last executing test programs: 9.937454075s ago: executing program 1 (id=20): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x200000000000019f, &(0x7f0000000040)=[{0x4001, 0x1, 0xa, 0x5}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004800) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r6}) read$char_usb(r2, &(0x7f0000000300)=""/214, 0xd6) 9.701710264s ago: executing program 3 (id=22): r0 = timerfd_create(0x0, 0x0) ppoll(&(0x7f0000000200)=[{r0, 0xc0}], 0x1, 0x0, 0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000440)={{0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f0000000000)={0x3ff, 0xf6d, 0x0, 0xd, 0x7fffffff, 0x0, 0x4, 0x200000008000000, 0x0, 0x100, 0x400000000000000, 0x0, 0x9, 0x3, 0x0, 0xfffffffffffffff9, 0x0, 0x0, 0x1000, 0x2000000000008, 0x9, 0x3, 0x8000000000005a, 0x3, 0x0, 0x6}) 9.678732636s ago: executing program 4 (id=23): syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_complete={{0x3, 0xb}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}}}, 0xe) r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) bind$bt_rfcomm(r0, &(0x7f0000000100)={0x1f, @any, 0x1}, 0x10) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000200)=0x2, 0x4) connect$bt_rfcomm(r0, &(0x7f0000000300)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1}, 0x10) syz_emit_vhci(&(0x7f0000000400)=@HCI_EVENT_PKT={0x4, @hci_ev_auth_complete={{0x6, 0x3}, {0x0, 0xc8}}}, 0x6) syz_emit_vhci(&(0x7f0000000500)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0x10}, @l2cap_cid_signaling={{0xc}, [@l2cap_conn_rsp={{0x3, 0x1, 0x8}, {0x40, 0x40}}]}}, 0x15) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) close(r0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0xb, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x80, 0x8, 0x8, 0x8, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}}, 0x44) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000580)=[@in={0x2, 0x4e21, @empty}], 0x10) sendmsg$inet_sctp(r4, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0x1) r5 = dup(r4) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x85, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @local}}, 0xff8, 0x4001}, 0x90) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x18, r6, 0x1, 0x703d28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x24000881}, 0x24004084) write$uinput_user_dev(r2, &(0x7f0000000a00)={'syz1\x00', {0x4, 0x7, 0x5, 0x7}, 0x3f, [0x6, 0x10000002, 0x18, 0x2, 0x8, 0x400, 0x4, 0x0, 0x8, 0x0, 0x6, 0x40000001, 0x7, 0x39, 0x747d5e13, 0x800, 0xfffffb9a, 0xfffffffa, 0x0, 0xffffffeb, 0x2004, 0x3, 0x7, 0xf250, 0x80, 0x4800, 0x300000, 0x7, 0xe, 0x9537, 0x0, 0x10001, 0x1ff, 0x8000, 0x7, 0x3, 0xc, 0x3, 0xba55, 0x8da8, 0x2a, 0x5, 0x2, 0x5, 0x2000000e, 0x2, 0x2, 0x8000006f, 0x8, 0x405, 0x80000000, 0x199d, 0x6, 0x7, 0xffffffff, 0x3, 0x4, 0x6, 0x1000, 0x5, 0x3d, 0x8, 0x9, 0x5], [0x7, 0x45cb, 0x3, 0x8000, 0xfffffffd, 0x3, 0x2, 0x25, 0xa, 0xfffffffc, 0x8, 0x7fff, 0x729, 0x1c32, 0x3, 0x1, 0x10000, 0x400, 0x7ffd, 0x5, 0x3, 0x297, 0x9, 0x0, 0x981, 0x4, 0x0, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000001, 0x14, 0xfffffff7, 0xfffffffd, 0x7, 0x9, 0xffffffff, 0x6, 0x4, 0x800, 0x0, 0x6, 0x96, 0xfffffff9, 0x20002, 0x0, 0x2, 0x9, 0xc, 0x3, 0x37a, 0x9, 0xe, 0x5, 0x5, 0x6, 0x6, 0x1, 0x1, 0xe, 0x20007, 0x200, 0x3], [0x1, 0x8000c584, 0xffff, 0xcd3, 0xb, 0x8001, 0x404, 0x4, 0x4008, 0xc, 0x7, 0x9, 0x3, 0x5, 0x80000001, 0xffff0000, 0x9, 0x1000, 0x0, 0x6611, 0x6, 0xfffffff9, 0x0, 0x8001000, 0x80040101, 0x81, 0x8, 0x6, 0x200003, 0x1, 0x5, 0x80, 0x8, 0x8001, 0x12000, 0x4, 0x4, 0x400004, 0x3, 0x7, 0x3, 0x8, 0xb3d, 0xbf23, 0x6, 0x5, 0x956, 0x0, 0x3ff, 0x80000e, 0x6, 0x100dffd, 0x2005, 0x9, 0x4, 0x1000, 0x9, 0x7fffffff, 0x3, 0x80, 0x0, 0x7d, 0x401, 0x5], [0x80108e, 0xffff, 0x3, 0x3, 0x8a, 0x80000002, 0x4000000, 0x4, 0x50, 0x2, 0x763, 0xb, 0x2402, 0x1, 0x5, 0x1000, 0x5, 0x5, 0x8, 0x4, 0x0, 0x5, 0x3, 0x4, 0xe47, 0x4, 0x3, 0x4, 0x200, 0x2851, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x4004, 0x20008, 0x8a5, 0x8003, 0x44, 0x409, 0x6, 0x4, 0x4, 0xe, 0x7, 0xfffffff7, 0x7fff, 0xffff8a33, 0xfffffff8, 0x481, 0x0, 0x200, 0x7, 0x4edf, 0xffffffff, 0xd, 0x5, 0x101, 0xf, 0xf, 0x136, 0x7]}, 0x45c) ioctl$UI_DEV_CREATE(r2, 0x5501) write$input_event(r2, &(0x7f0000000000)={{0x77359400}, 0x15}, 0xfe4f) 8.729579593s ago: executing program 3 (id=25): socket$kcm(0x11, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYRES32, @ANYBLOB="0100"/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) socket$key(0xf, 0x3, 0x2) mq_open(0x0, 0x40, 0x100, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{0x0}], 0x1) syz_usbip_server_init(0x5) fsopen(0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, 0x0, 0x80) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402d1eb7000001010200010902270001010080320904000003ff000000070581030800090705820200020007050302000200"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/wwan0/qmi/raw_ip\x00', 0x0, 0x0) read(r2, &(0x7f0000000400), 0x10) r3 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x800000001fe, 0x82) ioctl$USBDEVFS_GETDRIVER(r3, 0x41045508, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x38, 0x0, 0x0) prctl$PR_SET_VMA(0x4e, 0x0, &(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0) r4 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000002c0)={'lo\x00', &(0x7f0000000000)=@ethtool_cmd={0x27, 0x4aaa, 0xa0c, 0x9c1, 0x0, 0x0, 0xf0, 0x9, 0xfd, 0x0, 0x0, 0xfffffffe, 0x3, 0x10, 0x0, 0x0, [0xfffffffc]}}) 8.632036672s ago: executing program 4 (id=26): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='maps\x00') r2 = creat(&(0x7f0000000140)='./file0\x00', 0xf1) r3 = fsmount(r1, 0x1, 0xf) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000000)) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001500010300000000000000000a00000008000200", @ANYRES32=r2], 0x1c}}, 0x20000080) sendmsg$NLBL_UNLABEL_C_STATICADD(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x90}, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xec90}, {0x0}], 0x2) unshare(0x100000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000040)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}]}, &(0x7f0000000100)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_MTU={0x8, 0x4, 0x44}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000840)={r8, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, 0x0, 0x0) r10 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044190}, 0x40000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x8) write$UHID_INPUT(r0, &(0x7f00000005c0)={0x9, {"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", 0x1000}}, 0x1006) 8.553247494s ago: executing program 2 (id=27): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 7.031509712s ago: executing program 2 (id=30): r0 = syz_open_dev$mtd(&(0x7f0000000900), 0x46, 0x1) r1 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r1, 0x8918, 0x0) ioctl$MEMREADOOB64(r0, 0x1269, &(0x7f00000000c0)={0x1}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 6.7888189s ago: executing program 1 (id=31): mount(0x0, &(0x7f0000000140)='./my_config\x00', &(0x7f0000000180)='configfs\x00', 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f00000002c0), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) close(0xffffffffffffffff) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = socket$kcm(0x29, 0x2, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = memfd_create(&(0x7f0000000000)='e\xf4E\x88-\x00', 0x0) sendfile(r1, r2, 0x0, 0x8000fb00) futex(&(0x7f000000cffc), 0x80000000000b, 0x0, 0x0, &(0x7f0000000080), 0x2) futex(&(0x7f000000cffc), 0xc, 0x1, 0x0, &(0x7f0000048000)=0x1, 0x0) madvise(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x16) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000009, 0x3032, 0xffffffffffffffff, 0x0) 6.197944395s ago: executing program 4 (id=32): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20044885}, 0x2040) r1 = socket$inet(0x2, 0x3, 0x20006) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='team_slave_1\x00', 0x10) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000380)="0800fbfaffb92be7", 0x8}], 0x1, 0x0, 0x0, 0xe0000000}, 0x28004010) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000180)=0x40000007) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) r5 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmmsg$unix(r4, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000540)="2c9731d7276b5140a76f17022809f64592c15bccee738908b88f05292f4aedfbc19236a8bd084fce0f00facbcbcbc4b027c9a3106587dd2560b7ecbe9ee065de9632560a06edc3c15d960d3fbe4a22e652108cac47e62df87134c690c41197e4ef94fc7db6971c23522d3d9acbca5cf02f2db3d144f81565fd8cd3cd0810d411", 0x80}, {&(0x7f00000005c0)="1eb484f838a4b4ec907846756c82a28095c08c6cd4a2c782a63b61dc23411a6e3baf19bb7b60d535fcd8305d4cf2cb001469fc74364251bd59d79d593d1fb7856c8a14bc593fe809d540f2e64ca55d17032e3244cd6813cbfd63551a032c6c1cf36b2f232a309344bb30942d2d17baa0ac9f7bb7a52e0c4020f81f5b4ac042882298696e82029be1d6cd6532f2dcdd8f157a52cccbd5d28fa35b5f3ef263450bafa81f3cc0efee8738c39d640969003bd82200dc3aa960494c", 0xb9}, {&(0x7f0000000680)="578b3a5ef30c4e0c0098f572433ea0739bea2604e9580d4a4d539dd96eef3068497f4bccbb4032658869e9aeb60786e6484a95ba957e5e8d968c90b70bbae10cc59a15d2568a3036a5efc6bd5af71bf5147ef763bc1090f5d67e06457339b51ffb2be1e43270ec5333ba860cc0f51ed9fb52758f2ee9d85aa444e8a3a6b69bf0df3a53e419b5021484", 