last executing test programs: 9.900158247s ago: executing program 3 (id=4): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x2, 0xd, 0x0, 0x0, 0x2, 0x0, 0x70bd2c}, 0x10}}, 0x0) 9.697751461s ago: executing program 3 (id=6): r0 = socket(0x28, 0x5, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000002600), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000027c0)={0x0, 0x0, &(0x7f0000002780)={&(0x7f0000000000)={0x48, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40d6}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r0}}]}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x120}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000004}, 0x4000) 9.218686078s ago: executing program 3 (id=7): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000100)={0x1, &(0x7f0000000040)=[{0x16}]}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) r5 = syz_io_uring_setup(0x10d, &(0x7f0000000540)={0x0, 0xd4bb, 0x0, 0xfffffffd}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) sendmsg$inet(r4, &(0x7f0000001640)={0x0, 0x0, 0x0}, 0x20000090) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x80800}) listen(r4, 0x5) io_uring_enter(r5, 0x3517, 0xc2de, 0x9, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00'}) sendmsg$nl_route(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2004d808}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000040)={0x24, r1, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x0, 0x3f, 0xc}, @NL80211_ATTR_WIPHY_RETRY_SHORT={0x5, 0x3d, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000000140)=""/20, 0x14) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r9 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r9, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) sendmmsg$inet(r9, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e25, @multicast2}, 0x10, 0x0}}], 0x1, 0x2000c044) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0x8, &(0x7f00000000c0), 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@random="9b4307000001", @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xfffffffe, @local}, @echo_reply={0xe0, 0x0, 0x0, 0xfffd}}}}}, 0x0) 8.323558009s ago: executing program 0 (id=1): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050890) 8.106456016s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000240)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 7.469050526s ago: executing program 4 (id=5): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) openat$vcsu(0xffffffffffffff9c, 0x0, 0x341580, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback, 0x52}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000080)={r1, 0x0, 0x9, 0x5}, 0x10) 7.415594348s ago: executing program 3 (id=10): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) semget$private(0x0, 0x4000000009, 0x208) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f00000000c0)={{0x3b, @initdev={0xac, 0x1e, 0x2, 0x0}, 0x4e21, 0x2, 'lblcr\x00', 0x0, 0x81, 0x3a}, {@rand_addr=0x64010101, 0x4e25, 0x3, 0x73e58014, 0xfffffff8, 0x12d5c}}, 0x44) socket$kcm(0xa, 0x2, 0x0) bind$802154_dgram(r0, 0x0, 0x0) madvise(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x64) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x1, 0x4, 0x10, 0x0, @vifc_lcl_addr=@multicast2, @remote}, 0x10) 7.31338503s ago: executing program 0 (id=11): socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b36"], 0x0) close(0x3) syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x88c02) r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r0, 0x47f6, 0x0, 0x4, 0x0, 0x0) 6.696508322s ago: executing program 4 (id=12): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000200)="46d84bc39a86") r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 6.484491872s ago: executing program 1 (id=14): bpf$MAP_CREATE(0x1900000000000000, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt(0xffffffffffffffff, 0x200000000114, 0x2718, 0x0, &(0x7f0000000400)) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f00000003c0), 0x1, 0x80000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000440)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r3, 0xc05064a7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)=[0x0], &(0x7f0000000540), 0x0, 0x1, 0x0, 0x0, r4}) ioctl$DRM_IOCTL_MODE_SETPROPERTY(r3, 0xc01064ab, &(0x7f0000000000)={0x4ff1, r5, r4}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) unshare(0x64000600) 5.443497277s ago: executing program 1 (id=15): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000080)={0x0, 0x0}) 5.108044017s ago: executing program 1 (id=16): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x14}}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 4.596062227s ago: executing program 4 (id=17): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x9b}, [], {0x95, 0x0, 0x5a5}}, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r3, &(0x7f0000000a80)={0x2020}, 0x2020) 4.571206678s ago: executing program 0 (id=18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) 3.747152977s ago: executing program 2 (id=19): syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), 0xffffffffffffffff) r0 = open(0x0, 0x0, 0x0) ioctl$KVM_TRANSLATE(r0, 0xc018ae85, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mbind(&(0x7f0000a45000/0x1000)=nil, 0x1000, 0x2, 0x0, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000044000701565e700000000000017c00000c0004"], 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 3.598513412s ago: executing program 4 (id=20): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000090000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSETELEM(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x3c, 0xd, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x3}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000805}, 0x8000) 3.213578561s ago: executing program 4 (id=21): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0xcf, 0x8b, 0xed, 0x20, 0xfd9, 0x25, 0x2940, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xca, 0xfb, 0x1a}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000380)=ANY=[@ANYBLOB="201101"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r2, 0x0) ioctl$I2C_SMBUS(r1, 0x720, &(0x7f0000000180)={0x1, 0xa, 0x0, 0x0}) 2.803439148s ago: executing program 0 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, 0x0) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000600), 0xc) mount$binderfs(0x0, 0x0, 0x0, 0x4000, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) inotify_add_watch(0xffffffffffffffff, &(0x7f0000000240)='./file0\x00', 0xc0) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0x1ac81b, 0x0, 0x0, 0x0, 0x1000000}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8, 