last executing test programs: 36m55.5538273s ago: executing program 4 (id=16): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000007d40)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000004c0)={{r0, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000480)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r1}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x11, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000020004008500000097000000b7080000000000007b8af8ff00000000b7080000ffffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000001000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 36m55.337887792s ago: executing program 4 (id=18): socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) getsockname$packet(r0, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x2, 0x0, {0x0, 0x0, 0x0, r1, 0x544c3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_LIMIT={0x5, 0x6, 0x8}, @IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x404c8c1}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x5c0c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/devices.allow\x00', 0x2, 0xc8) open_by_handle_at(r5, &(0x7f0000000140)=@ceph_nfs_fh={0x8, 0xfe, {0x7}}, 0x2241c2) r6 = syz_io_uring_setup(0x2d64, &(0x7f0000000100)={0x0, 0x100577, 0x2, 0x0, 0x42}, &(0x7f0000000400), &(0x7f0000011000), &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r6, 0x2, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}, 0x20) io_uring_register$IORING_REGISTER_FILES_UPDATE2(r6, 0x6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0), 0x0}, 0x20) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x4000000022383, 0x0) r7 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x1a9001, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40081271, &(0x7f0000000100)=0x200) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [0x200000], [0x8200, 0x5], 0x1}}}) ioctl$VIDIOC_QBUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000200)=@fd={0x200000, 0x5, 0x4, 0x0, 0x3, {}, {0x5, 0x0, 0xff, 0x0, 0x0, 0xfe, "8000"}, 0x0, 0x2, {}, 0x20800}) 36m52.394169019s ago: executing program 4 (id=25): r0 = socket$kcm(0xf, 0x3, 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f00000001c0)={r0, &(0x7f00000000c0)='\'-&\xd6\\],\\*@[\x00', 0x400, &(0x7f0000000100)={@_ha_fsid={[0x2c6b072, 0x5]}, {0x7, 0x3, 0x7, 0xfffffffffffffffa}}, 0x0, &(0x7f0000000140), &(0x7f0000000180)=0x5}) ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x5) r2 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x108) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000551b8920b822276080c20102030109024b0001000000000904000000020a0000052406000005241d00000d240f01000200000000000200072414003824d0062413"], 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MP_STATE(r3, 0x8004ae98, &(0x7f0000000080)) pwritev2(r2, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x20) recvmsg$kcm(r0, &(0x7f0000001780)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="0212000902000000e4a17c45c8568660", 0x10}], 0x1}, 0x0) 36m50.523195418s ago: executing program 4 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r1, &(0x7f0000000640)={&(0x7f0000000040)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba70000fd81685544f46c3f080046011bb27a9a0c95bf46ec2d5a4ffe80394369d1", 0x22}], 0x1, 0x0, 0x0, 0x11000000}, 0x2404cc04) r2 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0x14a042) dup3(r2, r0, 0x80000) writev(r0, &(0x7f0000001cc0)=[{&(0x7f0000000680)='s', 0x1}], 0x1) openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0xc8003, 0x0) open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) chdir(0x0) creat(&(0x7f0000000440)='./bus\x00', 0xf2) r3 = socket$packet(0x11, 0x3, 0x300) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/user\x00') open_by_handle_at(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB="20000000f1000100", @ANYRES64=r3], 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 36m48.617499193s ago: executing program 4 (id=41): openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32, @ANYBLOB="0000000400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000200000000000000000000000000000000000008f5495b383fd205aa6c294dd8673539782e2eea5d68639ad05af23"], 0x50) mkdirat(0xffffffffffffff9c, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) syz_open_dev$ptys(0xc, 0x3, 0x1) r0 = socket(0x10, 0x80002, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_pidfd_open(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102392, 0x18ff8) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) io_submit(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x0, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff", @ANYRES32=0x0], 0x48}}, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x492492492492627, 0x0) 36m48.282349174s ago: executing program 4 (id=42): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x42) 36m47.805047859s ago: executing program 32 (id=42): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000001540)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001500)={&(0x7f0000000480)={0x1c, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0xc0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r1, &(0x7f0000000440)=ANY=[], 0x42) 15.741598209s ago: executing program 3 (id=6043): openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, &(0x7f0000000140)='GPL\x00'}, 0x94) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x901800, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) exit(0x1f52b4ba) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, 0x0) open(0x0, 0x284102, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x1, 0x80881) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000400)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f00000006c0)="3b000000010006", 0x7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r5, 0xc4c85513, &(0x7f0000000140)={0x8, 0x4, 0x1, 0xffffffff, '\x00', 0x4}) socket$nl_generic(0x10, 0x3, 0x10) 14.479329378s ago: executing program 1 (id=6044): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x25, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x80}}, 0x4) io_setup(0x8, &(0x7f0000000600)) accept(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) 14.37446582s ago: executing program 3 (id=6045): io_setup(0x8, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) syz_open_dev$tty1(0xc, 0x4, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0xcccccccc}) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r6, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x300) setsockopt$inet_int(r6, 0x0, 0x14, &(0x7f0000000000)=0x40, 0x4) recvmmsg(r6, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) io_pgetevents(r0, 0x6, 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f0000000280)={0x0, 0x989680}, &(0x7f0000000300)={&(0x7f00000002c0)={[0x7fffffff]}, 0x8}) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) r7 = eventfd(0x8) io_cancel(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x3, r1, &(0x7f0000000000)="47496753794eab883c82026825f9efcfbf53187489dcaf868f5944b540f35d16837555db5d3b8943337f02afc99ff12e53d8e17898fb25189f77d9e355426f492f24277940f19bdb1f44c63c20fa84cc040e62231ee9d1f8bd09e41e6543bf8fe31b130ed494d48e7e829489cea70da1bea49abfdbf776a7781ac54cec07c9ea8a21baaf", 0x84, 0x7, 0x0, 0x3, r7}, &(0x7f00000001c0)) 10.681064757s ago: executing program 3 (id=6049): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000040)=@gcm_128={{0x303}, "1b2fcb39a2d24a3f", "3176927120162c9891c2feb670bbea88", "2c2af280", "c367b1a8d1546100"}, 0x28) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) read$FUSE(r1, &(0x7f0000007040)={0x2020}, 0x2020) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x801) r2 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0x1f400, 0x8, 0xc1}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1600000004"], 0x50) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 10.360867476s ago: executing program 2 (id=6051): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) syz_io_uring_setup(0x131, 0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000000)={&(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001000/0x3000)=nil, 0x1000}) r1 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x123301, 0x0) ioctl$TIOCGPKT(r1, 0x80045438, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') io_submit(0x0, 0x1, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000001c0)="924e131efa3cb306807d36f46c76") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x28}, 0x1, 0x0, 0x0, 0x40801}, 0x4000000) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0xb, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ioctl$COMEDI_DEVCONFIG(0xffffffffffffffff, 0x40946400, &(0x7f00000000c0)={'comedi_test\x00', [0x80008004, 0x5, 0x23, 0x401, 0x1, 0x0, 0x10001, 0x1000008, 0x2, 0x3ff, 0x9, 0x3ff, 0x9, 0xe, 0x6, 0x8001, 0x3, 0x4, 0x0, 0x392, 0x80000088, 0x3, 0xa, 0xfffffff6, 0x200000a, 0x4, 0x0, 0x0, 0x4, 0x181, 0x4]}) r4 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x12, 0xffffffffffffffff, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bc0000/0x400000)=nil, 0x400000, 0x9) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010000305fcffffff0000040000000000", @ANYRES32=0x0, @ANYBLOB="1111020031000000200012800b0001006d61637365630000100002800c0004000200000100c2800008000500", @ANYRES32], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x0) 10.359580192s ago: executing program 3 (id=6052): r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcm3724\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xe, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) 9.774363083s ago: executing program 3 (id=6054): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="d47f8f49197ebfc001c2871394b13d67c61766a6ecb118619bf63aa2ea1b0e2b64ba22121085bbc52a3780b447c4eccceb71a7847f2ddc0f69bdec385e458324b0626643fb33d5e4cc016181d477f436fb3950c3a17e067d5a8ea18254fe04e86b5465805889315a106792f064c4b53c16b98cea67b817d25a809c9eeecbc158577a7f9df30bfb0cc9b98fb2c53e8c7be581d67e5f8df790c361e5ee5f2397e28fd5e0b78ce01ab7b517c378e5f8d068483ee8ab222bd99f18a247fabd8e3f61063d7d") ioprio_get$pid(0x0, r0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) 9.715796064s ago: executing program 1 (id=6055): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x800) read(r3, &(0x7f0000000040)=""/14, 0xe) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x0, 0x1, &(0x7f0000000380)=[r2], &(0x7f00000003c0), 0x0, 0x0, 0x0, 0xff}) 9.336359094s ago: executing program 2 (id=6056): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x4, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102384, 0x18ff0) syz_open_dev$video(0x0, 0xa7, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') getdents64(r5, &(0x7f0000000080)=""/95, 0x5f) getdents(r5, 0xfffffffffffffffd, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x4a4, 0x2) 9.281948169s ago: executing program 3 (id=6057): syz_open_dev$MSR(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r4 = openat(0xffffffffffffff9c, 0x0, 0x401c2, 0x0) sendfile(0xffffffffffffffff, r4, 0x0, 0x578410eb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xdfdbf3a524f208d5, &(0x7f0000000080)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x15, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r5 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r5, 0x29, 0x37, 0x0, 0x0) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r5) ftruncate(0xffffffffffffffff, 0x200004) 9.169854775s ago: executing program 1 (id=6058): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000b, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) setns(0xffffffffffffffff, 0x24020000) socket$nl_netfilter(0x10, 0x3, 0xc) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r0, &(0x7f0000000300)=""/102400, 0x19000) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = accept$alg(r1, 0x0, 0x0) recvmsg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000100)="1c", 0x1, 0x0, &(0x7f0000001100)={0x2, 0x0, @private}, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, 0x0, 0x5) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000034540)=[{{0x0, 0x0, 0x0}, 0x800}, {{&(0x7f0000034380)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @loopback}}}, 0x80, 0x0, 0x0, &(0x7f00000194c0)=""/168, 0xa8}, 0x80000002}], 0x2, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) unshare(0x22020600) r4 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') pread64(r4, &(0x7f000001a240)=""/102399, 0x18fff, 0x100008) unshare(0x40400) 8.973160962s ago: executing program 0 (id=5986): r0 = syz_open_dev$dri(&(0x7f0000000040), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f0000000180)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) write$P9_RUNLINKAT(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x4d, 0x2}, 0x7) r2 = memfd_create(&(0x7f00000000c0)='\xe9`\x10\x98[\x82?O3#\xfa\x02\xdc\x96\xa1\xbc\x80\x00+\xb6O', 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x8001a0) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x200002, 0x0) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000000)={r1, 0x0, 0x5, 0x0, 0x53be}) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r3, 0x5, 0x14, 0x0, &(0x7f00000000c0)="259a53f271a76d2608004c6588a80a38667d2f15", 0x0, 0xd0e, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x44, 0x2c, 0xf3f, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xb, 0xfff3}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x14, 0x2, [@TCA_BASIC_EMATCHES={0x10, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8}, @TCA_EMATCH_TREE_LIST={0x4}]}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20041090}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000080900010073797a30000000005c000000030a03000000000000000000050000000900010073797a30000000000900030073797a300000000008000c40000000032800048008000240000000120800014000000000140004"], 0xa4}}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r5 = userfaultfd(0x80001) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000600)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000040], 0x0, 0x0, &(0x7f0000000040)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}]}, 0x108) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(r6, 0x41009432, &(0x7f00000002c0)="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") read$msr(r6, &(0x7f0000005580)=""/102392, 0x18ff8) write$vhost_msg(0xffffffffffffffff, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0xa) r8 = dup(r7) r9 = open(&(0x7f0000000040)='./file1\x00', 0x1850c2, 0x144) ftruncate(r9, 0x200004) sendfile(r8, r9, 0x0, 0x80001d00c0d1) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) 7.348207552s ago: executing program 2 (id=6060): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040}, 0x20000000) syz_usb_connect$hid(0x4, 0x3f, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x1, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) shmdt(0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) syz_clone3(&(0x7f00000026c0)={0x20000000, &(0x7f0000000400), 0x0, &(0x7f0000000480), {0x11}, 0x0, 0x0, 0x0, &(0x7f0000002680)}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='smaps\x00') lseek(r2, 0x2000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="090b29bd7000fddbdf2505000000", @ANYRES32=0x0, @ANYBLOB="ae8c8af7a58fa1fe1997db4421f3e1d4c97e5131972cb54c00392a8b1f4849d5342aa88480e49c919b1a117b266761cda8a7d97bc6ddd62817fa6fa29f899529392bf095563b42c00ab4d0976f1b45ca5578b8e85183bba0ab57e04dcdb8b97986a68db2a80149495fb1551c4886af6be0b6894a"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x80) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c0000002e00010426bdf000fcdbdf25040000000800fd90d6322d4e1ad308167b5446c20c00", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 6.28146721s ago: executing program 1 (id=6062): io_uring_setup(0x667, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket(0x10, 0x3, 0x0) pipe2(&(0x7f0000000000), 0x800) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000000)={0x5, 0x100, 0x7f}) r1 = syz_open_procfs(0x0, &(0x7f0000019340)='net/dev\x00') prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2000) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, 0x0) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r0, 0x100000000) 5.767012287s ago: executing program 0 (id=6063): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) r1 = socket$kcm(0xa, 0x1, 0x106) sendmsg$kcm(r1, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x800001000091}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) mount(&(0x7f00000003c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000300)='udf\x00', 0x200480, 0x0) sendmsg$kcm(r1, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) ftruncate(r3, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410eb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xdfdbf3a524f208d5, &(0x7f0000000080)=ANY=[@ANYBLOB], &(0x7f0000003ff6)='GPL\x00', 0x15, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r4) r5 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) ftruncate(r5, 0x200004) 5.747396194s ago: executing program 5 (id=6064): r0 = openat$comedi(0xffffff9c, 0x0, 0x2180, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f0000000300)={'pcm3724\x00', [0x2f00, 0x5, 0xd09a, 0x1002, 0x3, 0xfffffffe, 0x20000004, 0x6, 0xffe, 0x9, 0x10, 0x3, 0x4, 0xaba5, 0xffff, 0x100006, 0x5, 0x8, 0x830, 0x40, 0x10000, 0xe, 0x800, 0xe2df, 0x2, 0x0, 0x7, 0xb, 0x4, 0x5, 0x800]}) 5.133553188s ago: executing program 5 (id=6065): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x25, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x54}}, 0x4) io_setup(0x8, &(0x7f0000000600)) accept(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) 4.884124512s ago: executing program 0 (id=6066): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_REQ_SET_REG(r0, 0x0, 0x0) syz_usb_connect$hid(0x4, 0x3f, &(0x7f0000000000)=ANY=[], 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pwrite64(r1, &(0x7f0000000080), 0x0, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x4002, 0x100007}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) lseek(0xffffffffffffffff, 0x2000, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40241, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfffa}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) 