last executing test programs: 11m30.08737129s ago: executing program 0 (id=13): r0 = openat$hpet(0xffffffffffffff9c, 0x0, 0x216402, 0x0) socket$nl_route(0x10, 0x3, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="b80000001300e999000000000000000000000000000000000000000000000000fe8000000000000000000000000000aa0000000000000d9c0a00003000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000007f00000000000000070000f7000000000300000000000000fcfffffffffffffffdffffffffffffff0500000000e8e15a52f52a2377fffffffcffffff000000000000000000000000000000000000000005000000000000000000000000000000010103"], 0xb8}, 0x1, 0x0, 0x0, 0x8c854}, 0x4080) syz_emit_ethernet(0x7a, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fe8000000000000000000000000000bb000000000000005700000000000000012421880b0000000000000057000086dd180088"], 0x0) ioctl$HCIINQUIRY(r1, 0x800448d4, &(0x7f0000000000)={0x1, 0x7, '\x00@\x00', 0x1, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000000040)='hfsplus\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0x3f) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000180)='erofs\x00', 0x8410, 0x0) 11m30.087009336s ago: executing program 0 (id=15): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x94) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x604746) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x5, 0x23b, 0x6, 0x6, 0x36b9, 0xffff}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 11m30.086604907s ago: executing program 0 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r1 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x1ff, 0x1501) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0xfffffffc, 0xe0, &(0x7f00000004c0)={0x0, 0x3, 0x16, 0xffff}, 0x8, 0x1, 0x8, 0x0, 0x0, 0xfffffffe, 0x0}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000100)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000000)=0x86, 0x4) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x400000000010, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) epoll_create1(0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/diskstats\x00', 0x0, 0x0) ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x4000000, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x2, 0x0, @local}, {0x2, 0x4e23, @loopback}, 0x1d7, 0x0, 0x0, 0x0, 0xfff8, 0x0, 0x4, 0x8}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x1c}, 0x1, 0x0, 0x0, 0x24004804}, 0x48885) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7ffffffe) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r4, &(0x7f0000000000), 0xd) 11m29.957562818s ago: executing program 0 (id=18): bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="170000000000000000840000c5000000140100006f6c67ef20308429542969df6967c62c8f6545fa1447cbd880d338ae955b68cc4e1f8813d53dd4412342a7b5067bd762e328f2208937637f024ebd3ea4b2aaaced3fcfd693fc9d14c15fab8eaec126736bbeed44c096afc208b30ec5d74fd946a15da2c4aeecbfe0060055db1fdf73f22d2c1f921078ca77e6ba4c4aa5", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, 0x0, 0x0) r2 = syz_ublk_setup_io_uring(0xd, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x154}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x4, 0xa22, 0x0, 0x0, 0x1000, 0x2, 0x0, 0x0, 0xe0}}}, 0x0) syz_open_dev$ublk_chdev(0x0, r6, 0x1) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x1c, 0x2f, 0x9, 0x70bd2a, 0x0, {0x4}, [@nested={0x6, 0x11, 0x0, 0x1, [@generic="31f9"]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004b884}, 0x84) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x38, r9, 0x5, 0x70bd24, 0x40000, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400000, {0x3, 0x4, 0x2, 0xe5f}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240040d0}, 0x40000) r11 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) poll(&(0x7f0000000100)=[{r8, 0x5448}, {0xffffffffffffffff, 0x3400}, {r11, 0x1}], 0x3, 0xe8e4) r12 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r12, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r12, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000040)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r12, 0xc02064b6, &(0x7f00000001c0)={r13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_HASH_ELASTICITY={0x8, 0x1a, 0x3}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r16 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r16, 0x5, &(0x7f00000005c0)='fd', 0x0, r15) fsconfig$FSCONFIG_CMD_CREATE(r16, 0x6, 0x0, 0x0, 0x0) fsmount(r16, 0x0, 0x2) 11m29.845301364s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./trace/events/dwc3/dwc3_ctrl_req/inject\x00', 0x2, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='hugetlbfs\x00', 0x16, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x3084432, &(0x7f0000000100)={[{@nr_inodes={'nr_inodes', 0x3d, [0x6d]}}]}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x3, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=@newtfilter={0x54, 0x2c, 0xd27, 0x60bd24, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0x4, 0xa}, {}, {0xb}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6, 0xd, 0x5, 0x4}]}}, @TCA_BPF_CLASSID={0x8, 0x3, {0x1, 0xb}}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8858}, 0x20004804) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYRES32=r8], 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r9 = openat$ndctl0(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0000, 0x0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r9, 0xc0406619, &(0x7f0000000240)={@id={0x2, 0x0, @b}}) connect$can_bcm(r8, &(0x7f0000000000), 0x10) 11m29.717543404s ago: executing program 0 (id=22): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x8}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x80000}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e22, 0x3f7, @private0, 0x3}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000400)={r5, 0x8}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r7, &(0x7f0000000440), &(0x7f0000000480)=0xc) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000500), &(0x7f0000000540)='/usr/sbin/cupsd\x00', 0x10, 0x2) r9 = dup3(0xffffffffffffffff, r3, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000580)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8476, 0x200}, 0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000640)={r0, 0x2}, &(0x7f0000000680)=0x8) syz_ublk_setup_io_uring(0x6ef3, &(0x7f00000006c0)={0x0, 0x6f12, 0x8000, 0x0, 0xf7, 0x0, r9}, &(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r11 = mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x8, 0x10010, r8, 0x84fe6f6c) syz_io_uring_complete(r10, r11) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000000800)=0x5) ioctl$VIDIOC_SUBDEV_G_EDID(r9, 0xc0285628, &(0x7f0000000880)={0x0, 0x535d, 0x0, '\x00', &(0x7f0000000840)=0x7f}) mkdirat(r9, &(0x7f00000008c0)='./file0\x00', 0xa0) close(r6) r12 = openat2(r8, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x10800, 0x4, 0x9}, 0x18) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) read$FUSE(r12, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r9, &(0x7f00000029c0)={0x20, 0x0, r13, {0x7e7a, 0x0, 0x0, 0x1}}, 0x20) fcntl$getown(r7, 0x9) 11m14.727119569s ago: executing program 32 (id=22): getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(0xffffffffffffffff, 0x84, 0x7a, &(0x7f0000000000)={0x0, 0xffffffffffffffff}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000080)={0x0, 0x3, 0x101}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000100)={r2, 0x8}, 0x8) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140), &(0x7f0000000180)=0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000001c0)={0x0, 0x6, 0x9}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF_FLAGS(r1, 0x84, 0x7a, &(0x7f0000000240)={r4, 0xffffffffffffffff, 0x80000}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r6, 0x84, 0x12, &(0x7f00000002c0)=0x4, 0x4) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000380)={r4, 0x58, &(0x7f0000000300)=[@in={0x2, 0x4e21, @rand_addr=0x64010102}, @in6={0xa, 0x4e20, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x1b}}, @in6={0xa, 0x4e22, 0x3f7, @private0, 0x3}]}, &(0x7f00000003c0)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r3, 0x84, 0x19, &(0x7f0000000400)={r5, 0x8}, 0x8) r7 = socket$nl_route(0x10, 0x3, 0x0) getpeername$netlink(r7, &(0x7f0000000440), &(0x7f0000000480)=0xc) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000004c0)='cpuacct.usage_percpu\x00', 0x0, 0x0) fsetxattr$security_selinux(r8, &(0x7f0000000500), &(0x7f0000000540)='/usr/sbin/cupsd\x00', 0x10, 0x2) r9 = dup3(0xffffffffffffffff, r3, 0x80000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000580)={r4, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x8476, 0x200}, 0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000640)={r0, 0x2}, &(0x7f0000000680)=0x8) syz_ublk_setup_io_uring(0x6ef3, &(0x7f00000006c0)={0x0, 0x6f12, 0x8000, 0x0, 0xf7, 0x0, r9}, &(0x7f0000000740)=0x0, &(0x7f0000000780), &(0x7f00000007c0)) r11 = mmap$IORING_OFF_PBUF_RING(0x0, 0x9, 0x8, 0x10010, r8, 0x84fe6f6c) syz_io_uring_complete(r10, r11) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$PPPIOCSMRRU(r8, 0x4004743b, &(0x7f0000000800)=0x5) ioctl$VIDIOC_SUBDEV_G_EDID(r9, 0xc0285628, &(0x7f0000000880)={0x0, 0x535d, 0x0, '\x00', &(0x7f0000000840)=0x7f}) mkdirat(r9, &(0x7f00000008c0)='./file0\x00', 0xa0) close(r6) r12 = openat2(r8, &(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0x10800, 0x4, 0x9}, 0x18) io_uring_register$IORING_UNREGISTER_BUFFERS(r8, 0x1, 0x0, 0x0) read$FUSE(r12, &(0x7f0000000980)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_IOCTL(r9, &(0x7f00000029c0)={0x20, 0x0, r13, {0x7e7a, 0x0, 0x0, 0x1}}, 0x20) fcntl$getown(r7, 0x9) 8m49.353690766s ago: executing program 4 (id=772): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xfffffffd, {0x0, 0x0, 0x0, r2, {0x0, 0xffffffffffffffff}, {0xffff, 0xffff}, {0x2, 0xe}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xf3f, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xb, 0xfff2}, {}, {0x7, 0x10}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0xffe0, 0x10}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20041090}, 0x20040000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x28, &(0x7f0000000c00)=ANY=[], &(0x7f0000000700)='syzkaller\x00', 0x0, 0x2b, &(0x7f0000000740)=""/43, 0x41000, 0x12, '\x00', r2, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000780)={0x3, 0xd, 0xd7cb, 0x7d82}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f00000007c0)=[{0x0, 0x5, 0xf, 0x2}, {0x5, 0x3, 0xc, 0x1}, {0x0, 0x5, 0x1000, 0x6}], 0x10, 0x5}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f00000009c0)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000080000002d030100000000009500000c000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f77000000000000bf54000000000000070400000400f9ff2d53010000000000840400000000000073720000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa766401047d150203b0417edef332233b081df18961d60800000000000000c2ea17f04537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5306f995a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bec62bcb2bc91ddcdfac2e6d442105ee6c0742b5e9584543b72f762d21c49fb6641cbf56914e76702f673b586c767562a90a3967093b000"], &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10, 0xbf1}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff00000007058102"], 0x0) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000001080), 0x400, 0x0) ioctl$CDROM_GET_MCN(r4, 0x5311, &(0x7f0000001180)) syz_usb_ep_write(r0, 0x81, 0x0, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0xa00000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) ioctl$EVIOCSKEYCODE_V2(0xffffffffffffffff, 0x80104592, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, "000004011800f5ff0100fffffffdff0000002000"}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x4, 0x40, 0x7fff0000}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r5, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) r6 = eventfd2(0x0, 0x1) read$eventfd(r6, &(0x7f0000000200), 0x8) r7 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r7, &(0x7f0000000540)=""/99, 0x63) r8 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_SET_PTRACER(0x59616d61, r8) prctl$PR_SET_PTRACER(0x59616d61, r8) openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x58f580, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000400)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee40021146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 8m45.178837254s ago: executing program 4 (id=784): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYRES32], 0x14}}, 0x0) r0 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0xb) fchdir(r1) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_WOWLAN(r3, &(0x7f0000006980)={0x0, 0x0, &(0x7f0000006940)={&(0x7f0000000240)=ANY=[@ANYBLOB="28c460c824efe3d6ee47a38d000000", @ANYRES16=r4, @ANYBLOB="010025bd7000fcdbdf254ae4ffff0700b7b0", @ANYRES32=r5, @ANYBLOB="0c009900e30600006d000000"], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000005280)={&(0x7f0000003940)=ANY=[@ANYBLOB="d8170000", @ANYRES16=r2, @ANYBLOB="200026bd7000ffdbdf258900000008000300", @ANYRES32=r0, @ANYBLOB="40001d80180000800c000200000000000000000005000c00010000002400008005000b05002200000005000b000100000060011d804000008004000400060005003700000005000b000100000005000700a10000000c000300020000000000000005000800090000000c00030005000000000000007c00008078000d807400038016000100360b060b241830014803120c0b1830300b1600001400030000100200060008009d0e828206000d0014000500e681c102040080000200ff07ffff02001e000200462322374a20491e284502381c352f3c294a4a35422d0c522e3f000005000600010000000500040000000000100000800c00030004000000000000001400008005000a000000000005000c00020000000800008004000400440000800600050004000000040004000c0002000700000000000000050006000100000005000a000100000005000a000100000005000c0000000000060005005f000000180000800c00030009000000000000000500090001000000180000800c0002000500000000000000050009000000000004081d80240000800c000300070000000000000005000b00000000000c00020002000000000000005c0300800500090001000000050006000000000018010d805c0003801500010016120303600200180b606c0b050b60604800000005000700020000000500060001000000120001001e03040004092b010918023006160000140005000900ff0701000200f90781008e26feff07000200200f480070000380050007000000000014000300070009000007ff010600fdff060004001f00010048031b04600205180b484860010624603048300102300409010b0200050006000200000016000100040b1b360c0204030c1a010606246c000206000005000400020000000500070001000000480000802100010060603006180c01360b303602600498176000160c121b006004060109120000001e00010060063618043048120b00300324600b6c6c010b0901300502481800000500080059000000050007008d00000048010d80a00003802f0002001545061d21521d1b0312295130190c304d0327430f2e420a482837163b4d194e480531434105002f3e33260005000700020000000500060000000000450002004f08060b4f1c411638541848544d4f455415303228114020201907550648462e203d2b482608061257304625121d3b3c2832491e3a3523302b4344542e4f182e2a00000014000300080009000c000000040003000300fe001c0002800500060002000000050006000100000005000600010000000c00028005000600020000007c0001803b0002003c294151304739020622204d3f51363f1a0e004b2b0757563f0c51301929301d163b30512c10072a0c4c5518524909080f20261b04482a0014000300020009007f00f4ff06000600680f74001f0002002621384d27080b0000132c1e4f3130060f205443202c3d2531180000050007000100000005000c000000000006000500fd00000004000400c4000d803400038016000100030236300b360c48300c1b240106960c05050000140005000300020058fe760002003a00010cff03040001000c00038005000400020000000c000280050004000100000074000180140005000500620f0900060009000200000000002000010060031b030b186c013616031b0603110112164801021f487a01042460050007000200000014000500740411fbf4ff3f1a030005000300060005000700000000000500060002000000050006000200000005000700000000000c00008005000b000100000030000080060005008300000005000b00000000000c0003007eb6000000000000060005004c00000006000500f1000000a801008080010d804c0001801400050003000400090005060600ad250700ff0f0500060000000000140003000700800008000002090006000300e3bb05000600020000000f000100010230364804360312182c00480002801400030002000600050001000400fdff752806001f0001001606040004244848026c600904041b160516180102091b01100b020005000700010000000500060000000000280003801b0001001832161218360b303630034860016c1602300b1b180916000500040001000000180003801400030001010100ff03008404000800340d01ff0c00018005000700020000005400038014000500c50c750001000000050009009b9c070011000200013b2c3d0e0d3d151913393111000000140005000700070001000104080009000000ffff140005000300001000080600ce0a09000100da001400028005000700020000000500040001000000340000800500040001000000050004000100000005000400020000000d000100091b1b1b48121b030200000005000400010000000c000300000000000000000005000a000100000005000c000200000005000a00000000003000008005000800dc00000005000a00010000000c0003000000000000000000050009000000000005000b00010000006c02008005000600000000003c020d800c0000800500020037000000340000801400050005002e0406001000090001fc040004001400050008001c0006000300dfff06000500050005000400020000004c0000800500040002000000050007000200000014000300020009000700c10e000002000e00f9ff0500060001000000140003000c000300000010008d96a70040750900050006000000000000010280050004000100000005000600010000004500020044262d2537381f1b380815380401044f15500851432c1c01320043202a073a2d3f180b010c05030312412e5528464b562d064119340f504b3b0e402a34150414430000004d00020048084f1341030e4117134a3c081151204213383d574c3f2a1e4747082356501d10e6214e1446271d1641112e4444290c27304326144836134c002942573825554837381c00563642520000004b000200092e0057313c3000384a5527020c4b0837294a344010071546085055314b4d521c184a251f1c3c3633285322370618194b1443321038023b4f221220510d3541391107333c2f30000500060004000000680100801400030000000010ff00080007000000f9ff090305000700020000000d00010048063648123b001b6000000014000500030001000e00070004000200ff0f0b00140003000a008a040c009100ffff06000600b702050007000200000008000100090c0316440000800500070002000000140005000900ffff000105003009ff0f7f0001001400050006000200010005000400030004000180050004000200000005000600000000000c000200b90000000000000005000a000000000006000500a400000005000700b600000010001d800c0000800600050063000000a8011d801000008005000a000100000004000400100000800c000300120800000000000084010080040004000c000200370900000000000005000c000000000005000c000000000060010d80140000800d000200461f4c501c45391032000000b80001801c0002000f514a1932192b202e372801080154352c293a0d41335752140005000500070010000800040057f30400ff03050004000100000005000400020000000500060001000000050006000100000014000500ff01ff000800c01f0200090013ff3f004f00020057273e084c0c24164e291048202957471430511523035050001430253553063d0c0d224e363d023c3c12011c2d304f2c5730000517394a3e3d1b01351c1d284420091923114e0717204d0900280000801400050000000200e90039344000090000010600050007000200000005000700090000002800008014000300ff7f00040700bc9a0600ff0f05001000100001000b246c5d0002240b06096002400000800500040001000000140005002e00a5002000ff0f03001000020002000500040002000000050004000400000005000400000000000500060000000000600c1d80100000800400040006000500c000000030030080050007004f00000005000b00000000000c030d804000008005000600010000000500060002000000050004000100000006000100303b000005000600010000001400030000049b3bff000400000004000e00cd3f6400018005000600020000000500070000000000050004000300000005000700020000001400030002000800fdff0700070003000200fffb140005000b000000c100010000800104000009000500070002000000050004000100000005000600010000002c0003800500070001000000050004000200000006000200414d00000500040002000000050007000200000030000280050004000000000024000100240b0c031b041d0b050102010c12060c601b0c6930031b166c000206600505429c000180140003000d00ff000200080000000c000100f9e61700020011062a1f244a1f0218002640311d57071f4a98001d00010009126036300b09486c0c301236600c6c0524020924160116120000000500070000000000050004000000000007000200423041001400030003000800ff0f0500040002000b0007001f0001000460041b246c022704485f30006319096c0c040103020b09186004002c000180140005000080000807000600810000087b00050014000500040081000b0001010900fc0a0000fbff900000803a0002003c48110257443b1049142a4e0152000427292d181c350b290b085052254924073002520f515321392019070735372100071327130e20000017000200312c20300728204e4d472e023944141223561f000500040001000000050006000100000014000500f4f509005c000a004c09090004000200140003000800020075a3010006000c0004008000200003800900010016507a601600000005000400000000000500040000000000780000804e00020034162111371138112a05064c0a12511621092b4b3801241834094e162e370b4b0055080144331158150210041b09460c061837064820342b2c11063304312708401834083c1a01182621000014000300c3f88bf23af60900040008000900090005000600000000000500060001000000180002801400050007000500000004009e18060003000500050007000400000005000c0000000000240300800c0002003d00000000000000050009000100000005000c000100000005000c000100000005000c0002000000f4020d800801038051000200130047c701080d18505057014a0b343030081b453f57511d2e304d25202e2a38124b1f09403c3433503448285503041b30034d3726051834191b50533c4647093d3b1b03494dfa3a10100a4f2f000000140005000b002f98020005000e0301003c0a0400090001000c6c4860010000001400030007008eb9ba081a480008fc1f0373001014000300fbff0f00010002000100000003000600470002004835160a45001e122a052f1f420c46515151562a0c214e17551926022f33191613422120512e3d332f13154216062a15392b30011b29394a124939564e260129131500060001001b240000040002001400030003000100000004000700f4060700020090000080140005000600ed0a000003000000010008000038050007000100000014000300ff0f02000600060008009006080088a0090001001604486c600000003c00020026230b2f1715082b485116044a0e131706303e57072c44292115311816030f1c5344342532174230353420110916404d130811062306322e1400050003000200ffffdc5f0600ab00030003000c0002800500070000000000ac000280050004000200000014000500ef490b0002000000c70400010c00ed44040002004d000200104d2b381701262040323a0d292609472033204d1a1a4b374a10485749143c441c552830180447115549190b0c420c04360c23371e24081a10113f283201511b3f42003f403d15174f0000000f000100486001480136010236050600140003000000ec0000003b0005000008ff00090014000500050004000200390310000600020000002c00028014000500090009bb09008100ff7f5601030071ad14000300ff0101000c00050006000100070002002c000180140002002156460c3025482c112904030b4828091400030042510400bf0608000004080004000100280002802400010024010609162424180930240206003736126c3048450524484848050c030509240c00018005000400020000001400028005000400010000000500040001000000280000800500060000000000050006000100000004000400050008009400000005000600000000009c01008084010d80c0000180490002005709461b0149163c4a123900390c0938264e440f2840371b3031170a495252205442140c31433149092e2c1c07013937214019460200150540554b3c08033a05110642554d000000460002003a09193e1f5606500533411a0c0c0f3628080631280d45393619503f182d564e57174e121c50412f4345461d5112101e1e020b09434c42360b47400923414e174d2c000012000100246038000918026001360424091800000b0001000c3604121b60030005000600010000005800018005000700000000002000020014553d2f3019152f092f0046570d2a4938384c15245349183346274205000400000000000d0002003d0449004837020f0f00000014000300030001000600070008000800020003006800018020000100010b061801041209481b12607e246048160b1802040405600160480614000500070f000005000400000001000200f00005000400020000000500060000000000140005000100040000800100a207060002000c000900010060301b06060000000c000300050000000000000005000a0001000000b8020080a4020d80940000800a0001006030601203180000050007000100000005000600020000001e00020057283636414520551f322512172d3b4044212529564d130a0b3f0000050004000100000034000200293d28103101471d013c31361b06572b340c570b380528003d30053240150b57503e06021d04533b2048261823355704050007000100000005000600000000000500040002000000f0000080140003004151010014740100f9ff250001808c50050004000000000014000300040097aa0400fffffcfff6ff00006e03230002004c0d4e2838351e4e35124b5019552c002a2c4f270d3c19061a01342b0f1b4a0014000300470c010009000800e006e1010500490d0500060000000000200001006c183651301804030504050230041604040112036c246c6c16360b601400030000800100030009000300010000010d0005000700010000003e000200151c3601331d024d522d120c32343b004e2217554b501d41281b303c3b4323413c2806314a4e1448323106342c5754521f434d431221080521560000a8000380120001006c0130023008483005020616041b000005000100010000000500070000000000140005000500040004000500f6fff8ff05000500070001000c0230002b0002001c34332c4e4c21432749161157480d093a4b50182f5101350e01364e2145194a221f532f34385000050007000200000014000300080020bc02000800900008000900000014000300070005000500beee0c00060009000008050007000100000074000380050004000100000005000400000000000500070000000000050006000100000005000400030000001500020031381d40423729501134034845362c204000000013000100126c6c1e026c180c2405300648050c0014000300080000020b0010000800070009000000050004000000000005000800a200000005000c0002000000540100800400040005000b000000000040010d80240002800500070002000000160002004c2d4936573a0e10250615504d31512b3c35000034000280140005000700f9ff010010d50f000000ffff010014000500008003000b0000000100eb3a0900f9ff050007000200000004000080e000008014000300ff0fc4000a000200008003000004110b0500060001000000140005000900000404008000eb18520a0400060039000200101f03090f2d2f1b5023273657491d40170f0b440a04342a4946402613101140294112363c0301412323370509121b0a1e40011d2b000000490002002505132a072a5205114a34054a4e1126481750075154230d240d460c534748304a2920383b032f482a3a4f3f1551321446041529452425183323014130110b264f51052d15000000140005000300f81f1000100004002c0d0d00050010000200413e3a42001d414328113d3f04000400280000800c000200010000000000000005000c0001000000050006000800000005000a0000000000"], 0x17d8}, 0x1, 0x0, 0x0, 0x200000c1}, 0x20004) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r7, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYRESOCT=r1], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x40007) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="280000001000030428bd7000ffdbdf2500000000", @ANYRES32=r8, @ANYBLOB, @ANYRES32=r8, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x24000804}, 0x4008080) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r10, &(0x7f0000000000)='3', 0x4e) syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r1, &(0x7f0000000c00)='./nfsd\x00', 0x2, 0x80) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000580)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="34b10000", @ANYRES16=0x0, @ANYBLOB="00032abd7000fcdbdf25010000001800018014000400fe8000000000000000000000000000bb05000500ad000000"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x0) r11 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r11, 0x40045431, &(0x7f0000000100)) syz_open_pts(r11, 0x8000) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl(r12, 0x8914, &(0x7f0000000400)="736c300000000000000000000000000001") 8m43.149957971s ago: executing program 4 (id=788): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1}}], 0x1, 0x0) 8m42.648195801s ago: executing program 4 (id=790): socket$inet6_mptcp(0xa, 0x1, 0x106) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000140)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=@newqdisc={0xb0, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x80, 0x2, {{0x8, [0xd, 0x4, 0x80, 0xb, 0xe, 0xd, 0x3, 0xe, 0x6, 0xb, 0x9, 0x7, 0x2, 0x0, 0x5, 0x1], 0x1, [0x3, 0x4, 0x81, 0x1, 0x8, 0xfff, 0xfff, 0x7, 0xfffe, 0xb46, 0x800, 0x400, 0x4e, 0x86c, 0xa1ac, 0x3], [0x7, 0x7, 0x5, 0x1ad, 0x9, 0x5, 0x5, 0x7, 0x60df, 0x5, 0x65, 0x498, 0x6, 0xff, 0x3, 0x8001]}, [@TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}, @TCA_MQPRIO_SHAPER={0x6, 0x2, 0x1}, @TCA_MQPRIO_MODE={0x6, 0x1, 0x1}]}}}]}, 0xb0}}, 0x0) chdir(&(0x7f0000000100)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') link(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000000)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/mtdblock0\x00', 0x42, 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r3, r4, 0x0, 0x110000) symlinkat(&(0x7f0000000080)='.\x00', 0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00') r5 = socket(0x40000000015, 0x5, 0x0) sendto$inet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) bind$inet6(r5, &(0x7f0000000080)={0xa, 0x4e22, 0x20026ee, @local, 0xb}, 0x1c) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./proc\x00', &(0x7f0000000080)='proc\x00', 0x800000, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc/sys/net/ipv4/conf/all/proxy_arp\x00', 0x10c03, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) write$UHID_INPUT(r6, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd60f900f500140601fe8000000000000000000000000000bbfe8000000000000000000000000042548684e7d0daab343b68e6dfdb5900aa00004e2250b7326294e663cd3134548f9573256a1393c7a9512112539f59bdb2da7d538a0c3e68b6f47389910f156fd4fa439d26d0469308cefa2b043d91395fb64b110648aa07ed7842a6affe193c02a823d68cd963e58ae6da16ea0d44c3f419cbbb7033031267", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$bt_BT_DEFER_SETUP(0xffffffffffffffff, 0x112, 0xf, 0x0, 0x0) 8m40.592354s ago: executing program 4 (id=793): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x42) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_setup(0x1f35, 0x0, 0x0, 0x0, 0x0) quotactl$Q_QUOTAOFF(0xffffffff80000301, &(0x7f0000000040)=@loop={'/dev/loop', 0x0}, 0xee00, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) unlinkat(0xffffffffffffffff, &(0x7f0000000040)='.\x00', 0x0) 8m39.232582025s ago: executing program 4 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfff, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, r4}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x20004844) 8m35.79952315s ago: executing program 33 (id=797): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00', 0xfffffffe}) ioctl(r0, 0x8b22, &(0x7f0000000040)) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{0x1, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x48, 0x4, 0x0, 0x1, [{0x44, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_EXTHDR_OFFSET={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x9}, @NFTA_EXTHDR_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xe4}}, 0x0) futex(&(0x7f0000004000), 0x5, 0x0, 0x0, &(0x7f0000004000), 0x82020000) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0xfff, '\x00', 0x0, r3, 0x3, 0x2, 0x2}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791090000000000007000000002000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x62, '\x00', 0x0, @flow_dissector}, 0x94) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x4) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@RTM_GETMDB={0x18, 0x56, 0x100, 0x70bd2a, 0x25dfdbfd, {0x7, r4}, ["", "", "", "", "", "", "", "", ""]}, 0x18}, 0x1, 0x0, 0x0, 0x94}, 0x20004844) 7m44.731638605s ago: executing program 3 (id=889): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0xffe0, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x6000000, @loopback}, 0x1c) 7m43.217776949s ago: executing program 3 (id=895): r0 = syz_open_dev$mtd(&(0x7f0000000000), 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000040010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x20) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB="30000000020901010000000000000a00000409"], 0x30}, 0x1, 0x0, 0x0, 0x44800}, 0x4004054) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ustat(0x90000000000, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f0000000280)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r1, 0xc0182101, &(0x7f00000000c0)={r2}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000004c0)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r1, 0x40182103, &(0x7f0000000080)={r3, 0x3, r1, 0x5}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$IEEE802154_LLSEC_LIST_DEV(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000800}, 0x4) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d000000000000000000000010040000000000000000000009030000000000000061"], 0x0, 0x52}, 0x28) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r7, @ANYBLOB="01000000030000000000000000"], 0x5f) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000040)=@HCI_ACLDATA_PKT={0x2, {0xc9, 0x0, 0x0, 0xe}, @l2cap_cid_le_signaling={{0xa}, @l2cap_ecred_reconf_req={{0x19, 0x3, 0x6}, {0xffbd, 0xff46, [0x5]}}}}, 0x13) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4000002, 0x805, 0xf2, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0x1, 0x8654, 0xfffffffffffffff8, 0x9, 0xc], 0x1ffc, 0x304}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_TUPLE_ORIG={0x4}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}}, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$MEMWRITE(r0, 0xc0304d18, &(0x7f0000000340)={0x1, 0xb0, 0xad, &(0x7f0000000100)="6ec81a5405ccc631d8cd52318553996e6edb20b93cbfa0ff5b7f4908e71b9c3dd440a44317a67472c9fecdfbec772679d782bd1627cf1bcd3adca5f52ee4a4e0d505a6853047cb060a46cbcd8406228124142ed15ba2977bbeca87a15f5ae03d98cdb1e5460e545a71f779f4986f0fc0ad4cad80feafe1ebd8969fdcc0342bf76851ef361c47d50b0ca9e3d8fa69d436bc66ea7f18d30b45538ff8bc853a068552234ff667c5e26180ed83213ea24639", &(0x7f0000000280)="97d0386f5aedafddad40437c923bbd028255c9dad209b6ebc676c524b82ae77449d9236bf208a5d145a0930ae2ac5a99ee3ddebe927a41d270fad513bb59c393c40e303b57bc98a64658e0314f29043cacb9210f0d2d1afe3567171fad94417ef9758945c1a8a26cbe634df18f48d5178ddddc0fabfc2d3049d7dd2b3816b3885be935894cca1bd6f44f7fabe59f39b99a95843fd726157e7a85288dddd2f3bd3ff775bdf89db284a8c094b136", 0x1}) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380000000314230c2abd7000ffdbdf250900020073797a36000000000800410073e977001400330073797a5f74756e"], 0x38}, 0x1, 0x0, 0x0, 0x14f7325d9d03b00}, 0x4000) 7m41.066337263s ago: executing program 3 (id=901): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x6}, @NHA_FDB={0x4}]}, 0x24}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f657874656e642c6163638173733d616e792c63616368653d667363616368652c76657273696f6e3d3970323030302e75"]) chdir(&(0x7f0000000340)='./file0\x00') unlink(&(0x7f00000002c0)='./file0\x00') chmod(&(0x7f0000000000)='./file1\x00', 0x20) 7m40.390047265s ago: executing program 3 (id=902): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x10080, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x881, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xee4e, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x4, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x5, &(0x7f0000000200)=@raw=[@generic={0xbf, 0x6, 0x1}, @generic={0xb7}, @generic={0x7b, 0xa, 0x0, 0xfff0}, @generic={0x7b, 0xa, 0x0, 0xfffc, 0x80000}, @generic={0x6a, 0xa, 0x0, 0xfffa, 0xf27}], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0xc0040000) 7m38.55618887s ago: executing program 3 (id=908): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$TIOCGPTPEER(r2, 0x5441, 0x2) read$char_usb(r1, &(0x7f0000000300)=""/227, 0xe3) syz_usb_disconnect(0xffffffffffffffff) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x7, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xb, 0xa2b9, 0x6, 0x7, 0xe1, 0x200, 0xfc000004, 0x7, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x6, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x0, 0x8a, 0x79, 0x2, 0x3, 0xfffffffe, 0x83f4, 0x129, 0x1, 0x16, 0x8, 0x2, 0x401, 0x1, 0x405, 0x0, 0x881, 0x9, 0xf9a6, 0xa9, 0xff, 0x0, 0x2, 0x6, 0x2, 0x2000007, 0x489, 0x7ff, 0x4, 0x4007b, 0xffffffff, 0x1, 0x2], [0x9, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x8, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x7, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffff7fff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x7, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x3ff], [0x2, 0x4, 0x9, 0xc, 0x0, 0x2e6bf783, 0x80000001, 0x5, 0x40000005, 0x48e, 0x9, 0x200026, 0x7f, 0x403, 0x102, 0x1, 0x41, 0x6, 0xc30, 0x2000104, 0x1, 0x9, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x100006, 0x2, 