last executing test programs: 38.809737319s ago: executing program 3 (id=590): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x41) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x6, {"4772ffacff04856ec9e8776f8ee906be", "2dfad343e15ead11f40c897700", "0000b3f88813da82b4cf00"}, 0x3eaf, 0x4}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x54}}, 0x24008844) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r2, &(0x7f0000000000)='3', 0x4e) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000010)) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x68, 0x30, 0x301, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x6, 0x5, 0x1, 0x1, 0x80000000}, 0x4, r4}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4080}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) pselect6(0x40, &(0x7f0000000040)={0x0, 0x3, 0x3, 0x40000, 0xfffffffffffffffa, 0x8, 0x3, 0x1}, &(0x7f00000000c0)={0x480, 0x100000001, 0x2, 0x10001, 0x6, 0x80000000, 0x8, 0xc}, &(0x7f0000000100)={0x3, 0x4, 0x72, 0x6, 0x1, 0x7, 0x200, 0x5}, &(0x7f0000000140)={0x0, 0x3938700}, &(0x7f00000001c0)={&(0x7f0000000180)={[0x5]}, 0x8}) ioctl$DVB_DEMUX_DMX_SET_FILTER(r0, 0x403c6f2b, &(0x7f0000000000)={0x6, {"771c2e01f8ffffffffffee00", "000900000000000200"}, 0x7, 0x4}) close(r1) 38.697635513s ago: executing program 3 (id=591): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000580)='smaps_rollup\x00') r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x90, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xffab}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0xfff9, 0x0, 0x0, 0x0, 0x5c4, 0x0, 0x0, 0x0, 0x3dc, 0x0, 0x7], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}, @TCA_RATE={0x6, 0x5, {0xfa, 0x3}}]}, 0x90}, 0x1, 0x0, 0x0, 0x2004c084}, 0x20000080) lseek(r1, 0x2004, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000040)="2e00000011008188047680ec59acca0413a1f8482d0000005e140602000000000e0027001000000002800000121f73", 0x2f}], 0x1}, 0x4000000) 38.56828701s ago: executing program 3 (id=593): r0 = accept4$unix(0xffffffffffffffff, &(0x7f0000000080)=@abs, &(0x7f0000000140)=0x6e, 0x80000) connect$unix(r0, &(0x7f0000000180)=@file={0x0, './dev\x00'}, 0x6e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./dev\x00', &(0x7f0000000450)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000401e09030001000102000109022700010100c0320904000003ffffff00070581034000010705020240"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ttyUSB0\x00', 0x2, 0x0) write$tun(r2, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0xb8c) 37.370112721s ago: executing program 3 (id=605): getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xb, &(0x7f00000003c0)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb9}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000003280)={0x73622a85, 0x100b, 0x4}) (async) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@acquire], 0xffffffffffffff47, 0x0, 0x0}) (async) dup3(r1, r0, 0x0) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) getrandom(&(0x7f00000000c0)=""/132, 0x84, 0x2) (async) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) (async) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) (async) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd600a843500082f00fe8000000000000000000000000000bbfe8000000000000000000000000000aa0000883e", @ANYRES32=0x41424344], 0x0) (async) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000000)={0x4c, 0x0, &(0x7f0000000940)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x70, 0x10b8, &(0x7f0000000400)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x80000001, 0x3e}, @ptr={0x70742a85, 0x20000000, &(0x7f0000000580)=""/226, 0xe2, 0x1, 0x26}, @fda={0x66646185, 0x9, 0x1, 0xb4}}, &(0x7f0000000240)={0x0, 0x28, 0x50}}, 0x1040}], 0x0, 0x0, 0x0}) 36.487974136s ago: executing program 3 (id=612): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x1e, 0x0) syz_usb_disconnect(r0) (async) syz_usb_connect$lan78xx(0x4, 0x3f, &(0x7f0000000100)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$lan78xx(0x1, 0x3f, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r1, &(0x7f0000000200)={0x14, &(0x7f00000000c0)={0x20, 0x9, 0x14, {0x14, 0x23, "23804d3697849a57054358c0c3e1367e5082"}}, &(0x7f0000000140)={0x0, 0x3, 0x8d, @string={0x8d, 0x3, "07039bcb64dceee59f3fd8c4c5ee6b1858ca53adfc350a561bce9b1a98180a7ba00d6b14c0499b051a755c1032b26eec2066775d626f361ffc20b099c9ed6e0f43a5b61a4ec28ffaab38cbc9bb649b43d538a6940e5dab625f910dc8dc8bceca02ea9624b186f46044c27298c8af289e10721aabfef59c05698b7d3f7a420b5f7af25bccab8476d334a248"}}}, &(0x7f0000000440)={0x34, &(0x7f0000000240)={0x20, 0x3, 0x8a, "e81160b6262812bf061bb3681b3ea38e9a01b600a2b9bdff00e26f5eee3f8e99066b580a1b9233d64a6f1e346976df7ddfe0ebcf2e2d61162ff5caa53be21ac2c2cc833e20ee7c4101cfbb07cb125e9d1563a7d7394aa7a60bb95a40db935fef85daf6acd2b7cf88453e98c165269be1be4cc107ec3a95b2cccbded5ba8bccb676ad0250849f42d0d3e0"}, &(0x7f0000000300)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000340)={0x0, 0x8, 0x1, 0x9}, &(0x7f0000000380)={0xc0, 0xa1, 0x4, 0xfffffff7}, &(0x7f00000003c0)={0x40, 0xa0, 0x4, 0x3}, &(0x7f0000000400)={0xc0, 0xa2, 0x2f, "404aefcf7761d3fe36a6258471dc32224f29898b17da05f00fcfd741ee6cd503059d8c36c33e03b9f5777ae6ba9ffe"}}) add_key(&(0x7f00000013c0)='big_key\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000100)='[', 0xfe95, 0xffffffffffffffff) (async) syz_emit_vhci(&(0x7f0000000480)=@HCI_VENDOR_PKT={0xff, 0x40}, 0x2) (async) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f00000004c0)=[0x8c7, 0x9af]) (async) ioctl$EVIOCRMFF(r0, 0x4004550d, 0x0) 33.407614025s ago: executing program 3 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="746170a032", 0x5) 18.399203118s ago: executing program 32 (id=659): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x90) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="746170a032", 0x5) 14.121047648s ago: executing program 0 (id=854): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={0x1, 0x58, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x0, 0x7, 0x54, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8, 0x80, 0x3, 0x6}}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0xa4, r2, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@ETHTOOL_A_PAUSE_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_PAUSE_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}, @ETHTOOL_A_PAUSE_TX={0x5, 0x4, 0x1}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x1}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000640)={'gre0\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x28, r1, 0x6a98047402e98331, 0x4070bd29, 0x25dfdbff, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004110}, 0x28000) 14.12061872s ago: executing program 0 (id=856): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x8, @remote, 0xfffffffc}]}, &(0x7f0000000080)=0x10) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x8008af00, &(0x7f0000000080)=0x1) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r0, 0x84, 0x1b, &(0x7f00000004c0), &(0x7f00000005c0)=0x8) 14.038682298s ago: executing program 0 (id=857): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000fddbdf254400000008000300", @ANYRES32=r2, @ANYBLOB="0c0023ff01000000002938b505260cf2b9770f902c1525b595b1b8b9edb61b8963961619c173861386c14eea32ad97cce7"], 0x28}}, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/diskstats\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x106f) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYRES32=r2, @ANYRES32=0x0, @ANYRES32=r0, @ANYBLOB="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"], 0x154}, 0x1, 0x0, 0x0, 0x20048041}, 0x0) 13.957354541s ago: executing program 0 (id=859): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f00000000c0)={0x2, &(0x7f0000000480)=[{0x20, 0x9, 0x0, 0xfffff020}, {0x6, 0x80, 0x1, 0x8000}]}, 0x10) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TCSETSW2(r1, 0x402c542c, &(0x7f0000000200)={0xf48, 0x0, 0xfffffe3f, 0x10000, 0x0, "4d0000000001000000fbd98ec08100", 0xfff, 0x800}) readv(r1, &(0x7f0000000240)=[{&(0x7f0000000140)=""/16, 0x10}], 0x1) 13.819543345s ago: executing program 0 (id=861): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='.\x00', 0x0, 0x0) utimensat(r3, 0x0, &(0x7f0000000100)={{0x0, 0x3fffffff}}, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e20, @multicast2}, 0x2, 0x0, 0x4}}, 0x2e) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) (async) close(r1) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01002cbd7010fddbdf2505000000080009000200000008000c00a80a0000060001000500000008000b"], 0x3c}}, 0x20000034) r6 = socket$pppl2tp(0x18, 0x1, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000140)='./nfsd\x00', &(0x7f0000000180)='nfsd\x00', 0x0, 0x0) (async) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='Y', 0x1) (async) r8 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_RUN(r8, 0xae80, 0x0) connect$pppl2tp(r6, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @rand_addr=0x64010100}, 0x1, 0x2, 0x1, 0x3}}, 0x26) (async) write$UHID_INPUT(r0, &(0x7f0000001980)={0x9, {"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", 0x1000}}, 0x1006) 13.734299454s ago: executing program 0 (id=862): r0 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) write$binfmt_script(r0, &(0x7f00000001c0)={'#! ', './mysys/bus/usb/devices/2-0:1.0/usb2-port1/disable', [{0x20, '\xff\xff\xfe\x13k\x03\x8c\xf5\x99\x13\xfd\x93\x81\x9f\xc0\x01\x00\x00\x00\x01\x00\x00\x00\x13\xec\xdf\xc9\x1c\xcd\xa4\xcf\x05\xf2\xb5lj\xb1\xaf\xba\xfc\xe0 \xce\xb2\xcf\x81\xf5\x1cc\xa5c]\x1e\xa8C?\x8dV\\`r>Y\x15\x81\xde8\xd3H\xed\xd7\xbb\xbfh\f\xb7\x8c\xac\x97\x8e\xcb\xc9\xbff\x19\xa2\xae-\xbf\xf8aO\x9b\x04\xe0]<\xb2\x161\x83\x9969\xd0\x845\xd4\xf8S\x86y)$0O~\x1f?\xa4\fYe\xbd\x1a\x83\xe5^\x9f\xdd\x8a\x10\n\xe4\x00\x00<\xd7\tD\x91\x8870x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) (async) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async) timer_settime(r8, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec775000) flock(r2, 0x5) 2.459925356s ago: executing program 2 (id=935): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2702, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x1, 0x3, 0x18, 0x7}, {0x9, 0x5, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x1, 0xbde], 0x1000, 0x67a64fa265d09613}) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x2702, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x2}) (async) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f00000002c0)={[{0x2, 0x95c, 0x61, 0x7, 0xfe, 0xe, 0x1, 0x47, 0x8b, 0x1, 0x3, 0x18, 0x7}, {0x9, 0x5, 0x8, 0xff, 0x0, 0x4, 0x5, 0x1, 0x72, 0xc0, 0x5, 0x3, 0x401}, {0x5, 0x5, 0x40, 0x2, 0x20, 0xc8, 0xad, 0xe, 0x7, 0x0, 0x12, 0x2c, 0xc}], 0x6}) (async) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000600)={0x0, 0x0, @pic={0x0, 0x3, 0x6, 0x10, 0x5, 0x6, 0x6, 0x7, 0x3, 0x9, 0xff, 0x7, 0x64, 0xf6, 0x3, 0x9}}) (async) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0xc9, 0x200000000d, 0x1, 0x6d, 0x2, 0x1002, 0xf1, 0x8, 0x7fffffffffff8, 0x8d, 0xfffffffffffffffe, 0x1, 0xfffffffffffffffe, 0x5, 0x1, 0xbde], 0x1000, 0x67a64fa265d09613}) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r3], 0x30}}, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 2.269251879s ago: executing program 2 (id=936): r0 = memfd_create(&(0x7f0000000ec0)='\x103q}2[\xe0\x9a\xee\xaf\x03\x97\x9et\v\"|Ma\x86\xe7\xc0\x14\x9f\xb9h\xb1\x96\xe7=I\x860S6\xb5\xa8\xc2\x95Je%\xfeG\'e\xe5\x8f\xf8\xd2\x1c\xc0\xfb\x1c\xa6\xab\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94k\xcd\t\x00\x90k\xd6\x05\xb6\x03\x00\x00\x00A\xc5\x9c_\xd4\x18,\f\xd4s\xb2\x99/\xc0\x9a\xf2Oc\xc0c\x03gB!\xb0\xb8n\x01\x9bT\x95\x10\x86\xe8$\x01\r[\xf9\x0e1v\xb1\n\x88\v\x95uy\xb5:`\x8b\nC\x18A;\xaa%\xaf\xc7\xa3\xac\xa2D\xb5\xe2\xe1\xdc(\xfd\x05\x9fB\x84O\xfe@\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1a\xa0\x17\xe3\xac\xe9\xc9\xa7\x8a\x1b\x03\"&\xac\xcap>\xccZ\x01\xbc\x18\xc1\xb9\xe9\v\x8b\x9c\xb4Q\xd4\x96EV<>\x99\xca\xb3\xe0\xc4tL\xed\xf5W\xbd#\xcf\x8a\x84\xed\x9f/\xd4\xbb\xea;-Dp\xf8\xd0F\x90\xf8\x92Ip6\xf4\x16\xe8\x14\xe0\x92!\x92-F\xe2\x14D\x91\xa8b\x04\xdd\x1d\a\xdc\xe0\x18\x85{\x80Q\xf6k\x96\xfaQ\x9fW\vO\xf0\xe4O\\\xceS\xf2\xde\x049d\x06#\x88\xc3\xdf\x85O\x1c\xc3\xad?r\xd7\x0e\x00\xd7\x83\xb0\x88\x9c\xf6Y-F\x98\xdd\x9c~\xfd\x95\xc3\xb6lC\xaa\"Y\xa2K\xecz\x84:*\xf5Y\xd1\x9b1\x91\x9b\x15\xd4\xec\x02o\x01&\xaa\x90w\xc4\xc7yn\xb5\x1ag\xab&?\xbe\xcb\xe8v\xa8\xe0\xa4\x81sW\xacf\x149\xd2}\xefCGa\x9a$4\x8c\xa5!p\x83\x05\x96%\x02%\xabj\n\b\xc8NC\x91}&y\xd3\xe1\xeep\'\xc5\xab\x19GsX5\x8c\n\x9fh\xee;4\xb1%V\xe0\xa9\x8e\xf30:\xd8\x18N~G\x139\xcas\xf4D\xd4\xd0s\r3\xcb\x9a&\xdf+(\xc9S\x9eL5\x84\xb1\x90pN\xe7/\r\b\x9a\xf13Q\xf9\xdf\x7fX\xa0\xafK\xefh\xbfOv\x9bh\xb3\xc0\xf5\x80\xba\"@\'\x02\xafi\xeaE\xa6a6F\xde\xd4\xfa\x84\xe4+A\xb7\xa2\x8f\xc9\xee|xxn\xefw\x93]%\xd0\x19\x132\x86\xabn\xfe\x91\xb6Cl\xcf\x04\x1cq\xc1\x1d~\x8d\x01\x83\x93_\x83\x8a`v\xb0K,|S\xe4\xba\xb1\f\xc8`\xa6s\xad\x11\xd4wG\x80u\x87u\xff\x87\xee', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x0, 0x940a, 0x1000007}) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f00000001c0)={0x2, &(0x7f0000000280)=[{0x28, 0x8, 0x0, 0xbfefdffe}, {0x80000006, 0x5, 0x9, 0x5}]}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000000)="09000300010000", 0x7) (async) ioctl$KVM_SET_SREGS2(r1, 0x4140aecd, &(0x7f0000000080)={{0x4, 0x3ff8, 0xb, 0x7, 0x5, 0x4, 0x44, 0xf, 0x6, 0x7, 0xf9, 0xbe}, {0x2000, 0x3ff8, 0xe, 0xa8, 0xff, 0x87, 0x5, 0x9, 0x10, 0x5, 0x80, 0x7}, {0x200000, 0x8000000, 0xc, 0x9, 0x9, 0xd, 0x4, 0x8, 0x6, 0x3, 0x5, 0x6}, {0xdddd1000, 0x6000, 0x10, 0x6, 0x1, 0xf8, 0x7, 0x80, 0x6, 0xc, 0xe, 0x8}, {0xe000, 0x2000, 0xf, 0x5, 0x4, 0xfe, 0x8, 0x6, 0x1, 0x8, 0xbc, 0x9}, {0x26000, 0xeeee0000, 0x9, 0x9, 0xc, 0x0, 0xe6, 0x1, 0xf3, 0xf, 0x6, 0x9}, {0xffffffff, 0xd000, 0xb, 0x4, 0x7f, 0x8, 0x0, 0x9, 0x8, 0x5, 0x80, 0x50}, {0x1ffc, 0x9000, 0x8, 0x6, 0x8, 0x7, 0x1d, 0x7, 0x38, 0x3, 0x4, 0xf9}, {0x41000, 0x8}, {0xfec00000, 0x2}, 0x20000000, 0x0, 0xdddd0000, 0x800d1, 0x5, 0x5900, 0x40000, 0x0, [0x3, 0x1, 0x100000001, 0x8]}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x30400, 0x0) fcntl$addseals(r0, 0x409, 0xb) 2.160022509s ago: executing program 1 (id=937): keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_new={'new ', 'default', 0x20, 'user:', 'syz', 0x20, 0x1000}, 0x2a, 0x0) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=@encrypted_update={'update ', 'default', 0x20, 'user:', 'tr:\x00\x00\x00\x00\x00'}, 0x1d, 0xfffffffffffffffd) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), &(0x7f0000000100), 0xca, 0xfffffffffffffffe) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x180) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='7', 0x1) unshare(0x6000080) accept(0xffffffffffffffff, 0x0, 0x0) r2 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') r3 = openat$binfmt(0xffffffffffffff9c, r2, 0x42, 0x1ff) mmap(&(0x7f00001f8000/0x4000)=nil, 0x4000, 0x0, 0x12012, r3, 0x0) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0xc402, 0x80) mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) writev(r4, &(0x7f0000001740)=[{&(0x7f00000000c0)="04920944475a", 0x6}], 0x1) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1800}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000040)=[0x5], &(0x7f0000000180)=[0x2], 0x0, 0x1, 0x1}}, 0x40) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80081}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newtfilter={0x44, 0x2c, 0xd3f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0x0, 0x9}, {0xfff3, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x4, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4, 0x3ff9}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.088954359s ago: executing program 2 (id=938): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r3 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r3, 0x8982, &(0x7f0000000140)={0x3, 'veth1_macvtap\x00', {0x3}, 0xa8}) (async, rerun: 64) r4 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 64) io_setup(0x9, &(0x7f0000000240)=0x0) (async, rerun: 64) connect$can_bcm(r4, &(0x7f0000000000), 0x10) (async, rerun: 64) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000280)='auto_da_alloc', &(0x7f00000002c0)='8\x00', 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001500add427323b472545b4560a117fff0b0082001b5980000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffff62fa86b3c67992f7d4f78c24f9", 0x46}, {&(0x7f00000000c0)="abd9", 0x2}, {&(0x7f0000000180)="3346252f5a393a2808d91260734f8244", 0x10}], 0x3) r8 = eventfd(0x2) io_submit(r5, 0x1, &(0x7f0000000100)=[&(0x7f00000000c0)={0x400000, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000300)="0500000093c21faf16da39de706f6468004a0f0200007a1a3f420f000000000000580f02000000003f420f00000000000029ffffff0000009afb7a8cf9615c180c6aee4471708b1d11525398468c2f70e957e6c3e50eb18fef51a77d90cf9e1b0be8c3ed2717f080dfd2c8c60609ca2e7dbd0486fc054efd9978814e8ef62b52098f46078c38322b6b5fb828cad0da8e10e5cc14677c5e", 0x97, 0x1, 0x0, 0x0, r8}]) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500000025fa9fd2ba441003000000fff1eb7f442e0000e2e4665ef40000100000", @ANYRES32=r2, @ANYBLOB="080034001f3e897004000101"], 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) 2.088642825s ago: executing program 1 (id=939): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000007c0)=@newqdisc={0xc8, 0x24, 0x3fe3aa0262d8c583, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0xe}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x54, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x6, 0xffffffff}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x9}, @TCA_FQ_RATE_ENABLE={0x8, 0x5, 0x1}, @TCA_FQ_INITIAL_QUANTUM={0x8, 0x4, 0x8}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x13}, @TCA_FQ_FLOW_REFILL_DELAY={0x0, 0x9, 0x3}, @TCA_FQ_QUANTUM={0x8, 0x3, 0x4}, @TCA_FQ_FLOW_PLIMIT={0x8, 0x2, 0xba06}, @TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x101}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0xaced}]}}, @TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1a, 0x1, {0x8, 0xc, 0xc89f, 0xfff75ef7, 0x0, 0x8001, 0x3}}, {0x4}}, {{0x1c, 0x1, {0x9, 0x1, 0x8, 0xfc000000, 0x0, 0x80000001, 0x4000, 0x2}}, {0x8, 0x2, [0x1, 0xba7]}}]}]}, 0xc8}}, 0x4048000) syz_emit_ethernet(0x106, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x4, 0xf8, 0x67, 0x0, 0x5, 0x84, 0x0, @remote, @remote}, "c8e81fa33af9a85dccbe277c82d27598706635a8ed36956fbbf665af5c0d12cef0bb4be001e9c1ec65f5548d653902957d50a83377a94b5dbe6390bb38a197281865b7e86e270ac541aafa4bbe7b5e290dea38f4db89662070d85fb0bbc9411a78a4402d3749b417afd1ef1d0705283c6e5be544ab622ba2c36b69a8ab7b8a89e3e3b6bbf3ed21d8a69c70241645af9f28e5e0bdfcfcb9b66d81c1f5042aac99413328f43d7f70215ae7b30004114954edff6db508e885009a7f0273768f97a44ecfd9e6ab3488552280b02176b0b82a4147503719a615e0daf6828d2beefd9d9c26a0d2"}}}}, 0x0) 2.010087825s ago: executing program 1 (id=940): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x24, r1, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_VERSION={0x8}, @GTPA_LINK={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x44) 2.009581756s ago: executing program 1 (id=941): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00022c9d700000dd040002000000"], 0x14}, 0x1, 0x0, 0x0, 0x80000}, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000280)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000440)={[0xfffffffffffffffe, 0x12f, 0x0, 0x7f, 0x100004, 0xffff, 0x2004c8, 0x8000000, 0x0, 0x0, 0x7, 0x0, 0x5, 0x0, 0x2, 0xffffffffffffffff], 0xeeef0000, 0x2280}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000002c0)={[0x100, 0x5, 0x6, 0x4002, 0x9, 0x5, 0xefffffffffffffff, 0x0, 0xffffffffffffffff, 0x2000001, 0x0, 0x40000000001c, 0x1, 0xffffffffffffffff, 0x100], 0x0, 0x41801}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mount$9p_virtio(&(0x7f0000000180), &(0x7f0000000280)='./file1\x00', &(0x7f00000002c0), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="7472616e733d76697274696f2c756e616d653d11242c6163636573733d75736572"]) 1.948481335s ago: executing program 4 (id=942): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f000000a700)={0x0, 0x0, &(0x7f000000a6c0)={&(0x7f000000a300)={0x14, 0x39, 0x1, 0x70bd2c, 0x25dfdbff, {0x19}}, 0x14}, 0x1, 0x0, 0x0, 0x4080}, 0x8040) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x9, &(0x7f00000002c0)=@framed={{}, [@jmp={0x6, 0x0, 0xd, 0x0, 0x0, 0x1, 0x25}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0x2}, @exit]}, &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x807}, 0x94) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="210326bd7000fddbdf2501"], 0x1c}}, 0x50) sendmsg$NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x3c, r2, 0x20, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0x4}, @NL80211_ATTR_IE={0x1e, 0x2a, [@mic={0x8c, 0x18, {0x459, "78975c021e41", @long="bfca1569c675002f1477e0b4eacaa7ac"}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40810}, 0x405c0c4) 1.947925742s ago: executing program 2 (id=943): pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x1, {{0x8, 0x2, 0x7}, 0x7ff}}, 0x18) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000080)={0xd0, 0x5, 0x10, 0x5, 0xfffffffb}) (async) write(r0, &(0x7f00000000c0)="db3360848994eb81ec316b667e02fe4a56031a702a718d92cf8a324eccf448bdbf145650477002e66d89abc4172d8d", 0x2f) (async) r2 = syz_open_dev$ublk_chdev(&(0x7f0000000100), 0x0, 0x70000) pread64$ublk_ch(r2, &(0x7f0000000140), 0x1000, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) (async) r4 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000001280), 0x4) (async) pipe2(&(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4840) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000001340), r6) sendmsg$GTP_CMD_ECHOREQ(r5, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r7, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) mount_setattr(r5, &(0x7f0000001440)='./file0\x00', 0x100, &(0x7f0000001480)={0x4, 0x8c, 0x40000, {r5}}, 0x20) (async) r8 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_TRIM(r8, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x10, 0x3f6, 0x200, 0x70bd26, 0x25dfdbfd, "", ["", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24020041}, 