3.445400088s ago: executing program 5 (id=6067): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="d47f8f49197ebfc001c2871394b13d67c61766a6ecb118619bf63aa2ea1b0e2b64ba22121085bbc52a3780b447c4eccceb71a7847f2ddc0f69bdec385e458324b0626643fb33d5e4cc016181d477f436fb3950c3a17e067d5a8ea18254fe04e86b5465805889315a106792f064c4b53c16b98cea67b817d25a809c9eeecbc158577a7f9df30bfb0cc9b98fb2c53e8c7be581d67e5f8df790c361e5ee5f2397e28fd5e0b78ce01ab7b517c378e5f8d068483ee8ab222bd99f18a247fabd8e3f61063d7d") ioprio_get$pid(0x0, r0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x3}, 0x1c) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) 3.321330495s ago: executing program 2 (id=6068): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0xd) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x180, 0x0) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="600100001000130726bd7000000000000000000000000004f48d5e92396fb818981c62f595000000ffff0a010102ac1414bb0000000000030000000000004e22", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x160}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={0x14, r5, 0x1, 0x70bd2c, 0x400, {0x1a}}, 0x14}, 0x1, 0x0, 0x0, 0x20008840}, 0x8040) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc08"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800e80010000d0428bd7000fcdbff2500008000", @ANYRES32=r6, @ANYBLOB="1000000000000000280012800b00010062726964676500001800028005001900840000000c001e"], 0x48}}, 0x4084) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000200000a20000000000a050000000073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a310000000084000000060a010400000000000000000100000008000b40000000005c0004802c000180090001007866726d000000001c0002800800024000000006050003000000000008000140000000092c00018008000100636d7000200002800c00038005000100ac000000080001400000000908000240000000050900010073797a3000000000140000001100010000000000000000000000000a"], 0xf8}, 0x1, 0x0, 0x0, 0x4}, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5414, &(0x7f00000000c0)) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$sock_void(r2, 0x1, 0x24, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x20004080}, 0x600c0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r8) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CHANNEL(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r9, @ANYBLOB="010027bd7000fedbdf254100000008000300", @ANYRES32=r10, @ANYBLOB="08e0c7c1d5df8eaa5cdc6c112e291df18af4a1318724e8149b0ab8bbfd19e973bb749134d7ec447ba256d7eb28f37c54913b53d50366c7747618098d0b561b2d9c98be69dd019f0eead393688a833260c77139171ab69fa01bd0db29c59a58158e9cab99827e868d851769535cdc1c37046a12031a76317fe48d44906579c6b66d13267238155a6036dc6b0f47bf846ae1c5854da7dd7945053cd03bf21716"], 0x1c}, 0x1, 0x0, 0x0, 0x40005}, 0x4040004) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f0000000140), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r9, 0x800, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x1120, 0x64}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}}, 0x20000080) ioctl$TCXONC(r1, 0x540a, 0x0) 2.845065028s ago: executing program 5 (id=6069): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$bind(&(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0xa05404, 0x0) mount$bind(&(0x7f00000000c0)='./file1\x00', &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000000240), 0x1083052, 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x2b5b093, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x262) 2.832311201s ago: executing program 1 (id=6070): openat$vimc2(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x104}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x0) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0xc4) getsockopt$ax25_int(r3, 0x101, 0x2, &(0x7f00000001c0), &(0x7f0000000280)=0x4) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(r0, 0x1, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_FSCOUNTS(r4, 0x80205871, &(0x7f0000000040)) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x7) write$P9_RGETLOCK(r5, &(0x7f0000000640)=ANY=[], 0x200002e6) fcntl$setpipe(r5, 0x407, 0x7000000) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000000)={0x5, 0xfffffff7, {r6}, {0xffffffffffffffff}, 0x4c004, 0x5}) tkill(r7, 0x8) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0xf2de1000) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) io_setup(0x8f0, &(0x7f0000002400)) 2.70563195s ago: executing program 5 (id=6071): syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x3c) getsockopt$inet6_buf(r0, 0x3a, 0x20, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x20000011) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xd5) connect$inet6(0xffffffffffffffff, 0x0, 0x0) openat$mixer(0xffffffffffffff9c, 0x0, 0x121100, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000000)=@in6={0xa, 0xfffe, 0x0, @ipv4={'\x00', '\xff\xff', @remote}, 0x2}, 0x80, 0x0}, 0xe07e872420dfefca) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003580)={0x20, 0x24, 0x107, 0x70bd2e, 0x25dfdbfb, {0x2, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x1}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./bus\x00', 0x1e0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x578410eb) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1a, 0xdfdbf3a524f208d5, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x15, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet6(0xa, 0x3, 0xff) setsockopt$inet6_opts(r4, 0x29, 0x37, &(0x7f0000000080)=@hopopts={0x21}, 0x8) connect$inet6(r4, &(0x7f00000001c0)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) dup(r4) ftruncate(0xffffffffffffffff, 0x200004) 2.639513472s ago: executing program 0 (id=6072): ioctl$DRM_IOCTL_SYNCOBJ_QUERY(0xffffffffffffffff, 0xc01864cb, 0x0) r0 = socket$inet(0x2, 0x6, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f00000000c0), 0x185042, 0x0) r2 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x1a6c42) ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000001ac0)={r1, 0x2000, {0x0, 0x0, 0x0, 0x3, 0x14a1fd, 0x0, 0x0, 0x1e, 0x1c, "339f020bbe82b398000000000000000000000d0ec0c1b4e9b1c4369d03740250ceaac594b1b3d741dd17c1c50d38ef2a565ef1e83323691c58d66500", "a9103939c787a16c1ca43f80026d1a8554fe581b59ded130e04d528539f3d3289737f0374c72a964a02447a75df8a69ea917deb7ba193b3e7772fd29f35239d2", "24431a1e77a68e174f000000000000000010e200", [0x4, 0x400]}}) r3 = dup(r2) write$UHID_INPUT(r3, &(0x7f0000001c00)={0x8, {"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", 0x1000}}, 0xfffffe38) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x88800, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{}, &(0x7f0000000040), &(0x7f00000000c0)=r3}, 0x20) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) ioctl$int_in(r0, 0x5452, &(0x7f0000000000)=0xf) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102384, 0x18ff0) syz_open_dev$video(0x0, 0xa7, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000240)='net/dev_snmp6\x00') getdents64(r5, &(0x7f0000000080)=""/95, 0x5f) getdents(r5, 0xfffffffffffffffd, 0x0) r6 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x121a03, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0x3) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000580)='W', 0xfffffffffffffd3d, 0x10008095, 0x0, 0x0) syz_open_dev$vim2m(&(0x7f0000000040), 0x4a4, 0x2) 1.853968132s ago: executing program 1 (id=6073): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(0x0, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_LEN={0x8}, @NFTA_PAYLOAD_OFFSET={0x8, 0x3, 0x1, 0x0, 0x57}, @NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_PAYLOAD_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x8c}}, 0x4) accept(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) 1.373649791s ago: executing program 2 (id=6074): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) r1 = syz_open_dev$usbfs(&(0x7f0000000080), 0x77, 0x101301) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=ANY=[@ANYBLOB="0a000000040000000200000001"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000000c0)={r3}, 0xc) ioctl$USBDEVFS_FREE_STREAMS(r1, 0x8008551d, &(0x7f0000000000)={0x9325, 0x1, [{0x9, 0x1}]}) read$FUSE(r0, &(0x7f0000008880)={0x2020, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000042c0)="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", 0x2000, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r4, {0x7, 0x2b, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x0, {0x80000, 0x0, 0x0, 0x59d, 0xffffffff, 0x0, {0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x0, 0xa53, 0x0, 0x0, 0x0, {0x400, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x2, 0x2000, 0xfffffdfd, 0x0, 0x0, 0x4, 0xff800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) acct(&(0x7f00000002c0)='./file0/file0\x00') r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000cc0)="adf802e5370fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) accept4(r6, 0x0, 0x0, 0x800) bind(r6, &(0x7f0000000300)=@pppoe={0x18, 0x0, {0x0, @broadcast, 'netdevsim0\x00'}}, 0x80) 1.180141327s ago: executing program 2 (id=6075): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x71b52c, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0x6}, {0x2, 0xb}, {0xffe0, 0xb}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0xffffffffffffffe7}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1.125868491s ago: executing program 5 (id=6076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x25, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x4) io_setup(0x8, &(0x7f0000000600)) accept(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) 568.88698ms ago: executing program 33 (id=6076): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) r1 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x8) setgroups(0x0, 0x0) getgroups(0x1, &(0x7f0000000080)=[0xee00]) setregid(0x0, r3) capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000}) fchmodat(r2, &(0x7f0000000300)='.\x00', 0xffffffd3) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r4, &(0x7f0000001580)=[{{&(0x7f0000000300)={0xa, 0x4e23, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x42}, 0x1c, &(0x7f00000039c0)=[{&(0x7f00000003c0)="eb", 0x1}], 0x1}}], 0x1, 0x20040140) listen(r4, 0xfff) syz_clone3(&(0x7f0000000900)={0x0, &(0x7f0000000040), 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0, 0x25, {r2}}, 0x58) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x58}}, 0x4) io_setup(0x8, &(0x7f0000000600)) accept(r4, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x5a}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000140)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB='/\x00'/12, @ANYRES32, @ANYBLOB="db2cd7a2b21e186440c1598edf3aaf63dfa2f5cb08000b22d35345caedc526609d9a3304005225a7af21b25c387b2216002af0b604a1153e71a7c319dd71f59d1ee23a5854a2b98bc2b8ccb71dfef4a470b82ebde6debbc4c86ce79bd1954d885ca6da7256203e8491", @ANYRES64=0x0], 0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000700)={0x4, 0x0}, 0x8) r8 = syz_open_procfs(0x0, &(0x7f0000010000)='cgroup\x00') lseek(r8, 0x201, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r8, 0xc0585605, &(0x7f0000000000)={0x0, 0x0, {0x2, 0x0, 0x1017, 0xc, 0x9, 0x7, 0x1, 0x5}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000010c0)=ANY=[@ANYRES32=r6, @ANYRES32=r6, @ANYBLOB="07000000000000002f001045", @ANYRES32=r7, @ANYBLOB, @ANYRES64=0x0], 0x20) 563.219662ms ago: executing program 0 (id=6078): socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) r0 = syz_clone(0x2100100, 0x0, 0x0, &(0x7f0000001680), &(0x7f00000016c0), &(0x7f0000001700)="d47f8f49197ebfc001c2871394b13d67c61766a6ecb118619bf63aa2ea1b0e2b64ba22121085bbc52a3780b447c4eccceb71a7847f2ddc0f69bdec385e458324b0626643fb33d5e4cc016181d477f436fb3950c3a17e067d5a8ea18254fe04e86b5465805889315a106792f064c4b53c16b98cea67b817d25a809c9eeecbc158577a7f9df30bfb0cc9b98fb2c53e8c7be581d67e5f8df790c361e5ee5f2397e28fd5e0b78ce01ab7b517c378e5f8d068483ee8ab222bd99f18a247fabd8e3f61063d7d") ioprio_get$pid(0x0, r0) sched_setaffinity(0x0, 0xfffffffffffffdb1, &(0x7f0000000280)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000091) 0s ago: executing program 0 (id=6079): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="6c0000001000010400"/20, @ANYBLOB="5d580000000000001c001a8018000a801400070000000000000000000000000000000001140003006970766c616e310000000000000000001c0012800b0001006970766c61"], 0x6c}, 0x1, 0x0, 0x0, 0x840}, 0x84) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc142e00004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x101800, 0x0) ioctl$IOMMU_VFIO_IOAS$CLEAR(r2, 0x3b88, &(0x7f00000000c0)={0xc}) kernel console output (not intermixed with test programs): loop6, logical block 0, async page read [ 2165.910161][T28477] Buffer I/O error on dev loop6, logical block 0, async page read [ 2165.944412][T28477] Buffer I/O error on dev loop6, logical block 0, async page read [ 2165.980492][T28477] ldm_validate_partition_table(): Disk read failed. [ 2166.001367][T28477] Buffer I/O error on dev loop6, logical block 0, async page read [ 2166.031502][T28477] Buffer I/O error on dev loop6, logical block 0, async page read [ 2166.072161][T28477] Dev loop6: unable to read RDB block 0 [ 2166.083767][T28477] loop6: unable to read partition table [ 2166.801943][T28477] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2167.093370][ T29] audit: type=1400 audit(1776968763.141:1442): avc: denied { write } for pid=28492 comm="syz.5.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2167.139039][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5771'. [ 2167.181156][ T29] audit: type=1400 audit(1776968763.171:1443): avc: denied { nlmsg_write } for pid=28492 comm="syz.5.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2167.218062][T28494] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5771'. [ 2167.260904][ T29] audit: type=1400 audit(1776968763.301:1444): avc: denied { bind } for pid=28492 comm="syz.5.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2167.266157][T28494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5771'. [ 2167.421683][ T29] audit: type=1400 audit(1776968763.471:1445): avc: denied { setopt } for pid=28492 comm="syz.5.5771" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2167.422164][T28494] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5771'. [ 2167.480888][ T29] audit: type=1400 audit(1776968763.521:1446): avc: denied { mount } for pid=28498 comm="syz.1.5774" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2167.534607][ T29] audit: type=1400 audit(1776968763.581:1447): avc: denied { create } for pid=28498 comm="syz.1.5774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2167.602586][ T29] audit: type=1400 audit(1776968763.611:1448): avc: denied { bind } for pid=28498 comm="syz.1.5774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2168.175129][ T29] audit: type=1400 audit(1776968764.211:1449): avc: denied { ioctl } for pid=28498 comm="syz.1.5774" path="socket:[123491]" dev="sockfs" ino=123491 ioctlcmd=0x5868 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 2168.566118][ T29] audit: type=1400 audit(1776968764.581:1450): avc: denied { read write } for pid=28517 comm="syz.3.5779" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2169.003349][ T29] audit: type=1400 audit(1776968764.591:1451): avc: denied { open } for pid=28517 comm="syz.3.5779" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 2170.180816][T28535] loop6: detected capacity change from 0 to 2640 [ 2170.330651][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2170.339967][T28535] ldm_validate_partition_table(): Disk read failed. [ 2170.340596][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2170.427143][T28535] Dev loop6: unable to read RDB block 0 [ 2170.438189][T28535] loop6: unable to read partition table [ 2170.444680][T28535] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2170.611088][T27989] buffer_io_error: 32 callbacks suppressed [ 2170.611138][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2170.808388][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2170.818938][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2170.844735][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2170.877757][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.101593][ T5930] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 2171.237100][T28543] erspan0: left allmulticast mode [ 2171.242449][T28543] erspan0: left promiscuous mode [ 2171.247744][T28543] bridge0: port 3(erspan0) entered disabled state [ 2171.273207][ T5930] usb 4-1: Using ep0 maxpacket: 16 [ 2171.286670][ T5930] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 2171.309893][ T5930] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2171.346917][ T5930] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2171.390447][ T5930] usb 4-1: config 0 has an invalid interface number: 125 but max is 1 [ 2171.426640][ T5930] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2171.464456][ T5930] usb 4-1: config 0 has no interface number 0 [ 2171.493155][ T5930] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2171.519328][ T5930] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2171.558022][ T5930] usb 4-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2171.595491][ T5930] usb 4-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2171.623604][T28551] loop6: detected capacity change from 0 to 2640 [ 2171.639371][ T5930] usb 4-1: config 0 interface 125 has no altsetting 0 [ 2171.652911][T28551] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.666447][ T5930] usb 4-1: config 0 interface 125 has no altsetting 2 [ 2171.692431][ T5930] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2171.706947][T28551] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.717418][ T5930] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2171.743473][ C1] blk_print_req_error: 6 callbacks suppressed [ 2171.743496][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2171.759433][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2171.770727][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2171.780797][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2171.790892][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2171.799677][T28551] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.800712][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2171.818916][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2171.829119][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2171.840338][ T5930] usb 4-1: Product: syz [ 2171.844700][ T5930] usb 4-1: Manufacturer: syz [ 2171.849357][ T5930] usb 4-1: SerialNumber: syz [ 2171.869507][ T5930] usb 4-1: config 0 descriptor?? [ 2171.892266][T28551] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.904685][ T5930] usb 4-1: selecting invalid altsetting 2 [ 2171.936835][T28551] Buffer I/O error on dev loop6, logical block 0, async page read [ 2171.986197][T28551] ldm_validate_partition_table(): Disk read failed. [ 2172.050546][T28551] Dev loop6: unable to read RDB block 0 [ 2172.090232][T28551] loop6: unable to read partition table [ 2172.115894][T28551] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2172.192945][ C1] usb 4-1: async_complete: urb error -71 [ 2172.198813][ C1] usb 4-1: async_complete: urb error -71 [ 2172.204689][ C1] usb 4-1: async_complete: urb error -71 [ 2172.210431][ C1] usb 4-1: async_complete: urb error -71 [ 2172.216494][ T5930] get_1284_register: usb error -71 [ 2172.259915][ T5930] usb 4-1: USB disconnect, device number 86 [ 2172.357524][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 2172.357541][ T29] audit: type=1400 audit(1776968768.401:1453): avc: denied { create } for pid=28557 comm="syz.1.