0x400, 0x8, 0x5, 0xd2, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x1000007f, 0x9d27, 0x9, 0x1, 0x100, 0x1000008, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x9, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x0, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfe, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x6, 0x1005, 0x10000001, 0x7, 0x21, 0x3, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x2, 0x140f1, 0x5396, 0x4, 0x4, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x80000000, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x2, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x1, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a840000000c0a010100002100000000000a0000060900020073797a31"], 0xac}, 0x1, 0x0, 0x0, 0x4000851}, 0x40) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x2000000035, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x5, 0xef, 0xd, 0x7fffffffffffe, 0xcd3, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(r0) fsetxattr$security_capability(r1, &(0x7f0000000140), &(0x7f0000000280)=@v1={0x1000000, [{0x2, 0x3}]}, 0xc, 0x2) 7m35.071356927s ago: executing program 3 (id=917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x8203, 0xbfff18b6, 0x6, 0x334, 0x80000001, 0xdb}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f00000005c0)={'wlan1\x00', @random="020000000100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='offline', 0x7) ioctl(r2, 0xc0104d08, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x24000090) 7m18.732986965s ago: executing program 34 (id=917): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000680), r0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) r4 = dup(r3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @empty, 0x3}], 0x1c) sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000000)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000140)=[{&(0x7f0000000840)='{', 0x1}], 0x1}, 0x20048843) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x3, 0x8203, 0xbfff18b6, 0x6, 0x334, 0x80000001, 0xdb}, 0x9c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8b04, &(0x7f00000005c0)={'wlan1\x00', @random="020000000100"}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/devices/system/memory/memory8/state\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='offline', 0x7) ioctl(r2, 0xc0104d08, 0x0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)={0x28, r1, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth0_to_bridge\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x24044800}, 0x24000090) 1m24.462919508s ago: executing program 5 (id=1873): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000100)={@mcast2, 0x65}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x80fe) 1m23.357266153s ago: executing program 5 (id=1876): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x12c) write(r1, &(0x7f0000000000)='270', 0x3) r2 = syz_open_dev$usbfs(&(0x7f0000000240), 0x74, 0x160341) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r3, 0x89a2, 0x0) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 1m22.446787317s ago: executing program 5 (id=1878): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000240), 0x80200, 0x0) ioctl$CDROM_DISC_STATUS(r0, 0x5327) 1m21.704985102s ago: executing program 5 (id=1879): syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r0, 0x118, 0x1, &(0x7f0000000140)=0x4bc, 0x4) 1m21.0305255s ago: executing program 5 (id=1881): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmsg$nl_netfilter(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x801, 0x70bd25, 0x25dfdbff, {0xb384894add51bd0a, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x400c0d0) sendmmsg$alg(r1, &(0x7f0000000a40)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000340)="07cdf378bef740c56f4e88803f33033f04a9c57f0c455c6c7fd9415cb9f4980ab98ca2a2216addfa46e92379892ad10a3db457af4d5d26e7896a810a2a9ffdbe46b2946c0013972d5938f23544", 0x4d}], 0x1, 0x0, 0x0, 0x80}], 0x1, 0x20044800) recvmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000200)=""/83, 0x53}, {&(0x7f0000000400)=""/16, 0x10}], 0x2}, 0x10121) 1m17.029931666s ago: executing program 5 (id=1896): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x2000c004) 1m1.631198897s ago: executing program 35 (id=1896): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_1\x00'}}]}, 0x38}}, 0x2000c004) 7.316064096s ago: executing program 2 (id=2104): r0 = creat(&(0x7f0000000040)='./file0\x00', 0x4b) close(r0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r1, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r0, 0xc06864ce, &(0x7f0000000680)={r2, 0x1fb, 0x0, 0x1, 0x3, [0x0, 0x0, 0x0, 0x0], [0x7fdfffff, 0x0, 0x0, 0x4], [0x0, 0x1001000, 0x2], [0x100000000, 0x0, 0xfffffffffefffffc, 0x7]}) ioctl$DRM_IOCTL_MODE_ADDFB2(r0, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [r3, r4, 0x0, r4], [0x2b8], [0x0, 0x1, 0x0, 0xffffffff], [0x0, 0xfffffffffffffffe, 0x2a]}) 6.623027105s ago: executing program 2 (id=2105): r0 = semget$private(0x0, 0x3, 0x34) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) syz_open_dev$tty1(0xc, 0x4, 0x2) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004480)=[{{0x0, 0x0, 0x0}, 0x7}], 0x1, 0x2, 0x0) semtimedop(r0, &(0x7f0000005900)=[{0x1, 0x0, 0x3000}], 0x1f4, 0x0) 6.622813135s ago: executing program 1 (id=2106): socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20048084}, 0x44050) syz_usb_connect$sierra_net(0x5, 0x3f, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x1199, 0x68a3, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0xfa, "", {{0x9, 0x4, 0x7, 0x0, 0x3, 0xff, 0x0, 0x0, 0x0, "", {{0x9, 0x5, 0x2, 0x2, 0x8, 0x1, 0xd, 0x3}, {0x9, 0x5, 0x0, 0x2, 0x200, 0x1, 0x7, 0x4}, {0x9, 0x5, 0x0, 0x3, 0x20, 0x9c, 0x9, 0x7}}}}}}]}}, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0xa2f01, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1, 0x0) open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x20008044}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/thread-self/fail-nth\x00', 0x2, 0x101) write(r2, &(0x7f0000000000)='3', 0x4e) open(&(0x7f00000002c0)='./bus\x00', 0x60142, 0x10) write(r1, &(0x7f0000000500)='p:s/_ ./file0:0', 0xf) 5.759879486s ago: executing program 6 (id=2107): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x20008000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x40408d0}, 0x20000084) 5.627314721s ago: executing program 2 (id=2108): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) munlockall() madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x3) mlock(&(0x7f0000585000/0x3000)=nil, 0x3000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x20402, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000002c0)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x2, 0xa}}, 0x20) 5.187378989s ago: executing program 6 (id=2109): r0 = syz_open_dev$dvb_demux(&(0x7f0000000080), 0x0, 0x20000) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000000)={0xfff, 0x0, 0x3, 0x14, 0x4}) ioctl$DVB_DEMUX_DMX_ADD_PID(r0, 0x40026f33, &(0x7f00000000c0)=0x7) ioctl$DVB_DEMUX_DMX_SET_PES_FILTER(r0, 0x40146f2c, &(0x7f0000000040)={0x2, 0x1, 0x3, 0x6}) 5.171400301s ago: executing program 1 (id=2110): r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r0, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x300, 0x7, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x5, 0x0, 0x6, 0x6, 0xffffff60, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x1]}) ioctl$COMEDI_CMD(r0, 0x80506409, &(0x7f0000000200)={0x0, 0x0, 0x2, 0x0, 0x4, 0x0, 0x10, 0x2710, 0x20, 0x1, 0x1, 0x1000000, &(0x7f0000000300)=[0x0], 0x1, 0x0}) 4.618761149s ago: executing program 6 (id=2111): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r0, &(0x7f0000000540)='tcp', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_adrfam\x00', 0x1, 0x0) write(r1, &(0x7f00000005c0)='ipv4', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/addr_traddr\x00', 0x1, 0x0) write(r2, &(0x7f0000000640)='127.0.0.1', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x1, 0x0) write(r3, &(0x7f00000006c0)='4', 0x1) symlinkat(&(0x7f0000000700)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000740)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/nvmet/ports/1/param_inline_data_size\x00', 0x1, 0x0) write(r4, &(0x7f0000000840)='0', 0x1) 3.499969075s ago: executing program 6 (id=2112): r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x141, 0x0) ioctl$SNAPSHOT_SET_SWAP_AREA(r0, 0x400c330d, 0x0) 3.499735232s ago: executing program 1 (id=2113): mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x103000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x1, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r2, r1], 0x2}) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x1, 0x0, &(0x7f0000000000)=[0x0]}) 3.499481825s ago: executing program 2 (id=2114): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000000c0), r0) sendmsg$NLBL_CALIPSO_C_LISTALL(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x14, r1, 0x3d810686a7d95765, 0x70bd2a, 0x25dfdbf9}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x24004052) 2.72165527s ago: executing program 2 (id=2115): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='100000', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0', 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60242, 0x0) io_setup(0x1, &(0x7f0000000040)) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000d00)={0x0, 'syz_tun\x00', {0x4}, 0xa}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x200008d5}, 0x20004090) 2.71476055s ago: executing program 1 (id=2116): socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x24040040) getsockname$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000002c0)={0x0, @local, @multicast1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(0xffffffffffffffff, 0x0, 0x26c1868eb74dfe89) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2080, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d06, 0x0, 0x7}]}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) 2.495614224s ago: executing program 6 (id=2117): r0 = io_uring_setup(0x3bc, &(0x7f0000000280)={0x0, 0xfffffffe, 0x2, 0x0, 0x345}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x20044884) r1 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r1, 0x40946400, &(0x7f00000000c0)={'pcl812\x00', [0x100, 0x4, 0x302, 0xd, 0xe, 0x5, 0x79, 0x3, 0x80008, 0x0, 0x2, 0x1000006c, 0x7, 0x8, 0x1, 0xfd, 0xfffffffb, 0x9, 0x3, 0x7fffffff, 0x89, 0xca9f, 0x1000000, 0x268, 0xffffffff, 0xf39e, 0x6, 0x8, 0xa6b5, 0x0, 0xfffffffc]}) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x40400, 0x0) ioctl$COMEDI_INSN(r2, 0x8028640c, &(0x7f0000022a00)={0x4000000, 0x28, 0x0, 0x0, 0x2}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r3, 0x0) io_uring_enter(r0, 0x100000, 0x2, 0xf, &(0x7f0000000000), 0x18) 936.172399ms ago: executing program 6 (id=2118): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='md0', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1', 0x1) 931.398335ms ago: executing program 1 (id=2119): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x4c}}, 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x4c, 0x9, 0x6, 0x5, 0x0, 0x0, {0x2, 0x0, 0x800}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x30008054}, 0x800) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) write(r0, &(0x7f0000000000)='6', 0x32) 711.50372ms ago: executing program 2 (id=2120): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r0, &(0x7f00000000c0)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xe}, 0x3}, 0xa) r1 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) ioctl(r1, 0x400452c8, &(0x7f0000000000)="000000000000000000000000000000000000000001") 0s ago: executing program 1 (id=2121): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r4, 0x5, 0xfffffffe, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x4004800) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, r1, 0x91f, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x5b}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x20008040) kernel console output (not intermixed with test programs): 07.619390][T10675] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 507.619412][T10675] Call Trace: [ 507.619452][T10675] [ 507.619496][T10675] dump_stack_lvl+0x100/0x190 [ 507.619693][T10675] should_fail_ex.cold+0x5/0xa [ 507.619839][T10675] should_failslab+0xc2/0x120 [ 507.619949][T10675] __kmalloc_cache_noprof+0x91/0x6d0 [ 507.620097][T10675] ? device_add+0xd3f/0x1970 [ 507.620322][T10675] device_add+0xd3f/0x1970 [ 507.620530][T10675] ? __pfx_device_add+0x10/0x10 [ 507.620626][T10675] ? kfree_const+0x5a/0x70 [ 507.620686][T10675] ? kfree+0x1e5/0x6d0 [ 507.620968][T10675] device_create_groups_vargs+0x1f8/0x270 [ 507.621182][T10675] device_create+0xed/0x130 [ 507.621276][T10675] ? __pfx_device_create+0x10/0x10 [ 507.621335][T10675] ? lockdep_init_map_type+0x5c/0x250 [ 507.621439][T10675] ? timer_init_key+0x150/0x310 [ 507.621682][T10675] ? ieee80211_roc_setup+0x136/0x270 [ 507.621743][T10675] ? ieee80211_alloc_hw_nm+0x1a2a/0x2310 [ 507.621963][T10675] mac80211_hwsim_new_radio+0x37c/0x6510 [ 507.622441][T10675] ? __asan_memset+0x23/0x50 [ 507.622578][T10675] ? __nla_validate_parse+0x1e7/0x28b0 [ 507.622711][T10675] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 507.623021][T10675] hwsim_new_radio_nl+0xc6b/0x13f0 [ 507.623157][T10675] ? trace_kmalloc+0xeb/0x110 [ 507.623263][T10675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 507.623601][T10675] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1e5/0x2f0 [ 507.623674][T10675] ? genl_family_rcv_msg_attrs_parse.isra.0+0x1ef/0x2f0 [ 507.623858][T10675] genl_family_rcv_msg_doit+0x214/0x300 [ 507.624054][T10675] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 507.624391][T10675] ? bpf_lsm_capable+0x9/0x10 [ 507.624446][T10675] ? security_capable+0x80/0x260 [ 507.624635][T10675] ? ns_capable+0xd2/0xf0 [ 507.624789][T10675] genl_rcv_msg+0x560/0x800 [ 507.625006][T10675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.625124][T10675] ? __lock_acquire+0x5c0/0x1f40 [ 507.625219][T10675] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 507.625585][T10675] netlink_rcv_skb+0x159/0x420 [ 507.625724][T10675] ? __pfx_genl_rcv_msg+0x10/0x10 [ 507.625825][T10675] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 507.626301][T10675] ? netlink_deliver_tap+0x1ae/0xcc0 [ 507.626532][T10675] genl_rcv+0x28/0x40 [ 507.626636][T10675] netlink_unicast+0x585/0x850 [ 507.626852][T10675] ? __pfx_netlink_unicast+0x10/0x10 [ 507.627251][T10675] netlink_sendmsg+0x8b0/0xda0 [ 507.627450][T10675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.627688][T10675] ? selinux_socket_sendmsg+0x198/0x2f0 [ 507.627906][T10675] ____sys_sendmsg+0xa4d/0xbe0 [ 507.627968][T10675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.628176][T10675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.628389][T10675] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 507.628717][T10675] ___sys_sendmsg+0x190/0x1e0 [ 507.628845][T10675] ? __pfx____sys_sendmsg+0x10/0x10 [ 507.628924][T10675] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 507.629385][T10675] ? find_held_lock+0x2b/0x80 [ 507.630055][T10675] __sys_sendmsg+0x160/0x210 [ 507.630242][T10675] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.630785][T10675] do_syscall_64+0x123/0x790 [ 507.630965][T10675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.631038][T10675] RIP: 0033:0x7fb91839e199 [ 507.631148][T10675] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 507.631183][T10675] RSP: 002b:00007fb9191e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.631230][T10675] RAX: ffffffffffffffda RBX: 00007fb918625fa0 RCX: 00007fb91839e199 [ 507.631257][T10675] RDX: 0000000004000014 RSI: 0000200000000100 RDI: 000000000000000a [ 507.631273][T10675] RBP: 00007fb9184358e0 R08: 0000000000000000 R09: 0000000000000000 [ 507.631289][T10675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 507.631304][T10675] R13: 00007fb918626038 R14: 00007fb918625fa0 R15: 00007ffcfab04068 [ 507.631737][T10675] [ 507.666747][ T44] audit: type=1400 audit(2000000045.549:1848): avc: denied { bind } for pid=10676 comm="syz.6.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 507.683106][ T44] audit: type=1400 audit(2000000045.589:1849): avc: denied { node_bind } for pid=10676 comm="syz.6.1514" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 508.351655][T10656] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 508.365570][ T43] usb 7-1: USB disconnect, device number 26 [ 509.208467][ T44] audit: type=1400 audit(2000000047.109:1850): avc: denied { map } for pid=10685 comm="syz.6.1516" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 509.211175][ T44] audit: type=1400 audit(2000000047.119:1851): avc: denied { execute } for pid=10685 comm="syz.6.1516" path="/dev/dri/card0" dev="devtmpfs" ino=635 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 509.675188][T10691] syzkaller0: entered promiscuous mode [ 509.675239][T10691] syzkaller0: entered allmulticast mode [ 509.731224][T10693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1513'. [ 509.731251][T10693] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1513'. [ 510.228236][T10695] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1518'. [ 510.773348][ T44] audit: type=1400 audit(2000000048.679:1852): avc: denied { create } for pid=10700 comm="syz.2.1520" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 510.840564][T10703] /dev/sg0: Can't lookup blockdev [ 511.642360][T10706] 0: reclassify loop, rule prio 0, protocol 03 [ 512.360753][ T5718] usb 11-1: new high-speed USB device number 13 using dummy_hcd [ 512.501406][T10722] fuse: Bad value for 'user_id' [ 512.501427][T10722] fuse: Bad value for 'user_id' [ 512.530125][ T5718] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 512.543371][ T5718] usb 11-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.543463][ T5718] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.589135][ T5718] usb 11-1: config 0 descriptor?? [ 512.907369][ T5718] usbhid 11-1:0.0: can't add hid device: -71 [ 512.907961][ T5718] usbhid 11-1:0.0: probe with driver usbhid failed with error -71 [ 512.959005][ T5718] usb 11-1: USB disconnect, device number 13 [ 513.652652][ T5718] usb 11-1: new high-speed USB device number 14 using dummy_hcd [ 513.669993][ T44] audit: type=1400 audit(2000000051.579:1853): avc: denied { name_bind } for pid=10726 comm="syz.1.1529" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 513.869754][ T5718] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 513.882322][ T5718] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 513.882523][ T5718] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 513.882552][ T5718] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 513.913371][ T5718] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 513.913390][ T5718] usb 11-1: Product: syz [ 513.913401][ T5718] usb 11-1: Manufacturer: syz [ 513.913412][ T5718] usb 11-1: SerialNumber: syz [ 514.022720][T10716] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 515.091630][T10736] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 515.102617][ T6197] usb 11-1: USB disconnect, device number 14 [ 516.300712][T10747] 9p: Bad value for 'version' [ 517.650815][ T1356] usb 10-1: new low-speed USB device number 11 using dummy_hcd [ 517.894602][ T1356] usb 10-1: No LPM exit latency info found, disabling LPM. [ 517.894815][ T1356] usb 10-1: New USB device found, idVendor=056e, idProduct=010d, bcdDevice= 0.40 [ 517.917189][ T1356] usb 10-1: config 1 interface 0 altsetting 128 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 517.917234][ T1356] usb 10-1: config 1 interface 0 altsetting 128 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 517.917271][ T1356] usb 10-1: config 1 interface 0 has no altsetting 0 [ 517.983947][ T1356] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.983971][ T1356] usb 10-1: Product: 셺̔梤쭤툵é²ç£¬î¥”ᮽ솋便䑡ﱎ袋఻ﱢ原ᚥ줦ʖ擺㯅腢讎ä³æ€è·¶è΢ҳ둭꽫ԯꮀ隵â–竈㆑责鬊æ¿ë“箻䇗íŸîº£á˜“酧ڲᚒﵦ뮒蘮ê†î…⭙倷ä–㳉㉊촪踀䭵뢊衂乀潖垼䃉愸簑èŠç…¡æ§¸ì‰¨ç®®å²Ÿì¼¨å˜¿ì¼’랢盱齻ﺟãƒâªºì¡ìŸ¯ç´žå¤¾å»ç…²í’ƒå¬ï´±í‰šìž¨æ‚ªÒ…籷㪹傅溑脳꣥æŠèœŸ [ 517.983995][ T1356] usb 10-1: Manufacturer: 泡䯗䤑ཛྷã–炲î ê„¿ï–žã²ãš¹à¯žç°¼ä†•Ð¦á¡¾çº²ì¡­à¿ˆï„™â––䊘â©Ô‰é¥é¤²à·¶ïµ¿î¼’毙│桛佗좃㮂梔閚絃á£á„žã™¦íž¬è‚낎맨âªá†„è„–äµî§‹æ‰„êŒä¶ìŽá‰Žá°¸æœžé¹¶å¤·ä‹¸á¹¿î¡‰æ‘¥è’µì¯µá©¿é™¼ê ‰é­§Ò†ì¬´å¢”庺⺷挡掰㢱磇è“㪧헜ã¹á¶™ìŒ¯ê“·íŸ¹æ†µ [ 517.984017][ T1356] usb 10-1: SerialNumber: Շ牢ﻎ赬䳀୩⪴퓀é¬î»‡áº€ìœ­îⳆ蚒墦簇뮟䪴튣èŽêŠ¹á–é­ºá·ß¡è’¡ä‚¢é¼¤ã£µç·¼î¢å‘®à«¶î¿ƒê°¬è¹œá‰‡î¶¦â»™í°ç¯‡é«ç§Žå„Žî¹¥ß™æª¥á„ꙶã³íŸ³á›¡ãœ·ä§¬ç–Šî¼™ç¢§éž¸ã¢â¡°ê“¸æ§‹î‡–滩箸✉펙줩瞱龌忟ն㳚梚 [ 518.081224][T10761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.082885][T10761] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 518.368280][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.383475][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.421139][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.449412][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.524523][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.546987][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.578682][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.601230][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.651597][T10761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 518.708716][T10761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 518.974483][ T1356] usbhid 10-1:1.0: can't add hid device: -71 [ 518.975200][ T1356] usbhid 10-1:1.0: probe with driver usbhid failed with error -71 [ 519.054151][ T1356] usb 10-1: USB disconnect, device number 11 [ 520.488551][T10787] FAULT_INJECTION: forcing a failure. [ 520.488551][T10787] name failslab, interval 1, probability 0, space 0, times 0 [ 520.488617][T10787] CPU: 3 UID: 0 PID: 10787 Comm: syz.5.1546 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.488647][T10787] Tainted: [L]=SOFTLOCKUP [ 520.488659][T10787] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.488674][T10787] Call Trace: [ 520.488692][T10787] [ 520.488715][T10787] dump_stack_lvl+0x100/0x190 [ 520.488842][T10787] should_fail_ex.cold+0x5/0xa [ 520.489054][T10787] should_failslab+0xc2/0x120 [ 520.489144][T10787] __kmalloc_noprof+0xfc/0x840 [ 520.489217][T10787] ? __alloc_workqueue+0x10f/0x1950 [ 520.489449][T10787] __alloc_workqueue+0x10f/0x1950 [ 520.489543][T10787] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 520.489612][T10787] ? lockdep_hardirqs_on+0x7d/0x110 [ 520.489663][T10787] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 520.489721][T10787] ? __debug_object_init+0x2de/0x3d0 [ 520.489870][T10787] alloc_workqueue_noprof+0xc7/0x130 [ 520.489995][T10787] ? __pfx_alloc_workqueue_noprof+0x10/0x10 [ 520.490209][T10787] ? lockdep_init_map_type+0x5c/0x250 [ 520.490332][T10787] ? lockdep_init_map_type+0x5c/0x250 [ 520.490518][T10787] __rds_conn_create+0x1290/0x2650 [ 520.490748][T10787] ? __pfx___rds_conn_create+0x10/0x10 [ 520.490785][T10787] ? trace_kmalloc+0xeb/0x110 [ 520.490820][T10787] ? __kasan_kmalloc+0xaa/0xb0 [ 520.490861][T10787] ? lockdep_init_map_type+0x5c/0x250 [ 520.490991][T10787] rds_conn_create_outgoing+0x44/0x60 [ 520.491122][T10787] rds_sendmsg+0x10da/0x34d0 [ 520.491406][T10787] ? __pfx_rds_sendmsg+0x10/0x10 [ 520.491710][T10787] ? selinux_socket_sendmsg+0x198/0x2f0 [ 520.491869][T10787] ? ____sys_sendmsg+0xa4d/0xbe0 [ 520.491919][T10787] ____sys_sendmsg+0xa4d/0xbe0 [ 520.491940][T10787] ? __pfx_rds_sendmsg+0x10/0x10 [ 520.492011][T10787] ? __pfx_____sys_sendmsg+0x10/0x10 [ 520.492195][T10787] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 520.492315][T10787] ___sys_sendmsg+0x190/0x1e0 [ 520.492442][T10787] ? __pfx____sys_sendmsg+0x10/0x10 [ 520.492508][T10787] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 520.492866][T10787] ? find_held_lock+0x2b/0x80 [ 520.493366][T10787] __sys_sendmsg+0x160/0x210 [ 520.493491][T10787] ? __pfx___sys_sendmsg+0x10/0x10 [ 520.494064][T10787] do_syscall_64+0x123/0x790 [ 520.494208][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.494256][T10787] RIP: 0033:0x7fd81059e199 [ 520.494321][T10787] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.494347][T10787] RSP: 002b:00007fd81139f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 520.494382][T10787] RAX: ffffffffffffffda RBX: 00007fd810825fa0 RCX: 00007fd81059e199 [ 520.494404][T10787] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 520.494425][T10787] RBP: 00007fd8106358e0 R08: 0000000000000000 R09: 0000000000000000 [ 520.494446][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 520.494466][T10787] R13: 00007fd810826038 R14: 00007fd810825fa0 R15: 00007ffcf6b2c928 [ 520.494880][T10787] [ 520.886732][T10793] FAULT_INJECTION: forcing a failure. [ 520.886732][T10793] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 520.886773][T10793] CPU: 3 UID: 0 PID: 10793 Comm: syz.2.1549 Tainted: G L syzkaller #0 PREEMPT(full) [ 520.886796][T10793] Tainted: [L]=SOFTLOCKUP [ 520.886807][T10793] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 520.886821][T10793] Call Trace: [ 520.886847][T10793] [ 520.886874][T10793] dump_stack_lvl+0x100/0x190 [ 520.886967][T10793] should_fail_ex.cold+0x5/0xa [ 520.887060][T10793] _copy_from_user+0x2e/0xd0 [ 520.887156][T10793] input_event_from_user+0x123/0x310 [ 520.887241][T10793] ? __pfx_input_event_from_user+0x10/0x10 [ 520.887275][T10793] ? __pfx___might_resched+0x10/0x10 [ 520.887302][T10793] ? input_inject_event+0x198/0x380 [ 520.887424][T10793] evdev_write+0x342/0x610 [ 520.887586][T10793] ? __pfx_evdev_write+0x10/0x10 [ 520.887676][T10793] ? bpf_lsm_file_permission+0x9/0x10 [ 520.887712][T10793] ? security_file_permission+0x76/0x210 [ 520.887798][T10793] ? rw_verify_area+0xce/0x6d0 [ 520.887885][T10793] vfs_write+0x2aa/0x1050 [ 520.887954][T10793] ? __pfx_evdev_write+0x10/0x10 [ 520.887996][T10793] ? lock_acquire+0x1d1/0x380 [ 520.888042][T10793] ? __fget_files+0x34/0x3d0 [ 520.888110][T10793] ? __pfx_vfs_write+0x10/0x10 [ 520.888148][T10793] ? find_held_lock+0x2b/0x80 [ 520.888185][T10793] ? __fget_files+0x215/0x3d0 [ 520.888214][T10793] ? __fget_files+0x215/0x3d0 [ 520.888345][T10793] ? __fget_files+0x21f/0x3d0 [ 520.888535][T10793] ksys_write+0x1f8/0x250 [ 520.888590][T10793] ? __pfx_ksys_write+0x10/0x10 [ 520.888828][T10793] do_syscall_64+0x123/0x790 [ 520.888926][T10793] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.888965][T10793] RIP: 0033:0x7f23e579e199 [ 520.889027][T10793] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 520.889047][T10793] RSP: 002b:00007f23e65c4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 520.889076][T10793] RAX: ffffffffffffffda RBX: 00007f23e5a25fa0 RCX: 00007f23e579e199 [ 520.889092][T10793] RDX: 0000000000000918 RSI: 0000200000000040 RDI: 0000000000000004 [ 520.889108][T10793] RBP: 00007f23e65c4090 R08: 0000000000000000 R09: 0000000000000000 [ 520.889121][T10793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 520.889129][T10793] R13: 00007f23e5a26038 R14: 00007f23e5a25fa0 R15: 00007ffc01577d98 [ 520.889391][T10793] [ 521.135216][T10796] overlayfs: failed to resolve './file1/file0': -2 [ 521.260037][T10798] FAULT_INJECTION: forcing a failure. [ 521.260037][T10798] name failslab, interval 1, probability 0, space 0, times 0 [ 521.260089][T10798] CPU: 0 UID: 0 PID: 10798 Comm: syz.6.1552 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.260122][T10798] Tainted: [L]=SOFTLOCKUP [ 521.260136][T10798] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.260153][T10798] Call Trace: [ 521.260178][T10798] [ 521.260208][T10798] dump_stack_lvl+0x100/0x190 [ 521.260376][T10798] should_fail_ex.cold+0x5/0xa [ 521.260647][T10798] should_failslab+0xc2/0x120 [ 521.260714][T10798] __kmalloc_noprof+0xfc/0x840 [ 521.260765][T10798] ? rcu_is_watching+0x13/0xc0 [ 521.260851][T10798] ? tomoyo_realpath_from_path+0xb6/0x690 [ 521.261157][T10798] tomoyo_realpath_from_path+0xb6/0x690 [ 521.261387][T10798] tomoyo_path_number_perm+0x23c/0x580 [ 521.261453][T10798] ? tomoyo_path_number_perm+0x22e/0x580 [ 521.261673][T10798] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 521.262545][T10798] ? __fget_files+0x34/0x3d0 [ 521.262710][T10798] ? find_held_lock+0x2b/0x80 [ 521.262797][T10798] ? hook_file_ioctl_common+0x140/0x440 [ 521.263015][T10798] ? __fget_files+0x21f/0x3d0 [ 521.263268][T10798] security_file_ioctl+0xd3/0x230 [ 521.263368][T10798] __x64_sys_ioctl+0xb7/0x210 [ 521.263554][T10798] do_syscall_64+0x123/0x790 [ 521.263775][T10798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.263818][T10798] RIP: 0033:0x7f8f3199e199 [ 521.263884][T10798] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.263910][T10798] RSP: 002b:00007f8f32923028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 521.263945][T10798] RAX: ffffffffffffffda RBX: 00007f8f31c25fa0 RCX: 00007f8f3199e199 [ 521.263968][T10798] RDX: 0000000000000000 RSI: 0000000080085617 RDI: 0000000000000004 [ 521.263989][T10798] RBP: 00007f8f31a358e0 R08: 0000000000000000 R09: 0000000000000000 [ 521.264010][T10798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.264031][T10798] R13: 00007f8f31c26038 R14: 00007f8f31c25fa0 R15: 00007ffdbd9ade28 [ 521.264508][T10798] [ 521.265077][T10798] ERROR: Out of memory at tomoyo_realpath_from_path. [ 521.649240][T10797] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 523.134906][ T44] audit: type=1400 audit(2000000061.039:1854): avc: denied { create } for pid=10817 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.161582][ T44] audit: type=1400 audit(2000000061.059:1855): avc: denied { setattr } for pid=10817 comm="syz.2.1558" path="socket:[40350]" dev="sockfs" ino=40350 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 523.205853][T10822] FAULT_INJECTION: forcing a failure. [ 523.205853][T10822] name failslab, interval 1, probability 0, space 0, times 0 [ 523.205892][T10822] CPU: 0 UID: 0 PID: 10822 Comm: syz.2.1558 Tainted: G L syzkaller #0 PREEMPT(full) [ 523.205910][T10822] Tainted: [L]=SOFTLOCKUP [ 523.205917][T10822] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 523.205927][T10822] Call Trace: [ 523.205940][T10822] [ 523.205955][T10822] dump_stack_lvl+0x100/0x190 [ 523.206058][T10822] should_fail_ex.cold+0x5/0xa [ 523.206198][T10822] should_failslab+0xc2/0x120 [ 523.206254][T10822] __kmalloc_noprof+0xfc/0x840 [ 523.206279][T10822] ? rcu_is_watching+0x13/0xc0 [ 523.206320][T10822] ? tomoyo_realpath_from_path+0xb6/0x690 [ 523.206471][T10822] tomoyo_realpath_from_path+0xb6/0x690 [ 523.206610][T10822] tomoyo_path_number_perm+0x23c/0x580 [ 523.206651][T10822] ? tomoyo_path_number_perm+0x22e/0x580 [ 523.206750][T10822] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 523.207203][T10822] ? __fget_files+0x34/0x3d0 [ 523.207279][T10822] ? find_held_lock+0x2b/0x80 [ 523.207334][T10822] ? hook_file_ioctl_common+0x140/0x440 [ 523.207466][T10822] ? __fget_files+0x21f/0x3d0 [ 523.207656][T10822] security_file_ioctl+0xd3/0x230 [ 523.207707][T10822] __x64_sys_ioctl+0xb7/0x210 [ 523.207799][T10822] do_syscall_64+0x123/0x790 [ 523.207929][T10822] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.207960][T10822] RIP: 0033:0x7f23e579e199 [ 523.207989][T10822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 523.208003][T10822] RSP: 002b:00007f23e65a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 523.208026][T10822] RAX: ffffffffffffffda RBX: 00007f23e5a26090 RCX: 00007f23e579e199 [ 523.208038][T10822] RDX: 0000000000000000 RSI: 0000000080085617 RDI: 0000000000000009 [ 523.208049][T10822] RBP: 00007f23e58358e0 R08: 0000000000000000 R09: 0000000000000000 [ 523.208060][T10822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 523.208070][T10822] R13: 00007f23e5a26128 R14: 00007f23e5a26090 R15: 00007ffc01577d98 [ 523.208364][T10822] [ 523.208457][T10822] ERROR: Out of memory at tomoyo_realpath_from_path. [ 523.383677][ T44] audit: type=1400 audit(2000000061.289:1856): avc: denied { accept } for pid=10823 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 523.389811][ T44] audit: type=1400 audit(2000000061.299:1857): avc: denied { write } for pid=10823 comm="syz.1.1561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 524.788495][ T1167] IPVS: starting estimator thread 0... [ 524.789515][T10842] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 524.886601][T10845] IPVS: using max 5 ests per chain, 12000 per kthread [ 524.927589][T10839] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 525.125606][T10852] loop5: detected capacity change from 0 to 7 [ 525.144978][T10852] Dev loop5: unable to read RDB block 7 [ 525.145048][T10852] loop5: unable to read partition table [ 525.147502][T10852] loop5: partition table beyond EOD, truncated [ 525.150476][T10852] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 526.068211][T10857] netlink: 180 bytes leftover after parsing attributes in process `syz.2.1569'. [ 526.270307][T10855] ip6gre1: entered promiscuous mode [ 526.270335][T10855] ip6gre1: entered allmulticast mode [ 526.517881][T10866] pvfs2: Unknown parameter 'aclrp1' [ 526.547549][ T44] audit: type=1400 audit(2000000064.449:1858): avc: denied { connect } for pid=10867 comm="syz.5.1572" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 526.850395][T10872] sctp: [Deprecated]: syz.5.1572 (pid 10872) Use of int in maxseg socket option. [ 526.850395][T10872] Use struct sctp_assoc_value instead [ 528.654815][ T44] audit: type=1400 audit(2000000066.559:1859): avc: denied { ioctl } for pid=10892 comm="syz.2.1574" path="socket:[39351]" dev="sockfs" ino=39351 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 529.137665][T10902] CIFS: VFS: UNC: missing share name [ 529.138265][T10902] CIFS: VFS: Malformed UNC in devname [ 530.184101][ T44] audit: type=1400 audit(2000000068.089:1860): avc: denied { unmount } for pid=8754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 530.366369][T10912] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 530.978252][ T44] audit: type=1400 audit(2000000068.879:1861): avc: denied { execmod } for pid=10920 comm="syz.2.1579" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 530.978275][ T6197] usb 11-1: new high-speed USB device number 15 using dummy_hcd [ 530.992142][ T44] audit: type=1400 audit(2000000068.899:1862): avc: denied { execute } for pid=10920 comm="syz.2.1579" path=2F616E6F6E5F6875676570616765202864656C6574656429 dev="hugetlbfs" ino=36846 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:hugetlbfs_t tclass=file permissive=1 [ 531.127532][ T6197] usb 11-1: device descriptor read/64, error -71 [ 531.418560][ T6197] usb 11-1: new high-speed USB device number 16 using dummy_hcd [ 531.570852][ T6197] usb 11-1: device descriptor read/64, error -71 [ 531.696525][ T6197] usb usb11-port1: attempt power cycle [ 532.119190][ T6197] usb 11-1: new high-speed USB device number 17 using dummy_hcd [ 532.141464][ T6197] usb 11-1: device descriptor read/8, error -71 [ 532.398543][ T6197] usb 11-1: new high-speed USB device number 18 using dummy_hcd [ 532.452089][ T6197] usb 11-1: device descriptor read/8, error -71 [ 532.561082][ T6197] usb usb11-port1: unable to enumerate USB device [ 532.562076][T10937] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1584'. [ 532.562097][T10937] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1584'. [ 532.562125][T10937] netlink: 'syz.5.1584': attribute type 11 has an invalid length. [ 532.562147][T10937] netlink: 'syz.5.1584': attribute type 7 has an invalid length. [ 534.701294][ T44] audit: type=1326 