0x44) (async) r9 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) (async) ioctl$SOUND_MIXER_READ_DEVMASK(r5, 0x80044dfe, &(0x7f0000001600)) (async) r10 = syz_genetlink_get_family_id$smc(&(0x7f0000001680), r4) sendmsg$SMC_PNETID_DEL(r5, &(0x7f00000017c0)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001780)={&(0x7f00000016c0)={0x90, r10, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'wg1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'team_slave_1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x90}, 0x1, 0x0, 0x0, 0x8000}, 0x48800) (async) sendmsg$IPVS_CMD_SET_CONFIG(r6, &(0x7f0000001980)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001940)={&(0x7f0000001840)={0xfc, 0x0, 0x200, 0x70bd25, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x28f}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x70, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x35}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e24}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xa7}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010102}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'syzkaller1\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x4) (async) sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000001ac0)={&(0x7f00000019c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a00)={0x74, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_PEER_ADDR6={0x14, 0xb, @mcast1}, @GTPA_MS_ADDR6={0x14, 0xc, @mcast2}, @GTPA_FLOW={0x6}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_FLOW={0x6}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000040}, 0x20000084) (async) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b40), r5) sendmsg$NL80211_CMD_ADD_TX_TS(r5, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x74, r11, 0x100, 0x70bd2d, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xfffffffe, 0x12}}}}, [@NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x2}, @NL80211_ATTR_USER_PRIO={0x5, 0xd3, 0x6}, @NL80211_ATTR_TSID={0x5, 0xd2, 0xb}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x9}, @NL80211_ATTR_USER_PRIO={0x5}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x1}, @NL80211_ATTR_ADMITTED_TIME={0x6, 0xd4, 0x2}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x7}]}, 0x74}}, 0x54044) (async) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000001c80)=0x7, 0x4) (async) ioctl$VHOST_SET_OWNER(r5, 0xaf01, 0x0) (async) ioctl$RNDADDTOENTCNT(r5, 0x40045201, &(0x7f0000001cc0)=0x1) (async) fcntl$getown(r9, 0x9) (async) syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000001d80)=[@text64={0x40, &(0x7f0000001d00)="36f30f1ecec48191f4727f410f01c5460fc77b28420f221dc744240047000000c7442402f57f0000ff2c24460f0666baf80cb8b4b53c8fef66bafc0ced66baf80cb8f691ce88ef66bafc0c66ed0fc728", 0x50}], 0x1, 0x8, &(0x7f0000001dc0)=[@cr4={0x1, 0x10004}, @efer={0x2, 0x4000}], 0x2) ioctl$UI_DEV_CREATE(r5, 0x5501) 1.944637065s ago: executing program 4 (id=944): socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) socket$nl_route(0x10, 0x3, 0x0) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) openat$kvm(0x0, &(0x7f0000000040), 0x2000, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e21, @loopback}, {0x2, 0x1, @private=0xa010101}, {0x2, 0x4e20, @multicast1}, 0x26e647b9a7ad1618, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x5, 0x8f}) recvfrom$inet(r0, &(0x7f0000000100)=""/68, 0x44, 0x21, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20040844}, 0x24018807) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010065727370616e0000040002800a0001000300aaaaaa00000068afb34bb32d2ced9fddc8432d0422605d3b2d75b6da05f9eea16525650b9a929bb4120623ba543651fabd84a422b7dd62d996c39a57484994dcabd128649af32098239e4b62f057b158846a3f147b2a706b608a000241a016762097ea477b5d4675c0766b0cc455a8bec7af53ba1be5dbc87d3115d534ad833dc77c884881c80672ec29b00626e8f42cd4c6a2d8b16b62ec1d86cf0159c4275e3235067b"], 0x40}}, 0x20048010) 1.869615348s ago: executing program 2 (id=945): sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffec, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="380000000d06010200000000000000000500000211000300686173683a69702c706f727400000000050001"], 0x38}, 0x1, 0x0, 0x0, 0x20008040}, 0x40048100) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000180), 0x321542, 0x0) prctl$PR_SET_THP_DISABLE(0x42, 0x0) r1 = epoll_create(0xb) epoll_pwait2(r1, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, &(0x7f00000003c0)={0x77359400}, &(0x7f0000000440)={[0x401]}, 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/rnbd-client/ctl/map_device\x00', 0x1, 0x0) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000640), 0x2) ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r2, 0x0, 0x1000000000000, 0x1000}) syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x20009004) syz_usb_connect$hid(0x6, 0x0, 0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000002780)=ANY=[@ANYRES64=0x0], 0x6c) r4 = signalfd(r0, &(0x7f0000000580)={[0x81]}, 0x8) ioctl$BLKROSET(r4, 0x125d, &(0x7f00000005c0)=0x3) ioctl$F2FS_IOC_FLUSH_DEVICE(r0, 0x4008f50a, &(0x7f00000004c0)={0x800, 0x1}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) r7 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, 0x0, 0x0) bind$inet(r7, &(0x7f0000000680)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000380)={'bridge_slave_0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000100000000c00018008000100", @ANYRES32=r8, @ANYBLOB="080011"], 0x28}, 0x1, 0x0, 0x0, 0x40000c5}, 0x0) ioctl$SNDCTL_SEQ_SYNC(r0, 0x5101) setresgid(0x0, 0xee01, 0x0) add_key(&(0x7f0000000000)='pkcs7_test\x00', 0x0, &(0x7f00000001c0)="3081bb06092a864886f70d010702a081ad3081aa020101311b300a06082a811ccf55018311300d06096086480165030402010500300b06092a864886f70d010701317b303a0201013014300f310d300b0603550403130454657374020101300a06082a811ccf55018311300d06092a864886f70d0101010500040401020304303d0201013014300f310d300b0603550403130454657374020102300d060960864801650304020d0500300d06092a864886f70d0101010500040401020304", 0xbe, 0xffffffffffffffff) r9 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000002c0)={0x53, 0x7ffffffffffffffe, 0x6, 0xb4, @buffer={0x0, 0x0, 0x0}, &(0x7f0000000400)="5a29e7dada72", 0x0, 0x2, 0x10000, 0xfffffffe, 0x0}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f00000000c0)='tmpfs\x00', 0xa14dc7, 0x0) read$FUSE(r9, &(0x7f0000000740)={0x2020}, 0x2020) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480), 0x800) 1.869289764s ago: executing program 1 (id=946): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000140)={0x5}, 0x4) sendmsg$inet_sctp(r0, &(0x7f0000000700)={&(0x7f0000000340)=@in={0x2, 0x4e21, @local}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000380)='N', 0x1}], 0x1, 0x0, 0x0, 0x804c040}, 0xc851) getsockname$packet(0xffffffffffffffff, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 1.679906008s ago: executing program 1 (id=947): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) r1 = fanotify_init(0x0, 0x400) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) (async) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) (async) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r6, r7, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) (async, rerun: 64) ioctl$KVM_RUN(r7, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_SREGS(r7, 0x4138ae84, &(0x7f0000000340)={{0x1, 0x2000, 0xb, 0xad, 0x4, 0xff, 0x7f, 0x5, 0x0, 0x2b, 0xd}, {0x2, 0x1, 0xc, 0x4, 0x8, 0x0, 0x7f, 0x1, 0x4, 0xf0, 0x9, 0x5}, {0x2, 0x5000, 0x8, 0x5, 0x1, 0xf3, 0x0, 0xb, 0x0, 0x5, 0xb, 0x9}, {0xdddd0000, 0xffff1000, 0x4, 0xe3, 0xb4, 0x2, 0x1, 0x86, 0x8, 0x8b, 0xd, 0x2f}, {0x4, 0x8080000, 0x8, 0x3, 0x5, 0x86, 0x26, 0x7f, 0xa, 0x0, 0xf2, 0x43}, {0x70000, 0x6000, 0xb, 0x7c, 0xb1, 0x24, 0x7f, 0xaf, 0x83, 0xc, 0x15, 0x3d}, {0xd000, 0x100002, 0x9, 0x3, 0x2, 0x5, 0x0, 0x3, 0x5, 0x80, 0x5}, {0x3000, 0xffff1000, 0x5, 0x5, 0x9, 0xf, 0x0, 0x37, 0x4, 0x9, 0xf0}, {0xeeee8000, 0x2070}, {0x2, 0x7}, 0x80000033, 0x0, 0xeeef0000, 0x20252c, 0x0, 0x0, 0x80a0000, [0x4, 0x7, 0x3, 0x9]}) (async) ioctl$sock_netdev_private(r0, 0x89f8, &(0x7f0000000480)="ab873973382dc8d0270740c8379a178fb43b12da4a41631e18bb74553987bd52981f8142ed16a612a46ca1bcb1e2c68b139fe1c40ee22526aa3c499c25cdbc78b8d20dba4dfaeb89b70021e9c9d36f4f2a7236eac768670058d94ae2edfbfe3ae6e4ab117408d6cc2cf8d94b7eb9efa112e91330050a89a1809ca56e5cb9056410104577cde9e5778f95c5cba63a72") (async) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0xf) (async) ioctl$TCFLSH(r8, 0x400455c8, 0x4) (async) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000019080)=0x2f) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r2, 0x80286722, &(0x7f0000000640)={&(0x7f0000000540)=""/233, 0xe9, 0x6, 0x1}) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xc0}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x28, 0x2, 0x3, 0x101, 0x0, 0x0, {0x2}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x2}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x0, 0x2}}]}, 0x28}}, 0x0) (async, rerun: 32) sendmmsg$inet(r0, &(0x7f0000002680)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000400)="ea", 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x119e75c40673edef) (rerun: 32) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_DEV={0x14, 0x3, 'wlan0\x00'}]}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x4c841}, 0x802) 1.016101513s ago: executing program 4 (id=948): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000100)=ANY=[@ANYBLOB="60b80000", @ANYRES16, @ANYBLOB="050427bd7000fedbdf250100000008000100", @ANYRES32, @ANYBLOB="4400028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005"], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4040084) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010000003000000000000000000000010", @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800b0001006272696467650000100002800c0021"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x42902, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000100)="305c0605e182d12fd8326183700398d1c7d7982b8f57fb20a3adc9e3baa292ce8f0a861e6417acfc8648ad1b93d502b0cd490e35d53ddf6fd0461690982b2369490100b06df5aa58a09a000000808ce41d86b9b949004fd8fe7b80000000", 0x5e, 0xfffffffffffffffe) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000140)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x870b525, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x8, 0xa}, {0x0, 0xf}, {0xa, 0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4044840}, 0x404c880) fsopen(&(0x7f00000001c0)='minix\x00', 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) 910.094164ms ago: executing program 4 (id=949): ioprio_set$pid(0x2, 0x0, 0x2000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@generic={0x2e}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) (async) r0 = syz_open_procfs(0x0, &(0x7f00000004c0)='limits\x00') read$msr(r0, 0x0, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@ipv6_newnexthop={0x5c, 0x68, 0xe0c, 0x70bd29, 0x25dfdbfc, {0xa, 0x0, 0x1, 0x0, 0x2}, [@NHA_ENCAP={0x40, 0x8, 0x0, 0x1, @LWTUNNEL_IP6_OPTS={0x3c, 0x8, @LWTUNNEL_IP_OPTS_GENEVE={0x38, 0x1, 0x0, 0x1, @LWTUNNEL_IP_OPT_GENEVE_DATA={0x33, 0x3, "44e80f083790ac29cfe0cf8fc7f60800751d4b5868c29449897ccd06364b285f2c2027941991b2d90443000c36ffba"}}}}, @NHA_FDB={0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r0, 0x8010671f, &(0x7f0000000400)={&(0x7f0000000300)=""/203, 0xcb}) 909.938617ms ago: executing program 4 (id=950): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x2481, 0x0) ioctl$COMEDI_CMD(r1, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x270c, 0x20, 0x1, 0x1, 0x2, &(0x7f0000000300)=[0x0], 0x1, 0x0}) fcntl$lock(r0, 0x6, &(0x7f0000000000)={0x0, 0x0, 0x8}) fcntl$lock(r0, 0x26, &(0x7f0000000280)={0x1, 0x0, 0x73f0, 0x9}) fcntl$lock(r0, 0x26, &(0x7f00000000c0)={0x1, 0x2, 0x2, 0x73e9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000080), 0x88300, 0x0) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) 0s ago: executing program 4 (id=951): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000480), 0x810, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000d00)={0x4, 0x1, 0x7, 0xcc, 0x66, 0x2, &(0x7f0000000580)="78d2a080102c52499ebd513e6cc1a708652fc5594198e2280597a14f36249dc2c39e55295810109c4fa52dd689aa1f871faa6efab60bba377e61927433df2fd15df1b0656ec17e389460600cea13e65abcf219b39ca2328c104f490fc590ec7b7212634f11b2"}) write(r1, &(0x7f0000000200)='md0', 0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r2, 0x40480923, &(0x7f0000000380)="000000000000000000000000000000000a000000000400000200000002000000000000000100000000000000000000000000000000000000000000000000000002010000000001") ioctl(r2, 0x40140921, &(0x7f0000000420)="0100000001000000010000000100000006") ioctl(r2, 0x400c0930, 0x0) ioctl(r2, 0x928, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@sg0, &(0x7f0000000d40)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) r3 = open$dir(&(0x7f0000000040)='./mnt\x00', 0x0, 0x2) ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r3, 0xc0506617, &(0x7f0000000440)={@id, 0x40, 0x0, '\x00', @a}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5c0, 0x3d8, 0x3d8, 0x298, 0xd8, 0x298, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x4f0, 0x6, &(0x7f0000000500), {[{{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0xb39, 0xfffffff9, 0x935}}}, {{@ipv6={@mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xffffff00, 0xff], [0xffffffff, 0xff, 0xffffff00, 0xffffffff], 'vxcan1\x00', 'batadv_slave_1\x00', {0xff}, {}, 0x0, 0x9, 0x2, 0x50}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0x60}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv6=@mcast1, 0x2d, 0x23, 0x647}}}, {{@uncond, 0x0, 0x118, 0x140, 0x0, {}, [@common=@dst={{0x48}, {0x9, 0x2, 0x1, [0x4, 0x6, 0x6, 0x88fb, 0xc1c0, 0x6, 0x9dfa, 0x40, 0x7, 0x0, 0x8, 0x4, 0x81, 0x101, 0x9, 0xa], 0x9}}, @inet=@rpfilter={{0x28}, {0x2}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x3d}, [0x0, 0xffffff00, 0xff, 0xff], [0xffffffff, 0xffffff00, 0x0, 0xffffff00], 'nr0\x00', 'pim6reg0\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x4, 0x51}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x8}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@multicast2, 0x1d, 0x12, 0x101}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x620) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0xff, 0x6, 0x6, 0x100000001, 0x7, 0x0, 0x9, 0x4d25, 0x6, 0x6, 0xfff, 0x7f, 0x4, 0x2, 0x60e, 0x2], 0x1000, 0x8012}) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f00000083c0)="4e5350994ebf71ce3049a58c5d050078bf16b0757a4c27b455e2a547739587dd3380b5df8f40a0696c5bd6cdb672cffe4d870c5c90ca92095b9ebf3e92fe31d8cd74275d857d34a74f7eecc7fac15e2f148d4e9d47bb45b858bbf078999970d180f28d7b2cefd92635d45a563d9229c9fd770efdc0848e52fa5efd9ada5c94a1ba94b4b7c7507f8b0819bb20910f9f50a83a010abbe126dd9f6a7b84eab6b0d5ce78d2ade77a5f7e4e997df1d03ffab4b4c945d803e4457909013127a98769c938c237f37263bc509a42bc56ff2dbf80e847e2c407009eef94f18e1e59069d62298fdbadae007ffbdf403c5049a4530ac0abecceb5608da02754c9a575af52c0b7e41226e2d642a814861c4310c935bcbae413516dde2132652b39c7aa0218a6ce65dabb4494965209ce879ba7e7e59039db5c1d36d6a7f86d72dd59954fd6f46124a2506b245a0db11aa89d2feb312a6596ea2fecaa7b6021f37a255f628da7ff6b6c36b514d3b6be34e505f9dac6acfb888198004699fb350ac93431533554658c4957df36703591638d6488bc03dd8290a75ebb367a481a50e79a46b04d005649cabd79e5c6326c066bc2b6fc5febb87ef66d832ef31a16c2a450a0b990fb549a5d810c928d1a81fa1dc795db2607ac7d46cb5716b68acdeb00987e429fe6a394632c83b43336e7b51d9cfdb50e83d8c6ba1784d9f74c16b476e048e65e7ac0af683b347d7377ac1795422e00e5bd8da9b313af83abb3348861116de7a99959169b7dff9f7d9b7a6d107f2e76670a6214a419bf8298f80eb570fa29264ba57a383c5ec5836ce33104ecaf1aec76e311280a1d2c8bd7abff3a5a242e6a637f7db63038ef5d78aca9c680d72b60da4dbeb0e1e683ddc82898647c589a81b8f92db06711d8a0af05560cd77fa7005283db71e8da21713fccd450822062b994d152aaed2cdcf0dec9c60617e15ba4df628da4e71279bf9d1eee5c7f055c27cddfdd45f9225d5d5529ef7119e2e3c9838e7362971e069be487797e949b24297de19c61340d1cd7a2bfa3880b91a71e934720a59e1e0ea992d2a1633a0852ad8addfcab73a291e35745e694a6471f429b124305886c1f79f67c78de3f3ec998c91e7fc59d26766cd446f6f0de603f2c6892e13cdaa37d9e8e118d098b6986ccd991993ec152193e7d77394b05b99e7d310c506707f1be52249438fba9615f6dad2ec7244fedf36e34ec311b7d6bee64271d6491079e161190ded7e28e2ada4307a9b2986c267b1a30d2f720ff23408011f1d589ce9ee77f981c7833656ccf7df5b3a87ec253ff7c7ef1e67ceeb10c93e3fa683cdadad65850ffbc402b7744e94cdecef9db9d264c755c53d36278df23d4c9685fdefa69f7588a33b8a64b35191ee81abcb9765577d175cb06e31c582807ff7243bfef44961fbc0f8a235242f51ee991ea621803d4dcfed90d26f004b299425bf219f6d185fe6e088ae44601b03defada18794feac93787696a5d419f09f769bc590f43d2df6a131f6895da2de120c2644685e57b1d476c6aba5881e954fb2575356452b118b942cb02b4ea0fcf8f1bbb9a23b6e32c9d0accd3dd861452a3ad77b38fe709e216974932deb5397fd8033ff0e073d93ac0b4be762bca0424d69bd57b22ba914133f87671a29498b268c2911e793215463ca2164e38059456107dcb29beedfd6277e2b41a11d1c6f1361b19875c9384f04f9c53c1856d71f360a8fafe05f7aef750ec0cf2bfcfa971c017ad071b69a18fdaf970b384d4c889cfa5a0397dbe89543a5c6302645d6edf959aa60709ce0225fe6c3266c7ef62157ac8e78fddcd8a1f2ca5b58128218d19276885515775326aeeee0006cc810843eb05144bf8e2fe3340cf60b32cafd96d23cd7d0d3adcbdfec9a2a3d88307c362633b1c5637608ea8476d900b3f836a9734bc5862ef52983577128d3f74b903b0e3bf64326c1b564ae42aeeb0c07702b63a9ff74a2af6b45e5185a53f36c17bc29dfbc0ea28ca5cca43a15d751e9887ad3e6a87faacb6a278c4c8a8d21b9a77b9776f33102a6e645e99cc5cbc543ed0674282c2b9f8e5d14c2599aa9ac8f81438c77f2b9368bdac82edcdc5366f39adec9e9a3fbd55b79abc16d2ebff26b7d0c88f18b486e5836333575e3fc7808cb423b44781c57965767862922b4ff32d9bae76296843a46f430211c27ef9db168430026a5691623284dfd459dbdd1f1a6ec9bfad666507e6eacb1e2a7866da2e12e6d596d0bbb150500590013d9288af20596447f97bf1744eb9cfb244d8fca269b1fb71e14de664be4e95d83fff1d7abcfebcf3e78c1c66d28f260fb0c19f9fbcd2abbdd7dd7246e49dc25d954bf25f810a2ff6f9069dfdc62e7170fe3b0964b2ac95024256dfa3e7a426be5bb5f707fd82c2b3afec5d5dcf5bbb8fcb6dbc1b59f6c5330966c70d8b016956903a4278817414ba3652a102d7e7e37ecc79400267fc3bf7601c0731f87d479c33f100735e748874155267f708cea49d549e93cf7a398b20373dc90ad9afd56d9c77cd24e2c4a18f7130b366c7fe5b26bc4d11ca1ed1b98fa0b4d7396f82ae6593f4575d19f4d8fd586c991129e5cbe15c8bacc89c3ee15ca471dea966b5c48ede0d3ba2a7e28c75c04e6a4aa49a61f4e391ffe78eb5e40a5ef349f3aa4d15f2291cc86ec7e47ae301bf0b6083dae44b695820a893d46732553ef15ed1c16d28268d52a7e3a7e7c009d0c0708a356d3310c1ebcbcca4d7acf433e34bfc9fc115498142dcc725e7a16879c75e4c2f01c6c98b39619f3248bf530e6ee593467e38cf4026cfdc4db6296560000d587f3c580750b1453ecc141c0461495551297d88ae034acbd4f5e80ce198e6640c4c1e9501529988109cef006eb2090a6fcd974d7f60290b78f1a8ce3051ac2d69636c3219f0a6ad8c254764396a1684b2fd9805b1853525f2e640e513197283cc4d4073ac033e0539a88f08aabe1423cd40b8a7e073437d812b57a5d39a0531dcbe13f4466e89efc66c2a1e4b39a3e0b3073c9d44e6cf9b85f4df5c4e03628d05bc0f94ec04234c9eca4ed17463f190406834b02888728f625371cda75d15ec19efebd59f00ab659eb94eb88bcb2110862a369ad599610c1530fcc118f5b82205bc5215fe3623ac8ec297d8ff4eee75ace20731c5d505e6605c26203b7f754164c9463f0a6eefe3a2880b8e06e7bc66bb2adcc1a3f9b0325f5ec31d12a25f1f73c2aa6bb3a7680d786a082a63b13cce1822fa6a4b085a871ae3409eecbc1fd8661b5d52bb2b8b72f23e24a225075f272ed2ba0c6c5c693811a0ef8db6da7cfe7c966c647f0187ad223eedb1012a5b7af103e98464ac768c79b21ca45b12a52cf261de0d367442cda71c4b8ee39c94ded1b22ba06c13836cb467ebab4efea07bdf1e3de8da56a0ee6d4f848011253cc21fac10700003513d3167b7a73e0d752b861c49814bc5410ebe53a0264f76068c91ee6ec9e2daa343482b2f0f06e605c5aaf81f2a3cd570efc2094b4bc452f9526f1bbe7b22b694fb8109a5a987fabf6250912d6099e67da9cac79e8b6f2cce4702d1f17cbc5d06c38b8a48155ec758369c185ded839fb58cd736fbb74105fe5baf44e7e3ed06843f23601b60a43b1f88fd29e9b3f58479f9b95392a39d5ba1a31ee4441ca2d1fb57c0a8678a07a724b7a65b2ab16d1da197f435bce3ef003fce27fa2f0a67c9dd6c930a4bcf59e79e57b010000006fe34972958c28b56642d14ea89bf4d7d6f7fcbcf4fd92bd08fc9fe424de4359112b11f81fbdc1505658363697713ff6e1f8ca3c4be34a79993a9091f6017cda6c7489ae5c07062555231427c3eb42a049f42d22a060983b044a7d34ab5d2b5386cca79af72396a48aad6b8dcd7855410fc6106e4a165994f26efff1e7ea0aa8f560333b5dfdb2a0d899b0fda955155f90c75effd3c9535d88508e836feb7807d57b2a57cca42d3d08fe7de60d2a33376f49bdacdd3f814bd0927f417f15ad62a10b302f46dc53a26fd997f3af46bbf990b6ada45ef83ce13029d167c65134e7b82b59ddfdc367e61c40defd2732ccebb1d4000f6c742df964e1fb390c255d2b1dfc745c6ab34af8096b5b67aa179e3f341854f7a69f7bf47664c832037ec7a78f8e27209e3f20f833fb6e8c0fc4a40920a5ad2b0618982ff72540009d5db82f0f5bcaed2a27f35d1e50eaa0cf8e48c7a2d43c25d0264db750a7f33b44a4bfaae576cf9ee7594ed204513899566564ed8bbc97ed18b1d8868f926a5c70ac06fbac1eade46792186be7bf8ffa3301239edd093449b7d77192782b5111c14169d2b4a1b3443ad62e4abdf11aac6a5b89a5b20ab0ad0abd949b9d64582c67ffce018e7e46de4091fcc77a65b971fc67c8d9cbf0c341ca764b1056ee5014d9865059616a525a1d46ae2fad159afe86dd1df9b8246411827e19535ca0aa9f83050b06e70aa2737f27e93d584a9cef878a642e9361efaa5d20bd8da901fa2e064656f686d3b3ea31d1d850ae9196b7764548f5c6450a32a717e09b6b7e75d43fbbda76e43a24f186d5578933f408bfa28e0435cde525fb91e71d92d704cc5a9b5e3db7aaec46d2b1f8dcb3f921f69bd7397c96a1e132c39c8f1656cea4365c779abf76199cb5b6aada022edec5c901cdafa2e7f3765af9c8b20cb1a6785085fcb0dc901367b89051bdfdc6b68c5215fd04e2b3c7e1c454a4d21132953b25c50995af0f7159a5a8d0a1621f4808f126a5bd40ddc79fed90f49925ee367a57a05c070fbe39fe2c213e7c1724a907ecfa69efe6e021c06a262471a4377f3c9809e9fee4f375e27c31b6afbb2151da86b7cab63c7b4fa4b77fb30172b9d0d78b1c0535ec0639c4910b5eeecbb5b8b5c8aa74c140e7ad347812e36db3097a7ff85c09ab2c0020202307f50efefcdb497b9c060ca68c4be54a9165b4cebc6b2e2e14e5ffb9213142418faedcdf26fd326b7672399e71cfffe3ed712ced5317c254f9199ee10c24c802d102bd8749513d3145201ca4e01bc7c8bbcf430afa541ec5665f86dfb143be648521bb0f2b029018201444787f644f8c88b79e754e6ea9c797babdaec72a9680abadf3a41684cdd57c2b6e833acc0846be5aa927f1b1b36562d2acb9ecfb758455230d050daec6748ba280a5edc86d48e3f8af0f8f4ffb18ae3cd3c19a82d504a4fd52bb62289ae8026572a497fe268f87ef4b4b5886aa07eeb698b7cbf99683f710afc9ed1f8a488883ce0eb8f7fd055b82a9fe21a409caa231c41ba151008e9658919c611e157d7f3926a5e4248532a6860e615b9c86e9fea212128d96ed58c9b84ef22706071eb69f492e4d8321ed9faf6c6a8928f86172bdc930244583ea15be497d9ce4ae79cb3e6293a8512ffaa9e8e358f3c7c7117001fb92891a40b84f9126cc3def5cde84f463bbac9668b9f56c3e4ee72fceebb47e52fc226bab213d8193516e7064459fd1365350a95c5a1c3ac44a73bbba2a4c17ebe49dd781bff1995cd706b77bb533117594ad63566f4c0730beab85ff4c713b7f10b95480fe99a0f676c5770e85509e4e60f198148115f0a3ce6028516a946178d1acacf7767f6be7277891369eff67762aa58f928d48b7231e44d899cea8289003349117a53d61bc27b207fdc91c9db61e677d1e1a1bc6a1b6e8564130b335233db4b5de8d62324e6d0ccb2b08c2ff922324eb8c506711142d4b8d7a21223ef0a3d534fdb0de58be95cd827152f71bdd0a82766b62b4c87536f0b7e7df343c4263187da887de6e65d11d0360e2376c1d71c367ae85edeed8f767d24c644b1a9b455ded1dc3cc224f99936a6ee66931c45e5e3db2427719ab2d5cd9c20d9bb0ec004b69bccb00649f3d8e34a3572c257de114b9f027d76bc7db9007175cc03b9e2061b6b3fe7409e009b5371544e56fe438cbd361e5b11efbf2d79d1c250a1e73ca8c601c4f4d1e3761290950421c48c7daa45965e472f5ef3c4b8597444dc5dc01cd25358055b5000617f3e7291da3413e3f0853b1271366612405c35ff1b785b984d921b518425628a533a29ab65d3c11f44c6daa86f8b6457ebb9419274c481aa6f3fa4547641670aff58b9cc62c0993d49a509f02dee755ee5f1fd2710c995c43a91c4f873afa1bbdff14427cba2641052a8f361ecbc72e8a6cf587e83f8bd3110c95fb080edc77a6d43cd58c447b0e02261e4109500c6458dce70acb17aa8f9dc1d15b94a61354164031b5d563c25d0246fc45e6401cefceb501e1468903e5d677759dbe3f24bd48ce55ff8b8f26529fb3b2d669202a1e8a498984b449b4830a0126b18f0e78182c9ce78fe0c448c0e27845b926cfde28fa85e156fa98fefaeb19ed1247c9643b447b4342c97cba5ca94ef1c555d5b49aa70e6aad45bfb557f15e8fdb2d6e3d10d8338a13fe3f187751985b37a5bb10b750f79e36fc2e2ee9bdecc3ed156e202ed7b45a94809d77edaa398042fc6a825a4848c334c557303d24eb3f8e01be06995ceb283c70272b00da61c3381628f0e372fe2fcc779ff7daf7e4b7f2686c39d3fab674b8867b62b0bf9d5cfd0c1d3b270521f55f147de75142ffd7fc9ac7e5dae7ca2fdf26a9222d060823852409dd040cfd1f66f218c6dbdaaacddab34b123af22f97384d64fac64d84fd638c96378c8f9532a11927d48440bc777ff8b8b9be88f930f3b579a713c0bc449dca3a3bd5f2efa98240ccc594299e44451dc60c6c5c9edd0d7b777912b3dc40c57e0ea5f4425cd7047e686c7304f04ba9f7b5de6ad2bd524f1d29f8802a524441fa286015adf4589431710aa4d76de8a956dc1d39c0a13abb7fc309d24222d036e204ab6bb46ef8a7595d9e4512e0b9d5f8fd719a4e3072e1d806967045789c67a1681f2a9f1f4b19f4f5e1afdafc17db7a6d5196161499e62ab4b0ec27648f3eeb1fb2b78f8ecf9b05cf9509a3b9e2a361238deb1c91bdbc8b1d11bbeb939fd9da811cd439069da0ecc00665d72357aac01f259a0325409b201859cc0569e0eba67a7a9ca7e8b78078d9370bd3e37f0571680ede60cb6bbfe69435d6ab5efd80cf051d119a7004fc0b600844d49218d844de8f521524a47ee50229c7da25e42a8639b5db225e7f23967f5d4f8a297aff04a3cbedc2985b6393a5ba0b26b6c7b4ca22d369b35b410799d1ad02825104d34f73408db1948438597931ed1c1c260e78340517bfa2f734537dbdf5ec303518ff4640efe7f7b1c2f46ba8b9ddb7a18d5e87ced554c9d6de78f85d293349590c6c32483534bc968b24a28eb54b9515589d6dd8eb51a5ad0b4d896ce92250397cbc404323fcdf0ee47ed634e0c58213bc5b35a72b21a098e11b79c061430dc817c1e0c79a5b6ed3b002979933f1b83a17f250b1bd5c4958df4d75531ca03efbda89f6a92fe08c23ad9014ff562a7f3dcde578d6825b9847b5df04dbca4f2aa52d8e0f4cf8183ce121e39b50358a9796acde0372a8ff97769874a80ab997cd889145aad4888c06963c2f5b82f53a748a6729fbc79d35c06d84e05c62e44ff78040e56ebfc6efcf0d8b49337d5a17c4041f0d5a8b616244d585a162b69db073accd9071d12df5b326a43b834bbffc2f2a60deafcbddf1c6438a1769d6fb09fbe1990e89da12164ef237f326edb5be64bb64b143a030de8a99b3c5e543c871cb581e2be090a92134aa587701f864907cadd7c1ce20fcf8f5dc7f7ecd06a6c19d89a92ca0ad4393c208b80bba990c7a3702a9c79bddde75d5db244719ac32191b6ceb041ab541fb47680a97dc0422b8a50d91e32cb08cd341b0b099aca5bd12b69d4f89d10b755b351a6489180b786a3bebac926532a4a2d85b07bce6c090d1aaaff079e36d5394a612f1351b90c13a0fa6bf9d188d548dfe6fa51a9026edb52009c03ed45ac51d05c58a957bcc67e05a588985ba00d79f33ae9cdd5f5721d9fdc72ee6e880708be87e8a60c3c035c146f2091d1b9a4c2cfa56f292fe1ba62290d4e56c05669291bbe917f3cac51802a2cc8e9c90dadfe666c233c5a5bb71ee17deec51ce60c73f57bf9ecb84873afcc44815131810c6c1217bea485ef9aa2785e859b25315ef8aa3a274982786e45d622ae831fb76010d69a181b069e4cc55d4436edb10d1119b0c6000c6d5cff7c72f740a59dc0507e7a952b69403c62673f122c9d1264fac6ce2262e86cd8d6a402672f88530fc2d16f31736dd497a4e853253ac8d5aff8d1376895e9f5519b2490cc2a2412ba0c99cec855f668837310035e92fb646486de1b0acffb91ae7516df3eeef381456b55e65baa58e71461c928687e699d2b21814805591382e95e1b970aaa53259917f070281f2336b7d570249d838b3f1a32753c336864e15f4561badf8fee034a29c52ff3fca7456ae140f83e3b2fd5b57c9aef3f20c664200d235f236ec47dd2fc20b14dc6000812237aea992d987e5460679e8c5b76d931ef6d951e6c7087e3106b6ce2db9de6f228fdf3ffc38710c0e8d5000a195a79d1fa2301038f5b27c40b09c34c025e5099d40c2204ea0eae985263c9101cab88d6857a320c9e497f22348a24861a5fb8d734e08cad09f9933748ff01eab22f17756f58688dc1b486a397563ee9ad0784b8833cdb5f7c6bcf76d9c1105f71c3c6aabefd70dc6cd5c66d31caf916145ac5ed7fa070b4277c0448ab1eb78c943be9aeab0587d321a4bcb7754f070881178f8be668b686124899fac252519f4b60ec42db766a908755040463125c26850177402a977246d36d23afac0a11889d54640bd8f6f670d686cfd33f6fc5d90cf6cbd63d9d0fd201dd4c74dbbab899f3c23c0b7e37ea0b2aff421327200d0da58b5893a4186ae3652cc6e11c2c2a0e52184a3872532acce98c94cebf4f31333663a620f0dba0ffd89c3124380075bd28caa6d449a050b3661b8fbaf4747b77c4928b1378fdc8c7a7b38ade1aeec44bdfacc8271d0b132b2029b0f3582f9919f5c8cd543abc9caf6b82b197cd482c3ef61a64743506342bf50a3c1ff544563bb8b2002911ee1fad698f4ac133ffed5bfe81239c918207a03c7a8bd71a0a502aea78d38e970e3ab2abf754b598acb79cf276792aa08724d0ba24f2a694912ab795b3f45f52dec50d9bfbc99ae27e1d2c2216afec6709d6513a64b29ef58255bbe18478c5d4f15f74ea63a1e15487752eec8fd019f1d4a7aa25277664754bd2d7cd3a7a018b92c56d965a1974885363757286da9e055ef7fac17876f0a64c1026a597733b897a9155ecbf420159ae8e5209aa83a3544fff1fb4566f2d54f95e3bbd30dcca5f24397e4bd47ff01292f0d6fe9dd47a810e0c25382fa69b4987d1afd9b69ef125110ad6b240eaa9c85829a2646f9ab7874bc02bfa8346cc9190943e9d46b44880670b1e2aa3a29e83be5472d7418885a353faade6e8b18f4b588607bbb758588d1e2f11a9dfa1c4d61be50249f1ee32e6ff8c0c7722aaec1bc79654a4772efc578bd6a14c79abcc77a4e09c8b6c6ea35cd3ab31e35268fb55db843176f8042f8ce7be0ddd4ead6dbdad0ef9e7cb2323db5cc48119a72b27306b8ff6366c0bc682a85ab9e2cf2238b6d6eb2e38a97d5577e6334cb2aa6e7c86e489e876f9d7053577a5cb57f52812fab7c4bd7b19a34c228ffb67dcac9281612f778b58c580c140542200fd00cb3ad81d93420df93c5af2493f646d8de797102fa0a650b2c7638623b823ff11444fdde453570f99f9099b60061a908b83383ba8b82bb78edd074dccf9342afdf8d11a6129ba6ea7030f3629056264f1736c2b926171b6dc7e1fa455a473de656390495f3b6ad2f9f46f35eacb075628ff739ef78f28ba683448068c7f18fb63f28ba7dbbb78999100dde0a94e8b8570817c7114c13e139ceb333782b29a84a5b19497fa785915c7680dd7f972cb59ba22161f60886e5cb3c3e808726cbf96bc4da78914eee565c6d9d18e70d22cf8c0244cf3cf488c3550eaa400bc0f26d64e0f1bc8d0301a841d954073a641f3ef883d81f4d5db8e9df708e64e640b38df7295f7fe573863653086bae5507c880ab7fdb7a6c5ce77027ffa7395233d3ce536d77ae6c2e9c8ffb6fee78a3bcb3b5f888bd595caa3a5586948776b950a89cde4db8247ffff27491c882b430afdd60e7a22324f6635a9aa7139f3e624c6d9ece60f7f8153b2080cf0544fbf8e1c436503766e670b902604ab521e11aa5a65cedd64cfaf898ac5f55c08c87693c323517bcb0d99c28f5e072d4f6540c7ead70138d47c1a67fd72bd6ef5613af33a0af311c3d0a631ca2a2dfbe35d1021eb610e40b9be128683235a788b5a4cacf99babee382458d59e8aa1dd7bba7e09dd30c055a3df8ed721a1778b2c6ed587a403566325cd19962edd7831caa44a6b716517bad502130e7cf6a5ce5288dc84c0170f622ae0b1e1166a9c2c0771d91df9f9dd82ae210469602ce38964746c1c1d04321aae7d464eb801dbea7ec39505457e778208774d72673626c998b002c46a9b4b1e390d9344f0c1043a2100b35196bce42d40caa0ea9a486bf8526fd1f0f0d362c2cac463ea7377a20b54b9435442ca529fc00da4fd7e27c4eaf14215a06857b54254c26346956fd7fe215a5ce57ec38cedf50a3c759e563a4fd87494f00e7bd9b44f3b7e99c6ef67187056a21d2fe1ac9d24125b1947eb293189fdc448b591af4d9b8eb091d6bbb5e50fae79d000044e282bb2ab6c63cc9562b151c214e45015354e62be63e1881238b907f7bdb791ff44a4e03fa29dbd26db2f49d0f4729b7cd9ba69a65b0b493466d35d09b3f590c67c31660d95e2ab4af2c9f1df91f04ce5a57dde2d75206b42e3423126774d76593c2f713ae279d7092506b513fd5b38f0f52d3fafd7141dfd4a0de1063754dba865faf8dc0f6be9d90ef21ec86a275533f6ad4b4e360dc775413f29eab8b3daac6279b9abfe163ea2f183e09ed91ef67fbb090875109288a182cfdcc46d90678efe5edceda6518335e678438cac4bb47d376f3f0e12aa55301735d7f42653c073d6a4a37b2e17d332dc1be6b50918c007b14886307cc39250e81efecd63d24067a49994572725a9df1760caac13a28f5255556b27ec245e93969b85cdec7cd1c2d2a433d3f9572b93054a7ce8adff81bc1d30884d5fc4791e251bd907e37af5bec74235c3e2f804e4e0450b715289942b7859ad207bafcfec1b586dc15e7911fe6d20aa3d02fcd47e9956780e300d7c53c17dfa15754deb4c20efebc7270bda0fa6b37fc88c6be4250cac38c1b8186b364482026ab52d65d3a691903fccc39772277011bfaa421adba76bed9731077be00000000d40f36bbd2a839c67dc4b862c968491b877d4fd13fc90f8da57a29121e12f78e85af765cd66e72ba513593fe1cdf20019985b065d828707d8e509c6834eab188deea5c9ee97955f4b07d37b6fc7beed73be94887d423a349f35bb8782bc654ceaec870d97f061bda02ae73f6d575f81e0b6326eae6c1b3085cc584686120e12dd9ad8ce44036bec8a189f900", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x1fffffffe, 0x8, 0x6, 0x8, 0xc, {0x1, 0x8010001, 0x4d0, 0x40d, 0x6, 0x0, 0xed1, 0x2, 0x5, 0xc000, 0x7ff, r5, r6, 0x3d5, 0x20000002}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_emit_ethernet(0x42, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x0, 0x5, 0x0, @remote, @private=0xa010100, {[@ssrr={0x89, 0x7, 0xcc, [@remote]}, @lsrr={0x83, 0x3, 0x4a}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0xfffd}}}}}}, 0x0) write$FUSE_INIT(r0, &(0x7f0000000180)={0x50, 0x0, r4, {0x7, 0x26, 0x5, 0xffffffffc4e10885, 0x0, 0xfffc, 0x6, 0x5d2186cc, 0x0, 0x0, 0x1, 0x10001}}, 0x50) r7 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f2e, 0x0, 0x3}, 0x18, 0x0) landlock_restrict_self(r7, 0xe) openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x60a41, 0xb3836f6d7a15f29) kernel console output (not intermixed with test programs): le to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.616108][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.617536][ T5864] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 195.619159][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 196.655480][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.695363][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 197.695392][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 198.735671][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 199.775486][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.736320][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.736794][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 200.815312][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 201.855501][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 202.895392][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.785405][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 203.935325][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.576435][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 204.975403][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.015303][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 206.826201][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 207.055220][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 208.095422][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.135419][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 209.855558][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 210.175385][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.191275][ T8128] tap0: tun_chr_ioctl cmd 1074025676 [ 211.191297][ T8128] tap0: owner set to 773 [ 211.215166][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 211.488359][ T8152] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 211.574996][ T7160] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 211.714982][ T7160] usb 7-1: device descriptor read/64, error -71 [ 211.975078][ T7160] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 212.114983][ T7160] usb 7-1: device descriptor read/64, error -71 [ 212.185951][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.188714][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.188849][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.188964][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189086][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189221][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189464][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189603][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189709][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189864][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.189975][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.190085][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.190404][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.190511][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.190621][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192093][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192228][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192334][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192469][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192574][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192687][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192797][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.192907][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.193013][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.201436][ T8155] xt_connbytes: Forcing CT accounting to be enabled [ 212.208146][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.225275][ T7160] usb usb7-port1: attempt power cycle [ 212.235064][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235160][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235221][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235282][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235343][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235401][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235458][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235523][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235583][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235640][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235697][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235755][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235813][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235874][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235934][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.235997][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236054][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236132][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236192][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236251][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236311][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236372][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236445][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236508][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236569][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236628][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236688][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236748][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236812][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236869][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236926][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.236986][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237046][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237104][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237309][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237377][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237435][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237498][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237560][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.237620][ T8157] trusted_key: encrypted_key: keylen parameter is missing [ 212.255926][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.286673][ T8160] ubi: bad wear-leveling threshold 431508738 [ 212.340831][ T8160] bridge_slave_0: left allmulticast mode [ 212.340851][ T8160] bridge_slave_0: left promiscuous mode [ 212.343515][ T8160] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.357201][ T8160] bridge_slave_1: left allmulticast mode [ 212.357222][ T8160] bridge_slave_1: left promiscuous mode [ 212.357362][ T8160] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.391054][ T8160] .`: (slave bond_slave_0): Releasing backup interface [ 212.419085][ T8160] .`: (slave bond_slave_1): Releasing backup interface [ 212.435709][ T8160] team0: Port device team_slave_0 removed [ 212.441603][ T8160] team0: Port device team_slave_1 removed [ 212.442419][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.443418][ T8160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.443435][ T8160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.445143][ T8160] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 212.566163][ T7160] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 212.585636][ T7160] usb 7-1: device descriptor read/8, error -71 [ 212.685837][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 212.705262][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 212.705282][ T43] audit: type=1400 audit(1789595233.881:697): avc: denied { write } for pid=8172 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.757138][ T43] audit: type=1400 audit(1789595233.931:698): avc: denied { write } for pid=8175 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 212.795381][ T8171] e1000e 0000:00:02.0: Some CPU C-states have been disabled in order to enable jumbo frames [ 212.836886][ T7160] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 212.855572][ T7160] usb 7-1: device descriptor read/8, error -71 [ 212.887603][ T43] audit: type=1400 audit(1789595234.061:699): avc: denied { execute } for pid=8177 comm="syz.1.548" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=26646 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 212.896995][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 212.966300][ T7160] usb usb7-port1: unable to enumerate USB device [ 212.984118][ T8183] xt_cgroup: path and classid specified [ 213.110287][ T43] audit: type=1400 audit(1789595234.271:700): avc: denied { getopt } for pid=8184 comm="syz.1.550" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 213.175989][ T5895] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 213.287695][ T7160] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 213.299472][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 213.304948][ T8195] input: syz0 as /devices/virtual/input/input10 [ 213.305308][ T8195] input: failed to attach handler leds to device input10, error: -6 [ 214.175728][ T25] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.235245][ T30] e1000 0000:00:06.0 eth0: Reset adapter [ 214.247282][ T8201] mac80211_hwsim hwsim9 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 214.271464][ T43] audit: type=1800 audit(1789595235.441:701): pid=8204 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.555" name="file1" dev="sda1" ino=2042 res=0 errno=0 [ 214.284125][ T43] audit: type=1400 audit(1789595235.461:702): avc: denied { write } for pid=8205 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.327543][ T43] audit: type=1400 audit(1789595235.501:703): avc: denied { read } for pid=8218 comm="syz.0.558" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 214.327717][ T43] audit: type=1400 audit(1789595235.501:704): avc: denied { open } for pid=8218 comm="syz.0.558" path="/dev/mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 214.328430][ T43] audit: type=1400 audit(1789595235.501:705): avc: denied { ioctl } for pid=8218 comm="syz.0.558" path="/dev/mtd0" dev="devtmpfs" ino=714 ioctlcmd=0x125f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 214.332148][ T43] audit: type=1400 audit(1789595235.501:706): avc: denied { write } for pid=8214 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 214.335594][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 214.336582][ T8217] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 214.375064][ T8215] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 214.384045][ T8228] ip6t_frag: unknown flags 6 [ 214.384257][ T8229] ip6t_frag: unknown flags 6 [ 214.425534][ T8227] netlink: 'syz.3.556': attribute type 4 has an invalid length. [ 215.375633][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 215.935401][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.415349][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 216.416146][ T5864] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 217.455199][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.495728][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 218.975214][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.535272][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 219.658688][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 219.658704][ T43] audit: type=1400 audit(1789595240.831:719): avc: denied { write } for pid=8268 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 219.721430][ T43] audit: type=1400 audit(1789595240.901:720): avc: denied { write } for pid=8271 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 220.575361][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 221.615926][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.015827][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 222.665303][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.695551][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.775602][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 223.987443][ T43] audit: type=1400 audit(1789595245.161:721): avc: denied { write } for pid=8274 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.039359][ T43] audit: type=1400 audit(1789595245.211:722): avc: denied { write } for pid=8277 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 224.735310][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.056234][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 225.775469][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 226.120138][ T43] audit: type=1400 audit(1789595247.291:723): avc: denied { write } for pid=8280 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.169734][ T43] audit: type=1400 audit(1789595247.351:724): avc: denied { write } for pid=8283 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 226.815435][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 227.855495][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.095391][ T7160] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.291705][ T8289] FAULT_INJECTION: forcing a failure. [ 228.291705][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.291752][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.0.563 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.291776][ T8289] Tainted: [L]=SOFTLOCKUP [ 228.291783][ T8289] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.291794][ T8289] Call Trace: [ 228.291801][ T8289] [ 228.291807][ T8289] dump_stack_lvl+0x100/0x190 [ 228.291880][ T8289] should_fail_ex.cold+0x5/0xa [ 228.291904][ T8289] _copy_to_user+0x32/0xd0 [ 228.291928][ T8289] dma_heap_ioctl+0x458/0x6d0 [ 228.291950][ T8289] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 228.291977][ T8289] ? selinux_file_ioctl+0x13b/0x290 [ 228.291997][ T8289] ? selinux_file_ioctl+0xb6/0x290 [ 228.292014][ T8289] ? __pfx_dma_heap_ioctl+0x10/0x10 [ 228.292031][ T8289] __x64_sys_ioctl+0x18e/0x210 [ 228.292051][ T8289] do_syscall_64+0x123/0x790 [ 228.292080][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.292098][ T8289] RIP: 0033:0x7f88fab9e159 [ 228.292112][ T8289] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.292128][ T8289] RSP: 002b:00007f88fb9b9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 228.292145][ T8289] RAX: ffffffffffffffda RBX: 00007f88fae25fa0 RCX: 00007f88fab9e159 [ 228.292156][ T8289] RDX: 0000200000000100 RSI: 00000000c0184800 RDI: 0000000000000003 [ 228.292167][ T8289] RBP: 00007f88fac3506b R08: 0000000000000000 R09: 0000000000000000 [ 228.292178][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.292187][ T8289] R13: 00007f88fae26038 R14: 00007f88fae25fa0 R15: 00007fffdf9fe5f8 [ 228.292208][ T8289] [ 228.383227][ T8289] could not allocate digest TFM handle cryptd(blake2b-160) [ 228.436833][ T43] audit: type=1400 audit(1789595249.611:725): avc: denied { execute } for pid=8308 comm="syz.0.568" path="/dev/nullb0" dev="devtmpfs" ino=705 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 228.556435][ T35] usb 8-1: new high-speed USB device number 16 using dummy_hcd [ 228.628260][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.628471][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.628595][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.628729][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.628844][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.628986][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.629100][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.629233][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.629350][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.630048][ T8328] ptrace attach of "/syz-executor exec"[8329] was attempted by "/syz-executor exec"[8328] [ 228.670479][ T8332] FAULT_INJECTION: forcing a failure. [ 228.670479][ T8332] name failslab, interval 1, probability 0, space 0, times 0 [ 228.670517][ T8332] CPU: 1 UID: 0 PID: 8332 Comm: syz.2.573 Tainted: G L syzkaller #0 PREEMPT(full) [ 228.670545][ T8332] Tainted: [L]=SOFTLOCKUP [ 228.670554][ T8332] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 228.670566][ T8332] Call Trace: [ 228.670572][ T8332] [ 228.670582][ T8332] dump_stack_lvl+0x100/0x190 [ 228.670616][ T8332] should_fail_ex.cold+0x5/0xa [ 228.670646][ T8332] should_failslab+0xc2/0x120 [ 228.670672][ T8332] __kmalloc_cache_noprof+0x91/0x6d0 [ 228.670697][ T8332] ? create_filter_start.constprop.0+0x1c4/0x310 [ 228.670728][ T8332] create_filter_start.constprop.0+0x1c4/0x310 [ 228.670757][ T8332] apply_subsystem_event_filter+0x188/0x17a0 [ 228.670782][ T8332] ? __might_fault+0xc5/0x140 [ 228.670813][ T8332] ? __might_fault+0xc5/0x140 [ 228.670853][ T8332] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 228.670887][ T8332] ? _copy_from_user+0x59/0xd0 [ 228.670914][ T8332] subsystem_filter_write+0x95/0x120 [ 228.670937][ T8332] vfs_write+0x2aa/0x1050 [ 228.670960][ T8332] ? __pfx_subsystem_filter_write+0x10/0x10 [ 228.670981][ T8332] ? lock_acquire+0x1d1/0x380 [ 228.671000][ T8332] ? __fget_files+0x34/0x3d0 [ 228.671024][ T8332] ? __pfx_vfs_write+0x10/0x10 [ 228.671042][ T8332] ? find_held_lock+0x2b/0x80 [ 228.671071][ T8332] ? __fget_files+0x215/0x3d0 [ 228.671100][ T8332] ? __fget_files+0x21f/0x3d0 [ 228.671134][ T8332] ksys_write+0x12a/0x250 [ 228.671153][ T8332] ? __pfx_ksys_write+0x10/0x10 [ 228.671183][ T8332] do_syscall_64+0x123/0x790 [ 228.671214][ T8332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.671234][ T8332] RIP: 0033:0x7fc911f9e159 [ 228.671252][ T8332] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 228.671291][ T8332] RSP: 002b:00007fc912d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 228.671310][ T8332] RAX: ffffffffffffffda RBX: 00007fc912225fa0 RCX: 00007fc911f9e159 [ 228.671326][ T8332] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 228.671339][ T8332] RBP: 00007fc91203506b R08: 0000000000000000 R09: 0000000000000000 [ 228.671350][ T8332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.671363][ T8332] R13: 00007fc912226038 R14: 00007fc912225fa0 R15: 00007ffd5c0007e8 [ 228.671392][ T8332] [ 228.699312][ T8332] nvme_tcp: malformed address passed: 1:8009 [ 228.725777][ T35] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 228.726890][ T35] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 228.726928][ T35] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 228.726947][ T35] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 228.728338][ T35] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 228.728351][ T35] usb 8-1: Product: syz [ 228.728359][ T35] usb 8-1: Manufacturer: syz [ 228.730308][ T8294] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 228.732594][ T35] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 228.744430][ T35] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 228.821711][ T43] audit: type=1804 audit(1789595249.991:726): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.574" name="bus" dev="ramfs" ino=25855 res=1 errno=0 [ 228.822439][ T43] audit: type=1804 audit(1789595249.991:727): pid=8338 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=ToMToU comm="syz.0.574" name="bus" dev="ramfs" ino=25855 res=1 errno=0 [ 228.824304][ T43] audit: type=1400 audit(1789595249.991:728): avc: denied { mounton } for pid=8336 comm="syz.0.574" path="/dev" dev="ramfs" ino=25856 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 228.896660][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 228.921395][ T43] audit: type=1400 audit(1789595250.091:729): avc: denied { write } for pid=8340 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 228.926856][ T43] audit: type=1400 audit(1789595250.101:730): avc: denied { listen } for pid=8340 comm="syz.2.576" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 228.943086][ T7160] usb 8-1: USB disconnect, device number 16 [ 228.953797][ T7160] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 228.954331][ T7160] garmin_gps 8-1:1.0: device disconnected [ 228.978497][ T8343] trusted_key: encrypted_key: hex blob is missing [ 229.085013][ T1335] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 229.149128][ T8349] netlink: 52 bytes leftover after parsing attributes in process `syz.2.579'. [ 229.243540][ T43] audit: type=1400 audit(1789595250.411:731): avc: denied { connect } for pid=8353 comm="syz.1.581" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 229.255625][ T1335] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 229.256568][ T1335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 229.256601][ T1335] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 229.256617][ T1335] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 229.258006][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 229.258022][ T1335] usb 5-1: Product: syz [ 229.258032][ T1335] usb 5-1: Manufacturer: syz [ 229.264719][ T8338] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 229.267580][ T1335] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 229.279543][ T1335] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 229.316740][ T43] audit: type=1400 audit(1789595250.501:732): avc: denied { map } for pid=8360 comm="syz.2.582" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 229.705098][ T5864] usb 6-1: new low-speed USB device number 13 using dummy_hcd [ 229.758850][ T35] usb 5-1: USB disconnect, device number 16 [ 229.764565][ T35] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 229.765129][ T35] garmin_gps 5-1:1.0: device disconnected [ 229.848954][ T8380] netlink: 'syz.3.587': attribute type 1 has an invalid length. [ 229.855470][ T5864] usb 6-1: Invalid ep0 maxpacket: 64 [ 229.935616][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 229.987212][ T5864] usb 6-1: new low-speed USB device number 14 using dummy_hcd [ 230.050451][ T8389] FAULT_INJECTION: forcing a failure. [ 230.050451][ T8389] name failslab, interval 1, probability 0, space 0, times 0 [ 230.050475][ T8389] CPU: 3 UID: 0 PID: 8389 Comm: syz.3.590 Tainted: G L syzkaller #0 PREEMPT(full) [ 230.050491][ T8389] Tainted: [L]=SOFTLOCKUP [ 230.050495][ T8389] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 230.050503][ T8389] Call Trace: [ 230.050507][ T8389] [ 230.050513][ T8389] dump_stack_lvl+0x100/0x190 [ 230.050535][ T8389] should_fail_ex.cold+0x5/0xa [ 230.050553][ T8389] should_failslab+0xc2/0x120 [ 230.050570][ T8389] kmem_cache_alloc_lru_noprof+0x8e/0x6a0 [ 230.050585][ T8389] ? lockdep_init_map_type+0x5c/0x250 [ 230.050599][ T8389] ? __d_alloc+0x35/0xa50 [ 230.050618][ T8389] __d_alloc+0x35/0xa50 [ 230.050635][ T8389] d_alloc_pseudo+0x1c/0xc0 [ 230.050647][ T8389] alloc_file_pseudo+0x118/0x290 [ 230.050665][ T8389] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 230.050682][ T8389] ? tipc_sk_finish_conn+0x600/0x7a0 [ 230.050696][ T8389] sock_alloc_file+0x50/0x210 [ 230.050729][ T8389] __sys_socketpair+0x353/0x5b0 [ 230.050742][ T8389] ? __pfx___sys_socketpair+0x10/0x10 [ 230.050756][ T8389] ? xfd_validate_state+0x129/0x190 [ 230.050774][ T8389] __x64_sys_socketpair+0x96/0x100 [ 230.050786][ T8389] ? lockdep_hardirqs_on+0x7d/0x110 [ 230.050804][ T8389] do_syscall_64+0x123/0x790 [ 230.050822][ T8389] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.050834][ T8389] RIP: 0033:0x7f5bdd79e159 [ 230.050844][ T8389] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 230.050855][ T8389] RSP: 002b:00007f5bde61b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 230.050867][ T8389] RAX: ffffffffffffffda RBX: 00007f5bdda25fa0 RCX: 00007f5bdd79e159 [ 230.050875][ T8389] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 230.050881][ T8389] RBP: 00007f5bdd83506b R08: 0000000000000000 R09: 0000000000000000 [ 230.050888][ T8389] R10: 0000200000000010 R11: 0000000000000246 R12: 0000000000000000 [ 230.050895][ T8389] R13: 00007f5bdda26038 R14: 00007f5bdda25fa0 R15: 00007fff17861fb8 [ 230.050909][ T8389] [ 230.135215][ T5864] usb 6-1: Invalid ep0 maxpacket: 64 [ 230.135507][ T5864] usb usb6-port1: attempt power cycle [ 230.158019][ T8391] netlink: 'syz.3.591': attribute type 39 has an invalid length. [ 230.182223][ T8393] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 230.185994][ T8393] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 230.186490][ T8393] netlink: 32 bytes leftover after parsing attributes in process `syz.2.592'. [ 230.369429][ T8402] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 230.374196][ T8400] iommufd_mock iommufd_mock3: Adding to iommu group 12 [ 230.374242][ T8397] netlink: 20 bytes leftover after parsing attributes in process `syz.2.592'. [ 230.374255][ T8397] netlink: 5 bytes leftover after parsing attributes in process `syz.2.592'. [ 230.475438][ T5864] usb 6-1: new low-speed USB device number 15 using dummy_hcd [ 230.506939][ T5864] usb 6-1: Invalid ep0 maxpacket: 64 [ 230.533655][ T8413] netlink: 'syz.0.596': attribute type 10 has an invalid length. [ 230.534318][ T8413] syz_tun: entered promiscuous mode [ 230.546582][ T8413] .`: (slave syz_tun): Enslaving as an active interface with an up link [ 230.554971][ T7160] usb 8-1: new high-speed USB device number 17 using dummy_hcd [ 230.626553][ T8418] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.626732][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 230.635196][ T5864] usb 6-1: new low-speed USB device number 16 using dummy_hcd [ 230.655761][ T5864] usb 6-1: Invalid ep0 maxpacket: 64 [ 230.656000][ T5864] usb usb6-port1: unable to enumerate USB device [ 230.726005][ T7160] usb 8-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 230.726974][ T7160] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 230.727013][ T7160] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 230.727034][ T7160] usb 8-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 230.732367][ T7160] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 230.732386][ T7160] usb 8-1: Product: syz [ 230.732397][ T7160] usb 8-1: Manufacturer: syz [ 230.735367][ T8396] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 230.739311][ T7160] garmin_gps 8-1:1.0: Garmin GPS usb/tty converter detected [ 230.745404][ T7160] usb 8-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 230.873214][ T8427] binder: 8426:8427 ioctl c018620b 0 returned -14 [ 230.905038][ T25] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 230.939646][ T5864] usb 8-1: USB disconnect, device number 17 [ 230.941972][ T5864] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 230.942285][ T5864] garmin_gps 8-1:1.0: device disconnected [ 230.986999][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.057298][ T25] usb 5-1: not running at top speed; connect to a high speed hub [ 231.057327][ T25] usb 5-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 231.058444][ T25] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 231.060212][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 231.060233][ T25] usb 5-1: Product: syz [ 231.060245][ T25] usb 5-1: Manufacturer: syz [ 231.060257][ T25] usb 5-1: SerialNumber: syz [ 231.108473][ T25] keyspan 5-1:1.0: Keyspan 4 port adapter converter detected [ 231.108748][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 81 [ 231.108809][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 88 [ 231.110508][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 1 [ 231.134201][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB0 [ 231.147431][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.149748][ T8437] i2c-slave-eeprom 0-1022: i2c_slave_register: not supported by adapter [ 231.150373][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 2 [ 231.156384][ T8437] i2c-slave-eeprom 0-1022: probe with driver i2c-slave-eeprom failed with error -95 [ 231.158625][ T8437] i2c i2c-0: new_device: Instantiated device slave-24c02 at 0x22 [ 231.186245][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB1 [ 231.188276][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 4 [ 231.191007][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB2 [ 231.192832][ T25] keyspan 5-1:1.0: found no endpoint descriptor for endpoint 6 [ 231.210801][ T25] usb 5-1: Keyspan 4 port adapter converter now attached to ttyUSB3 [ 231.225877][ T8436] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input11 [ 231.274540][ T8438] i2c i2c-0: new_device: Instantiated device tcpci at 0x02 [ 231.459621][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 231.473253][ T5898] usb 5-1: USB disconnect, device number 17 [ 231.476145][ T5898] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 231.479893][ T5898] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 231.484778][ T5898] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 231.485828][ T8443] binder: 8441:8443 ioctl c0306201 200000000080 returned -14 [ 231.499014][ T5898] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 231.499556][ T5898] keyspan 5-1:1.0: device disconnected [ 232.015113][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 232.081487][ T8460] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 232.083292][ T8460] binder: 8459:8460 ioctl c018620c 2000000001c0 returned -1 [ 232.401722][ T8470] tmpfs: Unknown parameter 'hu' [ 232.509950][ T8488] loop5: detected capacity change from 0 to 7 [ 232.515250][ T8488] Dev loop5: unable to read RDB block 7 [ 232.515272][ T8488] loop5: unable to read partition table [ 232.515364][ T8488] loop5: partition table beyond EOD, truncated [ 232.515380][ T8488] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 232.524386][ T8485] bond0: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 232.524404][ T8485] bond0: entered allmulticast mode [ 232.544447][ T8485] bond0: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 232.544541][ T8486] bond0: down delay (8) is not a multiple of miimon (5), value rounded to 5 ms [ 232.636119][ T30] usb 8-1: new low-speed USB device number 18 using dummy_hcd [ 232.784932][ T30] usb 8-1: Invalid ep0 maxpacket: 64 [ 232.815068][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 232.894954][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 232.914953][ T30] usb 8-1: new low-speed USB device number 19 using dummy_hcd [ 232.975664][ T5898] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 232.976841][ T5898] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 232.976880][ T5898] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 232.976899][ T5898] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 232.979943][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 232.979961][ T5898] usb 6-1: Product: syz [ 232.979975][ T5898] usb 6-1: Manufacturer: syz [ 232.986512][ T8475] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 232.988661][ T5898] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 232.992389][ T5898] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 233.044965][ T25] usb 5-1: Using ep0 maxpacket: 16 [ 233.046330][ T25] usb 5-1: New USB device found, idVendor=1b1c, idProduct=0a1a, bcdDevice= 0.40 [ 233.047097][ T25] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x2 has an invalid bInterval 64, changing to 10 [ 233.047112][ T25] usb 5-1: config 1 interface 0 has no altsetting 0 [ 233.048620][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.048633][ T25] usb 5-1: Product: syz [ 233.048640][ T25] usb 5-1: Manufacturer: 仮ᶀ㯄ë¶æˆí”®î†­ä¾¨éºä¼‹èŸ¥è¨ã†µå°°ïµ—撮昬ೋ즬尔敟裧槾乌蘀倊䫈栒褎㉒开Ç쎻쭱똇ࢣ蘚褴ï’俦헰嗥泭봕빭쎸ෙⷯÝç©â–©å¾®î‚Ἓ펩éªá¶¤ï·³á…æ¤à´˜â¦™ç²­íœžì¼‰ä¿°î€¹ç茻ᕋ嘠ㅒ뵺쑡킙삧⎧ీ祺鎘⳩䀸䟷꣟㢾河j潛옃៲ǘ拞紉䲔ꃰ쌅采땬빸㋞鶭애Ⲵ楛㿌樇뒀ᷧ➩覬ꆿ剬ὄ [ 233.048657][ T25] usb 5-1: SerialNumber: syz [ 233.055129][ T5898] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 233.064962][ T30] usb 8-1: Invalid ep0 maxpacket: 64 [ 233.065296][ T30] usb usb8-port1: attempt power cycle [ 233.190914][ T5864] usb 6-1: USB disconnect, device number 17 [ 233.200041][ T5864] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 233.200305][ T5864] garmin_gps 6-1:1.0: device disconnected [ 233.405341][ T30] usb 8-1: new low-speed USB device number 20 using dummy_hcd [ 233.435951][ T30] usb 8-1: Invalid ep0 maxpacket: 64 [ 233.453712][ T8506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 233.454032][ T8506] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 233.455696][ T8506] FAULT_INJECTION: forcing a failure. [ 233.455696][ T8506] name failslab, interval 1, probability 0, space 0, times 0 [ 233.455717][ T8506] CPU: 3 UID: 0 PID: 8506 Comm: syz.0.620 Tainted: G L syzkaller #0 PREEMPT(full) [ 233.455732][ T8506] Tainted: [L]=SOFTLOCKUP [ 233.455736][ T8506] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 233.455742][ T8506] Call Trace: [ 233.455745][ T8506] [ 233.455750][ T8506] dump_stack_lvl+0x100/0x190 [ 233.455769][ T8506] should_fail_ex.cold+0x5/0xa [ 233.455786][ T8506] should_failslab+0xc2/0x120 [ 233.455801][ T8506] __kmalloc_cache_noprof+0x91/0x6d0 [ 233.455818][ T8506] ? resv_map_alloc+0x46/0x400 [ 233.455834][ T8506] resv_map_alloc+0x46/0x400 [ 233.455847][ T8506] hugetlbfs_get_inode+0x385/0x700 [ 233.455860][ T8506] ? do_raw_spin_lock+0x128/0x260 [ 233.455876][ T8506] hugetlb_file_setup+0x15b/0x5b0 [ 233.455891][ T8506] memfd_alloc_file+0xc2/0x610 [ 233.455906][ T8506] ? _raw_spin_unlock+0x28/0x50 [ 233.455920][ T8506] ? __pfx_memfd_alloc_file+0x10/0x10 [ 233.455941][ T8506] __do_sys_memfd_create+0x236/0x3d0 [ 233.455959][ T8506] do_syscall_64+0x123/0x790 [ 233.455974][ T8506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.455986][ T8506] RIP: 0033:0x7f88fab9e159 [ 233.455995][ T8506] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 233.456005][ T8506] RSP: 002b:00007f88fb9b9028 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 233.456017][ T8506] RAX: ffffffffffffffda RBX: 00007f88fae25fa0 RCX: 00007f88fab9e159 [ 233.456025][ T8506] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 233.456033][ T8506] RBP: 00007f88fac3506b R08: 0000000000000000 R09: 0000000000000000 [ 233.456040][ T8506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 233.456047][ T8506] R13: 00007f88fae26038 R14: 00007f88fae25fa0 R15: 00007fffdf9fe5f8 [ 233.456062][ T8506] [ 233.524017][ T25] usbhid 5-1:1.0: can't add hid device: -71 [ 233.524093][ T25] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 233.529155][ T25] usb 5-1: USB disconnect, device number 18 [ 233.575610][ T30] usb 8-1: new low-speed USB device number 21 using dummy_hcd [ 233.597233][ T30] usb 8-1: Invalid ep0 maxpacket: 64 [ 233.597432][ T30] usb usb8-port1: unable to enumerate USB device [ 233.611986][ T43] kauditd_printk_skb: 85 callbacks suppressed [ 233.612033][ T43] audit: type=1400 audit(1789595254.781:818): avc: denied { mount } for pid=8509 comm="syz.2.621" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 233.699234][ T43] audit: type=1400 audit(1789595254.881:819): avc: denied { append } for pid=8515 comm="syz.2.623" name="card1" dev="devtmpfs" ino=637 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 233.779844][ T43] audit: type=1400 audit(1789595254.951:820): avc: denied { create } for pid=8523 