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.390372][T28556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5786'. [ 2172.403832][T28556] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5786'. [ 2172.416142][ T29] audit: type=1400 audit(1776968768.471:1454): avc: denied { connect } for pid=28557 comm="syz.1.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.436820][T28556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5786'. [ 2172.457316][T28556] netlink: 12 bytes leftover after parsing attributes in process `syz.5.5786'. [ 2172.576883][ T29] audit: type=1400 audit(1776968768.621:1455): avc: denied { write } for pid=28557 comm="syz.1.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.641452][ T29] audit: type=1400 audit(1776968768.651:1456): avc: denied { read } for pid=28557 comm="syz.1.5787" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 2172.719323][ T29] audit: type=1400 audit(1776968768.721:1457): avc: denied { setopt } for pid=28563 comm="syz.5.5789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2172.999005][T28572] netlink: 'syz.5.5791': attribute type 2 has an invalid length. [ 2173.007302][T28572] netlink: 'syz.5.5791': attribute type 2 has an invalid length. [ 2173.439519][T28576] /dev/nullb0: Can't open blockdev [ 2173.688507][ T5941] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 2173.977281][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5794'. [ 2173.986932][T28580] netlink: 16 bytes leftover after parsing attributes in process `syz.5.5794'. [ 2174.034330][ T5941] usb 4-1: Using ep0 maxpacket: 16 [ 2174.077885][T28580] netlink: 24 bytes leftover after parsing attributes in process `syz.5.5794'. [ 2174.229927][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2174.241289][ T5941] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2174.251457][ T5941] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2174.261570][ T5941] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2174.289931][ T5941] usb 4-1: config 0 descriptor?? [ 2174.901351][ T5930] usb 6-1: new high-speed USB device number 90 using dummy_hcd [ 2176.596074][ T5941] usbhid 4-1:0.0: can't add hid device: -71 [ 2176.611554][ T5941] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2176.611929][ T5930] usb 6-1: Using ep0 maxpacket: 16 [ 2176.655772][ T5941] usb 4-1: USB disconnect, device number 87 [ 2176.678718][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2176.730412][ T5930] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2176.797193][ T5930] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2176.816845][ T5930] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2176.919034][ T5930] usb 6-1: config 0 descriptor?? [ 2179.367233][ T5930] usbhid 6-1:0.0: can't add hid device: -71 [ 2179.397064][ T5930] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 2179.470392][ T5930] usb 6-1: USB disconnect, device number 90 [ 2179.761053][ T5941] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 2179.942768][ T5941] usb 1-1: Using ep0 maxpacket: 16 [ 2179.957266][ T5941] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2179.968483][ T5941] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2179.977479][ T5941] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2179.987541][ T5941] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2179.996455][ T5941] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2180.009154][ T5941] usb 1-1: config 0 has no interface number 0 [ 2180.016997][ T5941] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2180.044933][ T5941] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2180.069079][ T5941] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2180.079530][ T5941] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2180.095886][ T5941] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2180.103100][ T5941] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2180.122948][ T5941] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2180.141061][ T5941] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2180.189559][ T5941] usb 1-1: Product: syz [ 2180.231614][ T5941] usb 1-1: Manufacturer: syz [ 2180.269805][ T5941] usb 1-1: SerialNumber: syz [ 2180.497886][ T5941] usb 1-1: config 0 descriptor?? [ 2180.517667][ T5941] usb 1-1: selecting invalid altsetting 2 [ 2180.895163][ C0] usb 1-1: async_complete: urb error -71 [ 2180.900975][ C0] usb 1-1: async_complete: urb error -71 [ 2180.906761][ C0] usb 1-1: async_complete: urb error -71 [ 2180.912540][ C0] usb 1-1: async_complete: urb error -71 [ 2180.945466][ T5941] get_1284_register: usb error -71 [ 2181.078430][ T5941] usb 1-1: USB disconnect, device number 87 [ 2181.662243][T28633] bridge0: port 3(erspan0) entered blocking state [ 2181.668994][T28633] bridge0: port 3(erspan0) entered disabled state [ 2181.675669][T28633] erspan0: entered allmulticast mode [ 2181.682185][T28633] erspan0: entered promiscuous mode [ 2181.688113][T28633] bridge0: port 3(erspan0) entered blocking state [ 2181.694627][T28633] bridge0: port 3(erspan0) entered forwarding state [ 2181.712337][T28631] tipc: Enabled bearer , priority 0 [ 2181.722285][T28631] syzkaller0: entered promiscuous mode [ 2181.727891][T28631] syzkaller0: entered allmulticast mode [ 2181.758837][T28633] erspan0: left allmulticast mode [ 2181.764142][T28633] erspan0: left promiscuous mode [ 2181.769312][T28633] bridge0: port 3(erspan0) entered disabled state [ 2181.972268][T28631] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5807'. [ 2182.034007][T28631] tipc: Resetting bearer [ 2182.180406][T28629] tipc: Resetting bearer [ 2182.647004][T28629] tipc: Disabling bearer [ 2183.020806][T28649] loop6: detected capacity change from 0 to 2640 [ 2183.079177][T27989] buffer_io_error: 16 callbacks suppressed [ 2183.079196][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2183.990671][T27989] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.041037][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.053316][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.062659][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.071394][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.080211][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.089285][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.098814][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.109806][T28649] Buffer I/O error on dev loop6, logical block 0, async page read [ 2184.142459][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2184.152335][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2184.165170][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2184.175327][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2184.185502][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2184.195424][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2184.270037][T28649] ldm_validate_partition_table(): Disk read failed. [ 2184.471993][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2184.481931][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2184.655069][ T29] audit: type=1400 audit(1776968780.571:1458): avc: denied { create } for pid=28660 comm="syz.0.5816" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2184.686306][T28649] Dev loop6: unable to read RDB block 0 [ 2184.751935][T28649] loop6: unable to read partition table [ 2184.879822][T28649] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2185.155530][T28661] tipc: Enabled bearer , priority 0 [ 2185.186887][T28661] syzkaller0: entered allmulticast mode [ 2185.275542][ T29] audit: type=1400 audit(1776968781.321:1459): avc: denied { name_bind } for pid=28657 comm="syz.1.5815" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 2185.299303][T28661] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 2185.318149][T28659] tipc: Resetting bearer [ 2185.327272][ T29] audit: type=1400 audit(1776968781.351:1460): avc: denied { node_bind } for pid=28657 comm="syz.1.5815" saddr=::1 src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 2185.450332][T28657] tipc: Disabling bearer [ 2185.514279][T28674] FAULT_INJECTION: forcing a failure. [ 2185.514279][T28674] name failslab, interval 1, probability 0, space 0, times 0 [ 2185.527615][T28674] CPU: 0 UID: 0 PID: 28674 Comm: syz.2.5818 Tainted: G L syzkaller #0 PREEMPT(full) [ 2185.527653][T28674] Tainted: [L]=SOFTLOCKUP [ 2185.527660][T28674] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2185.527673][T28674] Call Trace: [ 2185.527681][T28674] [ 2185.527691][T28674] dump_stack_lvl+0x100/0x190 [ 2185.527727][T28674] should_fail_ex.cold+0x5/0xa [ 2185.527758][T28674] should_failslab+0xc2/0x120 [ 2185.527788][T28674] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2185.527819][T28674] ? __alloc_skb+0x140/0x710 [ 2185.527848][T28674] ? __alloc_skb+0x5b7/0x710 [ 2185.527881][T28674] __alloc_skb+0x140/0x710 [ 2185.527908][T28674] ? __alloc_skb+0x5b7/0x710 [ 2185.527936][T28674] ? __pfx___alloc_skb+0x10/0x10 [ 2185.527966][T28674] ? __lock_acquire+0x4a5/0x2630 [ 2185.527998][T28674] alloc_skb_with_frags+0xdd/0x760 [ 2185.528050][T28674] sock_alloc_send_pskb+0x801/0x980 [ 2185.528087][T28674] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 2185.528110][T28674] ? selinux_socket_getpeersec_dgram+0x1a4/0x380 [ 2185.528131][T28674] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 2185.528158][T28674] ? __pfx_avc_has_perm+0x10/0x10 [ 2185.528193][T28674] unix_dgram_sendmsg+0x3c7/0x1810 [ 2185.528225][T28674] ? sock_has_perm+0x258/0x2f0 [ 2185.528247][T28674] ? __pfx_sock_has_perm+0x10/0x10 [ 2185.528270][T28674] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 2185.528296][T28674] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 2185.528328][T28674] ? iovec_from_user+0xda/0x140 [ 2185.528361][T28674] ? __might_fault+0x30/0x140 [ 2185.528389][T28674] ? __might_fault+0xc5/0x140 [ 2185.528421][T28674] unix_seqpacket_sendmsg+0x12a/0x1d0 [ 2185.528452][T28674] ____sys_sendmsg+0x9e1/0xb70 [ 2185.528476][T28674] ? __pfx_unix_seqpacket_sendmsg+0x10/0x10 [ 2185.528506][T28674] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2185.528544][T28674] ___sys_sendmsg+0x190/0x1e0 [ 2185.528572][T28674] ? __pfx____sys_sendmsg+0x10/0x10 [ 2185.528634][T28674] __sys_sendmsg+0x170/0x220 [ 2185.528665][T28674] ? __pfx___sys_sendmsg+0x10/0x10 [ 2185.528709][T28674] ? rcu_is_watching+0x12/0xc0 [ 2185.528744][T28674] do_syscall_64+0x10b/0xf80 [ 2185.528773][T28674] ? clear_bhb_loop+0x40/0x90 [ 2185.528799][T28674] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2185.528822][T28674] RIP: 0033:0x7f22bcf9c819 [ 2185.528841][T28674] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2185.528862][T28674] RSP: 002b:00007f22bde31028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2185.528884][T28674] RAX: ffffffffffffffda RBX: 00007f22bd215fa0 RCX: 00007f22bcf9c819 [ 2185.528898][T28674] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000006 [ 2185.528911][T28674] RBP: 00007f22bde31090 R08: 0000000000000000 R09: 0000000000000000 [ 2185.528929][T28674] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2185.528942][T28674] R13: 00007f22bd216038 R14: 00007f22bd215fa0 R15: 00007ffcace6d698 [ 2185.528972][T28674] [ 2188.395765][T28700] bridge0: port 3(erspan0) entered blocking state [ 2188.411553][T28700] bridge0: port 3(erspan0) entered disabled state [ 2188.441147][T28700] erspan0: entered allmulticast mode [ 2188.900117][T28700] erspan0: entered promiscuous mode [ 2189.352235][T28702] erspan0: left allmulticast mode [ 2189.381016][T28702] erspan0: left promiscuous mode [ 2189.409820][T28702] bridge0: port 3(erspan0) entered disabled state [ 2189.734751][T28712] loop6: detected capacity change from 0 to 2640 [ 2190.092077][T28712] buffer_io_error: 11 callbacks suppressed [ 2190.092105][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.141756][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.262585][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2190.272429][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2190.283381][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.325356][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2190.326855][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2190.335519][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2190.355355][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2190.399632][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.400385][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2190.417551][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2190.491463][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.575663][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.614306][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.626010][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.635174][T28712] ldm_validate_partition_table(): Disk read failed. [ 2190.642448][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.654010][T28712] Buffer I/O error on dev loop6, logical block 0, async page read [ 2190.664867][T28712] Dev loop6: unable to read RDB block 0 [ 2190.684697][T28712] loop6: unable to read partition table [ 2190.694523][T28712] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2191.691059][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2191.706807][ T5197] Dev loop6: unable to read RDB block 0 [ 2191.726271][ T5197] loop6: unable to read partition table [ 2191.786236][T28732] loop6: detected capacity change from 0 to 2640 [ 2191.869376][T28732] ldm_validate_partition_table(): Disk read failed. [ 2191.896116][T28732] Dev loop6: unable to read RDB block 0 [ 2191.932725][T28732] loop6: unable to read partition table [ 2191.958746][T28732] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2192.025289][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2192.035143][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2192.809195][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2192.917569][ T5197] Dev loop6: unable to read RDB block 0 [ 2192.935907][ T5197] loop6: unable to read partition table [ 2193.411557][ T5930] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 2193.649675][ T5930] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 2193.807622][ T5930] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 2194.004073][ T5930] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 2194.163282][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 2194.247408][ T5930] usb 1-1: SerialNumber: syz [ 2194.300604][T28765] bridge0: port 3(erspan0) entered blocking state [ 2194.335420][T28765] bridge0: port 3(erspan0) entered disabled state [ 2194.375479][T28765] erspan0: entered allmulticast mode [ 2194.427961][T28765] erspan0: entered promiscuous mode [ 2194.511533][T28766] erspan0: left allmulticast mode [ 2194.530393][T28766] erspan0: left promiscuous mode [ 2194.544467][T28766] bridge0: port 3(erspan0) entered disabled state [ 2194.674788][T28774] loop6: detected capacity change from 0 to 2640 [ 2194.724393][T28774] ldm_validate_partition_table(): Disk read failed. [ 2194.766420][T28774] Dev loop6: unable to read RDB block 0 [ 2194.798977][T28774] loop6: unable to read partition table [ 2194.805229][T28774] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2194.961979][T28778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2194.988855][T28778] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2195.020390][T28778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2195.067198][T28778] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5842'. [ 2195.156011][T28780] tipc: Started in network mode [ 2195.169709][T28780] tipc: Node identity 5e5a0f434696, cluster identity 4711 [ 2195.188682][T28780] tipc: Enabled bearer , priority 0 [ 2195.236075][T28780] syzkaller0: entered promiscuous mode [ 2195.266602][T28780] syzkaller0: entered allmulticast mode [ 2195.313523][T28783] netlink: 300 bytes leftover after parsing attributes in process `syz.2.5844'. [ 2195.314337][ T29] audit: type=1400 audit(1776968791.361:1461): avc: denied { read write } for pid=28784 comm="syz.1.5845" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2195.366758][ T29] audit: type=1400 audit(1776968791.411:1462): avc: denied { open } for pid=28784 comm="syz.1.5845" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 2195.395356][T28780] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5843'. [ 2195.456631][T28783] netlink: 'syz.2.5844': attribute type 1 has an invalid length. [ 2195.465552][T28783] netlink: 384 bytes leftover after parsing attributes in process `syz.2.5844'. [ 2195.478786][T28782] tipc: Resetting bearer [ 2195.493317][T28783] ./file0: Can't lookup blockdev [ 2195.505393][ T29] audit: type=1400 audit(1776968791.551:1463): avc: denied { setopt } for pid=28781 comm="syz.2.5844" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2195.547346][T28779] tipc: Resetting bearer [ 2195.598384][T28779] tipc: Disabling bearer [ 2196.157722][ T5930] usb 1-1: 0:2 : does not exist [ 2196.177673][ T5930] usb 1-1: unit 5: unexpected type 0x0b [ 2196.376725][ T5930] usb 1-1: USB disconnect, device number 88 [ 2196.441020][T27989] udevd[27989]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2196.521448][T17633] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 2196.684779][T17633] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 2196.712933][T17633] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2196.753657][T17633] usb 6-1: config 0 descriptor?? [ 2196.763726][T17633] cp210x 6-1:0.0: cp210x converter detected [ 2197.216622][T17633] cp210x 6-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 2197.344152][ T29] audit: type=1400 audit(1776968793.381:1464): avc: denied { create } for pid=28810 comm="syz.0.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2197.373932][T28812] siw: device registration error -23 [ 2197.443561][ T29] audit: type=1400 audit(1776968793.421:1465): avc: denied { write } for pid=28810 comm="syz.0.5851" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 2198.325329][T17633] cp210x 6-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 2198.338183][T17633] cp210x 6-1:0.0: GPIO initialisation failed: -71 [ 2198.370173][T17633] usb 6-1: cp210x converter now attached to ttyUSB0 [ 2198.391989][T17633] usb 6-1: USB disconnect, device number 91 [ 2198.401619][T17633] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 2198.410133][T17633] cp210x 6-1:0.0: device disconnected [ 2198.978532][ T29] audit: type=1400 audit(1776968795.011:1466): avc: denied { read write } for pid=28819 comm="syz.5.5854" name="rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2199.047076][ T29] audit: type=1400 audit(1776968795.021:1467): avc: denied { open } for pid=28819 comm="syz.5.5854" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 2199.090413][ T29] audit: type=1400 audit(1776968795.061:1468): avc: denied { write } for pid=28819 comm="syz.5.5854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 2199.112708][ T5930] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 2199.281901][ T5930] usb 1-1: Using ep0 maxpacket: 8 [ 2199.302444][ T5930] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 2199.323266][T28833] loop6: detected capacity change from 0 to 2640 [ 2199.334680][ T5930] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2199.366029][T28833] buffer_io_error: 105 callbacks suppressed [ 2199.366054][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.388897][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 2199.421192][ T5930] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 2199.461430][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.481719][ T5930] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2199.534000][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.542160][ C0] blk_print_req_error: 14 callbacks suppressed [ 2199.542178][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2199.558180][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2199.568053][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2199.578197][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2199.588562][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2199.598477][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2199.608282][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2199.611605][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.618146][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2199.657849][ T5930] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 2199.676917][ T5930] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2199.759701][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.942813][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2199.991479][ T5930] usb 1-1: usb_control_msg returned -32 [ 2200.032748][ T5930] usbtmc 1-1:16.0: can't read capabilities [ 2200.058241][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2200.098710][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2200.107734][T28833] ldm_validate_partition_table(): Disk read failed. [ 2200.121940][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2200.365714][T28833] Buffer I/O error on dev loop6, logical block 0, async page read [ 2200.395724][T28833] Dev loop6: unable to read RDB block 0 [ 2200.403851][T28833] loop6: unable to read partition table [ 2200.411437][T28833] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2200.733398][T28843] sp0: Synchronizing with TNC [ 2200.751708][ T29] audit: type=1400 audit(1776968796.781:1469): avc: denied { execute } for pid=28836 comm="syz.3.5857" name="file2" dev="tmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2200.857848][ T29] audit: type=1400 audit(1776968796.901:1470): avc: denied { execute_no_trans } for pid=28836 comm="syz.3.5857" path="/561/file2" dev="tmpfs" ino=2995 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 2201.031058][ T29] audit: type=1400 audit(1776968796.941:1471): avc: denied { name_bind } for pid=28825 comm="syz.0.5855" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 2201.845527][ T29] audit: type=1400 audit(1776968797.891:1472): avc: denied { name_bind } for pid=28846 comm="syz.1.5858" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 2201.978110][T28848] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=5123 sclass=netlink_tcpdiag_socket pid=28848 comm=syz.1.5858 [ 2202.825877][T28854] tipc: Enabled bearer , priority 0 [ 2202.862512][T28853] syzkaller0: entered promiscuous mode [ 2202.871184][T28853] syzkaller0: entered allmulticast mode [ 2203.051343][T28854] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5860'. [ 2203.142012][T28858] tipc: Resetting bearer [ 2203.252545][T28852] tipc: Resetting bearer [ 2203.473593][T28852] tipc: Disabling bearer [ 2204.064712][T28869] loop6: detected capacity change from 0 to 2640 [ 2204.085816][T28869] ldm_validate_partition_table(): Disk read failed. [ 2204.123859][T28869] Dev loop6: unable to read RDB block 0 [ 2204.130793][T28869] loop6: unable to read partition table [ 2204.173806][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2204.183620][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2204.196920][T28869] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2205.126499][T28876] FAULT_INJECTION: forcing a failure. [ 2205.126499][T28876] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2205.140412][T28876] CPU: 1 UID: 0 PID: 28876 Comm: syz.5.5866 Tainted: G L syzkaller #0 PREEMPT(full) [ 2205.140447][T28876] Tainted: [L]=SOFTLOCKUP [ 2205.140455][T28876] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2205.140468][T28876] Call Trace: [ 2205.140475][T28876] [ 2205.140485][T28876] dump_stack_lvl+0x100/0x190 [ 2205.140518][T28876] should_fail_ex.cold+0x5/0xa [ 2205.140553][T28876] _copy_from_user+0x2e/0xd0 [ 2205.140582][T28876] kstrtouint_from_user+0xd6/0x1d0 [ 2205.140604][T28876] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 2205.140625][T28876] ? __lock_acquire+0x4a5/0x2630 [ 2205.140657][T28876] ? lock_acquire+0x1b1/0x370 [ 2205.140688][T28876] proc_fail_nth_write+0x83/0x220 [ 2205.140712][T28876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2205.140743][T28876] vfs_write+0x2aa/0x1070 [ 2205.140768][T28876] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 2205.140793][T28876] ? __pfx_vfs_write+0x10/0x10 [ 2205.140815][T28876] ? __fget_files+0x215/0x3d0 [ 2205.140847][T28876] ? __fget_files+0x21f/0x3d0 [ 2205.140881][T28876] ksys_write+0x12a/0x250 [ 2205.140903][T28876] ? __pfx_ksys_write+0x10/0x10 [ 2205.140928][T28876] ? rcu_is_watching+0x12/0xc0 [ 2205.140962][T28876] do_syscall_64+0x10b/0xf80 [ 2205.140991][T28876] ? clear_bhb_loop+0x40/0x90 [ 2205.141017][T28876] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2205.141039][T28876] RIP: 0033:0x7f5acb55d04e [ 2205.141057][T28876] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 2205.141077][T28876] RSP: 002b:00007f5acc486fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2205.141099][T28876] RAX: ffffffffffffffda RBX: 00007f5acc4876c0 RCX: 00007f5acb55d04e [ 2205.141113][T28876] RDX: 0000000000000001 RSI: 00007f5acc4870a0 RDI: 0000000000000004 [ 2205.141127][T28876] RBP: 00007f5acc487090 R08: 0000000000000000 R09: 0000000000000000 [ 2205.141140][T28876] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2205.141153][T28876] R13: 00007f5acb816128 R14: 00007f5acb816090 R15: 00007fff4829c768 [ 2205.141183][T28876] [ 2205.529106][T28826] usbtmc 1-1:16.0: usb_control_msg returned -110 [ 2205.942040][T27599] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 2206.102679][T27599] usb 6-1: Using ep0 maxpacket: 8 [ 2206.136157][T27599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2206.168742][T27599] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2206.216988][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2206.267627][T27599] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2206.309819][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2206.365645][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2206.409235][T27599] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2206.459105][T27599] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2206.488525][T27599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2206.505151][T27599] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2206.532716][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2206.565803][T27599] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2206.606845][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2206.638721][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2206.666503][T27599] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2206.680946][T27599] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2206.691463][T27599] usb 6-1: config 168 descriptor has 1 excess byte, ignoring [ 2206.700849][T27599] usb 6-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 2206.713379][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 2206.734833][T27599] usb 6-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 2206.751745][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 2206.765916][T27599] usb 6-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 2206.766483][ T29] audit: type=1400 audit(1776968802.821:1473): avc: denied { accept } for pid=28888 comm="syz.1.5870" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2206.778756][T27599] usb 6-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 2206.816110][T27599] usb 6-1: config 168 interface 0 has no altsetting 0 [ 2206.850314][T27599] usb 6-1: string descriptor 0 read error: -22 [ 2206.856928][T27599] usb 6-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 2206.868162][T27599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2206.891343][T17633] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 2206.903266][T27599] adutux 6-1:168.0: ADU100 now attached to /dev/usb/adutux1 [ 2207.065325][T17633] usb 3-1: Using ep0 maxpacket: 32 [ 2207.081572][T17633] usb 3-1: config 0 has an invalid interface number: 12 but max is 0 [ 2207.093981][T17633] usb 3-1: config 0 has no interface number 0 [ 2207.113624][T27599] usb 6-1: USB disconnect, device number 92 [ 2207.137967][T17633] usb 3-1: config 0 interface 12 has no altsetting 0 [ 2207.153690][T17633] usb 3-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 2207.169196][T17633] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2207.208062][T17633] usb 3-1: Product: syz [ 2207.220807][T17633] usb 3-1: Manufacturer: syz [ 2207.232761][T17633] usb 3-1: SerialNumber: syz [ 2207.285207][T17633] usb 3-1: config 0 descriptor?? [ 2207.550279][ T29] audit: type=1400 audit(1776968803.401:1474): avc: denied { mount } for pid=28888 comm="syz.1.5870" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 2207.594849][ T5941] usb 1-1: USB disconnect, device number 89 [ 2207.741460][T27599] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 2207.901903][T27599] usb 6-1: Using ep0 maxpacket: 16 [ 2207.924385][T28897] netlink: 'syz.0.5871': attribute type 2 has an invalid length. [ 2207.932724][T28897] netlink: 'syz.0.5871': attribute type 2 has an invalid length. [ 2207.990688][T27599] usb 6-1: config 0 has an invalid descriptor of length 55, skipping remainder of the config [ 2207.993075][T28887] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 2208.005496][T27599] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 2208.216562][T27599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 2208.230058][T27599] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 2208.248922][T27599] usb 6-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 2208.248997][T28887] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 2208.258610][T27599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2208.308274][T27599] usb 6-1: Product: syz [ 2208.313460][T27599] usb 6-1: Manufacturer: syz [ 2208.318677][T27599] usb 6-1: SerialNumber: syz [ 2208.388774][T27599] usb 6-1: config 0 descriptor?? [ 2208.617015][T17633] f81534 3-1:0.12: f81534_get_register: reg: 1003 failed: -71 [ 2208.624818][T17633] f81534 3-1:0.12: f81534_find_config_idx: read failed: -71 [ 2208.645959][T17633] f81534 3-1:0.12: f81534_calc_num_ports: find idx failed: -71 [ 2208.697267][T17633] f81534 3-1:0.12: probe with driver f81534 failed with error -71 [ 2208.726228][T27599] appledisplay 6-1:0.0: Error while getting initial brightness: -71 [ 2208.755679][T27599] appledisplay 6-1:0.0: probe with driver appledisplay failed with error -71 [ 2208.888882][T27599] usb 6-1: USB disconnect, device number 93 [ 2208.932430][T17633] usb 3-1: USB disconnect, device number 87 [ 2209.026309][T28905] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5872'. [ 2211.203889][ T29] audit: type=1400 audit(1776968807.021:1475): avc: denied { bind } for pid=28920 comm="syz.1.5878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 2211.290017][T28926] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5878'. [ 2211.770297][T17633] usb 6-1: new high-speed USB device number 94 using dummy_hcd [ 2211.795998][ T29] audit: type=1400 audit(1776968807.021:1476): avc: denied { name_bind } for pid=28920 comm="syz.1.5878" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 2211.823321][ T29] audit: type=1400 audit(1776968807.021:1477): avc: denied { node_bind } for pid=28920 comm="syz.1.5878" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 2211.845942][ T29] audit: type=1400 audit(1776968807.341:1478): avc: denied { read } for pid=28920 comm="syz.1.5878" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2211.889915][ T29] audit: type=1400 audit(1776968807.341:1479): avc: denied { open } for pid=28920 comm="syz.1.5878" path="/dev/ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 2212.031771][T17633] usb 6-1: Using ep0 maxpacket: 16 [ 2212.051605][ T29] audit: type=1400 audit(1776968808.081:1480): avc: denied { mount } for pid=28930 comm="syz.1.5880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 2212.120109][T28932] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 2212.337573][ T29] audit: type=1400 audit(1776968808.161:1481): avc: denied { mounton } for pid=28930 comm="syz.1.5880" path="/540/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2212.337603][T17633] usb 6-1: config index 0 descriptor too short (expected 16456, got 72) [ 2212.337651][T17633] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2212.387009][T17633] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2212.396609][T17633] usb 6-1: config 0 has an invalid interface number: 125 but max is 1 [ 2212.405218][T17633] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2212.422798][T17633] usb 6-1: config 0 has no interface number 0 [ 2212.429326][T17633] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2212.442216][T17633] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2212.455948][T17633] usb 6-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2212.467040][T17633] usb 6-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2212.468365][ T29] audit: type=1400 audit(1776968808.181:1482): avc: denied { mount } for pid=28930 comm="syz.1.5880" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 2212.480820][T17633] usb 6-1: config 0 interface 125 has no altsetting 0 [ 2212.578821][T17633] usb 6-1: config 0 interface 125 has no altsetting 2 [ 2212.921205][T17633] usb 6-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2212.978988][ T29] audit: type=1400 audit(1776968808.261:1483): avc: denied { read } for pid=28930 comm="syz.1.5880" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2212.979017][T17633] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2212.979061][T17633] usb 6-1: Product: syz [ 2213.098918][T17633] usb 6-1: Manufacturer: syz [ 2213.128090][T17633] usb 6-1: SerialNumber: syz [ 2213.165126][ T29] audit: type=1400 audit(1776968808.261:1484): avc: denied { read } for pid=28930 comm="syz.1.5880" name="/" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2213.284621][ T29] audit: type=1400 audit(1776968808.261:1485): avc: denied { open } for pid=28930 comm="syz.1.5880" path="/540/file0" dev="overlay" ino=4611686018427387905 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 2213.419357][T17633] usb 6-1: config 0 descriptor?? [ 2213.468678][T17633] usb 6-1: can't set config #0, error -71 [ 2213.593902][T17633] usb 6-1: USB disconnect, device number 94 [ 2214.280570][T28948] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5883'. [ 2215.824497][T28964] netlink: 'syz.1.5887': attribute type 4 has an invalid length. [ 2216.602799][T28972] loop6: detected capacity change from 0 to 2640 [ 2216.684786][T28975] blk_print_req_error: 6 callbacks suppressed [ 2216.684803][T28975] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2216.830194][T28978] /dev/nullb0: Can't open blockdev [ 2216.842335][T28972] buffer_io_error: 32 callbacks suppressed [ 2216.842378][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.201543][T28975] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2217.213893][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.222469][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.230474][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.238619][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.248544][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2217.258570][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2217.268569][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2217.278399][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2217.288345][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2217.298317][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2217.388060][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.405395][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.476305][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.496444][T28972] ldm_validate_partition_table(): Disk read failed. [ 2217.562692][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.585869][T28972] Buffer I/O error on dev loop6, logical block 0, async page read [ 2217.636382][T28972] Dev loop6: unable to read RDB block 0 [ 2217.678434][T28972] loop6: unable to read partition table [ 2217.724716][T28972] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2218.577847][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2218.645212][ T5197] Dev loop6: unable to read RDB block 0 [ 2218.710521][ T5197] loop6: unable to read partition table [ 2221.496725][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 2221.496750][ T29] audit: type=1400 audit(1776968817.531:1494): avc: denied { write } for pid=29015 comm="syz.3.5899" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 2222.042054][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2222.639955][ T29] audit: type=1400 audit(1776968818.681:1495): avc: denied { setopt } for pid=29023 comm="syz.5.5900" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 2223.718008][T29041] siw: device registration error -23 [ 2224.748271][ T29] audit: type=1400 audit(1776968820.791:1496): avc: denied { unmount } for pid=16928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 2224.796873][ T29] audit: type=1400 audit(1776968820.821:1497): avc: denied { unmount } for pid=16928 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2224.971041][T29055] loop6: detected capacity change from 0 to 2640 [ 2224.997658][T29055] buffer_io_error: 32 callbacks suppressed [ 2224.997677][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.016206][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.046427][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.068633][T29056] siw: device registration error -23 [ 2225.100506][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.199449][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.355267][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2225.365259][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2225.387099][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2225.397268][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2225.443454][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2225.453387][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2225.477848][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.646018][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2225.656101][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2225.676017][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2225.883690][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2226.709980][T29055] ldm_validate_partition_table(): Disk read failed. [ 2226.936358][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2227.061485][T29055] Buffer I/O error on dev loop6, logical block 0, async page read [ 2227.330726][T29073] /dev/nullb0: Can't open blockdev [ 2227.375772][T29073] netlink: 'syz.3.5912': attribute type 2 has an invalid length. [ 2227.384192][T29073] netlink: 'syz.3.5912': attribute type 2 has an invalid length. [ 2227.623576][T29055] Dev loop6: unable to read RDB block 0 [ 2227.633557][T29055] loop6: unable to read partition table [ 2227.765329][T29055] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2228.335434][T29083] /dev/nullb0: Can't open blockdev [ 2228.733910][T22193] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2228.809544][T22193] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2228.833016][T22193] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2228.872958][T22193] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2228.883145][T22193] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2228.908902][ T29] audit: type=1400 audit(1776968824.961:1498): avc: denied { mounton } for pid=29080 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 2229.085709][T29080] wg1 speed is unknown, defaulting to 1000 [ 2229.159422][T29080] lo speed is unknown, defaulting to 1000 [ 2229.958210][T29099] loop5: detected capacity change from 0 to 7 [ 2230.189767][T29099] Dev loop5: unable to read RDB block 7 [ 2230.213468][T29099] loop5: unable to read partition table [ 2230.241687][T29099] loop5: partition table beyond EOD, truncated [ 2230.275872][T29099] loop_reread_partitions: partition scan of loop5 (úùƒå¡™‰ü¾CêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQkÝŠ) failed (rc=-5) [ 2230.395633][T29080] chnl_net:caif_netlink_parms(): no params data found [ 2230.794130][T29080] bridge0: port 1(bridge_slave_0) entered blocking state [ 2230.818980][T29080] bridge0: port 1(bridge_slave_0) entered disabled state [ 2230.849665][T29080] bridge_slave_0: entered allmulticast mode [ 2230.871877][T29116] loop6: detected capacity change from 0 to 2640 [ 2230.887542][T29080] bridge_slave_0: entered promiscuous mode [ 2230.901385][T27599] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 2230.921133][T29080] bridge0: port 2(bridge_slave_1) entered blocking state [ 2230.940532][T29119] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2230.951085][ T5828] Bluetooth: hci0: command tx timeout [ 2230.971517][T29080] bridge0: port 2(bridge_slave_1) entered disabled state [ 2230.987953][T29116] buffer_io_error: 11 callbacks suppressed [ 2230.987976][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.012663][T29080] bridge_slave_1: entered allmulticast mode [ 2231.036679][T29080] bridge_slave_1: entered promiscuous mode [ 2231.062072][T27599] usb 1-1: Using ep0 maxpacket: 16 [ 2231.073886][T29119] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2231.091124][T27599] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 2231.111862][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.123881][T27599] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2231.143047][T29080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2231.158125][T27599] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2231.199563][T27599] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 2231.209153][T29080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2231.220698][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.231643][T27599] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 2231.255748][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.286613][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.291417][T27599] usb 1-1: config 0 has no interface number 0 [ 2231.312345][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2231.322339][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2231.336393][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2231.346402][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2231.356321][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2231.366183][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2231.386718][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.395118][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.420626][T27599] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 2231.432923][T29080] team0: Port device team_slave_0 added [ 2231.461602][T29080] team0: Port device team_slave_1 added [ 2231.467447][T27599] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 2231.479924][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.517145][T27599] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 2231.529073][T29116] ldm_validate_partition_table(): Disk read failed. [ 2231.546371][T27599] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 2231.559836][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.570007][T29116] Buffer I/O error on dev loop6, logical block 0, async page read [ 2231.580767][T29116] Dev loop6: unable to read RDB block 0 [ 2231.602778][T27599] usb 1-1: config 0 interface 125 has no altsetting 0 [ 2231.610875][T29116] loop6: unable to read partition table [ 2231.618363][T27599] usb 1-1: config 0 interface 125 has no altsetting 2 [ 2231.627073][T29116] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2231.656191][T29080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2231.664259][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2231.691379][T29080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2231.731514][T27599] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 2231.769026][T27599] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2231.785034][T29080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2231.804744][T27599] usb 1-1: Product: syz [ 2231.809088][T29080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2231.841367][T27599] usb 1-1: Manufacturer: syz [ 2231.857290][T27599] usb 1-1: SerialNumber: syz [ 2231.866039][T29080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2231.875843][T27599] usb 1-1: config 0 descriptor?? [ 2231.946003][T27599] usb 1-1: selecting invalid altsetting 2 [ 2232.199261][ C1] usb 1-1: async_complete: urb error -71 [ 2232.205125][ C1] usb 1-1: async_complete: urb error -71 [ 2232.210911][ C1] usb 1-1: async_complete: urb error -71 [ 2232.216653][ C1] usb 1-1: async_complete: urb error -71 [ 2232.227716][T29080] hsr_slave_0: entered promiscuous mode [ 2232.234685][T29080] hsr_slave_1: entered promiscuous mode [ 2232.265430][T27599] get_1284_register: usb error -71 [ 2232.317900][T27599] usb 1-1: USB disconnect, device number 90 [ 2232.362691][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2232.377727][ T5197] Dev loop6: unable to read RDB block 0 [ 2232.408457][ T5197] loop6: unable to read partition table [ 2233.036095][T29129] loop6: detected capacity change from 0 to 2640 [ 2233.043859][T29129] ldm_validate_partition_table(): Disk read failed. [ 2233.055198][T29129] Dev loop6: unable to read RDB block 0 [ 2233.061654][T29129] loop6: unable to read partition table [ 2233.067668][T29129] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2233.080440][ T5828] Bluetooth: hci0: command tx timeout [ 2233.647188][T29139] /dev/nullb0: Can't open blockdev [ 2234.383632][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2234.399939][ T5197] Dev loop6: unable to read RDB block 0 [ 2234.422612][ T5197] loop6: unable to read partition table [ 2234.471219][T29146] loop6: detected capacity change from 0 to 2640 [ 2234.503925][T29146] ldm_validate_partition_table(): Disk read failed. [ 2234.530905][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2234.540753][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2234.551385][T29146] Dev loop6: unable to read RDB block 0 [ 2234.560144][T29080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2234.578758][T29146] loop6: unable to read partition table [ 2234.596419][T29080] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2234.607153][T29146] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2235.101453][ T5828] Bluetooth: hci0: command tx timeout [ 2235.358582][T29159] netlink: 212348 bytes leftover after parsing attributes in process `syz.5.5929'. [ 2235.368958][T29159] netlink: Unknown conntrack attr (type=15, max=9) [ 2235.679895][ T29] audit: type=1400 audit(1776968831.391:1499): avc: denied { remount } for pid=29152 comm="syz.5.5929" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 2235.848474][T29151] syzkaller0: entered promiscuous mode [ 2235.868064][T29151] syzkaller0: entered allmulticast mode [ 2235.878983][T29162] fuse: Unknown parameter 'group_i00000000000000000000' [ 2236.067020][T29080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2236.078657][T29080] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2236.351880][ T5941] usb 2-1: new high-speed USB device number 116 using dummy_hcd [ 2236.538789][ T5941] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 2236.593438][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 2236.628743][ T5941] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 2236.648809][ T5941] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 2236.663776][ T5941] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 2236.673206][ T5941] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2236.702274][ T5941] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 2236.719478][ T5941] usb 2-1: invalid MIDI out EP 0 [ 2236.763298][T29080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2236.784165][T29080] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2237.202240][ T5828] Bluetooth: hci0: command tx timeout [ 2237.317277][T29183] loop6: detected capacity change from 0 to 2640 [ 2237.341747][T27763] udevd[27763]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 2237.420686][ C1] blk_print_req_error: 6 callbacks suppressed [ 2237.420712][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2237.436609][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2237.452623][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2237.462654][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2237.472632][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2237.482386][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2237.492147][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2237.501980][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2237.529405][T29183] buffer_io_error: 95 callbacks suppressed [ 2237.529428][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2237.639750][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2237.651964][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2237.682752][T29189] FAULT_INJECTION: forcing a failure. [ 2237.682752][T29189] name failslab, interval 1, probability 0, space 0, times 0 [ 2237.696648][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2237.705033][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2237.724875][T29189] CPU: 1 UID: 0 PID: 29189 Comm: syz.1.5938 Tainted: G L syzkaller #0 PREEMPT(full) [ 2237.724913][T29189] Tainted: [L]=SOFTLOCKUP [ 2237.724920][T29189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2237.724932][T29189] Call Trace: [ 2237.724940][T29189] [ 2237.724949][T29189] dump_stack_lvl+0x100/0x190 [ 2237.724976][T29189] should_fail_ex.cold+0x5/0xa [ 2237.724995][T29189] ? bpf_test_init.isra.0+0x88/0x100 [ 2237.725017][T29189] should_failslab+0xc2/0x120 [ 2237.725032][T29189] __kmalloc_noprof+0xe0/0x850 [ 2237.725054][T29189] bpf_test_init.isra.0+0x88/0x100 [ 2237.725076][T29189] bpf_prog_test_run_skb+0x497/0x3540 [ 2237.725095][T29189] ? find_held_lock+0x2b/0x80 [ 2237.725108][T29189] ? __fget_files+0x1e1/0x3d0 [ 2237.725127][T29189] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2237.725142][T29189] ? fput+0x79/0x100 [ 2237.725159][T29189] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 2237.725173][T29189] __sys_bpf+0x1725/0x4b90 [ 2237.725194][T29189] ? __pfx___sys_bpf+0x10/0x10 [ 2237.725210][T29189] ? proc_fail_nth_write+0x9f/0x220 [ 2237.725222][T29189] ? find_held_lock+0x2b/0x80 [ 2237.725236][T29189] ? find_held_lock+0x2b/0x80 [ 2237.725248][T29189] ? ksys_write+0x190/0x250 [ 2237.725259][T29189] ? ksys_write+0x190/0x250 [ 2237.725274][T29189] ? __mutex_unlock_slowpath+0x15d/0x8a0 [ 2237.725292][T29189] ? kernel_write+0x6a3/0x6c0 [ 2237.725304][T29189] ? __fget_files+0x215/0x3d0 [ 2237.725325][T29189] ? fput+0x79/0x100 [ 2237.725340][T29189] ? ksys_write+0x1ac/0x250 [ 2237.725352][T29189] ? __pfx_ksys_write+0x10/0x10 [ 2237.725366][T29189] __x64_sys_bpf+0x7b/0xc0 [ 2237.725377][T29189] ? lockdep_hardirqs_on+0x78/0x100 [ 2237.725394][T29189] do_syscall_64+0x10b/0xf80 [ 2237.725410][T29189] ? clear_bhb_loop+0x40/0x90 [ 2237.725427][T29189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2237.725439][T29189] RIP: 0033:0x7f4d9f59c819 [ 2237.725452][T29189] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2237.725463][T29189] RSP: 002b:00007f4da0441028 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 2237.725475][T29189] RAX: ffffffffffffffda RBX: 00007f4d9f815fa0 RCX: 00007f4d9f59c819 [ 2237.725483][T29189] RDX: 0000000000000050 RSI: 0000200000000380 RDI: 000000000000000a [ 2237.725490][T29189] RBP: 00007f4da0441090 R08: 0000000000000000 R09: 0000000000000000 [ 2237.725497][T29189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2237.725504][T29189] R13: 00007f4d9f816038 R14: 00007f4d9f815fa0 R15: 00007ffc98fd8308 [ 2237.725520][T29189] [ 2238.024044][ T5941] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 2238.036705][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2238.062666][T29080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2238.107342][ T5941] usb 2-1: USB disconnect, device number 116 [ 2238.124749][T29080] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2238.275990][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2238.319326][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2238.488461][T29183] ldm_validate_partition_table(): Disk read failed. [ 2238.564520][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2238.627956][T29183] Buffer I/O error on dev loop6, logical block 0, async page read [ 2238.707551][T29183] Dev loop6: unable to read RDB block 0 [ 2238.749185][T29183] loop6: unable to read partition table [ 2238.814740][T29183] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2239.342132][T29204] tipc: Enabled bearer , priority 0 [ 2239.365214][T29204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5941'. [ 2239.387096][T29204] tipc: Resetting bearer [ 2239.517116][T29206] fuse: Unknown parameter 'group_i00000000000000000000' [ 2239.549622][T29203] tipc: Disabling bearer [ 2240.150761][T29213] netlink: 20 bytes leftover after parsing attributes in process `syz.5.5943'. [ 2240.528717][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2240.549760][ T5197] Dev loop6: unable to read RDB block 0 [ 2240.567036][ T5197] loop6: unable to read partition table [ 2241.640577][T29080] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 2241.660824][T29080] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2241.670149][T29080] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 2241.686104][T29080] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2241.704401][T29080] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 2241.721766][ T5941] usb 2-1: new high-speed USB device number 117 using dummy_hcd [ 2241.731768][T29080] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2241.749970][T29080] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 2241.832590][T29080] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2241.892980][ T5941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 2241.912533][ T5941] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 2242.265075][ T5941] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 121 [ 2242.301887][ T5941] usb 2-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 2242.317174][ T5941] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2242.342476][ T5941] usb 2-1: Product: syz [ 2242.346933][ T5941] usb 2-1: Manufacturer: syz [ 2242.358124][ T5941] usb 2-1: SerialNumber: syz [ 2242.389307][T29080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2242.410237][ T5941] usb 2-1: config 0 descriptor?? [ 2242.438756][T29225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2242.446578][T29225] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2242.460915][ T5941] usb 2-1: ucan: probing device on interface #0 [ 2242.516199][T29080] 8021q: adding VLAN 0 to HW filter on device team0 [ 2242.589522][ T6411] bridge0: port 1(bridge_slave_0) entered blocking state [ 2242.596800][ T6411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2242.674217][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 2242.681481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2242.805039][T29239] FAULT_INJECTION: forcing a failure. [ 2242.805039][T29239] name failslab, interval 1, probability 0, space 0, times 0 [ 2242.843965][T29239] CPU: 1 UID: 0 PID: 29239 Comm: syz.5.5949 Tainted: G L syzkaller #0 PREEMPT(full) [ 2242.844002][T29239] Tainted: [L]=SOFTLOCKUP [ 2242.844010][T29239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2242.844022][T29239] Call Trace: [ 2242.844029][T29239] [ 2242.844037][T29239] dump_stack_lvl+0x100/0x190 [ 2242.844059][T29239] should_fail_ex.cold+0x5/0xa [ 2242.844078][T29239] should_failslab+0xc2/0x120 [ 2242.844093][T29239] kmem_cache_alloc_node_noprof+0x81/0x6f0 [ 2242.844124][T29239] ? __alloc_skb+0x140/0x710 [ 2242.844152][T29239] ? __alloc_skb+0x5b7/0x710 [ 2242.844184][T29239] __alloc_skb+0x140/0x710 [ 2242.844201][T29239] ? __alloc_skb+0x5b7/0x710 [ 2242.844217][T29239] ? __pfx___alloc_skb+0x10/0x10 [ 2242.844237][T29239] netlink_alloc_large_skb+0x69/0x150 [ 2242.844262][T29239] netlink_sendmsg+0x680/0xda0 [ 2242.844292][T29239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2242.844315][T29239] ? __might_fault+0x30/0x140 [ 2242.844342][T29239] ____sys_sendmsg+0x9e1/0xb70 [ 2242.844356][T29239] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2242.844371][T29239] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2242.844393][T29239] ___sys_sendmsg+0x190/0x1e0 [ 2242.844421][T29239] ? __pfx____sys_sendmsg+0x10/0x10 [ 2242.844479][T29239] __sys_sendmsg+0x170/0x220 [ 2242.844498][T29239] ? __pfx___sys_sendmsg+0x10/0x10 [ 2242.844521][T29239] ? rcu_is_watching+0x12/0xc0 [ 2242.844542][T29239] do_syscall_64+0x10b/0xf80 [ 2242.844571][T29239] ? clear_bhb_loop+0x40/0x90 [ 2242.844597][T29239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2242.844619][T29239] RIP: 0033:0x7f5acb59c819 [ 2242.844632][T29239] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2242.844643][T29239] RSP: 002b:00007f5acc4a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2242.844656][T29239] RAX: ffffffffffffffda RBX: 00007f5acb815fa0 RCX: 00007f5acb59c819 [ 2242.844664][T29239] RDX: 0000000028008004 RSI: 0000200000003740 RDI: 0000000000000003 [ 2242.844671][T29239] RBP: 00007f5acc4a8090 R08: 0000000000000000 R09: 0000000000000000 [ 2242.844678][T29239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2242.844685][T29239] R13: 00007f5acb816038 R14: 00007f5acb815fa0 R15: 00007fff4829c768 [ 2242.844713][T29239] [ 2243.169736][ T5941] usb 2-1: ucan: device reported invalid tx-fifo size [ 2243.180396][ T5941] usb 2-1: ucan: probe failed; try to update the device firmware [ 2243.215073][T29248] loop6: detected capacity change from 0 to 2640 [ 2243.279558][T28138] buffer_io_error: 27 callbacks suppressed [ 2243.279576][T28138] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.353416][T29080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2243.390055][T28138] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.467557][T28138] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.479111][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.488962][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.508581][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.514701][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.518754][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.538303][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.538326][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2243.548091][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.557763][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2243.577858][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2243.607919][T28138] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.644829][T28138] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.662495][T29248] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.676046][T29080] veth0_vlan: entered promiscuous mode [ 2243.688030][T29248] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.707685][T29080] veth1_vlan: entered promiscuous mode [ 2243.742072][T29248] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.778632][T29248] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.809207][T29080] veth0_macvtap: entered promiscuous mode [ 2243.832756][ T29] audit: type=1400 audit(1776968839.871:1500): avc: denied { setopt } for pid=29227 comm="syz.3.5948" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2243.857743][T29248] Buffer I/O error on dev loop6, logical block 0, async page read [ 2243.882409][T29080] veth1_macvtap: entered promiscuous mode [ 2243.920942][T29248] ldm_validate_partition_table(): Disk read failed. [ 2243.943598][T29248] Dev loop6: unable to read RDB block 0 [ 2243.952983][T29080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2243.988407][T29248] loop6: unable to read partition table [ 2244.006257][T29080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2244.045469][T24429] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.077434][T29248] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2244.135462][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2244.142545][ T5197] Dev loop6: unable to read RDB block 0 [ 2244.154308][T24429] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.171880][ T5197] loop6: unable to read partition table [ 2244.254875][T24429] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.338317][T24429] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2244.495474][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5952'. [ 2244.510964][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2244.526412][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2244.540637][T29262] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5952'. [ 2244.604271][T29265] fuse: Unknown parameter 'group_i00000000000000000000' [ 2244.611604][T24429] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2244.662627][T24429] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2244.693214][ T29] audit: type=1400 audit(1776968840.731:1501): avc: denied { getopt } for pid=29267 comm="syz.3.5954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2244.734745][ T29] audit: type=1400 audit(1776968840.771:1502): avc: denied { mounton } for pid=29080 comm="syz-executor" path="/root/syzkaller.DB86X6/syz-tmp" dev="sda1" ino=2059 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 2244.820451][T24688] usb 2-1: USB disconnect, device number 117 [ 2244.858272][ T29] audit: type=1400 audit(1776968840.901:1503): avc: denied { mounton } for pid=29080 comm="syz-executor" path="/root/syzkaller.DB86X6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=129018 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 2244.963544][ T29] audit: type=1400 audit(1776968840.931:1504): avc: denied { mounton } for pid=29080 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2786 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 2245.019993][ T29] audit: type=1400 audit(1776968840.931:1505): avc: denied { mount } for pid=29080 comm="syz-executor" name="/" dev="gadgetfs" ino=6874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 2245.116125][ T29] audit: type=1400 audit(1776968840.941:1506): avc: denied { mount } for pid=29080 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 2245.167274][ T29] audit: type=1400 audit(1776968840.941:1507): avc: denied { mounton } for pid=29080 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 2246.125442][ T29] audit: type=1400 audit(1776968841.041:1508): avc: denied { create } for pid=29271 comm="syz.1.5955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2246.147726][ T29] audit: type=1400 audit(1776968841.041:1509): avc: denied { ioctl } for pid=29271 comm="syz.1.5955" path="socket:[129028]" dev="sockfs" ino=129028 ioctlcmd=0x89e2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 2246.448656][T29297] loop6: detected capacity change from 0 to 2640 [ 2246.507187][T29297] ldm_validate_partition_table(): Disk read failed. [ 2246.540042][T29297] Dev loop6: unable to read RDB block 0 [ 2246.600860][T29297] loop6: unable to read partition table [ 2246.625307][T29297] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2247.419003][T29309] fuse: Unknown parameter 'group_id00000000000000000000' [ 2247.823433][T29316] loop6: detected capacity change from 0 to 2640 [ 2247.831067][T29316] ldm_validate_partition_table(): Disk read failed. [ 2247.852908][T29316] Dev loop6: unable to read RDB block 0 [ 2247.870536][T29316] loop6: unable to read partition table [ 2247.924849][T29316] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2248.476766][T29328] bridge0: port 3(erspan0) entered blocking state [ 2248.484213][T29328] bridge0: port 3(erspan0) entered disabled state [ 2248.547451][T29328] erspan0: entered allmulticast mode [ 2248.876925][T29328] erspan0: entered promiscuous mode [ 2248.919374][T29328] bridge0: port 3(erspan0) entered blocking state [ 2248.926016][T29328] bridge0: port 3(erspan0) entered forwarding state [ 2249.040405][ T5197] buffer_io_error: 74 callbacks suppressed [ 2249.040423][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2249.087994][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.063083][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.103698][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.112398][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.143948][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.414350][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.450813][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.468135][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2250.542684][T29345] /dev/nullb0: Can't open blockdev [ 2250.781677][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.850809][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2250.861967][ T5197] Dev loop6: unable to read RDB block 0 [ 2250.869018][ T5197] loop6: unable to read partition table [ 2251.597969][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 2251.601029][ T29] audit: type=1400 audit(1776968847.141:1512): avc: denied { bind } for pid=29347 comm="syz.1.5975" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2251.910146][T29362] fuse: Unknown parameter 'group_id00000000000000000000' [ 2252.188371][T29374] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5980'. [ 2252.727978][T29381] loop6: detected capacity change from 0 to 2640 [ 2252.841887][T29354] comedi comedi3: rti800: I/O port conflict (0x3,16) [ 2252.844853][T29381] ldm_validate_partition_table(): Disk read failed. [ 2252.874255][ C1] blk_print_req_error: 30 callbacks suppressed [ 2252.874271][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2252.890172][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2252.899906][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2252.909826][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2252.919793][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2252.929540][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2252.939362][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2252.949239][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2252.967758][T29381] Dev loop6: unable to read RDB block 0 [ 2252.995695][T29381] loop6: unable to read partition table [ 2253.009073][T29381] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2253.435932][T29388] /dev/nullb0: Can't open blockdev [ 2254.129154][T29395] loop6: detected capacity change from 0 to 2640 [ 2254.162249][T29395] buffer_io_error: 27 callbacks suppressed [ 2254.162263][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.245639][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.289385][T22193] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 2254.314556][T22193] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 2254.334290][T22193] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 2254.337765][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.353131][T22193] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 2254.366744][T22193] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 2254.446610][T29397] wg1 speed is unknown, defaulting to 1000 [ 2254.454226][T29397] lo speed is unknown, defaulting to 1000 [ 2254.509716][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.519026][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.528553][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.540158][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.549260][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.557966][T29395] ldm_validate_partition_table(): Disk read failed. [ 2254.565483][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.601813][T29395] Buffer I/O error on dev loop6, logical block 0, async page read [ 2254.611333][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2254.621053][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2254.672951][ T29] audit: type=1400 audit(1776968850.711:1513): avc: denied { create } for pid=29403 comm="syz.1.5989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2254.738109][T29404] Bluetooth: MGMT ver 1.23 [ 2254.742973][ T29] audit: type=1400 audit(1776968850.741:1514): avc: denied { bind } for pid=29403 comm="syz.1.5989" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2254.763071][T29404] Bluetooth: hci0: unsupported parameter 255 [ 2254.771468][ T29] audit: type=1400 audit(1776968850.781:1515): avc: denied { write } for pid=29403 comm="syz.1.5989" path="socket:[127817]" dev="sockfs" ino=127817 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 2254.771497][T29404] Bluetooth: hci0: unsupported parameter 255 [ 2254.945911][T29395] Dev loop6: unable to read RDB block 0 [ 2254.957184][T29395] loop6: unable to read partition table [ 2254.966872][T29395] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2255.878416][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2255.923827][ T5197] Dev loop6: unable to read RDB block 0 [ 2255.959118][ T5197] loop6: unable to read partition table [ 2256.262290][ T5930] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 2256.337812][ T29] audit: type=1400 audit(1776968852.381:1516): avc: denied { ioctl } for pid=29422 comm="syz.1.5994" path="socket:[127840]" dev="sockfs" ino=127840 ioctlcmd=0x89e4 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2256.375737][ T6411] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2256.406251][T29424] loop6: detected capacity change from 0 to 2640 [ 2256.437167][T29424] ldm_validate_partition_table(): Disk read failed. [ 2256.451797][ T5930] usb 3-1: Using ep0 maxpacket: 16 [ 2256.460155][T29424] Dev loop6: unable to read RDB block 0 [ 2256.467268][T22193] Bluetooth: hci5: command tx timeout [ 2256.482275][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2256.493867][ T5930] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2256.506417][T29397] chnl_net:caif_netlink_parms(): no params data found [ 2256.511160][ T5930] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2256.523288][ T5930] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2256.523466][T29424] loop6: unable to read partition table [ 2256.533973][ T5930] usb 3-1: config 0 descriptor?? [ 2256.555309][T29424] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2256.801432][T27599] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 2256.961696][T27599] usb 4-1: Using ep0 maxpacket: 16 [ 2257.114893][T27599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2257.133821][T27599] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2257.144180][T27599] usb 4-1: New USB device found, idVendor=1b1c, idProduct=1b02, bcdDevice= 0.00 [ 2258.541660][T22193] Bluetooth: hci5: command tx timeout [ 2258.579382][ T6411] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2258.591606][T27599] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2258.984801][T27599] usb 4-1: config 0 descriptor?? [ 2259.161706][ T6411] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2259.500686][ T5197] buffer_io_error: 53 callbacks suppressed [ 