQA_CFG_CMD={0x8, 0x1, {0x4, 0x0, 0xa}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0xa}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x1a}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x11}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x28}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000040}, 0x8014) 4.127471989s ago: executing program 3 (id=108): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000001340)) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg(0xffffffffffffffff, 0x0, 0x20000010) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f0000000180)=0x6f) write$dsp(r0, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) syz_usb_connect$hid(0x1, 0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8800) setsockopt$MRT_FLUSH(r1, 0x0, 0xd4, 0x0, 0x0) 3.695427372s ago: executing program 1 (id=111): mmap(&(0x7f00008dd000/0x3000)=nil, 0x3000, 0xf, 0x400803f, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) mmap$panthor(&(0x7f000026b000/0x1000)=nil, 0x1000, 0x300000c, 0x50, 0xffffffffffffffff, 0x2) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0400f9f407000904018002200000000000000000000800010000000000", 0x24) sched_setattr(0x0, &(0x7f0000000040)={0x38, 0x5, 0x9, 0x6, 0x0, 0xb49, 0x9, 0x8, 0x2, 0x3}, 0x0) r0 = userfaultfd(0x1) writev(0xffffffffffffffff, 0x0, 0x0) r1 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x20080, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000480), 0xa6f81, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000780)={&(0x7f0000000640)=ANY=[@ANYBLOB="00010000", @ANYRES16=0x0, @ANYBLOB="000126bd7000fddbdf25060000002800018008000100", @ANYRES32=0x0, @ANYBLOB="0800030002000000140002007465616d5f736c6176655f3000000000280001801400020076657468305f766972745f7769666900080003000300000008000300040000000c00018008000100", @ANYRES32=0x0, @ANYBLOB="14000180080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="7c00018008000100", @ANYRES32=0x0, @ANYBLOB="1400020073697430000000000000000000000000080003000200000014000200697076040000000000000000000000001400020076657468305f766c616e00000000000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468305f746f5f626f6e6400000008000300030000000800030003000000"], 0x100}, 0x1, 0x0, 0x0, 0x24008004}, 0x20) ioctl$UFFDIO_WRITEPROTECT(r0, 0xc018aa06, &(0x7f0000000140)={{&(0x7f00008ef000/0x3000)=nil, 0x3000}, 0x2}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) recvmmsg(r2, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000, 0xfff5}}], 0xf00, 0x0, 0x0) shutdown(r2, 0x0) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x50}, 0x24000085) r3 = dup2(r1, r1) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000001c0)=0x2) read$FUSE(r3, &(0x7f00000063c0)={0x2020}, 0xfffffffffffffe46) socket(0x2, 0x80805, 0x0) 2.183353105s ago: executing program 2 (id=114): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x801, 0x0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000280)={{0x4, 0xfffd, 0x8, 0xe1a4}, 'syz0\x00', 0x10}) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x15) ioctl$UI_DEV_SETUP(r0, 0x5501, 0x0) 2.080445088s ago: executing program 1 (id=115): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x80000e, 0x2072, 0xffffffffffffffff, 0xd0fba000) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='pagemap\x00') preadv(r1, &(0x7f0000000640)=[{&(0x7f0000000b00)=""/152, 0x98}, {&(0x7f0000000500)=""/189, 0x7fffef68}], 0x2, 0x300100, 0x0) 1.786622026s ago: executing program 2 (id=118): socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_open_dev$vim2m(0x0, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000001ec0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000cc0)=[{0x348, 0x10c, 0xa, "a7fd1809894b3ebab3b7ff560a926bc78e435cbf6f9cf829c14f9ed169965a8dfcd140372a33a974ddb870157d697319c2cb98b0edd7fde95159b6e332d2e4e5187f13e8cfda9404978a7610b9160f84a26898842568915b6cb86d33cf178d921f3ba0819855d54ed21b1b030ba212abfa49b282bc1b075b3083497fa0b47b5250cdf1c18ce82202feaafdd1edf369aeb03468a567b535ddd76d7b99fd98b3257f0d5b9d716602dd1b22fc5830d6ec9a3622de820153230b3896313c8a11186f5422e663808ae5220bb4b980a9f6527316f60ae893c27741808e7f5f089341417ca594bfd5e8c3888b5c70a17eb5cb63b1bda070cd421c2d57cd6ed3749a5eb70b1d111aa1df59ea5eeee569f47f8fd0b8c2f3f39716051b82c6312887c90bf71abe578909f671d5d3b930f1e06592cd4a02c04e3ea71f96fcdd82a6bfcd1def026ede3ba39ad49c4506b3f87218e4c02e1a2d3798da37025c780dc66e2c90f5a6b4cdd916c422ca622e3ebaaf202162eb650deebec7f6fdee5cf4e13250238d0293488ea70c59739766939aaa9b14992bfbc255ae1afdf190d7727d5e3ae14ca1047a7c5b9ea623f3e76cf3c9dc690c5a08bed0a4c8b929963f71ede5ecb32f2cd5940baff4c3f295fdd3bdb87bf929af068f5c3328a2fbd0e89140601b7ae03d81157acddeb0395bdf22b58f3f19a1565ce4b1e697b45d4f698230de6447e1f91981dc250c957f5f8ef28ad6e36e4eb91cb413bcb267b7fc6f268eb9eaa9dac8d47f4175db58fc774144bc224b85bfc2208563e2b55bd5c40b3223d6ec2b79826f2542c78d15400fa646abeb141441daf243279ca2aed7c2406b8ce49d6a8bbe4723b682d695ebba5bce1758d9f41e3903733d760eede31901ffa7500aad1d332b9d3822683cd3b55f71724ba66ae5599a433565a4f5abcd4d4ac56d8f812c183ee49130421e947b07e72c946dbf83b53988a0e5ecf913dc611b3c0b576e8848fb89572579178b44b2427d90f898ae79df585127b64ff376df7d747233cd49f7a1c71b45552aa0a5cdba7e34c9c92b14a6267c2f03bc88a7d7781f4e436598aeb1f95518e975cf804bc2b306cbfe7e04d89c83304918cd1690ca7d9bee52c271a080349da2d4726bb5f0cf840c5ebfd1d2bc1303ed1cd98af7a1"}], 0x348}, 0x10) socket$kcm(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) landlock_create_ruleset(&(0x7f0000000000)={0x40, 0x1, 0x3}, 0x18, 0x1) r1 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0x40000095, 0x0, 0xfffffffffffffffd}]}) ioctl$KVM_IRQFD(0xffffffffffffffff, 0x4020ae76, &(0x7f00000000c0)={0xffffffffffffffff, 0xc8, 0x3}) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000000c0)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x67c, 0x6, 0xf3b8, 0xfffffffffffffffe, 0x1000, 0x400, 0x4002004c4, 0x8, 0x0, 0x2000000097, 0x10, 0x0, 0x5, 0x4, 0x0, 0x8], 0xeeee8000, 0x402}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.469726648s ago: executing program 3 (id=121): ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) landlock_create_ruleset(0xfffffffffffffffe, 0x5c, 0x0) r0 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) timer_create(0x0, &(0x7f0000000280)={0x0, 0x21}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x26, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r2 = socket$kcm(0x23, 0x5, 0x0) listen(r2, 