comm="syz.2.625" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 233.890977][ T8534] netlink: 'syz.2.628': attribute type 1 has an invalid length. [ 233.905357][ T8535] hpfs: Bad magic ... probably not HPFS [ 233.924001][ T8534] 8021q: adding VLAN 0 to HW filter on device bond4 [ 233.936261][ T8536] bond4: (slave syz_tun): Enslaving as a backup interface with an up link [ 233.952643][ T8540] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7440 sclass=netlink_route_socket pid=8540 comm=syz.1.629 [ 234.034345][ T43] audit: type=1400 audit(1789595255.201:821): avc: denied { accept } for pid=8541 comm="syz.2.630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 234.095363][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.175391][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 234.309945][ T43] audit: type=1400 audit(1789595255.481:822): avc: denied { ioctl } for pid=8560 comm="syz.0.636" path="socket:[28861]" dev="sockfs" ino=28861 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 234.310854][ T8561] RDS: rds_bind could not find a transport for ::ffff:100.1.1.1, load rds_tcp or rds_rdma? [ 234.361239][ T43] audit: type=1400 audit(1789595255.531:823): avc: denied { mount } for pid=8564 comm="syz.1.638" name="/" dev="hugetlbfs" ino=26209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 234.375304][ T43] audit: type=1400 audit(1789595255.551:824): avc: denied { unmount } for pid=5751 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 234.496341][ T8576] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 234.626252][ T8582] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 234.715572][ T8584] netlink: 'syz.1.644': attribute type 10 has an invalid length. [ 234.715894][ T8584] macvlan1: entered promiscuous mode [ 234.715906][ T8584] macvlan1: entered allmulticast mode [ 234.719052][ T8584] veth1_vlan: entered allmulticast mode [ 234.721561][ T8584] bond0: (slave macvlan1): Enslaving as an active interface with an up link [ 234.884497][ T8592] trusted_key: encrypted_key: key description must be 16 hexadecimal characters long [ 235.013569][ T8600] netlink: ct family unspecified [ 235.013584][ T8600] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 235.137447][ T35] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.155171][ T25] usb 8-1: new low-speed USB device number 22 using dummy_hcd [ 235.172311][ T8613] team_slave_1: entered promiscuous mode [ 235.177947][ T8611] team_slave_1: left promiscuous mode [ 235.221713][ T8617] binder: 8616:8617 ioctl c0306201 0 returned -14 [ 235.222353][ T8617] No control pipe specified [ 235.258091][ T8619] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 235.262654][ T8619] device-mapper: ioctl: Invalid ioctl structure: name t, dev f801 [ 235.304957][ T25] usb 8-1: Invalid ep0 maxpacket: 64 [ 235.322836][ T43] audit: type=1400 audit(1789595256.491:825): avc: denied { listen } for pid=8622 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.323112][ T43] audit: type=1400 audit(1789595256.491:826): avc: denied { setopt } for pid=8622 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.325224][ T43] audit: type=1400 audit(1789595256.501:827): avc: denied { accept } for pid=8622 comm="syz.2.656" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 235.436502][ T25] usb 8-1: new low-speed USB device number 23 using dummy_hcd [ 235.641161][ T8644] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 235.690496][ T8649] netlink: 32 bytes leftover after parsing attributes in process `syz.0.664'. [ 236.127159][ T8657] netlink: 32 bytes leftover after parsing attributes in process `syz.0.666'. [ 236.652917][ T8677] x_tables: duplicate underflow at hook 1 [ 236.702581][ T8679] FAULT_INJECTION: forcing a failure. [ 236.702581][ T8679] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 236.702616][ T8679] CPU: 3 UID: 0 PID: 8679 Comm: syz.2.672 Tainted: G L syzkaller #0 PREEMPT(full) [ 236.702643][ T8679] Tainted: [L]=SOFTLOCKUP [ 236.702650][ T8679] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 236.702662][ T8679] Call Trace: [ 236.702669][ T8679] [ 236.702677][ T8679] dump_stack_lvl+0x100/0x190 [ 236.702727][ T8679] should_fail_ex.cold+0x5/0xa [ 236.702751][ T8679] ? prepare_alloc_pages+0x16d/0x5b0 [ 236.702783][ T8679] should_fail_alloc_page+0xeb/0x140 [ 236.702805][ T8679] prepare_alloc_pages+0x1f0/0x5b0 [ 236.702845][ T8679] ? rcu_read_unlock+0x17/0x60 [ 236.702873][ T8679] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 236.702896][ T8679] ? __memcg_kmem_charge_page+0x373/0x4d0 [ 236.702928][ T8679] ? rcu_is_watching+0x13/0xc0 [ 236.702951][ T8679] ? __alloc_frozen_pages_noprof+0x56b/0x3300 [ 236.702986][ T8679] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 236.703018][ T8679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.703041][ T8679] ? vmap_small_pages_range_noflush+0xc20/0xd50 [ 236.703067][ T8679] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 236.703092][ T8679] ? lruvec_stat_mod_folio+0x76/0x2e0 [ 236.703113][ T8679] ? find_held_lock+0x2b/0x80 [ 236.703150][ T8679] alloc_pages_node_noprof+0x93/0x200 [ 236.703168][ T8679] ? __pfx_alloc_pages_node_noprof+0x10/0x10 [ 236.703182][ T8679] ? policy_nodemask+0xed/0x4f0 [ 236.703211][ T8679] alloc_vmcs_cpu+0x2c/0x140 [ 236.703237][ T8679] alloc_loaded_vmcs+0x74/0x2d0 [ 236.703261][ T8679] ? __pfx_alloc_loaded_vmcs+0x10/0x10 [ 236.703288][ T8679] ? kvm_find_user_return_msr+0xb5/0xf0 [ 236.703310][ T8679] vmx_vcpu_create+0x230/0xb90 [ 236.703330][ T8679] ? intel_pmu_init+0x3ac/0x560 [ 236.703356][ T8679] ? __pfx_vmx_vcpu_create+0x10/0x10 [ 236.703380][ T8679] ? rcu_is_watching+0x13/0xc0 [ 236.703403][ T8679] ? _raw_spin_unlock_irq+0x23/0x50 [ 236.703430][ T8679] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.703459][ T8679] kvm_arch_vcpu_create+0x670/0xab0 [ 236.703489][ T8679] kvm_vm_ioctl+0x7e3/0x42d0 [ 236.703522][ T8679] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 236.703558][ T8679] ? kasan_quarantine_put+0x104/0x240 [ 236.703578][ T8679] ? lockdep_hardirqs_on+0x7d/0x110 [ 236.703604][ T8679] ? find_held_lock+0x2b/0x80 [ 236.703630][ T8679] ? tomoyo_path_number_perm+0x28f/0x580 [ 236.703647][ T8679] ? tomoyo_path_number_perm+0x28f/0x580 [ 236.703667][ T8679] ? tomoyo_path_number_perm+0x188/0x580 [ 236.703686][ T8679] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 236.703721][ T8679] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 236.703747][ T8679] ? do_vfs_ioctl+0x226/0x13e0 [ 236.703767][ T8679] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 236.703782][ T8679] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 236.703810][ T8679] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 236.703848][ T8679] ? selinux_file_ioctl+0x13b/0x290 [ 236.703869][ T8679] ? selinux_file_ioctl+0xb6/0x290 [ 236.703891][ T8679] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 236.703914][ T8679] __x64_sys_ioctl+0x18e/0x210 [ 236.703936][ T8679] do_syscall_64+0x123/0x790 [ 236.703963][ T8679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.703982][ T8679] RIP: 0033:0x7fc911f9e159 [ 236.703994][ T8679] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 236.704011][ T8679] RSP: 002b:00007fc912d81028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 236.704029][ T8679] RAX: ffffffffffffffda RBX: 00007fc912225fa0 RCX: 00007fc911f9e159 [ 236.704041][ T8679] RDX: 0000000000000001 RSI: 000000000000ae41 RDI: 0000000000000009 [ 236.704054][ T8679] RBP: 00007fc91203506b R08: 0000000000000000 R09: 0000000000000000 [ 236.704066][ T8679] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 236.704076][ T8679] R13: 00007fc912226038 R14: 00007fc912225fa0 R15: 00007ffd5c0007e8 [ 236.704100][ T8679] [ 236.739204][ T8683] loop7: detected capacity change from 0 to 7 [ 236.744284][ C1] blk_print_req_error: 11 callbacks suppressed [ 236.744303][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.744377][ C1] buffer_io_error: 10 callbacks suppressed [ 236.744388][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.746333][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.746393][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.747041][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.747097][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.747319][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.747369][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.747539][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.747591][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.747753][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.747808][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.747990][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.748043][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.748091][ T8683] ldm_validate_partition_table(): Disk read failed. [ 236.748183][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.748235][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.748345][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.748396][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.748503][ C1] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 236.748554][ C1] Buffer I/O error on dev loop7, logical block 0, async page read [ 236.749260][ T8683] Dev loop7: unable to read RDB block 0 [ 236.750693][ T8683] loop7: unable to read partition table [ 236.750829][ T8683] loop7: partition table beyond EOD, truncated [ 236.750855][ T8683] loop_reread_partitions: partition scan of loop7 (úùƒå¡™jÌ–ãßÔ 8½?ã}X‹%õ«`ÉæÖ€ù…ˆ{í©Ö˜Èµ4FLQýŠ5) failed (rc=-5) [ 236.759180][ T8683] ldm_validate_partition_table(): Disk read failed. [ 236.759687][ T8683] Dev loop7: unable to read RDB block 0 [ 236.760080][ T8683] loop7: unable to read partition table [ 236.760181][ T8683] loop7: partition table beyond EOD, truncated [ 236.789893][ T8688] tipc: Started in network mode [ 236.789905][ T8688] tipc: Node identity 1000001, cluster identity 4369 [ 236.789912][ T8688] tipc: Node number set to 16777217 [ 236.790280][ T8688] tipc: Cannot configure node identity twice [ 236.987089][ T8685] netlink: 'syz.1.675': attribute type 1 has an invalid length. [ 236.987102][ T8685] nbd: error processing sock list [ 236.987278][ T8685] block nbd2: shutting down sockets [ 237.053858][ T8704] lo: entered promiscuous mode [ 237.088842][ T8704] tunl0: entered promiscuous mode [ 237.090351][ T8704] gre0: entered promiscuous mode [ 237.103056][ T8704] gretap0: entered promiscuous mode [ 237.108294][ T8704] erspan0: entered promiscuous mode [ 237.110699][ T8704] ip_vti0: entered promiscuous mode [ 237.112204][ T8704] ip6_vti0: entered promiscuous mode [ 237.125710][ T8704] sit0: entered promiscuous mode [ 237.139726][ T8704] ip6tnl0: entered promiscuous mode [ 237.140738][ T8704] ip6gre0: entered promiscuous mode [ 237.147436][ T8704] syz_tun: entered promiscuous mode [ 237.152763][ T8704] ip6gretap0: entered promiscuous mode [ 237.162878][ T8704] bridge0: entered promiscuous mode [ 237.171493][ T8704] vcan0: entered promiscuous mode [ 237.187901][ T8704] bond0: entered promiscuous mode [ 237.187926][ T8704] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 237.191817][ T8704] dummy0: entered promiscuous mode [ 237.203896][ T8704] nlmon0: entered promiscuous mode [ 237.206310][ T8704] batadv0: entered promiscuous mode [ 237.209727][ T8704] veth0: entered promiscuous mode [ 237.211092][ T8704] veth1: entered promiscuous mode [ 237.215331][ T7161] net_ratelimit: 2 callbacks suppressed [ 237.215344][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.218726][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.221730][ T8704] wg0: entered promiscuous mode [ 237.226603][ T8704] wg1: entered promiscuous mode [ 237.230103][ T8704] wg2: entered promiscuous mode [ 237.231044][ T8704] veth0_to_bridge: entered promiscuous mode [ 237.237150][ T8704] bridge_slave_0: entered promiscuous mode [ 237.238085][ T8704] veth1_to_bridge: entered promiscuous mode [ 237.242432][ T8704] bridge_slave_1: entered promiscuous mode [ 237.247430][ T8704] veth0_to_bond: entered promiscuous mode [ 237.249079][ T8704] bond_slave_0: entered promiscuous mode [ 237.250615][ T8704] veth1_to_bond: entered promiscuous mode [ 237.254756][ T8704] bond_slave_1: entered promiscuous mode [ 237.259735][ T8704] veth0_to_team: entered promiscuous mode [ 237.262436][ T8704] team_slave_0: entered promiscuous mode [ 237.263333][ T8704] veth1_to_team: entered promiscuous mode [ 237.270097][ T8704] team_slave_1: entered promiscuous mode [ 237.270258][ T8704] veth0_to_batadv: entered promiscuous mode [ 237.277239][ T8704] batadv_slave_0: entered promiscuous mode [ 237.278647][ T8704] veth1_to_batadv: entered promiscuous mode [ 237.283841][ T8704] batadv_slave_1: entered promiscuous mode [ 237.285062][ T8704] xfrm0: entered promiscuous mode [ 237.296078][ T8704] veth0_to_hsr: entered promiscuous mode [ 237.297860][ T8704] veth1_to_hsr: entered promiscuous mode [ 237.307823][ T8704] hsr0: entered promiscuous mode [ 237.311629][ T8704] veth1_virt_wifi: entered promiscuous mode [ 237.312589][ T8704] veth0_virt_wifi: entered promiscuous mode [ 237.315806][ T8704] virt_wifi0: entered promiscuous mode [ 237.317943][ T8704] vlan0: entered promiscuous mode [ 237.323155][ T8704] vlan1: entered promiscuous mode [ 237.325773][ T8704] macvlan0: entered promiscuous mode [ 237.331099][ T8704] macvlan1: entered promiscuous mode [ 237.332006][ T8704] ipvlan0: entered promiscuous mode [ 237.332118][ T8704] ipvlan1: entered promiscuous mode [ 237.343750][ T8704] macvtap0: entered promiscuous mode [ 237.345324][ T8704] macsec0: entered promiscuous mode [ 237.351992][ T8704] geneve0: entered promiscuous mode [ 237.353119][ T8704] geneve1: entered promiscuous mode [ 237.359346][ T8704] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 237.370094][ T8704] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 237.378079][ T8704] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 237.378801][ T8704] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 237.378886][ T8704] mac80211_hwsim hwsim4 wlan1: entered promiscuous mode [ 237.378954][ T8704] geneve2: entered promiscuous mode [ 237.380885][ T8704] bridge1: entered promiscuous mode [ 237.380958][ T8704] bridge2: entered promiscuous mode [ 237.382370][ T8704] bond3: entered promiscuous mode [ 237.383342][ T8704] vxlan0: entered promiscuous mode [ 237.386663][ T8704] bond4: entered promiscuous mode [ 237.389175][ T8704] bond5: entered promiscuous mode [ 237.415898][ T12] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.415935][ T12] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.415968][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.415992][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.416022][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.416045][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.416075][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 237.416098][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.416931][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.417215][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 237.528537][ T8722] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 237.712694][ T8732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.689'. [ 237.713158][ T8732] netlink: 'syz.0.689': attribute type 10 has an invalid length. [ 237.713175][ T8732] ipvlan0: entered allmulticast mode [ 237.713184][ T8732] veth0_vlan: entered allmulticast mode [ 237.717446][ T8732] team0: Device ipvlan0 failed to register rx_handler [ 237.753800][ T8735] netlink: 112 bytes leftover after parsing attributes in process `syz.0.690'. [ 237.859042][ T8740] netlink: 24 bytes leftover after parsing attributes in process `syz.0.691'. [ 238.256982][ T1358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 238.747636][ T8760] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 238.747681][ T8760] SELinux: failed to load policy [ 238.752734][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.1.695'. [ 238.890384][ T8764] binder: 8763:8764 ioctl c054561d 2000000001c0 returned -22 [ 238.996573][ T8776] netlink: 52 bytes leftover after parsing attributes in process `syz.1.699'. [ 239.032438][ T8783] sch_tbf: peakrate 3 is lower than or equals to rate 127 ! [ 239.061989][ T8787] netlink: 28 bytes leftover after parsing attributes in process `syz.1.702'. [ 239.235042][ T1358] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 239.295091][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 239.396196][ T1358] usb 5-1: New USB device found, idVendor=0471, idProduct=081e, bcdDevice= 1.00 [ 239.397078][ T1358] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 239.397092][ T1358] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 239.397110][ T1358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.397729][ T8808] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000073 undefined [ 239.403687][ T1358] spcp8x5 5-1:1.0: SPCP8x5 converter detected [ 239.409135][ T1358] usb 5-1: SPCP8x5 converter now attached to ttyUSB0 [ 239.425330][ T8800] kvm: user requested TSC rate below hardware speed [ 239.427257][ T8806] kvm: user requested TSC rate below hardware speed [ 239.616722][ T1335] usb 5-1: USB disconnect, device number 19 [ 239.628323][ T1335] SPCP8x5 ttyUSB0: SPCP8x5 converter now disconnected from ttyUSB0 [ 239.628601][ T1335] spcp8x5 5-1:1.0: device disconnected [ 239.688871][ T43] kauditd_printk_skb: 9 callbacks suppressed [ 239.688889][ T43] audit: type=1400 audit(1789595260.861:837): avc: denied { write } for pid=8814 comm="syz.1.708" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 239.713831][ T8815] netlink: 84 bytes leftover after parsing attributes in process `syz.1.708'. [ 239.986683][ T8820] netlink: 92 bytes leftover after parsing attributes in process `syz.1.709'. [ 240.026735][ T121] IPVS: starting estimator thread 0... [ 240.026823][ T8823] IPVS: ip_vs_add_dest(): server weight less than zero [ 240.027303][ T8823] netlink: 'syz.1.710': attribute type 11 has an invalid length. [ 240.114985][ T8824] IPVS: using max 43 ests per chain, 103200 per kthread [ 240.128945][ T8827] input: syz0 as /devices/virtual/input/input12 [ 240.255254][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.332119][ T43] audit: type=1400 audit(1789595261.501:838): avc: denied { getopt } for pid=8837 comm="syz.0.714" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 240.342884][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 240.389583][ T8842] GUP no longer grows the stack in syz.0.715 (8842): 200000004000-20000000a000 (200000002000) [ 240.389605][ T8842] CPU: 1 UID: 0 PID: 8842 Comm: syz.0.715 Tainted: G L syzkaller #0 PREEMPT(full) [ 240.389641][ T8842] Tainted: [L]=SOFTLOCKUP [ 240.389646][ T8842] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 240.389653][ T8842] Call Trace: [ 240.389657][ T8842] [ 240.389662][ T8842] dump_stack_lvl+0x100/0x190 [ 240.389691][ T8842] gup_vma_lookup.cold+0x83/0x96 [ 240.389708][ T8842] __get_user_pages+0x252/0x2c30 [ 240.389729][ T8842] ? lock_acquire+0x1d1/0x380 [ 240.389741][ T8842] ? mtree_load+0xdc/0xb50 [ 240.389760][ T8842] ? __pfx___get_user_pages+0x10/0x10 [ 240.389774][ T8842] ? mtree_load+0x388/0xb50 [ 240.389789][ T8842] ? mtree_load+0x388/0xb50 [ 240.389808][ T8842] get_user_pages_remote+0x3d2/0xb10 [ 240.389821][ T8842] ? mas_prev_setup.constprop.0+0x980/0x9e0 [ 240.389839][ T8842] ? __pfx_get_user_pages_remote+0x10/0x10 [ 240.389859][ T8842] __access_remote_vm+0x3bb/0x890 [ 240.389876][ T8842] ? __pfx___access_remote_vm+0x10/0x10 [ 240.389890][ T8842] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 240.389907][ T8842] ? proc_pid_cmdline_read+0x31b/0x9a0 [ 240.389921][ T8842] ? proc_pid_cmdline_read+0x4aa/0x9a0 [ 240.389936][ T8842] proc_pid_cmdline_read+0x552/0x9a0 [ 240.389952][ T8842] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 240.389967][ T8842] ? rw_verify_area+0xce/0x6d0 [ 240.389984][ T8842] ? __pfx_proc_pid_cmdline_read+0x10/0x10 [ 240.389997][ T8842] vfs_readv+0x5d8/0x8d0 [ 240.390011][ T8842] ? __pfx_vfs_readv+0x10/0x10 [ 240.390024][ T8842] ? lock_acquire+0x1d1/0x380 [ 240.390035][ T8842] ? __fget_files+0x34/0x3d0 [ 240.390053][ T8842] ? __fget_files+0x21f/0x3d0 [ 240.390069][ T8842] ? do_preadv+0x1ac/0x270 [ 240.390079][ T8842] do_preadv+0x1ac/0x270 [ 240.390089][ T8842] ? __pfx_do_preadv+0x10/0x10 [ 240.390103][ T8842] do_syscall_64+0x123/0x790 [ 240.390119][ T8842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.390131][ T8842] RIP: 0033:0x7f88fab9e159 [ 240.390141][ T8842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 240.390151][ T8842] RSP: 002b:00007f88fb998028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 240.390163][ T8842] RAX: ffffffffffffffda RBX: 00007f88fae26090 RCX: 00007f88fab9e159 [ 240.390170][ T8842] RDX: 0000000000000001 RSI: 0000200000000680 RDI: 0000000000000005 [ 240.390176][ T8842] RBP: 00007f88fac3506b R08: 00000000fffffff9 R09: 0000000000000000 [ 240.390183][ T8842] R10: 0000000000000016 R11: 0000000000000246 R12: 0000000000000000 [ 240.390190][ T8842] R13: 00007f88fae26128 R14: 00007f88fae26090 R15: 00007fffdf9fe5f8 [ 240.390203][ T8842] [ 240.902341][ T8853] netlink: 'syz.2.718': attribute type 1 has an invalid length. [ 241.057977][ T1335] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.378638][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 241.422601][ T43] audit: type=1400 audit(1789595262.591:839): avc: denied { ioctl } for pid=8871 comm="syz.1.724" path="socket:[31782]" dev="sockfs" ino=31782 ioctlcmd=0x8905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 241.444937][ T43] audit: type=1400 audit(1789595262.611:840): avc: denied { bind } for pid=8871 comm="syz.1.724" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 241.529898][ T8875] bonding: rdma is being created... [ 241.601157][ T8872] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.601234][ T8872] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 241.646184][ T43] audit: type=1400 audit(1789595262.821:841): avc: denied { setopt } for pid=8880 comm="syz.1.727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 