2259.500705][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.529551][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.546297][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.566137][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.608384][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.632651][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.647880][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.667485][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.732713][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2259.757512][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.776328][ T5197] Buffer I/O error on dev loop6, logical block 0, async page read [ 2259.802482][ T5197] Dev loop6: unable to read RDB block 0 [ 2259.827004][ T5197] loop6: unable to read partition table [ 2259.836781][ T6411] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2260.624586][T22193] Bluetooth: hci5: command tx timeout [ 2260.917768][T29172] usb 2-1: new full-speed USB device number 118 using dummy_hcd [ 2261.138861][ T5930] usbhid 3-1:0.0: can't add hid device: -71 [ 2261.147075][ T5930] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 2261.760913][T29397] bridge0: port 1(bridge_slave_0) entered blocking state [ 2261.782504][T29397] bridge0: port 1(bridge_slave_0) entered disabled state [ 2261.790259][ T5930] usb 3-1: USB disconnect, device number 88 [ 2261.803270][T29172] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2261.805780][T29397] bridge_slave_0: entered allmulticast mode [ 2261.857521][T29172] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 2261.860525][T29397] bridge_slave_0: entered promiscuous mode [ 2261.889690][T29172] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 2261.914648][T29172] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2262.035322][T29397] bridge0: port 2(bridge_slave_1) entered blocking state [ 2262.042594][T27599] usbhid 4-1:0.0: can't add hid device: -71 [ 2262.048728][T27599] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 2262.059456][T29397] bridge0: port 2(bridge_slave_1) entered disabled state [ 2262.077766][T27599] usb 4-1: USB disconnect, device number 88 [ 2262.089867][T29397] bridge_slave_1: entered allmulticast mode [ 2262.185073][T29172] usb 2-1: usb_control_msg returned -32 [ 2262.199316][T29397] bridge_slave_1: entered promiscuous mode [ 2262.233915][T29172] usbtmc 2-1:16.0: can't read capabilities [ 2262.447352][T29397] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2262.493579][T29397] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2262.616431][T29458] netlink: 'syz.5.6001': attribute type 2 has an invalid length. [ 2262.624657][T29458] netlink: 'syz.5.6001': attribute type 2 has an invalid length. [ 2262.701601][T22193] Bluetooth: hci5: command tx timeout [ 2262.904962][T29397] team0: Port device team_slave_0 added [ 2262.941048][T29397] team0: Port device team_slave_1 added [ 2263.442729][T29397] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2263.472098][T29397] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2263.543247][T29397] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2263.623589][T29397] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2263.639103][T29397] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2263.704930][T29397] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2264.112496][ T6411] batadv1: left allmulticast mode [ 2264.140580][ T6411] batadv1: left promiscuous mode [ 2264.167004][ T6411] bridge0: port 3(batadv1) entered disabled state [ 2264.651421][ T29] audit: type=1400 audit(1776968860.651:1517): avc: denied { read open } for pid=29475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2264.694684][T29172] usb 2-1: USB disconnect, device number 118 [ 2264.702075][ T6411] bridge_slave_1: left allmulticast mode [ 2264.716077][ T6411] bridge_slave_1: left promiscuous mode [ 2264.726160][ T6411] bridge0: port 2(bridge_slave_1) entered disabled state [ 2264.753016][ T6411] bridge_slave_0: left allmulticast mode [ 2264.772608][ T6411] bridge_slave_0: left promiscuous mode [ 2264.775917][ T29] audit: type=1400 audit(1776968860.661:1518): avc: denied { getattr } for pid=29475 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=1842 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2264.849176][ T6411] bridge0: port 1(bridge_slave_0) entered disabled state [ 2265.606773][ T29] audit: type=1400 audit(1776968861.641:1519): avc: denied { add_name } for pid=29472 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2265.700727][ T29] audit: type=1400 audit(1776968861.641:1520): avc: denied { create } for pid=29472 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2265.733585][ T29] audit: type=1400 audit(1776968861.641:1521): avc: denied { write } for pid=29472 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.eth5.link" dev="tmpfs" ino=20573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2265.821067][ T29] audit: type=1400 audit(1776968861.641:1522): avc: denied { append } for pid=29472 comm="dhcpcd-run-hook" name="resolv.conf.eth5.link" dev="tmpfs" ino=20573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2266.950214][ T29] audit: type=1400 audit(1776968862.971:1523): avc: denied { remove_name } for pid=29494 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=20573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 2267.031710][ T29] audit: type=1400 audit(1776968862.971:1524): avc: denied { unlink } for pid=29494 comm="rm" name="resolv.conf.eth5.link" dev="tmpfs" ino=20573 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 2267.059786][T29498] netlink: 68 bytes leftover after parsing attributes in process `syz.3.6006'. [ 2267.801982][ T6411] bond0 (unregistering): (slave 5@ÿ): Releasing backup interface [ 2267.843216][ T6411] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 2267.914238][ T6411] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 2267.931069][ T6411] bond0 (unregistering): Released all slaves [ 2267.945954][T29397] hsr_slave_0: entered promiscuous mode [ 2267.979695][T29397] hsr_slave_1: entered promiscuous mode [ 2267.989518][T29397] debugfs: 'hsr0' already exists in 'hsr' [ 2268.001569][T29397] Cannot create hsr debugfs directory [ 2268.010500][ T5492] 8021q: adding VLAN 0 to HW filter on device eth5 [ 2268.061793][ T6411] : left promiscuous mode [ 2268.260824][T29517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6010'. [ 2268.270252][T29517] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6010'. [ 2268.433076][T29516] netlink: 24 bytes leftover after parsing attributes in process `syz.2.6010'. [ 2269.630511][T29538] loop6: detected capacity change from 0 to 2640 [ 2269.671811][T29538] buffer_io_error: 6 callbacks suppressed [ 2269.671824][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2269.716680][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2269.818275][ C1] blk_print_req_error: 30 callbacks suppressed [ 2269.818298][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2269.834179][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2269.846598][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2269.851424][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2269.856625][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2269.893104][T29544] FAULT_INJECTION: forcing a failure. [ 2269.893104][T29544] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.916789][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2269.926595][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2269.936465][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2269.937484][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2269.946340][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2269.972935][T29544] CPU: 1 UID: 0 PID: 29544 Comm: syz.1.6014 Tainted: G L syzkaller #0 PREEMPT(full) [ 2269.972965][T29544] Tainted: [L]=SOFTLOCKUP [ 2269.972972][T29544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2269.972986][T29544] Call Trace: [ 2269.972994][T29544] [ 2269.973001][T29544] dump_stack_lvl+0x100/0x190 [ 2269.973028][T29544] should_fail_ex.cold+0x5/0xa [ 2269.973054][T29544] ? io_cache_alloc_new+0x45/0xe0 [ 2269.973074][T29544] should_failslab+0xc2/0x120 [ 2269.973096][T29544] __kmalloc_noprof+0xe0/0x850 [ 2269.973129][T29544] io_cache_alloc_new+0x45/0xe0 [ 2269.973151][T29544] __io_prep_rw+0x21d/0xfa0 [ 2269.973178][T29544] ? __pfx___io_prep_rw+0x10/0x10 [ 2269.973211][T29544] ? __io_alloc_req_refill+0x2dc/0x330 [ 2269.973239][T29544] io_prep_rw+0x76/0x2c0 [ 2269.973262][T29544] ? __pfx_io_prep_rw+0x10/0x10 [ 2269.973295][T29544] io_submit_sqes+0x9ea/0x24b0 [ 2269.973341][T29544] __do_sys_io_uring_enter+0xa88/0x1b50 [ 2269.973378][T29544] ? __fget_files+0x21f/0x3d0 [ 2269.973402][T29544] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 2269.973435][T29544] ? fput+0x79/0x100 [ 2269.973461][T29544] ? ksys_write+0x1ac/0x250 [ 2269.973482][T29544] ? __pfx_ksys_write+0x10/0x10 [ 2269.973507][T29544] ? rcu_is_watching+0x12/0xc0 [ 2269.973542][T29544] do_syscall_64+0x10b/0xf80 [ 2269.973570][T29544] ? clear_bhb_loop+0x40/0x90 [ 2269.973596][T29544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2269.973618][T29544] RIP: 0033:0x7f4d9f59c819 [ 2269.973635][T29544] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2269.973655][T29544] RSP: 002b:00007f4da0441028 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 2269.973680][T29544] RAX: ffffffffffffffda RBX: 00007f4d9f815fa0 RCX: 00007f4d9f59c819 [ 2269.973695][T29544] RDX: 0000000000007721 RSI: 0000000000002219 RDI: 0000000000000000 [ 2269.973707][T29544] RBP: 00007f4da0441090 R08: 0000000000000000 R09: 0000000000000000 [ 2269.973718][T29544] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000001 [ 2269.973730][T29544] R13: 00007f4d9f816038 R14: 00007f4d9f815fa0 R15: 00007ffc98fd8308 [ 2269.973760][T29544] [ 2270.195763][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.203796][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.211789][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.219785][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.227787][T29538] ldm_validate_partition_table(): Disk read failed. [ 2270.263837][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.449491][T29538] Buffer I/O error on dev loop6, logical block 0, async page read [ 2270.463365][T29538] Dev loop6: unable to read RDB block 0 [ 2270.569233][T29538] loop6: unable to read partition table [ 2270.649825][T29538] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2270.743519][ T29] audit: type=1400 audit(1776968866.791:1525): avc: denied { connect } for pid=29552 comm="syz.1.6016" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 2271.339891][T29564] /dev/nullb0: Can't open blockdev [ 2271.829860][ T29] audit: type=1400 audit(1776968867.871:1526): avc: denied { ioctl } for pid=29567 comm="syz.5.6022" path="socket:[127985]" dev="sockfs" ino=127985 ioctlcmd=0x9420 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2272.031358][ T29] audit: type=1400 audit(1776968868.071:1527): avc: denied { map } for pid=29567 comm="syz.5.6022" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 2272.183971][T29575] xt_hashlimit: size too large, truncated to 1048576 [ 2272.796071][ T29] audit: type=1400 audit(1776968868.831:1528): avc: denied { write } for pid=29567 comm="syz.5.6022" laddr=fe80::b lport=60 faddr=::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2273.115729][T29597] loop6: detected capacity change from 0 to 2640 [ 2273.132900][T29397] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2273.164150][T29597] ldm_validate_partition_table(): Disk read failed. [ 2273.198851][T29397] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 2273.226200][T29597] Dev loop6: unable to read RDB block 0 [ 2273.236868][T29397] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2273.282216][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2273.286145][T29397] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 2273.291975][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2273.335354][T29597] loop6: unable to read partition table [ 2273.367461][T29597] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2273.754818][T29600] syzkaller0: entered promiscuous mode [ 2273.796446][T29600] syzkaller0: entered allmulticast mode [ 2273.846783][T29397] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2273.886336][T29397] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 2273.916236][T29397] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2273.970866][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2273.992812][ T5197] Dev loop6: unable to read RDB block 0 [ 2274.005901][ T5197] loop6: unable to read partition table [ 2274.008056][T29397] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 2274.069702][T29593] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6026'. [ 2274.118008][T29613] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=29613 comm=syz.2.6027 [ 2274.827280][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 2274.845189][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 2276.489849][ T6411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 2276.498938][ T6411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 2276.632432][ T6411] veth1_macvtap: left promiscuous mode [ 2276.669694][ T6411] veth0_macvtap: left promiscuous mode [ 2276.888224][ T6411] veth1_vlan: left promiscuous mode [ 2276.907178][ T6411] veth0_vlan: left promiscuous mode [ 2277.060957][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6034'. [ 2277.087921][T29647] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6034'. [ 2277.794045][ T6411] team0 (unregistering): Port device team_slave_1 removed [ 2277.837073][ T6411] team0 (unregistering): Port device team_slave_0 removed [ 2279.225136][T29674] netlink: 'syz.5.6039': attribute type 2 has an invalid length. [ 2279.233537][T29674] netlink: 'syz.5.6039': attribute type 2 has an invalid length. [ 2279.617003][T29397] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2279.715045][T29397] 8021q: adding VLAN 0 to HW filter on device team0 [ 2280.064908][T29689] loop6: detected capacity change from 0 to 2640 [ 2280.075072][T29585] bridge0: port 1(bridge_slave_0) entered blocking state [ 2280.082287][T29585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2280.090914][T29689] buffer_io_error: 48 callbacks suppressed [ 2280.090933][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.211671][T29585] bridge0: port 2(bridge_slave_1) entered blocking state [ 2280.218933][T29585] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2280.237460][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.302978][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.328176][T29397] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 2280.353698][ C0] blk_print_req_error: 6 callbacks suppressed [ 2280.353720][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2280.369517][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2280.379231][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2280.389170][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2280.558374][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.753830][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.768228][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2280.897487][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2280.907391][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2280.917178][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2280.926995][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2281.141747][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2281.182851][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2281.220306][T29689] ldm_validate_partition_table(): Disk read failed. [ 2281.220371][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2281.220467][T29689] Buffer I/O error on dev loop6, logical block 0, async page read [ 2281.220672][T29689] Dev loop6: unable to read RDB block 0 [ 2281.221055][T29689] loop6: unable to read partition table [ 2281.221345][T29689] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2281.394179][ T6411] IPVS: stop unused estimator thread 0... [ 2282.986989][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 2283.770171][T29397] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2283.948534][T29397] veth0_vlan: entered promiscuous mode [ 2284.018622][T29397] veth1_vlan: entered promiscuous mode [ 2284.114084][T29730] loop6: detected capacity change from 0 to 2640 [ 2284.189081][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2284.198903][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2284.213579][T29730] ldm_validate_partition_table(): Disk read failed. [ 2284.230189][T29730] Dev loop6: unable to read RDB block 0 [ 2284.230885][T29397] veth0_macvtap: entered promiscuous mode [ 2284.251564][T29730] loop6: unable to read partition table [ 2284.262698][T29730] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2284.605938][T29397] veth1_macvtap: entered promiscuous mode [ 2284.666153][T29397] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2284.743365][T29397] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2284.795190][T29733] netlink: 36 bytes leftover after parsing attributes in process `syz.2.6047'. [ 2284.806251][ T29] audit: type=1400 audit(1776968880.851:1529): avc: denied { accept } for pid=29722 comm="syz.2.6047" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 2284.857825][T12480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.891823][T12480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.928693][T12480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2284.963250][T12480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2285.138901][T29737] netlink: 28 bytes leftover after parsing attributes in process `syz.5.6050'. [ 2285.754667][T24429] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2285.991143][T24429] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.168032][T12480] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2286.198028][T12480] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2286.223380][T29758] loop6: detected capacity change from 0 to 2640 [ 2286.243048][T29758] buffer_io_error: 