0x800) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000f00)=[{&(0x7f0000000200)="5c00000014006b05c84e21000ab16d6e230675f811000000440002005817d30461bc24eeb556a7ef595105ea1698fa51f60a64c9f408000000e786a6d0bdbdc3d44bd70011b6c0504bb9189d9193e9bd00"/92, 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x240040c4) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r4, &(0x7f0000000040)={0x23, 0x0, 0x58}, 0x10) sendto$phonet(r4, 0x0, 0x0, 0x80, 0x0, 0x0) accept4(r2, 0x0, 0x0, 0x80000) r5 = timerfd_create(0x1, 0x0) read(r5, &(0x7f0000002180)=""/262, 0x106) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) openat(0xffffffffffffff9c, 0x0, 0x20842, 0x63) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$poke(0x13, r6, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) 1.241921305s ago: executing program 0 (id=122): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000300)={0x0, 0x18, 0xfa00, {0x2, &(0x7f00000002c0), 0x106, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000240)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x0, @loopback, 0x9}, {0xa, 0x4e23, 0x6, @mcast1, 0x7fffffff}, r1, 0x80d}}, 0x48) close(0x3) 1.143526013s ago: executing program 2 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x5000, 0x2000, &(0x7f0000ffd000/0x2000)=nil, 0x4000000000, r2}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x401, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_GUEST_MEMFD(r4, 0xc040aed4, &(0x7f00000001c0)={0x200001fe0000, 0x3}) r6 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000000000/0x1000)=nil, r6, 0x3000001, 0x11, r5, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000240)={0x1ff, 0x5, 0x2, 0x1000, &(0x7f0000ffd000/0x1000)=nil, 0x9, r5}) 1.02617141s ago: executing program 0 (id=124): r0 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0x6ba]}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(0x3) openat$cgroup_procs(r1, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x100000b, 0x204031, 0xffffffffffffffff, 0xec776000) r2 = fsopen(&(0x7f0000000100)='ext4\x00', 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0xa, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 733.761005ms ago: executing program 0 (id=125): openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x101000, 0x0) epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f00000000c0), 0x10) sendmsg$can_bcm(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="050000009f60", @ANYRES64=0x2710], 0x48}, 0x1, 0x0, 0x0, 0x20000800}, 0x44801) 623.80062ms ago: executing program 2 (id=126): r0 = openat$uhid(0xffffff9c, &(0x7f0000000100), 0x2, 0x0) write$UHID_INPUT(r0, &(0x7f00000003c0)={0x8, {"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", 0x1000}}, 0x1006) 602.342723ms ago: executing program 0 (id=127): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = eventfd2(0xe5c, 0x80000) r3 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0x7, 0x2, r2}) r4 = eventfd(0x0) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000080)={r3, 0xffff, 0x2, r4}) 465.760343ms ago: executing program 3 (id=128): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000dc0)={0x0, 0x2, 0x0, 0x0, 0xfe, "55c10c3c0004000000000002000000000900"}) r1 = syz_open_pts(r0, 0x80) r2 = dup3(r1, r0, 0x80000) ioctl$sock_inet_udp_SIOCINQ(r2, 0x541b, &(0x7f0000000000)) 369.659991ms ago: executing program 0 (id=129): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = openat$ttynull(0xffffff9c, 0x0, 0x8000, 0x0) ioctl$TCXONC(r2, 0x540a, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x2002, 0x0) ioctl$IOC_PR_RELEASE(r3, 0x401070ca, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="034886dd010000000000140000006000000000"], 0xfdef) 354.45041ms ago: executing program 2 (id=130): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="18000000260001031dbd7002fadbdf25010000000400ae"], 0x18}}, 0x0) recvmmsg(r0, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}, 0x3fffff}, {{0x0, 0x0, 0x0}, 0x197e0000}, {{0x0, 0x0, 0x0}, 0x803}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000011c0)=""/4089, 0xff9}, {&(0x7f0000000180)=""/218, 0xda}], 0x2}, 0x9}], 0x4, 0x0, 0x0) 65.838751ms ago: executing program 0 (id=131): mkdirat(0xffffffffffffffff, &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00', 0x1ed) mount(0x0, &(0x7f0000000060)='./sys\x00', &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r0) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000340)="006f00000000000000009faaf2406e945e108ae375fde523a122a43e88bdc93e0b6cef2f956615a668499e1357648c8984b9eb6f1fbad4a6ff4e4618f567bbd1c47783854bdbfaaabbc0165671c63000c63274c1c16bdd7852139862cbfed97ba4adf66db75f1d3f961cd20c6a8da8452b99f61c2c2e83ed0c65c1d41280cb5adda554d81cfc5d5efd990a2b10b18d", 0x8f) close(r1) write(0xffffffffffffffff, &(0x7f0000000b00)='0x0102\x00', 0x6) close(0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x12a) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ed) mkdirat(r0, 0x0, 0x1ed) symlinkat(&(0x7f0000001500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000001600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f00000000c0)='./file0\x00', 0xffffffffffffff9c, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x90) write(r2, 0x0, 0x0) close(r2) r3 = syz_open_dev$video(0x0, 0xf, 0x2) ioctl$VIDIOC_S_FMT(r3, 0xc0d05605, &(0x7f0000000c40)={0x2, @vbi={0x8, 0xd3, 0xd, 0x30314752, [0x10, 0x40], [0x5], 0x1}}) 0s ago: executing program 2 (id=132): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004200)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x20, 0x0, 0x0, {0x0, 0x3022d6e144aa3cee}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. [ 72.956650][ T5606] cgroup: Unknown subsys name 'net' [ 73.077221][ T5606] cgroup: Unknown subsys name 'cpuset' [ 73.079965][ T5606] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.462243][ T5606] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.586960][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.590286][ T5617] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.592165][ T5617] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.593058][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.593622][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.667229][ T5617] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.670547][ T5617] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.671037][ T5617] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.671822][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.673101][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.809230][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.810861][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.812237][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.812463][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.812846][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.816100][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.817139][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.829334][ T4935] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.832052][ T4935] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.832872][ T4935] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 78.262138][ T5616] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.262303][ T5616] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.262426][ T5616] bridge_slave_0: entered allmulticast mode [ 78.264961][ T5616] bridge_slave_0: entered promiscuous mode [ 78.316093][ T5616] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.316193][ T5616] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.316276][ T5616] bridge_slave_1: entered allmulticast mode [ 78.317245][ T5616] bridge_slave_1: entered promiscuous mode [ 78.383374][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.383471][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.383584][ T5620] bridge_slave_0: entered allmulticast mode [ 78.386897][ T5620] bridge_slave_0: entered promiscuous mode [ 78.389165][ T5625] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.389269][ T5625] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.389630][ T5625] bridge_slave_0: entered allmulticast mode [ 78.392150][ T5625] bridge_slave_0: entered promiscuous mode [ 78.394889][ T5628] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.394986][ T5628] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.395159][ T5628] bridge_slave_0: entered allmulticast mode [ 78.397958][ T5628] bridge_slave_0: entered promiscuous mode [ 78.406071][ T5616] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.409090][ T5616] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.460136][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.460235][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.460465][ T5620] bridge_slave_1: entered allmulticast mode [ 78.462223][ T5620] bridge_slave_1: entered promiscuous mode [ 78.466613][ T5625] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.466930][ T5625] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.467060][ T5625] bridge_slave_1: entered allmulticast mode [ 78.468935][ T5625] bridge_slave_1: entered promiscuous mode [ 78.471213][ T5628] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.471308][ T5628] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.471684][ T5628] bridge_slave_1: entered allmulticast mode [ 78.473539][ T5628] bridge_slave_1: entered promiscuous mode [ 78.553510][ T5616] team0: Port device team_slave_0 added [ 78.559704][ T5628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.590983][ T5616] team0: Port device team_slave_1 added [ 78.593730][ T5628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.597487][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.601981][ T5625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.633287][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.637016][ T5625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.661471][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.661494][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.661516][ T5616] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.706216][ T5628] team0: Port device team_slave_0 added [ 78.709073][ T5616] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.709088][ T5616] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.709113][ T5616] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.721246][ T5617] Bluetooth: hci0: command tx timeout [ 78.721246][ T4935] Bluetooth: hci1: command tx timeout [ 78.767569][ T5628] team0: Port device team_slave_1 added [ 78.787890][ T5625] team0: Port device team_slave_0 added [ 78.789899][ T5620] team0: Port device team_slave_0 added [ 78.812357][ T5625] team0: Port device team_slave_1 added [ 78.814739][ T5620] team0: Port device team_slave_1 added [ 78.830365][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.830380][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.830403][ T5628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.875749][ T5628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.875768][ T5628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.875793][ T5628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.877700][ T5617] Bluetooth: hci2: command tx timeout [ 78.877721][ T4935] Bluetooth: hci3: command tx timeout [ 78.892264][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.892281][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.892304][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.986516][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.986528][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.986545][ T5625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.987444][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.987457][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.987481][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.988581][ T5625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.988593][ T5625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 78.988616][ T5625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.997551][ T5616] hsr_slave_0: entered promiscuous mode [ 78.998701][ T5616] hsr_slave_1: entered promiscuous mode [ 79.079893][ T5628] hsr_slave_0: entered promiscuous mode [ 79.080907][ T5628] hsr_slave_1: entered promiscuous mode [ 79.081749][ T5628] debugfs: 'hsr0' already exists in 'hsr' [ 79.081856][ T5628] Cannot create hsr debugfs directory [ 79.176373][ T5620] hsr_slave_0: entered promiscuous mode [ 79.176967][ T5620] hsr_slave_1: entered promiscuous mode [ 79.177414][ T5620] debugfs: 'hsr0' already exists in 'hsr' [ 79.177432][ T5620] Cannot create hsr debugfs directory [ 79.229980][ T5625] hsr_slave_0: entered promiscuous mode [ 79.230569][ T5625] hsr_slave_1: entered promiscuous mode [ 79.230960][ T5625] debugfs: 'hsr0' already exists in 'hsr' [ 79.230978][ T5625] Cannot create hsr debugfs directory [ 79.634398][ T5616] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.651673][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.653209][ T5616] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.664243][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.666927][ T5616] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.673770][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.690726][ T5616] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.695446][ T5616] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.761802][ T5625] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 79.770513][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.773169][ T5625] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 79.783698][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.799027][ T5625] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 79.802245][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.808177][ T5625] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 79.817203][ T5625] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 79.907584][ T5628] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.910870][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 79.911670][ T5628] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.913827][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 79.948099][ T5628] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.951113][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 79.968897][ T5628] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.971977][ T5628] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.040421][ T5616] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.071381][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.077367][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 80.078781][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.086729][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 80.100263][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.111596][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 80.119028][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.126741][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 80.158103][ T5616] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.188255][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.188579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.213703][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.213761][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.259826][ T5625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.332488][ T5625] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.376677][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.376747][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.409583][ T1173] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.409644][ T1173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.431859][ T5628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.487288][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.536530][ T5628] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.547559][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.547677][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.599501][ T5620] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.628906][ T198] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.629016][ T198] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.652037][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.652132][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.682306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.682412][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.807134][ T4935] Bluetooth: hci1: command tx timeout [ 80.807168][ T4935] Bluetooth: hci0: command tx timeout [ 80.955463][ T5617] Bluetooth: hci2: command tx timeout [ 80.955497][ T5617] Bluetooth: hci3: command tx timeout [ 81.214635][ T5616] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.337425][ T5616] veth0_vlan: entered promiscuous mode [ 81.355592][ T5616] veth1_vlan: entered promiscuous mode [ 81.417418][ T5616] veth0_macvtap: entered promiscuous mode [ 81.429458][ T5616] veth1_macvtap: entered promiscuous mode [ 81.458799][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.468845][ T5616] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.574635][ T1173] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574683][ T1173] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574715][ T1173] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.574746][ T1173] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.662328][ T5625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.820584][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.820610][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.878868][ T5628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.941932][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.953208][ T198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.953229][ T198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.980085][ T5625] veth0_vlan: entered promiscuous mode [ 82.056364][ T5625] veth1_vlan: entered promiscuous mode [ 82.150832][ T5616] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.190039][ T5628] veth0_vlan: entered promiscuous mode [ 82.192297][ T5620] veth0_vlan: entered promiscuous mode [ 82.243309][ T5628] veth1_vlan: entered promiscuous mode [ 82.265880][ T5620] veth1_vlan: entered promiscuous mode [ 82.309518][ T5625] veth0_macvtap: entered promiscuous mode [ 82.337630][ T5625] veth1_macvtap: entered promiscuous mode [ 82.403440][ T5628] veth0_macvtap: entered promiscuous mode [ 82.409845][ T5628] veth1_macvtap: entered promiscuous mode [ 82.421512][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.448760][ T5625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.449845][ T5620] veth0_macvtap: entered promiscuous mode [ 82.468451][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.482137][ T5620] veth1_macvtap: entered promiscuous mode [ 82.503342][ T5628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.563940][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.600714][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.618341][ T198] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.642298][ T1121] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.778572][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.778595][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.826200][ T198] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826250][ T198] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826287][ T198] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826322][ T198] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.826989][ T198] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.881017][ T4935] Bluetooth: hci0: command tx timeout [ 82.881061][ T4935] Bluetooth: hci1: command tx timeout [ 82.953042][ T1168] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.953066][ T1168] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.037482][ T5617] Bluetooth: hci3: command tx timeout [ 83.037515][ T5617] Bluetooth: hci2: command tx timeout [ 83.049215][ T1121] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049446][ T1121] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049484][ T1121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.049496][ T1121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.049799][ T1121] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.052711][ T1121] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.053913][ T198] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.177229][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.177250][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.222900][ T5780] ./bus: Can't lookup blockdev [ 83.242128][ T5780] ./bus: Can't lookup blockdev [ 83.242488][ T5780] ./bus: Can't lookup blockdev [ 83.242826][ T5780] ./bus: Can't lookup blockdev [ 83.243186][ T5780] ./bus: Can't lookup blockdev [ 83.243543][ T5780] ./bus: Can't lookup blockdev [ 83.257480][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.257500][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.301129][ T5780] ./bus: Can't lookup blockdev [ 83.339498][ T5784] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 83.360861][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.360883][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.378497][ T5777] workqueue: work func _RNvXs8_NtCsbuTvttuFvbr_6kernel9workqueueINtNtNtB7_4sync3arc3ArcNtNtCswPamI0U300_11rust_binder7process7ProcessEINtB5_15WorkItemPointerKy0_E3runB13_ enqueued on deprecated workqueue. Use system_{percpu|dfl}_wq instead. [ 83.824228][ T5796] ======================================================= [ 83.824228][ T5796] WARNING: The mand mount option has been deprecated and [ 83.824228][ T5796] and is ignored by this kernel. Remove the mand [ 83.824228][ T5796] option from the mount to silence this warning. [ 83.824228][ T5796] ======================================================= [ 83.874688][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 84.026348][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 84.046835][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 84.046935][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.085057][ T10] usb 2-1: config 0 descriptor?? [ 84.135850][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 84.137949][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 84.139836][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 84.141325][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 84.184180][ T5804] 9pnet_fd: p9_fd_create_tcp (5804): problem connecting socket to 127.0.0.1 [ 84.448332][ T5813] random: crng reseeded on system resumption [ 84.530092][ T5786] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 84.530640][ T5786] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 84.595769][ T5813] syzkaller1: entered promiscuous mode [ 84.595792][ T5813] syzkaller1: entered allmulticast mode [ 84.771130][ T5786] Bluetooth: MGMT ver 1.23 [ 84.955131][ T4935] Bluetooth: hci1: command tx timeout [ 84.955167][ T4935] Bluetooth: hci0: command tx timeout [ 85.113959][ T5617] Bluetooth: hci2: command tx timeout [ 85.113991][ T5617] Bluetooth: hci3: command tx timeout [ 85.423933][ T5697] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.584384][ T5697] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 85.585461][ T5697] usb 1-1: Dual-Role OTG device on HNP port [ 85.585750][ T5697] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.687318][ T5697] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 86.331848][ T5847] FAULT_INJECTION: forcing a failure. [ 86.331848][ T5847] name fail_futex, interval 1, probability 0, space 0, times 1 [ 86.331905][ T5847] CPU: 1 UID: 0 PID: 5847 Comm: syz.0.25 Not tainted syzkaller #0 PREEMPT(full) [ 86.331930][ T5847] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 86.331950][ T5847] Call Trace: [ 86.331962][ T5847] [ 86.331970][ T5847] dump_stack_lvl+0xe8/0x150 [ 86.332005][ T5847] should_fail_ex+0x3eb/0x540 [ 86.332033][ T5847] get_futex_key+0x1b4/0x1580 [ 86.332078][ T5847] ? __pfx_get_futex_key+0x10/0x10 [ 86.332108][ T5847] ? stack_depot_save_flags+0x33/0x7f0 [ 86.332132][ T5847] ? __lock_acquire+0x747/0x2de0 [ 86.332170][ T5847] futex_wake+0x119/0x5f0 [ 86.332200][ T5847] ? __pfx_futex_wake+0x10/0x10 [ 86.332239][ T5847] do_futex+0x458/0x4e0 [ 86.332266][ T5847] ? __pfx_do_futex+0x10/0x10 [ 86.332294][ T5847] __se_sys_futex+0x3a8/0x450 [ 86.332319][ T5847] ? security_setselfattr+0x809/0x830 [ 86.332344][ T5847] ? __pfx___se_sys_futex+0x10/0x10 [ 86.332374][ T5847] ? __x64_sys_futex+0x21/0xf0 [ 86.332399][ T5847] do_syscall_64+0x166/0x520 [ 86.332419][ T5847] ? trace_irq_disable+0x3b/0x140 [ 86.332447][ T5847] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.332467][ T5847] ? clear_bhb_loop+0x70/0xc0 [ 86.332492][ T5847] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.332512][ T5847] RIP: 0033:0x7fa15a59e159 [ 86.332539][ T5847] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.332555][ T5847] RSP: 002b:00007fa15b49f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 86.332582][ T5847] RAX: ffffffffffffffda RBX: 00007fa15a825fa8 RCX: 00007fa15a59e159 [ 86.332600][ T5847] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa15a825fac [ 86.332613][ T5847] RBP: 00007fa15a825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 86.332627][ T5847] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 86.332639][ T5847] R13: 00007fa15a826038 R14: 00007ffe0e7305d0 R15: 00007ffe0e7306b8 [ 86.332669][ T5847] [ 86.641850][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 86.641959][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 86.665852][ T10] usb 2-1: USB disconnect, device number 2 [ 86.886538][ T9] cfg80211: failed to load regulatory.db [ 87.216404][ T5861] fuse: Bad value for 'fd' [ 87.674328][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 87.675012][ T5836] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 88.457909][ T5836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.461195][ T5836] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 88.478384][ T5836] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 88.478465][ T5836] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.480906][ T5836] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 88.482977][ T5836] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 88.483061][ T5836] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.509627][ T5836] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 88.526402][ T5836] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 88.526481][ T5836] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.527991][ T5836] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 88.810952][ T5869] syzkaller1: entered promiscuous mode [ 88.810977][ T5869] syzkaller1: entered allmulticast mode [ 89.754032][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 90.020520][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 90.181984][ T25] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 90.190195][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.198500][ T25] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 90.198526][ T25] usb 3-1: Product: syz [ 90.198539][ T25] usb 3-1: Manufacturer: syz [ 90.308375][ T25] uvcvideo 3-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 90.475467][ T25] uvcvideo 3-1:1.0: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 90.497893][ T25] uvcvideo 3-1:1.1: Failed to query (GET_CUR) UVC probe control : -71 (exp. 26). [ 90.497952][ T25] uvcvideo 3-1:1.1: Failed to initialize the device (-71). [ 90.512971][ T25] uvcvideo 3-1:1.0: probe with driver uvcvideo failed with error -71 [ 90.554130][ T5617] Bluetooth: hci2: command 0x0c1a tx timeout [ 90.554155][ T52] Bluetooth: hci1: command 0x0c1a tx timeout [ 90.554226][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 90.577591][ T25] usb 3-1: USB disconnect, device number 2 [ 90.864822][ T5697] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 91.020577][ T5697] usb 4-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 91.021615][ T5697] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 91.023167][ T5697] usb 4-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 91.023191][ T5697] usb 4-1: Product: syz [ 91.023205][ T5697] usb 4-1: Manufacturer: syz [ 91.071791][ T5697] uvcvideo 4-1:1.0: Found UVC 1.00 device syz (225a:e1d4) [ 91.071856][ T5697] uvcvideo 4-1:1.0: No streaming interface found for terminal 32770. [ 91.251002][ T5697] usb 4-1: USB disconnect, device number 2 [ 91.725651][ T5931] Zero length message leads to an empty skb [ 91.833950][ T4935] Bluetooth: hci0: command 0x0c1a tx timeout [ 92.038738][ T4935] Bluetooth: hci0: ACL packet for unknown connection handle 201 [ 92.109816][ T5938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.60'. [ 92.213570][ T5940] faux_driver vgem: [drm] Unknown color mode 7; guessing buffer size. [ 92.513965][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 92.643074][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 92.643113][ T52] Bluetooth: hci2: command 0x0c1a tx timeout [ 92.643240][ T4935] Bluetooth: hci1: command 0x0c1a tx timeout [ 92.694182][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 92.701646][ T10] usb 2-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 92.702196][ T10] usb 2-1: config 0 has no interfaces? [ 92.713468][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.713496][ T10] usb 2-1: Product: syz [ 92.713510][ T10] usb 2-1: Manufacturer: syz [ 92.713523][ T10] usb 2-1: SerialNumber: syz [ 92.750448][ T10] usb 2-1: config 0 descriptor?? [ 92.787728][ T5951] syz.2.66 uses obsolete (PF_INET,SOCK_PACKET) [ 92.976114][ T10] usb 2-1: USB disconnect, device number 3 [ 92.997047][ T5957] capability: warning: `syz.2.67' uses deprecated v2 capabilities in a way that may be insecure [ 93.140679][ T5959] syzkaller0: entered promiscuous mode [ 93.140709][ T5959] syzkaller0: entered allmulticast mode [ 93.902676][ T5970] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 93.902695][ T5970] rust_binder: Read failure Err(EFAULT) in pid:34 [ 94.156652][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 94.331357][ T25] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 94.333422][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.333472][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 94.333493][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 94.333517][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.336625][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.336650][ T25] usb 3-1: Product: syz [ 94.336663][ T25] usb 3-1: Manufacturer: syz [ 94.336676][ T25] usb 3-1: SerialNumber: syz [ 94.570657][ T25] usb 3-1: usb_control_msg returned -71 [ 94.570712][ T25] usbtmc 3-1:1.0: can't read capabilities [ 94.640074][ T25] usb 3-1: USB disconnect, device number 3 [ 94.673137][ T5970] syz.3.73 (5970) used greatest stack depth: 11936 bytes left [ 94.724484][ T52] Bluetooth: hci3: command 0x0c1a tx timeout [ 94.724537][ T4935] Bluetooth: hci2: command 0x0c1a tx timeout [ 94.724574][ T5617] Bluetooth: hci1: command 0x0c1a tx timeout [ 95.086257][ T25] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 95.178526][ T5991] syz.1.81 (5991): attempted to duplicate a private mapping with mremap. This is not supported. [ 95.250203][ T25] usb 3-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 95.251304][ T25] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.251351][ T25] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 95.251373][ T25] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 95.251399][ T25] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 95.253476][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.253499][ T25] usb 3-1: Product: syz [ 95.253514][ T25] usb 3-1: Manufacturer: syz [ 95.253527][ T25] usb 3-1: SerialNumber: syz [ 95.577510][ T25] usb 3-1: usb_control_msg returned -32 [ 95.577558][ T25] usbtmc 3-1:1.0: can't read capabilities [ 96.365023][ T5999] usbtmc 3-1:1.0: usb_control_msg returned -32 [ 96.501881][ T25] usb 3-1: USB disconnect, device number 4 [ 96.519879][ T4935] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 96.800317][ T6017] netlink: 'syz.3.89': attribute type 2 has an invalid length. [ 96.831892][ T1143] IPVS: starting estimator thread 0... [ 96.925121][ T6020] IPVS: using max 29 ests per chain, 69600 per kthread [ 96.953995][ T4935] Bluetooth: hci3: command 0x0c1a tx timeout [ 97.132379][ T6024] smpboot: CPU 1 is now offline [ 97.274686][ T6029] FAULT_INJECTION: forcing a failure. [ 97.274686][ T6029] name failslab, interval 1, probability 0, space 0, times 1 [ 97.274708][ T6029] CPU: 0 UID: 0 PID: 6029 Comm: syz.2.94 Not tainted syzkaller #0 PREEMPT(full) [ 97.274720][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 97.274727][ T6029] Call Trace: [ 97.274731][ T6029] [ 97.274737][ T6029] dump_stack_lvl+0xe8/0x150 [ 97.274757][ T6029] should_fail_ex+0x3eb/0x540 [ 97.274773][ T6029] should_failslab+0xa8/0x100 [ 97.274788][ T6029] __kmalloc_cache_noprof+0x9e/0x600 [ 97.274807][ T6029] ? cuse_channel_open+0x1eb/0x7a0 [ 97.274822][ T6029] ? cuse_channel_open+0x1eb/0x7a0 [ 97.274837][ T6029] cuse_channel_open+0x1eb/0x7a0 [ 97.274852][ T6029] ? __pfx_cuse_channel_open+0x10/0x10 [ 97.274864][ T6029] misc_open+0x2d5/0x350 [ 97.274884][ T6029] chrdev_open+0x4d9/0x600 [ 97.274900][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 97.274916][ T6029] ? devcgroup_check_permission+0x31/0x8f0 [ 97.274935][ T6029] ? __pfx_chrdev_open+0x10/0x10 [ 97.274945][ T6029] do_dentry_open+0x80e/0x1360 [ 97.274962][ T6029] vfs_open_consume+0x4a/0x350 [ 97.274973][ T6029] ? path_openat+0x14bb/0x1e40 [ 97.274990][ T6029] path_openat+0x14d7/0x1e40 [ 97.275022][ T6029] do_file_open+0x23e/0x4a0 [ 97.275040][ T6029] ? __pfx_do_file_open+0x10/0x10 [ 97.275067][ T6029] ? _raw_spin_unlock+0x28/0x50 [ 97.275081][ T6029] ? alloc_fd+0x651/0x6c0 [ 97.275099][ T6029] do_sys_openat2+0x115/0x200 [ 97.275111][ T6029] ? __se_sys_futex+0x3a8/0x450 [ 97.275125][ T6029] ? __pfx_do_sys_openat2+0x10/0x10 [ 97.275140][ T6029] ? rcu_is_watching+0x16/0xb0 [ 97.275154][ T6029] __x64_sys_openat+0x138/0x170 [ 97.275169][ T6029] do_syscall_64+0x166/0x520 [ 97.275179][ T6029] ? trace_irq_disable+0x3b/0x140 [ 97.275194][ T6029] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.275204][ T6029] ? clear_bhb_loop+0x70/0xc0 [ 97.275217][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.275228][ T6029] RIP: 0033:0x7fb14319e159 [ 97.275239][ T6029] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.275248][ T6029] RSP: 002b:00007fb143f8e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 97.275261][ T6029] RAX: ffffffffffffffda RBX: 00007fb143425fa0 RCX: 00007fb14319e159 [ 97.275269][ T6029] RDX: 0000000000000002 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 97.275276][ T6029] RBP: 00007fb143235024 R08: 0000000000000000 R09: 0000000000000000 [ 97.275282][ T6029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.275288][ T6029] R13: 00007fb143426038 R14: 00007fb143425fa0 R15: 00007ffea6d37538 [ 97.275304][ T6029] [ 97.590506][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 97.717949][ T6031] process 'syz.1.95' launched '/dev/fd/4' with NULL argv: empty string added [ 97.760161][ T10] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 97.760189][ T10] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 97.773376][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.773411][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.773425][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.809549][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.809584][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.809598][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.821229][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.821267][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.821282][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.874193][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.874223][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.874237][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.875289][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.875324][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.875338][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.877398][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.877425][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.877439][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.878169][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.878194][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.878207][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.880684][ T10] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 97.880710][ T10] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has invalid maxpacket 25222, setting to 1024 [ 97.880724][ T10] usb 4-1: config 0 interface 0 has no altsetting 0 [ 97.944757][ T10] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 97.944774][ T10] usb 4-1: Product: syz [ 97.944782][ T10] usb 4-1: Manufacturer: syz [ 97.944789][ T10] usb 4-1: SerialNumber: syz [ 98.064087][ T10] usb 4-1: config 0 descriptor?? [ 98.092118][ T10] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 98.161613][ T6035] kvm: pic: level sensitive irq not supported [ 98.166459][ T6035] kvm: pic: non byte write [ 100.098160][ C0] usb 4-1: yurex_control_callback - control failed: -2 [ 100.126555][ T31] audit: type=1800 audit(1788785448.198:2): pid=6057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.105" name="file0" dev="overlay" ino=183 res=0 errno=0 [ 100.237396][ T10] usb 4-1: USB disconnect, device number 3 [ 100.266635][ T10] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 100.648020][ T31] audit: type=1800 audit(1788785448.718:3): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.109" name="/" dev="fuse" ino=1 res=0 errno=0 [ 102.379583][ T6085] input: syz0 as /devices/virtual/input/input5 [ 102.536081][ T4935] Bluetooth: hci0: unexpected event for opcode 0x2002 [ 103.110758][ T6103] netlink: 'syz.3.121': attribute type 2 has an invalid length. [ 104.537907][ T6129] [ 104.540283][ T6129] ====================================================== [ 104.547285][ T6129] WARNING: possible circular locking dependency detected [ 104.554300][ T6129] syzkaller #0 Not tainted [ 104.558723][ T6129] ------------------------------------------------------ [ 104.565731][ T6129] syz.0.131/6129 is trying to acquire lock: [ 104.571691][ T6129] ffffffff8fe29f28 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_streaming_header_allow_link+0x75/0x4d0 [ 104.582913][ T6129] [ 104.582913][ T6129] but task is already holding