0x89}, {&(0x7f0000000740)="def6798396d0fc618e9831f9de6c0c5a4d9715cbf59b14d51e63dd27cb0bdd9b26a7d31bc810d26b2d4ed8f3e2f159854ea7a9a1ccb5dcf31d0b8f6b037a6c48bf34f057e559e37ba6a13c19df5cde033c8d74bd1c3f50fe362f20e3ec5f2becbe0df14a17510240f15a93e81b81ac", 0x6f}, {&(0x7f00000007c0)="a78c11266713afdf8ce2d8422e152b957adcce9108c1f13442", 0x19}, {&(0x7f0000000800)="2dce81fd69209f321cfe2b54a94ef1bd6aa00178e675fb0ada18ba2ec93a1d186e13de01f582a8da803d779ecd2c9c97", 0x30}, {&(0x7f0000000840)="d67e92348e3d2638de6756965cdb855c3b5df98b47d40269aad352526d8b4504bd5c9c710cb78d2c199ee5c5688116d1d18c02c9904ef345c506fcacd182826e71138c1f0dee242812ca671210064477eecb8aeec08a1a161291699d93589cd2940d814e981caa95abcfb1c9938e83d78883f65ce37e0d1b46095354b726565d7f05", 0x82}], 0x7, &(0x7f0000000e00)=ANY=[@ANYBLOB="38000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r5, @ANYRES32=r6, @ANYRES32, @ANYRES32=r1, @ANYRES32, @ANYRES32=r1, @ANYRES32=r4, @ANYRES32=r1, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r1, @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c0062e271c4dcf286333ca828002000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r3], 0x140, 0x1}}], 0x1, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r7 = syz_clone(0x0, 0x0, 0x29, 0x0, 0x0, 0x0) ptrace(0x10, r7) ptrace(0x8, r7) wait4(0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="4400000010004b0401800000000000007a000000", @ANYRES32=0x0, @ANYBLOB="4800000000000000240012"], 0x44}}, 0x4) waitid(0x0, 0xffffffffffffffff, &(0x7f0000000300), 0x2, &(0x7f0000000440)) r8 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) fcntl$setlease(r8, 0x400, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r8, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00042abd7000ebdbdf2549000000002e699612"], 0x14}, 0x1, 0x0, 0x0, 0x4008000}, 0x850) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a14000000000a050000000000000000000a00fffe38000000090a010300000000000000000700000008000f40000000020900010073797a310000000008000a400000000008000f400000000114"], 0x74}, 0x1, 0x0, 0x0, 0x88000}, 0x20000000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="880000001000010400"/20, @ANYRES32=0x0, @ANYRES32=r8], 0x88}}, 0x0) 4.954336067s ago: executing program 0 (id=34): socket$kcm(0x10, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) r1 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x20, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x8001}, {0xffee, 0x1}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x7f, 0x1000}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newtaction={0x14, 0x30, 0x2, 0x70bd26, 0x25dfdbff}, 0x14}}, 0x4005) r4 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r4, &(0x7f0000000800)="0011", 0x2, 0x0, &(0x7f0000000900)={0x11, 0x300, r3, 0x1, 0x0, 0x6, @local}, 0x14) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$drirender128(0xffffffffffffff9c, 0x0, 0x717101, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="30000000020605000000000000000000000000000500040000000001000600"/48], 0x30}}, 0x0) r7 = openat$nvme_fabrics(0xffffffffffffff9c, 0x0, 0x408100, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2, @multicast1}}}], 0x20}, 0x0) close_range(r7, 0xffffffffffffffff, 0x2) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x4e21, 0x0, @loopback, 0x4}, 0x1c) 4.777288966s ago: executing program 2 (id=35): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) setns(0xc9, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = syz_open_dev$ttys(0xc, 0x2, 0x1) ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000000100)={0x5, 0x10, 0x8, 0xfff9}) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xfef4}], 0x1}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_GET_LAPIC(0xffffffffffffffff, 0x8400ae8e, 0x0) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0xc, 0x4) readv(r1, &(0x7f0000002740)=[{&(0x7f0000000540)=""/4096, 0x1000}], 0x1) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) writev(r0, &(0x7f00000008c0)=[{&(0x7f0000000040)="2e9b3d0007e03dd65193dfb6c575963f8864", 0x12}, {&(0x7f0000000200)="110090d724320057", 0x8}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='debugfs\x00', 0x1214040, 0x0) ioctl$KDGETMODE(r2, 0x4b3b, &(0x7f0000000380)) mount$overlay(0x0, 0x0, &(0x7f0000000180), 0x0, &(0x7f0000000040)={[{@xino_on}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x4, 0x80) getdents64(r5, &(0x7f0000000400)=""/4096, 0x1000) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f00000003c0)=ANY=[@ANYBLOB="00000040ac14140f0200e75b6800000400000064010100ffffffac1414aa75aec9cbe71445e8eaa713a746858d6b5d1e64e4ea05000000bc6211"], 0x20) getdents64(r5, &(0x7f0000000280)=""/241, 0xf1) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000001800), 0x40000, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001840)={0x0, 0x7ff, 0x18}, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x11, 0x11, &(0x7f0000001a00)=ANY=[@ANYBLOB="180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ff7f00008500000006000000", @ANYRESHEX, @ANYBLOB="0000000000000000b7080000000200007b8af8ff00000000bfa2b7f77f6a0000070200f8ffffffb703000008000000b704000000000000850000008200000000"], &(0x7f0000001700)='syzkaller\x00', 0x1000, 0xb0, &(0x7f0000001740)=""/176, 0x41100, 0x2, '\x00', 0x0, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, &(0x7f00000018c0)=[{0x4, 0x3, 0x2, 0x4}, {0x5, 0x1, 0x7}, {0x4, 0x4, 0xb, 0x5}, {0x2, 0x1, 0x3, 0x2}, {0x1, 0x1, 0x5, 0xb}], 0x10, 0x196}, 0x94) 4.685092935s ago: executing program 1 (id=36): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[], 0x0, 0x3c, 0x0, 0x0, 0x0, 0x10000}, 0x28) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYRESOCT], 0x0, 0x3c}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000400000008000000000000000100"/48, @ANYRES32=r1, @ANYBLOB="0100000002"], 0x40) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[], 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x20b02, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r5, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x841fa2e66efa8cfe) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) bind$vsock_stream(0xffffffffffffffff, 0x0, 0x0) ioctl$UI_DEV_CREATE(r6, 0x5501) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x2181) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAPCLR(r7, 0x4b68, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{r2}, &(0x7f0000001b80), &(0x7f0000001bc0)=r0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000240)={r2, &(0x7f0000000100), 0x0}, 0x20) 4.061078881s ago: executing program 4 (id=37): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001100)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0xcd0}}, 0x10) 3.857850204s ago: executing program 1 (id=38): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, 0x0, 0x0) mprotect(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x5, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) openat(0xffffffffffffff9c, 0x0, 0x2, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=@newtaction={0x94, 0x30, 0x871a15abc695fb3d, 0x0, 0x0, {}, [{0x80, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc}, {0xc}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4, 0x2, 0x0, 0x0}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) r4 = syz_open_dev$I2C(0x0, 0x0, 0x100) ioctl$I2C_SMBUS(r4, 0x720, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000380)={@link_local, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x4}, {0x8100, 0x6, 0x1, 0x3}}, {@canfd={0xd, {{0x0, 0x0, 0x1}, 0x40, 0x3, 0x0, 0x0, "e2c77b9f666ae26295cacb413eafceb77b2bce75b990ab99997d108b8ab553e6214355494a4e6e3cf64c10e8c8f5f48cee4f408ad316a8010ce557ff1b8c01b6"}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2c00000070000100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400018008000100fd0f0100050006"], 0x2c}}, 0x0) 3.460565275s ago: executing program 4 (id=39): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001980)=ANY=[@ANYBLOB="0e00000004000000080000000a"], 0x50) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) close(0x3) r2 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r2, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r2, 0xa) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r3, &(0x7f0000000300)="12345678000001000000000100000001000000010101000000000001", 0x1c, 0x4008000, &(0x7f0000000400)={0x2, 0x4e20, @loopback}, 0x10) sendto$inet(r3, &(0x7f00000000c0)="0704fb12442a3295e3ee2320dba9e8f729067c47ee85660535388af2bbcb2be343105d", 0x23, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000180)=""/34, 0x22}], 0x1}, 0x3}], 0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r6, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[@ANYBLOB="54010000", @ANYRES16=r7, @ANYBLOB="017d26bd7000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="0600cd00000000002d013300802009000802110000010802110000005050505050505f00ffffff"], 0x154}, 0x1, 0x0, 0x0, 0xc0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a500850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0xc, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a0020000700008000001700", @ANYRES32=0x1, @ANYBLOB="00000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1fffffffffffffcd, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072"], 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f03, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r8}, 0xc) 3.163403042s ago: executing program 3 (id=40): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)=@newsa={0x140, 0x10, 0x713, 0x70bd26, 0x0, {{@in=@rand_addr=0x64010101, @in=@dev={0xac, 0x14, 0x14, 0x12}, 0x4e22, 