241.763389][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.763467][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.763535][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.764263][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.764337][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.764414][ T8890] netlink: 'syz.1.730': attribute type 39 has an invalid length. [ 241.811678][ T8895] __nla_validate_parse: 1 callbacks suppressed [ 241.811691][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.811784][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.811857][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.811929][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812000][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812071][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812151][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812290][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812370][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.812441][ T8895] netlink: 12 bytes leftover after parsing attributes in process `syz.1.731'. [ 241.904761][ T8907] comedi comedi1: comedi_config --init_data is deprecated [ 241.951800][ T43] audit: type=1400 audit(1789595263.121:842): avc: denied { mount } for pid=8913 comm="syz.1.735" name="/" dev="autofs" ino=30041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 242.080825][ T8918] gadgetfs: Unknown parameter '/dev/kvm' [ 242.091628][ T1177] Bluetooth: hci4: Frame reassembly failed (-84) [ 242.091676][ T8100] Bluetooth: hci4: Frame reassembly failed (-84) [ 242.144787][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.415197][ T57] net_ratelimit: 1 callbacks suppressed [ 242.415216][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.538649][ T8921] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 242.623337][ T8926] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=63 sclass=netlink_route_socket pid=8926 comm=syz.0.739 [ 243.114970][ T1335] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 243.275441][ T1335] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 243.276304][ T1335] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.276326][ T1335] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 243.276339][ T1335] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 243.277711][ T1335] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 243.277725][ T1335] usb 6-1: Product: syz [ 243.277732][ T1335] usb 6-1: Manufacturer: syz [ 243.284433][ T8941] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 243.286740][ T1335] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 243.295461][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.297697][ T1335] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 243.332002][ T43] audit: type=1400 audit(1789595264.501:843): avc: denied { watch_with_perm } for pid=8949 comm="syz.0.745" path="/212/bus" dev="tmpfs" ino=1198 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 243.455073][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.455231][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 243.706841][ T1335] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 243.865620][ T1335] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 0.40 [ 243.866600][ T1335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 243.866612][ T1335] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 243.868426][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 243.868438][ T1335] usb 5-1: Product: syz [ 243.868445][ T1335] usb 5-1: Manufacturer: syz [ 243.868452][ T1335] usb 5-1: SerialNumber: syz [ 244.077468][ T8957] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.094988][ T5753] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 244.095000][ T5757] Bluetooth: hci4: command 0x1003 tx timeout [ 244.495094][ T57] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.496977][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 244.587328][ T25] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 244.758822][ T8962] overlayfs: cannot append lower layer [ 244.798907][ T8964] FAULT_INJECTION: forcing a failure. [ 244.798907][ T8964] name failslab, interval 1, probability 0, space 0, times 0 [ 244.798929][ T8964] CPU: 2 UID: 0 PID: 8964 Comm: syz.2.748 Tainted: G L syzkaller #0 PREEMPT(full) [ 244.798946][ T8964] Tainted: [L]=SOFTLOCKUP [ 244.798950][ T8964] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 244.798969][ T8964] Call Trace: [ 244.798974][ T8964] [ 244.798980][ T8964] dump_stack_lvl+0x100/0x190 [ 244.799000][ T8964] should_fail_ex.cold+0x5/0xa [ 244.799016][ T8964] should_failslab+0xc2/0x120 [ 244.799031][ T8964] __kmalloc_cache_noprof+0x91/0x6d0 [ 244.799049][ T8964] ? io_wq_create+0x6a/0x9a0 [ 244.799064][ T8964] io_wq_create+0x6a/0x9a0 [ 244.799077][ T8964] io_uring_alloc_task_context+0x2d9/0x656 [ 244.799090][ T8964] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 244.799104][ T8964] ? alloc_file_pseudo+0x1ee/0x290 [ 244.799120][ T8964] __io_uring_add_tctx_node.cold+0x15/0x20a [ 244.799132][ T8964] ? security_inode_init_security_anon+0x7b/0x230 [ 244.799146][ T8964] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 244.799166][ T8964] ? __anon_inode_getfile+0x17c/0x280 [ 244.799179][ T8964] io_uring_setup.cold+0x1a10/0x1cde [ 244.799193][ T8964] ? __pfx_io_uring_setup+0x10/0x10 [ 244.799204][ T8964] ? find_held_lock+0x2b/0x80 [ 244.799230][ T8964] ? xfd_validate_state+0x129/0x190 [ 244.799245][ T8964] __x64_sys_io_uring_setup+0xc2/0x170 [ 244.799258][ T8964] do_syscall_64+0x123/0x790 [ 244.799275][ T8964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.799287][ T8964] RIP: 0033:0x7fc911f9e159 [ 244.799297][ T8964] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 244.799307][ T8964] RSP: 002b:00007fc912d80fb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 244.799319][ T8964] RAX: ffffffffffffffda RBX: 0000200000002dc0 RCX: 00007fc911f9e159 [ 244.799326][ T8964] RDX: 0000000000000000 RSI: 0000200000002dc0 RDI: 00000000000063d0 [ 244.799333][ T8964] RBP: 00007fc91203506b R08: 0000000000000000 R09: 0000000000000000 [ 244.799339][ T8964] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 244.799346][ T8964] R13: 0000000000000000 R14: 0000000000000000 R15: 00007ffd5c0007e8 [ 244.799361][ T8964] [ 244.849983][ T25] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 245.368241][ T25] libceph: mon0 (2)127.0.0.1:6789 socket closed (con state V2_BANNER_PREFIX) [ 245.535185][ T121] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.535305][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 245.856596][ T8941] ceph: No mds server is up or the cluster is laggy [ 245.899452][ T57] usb 6-1: USB disconnect, device number 18 [ 245.904686][ T57] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 245.915735][ T57] garmin_gps 6-1:1.0: device disconnected [ 246.031047][ T43] audit: type=1400 audit(1789595267.201:844): avc: denied { lock } for pid=8978 comm="syz.2.753" path="socket:[29344]" dev="sockfs" ino=29344 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 246.031840][ T43] audit: type=1400 audit(1789595267.201:845): avc: denied { create } for pid=8978 comm="syz.2.753" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.032779][ T43] audit: type=1400 audit(1789595267.201:846): avc: denied { read write } for pid=8978 comm="syz.2.753" name="file0" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.033088][ T43] audit: type=1400 audit(1789595267.201:847): avc: denied { open } for pid=8978 comm="syz.2.753" path="/190/file0" dev="tmpfs" ino=1109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.033548][ T43] audit: type=1400 audit(1789595267.201:848): avc: denied { ioctl } for pid=8978 comm="syz.2.753" path="/190/file0" dev="tmpfs" ino=1109 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 246.078098][ T8986] hub 8-0:1.0: USB hub found [ 246.081782][ T8986] hub 8-0:1.0: 1 port detected [ 246.407581][ T1335] usb 5-1: Unsupported UAC3 BADD profile [ 246.426523][ T1335] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 246.437123][ T1335] usb 5-1: USB disconnect, device number 20 [ 246.445874][ T43] audit: type=1400 audit(1789595267.611:849): avc: denied { ioctl } for pid=8993 comm="syz.0.758" path="socket:[31421]" dev="sockfs" ino=31421 ioctlcmd=0x8915 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 246.456007][ T8298] udevd[8298]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 246.999722][ T9018] __nla_validate_parse: 28 callbacks suppressed [ 246.999724][ T9019] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 246.999735][ T9018] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 247.131945][ T43] audit: type=1400 audit(1789595268.301:850): avc: denied { create } for pid=9024 comm="syz.1.764" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.132471][ T43] audit: type=1400 audit(1789595268.301:851): avc: denied { write } for pid=9024 comm="syz.1.764" name="file0" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.132690][ T43] audit: type=1400 audit(1789595268.301:852): avc: denied { open } for pid=9024 comm="syz.1.764" path="/204/file0" dev="tmpfs" ino=1127 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.135135][ T43] audit: type=1400 audit(1789595268.311:853): avc: denied { ioctl } for pid=9024 comm="syz.1.764" path="/204/file0" dev="tmpfs" ino=1127 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 247.219434][ T9027] validate_nla: 4 callbacks suppressed [ 247.219447][ T9027] netlink: 'syz.2.768': attribute type 12 has an invalid length. [ 247.287059][ T9031] ata1.00: invalid cdb length 12 [ 247.290842][ T9031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.770'. [ 247.291137][ T9031] netlink: 60 bytes leftover after parsing attributes in process `syz.1.770'. [ 247.292451][ T9031] netlink: 524 bytes leftover after parsing attributes in process `syz.1.770'. [ 247.307841][ T9033] netlink: 52 bytes leftover after parsing attributes in process `syz.2.771'. [ 247.548797][ T9044] 9pnet_virtio: no channels available for device 127.0.0.1 [ 247.595332][ T9048] CIFS: Invalid mount helper version specified [ 247.935415][ T5864] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 248.065075][ T30] usb 6-1: new full-speed USB device number 19 using dummy_hcd [ 248.086927][ T5864] usb 5-1: unable to get BOS descriptor or descriptor too short [ 248.086982][ T5864] usb 5-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 248.087867][ T5864] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 248.087885][ T5864] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 248.087918][ T5864] usb 5-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 248.087945][ T5864] usb 5-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 248.087975][ T5864] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 248.087995][ T5864] usb 5-1: config 1 interface 1 has no altsetting 0 [ 248.090735][ T5864] usb 5-1: string descriptor 0 read error: -22 [ 248.090844][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.231714][ T30] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 248.234091][ T30] usb 6-1: unable to read config index 0 descriptor/start: -71 [ 248.234120][ T30] usb 6-1: can't read configurations, error -71 [ 248.900312][ T5864] usb 5-1: 2:0: failed to get current value for ch 1 (-71) [ 248.904263][ T5864] usb 5-1: Warning! Unlikely small volume range (=207), linear volume or custom curve? [ 248.904278][ T5864] usb 5-1: [2] FU [Speaker Playback Volume] ch = 1, val = 0/207/1 [ 248.945769][ T5864] usb 5-1: USB disconnect, device number 21 [ 249.685016][ T7158] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 249.855570][ T7161] net_ratelimit: 4 callbacks suppressed [ 249.855592][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 249.856432][ T7158] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 249.859042][ T7158] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 249.859080][ T7158] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 249.859101][ T7158] usb 5-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 249.860775][ T7158] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 249.860794][ T7158] usb 5-1: Product: syz [ 249.860806][ T7158] usb 5-1: Manufacturer: syz [ 249.868204][ T9092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 249.899192][ T7158] garmin_gps 5-1:1.0: Garmin GPS usb/tty converter detected [ 249.907795][ T7158] usb 5-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 250.075678][ T7158] usb 5-1: USB disconnect, device number 22 [ 250.081460][ T7158] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 250.082430][ T7158] garmin_gps 5-1:1.0: device disconnected [ 250.129250][ T9102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 250.166516][ T9102] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 250.222414][ T9107] netlink: 96 bytes leftover after parsing attributes in process `syz.1.795'. [ 250.560425][ T5757] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.563403][ T5757] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.566427][ T5757] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.572267][ T9123] netlink: 20 bytes leftover after parsing attributes in process `syz.1.801'. [ 250.575293][ T5757] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.575536][ T5757] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.585180][ T8099] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.585327][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 250.596756][ T5753] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 250.603366][ T5753] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 250.609239][ T5753] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 250.612276][ T5753] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 250.613804][ T5753] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 250.939689][ T9121] wlan0 speed is unknown, defaulting to 1000 [ 251.276492][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.276961][ T9121] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.277030][ T9121] bridge_slave_0: entered allmulticast mode [ 251.280300][ T9121] bridge_slave_0: entered promiscuous mode [ 251.288807][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.288852][ T9121] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.288911][ T9121] bridge_slave_1: entered allmulticast mode [ 251.289701][ T9121] bridge_slave_1: entered promiscuous mode [ 251.321791][ T9121] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.324426][ T9121] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.352881][ T9165] netlink: 108 bytes leftover after parsing attributes in process `syz.2.808'. [ 251.357754][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 251.357764][ T43] audit: type=1400 audit(1789595272.531:862): avc: denied { read } for pid=9164 comm="syz.2.808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 251.357894][ T9121] team0: Port device team_slave_0 added [ 251.362541][ T9121] team0: Port device team_slave_1 added [ 251.387183][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.387197][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.387214][ T9121] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.388178][ T9121] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 251.388186][ T9121] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.388199][ T9121] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.426774][ T9121] hsr_slave_0: entered promiscuous mode [ 251.429543][ T9121] hsr_slave_1: entered promiscuous mode [ 251.429913][ T9121] debugfs: 'hsr0' already exists in 'hsr' [ 251.429925][ T9121] Cannot create hsr debugfs directory [ 251.431271][ T43] audit: type=1400 audit(1789595272.601:863): avc: denied { setopt } for pid=9167 comm="syz.2.809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 251.431784][ T9168] program syz.2.809 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 251.431854][ T9168] ata1.00: invalid command format 9 [ 251.596620][ T9175] hfs: can't find a HFS filesystem on dev sr0 [ 251.624010][ T9121] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 251.630348][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 251.631212][ T9121] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 251.635275][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 251.636324][ T9121] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 251.640878][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 251.641730][ T9121] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 251.647241][ T9121] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 251.672816][ T9121] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.672904][ T9121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.673006][ T9121] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.673048][ T9121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.709607][ T9180] Console: switching to colour dummy device 80x25 [ 251.748953][ T9121] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.768395][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.791701][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.832203][ T9121] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.853525][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.853645][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.863571][ T8099] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.863624][ T8099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.925359][ T9207] netlink: 'syz.0.817': attribute type 21 has an invalid length. [ 251.925380][ T9207] netlink: 128 bytes leftover after parsing attributes in process `syz.0.817'. [ 251.925448][ T9207] netlink: 'syz.0.817': attribute type 4 has an invalid length. [ 251.925458][ T9207] netlink: 'syz.0.817': attribute type 5 has an invalid length. [ 251.937001][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.938876][ T8100] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.939025][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 251.963372][ T9211] nbd: must specify at least one socket [ 252.061831][ T43] audit: type=1400 audit(1789595273.231:864): avc: denied { mounton } for pid=9213 comm="syz.0.820" path="/228/file0" dev="afs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=dir permissive=1 [ 252.212507][ T9231] pimreg: entered allmulticast mode [ 252.250944][ T9121] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.291395][ T9239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.291491][ T9239] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 252.499055][ T9121] veth0_vlan: entered promiscuous mode [ 252.502468][ T9121] veth1_vlan: entered promiscuous mode [ 252.526891][ T9121] veth0_macvtap: entered promiscuous mode [ 252.530003][ T9121] veth1_macvtap: entered promiscuous mode [ 252.547052][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.552175][ T9121] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.566707][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.567116][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.567142][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.626186][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.667210][ T5757] Bluetooth: hci4: command tx timeout [ 252.687065][ T1177] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.687079][ T1177] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.718696][ T1177] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.718713][ T1177] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.733754][ T43] audit: type=1400 audit(1789595273.901:865): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/syzkaller.lU4OEk/syz-tmp" dev="sda1" ino=2043 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 252.757764][ T43] audit: type=1400 audit(1789595273.931:866): avc: denied { mounton } for pid=9121 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2834 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 252.761879][ T9262] random: crng reseeded on system resumption [ 252.765059][ T1335] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 252.801872][ T43] audit: type=1400 audit(1789595273.971:867): avc: denied { ioctl } for pid=9261 comm="syz.1.831" path="/dev/snapshot" dev="devtmpfs" ino=98 ioctlcmd=0x3302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 252.925944][ T1335] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 252.928177][ T1335] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 252.928196][ T1335] usb 5-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 252.930229][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.930247][ T1335] usb 5-1: Product: syz [ 252.930258][ T1335] usb 5-1: Manufacturer: syz [ 252.930270][ T1335] usb 5-1: SerialNumber: syz [ 252.974169][ T43] audit: type=1400 audit(1789595274.141:868): avc: denied { connect } for pid=9275 comm="syz.1.834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 253.051648][ T9286] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8464 sclass=netlink_route_socket pid=9286 comm=syz.4.836 [ 253.123835][ T9292] syzkaller0: entered promiscuous mode [ 253.123858][ T9292] syzkaller0: entered allmulticast mode [ 253.136151][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 253.141230][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 253.143158][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 253.143437][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 253.146002][ C2] raw-gadget.0 gadget.0: ignoring, device is not running [ 253.160388][ T1335] usb 5-1: USB disconnect, device number 23 [ 253.217236][ T9292] tipc: Started in network mode [ 253.217273][ T9292] tipc: Node identity 368c9494e965, cluster identity 4711 [ 253.217514][ T9292] tipc: Enabled bearer , priority 0 [ 253.233067][ T9291] tipc: Resetting bearer [ 253.269104][ T9291] tipc: Disabling bearer [ 253.290099][ T43] audit: type=1400 audit(1789595274.461:869): avc: denied { write } for pid=9302 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.367914][ T43] audit: type=1400 audit(1789595274.541:870): avc: denied { write } for pid=9307 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 253.445009][ T5895] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 253.473186][ T43] audit: type=1400 audit(1789595274.641:871): avc: denied { lock } for pid=9311 comm="syz.1.842" path="socket:[33263]" dev="sockfs" ino=33263 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 253.607545][ T5895] usb 7-1: Using ep0 maxpacket: 32 [ 253.615103][ T5895] usb 7-1: unable to get BOS descriptor or descriptor too short [ 253.617289][ T5895] usb 7-1: New USB device found, idVendor=0ccd, idProduct=0102, bcdDevice=89.0e [ 253.622278][ T5895] usb 7-1: string descriptor 0 read error: -22 [ 253.622374][ T5895] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.630879][ T5895] dvb-usb: found a 'Terratec Cinergy S2 USB HD Rev.3' in warm state. [ 253.631002][ T5895] dw2102: su3000_power_ctrl: 1, initialized 0 [ 253.631152][ T5895] dvb-usb: bulk message failed: -22 (2/0) [ 253.634722][ T5895] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 253.635380][ T5895] dvbdev: DVB: registering new adapter (Terratec Cinergy S2 USB HD Rev.3) [ 253.635404][ T5895] usb 7-1: media controller created [ 253.635419][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635426][ T5895] dw2102: i2c transfer failed. [ 253.635433][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635439][ T5895] dw2102: i2c transfer failed. [ 253.635445][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635451][ T5895] dw2102: i2c transfer failed. [ 253.635457][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635463][ T5895] dw2102: i2c transfer failed. [ 253.635469][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635475][ T5895] dw2102: i2c transfer failed. [ 253.635481][ T5895] dvb-usb: bulk message failed: -22 (6/0) [ 253.635488][ T5895] dw2102: i2c transfer failed. [ 253.635492][ T5895] dvb-usb: MAC address: 02:02:02:02:02:02 [ 253.644710][ T5895] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 253.657534][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 253.657546][ T5895] dw2102: command 0x0e transfer failed. [ 253.657549][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 253.657556][ T5895] dw2102: command 0x0e transfer failed. [ 253.725154][ T7158] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 253.736690][ T9319] random: crng reseeded on system resumption [ 253.896612][ T7158] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 253.899442][ T7158] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.899455][ T7158] usb 6-1: Product: syz [ 253.899462][ T7158] usb 6-1: Manufacturer: syz [ 253.899469][ T7158] usb 6-1: SerialNumber: syz [ 253.966607][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 253.966627][ T5895] dw2102: command 0x0e transfer failed. [ 253.966632][ T5895] dvb-usb: bulk message failed: -22 (3/0) [ 253.966638][ T5895] dw2102: command 0x0e transfer failed. [ 253.966642][ T5895] dvb-usb: bulk message failed: -22 (1/0) [ 253.966648][ T5895] dw2102: command 0x51 transfer failed. [ 253.970247][ T9294] dvb-usb: bulk message failed: -22 (3/0) [ 253.970269][ T9294] dw2102: i2c transfer failed. [ 253.979076][ T7161] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 253.994268][ T5895] DVB: Unable to find symbol ds3000_attach() [ 253.994281][ T5895] dvb-usb: no frontend was attached by 'Terratec Cinergy S2 USB HD Rev.3' [ 254.045552][ T5895] rc_core: IR keymap rc-su3000 not found [ 254.045593][ T5895] Registered IR keymap rc-empty [ 254.048037][ T5895] rc rc0: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0 [ 254.056986][ T5895] input: Terratec Cinergy S2 USB HD Rev.3 as /devices/platform/dummy_hcd.2/usb7/7-1/rc/rc0/input13 [ 254.061863][ T5895] dvb-usb: schedule remote query interval to 150 msecs. [ 254.061875][ T5895] dw2102: su3000_power_ctrl: 0, initialized 1 [ 254.061882][ T5895] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully initialized and connected. [ 254.073155][ T5895] usb 7-1: USB disconnect, device number 15 [ 254.167174][ T5895] dvb-usb: Terratec Cinergy S2 USB HD Rev.3 successfully deinitialized and disconnected. [ 254.179675][ T9340] 9pnet_fd: Insufficient options for proto=fd [ 254.267416][ T9347] loop5: detected capacity change from 0 to 2640 [ 254.268439][ T9347] buffer_io_error: 25 callbacks suppressed [ 254.268454][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268554][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268582][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268605][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268630][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268674][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268708][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268732][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268746][ T9347] ldm_validate_partition_table(): Disk read failed. [ 254.268768][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268792][ T9347] Buffer I/O error on dev loop5, logical block 0, async page read [ 254.268830][ T9347] Dev loop5: unable to read RDB block 0 [ 254.269115][ T9347] loop5: unable to read partition table [ 254.269605][ T9347] loop_reread_partitions: partition scan of loop5 (3„ ¾‚³˜) failed (rc=-5) [ 254.270413][ T9347] __nla_validate_parse: 3 callbacks suppressed [ 254.270428][ T9347] netlink: 4860 bytes leftover after parsing attributes in process `syz.4.847'. [ 254.404535][ T9358] netlink: 28 bytes leftover after parsing attributes in process `syz.0.850'. [ 254.404556][ T9358] netlink: 'syz.0.850': attribute type 7 has an invalid length. [ 254.404563][ T9358] netlink: 'syz.0.850': attribute type 8 has an invalid length. [ 254.404569][ T9358] netlink: 4 bytes leftover after parsing attributes in process `syz.0.850'. [ 254.409394][ T9358] ip6gretap0: entered promiscuous mode [ 254.415669][ T9358] ip6gretap0: left promiscuous mode [ 254.684967][ T9373] netlink: 'syz.0.853': attribute type 5 has an invalid length. [ 254.735023][ T5757] Bluetooth: hci4: command tx timeout [ 254.842038][ T9383] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=0 sclass=netlink_xfrm_socket pid=9383 comm=syz.0.857 [ 255.033320][ T9393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.861'. [ 255.065388][ T7161] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 255.067109][ T7161] ath9k_htc: Failed to initialize the device [ 255.130748][ T7161] usb 6-1: ath9k_htc: USB layer deinitialized [ 255.149113][ T9398] FAULT_INJECTION: forcing a failure. [ 255.149113][ T9398] name failslab, interval 1, probability 0, space 0, times 0 [ 255.149141][ T9398] CPU: 2 UID: 0 PID: 9398 Comm: syz.4.860 Tainted: G L syzkaller #0 PREEMPT(full) [ 255.149156][ T9398] Tainted: [L]=SOFTLOCKUP [ 255.149160][ T9398] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 255.149166][ T9398] Call Trace: [ 255.149170][ T9398] [ 255.149175][ T9398] dump_stack_lvl+0x100/0x190 [ 255.149206][ T9398] should_fail_ex.cold+0x5/0xa [ 255.149223][ T9398] should_failslab+0xc2/0x120 [ 255.149242][ T9398] __kmalloc_noprof+0xfc/0x840 [ 255.149254][ T9398] ? __register_sysctl_table+0xac/0x1650 [ 255.149275][ T9398] __register_sysctl_table+0xac/0x1650 [ 255.149292][ T9398] ? trace_kmalloc+0xeb/0x110 [ 255.149306][ T9398] ? __kasan_kmalloc+0xaa/0xb0 [ 255.149319][ T9398] ? __kmalloc_node_track_caller_noprof+0x35b/0x870 [ 255.149332][ T9398] ? __pfx___register_sysctl_table+0x10/0x10 [ 255.149349][ T9398] ? register_pidns_sysctls+0x48/0x1c0 [ 255.149367][ T9398] ? __asan_memcpy+0x3c/0x60 [ 255.149378][ T9398] register_pidns_sysctls+0x11d/0x1c0 [ 255.149393][ T9398] ? __ns_common_init+0x299/0x4b0 [ 255.149408][ T9398] copy_pid_ns+0x680/0x10a0 [ 255.149423][ T9398] ? copy_utsname+0x388/0x690 [ 255.149433][ T9398] ? __pfx_copy_pid_ns+0x10/0x10 [ 255.149446][ T9398] ? find_held_lock+0x2b/0x80 [ 255.149461][ T9398] ? find_held_lock+0x2b/0x80 [ 255.149475][ T9398] ? copy_utsname+0x388/0x690 [ 255.149486][ T9398] ? copy_utsname+0x388/0x690 [ 255.149498][ T9398] ? put_uts_ns+0xc0/0x270 [ 255.149510][ T9398] create_new_namespaces+0x2aa/0xac0 [ 255.149526][ T9398] unshare_nsproxy_namespaces+0xf2/0x220 [ 255.149540][ T9398] ksys_unshare+0x4a2/0xa70 [ 255.149581][ T9398] ? __pfx_ksys_unshare+0x10/0x10 [ 255.149602][ T9398] __x64_sys_unshare+0x31/0x40 [ 255.149616][ T9398] do_syscall_64+0x123/0x790 [ 255.149639][ T9398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.149652][ T9398] RIP: 0033:0x7fa8e699e159 [ 255.149662][ T9398] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 255.149674][ T9398] RSP: 002b:00007fa8e7901028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 255.149686][ T9398] RAX: ffffffffffffffda RBX: 00007fa8e6c26180 RCX: 00007fa8e699e159 [ 255.149694][ T9398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000026000080 [ 255.149702][ T9398] RBP: 00007fa8e6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 255.149708][ T9398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.149715][ T9398] R13: 00007fa8e6c26218 R14: 00007fa8e6c26180 R15: 00007ffcf6d3ac18 [ 255.149729][ T9398] [ 255.775138][ T8102] net_ratelimit: 7 callbacks suppressed [ 255.775155][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.775265][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.881188][ T57] usb 6-1: USB disconnect, device number 21 [ 255.906276][ T9427] wlan0 speed is unknown, defaulting to 1000 [ 255.936243][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 255.977960][ T9427] netlink: 8 bytes leftover after parsing attributes in process `syz.1.867'. [ 255.977974][ T9427] netlink: 12 bytes leftover after parsing attributes in process `syz.1.867'. [ 255.977989][ T9427] netlink: 'syz.1.867': attribute type 19 has an invalid length. [ 256.014702][ T9427] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5124 sclass=netlink_route_socket pid=9427 comm=syz.1.867 [ 256.455434][ T7161] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 256.594956][ T7161] usb 6-1: device descriptor read/64, error -71 [ 256.749857][ T9444] bridge0: port 3(syz_tun) entered blocking state [ 256.749899][ T9444] bridge0: port 3(syz_tun) entered disabled state [ 256.749980][ T9444] syz_tun: entered allmulticast mode [ 256.750768][ T9444] syz_tun: entered promiscuous mode [ 256.751011][ T9444] bridge0: port 3(syz_tun) entered blocking state [ 256.751052][ T9444] bridge0: port 3(syz_tun) entered forwarding state [ 256.811894][ T9449] FAULT_INJECTION: forcing a failure. [ 256.811894][ T9449] name failslab, interval 1, probability 0, space 0, times 0 [ 256.811924][ T9449] CPU: 0 UID: 0 PID: 9449 Comm: syz.4.873 Tainted: G L syzkaller #0 PREEMPT(full) [ 256.811949][ T9449] Tainted: [L]=SOFTLOCKUP [ 256.811957][ T9449] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 256.811968][ T9449] Call Trace: [ 256.811974][ T9449] [ 256.811981][ T9449] dump_stack_lvl+0x100/0x190 [ 256.812012][ T9449] should_fail_ex.cold+0x5/0xa [ 256.812037][ T9449] should_failslab+0xc2/0x120 [ 256.812052][ T9449] __kmalloc_cache_noprof+0x91/0x6d0 [ 256.812069][ T9449] ? alloc_fs_context+0x57/0xf40 [ 256.812088][ T9449] alloc_fs_context+0x57/0xf40 [ 256.812107][ T9449] __x64_sys_fspick+0x253/0x3a0 [ 256.812119][ T9449] ? __pfx___x64_sys_fspick+0x10/0x10 [ 256.812136][ T9449] do_syscall_64+0x123/0x790 [ 256.812152][ T9449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.812171][ T9449] RIP: 0033:0x7fa8e699e159 [ 256.812181][ T9449] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 256.812192][ T9449] RSP: 002b:00007fa8e7943028 EFLAGS: 00000246 ORIG_RAX: 00000000000001b1 [ 256.812204][ T9449] RAX: ffffffffffffffda RBX: 00007fa8e6c25fa0 RCX: 00007fa8e699e159 [ 256.812212][ T9449] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 256.812219][ T9449] RBP: 00007fa8e6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 256.812227][ T9449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.812234][ T9449] R13: 00007fa8e6c26038 R14: 00007fa8e6c25fa0 R15: 00007ffcf6d3ac18 [ 256.812249][ T9449] [ 256.825596][ T5757] Bluetooth: hci4: command tx timeout [ 256.845331][ T7161] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 256.985208][ T7161] usb 6-1: device descriptor read/64, error -71 [ 257.055674][ T1358] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.097272][ T7161] usb usb6-port1: attempt power cycle [ 257.305299][ T1335] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 257.456418][ T1335] usb 9-1: New USB device found, idVendor=0644, idProduct=8047, bcdDevice= 1.00 [ 257.457382][ T1335] usb 9-1: config 1 has an invalid interface number: 3 but max is 0 [ 257.457402][ T1335] usb 9-1: config 1 has no interface number 0 [ 257.459232][ T1335] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 257.459252][ T1335] usb 9-1: Product: syz [ 257.459264][ T1335] usb 9-1: Manufacturer: syz [ 257.459277][ T1335] usb 9-1: SerialNumber: syz [ 257.465358][ T7161] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 257.467152][ T1335] usb 9-1: 3:1 : does not exist [ 257.467170][ T1335] usb 9-1: 3:2 : does not exist [ 257.485490][ T7161] usb 6-1: device descriptor read/8, error -71 [ 257.666736][ T7158] usb 9-1: USB disconnect, device number 2 [ 257.695587][ T8102] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.695704][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 257.735540][ T7161] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 257.766062][ T7161] usb 6-1: device descriptor read/8, error -71 [ 257.875180][ T7161] usb usb6-port1: unable to enumerate USB device [ 258.895347][ T5757] Bluetooth: hci4: command tx timeout [ 258.956547][ T9479] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 258.956573][ T9479] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 259.027444][ T43] kauditd_printk_skb: 19 callbacks suppressed [ 259.027463][ T43] audit: type=1400 audit(1789595280.201:891): avc: denied { bind } for pid=9480 comm="syz.2.883" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 259.090458][ T9484] netlink: 20 bytes leftover after parsing attributes in process `syz.2.884'. [ 259.221405][ T9490] netlink: 20 bytes leftover after parsing attributes in process `syz.2.886'. [ 259.261513][ T9494] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 259.266539][ T43] audit: type=1400 audit(1789595280.431:892): avc: denied { name_connect } for pid=9493 comm="syz.2.888" dest=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 259.353689][ T43] audit: type=1326 audit(1789595280.521:893): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.353750][ T43] audit: type=1326 audit(1789595280.521:894): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.354337][ T43] audit: type=1326 audit(1789595280.521:895): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.354376][ T43] audit: type=1326 audit(1789595280.521:896): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.354411][ T43] audit: type=1326 audit(1789595280.521:897): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=258 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.354585][ T43] audit: type=1326 audit(1789595280.521:898): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.354626][ T43] audit: type=1326 audit(1789595280.521:899): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.355527][ T43] audit: type=1326 audit(1789595280.531:900): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9498 comm="syz.4.890" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa8e699e159 code=0x7ffc0000 [ 259.363690][ T9499] netlink: 48 bytes leftover after parsing attributes in process `syz.4.890'. [ 259.499053][ T9503] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 259.515186][ T9503] kvm: pic: level sensitive irq not supported [ 259.515844][ T9503] kvm: pic: non byte read [ 259.518771][ T9503] netlink: 'syz.4.891': attribute type 1 has an invalid length. [ 259.606591][ T7161] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 259.711162][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.4.892'. [ 259.766098][ T7161] usb 6-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 259.767112][ T7161] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 259.767154][ T7161] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 259.767173][ T7161] usb 6-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 259.769454][ T7161] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 259.769473][ T7161] usb 6-1: Product: syz [ 259.769486][ T7161] usb 6-1: Manufacturer: syz [ 259.773386][ T9492] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 259.775999][ T7161] garmin_gps 6-1:1.0: Garmin GPS usb/tty converter detected [ 259.781165][ T7161] usb 6-1: Garmin GPS usb/tty converter now attached to ttyUSB0 [ 259.813612][ T9510] netlink: Conntrack attr type has unexpected length (type=0, length=8, expected=0) [ 259.813644][ T9510] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 259.816926][ T9510] Trying to write to read-only block-device nullb0 [ 259.977043][ T9492] xt_l2tp: v2 sid > 0xffff: 4294967294 [ 259.978546][ T5864] usb 6-1: USB disconnect, device number 26 [ 259.986089][ T5864] garmin_gps ttyUSB0: Garmin GPS usb/tty converter now disconnected from ttyUSB0 [ 259.986393][ T5864] garmin_gps 6-1:1.0: device disconnected [ 260.099480][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.126720][ T9519] ufs: You didn't specify the type of your ufs filesystem [ 260.126720][ T9519] [ 260.126720][ T9519] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 260.126720][ T9519] [ 260.126720][ T9519] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 260.126862][ T9519] ufs: failed to set blocksize [ 260.608327][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz.1.901'. [ 260.609678][ T9540] netlink: 'syz.1.901': attribute type 2 has an invalid length. [ 260.609693][ T9540] netlink: 40 bytes leftover after parsing attributes in process `syz.1.901'. [ 260.620593][ T9540] : entered promiscuous mode [ 260.667097][ T9542] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 260.895754][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 260.895874][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 262.176181][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.135332][ T7158] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.456062][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.456255][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 263.654644][ T9546] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 263.816803][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 263.821874][ T9569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.908'. [ 263.835911][ T5823] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.835939][ T5823] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.835957][ T5823] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.835974][ T5823] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.840127][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.1.908'. [ 264.033793][ T9584] lo: Caught tx_queue_len zero misconfig [ 264.059163][ T9586] veth1: Caught tx_queue_len zero misconfig [ 264.146371][ T43] kauditd_printk_skb: 148 callbacks suppressed [ 264.146389][ T43] audit: type=1400 audit(1789595285.321:1049): avc: denied { write } for pid=9591 comm="syz.1.914" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 264.197642][ T9595] bond4: entered allmulticast mode [ 264.204992][ T5864] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 264.344945][ T5864] usb 9-1: device descriptor read/64, error -71 [ 264.414961][ T5757] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 264.595055][ T5864] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 264.703208][ T9602] Failed to get privilege flags for destination (handle=0x2:0x0) [ 264.713922][ T9602] netlink: 8 bytes leftover after parsing attributes in process `syz.2.917'. [ 264.735809][ T5864] usb 9-1: device descriptor read/64, error -71 [ 264.846021][ T5864] usb usb9-port1: attempt power cycle [ 264.858820][ T9608] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9608 comm=syz.2.919 [ 264.858846][ T9609] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9609 comm=syz.2.919 [ 264.864689][ T9607] gretap1: entered promiscuous mode [ 264.904509][ T43] audit: type=1400 audit(1789595286.071:1050): avc: denied { bind } for pid=9610 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.905438][ T43] audit: type=1400 audit(1789595286.091:1051): avc: denied { listen } for pid=9610 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 264.907935][ T43] audit: type=1400 audit(1789595286.091:1052): avc: denied { bind } for pid=9610 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 264.956618][ T43] audit: type=1400 audit(1789595286.131:1053): avc: denied { accept } for pid=9610 comm="syz.2.920" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 265.108953][ T9622] jffs2: notice: (9622) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 265.115376][ T43] audit: type=1400 audit(1789595286.281:1054): avc: denied { write } for pid=9621 comm="syz.1.923" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 265.115461][ T43] audit: type=1400 audit(1789595286.281:1055): avc: denied { create } for pid=9621 comm="syz.1.923" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=blk_file permissive=1 [ 265.116688][ T9622] Bluetooth: MGMT ver 1.23 [ 265.195367][ T5864] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 265.220288][ T5864] usb 9-1: device descriptor read/8, error -71 [ 265.234382][ T9627] netlink: 'syz.1.925': attribute type 1 has an invalid length. [ 265.247248][ T9627] 8021q: adding VLAN 0 to HW filter on device bond5 [ 265.260844][ T9627] bond5: (slave geneve3): making interface the new active one [ 265.263733][ T9627] bond5: (slave geneve3): Enslaving as an active interface with an up link [ 265.358379][ T9635] bond6: entered allmulticast mode [ 265.364381][ T9635] macvlan2: entered promiscuous mode [ 265.364403][ T9635] macvlan2: entered allmulticast mode [ 265.365329][ T9635] bond6: entered promiscuous mode [ 265.369723][ T9635] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 265.382436][ T9635] bond6: left promiscuous mode [ 265.413796][ T9637] sd 0:0:0:0: PR command failed: 1026 [ 265.413834][ T9637] sd 0:0:0:0: Sense Key : Illegal Request [current] [ 265.413864][ T9637] sd 0:0:0:0: Add. Sense: Invalid command operation code [ 265.455602][ T5864] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 265.477590][ T5864] usb 9-1: device descriptor read/8, error -71 [ 265.482509][ T9640] FAULT_INJECTION: forcing a failure. [ 265.482509][ T9640] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.482530][ T9640] CPU: 2 UID: 0 PID: 9640 Comm: syz.1.928 Tainted: G L syzkaller #0 PREEMPT(full) [ 265.482545][ T9640] Tainted: [L]=SOFTLOCKUP [ 265.482549][ T9640] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 265.482555][ T9640] Call Trace: [ 265.482559][ T9640] [ 265.482564][ T9640] dump_stack_lvl+0x100/0x190 [ 265.482595][ T9640] should_fail_ex.cold+0x5/0xa [ 265.482611][ T9640] _copy_from_user+0x2e/0xd0 [ 265.482627][ T9640] move_addr_to_kernel+0x65/0x170 [ 265.482649][ T9640] __sys_bind+0x11d/0x260 [ 265.482660][ T9640] ? __pfx___sys_bind+0x10/0x10 [ 265.482689][ T9640] ? __fget_files+0x21f/0x3d0 [ 265.482710][ T9640] ? __pfx_ksys_write+0x10/0x10 [ 265.482724][ T9640] __x64_sys_bind+0x72/0xb0 [ 265.482734][ T9640] ? lockdep_hardirqs_on+0x7d/0x110 [ 265.482753][ T9640] do_syscall_64+0x123/0x790 [ 265.482769][ T9640] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.482781][ T9640] RIP: 0033:0x7fc85739e159 [ 265.482790][ T9640] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 265.482801][ T9640] RSP: 002b:00007fc8582ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 265.482812][ T9640] RAX: ffffffffffffffda RBX: 00007fc857625fa0 RCX: 00007fc85739e159 [ 265.482819][ T9640] RDX: 000000000000000c RSI: 0000200000000340 RDI: 0000000000000003 [ 265.482826][ T9640] RBP: 00007fc8582ac090 R08: 0000000000000000 R09: 0000000000000000 [ 265.482832][ T9640] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.482839][ T9640] R13: 00007fc857626038 R14: 00007fc857625fa0 R15: 00007ffe6ba926c8 [ 265.482852][ T9640] [ 265.585439][ T5864] usb usb9-port1: unable to enumerate USB device [ 265.639952][ T9654] openvswitch: netlink: IP tunnel TTL not specified. [ 265.639968][ T9654] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 266.178572][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.421952][ T9670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.425301][ T9670] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 266.655187][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.655311][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 266.682584][ T9682] FAULT_INJECTION: forcing a failure. [ 266.682584][ T9682] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 266.682607][ T9682] CPU: 1 UID: 0 PID: 9682 Comm: syz.1.937 Tainted: G L syzkaller #0 PREEMPT(full) [ 266.682621][ T9682] Tainted: [L]=SOFTLOCKUP [ 266.682625][ T9682] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 266.682632][ T9682] Call Trace: [ 266.682635][ T9682] [ 266.682640][ T9682] dump_stack_lvl+0x100/0x190 [ 266.682659][ T9682] should_fail_ex.cold+0x5/0xa [ 266.682674][ T9682] ? prepare_alloc_pages+0x16d/0x5b0 [ 266.682689][ T9682] should_fail_alloc_page+0xeb/0x140 [ 266.682705][ T9682] prepare_alloc_pages+0x1f0/0x5b0 [ 266.682721][ T9682] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 266.682741][ T9682] ? stack_trace_save+0x8e/0xc0 [ 266.682774][ T9682] ? __pfx_stack_trace_save+0x10/0x10 [ 266.682788][ T9682] ? stack_depot_save_flags+0x27/0x9f0 [ 266.682807][ T9682] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 266.682817][ T9682] ? kasan_save_track+0x14/0x30 [ 266.682830][ T9682] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 266.682847][ T9682] ? create_new_namespaces+0x48a/0xac0 [ 266.682859][ T9682] ? unshare_nsproxy_namespaces+0xf2/0x220 [ 266.682872][ T9682] ? ksys_unshare+0x4a2/0xa70 [ 266.682885][ T9682] ? __x64_sys_unshare+0x31/0x40 [ 266.682897][ T9682] ? do_syscall_64+0x123/0x790 [ 266.682914][ T9682] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.682936][ T9682] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 266.682950][ T9682] ? policy_nodemask+0xed/0x4f0 [ 266.682966][ T9682] alloc_pages_mpol+0x201/0x550 [ 266.682981][ T9682] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 266.682995][ T9682] ? kasan_save_track+0x14/0x30 [ 266.683007][ T9682] ? __kasan_kmalloc+0xaa/0xb0 [ 266.683019][ T9682] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 266.683037][ T9682] alloc_pages_noprof+0x1a/0x160 [ 266.683054][ T9682] timens_vdso_alloc_vvar_page+0x1d/0x70 [ 266.683068][ T9682] copy_time_ns+0x10b/0x790 [ 266.683081][ T9682] create_new_namespaces+0x48a/0xac0 [ 266.683097][ T9682] unshare_nsproxy_namespaces+0xf2/0x220 [ 266.683115][ T9682] ksys_unshare+0x4a2/0xa70 [ 266.683128][ T9682] ? __pfx_ksys_unshare+0x10/0x10 [ 266.683146][ T9682] __x64_sys_unshare+0x31/0x40 [ 266.683159][ T9682] do_syscall_64+0x123/0x790 [ 266.683175][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.683187][ T9682] RIP: 0033:0x7fc85739e159 [ 266.683197][ T9682] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 266.683209][ T9682] RSP: 002b:00007fc8582ac028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.683222][ T9682] RAX: ffffffffffffffda RBX: 00007fc857625fa0 RCX: 00007fc85739e159 [ 266.683229][ T9682] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000006000080 [ 266.683236][ T9682] RBP: 00007fc85743506b R08: 0000000000000000 R09: 0000000000000000 [ 266.683243][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.683249][ T9682] R13: 00007fc857626038 R14: 00007fc857625fa0 R15: 00007ffe6ba926c8 [ 266.683263][ T9682] [ 266.780371][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.938'. [ 266.799382][ T9688] ip6tnl0: Caught tx_queue_len zero misconfig [ 266.917628][ T9695] netlink: 8 bytes leftover after parsing attributes in process `syz.4.942'. [ 266.934278][ T43] audit: type=1400 audit(1789595288.101:1056): avc: denied { setopt } for pid=9696 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 266.935925][ T43] audit: type=1400 audit(1789595288.111:1057): avc: denied { nlmsg_write } for pid=9696 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 266.935950][ T43] audit: type=1400 audit(1789595288.111:1058): avc: denied { write } for pid=9696 comm="syz.2.943" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 267.022230][ T9706] PKCS7: Unknown OID: [158] 2.16.840.1.101.3.4.2.13 [ 267.022241][ T9706] Unsupported digest algo: 106 [ 267.141704][ T9708] netlink: 'syz.1.946': attribute type 39 has an invalid length. [ 267.210022][ T9407] Bluetooth: hci5: Frame reassembly failed (-84) [ 267.840354][ T9720] PKCS7: Unknown OID: [4] 5.25.43183(bad) [ 267.840365][ T9720] PKCS7: Only support pkcs7_signedData type [ 267.842053][ T9720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 267.842067][ T9720] netlink: 24 bytes leftover after parsing attributes in process `syz.4.948'. [ 268.868016][ T9730] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 268.905261][ T9730] md: array md0 already has disks! [ 268.956102][ T9730] md: could not open device unknown-block(1,1). [ 268.956174][ T9730] md: error, md_import_device() returned -16 [ 268.999799][ T9731] md/raid10:md0: not clean -- starting background reconstruction [ 268.999817][ T9731] md/raid10:md0: active with 1 out of 2 devices [ 269.000653][ T9731] md0: detected capacity change from 0 to 2048 [ 269.011290][ T9734] md: resync of RAID array md0 [ 269.023278][ T9734] md: md0: resync done. [ 269.037095][ T9730] [ 269.038224][ T9730] ====================================================== [ 269.041181][ T9730] WARNING: possible circular locking dependency detected [ 269.043992][ T9730] syzkaller #0 Tainted: G L [ 269.046529][ T9730] ------------------------------------------------------ [ 269.049360][ T9730] syz.4.951/9730 is trying to acquire lock: [ 269.051862][ T9730] ffffffff8f9b9960 (major_names_lock){+.+.}-{4:4}, at: blk_probe_dev+0x28/0x1e0 [ 269.055742][ T9730] [ 269.055742][ T9730] but task is already holding lock: [ 269.058665][ T9730] ffff888013b4e358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 269.062573][ T9730] [ 269.062573][ T9730] which lock already depends on the new lock. [ 269.062573][ T9730] [ 269.066937][ T9730] [ 269.066937][ T9730] the existing dependency chain (in reverse order) is: [ 269.070823][ T9730] [ 269.070823][ T9730] -> #3 (&mddev->reconfig_mutex){+.+.}-{4:4}: [ 269.074208][ T9730] lock_acquire+0x1d1/0x380 [ 269.076335][ T9730] __mutex_lock+0x1a4/0x1bd0 [ 269.078547][ T9730] md_start_sync+0xc4/0xea0 [ 269.080677][ T9730] process_one_work+0xac7/0x1b10 [ 269.083001][ T9730] worker_thread+0x5ef/0xe50 [ 269.085229][ T9730] kthread+0x373/0x450 [ 269.087224][ T9730] ret_from_fork+0x730/0xd60 [ 269.089402][ T9730] ret_from_fork_asm+0x1a/0x30 [ 269.091675][ T9730] [ 269.091675][ T9730] -> #2 ((work_completion)(&mddev->sync_work)){+.+.}-{0:0}: [ 269.095495][ T9730] lock_acquire+0x1d1/0x380 [ 269.097656][ T9730] process_one_work+0xa32/0x1b10 [ 269.099987][ T9730] worker_thread+0x5ef/0xe50 [ 269.102164][ T9730] kthread+0x373/0x450 [ 269.104158][ T9730] ret_from_fork+0x730/0xd60 [ 269.106368][ T9730] ret_from_fork_asm+0x1a/0x30 [ 269.108648][ T9730] [ 269.108648][ T9730] -> #1 ((wq_completion)md_misc){+.+.}-{0:0}: [ 269.112063][ T9730] lock_acquire+0x1d1/0x380 [ 269.114109][ T9730] touch_wq_lockdep_map+0xad/0x1c0 [ 269.116434][ T9730] __flush_workqueue+0x131/0x1200 [ 269.118825][ T9730] md_alloc+0x30/0x10a0 [ 269.120866][ T9730] md_probe+0x73/0xf0 [ 269.122765][ T9730] blk_probe_dev+0x149/0x1e0 [ 269.124921][ T9730] blk_request_module+0x16/0xc0 [ 269.127320][ T9730] blkdev_get_no_open+0x9b/0xf0 [ 269.129563][ T9730] bdev_file_open_by_dev+0x70/0x210 [ 269.131847][ T9730] swsusp_check+0x72/0x470 [ 269.133905][ T9730] software_resume+0x6f/0x330 [ 269.135582][ T9730] resume_store+0x248/0x460 [ 269.137185][ T9730] kobj_attr_store+0x58/0x80 [ 269.138839][ T9730] sysfs_kf_write+0xf2/0x150 [ 269.140458][ T9730] kernfs_fop_write_iter+0x3e0/0x5f0 [ 269.142331][ T9730] vfs_write+0x6af/0x1050 [ 269.143887][ T9730] ksys_write+0x12a/0x250 [ 269.145484][ T9730] do_syscall_64+0x123/0x790 [ 269.147161][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.149188][ T9730] [ 269.149188][ T9730] -> #0 (major_names_lock){+.+.}-{4:4}: [ 269.151725][ T9730] check_prev_add+0xeb/0xe60 [ 269.153404][ T9730] __lock_acquire+0x1528/0x1f40 [ 269.155125][ T9730] lock_acquire+0x1d1/0x380 [ 269.156733][ T9730] __mutex_lock+0x1a4/0x1bd0 [ 269.158368][ T9730] blk_probe_dev+0x28/0x1e0 [ 269.159966][ T9730] blk_request_module+0x16/0xc0 [ 269.161714][ T9730] blkdev_get_no_open+0x9b/0xf0 [ 269.163398][ T9730] bdev_file_open_by_dev+0x70/0x210 [ 269.165240][ T9730] md_import_device+0x120/0x360 [ 269.166960][ T9730] md_ioctl+0x223b/0x36d0 [ 269.168530][ T9730] blkdev_ioctl+0x5ad/0x6f0 [ 269.170142][ T9730] __x64_sys_ioctl+0x18e/0x210 [ 269.171806][ T9730] do_syscall_64+0x123/0x790 [ 269.173371][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.175410][ T9730] [ 269.175410][ T9730] other info that might help us debug this: [ 269.175410][ T9730] [ 269.178579][ T9730] Chain exists of: [ 269.178579][ T9730] major_names_lock --> (work_completion)(&mddev->sync_work) --> &mddev->reconfig_mutex [ 269.178579][ T9730] [ 269.184131][ T9730] Possible unsafe locking scenario: [ 269.184131][ T9730] [ 269.187289][ T9730] CPU0 CPU1 [ 269.189461][ T9730] ---- ---- [ 269.191785][ T9730] lock(&mddev->reconfig_mutex); [ 269.193950][ T9730] lock((work_completion)(&mddev->sync_work)); [ 269.197667][ T9730] lock(&mddev->reconfig_mutex); [ 269.200763][ T9730] lock(major_names_lock); [ 269.202626][ T9730] [ 269.202626][ T9730] *** DEADLOCK *** [ 269.202626][ T9730] [ 269.205879][ T9730] locks held by syz.4.951/9730: 1, last CPU#1: [ 269.208417][ T9730] #0: ffff888013b4e358 (&mddev->reconfig_mutex){+.+.}-{4:4}, at: md_ioctl+0x111d/0x36d0 [ 269.212467][ T9730] [ 269.212467][ T9730] stack backtrace: [ 269.214898][ T9730] CPU: 1 UID: 0 PID: 9730 Comm: syz.4.951 Tainted: G L syzkaller #0 PREEMPT(full) [ 269.215009][ T5753] Bluetooth: hci5: command 0x1003 tx timeout [ 269.215040][ T5757] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 269.215476][ T9407] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.215558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.230396][ T9730] Tainted: [L]=SOFTLOCKUP [ 269.232306][ T9730] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 269.236636][ T9730] Call Trace: [ 269.237876][ T9730] [ 269.239158][ T9730] dump_stack_lvl+0x100/0x190 [ 269.241108][ T9730] print_circular_bug.cold+0x178/0x1be [ 269.243167][ T9730] check_noncircular+0x146/0x160 [ 269.245340][ T9730] ? __pfx_get_page_from_freelist+0x10/0x10 [ 269.247896][ T9730] check_prev_add+0xeb/0xe60 [ 269.249907][ T9730] __lock_acquire+0x1528/0x1f40 [ 269.251899][ T9730] lock_acquire+0x1d1/0x380 [ 269.253768][ T9730] ? blk_probe_dev+0x28/0x1e0 [ 269.255726][ T9730] ? __pfx___might_resched+0x10/0x10 [ 269.257925][ T9730] __mutex_lock+0x1a4/0x1bd0 [ 269.259932][ T9730] ? blk_probe_dev+0x28/0x1e0 [ 269.261907][ T9730] ? blk_probe_dev+0x28/0x1e0 [ 269.264095][ T9730] ? lock_acquire+0x1d1/0x380 [ 269.266317][ T9730] ? find_inode_fast+0xa5/0xa30 [ 269.268589][ T9730] ? find_held_lock+0x2b/0x80 [ 269.270822][ T9730] ? __pfx___mutex_lock+0x10/0x10 [ 269.273160][ T9730] ? find_inode_fast+0x1fa/0xa30 [ 269.275375][ T9730] ? ilookup+0x189/0x210 [ 269.277181][ T9730] ? blk_probe_dev+0x28/0x1e0 [ 269.279160][ T9730] blk_probe_dev+0x28/0x1e0 [ 269.281118][ T9730] blk_request_module+0x16/0xc0 [ 269.283208][ T9730] blkdev_get_no_open+0x9b/0xf0 [ 269.285338][ T9730] bdev_file_open_by_dev+0x70/0x210 [ 269.287519][ T9730] md_import_device+0x120/0x360 [ 269.289621][ T9730] md_ioctl+0x223b/0x36d0 [ 269.291522][ T9730] ? __pfx_md_ioctl+0x10/0x10 [ 269.293462][ T9730] ? do_vfs_ioctl+0x226/0x13e0 [ 269.295416][ T9730] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 269.297568][ T9730] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 269.300263][ T9730] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 269.303260][ T9730] ? __fget_files+0x34/0x3d0 [ 269.305374][ T9730] ? __pfx_md_ioctl+0x10/0x10 [ 269.307520][ T9730] blkdev_ioctl+0x5ad/0x6f0 [ 269.309582][ T9730] ? __pfx_blkdev_ioctl+0x10/0x10 [ 269.311726][ T9730] ? selinux_file_ioctl+0x13b/0x290 [ 269.313919][ T9730] ? selinux_file_ioctl+0xb6/0x290 [ 269.316098][ T9730] ? __pfx_blkdev_ioctl+0x10/0x10 [ 269.318246][ T9730] __x64_sys_ioctl+0x18e/0x210 [ 269.320283][ T9730] do_syscall_64+0x123/0x790 [ 269.322218][ T9730] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.324206][ T9730] RIP: 0033:0x7fa8e699e159 [ 269.325784][ T9730] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 269.333568][ T9730] RSP: 002b:00007fa8e7943028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 269.337072][ T9730] RAX: ffffffffffffffda RBX: 00007fa8e6c25fa0 RCX: 00007fa8e699e159 [ 269.340441][ T9730] RDX: 0000000000000000 RSI: 0000000000000928 RDI: 0000000000000005 [ 269.343698][ T9730] RBP: 00007fa8e6a3506b R08: 0000000000000000 R09: 0000000000000000 [ 269.346982][ T9730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.349954][ T9730] R13: 00007fa8e6c26038 R14: 00007fa8e6c25fa0 R15: 00007ffcf6d3ac18 [ 269.353062][ T9730] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 269.354925][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 269.355658][ T9731] /dev/sg0: Can't lookup blockdev [ 269.384462][ T9730] md: could not open device unknown-block(0,0). [ 269.384489][ T9730] md: error, md_import_device() returned -6 [ 269.478982][ T9730] bridge0: port 3(syz_tun) entered disabled state [ 269.480080][ T9730] syz_tun (unregistering): left allmulticast mode [ 269.480093][ T9730] syz_tun (unregistering): left promiscuous mode [ 269.480117][ T9730] bridge0: port 3(syz_tun) entered disabled state [ 269.525814][ T8701] bond4: (slave syz_tun): Removing an active aggregator [ 269.526045][ T8701] bond4: (slave syz_tun): Releasing backup interface [ 269.531016][ T8765] bridge0: port 1(syz_tun) entered disabled state [ 269.543148][ T8765] syz_tun (unregistering): left allmulticast mode [ 269.543169][ T8765] syz_tun (unregistering): left promiscuous mode [ 269.543234][ T8765] bridge0: port 1(syz_tun) entered disabled state [ 269.692707][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.692738][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.748268][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.748289][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.792011][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.792041][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.847658][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.847688][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.022882][ T12] bond5 (unregistering): (slave geneve3): Releasing active interface [ 270.031740][ T12] bond0 (unregistering): (slave macvlan1): Releasing backup interface [ 270.032028][ T12] veth1_vlan: left allmulticast mode [ 270.032416][ T12] bond0 (unregistering): Released all slaves [ 270.033563][ T12] bond1 (unregistering): Released all slaves [ 270.047204][ T12] bond2 (unregistering): (slave veth3): Releasing backup interface [ 270.047227][ T12] veth3: left promiscuous mode [ 270.048340][ T12] bond2 (unregistering): Released all slaves [ 270.053014][ T12] bond3 (unregistering): (slave dummy0): Releasing active interface [ 270.053925][ T12] bond3 (unregistering): Released all slaves [ 270.057765][ T12] bond4 (unregistering): Released all slaves [ 270.061468][ T12] bond5 (unregistering): Released all slaves [ 270.065153][ T12] bond6 (unregistering): Released all slaves [ 270.129929][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 270.129947][ T43] audit: type=1400 audit(1789595291.301:1060): avc: denied { write } for pid=9737 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.130316][ T12] : left promiscuous mode [ 270.171374][ T12] tipc: Left network mode [ 270.174236][ T43] audit: type=1400 audit(1789595291.341:1061): avc: denied { write } for pid=9740 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.201688][ T5448] 8021q: adding VLAN 0 to HW filter on device eth2 [ 270.246712][ T43] audit: type=1400 audit(1789595291.431:1062): avc: denied { write } for pid=9743 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.269934][ T9408] smbdirect: ib_dev[syz0] removed [ 270.279895][ T43] audit: type=1400 audit(1789595291.461:1063): avc: denied { write } for pid=9746 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.304094][ T5448] 8021q: adding VLAN 0 to HW filter on device eth3 [ 270.328906][ T12] hsr_slave_0: left promiscuous mode [ 270.329360][ T12] hsr_slave_1: left promiscuous mode [ 270.330698][ T12] veth1_macvtap: left promiscuous mode [ 270.330712][ T12] veth0_macvtap: left promiscuous mode [ 270.330736][ T12] veth1_vlan: left promiscuous mode [ 270.330758][ T12] veth0_vlan: left promiscuous mode [ 270.352528][ T43] audit: type=1400 audit(1789595291.531:1064): avc: denied { write } for pid=9749 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.396705][ T43] audit: type=1400 audit(1789595291.571:1065): avc: denied { write } for pid=9752 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.479498][ T5448] 8021q: adding VLAN 0 to HW filter on device eth4 [ 270.529958][ T43] audit: type=1400 audit(1789595291.701:1066): avc: denied { write } for pid=9755 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.576333][ T43] audit: type=1400 audit(1789595291.751:1067): avc: denied { write } for pid=9758 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 270.604380][ T5448] 8021q: adding VLAN 0 to HW filter on device eth5 [ 270.629638][ T12] IPVS: stop unused estimator thread 0... [ 270.699705][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.751699][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.821064][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.871184][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.943234][ T12] bridge_slave_1: left allmulticast mode [ 270.943255][ T12] bridge_slave_1: left promiscuous mode [ 270.943388][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.945109][ T12] bridge_slave_0: left allmulticast mode [ 270.945126][ T12] bridge_slave_0: left promiscuous mode [ 270.945220][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.986800][ T43] audit: type=1400 audit(1789595292.161:1068): avc: denied { write } for pid=9765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.005394][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.006810][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.007388][ T12] bond0 (unregistering): Released all slaves [ 271.022421][ T43] audit: type=1400 audit(1789595292.191:1069): avc: denied { write } for pid=9768 comm="rm" name="hook-state" dev="tmpfs" ino=1838 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 271.057053][ T5448] 8021q: adding VLAN 0 to HW filter on device eth6 [ 271.172832][ T5448] 8021q: adding VLAN 0 to HW filter on device eth7 [ 271.192075][ T12] hsr_slave_0: left promiscuous mode [ 271.192501][ T12] hsr_slave_1: left promiscuous mode [ 271.192921][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.192935][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.193444][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.193457][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.196749][ T12] veth1_macvtap: left promiscuous mode [ 271.196775][ T12] veth0_macvtap: left promiscuous mode [ 271.196827][ T12] veth1_vlan: left promiscuous mode [ 271.196906][ T12] veth0_vlan: left promiscuous mode [ 271.268204][ T12] team0 (unregistering): Port device team_slave_1 removed [ 271.270221][ T12] team0 (unregistering): Port device team_slave_0 removed [ 271.296359][ T5448] 8021q: adding VLAN 0 to HW filter on device eth8 [ 271.426225][ T5448] 8021q: adding VLAN 0 to HW filter on device eth9 [ 272.415180][ T9408] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.415268][ C2] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 272.432119][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.335645][ T8104] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 274.335775][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 275.465196][ T7159] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.185348][ T65] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.185436][ C3] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 278.495444][ T7161] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog