last executing test programs: 3.4674813s ago: executing program 2 (id=5178): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000200)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/sys/kernel/sem\x00', 0x1, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_SOCK_RECVQ_DEPTH(r1, 0x10f, 0x84, &(0x7f0000003040), &(0x7f0000003080)=0x4) write$mtd(r0, &(0x7f0000000340)='n', 0x1) r2 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) sendto$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$phonet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) syz_usb_control_io$printer(r2, &(0x7f00000008c0)={0x14, &(0x7f0000000700)={0x40, 0x36, 0xe7, {0xe7, 0x1, "445e58b27bae52c9f30a2bb8486259726248bef19f431239905a36047c29d4b4aad5e9c59979a98abcf533eb8ae8e5719d9dbf10cf876822b5ac86216521787d6966d762dab3e9358629ef0a5abe2792737d8dd6d1ca93011b4c27fb6a9db8ff0b0821c111dcc44d1d0e4ad880ae4ec22ed4cb355290998e3a566ddc3635c0d7b127bbca8742859b558e58db4604b7bdfbb70dda2bf2b716c0a0262f615bc3a70bf212f9e805601148c63f4eed71600b663f383358afb379b75174bca9556775cf7f8b6d2bb995787787badc5932928dee9b17a1ffbedf58ea44846d3ad76be0f690b48eca"}}, &(0x7f0000000800)={0x0, 0x3, 0xb8, @lang_id={0x0, 0x3, 0x812}}}, &(0x7f0000000cc0)={0x40, &(0x7f0000000a40)={0x40, 0x31, 0xe7, "d0c7add54a10d23d32e1837d21244c8aef07f83e5206c50e4affb8253f207f1563a8fc79823d2d1eb949b40875e7288ccdc353c0350a1a889f939fb90089400acad0a286cce70c87126d71bc0b37bf4e1627757822fbb0e6b5783435762fe4c53f5ceb1774f35801476363fd1c02b744bc1bf5b6dfd0be1ae56f9c96de309d8729d043fda9bf07e1871e352c84323bc258b549b897c3cc2d4c0afca7e1d39cdc9aaa5eb7f9e522486ab8404ceaf1d22589580bbe8e1513703dd98f330c80ee59492fb36aebdcad479af61acd2ba7ba681c8337bff02dfc42323c4311faa601d289e32d0c43aa10"}, &(0x7f0000000b40)={0x0, 0xa, 0x1, 0x4}, &(0x7f0000000b80)={0x0, 0x8, 0x1, 0x7f}, &(0x7f0000000e40)=ANY=[@ANYBLOB="2000460000000044c9c6397f43ed9f55d8456bbc653da2eb85d03b38ea0543b4ced0d0d3b5f60c21ae027ffe92c8faa5fbd9b235cd09885855a8d93a0e931b57b5d63b21f8044de0f2c8a064a765ef1a48eae38f12296798a773412aa80f422fdb29438b835bb9d63b18c094d4361e46b809b29d178b4836d00d77527093c7a673f6af9083dba04271e24a29c869bd53323e7a6e06762b3b8b24894c6f2ade949c891146bb637b4726a46b04a2d85c48e41538a860e1bb75649e5f52546fa62a483de12a2eafa8d0ffd85b4bc850d1df85293e9be80a6f0f99f7596a5b563545959093bbbfbe9d238b0570df145d1b7e29c82ab996f13247558eb97b31a7fe037199e7b6ccf5dc675e3b10f467eaffc012e85e143a84beadff7f81f124c4fc019b2ea1c5741c6715008a877d423207d2b59478a4eea28b06f5c065029baa51100b6e07db10a280f52226c9c03cd942dcd183842088c49f2a105b54797b1d6b84aa8793f9cf4383e3aca8069279c7681402c700"/382], &(0x7f0000000c40)={0x20, 0x1, 0x1, 0xd0}, &(0x7f0000000c80)={0x20, 0x0, 0x1, 0x11}}) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000480)='./dev/file0\x00', &(0x7f00000001c0)='ext4\x00', 0x118410, 0x0) stat(&(0x7f00000005c0)='./file1\x00', &(0x7f0000000400)) getgid() getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000fc0)={{{@in6, @in6=@local}}, {{@in6=@ipv4={""/10, ""/2, @initdev}}, 0x0, @in=@loopback}}, &(0x7f00000004c0)=0xfffffffffffffda1) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mremap(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x942, 0x0) r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r3, 0x80015b12, 0x0) 2.105288792s ago: executing program 2 (id=5207): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) setns(0xc9, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b8f7e0b0a43b820a8e8c9881db642", @ANYRES8], 0x97) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 2.011815668s ago: executing program 2 (id=5210): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={'xcbc(twofish-asm)\x00'}}) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) 1.811425874s ago: executing program 0 (id=5218): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1234}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) setns(0xc9, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x9) write$tun(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b8f7e0b0a43b820a8e8c9881db642", @ANYRES8], 0x97) write$tun(r0, &(0x7f0000000140)=ANY=[@ANYBLOB="000008050000010b007e"], 0x97) 1.725922792s ago: executing program 0 (id=5220): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @local}, 0x1c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x0, @remote}, 0x1c) syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "00ffff", 0x14, 0x6, 0x40, @remote, @local, {[], {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x1000}}}}}}}, 0x0) socket(0x10, 0x3, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0x3, 0x0, 0x80, 0x1, 0xffffffffffffffff}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x8, 0x9, 0x300000000000000, 0x1ff, 0x7fffffff}, 0x0, 0x0) 1.123489074s ago: executing program 2 (id=5230): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000050)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./debug/netdevsim/netdevsim0/health/break_health\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='t', 0x1) (fail_nth: 7) 984.330234ms ago: executing program 2 (id=5231): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_ASSOCIATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000801}, 0x850) 984.101831ms ago: executing program 1 (id=5232): r0 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[@ANYBLOB="364000001a00913a"], 0x82d7) recvmsg(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000002200)=""/4096, 0x7ffff000}, {&(0x7f0000003200)=""/4073, 0xfe9}], 0x2}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000005380)={&(0x7f00000000c0)=@in={0x2, 0x4e24, @loopback}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="a930156183d5d32f54be6d16d030cc5b8d2f6232393533bc3ad6d3b4010ab54b354eb1b68d309be39ca3cdcb0d56a10486a201de72f3b51f3dc53381e08e062529d102cdc0a2f38197d152c698224812ab3b8168121ceb237d6636d438f3d546012b44d93fa41935e7206d56e7c7d27fa3a0de930899fbb15636508f50b0c02a56865563f35f90defad776bf8a958f928bea9b6905d00fd90295df78d597198673264c06edc9a83c3ea97c5eccba41fa84204769ee4bc9f8a8132156c4021718e299f041c7e28124f46bef36950154da1d55db0c3578a66cb805d36133a5df7c150251ef4809cc", 0xe7}], 0x1, &(0x7f0000004200)=[{0x1010, 0x117, 0x1, "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"}, {0x10, 0x1, 0xfffffffb}, {0x40, 0x102, 0x5, "fef1720949e6903ca07312bd3e4ae74a67348ed9658e1dfd4d5bbf59368e421cfa5b103c8ba9155814901ecee6dc6a6b"}, {0x28, 0x11, 0xfff, "3a115f1a2eb175781b50cbc09cf36e2aeb6fd045470d51"}, {0x78, 0x107, 0x9, "93be8c471c844fbb486396da0245f07436f93b101d3ed090d1288c89804a6086206cf538c9d6a1182edf1c0c3e7f837ac7cc69a54a0f51b7e7d1a2e56fac93f8accaea905a10067c172557149f9e63cd7c12b4770b208f2e10bca85c603dfb2ddba38e98"}, {0x48, 0x84, 0x800000, "0a3873d8dd71f6491315662922c9861312ef85767f72c8f8719a0784ffb1818c87637f59e1ffd8e9adabf79a24c904db74"}], 0x1148}, 0x41) sendmsg$netlink(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)={0x20, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x8, 0x0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x0, 0x0, 0x0, @fd}]}, 0x20}], 0x1}, 0x4000010) recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001100)=@ipv6_getnexthop={0x18, 0x6a, 0x1, 0x70bd27}, 0x18}, 0x1, 0x0, 0x0, 0x4000905}, 0x20008004) 924.057671ms ago: executing program 1 (id=5233): r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r1, r3, 0x16, 0x0, @void}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000040)='\x00', &(0x7f00000001c0)='!\\$%!!,\x00', 0x0) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000000c0)=0x1, 0x4) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r5 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000340)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r6, 0x5b02, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @remote}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000d80)={&(0x7f0000000800)=@in={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000d00)=[{&(0x7f0000000840)='6', 0x1a000}], 0x1, 0x0, 0x0, 0x20000080}, 0x10) recvmsg(r0, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x20000) 922.462355ms ago: executing program 2 (id=5234): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf252c000000180001801400020064756d6d7930"], 0x2c}, 0x1, 0x0, 0x0, 0x20048881}, 0x2000c800) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00', @ANYRES16=0x0, @ANYBLOB="000426bd7000fcdbdf25000000000500220001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004000) ioctl(r3, 0xc0104d03, &(0x7f0000000140)) r6 = socket(0x10, 0x80002, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) ioctl$BTRFS_IOC_QGROUP_LIMIT(r2, 0x8030942b, &(0x7f0000000380)={0x5, {0x0, 0x7, 0xfff, 0x8, 0x5}}) syz_genetlink_get_family_id$ethtool(&(0x7f0000000340), r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/events/sched/sched_switch/trigger\x00', 0x2, 0x0) write(r7, &(0x7f0000000180)='traceon', 0x7) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x800c6613, &(0x7f00000003c0)=@v2={0x2, @aes256, 0x1c, '\x00', @c}) 814.407007ms ago: executing program 0 (id=5235): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000090000000000000003000000850000001300000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000001c0)={r0, 0x0, 0x12, 0x0, &(0x7f00000008c0)="c1dfb080cd21d308098e000081007e2288a8", 0x0, 0x8006, 0x900, 0x0, 0x0, 0x0, 0x0}, 0x50) 814.134032ms ago: executing program 0 (id=5236): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d36, 0x101, 0x4, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x40000000, 0x5, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0xc, 0x7f, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x800, 0x10000005, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x114, 0x8001, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0xfffffffa, 0xc2bf, 0x6, 0x402, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4, 0x1, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x89e8, 0x3, 0x9, 0x38c, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0xfffffffc, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x2, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ef, 0x12b, 0x6, 0x1, 0x80, 0x20, 0x9, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0x10bb33, 0x7, 0x8, 0x80, 0x938, 0x2003, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x4000, 0x10000, 0x104, 0x37f2, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x5, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x2, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0x4, 0x6, 0x200, 0x0, 0x7fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 761.864368ms ago: executing program 0 (id=5237): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000a7d4635d7b1af8ff00000000bfa100000000000007010000f8ffbfffb702000008000000b703000000000000850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x48, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xffffffff}, 0x3f) 673.249737ms ago: executing program 0 (id=5238): sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0x2c41, 0x0) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={'xcbc(twofish-asm)\x00'}}) flock(r0, 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x10a) flock(r2, 0x2) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x8) 339.091899ms ago: executing program 1 (id=5239): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r0, 0x0, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(0xffffffffffffffff, 0x3ba0, &(0x7f0000000800)={0x48, 0x3, r1, 0x0, 0x1004000, 0x0, 0x0}) 338.965139ms ago: executing program 1 (id=5240): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x50, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x4}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x811}, 0x1) 254.092136ms ago: executing program 1 (id=5241): syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6, 0x72, 0x1, 0x7fff0000}]}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="6112a0000000000061138c0000000000bf2000000000000007000000080000003d0301000000000095000000000000006916200000000000bf67000000000000170600000fff07006706000002000000070600000ee60000bf050000000000001f650000000000006507000002000000070700004c0000001f75000000000000bf54000000000000070500000419311f3d2401000000000095000000000000000500000000000000950000000000000032ed3c5be95e76b67754bb12dc8c27df8ecf264e0f84f9f17d3c30e3c72fe9755ba08508460b603daf5a7d1dbdd2d17f2f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a674f888a08034b7dd399703d6c4f633a9a4f16d0a3e1282ee45a010fb94fa9de56c9d8a814261bdb94a6538b89dc6c60bf70d742a81b72bab8395fa64810b5b1bfd3782519518c51231422bb8fab4d4d897db2c544c0ec50b8eac8c63d2b1cd06a39702bd547f5ebaa6954f01cef3c9bacec15e2e3b2bd352e93a22adfe8efe33ffa78b02af242f8ee5476d4ef7a6f0c4704403b9bad2b648e90fff24f69a5ef05f5408ea197ed09a9510ee6063229de2984abdd46ea3ec78e3127002ed37c2564b8f8a621483fb2a5ff221e0d831d64759d17b8c59d0f2b06e7f6b7958fb5b939af4be5e55a95f8c6d785a91c7c3f0c17ae7f9ac5ff05f5ecddf0cef90d50e763be96496661c749e21ab63a1f50b30a65a9027ba357bf8c614497ee59b68bf6a5d45c81c567e347d545741fbbbea3e47b1750f272980087b7f8a13cce7014137f250370b8a70ae3eaf6d6f17759c3886871e97d063b7f26eed3226bb0b9ee6320a2b02fea7a06a0e37182adf"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) close_range(r0, 0xffffffffffffffff, 0x0) 251.092636ms ago: executing program 3 (id=5242): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f000000b840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18, 0x4044881}}], 0x2, 0x20000880) mkdir(&(0x7f0000000140)='./file0/file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000040)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) stat(&(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(r2, &(0x7f0000000240)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ENTRY(r2, &(0x7f0000000140)={0x90, 0x0, r3, {0x20000000000007, 0x0, 0x8, 0xe, 0x0, 0x7, {0x1, 0x0, 0x2, 0x6, 0xe, 0x5, 0x4007fff, 0x9, 0x7fd, 0x0, 0x5, r4, r5, 0x0, 0x1000}}}, 0x90) mount$9p_virtio(&(0x7f0000000180), &(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200), 0x1000080, &(0x7f0000000340)={'trans=virtio,', {[{@dfltgid={'dfltgid', 0x3d, r1}}, {@dfltgid={'dfltgid', 0x3d, r5}}, {@version_9p2000}], [{@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@subj_user={'subj_user', 0x3d, 'overlay\x00'}}]}}) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="050027bd7000000000000600000008000300", @ANYRES32=r7, @ANYBLOB="08004d01"], 0x24}, 0x1, 0x0, 0x0, 0x400d1}, 0x0) setxattr$system_posix_acl(&(0x7f0000000080)='./file0/file1\x00', &(0x7f0000000100)='system.posix_acl_access\x00', &(0x7f0000000500)={{}, {}, [], {0x4, 0x1}, [], {0x10, 0x2}, {0x20, 0x3}}, 0x24, 0x3) 183.806304ms ago: executing program 1 (id=5243): r0 = socket$inet(0x2, 0x1, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x801, @loopback}, 0x10) listen(r0, 0x5) setsockopt$inet_buf(r0, 0x0, 0x1, &(0x7f0000000300)="800001000000000000000001", 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./mnt\x00', 0x1ff) mount$nfs(&(0x7f0000000080)=':\x00'/18, &(0x7f00000000c0)='./mnt\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{'addr=127.0.0.1,port=2049,mountport=2049,proto=tcp,mountproto=tcp,nolock,timeo=10,retrans=1\x00'}]}) 183.503636ms ago: executing program 3 (id=5244): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r0 = landlock_create_ruleset(&(0x7f0000000080)={0x4, 0x0, 0x1, 0x0, 0x8, 0x1}, 0x30, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) landlock_restrict_self(r0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1e000000000000000300080005"], 0x50) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r1, 0x0, &(0x7f0000001700)=""/53}, 0x20) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2, 0x0) ioctl(r2, 0x541b, 0x0) ioctl(r2, 0x5451, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x8, @private2, 0x4}}, 0x7, 0xa400, 0x9, 0x4, 0x81, 0x4, 0x3}, &(0x7f00000001c0)=0x9c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000200)={r3, @in={{0x2, 0x4e23, @loopback}}, 0x6, 0xf, 0x9, 0xb, 0xc27}, &(0x7f00000002c0)=0x98) 113.997125ms ago: executing program 3 (id=5245): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x24000000) mount(0x0, 0x0, &(0x7f0000000240)='proc\x00', 0x4000, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(0xffffffffffffffff, 0xc018937a, 0x0) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000100000)=""/8169, 0x2000, 0x800, 0x0, 0x2}, 0x20) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x10, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x10, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x10, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00', 0x0}) bind$xdp(r0, &(0x7f00000003c0)={0x2c, 0x2, r2, 0x0, 0x0}, 0x10) mmap$xdp(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x80000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYRES32=0x0, @ANYBLOB="01"], 0x20}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x3, 0x6, 0xfffa}, 0x3a, [0x20008000, 0x1, 0x4, 0x8, 0xfe, 0xfffffffe, 0x80000000, 0x7f, 0x20000006, 0x4c, 0x6, 0x5f, 0x7, 0x9, 0xffff2d36, 0x101, 0x4, 0x5, 0x0, 0x3, 0x400, 0x0, 0x7, 0x40, 0x1, 0x24, 0xd, 0x3fffffe, 0x40000000, 0x5, 0xe665, 0x204, 0x7, 0x3, 0x8, 0x4c70, 0x80000000, 0x242, 0x8, 0xe, 0x4, 0x80008071, 0xffffb8f3, 0xc, 0x7f, 0x7, 0x5, 0x3e, 0x8f, 0x8, 0x6, 0x800, 0x10000005, 0x81, 0x4, 0x3ff, 0x8, 0x0, 0x114, 0x8001, 0x4, 0x4, 0x0, 0xfffffffa], [0x1000, 0x9, 0x8000012f, 0x8004, 0x5, 0x8, 0x129432e7, 0x46, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x6, 0x2, 0x0, 0x45, 0x2f, 0x1782000, 0x313, 0x78, 0xea4, 0x5fa, 0x0, 0xfffffffa, 0xc2bf, 0x6, 0x402, 0x401, 0x6, 0x1, 0xff, 0x3d, 0x1000005, 0x5bea93c7, 0xd, 0x4, 0x1, 0x4, 0x81b, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x4, 0xfe000000, 0xffff, 0x2, 0x4, 0x89e8, 0x3, 0x9, 0x38c, 0x9, 0x20003, 0xffffffff, 0x100bc45, 0x48c9368d, 0x80, 0x3], [0x4, 0xc08, 0x4, 0x5, 0xfffffffd, 0xd, 0x31b, 0x9, 0x5, 0x7fff, 0x9, 0x6, 0xb, 0x4, 0x5, 0x5, 0x3, 0x1ef, 0xfffffffc, 0x8, 0x86, 0x3, 0x1, 0x3e7, 0xe, 0x2, 0x0, 0x2, 0xda6, 0xc, 0x4, 0x6d01, 0x2, 0x38, 0x800003, 0x200, 0x80, 0x7, 0x4, 0x2950bfb1, 0x1000, 0x400000a2, 0x7, 0x2000a9, 0x5, 0x7, 0xac8, 0xbf, 0x1, 0x3, 0x7ef, 0x12b, 0x6, 0x1, 0x80, 0x20, 0x9, 0x1c, 0x8867, 0x3, 0x2006, 0x80a2ed, 0x40000005, 0x25], [0x9, 0x10bb33, 0x7, 0x8, 0x80, 0x938, 0x2003, 0x6, 0x0, 0xb9, 0xcea, 0x6, 0x2, 0x57, 0x9, 0x3, 0x4000, 0x10000, 0x104, 0x37f2, 0xffff, 0xa622, 0x1, 0x5, 0x1, 0xffffffff, 0x14f, 0x5, 0x6, 0x7f, 0xffffffff, 0x80000000, 0x4, 0x4, 0x4c7, 0x1, 0xfffff000, 0x7, 0x5, 0x7e, 0x100, 0x3173, 0x2, 0xb2, 0x8, 0x6, 0x10, 0x5, 0x5, 0x8, 0x30b1d693, 0x4008a1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x8, 0x5, 0x4, 0x6, 0x200, 0x0, 0x7fff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {0xffffffffffffffff, 0x400}], 0x20000000000000dc, 0x0, 0x0, 0xfffffffffffffcdd) 91.969332ms ago: executing program 3 (id=5246): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4048011}, 0x8010) 34.561657ms ago: executing program 3 (id=5247): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x4, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) 0s ago: executing program 3 (id=5248): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x70, 0x1a, 0x100, 0x70bd2a, 0x25dfdbff, {0xd}, [@generic="4bc3fe0d6c75a188fe58b5347ac37af6c64da523d2f83d1e03df0bb31a1ee1c52a48ce44529da117a3bd2b3a67b36bf73daefee3989a425282423ff2e575326ae779dd3ce43599d0f42fc4ca1f95", @nested={0xc, 0x133, 0x0, 0x1, [@typed={0x8, 0x143, 0x0, 0x0, @fd=r0}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x2404c045}, 0xc0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f0000000080)={0x3, 0x3f, "74c1f0", 0x8}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="240000001d00070f000000000000000007000000", @ANYRES32=r3, @ANYBLOB="40002700060010"], 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x4000024) 0s ago: executing program 2 (id=5249): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./cfg\x00', 0x1ff) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newtaction={0x60, 0x30, 0x3, 0x0, 0x2000000, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3e, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x4, 0xffffffffffffffff, 0x12, 0xe}, 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0xc3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x6, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000000000000bf160000000000007961a80000000000150101000000000085000000560000009500000000000000"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) mount(0x0, &(0x7f0000000340)='./cfg\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00', 0x1ff) rmdir(&(0x7f0000000140)='./cfg/usb_gadget/g1/functions/ffs.usb0\x00') kernel console output (not intermixed with test programs): pen device unknown-block(1,1). [ 338.806413][T14458] md: md_import_device returned -16 [ 338.806497][T11619] md_update_sb: can't update sb for read-only array md0 [ 338.814737][ T43] audit: type=1400 audit(1700006581.829:783): avc: denied { write } for pid=14468 comm="syz.3.3204" name="strings" dev="configfs" ino=17170 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 338.916950][T14475] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 338.955804][T14475] md: couldn't update array info. -22 [ 338.956026][T11619] md_update_sb: can't update sb for read-only array md0 [ 338.995460][T14475] md: could not open device unknown-block(1,0). [ 338.995509][T14475] md: md_import_device returned -16 [ 338.995644][T11619] md_update_sb: can't update sb for read-only array md0 [ 339.035611][T14475] md: could not open device unknown-block(1,1). [ 339.035640][T14475] md: md_import_device returned -16 [ 339.035732][T11619] md_update_sb: can't update sb for read-only array md0 [ 339.050484][ T43] audit: type=1400 audit(1700006582.069:784): avc: denied { map } for pid=14480 comm="syz.1.3208" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=760 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 339.176843][ T43] audit: type=1400 audit(1700006582.179:785): avc: denied { create } for pid=14483 comm="syz.0.3209" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.176953][ T43] audit: type=1400 audit(1700006582.179:786): avc: denied { write } for pid=14483 comm="syz.0.3209" name="file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.176991][ T43] audit: type=1400 audit(1700006582.179:787): avc: denied { open } for pid=14483 comm="syz.0.3209" path="/163/file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.179567][ T5835] usb 8-1: new high-speed USB device number 38 using dummy_hcd [ 339.198524][ T2329] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 339.205982][T14486] block device autoloading is deprecated and will be removed. [ 339.215159][ T43] audit: type=1400 audit(1700006582.229:788): avc: denied { ioctl } for pid=14483 comm="syz.0.3209" path="/163/file0" dev="tmpfs" ino=924 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.330636][ T5835] usb 8-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 339.339356][ T5835] usb 8-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 339.339439][ T5835] usb 8-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 339.339597][ T5835] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.353588][T14473] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 339.401325][ T5835] usb 8-1: Quirk or no altset; falling back to MIDI 1.0 [ 339.405409][ T2329] usb 7-1: Using ep0 maxpacket: 32 [ 339.413403][ T2329] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 339.422532][ T2329] usb 7-1: config index 0 descriptor too short (expected 29220, got 36) [ 339.422555][ T2329] usb 7-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 339.422573][ T2329] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 339.422617][ T2329] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 339.422636][ T2329] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 339.422657][ T2329] usb 7-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 339.422708][ T2329] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 339.459707][ T2329] usb 7-1: config 0 descriptor?? [ 339.710355][ T2329] usblp 7-1:0.0: usblp0: USB Bidirectional printer dev 24 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 339.905528][ T43] audit: type=1400 audit(1700006582.919:789): avc: denied { ioctl } for pid=14476 comm="syz.2.3207" path="/dev/usb/lp0" dev="devtmpfs" ino=3211 ioctlcmd=0x604 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:printer_device_t tclass=chr_file permissive=1 [ 339.922490][ T8684] usb 7-1: USB disconnect, device number 24 [ 339.930898][ T8684] usblp0: removed [ 340.284900][ T43] audit: type=1400 audit(1700006583.299:790): avc: denied { unlink } for pid=12628 comm="syz-executor" name="file0" dev="tmpfs" ino=924 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 340.487862][T14506] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 340.556602][T14509] netlink: 'syz.0.3217': attribute type 1 has an invalid length. [ 340.581480][T14509] bond3: entered promiscuous mode [ 340.581883][T14509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.586224][T14506] md: couldn't update array info. -22 [ 340.588155][T11619] md_update_sb: can't update sb for read-only array md0 [ 340.612315][T14509] 8021q: adding VLAN 0 to HW filter on device bond3 [ 340.612648][T14509] bond3: (slave wireguard0): The slave device specified does not support setting the MAC address [ 340.612659][T14509] bond3: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 340.615754][T14507] md: could not open device unknown-block(1,0). [ 340.615781][T14507] md: md_import_device returned -16 [ 340.615822][T11619] md_update_sb: can't update sb for read-only array md0 [ 340.626046][T14509] bond3: (slave wireguard0): making interface the new active one [ 340.626095][T14509] wireguard0: entered promiscuous mode [ 340.628723][T14509] bond3: (slave wireguard0): Enslaving as an active interface with an up link [ 340.665462][T14506] md: could not open device unknown-block(1,1). [ 340.665527][T14506] md: md_import_device returned -16 [ 340.930882][T14531] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(6) [ 340.930921][T14531] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 340.931701][T14531] vhci_hcd vhci_hcd.0: Device attached [ 341.682281][T14532] vhci_hcd: connection closed [ 341.717355][ T5828] vhci_hcd vhci_hcd.0: stop threads [ 341.717389][ T5828] vhci_hcd vhci_hcd.0: release socket [ 341.717431][ T5828] vhci_hcd vhci_hcd.0: disconnect device [ 341.799364][T14541] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 341.802840][T12130] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 341.835741][T14541] md: couldn't update array info. -22 [ 341.880794][T14541] md: could not open device unknown-block(1,0). [ 341.881011][T14541] md: md_import_device returned -16 [ 341.907268][ T2329] usb 8-1: USB disconnect, device number 38 [ 341.950411][T14541] md: could not open device unknown-block(1,1). [ 341.950648][T14541] md: md_import_device returned -16 [ 343.221727][T14575] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 343.274244][T14575] md: couldn't update array info. -22 [ 343.275151][T11619] md_update_sb: 4 callbacks suppressed [ 343.275165][T11619] md_update_sb: can't update sb for read-only array md0 [ 343.357376][T14575] md: could not open device unknown-block(1,0). [ 343.357559][T14575] md: md_import_device returned -16 [ 343.375913][T11619] md_update_sb: can't update sb for read-only array md0 [ 343.381108][T14582] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(6) [ 343.381140][T14582] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 343.381248][T14582] vhci_hcd vhci_hcd.0: Device attached [ 343.409998][T14581] md: could not open device unknown-block(1,1). [ 343.410028][T14581] md: md_import_device returned -16 [ 343.410091][T11619] md_update_sb: can't update sb for read-only array md0 [ 343.535297][ C2] net_ratelimit: 239 callbacks suppressed [ 343.628577][T12130] usb 41-1: new high-speed USB device number 6 using vhci_hcd [ 343.956305][ T8604] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 344.094492][T14583] vhci_hcd: connection reset by peer [ 344.094937][ T5828] vhci_hcd vhci_hcd.2: stop threads [ 344.095003][ T5828] vhci_hcd vhci_hcd.2: release socket [ 344.095166][ T5828] vhci_hcd vhci_hcd.2: disconnect device [ 344.106658][ T8604] usb 8-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 344.108441][ T8604] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 344.108548][ T8604] usb 8-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 344.112553][ T8604] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.112606][ T8604] usb 8-1: Product: syz [ 344.112615][ T8604] usb 8-1: Manufacturer: syz [ 344.112622][ T8604] usb 8-1: SerialNumber: syz [ 344.152069][ T8604] zaurus 8-1:1.0: probe with driver zaurus failed with error -22 [ 344.345759][ T8604] usb 8-1: USB disconnect, device number 39 [ 344.946089][T14603] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 344.995919][T14603] md: couldn't update array info. -22 [ 344.996082][T11619] md_update_sb: can't update sb for read-only array md0 [ 345.035529][T14603] md: could not open device unknown-block(1,0). [ 345.035559][T14603] md: md_import_device returned -16 [ 345.035613][T11619] md_update_sb: can't update sb for read-only array md0 [ 345.056998][T14603] md: could not open device unknown-block(1,1). [ 345.057040][T14603] md: md_import_device returned -16 [ 345.057123][T11619] md_update_sb: can't update sb for read-only array md0 [ 346.195857][T14631] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.381801][T14631] md: couldn't update array info. -22 [ 346.382117][T11619] md_update_sb: can't update sb for read-only array md0 [ 346.415438][T14645] md: could not open device unknown-block(1,0). [ 346.415465][T14645] md: md_import_device returned -16 [ 346.415533][T11619] md_update_sb: can't update sb for read-only array md0 [ 346.475797][T14631] md: could not open device unknown-block(1,1). [ 346.475838][T14631] md: md_import_device returned -16 [ 346.476085][T11619] md_update_sb: can't update sb for read-only array md0 [ 346.622060][T14657] netlink: 'syz.0.3275': attribute type 5 has an invalid length. [ 346.885793][T14678] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 346.926735][T14678] md: couldn't update array info. -22 [ 346.927911][T11619] md_update_sb: can't update sb for read-only array md0 [ 346.965740][T14678] md: could not open device unknown-block(1,0). [ 346.965782][T14678] md: md_import_device returned -16 [ 347.005758][T14678] md: could not open device unknown-block(1,1). [ 347.005803][T14678] md: md_import_device returned -16 [ 347.233254][T14738] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3292'. [ 347.268527][T14740] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3291'. [ 347.472225][T14750] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 347.581407][T14750] md: couldn't update array info. -22 [ 347.625426][T14750] md: could not open device unknown-block(1,0). [ 347.625460][T14750] md: md_import_device returned -16 [ 347.645632][T14750] md: could not open device unknown-block(1,1). [ 347.645659][T14750] md: md_import_device returned -16 [ 348.726439][T12130] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 348.735271][ C3] net_ratelimit: 228 callbacks suppressed [ 349.585609][T14817] md: couldn't update array info. -22 [ 349.586026][T11619] md_update_sb: 5 callbacks suppressed [ 349.586037][T11619] md_update_sb: can't update sb for read-only array md0 [ 349.638223][T14817] md: couldn't update array info. -22 [ 349.669768][T11619] md_update_sb: can't update sb for read-only array md0 [ 351.835635][T14889] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 352.128792][T14902] netlink: 'syz.2.3361': attribute type 4 has an invalid length. [ 352.158727][T14889] md: couldn't update array info. -22 [ 352.172833][T11619] md_update_sb: can't update sb for read-only array md0 [ 352.362930][T14897] md: could not open device unknown-block(1,0). [ 352.362980][T14897] md: md_import_device returned -16 [ 352.363104][T14900] md: could not open device unknown-block(1,1). [ 352.363141][T14900] md: md_import_device returned -16 [ 352.363463][T11619] md_update_sb: can't update sb for read-only array md0 [ 353.795502][T12130] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 353.945240][ C2] net_ratelimit: 66 callbacks suppressed [ 353.945416][T12130] usb 7-1: Using ep0 maxpacket: 16 [ 353.948053][T12130] usb 7-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 353.976267][T12130] usb 7-1: config 0 has an invalid interface number: 34 but max is 0 [ 353.976316][T12130] usb 7-1: config 0 has no interface number 0 [ 353.976394][T12130] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 353.976442][T12130] usb 7-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 353.982245][T12130] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.982332][T12130] usb 7-1: Product: syz [ 353.982405][T12130] usb 7-1: Manufacturer: syz [ 353.982488][T12130] usb 7-1: SerialNumber: syz [ 354.027685][T12130] usb 7-1: config 0 descriptor?? [ 354.048548][T14959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.048644][T14959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.257440][T14959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.257489][T14959] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 354.459145][T12130] asix 7-1:0.34 (unnamed net_device) (uninitialized): invalid hw address, using random [ 355.653871][T14997] syzkaller1: entered promiscuous mode [ 355.653884][T14997] syzkaller1: entered allmulticast mode [ 355.702830][T12130] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 355.702910][T12130] asix 7-1:0.34 (unnamed net_device) (uninitialized): Failed to write GPIO value 0x0080: ffffffb9 [ 355.717931][T12130] asix 7-1:0.34: probe with driver asix failed with error -71 [ 355.729660][T12130] usb 7-1: USB disconnect, device number 25 [ 356.486839][T15021] ieee802154 phy0 wpan0: encryption failed: -22 [ 356.533382][T15021] jffs2: notice: (15021) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 357.142767][T15046] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 357.266171][T15046] md: couldn't update array info. -22 [ 357.398341][T11619] md_update_sb: can't update sb for read-only array md0 [ 357.400173][T15056] fuse: Bad value for 'fd' [ 357.550728][T11619] md_update_sb: can't update sb for read-only array md0 [ 357.578212][T15074] ieee802154 phy0 wpan0: encryption failed: -22 [ 357.618376][T15057] md: could not open device unknown-block(1,1). [ 357.618413][T15057] md: md_import_device returned -16 [ 357.618527][T11619] md_update_sb: can't update sb for read-only array md0 [ 357.634159][T15074] jffs2: notice: (15074) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 358.157986][T15100] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 358.235480][T15100] md: couldn't update array info. -22 [ 358.235546][T11619] md_update_sb: can't update sb for read-only array md0 [ 358.275462][T11619] md_update_sb: can't update sb for read-only array md0 [ 358.357071][T15100] md: could not open device unknown-block(1,1). [ 358.357098][T15100] md: md_import_device returned -16 [ 358.357222][T11619] md_update_sb: can't update sb for read-only array md0 [ 358.426000][T15110] fuse: Bad value for 'fd' [ 358.529629][T15115] Bluetooth: MGMT ver 1.23 [ 358.531380][T15115] netlink: 80 bytes leftover after parsing attributes in process `syz.2.3447'. [ 358.646106][T15125] ieee802154 phy0 wpan0: encryption failed: -22 [ 358.712316][T15125] jffs2: notice: (15125) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 358.907261][T15141] fuse: Bad value for 'fd' [ 359.055400][T14721] net_ratelimit: 116 callbacks suppressed [ 359.313772][T15155] fuse: Bad value for 'fd' [ 359.431542][T15162] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 359.455639][T15162] md: couldn't update array info. -22 [ 359.456125][T11619] md_update_sb: can't update sb for read-only array md0 [ 359.471585][T15159] jffs2: notice: (15159) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 359.496601][T11619] md_update_sb: can't update sb for read-only array md0 [ 359.542103][T15162] md: could not open device unknown-block(1,1). [ 359.542136][T15162] md: md_import_device returned -16 [ 359.542228][T11619] md_update_sb: can't update sb for read-only array md0 [ 359.703142][T15181] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 359.991422][T15181] md: personality for level r is not loaded! [ 360.184019][T15199] ieee802154 phy0 wpan0: encryption failed: -22 [ 360.228189][T15199] jffs2: notice: (15199) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 360.295477][T15204] binder: BINDER_SET_CONTEXT_MGR already set [ 360.295491][T15204] binder: 15203:15204 ioctl 4018620d 200000004a80 returned -16 [ 360.572062][T15209] jffs2: notice: (15209) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 360.734132][T15218] fuse: Bad value for 'fd' [ 361.589336][T15241] ieee802154 phy0 wpan0: encryption failed: -22 [ 361.614864][T15241] jffs2: notice: (15241) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 362.241444][T15275] jffs2: notice: (15275) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 362.875146][T15294] fuse: Bad value for 'fd' [ 363.790489][T15314] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3515'. [ 363.910836][T15322] ieee802154 phy0 wpan0: encryption failed: -22 [ 363.943660][T15322] jffs2: notice: (15322) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 363.965724][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 363.965732][ T43] audit: type=1400 audit(1700006606.989:792): avc: denied { read } for pid=15329 comm="syz.2.3523" path="socket:[67283]" dev="sockfs" ino=67283 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 363.986554][T15332] fuse: Bad value for 'fd' [ 364.091877][ T43] audit: type=1400 audit(1700006607.109:793): avc: denied { ioctl } for pid=15335 comm="syz.0.3525" path="socket:[65370]" dev="sockfs" ino=65370 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 364.093615][ T43] audit: type=1400 audit(1700006607.109:794): avc: denied { bind } for pid=15335 comm="syz.0.3525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 364.123262][T15336] netlink: 14 bytes leftover after parsing attributes in process `syz.0.3525'. [ 364.142168][T15338] net_ratelimit: 239 callbacks suppressed [ 364.171068][T15340] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 364.205938][T15340] md: couldn't update array info. -22 [ 364.295924][T15340] md: could not open device unknown-block(1,0). [ 364.295951][T15340] md: md_import_device returned -16 [ 364.296605][T15344] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3527'. [ 364.335460][T15346] md: could not open device unknown-block(1,1). [ 364.335487][T15346] md: md_import_device returned -16 [ 364.387162][T15356] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.407827][T15356] jffs2: notice: (15356) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 364.474129][ T43] audit: type=1400 audit(1700006607.489:795): avc: denied { write } for pid=15365 comm="syz.0.3535" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 364.585773][T15374] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3538'. [ 364.801129][T15388] ieee802154 phy0 wpan0: encryption failed: -22 [ 364.804454][T15387] vlan2: entered allmulticast mode [ 364.804595][T15387] bridge0: port 3(vlan2) entered blocking state [ 364.804713][T15387] bridge0: port 3(vlan2) entered disabled state [ 364.806713][T15387] vlan2: entered promiscuous mode [ 364.829941][T15388] jffs2: notice: (15388) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 364.900517][T15397] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3549'. [ 365.102639][T15410] No source specified [ 365.113233][ T43] audit: type=1400 audit(1700006608.129:796): avc: denied { listen } for pid=15407 comm="syz.0.3553" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 365.173577][T15416] ieee802154 phy0 wpan0: encryption failed: -22 [ 365.203635][T15416] jffs2: notice: (15416) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 365.263329][T15427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3560'. [ 365.398082][T15436] No source specified [ 365.409009][T15425] fuse: Bad value for 'fd' [ 365.777352][T15460] No source specified [ 365.842759][T15462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3576'. [ 366.041931][T15465] fuse: Bad value for 'fd' [ 366.290719][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 366.391997][T15472] 8021q: adding VLAN 0 to HW filter on device bond3 [ 366.433708][T15472] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3580'. [ 366.508926][T15476] veth3: entered allmulticast mode [ 366.516869][T15476] bond3: (slave veth3): Enslaving as an active interface with an up link [ 366.518738][T15483] fuse: Bad value for 'fd' [ 366.528072][T15480] jffs2: notice: (15480) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 366.533870][T15472] bond3: entered promiscuous mode [ 366.533890][T15472] veth3: entered promiscuous mode [ 366.534060][T15472] bond3: entered allmulticast mode [ 366.663711][T15489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'. [ 366.961520][T15512] jffs2: notice: (15512) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 367.084705][T15526] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 367.249569][T15532] fuse: Bad value for 'fd' [ 367.492250][T15541] fuse: fd is not a fuse device [ 367.683941][T15549] jffs2: notice: (15549) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 368.956963][ T43] audit: type=1400 audit(1700006611.959:797): avc: denied { listen } for pid=15586 comm="syz.1.3617" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 369.295843][T15592] net_ratelimit: 281 callbacks suppressed [ 369.345755][T15598] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 369.385522][T15598] md: couldn't update array info. -22 [ 369.425370][T15598] md: could not open device unknown-block(1,0). [ 369.425404][T15598] md: md_import_device returned -16 [ 369.536531][T15598] md: could not open device unknown-block(1,1). [ 369.536576][T15598] md: md_import_device returned -16 [ 369.844977][T15616] fuse: fd is not a fuse device [ 370.454672][T15639] fuse: fd is not a fuse device [ 370.678311][T15653] __nla_validate_parse: 4 callbacks suppressed [ 370.678325][T15653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3642'. [ 370.843159][T15660] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 370.903335][T15660] md: couldn't update array info. -22 [ 370.947095][T15660] md: could not open device unknown-block(1,0). [ 370.947145][T15660] md: md_import_device returned -16 [ 370.949161][T11619] md_update_sb: can't update sb for read-only array md0 [ 371.819239][T15692] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3657'. [ 371.859974][T15696] fuse: Bad value for 'fd' [ 372.599805][T15717] jffs2: notice: (15717) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 373.088494][T15736] binder: 15735:15736 ioctl c0306201 0 returned -14 [ 374.286746][ T43] audit: type=1400 audit(1700006617.259:798): avc: denied { getopt } for pid=15755 comm="syz.1.3683" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 374.458498][T15760] jffs2: notice: (15760) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 374.587646][T15771] overlayfs: failed to clone lowerpath [ 374.617891][T15771] overlayfs: failed to clone lowerpath [ 374.793379][ T43] audit: type=1400 audit(1700006617.809:799): avc: denied { bind } for pid=15774 comm="syz.2.3691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 374.905279][ C2] net_ratelimit: 221 callbacks suppressed [ 375.200780][T15806] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3705'. [ 375.277555][T15810] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 375.328690][T15810] md: couldn't update array info. -22 [ 375.334707][T11619] md_update_sb: can't update sb for read-only array md0 [ 375.385681][T15810] md: could not open device unknown-block(1,0). [ 375.385725][T15810] md: md_import_device returned -16 [ 375.386939][T11619] md_update_sb: can't update sb for read-only array md0 [ 375.424581][T15820] fuse: fd is not a fuse device [ 375.429075][T11619] md_update_sb: can't update sb for read-only array md0 [ 375.531650][T15829] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3715'. [ 375.560316][T15831] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3716'. [ 375.667017][T15841] netlink: 64 bytes leftover after parsing attributes in process `syz.3.3721'. [ 375.690447][T15843] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 375.726400][T15843] md: couldn't update array info. -22 [ 375.726469][T11619] md_update_sb: can't update sb for read-only array md0 [ 375.775960][T15843] md: could not open device unknown-block(1,0). [ 375.776006][T15843] md: md_import_device returned -16 [ 375.776102][T11619] md_update_sb: can't update sb for read-only array md0 [ 375.815613][T11619] md_update_sb: can't update sb for read-only array md0 [ 376.213914][T15865] mac80211_hwsim hwsim15 syzkaller0: entered promiscuous mode [ 376.213954][T15865] mac80211_hwsim hwsim15 syzkaller0: entered allmulticast mode [ 376.393216][T15869] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 376.473724][T15871] md: could not open device unknown-block(1,0). [ 376.473885][T15871] md: md_import_device returned -16 [ 376.473917][T15869] md: couldn't update array info. -22 [ 376.474024][T11619] md_update_sb: can't update sb for read-only array md0 [ 376.495363][T11619] md_update_sb: can't update sb for read-only array md0 [ 376.748577][T15879] jffs2: notice: (15879) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 377.042433][T15903] fuse: Bad value for 'fd' [ 377.557760][T15924] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3756'. [ 378.023902][T15934] FAULT_INJECTION: forcing a failure. [ 378.023902][T15934] name failslab, interval 1, probability 0, space 0, times 0 [ 378.023932][T15934] CPU: 0 UID: 0 PID: 15934 Comm: syz.1.3758 Tainted: G L syzkaller #0 PREEMPT(full) [ 378.023960][T15934] Tainted: [L]=SOFTLOCKUP [ 378.023968][T15934] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 378.023978][T15934] Call Trace: [ 378.023984][T15934] [ 378.023993][T15934] dump_stack_lvl+0x100/0x190 [ 378.024029][T15934] should_fail_ex.cold+0x5/0xa [ 378.024059][T15934] should_failslab+0xc2/0x120 [ 378.024096][T15934] __kmalloc_cache_noprof+0x91/0x6d0 [ 378.024141][T15934] ? __pfx_trace_seq_printf+0x10/0x10 [ 378.024173][T15934] ? tracing_log_err+0x490/0x6a0 [ 378.024198][T15934] tracing_log_err+0x490/0x6a0 [ 378.024227][T15934] append_filter_err+0x4b6/0x620 [ 378.024257][T15934] create_filter+0x1a6/0x210 [ 378.024283][T15934] ? __pfx_create_filter+0x10/0x10 [ 378.024308][T15934] ? __pfx___mutex_lock+0x10/0x10 [ 378.024330][T15934] ? __might_fault+0xc5/0x140 [ 378.024352][T15934] ? find_held_lock+0x2b/0x80 [ 378.024385][T15934] apply_event_filter+0x220/0x500 [ 378.024412][T15934] ? __pfx_apply_event_filter+0x10/0x10 [ 378.024447][T15934] event_filter_write+0x16d/0x290 [ 378.024479][T15934] vfs_write+0x2aa/0x1050 [ 378.024505][T15934] ? __pfx_event_filter_write+0x10/0x10 [ 378.024535][T15934] ? lock_acquire+0x1d1/0x380 [ 378.024557][T15934] ? __fget_files+0x34/0x3d0 [ 378.024586][T15934] ? __pfx_vfs_write+0x10/0x10 [ 378.024607][T15934] ? find_held_lock+0x2b/0x80 [ 378.024637][T15934] ? __fget_files+0x215/0x3d0 [ 378.024675][T15934] ? __fget_files+0x21f/0x3d0 [ 378.024710][T15934] ksys_write+0x12a/0x250 [ 378.024735][T15934] ? __pfx_ksys_write+0x10/0x10 [ 378.024769][T15934] do_syscall_64+0x123/0x790 [ 378.024795][T15934] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.024817][T15934] RIP: 0033:0x7f442a39e199 [ 378.024834][T15934] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 378.024853][T15934] RSP: 002b:00007f442b2bb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.024875][T15934] RAX: ffffffffffffffda RBX: 00007f442a625fa0 RCX: 00007f442a39e199 [ 378.024889][T15934] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 378.024901][T15934] RBP: 00007f442a4358e0 R08: 0000000000000000 R09: 0000000000000000 [ 378.024913][T15934] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.024925][T15934] R13: 00007f442a626038 R14: 00007f442a625fa0 R15: 00007ffce282d5a8 [ 378.024954][T15934] [ 378.036641][T15936] erspan0: entered promiscuous mode [ 378.060389][T15938] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3759'. [ 378.337867][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.337922][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.975119][ T5091] Bluetooth: hci0: connection err: -111 [ 379.767672][T15976] binder: 15974:15976 ioctl 4018620d 0 returned -22 [ 379.867653][T15982] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 379.879358][T15984] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.022407][T15989] net_ratelimit: 302 callbacks suppressed [ 380.146077][T15989] fuse: Bad value for 'fd' [ 380.157429][T15996] fuse: Bad value for 'fd' [ 380.280506][T15995] mac80211_hwsim hwsim11 syzkaller0: entered promiscuous mode [ 380.280585][T15995] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 380.367822][ T5091] Bluetooth: hci4: connection err: -111 [ 380.418428][ T5091] Bluetooth: hci4: command 0x0419 tx timeout [ 380.827822][T16021] fuse: Bad value for 'fd' [ 380.962570][T16034] fuse: Bad value for 'fd' [ 381.001364][T16036] mac80211_hwsim hwsim11 syzkaller0: left promiscuous mode [ 381.001384][T16036] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 381.117597][T16038] binder: 16037:16038 ioctl 4018620d 0 returned -22 [ 381.438551][T16055] fuse: Bad value for 'fd' [ 381.870671][T16074] netlink: 48 bytes leftover after parsing attributes in process `syz.3.3811'. [ 382.524035][T16081] jffs2: notice: (16081) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 382.724937][T16089] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 382.792434][T16088] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 382.838954][T16092] fuse: Bad value for 'fd' [ 382.884063][T16094] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3820'. [ 382.998539][T16098] fuse: fd is not a fuse device [ 383.333950][T16118] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3829'. [ 383.609065][T16130] fuse: fd is not a fuse device [ 383.801637][T16135] netlink: 32 bytes leftover after parsing attributes in process `syz.3.3835'. [ 383.828352][ T5091] Bluetooth: hci3: connection err: -111 [ 384.133594][T16143] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3839'. [ 384.185531][T16145] jffs2: notice: (16145) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 384.300024][T16154] fuse: Bad value for 'fd' [ 384.323144][T16156] fuse: Bad value for 'fd' [ 384.783816][T16177] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.848911][T16177] jffs2: notice: (16177) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 385.375262][ C2] net_ratelimit: 383 callbacks suppressed [ 385.535468][ T5091] Bluetooth: hci3: command 0x0406 tx timeout [ 385.781017][T16199] fuse: Bad value for 'fd' [ 386.889693][ T43] audit: type=1400 audit(1700006629.909:800): avc: denied { connect } for pid=16251 comm="syz.1.3882" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.862772][T16281] fuse: fd is not a fuse device [ 388.098222][T16294] jffs2: notice: (16294) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 388.962424][T16316] fuse: Bad value for 'fd' [ 389.258938][T16330] jffs2: notice: (16330) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 390.345137][T16350] fuse: Bad value for 'fd' [ 390.689588][T16366] jffs2: notice: (16366) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 390.747047][ T5091] Bluetooth: hci0: command 0x0406 tx timeout [ 390.798146][T16373] net_ratelimit: 293 callbacks suppressed [ 391.623787][T16393] fuse: fd is not a fuse device [ 391.773260][T16398] fuse: Bad value for 'fd' [ 393.520231][T16457] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 393.520262][T16457] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 393.520298][T16457] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 393.523470][T16457] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 393.529585][T16457] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 394.233582][T16486] jffs2: notice: (16486) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 394.607574][T16521] jffs2: notice: (16521) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 394.778398][T16535] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3986'. [ 394.941633][T16546] jffs2: notice: (16546) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 395.738232][T16575] fuse: Bad value for 'fd' [ 396.180264][ T84] net_ratelimit: 322 callbacks suppressed [ 397.149801][T16609] fuse: fd is not a fuse device [ 397.339105][T16619] fuse: Bad value for 'fd' [ 398.013634][T16630] jffs2: notice: (16630) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 398.606537][ T43] audit: type=1400 audit(1700006641.629:801): avc: denied { connect } for pid=16649 comm="syz.0.4027" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 ** 2509 printk messages dropped ** ** 3124 printk messages dropped ** ** 94 printk messages dropped ** ** 79 printk messages dropped ** ** 113 printk messages dropped ** ** 81 printk messages dropped ** ** 82 printk messages dropped ** ** 83 printk messages dropped ** ** 87 printk messages dropped ** ** 201 printk messages dropped ** ** 97 printk messages dropped ** ** 97 printk messages dropped ** ** 105 printk messages dropped ** ** 110 printk messages dropped ** ** 103 printk messages dropped ** ** 95 printk messages dropped ** ** 80 printk messages dropped ** ** 101 printk messages dropped ** ** 197 printk messages dropped ** ** 113 printk messages dropped ** ** 94 printk messages dropped ** ** 84 printk messages dropped ** ** 188 printk messages dropped ** ** 120 printk messages dropped ** ** 226 printk messages dropped ** ** 114 printk messages dropped ** ** 101 printk messages dropped ** ** 87 printk messages dropped ** ** 118 printk messages dropped ** ** 117 printk messages dropped ** ** 112 printk messages dropped ** ** 112 printk messages dropped ** ** 110 printk messages dropped ** ** 130 printk messages dropped ** ** 149 printk messages dropped ** ** 144 printk messages dropped ** ** 121 printk messages dropped ** ** 138 printk messages dropped ** ** 121 printk messages dropped ** ** 95 printk messages dropped ** ** 98 printk messages dropped ** ** 116 printk messages dropped ** ** 116 printk messages dropped ** ** 115 printk messages dropped ** ** 114 printk messages dropped ** ** 106 printk messages dropped ** ** 94 printk messages dropped ** ** 116 printk messages dropped ** ** 120 printk messages dropped ** ** 132 printk messages dropped ** ** 127 printk messages dropped ** ** 114 printk messages dropped ** ** 118 printk messages dropped ** ** 194 printk messages dropped ** ** 117 printk messages dropped ** ** 116 printk messages dropped ** ** 119 printk messages dropped ** ** 112 printk messages dropped ** ** 124 printk messages dropped ** ** 111 printk messages dropped ** ** 109 printk messages dropped ** ** 129 printk messages dropped ** ** 165 printk messages dropped ** ** 143 printk messages dropped ** ** 178 printk messages dropped ** ** 170 printk messages dropped ** ** 140 printk messages dropped ** ** 173 printk messages dropped ** ** 107 printk messages dropped ** ** 28 printk messages dropped ** ** 1315 printk messages dropped ** ** 107 printk messages dropped ** ** 103 printk messages dropped ** ** 121 printk messages dropped ** ** 106 printk messages dropped ** ** 110 printk messages dropped ** ** 101 printk messages dropped ** ** 114 printk messages dropped ** ** 103 printk messages dropped ** ** 106 printk messages dropped ** ** 125 printk messages dropped ** ** 208 printk messages dropped ** ** 110 printk messages dropped ** ** 187 printk messages dropped ** ** 121 printk messages dropped ** ** 127 printk messages dropped ** ** 102 printk messages dropped ** ** 114 printk messages dropped ** ** 335 printk messages dropped ** ** 143 printk messages dropped ** ** 2935 printk messages dropped ** ** 164 printk messages dropped ** ** 199 printk messages dropped ** ** 193 printk messages dropped ** ** 174 printk messages dropped ** ** 184 printk messages dropped ** ** 214 printk messages dropped ** ** 210 printk messages dropped ** ** 215 printk messages dropped ** ** 217 printk messages dropped ** ** 191 printk messages dropped ** ** 187 printk messages dropped ** ** 187 printk messages dropped ** ** 199 printk messages dropped ** ** 148 printk messages dropped ** ** 105 printk messages dropped ** ** 140 printk messages dropped ** ** 186 printk messages dropped ** ** 157 printk messages dropped ** ** 148 printk messages dropped ** ** 143 printk messages dropped ** ** 162 printk messages dropped ** ** 90 printk messages dropped ** ** 673 printk messages dropped ** ** 169 printk messages dropped ** ** 158 printk messages dropped ** ** 82 printk messages dropped ** ** 149 printk messages dropped ** ** 165 printk messages dropped ** ** 166 printk messages dropped ** ** 164 printk messages dropped ** ** 169 printk messages dropped ** ** 181 printk messages dropped ** ** 160 printk messages dropped ** ** 154 printk messages dropped ** ** 154 printk messages dropped ** ** 165 printk messages dropped ** ** 165 printk messages dropped ** ** 160 printk messages dropped ** ** 134 printk messages dropped ** ** 139 printk messages dropped ** ** 140 printk messages dropped ** ** 118 printk messages dropped ** ** 133 printk messages dropped ** ** 142 printk messages dropped ** ** 150 printk messages dropped ** ** 139 printk messages dropped ** ** 134 printk messages dropped ** ** 132 printk messages dropped ** ** 236 printk messages dropped ** ** 145 printk messages dropped ** ** 140 printk messages dropped ** ** 144 printk messages dropped ** ** 146 printk messages dropped ** ** 138 printk messages dropped ** ** 137 printk messages dropped ** ** 134 printk messages dropped ** ** 140 printk messages dropped ** ** 295 printk messages dropped ** ** 137 printk messages dropped ** ** 141 printk messages dropped ** ** 149 printk messages dropped ** ** 137 printk messages dropped ** ** 137 printk messages dropped ** ** 140 printk messages dropped ** ** 73 printk messages dropped ** ** 2 printk messages dropped ** ** 6 printk messages dropped ** ** 52 printk messages dropped ** ** 101 printk messages dropped ** ** 123 printk messages dropped ** ** 96 printk messages dropped ** ** 64 printk messages dropped ** ** 55 printk messages dropped ** ** 90 printk messages dropped ** ** 19 printk messages dropped ** ** 2123 printk messages dropped ** [ 400.123811][T16672] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4036'. ** 16 printk messages dropped ** ** 135 printk messages dropped ** ** 163 printk messages dropped ** ** 283 printk messages dropped ** ** 143 printk messages dropped ** ** 131 printk messages dropped ** ** 126 printk messages dropped ** ** 94 printk messages dropped ** ** 100 printk messages dropped ** ** 170 printk messages dropped ** ** 133 printk messages dropped ** ** 172 printk messages dropped ** ** 111 printk messages dropped ** ** 108 printk messages dropped ** ** 97 printk messages dropped ** ** 94 printk messages dropped ** ** 152 printk messages dropped ** ** 94 printk messages dropped ** ** 96 printk messages dropped ** ** 110 printk messages dropped ** ** 114 printk messages dropped ** ** 130 printk messages dropped ** ** 110 printk messages dropped ** ** 98 printk messages dropped ** ** 102 printk messages dropped ** ** 104 printk messages dropped ** ** 92 printk messages dropped ** ** 57 printk messages dropped ** [ 401.375777][T14739] net_ratelimit: 253 callbacks suppressed [ 401.398007][T16714] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4051'. [ 401.562526][T16723] jffs2: notice: (16723) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 402.282784][T16743] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4061'. [ 402.487227][T16751] jffs2: notice: (16751) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 402.916820][T16774] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.917268][T16774] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.974838][T16774] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.979722][T16774] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.371320][T16786] jffs2: notice: (16786) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 403.385907][ T5828] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.385944][ T5828] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.385973][ T5828] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.386001][ T5828] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.594556][T16796] fuse: Bad value for 'fd' [ 404.532797][T16829] jffs2: notice: (16829) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 404.867276][T16842] fuse: Bad value for 'fd' [ 405.457646][T16860] jffs2: notice: (16860) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 405.695030][T16873] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4104'. [ 405.944163][T16889] jffs2: notice: (16889) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 406.505367][T14686] net_ratelimit: 339 callbacks suppressed [ 406.719045][T16918] jffs2: notice: (16918) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 406.901758][T16927] tipc: Started in network mode [ 406.901781][T16927] tipc: Node identity ac14140d, cluster identity 4711 [ 406.902050][T16927] tipc: New replicast peer: 255.255.255.255 [ 406.904322][T16927] tipc: Enabled bearer , priority 10 [ 407.458020][T16956] fuse: Bad value for 'fd' [ 407.897281][ T2329] tipc: Node number set to 2886997005 [ 408.216450][T16982] fuse: Bad value for 'fd' [ 408.250311][T16983] fuse: fd is not a fuse device [ 408.631804][T16996] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4150'. [ 409.078249][T17008] fuse: Bad value for 'fd' [ 409.386193][ T43] audit: type=1400 audit(1700006652.409:802): avc: denied { shutdown } for pid=17013 comm="syz.3.4157" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 409.388414][T17014] fuse: Bad value for 'fd' [ 409.597791][T17024] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4160'. [ 410.963798][T17057] fuse: Bad value for 'fd' [ 411.874006][T17088] net_ratelimit: 346 callbacks suppressed [ 412.187360][T17100] fuse: Bad value for 'fd' [ 412.234066][T17106] fuse: Bad value for 'fd' [ 412.631075][T17131] fuse: Bad value for 'fd' [ 412.713600][T17132] fuse: Bad value for 'fd' [ 412.747060][T17138] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4204'. [ 412.907827][T17146] jffs2: notice: (17146) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 413.080628][T17155] fuse: Bad value for 'fd' [ 413.127851][T17161] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4213'. [ 413.214694][T17167] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4216'. [ 413.339402][T17177] fuse: Bad value for 'fd' [ 414.441377][T17220] fuse: Bad value for 'fd' [ 414.491839][T17219] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 414.668254][T17226] fuse: Bad value for 'fd' [ 414.805426][T17232] jffs2: notice: (17232) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 415.724787][T17251] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4245'. [ 415.734613][T17254] fuse: Bad value for 'fd' [ 415.805651][T17260] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4248'. [ 415.995008][T17267] fuse: Bad value for 'fd' [ 416.160154][T17269] jffs2: notice: (17269) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 416.701801][T17290] jffs2: notice: (17290) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 416.983177][T17300] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4262'. [ 417.215289][ C0] net_ratelimit: 335 callbacks suppressed [ 417.506254][T17310] fuse: Bad value for 'fd' [ 417.764684][T17314] kAFS: No cell specified [ 418.109398][T17327] netlink: 'syz.0.4271': attribute type 4 has an invalid length. [ 418.267002][T17335] fuse: Bad value for 'fd' [ 418.818422][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4276'. [ 418.886066][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 419.122787][T17353] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4277'. [ 419.223993][T17354] fuse: Bad value for 'fd' [ 419.416859][T17360] fuse: Bad value for 'fd' [ 419.657590][T17365] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4285'. [ 420.551732][T17383] fuse: Bad value for 'fd' [ 420.914816][ T43] audit: type=1400 audit(1700006663.929:803): avc: denied { connect } for pid=17392 comm="syz.1.4294" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 420.961680][T17398] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4295'. [ 421.210664][T17411] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4300'. [ 422.028321][T17424] fuse: Bad value for 'fd' [ 422.181655][T17431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4304'. [ 422.335244][ C2] net_ratelimit: 204 callbacks suppressed [ 422.924168][T17439] fuse: Bad value for 'fd' [ 422.966826][T17444] jffs2: notice: (17444) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 423.369019][T17462] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4313'. [ 423.865613][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 424.591300][T17483] jffs2: notice: (17483) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 424.808891][T17493] fuse: fd is not a fuse device [ 424.847858][T17499] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4324'. [ 425.198549][T17512] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4329'. [ 425.276567][T17516] jffs2: notice: (17516) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 425.379688][T17524] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 425.381648][ T43] audit: type=1400 audit(1700006668.399:804): avc: denied { firmware_load } for pid=17523 comm="syz.0.4334" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 425.382711][T17524] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 425.892727][T17534] netlink: 64 bytes leftover after parsing attributes in process `syz.1.4337'. [ 426.039145][T17541] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4340'. [ 426.162974][T17544] fuse: Bad value for 'fd' [ 426.575330][ T5752] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 427.375421][ C0] net_ratelimit: 267 callbacks suppressed [ 427.566563][T17576] netdevsim netdevsim3: Direct firmware load for .. failed with error -2 [ 427.566576][T17576] netdevsim netdevsim3: Falling back to sysfs fallback for: .. [ 427.674827][T17579] fuse: Bad value for 'fd' [ 428.206986][T17589] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4356'. [ 428.250864][T17586] jffs2: notice: (17586) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 428.369591][T17594] netlink: 'syz.2.4357': attribute type 1 has an invalid length. [ 429.563140][T17625] fuse: Bad value for 'fd' [ 429.671375][T17627] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4366'. [ 429.686399][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4367'. [ 429.759209][T17636] jffs2: notice: (17636) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 429.877501][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4372'. [ 430.038650][T17658] fuse: Bad value for 'fd' [ 430.421934][T17665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4378'. [ 430.804932][T17669] jffs2: notice: (17669) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 430.966345][ C0] vcan0: j1939_tp_rxtimer: 0xffff888056113000: rx timeout, send abort [ 430.968722][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888056113000: 0x1ff03: (3) A timeout occurred and this is the connection abort to close the session. [ 431.060156][T17680] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4383'. [ 432.094651][T17717] fuse: Bad value for 'fd' [ 432.273027][T17731] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4402'. [ 432.585278][ C3] net_ratelimit: 194 callbacks suppressed [ 432.711983][T17747] No such timeout policy "syz1" [ 433.248245][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 434.061734][T17768] jffs2: notice: (17768) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 434.124193][T17773] fuse: Bad value for 'fd' [ 434.202809][T17779] overlayfs: failed to clone upperpath [ 434.211066][T17780] fuse: Bad value for 'fd' [ 435.943998][T17813] fuse: Bad value for 'fd' [ 436.436424][ T43] audit: type=1400 audit(1700006679.460:805): avc: denied { shutdown } for pid=17825 comm="syz.2.4437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 436.458135][T17841] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4439'. [ 436.578465][T17848] Illegal XDP return value 708505396 on prog (id 57) dev syz_tun, expect packet loss! [ 437.854434][T17906] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4461'. [ 437.855397][ T224] net_ratelimit: 204 callbacks suppressed [ 438.127939][T17926] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4466'. [ 438.646673][T17948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4475'. [ 438.804000][T17956] fuse: Bad value for 'fd' [ 439.047858][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 439.172750][T17975] netlink: 32 bytes leftover after parsing attributes in process `syz.3.4486'. ** 325 printk messages dropped ** [ 440.228507][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.228554][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.595770][T17994] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4495'. [ 441.027842][T18006] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4497'. [ 441.786516][T18033] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4504'. [ 442.307229][ T5752] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 442.310586][T18041] netlink: 32 bytes leftover after parsing attributes in process `syz.2.4508'. [ 442.985402][ T224] net_ratelimit: 177 callbacks suppressed [ 443.009423][T18056] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4514'. [ 443.103201][T18062] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4515'. [ 443.937375][ T43] audit: type=1400 audit(1700006686.960:806): avc: denied { write } for pid=18092 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.033339][ T43] audit: type=1400 audit(1700006687.050:807): avc: denied { write } for pid=18098 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 444.270308][T18105] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4527'. [ 444.351252][T18113] netlink: 32 bytes leftover after parsing attributes in process `syz.1.4530'. [ 444.431353][T18116] netlink: 68 bytes leftover after parsing attributes in process `syz.1.4531'. [ 444.765630][T18130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4538'. [ 444.891748][T18137] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4539'. [ 445.782991][T18165] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4548'. [ 447.107133][T18212] ecryptfs_validate_options: eCryptfs doesn't support cipher: aes [ 447.107159][T18212] Error validating options; rc = [-22] [ 447.372542][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 447.447754][T18221] __nla_validate_parse: 2 callbacks suppressed [ 447.447772][T18221] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4568'. [ 447.741710][T18231] jffs2: notice: (18231) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 448.015334][ T1181] net_ratelimit: 239 callbacks suppressed [ 448.687263][ T43] audit: type=1400 audit(1700006691.710:808): avc: denied { setopt } for pid=18250 comm="syz.3.4578" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 448.787817][ T43] audit: type=1400 audit(1700006691.810:809): avc: denied { watch watch_reads } for pid=18235 comm="syz.2.4574" path="pipe:[48877]" dev="pipefs" ino=48877 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 448.827780][ T43] audit: type=1400 audit(1700006691.850:810): avc: denied { bind } for pid=18256 comm="syz.0.4579" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 ** 328 printk messages dropped ** [ 450.101851][ T5752] Bluetooth: hci1: unexpected event for opcode 0x2028 [ 450.475795][ T43] audit: type=1326 audit(1700006693.500:811): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.475824][ T43] audit: type=1326 audit(1700006693.500:812): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477119][ T43] audit: type=1326 audit(1700006693.500:813): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477254][ T43] audit: type=1326 audit(1700006693.500:814): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477380][ T43] audit: type=1326 audit(1700006693.500:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=271 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477502][ T43] audit: type=1326 audit(1700006693.500:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477600][ T43] audit: type=1326 audit(1700006693.500:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.477808][ T43] audit: type=1326 audit(1700006693.500:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.478036][ T43] audit: type=1326 audit(1700006693.500:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=18307 comm="syz.1.4598" exe="/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f442a39e199 code=0x7ffc0000 [ 450.689356][T18318] jffs2: notice: (18318) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 451.440700][T18346] jffs2: notice: (18346) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 452.000021][ T43] audit: type=1400 audit(1700006695.020:820): avc: denied { getopt } for pid=18361 comm="syz.0.4618" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 452.269846][ T5752] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 452.870989][T18391] jffs2: notice: (18391) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 453.201720][T18421] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4638'. [ 453.225869][T14721] net_ratelimit: 130 callbacks suppressed [ 454.526641][T18474] xt_CT: You must specify a L4 protocol and not use inversions on it [ 454.532709][T18474] fuse: Bad value for 'fd' [ 454.956417][T18485] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4660'. [ 455.000263][T18490] 9p: Bad value for 'rfdno' [ 455.086961][T18498] fuse: Bad value for 'fd' [ 455.346300][T18513] fuse: Bad value for 'fd' [ 455.454614][T18517] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4673'. [ 456.213719][ T5752] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 456.469842][T18539] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4682'. [ 456.961721][T18562] fuse: Bad value for 'fd' [ 457.462095][ T5752] Bluetooth: hci0: unexpected event for opcode 0x2028 [ 458.084531][ T43] kauditd_printk_skb: 1 callbacks suppressed [ 458.084547][ T43] audit: type=1400 audit(1700006701.100:822): avc: denied { nlmsg_write } for pid=18597 comm="syz.1.4706" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 458.092632][T18601] netlink: 'syz.1.4706': attribute type 12 has an invalid length. [ 458.335354][T14686] net_ratelimit: 123 callbacks suppressed [ 458.841828][ T5752] Bluetooth: hci3: unexpected event for opcode 0x2028 [ 459.082255][T18633] fuse: Bad value for 'fd' [ 459.638653][ T5091] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.650805][ T5091] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.654170][ T5091] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.658261][ T5091] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.661734][ T5091] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 460.211277][T18660] bond0: (slave macvlan2): Opening slave failed [ 460.309315][ T43] audit: type=1400 audit(1700006703.320:823): avc: denied { write } for pid=18657 comm="syz.0.4727" path="socket:[78262]" dev="sockfs" ino=78262 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 460.311419][ T43] audit: type=1400 audit(1700006703.330:824): avc: denied { setopt } for pid=18657 comm="syz.0.4727" lport=54536 faddr=::ffff:172.20.255.187 fport=20001 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 460.786130][T18666] netlink: 'syz.2.4728': attribute type 19 has an invalid length. [ 461.539525][T18698] fuse: Bad value for 'fd' [ 461.695547][ T5752] Bluetooth: hci2: command tx timeout [ 462.142741][ T43] audit: type=1400 audit(1700006705.170:825): avc: denied { create } for pid=18707 comm="syz.0.4741" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.145641][ T43] audit: type=1400 audit(1700006705.170:826): avc: denied { mounton } for pid=18707 comm="syz.0.4741" path="/598/file0" dev="tmpfs" ino=3301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.145748][T18708] fuse: Bad value for 'fd' [ 462.150872][ T43] audit: type=1400 audit(1700006705.170:827): avc: denied { setattr } for pid=18707 comm="syz.0.4741" name="file0" dev="tmpfs" ino=3301 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 462.356899][T18647] bridge0: port 1(bridge_slave_0) entered blocking state [ 462.357030][T18647] bridge0: port 1(bridge_slave_0) entered disabled state [ 462.357173][T18647] bridge_slave_0: entered allmulticast mode [ 462.358717][T18647] bridge_slave_0: entered promiscuous mode [ 462.361368][T18647] bridge0: port 2(bridge_slave_1) entered blocking state [ 462.361503][T18647] bridge0: port 2(bridge_slave_1) entered disabled state [ 462.361632][T18647] bridge_slave_1: entered allmulticast mode [ 462.363158][T18647] bridge_slave_1: entered promiscuous mode [ 462.398628][T18647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 462.400822][T18647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 462.434202][T18647] team0: Port device team_slave_0 added [ 462.437547][T18647] team0: Port device team_slave_1 added [ 462.495067][T18647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 462.495077][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.495098][T18647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 462.499359][T18647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 462.499369][T18647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 462.499390][T18647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 462.546768][T18729] fuse: Bad value for 'fd' [ 462.595864][T18647] hsr_slave_0: entered promiscuous mode [ 462.596824][T18647] hsr_slave_1: entered promiscuous mode [ 463.396111][T14686] net_ratelimit: 537 callbacks suppressed [ 463.525133][T18754] xt_hashlimit: size too large, truncated to 1048576 [ 463.595295][T18756] xt_hashlimit: size too large, truncated to 1048576 [ 463.601873][T18647] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 463.775378][ T5752] Bluetooth: hci2: command tx timeout [ 463.889357][T18647] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.259843][T18647] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.419928][T18647] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.529929][ T43] audit: type=1400 audit(1700006707.550:828): avc: denied { read } for pid=18787 comm="syz.3.4768" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 464.669519][T18647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 464.676769][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 464.677323][T18647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.682792][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 464.683622][T18647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.693611][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 464.694473][T18647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.700699][T18647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 464.829601][T18647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.858757][T18647] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.866045][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.866127][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.883490][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.883577][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.272358][T18647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.331064][T18647] veth0_vlan: entered promiscuous mode [ 465.336286][T18647] veth1_vlan: entered promiscuous mode [ 465.359941][T18647] veth0_macvtap: entered promiscuous mode [ 465.365068][T18647] veth1_macvtap: entered promiscuous mode [ 465.384338][T18647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.393814][T18647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.436854][T17197] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.436880][T17197] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.436898][T17197] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.436916][T17197] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 465.500572][ T1181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.500583][ T1181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.546820][T14686] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 465.546831][T14686] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.909930][ T43] audit: type=1400 audit(1700006708.930:829): avc: denied { create } for pid=18830 comm="syz.3.4777" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 466.017418][ T5752] Bluetooth: hci2: command tx timeout [ 466.730662][ T5749] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.757465][ T5749] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.761883][ T5749] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.772142][ T5749] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.773030][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.980059][ T43] audit: type=1400 audit(1700006710.000:830): avc: denied { ioctl } for pid=18853 comm="syz.1.4783" path="socket:[78785]" dev="sockfs" ino=78785 ioctlcmd=0x5869 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 467.937039][T18863] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4783'. [ 467.940557][ T43] audit: type=1400 audit(1700006710.960:831): avc: denied { write } for pid=18853 comm="syz.1.4783" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 468.327815][ T5752] Bluetooth: hci2: command tx timeout [ 468.505232][ C2] net_ratelimit: 254 callbacks suppressed [ 468.627860][ T43] audit: type=1400 audit(1700006711.650:832): avc: denied { mount } for pid=18879 comm="syz.2.4788" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 468.824124][ T5752] Bluetooth: hci0: command tx timeout [ 469.076181][T18828] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.076302][T18828] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.076561][T18828] bridge_slave_0: entered allmulticast mode [ 469.077983][T18828] bridge_slave_0: entered promiscuous mode [ 469.089413][T18828] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.089519][T18828] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.089723][T18828] bridge_slave_1: entered allmulticast mode [ 469.090587][T18828] bridge_slave_1: entered promiscuous mode [ 469.169236][T18828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.171974][T18828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.299387][ T43] audit: type=1400 audit(1700006712.320:833): avc: denied { name_bind } for pid=18896 comm="syz.1.4787" src=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 469.589693][T18828] team0: Port device team_slave_0 added [ 469.592918][T18828] team0: Port device team_slave_1 added [ 469.611431][ T5752] Bluetooth: hci4: unexpected event for opcode 0x2028 [ 469.649046][T18828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.649056][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.649076][T18828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 469.672804][T18828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 469.672814][T18828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 469.672835][T18828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.732633][T18828] hsr_slave_0: entered promiscuous mode [ 469.733599][T18828] hsr_slave_1: entered promiscuous mode [ 469.734289][T18828] debugfs: 'hsr0' already exists in 'hsr' [ 469.734304][T18828] Cannot create hsr debugfs directory [ 470.204780][T18913] fuse: Bad value for 'user_id' [ 470.204790][T18913] fuse: Bad value for 'user_id' [ 470.989676][ T5752] Bluetooth: hci0: command tx timeout [ 471.411040][T18828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 471.419063][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 471.420627][T18828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 471.486846][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 471.488431][T18828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 471.509884][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 471.510803][T18828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 471.531615][T18828] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 471.667641][T18828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.688217][T18828] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.693269][T14739] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.693382][T14739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.706813][T14686] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.706856][T14686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.712902][ T43] audit: type=1400 audit(1700006714.730:834): avc: denied { create } for pid=18951 comm="syz.2.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 471.714122][ T43] audit: type=1400 audit(1700006714.730:835): avc: denied { setopt } for pid=18951 comm="syz.2.4805" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 471.828462][ T43] audit: type=1400 audit(1700006714.850:836): avc: denied { setopt } for pid=18961 comm="syz.3.4809" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 471.865340][ T5843] usb 6-1: new full-speed USB device number 39 using dummy_hcd [ 472.050308][ T5843] usb 6-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 472.083926][ T5843] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 472.084014][ T5843] usb 6-1: Product: syz [ 472.084024][ T5843] usb 6-1: Manufacturer: syz [ 472.084066][ T5843] usb 6-1: SerialNumber: syz [ 472.088368][ T5843] usb 6-1: config 0 descriptor?? [ 472.329088][ T5843] RobotFuzz Open Source InterFace, OSIF 6-1:0.0: version d4.15 found at bus 006 address 039 [ 472.464801][T18828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.490892][T18828] veth0_vlan: entered promiscuous mode [ 472.496483][T18828] veth1_vlan: entered promiscuous mode [ 472.504166][ T851] kernel read not supported for file /asoc/dais (pid: 851 comm: kworker/3:2) [ 472.509410][ T1039] usb 6-1: USB disconnect, device number 39 [ 472.530711][T18828] veth0_macvtap: entered promiscuous mode [ 472.537027][T18828] veth1_macvtap: entered promiscuous mode [ 472.561527][T18828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.572646][T18828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.653849][T16780] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.653894][T16780] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.653924][T16780] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.653955][T16780] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.761987][T14721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.761998][T14721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.813385][T14721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.813393][T14721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.011804][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 473.032546][ T5749] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 473.033792][ T5749] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 473.034913][ T5749] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 473.044801][ T5749] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 473.067649][ T5752] Bluetooth: hci0: command tx timeout [ 473.527006][T18792] net_ratelimit: 356 callbacks suppressed [ 473.810460][T18998] comedi comedi3: bad chanlist[0]=0x00000002 chan=2 range length=1 [ 473.893631][T18997] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4818'. [ 473.990395][ T43] audit: type=1400 audit(1700006717.010:837): avc: denied { unmount } for pid=18828 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 