audit(2000000072.609:1863): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10955 comm="syz.1.1590" exe="/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb91839e199 code=0x7ffe0000 [ 535.043229][ T44] audit: type=1400 audit(2000000072.949:1864): avc: denied { getopt } for pid=10963 comm="syz.5.1592" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 536.438697][T10973] syzkaller0: entered promiscuous mode [ 536.438725][T10973] syzkaller0: entered allmulticast mode [ 537.564377][T10981] netlink: 'syz.6.1597': attribute type 1 has an invalid length. [ 538.268147][T10988] FAULT_INJECTION: forcing a failure. [ 538.268147][T10988] name failslab, interval 1, probability 0, space 0, times 0 [ 538.268192][T10988] CPU: 0 UID: 0 PID: 10988 Comm: syz.2.1600 Tainted: G L syzkaller #0 PREEMPT(full) [ 538.268216][T10988] Tainted: [L]=SOFTLOCKUP [ 538.268228][T10988] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 538.268242][T10988] Call Trace: [ 538.268271][T10988] [ 538.268301][T10988] dump_stack_lvl+0x100/0x190 [ 538.268364][T10988] should_fail_ex.cold+0x5/0xa [ 538.268492][T10988] should_failslab+0xc2/0x120 [ 538.268581][T10988] kmem_cache_alloc_noprof+0x92/0x6a0 [ 538.268695][T10988] ? do_getname+0x35/0x390 [ 538.268894][T10988] do_getname+0x35/0x390 [ 538.269132][T10988] __x64_sys_mknodat+0xa1/0xf0 [ 538.269227][T10988] do_syscall_64+0x123/0x790 [ 538.269372][T10988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.269434][T10988] RIP: 0033:0x7f23e579e199 [ 538.269532][T10988] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 538.269562][T10988] RSP: 002b:00007f23e65a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 538.269608][T10988] RAX: ffffffffffffffda RBX: 00007f23e5a26090 RCX: 00007f23e579e199 [ 538.269634][T10988] RDX: 00000000ffffc000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 538.269661][T10988] RBP: 00007f23e65a3090 R08: 0000000000000000 R09: 0000000000000000 [ 538.269687][T10988] R10: 0000000000000705 R11: 0000000000000246 R12: 0000000000000001 [ 538.269713][T10988] R13: 00007f23e5a26128 R14: 00007f23e5a26090 R15: 00007ffc01577d98 [ 538.270188][T10988] [ 538.707544][ T6197] usb 10-1: new high-speed USB device number 12 using dummy_hcd [ 538.869192][ T6197] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 538.879459][ T6197] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.879603][ T6197] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 538.920510][ T6197] usb 10-1: config 0 descriptor?? [ 539.214488][ T6197] usbhid 10-1:0.0: can't add hid device: -71 [ 539.214914][ T6197] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 539.274992][ T6197] usb 10-1: USB disconnect, device number 12 [ 539.836457][ T6197] usb 10-1: new high-speed USB device number 13 using dummy_hcd [ 540.060533][ T6197] usb 10-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 540.111750][ T6197] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 540.112129][ T6197] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 256 [ 540.112166][ T6197] usb 10-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 540.150536][ T6197] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 540.150561][ T6197] usb 10-1: Product: syz [ 540.150576][ T6197] usb 10-1: Manufacturer: syz [ 540.150591][ T6197] usb 10-1: SerialNumber: syz [ 540.321549][T10990] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 541.490848][T11016] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 541.509263][ T43] usb 10-1: USB disconnect, device number 13 [ 542.442344][T11027] FAULT_INJECTION: forcing a failure. [ 542.442344][T11027] name failslab, interval 1, probability 0, space 0, times 0 [ 542.442385][T11027] CPU: 3 UID: 0 PID: 11027 Comm: syz.6.1611 Tainted: G L syzkaller #0 PREEMPT(full) [ 542.442407][T11027] Tainted: [L]=SOFTLOCKUP [ 542.442418][T11027] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 542.442432][T11027] Call Trace: [ 542.442456][T11027] [ 542.442487][T11027] dump_stack_lvl+0x100/0x190 [ 542.442581][T11027] should_fail_ex.cold+0x5/0xa [ 542.442674][T11027] should_failslab+0xc2/0x120 [ 542.442742][T11027] __kmalloc_noprof+0xfc/0x840 [ 542.442832][T11027] ? ext4_find_extent+0x21b/0xa30 [ 542.442939][T11027] ext4_find_extent+0x21b/0xa30 [ 542.443130][T11027] ext4_ext_map_blocks+0x215/0x56d0 [ 542.443162][T11027] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 542.443251][T11027] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 542.443405][T11027] ? trace_event_buffer_commit+0x20a/0xa80 [ 542.443536][T11027] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 542.443841][T11027] ? lock_acquire+0x1d1/0x380 [ 542.443890][T11027] ? ext4_map_blocks+0x45a/0xdd0 [ 542.444176][T11027] ext4_map_create_blocks+0xec/0x5e0 [ 542.444242][T11027] ? ext4_fc_write_inode_data+0x461/0x480 [ 542.444323][T11027] ext4_map_blocks+0x46b/0xdd0 [ 542.444482][T11027] ? __pfx_ext4_map_blocks+0x10/0x10 [ 542.444545][T11027] ? jbd2__journal_start+0xf7/0x6b0 [ 542.444628][T11027] ? __ext4_journal_start_sb+0x314/0x610 [ 542.444661][T11027] ? __ext4_journal_start_sb+0x17b/0x610 [ 542.444707][T11027] ? ext4_alloc_file_blocks.isra.0+0x3c5/0x1500 [ 542.444740][T11027] ? ext4_meta_trans_blocks+0x24b/0x2f0 [ 542.444873][T11027] ext4_alloc_file_blocks.isra.0+0x401/0x1500 [ 542.445070][T11027] ? __pfx_ext4_alloc_file_blocks.isra.0+0x10/0x10 [ 542.445191][T11027] ? __pfx_down_write+0x10/0x10 [ 542.445379][T11027] ext4_fallocate+0x1feb/0x3e60 [ 542.445483][T11027] ? lock_acquire+0x1d1/0x380 [ 542.445522][T11027] ? __x64_sys_fallocate+0xd5/0x140 [ 542.445579][T11027] ? __pfx_ext4_fallocate+0x10/0x10 [ 542.445741][T11027] ? __pfx_ext4_fallocate+0x10/0x10 [ 542.445796][T11027] vfs_fallocate+0x576/0x10a0 [ 542.445922][T11027] ? __pfx_vfs_fallocate+0x10/0x10 [ 542.446119][T11027] __x64_sys_fallocate+0xd5/0x140 [ 542.446226][T11027] do_syscall_64+0x123/0x790 [ 542.446325][T11027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.446351][T11027] RIP: 0033:0x7f8f3199e199 [ 542.446391][T11027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 542.446406][T11027] RSP: 002b:00007f8f32923028 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 542.446428][T11027] RAX: ffffffffffffffda RBX: 00007f8f31c25fa0 RCX: 00007f8f3199e199 [ 542.446441][T11027] RDX: 0000000000002000 RSI: 0100000000000011 RDI: 0000000000000003 [ 542.446454][T11027] RBP: 00007f8f32923090 R08: 0000000000000000 R09: 0000000000000000 [ 542.446466][T11027] R10: 0000000000002f93 R11: 0000000000000246 R12: 0000000000000001 [ 542.446482][T11027] R13: 00007f8f31c26038 R14: 00007f8f31c25fa0 R15: 00007ffdbd9ade28 [ 542.446744][T11027] [ 542.634500][ T850] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 542.641345][T11026] ceph: No mds server is up or the cluster is laggy [ 542.649149][ T850] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 543.423808][ T44] audit: type=1800 audit(2000000081.329:1865): pid=11021 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.2.1608" name=08 dev="sda1" ino=2040 res=0 errno=0 [ 546.394544][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1619'. [ 546.394577][T11054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1619'. [ 551.699051][T11073] kernel profiling enabled (shift: 63) [ 551.699071][T11073] profiling shift: 63 too large [ 551.828908][T11080] FAULT_INJECTION: forcing a failure. [ 551.828908][T11080] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 551.828965][T11080] CPU: 0 UID: 0 PID: 11080 Comm: syz.2.1628 Tainted: G L syzkaller #0 PREEMPT(full) [ 551.829000][T11080] Tainted: [L]=SOFTLOCKUP [ 551.829015][T11080] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 551.829035][T11080] Call Trace: [ 551.829068][T11080] [ 551.829104][T11080] dump_stack_lvl+0x100/0x190 [ 551.829302][T11080] should_fail_ex.cold+0x5/0xa [ 551.829467][T11080] strncpy_from_user+0x3b/0x2d0 [ 551.829677][T11080] do_getname+0x78/0x390 [ 551.829916][T11080] __x64_sys_mknodat+0xa1/0xf0 [ 551.830016][T11080] do_syscall_64+0x123/0x790 [ 551.830290][T11080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.830406][T11080] RIP: 0033:0x7f23e579e199 [ 551.830523][T11080] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 551.830555][T11080] RSP: 002b:00007f23e65a3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 551.830594][T11080] RAX: ffffffffffffffda RBX: 00007f23e5a26090 RCX: 00007f23e579e199 [ 551.830610][T11080] RDX: 00000000ffffc000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 551.830627][T11080] RBP: 00007f23e65a3090 R08: 0000000000000000 R09: 0000000000000000 [ 551.830643][T11080] R10: 0000000000000705 R11: 0000000000000246 R12: 0000000000000001 [ 551.830658][T11080] R13: 00007f23e5a26128 R14: 00007f23e5a26090 R15: 00007ffc01577d98 [ 551.831115][T11080] [ 552.092804][T11081] syzkaller0: entered promiscuous mode [ 552.092847][T11081] syzkaller0: entered allmulticast mode [ 553.559536][ T1356] usb 11-1: new high-speed USB device number 19 using dummy_hcd [ 553.740953][ T1356] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 553.773232][ T1356] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 553.773634][ T1356] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 553.773824][ T1356] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.883825][ T1356] usb 11-1: config 0 descriptor?? [ 554.123549][ T1356] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 554.229655][ T1356] usb 11-1: USB disconnect, device number 19 [ 554.826606][ T1356] usb 11-1: new high-speed USB device number 20 using dummy_hcd [ 555.034018][ T1356] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice= 1.00 [ 555.070457][ T1356] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 555.070695][ T1356] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 555.070710][ T1356] usb 11-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 0 [ 555.070725][ T1356] usb 11-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 555.125245][T11117] loop5: detected capacity change from 0 to 7 [ 555.132741][ T1356] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.132776][ T1356] usb 11-1: Product: syz [ 555.132802][ T1356] usb 11-1: Manufacturer: syz [ 555.132828][ T1356] usb 11-1: SerialNumber: syz [ 555.166234][T11117] Dev loop5: unable to read RDB block 7 [ 555.166302][T11117] loop5: unable to read partition table [ 555.171698][T11117] loop5: partition table beyond EOD, truncated [ 555.171817][T11117] loop_reread_partitions: partition scan of loop5 (þ被xü—ŸÑà– ) failed (rc=-5) [ 555.506900][ T1356] usb 11-1: USB disconnect, device number 20 [ 556.543054][ T44] audit: type=1400 audit(2000000094.449:1866): avc: denied { create } for pid=11109 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 556.590511][ T44] audit: type=1400 audit(2000000094.499:1867): avc: denied { write } for pid=11109 comm="syz.1.1638" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 559.141696][ T44] audit: type=1400 audit(2000000097.049:1868): avc: denied { write } for pid=11149 comm="syz.2.1648" name="uprobe_events" dev="tracefs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 559.159479][ T44] audit: type=1400 audit(2000000097.049:1869): avc: denied { open } for pid=11149 comm="syz.2.1648" path="/439/tracing/uprobe_events" dev="tracefs" ino=2051 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 559.374721][T11150] fuse: Bad value for 'fd' [ 559.460742][ T44] audit: type=1400 audit(2000000097.369:1870): avc: denied { ioctl } for pid=11149 comm="syz.2.1648" path="/439/tracing/uprobe_events" dev="tracefs" ino=2051 ioctlcmd=0xaa00 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 559.479347][T11150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1648'. [ 559.505230][T11150] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1648'. [ 559.700753][T11153] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1649'. [ 559.701055][T11153] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1649'. [ 560.506426][T11157] fuse: Bad value for 'fd' [ 561.195064][T11166] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1655'. [ 561.195140][T11166] netlink: 'syz.6.1655': attribute type 7 has an invalid length. [ 561.195173][T11166] netlink: 'syz.6.1655': attribute type 8 has an invalid length. [ 561.195208][T11166] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1655'. [ 561.323598][T11168] FAULT_INJECTION: forcing a failure. [ 561.323598][T11168] name failslab, interval 1, probability 0, space 0, times 0 [ 561.323746][T11168] CPU: 2 UID: 0 PID: 11168 Comm: syz.5.1656 Tainted: G L syzkaller #0 PREEMPT(full) [ 561.323768][T11168] Tainted: [L]=SOFTLOCKUP [ 561.323776][T11168] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 561.323786][T11168] Call Trace: [ 561.323801][T11168] [ 561.323818][T11168] dump_stack_lvl+0x100/0x190 [ 561.323906][T11168] should_fail_ex.cold+0x5/0xa [ 561.324053][T11168] should_failslab+0xc2/0x120 [ 561.324095][T11168] __kvmalloc_node_noprof+0x113/0x9b0 [ 561.324174][T11168] ? bucket_table_alloc.isra.0+0x88/0x460 [ 561.324348][T11168] bucket_table_alloc.isra.0+0x88/0x460 [ 561.324412][T11168] __rhashtable_init_noprof+0x43a/0x890 [ 561.324527][T11168] nft_rhash_init+0x14f/0x410 [ 561.324611][T11168] ? __pfx_nft_rhash_init+0x10/0x10 [ 561.324665][T11168] ? lockdep_hardirqs_on+0x7d/0x110 [ 561.324703][T11168] ? __pfx_nft_rhash_key+0x10/0x10 [ 561.324725][T11168] ? __pfx_nft_rhash_obj+0x10/0x10 [ 561.324750][T11168] ? __pfx_nft_rhash_cmp+0x10/0x10 [ 561.324775][T11168] ? nf_tables_newset+0x2b91/0x4250 [ 561.324816][T11168] ? kfree+0x22b/0x6d0 [ 561.324843][T11168] ? __asan_memcpy+0x3c/0x60 [ 561.325000][T11168] nf_tables_newset+0x30c1/0x4250 [ 561.325186][T11168] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 561.325260][T11168] ? __pfx_nf_tables_newset+0x10/0x10 [ 561.325318][T11168] ? trace_event_buffer_commit+0x20a/0xa80 [ 561.325365][T11168] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 561.325454][T11168] ? __nla_validate_parse+0x1e7/0x28b0 [ 561.325689][T11168] ? lock_acquire+0x1d1/0x380 [ 561.325734][T11168] ? net_generic+0x25/0x2a0 [ 561.325930][T11168] ? __nla_parse+0x40/0x60 [ 561.326059][T11168] nfnetlink_rcv_batch+0x1410/0x2880 [ 561.326384][T11168] ? __pfx_nfnetlink_rcv_batch+0x10/0x10 [ 561.326494][T11168] ? lock_acquire+0x1d1/0x380 [ 561.326532][T11168] ? avc_has_perm_noaudit+0x56/0x470 [ 561.326762][T11168] ? avc_has_perm_noaudit+0x145/0x470 [ 561.327278][T11168] ? __nla_parse+0x40/0x60 [ 561.327422][T11168] nfnetlink_rcv+0x3bd/0x440 [ 561.327499][T11168] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 561.327673][T11168] netlink_unicast+0x585/0x850 [ 561.327805][T11168] ? __pfx_netlink_unicast+0x10/0x10 [ 561.328027][T11168] netlink_sendmsg+0x8b0/0xda0 [ 561.328136][T11168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.328267][T11168] ? selinux_socket_sendmsg+0x198/0x2f0 [ 561.328397][T11168] ____sys_sendmsg+0xa4d/0xbe0 [ 561.328430][T11168] ? __pfx_netlink_sendmsg+0x10/0x10 [ 561.328544][T11168] ? __pfx_____sys_sendmsg+0x10/0x10 [ 561.328680][T11168] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 561.328858][T11168] ___sys_sendmsg+0x190/0x1e0 [ 561.328940][T11168] ? __pfx____sys_sendmsg+0x10/0x10 [ 561.328983][T11168] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 561.329244][T11168] ? find_held_lock+0x2b/0x80 [ 561.329615][T11168] __sys_sendmsg+0x160/0x210 [ 561.329724][T11168] ? __pfx___sys_sendmsg+0x10/0x10 [ 561.330038][T11168] do_syscall_64+0x123/0x790 [ 561.330133][T11168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.330172][T11168] RIP: 0033:0x7fd81059e199 [ 561.330234][T11168] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 561.330253][T11168] RSP: 002b:00007fd81139f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 561.330282][T11168] RAX: ffffffffffffffda RBX: 00007fd810825fa0 RCX: 00007fd81059e199 [ 561.330298][T11168] RDX: 0000000020050800 RSI: 00002000000000c0 RDI: 0000000000000004 [ 561.330314][T11168] RBP: 00007fd8106358e0 R08: 0000000000000000 R09: 0000000000000000 [ 561.330330][T11168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.330347][T11168] R13: 00007fd810826038 R14: 00007fd810825fa0 R15: 00007ffcf6b2c928 [ 561.330611][T11168] [ 562.330887][T11180] SET target dimension over the limit! [ 562.354271][ T44] audit: type=1400 audit(2000000100.249:1871): avc: denied { read } for pid=11179 comm="syz.1.1661" path="socket:[40754]" dev="sockfs" ino=40754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 562.670736][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.671158][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.350352][T11193] netlink: 'syz.6.1667': attribute type 5 has an invalid length. [ 563.807749][ T44] audit: type=1400 audit(2000000101.719:1872): avc: denied { bind } for pid=11190 comm="syz.6.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 563.836166][ T44] audit: type=1400 audit(2000000101.739:1873): avc: denied { setopt } for pid=11190 comm="syz.6.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 564.960959][T11209] IPVS: sed: TCP 127.0.0.1:21 - no destination available [ 564.997684][T11210] netlink: 'syz.5.1673': attribute type 1 has an invalid length. [ 565.207367][T11213] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1673'. [ 565.398255][T11203] syzkaller0: entered promiscuous mode [ 565.398298][T11203] syzkaller0: entered allmulticast mode [ 566.549442][T11212] bond2: (slave veth5): Enslaving as an active interface with a down link [ 566.570224][T11213] 8021q: adding VLAN 0 to HW filter on device bond2 [ 566.597767][T11216] gadgetfs: bound to dummy_udc driver [ 568.240246][T11225] FAULT_INJECTION: forcing a failure. [ 568.240246][T11225] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 568.240288][T11225] CPU: 1 UID: 0 PID: 11225 Comm: syz.1.1677 Tainted: G L syzkaller #0 PREEMPT(full) [ 568.240313][T11225] Tainted: [L]=SOFTLOCKUP [ 568.240325][T11225] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 568.240340][T11225] Call Trace: [ 568.240365][T11225] [ 568.240392][T11225] dump_stack_lvl+0x100/0x190 [ 568.240504][T11225] should_fail_ex.cold+0x5/0xa [ 568.240530][T11225] ? prepare_alloc_pages+0x16d/0x5b0 [ 568.240608][T11225] should_fail_alloc_page+0xeb/0x140 [ 568.240684][T11225] prepare_alloc_pages+0x1f0/0x5b0 [ 568.240830][T11225] __alloc_frozen_pages_noprof+0x1e9/0x3300 [ 568.240954][T11225] ? rb_read_data_buffer.isra.0+0x174/0x470 [ 568.241113][T11225] ? check_buffer+0x13f/0x820 [ 568.241149][T11225] ? __pfx_trace_clock_local+0x10/0x10 [ 568.241248][T11225] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 568.241446][T11225] ? __pfx_trace_clock_local+0x10/0x10 [ 568.241537][T11225] ? __rb_reserve_next.constprop.0+0x6f7/0x1640 [ 568.241780][T11225] ? ring_buffer_lock_reserve+0x4bb/0x1220 [ 568.241913][T11225] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.242029][T11225] ? policy_nodemask+0xed/0x4f0 [ 568.242101][T11225] alloc_pages_mpol+0x201/0x550 [ 568.242198][T11225] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 568.242282][T11225] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 568.242436][T11225] folio_alloc_mpol_noprof+0x36/0x260 [ 568.242572][T11225] vma_alloc_folio_noprof+0xed/0x1d0 [ 568.242669][T11225] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 568.242837][T11225] do_anonymous_page+0xac9/0x2050 [ 568.243045][T11225] ? __pfx_do_anonymous_page+0x10/0x10 [ 568.243076][T11225] ? rcu_read_unlock+0x2d/0xb0 [ 568.243114][T11225] ? rcu_read_unlock+0x2d/0xb0 [ 568.243169][T11225] ? __pte_offset_map+0x179/0x310 [ 568.243312][T11225] __handle_mm_fault+0x1ff3/0x2f60 [ 568.243476][T11225] ? __pfx___handle_mm_fault+0x10/0x10 [ 568.243626][T11225] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 568.243664][T11225] ? find_held_lock+0x2b/0x80 [ 568.243699][T11225] ? follow_page_pte+0x536/0x1050 [ 568.244031][T11225] handle_mm_fault+0x363/0xa20 [ 568.244206][T11225] __get_user_pages+0x8ae/0x2c30 [ 568.244459][T11225] ? __pfx___get_user_pages+0x10/0x10 [ 568.244752][T11225] faultin_page_range+0x1f1/0x9e0 [ 568.244789][T11225] ? lock_acquire+0x1d1/0x380 [ 568.244889][T11225] madvise_do_behavior+0x354/0x510 [ 568.245026][T11225] ? __pfx_madvise_do_behavior+0x10/0x10 [ 568.245090][T11225] ? down_read+0x13b/0x4c0 [ 568.245364][T11225] do_madvise+0x238/0x290 [ 568.245416][T11225] ? __pfx_do_madvise+0x10/0x10 [ 568.245473][T11225] ? do_futex+0x190/0x440 [ 568.246069][T11225] __x64_sys_madvise+0xa9/0x110 [ 568.246126][T11225] ? lockdep_hardirqs_on+0x7d/0x110 [ 568.246189][T11225] do_syscall_64+0x123/0x790 [ 568.246289][T11225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.246315][T11225] RIP: 0033:0x7fb91839e199 [ 568.246356][T11225] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 568.246372][T11225] RSP: 002b:00007fb9191e9028 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 568.246396][T11225] RAX: ffffffffffffffda RBX: 00007fb918625fa0 RCX: 00007fb91839e199 [ 568.246410][T11225] RDX: 0000000000000017 RSI: 0000000000c00000 RDI: 0000200000000000 [ 568.246426][T11225] RBP: 00007fb9184358e0 R08: 0000000000000000 R09: 0000000000000000 [ 568.246445][T11225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.246464][T11225] R13: 00007fb918626038 R14: 00007fb918625fa0 R15: 00007ffcfab04068 [ 568.246915][T11225] [ 569.771012][T11232] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1679'. [ 569.771046][T11232] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1679'. [ 576.533599][ T44] audit: type=1400 audit(2000000114.439:1874): avc: denied { ioctl } for pid=11277 comm="syz.2.1693" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1292 ioctlcmd=0x5881 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 577.071965][T11284] lo speed is unknown, defaulting to 1000 [ 577.074846][T11284] lo speed is unknown, defaulting to 1000 [ 577.112889][T11284] lo speed is unknown, defaulting to 1000 [ 577.135396][T11284] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 577.135434][T11284] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 577.135473][T11284] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 577.181414][T11284] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 577.287006][T11284] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 577.396364][ T44] audit: type=1804 audit(2000000115.299:1875): pid=11290 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.1695" name="/newroot/450/file1" dev="tmpfs" ino=2445 res=1 errno=0 [ 577.755740][T11284] lo speed is unknown, defaulting to 1000 [ 577.829457][T11284] lo speed is unknown, defaulting to 1000 [ 577.863173][T11284] lo speed is unknown, defaulting to 1000 [ 577.903738][T11284] lo speed is unknown, defaulting to 1000 [ 578.415991][T11302] Can't find a SQUASHFS superblock on nullb0 [ 578.548687][T11302] device-mapper: ioctl: Invalid ioctl structure: name U, dev 42744cd223460000 [ 578.655023][T11306] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1698'. [ 578.655222][T11306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1698'. [ 578.698547][T11306] netlink: 'syz.2.1698': attribute type 11 has an invalid length. [ 579.268414][ T44] audit: type=1400 audit(2000000117.179:1876): avc: denied { name_bind } for pid=11309 comm="syz.5.1701" src=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 579.340903][ T43] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 579.371341][ T43] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 579.673495][ T43] libceph: mon0 (2)127.0.0.1:6789 socket error on write [ 579.987041][T11310] ceph: No mds server is up or the cluster is laggy [ 581.025538][T11333] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1708'. [ 581.063715][T11332] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11332 comm=syz.5.1709 [ 581.851865][T11342] netlink: Unknown conntrack attr (0) [ 583.483581][T11360] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1719'. [ 583.489195][ T44] audit: type=1400 audit(2000000121.389:1877): avc: denied { write } for pid=11356 comm="syz.5.1718" name="/" dev="9p" ino=71827845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 583.545448][ T44] audit: type=1400 audit(2000000121.439:1878): avc: denied { write } for pid=11356 comm="syz.5.1718" name="/" dev="9p" ino=71827845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 583.548834][ T44] audit: type=1400 audit(2000000121.459:1879): avc: denied { create } for pid=11356 comm="syz.5.1718" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=sock_file permissive=1 [ 583.843408][T11367] 9pnet_virtio: no channels available for device syz [ 584.685248][T11370] FAULT_INJECTION: forcing a failure. [ 584.685248][T11370] name failslab, interval 1, probability 0, space 0, times 0 [ 584.685287][T11370] CPU: 2 UID: 0 PID: 11370 Comm: syz.5.1722 Tainted: G L syzkaller #0 PREEMPT(full) [ 584.685310][T11370] Tainted: [L]=SOFTLOCKUP [ 584.685321][T11370] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 584.685335][T11370] Call Trace: [ 584.685359][T11370] [ 584.685384][T11370] dump_stack_lvl+0x100/0x190 [ 584.685525][T11370] should_fail_ex.cold+0x5/0xa [ 584.685612][T11370] should_failslab+0xc2/0x120 [ 584.685668][T11370] __kmalloc_cache_noprof+0x91/0x6d0 [ 584.685716][T11370] ? sr_read_tochdr.isra.0+0x190/0x280 [ 584.685806][T11370] ? sr_read_tocentry.isra.0+0xad/0x540 [ 584.685943][T11370] sr_read_tocentry.isra.0+0xad/0x540 [ 584.685981][T11370] ? sr_read_tochdr.isra.0+0x1e4/0x280 [ 584.686030][T11370] ? __pfx_sr_read_tocentry.isra.0+0x10/0x10 [ 584.686305][T11370] sr_audio_ioctl+0x113/0x2f0 [ 584.686373][T11370] ? __pfx_sr_audio_ioctl+0x10/0x10 [ 584.686471][T11370] ? __pfx_scsi_test_unit_ready+0x10/0x10 [ 584.686677][T11370] cdrom_count_tracks+0x3e1/0x840 [ 584.686858][T11370] ? __pfx_cdrom_count_tracks+0x10/0x10 [ 584.686922][T11370] ? __pfx_sr_drive_status+0x10/0x10 [ 584.687124][T11370] ? __pfx_trace_event_raw_event_contention_end+0x10/0x10 [ 584.687298][T11370] cdrom_open+0xa8a/0x2760 [ 584.687467][T11370] ? __pfx_cdrom_open+0x10/0x10 [ 584.687568][T11370] ? rcu_is_watching+0x13/0xc0 [ 584.687688][T11370] ? trace_contention_end+0x126/0x160 [ 584.687758][T11370] ? __mutex_lock+0x26c/0x1bd0 [ 584.687824][T11370] ? sr_block_open+0xbc/0x180 [ 584.687938][T11370] ? lock_acquire+0x1d1/0x380 [ 584.688125][T11370] ? __pfx___mutex_lock+0x10/0x10 [ 584.688187][T11370] ? mark_held_locks+0x40/0x70 [ 584.688248][T11370] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.688373][T11370] ? __pfx_disk_check_media_change+0x10/0x10 [ 584.688416][T11370] ? lockdep_hardirqs_on+0x7d/0x110 [ 584.688473][T11370] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 584.688579][T11370] sr_block_open+0xc8/0x180 [ 584.688629][T11370] ? __pfx_sr_block_open+0x10/0x10 [ 584.688726][T11370] blkdev_get_whole+0x99/0x290 [ 584.688795][T11370] bdev_open+0x2c7/0xe40 [ 584.688970][T11370] blkdev_open+0x34e/0x4f0 [ 584.689075][T11370] do_dentry_open+0x6ab/0x14d0 [ 584.689113][T11370] ? __pfx_blkdev_open+0x10/0x10 [ 584.689305][T11370] vfs_open+0x82/0x3f0 [ 584.689407][T11370] path_openat+0x19fa/0x2440 [ 584.689573][T11370] ? __pfx_path_openat+0x10/0x10 [ 584.689654][T11370] ? trace_event_buffer_commit+0x20a/0xa80 [ 584.689793][T11370] do_file_open+0x20e/0x430 [ 584.689935][T11370] ? __pfx_do_file_open+0x10/0x10 [ 584.689957][T11370] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 584.690304][T11370] ? _raw_spin_unlock+0x28/0x50 [ 584.690344][T11370] ? alloc_fd+0x471/0x7a0 [ 584.690554][T11370] do_sys_openat2+0x10f/0x1e0 [ 584.690625][T11370] ? __pfx_do_sys_openat2+0x10/0x10 [ 584.690863][T11370] __x64_sys_openat+0x12d/0x210 [ 584.690960][T11370] ? __pfx___x64_sys_openat+0x10/0x10 [ 584.691195][T11370] do_syscall_64+0x123/0x790 [ 584.691326][T11370] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 584.691360][T11370] RIP: 0033:0x7fd81059e199 [ 584.691398][T11370] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 584.691418][T11370] RSP: 002b:00007fd81139f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.691450][T11370] RAX: ffffffffffffffda RBX: 00007fd810825fa0 RCX: 00007fd81059e199 [ 584.691461][T11370] RDX: 0000000000101000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 584.691472][T11370] RBP: 00007fd8106358e0 R08: 0000000000000000 R09: 0000000000000000 [ 584.691484][T11370] R10: 00000000000000f5 R11: 0000000000000246 R12: 0000000000000000 [ 584.691496][T11370] R13: 00007fd810826038 R14: 00007fd810825fa0 R15: 00007ffcf6b2c928 [ 584.691757][T11370] [ 584.830064][T11369] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 585.526339][ T5718] usb 11-1: new high-speed USB device number 21 using dummy_hcd [ 585.704291][ T5718] usb 11-1: Using ep0 maxpacket: 8 [ 585.727577][ T5718] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 585.747163][ T5718] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 585.747198][ T5718] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 585.747596][ T5718] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 585.747629][ T5718] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 585.749620][ T5718] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 586.029542][ T5718] hub 11-1:1.0: bad descriptor, ignoring hub [ 586.029647][ T5718] hub 11-1:1.0: probe with driver hub failed with error -5 [ 586.041351][ T5718] cdc_wdm 11-1:1.0: skipping garbage [ 586.041367][ T5718] cdc_wdm 11-1:1.0: skipping garbage [ 586.087626][ T5718] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 586.087660][ T5718] cdc_wdm 11-1:1.0: Unknown control protocol [ 586.647576][ T5718] usb 11-1: USB disconnect, device number 21 [ 587.178128][ T850] usb 11-1: new high-speed USB device number 22 using dummy_hcd [ 587.315355][T11392] overlayfs: failed to create directory ./file0/work (errno: 13); mounting read-only [ 587.315388][T11392] overlayfs: fs on '.' does not support file handles, falling back to index=off,nfs_export=off. [ 587.390549][ T850] usb 11-1: Using ep0 maxpacket: 8 [ 587.435173][ T850] usb 11-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 587.463551][ T850] usb 11-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 587.463591][ T850] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 587.463921][ T850] usb 11-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 587.464194][ T850] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 587.685645][ T850] hub 11-1:1.0: bad descriptor, ignoring hub [ 587.685761][ T850] hub 11-1:1.0: probe with driver hub failed with error -5 [ 587.716460][ T850] cdc_wdm 11-1:1.0: skipping garbage [ 587.716496][ T850] cdc_wdm 11-1:1.0: skipping garbage [ 587.716554][ T850] cdc_wdm 11-1:1.0: probe with driver cdc_wdm failed with error -22 [ 588.639956][ T5718] usb 11-1: USB disconnect, device number 22 [ 590.488064][T11410] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1735'. [ 590.950909][T11415] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1736'. [ 590.950931][T11415] tipc: Invalid UDP bearer configuration [ 590.951323][T11415] tipc: Enabling of bearer rejected, failed to enable media [ 591.008254][ T44] audit: type=1400 audit(2000000128.919:1880): avc: denied { write } for pid=11413 comm="syz.1.1736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 591.029251][T11415] tipc: Can't bind to reserved service type 0 [ 592.678893][T11425] fuse: Bad value for 'fd' [ 593.560299][T11433] fuse: Bad value for 'fd' [ 593.587213][ T10] usb 11-1: new high-speed USB device number 23 using dummy_hcd [ 593.777543][ T10] usb 11-1: Using ep0 maxpacket: 32 [ 593.786347][ T10] usb 11-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 593.806396][ T10] usb 11-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 593.841244][ T10] usb 11-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 593.841270][ T10] usb 11-1: Product: syz [ 593.841285][ T10] usb 11-1: Manufacturer: syz [ 593.841301][ T10] usb 11-1: SerialNumber: syz [ 593.951137][ T10] usb 11-1: config 0 descriptor?? [ 593.980319][T11431] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 594.038671][ T10] hub 11-1:0.0: bad descriptor, ignoring hub [ 594.038709][ T10] hub 11-1:0.0: probe with driver hub failed with error -5 [ 594.688442][ T5718] usb 10-1: new high-speed USB device number 14 using dummy_hcd [ 594.876478][ T5718] usb 10-1: Using ep0 maxpacket: 8 [ 594.886558][ T5718] usb 10-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 594.907055][ T5718] usb 10-1: config index 0 descriptor too short (expected 301, got 45) [ 594.907269][ T5718] usb 10-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 594.907287][ T5718] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 594.907306][ T5718] usb 10-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 594.907325][ T5718] usb 10-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 594.907473][ T5718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 595.329676][ T5718] usb 10-1: usb_control_msg returned -32 [ 595.330071][ T5718] usbtmc 10-1:16.0: can't read capabilities [ 595.373754][ T850] usb 11-1: USB disconnect, device number 23 [ 597.846965][ T5718] usb 10-1: USB disconnect, device number 14 [ 600.821620][ T44] audit: type=1400 audit(2000000138.729:1881): avc: denied { write } for pid=11477 comm="syz.5.1757" name="mtd0" dev="devtmpfs" ino=714 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=chr_file permissive=1 [ 601.169921][T11478] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1756'. [ 601.646159][T11486] tmpfs: Bad value for 'mpol' [ 601.796328][T11486] vxcan0: tx address claim with different name [ 602.105606][T11488] ip_tables: iptables: counters copy to user failed while replacing table [ 604.699795][ T44] audit: type=1400 audit(2000000142.609:1882): avc: denied { map } for pid=11511 comm="syz.2.1769" path="socket:[44414]" dev="sockfs" ino=44414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 604.704232][ T44] audit: type=1400 audit(2000000142.609:1883): avc: denied { read accept } for pid=11511 comm="syz.2.1769" path="socket:[44414]" dev="sockfs" ino=44414 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 604.822319][ T44] audit: type=1400 audit(2000000142.729:1884): avc: denied { write } for pid=11506 comm="syz.1.1766" name="/" dev="9p" ino=71827845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 604.824955][ T44] audit: type=1400 audit(2000000142.729:1885): avc: denied { unlink } for pid=11506 comm="syz.1.1766" name="file0" dev="9p" ino=71827979 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 604.871938][ T44] audit: type=1400 audit(2000000142.779:1886): avc: denied { write } for pid=11506 comm="syz.1.1766" name="/" dev="9p" ino=71827845 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 604.906990][T11513] program syz.2.1769 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 604.907114][T11513] ata1.00: invalid transfer count 0 [ 604.972176][ T5741] Bluetooth: hci3: unexpected event for opcode 0xffff [ 604.973627][ T5741] Bluetooth: hci3: unexpected event for opcode 0x0000 [ 604.989850][T11508] syzkaller0: entered promiscuous mode [ 604.989883][T11508] syzkaller0: entered allmulticast mode [ 605.991740][ T44] audit: type=1800 audit(2000000143.899:1887): pid=11521 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1770" name=08 dev="sda1" ino=2040 res=0 errno=0 [ 606.903448][ T44] audit: type=1400 audit(2000000144.809:1888): avc: denied { cmd } for pid=11522 comm="syz.5.1772" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=io_uring permissive=1 [ 606.904784][T11524] No fuse device found [ 607.250157][T11530] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1773'. [ 607.308228][T11530] unsupported nlmsg_type 40 [ 609.088838][T11523] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 610.239309][ T5718] usb 10-1: new high-speed USB device number 15 using dummy_hcd [ 610.430268][ T5718] usb 10-1: Using ep0 maxpacket: 8 [ 610.436224][ T5718] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 610.467680][ T5718] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 610.467700][ T5718] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 610.467928][ T5718] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 610.467951][ T5718] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 610.468029][ T5718] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 610.576809][ T5718] hub 10-1:1.0: bad descriptor, ignoring hub [ 610.576877][ T5718] hub 10-1:1.0: probe with driver hub failed with error -5 [ 610.587135][ T5718] cdc_wdm 10-1:1.0: skipping garbage [ 610.587153][ T5718] cdc_wdm 10-1:1.0: skipping garbage [ 610.635584][ T5718] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 610.635607][ T5718] cdc_wdm 10-1:1.0: Unknown control protocol [ 611.056241][ T5718] usb 11-1: new high-speed USB device number 24 using dummy_hcd [ 611.118268][ T10] usb 10-1: USB disconnect, device number 15 [ 611.250831][ T5718] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 611.284873][ T5718] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 611.285099][ T5718] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 611.285214][ T5718] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 611.488492][ T5718] usb 11-1: config 0 descriptor?? [ 611.594867][ T5718] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 611.781408][ T5718] usb 11-1: USB disconnect, device number 24 [ 611.956562][ T10] usb 10-1: new high-speed USB device number 16 using dummy_hcd [ 612.109306][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 612.131467][ T10] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 612.156640][ T10] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 612.156664][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 612.156870][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.157038][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.333342][ T10] hub 10-1:1.0: bad descriptor, ignoring hub [ 612.333385][ T10] hub 10-1:1.0: probe with driver hub failed with error -5 [ 612.348031][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 612.348048][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 612.348109][ T10] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 612.526134][ T43] usb 11-1: new high-speed USB device number 25 using dummy_hcd [ 612.719363][ T43] usb 11-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 612.764819][ T43] usb 11-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.765127][ T43] usb 11-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 612.765350][ T43] usb 11-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 612.826470][ T43] usb 11-1: config 0 descriptor?? [ 612.942220][ T43] usbhid 11-1:0.0: couldn't find an input interrupt endpoint [ 612.971428][ T1480] usb 10-1: USB disconnect, device number 16 [ 613.256427][ T5718] usb 11-1: USB disconnect, device number 25 [ 613.824520][ T5741] Bluetooth: hci2: unexpected event for opcode 0x040e [ 614.494068][T11579] vxcan0: tx address claim with dest, not broadcast [ 615.379693][T11581] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1787'. [ 615.624661][ T44] audit: type=1400 audit(2000000153.529:1889): avc: denied { read } for pid=11583 comm="syz.5.1789" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 615.935226][ T5741] Bluetooth: hci2: command 0x0406 tx timeout [ 616.326360][T11592] tmpfs: Bad value for 'mpol' [ 616.446335][ T9375] usb 11-1: new high-speed USB device number 26 using dummy_hcd [ 616.487553][T11590] vxcan0: tx address claim with different name [ 616.631357][ T9375] usb 11-1: Using ep0 maxpacket: 32 [ 616.639698][ T9375] usb 11-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 616.667045][ T9375] usb 11-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 616.667294][ T9375] usb 11-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 616.667312][ T9375] usb 11-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 616.667330][ T9375] usb 11-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 616.703678][ T9375] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 616.703704][ T9375] usb 11-1: Product: syz [ 616.703720][ T9375] usb 11-1: Manufacturer: syz [ 616.703736][ T9375] usb 11-1: SerialNumber: syz [ 617.054313][ C0] imon 11-1:155.0: imon usb_rx_callback_intf0: status(-71) [ 617.125449][ T5718] wiimote 0005:057E:0330.0003: hidraw1: BLUETOOTH HID v0.00 Device [syz1] on syz0 [ 617.132371][ T5718] wiimote 0005:057E:0330.0003: New device registered [ 617.207164][T11594] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 617.402088][ T44] audit: type=1400 audit(2000000155.309:1890): avc: denied { bind } for pid=11593 comm="syz.5.1792" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 617.447217][ T9375] input: iMON Panel, Knob and Mouse(15c2:ffdc) as /devices/platform/dummy_hcd.6/usb11/11-1/11-1:155.0/input/input9 [ 617.523445][T11593] wiimote 0005:057E:0330.0003: Device removed [ 617.706700][ T9375] imon 11-1:155.0: Unknown 0xffdc device, defaulting to VFD and iMON IR [ 617.706726][ T9375] (id 0x00) [ 617.809651][T11600] fido_id[11600]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 618.171366][ T9461] wiimote 0005:057E:0330.0003: detected device: Nintendo Wii Remote Plus (Gen 2) [ 618.250751][ T9375] rc_core: IR keymap rc-imon-pad not found [ 618.250780][ T9375] Registered IR keymap rc-empty [ 618.252309][ T9375] imon 11-1:155.0: Looks like you're trying to use an IR protocol this device does not support [ 618.252331][ T9375] imon 11-1:155.0: Unsupported IR protocol specified, overriding to iMON IR protocol [ 618.356382][T11604] tmpfs: Bad value for 'mpol' [ 618.372675][T11604] vxcan0: tx address claim with different name [ 618.899806][ T9461] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input12 [ 618.983975][ T9461] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input13 [ 619.311714][ T9461] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0003/input/input11 [ 619.464731][ T9375] imon:send_packet: packet tx failed (-71) [ 619.478424][ T9375] imon 11-1:155.0: remote input dev register failed [ 619.479729][ T9375] imon 11-1:155.0: imon_init_intf0: rc device setup failed [ 620.057214][ T9375] imon 11-1:155.0: unable to initialize intf0, err 0 [ 620.057235][ T9375] imon:imon_probe: failed to initialize context! [ 620.057249][ T9375] imon 11-1:155.0: unable to register, err -19 [ 620.130975][ T9375] usb 11-1: USB disconnect, device number 26 [ 620.279260][T11612] team0 (unregistering): Port device team_slave_0 removed [ 620.462412][T11612] team0 (unregistering): Port device team_slave_1 removed [ 620.536625][T11616] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1798'. [ 620.827934][T11620] tmpfs: Bad value for 'mpol' [ 621.580990][T11625] netlink: 'syz.2.1801': attribute type 1 has an invalid length. [ 622.912905][T11643] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1807'. [ 622.912936][T11643] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1807'. [ 623.194966][T11641] bond3: option xmit_hash_policy: invalid value (6) [ 623.231923][T11641] bond3 (unregistering): Released all slaves [ 623.608976][ T12] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.609099][ T12] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.609169][ T12] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 623.609253][ T12] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 624.112924][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.113915][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 625.011928][T11660] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1812'. [ 627.120007][T11672] tmpfs: Bad value for 'mpol' [ 627.233750][T11671] vxcan0: tx address claim with different name [ 627.956811][ T10] usb 10-1: new high-speed USB device number 17 using dummy_hcd [ 628.136398][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 628.140154][ T10] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 628.199429][ T10] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 628.199452][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 628.199669][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 100, changing to 10 [ 628.199688][ T10] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 24936, setting to 1024 [ 628.199819][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 628.326152][ T10] hub 10-1:1.0: bad descriptor, ignoring hub [ 628.326227][ T10] hub 10-1:1.0: probe with driver hub failed with error -5 [ 628.355766][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 628.355983][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 628.450371][ T10] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 628.450408][ T10] cdc_wdm 10-1:1.0: Unknown control protocol [ 628.567115][ T44] audit: type=1400 audit(2000000166.469:1891): avc: denied { write } for pid=11686 comm="syz.1.1821" name="cluster" dev="configfs" ino=1166 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 628.852238][ T10] usb 10-1: USB disconnect, device number 17 [ 629.557063][ T10] usb 10-1: new high-speed USB device number 18 using dummy_hcd [ 629.716291][ T10] usb 10-1: Using ep0 maxpacket: 8 [ 629.721582][ T10] usb 10-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 629.736532][ T10] usb 10-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 629.736569][ T10] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 629.736855][ T10] usb 10-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 629.737022][ T10] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.823938][ T10] hub 10-1:1.0: bad descriptor, ignoring hub [ 629.824036][ T10] hub 10-1:1.0: probe with driver hub failed with error -5 [ 629.830422][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 629.830441][ T10] cdc_wdm 10-1:1.0: skipping garbage [ 629.830501][ T10] cdc_wdm 10-1:1.0: probe with driver cdc_wdm failed with error -22 [ 630.176808][ T10] usb 10-1: USB disconnect, device number 18 [ 631.554517][ T44] audit: type=1400 audit(2000000169.459:1892): avc: denied { write } for pid=11705 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 632.317056][T11717] netlink: 'syz.2.1831': attribute type 4 has an invalid length. [ 632.317082][T11717] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1831'. [ 632.452667][T11717] FAULT_INJECTION: forcing a failure. [ 632.452667][T11717] name failslab, interval 1, probability 0, space 0, times 0 [ 632.452715][T11717] CPU: 1 UID: 0 PID: 11717 Comm: syz.2.1831 Tainted: G L syzkaller #0 PREEMPT(full) [ 632.452739][T11717] Tainted: [L]=SOFTLOCKUP [ 632.452752][T11717] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 632.452768][T11717] Call Trace: [ 632.452783][T11717] [ 632.452795][T11717] dump_stack_lvl+0x100/0x190 [ 632.452868][T11717] should_fail_ex.cold+0x5/0xa [ 632.452996][T11717] should_failslab+0xc2/0x120 [ 632.453093][T11717] kmem_cache_alloc_noprof+0x92/0x6a0 [ 632.453141][T11717] ? fib_trie_unmerge+0x220/0xbd0 [ 632.453276][T11717] fib_trie_unmerge+0x220/0xbd0 [ 632.453434][T11717] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 632.453600][T11717] ? lock_acquire+0x1d1/0x380 [ 632.453723][T11717] fib_unmerge+0xee/0x510 [ 632.453748][T11717] ? fib_nl2rule_locked+0x3ef/0x740 [ 632.453848][T11717] fib4_rule_configure+0xaba/0x1160 [ 632.453918][T11717] ? fib_nl2rule_locked+0x3fe/0x740 [ 632.454016][T11717] fib_newrule+0x3c3/0x1e50 [ 632.454266][T11717] ? __pfx_fib_newrule+0x10/0x10 [ 632.454285][T11717] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 632.454730][T11717] ? rtnetlink_rcv_msg+0x1f6/0xe90 [ 632.454808][T11717] ? find_held_lock+0x2b/0x80 [ 632.454837][T11717] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 632.454864][T11717] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 632.454934][T11717] ? __pfx_fib_nl_newrule+0x10/0x10 [ 632.455019][T11717] rtnetlink_rcv_msg+0x95e/0xe90 [ 632.455130][T11717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.455157][T11717] ? trace_event_buffer_commit+0x20a/0xa80 [ 632.455335][T11717] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 632.455452][T11717] netlink_rcv_skb+0x159/0x420 [ 632.455500][T11717] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 632.455585][T11717] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 632.455806][T11717] ? netlink_deliver_tap+0x1ae/0xcc0 [ 632.455990][T11717] netlink_unicast+0x585/0x850 [ 632.456105][T11717] ? __pfx_netlink_unicast+0x10/0x10 [ 632.456403][T11717] netlink_sendmsg+0x8b0/0xda0 [ 632.456594][T11717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.456702][T11717] ? selinux_socket_sendmsg+0x198/0x2f0 [ 632.456849][T11717] ____sys_sendmsg+0xa4d/0xbe0 [ 632.456895][T11717] ? __pfx_netlink_sendmsg+0x10/0x10 [ 632.456991][T11717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 632.457127][T11717] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 632.457286][T11717] ___sys_sendmsg+0x190/0x1e0 [ 632.457377][T11717] ? __pfx____sys_sendmsg+0x10/0x10 [ 632.457437][T11717] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 632.457715][T11717] ? find_held_lock+0x2b/0x80 [ 632.458095][T11717] __sys_sendmsg+0x160/0x210 [ 632.458157][T11717] ? __pfx___sys_sendmsg+0x10/0x10 [ 632.458482][T11717] do_syscall_64+0x123/0x790 [ 632.458616][T11717] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 632.458654][T11717] RIP: 0033:0x7f23e579e199 [ 632.458684][T11717] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 632.458698][T11717] RSP: 002b:00007f23e65c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 632.458717][T11717] RAX: ffffffffffffffda RBX: 00007f23e5a25fa0 RCX: 00007f23e579e199 [ 632.458729][T11717] RDX: 0000000000004000 RSI: 0000200000000100 RDI: 0000000000000004 [ 632.458741][T11717] RBP: 00007f23e58358e0 R08: 0000000000000000 R09: 0000000000000000 [ 632.458752][T11717] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 632.458763][T11717] R13: 00007f23e5a26038 R14: 00007f23e5a25fa0 R15: 00007ffc01577d98 [ 632.459026][T11717] [ 632.696486][ T44] audit: type=1400 audit(2000000170.589:1893): avc: denied { write } for pid=11718 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 633.181777][ T44] audit: type=1400 audit(2000000171.089:1894): avc: denied { ioctl } for pid=11724 comm="syz.1.1835" path="socket:[46070]" dev="sockfs" ino=46070 ioctlcmd=0x8983 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 633.583090][T11728] lo: entered promiscuous mode [ 633.622964][T11728] tunl0: entered promiscuous mode [ 633.743568][T11728] gre0: entered promiscuous mode [ 633.863919][T11728] gretap0: entered promiscuous mode [ 633.910496][T11728] erspan0: entered promiscuous mode [ 633.947192][T11728] ip_vti0: entered promiscuous mode [ 634.002410][T11728] ip6_vti0: entered promiscuous mode [ 634.065673][T11728] sit0: entered promiscuous mode [ 634.135023][T11728] ip6tnl0: entered promiscuous mode [ 634.162193][T11728] ip6gre0: entered promiscuous mode [ 634.206894][T11728] syz_tun: entered promiscuous mode [ 634.259053][T11728] ip6gretap0: entered promiscuous mode [ 634.335907][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 634.338876][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 634.349930][T11728] bridge0: entered promiscuous mode [ 634.400527][T11728] vcan0: entered promiscuous mode [ 634.430280][T11728] bond0: entered promiscuous mode [ 634.430311][T11728] bond_slave_0: entered promiscuous mode [ 634.432455][T11728] bond_slave_1: entered promiscuous mode [ 634.473928][T11728] team0: entered promiscuous mode [ 634.473952][T11728] team_slave_0: entered promiscuous mode [ 634.475489][T11728] team_slave_1: entered promiscuous mode [ 634.528945][T11728] dummy0: entered promiscuous mode [ 634.595071][T11728] nlmon0: entered promiscuous mode [ 634.618541][T11728] vxcan0: entered promiscuous mode [ 634.630898][T11728] vxcan1: entered promiscuous mode [ 634.642140][T11728] veth0: entered promiscuous mode [ 634.698305][T11728] veth1: entered promiscuous mode [ 634.745545][T11728] wg0: entered promiscuous mode [ 634.780395][T11728] wg1: entered promiscuous mode [ 634.811716][T11728] wg2: entered promiscuous mode [ 634.844752][T11728] veth0_to_bridge: entered promiscuous mode [ 634.941707][T11728] veth1_to_bridge: entered promiscuous mode [ 635.011603][T11728] veth0_to_bond: entered promiscuous mode [ 635.035396][T11728] veth1_to_bond: entered promiscuous mode [ 635.098509][T11728] veth0_to_team: entered promiscuous mode [ 635.153404][T11728] veth1_to_team: entered promiscuous mode [ 635.224554][T11728] veth0_to_batadv: entered promiscuous mode [ 635.271276][T11728] batadv_slave_0: entered promiscuous mode [ 635.304621][T11728] veth1_to_batadv: entered promiscuous mode [ 635.327091][T11728] batadv_slave_1: entered promiscuous mode [ 635.352419][T11728] xfrm0: entered promiscuous mode [ 635.392223][T11728] veth0_to_hsr: entered promiscuous mode [ 635.447139][T11728] veth1_to_hsr: entered promiscuous mode [ 635.496919][T11728] veth1_virt_wifi: entered promiscuous mode [ 635.523041][T11728] veth0_virt_wifi: entered promiscuous mode [ 635.552266][T11728] virt_wifi0: entered promiscuous mode [ 635.625920][T11728] vlan0: entered promiscuous mode [ 635.657244][T11728] vlan1: entered promiscuous mode [ 635.684839][T11728] macvlan0: entered promiscuous mode [ 635.737770][T11728] macvlan1: entered promiscuous mode [ 635.793660][T11728] ipvlan0: entered promiscuous mode [ 635.795452][T11728] ipvlan1: entered promiscuous mode [ 635.915138][T11728] macvtap0: entered promiscuous mode [ 635.961157][T11728] macsec0: entered promiscuous mode [ 635.982614][T11728] geneve0: entered promiscuous mode [ 636.030293][T11728] geneve1: entered promiscuous mode [ 636.075262][T11728] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 636.121231][T11728] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 636.151759][T11728] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 636.243697][T11728] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 636.290012][T11728] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 636.291685][T11728] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 636.293330][T11728] ip6tnl1: entered promiscuous mode [ 636.294851][T11728] bond1: entered promiscuous mode [ 636.299843][T11728] ipip0: entered promiscuous mode [ 636.306618][T11728] bond2: entered promiscuous mode [ 636.306650][T11728] geneve2: entered promiscuous mode [ 636.318749][T11728] ip6gre1: left allmulticast mode [ 636.340035][T11728] vxlan0: entered promiscuous mode [ 636.362208][T11728] vxlan1: entered promiscuous mode [ 636.363708][ T5805] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.363731][ T5805] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.363748][ T5805] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20004 - 0 [ 636.363874][ T12] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.363911][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.363940][ T12] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20004 - 0 [ 636.364100][ T12] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.364129][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.364158][ T12] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20004 - 0 [ 636.364366][ T12] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 636.364395][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 636.364421][ T12] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20004 - 0 [ 636.892321][T11738] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 637.651012][ T44] audit: type=1400 audit(2000000175.559:1895): avc: denied { write } for pid=11747 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 637.704888][ T7334] IPVS: starting estimator thread 0... [ 637.811204][T11757] IPVS: using max 4 ests per chain, 9600 per kthread [ 637.843319][T11753] IPVS: rr: FWM 3 0x00000003 - no destination available [ 638.259462][T10644] Bluetooth: hci4: status 0x02 [ 638.259492][T10644] Bluetooth: hci4: unexpected event for opcode 0x0c03 [ 638.639021][ T44] audit: type=1400 audit(2000000176.549:1896): avc: denied { write } for pid=11761 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 639.385371][ T44] audit: type=1400 audit(2000000177.279:1897): avc: denied { write } for pid=11772 comm="syz.5.1851" name="nullb" dev="configfs" ino=5740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 639.631926][T11777] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 639.632571][T11777] , id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0, id/val=0x0/0x0 [ 640.591872][ T44] audit: type=1400 audit(2000000178.429:1898): avc: denied { write } for pid=11780 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.110874][T11784] null_blk: disk nullb1 created [ 641.573445][ T44] audit: type=1400 audit(2000000179.479:1899): avc: denied { write } for pid=11796 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 641.982704][T11801] FAULT_INJECTION: forcing a failure. [ 641.982704][T11801] name failslab, interval 1, probability 0, space 0, times 0 [ 641.982763][T11801] CPU: 0 UID: 0 PID: 11801 Comm: syz.1.1859 Tainted: G L syzkaller #0 PREEMPT(full) [ 641.982797][T11801] Tainted: [L]=SOFTLOCKUP [ 641.982812][T11801] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 641.982830][T11801] Call Trace: [ 641.982862][T11801] [ 641.982888][T11801] dump_stack_lvl+0x100/0x190 [ 641.983018][T11801] should_fail_ex.cold+0x5/0xa [ 641.983106][T11801] should_failslab+0xc2/0x120 [ 641.983163][T11801] kmem_cache_alloc_noprof+0x92/0x6a0 [ 641.983240][T11801] ? mas_preallocate+0xc22/0xee0 [ 641.983384][T11801] mas_preallocate+0xc22/0xee0 [ 641.983547][T11801] ? __pfx_mas_preallocate+0x10/0x10 [ 641.983850][T11801] ? anon_vma_name+0x5a/0x250 [ 641.984146][T11801] __split_vma+0x2f8/0x1de0 [ 641.984260][T11801] ? rb_commit+0x129/0x9d0 [ 641.984313][T11801] ? __pfx___split_vma+0x10/0x10 [ 641.984531][T11801] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 641.984666][T11801] vms_gather_munmap_vmas+0x1d2/0x1720 [ 641.984821][T11801] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 641.984918][T11801] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 641.985002][T11801] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 641.985154][T11801] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 641.985329][T11801] do_vmi_align_munmap+0x287/0x5f0 [ 641.985416][T11801] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 641.986056][T11801] ? mas_walk+0x260/0x310 [ 641.986218][T11801] do_vmi_munmap+0x1f8/0x3e0 [ 641.986425][T11801] unmap_source_vma+0x35c/0x8f0 [ 641.986547][T11801] ? __pfx_unmap_source_vma+0x10/0x10 [ 641.986796][T11801] ? __vm_enough_memory+0x184/0x390 [ 641.986830][T11801] ? vm_stat_account+0x162/0x190 [ 641.986957][T11801] move_vma+0x630/0x12e0 [ 641.987109][T11801] ? __pfx_move_vma+0x10/0x10 [ 641.987159][T11801] ? selinux_mmap_addr+0x2b/0x110 [ 641.987212][T11801] ? security_mmap_addr+0x71/0x1e0 [ 641.987274][T11801] ? __get_unmapped_area+0x255/0x3e0 [ 641.987407][T11801] ? vrm_set_new_addr+0x1f5/0x2a0 [ 641.987501][T11801] mremap_to+0x234/0x4c0 [ 641.987598][T11801] ? __pfx_mremap_to+0x10/0x10 [ 641.987668][T11801] ? mas_walk+0x260/0x310 [ 641.987781][T11801] __do_sys_mremap+0x99f/0x1780 [ 641.987870][T11801] ? futex_wait+0xe0/0x370 [ 641.988016][T11801] ? __pfx___do_sys_mremap+0x10/0x10 [ 641.988323][T11801] ? __pfx_do_futex+0x10/0x10 [ 641.988396][T11801] ? fd_install+0x223/0x580 [ 641.988595][T11801] ? __sys_socket+0xac/0x260 [ 641.988663][T11801] ? xfd_validate_state+0x129/0x190 [ 641.988896][T11801] do_syscall_64+0x123/0x790 [ 641.989031][T11801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.989079][T11801] RIP: 0033:0x7fb91839e199 [ 641.989111][T11801] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 641.989125][T11801] RSP: 002b:00007fb9191e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 641.989144][T11801] RAX: ffffffffffffffda RBX: 00007fb918625fa0 RCX: 00007fb91839e199 [ 641.989154][T11801] RDX: 0000000000003021 RSI: 0000000000004000 RDI: 0000200000001000 [ 641.989165][T11801] RBP: 00007fb9184358e0 R08: 0000200000ffd000 R09: 0000000000000000 [ 641.989176][T11801] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 641.989187][T11801] R13: 00007fb918626038 R14: 00007fb918625fa0 R15: 00007ffcfab04068 [ 641.989448][T11801] [ 642.003625][T11806] netlink: 'syz.5.1860': attribute type 30 has an invalid length. [ 642.056179][ T10] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 642.335646][ T10] usb 7-1: New USB device found, idVendor=0424, idProduct=274e, bcdDevice= 1.00 [ 642.357783][ T10] usb 7-1: config 1 interface 1 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 642.357802][ T10] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 642.357913][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 642.567401][ T10] cdc_acm 7-1:1.0: probe with driver cdc_acm failed with error -12 [ 642.693103][ T10] cdc_acm 7-1:1.1: Zero length descriptor references [ 642.693164][ T10] cdc_acm 7-1:1.1: probe with driver cdc_acm failed with error -22 [ 643.029788][ T44] audit: type=1400 audit(2000000180.939:1900): avc: denied { map } for pid=11808 comm="syz.6.1861" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 643.285472][ T44] audit: type=1400 audit(2000000181.189:1901): avc: denied { write } for pid=11812 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 643.855178][ T44] audit: type=1400 audit(2000000181.759:1902): avc: denied { read } for pid=11818 comm="syz.6.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 644.294648][ T44] audit: type=1400 audit(2000000182.199:1903): avc: denied { write } for pid=11823 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 645.431201][T11830] netlink: 'syz.1.1865': attribute type 4 has an invalid length. [ 645.524453][ T44] audit: type=1400 audit(2000000183.429:1904): avc: denied { setopt } for pid=11828 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 645.637078][ T44] audit: type=1400 audit(2000000183.539:1905): avc: denied { bind } for pid=11828 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 645.651584][ T44] audit: type=1400 audit(2000000183.559:1906): avc: denied { write } for pid=11828 comm="syz.1.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 645.794025][ T44] audit: type=1400 audit(2000000183.699:1907): avc: denied { write } for pid=11827 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.023833][ T44] audit: type=1400 audit(2000000184.929:1908): avc: denied { write } for pid=11838 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 647.083466][T11842] bridge0: port 3(vlan2) entered blocking state [ 647.084597][T11842] bridge0: port 3(vlan2) entered disabled state [ 647.085319][T11842] vlan2: entered allmulticast mode [ 647.110772][T11842] vlan2: entered promiscuous mode [ 647.247312][T11843] netlink: 'syz.6.1869': attribute type 10 has an invalid length. [ 648.243742][ T10] usb 7-1: USB disconnect, device number 27 [ 648.711292][ T44] audit: type=1400 audit(2000000186.609:1909): avc: denied { write } for pid=11847 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 648.905318][T11859] input: syz0 as /devices/virtual/input/input14 [ 649.505533][T11853] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.507899][T11853] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.550542][ T44] audit: type=1400 audit(2000000187.459:1910): avc: denied { write } for pid=11864 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 649.616173][ C3] net_ratelimit: 43 callbacks suppressed [ 649.735686][T11867] hub 6-0:1.0: USB hub found [ 649.745921][T11867] hub 6-0:1.0: 1 port detected [ 650.678375][T11873] sr 2:0:0:0: [sr0] CDROM not ready. Make sure there is a disc in the drive. [ 650.761284][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 650.852278][T11853] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 652.178121][ T5805] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.178201][ T5805] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.178301][ T5805] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.178425][ T5805] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 652.783546][T11894] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 653.532432][T11897] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 653.677432][T11899] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1886'. [ 654.806977][ C3] net_ratelimit: 34 callbacks suppressed [ 655.483983][T11919] bridge0: port 4(syz_tun) entered blocking state [ 655.486424][T11919] bridge0: port 4(syz_tun) entered disabled state [ 655.487482][T11919] syz_tun: entered allmulticast mode [ 655.522163][T11919] syz_tun: entered promiscuous mode [ 655.538711][T11919] bridge0: port 4(syz_tun) entered blocking state [ 655.540192][T11919] bridge0: port 4(syz_tun) entered forwarding state [ 656.065470][ T1480] libceph: connect (1)127.0.0.1:6789 error -101 [ 656.070692][ T1480] libceph: mon0 (1)127.0.0.1:6789 connect error [ 656.084383][ T1480] libceph: connect (1)127.0.0.1:6789 error -101 [ 656.090229][ T1480] libceph: mon0 (1)127.0.0.1:6789 connect error [ 656.353106][ T1480] libceph: connect (1)127.0.0.1:6789 error -101 [ 656.358208][ T1480] libceph: mon0 (1)127.0.0.1:6789 connect error [ 656.802535][T11924] ceph: No mds server is up or the cluster is laggy [ 656.868035][ T1480] libceph: connect (1)127.0.0.1:6789 error -101 [ 656.869582][ T1480] libceph: mon0 (1)127.0.0.1:6789 connect error [ 657.914511][ T850] libceph: connect (2)127.0.0.1:6789 error -101 [ 657.916109][ T850] libceph: ceph_tcp_connect failed: -101 [ 657.916148][ T850] libceph: mon0 (2)127.0.0.1:6789 connect error [ 657.968274][T10644] Bluetooth: hci1: ACL packet for unknown connection handle 200 [ 658.011962][ T850] libceph: connect (1)127.0.0.1:6789 error -101 [ 658.013619][ T850] libceph: mon0 (1)127.0.0.1:6789 connect error [ 658.019043][ T850] libceph: connect (1)127.0.0.1:6789 error -101 [ 658.020540][ T850] libceph: mon0 (1)127.0.0.1:6789 connect error [ 658.180925][ T850] libceph: connect (2)127.0.0.1:6789 error -101 [ 658.185611][ T850] libceph: ceph_tcp_connect failed: -101 [ 658.185646][ T850] libceph: mon0 (2)127.0.0.1:6789 connect error [ 658.278515][ T850] libceph: connect (1)127.0.0.1:6789 error -101 [ 658.285371][ T850] libceph: mon0 (1)127.0.0.1:6789 connect error [ 658.402134][T11941] ceph: No mds server is up or the cluster is laggy [ 658.409195][T11943] ceph: No mds server is up or the cluster is laggy [ 659.238529][T11957] Bluetooth: ISO socket layer initialized [ 659.357246][T11925] infiniband syz2: set active [ 659.357264][T11925] infiniband syz2: added bond_slave_1 [ 659.364732][ T44] audit: type=1400 audit(2000000197.269:1911): avc: denied { write } for pid=11958 comm="syz.2.1907" name="usb_gadget" dev="configfs" ino=5078 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 659.395965][T11925] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 659.410647][ T44] audit: type=1400 audit(2000000197.319:1912): avc: denied { write } for pid=11958 comm="syz.2.1907" name="functions" dev="configfs" ino=47295 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 659.421071][T11925] infiniband syz2: Couldn't open port 1 [ 659.422904][T11925] smbdirect: ib_dev[syz2]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 659.422930][T11925] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 659.422962][T11925] smbdirect: ib_dev[syz2]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 659.810354][T11925] RDS/IB: syz2: added [ 659.818524][T11925] smc: adding ib device syz2 with port count 1 [ 659.819207][T11925] smc: ib device syz2 port 1 has no pnetid [ 659.937127][ T7334] net_ratelimit: 28 callbacks suppressed [ 660.132281][T11966] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 660.158717][T11967] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 660.158988][T11967] block device autoloading is deprecated and will be removed. [ 660.169054][T11969] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 660.437227][ T1356] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 660.602604][ T1356] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 660.606285][ T1356] usb 7-1: config 0 has no interfaces? [ 660.623703][ T1356] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 660.623719][ T1356] usb 7-1: Product: syz [ 660.623732][ T1356] usb 7-1: Manufacturer: syz [ 660.623745][ T1356] usb 7-1: SerialNumber: syz [ 660.680012][ T1356] usb 7-1: config 0 descriptor?? [ 660.802230][T11974] netlink: 'syz.1.1910': attribute type 39 has an invalid length. [ 661.776397][T11976] md/raid1:md0: active with 1 out of 2 mirrors [ 661.789645][T11976] md0: detected capacity change from 0 to 2048 [ 662.202601][T11981] netlink: 'syz.1.1911': attribute type 1 has an invalid length. [ 663.240389][ T1480] usb 7-1: USB disconnect, device number 28 [ 663.585283][T11990] xt_hashlimit: size too large, truncated to 1048576 [ 663.704768][T11991] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1915'. [ 664.561295][T12003] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1920'. [ 665.155757][T12007] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1921'. [ 665.216377][ C3] net_ratelimit: 127 callbacks suppressed [ 670.246883][ C0] net_ratelimit: 22 callbacks suppressed [ 670.341923][T12052] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1944'. [ 670.413846][ T44] audit: type=1400 audit(2000000208.319:1913): avc: denied { mount } for pid=12050 comm="syz.2.1944" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 670.434613][ T44] audit: type=1400 audit(2000000208.329:1914): avc: denied { search } for pid=12050 comm="syz.2.1944" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 670.443511][ T44] audit: type=1400 audit(2000000208.339:1915): avc: denied { read write } for pid=12050 comm="syz.2.1944" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 670.446196][ T44] audit: type=1400 audit(2000000208.349:1916): avc: denied { open } for pid=12050 comm="syz.2.1944" path="/519/nfsd/portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 670.526990][T12053] netlink: 'syz.2.1944': attribute type 4 has an invalid length. [ 671.064897][T12060] netlink: 'syz.1.1946': attribute type 10 has an invalid length. [ 671.225466][T12060] bridge0: port 4(syz_tun) entered disabled state [ 671.239164][T12060] syz_tun: left allmulticast mode [ 671.241324][T12060] bridge0: port 4(syz_tun) entered disabled state [ 671.494029][ T44] audit: type=1400 audit(2000000209.399:1917): avc: denied { unmount } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 671.567369][T12062] syz_tun: left promiscuous mode [ 671.571316][ T5737] svc: failed to register nfsdv3 RPC service (errno 101). [ 671.630116][ T5737] svc: failed to register nfsaclv3 RPC service (errno 101). [ 671.630146][ T5737] failed to unregister tcp with rpcbind [ 671.651776][T12062] A link change request failed with some changes committed already. Interface veth0 may have been left with an inconsistent configuration, please check. [ 671.674662][ T5737] svc: failed to register nfsdv3 RPC service (errno 97). [ 671.674718][ T5737] svc: failed to register nfsaclv3 RPC service (errno 97). [ 671.674742][ T5737] failed to unregister tcp with rpcbind [ 672.288397][T12067] comedi comedi0: 8255: I/O base address not correctly aligned [ 672.545024][ T5741] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 672.553477][T12073] netlink: 'syz.6.1951': attribute type 10 has an invalid length. [ 672.555364][ T5741] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 672.565345][ T5741] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 672.577903][ T5741] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 672.584012][ T5741] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 675.606001][ C3] net_ratelimit: 13 callbacks suppressed [ 677.144291][T12070] lo speed is unknown, defaulting to 1000 [ 679.031514][T10877] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 679.733942][T10877] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.317342][T10877] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.656624][T10877] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 680.806381][ C3] net_ratelimit: 71 callbacks suppressed [ 683.572075][T10877] bridge_slave_1: left allmulticast mode [ 683.572097][T10877] bridge_slave_1: left promiscuous mode [ 683.573310][T10877] bridge0: port 2(bridge_slave_1) entered disabled state [ 683.647050][T10877] bridge_slave_0: left allmulticast mode [ 683.647069][T10877] bridge_slave_0: left promiscuous mode [ 683.648223][T10877] bridge0: port 1(bridge_slave_0) entered disabled state [ 685.550869][ T1441] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.551152][ T1441] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.006648][ C3] net_ratelimit: 32 callbacks suppressed [ 686.116951][T10877] bond0 (unregistering): left promiscuous mode [ 686.116983][T10877] bond_slave_0: left promiscuous mode [ 686.118960][T10877] bond_slave_1: left promiscuous mode [ 686.206326][T10877] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 686.346728][T10877] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 686.424513][T10877] bond0 (unregistering): Released all slaves [ 686.759533][T10877] bond1 (unregistering): (slave veth3): Releasing active interface [ 686.863132][T10877] bond1 (unregistering): Released all slaves [ 687.271812][T10877] bond2 (unregistering): (slave veth5): Releasing active interface [ 687.355213][T10877] bond2 (unregistering): Released all slaves [ 687.543284][T10877] bond3 (unregistering): Released all slaves [ 688.566835][T10877] : left promiscuous mode [ 688.573349][ T5718] syz2: Port: 1 Link DOWN [ 690.996829][ T44] audit: type=1400 audit(2000000228.899:1918): avc: denied { write } for pid=12208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 691.216045][ C3] net_ratelimit: 32 callbacks suppressed [ 693.330674][ T44] audit: type=1400 audit(2000000231.229:1919): avc: denied { write } for pid=12225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 693.516499][T12070] bridge0: port 1(bridge_slave_0) entered blocking state [ 693.519135][T12070] bridge0: port 1(bridge_slave_0) entered disabled state [ 693.519983][T12070] bridge_slave_0: entered allmulticast mode [ 693.677116][T12070] bridge_slave_0: entered promiscuous mode [ 693.800705][T12070] bridge0: port 2(bridge_slave_1) entered blocking state [ 693.805399][T12070] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.812062][T12070] bridge_slave_1: entered allmulticast mode [ 693.970430][T12070] bridge_slave_1: entered promiscuous mode [ 695.166963][T10877] batadv0: left promiscuous mode [ 695.239708][T10877] hsr_slave_0: left promiscuous mode [ 695.268323][T10877] hsr_slave_1: left promiscuous mode [ 695.290868][T10877] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 695.290915][T10877] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 695.327128][T10877] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 695.327164][T10877] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 695.431766][T10877] veth1_macvtap: left promiscuous mode [ 695.432062][T10877] veth1_vlan: left promiscuous mode [ 697.048321][ T7329] net_ratelimit: 39 callbacks suppressed [ 699.117833][T10877] team0 (unregistering): Port device team_slave_1 removed [ 699.255370][T10877] team0 (unregistering): Port device team_slave_0 removed [ 699.500567][ T47] smc: removing ib device syz2 [ 701.271409][ T5442] 8021q: adding VLAN 0 to HW filter on device eth10 [ 701.350718][T12070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 701.423708][T12070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 701.695017][ T47] smbdirect: ib_dev[syz2] removed [ 702.339415][T12070] team0: Port device team_slave_0 added [ 702.452972][T12070] team0: Port device team_slave_1 added [ 702.806275][ T1164] net_ratelimit: 30 callbacks suppressed [ 703.603929][ T44] audit: type=1400 audit(2000000241.509:1920): avc: denied { write } for pid=12303 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 704.223340][T12070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 704.223356][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.223378][T12070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 704.310168][T12070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 704.310178][T12070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 704.310194][T12070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 704.546912][ T44] audit: type=1400 audit(2000000242.439:1921): avc: denied { write } for pid=12313 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 705.677477][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 706.621080][T12070] hsr_slave_0: entered promiscuous mode [ 706.660262][T12070] hsr_slave_1: entered promiscuous mode [ 706.681227][T12070] debugfs: 'hsr0' already exists in 'hsr' [ 706.681287][T12070] Cannot create hsr debugfs directory [ 707.947777][ T7334] net_ratelimit: 20 callbacks suppressed [ 710.708279][ T44] audit: type=1400 audit(2000000248.599:1922): avc: denied { write } for pid=12356 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 711.962067][ T44] audit: type=1400 audit(2000000249.859:1923): avc: denied { write } for pid=12367 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 713.056795][ T1159] net_ratelimit: 30 callbacks suppressed [ 713.951769][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 714.442626][T12386] syz_tun: entered allmulticast mode [ 714.858936][T12388] pimreg: entered allmulticast mode [ 715.320841][T12381] syz_tun: left allmulticast mode [ 716.013106][T12070] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 716.288171][T12070] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 716.302396][T12070] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 716.463404][T12070] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 716.481911][T12070] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 716.625423][T12070] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 716.644454][T12070] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 716.806973][T12070] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 717.629582][T10877] IPVS: stop unused estimator thread 0... [ 717.908598][ T44] audit: type=1400 audit(2000000255.809:1924): avc: denied { write } for pid=12406 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 718.176360][ T1159] net_ratelimit: 20 callbacks suppressed [ 719.504268][ T44] audit: type=1400 audit(2000000257.409:1925): avc: denied { write } for pid=12421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 719.676453][T12070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 719.958008][T12070] 8021q: adding VLAN 0 to HW filter on device team0 [ 720.132649][ T1164] bridge0: port 1(bridge_slave_0) entered blocking state [ 720.133629][ T1164] bridge0: port 1(bridge_slave_0) entered forwarding state [ 720.369480][ T1164] bridge0: port 2(bridge_slave_1) entered blocking state [ 720.370809][ T1164] bridge0: port 2(bridge_slave_1) entered forwarding state [ 721.731813][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 723.207106][ C3] net_ratelimit: 21 callbacks suppressed [ 724.746229][T12468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.588507][T12484] FAULT_INJECTION: forcing a failure. [ 726.588507][T12484] name failslab, interval 1, probability 0, space 0, times 0 [ 726.588545][T12484] CPU: 1 UID: 0 PID: 12484 Comm: syz.1.2106 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.588568][T12484] Tainted: [L]=SOFTLOCKUP [ 726.588578][T12484] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 726.588591][T12484] Call Trace: [ 726.588614][T12484] [ 726.588641][T12484] dump_stack_lvl+0x100/0x190 [ 726.588780][T12484] should_fail_ex.cold+0x5/0xa [ 726.588855][T12484] should_failslab+0xc2/0x120 [ 726.588915][T12484] __kmalloc_cache_noprof+0x91/0x6d0 [ 726.588995][T12484] ? eventfs_create_dir+0x70/0x5c0 [ 726.589158][T12484] eventfs_create_dir+0x70/0x5c0 [ 726.589323][T12484] event_create_dir+0x67b/0xd50 [ 726.589464][T12484] __trace_add_new_event+0x97/0xf0 [ 726.589547][T12484] trace_add_event_call+0xd7/0x180 [ 726.589639][T12484] trace_probe_register_event_call+0x32a/0x510 [ 726.589762][T12484] __trace_uprobe_create+0x1891/0x2310 [ 726.589999][T12484] ? __pfx___trace_uprobe_create+0x10/0x10 [ 726.590025][T12484] ? trace_kmalloc+0xeb/0x110 [ 726.590061][T12484] ? __kasan_kmalloc+0xaa/0xb0 [ 726.590132][T12484] ? __kmalloc_noprof+0x350/0x840 [ 726.590206][T12484] ? argv_split+0x173/0x420 [ 726.590339][T12484] ? argv_split+0x359/0x420 [ 726.590403][T12484] ? __pfx___trace_uprobe_create+0x10/0x10 [ 726.590475][T12484] trace_probe_create+0xef/0x100 [ 726.590550][T12484] ? __pfx_trace_probe_create+0x10/0x10 [ 726.590701][T12484] dyn_event_create+0x50/0x90 [ 726.590763][T12484] create_or_delete_trace_uprobe+0x5a/0xb0 [ 726.590838][T12484] trace_parse_run_command+0x1ab/0x3b0 [ 726.590886][T12484] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 726.590976][T12484] vfs_write+0x2aa/0x1050 [ 726.591055][T12484] ? __pfx_probes_write+0x10/0x10 [ 726.591103][T12484] ? lock_acquire+0x1d1/0x380 [ 726.591154][T12484] ? __fget_files+0x34/0x3d0 [ 726.591228][T12484] ? __pfx_vfs_write+0x10/0x10 [ 726.591247][T12484] ? find_held_lock+0x2b/0x80 [ 726.591290][T12484] ? __fget_files+0x215/0x3d0 [ 726.591432][T12484] ? __fget_files+0x21f/0x3d0 [ 726.591616][T12484] ksys_write+0x12a/0x250 [ 726.591680][T12484] ? __pfx_ksys_write+0x10/0x10 [ 726.591873][T12484] do_syscall_64+0x123/0x790 [ 726.591978][T12484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.592019][T12484] RIP: 0033:0x7fb91839e199 [ 726.592086][T12484] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.592106][T12484] RSP: 002b:00007fb9191e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 726.592130][T12484] RAX: ffffffffffffffda RBX: 00007fb918625fa0 RCX: 00007fb91839e199 [ 726.592139][T12484] RDX: 000000000000000f RSI: 0000200000000500 RDI: 0000000000000007 [ 726.592149][T12484] RBP: 00007fb9184358e0 R08: 0000000000000000 R09: 0000000000000000 [ 726.592158][T12484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 726.592168][T12484] R13: 00007fb918626038 R14: 00007fb918625fa0 R15: 00007ffcfab04068 [ 726.592443][T12484] [ 726.593927][T12484] Failed to create system directory s [ 726.680606][T12485] FAULT_INJECTION: forcing a failure. [ 726.680606][T12485] name fail_futex, interval 1, probability 0, space 0, times 0 [ 726.680667][T12485] CPU: 1 UID: 0 PID: 12485 Comm: syz.2.2105 Tainted: G L syzkaller #0 PREEMPT(full) [ 726.680702][T12485] Tainted: [L]=SOFTLOCKUP [ 726.680719][T12485] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 726.680743][T12485] Call Trace: [ 726.680786][T12485] [ 726.680828][T12485] dump_stack_lvl+0x100/0x190 [ 726.680956][T12485] should_fail_ex.cold+0x5/0xa [ 726.681130][T12485] get_futex_key+0x1d0/0x14f0 [ 726.681372][T12485] ? __pfx_get_futex_key+0x10/0x10 [ 726.681537][T12485] ? lock_acquire+0x1d1/0x380 [ 726.681766][T12485] futex_wake+0xf4/0x5e0 [ 726.681829][T12485] ? __might_fault+0xc5/0x140 [ 726.681945][T12485] ? __pfx_futex_wake+0x10/0x10 [ 726.682216][T12485] ? __pfx_signal_setup_done+0x10/0x10 [ 726.682380][T12485] do_futex+0x2b2/0x440 [ 726.682567][T12485] ? __pfx_do_futex+0x10/0x10 [ 726.682853][T12485] __x64_sys_futex+0x34f/0x4d0 [ 726.683093][T12485] ? __pfx___x64_sys_futex+0x10/0x10 [ 726.683433][T12485] do_syscall_64+0x123/0x790 [ 726.683567][T12485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 726.683611][T12485] RIP: 0033:0x7f23e579e199 [ 726.683680][T12485] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 726.683705][T12485] RSP: 002b:00007f23e65c40e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 726.683738][T12485] RAX: ffffffffffffffda RBX: 00007f23e5a25fa8 RCX: 00007f23e579e199 [ 726.683758][T12485] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23e5a25fac [ 726.683779][T12485] RBP: 00007f23e5a25fa0 R08: 0000000000000001 R09: 0000000000000000 [ 726.683800][T12485] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 726.683820][T12485] R13: 00007f23e5a26038 R14: 00007ffc01577cb0 R15: 00007ffc01577d98 [ 726.684198][T12485] [ 727.459382][T12070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 728.382919][ T44] audit: type=1400 audit(2000000266.289:1926): avc: denied { mount } for pid=12503 comm="syz.6.2111" name="/" dev="configfs" ino=1077 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 728.463960][ T44] audit: type=1400 audit(2000000266.359:1927): avc: denied { write } for pid=12493 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 728.482157][ T44] audit: type=1400 audit(2000000266.389:1928): avc: denied { write } for pid=12503 comm="syz.6.2111" name="subsystems" dev="configfs" ino=37529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 728.501830][ T44] audit: type=1400 audit(2000000266.389:1929): avc: denied { create } for pid=12503 comm="syz.6.2111" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 728.534007][ T44] audit: type=1400 audit(2000000266.439:1930): avc: denied { write } for pid=12503 comm="syz.6.2111" name="subsystems" dev="configfs" ino=37529 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 728.540927][T12505] nvmet_tcp: failed to bind port socket -99 [ 728.943850][ T44] audit: type=1400 audit(2000000266.849:1931): avc: denied { unmount } for pid=8754 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 729.046267][ T7334] net_ratelimit: 34 callbacks suppressed [ 729.573782][T12512] random: crng reseeded on system resumption [ 729.883625][ T44] audit: type=1400 audit(2000000267.789:1932): avc: denied { write } for pid=12510 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 732.246410][T12533] FAULT_INJECTION: forcing a failure. [ 732.246410][T12533] name fail_futex, interval 1, probability 0, space 0, times 0 [ 732.246447][T12533] CPU: 2 UID: 0 PID: 12533 Comm: syz.1.2119 Tainted: G L syzkaller #0 PREEMPT(full) [ 732.246470][T12533] Tainted: [L]=SOFTLOCKUP [ 732.246481][T12533] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 732.246495][T12533] Call Trace: [ 732.246522][T12533] [ 732.246551][T12533] dump_stack_lvl+0x100/0x190 [ 732.246642][T12533] should_fail_ex.cold+0x5/0xa [ 732.246672][T12533] ? rb_commit+0x129/0x9d0 [ 732.246783][T12533] get_futex_key+0xf72/0x14f0 [ 732.246951][T12533] ? __pfx_get_futex_key+0x10/0x10 [ 732.247004][T12533] ? ring_buffer_unlock_commit+0x2e7/0x700 [ 732.247279][T12533] futex_wake+0xf4/0x5e0 [ 732.247338][T12533] ? trace_event_buffer_commit+0x20a/0xa80 [ 732.247456][T12533] ? __pfx_futex_wake+0x10/0x10 [ 732.247568][T12533] ? trace_event_raw_event_lock+0x1e2/0x2b0 [ 732.247713][T12533] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 732.247798][T12533] ? lock_acquire+0x1d1/0x380 [ 732.247947][T12533] do_futex+0x2b2/0x440 [ 732.248063][T12533] ? __pfx_do_futex+0x10/0x10 [ 732.248104][T12533] ? __might_fault+0xc5/0x140 [ 732.248272][T12533] mm_exit_exec_release+0x256/0x2f0 [ 732.248389][T12533] do_exit+0x707/0x2a50 [ 732.248502][T12533] ? __pfx_do_exit+0x10/0x10 [ 732.248568][T12533] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 732.248650][T12533] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 732.248752][T12533] do_group_exit+0xd5/0x2a0 [ 732.248841][T12533] get_signal+0x1ec7/0x21e0 [ 732.249100][T12533] ? __pfx_get_signal+0x10/0x10 [ 732.249212][T12533] ? do_futex+0x190/0x440 [ 732.249329][T12533] arch_do_signal_or_restart+0x91/0x7e0 [ 732.249398][T12533] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 732.249595][T12533] ? fput+0x7c/0x100 [ 732.249757][T12533] exit_to_user_mode_loop+0x139/0x700 [ 732.249817][T12533] ? rcu_is_watching+0x13/0xc0 [ 732.249907][T12533] do_syscall_64+0x661/0x790 [ 732.249992][T12533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.250028][T12533] RIP: 0033:0x7fb91839e199 [ 732.250086][T12533] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 732.250105][T12533] RSP: 002b:00007fb9191e90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 732.250134][T12533] RAX: fffffffffffffe00 RBX: 00007fb918625fa8 RCX: 00007fb91839e199 [ 732.250149][T12533] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb918625fa8 [ 732.250164][T12533] RBP: 00007fb918625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 732.250179][T12533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 732.250194][T12533] R13: 00007fb918626038 R14: 00007ffcfab03f80 R15: 00007ffcfab04068 [ 732.250458][T12533] [ 732.798713][T12541] sk ffff88802e661000 [ 732.798768][T12541] 00:00:00:00:00:00 -> 0e:aa:aa:aa:aa:aa (type 0) psm 0x0003 mode 0x00 [ 732.798802][T12541] 00:00:00:00:00:00 -> 0e:aa:aa:aa:aa:aa [ 732.799108][T12541] hci4 orig refcnt 10 [ 732.799606][T12542] kcov: kcov_start: t = ffff88802637cb00, size = 524288, area = ffffc90024d09000 [ 732.799649][T12541] [ 732.813944][T12541] ====================================================== [ 732.817775][T12541] WARNING: possible circular locking dependency detected [ 732.821490][T12541] syzkaller #0 Tainted: G L [ 732.822313][T12542] sock ffff88803d950040 [ 732.822591][T12542] ffff8880328e1c00 [ 732.822611][T12542] ffff8880328e1c00 [ 732.823401][T12542] sk ffff888057425000 SYZFAIL: failed to recv rpc [ 732.823423][T12542] sk ffff888057425000 [ 732.829071][ T44] audit: type=1400 audit(2000000270.739:1933): avc: denied { write } for pid=5646 comm="syz-executor" path="pipe:[6095]" dev="pipefs" ino=6095 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 732.842386][T12541] ------------------------------------------------------ [ 732.845371][T12541] syz.2.2120/12541 is trying to acquire lock: fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 732.847958][T12541] ffff888055eb40b8 (&hdev->lock){+.+.}-{4:4}, at: l2cap_chan_connect+0xac/0x2110 [ 732.851628][T12541] [ 732.851628][T12541] but task is already holding lock: [ 732.854630][T12541] ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 732.858303][T12541] [ 732.858303][T12541] which lock already depends on the new lock. [ 732.858303][T12541] [ 732.862569][T12541] [ 732.862569][T12541] the existing dependency chain (in reverse order) is: [ 732.866319][T12541] [ 732.866319][T12541] -> #2 (rfcomm_mutex){+.+.}-{4:4}: [ 732.869517][T12541] lock_acquire+0x1d1/0x380 [ 732.870672][T12542] sk ffff888057425000 cmd 400452c8 arg 200000000000 [ 732.870698][T12542] sk ffff888057425000 cmd 400452c8 arg 200000000000 [ 732.870717][T12542] cmd 1074025160 arg 0000200000000000 [ 732.870753][T12542] sk ffff888057425000 dev_id 0 flags 0x0 [ 732.881903][T12541] __mutex_lock+0x1a4/0x1bd0 [ 732.884136][T12541] rfcomm_security_cfm+0x3f/0x4b0 [ 732.886530][T12541] hci_encrypt_cfm+0x18e/0x740 [ 732.888809][T12541] hci_encrypt_change_evt+0x92c/0xfb0 [ 732.891368][T12541] hci_event_packet+0x8e9/0xcd0 [ 732.893721][T12541] hci_rx_work+0x451/0xfc0 [ 732.895886][T12541] process_one_work+0xac7/0x1b10 [ 732.898244][T12541] worker_thread+0x5ef/0xe50 [ 732.900387][T12541] kthread+0x373/0x450 [ 732.902360][T12541] ret_from_fork+0x730/0xd60 [ 732.904494][T12541] ret_from_fork_asm+0x1a/0x30 [ 732.906721][T12541] [ 732.906721][T12541] -> #1 (hci_cb_list_lock){+.+.}-{4:4}: [ 732.909888][T12541] lock_acquire+0x1d1/0x380 [ 732.911968][T12541] __mutex_lock+0x1a4/0x1bd0 [ 732.914128][T12541] hci_remote_features_evt+0x485/0x9b0 [ 732.916624][T12541] hci_event_packet+0x8e9/0xcd0 [ 732.918913][T12541] hci_rx_work+0x451/0xfc0 [ 732.920955][T12541] process_one_work+0xac7/0x1b10 [ 732.923280][T12541] worker_thread+0x5ef/0xe50 [ 732.925364][T12541] kthread+0x373/0x450 [ 732.927274][T12541] ret_from_fork+0x730/0xd60 [ 732.929380][T12541] ret_from_fork_asm+0x1a/0x30 [ 732.931561][T12541] [ 732.931561][T12541] -> #0 (&hdev->lock){+.+.}-{4:4}: [ 732.934581][T12541] check_prev_add+0xeb/0xe60 [ 732.936795][T12541] __lock_acquire+0x1528/0x1f40 [ 732.939116][T12541] lock_acquire+0x1d1/0x380 [ 732.941298][T12541] __mutex_lock+0x1a4/0x1bd0 [ 732.943524][T12541] l2cap_chan_connect+0xac/0x2110 [ 732.945919][T12541] l2cap_sock_connect+0x37a/0x770 [ 732.948286][T12541] kernel_connect+0x107/0x160 [ 732.950531][T12541] rfcomm_dlc_open+0x838/0xac0 [ 732.952827][T12541] rfcomm_sock_connect+0x42c/0x690 [ 732.955287][T12541] __sys_connect_file+0x146/0x1a0 [ 732.957703][T12541] __sys_connect+0x141/0x170 [ 732.959919][T12541] __x64_sys_connect+0x72/0xb0 [ 732.962098][T12541] do_syscall_64+0x123/0x790 [ 732.964311][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 732.967022][T12541] [ 732.967022][T12541] other info that might help us debug this: [ 732.967022][T12541] [ 732.971302][T12541] Chain exists of: [ 732.971302][T12541] &hdev->lock --> hci_cb_list_lock --> rfcomm_mutex [ 732.971302][T12541] [ 732.976493][T12541] Possible unsafe locking scenario: [ 732.976493][T12541] [ 732.979608][T12541] CPU0 CPU1 [ 732.981850][T12541] ---- ---- [ 732.984096][T12541] lock(rfcomm_mutex); [ 732.985885][T12541] lock(hci_cb_list_lock); [ 732.988792][T12541] lock(rfcomm_mutex); [ 732.991469][T12541] lock(&hdev->lock); [ 732.993235][T12541] [ 732.993235][T12541] *** DEADLOCK *** [ 732.993235][T12541] [ 732.996573][T12541] locks held by syz.2.2120/12541: 1, last CPU#3: [ 732.999218][T12541] #0: ffffffff90f83f60 (rfcomm_mutex){+.+.}-{4:4}, at: rfcomm_dlc_open+0x92/0xac0 [ 733.003177][T12541] [ 733.003177][T12541] stack backtrace: [ 733.005691][T12541] CPU: 3 UID: 0 PID: 12541 Comm: syz.2.2120 Tainted: G L syzkaller #0 PREEMPT(full) [ 733.009647][ T1356] Added buffer head 0 to ffff88802712b000 [ 733.010289][ T1356] Added buffer head 1 to ffff88802712b000 [ 733.011142][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 733.011871][ T850] No more buffers in queue [ 733.020655][T12541] Tainted: [L]=SOFTLOCKUP [ 733.022439][T12541] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 733.026516][T12541] Call Trace: [ 733.027998][T12541] [ 733.029205][T12541] dump_stack_lvl+0x100/0x190 [ 733.031313][T12541] print_circular_bug.cold+0x178/0x1be [ 733.033829][T12541] check_noncircular+0x146/0x160 [ 733.035993][T12541] ? trace_buffer_unlock_commit_regs+0x37b/0x540 [ 733.038980][T12541] check_prev_add+0xeb/0xe60 [ 733.041236][T12541] __lock_acquire+0x1528/0x1f40 [ 733.043744][T12541] lock_acquire+0x1d1/0x380 [ 733.045722][T12541] ? l2cap_chan_connect+0xac/0x2110 [ 733.048044][T12541] ? __pfx___might_resched+0x10/0x10 [ 733.050206][T12541] __mutex_lock+0x1a4/0x1bd0 [ 733.051815][T12541] ? l2cap_chan_connect+0xac/0x2110 [ 733.053511][T12541] ? l2cap_chan_connect+0xac/0x2110 [ 733.055264][T12541] ? hci_get_route+0x368/0x520 [ 733.056829][T12541] ? hci_get_route+0x368/0x520 [ 733.058498][T12541] ? __pfx___mutex_lock+0x10/0x10 [ 733.060138][T12541] ? _raw_read_unlock+0x28/0x50 [ 733.061722][T12541] ? hci_get_route+0x368/0x520 [ 733.063245][T12541] ? __pfx_hci_get_route+0x10/0x10 [ 733.064990][T12541] ? __pfx_trace_event_raw_event_lock+0x10/0x10 [ 733.067212][T12541] ? l2cap_chan_connect+0xac/0x2110 [ 733.068876][T12541] l2cap_chan_connect+0xac/0x2110 [ 733.070660][T12541] ? __local_bh_enable_ip+0xa5/0x120 [ 733.072398][T12541] l2cap_sock_connect+0x37a/0x770 [ 733.074095][T12541] ? __pfx_l2cap_sock_connect+0x10/0x10 [ 733.076568][T12541] ? _raw_spin_unlock_irqrestore+0x61/0x80 [ 733.079235][T12541] kernel_connect+0x107/0x160 [ 733.081399][T12541] ? __pfx_kernel_connect+0x10/0x10 [ 733.083965][T12541] ? timer_init_key+0x150/0x310 [ 733.086290][T12541] rfcomm_dlc_open+0x838/0xac0 [ 733.088464][T12541] ? __pfx_rfcomm_dlc_open+0x10/0x10 [ 733.090729][T12541] ? pv_queued_spin_unlock_traced+0x62/0x1d0 [ 733.093409][T12541] ? __raw_callee_save_pv_queued_spin_unlock_traced+0x15/0x40 [ 733.096614][T12541] ? __local_bh_enable_ip+0xa5/0x120 [ 733.099031][T12541] rfcomm_sock_connect+0x42c/0x690 [ 733.101522][T12541] __sys_connect_file+0x146/0x1a0 [ 733.103807][T12541] __sys_connect+0x141/0x170 [ 733.105847][T12541] ? __pfx___sys_connect+0x10/0x10 [ 733.108500][T12541] __x64_sys_connect+0x72/0xb0 [ 733.110037][T12541] ? lockdep_hardirqs_on+0x7d/0x110 [ 733.111954][T12541] do_syscall_64+0x123/0x790 [ 733.113756][T12541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 733.115823][T12541] RIP: 0033:0x7f23e579e199 [ 733.117319][T12541] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 733.123353][T12541] RSP: 002b:00007f23e65c4028 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 733.126217][T12541] RAX: ffffffffffffffda RBX: 00007f23e5a25fa0 RCX: 00007f23e579e199 [ 733.128825][T12541] RDX: 000000000000000a RSI: 00002000000000c0 RDI: 0000000000000004 [ 733.131231][T12541] RBP: 00007f23e58358e0 R08: 0000000000000000 R09: 0000000000000000 [ 733.133769][T12541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 733.136271][T12541] R13: 00007f23e5a26038 R14: 00007f23e5a25fa0 R15: 00007ffc01577d98 [ 733.139033][T12541] [ 733.236746][ T1356] Added buffer head 1 to ffff88802712b000 [ 733.237426][ T1356] Added buffer head 0 to ffff88802712b000 [ 733.238302][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 733.239021][ T850] No more buffers in queue [ 733.305890][T12541] hci4: dst 0e:aa:aa:aa:aa:aa [ 733.306212][T12541] hci4: dst 0e:aa:aa:aa:aa:aa handle 0x0f00 [ 733.306418][T12541] hci4 orig refcnt 11 [ 733.306430][T12541] hci4: conn ffff8880354ac000 [ 733.306460][T12541] hcon ffff8880354ac000 orig refcnt 0 [ 733.306778][T12541] hci4 hcon ffff8880354ac000 [ 733.306953][ T5741] hci4: [ 733.307001][ T5741] hci4: entry ffff88802ad3e800 [ 733.307057][T12541] hcon ffff8880354ac000 conn ffff888056955800 hchan ffff88805a15ba00 [ 733.307136][T12541] conn ffff888056955800, psm 0x03, dcid 0x0000 [ 733.307153][T12541] chan ffff88802e664000 orig refcnt 1 [ 733.307167][T12541] hcon ffff8880354ac000 orig refcnt 1 [ 733.307190][T12541] hcon ffff8880354ac000 orig refcnt 2 [ 733.307205][T12541] chan ffff88802e664000 BT_BOUND -> BT_CONNECT [ 733.307247][T12541] chan ffff88802e664000 state BT_CONNECT timeout 4000 [ 733.307276][T12541] chan ffff88802e664000 orig refcnt 2 [ 733.307304][T12541] hci4 orig refcnt 13 [ 733.307319][T12541] sk ffff88802e661000 [ 733.307312][ T5741] cache ffff888055eb4f40, 0e:aa:aa:aa:aa:aa [ 733.307343][T12541] ffff88802d070400 [ 733.307353][T12541] dlc ffff88802d070400 session ffff88802ab12800 [ 733.307353][ T5741] hci4: Opcode 0x0405 [ 733.307365][T12541] session ffff88802ab12800 state 3 [ 733.307392][T12541] dlc ffff88802d070400 state 7 timeout 3000 [ 733.307445][ T5741] hci4: opcode 0x0405 plen 13 [ 733.307529][T12541] sk ffff8880373f2000 [ 733.307858][ T5741] hci4: skb len 16 [ 733.307877][ T5741] hci4: length 1 [ 733.308135][T12542] ffff8880345adc00 [ 733.308152][T12542] ffff8880345adc00 [ 733.308167][T12542] id 0 channel 1 [ 733.308332][T12542] dlc ffff8880345adc00 dev ffff888034a9e000 v24_sig 0x00 [ 733.308873][T12542] device: 'rfcomm0': device_add [ 733.308924][T12542] kobject: 'rfcomm0' (ffff8880270a6000): kobject_add_internal: parent: 'tty', set: 'devices' [ 733.309589][T12542] tty rfcomm0: No ACPI support [ 733.310419][T10644] hci4 cmd_cnt 1 cmd queued 1 [ 733.310445][T10644] hci4: skb ffff88803703af00 [ 733.310700][T10644] hci4 type 1 len 16 [ 733.314537][T12542] PM: Adding info for No Bus:rfcomm0 [ 733.321785][T12542] kobject: 'rfcomm0' (ffff8880270a6000): kobject_uevent_env [ 733.321799][T12542] kobject: 'rfcomm0' (ffff8880270a6000): kobject_uevent_env: uevent_suppress caused the event to drop! [ 733.322096][T12542] kobject: 'rfcomm0' (ffff8880270a6000): kobject_uevent_env [ 733.322352][T12542] kobject: 'rfcomm0' (ffff8880270a6000): fill_kobj_path: path = '/devices/virtual/tty/rfcomm0' [ 733.323337][T12542] 00:00:00:00:00:00 -> 00:00:00:00:00:00 [ 733.323362][T12542] hci4 orig refcnt 12 [ 733.323379][T12542] hci4 orig refcnt 13 [ 733.379411][T12544] kcov: kcov_start: t = ffff888026d9a580, size = 524288, area = ffffc90004804000 [ 733.449580][ T1356] Added buffer head 0 to ffff88802712b000 [ 733.449939][ T1356] Added buffer head 1 to ffff88802712b000 [ 733.450730][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 733.451354][ T850] No more buffers in queue [ 733.503253][T12539] sock ffff88803d950040, sk ffff888057425000 [ 733.503285][T12539] sock ffff88803d950040, sk ffff888057425000 [ 733.503326][T12539] sk ffff888057425000 state 2 socket ffff88803d950040 [ 733.503383][T12539] sk ffff888057425000 state 2 refcnt 2 [ 733.503416][T12539] sk ffff888057425000 dlc ffff8880328e1c00 [ 733.503458][T12539] ffff8880328e1c00 [ 733.516931][T12541] sock ffff88802e24cb00, sk ffff8880373f2000 [ 733.516988][T12541] sock ffff88802e24cb00, sk ffff8880373f2000 [ 733.517022][T12541] sk ffff8880373f2000 state 5 socket ffff88802e24cb00 [ 733.517065][T12541] dlc ffff88802d070400 state 7 dlci 6 err 0 [ 733.517097][T12541] dlc ffff88802d070400 state 7 dlci 6 err 0 session ffff88802ab12800 [ 733.517121][T12541] dlc ffff88802d070400 state 7 [ 733.517173][T12541] dlc ffff88802d070400 state 9 err 0 [ 733.517234][T12541] dlc ffff88802d070400 refcnt 2 session ffff88802ab12800 [ 733.517258][T12541] session ffff88802ab12800 state 3 timeout 200 [ 733.517378][T12541] sk ffff8880373f2000 state 9 refcnt 2 [ 733.517418][T12541] sk ffff8880373f2000 dlc ffff88802d070400 [ 733.517471][T12541] ffff88802d070400 [ 733.526401][T12542] kcov: kcov_task_exit: t = ffff88802637cb00, kcov->t = ffff88802637cb00 [ 733.529251][T12544] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id -1678245876 [ 733.529931][ T5718] nfc: nfc_urelease_event_work: portid -1678245876 [ 733.535850][ C3] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 733.542399][T12541] kcov: kcov_task_exit: t = ffff88802f7ea580, kcov->t = ffff88802f7ea580 [ 733.544030][ T7330] nf_nat: Already setup manip DST for ct ffff888025711200 (status bits 0x188) [ 733.544063][ T7330] nf_nat: Already setup manip SRC for ct ffff888025711200 (status bits 0x188) [ 733.630183][T12543] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id -1542559193 [ 733.630761][ T850] nfc: nfc_urelease_event_work: portid -1542559193 [ 733.632773][T12543] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 1555 [ 733.633402][ T850] nfc: nfc_urelease_event_work: portid 1555 [ 733.635248][T12544] kcov: kcov_task_exit: t = ffff888026d9a580, kcov->t = ffff888026d9a580 [ 733.664120][ T1356] Added buffer head 1 to ffff88802712b000 [ 733.664638][ T1356] Added buffer head 0 to ffff88802712b000 [ 733.665486][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 733.674032][ T850] No more buffers in queue [ 733.748716][T12546] sock ffff88803d89dc40 [ 733.761543][T12546] ffff88803cefc000 name hci2 bus 0 [ 733.778144][T12546] debugfs: creating file 'hci2' [ 733.783879][T12546] device: 'hci2': device_add [ 733.783923][T12546] kobject: 'hci2' (ffff88803cefd538): kobject_add_internal: parent: 'bluetooth', set: 'devices' [ 733.784364][T12546] bluetooth hci2: No ACPI support [ 733.803419][T12546] PM: Adding info for No Bus:hci2 [ 733.803458][T12546] kobject: 'hci2' (ffff88803cefd538): kobject_uevent_env [ 733.803877][T12546] kobject: 'hci2' (ffff88803cefd538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 733.818813][T12546] device: 'rfkill31': device_add [ 733.818873][T12546] kobject: 'rfkill31' (ffff88802cab4110): kobject_add_internal: parent: 'hci2', set: 'devices' [ 733.819579][T12546] rfkill rfkill31: No ACPI support [ 733.836586][T12531] kcov: kcov_task_exit: t = ffff888024accb00, kcov->t = ffff888024accb00 [ 733.838232][ T5722] kcov: kcov_task_exit: t = ffff888034d92580, kcov->t = ffff888034d92580 [ 733.838767][ T5723] kcov: kcov_task_exit: t = ffff88802a4f8000, kcov->t = ffff88802a4f8000 [ 733.840762][ T8742] kcov: kcov_task_exit: t = ffff8880256c0000, kcov->t = ffff8880256c0000 [ 733.851306][T12546] PM: Adding info for No Bus:rfkill31 [ 733.851350][T12546] kobject: 'rfkill31' (ffff88802cab4110): kobject_uevent_env [ 733.851837][T12546] kobject: 'rfkill31' (ffff88802cab4110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill31' [ 733.870443][T12546] hdev hci2 event 1 [ 733.870684][T12546] hdev 0000000000000000 len 8 [ 733.870935][T12546] hci2 orig refcnt 4 [ 733.870957][T12546] hci2: Register MSFT extension [ 733.871149][T12546] debugfs: creating file 'force_suspend' [ 733.873014][T10644] hci2 [ 733.873075][T10644] hci2 ffff88803cefc000 [ 733.873116][T10644] hci2: [ 733.873134][T10644] hci2: Updating devcoredump state from IDLE to IDLE. [ 733.873216][T10644] hdev hci2 event 7 [ 733.873239][T10644] hci2: [ 733.873259][T10644] hci2: [ 733.873277][T10644] hdev hci2 event 9 [ 733.873300][T10644] hci2: [ 733.873320][T10644] hci2: Opcode 0x0c03 [ 733.873342][T10644] hci2: opcode 0x0c03 plen 0 [ 733.873678][T10644] hci2: skb len 3 [ 733.873720][T10644] hci2: length 1 [ 733.882723][ T1356] ffff88803cefc000 name hci2 blocked 0 [ 733.892673][T12546] debugfs: creating file 'force_wakeup' [ 733.893577][T12546] debugfs: creating file 'msft_opcode' [ 733.899718][ T5088] hci2 cmd_cnt 1 cmd queued 1 [ 733.899744][ T5088] hci2: skb ffff88802b39c640 [ 733.899877][ T5088] hci2 type 1 len 3 [ 733.910475][ T1356] Added buffer head 0 to ffff88802712b000 [ 733.914504][ T1356] Added buffer head 1 to ffff88802712b000 [ 733.915362][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 733.916765][T12546] debugfs: creating file 'force_devcoredump' [ 733.928464][ T850] No more buffers in queue [ 733.947871][T12546] cmd 400448c9 arg 2 [ 733.948140][T12546] channel 2 len 36 [ 733.948456][T12546] 2 [ 733.948480][T12546] hci2 orig refcnt 5 [ 733.965463][T12547] hci2 [ 733.965511][T12547] hci2 Event packet [ 733.965710][T12547] hci2: event 0x0e [ 733.965727][T12547] hci2: opcode 0x0c03 [ 733.965741][T12547] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 733.965758][T12547] hci2: status 0x00 [ 733.965874][T12547] opcode 0x0c03 status 0x00 [ 733.965900][T12547] hci2: result 0x00 [ 733.967371][T10644] hci2: end: err 0 [ 733.967576][T10644] hci2: Opcode 0x1003 [ 733.967597][T10644] hci2: opcode 0x1003 plen 0 [ 733.967959][T10644] hci2: skb len 3 [ 733.967991][T10644] hci2: length 1 [ 733.968168][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 733.968189][T12547] hci2: skb ffff888030552000 [ 733.968507][T12547] hci2 type 1 len 3 [ 733.973153][T12547] hci2 [ 733.973195][T12547] hci2 Event packet [ 733.973601][T12547] hci2: event 0x0e [ 733.973614][T12547] hci2: opcode 0x1003 [ 733.973626][T12547] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 733.973640][T12547] hci2: status 0x00 [ 733.973683][T12547] opcode 0x1003 status 0x00 [ 733.973710][T12547] hci2: result 0x00 [ 733.974834][T10644] hci2: end: err 0 [ 733.974995][T10644] hci2: Opcode 0x1001 [ 733.975009][T10644] hci2: opcode 0x1001 plen 0 [ 733.975248][T10644] hci2: skb len 3 [ 733.975272][T10644] hci2: length 1 [ 733.975505][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 733.975526][T12547] hci2: skb ffff88803cad6a00 [ 733.976249][T12547] hci2 type 1 len 3 [ 733.982948][T12547] hci2 [ 733.982973][T12547] hci2 Event packet [ 733.983453][T12547] hci2: event 0x0e [ 733.983470][T12547] hci2: opcode 0x1001 [ 733.983485][T12547] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 