0x0, 0x4e23, 0x3, 0x2, 0x0, 0x0, 0x3a, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x32}, @in6=@local, {0x0, 0x0, 0x8, 0xa, 0x6, 0xa, 0x2000000, 0xed3}, {0x0, 0x0, 0x2, 0xfffffffffffffff8}, {0xc, 0x0, 0x2}, 0x70bd29, 0x0, 0x2, 0x1, 0x0, 0x28}, [@algo_aead={0x50, 0x12, {{'rfc4543(gcm(aes))\x00'}, 0x20, 0x80, "316f74ee"}}]}, 0x140}, 0x1, 0x0, 0x200000000000000, 0xc0}, 0x0) 2.782088283s ago: executing program 3 (id=41): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@delqdisc={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x1, {}, {0xffff, 0xffff}, {0x0, 0x6}}}, 0x24}}, 0x0) socket$inet_sctp(0x2, 0x4, 0x84) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000080)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e20, @empty}}, 0x24) listen(r1, 0xa) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000100100000100000001000000000000001000000000000000100100000e"], 0x28}, 0x0) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) recvmsg(r1, &(0x7f0000000600)={0x0, 0x0, 0x0}, 0x0) listen(r1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='net/icmp6\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000240)={0x200000000000019f, &(0x7f0000000040)=[{0x4001, 0x1, 0xa, 0x5}]}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000c00000/0x400000)=nil) syz_open_procfs(0x0, &(0x7f00000000c0)='net/fib_trie\x00') r3 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000d3e457201e040b40e73e000000010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r3, &(0x7f0000000140)={0x14, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00f\x00`\x00'], 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x0, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) r4 = syz_open_dev$vim2m(&(0x7f0000000100), 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff0000000002"], 0x7c}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32, @ANYRES32=r5, @ANYBLOB='&'], 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x20004800) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000240)=@mmap={0x1, 0x2, 0x4, 0x100000, 0x9, {}, {0x0, 0x2, 0x4, 0xc0, 0x0, 0xf0, "18a6fc23"}, 0x1, 0x1, {}, 0x1, 0x0, 0xffffffffffffffff}) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f0000000000)={0x6, 0x1, 0x1, 0x0, 0x3}) ioctl$vim2m_VIDIOC_STREAMOFF(r4, 0x40045612, &(0x7f0000000080)=0x2) ioctl$vim2m_VIDIOC_QBUF(r4, 0xc058560f, &(0x7f0000000180)=@mmap={0x1, 0x1, 0x4, 0x100, 0x81, {}, {0x4, 0x8, 0x8, 0x5, 0x29, 0x9, "0adb3fb8"}, 0x3, 0x1, {}, 0x0, 0x0, r6}) read$char_usb(r2, &(0x7f0000000300)=""/214, 0xd6) 2.777090402s ago: executing program 2 (id=42): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x9, 0x1}]}, &(0x7f00000000c0)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xf00}, 0x94) 2.523789313s ago: executing program 1 (id=43): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000001800010000000020000000000200000000000006000000000c00090008"], 0x38}}, 0x0) 2.170538883s ago: executing program 4 (id=44): io_uring_setup(0x724, &(0x7f00000000c0)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x1d, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000001900000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @lsm=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c0000001000fffd29bd7000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000223803001c0012800c0001006d6163766c616e000c000280080009000800ffef08000500", @ANYRES32=r0], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040040) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0xf0ffffffffffff, 0x0, 0x8880}, 0x0) syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010800d972a440b72040155ab7010203010902120001000000000904000000ff"], 0x0) 2.105727925s ago: executing program 1 (id=45): r0 = syz_usb_connect(0x3, 0x3c, &(0x7f0000000380)=ANY=[@ANYBLOB="120101000814c910be0632a2f333010203010902120001000000000904"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r2, 0x5) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0xe0, 0x0, 0x0) writev(r1, &(0x7f0000000300)=[{&(0x7f0000000040)='\x00\x00', 0x2}], 0x1) syz_usb_control_io$cdc_ecm(r0, &(0x7f00000004c0)={0x14, 0x0, 0x0}, &(0x7f0000000680)={0x1c, 0x0, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x7f}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x5}}) fcntl$F_GET_FILE_RW_HINT(0xffffffffffffffff, 0x40d, &(0x7f0000000080)) 2.105227621s ago: executing program 2 (id=46): r0 = socket(0xa, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56441, 0x70b925, 0x80000, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0xfff2}, {0x2, 0x1}, {0xb, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x2004c811) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20040000}, 0x80) r1 = socket(0x10, 0x3, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000000a40)=[{&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f00000005c0)=""/6, 0x6}], 0x2) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000006800019f00000000000000000200f00000000000080001000100000004"], 0x24}, 0x1, 0x0, 0x0, 0x4005}, 0x0) 1.970790347s ago: executing program 0 (id=47): socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100ffffffa7000000000100000024000180060005004e230007060001000200000008000300ac1414aa0800060001"], 0x38}}, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r8, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r9 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x4, @tid=r9}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) 1.92183346s ago: executing program 2 (id=48): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000085f0500a800010000000109022e0001010080320904000004ff00000007050102080000070582030800010705030240000007058402400000"], 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfe, {0x1d, 0x1, 0x6}, [@CGW_SRC_IF={0x8, 0x9, r4}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="563f000019"], 0xfe33) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") r5 = syz_open_dev$char_usb(0xc, 0xb4, 0x20) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = fcntl$dupfd(r6, 0x406, r6) ioctl$sock_inet_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000340)) read$sequencer(r7, &(0x7f0000000080)=""/72, 0x48) getsockopt$PNPIPE_IFINDEX(r7, 0x113, 0x2, 0x0, &(0x7f0000006080)) syz_usb_ep_write(r0, 0x82, 0x8, &(0x7f0000000100)="bbbbbbbbbbbbbbbb") write$char_usb(r5, &(0x7f0000000200)="5502000000000000", 0x8) r8 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r9 = ioctl$KVM_CREATE_VM(r8, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f4c, 0x0, 0x0) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r10, 0x0, &(0x7f0000000040)) r11 = ioctl$KVM_CREATE_VCPU(r9, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r9, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r11, &(0x7f0000005000/0x18000)=nil, &(0x7f0000001140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r11, 0xae80, 0x0) syz_usb_control_io(r0, &(0x7f0000000480)={0x2c, &(0x7f0000000240)={0x20, 0x10, 0xc0, {0xc0, 0x4, "b1325e86fe870039bd68024c73496ecadc2829b86f192d64af6a328c1569351c6c0bc46287058f566b4cec3463ff4f3c0a89269ec4e36ada297fb4402ee4c299be70edbbff967c3ea643b59fa6c1d02ff1d86fc6887835f881bd39b0a21ee1053f8dce7d49ba2c974dcd8be5bc4a8f738e788913ac3dd3670f22559e355f622a8190af988a277a8565a4e91eaed6a7d8f05bbee01ec78b9d39df88b66d19abb466a90cc12ee284dd6bc7d1f9f1d5dab2224f221ffb4ddb3275ec23853356"}}, &(0x7f0000000340)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x422}}, &(0x7f0000000380)={0x0, 0xf, 0x3c, {0x5, 0xf, 0x3c, 0x4, [@ssp_cap={0x20, 0x10, 0xa, 0xa, 0x5, 0xb, 0xf00f, 0x39d, [0xc000, 0x3f00, 0x7ef0, 0x30, 0x0]}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xb, 0x36, 0x65, 0x1}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0xe, 0x5, 0x9, 0x1}, @ptm_cap={0x3}]}}, &(0x7f0000000400)={0x20, 0x29, 0xf, {0xf, 0x29, 0x2, 0x4, 0x8, 0x1, "84f10cad", "451cadab"}}, &(0x7f0000000440)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x0, 0x0, 0x0, 0xa, 0x7, 0x8}}}, &(0x7f00000009c0)={0x84, &(0x7f00000004c0)={0x20, 0x18, 0xff, "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"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0xf}, &(0x7f0000000000)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000140)=ANY=[@ANYBLOB="0477fb8b67604310532717a71144fdb956e8f4e5b802209cf174b64e07162f05a50202a7d99895148ca59497057676b6d0f44aec3bd70cfc544cba1e1512a762d552a2f7008a5823d223afb0bcaa0cb23a46341f4e7ca385759c616526de6f3b1f5c2068000477c073b51a127700000000"], &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0xfe}, &(0x7f0000000780)={0x40, 0xb, 0x2, "b738"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0xec7e}, &(0x7f0000000800)={0x40, 0x13, 0x6}, &(0x7f0000000840)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000880)={0x40, 0x19, 0x2, "cc43"}, &(0x7f00000008c0)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000900)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000940)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000980)={0x40, 0x21, 0x1, 0xaa}}) 993.667266ms ago: executing program 0 (id=49): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0xd81, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x110}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x9}]}], {0x14, 0x10, 0x1, 0x0, 0x48, {0xa, 0x84}}}, 0x94}}, 0x20050800) 854.540746ms ago: executing program 0 (id=50): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b0066"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000800)=@base={0xc, 0x4, 0x4, 0x7, 0x0, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value=0xf0}, 0x50) 805.114346ms ago: executing program 0 (id=51): r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x1b6e, 0x3800}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x1, 0x2, &(0x7f0000000200)={&(0x7f0000001000), 0x50, 0x0, 0x3000000}, &(0x7f0000000300)={&(0x7f0000002000), 0x1000, 0x1, 0x3000000}}, 0x1) 622.001989ms ago: executing program 0 (id=52): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x1492c1, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f0000000180)=r1) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x2000}) syz_usb_connect(0x3, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000062a10b40450c1010fce60102030109021b00010000000009043200019740a40009058203ff"], 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xd, 0x10010, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="680000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800c0001100000000000000000180002800a000400bbbbbbbbbbbb00000800030003000000"], 0x48}}, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0xff, 0x27, 0xa8, 0x40, 0x12d8, 0x1, 0x8330, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x72, 0x6, 0x10, 0x6, "", [{{0x9, 0x4, 0x33, 0xe8, 0x1, 0x2e, 0xd5, 0x48, 0x6, [], [{{0x9, 0x5, 0xeb3925d0f91dd4ca, 0x2, 0x10, 0x10, 0x2, 0x81}}]}}]}}]}}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpgrp(0x0) sched_setaffinity(r5, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019540)=""/102392, 0x18ff8) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r8 = fanotify_init(0xef0, 0x2) readv(r4, &(0x7f0000000500)=[{&(0x7f0000000440)=""/138, 0x8a}], 0x1) fanotify_mark(r8, 0x2, 0x20, r7, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1840, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc_mnt\x00', 0x1ed) openat(r7, &(0x7f0000000100)='./proc_mnt/irq/25/smp_affinity\x00', 0x81, 0x4) 61.896955ms ago: executing program 3 (id=53): r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000000140)=0x40) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x600, 0x0, 0x0, 0x16}, [@IFLA_ADDRESS={0xa, 0x3, @random="99fa3a1c872f"}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x44}}, 0x0) 0s ago: executing program 3 (id=54): syz_usb_connect(0x5, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0}) kernel console output (not intermixed with test programs): [ 57.744358][ T29] audit: type=1400 audit(1787185309.309:119): avc: denied { write } for pid=5502 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.789385][ T29] audit: type=1400 audit(1787185309.349:120): avc: denied { write } for pid=5513 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 57.972981][ T29] audit: type=1400 audit(1787185309.529:121): avc: denied { write } for pid=5516 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.018537][ T29] audit: type=1400 audit(1787185309.579:122): avc: denied { write } for pid=5527 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.167' (ED25519) to the list of known hosts. [ 65.250298][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 65.250313][ T29] audit: type=1400 audit(1787185316.809:129): avc: denied { mounton } for pid=5581 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 65.280912][ T29] audit: type=1400 audit(1787185316.839:130): avc: denied { mount } for pid=5581 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.284487][ T5581] cgroup: Unknown subsys name 'net' [ 65.312404][ T29] audit: type=1400 audit(1787185316.869:131): avc: denied { unmount } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 65.476404][ T5581] cgroup: Unknown subsys name 'cpuset' [ 65.485216][ T5581] cgroup: Unknown subsys name 'rlimit' [ 65.583101][ T29] audit: type=1400 audit(1787185317.139:132): avc: denied { setattr } for pid=5581 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.629041][ T29] audit: type=1400 audit(1787185317.139:133): avc: denied { create } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.652890][ T29] audit: type=1400 audit(1787185317.139:134): avc: denied { write } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.673263][ T5583] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 65.678298][ T29] audit: type=1400 audit(1787185317.139:135): avc: denied { read } for pid=5581 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 65.704710][ T29] audit: type=1400 audit(1787185317.249:136): avc: denied { relabelto } for pid=5583 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.730361][ T29] audit: type=1400 audit(1787185317.249:137): avc: denied { write } for pid=5583 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 65.760355][ T29] audit: type=1400 audit(1787185317.319:138): avc: denied { read } for pid=5581 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.025979][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 66.032510][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.752540][ T5581] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.975666][ T5609] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.983527][ T5609] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.990088][ T5611] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.991661][ T5609] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.998487][ T5611] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.008968][ T5609] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.016197][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.030235][ T5613] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.030297][ T5611] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.038543][ T5609] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.046653][ T5611] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.054311][ T5613] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.060590][ T5611] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.069827][ T5609] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.081396][ T5614] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.083780][ T5609] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.091620][ T5611] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.104273][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.105742][ T5611] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.112846][ T5612] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.121500][ T5611] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.125479][ T5614] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.142029][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.143025][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.158545][ T5614] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 70.560786][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.568026][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.575302][ T5592] bridge_slave_0: entered allmulticast mode [ 70.582527][ T5592] bridge_slave_0: entered promiscuous mode [ 70.618347][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.625564][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.632688][ T5592] bridge_slave_1: entered allmulticast mode [ 70.639675][ T5592] bridge_slave_1: entered promiscuous mode [ 70.667359][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.674561][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.681691][ T5595] bridge_slave_0: entered allmulticast mode [ 70.688524][ T5595] bridge_slave_0: entered promiscuous mode [ 70.719958][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.727217][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.734430][ T5595] bridge_slave_1: entered allmulticast mode [ 70.741215][ T5595] bridge_slave_1: entered promiscuous mode [ 70.757578][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.764732][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.771929][ T5593] bridge_slave_0: entered allmulticast mode [ 70.778850][ T5593] bridge_slave_0: entered promiscuous mode [ 70.799749][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.812865][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.820198][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.828315][ T5593] bridge_slave_1: entered allmulticast mode [ 70.835148][ T5593] bridge_slave_1: entered promiscuous mode [ 70.854995][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.884061][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.924083][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.939200][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.946560][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.953793][ T5594] bridge_slave_0: entered allmulticast mode [ 70.960458][ T5594] bridge_slave_0: entered promiscuous mode [ 70.970171][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.996309][ T5592] team0: Port device team_slave_0 added [ 71.004078][ T5592] team0: Port device team_slave_1 added [ 71.009911][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.017110][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.024378][ T5594] bridge_slave_1: entered allmulticast mode [ 71.031581][ T5594] bridge_slave_1: entered promiscuous mode [ 71.039859][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.049249][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.056485][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.063794][ T5596] bridge_slave_0: entered allmulticast mode [ 71.070581][ T5596] bridge_slave_0: entered promiscuous mode [ 71.103329][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.110542][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.117915][ T5596] bridge_slave_1: entered allmulticast mode [ 71.124741][ T5596] bridge_slave_1: entered promiscuous mode [ 71.132772][ T5595] team0: Port device team_slave_0 added [ 71.144808][ T5614] Bluetooth: hci2: command tx timeout [ 71.148456][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.157318][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.183408][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.216904][ T5595] team0: Port device team_slave_1 added [ 71.223769][ T5605] Bluetooth: hci3: command tx timeout [ 71.223775][ T5610] Bluetooth: hci1: command tx timeout [ 71.223886][ T5610] Bluetooth: hci0: command tx timeout [ 71.229923][ T5614] Bluetooth: hci4: command tx timeout [ 71.250434][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.257464][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.283388][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.296464][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.307410][ T5593] team0: Port device team_slave_0 added [ 71.333841][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.344537][ T5593] team0: Port device team_slave_1 added [ 71.351867][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.369348][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.376344][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.403229][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.440702][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.450600][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.457604][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.483537][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.532038][ T5592] hsr_slave_0: entered promiscuous mode [ 71.538599][ T5592] hsr_slave_1: entered promiscuous mode [ 71.546441][ T5594] team0: Port device team_slave_0 added [ 71.552790][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.560086][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.586298][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.606533][ T5596] team0: Port device team_slave_0 added [ 71.615064][ T5594] team0: Port device team_slave_1 added [ 71.621196][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.628861][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.655004][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.672937][ T5596] team0: Port device team_slave_1 added [ 71.723313][ T5595] hsr_slave_0: entered promiscuous mode [ 71.729501][ T5595] hsr_slave_1: entered promiscuous mode [ 71.735547][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 71.741324][ T5595] Cannot create hsr debugfs directory [ 71.767043][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.774149][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.800301][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.813486][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.820517][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.847097][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.872701][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.879825][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.906159][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 71.937812][ T5593] hsr_slave_0: entered promiscuous mode [ 71.944220][ T5593] hsr_slave_1: entered promiscuous mode [ 71.950278][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 71.956215][ T5593] Cannot create hsr debugfs directory [ 71.962267][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 71.969468][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.995411][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.086434][ T5594] hsr_slave_0: entered promiscuous mode [ 72.092541][ T5594] hsr_slave_1: entered promiscuous mode [ 72.098950][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 72.104686][ T5594] Cannot create hsr debugfs directory [ 72.135510][ T5596] hsr_slave_0: entered promiscuous mode [ 72.141693][ T5596] hsr_slave_1: entered promiscuous mode [ 72.148042][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 72.154022][ T5596] Cannot create hsr debugfs directory [ 72.467664][ T5592] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 72.479728][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.487858][ T5592] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 72.496559][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.514089][ T5592] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 72.524919][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.532774][ T5592] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 72.543403][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.609241][ T5595] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 72.620008][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.629860][ T5595] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 72.640762][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.649317][ T5595] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 72.659804][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.668303][ T5595] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 72.678379][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.767186][ T5593] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 72.776280][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.785577][ T5593] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 72.795604][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.803417][ T5593] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 72.814552][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.822277][ T5593] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 72.832061][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.909892][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.938156][ T5594] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 72.949966][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.959938][ T5594] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 72.970736][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.978923][ T5594] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 72.989115][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.998090][ T5594] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.008613][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.070681][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.094606][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.102287][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.125928][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.133100][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.146791][ T5596] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.156475][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.164400][ T5596] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.172894][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.190105][ T5596] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.199925][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.207826][ T5596] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.217506][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.224471][ T5614] Bluetooth: hci2: command tx timeout [ 73.252874][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.295351][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.304147][ T5614] Bluetooth: hci0: command tx timeout [ 73.304601][ T5598] Bluetooth: hci3: command tx timeout [ 73.309584][ T5605] Bluetooth: hci1: command tx timeout [ 73.315040][ T5610] Bluetooth: hci4: command tx timeout [ 73.329510][ T5592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 73.340260][ T5592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 73.396100][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.429991][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.470289][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.477487][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.488789][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.496015][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.520050][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.527266][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.557369][ T3258] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.565106][ T3258] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.676092][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.713000][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.768455][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.810975][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.818140][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.835350][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.857735][ T147] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.864914][ T147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.905174][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.927368][ T147] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.934540][ T147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.966262][ T199] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.973414][ T199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.183129][ T5592] veth0_vlan: entered promiscuous mode [ 74.212115][ T5592] veth1_vlan: entered promiscuous mode [ 74.333700][ T5592] veth0_macvtap: entered promiscuous mode [ 74.370133][ T5592] veth1_macvtap: entered promiscuous mode [ 74.498132][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.549924][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.585822][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.685165][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.716259][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.745604][ T147] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.898930][ T35] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.908894][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.919340][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.946220][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 74.956299][ T5595] veth0_vlan: entered promiscuous mode [ 74.983961][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.067771][ T5595] veth1_vlan: entered promiscuous mode [ 75.094009][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.124240][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.165546][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 75.165562][ T29] audit: type=1400 audit(1787185326.729:152): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.tG2X9B/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.222442][ T5595] veth0_macvtap: entered promiscuous mode [ 75.232722][ T29] audit: type=1400 audit(1787185326.729:153): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.260014][ T29] audit: type=1400 audit(1787185326.729:154): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.tG2X9B/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.278031][ T5594] veth0_vlan: entered promiscuous mode [ 75.300940][ T29] audit: type=1400 audit(1787185326.739:155): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 75.306910][ T5605] Bluetooth: hci2: command tx timeout [ 75.332844][ T29] audit: type=1400 audit(1787185326.759:156): avc: denied { sys_module } for pid=5596 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 75.336728][ T5595] veth1_macvtap: entered promiscuous mode [ 75.357543][ T29] audit: type=1400 audit(1787185326.759:157): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.tG2X9B/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 75.364844][ T5592] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 75.404345][ T5605] Bluetooth: hci1: command tx timeout [ 75.409844][ T5605] Bluetooth: hci0: command tx timeout [ 75.415606][ T5605] Bluetooth: hci4: command tx timeout [ 75.421576][ T5614] Bluetooth: hci3: command tx timeout [ 75.428476][ T5594] veth1_vlan: entered promiscuous mode [ 75.434705][ T29] audit: type=1400 audit(1787185326.759:158): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/root/syzkaller.tG2X9B/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 75.451539][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.464691][ T29] audit: type=1400 audit(1787185326.799:159): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 75.489207][ T29] audit: type=1400 audit(1787185326.799:160): avc: denied { mounton } for pid=5592 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 75.492685][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.518658][ T29] audit: type=1400 audit(1787185326.799:161): avc: denied { mount } for pid=5592 comm="syz-executor" name="/" dev="gadgetfs" ino=7397 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 75.533508][ T5593] veth0_vlan: entered promiscuous mode [ 75.578400][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.596021][ T5593] veth1_vlan: entered promiscuous mode [ 75.652028][ T5787] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.674388][ T57] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.717907][ T5594] veth0_macvtap: entered promiscuous mode [ 75.756979][ T5594] veth1_macvtap: entered promiscuous mode [ 75.782290][ T5593] veth0_macvtap: entered promiscuous mode [ 75.806107][ T5596] veth0_vlan: entered promiscuous mode [ 75.826076][ T5593] veth1_macvtap: entered promiscuous mode [ 75.865713][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.896703][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.917742][ T5596] veth1_vlan: entered promiscuous mode [ 75.926931][ T5791] input: syz1 as /devices/virtual/input/input5 [ 75.930151][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.942118][ T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.952990][ T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.970971][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.024804][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.128431][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.172886][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.173314][ T5596] veth0_macvtap: entered promiscuous mode [ 76.191279][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.252599][ T5596] veth1_macvtap: entered promiscuous mode [ 76.259474][ T5800] binder: 5799:5800 unknown command 0 [ 76.267078][ T5800] binder: 5799:5800 ioctl c0306201 2000000001c0 returned -22 [ 76.356531][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.365667][ T147] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.379255][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.419793][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.433047][ T5803] bridge0: port 3(veth0) entered blocking state [ 76.439953][ T5803] bridge0: port 3(veth0) entered disabled state [ 76.446820][ T5803] veth0: entered allmulticast mode [ 76.455561][ T5803] veth0: entered promiscuous mode [ 76.461959][ T5803] bridge0: port 3(veth0) entered blocking state [ 76.468977][ T5803] bridge0: port 3(veth0) entered forwarding state [ 76.507553][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.509782][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.538141][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.603953][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.629994][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.655219][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.676270][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.887079][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.923289][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.950019][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.050365][ T233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.081228][ T233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.124417][ T3258] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.138843][ T3258] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.167264][ T3258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.176062][ T147] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.189567][ T3258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.199500][ T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.245846][ T57] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.312100][ T5818] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.321698][ T3258] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.347606][ T3258] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.384881][ T5610] Bluetooth: hci2: command tx timeout [ 77.464892][ T5610] Bluetooth: hci3: command tx timeout [ 77.465061][ T5614] Bluetooth: hci4: command tx timeout [ 77.470373][ T5610] Bluetooth: hci0: command tx timeout [ 77.476248][ T5605] Bluetooth: hci1: command tx timeout [ 77.506743][ T3258] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.546458][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.161066][ T5846] netlink: 72 bytes leftover after parsing attributes in process `syz.3.16'. [ 79.245502][ T5849] netlink: 96 bytes leftover after parsing attributes in process `syz.1.17'. [ 79.338558][ T5849] vlan2: entered allmulticast mode [ 79.349937][ T5851] loop4: detected capacity change from 0 to 6 [ 79.351228][ T5849] gretap0: entered allmulticast mode [ 79.372083][ T5851] loop4: [ 79.407474][ T5851] loop4: partition table partially beyond EOD, truncated [ 79.644717][ T5858] input: syz1 as /devices/virtual/input/input6 [ 79.827997][ T5614] Bluetooth: hci2: Ignoring HCI_Connection_Complete for existing connection [ 79.945450][ T859] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 80.045034][ T5869] input: syz1 as /devices/virtual/input/input7 [ 80.093659][ T5602] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 80.115419][ T859] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 80.131366][ T859] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 80.139997][ T859] usb 1-1: config 0 has no interface number 0 [ 80.146686][ T859] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 80.163022][ T859] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.171662][ T859] usb 1-1: Product: syz [ 80.176958][ T859] usb 1-1: Manufacturer: syz [ 80.181799][ T859] usb 1-1: SerialNumber: syz [ 80.210737][ T859] usb 1-1: config 0 descriptor?? [ 80.240299][ T859] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 80.273636][ T5602] usb 2-1: Using ep0 maxpacket: 32 [ 80.282807][ T5602] usb 2-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 80.298323][ T5602] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.312165][ T5602] usb 2-1: config 0 descriptor?? [ 80.329893][ T5602] gspca_main: sunplus-2.14.0 probing 041e:400b [ 80.444094][ T859] usb 1-1: USB disconnect, device number 2 [ 80.467693][ T859] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 80.674589][ T29] kauditd_printk_skb: 74 callbacks suppressed [ 80.674607][ T29] audit: type=1400 audit(1787185332.239:236): avc: denied { create } for pid=5873 comm="syz.3.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 80.733759][ T29] audit: type=1400 audit(1787185332.289:237): avc: denied { read } for pid=5854 comm="syz.1.20" name="video0" dev="devtmpfs" ino=931 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 80.816856][ T5874] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(7) [ 80.823494][ T5874] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 80.877873][ T5874] vhci_hcd vhci_hcd.0: Device attached [ 81.034799][ T29] audit: type=1400 audit(1787185332.579:238): avc: denied { getopt } for pid=5878 comm="syz.4.26" laddr=::ffff:0.0.0.0 lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 81.174249][ T46] usb 40-1: SetAddress Request (2) to port 0 [ 81.192207][ T46] usb 40-1: new SuperSpeed USB device number 2 using vhci_hcd [ 81.435587][ T5602] gspca_sunplus: reg_w_riv err -110 [ 81.537424][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.552341][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.563916][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.576668][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.598686][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.612334][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.623874][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.636923][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.649333][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.661820][ T5886] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 81.910092][ T5785] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 81.917404][ T29] audit: type=1400 audit(1787185333.479:239): avc: denied { write } for pid=5887 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.024968][ T29] audit: type=1400 audit(1787185333.479:240): avc: denied { nlmsg_write } for pid=5887 comm="syz.0.28" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 82.576189][ T5602] sunplus 2-1:0.0: probe with driver sunplus failed with error -110 [ 82.941069][ T5602] usb 2-1: USB disconnect, device number 2 [ 82.996544][ T29] audit: type=1400 audit(1787185334.559:241): avc: denied { write } for pid=5890 comm="syz.2.30" name="mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 83.050435][ T5893] 0x000000000000-0x000000020000 : "" [ 83.105421][ T29] audit: type=1400 audit(1787185334.589:242): avc: denied { open } for pid=5890 comm="syz.2.30" path="/dev/mtd0" dev="devtmpfs" ino=702 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 83.129351][ T5785] usb 4-1: New USB device found, idVendor=1e2d, idProduct=00b7, bcdDevice= 1.00 [ 83.181850][ T5893] ftl_cs: FTL header not found. [ 83.234892][ T5785] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 83.244275][ T5785] usb 4-1: Product: syz [ 83.244487][ T29] audit: type=1400 audit(1787185334.609:243): avc: denied { ioctl } for pid=5890 comm="syz.2.30" path="/dev/mtd0" dev="devtmpfs" ino=702 ioctlcmd=0x1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 83.254908][ T5785] usb 4-1: Manufacturer: syz [ 83.635415][ T29] audit: type=1400 audit(1787185335.129:244): avc: denied { open } for pid=5901 comm="syz.0.33" path="/dev/ptyq4" dev="devtmpfs" ino=123 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.453674][ T24] cfg80211: failed to load regulatory.db [ 84.474582][ T29] audit: type=1400 audit(1787185335.139:245): avc: denied { ioctl } for pid=5901 comm="syz.0.33" path="/dev/ptyq4" dev="devtmpfs" ino=123 ioctlcmd=0x5439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 84.568629][ T5785] qmi_wwan 4-1:1.0: cdc-wdm0: USB WDM device [ 84.636600][ T5785] wwan wwan0: port wwan0qmi0 attached [ 84.707303][ T5785] qmi_wwan 4-1:1.0 wwan0: register 'qmi_wwan' at usb-dummy_hcd.3-1, WWAN/QMI device, de:3a:e2:f5:aa:a1 [ 84.886910][ T5907] syz.2.35 uses obsolete (PF_INET,SOCK_PACKET) [ 84.921226][ T5900] netlink: 104 bytes leftover after parsing attributes in process `syz.4.32'. [ 85.406090][ T5916] ======================================================= [ 85.406090][ T5916] WARNING: The mand mount option has been deprecated and [ 85.406090][ T5916] and is ignored by this kernel. Remove the mand [ 85.406090][ T5916] option from the mount to silence this warning. [ 85.406090][ T5916] ======================================================= [ 86.182804][ T5711] usb 4-1: USB disconnect, device number 2 [ 86.191892][ T5875] vhci_hcd: connection reset by peer [ 86.203891][ T5839] vhci_hcd vhci_hcd.3: stop threads [ 86.215209][ T5839] vhci_hcd vhci_hcd.3: release socket [ 86.230263][ T5711] qmi_wwan 4-1:1.0 wwan0: unregister 'qmi_wwan' usb-dummy_hcd.3-1, WWAN/QMI device [ 86.233228][ T5839] vhci_hcd vhci_hcd.3: disconnect device [ 86.263797][ T46] usb 40-1: device descriptor read/8, error -110 [ 86.285447][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 86.285464][ T29] audit: type=1400 audit(1787185337.849:254): avc: denied { create } for pid=5926 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.341407][ T29] audit: type=1400 audit(1787185337.889:255): avc: denied { bind } for pid=5926 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.412913][ T29] audit: type=1400 audit(1787185337.899:256): avc: denied { listen } for pid=5926 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.462181][ T29] audit: type=1400 audit(1787185337.899:257): avc: denied { write } for pid=5926 comm="syz.4.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 86.490161][ T29] audit: type=1400 audit(1787185338.049:258): avc: denied { ioctl } for pid=5926 comm="syz.4.39" path="socket:[8924]" dev="sockfs" ino=8924 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 86.509951][ T5614] Bluetooth: hci2: command 0x0406 tx timeout [ 86.632971][ T29] audit: type=1400 audit(1787185338.189:259): avc: denied { unmount } for pid=5592 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 86.675556][ T46] usb usb40-port1: attempt power cycle [ 86.682411][ C0] Unknown status report in ack skb [ 86.698172][ T5711] wwan wwan0: port wwan0qmi0 disconnected [ 86.865804][ T5949] netlink: 20 bytes leftover after parsing attributes in process `syz.0.34'. [ 86.965634][ T29] audit: type=1400 audit(1787185338.309:260): avc: denied { write } for pid=5940 comm="syz.0.34" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 87.108715][ T29] audit: type=1400 audit(1787185338.529:261): avc: denied { write } for pid=5922 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.134422][ T29] audit: type=1400 audit(1787185338.659:262): avc: denied { read } for pid=5942 comm="syz.3.41" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 87.221219][ T5957] netlink: 16 bytes leftover after parsing attributes in process `syz.1.43'. [ 87.344498][ T46] usb usb40-port1: unable to enumerate USB device [ 87.375415][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 87.376193][ T29] audit: type=1400 audit(1787185338.929:263): avc: denied { write } for pid=5958 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 87.396632][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.44'. [ 87.504638][ T5711] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 87.691202][ T5602] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 88.105707][ T5711] usb 4-1: Using ep0 maxpacket: 32 [ 88.134038][ T10] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 88.135789][ T5711] usb 4-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7 [ 88.143919][ T5785] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 88.173079][ T5711] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.243851][ T5602] usb 2-1: Using ep0 maxpacket: 16 [ 88.245368][ T5711] usb 4-1: config 0 descriptor?? [ 88.262297][ T5602] usb 2-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 88.284123][ T5602] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.295439][ T5711] gspca_main: sunplus-2.14.0 probing 041e:400b [ 88.305254][ T5602] usb 2-1: Product: syz [ 88.317657][ T5602] usb 2-1: Manufacturer: syz [ 88.329596][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 88.335253][ T5785] usb 5-1: device descriptor read/64, error -71 [ 88.342321][ T5602] usb 2-1: SerialNumber: syz [ 88.360101][ T10] usb 3-1: New USB device found, idVendor=055f, idProduct=a800, bcdDevice= 1.00 [ 88.388154][ T5602] usb 2-1: config 0 descriptor?? [ 88.398496][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 88.453392][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 88.470475][ T10] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 88.480728][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.504970][ T5970] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 88.517352][ T5970] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 88.525274][ T5970] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 88.539030][ T10] mdc800 3-1:1.0: Found Mustek MDC800 on USB. [ 88.574367][ T5785] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 88.733928][ T5785] usb 5-1: device descriptor read/64, error -71 [ 88.780334][ T5711] gspca_sunplus: reg_w_riv err -71 [ 88.793719][ T5711] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 88.806064][ T5970] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.48'. [ 88.813520][ T5711] usb 4-1: USB disconnect, device number 3 [ 88.844992][ T5785] usb usb5-port1: attempt power cycle [ 88.860439][ T5602] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 88.879215][ T5602] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 88.889546][ T5602] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 88.899932][ T5602] usb 2-1: media controller created [ 88.914694][ T5602] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 89.073703][ T4960] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 