474.450901][T19032] netlink: 'syz.0.4825': attribute type 39 has an invalid length. [ 474.594056][T19038] fuse: Bad value for 'fd' [ 474.606425][T18999] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.606500][T18999] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.606676][T18999] bridge_slave_0: entered allmulticast mode [ 474.608501][T18999] bridge_slave_0: entered promiscuous mode [ 474.613335][T18999] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.613557][T18999] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.613691][T18999] bridge_slave_1: entered allmulticast mode [ 474.616514][T18999] bridge_slave_1: entered promiscuous mode [ 474.699037][T18999] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 474.709403][T18999] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 474.800612][T18999] team0: Port device team_slave_0 added [ 474.802574][T18999] team0: Port device team_slave_1 added [ 474.873614][T18999] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 474.873625][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.873646][T18999] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 474.883761][T18999] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 474.883771][T18999] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 474.883793][T18999] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.039911][T19045] program syz.1.4830 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 475.064196][T18999] hsr_slave_0: entered promiscuous mode [ 475.064972][T18999] hsr_slave_1: entered promiscuous mode [ 475.065765][T18999] debugfs: 'hsr0' already exists in 'hsr' [ 475.065779][T18999] Cannot create hsr debugfs directory [ 475.143258][ T5752] Bluetooth: hci1: command tx timeout [ 475.144155][ T5752] Bluetooth: hci0: command tx timeout [ 475.181811][ T43] audit: type=1400 audit(1700006718.200:838): avc: denied { getopt } for pid=19049 comm="syz.1.4832" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 475.386371][T18999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 475.465516][ T43] audit: type=1400 audit(1700006718.470:839): avc: denied { bind } for pid=19055 comm="syz.1.4835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 475.465547][ T43] audit: type=1400 audit(1700006718.480:840): avc: denied { map } for pid=19055 comm="syz.1.4835" path="socket:[80991]" dev="sockfs" ino=80991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 475.465570][ T43] audit: type=1400 audit(1700006718.480:841): avc: denied { read write } for pid=19055 comm="syz.1.4835" path="socket:[80991]" dev="sockfs" ino=80991 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 475.527021][T18999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.333951][T18999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.496845][T18999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.768959][T18999] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 476.780623][T18999] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 476.781943][T18999] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 476.800551][T18999] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 476.802337][T18999] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 476.804260][T19065] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4838'. [ 476.816100][T18999] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 476.816505][T18999] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 476.829356][T18999] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 476.945042][T19082] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4841'. [ 476.991705][T18999] 8021q: adding VLAN 0 to HW filter on device bond0 [ 477.002695][T18999] 8021q: adding VLAN 0 to HW filter on device team0 [ 477.013997][ T1181] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.014038][ T1181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 477.018254][ T1181] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.018339][ T1181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 477.019051][T19085] xt_hashlimit: size too large, truncated to 1048576 [ 477.215821][ T5749] Bluetooth: hci1: command tx timeout [ 477.689915][T18999] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 477.731243][T18999] veth0_vlan: entered promiscuous mode [ 477.743716][T18999] veth1_vlan: entered promiscuous mode [ 477.767770][T18999] veth0_macvtap: entered promiscuous mode [ 477.774197][T18999] veth1_macvtap: entered promiscuous mode [ 477.803948][T18999] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.817102][T18999] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.865690][T16780] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.865906][T16780] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.866188][T16780] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.866232][T16780] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.954515][T14721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 477.954529][T14721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.037617][ T224] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 478.037629][ T224] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 478.213875][T19112] fuse: Bad value for 'fd' [ 478.575941][T16780] net_ratelimit: 349 callbacks suppressed [ 478.658284][T19132] xt_hashlimit: size too large, truncated to 1048576 [ 478.722096][T19134] xt_hashlimit: size too large, truncated to 1048576 [ 479.295705][ T5749] Bluetooth: hci1: command tx timeout [ 480.749487][T19224] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4882'. [ 480.934154][T19235] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4885'. [ 481.025914][T19240] fuse: Bad value for 'fd' [ 481.301854][T19249] netlink: 16 bytes leftover after parsing attributes in process `syz.3.4890'. [ 481.375423][ T5749] Bluetooth: hci1: command tx timeout [ 481.442356][T19253] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 481.524829][T19261] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4895'. [ 481.651407][T19270] fuse: Bad value for 'rootmode' [ 481.884275][T19288] xt_hashlimit: size too large, truncated to 1048576 [ 482.020912][T19293] fuse: Bad value for 'fd' [ 482.759052][ T5752] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 482.765064][ T5752] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 482.773658][ T5752] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 482.780471][ T5752] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 482.781642][ T5752] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 483.283940][T19351] xt_hashlimit: size too large, truncated to 1048576 [ 483.340961][T19353] xt_hashlimit: size too large, truncated to 1048576 [ 483.613849][T19363] net_ratelimit: 389 callbacks suppressed [ 483.664199][T19366] fuse: Unknown parameter 'use00000000000000000000' [ 483.978533][ T43] audit: type=1400 audit(1700006727.000:842): avc: denied { create } for pid=19370 comm="syz.1.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 483.980915][ T43] audit: type=1400 audit(1700006727.000:843): avc: denied { bind } for pid=19370 comm="syz.1.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 484.029120][ T43] audit: type=1400 audit(1700006727.050:844): avc: denied { listen } for pid=19370 comm="syz.1.4921" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 485.007416][ T5749] Bluetooth: hci3: command tx timeout [ 485.884347][T19333] bridge0: port 1(bridge_slave_0) entered blocking state [ 485.884473][T19333] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.884600][T19333] bridge_slave_0: entered allmulticast mode [ 485.887490][T19333] bridge_slave_0: entered promiscuous mode [ 485.890740][T19333] bridge0: port 2(bridge_slave_1) entered blocking state [ 485.892550][T19333] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.892781][T19333] bridge_slave_1: entered allmulticast mode [ 485.896663][T19333] bridge_slave_1: entered promiscuous mode [ 485.973725][T19392] netlink: 'syz.0.4926': attribute type 2 has an invalid length. [ 485.974321][ T43] audit: type=1400 audit(1700006728.990:845): avc: denied { connect } for pid=19391 comm="syz.0.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.010882][T19390] syzkaller0: Number of in use tx queues changed invalidating tc mappings. Priority traffic classification disabled! [ 486.016939][T19333] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 486.020246][T19333] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 486.029930][ T43] audit: type=1400 audit(1700006729.050:846): avc: denied { write } for pid=19391 comm="syz.0.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.082966][ T43] audit: type=1400 audit(1700006729.100:847): avc: denied { accept } for pid=19391 comm="syz.0.4926" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 486.111431][T19396] fuse: Invalid rootmode [ 486.188442][T19333] team0: Port device team_slave_0 added [ 486.197037][T19333] team0: Port device team_slave_1 added [ 486.267176][T19333] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 486.267185][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.267205][T19333] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 486.268825][T19333] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 486.268835][T19333] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 486.268860][T19333] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 486.369583][T19333] hsr_slave_0: entered promiscuous mode [ 486.370724][ T43] audit: type=1400 audit(1700006729.390:848): avc: denied { read write } for pid=19404 comm="syz.3.4929" name="mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 486.370804][T19333] hsr_slave_1: entered promiscuous mode [ 486.370942][ T43] audit: type=1400 audit(1700006729.390:849): avc: denied { open } for pid=19404 comm="syz.3.4929" path="/dev/input/mice" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 486.371734][T19333] debugfs: 'hsr0' already exists in 'hsr' [ 486.371751][T19333] Cannot create hsr debugfs directory [ 486.670178][T19412] fuse: Unknown parameter 'use00000000000000000000' [ 486.795796][T19333] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.825296][ T8684] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 486.937275][T19333] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 487.062089][ T5749] Bluetooth: hci3: command tx timeout [ 487.150849][ T8684] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 487.161176][ T8684] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 487.161239][ T8684] usb 8-1: config 0 has no interface number 0 [ 487.161273][ T8684] usb 8-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 487.169329][ T8684] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 487.169349][ T8684] usb 8-1: Product: syz [ 487.169362][ T8684] usb 8-1: Manufacturer: syz [ 487.169375][ T8684] usb 8-1: SerialNumber: syz [ 487.193989][ T8684] usb 8-1: config 0 descriptor?? [ 487.299841][ T8684] yurex 8-1:0.50: USB YUREX device now attached to Yurex #0 [ 487.560864][ T851] usb 8-1: USB disconnect, device number 40 [ 487.841019][ T851] yurex 8-1:0.50: USB YUREX #0 now disconnected [ 488.321046][T19333] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.404130][T19423] UDC core: g1: couldn't find an available UDC or it's busy [ 488.764421][T19432] netlink: 44 bytes leftover after parsing attributes in process `syz.3.4939'. [ 489.145224][ C2] net_ratelimit: 228 callbacks suppressed [ 489.247075][ T5749] Bluetooth: hci3: command tx timeout [ 489.638807][T19333] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 489.831658][T19437] fuse: Bad value for 'rootmode' [ 490.752676][T19447] netlink: 'syz.3.4945': attribute type 2 has an invalid length. [ 490.795044][T19333] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 490.810594][T19333] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 490.811291][T19449] netlink: 16 bytes leftover after parsing attributes in process `syz.0.4946'. [ 490.811580][T19333] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 490.837717][T19333] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 490.841596][T19333] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 490.858007][T19333] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 490.858735][T19333] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 490.879613][T19333] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 490.880662][T19453] xt_hashlimit: size too large, truncated to 1048576 [ 490.963037][T19333] 8021q: adding VLAN 0 to HW filter on device bond0 [ 490.970205][T19333] 8021q: adding VLAN 0 to HW filter on device team0 [ 490.973718][T14721] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.973760][T14721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 490.991142][T14721] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.991184][T14721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 491.202290][T19476] fuse: Bad value for 'rootmode' [ 491.291936][T19482] FAULT_INJECTION: forcing a failure. [ 491.291936][T19482] name failslab, interval 1, probability 0, space 0, times 0 [ 491.291956][T19482] CPU: 0 UID: 0 PID: 19482 Comm: syz.0.4951 Tainted: G L syzkaller #0 PREEMPT(full) [ 491.291972][T19482] Tainted: [L]=SOFTLOCKUP [ 491.291977][T19482] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 491.291985][T19482] Call Trace: [ 491.291990][T19482] [ 491.291996][T19482] dump_stack_lvl+0x100/0x190 [ 491.292017][T19482] should_fail_ex.cold+0x5/0xa [ 491.292034][T19482] should_failslab+0xc2/0x120 [ 491.292054][T19482] __kmalloc_cache_noprof+0x91/0x6d0 [ 491.292068][T19482] ? create_filter_start.constprop.0+0x81/0x310 [ 491.292086][T19482] create_filter_start.constprop.0+0x81/0x310 [ 491.292103][T19482] create_filter+0xb5/0x210 [ 491.292119][T19482] ? __pfx_create_filter+0x10/0x10 [ 491.292132][T19482] ? __pfx___mutex_lock+0x10/0x10 [ 491.292145][T19482] ? __might_fault+0xc5/0x140 [ 491.292158][T19482] ? find_held_lock+0x2b/0x80 [ 491.292177][T19482] apply_event_filter+0x220/0x500 [ 491.292193][T19482] ? __pfx_apply_event_filter+0x10/0x10 [ 491.292219][T19482] event_filter_write+0x16d/0x290 [ 491.292239][T19482] vfs_write+0x2aa/0x1050 [ 491.292254][T19482] ? __pfx_event_filter_write+0x10/0x10 [ 491.292273][T19482] ? lock_acquire+0x1d1/0x380 [ 491.292286][T19482] ? __fget_files+0x34/0x3d0 [ 491.292303][T19482] ? __pfx_vfs_write+0x10/0x10 [ 491.292317][T19482] ? find_held_lock+0x2b/0x80 [ 491.292335][T19482] ? __fget_files+0x215/0x3d0 [ 491.292353][T19482] ? __fget_files+0x21f/0x3d0 [ 491.292373][T19482] ksys_write+0x12a/0x250 [ 491.292386][T19482] ? __pfx_ksys_write+0x10/0x10 [ 491.292404][T19482] do_syscall_64+0x123/0x790 [ 491.292418][T19482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.292431][T19482] RIP: 0033:0x7f782079e199 [ 491.292441][T19482] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 491.292453][T19482] RSP: 002b:00007f782162e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 491.292465][T19482] RAX: ffffffffffffffda RBX: 00007f7820a25fa0 RCX: 00007f782079e199 [ 491.292473][T19482] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003 [ 491.292480][T19482] RBP: 00007f78208358e0 R08: 0000000000000000 R09: 0000000000000000 [ 491.292487][T19482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 491.292494][T19482] R13: 00007f7820a26038 R14: 00007f7820a25fa0 R15: 00007ffc8c117f98 [ 491.292510][T19482] [ 491.295254][ T5749] Bluetooth: hci3: command tx timeout [ 491.422806][T19333] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 491.464623][T19333] veth0_vlan: entered promiscuous mode [ 491.470363][T19333] veth1_vlan: entered promiscuous mode [ 491.491685][T19333] veth0_macvtap: entered promiscuous mode [ 491.498232][T19333] veth1_macvtap: entered promiscuous mode [ 491.601489][T19333] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.660608][T19333] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 491.787330][T17197] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.788041][T17197] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.788296][T17197] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.788987][T17197] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 491.870546][T14721] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.870560][T14721] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.920633][T14721] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 491.920644][T14721] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.946832][T19496] fuse: Unknown parameter 'user_i00000000000000000000' [ 492.054900][ T43] audit: type=1400 audit(1700006735.070:850): avc: denied { write } for pid=19500 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.128297][ T43] audit: type=1400 audit(1700006735.150:851): avc: denied { write } for pid=19504 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.258369][ T43] audit: type=1400 audit(1700006735.280:852): avc: denied { write } for pid=19511 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.389449][ T43] audit: type=1400 audit(1700006735.410:853): avc: denied { write } for pid=19520 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.485432][ T25] usb 7-1: new high-speed USB device number 26 using dummy_hcd [ 492.527408][ T43] audit: type=1400 audit(1700006735.550:854): avc: denied { write } for pid=19529 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.623849][T19538] netlink: 'syz.3.4965': attribute type 2 has an invalid length. [ 492.623864][T19538] netlink: 'syz.3.4965': attribute type 2 has an invalid length. [ 492.645423][T19539] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 492.645440][T19539] netlink: 'syz.0.4966': attribute type 2 has an invalid length. [ 492.647197][ T25] usb 7-1: Using ep0 maxpacket: 8 [ 492.647984][ T25] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 492.648877][ T25] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 492.648911][ T25] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 492.648923][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 492.648935][ T25] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 492.648947][ T25] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 492.648976][ T25] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 492.690155][ T43] audit: type=1400 audit(1700006735.710:855): avc: denied { write } for pid=19535 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.791210][ T43] audit: type=1400 audit(1700006735.810:856): avc: denied { write } for pid=19545 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 492.878881][ T25] usb 7-1: usb_control_msg returned -32 [ 492.878903][ T25] usbtmc 7-1:16.0: can't read capabilities [ 492.891656][T19552] fuse: Unknown parameter 'user_id00000000000000000000' [ 492.928727][ T43] audit: type=1400 audit(1700006735.950:857): avc: denied { write } for pid=19554 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 493.227465][T19562] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 493.240721][T19562] usbtmc 7-1:16.0: control status returned d0 [ 493.341267][T19565] netlink: 'syz.1.4973': attribute type 2 has an invalid length. [ 493.341287][T19565] netlink: 'syz.1.4973': attribute type 2 has an invalid length. [ 493.442312][ T851] usb 7-1: USB disconnect, device number 26 [ 493.655663][T19580] netlink: 'syz.0.4979': attribute type 2 has an invalid length. [ 493.655676][T19580] netlink: 'syz.0.4979': attribute type 2 has an invalid length. [ 494.176749][T14691] net_ratelimit: 505 callbacks suppressed [ 494.507007][T19597] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 494.531498][T19598] fuse: Unknown parameter 'use00000000000000000000' [ 494.900830][T19615] fuse: Bad value for 'fd' [ 494.945209][ T1039] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 495.067697][T19623] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 495.067711][T19623] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 495.067770][T19623] vhci_hcd vhci_hcd.0: Device attached [ 495.115811][ T1039] usb 7-1: Using ep0 maxpacket: 8 [ 495.116305][ T1039] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 495.121533][ T1039] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 495.121567][ T1039] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 495.121579][ T1039] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 495.121591][ T1039] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 495.121603][ T1039] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 495.121633][ T1039] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.335467][ T50] usb 37-1: new high-speed USB device number 11 using vhci_hcd [ 495.348482][ T1039] usb 7-1: usb_control_msg returned -32 [ 495.348502][ T1039] usbtmc 7-1:16.0: can't read capabilities [ 495.719112][T19631] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 495.749389][T19631] usbtmc 7-1:16.0: control status returned d0 [ 495.952077][ T1039] usb 7-1: USB disconnect, device number 27 [ 495.961719][T19640] fuse: Unknown parameter 'user_i00000000000000000000' [ 496.545470][T19663] md: couldn't update array info. -22 [ 496.547696][T11619] md_update_sb: can't update sb for read-only array md0 [ 496.569056][T19663] md: could not open device unknown-block(1,0). [ 496.569105][T19663] md: md_import_device returned -16 [ 496.571234][T11619] md_update_sb: can't update sb for read-only array md0 [ 496.626444][T11619] md_update_sb: can't update sb for read-only array md0 [ 496.721115][ T43] audit: type=1400 audit(1700006739.740:858): avc: denied { write } for pid=19672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.838398][ T43] audit: type=1400 audit(1700006739.860:859): avc: denied { write } for pid=19687 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 496.938883][T19696] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 496.987473][T19696] md: couldn't update array info. -22 [ 496.987546][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.039111][T19696] md: could not open device unknown-block(1,0). [ 497.039157][T19696] md: md_import_device returned -16 [ 497.039309][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.068129][T19708] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 497.098666][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.122387][ T43] kauditd_printk_skb: 3 callbacks suppressed [ 497.122396][ T43] audit: type=1400 audit(1700006740.140:863): avc: denied { write } for pid=19711 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.145996][T19708] md: couldn't update array info. -22 [ 497.146111][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.162971][T19713] md: could not open device unknown-block(1,0). [ 497.163017][T19713] md: md_import_device returned -16 [ 497.163200][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.196738][T11619] md_update_sb: can't update sb for read-only array md0 [ 497.276779][ T43] audit: type=1400 audit(1700006740.290:864): avc: denied { write } for pid=19717 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.334919][ T43] audit: type=1400 audit(1700006740.350:865): avc: denied { write } for pid=19730 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 497.508879][T19741] fuse: Unknown parameter 'user_i00000000000000000000' [ 498.304123][T19624] vhci_hcd: connection reset by peer [ 498.305565][ T13] vhci_hcd vhci_hcd.0: stop threads [ 498.305578][ T13] vhci_hcd vhci_hcd.0: release socket [ 498.305605][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 498.518959][ T43] audit: type=1400 audit(1700006741.540:866): avc: denied { write } for pid=19765 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.566522][T19775] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.616256][ T43] audit: type=1400 audit(1700006741.640:867): avc: denied { write } for pid=19778 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.624580][T19775] jffs2: notice: (19775) jffs2_build_xattr_subsystem: complete building xattr subsystem, 2 of xdatum (2 unchecked, 0 orphan) and 2 of xref (0 dead, 0 orphan) found. [ 498.669500][T19783] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 498.729767][T19783] md: couldn't update array info. -22 [ 498.729850][T11619] md_update_sb: can't update sb for read-only array md0 [ 498.766872][ T43] audit: type=1400 audit(1700006741.780:868): avc: denied { write } for pid=19789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 498.766974][T19793] md: could not open device unknown-block(1,0). [ 498.767001][T19793] md: md_import_device returned -16 [ 498.807261][T19783] md: could not open device unknown-block(1,1). [ 498.807285][T19783] md: md_import_device returned -16 [ 498.940596][ T43] audit: type=1400 audit(1700006741.960:869): avc: denied { write } for pid=19807 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 499.079958][T19829] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5066'. [ 499.118285][T19835] fuse: Unknown parameter '0x0000000000000003' [ 499.306198][ C3] net_ratelimit: 440 callbacks suppressed [ 499.509710][T19861] fuse: Unknown parameter 'user_id00000000000000000000' [ 499.864745][T19880] fuse: Unknown parameter '0x0000000000000003' [ 499.946720][ T2329] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 500.126463][ T2329] usb 8-1: Using ep0 maxpacket: 8 [ 500.131175][ T2329] usb 8-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 500.135048][ T2329] usb 8-1: config index 0 descriptor too short (expected 301, got 45) [ 500.140029][ T2329] usb 8-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 500.140070][ T2329] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 500.140112][ T2329] usb 8-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 500.140155][ T2329] usb 8-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 500.140362][ T2329] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.476448][ T2329] usb 8-1: usb_control_msg returned -32 [ 500.476679][ T2329] usbtmc 8-1:16.0: can't read capabilities [ 500.562189][ T50] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 500.574002][T19894] fuse: Bad value for 'fd' [ 500.822043][T19903] SELinux: security_context_str_to_sid (staff_u) failed with errno=-22 [ 500.830959][T19903] usbtmc 8-1:16.0: stb usb_control_msg returned -32 [ 500.831868][ T2329] usb 8-1: USB disconnect, device number 41 [ 501.220092][ T1440] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.220126][ T1440] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.798228][T19933] fuse: Unknown parameter 'fd0xffffffffffffffff' [ 502.097414][T19950] netlink: 'syz.1.5109': attribute type 4 has an invalid length. [ 502.097425][T19950] netlink: 17 bytes leftover after parsing attributes in process `syz.1.5109'. [ 503.224174][T19990] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5125'. [ 503.324868][T20000] fuse: Unknown parameter '0x0000000000000003' [ 503.335881][ T43] audit: type=1400 audit(1700006746.360:870): avc: denied { write } for pid=19996 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.387338][ T43] audit: type=1400 audit(1700006746.410:871): avc: denied { write } for pid=20005 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.399743][T20007] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.5130'. [ 503.409815][T20003] fuse: Unknown parameter 'fd0x0000000000000003' [ 503.479832][ T43] audit: type=1400 audit(1700006746.500:872): avc: denied { write } for pid=20009 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 503.540475][ T43] audit: type=1400 audit(1700006746.560:873): avc: denied { write } for pid=20015 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 504.005671][T20033] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5137'. [ 504.076856][T20039] netlink: 48 bytes leftover after parsing attributes in process `syz.0.5139'. [ 504.237351][T20046] fuse: Bad value for 'fd' [ 504.346575][T20052] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5144'. [ 504.416251][ C3] net_ratelimit: 407 callbacks suppressed [ 504.500659][T20059] xt_hashlimit: size too large, truncated to 1048576 [ 504.670443][T20066] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5149'. [ 504.889271][T20074] fuse: Bad value for 'fd' [ 505.371682][T20085] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5155'. [ 505.714666][T20095] netlink: 32 bytes leftover after parsing attributes in process `syz.3.5158'. [ 505.840848][T20098] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5160'. [ 505.978445][ T8684] e1000 0000:00:06.0 eth0: Reset adapter [ 505.993593][ T43] audit: type=1400 audit(1700006749.010:874): avc: denied { write } for pid=20103 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.045035][ T43] audit: type=1400 audit(1700006749.060:875): avc: denied { write } for pid=20106 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.274290][T20116] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 506.300504][ T43] audit: type=1400 audit(1700006749.320:876): avc: denied { write } for pid=20114 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.419453][ T43] audit: type=1400 audit(1700006749.440:877): avc: denied { write } for pid=20125 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.524471][ T43] audit: type=1400 audit(1700006749.540:878): avc: denied { write } for pid=20127 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 506.570008][ T8604] e1000e 0000:00:02.0 eth1: NIC Link is Up 1000 Mbps Full Duplex, Flow Control: Rx/Tx [ 506.587917][ T43] audit: type=1400 audit(1700006749.610:879): avc: denied { write } for pid=20130 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 507.298641][ T5749] Bluetooth: hci3: Controller not accepting commands anymore: ncmd = 0 [ 507.298765][ T5749] Bluetooth: hci3: Injecting HCI hardware error event [ 507.299953][ T5749] Bluetooth: hci3: hardware error 0x00 [ 508.346480][ T25] e1000: eth0 NIC Link is Up 1000 Mbps Full Duplex, Flow Control: RX [ 509.455255][ C2] net_ratelimit: 207 callbacks suppressed [ 509.455412][ T5749] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 511.463845][T16780] vlan2: left promiscuous mode [ 511.464024][T16780] bridge0: port 3(vlan2) entered disabled state [ 511.465287][T16780] bridge_slave_1: left allmulticast mode [ 511.465297][T16780] bridge_slave_1: left promiscuous mode [ 511.465387][T16780] bridge0: port 2(bridge_slave_1) entered disabled state [ 511.470795][T16780] bridge_slave_0: left promiscuous mode [ 511.470895][T16780] bridge0: port 1(bridge_slave_0) entered disabled state [ 511.576523][T16780] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 511.606277][T16780] bond0 (unregistering): Released all slaves [ 511.612402][T16780] bond1 (unregistering): Released all slaves [ 511.622867][T16780] bond2 (unregistering): Released all slaves [ 511.636545][T16780] bond3 (unregistering): (slave wireguard0): Releasing backup interface [ 511.636557][T16780] wireguard0: left promiscuous mode [ 511.665724][T16780] bond3 (unregistering): Released all slaves [ 511.776739][T16780] tipc: Disabling bearer [ 511.785111][T16780] tipc: Left network mode [ 511.968593][ T43] kauditd_printk_skb: 6 callbacks suppressed [ 511.968605][ T43] audit: type=1400 audit(1700006754.990:886): avc: denied { write } for pid=20152 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.011269][ T43] audit: type=1400 audit(1700006755.030:887): avc: denied { write } for pid=20156 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 512.179362][T16780] hsr_slave_0: left promiscuous mode [ 512.179951][T16780] hsr_slave_1: left promiscuous mode [ 512.180428][T16780] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.182377][T16780] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.300008][T16780] team0 (unregistering): Port device team_slave_1 removed [ 512.311938][T16780] team0 (unregistering): Port device team_slave_0 removed [ 514.655338][ C0] net_ratelimit: 136 callbacks suppressed [ 517.227683][ T43] audit: type=1400 audit(1700006760.250:888): avc: denied { write } for pid=20159 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.290949][ T43] audit: type=1400 audit(1700006760.310:889): avc: denied { write } for pid=20162 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 517.628866][T20171] xt_hashlimit: size too large, truncated to 1048576 [ 517.632735][T20172] netlink: 48 bytes leftover after parsing attributes in process `syz.3.5172'. [ 518.905510][ T851] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 519.065339][ T851] usb 7-1: Using ep0 maxpacket: 8 [ 519.069061][T20201] netlink: 48 bytes leftover after parsing attributes in process `syz.1.5181'. [ 519.069755][ T851] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 519.071409][ T851] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 519.071444][ T851] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 519.071473][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 519.071493][ T851] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 519.071504][ T851] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 519.071535][ T851] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 519.221556][ T43] audit: type=1400 audit(1700006762.240:890): avc: denied { write } for pid=20208 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.247525][T20213] fuse: Bad value for 'fd' [ 519.281585][ T851] usb 7-1: usb_control_msg returned -32 [ 519.281605][ T851] usbtmc 7-1:16.0: can't read capabilities [ 519.376187][ T43] audit: type=1400 audit(1700006762.400:891): avc: denied { write } for pid=20215 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 519.526142][T20226] PM: Enabling pm_trace changes system date and time during resume. [ 519.526142][T20226] PM: Correct system time has to be restored manually after resume. [ 519.654392][T20238] usbtmc 7-1:16.0: stb usb_control_msg returned -32 [ 519.655406][ T851] usb 7-1: USB disconnect, device number 28 [ 519.775245][ C0] net_ratelimit: 132 callbacks suppressed [ 520.401536][T20289] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5216'. [ 520.979443][T20318] netlink: 36 bytes leftover after parsing attributes in process `syz.3.5226'. [ 521.149622][T20326] IPVS: set_ctl: invalid protocol: 47 127.0.0.1:0 [ 521.176782][T20328] FAULT_INJECTION: forcing a failure. [ 521.176782][T20328] name failslab, interval 1, probability 0, space 0, times 0 [ 521.176816][T20328] CPU: 0 UID: 0 PID: 20328 Comm: syz.2.5230 Tainted: G L syzkaller #0 PREEMPT(full) [ 521.176841][T20328] Tainted: [L]=SOFTLOCKUP [ 521.176848][T20328] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 521.176860][T20328] Call Trace: [ 521.176867][T20328] [ 521.176875][T20328] dump_stack_lvl+0x100/0x190 [ 521.176907][T20328] should_fail_ex.cold+0x5/0xa [ 521.176934][T20328] should_failslab+0xc2/0x120 [ 521.176961][T20328] __kmalloc_noprof+0xfc/0x840 [ 521.176982][T20328] ? __kmalloc_noprof+0x350/0x840 [ 521.177004][T20328] ? devlink_fmsg_put_value+0xaf/0x2c0 [ 521.177035][T20328] devlink_fmsg_put_value+0xaf/0x2c0 [ 521.177058][T20328] devlink_fmsg_string_pair_put+0xc1/0x1c0 [ 521.177086][T20328] nsim_dev_dummy_reporter_dump+0x54/0xa0 [ 521.177113][T20328] devlink_health_do_dump+0x243/0x5f0 [ 521.177143][T20328] devlink_health_report+0x665/0xb00 [ 521.177168][T20328] ? __pfx_devlink_health_report+0x10/0x10 [ 521.177197][T20328] ? _copy_from_user+0x59/0xd0 [ 521.177224][T20328] nsim_dev_health_break_write+0x166/0x210 [ 