733.983500][T12547] hci2: status 0x00 [ 733.983522][T12547] opcode 0x1001 status 0x00 [ 733.983539][T12547] hci2: result 0x00 [ 733.983680][T10644] hci2: end: err 0 [ 733.983812][T10644] hci2: Opcode 0x1009 [ 733.983822][T10644] hci2: opcode 0x1009 plen 0 [ 733.984067][T10644] hci2: skb len 3 [ 733.984079][T10644] hci2: length 1 [ 733.986050][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 733.986064][T12547] hci2: skb ffff88803cad6500 [ 733.986342][T12547] hci2 type 1 len 3 [ 733.986927][T12547] hci2 [ 733.986949][T12547] hci2 Event packet [ 733.987403][T12547] hci2: event 0x0e [ 733.987419][T12547] hci2: opcode 0x1009 [ 733.987429][T12547] hci2: status 0x00 [ 733.987451][T12547] opcode 0x1009 status 0x00 [ 733.987468][T12547] hci2: result 0x00 [ 733.987609][T10644] hci2: end: err 0 [ 733.987706][T10644] hci2: [ 733.987718][T10644] hci2: Opcode 0x1005 [ 733.987729][T10644] hci2: opcode 0x1005 plen 0 [ 733.987970][T10644] hci2: skb len 3 [ 733.987986][T10644] hci2: length 1 [ 733.988115][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 733.988135][T12547] hci2: skb ffff88803b9bd540 [ 733.988441][T12547] hci2 type 1 len 3 [ 733.989107][T12547] hci2 [ 733.989146][T12547] hci2 Event packet [ 733.989534][T12547] hci2: event 0x0e [ 733.989547][T12547] hci2: opcode 0x1005 [ 733.989560][T12547] hci2: status 0x00 [ 733.989573][T12547] hci2 acl mtu 1021:4 sco mtu 96:0 [ 733.989625][T12547] opcode 0x1005 status 0x00 [ 733.989655][T12547] hci2: result 0x00 [ 733.989759][T10644] hci2: end: err 0 [ 733.989879][T10644] hci2: Opcode 0x0c23 [ 733.989892][T10644] hci2: opcode 0x0c23 plen 0 [ 733.990125][T10644] hci2: skb len 3 [ 733.990145][T10644] hci2: length 1 [ 733.990340][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 733.990357][T12547] hci2: skb ffff88803b9bc280 [ 733.990647][T12547] hci2 type 1 len 3 [ 734.010961][T12547] hci2 [ 734.011000][T12547] hci2 Event packet [ 734.011729][T12547] hci2: event 0x0e [ 734.011754][T12547] hci2: opcode 0x0c23 [ 734.011776][T12547] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 734.011804][T12547] hci2: status 0x00 [ 734.011831][T12547] hci2: class 0x000000 [ 734.011871][T12547] opcode 0x0c23 status 0x00 [ 734.011897][T12547] hci2: result 0x00 [ 734.012032][T10644] hci2: end: err 0 [ 734.012152][T10644] hci2: Opcode 0x0c14 [ 734.012166][T10644] hci2: opcode 0x0c14 plen 0 [ 734.012423][T10644] hci2: skb len 3 [ 734.012437][T10644] hci2: length 1 [ 734.012611][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 734.012636][T12547] hci2: skb ffff88802d10eb40 [ 734.012999][T12547] hci2 type 1 len 3 [ 734.013689][T12547] hci2 [ 734.013719][T12547] hci2 Event packet [ 734.014188][T12547] hci2: event 0x0e [ 734.014204][T12547] hci2: opcode 0x0c14 [ 734.014224][T12547] hci2: status 0x00 [ 734.014261][T12547] opcode 0x0c14 status 0x00 [ 734.014290][T12547] hci2: result 0x00 [ 734.014465][T10644] hci2: end: err 0 [ 734.014555][T10644] hci2: Opcode 0x0c38 [ 734.014567][T10644] hci2: opcode 0x0c38 plen 0 [ 734.014807][T10644] hci2: skb len 3 [ 734.014823][T10644] hci2: length 1 [ 734.014966][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 734.014991][T12547] hci2: skb ffff88802d10fe00 [ 734.015493][T12547] hci2 type 1 len 3 [ 734.016714][T12547] hci2 [ 734.016767][T12547] hci2 Event packet [ 734.017426][T12547] hci2: event 0x0e [ 734.017448][T12547] hci2: opcode 0x0c38 [ 734.017468][T12547] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 734.017492][T12547] hci2: status 0x00 [ 734.017512][T12547] hci2: num iac 0 [ 734.017596][T12547] opcode 0x0c38 status 0x00 [ 734.017644][T12547] hci2: result 0x00 [ 734.017835][T10644] hci2: end: err 0 [ 734.017931][T10644] hci2: Opcode 0x0c39 [ 734.017942][T10644] hci2: opcode 0x0c39 plen 0 [ 734.018186][T10644] hci2: skb len 3 [ 734.018201][T10644] hci2: length 1 [ 734.018355][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 734.018383][T12547] hci2: skb ffff88802d10edc0 [ 734.018780][T12547] hci2 type 1 len 3 [ 734.019443][T12547] hci2 [ 734.019465][T12547] hci2 Event packet [ 734.019908][T12547] hci2: event 0x0e [ 734.019924][T12547] hci2: opcode 0x0c39 [ 734.019953][T12547] opcode 0x0c39 status 0x00 [ 734.019969][T12547] hci2: result 0x00 [ 734.020101][T10644] hci2: end: err 0 [ 734.020236][T10644] hci2: Opcode 0x0c16 [ 734.020245][T10644] hci2: opcode 0x0c16 plen 2 [ 734.020489][T10644] hci2: skb len 5 [ 734.020502][T10644] hci2: length 1 [ 734.020629][T12547] hci2 cmd_cnt 1 cmd queued 1 [ 734.020650][T12547] hci2: skb ffff88805dd8ef00 [ 734.020957][T12547] hci2 type 1 len 5 [ 734.021611][T12547] hci2 [ 734.021634][T12547] hci2 Event packet [ 734.022083][T12547] hci2: event 0x0e [ 734.022093][T12547] hci2: opcode 0x0c16 [ 734.022120][T12547] opcode 0x0c16 status 0x00 [ 734.022139][T12547] hci2: result 0x00 [ 734.022270][T10644] hci2: end: err 0 [ 734.022385][T10644] hci2: [ 734.022396][T10644] hci2: [ 734.022406][T10644] hci2 orig refcnt 6 [ 734.022417][T10644] hdev hci2 event 3 [ 734.022648][T10644] hdev 0000000000000000 len 8 [ 734.023138][T10644] channel 3 len 6 [ 734.023611][T10644] channel 3 len 8 [ 734.023945][T12546] hci2 ffff88803cefc000 [ 734.023967][T12546] hci2: [ 734.023981][T12546] hci2 orig refcnt 7 [ 734.024704][T12546] cmd 400448dd arg 7ffdb788eb88 [ 734.024742][T12546] 2 [ 734.024755][T12546] hci2 orig refcnt 6 [ 734.024777][T12546] hci2: Opcode 0x0c1a [ 734.024789][T12546] hci2: opcode 0x0c1a plen 1 [ 734.025065][T12546] hci2: skb len 4 [ 734.025086][T12546] hci2: length 1 [ 734.025251][T10644] hci2 cmd_cnt 1 cmd queued 1 [ 734.025263][T10644] hci2: skb ffff888037438140 [ 734.025534][T10644] hci2 type 1 len 4 [ 734.027293][T10644] hci2 [ 734.027333][T10644] hci2 Event packet [ 734.027718][T10644] hci2: event 0x0e [ 734.027732][T10644] hci2: opcode 0x0c1a [ 734.027745][T10644] hci2: status 0x00 [ 734.027813][T10644] opcode 0x0c1a status 0x00 [ 734.027845][T10644] hci2: result 0x00 [ 734.034840][T12546] hci2: end: err 0 [ 734.034978][T12546] hci2 scan 0x02 [ 734.034991][T12546] hci2 orig refcnt 7 [ 734.035614][T10644] hci2 [ 734.035657][T10644] hci2 Event packet [ 734.036818][T10644] hci2: event 0x04 [ 734.036840][T10644] hci2: bdaddr 10:aa:aa:aa:aa:aa type 0x1 [ 734.036883][T10644] hdev hci2, bdaddr 10:aa:aa:aa:aa:aa [ 734.036933][T10644] cache ffff88803cefcf40, 10:aa:aa:aa:aa:aa [ 734.036969][T10644] hci2: dst 10:aa:aa:aa:aa:aa [ 734.037346][T10644] hci2: dst 10:aa:aa:aa:aa:aa handle 0x0f00 [ 734.037604][T10644] hci2 orig refcnt 6 [ 734.037621][T10644] hci2: conn ffff888037570000 [ 734.037664][T10644] hci2 opcode 0x0409 plen 7 [ 734.037989][T10644] hci2: skb len 10 [ 734.038449][T10644] hci2 cmd_cnt 1 cmd queued 1 [ 734.038477][T10644] hci2: skb ffff8880313e8140 [ 734.038933][T10644] hci2 type 1 len 10 [ 734.048453][T12546] sock ffff88803d89dc40 sk ffff88802cab3000 [ 734.048885][T12546] channel 2 len 10 [ 734.049897][T10644] hci2 [ 734.049952][T10644] hci2 Event packet [ 734.050407][T10644] hci2: event 0x03 [ 734.050424][T10644] hci2: status 0x00 [ 734.050458][T10644] hci2: hcon ffff888037570000 handle 0x00c8 [ 734.050831][T10644] hcon ffff888037570000 orig refcnt 0 [ 734.050866][T10644] hci2: conn ffff888037570000 [ 734.051190][T10644] device: 'hci2:200': device_add [ 734.051229][T10644] kobject: 'hci2:200' (ffff888037570cf0): kobject_add_internal: parent: 'hci2', set: 'devices' [ 734.051900][T10644] bluetooth hci2:200: No ACPI support [ 734.055365][T10644] PM: Adding info for No Bus:hci2:200 [ 734.055399][T10644] kobject: 'hci2:200' (ffff888037570cf0): kobject_uevent_env [ 734.055690][T10644] kobject: 'hci2:200' (ffff888037570cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:200' [ 734.057595][T10644] hci2 opcode 0x041b plen 2 [ 734.057830][T10644] hci2: skb len 5 [ 734.058202][T10644] hci2 opcode 0x040f plen 4 [ 734.058276][T12547] hci2: [ 734.058311][T12547] hci2: entry ffff88803cc64000 [ 734.058605][T10644] hci2: skb len 7 [ 734.058936][T10644] hci2 Event packet [ 734.059435][T10644] hci2: event 0x0b [ 734.059454][T10644] hci2: status 0x00 [ 734.059489][T10644] hci2 opcode 0x0419 plen 10 [ 734.059888][T10644] hci2: skb len 13 [ 734.059919][T10644] hcon ffff888037570000 bdaddr 10:aa:aa:aa:aa:aa status 0 [ 734.059943][T10644] hci2 hcon ffff888037570000 [ 734.060345][T10644] hcon ffff888037570000 conn ffff8880277dc800 hchan ffff88802b3f6b00 [ 734.060429][T10644] conn ffff8880277dc800 [ 734.060493][T10644] conn ffff8880277dc800, code 0x0a, ident 0x01, len 2 [ 734.060930][T10644] code 0x0a [ 734.060956][T10644] hci2 chan ffff88802b3f6b00 flags 0x0002 [ 734.060981][T10644] hci2 nonfrag skb ffff888034248640 len 14 [ 734.061017][T10644] hci2: chan ffff88802b3f6b00 queued 1 [ 734.061306][T10644] hcon ffff888037570000 orig refcnt 1 [ 734.061633][T10644] hci2 Event packet [ 734.062050][T10644] hci2: event 0x3e [ 734.062065][T10644] hci2: subevent 0x01 [ 734.062079][T10644] hci2: status 0x00 [ 734.062108][T10644] hci2: dst 11:aa:aa:aa:aa:aa [ 734.062462][T10644] hci2: dst 11:aa:aa:aa:aa:aa handle 0x0f00 [ 734.062743][T10644] hci2 orig refcnt 10 [ 734.062756][T10644] hci2: conn ffff88802971c000 [ 734.062784][T10644] hci2: hcon ffff88802971c000 handle 0x00c9 [ 734.063488][T10644] channel 3 len 19 [ 734.063881][T10644] hci2: conn ffff88802971c000 [ 734.064297][T10644] device: 'hci2:201': device_add [ 734.064343][T10644] kobject: 'hci2:201' (ffff88802971ccf0): kobject_add_internal: parent: 'hci2', set: 'devices' [ 734.065013][T10644] bluetooth hci2:201: No ACPI support [ 734.069559][T10644] PM: Adding info for No Bus:hci2:201 [ 734.069611][T10644] kobject: 'hci2:201' (ffff88802971ccf0): kobject_uevent_env [ 734.070055][T10644] kobject: 'hci2:201' (ffff88802971ccf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/hci2:201' [ 734.071733][T10644] hcon ffff88802971c000 bdaddr 11:aa:aa:aa:aa:aa status 0 [ 734.071764][T10644] hci2 hcon ffff88802971c000 [ 734.072139][T10644] hcon ffff88802971c000 conn ffff8880277df000 hchan ffff88805a169b00 [ 734.072228][T10644] conn ffff8880277df000 [ 734.072265][T10644] hci2 conn ffff8880277df000 [ 734.072297][T10644] conn ffff8880277df000, code 0x12, ident 0x01, len 8 [ 734.072723][T10644] code 0x12 [ 734.072762][T10644] hci2 chan ffff88805a169b00 flags 0x0000 [ 734.072789][T10644] hci2 nonfrag skb ffff88802ced8a00 len 20 [ 734.072829][T10644] hci2: chan ffff88805a169b00 queued 1 [ 734.073532][T12547] hci2: [ 734.073555][T12547] hci2: entry ffff88803cc64280 [ 734.073776][T10644] hci2 cmd_cnt 0 cmd queued 3 [ 734.073823][T10644] hci2 acl 4 sco 0 le 0 iso 0 [ 734.073852][T10644] hci2: type 0 [ 734.073881][T10644] hci2: type 2 [ 734.073901][T10644] hci2 [ 734.073916][T10644] hci2 [ 734.073931][T10644] hci2 [ 734.073946][T10644] hci2 [ 734.073974][T10644] hci2 [ 734.074000][T10644] chan ffff88802b3f6b00 quote 4 [ 734.074020][T10644] chan ffff88802b3f6b00 skb ffff888034248640 len 14 priority 7 [ 734.074055][T10644] hcon ffff888037570000 mode 0 [ 734.074078][T10644] hci2 type 2 len 14 [ 734.074133][T10644] hci2: type 0 [ 734.074154][T10644] hci2: type 2 [ 734.074180][T10644] hci2 [ 734.074212][T10644] hci2 [ 734.074251][T10644] hci2 [ 734.074289][T10644] hci2 [ 734.074324][T10644] chan ffff88805a169b00 quote 3 [ 734.074350][T10644] chan ffff88805a169b00 skb ffff88802ced8a00 len 20 priority 7 [ 734.074396][T10644] hci2 type 2 len 20 [ 734.074446][T10644] hci2: type 0 [ 734.074460][T10644] hci2: type 2 [ 734.074473][T10644] hci2 [ 734.074489][T10644] hci2 [ 734.074544][T10644] [ 734.074624][T10644] [ 734.116983][ T1356] Added buffer head 1 to ffff88802712b000 [ 734.117306][ T1356] Added buffer head 0 to ffff88802712b000 [ 734.118988][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 734.119519][ T850] No more buffers in queue [ 734.330644][ T42] Added buffer head 0 to ffff88802712b000 [ 734.331056][ T42] Added buffer head 1 to ffff88802712b000 [ 734.339688][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 734.340209][ T850] No more buffers in queue [ 734.558861][ T42] Added buffer head 1 to ffff88802712b000 [ 734.566275][ T42] Added buffer head 0 to ffff88802712b000 [ 734.568838][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 734.575483][ T850] No more buffers in queue [ 734.725891][ C0] net_ratelimit: 24 callbacks suppressed [ 734.725909][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000b, type=0, ifindex=8) => 00000001 [ 734.725931][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 734.725948][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 734.725966][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 734.725983][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 734.726825][ C0] ipv6_addr_label(addr=fe80:0000:0000:0000:0000:0000:0000:000b, type=0, ifindex=8) => 00000001 [ 734.726845][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 734.726861][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 734.726878][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 734.726899][ C0] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 734.775273][ T42] Added buffer head 0 to ffff88802712b000 [ 734.775621][ T42] Added buffer head 1 to ffff88802712b000 [ 734.778483][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 734.783717][ T850] No more buffers in queue [ 734.798345][ T8754] ffff888055eb4000 name hci4 bus 0 [ 734.805074][ T8754] hci4: Updating devcoredump state from IDLE to IDLE. [ 734.805127][ T8754] hci4: err 0x13 [ 734.805350][ T5741] hci4: end: err -19 [ 734.805653][ T8754] hci4 ffff888055eb4000 [ 734.805704][ T8754] hci4: [ 734.806017][ C3] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 734.840240][ T1159] nf_nat: Already setup manip DST for ct ffff888025711380 (status bits 0x188) [ 734.840275][ T1159] nf_nat: Already setup manip SRC for ct ffff888025711380 (status bits 0x188) [ 734.878847][ T8754] hci4: err 0x13 [ 734.878867][ T8754] hci4: cancelling interleave scan [ 734.879015][ T8754] All LE pending actions cleared [ 734.879028][ T8754] hdev hci4 [ 734.879054][ T8754] hcon ffff8880367dc000 reason 22 [ 734.879071][ T8754] hcon ffff8880367dc000 conn ffff88805c95a800, err 103 [ 734.879137][ T8754] hci4 hcon ffff8880367dc000 chan ffff88805739a500 [ 734.884338][ T8754] hci4 hcon ffff8880367dc000 handle 201 [ 734.884377][ T8754] hci4: hcon ffff8880367dc000 [ 734.896443][ T8754] hcon ffff8880367dc000 [ 734.896466][ T8754] hci4: conn ffff8880367dc000 [ 734.896492][ T8754] device: 'hci4:201': device_unregister [ 734.896938][ T8754] kernfs runtime_status: removing [ 734.897470][ T8754] kernfs control: removing [ 734.898012][ T8754] kernfs runtime_suspended_time: removing [ 734.898593][ T8754] kernfs runtime_active_time: removing [ 734.899116][ T8754] kernfs autosuspend_delay_ms: removing [ 734.900077][ T8754] kernfs power: removing [ 734.900688][ T8754] kernfs device: removing [ 734.901211][ T8754] kernfs subsystem: removing [ 734.901760][ T8754] kernfs hci4:201: removing [ 734.902367][ T8754] kernfs uevent: removing [ 734.902624][ T8754] PM: Removing info for No Bus:hci4:201 [ 734.902792][ T8754] kobject: 'hci4:201' (ffff8880367dccf0): kobject_uevent_env [ 734.903321][ T8754] kobject: 'hci4:201' (ffff8880367dccf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 734.914116][ T8754] kernfs hci4:201: removing [ 734.914337][ T8754] kobject: 'hci4:201' (ffff8880367dccf0): kobject_cleanup, parent 0000000000000000 [ 734.914363][ T8754] kobject: 'hci4:201' (ffff8880367dccf0): calling ktype release [ 734.914915][ T8754] kobject: 'hci4:201': free name [ 734.915223][ T8754] hci4 orig refcnt 9 [ 734.915268][ T8754] hcon ffff8880354ac000 reason 22 [ 734.915289][ T8754] hcon ffff8880354ac000 conn ffff888056955800, err 103 [ 734.915382][ T8754] chan ffff88802e664000 orig refcnt 3 [ 734.915454][ T8754] chan ffff88802e664000 orig refcnt 4 [ 734.915480][ T8754] chan ffff88802e664000, err 103, state BT_CONNECT [ 734.915507][ T8754] chan ffff88802e664000 state BT_CONNECT [ 734.915552][ T8754] ffff88802e661000 state 9 [ 734.915988][ T3371] ffff88802ab12800 state 3 [ 734.916014][ T3371] session ffff88802ab12800 state 9 err 103 [ 734.916037][ T3371] session ffff88802ab12800 state 9 [ 734.916096][ T3371] session ffff88802ab12800 state 9 [ 734.916117][ T3371] session ffff88802ab12800 state 9 [ 734.916175][ T3371] sock ffff88802e24b9c0, sk ffff88802e661000 [ 734.922698][ T8754] chan ffff88802e664000 orig refcnt 3 [ 734.922730][ T8754] hcon ffff8880354ac000 orig refcnt 1 [ 734.923225][ T5741] hcon ffff8880354ac000 state BT_CLOSED [ 734.923247][ T5741] hcon ffff8880354ac000 [ 734.923274][ T5741] hci4: handle 0xf00 reason 0x13 [ 734.923479][ T8754] chan ffff88802e664000 orig refcnt 2 [ 734.923506][ T8754] hci4 hcon ffff8880354ac000 chan ffff88805a15ba00 [ 734.923642][ T3371] parent ffff88802e661000 state BT_CLOSED [ 734.923723][ T3371] parent ffff88802e661000 [ 734.923773][ T3371] sock ffff88802e24b9c0, sk ffff88802e661000, how 2 [ 734.923810][ T3371] Handling sock shutdown [ 734.923827][ T3371] chan ffff88802e664000 orig refcnt 1 [ 734.923850][ T3371] chan ffff88802e664000 state BT_CLOSED [ 734.923902][ T3371] conn ffff888056955800 orig refcnt 2 [ 734.990089][ T42] Added buffer head 1 to ffff88802712b000 [ 734.990449][ T42] Added buffer head 0 to ffff88802712b000 [ 734.992354][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 734.992746][ T850] No more buffers in queue [ 735.004696][ T8754] hci4 hcon ffff8880354ac000 handle 3840 [ 735.004732][ T8754] hci4: hcon ffff8880354ac000 [ 735.004846][ T3371] chan ffff88802e664000 state BT_CLOSED [ 735.004868][ T3371] chan ffff88802e664000 state BT_CLOSED [ 735.004909][ T3371] chan ffff88802e664000 orig refcnt 2 [ 735.004933][ T3371] Sock shutdown complete err: -103 [ 735.004948][ T3371] chan ffff88802e664000 orig refcnt 1 [ 735.004981][ T3371] sk ffff88802e661000 state BT_CLOSED [ 735.005009][ T3371] chan ffff88802e664000 orig refcnt 2 [ 735.005060][ T3371] sk ffff88802e661000 [ 735.005668][ T3371] chan ffff88802e664000 orig refcnt 1 [ 735.005694][ T3371] chan ffff88802e664000 [ 735.045008][ T8754] hcon ffff8880354ac000 [ 735.045330][ T8754] hci4: conn ffff8880354ac000 [ 735.045344][ T8754] kobject: '(null)' (ffff8880354accf0): kobject_cleanup, parent 0000000000000000 [ 735.045358][ T8754] kobject: '(null)' (ffff8880354accf0): calling ktype release [ 735.045579][ T8754] hci4 orig refcnt 7 [ 735.045595][ T8754] hdev hci4 event 4 [ 735.045921][ T8754] hdev 0000000000000000 len 8 [ 735.046234][ T8754] hci4: Cleanup of MSFT extension [ 735.074590][ T8754] hdev hci4 event 8 [ 735.074642][ T8754] hci4 orig refcnt 6 [ 735.075244][ T8754] channel 3 len 6 [ 735.085141][ T8754] channel 3 len 8 [ 735.085595][ T8754] hdev hci4 event 2 [ 735.086278][ T8754] hdev 0000000000000000 len 8 [ 735.087082][ T8754] kernfs runtime_status: removing [ 735.097559][ T8754] kernfs control: removing [ 735.097875][ T8754] kernfs runtime_suspended_time: removing [ 735.098162][ T8754] kernfs runtime_active_time: removing [ 735.098459][ T8754] kernfs autosuspend_delay_ms: removing [ 735.098976][ T8754] kernfs power: removing [ 735.099357][ T8754] kernfs device: removing [ 735.099625][ T8754] kernfs subsystem: removing [ 735.106317][ T8754] kernfs rfkill25: removing [ 735.106648][ T8754] kernfs uevent: removing [ 735.106834][ T8754] kernfs name: removing [ 735.107146][ T8754] kernfs type: removing [ 735.107429][ T8754] kernfs index: removing [ 735.107735][ T8754] kernfs persistent: removing [ 735.108051][ T8754] kernfs state: removing [ 735.108343][ T8754] kernfs soft: removing [ 735.114710][ T8754] kernfs hard: removing [ 735.114997][ T8754] kernfs hard_block_reasons: removing [ 735.115265][ T8754] PM: Removing info for No Bus:rfkill25 [ 735.115345][ T8754] kobject: 'rfkill25' (ffff8880590ee110): kobject_uevent_env [ 735.115637][ T8754] kobject: 'rfkill25' (ffff8880590ee110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill25' [ 735.121995][ T8754] kernfs rfkill25: removing [ 735.124732][ T8754] kobject: 'rfkill25' (ffff8880590ee110): kobject_cleanup, parent 0000000000000000 [ 735.124751][ T8754] kobject: 'rfkill25' (ffff8880590ee110): calling ktype release [ 735.125028][ T8754] kobject: 'rfkill25': free name [ 735.125406][ T8754] kernfs runtime_status: removing [ 735.125704][ T8754] kernfs control: removing [ 735.152986][ T8754] kernfs runtime_suspended_time: removing [ 735.153471][ T8754] kernfs runtime_active_time: removing [ 735.153914][ T8754] kernfs autosuspend_delay_ms: removing [ 735.154771][ T8754] kernfs power: removing [ 735.163077][ T8754] kernfs subsystem: removing [ 735.163563][ T8754] kernfs hci4: removing [ 735.164051][ T8754] kernfs uevent: removing [ 735.164376][ T8754] kernfs reset: removing [ 735.164766][ T8754] PM: Removing info for No Bus:hci4 [ 735.172406][ T8754] kobject: 'hci4' (ffff888055eb5538): kobject_uevent_env [ 735.172698][ T8754] kobject: 'hci4' (ffff888055eb5538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 735.173847][ T8754] kernfs hci4: removing [ 735.174005][ T8754] hci4 orig refcnt 2 [ 735.174017][ T8754] kobject: 'hci4' (ffff888055eb5538): kobject_cleanup, parent 0000000000000000 [ 735.174033][ T8754] kobject: 'hci4' (ffff888055eb5538): calling ktype release [ 735.190037][ T8754] All LE connection parameters were removed [ 735.190068][ T8754] hci4: Unregister MSFT extension [ 735.211209][ T1356] Added buffer head 0 to ffff88802712b000 [ 735.211542][ T1356] Added buffer head 1 to ffff88802712b000 [ 735.212408][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 735.212913][ T850] No more buffers in queue [ 735.212947][ T8754] kobject: 'hci4': free name [ 735.359549][ T12] kernfs bonding_masters: removing [ 735.438121][ T1356] Added buffer head 1 to ffff88802712b000 [ 735.438548][ T1356] Added buffer head 0 to ffff88802712b000 [ 735.439348][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 735.445182][ T850] No more buffers in queue [ 735.449248][ C0] bridge0: port 2(bridge_slave_1) forward delay timer [ 735.449281][ C0] bridge0: port 2(bridge_slave_1) event 16 [ 735.450119][ C0] bridge0: br_fill_ifinfo event 16 port bridge_slave_1 master bridge0 [ 735.451094][ C0] bridge0: port 1(bridge_slave_0) forward delay timer [ 735.451131][ C0] bridge0: port 1(bridge_slave_0) event 16 [ 735.451949][ C0] bridge0: br_fill_ifinfo event 16 port bridge_slave_0 master bridge0 [ 735.542107][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 735.542141][ T12] net netdevsim3: siw: event 6 [ 735.571031][ T12] netdevsim netdevsim6 netdevsim3 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 735.571068][ T12] net netdevsim3: siw: event 18 [ 735.571497][ T12] kernfs rps_cpus: removing [ 735.571812][ T12] kernfs rps_flow_cnt: removing [ 735.572102][ T12] kobject: 'rx-0' (ffff88801ded7850): kobject_cleanup, parent ffff888036fec650 [ 735.572120][ T12] kobject: 'rx-0' (ffff88801ded7850): auto cleanup kobject_del [ 735.572135][ T12] kobject: 'rx-0' (ffff88801ded7850): auto cleanup 'remove' event [ 735.572150][ T12] kobject: 'rx-0' (ffff88801ded7850): kobject_uevent_env [ 735.572165][ T12] kobject: 'rx-0' (ffff88801ded7850): kobject_uevent_env: uevent_suppress caused the event to drop! [ 735.572223][ T12] kernfs rx-0: removing [ 735.572486][ T12] kobject: 'rx-0' (ffff88801ded7850): calling ktype release [ 735.579576][ T12] kobject: 'rx-0': free name [ 735.579787][ T12] kernfs limit: removing [ 735.580106][ T12] kernfs limit_max: removing [ 735.580434][ T12] kernfs limit_min: removing [ 735.580709][ T12] kernfs hold_time: removing [ 735.581000][ T12] kernfs inflight: removing [ 735.581339][ T12] kernfs stall_thrs: removing [ 735.581697][ T12] kernfs stall_cnt: removing [ 735.589140][ T12] kernfs stall_max: removing [ 735.589466][ T12] kernfs byte_queue_limits: removing [ 735.589791][ T12] kernfs tx_timeout: removing [ 735.590192][ T12] kernfs traffic_class: removing [ 735.590647][ T12] kernfs xps_cpus: removing [ 735.598323][ T12] kernfs xps_rxqs: removing [ 735.598702][ T12] kernfs tx_maxrate: removing [ 735.598973][ T12] kobject: 'tx-0' (ffff88802d972020): kobject_cleanup, parent ffff888036fec650 [ 735.598987][ T12] kobject: 'tx-0' (ffff88802d972020): auto cleanup kobject_del [ 735.598998][ T12] kobject: 'tx-0' (ffff88802d972020): auto cleanup 'remove' event [ 735.599008][ T12] kobject: 'tx-0' (ffff88802d972020): kobject_uevent_env [ 735.599020][ T12] kobject: 'tx-0' (ffff88802d972020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 735.599051][ T12] kernfs tx-0: removing [ 735.599330][ T12] kobject: 'tx-0' (ffff88802d972020): calling ktype release [ 735.599487][ T12] kobject: 'tx-0': free name [ 735.599665][ T12] kernfs queues: removing [ 735.599948][ T12] kobject: 'queues' (ffff888036fec650): kobject_cleanup, parent 0000000000000000 [ 735.599966][ T12] kobject: 'queues' (ffff888036fec650): calling ktype release [ 735.599981][ T12] kobject: 'queues' (ffff888036fec650): kset_release [ 735.600109][ T12] kobject: 'queues': free name [ 735.607271][ T12] kernfs runtime_status: removing [ 735.607609][ T12] kernfs control: removing [ 735.607954][ T12] kernfs runtime_suspended_time: removing [ 735.608343][ T12] kernfs runtime_active_time: removing [ 735.608666][ T12] kernfs autosuspend_delay_ms: removing [ 735.609198][ T12] kernfs power: removing [ 735.616406][ T12] kernfs device: removing [ 735.616712][ T12] kernfs subsystem: removing [ 735.617019][ T12] kernfs netdevsim3: removing [ 735.617388][ T12] kernfs uevent: removing [ 735.617755][ T12] kernfs rx_packets: removing [ 735.618071][ T12] kernfs tx_packets: removing [ 735.625151][ T12] kernfs rx_bytes: removing [ 735.625477][ T12] kernfs tx_bytes: removing [ 735.625853][ T12] kernfs rx_errors: removing [ 735.626175][ T12] kernfs tx_errors: removing [ 735.626505][ T12] kernfs rx_dropped: removing [ 735.626800][ T12] kernfs tx_dropped: removing [ 735.627091][ T12] kernfs multicast: removing [ 735.634218][ T12] kernfs collisions: removing [ 735.634580][ T12] kernfs rx_length_errors: removing [ 735.634950][ T12] kernfs rx_over_errors: removing [ 735.635258][ T12] kernfs rx_crc_errors: removing [ 735.635576][ T12] kernfs rx_frame_errors: removing [ 735.636019][ T12] kernfs rx_fifo_errors: removing [ 735.643084][ T12] kernfs rx_missed_errors: removing [ 735.643392][ T12] kernfs tx_aborted_errors: removing [ 735.643714][ T12] kernfs tx_carrier_errors: removing [ 735.644086][ T12] kernfs tx_fifo_errors: removing [ 735.644389][ T12] kernfs tx_heartbeat_errors: removing [ 735.644694][ T12] kernfs tx_window_errors: removing [ 735.652237][ T12] kernfs rx_compressed: removing [ 735.652598][ T12] kernfs tx_compressed: removing [ 735.652996][ T12] kernfs rx_nohandler: removing [ 735.653307][ T12] kernfs statistics: removing [ 735.653637][ T12] kernfs phys_port_name: removing [ 735.653981][ T12] kernfs phys_switch_id: removing [ 735.654266][ T12] kernfs netdev_group: removing [ 735.661621][ T12] kernfs type: removing [ 735.662072][ T12] kernfs dev_id: removing [ 735.662534][ T12] kernfs dev_port: removing [ 735.663015][ T12] kernfs iflink: removing [ 735.670295][ T12] kernfs ifindex: removing [ 735.670641][ T12] kernfs name_assign_type: removing [ 735.670955][ T12] kernfs addr_assign_type: removing [ 735.671254][ T12] kernfs addr_len: removing [ 735.671566][ T12] kernfs link_mode: removing [ 735.671903][ T12] kernfs address: removing [ 735.672194][ T12] kernfs broadcast: removing [ 735.677420][ T1356] Added buffer head 0 to ffff88802712b000 [ 735.678008][ T1356] Added buffer head 1 to ffff88802712b000 [ 735.678949][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 735.679253][ T12] kernfs speed: removing [ 735.679536][ T12] kernfs duplex: removing [ 735.679841][ T12] kernfs dormant: removing [ 735.680168][ T12] kernfs testing: removing [ 735.680479][ T12] kernfs operstate: removing [ 735.680768][ T12] kernfs carrier_changes: removing [ 735.681094][ T12] kernfs ifalias: removing [ 735.682458][ T850] No more buffers in queue [ 735.697981][ T12] kernfs carrier: removing [ 735.698316][ T12] kernfs mtu: removing [ 735.698617][ T12] kernfs flags: removing [ 735.698910][ T12] kernfs tx_queue_len: removing [ 735.699223][ T12] kernfs gro_flush_timeout: removing [ 735.699560][ T12] kernfs napi_defer_hard_irqs: removing [ 735.699847][ T12] kernfs proto_down: removing [ 735.704915][ T12] kernfs carrier_up_count: removing [ 735.705230][ T12] kernfs carrier_down_count: removing [ 735.705549][ T12] kernfs threaded: removing [ 735.728461][ T12] PM: Removing info for No Bus:netdevsim3 [ 735.728513][ T12] kobject: 'netdevsim3' (ffff88803f9bc7c0): kobject_uevent_env [ 735.728527][ T12] kobject: 'netdevsim3' (ffff88803f9bc7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 735.728566][ T12] kernfs netdevsim3: removing [ 735.853382][ T5729] Added buffer head 1 to ffff88802712b000 [ 735.853961][ T5729] Added buffer head 0 to ffff88802712b000 [ 735.854868][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 735.855204][ T850] No more buffers in queue [ 735.869739][ T12] kobject: 'netdevsim3' (ffff88803f9bc7c0): kobject_cleanup, parent 0000000000000000 [ 735.869774][ T12] kobject: 'netdevsim3' (ffff88803f9bc7c0): calling ktype release [ 735.870236][ T12] kobject: 'netdevsim3': free name [ 736.077835][ T5729] Added buffer head 0 to ffff88802712b000 [ 736.078426][ T5729] Added buffer head 1 to ffff88802712b000 [ 736.079264][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 736.079810][ T850] No more buffers in queue [ 736.086803][ T5741] Bluetooth: hci2: command tx timeout [ 736.086904][ T5741] hci2 cmd_cnt 1 cmd queued 3 [ 736.086919][ T5741] hci2: skb ffff888034248b40 [ 736.087112][ T5741] hci2 type 1 len 5 [ 736.118575][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 736.118626][ T12] net netdevsim2: siw: event 6 [ 736.180580][ T12] netdevsim netdevsim6 netdevsim2 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 736.180611][ T12] net netdevsim2: siw: event 18 [ 736.181095][ T12] kernfs rps_cpus: removing [ 736.181403][ T12] kernfs rps_flow_cnt: removing [ 736.181677][ T12] kobject: 'rx-0' (ffff88803cd8f850): kobject_cleanup, parent ffff8880343c1e50 [ 736.181693][ T12] kobject: 'rx-0' (ffff88803cd8f850): auto cleanup kobject_del [ 736.181706][ T12] kobject: 'rx-0' (ffff88803cd8f850): auto cleanup 'remove' event [ 736.181718][ T12] kobject: 'rx-0' (ffff88803cd8f850): kobject_uevent_env [ 736.181732][ T12] kobject: 'rx-0' (ffff88803cd8f850): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.181775][ T12] kernfs rx-0: removing [ 736.182071][ T12] kobject: 'rx-0' (ffff88803cd8f850): calling ktype release [ 736.182192][ T12] kobject: 'rx-0': free name [ 736.182422][ T12] kernfs limit: removing [ 736.182703][ T12] kernfs limit_max: removing [ 736.188112][ T12] kernfs limit_min: removing [ 736.188444][ T12] kernfs hold_time: removing [ 736.188771][ T12] kernfs inflight: removing [ 736.189064][ T12] kernfs stall_thrs: removing [ 736.189367][ T12] kernfs stall_cnt: removing [ 736.189750][ T12] kernfs stall_max: removing [ 736.190075][ T12] kernfs byte_queue_limits: removing [ 736.190347][ T12] kernfs tx_timeout: removing [ 736.196303][ T12] kernfs traffic_class: removing [ 736.196592][ T12] kernfs xps_cpus: removing [ 736.196896][ T12] kernfs xps_rxqs: removing [ 736.197238][ T12] kernfs tx_maxrate: removing [ 736.197546][ T12] kobject: 'tx-0' (ffff88805707d020): kobject_cleanup, parent ffff8880343c1e50 [ 736.197559][ T12] kobject: 'tx-0' (ffff88805707d020): auto cleanup kobject_del [ 736.197568][ T12] kobject: 'tx-0' (ffff88805707d020): auto cleanup 'remove' event [ 736.197578][ T12] kobject: 'tx-0' (ffff88805707d020): kobject_uevent_env [ 736.197588][ T12] kobject: 'tx-0' (ffff88805707d020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.197615][ T12] kernfs tx-0: removing [ 736.197891][ T12] kobject: 'tx-0' (ffff88805707d020): calling ktype release [ 736.198031][ T12] kobject: 'tx-0': free name [ 736.198273][ T12] kernfs queues: removing [ 736.203513][ T12] kobject: 'queues' (ffff8880343c1e50): kobject_cleanup, parent 0000000000000000 [ 736.203530][ T12] kobject: 'queues' (ffff8880343c1e50): calling ktype release [ 736.203542][ T12] kobject: 'queues' (ffff8880343c1e50): kset_release [ 736.203738][ T12] kobject: 'queues': free name [ 736.203959][ T12] kernfs runtime_status: removing [ 736.204335][ T12] kernfs control: removing [ 736.204614][ T12] kernfs runtime_suspended_time: removing [ 736.204912][ T12] kernfs runtime_active_time: removing [ 736.205243][ T12] kernfs autosuspend_delay_ms: removing [ 736.210648][ T12] kernfs power: removing [ 736.210976][ T12] kernfs device: removing [ 736.211282][ T12] kernfs subsystem: removing [ 736.211598][ T12] kernfs netdevsim2: removing [ 736.211887][ T12] kernfs uevent: removing [ 736.212268][ T12] kernfs rx_packets: removing [ 736.212596][ T12] kernfs tx_packets: removing [ 736.217995][ T12] kernfs rx_bytes: removing [ 736.218315][ T12] kernfs tx_bytes: removing [ 736.218656][ T12] kernfs rx_errors: removing [ 736.218992][ T12] kernfs tx_errors: removing [ 736.219303][ T12] kernfs rx_dropped: removing [ 736.219588][ T12] kernfs tx_dropped: removing [ 736.224721][ T12] kernfs multicast: removing [ 736.225056][ T12] kernfs collisions: removing [ 736.225344][ T12] kernfs rx_length_errors: removing [ 736.225653][ T12] kernfs rx_over_errors: removing [ 736.228922][ T12] kernfs rx_crc_errors: removing [ 736.229261][ T12] kernfs rx_frame_errors: removing [ 736.232047][ T12] kernfs rx_fifo_errors: removing [ 736.232384][ T12] kernfs rx_missed_errors: removing [ 736.232677][ T12] kernfs tx_aborted_errors: removing [ 736.232980][ T12] kernfs tx_carrier_errors: removing [ 736.233324][ T12] kernfs tx_fifo_errors: removing [ 736.233642][ T12] kernfs tx_heartbeat_errors: removing [ 736.233929][ T12] kernfs tx_window_errors: removing [ 736.238940][ T12] kernfs rx_compressed: removing [ 736.239249][ T12] kernfs tx_compressed: removing [ 736.239545][ T12] kernfs rx_nohandler: removing [ 736.239857][ T12] kernfs statistics: removing [ 736.240204][ T12] kernfs phys_port_name: removing [ 736.240488][ T12] kernfs phys_switch_id: removing [ 736.245611][ T12] kernfs netdev_group: removing [ 736.246009][ T12] kernfs type: removing [ 736.246312][ T12] kernfs dev_id: removing [ 736.246601][ T12] kernfs dev_port: removing [ 736.246918][ T12] kernfs iflink: removing [ 736.247257][ T12] kernfs ifindex: removing [ 736.247537][ T12] kernfs name_assign_type: removing [ 736.252184][ T12] kernfs addr_assign_type: removing [ 736.252521][ T12] kernfs addr_len: removing [ 736.252877][ T12] kernfs link_mode: removing [ 736.253172][ T12] kernfs address: removing [ 736.253474][ T12] kernfs broadcast: removing [ 736.253799][ T12] kernfs speed: removing [ 736.254123][ T12] kernfs duplex: removing [ 736.260561][ T12] kernfs dormant: removing [ 736.260867][ T12] kernfs testing: removing [ 736.261200][ T12] kernfs operstate: removing [ 736.261541][ T12] kernfs carrier_changes: removing [ 736.261823][ T12] kernfs ifalias: removing [ 736.262119][ T12] kernfs carrier: removing [ 736.262446][ T12] kernfs mtu: removing [ 736.271894][ T12] kernfs flags: removing [ 736.272228][ T12] kernfs tx_queue_len: removing [ 736.272520][ T12] kernfs gro_flush_timeout: removing [ 736.272828][ T12] kernfs napi_defer_hard_irqs: removing [ 736.273160][ T12] kernfs proto_down: removing [ 736.273500][ T12] kernfs carrier_up_count: removing [ 736.273792][ T12] kernfs carrier_down_count: removing [ 736.281317][ T12] kernfs threaded: removing [ 736.281618][ T12] PM: Removing info for No Bus:netdevsim2 [ 736.281691][ T12] kobject: 