32 callbacks suppressed [ 2286.243065][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.351676][T27599] usb 6-1: new high-speed USB device number 95 using dummy_hcd [ 2286.356916][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.372812][T29764] netlink: 'syz.3.6057': attribute type 2 has an invalid length. [ 2286.380956][T29764] netlink: 'syz.3.6057': attribute type 2 has an invalid length. [ 2286.409949][ C1] blk_print_req_error: 6 callbacks suppressed [ 2286.409968][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2286.425816][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2286.434736][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.473995][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2286.483987][ C1] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2286.490993][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.508460][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2286.518261][ C1] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2286.528063][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2286.537927][ C1] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2286.577212][T27599] usb 6-1: config 0 contains an unexpected descriptor of type 0x1, skipping [ 2286.586318][T27599] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 2286.596815][T27599] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 2 [ 2286.762762][T27599] usb 6-1: New USB device found, idVendor=8086, idProduct=0b5b, bcdDevice=e1.c5 [ 2286.796205][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.816722][T27599] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2286.837753][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.845338][T27599] usb 6-1: Product: syz [ 2286.845961][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.857913][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2286.870741][T27599] usb 6-1: Manufacturer: syz [ 2286.890535][T27599] usb 6-1: SerialNumber: syz [ 2286.913901][T29758] ldm_validate_partition_table(): Disk read failed. [ 2286.925081][T27599] usb 6-1: config 0 descriptor?? [ 2287.017844][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2287.547916][T29758] Buffer I/O error on dev loop6, logical block 0, async page read [ 2287.598595][T29758] Dev loop6: unable to read RDB block 0 [ 2287.651071][ T5828] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 2287.683333][ T5828] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 2287.694207][ T5828] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 2287.703889][T29758] loop6: unable to read partition table [ 2287.710812][ T5828] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 2287.726722][ T5828] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 2287.778682][T29773] wg1 speed is unknown, defaulting to 1000 [ 2287.795345][T29773] lo speed is unknown, defaulting to 1000 [ 2287.797601][T29758] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2287.810947][T17523] usb 6-1: USB disconnect, device number 95 [ 2287.907019][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2287.945972][ T5197] Dev loop6: unable to read RDB block 0 [ 2287.980084][ T5197] loop6: unable to read partition table [ 2288.230923][T29773] chnl_net:caif_netlink_parms(): no params data found [ 2288.743288][T29787] loop6: detected capacity change from 0 to 2640 [ 2288.809843][T29787] ldm_validate_partition_table(): Disk read failed. [ 2288.825939][T29773] bridge0: port 1(bridge_slave_0) entered blocking state [ 2288.878834][T29773] bridge0: port 1(bridge_slave_0) entered disabled state [ 2288.918655][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2288.921388][T29787] Dev loop6: unable to read RDB block 0 [ 2288.928460][ C1] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2288.952075][T29773] bridge_slave_0: entered allmulticast mode [ 2288.969546][T29773] bridge_slave_0: entered promiscuous mode [ 2289.002668][T29787] loop6: unable to read partition table [ 2289.016117][T29773] bridge0: port 2(bridge_slave_1) entered blocking state [ 2289.034201][T29787] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2289.122756][T29773] bridge0: port 2(bridge_slave_1) entered disabled state [ 2289.160219][T29773] bridge_slave_1: entered allmulticast mode [ 2289.188918][T29773] bridge_slave_1: entered promiscuous mode [ 2289.394382][T29773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2289.474782][ T5197] ldm_validate_partition_table(): Disk read failed. [ 2289.532568][ T5197] Dev loop6: unable to read RDB block 0 [ 2289.575158][ T5197] loop6: unable to read partition table [ 2289.577552][T29773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2289.784177][T29773] team0: Port device team_slave_0 added [ 2289.822174][T22193] Bluetooth: hci4: command tx timeout [ 2290.149949][T29773] team0: Port device team_slave_1 added [ 2290.243362][T29773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2290.298281][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2290.403848][T29773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2290.459878][T29773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2290.467306][T29773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 2290.531351][T29773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2291.779130][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2291.820952][ T58] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2291.901745][T22193] Bluetooth: hci4: command tx timeout [ 2292.027613][T29773] hsr_slave_0: entered promiscuous mode [ 2292.050227][T29773] hsr_slave_1: entered promiscuous mode [ 2292.077705][T29773] debugfs: 'hsr0' already exists in 'hsr' [ 2292.094260][T29773] Cannot create hsr debugfs directory [ 2292.481646][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2292.512630][ T58] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2292.636651][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6068'. [ 2292.673747][T29824] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6068'. [ 2292.911491][ T29] audit: type=1400 audit(1776968888.941:1530): avc: denied { create } for pid=29825 comm="syz.1.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2293.041573][ T29] audit: type=1400 audit(1776968888.941:1531): avc: denied { getopt } for pid=29825 comm="syz.1.6070" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2293.146606][T29830] loop6: detected capacity change from 0 to 2640 [ 2293.164033][T29830] buffer_io_error: 64 callbacks suppressed [ 2293.164054][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.212379][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.249605][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.265040][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.267060][ C0] blk_print_req_error: 6 callbacks suppressed [ 2293.267078][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2293.288734][ C0] I/O error, dev loop6, sector 0 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2293.294743][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.298531][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2293.316226][ C0] I/O error, dev loop6, sector 1008 op 0x1:(WRITE) flags 0xc800 phys_seg 128 prio class 2 [ 2293.328190][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.329317][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2293.345895][ C0] I/O error, dev loop6, sector 2016 op 0x1:(WRITE) flags 0x8800 phys_seg 3 prio class 2 [ 2293.355762][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2293.365659][ C0] I/O error, dev loop6, sector 2032 op 0x1:(WRITE) flags 0x8800 phys_seg 77 prio class 2 [ 2293.380846][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.389797][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.398633][T29830] ldm_validate_partition_table(): Disk read failed. [ 2293.405537][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.483699][T29830] Buffer I/O error on dev loop6, logical block 0, async page read [ 2293.494040][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2293.510232][ T58] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2293.582736][T29830] Dev loop6: unable to read RDB block 0 [ 2293.611928][T29830] loop6: unable to read partition table [ 2293.633632][T29830] loop_reread_partitions: partition scan of loop6 (3Ÿ ¾‚³˜) failed (rc=-5) [ 2294.003800][T22193] Bluetooth: hci4: command tx timeout [ 2294.157272][T29842] fuse: Bad value for 'fd' [ 2294.603457][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 2294.614724][ T58] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2294.837415][T29847] syzkaller0: entered promiscuous mode [ 2294.853874][T29847] syzkaller0: entered allmulticast mode [ 2294.934796][T29845] netlink: 8 bytes leftover after parsing attributes in process `syz.2.6075'. [ 2295.453376][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2295.488702][ T5828] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2295.502320][ T5828] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2295.524041][ T5828] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2295.541045][ T5828] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2295.606085][ T58] ------------[ cut here ]------------ [ 2295.615113][ T58] refcount_t: addition on 0; use-after-free. [ 2295.621332][ T58] WARNING: lib/refcount.c:25 at refcount_warn_saturate+0x111/0x130, CPU#1: kworker/u8:4/58 [ 2295.631451][ T58] Modules linked in: [ 2295.636147][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 2295.648016][ T58] Tainted: [L]=SOFTLOCKUP [ 2295.652727][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2295.662995][ T58] Workqueue: netns cleanup_net [ 2295.668772][ T58] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 2295.671332][ T29] audit: type=1400 audit(1776968891.711:1532): avc: denied { write } for pid=5810 comm="syz-executor" path="pipe:[5392]" dev="pipefs" ino=5392 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 2295.674991][ T58] Code: cc e8 a3 a5 0f fd 48 8d 3d 0c cf ec 0b 67 48 0f b9 3a e8 92 a5 0f fd 5b 5d e9 8b 25 a4 06 e8 86 a5 0f fd 48 8d 3d ff ce ec 0b <67> 48 0f b9 3a e8 75 a5 0f fd 5b 5d c3 cc cc cc cc 48 89 df e8 46 [ 2295.705230][T29862] wg1 speed is unknown, defaulting to 1000 [ 2295.718372][ T58] RSP: 0018:ffffc900015f7478 EFLAGS: 00010293 [ 2295.729910][ T58] RAX: 0000000000000000 RBX: ffff88803677503c RCX: ffffffff84f9d4ab [ 2295.738308][ T58] RDX: ffff88801dbca500 RSI: ffffffff84f9d55a RDI: ffffffff90e6a460 [ 2295.747665][ T58] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 2295.757788][ T58] R10: 0000000000000002 R11: 000000000000765b R12: ffff888021345000 [ 2295.765886][ T58] R13: 0000000000000000 R14: ffff888057894c00 R15: 0000000000000000 [ 2295.773960][ T58] FS: 0000000000000000(0000) GS:ffff8881243db000(0000) knlGS:0000000000000000 [ 2295.781063][T29862] lo speed is unknown, defaulting to 1000 [ 2295.788659][ T58] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2295.795491][ T58] CR2: 000000110c2f2716 CR3: 0000000086567000 CR4: 00000000003526f0 [ 2295.803505][ T58] Call Trace: [ 2295.803520][ T58] [ 2295.803531][ T58] nsim_fib_event_nb+0xc39/0xe40 [ 2295.803559][ T58] ? leaf_walk_rcu+0x725/0x850 [ 2295.803588][ T58] ? leaf_walk_rcu+0x738/0x850 [ 2295.824399][ T58] call_fib_notifier+0x3c/0x80 [ 2295.829212][ T58] fib_notify+0x360/0x5a0 [ 2295.833596][ T58] ? lookup_rules_ops+0x16c/0x380 [ 2295.838655][ T58] ? __pfx_fib_notify+0x10/0x10 [ 2295.843565][ T58] ? fib_rules_dump+0x190/0x210 [ 2295.849049][ T58] fib4_dump+0x48/0x60 [ 2295.853507][ T58] register_fib_notifier+0x123/0x470 [ 2295.858824][ T58] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 2295.865155][ T58] nsim_fib_create+0x8f5/0xc10 [ 2295.870538][ T58] ? __pfx_nsim_fib_create+0x10/0x10 [ 2295.875913][ T58] ? queue_delayed_work_on+0x8c/0x1e0 [ 2295.881359][ T58] ? nsim_dev_traps_init+0x23d/0x5d0 [ 2295.886681][ T58] nsim_dev_reload_up+0x3ea/0x830 [ 2295.891814][ T58] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 2295.897407][ T58] ? nsim_dev_reload_destroy+0x3d/0x4a0 [ 2295.903041][ T58] devlink_reload+0x2f2/0x7a0 [ 2295.907751][ T58] ? __pfx_devlink_reload+0x10/0x10 [ 2295.913068][ T58] devlink_pernet_pre_exit+0x247/0x370 [ 2295.918549][ T58] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2295.924617][ T58] ? kobject_put+0xb9/0x640 [ 2295.929131][ T58] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2295.935215][ T58] ops_undo_list+0x187/0xab0 [ 2295.939833][ T58] ? __pfx_ops_undo_list+0x10/0x10 [ 2295.945012][ T58] ? cleanup_net+0x332/0x920 [ 2295.950234][ T58] ? cleanup_net+0x332/0x920 [ 2295.955167][ T58] ? idr_destroy+0x62/0x2e0 [ 2295.959697][ T58] cleanup_net+0x499/0x920 [ 2295.964219][ T58] ? __pfx_cleanup_net+0x10/0x10 [ 2295.969175][ T58] ? rcu_is_watching+0x12/0xc0 [ 2295.974056][ T58] process_one_work+0xa0e/0x1980 [ 2295.979031][ T58] ? __pfx_process_one_work+0x10/0x10 [ 2295.984761][ T58] ? __pfx_cleanup_net+0x10/0x10 [ 2295.989719][ T58] worker_thread+0x5ef/0xe50 [ 2295.994422][ T58] ? kthread+0x13a/0x450 [ 2295.998675][ T58] ? __pfx_worker_thread+0x10/0x10 [ 2296.003870][ T58] kthread+0x370/0x450 [ 2296.007950][ T58] ? __pfx_kthread+0x10/0x10 [ 2296.012617][ T58] ret_from_fork+0x72b/0xd50 [ 2296.017238][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 2296.022413][ T58] ? __switch_to+0x800/0x1100 [ 2296.027093][ T58] ? __pfx_kthread+0x10/0x10 [ 2296.031730][ T58] ret_from_fork_asm+0x1a/0x30 [ 2296.036507][ T58] [ 2296.039508][ T58] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2296.046762][ T58] CPU: 1 UID: 0 PID: 58 Comm: kworker/u8:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 2296.057586][ T58] Tainted: [L]=SOFTLOCKUP [ 2296.061892][ T58] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 2296.071946][ T58] Workqueue: netns cleanup_net [ 2296.076709][ T58] Call Trace: [ 2296.079971][ T58] [ 2296.082885][ T58] dump_stack_lvl+0x100/0x190 [ 2296.087554][ T58] vpanic+0x552/0x970 [ 2296.091525][ T58] ? __pfx_vpanic+0x10/0x10 [ 2296.096020][ T58] panic+0xd1/0xe0 [ 2296.099727][ T58] ? __pfx_panic+0x10/0x10 [ 2296.104142][ T58] ? check_panic_on_warn+0x1f/0x90 [ 2296.109242][ T58] check_panic_on_warn.cold+0x19/0x34 [ 2296.114600][ T58] ? refcount_warn_saturate+0x111/0x130 [ 2296.120140][ T58] __warn.cold+0x191/0x328 [ 2296.124544][ T58] __report_bug+0x296/0x3d0 [ 2296.129035][ T58] ? refcount_warn_saturate+0x111/0x130 [ 2296.134578][ T58] ? __pfx___report_bug+0x10/0x10 [ 2296.139592][ T58] ? lockdep_hardirqs_on+0x78/0x100 [ 2296.144783][ T58] ? refcount_warn_saturate+0x10a/0x130 [ 2296.150318][ T58] ? refcount_warn_saturate+0x5b/0x130 [ 2296.155773][ T58] ? refcount_warn_saturate+0x111/0x130 [ 2296.161317][ T58] report_bug_entry+0xe1/0x290 [ 2296.166073][ T58] ? refcount_warn_saturate+0x111/0x130 [ 2296.171607][ T58] handle_bug+0x1cd/0x2a0 [ 2296.175923][ T58] exc_invalid_op+0x17/0x50 [ 2296.180410][ T58] asm_exc_invalid_op+0x1a/0x20 [ 2296.185250][ T58] RIP: 0010:refcount_warn_saturate+0x111/0x130 [ 2296.191392][ T58] Code: cc e8 a3 a5 0f fd 48 8d 3d 0c cf ec 0b 67 48 0f b9 3a e8 92 a5 0f fd 5b 5d e9 8b 25 a4 06 e8 86 a5 0f fd 48 8d 3d ff ce ec 0b <67> 48 0f b9 3a e8 75 a5 0f fd 5b 5d c3 cc cc cc cc 48 89 df e8 46 [ 2296.211075][ T58] RSP: 0018:ffffc900015f7478 EFLAGS: 00010293 [ 2296.217130][ T58] RAX: 0000000000000000 RBX: ffff88803677503c RCX: ffffffff84f9d4ab [ 2296.225082][ T58] RDX: ffff88801dbca500 RSI: ffffffff84f9d55a RDI: ffffffff90e6a460 [ 2296.233041][ T58] RBP: 0000000000000002 R08: 0000000000000005 R09: 0000000000000004 [ 2296.240994][ T58] R10: 0000000000000002 R11: 000000000000765b R12: ffff888021345000 [ 2296.248955][ T58] R13: 0000000000000000 R14: ffff888057894c00 R15: 0000000000000000 [ 2296.256918][ T58] ? refcount_warn_saturate+0x5b/0x130 [ 2296.262372][ T58] ? refcount_warn_saturate+0x10a/0x130 [ 2296.267918][ T58] ? refcount_warn_saturate+0x10a/0x130 [ 2296.273455][ T58] nsim_fib_event_nb+0xc39/0xe40 [ 2296.278380][ T58] ? leaf_walk_rcu+0x725/0x850 [ 2296.283134][ T58] ? leaf_walk_rcu+0x738/0x850 [ 2296.287893][ T58] call_fib_notifier+0x3c/0x80 [ 2296.292652][ T58] fib_notify+0x360/0x5a0 [ 2296.296963][ T58] ? lookup_rules_ops+0x16c/0x380 [ 2296.301983][ T58] ? __pfx_fib_notify+0x10/0x10 [ 2296.306818][ T58] ? fib_rules_dump+0x190/0x210 [ 2296.311671][ T58] fib4_dump+0x48/0x60 [ 2296.315726][ T58] register_fib_notifier+0x123/0x470 [ 2296.320997][ T58] ? __pfx_nsim_fib_dump_inconsistent+0x10/0x10 [ 2296.327236][ T58] nsim_fib_create+0x8f5/0xc10 [ 2296.331997][ T58] ? __pfx_nsim_fib_create+0x10/0x10 [ 2296.337281][ T58] ? queue_delayed_work_on+0x8c/0x1e0 [ 2296.342649][ T58] ? nsim_dev_traps_init+0x23d/0x5d0 [ 2296.347935][ T58] nsim_dev_reload_up+0x3ea/0x830 [ 2296.352958][ T58] ? __pfx_nsim_dev_reload_up+0x10/0x10 [ 2296.358501][ T58] ? nsim_dev_reload_destroy+0x3d/0x4a0 [ 2296.364051][ T58] devlink_reload+0x2f2/0x7a0 [ 2296.368723][ T58] ? __pfx_devlink_reload+0x10/0x10 [ 2296.373923][ T58] devlink_pernet_pre_exit+0x247/0x370 [ 2296.379373][ T58] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2296.385345][ T58] ? kobject_put+0xb9/0x640 [ 2296.389840][ T58] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 2296.395812][ T58] ops_undo_list+0x187/0xab0 [ 2296.400395][ T58] ? __pfx_ops_undo_list+0x10/0x10 [ 2296.405490][ T58] ? cleanup_net+0x332/0x920 [ 2296.410072][ T58] ? cleanup_net+0x332/0x920 [ 2296.414649][ T58] ? idr_destroy+0x62/0x2e0 [ 2296.419144][ T58] cleanup_net+0x499/0x920 [ 2296.423556][ T58] ? __pfx_cleanup_net+0x10/0x10 [ 2296.428483][ T58] ? rcu_is_watching+0x12/0xc0 [ 2296.433246][ T58] process_one_work+0xa0e/0x1980 [ 2296.438191][ T58] ? __pfx_process_one_work+0x10/0x10 [ 2296.443563][ T58] ? __pfx_cleanup_net+0x10/0x10 [ 2296.448494][ T58] worker_thread+0x5ef/0xe50 [ 2296.453090][ T58] ? kthread+0x13a/0x450 [ 2296.457323][ T58] ? __pfx_worker_thread+0x10/0x10 [ 2296.462421][ T58] kthread+0x370/0x450 [ 2296.466480][ T58] ? __pfx_kthread+0x10/0x10 [ 2296.471059][ T58] ret_from_fork+0x72b/0xd50 [ 2296.475643][ T58] ? __pfx_ret_from_fork+0x10/0x10 [ 2296.480753][ T58] ? __switch_to+0x800/0x1100 [ 2296.485423][ T58] ? __pfx_kthread+0x10/0x10 [ 2296.490003][ T58] ret_from_fork_asm+0x1a/0x30 [ 2296.494774][ T58] [ 2296.498291][ T58] Kernel Offset: disabled [ 2296.502593][ T58] Rebooting in 86400 seconds..