89.124639][ T5602] zl10353_read_register: readreg error (reg=127, ret==0) [ 89.131948][ T5602] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 89.140388][ T5602] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 89.195333][ T5785] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 89.225216][ T5785] usb 5-1: device descriptor read/8, error -71 [ 89.232357][ T4960] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 89.242724][ T4960] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 89.250948][ T4960] usb 1-1: config 0 has no interface number 0 [ 89.257160][ T4960] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 89.269972][ T4960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.278052][ T4960] usb 1-1: Product: syz [ 89.282228][ T4960] usb 1-1: Manufacturer: syz [ 89.286872][ T4960] usb 1-1: SerialNumber: syz [ 89.293980][ T4960] usb 1-1: config 0 descriptor?? [ 89.306682][ T4960] yurex 1-1:0.50: USB YUREX device now attached to Yurex #1 [ 89.463746][ T5785] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 89.491405][ T5785] usb 5-1: device descriptor read/8, error -71 [ 89.509000][ T5992] [ 89.511390][ T5992] ====================================================== [ 89.518420][ T5992] WARNING: possible circular locking dependency detected [ 89.525438][ T5992] syzkaller #0 Not tainted [ 89.529833][ T5992] ------------------------------------------------------ [ 89.536832][ T5992] syz.0.52/5992 is trying to acquire lock: [ 89.542629][ T5992] ffff88802ae3da18 (&mdc800->io_lock){+.+.}-{4:4}, at: mdc800_device_open+0x22/0x450 [ 89.552110][ T5992] [ 89.552110][ T5992] but task is already holding lock: [ 89.559464][ T5992] ffffffff90260968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 89.567828][ T5992] [ 89.567828][ T5992] which lock already depends on the new lock. [ 89.567828][ T5992] [ 89.578226][ T5992] [ 89.578226][ T5992] the existing dependency chain (in reverse order) is: [ 89.587240][ T5992] [ 89.587240][ T5992] -> #1 (minor_rwsem#2){++++}-{4:4}: [ 89.594737][ T5992] lock_acquire+0x1b9/0x370 [ 89.599784][ T5992] down_write+0x8b/0x1f0 [ 89.604543][ T5992] usb_register_dev+0x11d/0x570 [ 89.609916][ T5992] mdc800_usb_probe+0x382/0x6d0 [ 89.615307][ T5992] usb_probe_interface+0x303/0x8f0 [ 89.620925][ T5992] really_probe+0x241/0xa60 [ 89.625945][ T5992] __driver_probe_device+0x20e/0x450 [ 89.631758][ T5992] driver_probe_device+0x4a/0x140 [ 89.637297][ T5992] __device_attach_driver+0x1df/0x320 [ 89.643210][ T5992] bus_for_each_drv+0x159/0x1e0 [ 89.648593][ T5992] __device_attach+0x1e4/0x4d0 [ 89.653884][ T5992] device_initial_probe+0xaf/0xd0 [ 89.659446][ T5992] bus_probe_device+0x64/0x160 [ 89.664734][ T5992] device_add+0x121d/0x1970 [ 89.669740][ T5992] usb_set_configuration+0xd97/0x1c60 [ 89.673683][ T4960] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 89.675621][ T5992] usb_generic_driver_probe+0xa1/0xe0 [ 89.675653][ T5992] usb_probe_device+0xef/0x400 [ 89.694273][ T5992] really_probe+0x241/0xa60 [ 89.699284][ T5992] __driver_probe_device+0x20e/0x450 [ 89.705115][ T5992] driver_probe_device+0x4a/0x140 [ 89.710697][ T5992] __device_attach_driver+0x1df/0x320 [ 89.716608][ T5992] bus_for_each_drv+0x159/0x1e0 [ 89.721986][ T5992] __device_attach+0x1e4/0x4d0 [ 89.727245][ T5992] device_initial_probe+0xaf/0xd0 [ 89.732776][ T5992] bus_probe_device+0x64/0x160 [ 89.738063][ T5992] device_add+0x121d/0x1970 [ 89.743095][ T5992] usb_new_device.part.0+0xcc2/0x1686 [ 89.749013][ T5992] hub_event.cold+0x1e3/0xe90 [ 89.754212][ T5992] process_one_work+0xa23/0x1940 [ 89.759699][ T5992] worker_thread+0x5ef/0xe50 [ 89.764810][ T5992] kthread+0x373/0x450 [ 89.769383][ T5992] ret_from_fork+0x730/0xd60 [ 89.774471][ T5992] ret_from_fork_asm+0x1a/0x30 [ 89.779735][ T5992] [ 89.779735][ T5992] -> #0 (&mdc800->io_lock){+.+.}-{4:4}: [ 89.787449][ T5992] check_prev_add+0xeb/0xe60 [ 89.792547][ T5992] __lock_acquire+0x1492/0x1ec0 [ 89.797912][ T5992] lock_acquire+0x1b9/0x370 [ 89.802934][ T5992] __mutex_lock+0x1a4/0x1bc0 [ 89.808026][ T5992] mdc800_device_open+0x22/0x450 [ 89.813479][ T5992] usb_open+0x189/0x220 [ 89.813655][ T4960] usb 4-1: device descriptor read/64, error -71 [ 89.818153][ T5992] chrdev_open+0x234/0x6a0 [ 89.818182][ T5992] do_dentry_open+0x6ab/0x14d0 [ 89.818198][ T5992] vfs_open+0x82/0x3f0 [ 89.839156][ T5992] path_openat+0x19fa/0x2440 [ 89.844266][ T5992] do_file_open+0x20e/0x430 [ 89.849278][ T5992] do_sys_openat2+0x10f/0x1e0 [ 89.854458][ T5992] __x64_sys_openat+0x12d/0x210 [ 89.859833][ T5992] do_syscall_64+0x123/0x790 [ 89.864934][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.871337][ T5992] [ 89.871337][ T5992] other info that might help us debug this: [ 89.871337][ T5992] [ 89.881554][ T5992] Possible unsafe locking scenario: [ 89.881554][ T5992] [ 89.889001][ T5992] CPU0 CPU1 [ 89.894344][ T5992] ---- ---- [ 89.899685][ T5992] rlock(minor_rwsem#2); [ 89.904013][ T5992] lock(&mdc800->io_lock); [ 89.911037][ T5992] lock(minor_rwsem#2); [ 89.917797][ T5992] lock(&mdc800->io_lock); [ 89.922280][ T5992] [ 89.922280][ T5992] *** DEADLOCK *** [ 89.922280][ T5992] [ 89.930407][ T5992] locks held by syz.0.52/5992: 1, last CPU#0: [ 89.936464][ T5992] #0: ffffffff90260968 (minor_rwsem#2){++++}-{4:4}, at: usb_open+0x23/0x220 [ 89.945260][ T5992] [ 89.945260][ T5992] stack backtrace: [ 89.951151][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.52 Not tainted syzkaller #0 PREEMPT(full) [ 89.951177][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 89.951186][ T5992] Call Trace: [ 89.951191][ T5992] [ 89.951197][ T5992] dump_stack_lvl+0x100/0x190 [ 89.951217][ T5992] print_circular_bug.cold+0x178/0x1be [ 89.951239][ T5992] check_noncircular+0x146/0x160 [ 89.951263][ T5992] ? path_openat+0x19fa/0x2440 [ 89.951291][ T5992] check_prev_add+0xeb/0xe60 [ 89.951315][ T5992] ? __lock_acquire+0x4c5/0x1ec0 [ 89.951336][ T5992] __lock_acquire+0x1492/0x1ec0 [ 89.951355][ T5992] lock_acquire+0x1b9/0x370 [ 89.951370][ T5992] ? mdc800_device_open+0x22/0x450 [ 89.951392][ T5992] ? __pfx___might_resched+0x10/0x10 [ 89.951418][ T5992] __mutex_lock+0x1a4/0x1bc0 [ 89.951438][ T5992] ? mdc800_device_open+0x22/0x450 [ 89.951465][ T5992] ? mdc800_device_open+0x22/0x450 [ 89.951487][ T5992] ? __pfx___mutex_lock+0x10/0x10 [ 89.951499][ T5992] ? __pfx___might_resched+0x10/0x10 [ 89.951516][ T5992] ? down_read+0x13b/0x4c0 [ 89.951528][ T5992] ? __pfx_down_read+0x10/0x10 [ 89.951544][ T5992] ? __pfx_mdc800_device_open+0x10/0x10 [ 89.951574][ T5992] ? mdc800_device_open+0x22/0x450 [ 89.951602][ T5992] mdc800_device_open+0x22/0x450 [ 89.951630][ T5992] ? __pfx_mdc800_device_open+0x10/0x10 [ 89.951659][ T5992] usb_open+0x189/0x220 [ 89.951684][ T5992] ? __pfx_usb_open+0x10/0x10 [ 89.951706][ T5992] chrdev_open+0x234/0x6a0 [ 89.951731][ T5992] ? __pfx_chrdev_open+0x10/0x10 [ 89.951755][ T5992] ? fsnotify_open_perm_and_set_mode+0x17a/0xa80 [ 89.951779][ T5992] do_dentry_open+0x6ab/0x14d0 [ 89.951792][ T5992] ? __pfx_chrdev_open+0x10/0x10 [ 89.951809][ T5992] vfs_open+0x82/0x3f0 [ 89.951829][ T5992] path_openat+0x19fa/0x2440 [ 89.951855][ T5992] ? __pfx_path_openat+0x10/0x10 [ 89.951882][ T5992] do_file_open+0x20e/0x430 [ 89.951907][ T5992] ? __pfx_do_file_open+0x10/0x10 [ 89.951927][ T5992] ? _raw_spin_unlock+0x28/0x50 [ 89.951943][ T5992] ? alloc_fd+0x471/0x7a0 [ 89.951962][ T5992] do_sys_openat2+0x10f/0x1e0 [ 89.951984][ T5992] ? __pfx_do_sys_openat2+0x10/0x10 [ 89.952011][ T5992] ? fput+0x7c/0x100 [ 89.952036][ T5992] __x64_sys_openat+0x12d/0x210 [ 89.952059][ T5992] ? __pfx___x64_sys_openat+0x10/0x10 [ 89.952078][ T5992] do_syscall_64+0x123/0x790 [ 89.952090][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 89.952103][ T5992] RIP: 0033:0x7f6630f5e90e [ 89.952114][ T5992] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 89.952136][ T5992] RSP: 002b:00007f6631f49b28 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 89.952155][ T5992] RAX: ffffffffffffffda RBX: 00007f6631f4a6c0 RCX: 00007f6630f5e90e [ 89.952168][ T5992] RDX: 0000000000000002 RSI: 00007f6631f49c00 RDI: ffffffffffffff9c [ 89.952180][ T5992] RBP: 00007f6631035024 R08: 0000000000000000 R09: 0000000000000000 [ 89.952191][ T5992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.952200][ T5992] R13: 00007f6631226038 R14: 00007f6631225fa0 R15: 00007ffee18f7128 [ 89.952210][ T5992] [ 89.989490][ T5711] usb 2-1: USB disconnect, device number 3 [ 89.996914][ T5785] usb usb5-port1: unable to enumerate USB device [ 90.032581][ T5992] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 90.282086][ T5992] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 90.283816][ T4960] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 90.305017][ T5711] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 90.437076][ T9] usb 1-1: USB disconnect, device number 3 [ 90.444597][ T9] yurex 1-1:0.50: USB YUREX #1 now disconnected [ 90.463670][ T4960] usb 4-1: device descriptor read/64, error -71 [ 90.573899][ T4960] usb usb4-port1: attempt power cycle [ 90.913657][ T4960] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 90.933997][ T4960] usb 4-1: device descriptor read/8, error -71 [ 91.079194][ T5711] usb 3-1: USB disconnect, device number 2 [ 91.088588][ T5711] mdc800 3-1:1.0: Mustek MDC800 disconnected from USB. [ 91.203688][ T4960] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 91.224261][ T4960] usb 4-1: device descriptor read/8, error -71 [ 91.333784][ T4960] usb usb4-port1: unable to enumerate USB device