'netdevsim2' (ffff8880587087c0): kobject_uevent_env [ 736.281703][ T12] kobject: 'netdevsim2' (ffff8880587087c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.281737][ T12] kernfs netdevsim2: removing [ 736.291344][ T5729] Added buffer head 1 to ffff88802712b000 [ 736.311796][ T5729] Added buffer head 0 to ffff88802712b000 [ 736.313235][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 736.313588][ T850] No more buffers in queue [ 736.425221][ T12] kobject: 'netdevsim2' (ffff8880587087c0): kobject_cleanup, parent 0000000000000000 [ 736.425259][ T12] kobject: 'netdevsim2' (ffff8880587087c0): calling ktype release [ 736.425716][ T12] kobject: 'netdevsim2': free name [ 736.543020][ T1356] Added buffer head 0 to ffff88802712b000 [ 736.543348][ T1356] Added buffer head 1 to ffff88802712b000 [ 736.544157][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 736.544489][ T850] No more buffers in queue [ 736.574592][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 736.574630][ T12] net netdevsim1: siw: event 6 [ 736.610566][ T12] netdevsim netdevsim6 netdevsim1 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 736.610600][ T12] net netdevsim1: siw: event 18 [ 736.611063][ T12] kernfs rps_cpus: removing [ 736.618385][ T12] kernfs rps_flow_cnt: removing [ 736.618679][ T12] kobject: 'rx-0' (ffff888056ecd650): kobject_cleanup, parent ffff88802d0f1a50 [ 736.618694][ T12] kobject: 'rx-0' (ffff888056ecd650): auto cleanup kobject_del [ 736.618705][ T12] kobject: 'rx-0' (ffff888056ecd650): auto cleanup 'remove' event [ 736.618717][ T12] kobject: 'rx-0' (ffff888056ecd650): kobject_uevent_env [ 736.618729][ T12] kobject: 'rx-0' (ffff888056ecd650): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.618765][ T12] kernfs rx-0: removing [ 736.619064][ T12] kobject: 'rx-0' (ffff888056ecd650): calling ktype release [ 736.619232][ T12] kobject: 'rx-0': free name [ 736.619430][ T12] kernfs limit: removing [ 736.619744][ T12] kernfs limit_max: removing [ 736.620019][ T12] kernfs limit_min: removing [ 736.620321][ T12] kernfs hold_time: removing [ 736.627427][ T12] kernfs inflight: removing [ 736.627708][ T12] kernfs stall_thrs: removing [ 736.628000][ T12] kernfs stall_cnt: removing [ 736.628314][ T12] kernfs stall_max: removing [ 736.628781][ T12] kernfs byte_queue_limits: removing [ 736.629118][ T12] kernfs tx_timeout: removing [ 736.636216][ T12] kernfs traffic_class: removing [ 736.636556][ T12] kernfs xps_cpus: removing [ 736.636852][ T12] kernfs xps_rxqs: removing [ 736.637158][ T12] kernfs tx_maxrate: removing [ 736.637449][ T12] kobject: 'tx-0' (ffff8880568a5020): kobject_cleanup, parent ffff88802d0f1a50 [ 736.637467][ T12] kobject: 'tx-0' (ffff8880568a5020): auto cleanup kobject_del [ 736.637480][ T12] kobject: 'tx-0' (ffff8880568a5020): auto cleanup 'remove' event [ 736.637495][ T12] kobject: 'tx-0' (ffff8880568a5020): kobject_uevent_env [ 736.637510][ T12] kobject: 'tx-0' (ffff8880568a5020): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.637562][ T12] kernfs tx-0: removing [ 736.637868][ T12] kobject: 'tx-0' (ffff8880568a5020): calling ktype release [ 736.637949][ T12] kobject: 'tx-0': free name [ 736.638159][ T12] kernfs queues: removing [ 736.645434][ T12] kobject: 'queues' (ffff88802d0f1a50): kobject_cleanup, parent 0000000000000000 [ 736.645449][ T12] kobject: 'queues' (ffff88802d0f1a50): calling ktype release [ 736.645459][ T12] kobject: 'queues' (ffff88802d0f1a50): kset_release [ 736.645591][ T12] kobject: 'queues': free name [ 736.645894][ T12] kernfs runtime_status: removing [ 736.646199][ T12] kernfs control: removing [ 736.646475][ T12] kernfs runtime_suspended_time: removing [ 736.646766][ T12] kernfs runtime_active_time: removing [ 736.647081][ T12] kernfs autosuspend_delay_ms: removing [ 736.653267][ T12] kernfs power: removing [ 736.653626][ T12] kernfs device: removing [ 736.653967][ T12] kernfs subsystem: removing [ 736.654502][ T12] kernfs netdevsim1: removing [ 736.654994][ T12] kernfs uevent: removing [ 736.660961][ T12] kernfs rx_packets: removing [ 736.661468][ T12] kernfs tx_packets: removing [ 736.661991][ T12] kernfs rx_bytes: removing [ 736.662496][ T12] kernfs tx_bytes: removing [ 736.667702][ T12] kernfs rx_errors: removing [ 736.668159][ T12] kernfs tx_errors: removing [ 736.668614][ T12] kernfs rx_dropped: removing [ 736.669102][ T12] kernfs tx_dropped: removing [ 736.674207][ T12] kernfs multicast: removing [ 736.674659][ T12] kernfs collisions: removing [ 736.675165][ T12] kernfs rx_length_errors: removing [ 736.675717][ T12] kernfs rx_over_errors: removing [ 736.681015][ T12] kernfs rx_crc_errors: removing [ 736.681333][ T12] kernfs rx_frame_errors: removing [ 736.681662][ T12] kernfs rx_fifo_errors: removing [ 736.681979][ T12] kernfs rx_missed_errors: removing [ 736.682261][ T12] kernfs tx_aborted_errors: removing [ 736.682568][ T12] kernfs tx_carrier_errors: removing [ 736.682903][ T12] kernfs tx_fifo_errors: removing [ 736.683274][ T12] kernfs tx_heartbeat_errors: removing [ 736.683565][ T12] kernfs tx_window_errors: removing [ 736.683884][ T12] kernfs rx_compressed: removing [ 736.684265][ T12] kernfs tx_compressed: removing [ 736.684549][ T12] kernfs rx_nohandler: removing [ 736.684843][ T12] kernfs statistics: removing [ 736.685234][ T12] kernfs phys_port_name: removing [ 736.685595][ T12] kernfs phys_switch_id: removing [ 736.695068][ T12] kernfs netdev_group: removing [ 736.695385][ T12] kernfs type: removing [ 736.704830][ T12] kernfs dev_id: removing [ 736.705191][ T12] kernfs dev_port: removing [ 736.705487][ T12] kernfs iflink: removing [ 736.714762][ T12] kernfs ifindex: removing [ 736.715108][ T12] kernfs name_assign_type: removing [ 736.715391][ T12] kernfs addr_assign_type: removing [ 736.715704][ T12] kernfs addr_len: removing [ 736.720964][ T12] kernfs link_mode: removing [ 736.721324][ T12] kernfs address: removing [ 736.727579][ T12] kernfs broadcast: removing [ 736.727901][ T12] kernfs speed: removing [ 736.728288][ T12] kernfs duplex: removing [ 736.728566][ T12] kernfs dormant: removing [ 736.728867][ T12] kernfs testing: removing [ 736.729249][ T12] kernfs operstate: removing [ 736.736180][ T12] kernfs carrier_changes: removing [ 736.736487][ T12] kernfs ifalias: removing [ 736.736857][ T12] kernfs carrier: removing [ 736.737214][ T12] kernfs mtu: removing [ 736.737509][ T12] kernfs flags: removing [ 736.737831][ T12] kernfs tx_queue_len: removing [ 736.745573][ T12] kernfs gro_flush_timeout: removing [ 736.746032][ T12] kernfs napi_defer_hard_irqs: removing [ 736.746327][ T12] kernfs proto_down: removing [ 736.749086][ T12] kernfs carrier_up_count: removing [ 736.749455][ T12] kernfs carrier_down_count: removing [ 736.749742][ T12] kernfs threaded: removing [ 736.754783][ T12] PM: Removing info for No Bus:netdevsim1 [ 736.754871][ T12] kobject: 'netdevsim1' (ffff8880574647c0): kobject_uevent_env [ 736.754889][ T12] kobject: 'netdevsim1' (ffff8880574647c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 736.754948][ T12] kernfs netdevsim1: removing [ 736.773856][ T5729] Added buffer head 1 to ffff88802712b000 [ 736.774353][ T5729] Added buffer head 0 to ffff88802712b000 [ 736.776687][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 736.777173][ T850] No more buffers in queue [ 736.817465][ T5442] Insert table=255 a9fe644c/32 [ 736.818323][ T5442] In tnode_resize ffff888034a4b720 inflate_threshold=50 threshold=25 [ 736.818344][ T5442] In tnode_resize ffff8880321e0c20 inflate_threshold=50 threshold=25 [ 736.828654][ T5442] Insert table=255 a9feffff/32 [ 736.838539][ T5442] Insert table=255 a9feffff/32 [ 736.852246][ T5442] Insert table=254 a9fe0000/16 [ 736.909618][ T12] kobject: 'netdevsim1' (ffff8880574647c0): kobject_cleanup, parent 0000000000000000 [ 736.909657][ T12] kobject: 'netdevsim1' (ffff8880574647c0): calling ktype release [ 736.910134][ T12] kobject: 'netdevsim1': free name [ 736.995629][ T5729] Added buffer head 0 to ffff88802712b000 [ 736.996449][ T5729] Added buffer head 1 to ffff88802712b000 [ 736.999845][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 737.000320][ T850] No more buffers in queue [ 737.152514][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 737.152583][ T12] net netdevsim0: siw: event 6 [ 737.184132][ T5729] Added buffer head 1 to ffff88802712b000 [ 737.194216][ T5729] Added buffer head 0 to ffff88802712b000 [ 737.194604][ T12] netdevsim netdevsim6 netdevsim0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 737.194642][ T12] net netdevsim0: siw: event 18 [ 737.195151][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 737.195312][ T12] kernfs rps_cpus: removing [ 737.195480][ T850] No more buffers in queue [ 737.199820][ T12] kernfs rps_flow_cnt: removing [ 737.200280][ T12] kobject: 'rx-0' (ffff88803b9c7e50): kobject_cleanup, parent ffff8880324d0350 [ 737.200309][ T12] kobject: 'rx-0' (ffff88803b9c7e50): auto cleanup kobject_del [ 737.200331][ T12] kobject: 'rx-0' (ffff88803b9c7e50): auto cleanup 'remove' event [ 737.200354][ T12] kobject: 'rx-0' (ffff88803b9c7e50): kobject_uevent_env [ 737.200376][ T12] kobject: 'rx-0' (ffff88803b9c7e50): kobject_uevent_env: uevent_suppress caused the event to drop! [ 737.200461][ T12] kernfs rx-0: removing [ 737.206313][ T12] kobject: 'rx-0' (ffff88803b9c7e50): calling ktype release [ 737.206452][ T12] kobject: 'rx-0': free name [ 737.206785][ T12] kernfs limit: removing [ 737.207244][ T12] kernfs limit_max: removing [ 737.207815][ T12] kernfs limit_min: removing [ 737.215256][ T12] kernfs hold_time: removing [ 737.215754][ T12] kernfs inflight: removing [ 737.228160][ T12] kernfs stall_thrs: removing [ 737.228628][ T12] kernfs stall_cnt: removing [ 737.229128][ T12] kernfs stall_max: removing [ 737.229595][ T12] kernfs byte_queue_limits: removing [ 737.230013][ T12] kernfs tx_timeout: removing [ 737.243299][ T12] kernfs traffic_class: removing [ 737.243753][ T12] kernfs xps_cpus: removing [ 737.244125][ T12] kernfs xps_rxqs: removing [ 737.244529][ T12] kernfs tx_maxrate: removing [ 737.244952][ T12] kobject: 'tx-0' (ffff88803df06c20): kobject_cleanup, parent ffff8880324d0350 [ 737.244973][ T12] kobject: 'tx-0' (ffff88803df06c20): auto cleanup kobject_del [ 737.244988][ T12] kobject: 'tx-0' (ffff88803df06c20): auto cleanup 'remove' event [ 737.245003][ T12] kobject: 'tx-0' (ffff88803df06c20): kobject_uevent_env [ 737.245019][ T12] kobject: 'tx-0' (ffff88803df06c20): kobject_uevent_env: uevent_suppress caused the event to drop! [ 737.245085][ T12] kernfs tx-0: removing [ 737.245393][ T12] kobject: 'tx-0' (ffff88803df06c20): calling ktype release [ 737.245544][ T12] kobject: 'tx-0': free name [ 737.245731][ T12] kernfs queues: removing [ 737.246059][ T12] kobject: 'queues' (ffff8880324d0350): kobject_cleanup, parent 0000000000000000 [ 737.246073][ T12] kobject: 'queues' (ffff8880324d0350): calling ktype release [ 737.246083][ T12] kobject: 'queues' (ffff8880324d0350): kset_release [ 737.246235][ T12] kobject: 'queues': free name [ 737.246474][ T12] kernfs runtime_status: removing [ 737.246803][ T12] kernfs control: removing [ 737.247088][ T12] kernfs runtime_suspended_time: removing [ 737.247371][ T12] kernfs runtime_active_time: removing [ 737.247669][ T12] kernfs autosuspend_delay_ms: removing [ 737.248195][ T12] kernfs power: removing [ 737.248525][ T12] kernfs device: removing [ 737.248806][ T12] kernfs subsystem: removing [ 737.249118][ T12] kernfs netdevsim0: removing [ 737.249459][ T12] kernfs uevent: removing [ 737.249813][ T12] kernfs rx_packets: removing [ 737.250123][ T12] kernfs tx_packets: removing [ 737.250466][ T12] kernfs rx_bytes: removing [ 737.250756][ T12] kernfs tx_bytes: removing [ 737.251049][ T12] kernfs rx_errors: removing [ 737.251369][ T12] kernfs tx_errors: removing [ 737.251701][ T12] kernfs rx_dropped: removing [ 737.251980][ T12] kernfs tx_dropped: removing [ 737.252283][ T12] kernfs multicast: removing [ 737.252620][ T12] kernfs collisions: removing [ 737.252932][ T12] kernfs rx_length_errors: removing [ 737.253232][ T12] kernfs rx_over_errors: removing [ 737.253545][ T12] kernfs rx_crc_errors: removing [ 737.253875][ T12] kernfs rx_frame_errors: removing [ 737.254166][ T12] kernfs rx_fifo_errors: removing [ 737.254466][ T12] kernfs rx_missed_errors: removing [ 737.254781][ T12] kernfs tx_aborted_errors: removing [ 737.255117][ T12] kernfs tx_carrier_errors: removing [ 737.255396][ T12] kernfs tx_fifo_errors: removing [ 737.255694][ T12] kernfs tx_heartbeat_errors: removing [ 737.274690][ T12] kernfs tx_window_errors: removing [ 737.275035][ T12] kernfs rx_compressed: removing [ 737.275319][ T12] kernfs tx_compressed: removing [ 737.275619][ T12] kernfs rx_nohandler: removing [ 737.278790][ T12] kernfs statistics: removing [ 737.281697][ T12] kernfs phys_port_name: removing [ 737.281978][ T12] kernfs phys_switch_id: removing [ 737.282469][ T12] kernfs netdev_group: removing [ 737.282770][ T12] kernfs type: removing [ 737.283093][ T12] kernfs dev_id: removing [ 737.283407][ T12] kernfs dev_port: removing [ 737.283690][ T12] kernfs iflink: removing [ 737.288890][ T12] kernfs ifindex: removing [ 737.289247][ T12] kernfs name_assign_type: removing [ 737.289571][ T12] kernfs addr_assign_type: removing [ 737.289852][ T12] kernfs addr_len: removing [ 737.290158][ T12] kernfs link_mode: removing [ 737.290496][ T12] kernfs address: removing [ 737.290792][ T12] kernfs broadcast: removing [ 737.295954][ T12] kernfs speed: removing [ 737.296301][ T12] kernfs duplex: removing [ 737.296582][ T12] kernfs dormant: removing [ 737.296876][ T12] kernfs testing: removing [ 737.297210][ T12] kernfs operstate: removing [ 737.297542][ T12] kernfs carrier_changes: removing [ 737.297825][ T12] kernfs ifalias: removing [ 737.298128][ T12] kernfs carrier: removing [ 737.303175][ T12] kernfs mtu: removing [ 737.303506][ T12] kernfs flags: removing [ 737.303832][ T12] kernfs tx_queue_len: removing [ 737.304116][ T12] kernfs gro_flush_timeout: removing [ 737.304421][ T12] kernfs napi_defer_hard_irqs: removing [ 737.304747][ T12] kernfs proto_down: removing [ 737.305070][ T12] kernfs carrier_up_count: removing [ 737.316398][ T12] kernfs carrier_down_count: removing [ 737.316738][ T12] kernfs threaded: removing [ 737.317018][ T12] PM: Removing info for No Bus:netdevsim0 [ 737.317086][ T12] kobject: 'netdevsim0' (ffff8880570d87c0): kobject_uevent_env [ 737.317100][ T12] kobject: 'netdevsim0' (ffff8880570d87c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 737.317138][ T12] kernfs netdevsim0: removing [ 737.317480][ T12] kernfs net: removing [ 737.317967][ T12] kobject: 'net' (ffff88802d59e680): kobject_cleanup, parent 0000000000000000 [ 737.317985][ T12] kobject: 'net' (ffff88802d59e680): calling ktype release [ 737.318132][ T12] kobject: 'net': free name [ 737.366842][ C0] wireguard: wg0: Handshake for peer 1 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 737.368051][ T7330] nf_nat: Already setup manip DST for ct ffff88803c93ea80 (status bits 0x188) [ 737.368085][ T7330] nf_nat: Already setup manip SRC for ct ffff88803c93ea80 (status bits 0x188) [ 737.375825][ C2] wireguard: wg2: Handshake for peer 6 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 12) [ 737.413598][ T5729] Added buffer head 0 to ffff88802712b000 [ 737.414063][ T5729] Added buffer head 1 to ffff88802712b000 [ 737.417080][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 737.418377][ T850] No more buffers in queue [ 737.496092][ T12] kobject: 'netdevsim0' (ffff8880570d87c0): kobject_cleanup, parent 0000000000000000 [ 737.496116][ T12] kobject: 'netdevsim0' (ffff8880570d87c0): calling ktype release [ 737.496407][ T12] kobject: 'netdevsim0': free name [ 737.633415][ T5729] Added buffer head 1 to ffff88802712b000 [ 737.633932][ T5729] Added buffer head 0 to ffff88802712b000 [ 737.634843][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 737.635160][ T850] No more buffers in queue [ 737.791155][ T12] debugfs: creating file 'fib' [ 737.791983][ T12] debugfs: creating file 'fail_route_offload' [ 737.792835][ T12] debugfs: creating file 'fail_res_nexthop_group_replace' [ 737.801415][ T12] debugfs: creating file 'fail_nexthop_bucket_replace' [ 737.809421][ T12] debugfs: creating file 'nexthop_bucket_activity' [ 737.810282][ T12] debugfs: creating file 'fail_route_delete' [ 737.830911][ T12] debugfs: creating file 'health' [ 737.831706][ T12] debugfs: creating file 'break_health' [ 737.832726][ T12] debugfs: creating file 'binary_len' [ 737.838563][T10765] Added buffer head 0 to ffff88802712b000 [ 737.839095][T10765] Added buffer head 1 to ffff88802712b000 [ 737.840817][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 737.841256][ T850] No more buffers in queue [ 737.843188][ T12] debugfs: creating file 'fail_recover' [ 737.849350][ T12] debugfs: creating file 'psample' [ 737.850426][ T12] debugfs: creating file 'rate' [ 737.856611][ T12] debugfs: creating file 'group_num' [ 737.867114][ T12] debugfs: creating file 'trunc_size' [ 737.868425][ T12] debugfs: creating file 'in_ifindex' [ 737.875093][ T12] debugfs: creating file 'out_ifindex' [ 737.876447][ T12] debugfs: creating file 'out_tc' [ 737.882545][ T12] debugfs: creating file 'out_tc_occ_max' [ 737.883835][ T12] debugfs: creating file 'latency_max' [ 737.887502][ T12] debugfs: creating file 'enable' [ 737.896290][ T12] debugfs: creating file 'hwstats' [ 737.897557][ T12] debugfs: creating file 'l3' [ 737.898752][ T12] debugfs: creating file 'enable_ifindex' [ 737.899970][ T12] debugfs: creating file 'disable_ifindex' [ 737.901179][ T12] debugfs: creating file 'fail_next_enable' [ 737.902908][ T12] debugfs: creating file '0' [ 737.904228][ T12] debugfs: creating file 'dev' [ 737.905164][ T12] debugfs: creating file 'netdev@ffff8880365e8700' [ 737.919903][ T12] debugfs: creating file 'ethtool' [ 737.920840][ T12] debugfs: creating file 'get_err' [ 737.921763][ T12] debugfs: creating file 'set_err' [ 737.922987][ T12] debugfs: creating file 'pause' [ 737.924118][ T12] debugfs: creating file 'report_stats_rx' [ 737.925092][ T12] debugfs: creating file 'report_stats_tx' [ 737.937250][ T12] debugfs: creating file 'ring' [ 737.938181][ T12] debugfs: creating file 'rx_max_pending' [ 737.939489][ T12] debugfs: creating file 'rx_jumbo_max_pending' [ 737.940463][ T12] debugfs: creating file 'rx_mini_max_pending' [ 737.941552][ T12] debugfs: creating file 'tx_max_pending' [ 737.942573][ T12] debugfs: creating file 'udp_ports' [ 737.943991][ T12] debugfs: creating file 'inject_error' [ 737.945514][ T12] debugfs: creating file 'table0' [ 737.965382][ T12] debugfs: creating file 'table1' [ 737.968306][ T12] debugfs: creating file 'reset' [ 737.970695][ T12] debugfs: creating file 'bpf_offloaded_id' [ 737.971643][ T12] debugfs: creating file 'bpf_tc_accept' [ 737.972588][ T12] debugfs: creating file 'bpf_tc_non_bound_accept' [ 737.973517][ T12] debugfs: creating file 'bpf_xdpdrv_accept' [ 737.974460][ T12] debugfs: creating file 'bpf_xdpoffload_accept' [ 737.975377][ T12] debugfs: creating file 'bpf_map_accept' [ 737.982469][ T12] debugfs: creating file 'ipsec' [ 737.990448][ T12] netdevsim netdevsim6 eth14 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 737.990474][ T12] (null): siw: event 17 [ 737.990866][ T12] device: 'eth14': device_add [ 737.991053][ T12] kobject: 'net' (ffff8880581c2180): kobject_add_internal: parent: 'netdevsim6', set: '(null)' [ 737.991344][ T12] kobject: 'eth14' (ffff8880365e87c0): kobject_add_internal: parent: 'net', set: 'devices' [ 737.991801][ T12] net eth14: No ACPI support [ 738.029185][ T12] PM: Adding info for No Bus:eth14 [ 738.029230][ T12] kobject: 'eth14' (ffff8880365e87c0): kobject_uevent_env [ 738.029248][ T12] kobject: 'eth14' (ffff8880365e87c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 738.029435][ T12] kobject: 'queues' (ffff888036c04850): kobject_add_internal: parent: 'eth14', set: '' [ 738.029752][ T12] kobject: 'queues' (ffff888036c04850): kobject_uevent_env [ 738.029774][ T12] kobject: 'queues' (ffff888036c04850): kobject_uevent_env: filter function caused the event to drop! [ 738.030241][ T12] kobject: 'rx-0' (ffff88801cb34250): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.031202][ T12] kobject: 'rx-0' (ffff88801cb34250): kobject_uevent_env [ 738.031492][ T12] kobject: 'rx-0' (ffff88801cb34250): fill_kobj_path: path = '/devices/netdevsim6/net/eth14/queues/rx-0' [ 738.047220][ T12] kobject: 'tx-0' (ffff88805c245c20): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.052299][ T12] kobject: 'tx-0' (ffff88805c245c20): kobject_uevent_env [ 738.052778][ T12] kobject: 'tx-0' (ffff88805c245c20): fill_kobj_path: path = '/devices/netdevsim6/net/eth14/queues/tx-0' [ 738.061828][ T5729] Added buffer head 1 to ffff88802712b000 [ 738.062273][ T5729] Added buffer head 0 to ffff88802712b000 [ 738.065538][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 738.083308][ T850] No more buffers in queue [ 738.083584][ T12] netdevsim netdevsim6 eth14: bond_netdev_event received NETDEV_REGISTER [ 738.083611][ T12] net eth14: siw: event 5 [ 738.087332][ T5718] conn ffff8880277dc800 [ 738.121997][ T12] netdevsim netdevsim6 eth14: bond_netdev_event received NETDEV_UDP_TUNNEL_PUSH_INFO [ 738.122030][ T12] net eth14: siw: event 29 [ 738.122162][ T12] kobject: 'eth14' (ffff8880365e87c0): kobject_uevent_env [ 738.122454][ T12] kobject: 'eth14' (ffff8880365e87c0): fill_kobj_path: path = '/devices/netdevsim6/net/eth14' [ 738.131429][ T12] debugfs: creating file 'psp_rereg' [ 738.132543][ T12] debugfs: creating file 'pp_hold' [ 738.133650][ T12] debugfs: creating file 'queue_reset' [ 738.139782][ T12] debugfs: creating file 'vlan' [ 738.146934][ T12] debugfs: creating file '1' [ 738.147914][ T12] debugfs: creating file 'dev' [ 738.148663][ T12] debugfs: creating file 'netdev@ffff88805a0ac700' [ 738.156838][ T12] debugfs: creating file 'ethtool' [ 738.176227][ T5741] Bluetooth: hci2: command tx timeout [ 738.176312][ T5741] hci2 cmd_cnt 1 cmd queued 2 [ 738.176335][ T5741] hci2: skb ffff888034248a00 [ 738.176529][ T5741] hci2 type 1 len 7 [ 738.189261][ T44] audit: type=1400 audit(2000000276.099:1934): avc: denied { write } for pid=12552 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 738.194160][ T12] debugfs: creating file 'get_err' [ 738.226586][ T12] debugfs: creating file 'set_err' [ 738.227485][ T12] debugfs: creating file 'pause' [ 738.232969][ T12] debugfs: creating file 'report_stats_rx' [ 738.233918][ T12] debugfs: creating file 'report_stats_tx' [ 738.234813][ T12] debugfs: creating file 'ring' [ 738.242684][ T12] debugfs: creating file 'rx_max_pending' [ 738.243824][ T12] debugfs: creating file 'rx_jumbo_max_pending' [ 738.259827][ T12] debugfs: creating file 'rx_mini_max_pending' [ 738.260784][ T12] debugfs: creating file 'tx_max_pending' [ 738.265085][ T5729] Added buffer head 0 to ffff88802712b000 [ 738.265438][ T5729] Added buffer head 1 to ffff88802712b000 [ 738.266293][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 738.269573][ T12] debugfs: creating file 'udp_ports' [ 738.270750][ T12] debugfs: creating file 'inject_error' [ 738.276611][ T12] debugfs: creating file 'table0' [ 738.277485][ T12] debugfs: creating file 'table1' [ 738.277869][ T850] No more buffers in queue [ 738.286752][ T12] debugfs: creating file 'reset' [ 738.295415][ T12] debugfs: creating file 'bpf_offloaded_id' [ 738.300110][ T12] debugfs: creating file 'bpf_tc_accept' [ 738.309269][ T12] debugfs: creating file 'bpf_tc_non_bound_accept' [ 738.318094][ T12] debugfs: creating file 'bpf_xdpdrv_accept' [ 738.319401][ T12] debugfs: creating file 'bpf_xdpoffload_accept' [ 738.328502][ T12] debugfs: creating file 'bpf_map_accept' [ 738.329896][ T12] debugfs: creating file 'ipsec' [ 738.347899][ T12] netdevsim netdevsim6 eth15 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 738.347950][ T12] (null): siw: event 17 [ 738.353500][ T12] device: 'eth15': device_add [ 738.353564][ T12] kobject: 'eth15' (ffff88805a0ac7c0): kobject_add_internal: parent: 'net', set: 'devices' [ 738.354011][ T12] net eth15: No ACPI support [ 738.462728][ T12] PM: Adding info for No Bus:eth15 [ 738.462771][ T12] kobject: 'eth15' (ffff88805a0ac7c0): kobject_uevent_env [ 738.462787][ T12] kobject: 'eth15' (ffff88805a0ac7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 738.462978][ T12] kobject: 'queues' (ffff88805816bc50): kobject_add_internal: parent: 'eth15', set: '' [ 738.463250][ T12] kobject: 'queues' (ffff88805816bc50): kobject_uevent_env [ 738.463265][ T12] kobject: 'queues' (ffff88805816bc50): kobject_uevent_env: filter function caused the event to drop! [ 738.471404][ T12] kobject: 'rx-0' (ffff888037630a50): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.472376][ T12] kobject: 'rx-0' (ffff888037630a50): kobject_uevent_env [ 738.472819][ T12] kobject: 'rx-0' (ffff888037630a50): fill_kobj_path: path = '/devices/netdevsim6/net/eth15/queues/rx-0' [ 738.482181][ T5729] Added buffer head 1 to ffff88802712b000 [ 738.482480][ T5729] Added buffer head 0 to ffff88802712b000 [ 738.483990][ T12] kobject: 'tx-0' (ffff88805ba50820): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.487718][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 738.519560][ T12] kobject: 'tx-0' (ffff88805ba50820): kobject_uevent_env [ 738.524699][ T12] kobject: 'tx-0' (ffff88805ba50820): fill_kobj_path: path = '/devices/netdevsim6/net/eth15/queues/tx-0' [ 738.542554][ T850] No more buffers in queue [ 738.554381][ T12] netdevsim netdevsim6 eth15: bond_netdev_event received NETDEV_REGISTER [ 738.554417][ T12] net eth15: siw: event 5 [ 738.593206][ T12] netdevsim netdevsim6 eth15: bond_netdev_event received NETDEV_UDP_TUNNEL_PUSH_INFO [ 738.593235][ T12] net eth15: siw: event 29 [ 738.593328][ T12] kobject: 'eth15' (ffff88805a0ac7c0): kobject_uevent_env [ 738.593620][ T12] kobject: 'eth15' (ffff88805a0ac7c0): fill_kobj_path: path = '/devices/netdevsim6/net/eth15' [ 738.610711][ T12] debugfs: creating file 'psp_rereg' [ 738.612130][ T12] debugfs: creating file 'pp_hold' [ 738.619438][ T12] debugfs: creating file 'queue_reset' [ 738.620491][ T12] debugfs: creating file 'vlan' [ 738.630954][ T12] debugfs: creating file '2' [ 738.636994][ T12] debugfs: creating file 'dev' [ 738.637734][ T12] debugfs: creating file 'netdev@ffff8880269ec700' [ 738.648473][ T12] debugfs: creating file 'ethtool' [ 738.654517][ T12] debugfs: creating file 'get_err' [ 738.655407][ T12] debugfs: creating file 'set_err' [ 738.655826][ C1] wireguard: wg2: Handshake for peer 5 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 738.657786][ T7330] nf_nat: Already setup manip DST for ct ffff888025711200 (status bits 0x188) [ 738.657819][ T7330] nf_nat: Already setup manip SRC for ct ffff888025711200 (status bits 0x188) [ 738.662204][ T12] debugfs: creating file 'pause' [ 738.663424][ T12] debugfs: creating file 'report_stats_rx' [ 738.669351][ T12] debugfs: creating file 'report_stats_tx' [ 738.675443][ T12] debugfs: creating file 'ring' [ 738.679624][ T12] debugfs: creating file 'rx_max_pending' [ 738.683337][ T12] debugfs: creating file 'rx_jumbo_max_pending' [ 738.690143][ T12] debugfs: creating file 'rx_mini_max_pending' [ 738.691507][ T12] debugfs: creating file 'tx_max_pending' [ 738.699517][ T12] debugfs: creating file 'udp_ports' [ 738.700407][ T12] debugfs: creating file 'inject_error' [ 738.705252][ T5729] Added buffer head 0 to ffff88802712b000 [ 738.705593][ T5729] Added buffer head 1 to ffff88802712b000 [ 738.706406][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 738.707468][ T850] No more buffers in queue [ 738.711615][ T12] debugfs: creating file 'table0' [ 738.712913][ T12] debugfs: creating file 'table1' [ 738.721455][ T12] debugfs: creating file 'reset' [ 738.731836][ T12] debugfs: creating file 'bpf_offloaded_id' [ 738.732827][ T12] debugfs: creating file 'bpf_tc_accept' [ 738.740683][ T12] debugfs: creating file 'bpf_tc_non_bound_accept' [ 738.741993][ T12] debugfs: creating file 'bpf_xdpdrv_accept' [ 738.750013][ T12] debugfs: creating file 'bpf_xdpoffload_accept' [ 738.751248][ T12] debugfs: creating file 'bpf_map_accept' [ 738.760049][ T12] debugfs: creating file 'ipsec' [ 738.770504][ T12] netdevsim netdevsim6 eth16 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 738.770531][ T12] (null): siw: event 17 [ 738.770947][ T12] device: 'eth16': device_add [ 738.771012][ T12] kobject: 'eth16' (ffff8880269ec7c0): kobject_add_internal: parent: 'net', set: 'devices' [ 738.771441][ T12] net eth16: No ACPI support [ 738.794619][T12070] ffff88804aca0000 name hci0 bus 0 [ 738.802348][T12070] hci0: Updating devcoredump state from IDLE to IDLE. [ 738.802382][T12070] hci0: err 0x13 [ 738.802430][T12070] hci0 ffff88804aca0000 [ 738.802444][T12070] hci0: [ 738.832074][T12070] hci0: err 0x13 [ 738.832101][T12070] hci0: cancelling interleave scan [ 738.832641][T12070] channel 3 len 6 [ 738.833495][T12070] channel 3 len 8 [ 738.833803][T12070] hdev hci0 event 2 [ 738.834108][T12070] hdev 0000000000000000 len 8 [ 738.845747][T12070] kernfs runtime_status: removing [ 738.846147][T12070] kernfs control: removing [ 738.846570][T12070] kernfs runtime_suspended_time: removing [ 738.847027][T12070] kernfs runtime_active_time: removing [ 738.850217][T12070] kernfs autosuspend_delay_ms: removing [ 738.851531][ T12] PM: Adding info for No Bus:eth16 [ 738.851577][ T12] kobject: 'eth16' (ffff8880269ec7c0): kobject_uevent_env [ 738.851599][ T12] kobject: 'eth16' (ffff8880269ec7c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 738.851904][ T12] kobject: 'queues' (ffff8880258f1f50): kobject_add_internal: parent: 'eth16', set: '' [ 738.852296][ T12] kobject: 'queues' (ffff8880258f1f50): kobject_uevent_env [ 738.852316][ T12] kobject: 'queues' (ffff8880258f1f50): kobject_uevent_env: filter function caused the event to drop! [ 738.853367][T12070] kernfs power: removing [ 738.853837][T12070] kernfs device: removing [ 738.854275][T12070] kernfs subsystem: removing [ 738.859757][ T12] kobject: 'rx-0' (ffff88802c399c50): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.861187][ T12] kobject: 'rx-0' (ffff88802c399c50): kobject_uevent_env [ 738.861619][ T12] kobject: 'rx-0' (ffff88802c399c50): fill_kobj_path: path = '/devices/netdevsim6/net/eth16/queues/rx-0' [ 738.861977][T12070] kernfs rfkill30: removing [ 738.862403][T12070] kernfs uevent: removing [ 738.862719][T12070] kernfs name: removing [ 738.863067][T12070] kernfs type: removing [ 738.863443][T12070] kernfs index: removing [ 738.863914][T12070] kernfs persistent: removing [ 738.870431][ T12] kobject: 'tx-0' (ffff88805e53ac20): kobject_add_internal: parent: 'queues', set: 'queues' [ 738.872063][T12070] kernfs state: removing [ 738.872610][T12070] kernfs soft: removing [ 738.872997][T12070] kernfs hard: removing [ 738.873322][T12070] kernfs hard_block_reasons: removing [ 738.873619][T12070] PM: Removing info for No Bus:rfkill30 [ 738.873718][T12070] kobject: 'rfkill30' (ffff888027422110): kobject_uevent_env [ 738.878943][T12070] kobject: 'rfkill30' (ffff888027422110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill30' [ 738.879995][T12070] kernfs rfkill30: removing [ 738.883318][T12070] kobject: 'rfkill30' (ffff888027422110): kobject_cleanup, parent 0000000000000000 [ 738.883334][T12070] kobject: 'rfkill30' (ffff888027422110): calling ktype release [ 738.883608][T12070] kobject: 'rfkill30': free name [ 738.888931][T12070] kernfs runtime_status: removing [ 738.889272][T12070] kernfs control: removing [ 738.889766][T12070] kernfs runtime_suspended_time: removing [ 738.890174][T12070] kernfs runtime_active_time: removing [ 738.890479][T12070] kernfs autosuspend_delay_ms: removing [ 738.895606][ T12] kobject: 'tx-0' (ffff88805e53ac20): kobject_uevent_env [ 738.896345][ T12] kobject: 'tx-0' (ffff88805e53ac20): fill_kobj_path: path = '/devices/netdevsim6/net/eth16/queues/tx-0' [ 738.900711][T12070] kernfs power: removing [ 738.901030][T12070] kernfs subsystem: removing [ 738.901324][T12070] kernfs hci0: removing [ 738.901650][T12070] kernfs uevent: removing [ 738.901845][T12070] kernfs reset: removing [ 738.902125][T12070] PM: Removing info for No Bus:hci0 [ 738.909409][T12070] kobject: 'hci0' (ffff88804aca1538): kobject_uevent_env [ 738.909700][T12070] kobject: 'hci0' (ffff88804aca1538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 738.910750][T12070] kernfs hci0: removing [ 738.910883][T12070] hci0 orig refcnt 2 [ 738.910894][T12070] kobject: 'hci0' (ffff88804aca1538): kobject_cleanup, parent 0000000000000000 [ 738.910908][T12070] kobject: 'hci0' (ffff88804aca1538): calling ktype release [ 738.918706][T12070] All LE connection parameters were removed [ 738.918727][T12070] hci0: Unregister MSFT extension [ 738.919509][T12070] kobject: 'hci0': free name [ 738.967116][T12554] Added buffer head 1 to ffff88802712b000 [ 738.973009][ T12] netdevsim netdevsim6 eth16: bond_netdev_event received NETDEV_REGISTER [ 738.973055][ T12] net eth16: siw: event 5 [ 738.984328][T12554] Added buffer head 0 to ffff88802712b000 [ 738.986594][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 738.987704][ T850] No more buffers in queue [ 739.018427][ T12] netdevsim netdevsim6 eth16: bond_netdev_event received NETDEV_UDP_TUNNEL_PUSH_INFO [ 739.018457][ T12] net eth16: siw: event 29 [ 739.018557][ T12] kobject: 'eth16' (ffff8880269ec7c0): kobject_uevent_env [ 739.028783][ T12] kobject: 'eth16' (ffff8880269ec7c0): fill_kobj_path: path = '/devices/netdevsim6/net/eth16' [ 739.049121][ T12] debugfs: creating file 'psp_rereg' [ 739.069054][T12070] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 739.069094][T12070] net syz_tun: siw: event 10 [ 739.090867][T12070] In tnode_resize ffff88802c003820 inflate_threshold=50 threshold=25 [ 739.091629][T12070] In tnode_resize ffff888023cf9420 inflate_threshold=50 threshold=25 [ 739.091642][T12070] In tnode_resize ffff88805ad55420 inflate_threshold=50 threshold=25 [ 739.091654][T12070] In tnode_resize ffff88803b88e5a0 inflate_threshold=50 threshold=25 [ 739.091666][T12070] In tnode_resize ffff888025091d20 inflate_threshold=50 threshold=25 [ 739.091678][T12070] In tnode_resize ffff888025091920 inflate_threshold=50 threshold=25 [ 739.091689][T12070] trie_flush found=1 [ 739.094471][T12070] In tnode_resize ffff88802c003820 inflate_threshold=50 threshold=25 [ 739.094491][T12070] In tnode_resize ffff888023cf9420 inflate_threshold=50 threshold=25 [ 739.094503][T12070] In tnode_resize ffff88805ad55420 inflate_threshold=50 threshold=25 [ 739.094517][T12070] In tnode_resize ffff88803b88e5a0 inflate_threshold=50 threshold=25 [ 739.094530][T12070] In tnode_resize ffff888025091d20 inflate_threshold=50 threshold=25 [ 739.094542][T12070] In tnode_resize ffff888025091920 inflate_threshold=50 threshold=25 [ 739.094555][T12070] trie_flush found=1 [ 739.094634][T12070] syz_tun: bond_netdev_event received NETDEV_DOWN [ 739.094677][T12070] net syz_tun: siw: event 2 [ 739.099966][T12070] IPv6: walker ffffc90024bbf230 adjusted by delroute [ 739.101345][T12070] IPv6: walker ffffc90024bbf230 adjusted by delroute [ 739.115650][T12070] IPv6: walker ffffc90024bbf230 adjusted by delroute [ 739.115669][T12070] IPv6: fixing tree: plen=128 iter=0 [ 739.115683][T12070] IPv6: W ffffc90024bbf230 adjusted by delnode 1, s=4/2 [ 739.115707][T12070] IPv6: fixing tree: plen=120 iter=1 [ 739.115721][T12070] IPv6: W ffffc90024bbf230 adjusted by delnode 2, s=2 [ 739.115746][T12070] IPv6: fixing tree: plen=97 iter=2 [ 739.117280][T12070] IPv6: walker ffffc90024bbf230 adjusted by delroute [ 739.117296][T12070] IPv6: fixing tree: plen=128 iter=0 [ 739.117311][T12070] IPv6: W ffffc90024bbf230 adjusted by delnode 1, s=4/2 [ 739.117337][T12070] IPv6: fixing tree: plen=120 iter=1 [ 739.117353][T12070] IPv6: W ffffc90024bbf230 adjusted by delnode 2, s=2 [ 739.117381][T12070] IPv6: fixing tree: plen=72 iter=2 [ 739.118739][T12070] IPv6: walker ffffc90024bbf230 adjusted by delroute [ 739.172162][ T1356] Added buffer head 0 to ffff88802712b000 [ 739.172519][ T1356] Added buffer head 1 to ffff88802712b000 [ 739.174274][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 739.174927][ T850] No more buffers in queue [ 739.260691][T12070] Deleting ac141400/24 dsfield=0x00 t=ffff88805ac5a230 [ 739.260732][T12070] Deleting ac1414ff/32 dsfield=0x00 t=ffff88805ac5a230 [ 739.260756][T12070] Deleting ac1414aa/32 dsfield=0x00 t=ffff88805ac5a230 [ 739.262298][T12070] In tnode_resize ffff88805ad55420 inflate_threshold=50 threshold=25 [ 739.262313][T12070] In tnode_resize ffff888025091920 inflate_threshold=50 threshold=25 [ 739.271674][T12070] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 739.271711][T12070] net syz_tun: siw: event 6 [ 739.335585][T12070] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 739.335614][T12070] net syz_tun: siw: event 18 [ 739.353741][T12070] kernfs rps_cpus: removing [ 739.354317][T12070] kernfs rps_flow_cnt: removing [ 739.354838][T12070] kobject: 'rx-0' (ffff88803ba50050): kobject_cleanup, parent ffff8880220bd250 [ 739.354871][T12070] kobject: 'rx-0' (ffff88803ba50050): auto cleanup kobject_del [ 739.354898][T12070] kobject: 'rx-0' (ffff88803ba50050): auto cleanup 'remove' event [ 739.354927][T12070] kobject: 'rx-0' (ffff88803ba50050): kobject_uevent_env [ 739.362815][T12070] kobject: 'rx-0' (ffff88803ba50050): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 739.364368][T12070] kernfs rx-0: removing [ 739.364659][T12070] kobject: 'rx-0' (ffff88803ba50050): calling ktype release [ 739.364801][T12070] kobject: 'rx-0': free name [ 739.372161][T12070] kernfs tx_timeout: removing [ 739.378605][T12070] kernfs traffic_class: removing [ 739.379161][T12070] kernfs xps_cpus: removing [ 739.379724][T12070] kernfs xps_rxqs: removing [ 739.380205][T12070] kernfs tx_maxrate: removing [ 739.380712][T12070] kobject: 'tx-0' (ffff888038c22420): kobject_cleanup, parent ffff8880220bd250 [ 739.380741][T12070] kobject: 'tx-0' (ffff888038c22420): auto cleanup kobject_del [ 739.380764][T12070] kobject: 'tx-0' (ffff888038c22420): auto cleanup 'remove' event [ 739.380788][T12070] kobject: 'tx-0' (ffff888038c22420): kobject_uevent_env [ 739.390110][ T1356] Added buffer head 1 to ffff88802712b000 [ 739.390640][ T1356] Added buffer head 0 to ffff88802712b000 [ 739.391914][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 739.392019][T12070] kobject: 'tx-0' (ffff888038c22420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 739.393516][T12070] kernfs tx-0: removing [ 739.398446][ T850] No more buffers in queue [ 739.402635][T12070] kobject: 'tx-0' (ffff888038c22420): calling ktype release [ 739.402899][T12070] kobject: 'tx-0': free name [ 739.403221][T12070] kernfs queues: removing [ 739.403726][T12070] kobject: 'queues' (ffff8880220bd250): kobject_cleanup, parent 0000000000000000 [ 739.403758][T12070] kobject: 'queues' (ffff8880220bd250): calling ktype release [ 739.403785][T12070] kobject: 'queues' (ffff8880220bd250): kset_release [ 739.404000][T12070] kobject: 'queues': free name [ 739.404393][T12070] kernfs runtime_status: removing [ 739.414293][T12070] kernfs control: removing [ 739.414816][T12070] kernfs runtime_suspended_time: removing [ 739.415360][T12070] kernfs runtime_active_time: removing [ 739.428563][T12070] kernfs autosuspend_delay_ms: removing [ 739.429510][T12070] kernfs power: removing [ 739.430011][T12070] kernfs subsystem: removing [ 739.430533][T12070] kernfs syz_tun: removing [ 739.439607][T12070] kernfs uevent: removing [ 739.440277][T12070] kernfs tun_flags: removing [ 739.440799][T12070] kernfs owner: removing [ 739.441326][T12070] kernfs group: removing [ 739.449300][T12070] kernfs rx_packets: removing [ 739.449825][T12070] kernfs tx_packets: removing [ 739.450391][T12070] kernfs rx_bytes: removing [ 739.450890][T12070] kernfs tx_bytes: removing [ 739.459386][T12070] kernfs rx_errors: removing [ 739.459905][T12070] kernfs tx_errors: removing [ 739.460468][T12070] kernfs rx_dropped: removing [ 739.460945][T12070] kernfs tx_dropped: removing [ 739.473815][T12070] kernfs multicast: removing [ 739.474353][T12070] kernfs collisions: removing [ 739.474846][T12070] kernfs rx_length_errors: removing [ 739.475385][T12070] kernfs rx_over_errors: removing [ 739.481790][T12070] kernfs rx_crc_errors: removing [ 739.482357][T12070] kernfs rx_frame_errors: removing [ 739.482860][T12070] kernfs rx_fifo_errors: removing [ 739.483255][T12070] kernfs rx_missed_errors: removing [ 739.483569][T12070] kernfs tx_aborted_errors: removing [ 739.483925][T12070] kernfs tx_carrier_errors: removing [ 739.490520][T12070] kernfs tx_fifo_errors: removing [ 739.491048][T12070] kernfs tx_heartbeat_errors: removing [ 739.491614][T12070] kernfs tx_window_errors: removing [ 739.492103][T12070] kernfs rx_compressed: removing [ 739.497677][T12070] kernfs tx_compressed: removing [ 739.498250][T12070] kernfs rx_nohandler: removing [ 739.498769][T12070] kernfs statistics: removing [ 739.499265][T12070] kernfs netdev_group: removing [ 739.499681][T12070] kernfs type: removing [ 739.505077][T12070] kernfs dev_id: removing [ 739.505607][T12070] kernfs dev_port: removing [ 739.506249][T12070] kernfs iflink: removing [ 739.506757][T12070] kernfs ifindex: removing [ 739.512260][T12070] kernfs name_assign_type: removing [ 739.512833][T12070] kernfs addr_assign_type: removing [ 739.513331][T12070] kernfs addr_len: removing [ 739.513827][T12070] kernfs link_mode: removing [ 739.522090][T12070] kernfs address: removing [ 739.522590][T12070] kernfs broadcast: removing [ 739.523122][T12070] kernfs speed: removing [ 739.523560][T12070] kernfs duplex: removing [ 739.530819][T12070] kernfs dormant: removing [ 739.531139][T12070] kernfs testing: removing [ 739.531624][T12070] kernfs operstate: removing [ 739.532153][T12070] kernfs carrier_changes: removing [ 739.532629][T12070] kernfs ifalias: removing [ 739.538637][T12070] kernfs carrier: removing [ 739.539191][T12070] kernfs mtu: removing [ 739.539754][T12070] kernfs flags: removing [ 739.540233][T12070] kernfs tx_queue_len: removing [ 739.549200][T12070] kernfs gro_flush_timeout: removing [ 739.549547][T12070] kernfs napi_defer_hard_irqs: removing [ 739.549841][T12070] kernfs proto_down: removing [ 739.550135][T12070] kernfs carrier_up_count: removing [ 739.550451][T12070] kernfs carrier_down_count: removing [ 739.550878][T12070] kernfs threaded: removing [ 739.554691][T12070] PM: Removing info for No Bus:syz_tun [ 739.554784][T12070] kobject: 'syz_tun' (ffff8880346787c0): kobject_uevent_env [ 739.555280][T12070] kobject: 'syz_tun' (ffff8880346787c0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 739.564403][T12070] kernfs syz_tun: removing [ 739.599779][ T12] debugfs: creating file 'pp_hold' [ 739.600635][ T12] debugfs: creating file 'queue_reset' [ 739.601627][ T12] debugfs: creating file 'vlan' [ 739.615404][ T1356] Added buffer head 0 to ffff88802712b000 [ 739.615937][ T1356] Added buffer head 1 to ffff88802712b000 [ 739.617319][ T12] debugfs: creating file '3' [ 739.618363][ T12] debugfs: creating file 'dev' [ 739.619853][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 739.629511][ T12] debugfs: creating file 'netdev@ffff88805f208700' [ 739.632520][ T850] No more buffers in queue [ 739.643806][ T12] debugfs: creating file 'ethtool' [ 739.654077][ T12] debugfs: creating file 'get_err' [ 739.654984][ T12] debugfs: creating file 'set_err' [ 739.666092][ T12] debugfs: creating file 'pause' [ 739.666944][ T12] debugfs: creating file 'report_stats_rx' [ 739.667878][ T12] debugfs: creating file 'report_stats_tx' [ 739.677345][ T12] debugfs: creating file 'ring' [ 739.684871][T12070] kobject: 'syz_tun' (ffff8880346787c0): kobject_cleanup, parent 0000000000000000 [ 739.684901][T12070] kobject: 'syz_tun' (ffff8880346787c0): calling ktype release [ 739.685256][T12070] kobject: 'syz_tun': free name [ 739.695411][ T12] debugfs: creating file 'rx_max_pending' [ 739.696529][ T12] debugfs: creating file 'rx_jumbo_max_pending' [ 739.697469][ T12] debugfs: creating file 'rx_mini_max_pending' [ 739.703253][ T12] debugfs: creating file 'tx_max_pending' [ 739.704195][ T12] debugfs: creating file 'udp_ports' [ 739.714269][ T12] debugfs: creating file 'inject_error' [ 739.715454][ T12] debugfs: creating file 'table0' [ 739.719454][ T12] debugfs: creating file 'table1' [ 739.724244][ T12] debugfs: creating file 'reset' [ 739.729595][ T12] debugfs: creating file 'bpf_offloaded_id' [ 739.730624][ T12] debugfs: creating file 'bpf_tc_accept' [ 739.735639][ T12] debugfs: creating file 'bpf_tc_non_bound_accept' [ 739.742470][ T12] debugfs: creating file 'bpf_xdpdrv_accept' [ 739.745906][ T12] debugfs: creating file 'bpf_xdpoffload_accept' [ 739.746840][ T12] debugfs: creating file 'bpf_map_accept' [ 739.752361][ T12] debugfs: creating file 'ipsec' [ 739.759204][ T12] netdevsim netdevsim6 eth17 (uninitialized): bond_netdev_event received NETDEV_POST_INIT [ 739.759250][ T12] (null): siw: event 17 [ 739.759818][ T12] device: 'eth17': device_add [ 739.759862][ T12] kobject: 'eth17' (ffff88805f2087c0): kobject_add_internal: parent: 'net', set: 'devices' [ 739.760673][ T12] net eth17: No ACPI support [ 739.810630][ T1356] Added buffer head 1 to ffff88802712b000 [ 739.813889][ T12] PM: Adding info for No Bus:eth17 [ 739.813925][ T12] kobject: 'eth17' (ffff88805f2087c0): kobject_uevent_env [ 739.813940][ T12] kobject: 'eth17' (ffff88805f2087c0): kobject_uevent_env: uevent_suppress caused the event to drop! [ 739.814187][ T12] kobject: 'queues' (ffff88802cecd350): kobject_add_internal: parent: 'eth17', set: '' [ 739.814463][ T12] kobject: 'queues' (ffff88802cecd350): kobject_uevent_env [ 739.814476][ T12] kobject: 'queues' (ffff88802cecd350): kobject_uevent_env: filter function caused the event to drop! [ 739.814930][ T12] kobject: 'rx-0' (ffff88802c398c50): kobject_add_internal: parent: 'queues', set: 'queues' [ 739.821046][ T1356] Added buffer head 0 to ffff88802712b000 [ 739.821887][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 739.822429][ T850] No more buffers in queue [ 739.823159][ T12] kobject: 'rx-0' (ffff88802c398c50): kobject_uevent_env [ 739.823443][ T12] kobject: 'rx-0' (ffff88802c398c50): fill_kobj_path: path = '/devices/netdevsim6/net/eth17/queues/rx-0' [ 739.824600][ T12] kobject: 'tx-0' (ffff88805f1aac20): kobject_add_internal: parent: 'queues', set: 'queues' [ 739.855214][ T12] kobject: 'tx-0' (ffff88805f1aac20): kobject_uevent_env [ 739.855576][ T12] kobject: 'tx-0' (ffff88805f1aac20): fill_kobj_path: path = '/devices/netdevsim6/net/eth17/queues/tx-0' [ 739.874892][ T12] netdevsim netdevsim6 eth17: bond_netdev_event received NETDEV_REGISTER [ 739.874920][ T12] net eth17: siw: event 5 [ 739.910116][ T44] audit: type=1400 audit(2000000277.819:1935): avc: denied { write } for pid=12556 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 739.927169][ T12] netdevsim netdevsim6 eth17: bond_netdev_event received NETDEV_UDP_TUNNEL_PUSH_INFO [ 739.927201][ T12] net eth17: siw: event 29 [ 739.927360][ T12] kobject: 'eth17' (ffff88805f2087c0): kobject_uevent_env [ 739.935825][ C3] wireguard: wg0: Handshake for peer 2 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 739.936099][ T43] firmware_class: device_uncache_fw_images [ 739.937967][ T47] net_ratelimit: 34 callbacks suppressed [ 739.937984][ T47] wireguard: wg0: Sending handshake initiation to peer 2 ([::1]:20003/0%0) [ 739.938532][ T47] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 739.938593][ T47] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 739.938644][ T47] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 739.938675][ T47] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 739.938712][ T47] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 739.939257][ T47] nf_nat: Already setup manip DST for ct ffff888025711380 (status bits 0x188) [ 739.939308][ T47] nf_nat: Already setup manip SRC for ct ffff888025711380 (status bits 0x188) [ 739.945156][ T12] kobject: 'eth17' (ffff88805f2087c0): fill_kobj_path: path = '/devices/netdevsim6/net/eth17' [ 739.947011][ T12] debugfs: creating file 'psp_rereg' [ 739.953045][ T12] debugfs: creating file 'pp_hold' [ 739.953940][ T12] debugfs: creating file 'queue_reset' [ 739.961778][ T12] debugfs: creating file 'vlan' [ 739.962731][ T12] debugfs: creating file 'take_snapshot' [ 739.988563][ T12] wireguard: wg2: Creating namespace exiting [ 740.012613][ T1356] Added buffer head 0 to ffff88802712b000 [ 740.012962][ T1356] Added buffer head 1 to ffff88802712b000 [ 740.013721][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 740.014045][ T850] No more buffers in queue [ 740.027847][ T12] wireguard: wg1: Creating namespace exiting [ 740.049388][ T12] wireguard: wg0: Creating namespace exiting [ 740.071772][ T12] kernfs vlan2: removing [ 740.072016][ T12] vlan2: left allmulticast mode [ 740.072044][ T12] vlan2: left promiscuous mode [ 740.083283][ T12] bridge0: port 3(vlan2) entered disabled state [ 740.083304][ T12] bridge0: port 3(vlan2) event 16 [ 740.083571][ T12] bridge0: br_fill_ifinfo event 16 port vlan2 master bridge0 [ 740.083917][ T12] bridge0: port 3(vlan2) event 17 [ 740.084164][ T12] bridge0: br_fill_ifinfo event 17 port vlan2 master bridge0 [ 740.114489][ T12] vlan2: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 740.114517][ T12] net vlan2: siw: event 27 [ 740.114613][ T12] Remove adjacency: dev vlan2 adj_dev bridge0 ref_nr 1 [ 740.114674][ T12] kernfs master: removing [ 740.115003][ T12] kernfs upper_bridge0: removing [ 740.115254][ T12] adjacency: dev_put for bridge0, because link removed from vlan2 to bridge0 [ 740.115346][ T12] Remove adjacency: dev bridge0 adj_dev vlan2 ref_nr 1 [ 740.115395][ T12] kernfs lower_vlan2: removing [ 740.115693][ T12] adjacency: dev_put for vlan2, because link removed from bridge0 to vlan2 [ 740.143619][ T12] vlan2: bond_netdev_event received NETDEV_CHANGEUPPER [ 740.143644][ T12] net vlan2: siw: event 22 [ 740.157040][ T12] kobject: 'brport' (ffff88802d63d160): kobject_uevent_env [ 740.157058][ T12] kobject: 'brport' (ffff88802d63d160): kobject_uevent_env: filter function caused the event to drop! [ 740.157091][ T12] kernfs brport: removing [ 740.158870][ T5737] ffff888034dc0000 name hci3 bus 0 [ 740.179318][ T5737] hci3: Updating devcoredump state from IDLE to IDLE. [ 740.179350][ T5737] hci3: err 0x13 [ 740.179410][ T5737] hci3 ffff888034dc0000 [ 740.179437][ T5737] hci3: [ 740.189200][ T12] kernfs bridge_slave_1: removing [ 740.189435][ T12] bridge_slave_1: left allmulticast mode [ 740.189467][ T12] bridge_slave_1: left promiscuous mode [ 740.195136][ T5737] hci3: err 0x13 [ 740.195162][ T5737] hci3: cancelling interleave scan [ 740.195395][ T5737] All LE pending actions cleared [ 740.195404][ T5737] hdev hci3 [ 740.195415][ T5737] hcon ffff888035790000 reason 22 [ 740.195426][ T5737] hcon ffff888035790000 conn ffff8880336e2800, err 103 [ 740.195471][ T5737] hci3 hcon ffff888035790000 chan ffff888032ad0a00 [ 740.197244][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 740.197260][ T12] bridge0: port 2(bridge_slave_1) event 16 [ 740.197525][ T12] bridge0: br_fill_ifinfo event 16 port bridge_slave_1 master bridge0 [ 740.197930][ T12] bridge0: port 2(bridge_slave_1) event 17 [ 740.198183][ T12] bridge0: br_fill_ifinfo event 17 port bridge_slave_1 master bridge0 [ 740.222000][ T5737] hci3 hcon ffff888035790000 handle 201 [ 740.222020][ T5737] hci3: hcon ffff888035790000 [ 740.246776][ T5737] hcon ffff888035790000 [ 740.246808][ T5737] hci3: conn ffff888035790000 [ 740.246840][ T5737] device: 'hci3:201': device_unregister [ 740.247207][ T5737] kernfs runtime_status: removing [ 740.247767][ T5737] kernfs control: removing [ 740.248402][ T5737] kernfs runtime_suspended_time: removing [ 740.249066][ T5737] kernfs runtime_active_time: removing [ 740.249576][ T5737] kernfs autosuspend_delay_ms: removing [ 740.250380][ T12] bridge_slave_1: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 740.250403][ T12] net bridge_slave_1: siw: event 27 [ 740.250466][ T12] Remove adjacency: dev bridge_slave_1 adj_dev bridge0 ref_nr 1 [ 740.250485][ T5737] kernfs power: removing [ 740.256293][ T5741] Bluetooth: hci2: command tx timeout [ 740.256372][ T5741] hci2 cmd_cnt 1 cmd queued 1 [ 740.256398][ T5741] hci2: skb ffff888034248780 [ 740.256755][ T5741] hci2 type 1 len 13 [ 740.260418][ C3] kobject: 'brport' (ffff88802d63d160): kobject_cleanup, parent 0000000000000000 [ 740.260448][ C3] kobject: 'brport' (ffff88802d63d160): calling ktype release [ 740.260624][ C3] kobject: 'brport': free name [ 740.266345][ T12] kernfs master: removing [ 740.266688][ T12] kernfs upper_bridge0: removing [ 740.266951][ T12] adjacency: dev_put for bridge0, because link removed from bridge_slave_1 to bridge0 [ 740.267111][ T12] Remove adjacency: dev bridge0 adj_dev bridge_slave_1 ref_nr 1 [ 740.267138][ T12] kernfs lower_bridge_slave_1: removing [ 740.267454][ T12] adjacency: dev_put for bridge_slave_1, because link removed from bridge0 to bridge_slave_1 [ 740.268697][ T5737] kernfs device: removing [ 740.269258][ T5737] kernfs subsystem: removing [ 740.269742][ T5737] kernfs hci3:201: removing [ 740.270312][ T5737] kernfs uevent: removing [ 740.270587][ T5737] PM: Removing info for No Bus:hci3:201 [ 740.270722][ T5737] kobject: 'hci3:201' (ffff888035790cf0): kobject_uevent_env [ 740.274079][ T5737] kobject: 'hci3:201' (ffff888035790cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/hci3:201' [ 740.276694][ T12] bridge_slave_1: bond_netdev_event received NETDEV_CHANGEUPPER [ 740.276731][ T12] net bridge_slave_1: siw: event 22 [ 740.284230][ T5737] kernfs hci3:201: removing [ 740.284391][ T5737] kobject: 'hci3:201' (ffff888035790cf0): kobject_cleanup, parent 0000000000000000 [ 740.284419][ T5737] kobject: 'hci3:201' (ffff888035790cf0): calling ktype release [ 740.285054][ T5737] kobject: 'hci3:201': free name [ 740.285295][ T5737] hci3 orig refcnt 7 [ 740.285343][ T5737] hdev hci3 event 4 [ 740.292247][T12554] Added buffer head 1 to ffff88802712b000 [ 740.292653][T12554] Added buffer head 0 to ffff88802712b000 [ 740.304710][ T5737] hdev 0000000000000000 len 8 [ 740.305270][ T5737] hci3: Cleanup of MSFT extension [ 740.312265][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 740.314233][ T850] No more buffers in queue [ 740.318235][ T5737] hdev hci3 event 8 [ 740.318276][ T5737] hci3 orig refcnt 6 [ 740.318605][ T5737] channel 3 len 6 [ 740.319188][ T5737] channel 3 len 8 [ 740.319507][ T5737] hdev hci3 event 2 [ 740.319778][ T5737] hdev 0000000000000000 len 8 [ 740.320276][ T5737] kernfs runtime_status: removing [ 740.320445][ T12] kobject: 'brport' (ffff88802e998160): kobject_uevent_env [ 740.320465][ T12] kobject: 'brport' (ffff88802e998160): kobject_uevent_env: filter function caused the event to drop! [ 740.320560][ T12] kernfs brport: removing [ 740.363748][ T12] kernfs bridge_slave_0: removing [ 740.364000][ T12] bridge_slave_0: left allmulticast mode [ 740.364034][ T12] bridge_slave_0: left promiscuous mode [ 740.365125][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 740.365138][ T12] bridge0: port 1(bridge_slave_0) event 16 [ 740.365413][ T12] bridge0: br_fill_ifinfo event 16 port bridge_slave_0 master bridge0 [ 740.365420][ T5737] kernfs control: removing [ 740.365706][ T5737] kernfs runtime_suspended_time: removing [ 740.366237][ T5737] kernfs runtime_active_time: removing [ 740.366545][ T5737] kernfs autosuspend_delay_ms: removing [ 740.367061][ T5737] kernfs power: removing [ 740.367358][ T5737] kernfs device: removing [ 740.367668][ T5737] kernfs subsystem: removing [ 740.372033][ T5737] kernfs rfkill8: removing [ 740.372346][ T5737] kernfs uevent: removing [ 740.372559][ T5737] kernfs name: removing [ 740.372859][ T5737] kernfs type: removing [ 740.373193][ T5737] kernfs index: removing [ 740.373496][ T5737] kernfs persistent: removing [ 740.373772][ T5737] kernfs state: removing [ 740.374891][ T12] bridge0: port 1(bridge_slave_0) event 17 [ 740.375181][ T12] bridge0: br_fill_ifinfo event 17 port bridge_slave_0 master bridge0 [ 740.376288][ T5737] kernfs soft: removing [ 740.376626][ T5737] kernfs hard: removing [ 740.376959][ T5737] kernfs hard_block_reasons: removing [ 740.377247][ T5737] PM: Removing info for No Bus:rfkill8 [ 740.377322][ T5737] kobject: 'rfkill8' (ffff8880274aa110): kobject_uevent_env [ 740.377610][ T5737] kobject: 'rfkill8' (ffff8880274aa110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill8' [ 740.385765][ T5737] kernfs rfkill8: removing [ 740.387356][ T12] bridge_slave_0: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 740.387385][ T12] net bridge_slave_0: siw: event 27 [ 740.387479][ T12] Remove adjacency: dev bridge_slave_0 adj_dev bridge0 ref_nr 1 [ 740.394589][ T12] kernfs master: removing [ 740.394883][ T12] kernfs upper_bridge0: removing [ 740.395182][ T12] adjacency: dev_put for bridge0, because link removed from bridge_slave_0 to bridge0 [ 740.395323][ T12] Remove adjacency: dev bridge0 adj_dev bridge_slave_0 ref_nr 1 [ 740.395355][ T12] kernfs lower_bridge_slave_0: removing [ 740.395594][ T12] adjacency: dev_put for bridge_slave_0, because link removed from bridge0 to bridge_slave_0 [ 740.397700][ T5737] kobject: 'rfkill8' (ffff8880274aa110): kobject_cleanup, parent 0000000000000000 [ 740.397719][ T5737] kobject: 'rfkill8' (ffff8880274aa110): calling ktype release [ 740.397994][ T5737] kobject: 'rfkill8': free name [ 740.398369][ T5737] kernfs runtime_status: removing [ 740.398664][ T5737] kernfs control: removing [ 740.398962][ T5737] kernfs runtime_suspended_time: removing [ 740.399287][ T5737] kernfs runtime_active_time: removing [ 740.399551][ T5737] kernfs autosuspend_delay_ms: removing [ 740.403141][ T12] bridge_slave_0: bond_netdev_event received NETDEV_CHANGEUPPER [ 740.403167][ T12] net bridge_slave_0: siw: event 22 [ 740.409904][ T5737] kernfs power: removing [ 740.410228][ T5737] kernfs subsystem: removing [ 740.410558][ T5737] kernfs hci3: removing [ 740.410838][ T5737] kernfs uevent: removing [ 740.411105][ T5737] kernfs reset: removing [ 740.411397][ T5737] PM: Removing info for No Bus:hci3 [ 740.411906][ T5737] kobject: 'hci3' (ffff888034dc1538): kobject_uevent_env [ 740.418096][ T5737] kobject: 'hci3' (ffff888034dc1538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 740.419214][ T5737] kernfs hci3: removing [ 740.419341][ T5737] hci3 orig refcnt 2 [ 740.419353][ T5737] kobject: 'hci3' (ffff888034dc1538): kobject_cleanup, parent 0000000000000000 [ 740.419367][ T5737] kobject: 'hci3' (ffff888034dc1538): calling ktype release [ 740.420468][ T12] kobject: 'brport' (ffff88802ffe0160): kobject_uevent_env [ 740.420485][ T12] kobject: 'brport' (ffff88802ffe0160): kobject_uevent_env: filter function caused the event to drop! [ 740.420520][ T12] kernfs brport: removing [ 740.428648][ C3] kobject: 'brport' (ffff88802e998160): kobject_cleanup, parent 0000000000000000 [ 740.428671][ C3] kobject: 'brport' (ffff88802e998160): calling ktype release [ 740.428780][ C3] kobject: 'brport': free name [ 740.430304][ T5737] All LE connection parameters were removed [ 740.430322][ T5737] hci3: Unregister MSFT extension [ 740.431131][ T5737] kobject: 'hci3': free name [ 740.457480][ T12] bridge0: toggle option: 10 state: 0 -> 0 [ 740.458816][ T9528] ffff8880362f0000 name hci1 bus 0 [ 740.466048][ T12] kobject: 'brif' (ffff888056a34f80): kobject_cleanup, parent ffff8880585c47c0 [ 740.466067][ T12] kobject: 'brif' (ffff888056a34f80): auto cleanup kobject_del [ 740.466107][ T12] kernfs brif: removing [ 740.466351][ T12] kobject: 'brif' (ffff888056a34f80): calling ktype release [ 740.466365][ T12] kobject: (ffff888056a34f80): dynamic_kobj_release [ 740.466553][ T12] kobject: 'brif': free name [ 740.466582][ T12] kernfs brforward: removing [ 740.466889][ T12] kernfs forward_delay: removing [ 740.467146][ T12] kernfs hello_time: removing [ 740.467405][ T12] kernfs max_age: removing [ 740.467702][ T12] kernfs ageing_time: removing [ 740.474472][ T12] kernfs stp_state: removing [ 740.474780][ T12] kernfs group_fwd_mask: removing [ 740.475044][ T12] kernfs priority: removing [ 740.475313][ T12] kernfs bridge_id: removing [ 740.475662][ T12] kernfs root_id: removing [ 740.476264][ T12] kernfs root_path_cost: removing [ 740.476383][ T9528] hci1: Updating devcoredump state from IDLE to IDLE. [ 740.476402][ T9528] hci1: err 0x13 [ 740.476439][ T9528] hci1 ffff8880362f0000 [ 740.476457][ T9528] hci1: [ 740.482788][ T12] kernfs root_port: removing [ 740.483066][ T12] kernfs topology_change: removing [ 740.483403][ T12] kernfs topology_change_detected: removing [ 740.483656][ T12] kernfs hello_timer: removing [ 740.483908][ T12] kernfs tcn_timer: removing [ 740.484160][ T12] kernfs topology_change_timer: removing [ 740.484497][ T12] kernfs gc_timer: removing [ 740.484757][ T12] kernfs group_addr: removing [ 740.500105][ T12] kernfs flush: removing [ 740.500375][ T12] kernfs no_linklocal_learn: removing [ 740.500624][ T12] kernfs multicast_router: removing [ 740.500875][ T12] kernfs multicast_snooping: removing [ 740.501190][ T12] kernfs multicast_querier: removing [ 740.501449][ T12] kernfs multicast_query_use_ifaddr: removing [ 740.501705][ T12] kernfs hash_elasticity: removing [ 740.501964][ T12] kernfs hash_max: removing [ 740.505005][ T12] kernfs multicast_last_member_count: removing [ 740.505279][ T12] kernfs multicast_startup_query_count: removing [ 740.505572][ T12] kernfs multicast_last_member_interval: removing [ 740.505981][ T12] kernfs multicast_membership_interval: removing [ 740.506247][ T12] kernfs multicast_querier_interval: removing [ 740.506524][ T12] kernfs multicast_query_interval: removing [ 740.506791][ T12] kernfs multicast_query_response_interval: removing [ 740.509597][ T12] kernfs multicast_startup_query_interval: removing [ 740.509901][ T12] kernfs multicast_stats_enabled: removing [ 740.510161][ T12] kernfs multicast_igmp_version: removing [ 740.510424][ T12] kernfs multicast_mld_version: removing [ 740.510681][ T12] kernfs nf_call_iptables: removing [ 740.510972][ T12] kernfs nf_call_ip6tables: removing [ 740.511266][ T12] kernfs nf_call_arptables: removing [ 740.511564][ T12] kernfs vlan_filtering: removing [ 740.514189][ T12] kernfs vlan_protocol: removing [ 740.514489][ T12] kernfs default_pvid: removing [ 740.514749][ T12] kernfs vlan_stats_enabled: removing [ 740.519650][ T5729] Added buffer head 0 to ffff88802712b000 [ 740.520966][ C2] kobject: 'brport' (ffff88802ffe0160): kobject_cleanup, parent 0000000000000000 [ 740.520999][ C2] kobject: 'brport' (ffff88802ffe0160): calling ktype release [ 740.521163][ C2] kobject: 'brport': free name [ 740.522797][ T5729] Added buffer head 1 to ffff88802712b000 [ 740.522930][ T12] kernfs vlan_stats_per_port: removing [ 740.523197][ T12] kernfs bridge: removing [ 740.523581][ T12] bridge1: toggle option: 10 state: 0 -> 0 [ 740.528409][ C0] virtqueue callback for ffff88802712b000 (ffffffff866601c0) [ 740.528726][ T850] No more buffers in queue [ 740.531770][ T9528] hci1: err 0x13 [ 740.531782][ T9528] hci1: cancelling interleave scan [ 740.531902][ T9528] All LE pending actions cleared [ 740.531914][ T9528] hdev hci1 [ 740.531937][ T9528] hcon ffff888038e50000 reason 22 [ 740.531953][ T9528] hcon ffff888038e50000 conn ffff8880336e1800, err 103 [ 740.532360][ T9528] hci1 hcon ffff888038e50000 chan ffff888032ad0b00 [ 740.533936][ T12] kobject: 'brif' (ffff888027845500): kobject_cleanup, parent ffff88805b1c87c0 [ 740.533956][ T12] kobject: 'brif' (ffff888027845500): auto cleanup kobject_del [ 740.534009][ T12] kernfs brif: removing [ 740.534254][ T12] kobject: 'brif' (ffff888027845500): calling ktype release [ 740.534270][ T12] kobject: (ffff888027845500): dynamic_kobj_release [ 740.534369][ T12] kobject: 'brif': free name [ 740.534417][ T12] kernfs brforward: removing [ 740.534722][ T12] kernfs forward_delay: removing [ 740.534989][ T12] kernfs hello_time: removing [ 740.535256][ T12] kernfs max_age: removing [ 740.535537][ T12] kernfs ageing_time: removing [ 740.538283][ T12] kernfs stp_state: removing [ 740.538612][ T12] kernfs group_fwd_mask: removing [ 740.538919][ T12] kernfs priority: removing [ 740.539174][ T12] kernfs bridge_id: removing [ 740.539427][ T12] kernfs root_id: removing [ 740.539677][ T12] kernfs root_path_cost: removing [ 740.539935][ T12] kernfs root_port: removing [ 740.540227][ T12] kernfs topology_change: removing [ 740.540486][ T12] kernfs topology_change_detected: removing [ 740.540746][ T12] kernfs hello_timer: removing [ 740.541071][ T12] kernfs tcn_timer: removing [ 740.541376][ T12] kernfs topology_change_timer: removing [ 740.541641][ T12] kernfs gc_timer: removing [ 740.541909][ T12] kernfs group_addr: removing [ 740.542195][ T12] kernfs flush: removing [ 740.542481][ T12] kernfs no_linklocal_learn: removing [ 740.542732][ T12] kernfs multicast_router: removing [ 740.542981][ T12] kernfs multicast_snooping: removing [ 740.543189][ T9528] hci1 hcon ffff888038e50000 handle 201 [ 740.543205][ T9528] hci1: hcon ffff888038e50000 [ 740.543237][ T12] kernfs multicast_querier: removing [ 740.543530][ T12] kernfs multicast_query_use_ifaddr: removing [ 740.543789][ T12] kernfs hash_elasticity: removing [ 740.544078][ T12] kernfs hash_max: removing [ 740.544343][ T12] kernfs multicast_last_member_count: removing [ 740.544648][ T12] kernfs multicast_startup_query_count: removing [ 740.544914][ T12] kernfs multicast_last_member_interval: removing [ 740.545199][ T12] kernfs multicast_membership_interval: removing [ 740.545473][ T12] kernfs multicast_querier_interval: removing [ 740.575613][ T12] kernfs multicast_query_interval: removing [ 740.575899][ T12] kernfs multicast_query_response_interval: removing [ 740.576168][ T12] kernfs multicast_startup_query_interval: removing [ 740.576383][ T9528] hcon ffff888038e50000 [ 740.576397][ T9528] hci1: conn ffff888038e50000 [ 740.576411][ T9528] device: 'hci1:201': device_unregister [ 740.576434][ T12] kernfs multicast_stats_enabled: removing [ 740.581633][ T12] kernfs multicast_igmp_version: removing [ 740.581964][ T12] kernfs multicast_mld_version: removing [ 740.582322][ T12] kernfs nf_call_iptables: removing [ 740.582645][ T12] kernfs nf_call_ip6tables: removing [ 740.582967][ T12] kernfs nf_call_arptables: removing [ 740.583291][ T12] kernfs vlan_filtering: removing [ 740.583582][ T12] kernfs vlan_protocol: removing [ 740.584024][ T9528] kernfs runtime_status: removing [ 740.584368][ T9528] kernfs control: removing [ 740.584909][ T9528] kernfs runtime_suspended_time: removing [ 740.585366][ T9528] kernfs runtime_active_time: removing [ 740.585698][ T9528] kernfs autosuspend_delay_ms: removing [ 740.596811][ T9528] kernfs power: removing [ 740.597187][ T9528] kernfs device: removing [ 740.597540][ T9528] kernfs subsystem: removing [ 740.597865][ T9528] kernfs hci1:201: removing [ 740.598244][ T9528] kernfs uevent: removing [ 740.598638][ T12] kernfs default_pvid: removing [ 740.598943][ T12] kernfs vlan_stats_enabled: removing [ 740.599199][ T12] kernfs vlan_stats_per_port: removing [ 740.599604][ T12] kernfs bridge: removing [ 740.604572][ T9528] PM: Removing info for No Bus:hci1:201 [ 740.604657][ T9528] kobject: 'hci1:201' (ffff888038e50cf0): kobject_uevent_env [ 740.604909][ T12] In tnode_resize ffff88802afe2e20 inflate_threshold=50 threshold=25 [ 740.605292][ T9528] kobject: 'hci1:201' (ffff888038e50cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/hci1:201' [ 740.612771][ T9528] kernfs hci1:201: removing [ 740.612877][ T9528] kobject: 'hci1:201' (ffff888038e50cf0): kobject_cleanup, parent 0000000000000000 [ 740.612893][ T9528] kobject: 'hci1:201' (ffff888038e50cf0): calling ktype release [ 740.613284][ T9528] kobject: 'hci1:201': free name [ 740.613427][ T9528] hci1 orig refcnt 7 [ 740.613459][ T9528] hdev hci1 event 4 [ 740.613776][ T9528] hdev 0000000000000000 len 8 [ 740.614088][ T9528] hci1: Cleanup of MSFT extension [ 740.619054][ T9528] hdev hci1 event 8 [ 740.619076][ T9528] hci1 orig refcnt 6 [ 740.619407][ T9528] channel 3 len 6 [ 740.619703][ T12] In tnode_resize ffff88802239e720 inflate_threshold=50 threshold=25 [ 740.622390][ T9528] channel 3 len 8 [ 740.622735][ T9528] hdev hci1 event 2 [ 740.623001][ T9528] hdev 0000000000000000 len 8 [ 740.623512][ T9528] kernfs runtime_status: removing [ 740.623790][ T9528] kernfs control: removing [ 740.624077][ T9528] kernfs runtime_suspended_time: removing [ 740.628504][ T9528] kernfs runtime_active_time: removing [ 740.628803][ T9528] kernfs autosuspend_delay_ms: removing [ 740.629388][ T9528] kernfs power: removing [ 740.629733][ T9528] kernfs device: removing [ 740.630000][ T9528] kernfs subsystem: removing [ 740.630281][ T9528] kernfs rfkill6: removing [ 740.632890][ T9528] kernfs uevent: removing [ 740.633108][ T9528] kernfs name: removing [ 740.633416][ T9528] kernfs type: removing [ 740.633753][ T9528] kernfs index: removing [ 740.634039][ T9528] kernfs persistent: removing [ 740.634325][ T9528] kernfs state: removing [ 740.634690][ T9528] kernfs soft: removing [ 740.635022][ T9528] kernfs hard: removing [ 740.635324][ T9528] kernfs hard_block_reasons: removing [ 740.635609][ T9528] PM: Removing info for No Bus:rfkill6 [ 740.635713][ T9528] kobject: 'rfkill6' (ffff888029801110): kobject_uevent_env [ 740.639821][ T12] In tnode_resize ffff88802239e420 inflate_threshold=50 threshold=25 [ 740.639860][ T9528] kobject: 'rfkill6' (ffff888029801110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1/rfkill6' [ 740.640951][ T9528] kernfs rfkill6: removing [ 740.641132][ T12] In tnode_resize ffff88802239ed20 inflate_threshold=50 threshold=25 [ 740.643244][ T9528] kobject: 'rfkill6' (ffff888029801110): kobject_cleanup, parent 0000000000000000 [ 740.643260][ T9528] kobject: 'rfkill6' (ffff888029801110): calling ktype release [ 740.643671][ T9528] kobject: 'rfkill6': free name [ 740.644005][ T9528] kernfs runtime_status: removing [ 740.644284][ T9528] kernfs control: removing [ 740.649585][ T9528] kernfs runtime_suspended_time: removing [ 740.649786][ T12] In tnode_resize ffff888032ad5c20 inflate_threshold=50 threshold=25 [ 740.649863][ T9528] kernfs runtime_active_time: removing [ 740.650135][ T9528] kernfs autosuspend_delay_ms: removing [ 740.650636][ T9528] kernfs power: removing [ 740.650943][ T9528] kernfs subsystem: removing [ 740.651251][ T9528] kernfs hci1: removing [ 740.651543][ T9528] kernfs uevent: removing [ 740.654151][ T9528] kernfs reset: removing [ 740.654751][ T9528] PM: Removing info for No Bus:hci1 [ 740.655361][ T9528] kobject: 'hci1' (ffff8880362f1538): kobject_uevent_env [ 740.655650][ T9528] kobject: 'hci1' (ffff8880362f1538): fill_kobj_path: path = '/devices/virtual/bluetooth/hci1' [ 740.658600][ T12] In tnode_resize ffff888032ad5320 inflate_threshold=50 threshold=25 [ 740.659162][ T9528] kernfs hci1: removing [ 740.659278][ T9528] hci1 orig refcnt 2 [ 740.659291][ T95