0x0, 0x0, 0x1010000}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x0, 0x300}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 2.795262466s ago: executing program 1 (id=23): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000180)=[{&(0x7f00000004c0)="99", 0x1}], 0x1}, 0x4048043) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x3, 0xfffc, 0xe652, 0x2, 0x14, 0x8, 0xff}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e21, @empty}}, 0x5, 0x1, 0xf06, 0x0, 0xac, 0x81, 0x5}, 0x9c) 2.180411597s ago: executing program 2 (id=24): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x80082, 0x0) write$vga_arbiter(r0, &(0x7f0000000080)=@other={'decodes', ' ', 'none'}, 0xd) 1.857658879s ago: executing program 2 (id=25): r0 = socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=@deltfilter={0x24, 0x2d, 0x200, 0x70bd26, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2, 0x10}, {0x4, 0xe}, {0xe, 0x9}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x14000000) r1 = socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) write$vga_arbiter(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$pppoe(0x18, 0x1, 0x0) syz_emit_vhci(&(0x7f0000001080)=ANY=[@ANYBLOB="04040a00e0ffffff0f77042482"], 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fsetxattr$system_posix_acl(r5, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x0, 0x3) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000180)=ANY=[@ANYRESOCT=0x0, @ANYBLOB="06000000910368368bfa74e9d4f05c9bb3e337ab46403c0740ecafcf1aaaf85f4329335894e1919d6f711bfb09fc5047ccaf189729c343ed453a3b17c854f8cdb6dc760000c5bc97c87ddfac58023c1e4976c85a6163a3c2f934ca68"]) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) listen(r0, 0x7ff) socket$vsock_stream(0x28, 0x1, 0x0) 1.655396103s ago: executing program 1 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000"], 0x80}}, 0x0) syz_emit_ethernet(0x52, &(0x7f00000002c0)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@val={0x88a8, 0x5, 0x1, 0x2}, {0x8864, 0x6, 0x0, 0x4}}, {@ipv4={0x800, @tipc={{0x5, 0x4, 0x2, 0x2f, 0x3c, 0x63, 0x0, 0x49, 0x6, 0x0, @empty, @broadcast}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x1, 0x4e22, 0x4e22, 0x4}}}}}}, 0x0) 1.587578899s ago: executing program 3 (id=27): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) r2 = syz_open_dev$vbi(&(0x7f00000028c0), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @bt={0xa00, 0x640, 0x1, 0x1, 0xd59f83, 0x7, 0x42, 0x9d3, 0x3, 0x7008, 0x2800, 0x2800, 0x2, 0xba3, 0x9, 0x1b, {0x8, 0xffffffff}, 0xd0, 0x9}}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000040)={0x0, 0xffff}, 0x0) setsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) kexec_load(0x0, 0x1, &(0x7f00000002c0)=[{0x0, 0x0, 0xff600000, 0x1000000}], 0x0) 1.233190596s ago: executing program 1 (id=28): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x800448d3, &(0x7f0000000200)="46d84bc39a86") r1 = socket$kcm(0x2, 0x1, 0x84) setsockopt$sock_attach_bpf(r1, 0x84, 0x8, &(0x7f0000000000), 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) r4 = socket(0x10, 0x3, 0x0) write(r4, 0x0, 0x0) recvmmsg(r4, &(0x7f00000021c0), 0x5b, 0x40, 0x0) 754.764185ms ago: executing program 4 (id=29): socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet(0x2, 0x1, 0x100) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x14, 0x30, 0x1}, 0x14}, 0x1, 0x0, 0x0, 0x804}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) tkill(0x0, 0xb) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r4, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000400)="b9ff03076804268c989e14f088a8", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x5}, 0x50) 655.602828ms ago: executing program 2 (id=30): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 471.798322ms ago: executing program 2 (id=31): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000005c0)={0x34, &(0x7f00000003c0)={0x20, 0x30}, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x2cf7}, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000b40)={0x2c, &(0x7f0000000a00)=ANY=[@ANYBLOB="401b0001"], 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 0 (id=32): r0 = socket$vsock_stream(0x28, 0x1, 0x0) listen(r0, 0x7ff) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) symlink(&(0x7f0000000240)='./file0/file0\x00', 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0x498, 0x3400, 0x1, 0x164}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) io_uring_enter(r4, 0x847ba, 0x0, 0xe, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.189' (ED25519) to the list of known hosts. [ 61.417018][ T30] audit: type=1400 audit(1757904285.527:62): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 61.420696][ T5833] cgroup: Unknown subsys name 'net' [ 61.439784][ T30] audit: type=1400 audit(1757904285.527:63): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.469479][ T30] audit: type=1400 audit(1757904285.577:64): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.584297][ T5833] cgroup: Unknown subsys name 'cpuset' [ 61.591710][ T5833] cgroup: Unknown subsys name 'rlimit' [ 61.719393][ T30] audit: type=1400 audit(1757904285.827:65): avc: denied { setattr } for pid=5833 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.751461][ T30] audit: type=1400 audit(1757904285.827:66): avc: denied { create } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.776997][ T30] audit: type=1400 audit(1757904285.827:67): avc: denied { write } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.797524][ T30] audit: type=1400 audit(1757904285.827:68): avc: denied { read } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.818066][ T30] audit: type=1400 audit(1757904285.837:69): avc: denied { mounton } for pid=5833 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 61.840416][ T5835] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.844488][ T30] audit: type=1400 audit(1757904285.837:70): avc: denied { mount } for pid=5833 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 61.874819][ T30] audit: type=1400 audit(1757904285.887:71): avc: denied { read } for pid=5515 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 62.826751][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 66.811937][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 66.811951][ T30] audit: type=1400 audit(1757904290.917:78): avc: denied { create } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.847562][ T30] audit: type=1400 audit(1757904290.917:79): avc: denied { read write } for pid=5843 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.878791][ T30] audit: type=1400 audit(1757904290.917:80): avc: denied { open } for pid=5843 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 