lock: [ 104.590273][ T6129] ffff8880587bf0c0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 104.600713][ T6129] [ 104.600713][ T6129] which lock already depends on the new lock. [ 104.600713][ T6129] [ 104.611098][ T6129] [ 104.611098][ T6129] the existing dependency chain (in reverse order) is: [ 104.620109][ T6129] [ 104.620109][ T6129] -> #3 (&sb->s_type->i_mutex_key#24){++++}-{4:4}: [ 104.629062][ T6129] down_write+0x91/0x200 [ 104.633814][ T6129] configfs_depend_item_unlocked+0x153/0x420 [ 104.640297][ T6129] usbg_make_tpg+0x1e0/0x550 [ 104.645398][ T6129] target_fabric_make_tpg+0xa8/0x6d0 [ 104.651207][ T6129] configfs_mkdir+0x4f6/0x9e0 [ 104.656388][ T6129] vfs_mkdir+0x398/0x710 [ 104.661131][ T6129] filename_mkdirat+0x285/0x510 [ 104.666604][ T6129] __se_sys_mkdir+0x34/0x150 [ 104.671721][ T6129] do_syscall_64+0x166/0x520 [ 104.676847][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.683428][ T6129] [ 104.683428][ T6129] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 104.691351][ T6129] __mutex_lock+0x197/0x15a0 [ 104.696458][ T6129] tcm_alloc_inst+0x65/0x1a0 [ 104.701572][ T6129] usb_get_function_instance+0xe3/0x2f0 [ 104.707643][ T6129] function_make+0x127/0x360 [ 104.712749][ T6129] configfs_mkdir+0x4f6/0x9e0 [ 104.717944][ T6129] vfs_mkdir+0x398/0x710 [ 104.722705][ T6129] filename_mkdirat+0x285/0x510 [ 104.728058][ T6129] __se_sys_mkdir+0x34/0x150 [ 104.733152][ T6129] do_syscall_64+0x166/0x520 [ 104.738244][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.744689][ T6129] [ 104.744689][ T6129] -> #1 (func_lock){+.+.}-{4:4}: [ 104.751805][ T6129] __mutex_lock+0x197/0x15a0 [ 104.756931][ T6129] usb_get_function_instance+0x2e/0x2f0 [ 104.762991][ T6129] function_make+0x127/0x360 [ 104.768091][ T6129] configfs_mkdir+0x4f6/0x9e0 [ 104.773275][ T6129] vfs_mkdir+0x398/0x710 [ 104.778022][ T6129] filename_mkdirat+0x285/0x510 [ 104.783389][ T6129] __se_sys_mkdirat+0x35/0x150 [ 104.788656][ T6129] do_syscall_64+0x166/0x520 [ 104.793933][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.800330][ T6129] [ 104.800330][ T6129] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 104.808562][ T6129] __lock_acquire+0x164c/0x2de0 [ 104.813941][ T6129] lock_acquire+0x115/0x350 [ 104.818957][ T6129] __mutex_lock+0x197/0x15a0 [ 104.824055][ T6129] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 104.830713][ T6129] configfs_symlink+0x74e/0x11d0 [ 104.836159][ T6129] vfs_symlink+0x18b/0x330 [ 104.841345][ T6129] filename_symlinkat+0x1cd/0x410 [ 104.846969][ T6129] __se_sys_symlinkat+0x4e/0x2b0 [ 104.852431][ T6129] do_syscall_64+0x166/0x520 [ 104.857552][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.863969][ T6129] [ 104.863969][ T6129] other info that might help us debug this: [ 104.863969][ T6129] [ 104.874188][ T6129] Chain exists of: [ 104.874188][ T6129] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#24 [ 104.874188][ T6129] [ 104.889180][ T6129] Possible unsafe locking scenario: [ 104.889180][ T6129] [ 104.896656][ T6129] CPU0 CPU1 [ 104.902031][ T6129] ---- ---- [ 104.907408][ T6129] lock(&sb->s_type->i_mutex_key#24); [ 104.912879][ T6129] lock(tpg_instances_lock); [ 104.920065][ T6129] lock(&sb->s_type->i_mutex_key#24); [ 104.928125][ T6129] lock(gadget_subsys.su_mutex); [ 104.933166][ T6129] [ 104.933166][ T6129] *** DEADLOCK *** [ 104.933166][ T6129] [ 104.941388][ T6129] locks held by syz.0.131/6129: 2, last CPU#0: [ 104.947577][ T6129] #0: ffff88801c7f8460 (sb_writers#12){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 104.956830][ T6129] #1: ffff8880587bf0c0 (&sb->s_type->i_mutex_key#24){++++}-{4:4}, at: configfs_symlink+0x4d0/0x11d0 [ 104.967739][ T6129] [ 104.967739][ T6129] stack backtrace: [ 104.973660][ T6129] CPU: 0 UID: 0 PID: 6129 Comm: syz.0.131 Not tainted syzkaller #0 PREEMPT(full) [ 104.982850][ T6129] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 104.992896][ T6129] Call Trace: [ 104.996165][ T6129] [ 104.999083][ T6129] dump_stack_lvl+0xe8/0x150 [ 105.003679][ T6129] print_circular_bug+0x2e2/0x300 [ 105.008688][ T6129] check_noncircular+0x12f/0x150 [ 105.013614][ T6129] __lock_acquire+0x164c/0x2de0 [ 105.018456][ T6129] ? __pfx_stack_trace_save+0x10/0x10 [ 105.023904][ T6129] ? stack_depot_save_flags+0x33/0x7f0 [ 105.029371][ T6129] ? __lock_acquire+0x6f0/0x2de0 [ 105.034299][ T6129] lock_acquire+0x115/0x350 [ 105.038792][ T6129] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 105.045109][ T6129] __mutex_lock+0x197/0x15a0 [ 105.049692][ T6129] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 105.056154][ T6129] ? uvcg_streaming_header_allow_link+0x75/0x4d0 [ 105.062501][ T6129] ? __pfx___mutex_lock+0x10/0x10 [ 105.067540][ T6129] ? make_vfsuid+0x49/0xa0 [ 105.072034][ T6129] uvcg_streaming_header_allow_link+0x75/0x4d0 [ 105.078178][ T6129] ? inode_permission+0x2bc/0x5f0 [ 105.083209][ T6129] configfs_symlink+0x74e/0x11d0 [ 105.088154][ T6129] ? lookup_one_qstr_excl+0x1d4/0x360 [ 105.093602][ T6129] ? make_vfsuid+0x49/0xa0 [ 105.098001][ T6129] ? generic_permission+0x2ba/0x660 [ 105.103186][ T6129] ? __pfx_configfs_symlink+0x10/0x10 [ 105.108544][ T6129] ? bpf_lsm_inode_symlink+0x9/0x20 [ 105.113751][ T6129] vfs_symlink+0x18b/0x330 [ 105.118151][ T6129] ? security_path_symlink+0xfd/0x360 [ 105.123510][ T6129] filename_symlinkat+0x1cd/0x410 [ 105.128696][ T6129] ? __might_fault+0xaf/0x130 [ 105.133406][ T6129] ? __pfx_filename_symlinkat+0x10/0x10 [ 105.138960][ T6129] ? do_getname+0x151/0x250 [ 105.143472][ T6129] __se_sys_symlinkat+0x4e/0x2b0 [ 105.148489][ T6129] do_syscall_64+0x166/0x520 [ 105.153074][ T6129] ? trace_irq_disable+0x3b/0x140 [ 105.158110][ T6129] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.164695][ T6129] ? clear_bhb_loop+0x70/0xc0 [ 105.169385][ T6129] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.175444][ T6129] RIP: 0033:0x7fa15a59e159 [ 105.179858][ T6129] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.199447][ T6129] RSP: 002b:00007fa15b49f028 EFLAGS: 00000246 ORIG_RAX: 000000000000010a [ 105.207861][ T6129] RAX: ffffffffffffffda RBX: 00007fa15a825fa0 RCX: 00007fa15a59e159 [ 105.215818][ T6129] RDX: 0000200000001600 RSI: ffffffffffffff9c RDI: 0000200000001500 [ 105.223798][ T6129] RBP: 00007fa15a635024 R08: 0000000000000000 R09: 0000000000000000 [ 105.231916][ T6129] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.239887][ T6129] R13: 00007fa15a826038 R14: 00007fa15a825fa0 R15: 00007ffe0e7306b8 [ 105.247861][ T6129]