66.903866][ T30] audit: type=1400 audit(1757904290.987:81): avc: denied { ioctl } for pid=5843 comm="syz-executor" path="socket:[4889]" dev="sockfs" ino=4889 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 66.983424][ T5860] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 66.984982][ T5861] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.991208][ T5860] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.006488][ T5860] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.012304][ T5861] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.014021][ T5860] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.027823][ T5861] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.028352][ T5860] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.041204][ T5862] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.042764][ T5860] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.050332][ T5862] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.056395][ T5860] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.064189][ T5862] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.077354][ T5861] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 67.077746][ T5860] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.086236][ T5862] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.091621][ T5860] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.106037][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 67.109691][ T30] audit: type=1400 audit(1757904291.207:82): avc: denied { read } for pid=5845 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.135147][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.144260][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 67.153296][ T30] audit: type=1400 audit(1757904291.217:83): avc: denied { open } for pid=5845 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 67.180770][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.182182][ T5863] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.188123][ T30] audit: type=1400 audit(1757904291.217:84): avc: denied { mounton } for pid=5845 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 67.217057][ T5863] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 67.217308][ T5864] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.245604][ T5863] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 67.442613][ T30] audit: type=1400 audit(1757904291.557:85): avc: denied { module_request } for pid=5845 comm="syz-executor" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 67.563669][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 67.583449][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 67.641000][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 67.756329][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.763626][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.770898][ T5844] bridge_slave_0: entered allmulticast mode [ 67.778649][ T5844] bridge_slave_0: entered promiscuous mode [ 67.820462][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.827758][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.835194][ T5844] bridge_slave_1: entered allmulticast mode [ 67.841822][ T5844] bridge_slave_1: entered promiscuous mode [ 67.874357][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.881445][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.888675][ T5846] bridge_slave_0: entered allmulticast mode [ 67.896216][ T5846] bridge_slave_0: entered promiscuous mode [ 67.905088][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.912662][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.919756][ T5845] bridge_slave_0: entered allmulticast mode [ 67.926493][ T5845] bridge_slave_0: entered promiscuous mode [ 67.980179][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 67.989440][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.997219][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.005977][ T5846] bridge_slave_1: entered allmulticast mode [ 68.013131][ T5846] bridge_slave_1: entered promiscuous mode [ 68.019409][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.026568][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.033790][ T5845] bridge_slave_1: entered allmulticast mode [ 68.040417][ T5845] bridge_slave_1: entered promiscuous mode [ 68.053672][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 68.064450][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.125869][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.137963][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.155134][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 68.165532][ T5844] team0: Port device team_slave_0 added [ 68.174146][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.199532][ T5844] team0: Port device team_slave_1 added [ 68.207071][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.264425][ T5845] team0: Port device team_slave_0 added [ 68.271300][ T5846] team0: Port device team_slave_0 added [ 68.292371][ T5845] team0: Port device team_slave_1 added [ 68.299150][ T5846] team0: Port device team_slave_1 added [ 68.325716][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.332815][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.358899][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.397018][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.403983][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.430347][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.450047][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.457068][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.483508][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.495667][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.502638][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.528527][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.539405][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.546923][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.554095][ T5850] bridge_slave_0: entered allmulticast mode [ 68.561010][ T5850] bridge_slave_0: entered promiscuous mode [ 68.585768][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.592756][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.618873][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.635117][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.642256][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.649334][ T5850] bridge_slave_1: entered allmulticast mode [ 68.656407][ T5850] bridge_slave_1: entered promiscuous mode [ 68.679290][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.686715][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.694012][ T5843] bridge_slave_0: entered allmulticast mode [ 68.700621][ T5843] bridge_slave_0: entered promiscuous mode [ 68.708533][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.715695][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.722893][ T5843] bridge_slave_1: entered allmulticast mode [ 68.729954][ T5843] bridge_slave_1: entered promiscuous mode [ 68.736723][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.743675][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.769701][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.796764][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.834963][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.853903][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.898212][ T5844] hsr_slave_0: entered promiscuous mode [ 68.904874][ T5844] hsr_slave_1: entered promiscuous mode [ 68.913265][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.933157][ T5846] hsr_slave_0: entered promiscuous mode [ 68.939165][ T5846] hsr_slave_1: entered promiscuous mode [ 68.945084][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 68.950834][ T5846] Cannot create hsr debugfs directory [ 68.988542][ T5845] hsr_slave_0: entered promiscuous mode [ 68.995140][ T5845] hsr_slave_1: entered promiscuous mode [ 69.000971][ T5845] debugfs: 'hsr0' already exists in 'hsr' [ 69.006791][ T5845] Cannot create hsr debugfs directory [ 69.025356][ T5850] team0: Port device team_slave_0 added [ 69.056248][ T5850] team0: Port device team_slave_1 added [ 69.070589][ T5843] team0: Port device team_slave_0 added [ 69.078681][ T5843] team0: Port device team_slave_1 added [ 69.144297][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.151247][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.177923][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.178185][ T5863] Bluetooth: hci2: command tx timeout [ 69.192984][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.200924][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.227555][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.242192][ T5859] Bluetooth: hci0: command tx timeout [ 69.247925][ T5863] Bluetooth: hci1: command tx timeout [ 69.252866][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 69.260285][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.286792][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.317717][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.325019][ T5859] Bluetooth: hci4: command tx timeout [ 69.325017][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.325040][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.342507][ T5863] Bluetooth: hci3: command tx timeout [ 69.424723][ T5843] hsr_slave_0: entered promiscuous mode [ 69.430719][ T5843] hsr_slave_1: entered promiscuous mode [ 69.436785][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 69.443607][ T5843] Cannot create hsr debugfs directory [ 69.519510][ T5850] hsr_slave_0: entered promiscuous mode [ 69.525713][ T5850] hsr_slave_1: entered promiscuous mode [ 69.531545][ T5850] debugfs: 'hsr0' already exists in 'hsr' [ 69.537308][ T5850] Cannot create hsr debugfs directory [ 69.735922][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.759807][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.771308][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.782959][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.863295][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.878462][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.889155][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.899508][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.958251][ T5846] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 69.968344][ T5846] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 69.980565][ T5846] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 69.989734][ T5846] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 70.041499][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.087613][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.103823][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.110600][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.121193][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.131006][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.145160][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.152488][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.220762][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.227891][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.280838][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 70.290340][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.311276][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.338085][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.356617][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.409345][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.431439][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.441505][ T30] audit: type=1400 audit(1757904294.547:86): avc: denied { sys_module } for pid=5844 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.476872][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.499712][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.506835][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.539453][ T4269] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.546615][ T4269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.560159][ T4269] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.567314][ T4269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.596558][ T718] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.603675][ T718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.623273][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.670198][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.690648][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.720310][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.741702][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.748832][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.758574][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.765971][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.819379][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.864936][ T2898] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.872098][ T2898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.893748][ T5844] veth0_vlan: entered promiscuous mode [ 70.916401][ T2898] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.923549][ T2898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.978922][ T5844] veth1_vlan: entered promiscuous mode [ 71.041187][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.078837][ T5844] veth0_macvtap: entered promiscuous mode [ 71.134367][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.150736][ T5844] veth1_macvtap: entered promiscuous mode [ 71.168414][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.175257][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.197681][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.243255][ T5863] Bluetooth: hci2: command tx timeout [ 71.251696][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.290441][ T5845] veth0_vlan: entered promiscuous mode [ 71.313541][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.335548][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.342003][ T5863] Bluetooth: hci1: command tx timeout [ 71.344413][ T5859] Bluetooth: hci0: command tx timeout [ 71.378925][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.408524][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.417318][ T5859] Bluetooth: hci3: command tx timeout [ 71.417352][ T5859] Bluetooth: hci4: command tx timeout [ 71.436704][ T5845] veth1_vlan: entered promiscuous mode [ 71.447616][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.550219][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.566515][ T5845] veth0_macvtap: entered promiscuous mode [ 71.579720][ T5845] veth1_macvtap: entered promiscuous mode [ 71.616475][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.628443][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.632903][ T5850] veth0_vlan: entered promiscuous mode [ 71.680742][ T5850] veth1_vlan: entered promiscuous mode [ 71.696833][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.700453][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.705003][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.735589][ T30] audit: type=1400 audit(1757904295.847:87): avc: denied { mounton } for pid=5844 comm="syz-executor" path="/root/syzkaller.Nx8BMH/syz-tmp" dev="sda1" ino=2041 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 71.755471][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.786712][ T5850] veth0_macvtap: entered promiscuous mode [ 71.798125][ T4269] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.815117][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.823821][ T5850] veth1_macvtap: entered promiscuous mode [ 71.848154][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.859067][ T5843] veth0_vlan: entered promiscuous mode [ 71.882268][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 71.882283][ T30] audit: type=1400 audit(1757904295.977:99): avc: denied { read write } for pid=5844 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.919781][ T5846] veth0_vlan: entered promiscuous mode [ 71.931396][ T30] audit: type=1400 audit(1757904295.977:100): avc: denied { open } for pid=5844 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.974425][ T30] audit: type=1400 audit(1757904295.977:101): avc: denied { ioctl } for pid=5844 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 71.981695][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.006929][ T30] audit: type=1400 audit(1757904296.117:102): avc: denied { create } for pid=5963 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.011675][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.033256][ T30] audit: type=1400 audit(1757904296.147:103): avc: denied { write } for pid=5963 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 72.040124][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.073747][ T5843] veth1_vlan: entered promiscuous mode [ 72.097012][ T5846] veth1_vlan: entered promiscuous mode [ 72.113936][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.142391][ T4269] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.151278][ T49] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.152184][ T30] audit: type=1400 audit(1757904296.237:104): avc: denied { create } for pid=5965 comm="syz.3.6" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 72.189790][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.198875][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.239289][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.245834][ T5846] veth0_macvtap: entered promiscuous mode [ 72.252926][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.259276][ T5843] veth0_macvtap: entered promiscuous mode [ 72.276378][ T5846] veth1_macvtap: entered promiscuous mode [ 72.284711][ T5843] veth1_macvtap: entered promiscuous mode [ 72.307522][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.324512][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.336898][ T4269] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.351835][ T4269] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.361467][ T4269] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.376091][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.397342][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.402124][ T5863] block nbd0: Receive control failed (result -107) [ 72.411035][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.417762][ T5863] block nbd0: Receive control failed (result -107) [ 72.440071][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450902][ T5966] nbd0: detected capacity change from 0 to 32 [ 72.459598][ T5856] block nbd0: Dead connection, failed to find a fallback [ 72.459680][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.471787][ T5856] block nbd0: shutting down sockets [ 72.482708][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.495938][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.504753][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.514450][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.516624][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.524390][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.543486][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.552806][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.566092][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.574063][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.584275][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.586345][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.601817][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.615078][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.630760][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.640719][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.650329][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.661007][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.669674][ T5856] ldm_validate_partition_table(): Disk read failed. [ 72.676982][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.677007][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.677114][ T5856] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 72.705002][ T5856] Buffer I/O error on dev nbd0, logical block 0, async page read [ 72.710001][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.713302][ T5856] Dev nbd0: unable to read RDB block 0 [ 72.727122][ T5856] nbd0: unable to read partition table [ 72.731256][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.759397][ T5856] ldm_validate_partition_table(): Disk read failed. [ 72.784824][ T5856] Dev nbd0: unable to read RDB block 0 [ 72.801799][ T5856] nbd0: unable to read partition table [ 72.836493][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.857557][ T30] audit: type=1400 audit(1757904296.967:105): avc: denied { create } for pid=5968 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 72.876826][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.924741][ T30] audit: type=1400 audit(1757904296.967:106): avc: denied { allowed } for pid=5968 comm="syz.3.7" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 72.965215][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.095854][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.106130][ T30] audit: type=1400 audit(1757904296.967:107): avc: denied { create } for pid=5968 comm="syz.3.7" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.212265][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 73.245661][ T30] audit: type=1400 audit(1757904296.967:108): avc: denied { map } for pid=5968 comm="syz.3.7" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=8413 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 73.278997][ T2898] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.294974][ T2898] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.334086][ T5863] Bluetooth: hci2: command tx timeout [ 73.404681][ T5863] Bluetooth: hci0: command tx timeout [ 73.404690][ T5859] Bluetooth: hci1: command tx timeout [ 73.441169][ T2898] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.482287][ T5863] Bluetooth: hci4: command tx timeout [ 73.482944][ T5859] Bluetooth: hci3: command tx timeout [ 73.501020][ T2898] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.577605][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.587713][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.685974][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.148102][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.182621][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.503835][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.529302][ T48] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.542268][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.554555][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 74.584412][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.723066][ T48] usb 3-1: Using ep0 maxpacket: 8 [ 74.789216][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.792661][ T48] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 74.891951][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 74.900953][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 74.987774][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 75.032086][ T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.075087][ T48] usb 3-1: Product: syz [ 75.079270][ T48] usb 3-1: Manufacturer: syz [ 75.123598][ T48] usb 3-1: SerialNumber: syz [ 75.131999][ T5913] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.179254][ T48] usb 3-1: config 0 descriptor?? [ 75.250973][ T6004] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 75.327209][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 75.412108][ T5859] Bluetooth: hci2: command tx timeout [ 75.482410][ T5859] Bluetooth: hci1: command tx timeout [ 75.491188][ T6008] Zero length message leads to an empty skb [ 75.497310][ T5859] Bluetooth: hci0: command tx timeout [ 75.564512][ T5859] Bluetooth: hci4: command tx timeout [ 75.567403][ T5863] Bluetooth: hci3: command tx timeout [ 75.582135][ T48] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 75.592761][ T5913] usb 1-1: config 27 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 75.606375][ T5913] usb 1-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 [ 75.629216][ T5913] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 75.644688][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.115388][ T5913] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 76.410916][ T6015] udevd[6015]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.435797][ T5913] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -12 [ 76.603058][ T5928] usb 1-1: USB disconnect, device number 2 [ 77.363030][ T48] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 77.381927][ T30] kauditd_printk_skb: 38 callbacks suppressed [ 77.381943][ T30] audit: type=1400 audit(1757904301.487:147): avc: denied { read } for pid=6027 comm="syz.0.18" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.462879][ T48] usb 3-1: USB disconnect, device number 2 [ 77.910132][ T30] audit: type=1400 audit(1757904301.487:148): avc: denied { open } for pid=6027 comm="syz.0.18" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 77.933191][ T30] audit: type=1400 audit(1757904301.587:149): avc: denied { ioctl } for pid=6027 comm="syz.0.18" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 79.062203][ T30] audit: type=1400 audit(1757904303.127:150): avc: denied { bind } for pid=6043 comm="syz.1.23" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.115640][ T30] audit: type=1400 audit(1757904303.127:151): avc: denied { name_bind } for pid=6043 comm="syz.1.23" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 79.137928][ T30] audit: type=1400 audit(1757904303.127:152): avc: denied { node_bind } for pid=6043 comm="syz.1.23" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 79.158887][ T30] audit: type=1400 audit(1757904303.127:153): avc: denied { write } for pid=6043 comm="syz.1.23" lport=20004 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 79.243951][ T48] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.290330][ T30] audit: type=1400 audit(1757904303.397:154): avc: denied { map_create } for pid=6041 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.400832][ T30] audit: type=1400 audit(1757904303.397:155): avc: denied { map_read map_write } for pid=6041 comm="syz.0.22" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 79.452653][ T48] usb 5-1: Using ep0 maxpacket: 32 [ 79.459257][ T48] usb 5-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 79.468708][ T48] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.551071][ T48] usb 5-1: config 0 descriptor?? [ 79.700012][ T6050] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem [ 79.829767][ T48] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 79.855953][ T48] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 79.883608][ T48] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 79.891368][ T48] usb 5-1: media controller created [ 79.958518][ T48] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 80.046477][ T30] audit: type=1400 audit(1757904304.147:156): avc: denied { execute } for pid=6039 comm="syz.4.21" path="/4/cpu.stat" dev="tmpfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 80.092112][ T48] az6027: usb out operation failed. (-71) [ 80.139712][ T48] az6027: usb out operation failed. (-71) [ 80.639092][ T48] stb0899_attach: Driver disabled by Kconfig [ 80.653737][ T48] az6027: no front-end attached [ 80.653737][ T48] [ 80.672806][ T48] az6027: usb out operation failed. (-71) [ 80.678545][ T48] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 80.744673][ T48] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.4/usb5/5-1/input/input6 [ 81.080528][ T48] dvb-usb: schedule remote query interval to 400 msecs. [ 81.101640][ T48] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 81.262600][ T48] usb 5-1: USB disconnect, device number 2 [ 81.477894][ T92] cfg80211: failed to load regulatory.db [ 81.790736][ T48] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 81.835758][ T6074] [ 81.838109][ T6074] ====================================================== [ 81.845115][ T6074] WARNING: possible circular locking dependency detected [ 81.852122][ T6074] syzkaller #0 Not tainted [ 81.856523][ T6074] ------------------------------------------------------ [ 81.863531][ T6074] syz.0.32/6074 is trying to acquire lock: [ 81.869319][ T6074] ffffffff8e75c600 (fs_reclaim){+.+.}-{0:0}, at: __kmalloc_cache_noprof+0x50/0x3e0 [ 81.878641][ T6074] [ 81.878641][ T6074] but task is already holding lock: [ 81.885993][ T6074] ffff888077ff2558 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x10d/0xee0 [ 81.895132][ T6074] [ 81.895132][ T6074] which lock already depends on the new lock. [ 81.895132][ T6074] [ 81.905522][ T6074] [ 81.905522][ T6074] the existing dependency chain (in reverse order) is: [ 81.914512][ T6074] [ 81.914512][ T6074] -> #6 (sk_lock-AF_VSOCK){+.+.}-{0:0}: [ 81.922305][ T6074] lock_sock_nested+0x41/0xf0 [ 81.927487][ T6074] vsock_shutdown+0x61/0x2d0 [ 81.932622][ T6074] nbd_mark_nsock_dead+0xae/0x5d0 [ 81.938153][ T6074] recv_work+0x671/0xa80 [ 81.942896][ T6074] process_one_work+0x9cc/0x1b70 [ 81.948334][ T6074] worker_thread+0x6c8/0xf10 [ 81.953422][ T6074] kthread+0x3c2/0x780 [ 81.957993][ T6074] ret_from_fork+0x56a/0x730 [ 81.963083][ T6074] ret_from_fork_asm+0x1a/0x30 [ 81.968346][ T6074] [ 81.968346][ T6074] -> #5 (&nsock->tx_lock){+.+.}-{4:4}: [ 81.975964][ T6074] __mutex_lock+0x193/0x1060 [ 81.981060][ T6074] nbd_queue_rq+0x423/0x12d0 [ 81.986153][ T6074] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 81.992198][ T6074] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 81.999034][ T6074] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 82.005518][ T6074] blk_mq_run_hw_queue+0x239/0x670 [ 82.011139][ T6074] blk_mq_dispatch_list+0x514/0x1310 [ 82.016919][ T6074] blk_mq_flush_plug_list+0x130/0x600 [ 82.022787][ T6074] __blk_flush_plug+0x2c4/0x4b0 [ 82.028131][ T6074] __submit_bio+0x545/0x690 [ 82.033129][ T6074] submit_bio_noacct_nocheck+0x660/0xd30 [ 82.039257][ T6074] submit_bio_noacct+0xc20/0x1ed0 [ 82.044778][ T6074] block_read_full_folio+0x4db/0x850 [ 82.050670][ T6074] filemap_read_folio+0xc5/0x2a0 [ 82.056109][ T6074] do_read_cache_folio+0x263/0x5c0 [ 82.061722][ T6074] read_part_sector+0xd4/0x370 [ 82.067015][ T6074] adfspart_check_ICS+0x93/0x940 [ 82.072468][ T6074] bdev_disk_changed+0x723/0x1520 [ 82.078003][ T6074] blkdev_get_whole+0x187/0x290 [ 82.083356][ T6074] bdev_open+0x2c7/0xe40 [ 82.088097][ T6074] blkdev_open+0x34e/0x4f0 [ 82.093012][ T6074] do_dentry_open+0x97f/0x1530 [ 82.098278][ T6074] vfs_open+0x82/0x3f0 [ 82.102847][ T6074] path_openat+0x1de4/0x2cb0 [ 82.107936][ T6074] do_filp_open+0x20b/0x470 [ 82.112935][ T6074] do_sys_openat2+0x11b/0x1d0 [ 82.118114][ T6074] __x64_sys_openat+0x174/0x210 [ 82.123466][ T6074] do_syscall_64+0xcd/0x4e0 [ 82.128471][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.135380][ T6074] [ 82.135380][ T6074] -> #4 (&cmd->lock){+.+.}-{4:4}: [ 82.142594][ T6074] __mutex_lock+0x193/0x1060 [ 82.147689][ T6074] nbd_queue_rq+0xbd/0x12d0 [ 82.152692][ T6074] blk_mq_dispatch_rq_list+0x413/0x1e20 [ 82.158742][ T6074] __blk_mq_sched_dispatch_requests+0xcb7/0x15f0 [ 82.165581][ T6074] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 82.172074][ T6074] blk_mq_run_hw_queue+0x239/0x670 [ 82.177718][ T6074] blk_mq_dispatch_list+0x514/0x1310 [ 82.183516][ T6074] blk_mq_flush_plug_list+0x130/0x600 [ 82.189390][ T6074] __blk_flush_plug+0x2c4/0x4b0 [ 82.194738][ T6074] __submit_bio+0x545/0x690 [ 82.199739][ T6074] submit_bio_noacct_nocheck+0x660/0xd30 [ 82.205867][ T6074] submit_bio_noacct+0xc20/0x1ed0 [ 82.211386][ T6074] block_read_full_folio+0x4db/0x850 [ 82.217173][ T6074] filemap_read_folio+0xc5/0x2a0 [ 82.222607][ T6074] do_read_cache_folio+0x263/0x5c0 [ 82.228216][ T6074] read_part_sector+0xd4/0x370 [ 82.234003][ T6074] adfspart_check_ICS+0x93/0x940 [ 82.239444][ T6074] bdev_disk_changed+0x723/0x1520 [ 82.244969][ T6074] blkdev_get_whole+0x187/0x290 [ 82.250325][ T6074] bdev_open+0x2c7/0xe40 [ 82.255062][ T6074] blkdev_open+0x34e/0x4f0 [ 82.259974][ T6074] do_dentry_open+0x97f/0x1530 [ 82.265236][ T6074] vfs_open+0x82/0x3f0 [ 82.269809][ T6074] path_openat+0x1de4/0x2cb0 [ 82.274898][ T6074] do_filp_open+0x20b/0x470 [ 82.279898][ T6074] do_sys_openat2+0x11b/0x1d0 [ 82.285077][ T6074] __x64_sys_openat+0x174/0x210 [ 82.290430][ T6074] do_syscall_64+0xcd/0x4e0 [ 82.295434][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.301838][ T6074] [ 82.301838][ T6074] -> #3 (set->srcu){.+.+}-{0:0}: [ 82.308941][ T6074] __synchronize_srcu+0xa1/0x290 [ 82.314378][ T6074] blk_mq_quiesce_queue+0x149/0x1b0 [ 82.320080][ T6074] elevator_switch+0x17d/0x810 [ 82.325351][ T6074] elevator_change+0x391/0x580 [ 82.330619][ T6074] elevator_set_default+0x2e9/0x380 [ 82.336322][ T6074] blk_register_queue+0x384/0x4e0 [ 82.341846][ T6074] __add_disk+0x74a/0xf00 [ 82.346676][ T6074] add_disk_fwnode+0x13f/0x5d0 [ 82.351939][ T6074] nbd_dev_add+0x783/0xbb0 [ 82.356854][ T6074] nbd_init+0x181/0x320 [ 82.361512][ T6074] do_one_initcall+0x120/0x6e0 [ 82.366776][ T6074] kernel_init_freeable+0x5c2/0x910 [ 82.372497][ T6074] kernel_init+0x1c/0x2b0 [ 82.377348][ T6074] ret_from_fork+0x56a/0x730 [ 82.382449][ T6074] ret_from_fork_asm+0x1a/0x30 [ 82.387724][ T6074] [ 82.387724][ T6074] -> #2 (&q->elevator_lock){+.+.}-{4:4}: [ 82.395524][ T6074] __mutex_lock+0x193/0x1060 [ 82.400624][ T6074] elevator_change+0x17d/0x580 [ 82.405892][ T6074] elevator_set_none+0xaa/0x120 [ 82.411247][ T6074] __blk_mq_update_nr_hw_queues+0x4bd/0x1200 [ 82.417725][ T6074] blk_mq_update_nr_hw_queues+0x3b/0x60 [ 82.423768][ T6074] nbd_start_device+0x1b0/0xd70 [ 82.429128][ T6074] nbd_genl_connect+0x134b/0x1c60 [ 82.434665][ T6074] genl_family_rcv_msg_doit+0x206/0x2f0 [ 82.440725][ T6074] genl_rcv_msg+0x55c/0x800 [ 82.445739][ T6074] netlink_rcv_skb+0x158/0x420 [ 82.451015][ T6074] genl_rcv+0x28/0x40 [ 82.455508][ T6074] netlink_unicast+0x5a7/0x870 [ 82.460779][ T6074] netlink_sendmsg+0x8d1/0xdd0 [ 82.466049][ T6074] ____sys_sendmsg+0xa95/0xc70 [ 82.471320][ T6074] ___sys_sendmsg+0x134/0x1d0 [ 82.476502][ T6074] __sys_sendmsg+0x16d/0x220 [ 82.481591][ T6074] do_syscall_64+0xcd/0x4e0 [ 82.486596][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.492987][ T6074] [ 82.492987][ T6074] -> #1 (&q->q_usage_counter(io)#49){++++}-{0:0}: [ 82.501568][ T6074] blk_alloc_queue+0x619/0x760 [ 82.506837][ T6074] blk_mq_alloc_queue+0x172/0x280 [ 82.512361][ T6074] __blk_mq_alloc_disk+0x29/0x120 [ 82.517892][ T6074] nbd_dev_add+0x492/0xbb0 [ 82.522824][ T6074] nbd_init+0x181/0x320 [ 82.527479][ T6074] do_one_initcall+0x120/0x6e0 [ 82.532745][ T6074] kernel_init_freeable+0x5c2/0x910 [ 82.538457][ T6074] kernel_init+0x1c/0x2b0 [ 82.543292][ T6074] ret_from_fork+0x56a/0x730 [ 82.548380][ T6074] ret_from_fork_asm+0x1a/0x30 [ 82.553646][ T6074] [ 82.553646][ T6074] -> #0 (fs_reclaim){+.+.}-{0:0}: [ 82.560829][ T6074] __lock_acquire+0x12a6/0x1ce0 [ 82.566184][ T6074] lock_acquire+0x179/0x350 [ 82.571182][ T6074] fs_reclaim_acquire+0x102/0x150 [ 82.576708][ T6074] __kmalloc_cache_noprof+0x50/0x3e0 [ 82.582498][ T6074] virtio_transport_do_socket_init+0x4a/0x350 [ 82.589072][ T6074] vsock_assign_transport+0x63d/0x900 [ 82.594941][ T6074] vsock_connect+0x201/0xee0 [ 82.600032][ T6074] __sys_connect_file+0x13e/0x1a0 [ 82.605563][ T6074] __sys_connect+0x13b/0x160 [ 82.610651][ T6074] __x64_sys_connect+0x72/0xb0 [ 82.615909][ T6074] do_syscall_64+0xcd/0x4e0 [ 82.620914][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.627302][ T6074] [ 82.627302][ T6074] other info that might help us debug this: [ 82.627302][ T6074] [ 82.637504][ T6074] Chain exists of: [ 82.637504][ T6074] fs_reclaim --> &nsock->tx_lock --> sk_lock-AF_VSOCK [ 82.637504][ T6074] [ 82.650163][ T6074] Possible unsafe locking scenario: [ 82.650163][ T6074] [ 82.657586][ T6074] CPU0 CPU1 [ 82.662925][ T6074] ---- ---- [ 82.668264][ T6074] lock(sk_lock-AF_VSOCK); [ 82.672744][ T6074] lock(&nsock->tx_lock); [ 82.679667][ T6074] lock(sk_lock-AF_VSOCK); [ 82.686667][ T6074] lock(fs_reclaim); [ 82.690623][ T6074] [ 82.690623][ T6074] *** DEADLOCK *** [ 82.690623][ T6074] [ 82.698745][ T6074] 1 lock held by syz.0.32/6074: [ 82.703582][ T6074] #0: ffff888077ff2558 (sk_lock-AF_VSOCK){+.+.}-{0:0}, at: vsock_connect+0x10d/0xee0 [ 82.713135][ T6074] [ 82.713135][ T6074] stack backtrace: [ 82.718999][ T6074] CPU: 0 UID: 0 PID: 6074 Comm: syz.0.32 Not tainted syzkaller #0 PREEMPT(full) [ 82.719016][ T6074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 82.719024][ T6074] Call Trace: [ 82.719029][ T6074] [ 82.719034][ T6074] dump_stack_lvl+0x116/0x1f0 [ 82.719053][ T6074] print_circular_bug+0x275/0x350 [ 82.719076][ T6074] check_noncircular+0x14c/0x170 [ 82.719099][ T6074] __lock_acquire+0x12a6/0x1ce0 [ 82.719123][ T6074] lock_acquire+0x179/0x350 [ 82.719135][ T6074] ? __kmalloc_cache_noprof+0x50/0x3e0 [ 82.719157][ T6074] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 82.719177][ T6074] fs_reclaim_acquire+0x102/0x150 [ 82.719195][ T6074] ? __kmalloc_cache_noprof+0x50/0x3e0 [ 82.719216][ T6074] __kmalloc_cache_noprof+0x50/0x3e0 [ 82.719237][ T6074] ? virtio_transport_do_socket_init+0x4a/0x350 [ 82.719252][ T6074] virtio_transport_do_socket_init+0x4a/0x350 [ 82.719267][ T6074] vsock_assign_transport+0x63d/0x900 [ 82.719284][ T6074] vsock_connect+0x201/0xee0 [ 82.719300][ T6074] ? release_sock+0x21/0x220 [ 82.719318][ T6074] ? do_raw_spin_lock+0x12c/0x2b0 [ 82.719333][ T6074] ? __pfx_vsock_connect+0x10/0x10 [ 82.719349][ T6074] ? find_held_lock+0x2b/0x80 [ 82.719366][ T6074] ? selinux_netlbl_socket_connect+0x30/0x40 [ 82.719387][ T6074] ? __pfx_autoremove_wake_function+0x10/0x10 [ 82.719407][ T6074] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.719424][ T6074] ? selinux_netlbl_socket_connect+0x30/0x40 [ 82.719444][ T6074] ? __local_bh_enable_ip+0xa4/0x120 [ 82.719462][ T6074] ? selinux_netlbl_socket_connect+0x30/0x40 [ 82.719482][ T6074] ? selinux_socket_connect+0x6b/0x80 [ 82.719500][ T6074] ? __pfx_vsock_connect+0x10/0x10 [ 82.719516][ T6074] __sys_connect_file+0x13e/0x1a0 [ 82.719532][ T6074] __sys_connect+0x13b/0x160 [ 82.719545][ T6074] ? __pfx___sys_connect+0x10/0x10 [ 82.719561][ T6074] ? xfd_validate_state+0x61/0x180 [ 82.719586][ T6074] __x64_sys_connect+0x72/0xb0 [ 82.719599][ T6074] ? lockdep_hardirqs_on+0x7c/0x110 [ 82.719615][ T6074] do_syscall_64+0xcd/0x4e0 [ 82.719633][ T6074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.719647][ T6074] RIP: 0033:0x7f104918eba9 [ 82.719658][ T6074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.719671][ T6074] RSP: 002b:00007f104a0dc038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 82.719684][ T6074] RAX: ffffffffffffffda RBX: 00007f10493d5fa0 RCX: 00007f104918eba9 [ 82.719693][ T6074] RDX: 0000000000000010 RSI: 0000200000000080 RDI: 0000000000000004 [ 82.719701][ T6074] RBP: 00007f1049211e19 R08: 0000000000000000 R09: 0000000000000000 [ 82.719709][ T6074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.719717][ T6074] R13: 00007f10493d6038 R14: 00007f10493d5fa0 R15: 00007ffd71181128 [ 82.719730][ T6074] [ 83.038871][ T5863] Bluetooth: hci2: command tx timeout [ 83.142029][ T5920] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 83.292042][ T5920] usb 3-1: device descriptor read/64, error -71 [ 83.531991][ T5920] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 83.672028][ T5920] usb 3-1: device descriptor read/64, error -71 [ 83.783198][ T5920] usb usb3-port1: attempt power cycle [ 84.122030][ T5920] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 84.142427][ T5920] usb 3-1: device descriptor read/8, error -71 [ 84.381950][ T5920] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 84.402796][ T5920] usb 3-1: device descriptor read/8, error -71 [ 84.512557][ T5920] usb usb3-port1: unable to enumerate USB device