521.177248][T20328] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 521.177273][T20328] ? lock_acquire+0x1d1/0x380 [ 521.177289][T20328] ? ksys_write+0x12a/0x250 [ 521.177316][T20328] full_proxy_write+0x135/0x1a0 [ 521.177344][T20328] vfs_write+0x2aa/0x1050 [ 521.177366][T20328] ? __pfx_full_proxy_write+0x10/0x10 [ 521.177390][T20328] ? lock_acquire+0x1d1/0x380 [ 521.177408][T20328] ? __fget_files+0x34/0x3d0 [ 521.177433][T20328] ? __pfx_vfs_write+0x10/0x10 [ 521.177453][T20328] ? find_held_lock+0x2b/0x80 [ 521.177484][T20328] ? __fget_files+0x215/0x3d0 [ 521.177516][T20328] ? __fget_files+0x21f/0x3d0 [ 521.177549][T20328] ksys_write+0x12a/0x250 [ 521.177571][T20328] ? __pfx_ksys_write+0x10/0x10 [ 521.177598][T20328] do_syscall_64+0x123/0x790 [ 521.177620][T20328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.177646][T20328] RIP: 0033:0x7f66c8f9e199 [ 521.177662][T20328] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.177678][T20328] RSP: 002b:00007f66c9da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.177693][T20328] RAX: ffffffffffffffda RBX: 00007f66c9225fa0 RCX: 00007f66c8f9e199 [ 521.177705][T20328] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 521.177716][T20328] RBP: 00007f66c9da8090 R08: 0000000000000000 R09: 0000000000000000 [ 521.177727][T20328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 521.177738][T20328] R13: 00007f66c9226038 R14: 00007f66c9225fa0 R15: 00007ffe0c2aa288 [ 521.177764][T20328] [ 522.050806][T20358] overlayfs: failed to resolve './bus': -2 [ 522.052002][T20358] CUSE: unknown device info "" [ 522.052014][T20358] CUSE: unknown device info "" [ 522.052022][T20358] CUSE: unknown device info "ÿ" [ 522.052029][T20358] CUSE: unknown device info "" [ 522.052033][T20358] CUSE: unknown device info "ý" [ 522.052039][T20358] CUSE: unknown device info "" [ 522.052046][T20358] CUSE: unknown device info "" [ 522.052053][T20358] CUSE: DEVNAME unspecified [ 522.098522][ T43] audit: type=1400 audit(1700006765.120:892): avc: denied { read write } for pid=20361 comm="syz.3.5244" name="file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 522.098945][ T43] audit: type=1400 audit(1700006765.120:893): avc: denied { open } for pid=20361 comm="syz.3.5244" path="/119/file0" dev="tmpfs" ino=645 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 522.099380][ T43] audit: type=1400 audit(1700006765.120:894): avc: denied { ioctl } for pid=20361 comm="syz.3.5244" path="/119/file0" dev="tmpfs" ino=645 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 522.307819][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5249'. [ 522.307834][T20372] netlink: 60 bytes leftover after parsing attributes in process `syz.2.5249'. [ 522.313343][ T43] audit: type=1400 audit(1700006765.330:895): avc: denied { write } for pid=20370 comm="syz.2.5249" name="functions" dev="configfs" ino=17168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.313895][T20372] file system registered [ 522.314603][ T43] audit: type=1400 audit(1700006765.330:896): avc: denied { write } for pid=20370 comm="syz.2.5249" name="functions" dev="configfs" ino=17168 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.317517][ T43] audit: type=1400 audit(1700006765.330:897): avc: denied { remove_name } for pid=20370 comm="syz.2.5249" name="ffs.usb0" dev="configfs" ino=85537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.329854][ T43] audit: type=1400 audit(1700006765.350:898): avc: denied { rmdir } for pid=20370 comm="syz.2.5249" name="ffs.usb0" dev="configfs" ino=85537 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 522.330089][T20372] configfs: configfs ffs.usb0: dropping attrs for dir [ 522.330122][T20372] configfs: o ffs.usb0 removing done (2) [ 522.330178][T20372] [ 522.335212][ C0] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 522.337608][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 522.347839][T12130] Added buffer head 1 to ffff888027f43400 [ 522.347878][T12130] Added buffer head 6 to ffff888027f43400 [ 522.348788][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 522.348848][ T1481] No more buffers in queue [ 522.381015][T20372] ====================================================== [ 522.383841][T20372] WARNING: possible circular locking dependency detected [ 522.386651][T20372] syzkaller #0 Tainted: G L [ 522.389300][T20372] ------------------------------------------------------ [ 522.392233][T20372] syz.2.5249/20372 is trying to acquire lock: [ 522.394709][T20372] ffffffff903fec68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: configfs_rmdir+0x5ae/0x950 [ 522.398642][T20372] [ 522.398642][T20372] but task is already holding lock: [ 522.401649][T20372] ffff88803adfb0c0 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 522.405577][T20372] [ 522.405577][T20372] which lock already depends on the new lock. [ 522.405577][T20372] [ 522.409751][T20372] [ 522.409751][T20372] the existing dependency chain (in reverse order) is: [ 522.413337][T20372] [ 522.413337][T20372] -> #3 (&sb->s_type->i_mutex_key#33){++++}-{4:4}: [ 522.416161][T20372] lock_acquire+0x1d1/0x380 [ 522.417730][T20372] down_write+0x8b/0x1f0 [ 522.419271][T20372] configfs_depend_item_unlocked+0xf3/0x6a0 [ 522.421439][T20372] usbg_make_tpg+0x251/0x610 [ 522.423382][T20372] target_fabric_make_tpg+0xab/0x8c0 [ 522.425752][T20372] configfs_mkdir+0x525/0xd40 [ 522.427537][T20372] vfs_mkdir+0x364/0x850 [ 522.429048][T20372] filename_mkdirat+0x48b/0x5e0 [ 522.430690][T20372] __x64_sys_mkdirat+0x89/0xc0 [ 522.432601][T20372] do_syscall_64+0x123/0x790 [ 522.434718][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.437351][T20372] [ 522.437351][T20372] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 522.440583][T20372] lock_acquire+0x1d1/0x380 [ 522.442573][T20372] __mutex_lock+0x1a4/0x1bd0 [ 522.444687][T20372] tcm_alloc_inst+0x5f/0x1e0 [ 522.446780][T20372] try_get_usb_function_instance+0x136/0x1f0 [ 522.449294][T20372] usb_get_function_instance+0x16/0x70 [ 522.451195][T20372] function_make+0x18c/0x3f0 [ 522.452923][T20372] configfs_mkdir+0x525/0xd40 [ 522.454657][T20372] vfs_mkdir+0x364/0x850 [ 522.456266][T20372] filename_mkdirat+0x48b/0x5e0 [ 522.458085][T20372] __x64_sys_mkdirat+0x89/0xc0 [ 522.459883][T20372] do_syscall_64+0x123/0x790 [ 522.461730][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.464190][T20372] [ 522.464190][T20372] -> #1 (func_lock){+.+.}-{4:4}: [ 522.466887][T20372] lock_acquire+0x1d1/0x380 [ 522.468597][T20372] __mutex_lock+0x1a4/0x1bd0 [ 522.470560][T20372] try_get_usb_function_instance+0x26/0x1f0 [ 522.473177][T20372] usb_get_function_instance+0x16/0x70 [ 522.475678][T20372] function_make+0x18c/0x3f0 [ 522.477748][T20372] configfs_mkdir+0x525/0xd40 [ 522.479975][T20372] vfs_mkdir+0x364/0x850 [ 522.481944][T20372] filename_mkdirat+0x48b/0x5e0 [ 522.484164][T20372] __x64_sys_mkdirat+0x89/0xc0 [ 522.486331][T20372] do_syscall_64+0x123/0x790 [ 522.488444][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.491072][T20372] [ 522.491072][T20372] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 522.494401][T20372] check_prev_add+0xeb/0xe60 [ 522.496564][T20372] __lock_acquire+0x1528/0x1f40 [ 522.498746][T20372] lock_acquire+0x1d1/0x380 [ 522.500926][T20372] __mutex_lock+0x1a4/0x1bd0 [ 522.502982][T20372] configfs_rmdir+0x5ae/0x950 [ 522.505247][T20372] vfs_rmdir+0x328/0x8a0 [ 522.507136][T20372] filename_rmdir+0x31a/0x5c0 [ 522.509250][T20372] __x64_sys_rmdir+0x46/0x70 [ 522.511343][T20372] do_syscall_64+0x123/0x790 [ 522.513510][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.516112][T20372] [ 522.516112][T20372] other info that might help us debug this: [ 522.516112][T20372] [ 522.520235][T20372] Chain exists of: [ 522.520235][T20372] gadget_subsys.su_mutex --> tpg_instances_lock --> &sb->s_type->i_mutex_key#33 [ 522.520235][T20372] [ 522.526219][T20372] Possible unsafe locking scenario: [ 522.526219][T20372] [ 522.529220][T20372] CPU0 CPU1 [ 522.531389][T20372] ---- ---- [ 522.533614][T20372] lock(&sb->s_type->i_mutex_key#33); [ 522.536019][T20372] lock(tpg_instances_lock); [ 522.538984][T20372] lock(&sb->s_type->i_mutex_key#33); [ 522.542221][T20372] lock(gadget_subsys.su_mutex); [ 522.544262][T20372] [ 522.544262][T20372] *** DEADLOCK *** [ 522.544262][T20372] [ 522.548104][T20372] locks held by syz.2.5249/20372: 3, last CPU#3: [ 522.551103][T20372] #0: ffff888023f74460 (sb_writers#21){.+.+}-{0:0}, at: filename_rmdir+0x1ff/0x5c0 [ 522.555129][T20372] #1: ffff88803b8969c0 (&default_group_class[depth - 1]#2/1){+.+.}-{4:4}, at: filename_rmdir+0x258/0x5c0 [ 522.560129][T20372] #2: ffff88803adfb0c0 (&sb->s_type->i_mutex_key#33){++++}-{4:4}, at: vfs_rmdir+0xed/0x8a0 [ 522.561238][T12130] Added buffer head 6 to ffff888027f43400 [ 522.561275][T12130] Added buffer head 1 to ffff888027f43400 [ 522.562146][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 522.562209][ T1481] No more buffers in queue [ 522.574230][T20372] [ 522.574230][T20372] stack backtrace: [ 522.576746][T20372] CPU: 3 UID: 0 PID: 20372 Comm: syz.2.5249 Tainted: G L syzkaller #0 PREEMPT(full) [ 522.581020][T20372] Tainted: [L]=SOFTLOCKUP [ 522.582722][T20372] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 522.587518][T20372] Call Trace: [ 522.589379][T20372] [ 522.590639][T20372] dump_stack_lvl+0x100/0x190 [ 522.592573][T20372] print_circular_bug.cold+0x178/0x1be [ 522.594828][T20372] check_noncircular+0x146/0x160 [ 522.596921][T20372] check_prev_add+0xeb/0xe60 [ 522.598780][T20372] ? __bfs+0x150/0x2a0 [ 522.600527][T20372] __lock_acquire+0x1528/0x1f40 [ 522.602496][T20372] lock_acquire+0x1d1/0x380 [ 522.604370][T20372] ? configfs_rmdir+0x5ae/0x950 [ 522.606353][T20372] ? __pfx___might_resched+0x10/0x10 [ 522.608490][T20372] ? __lock_acquire+0x5c0/0x1f40 [ 522.610522][T20372] __mutex_lock+0x1a4/0x1bd0 [ 522.612474][T20372] ? configfs_rmdir+0x5ae/0x950 [ 522.614487][T20372] ? configfs_rmdir+0x5ae/0x950 [ 522.616477][T20372] ? reacquire_held_locks+0xdd/0x1f0 [ 522.618947][T20372] ? __pfx___mutex_lock+0x10/0x10 [ 522.621431][T20372] ? do_raw_spin_lock+0x128/0x260 [ 522.623914][T20372] ? find_held_lock+0x2b/0x80 [ 522.626095][T20372] ? fast_dput+0x2fe/0x6f0 [ 522.627887][T20372] ? do_raw_spin_unlock+0x145/0x1e0 [ 522.629996][T20372] ? _raw_spin_unlock+0x28/0x50 [ 522.631998][T20372] ? fast_dput+0x168/0x6f0 [ 522.633805][T20372] ? configfs_rmdir+0x5ae/0x950 [ 522.635613][T20372] configfs_rmdir+0x5ae/0x950 [ 522.637331][T20372] ? __pfx_configfs_rmdir+0x10/0x10 [ 522.639276][T20372] ? __pfx_down_write+0x10/0x10 [ 522.641129][T20372] vfs_rmdir+0x328/0x8a0 [ 522.642780][T20372] filename_rmdir+0x31a/0x5c0 [ 522.644587][T20372] ? __pfx_filename_rmdir+0x10/0x10 [ 522.646537][T20372] ? do_getname+0x191/0x390 [ 522.648244][T20372] __x64_sys_rmdir+0x46/0x70 [ 522.649921][T20372] do_syscall_64+0x123/0x790 [ 522.651667][T20372] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.653879][T20372] RIP: 0033:0x7f66c8f9e199 [ 522.655712][T20372] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 522.663165][T20372] RSP: 002b:00007f66c9da8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 522.666493][T20372] RAX: ffffffffffffffda RBX: 00007f66c9225fa0 RCX: 00007f66c8f9e199 [ 522.669651][T20372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000140 [ 522.672836][T20372] RBP: 00007f66c90358e0 R08: 0000000000000000 R09: 0000000000000000 [ 522.675498][T20372] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 522.678221][T20372] R13: 00007f66c9226038 R14: 00007f66c9225fa0 R15: 00007ffe0c2aa288 [ 522.681411][T20372] [ 522.685547][T20347] kcov: kcov_task_exit: t = ffff88804b518000, kcov->t = ffff88804b518000 [ 522.685629][T20373] kcov: kcov_start: t = ffff88802c830000, size = 524288, area = ffffc9002caa9000 [ 522.685748][T20349] kcov: kcov_task_exit: t = ffff88803a0f2580, kcov->t = ffff88803a0f2580 [ 522.685828][T20373] bridge0: flushing port ifindex: 0 vlan id: 0 flags: 0x2a flags mask: 0x0 [ 522.685905][T20350] kcov: kcov_task_exit: t = ffff88803a0f0000, kcov->t = ffff88803a0f0000 [ 522.686229][T20372] config_item ffs.usb0: cleaning up [ 522.686257][T20372] unloading [ 522.731198][T20370] sock ffff88803b2fb400, sk ffff88802f3a5000 [ 522.731227][T20370] sk ffff88802f3a5000 state 2 socket ffff88803b2fb400 [ 522.731245][T20370] sk ffff88802f3a5000 state 2 [ 522.731259][T20370] sk ffff88802f3a5000 [ 522.731572][T20372] kcov: kcov_task_exit: t = ffff88805eefcb00, kcov->t = ffff88805eefcb00 [ 522.774663][T12130] Added buffer head 1 to ffff888027f43400 [ 522.774702][T12130] Added buffer head 6 to ffff888027f43400 [ 522.775520][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 522.776633][ T1481] No more buffers in queue [ 522.888434][T20360] kobject: 'switch-0' (ffff888037ee9e80): kobject_uevent_env [ 522.888477][T20360] kobject: 'switch-0' (ffff888037ee9e80): fill_kobj_path: path = '/kernel/sunrpc/xprt-switches/switch-0' [ 522.888538][T20360] kernfs xprt_switch_info: removing [ 522.888560][T20360] kernfs add_xprt: removing [ 522.888610][T20360] kernfs switch-0: removing [ 522.888710][T20360] kcov: kcov_task_exit: t = ffff88802e914b00, kcov->t = ffff88802e914b00 [ 522.890593][T12130] kernfs switch: removing [ 522.890615][T12130] kobject: 'clnt-0' (ffff8880586fd080): kobject_uevent_env [ 522.890645][T12130] kobject: 'clnt-0' (ffff8880586fd080): fill_kobj_path: path = '/kernel/sunrpc/rpc-clients/clnt-0' [ 522.890685][T12130] kernfs rpc_version: removing [ 522.890699][T12130] kernfs program: removing [ 522.890710][T12130] kernfs max_connect: removing [ 522.890721][T12130] kernfs clnt-0: removing [ 522.890732][T12130] kobject: 'clnt-0' (ffff8880586fd080): kobject_cleanup, parent 0000000000000000 [ 522.890742][T12130] kobject: 'clnt-0' (ffff8880586fd080): calling ktype release [ 522.890752][T12130] kobject: 'clnt-0': free name [ 522.890845][T12130] kobject: 'xprt-0-tcp' (ffff888025b89100): kobject_uevent_env [ 522.890860][T12130] kobject: 'xprt-0-tcp' (ffff888025b89100): fill_kobj_path: path = '/switch-0/xprt-0-tcp' [ 522.890929][T12130] kobject: 'switch-0' (ffff888037ee9e80): kobject_cleanup, parent 0000000000000000 [ 522.890939][T12130] kobject: 'switch-0' (ffff888037ee9e80): calling ktype release [ 522.890949][T12130] kobject: 'switch-0': free name [ 522.890956][T12130] kobject: 'xprt-0-tcp' (ffff888025b89100): kobject_cleanup, parent 0000000000000000 [ 522.890966][T12130] kobject: 'xprt-0-tcp' (ffff888025b89100): calling ktype release [ 522.890975][T12130] kobject: 'xprt-0-tcp': free name [ 522.975205][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 3) [ 522.975222][ C2] wireguard: wg1: Handshake for peer 40 (127.0.0.1:20003) did not complete after 20 attempts, giving up [ 522.975276][ C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 522.990011][T12130] Added buffer head 6 to ffff888027f43400 [ 522.990049][T12130] Added buffer head 1 to ffff888027f43400 [ 522.995307][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 523.001741][ T1481] No more buffers in queue [ 523.137828][T20369] nfc: nfc_genl_rcv_nl_event: NETLINK_URELEASE event from id 291 [ 523.138134][T20373] kcov: kcov_task_exit: t = ffff88802c830000, kcov->t = ffff88802c830000 [ 523.138337][T20371] Bluetooth: hci3: Opcode 0x0401 failed: -4 [ 523.138356][T20371] hci3 orig refcnt 6 [ 523.138381][T20371] sock ffff888056593400 sk ffff888057db7000 [ 523.138458][T20371] channel 2 len 10 [ 523.138586][T20371] kcov: kcov_task_exit: t = ffff88803a4aa580, kcov->t = ffff88803a4aa580 [ 523.138593][ T1039] nfc: nfc_urelease_event_work: portid 291 [ 523.187935][ T1481] Added buffer head 1 to ffff888027f43400 [ 523.187961][ T1481] Added buffer head 6 to ffff888027f43400 [ 523.188784][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 523.188828][T12130] No more buffers in queue [ 523.401990][ T1481] Added buffer head 6 to ffff888027f43400 [ 523.402015][ T1481] Added buffer head 1 to ffff888027f43400 [ 523.402850][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 523.402892][T12130] No more buffers in queue [ 523.615252][ C3] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 523.615329][ C3] wireguard: wg1: Handshake for peer 27 (127.0.0.1:20001) did not complete after 5 seconds, retrying (try 14) [ 523.629506][ T1481] Added buffer head 1 to ffff888027f43400 [ 523.629529][ T1481] Added buffer head 6 to ffff888027f43400 [ 523.633827][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 523.640355][T12130] No more buffers in queue [ 523.841377][ T1481] Added buffer head 6 to ffff888027f43400 [ 523.841417][ T1481] Added buffer head 1 to ffff888027f43400 [ 523.842208][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 523.842279][T12130] No more buffers in queue [ 524.055237][ T1481] Added buffer head 1 to ffff888027f43400 [ 524.055280][ T1481] Added buffer head 6 to ffff888027f43400 [ 524.056037][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 524.056092][T12130] No more buffers in queue [ 524.175384][ C0] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 3) [ 524.255217][ C3] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 5) [ 524.268051][ T1481] Added buffer head 6 to ffff888027f43400 [ 524.268082][ T1481] Added buffer head 1 to ffff888027f43400 [ 524.268958][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 524.269063][T12130] No more buffers in queue [ 524.468338][ T1481] Added buffer head 1 to ffff888027f43400 [ 524.468363][ T1481] Added buffer head 6 to ffff888027f43400 [ 524.469169][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 524.469211][T12130] No more buffers in queue [ 524.681628][ T1481] Added buffer head 6 to ffff888027f43400 [ 524.681669][ T1481] Added buffer head 1 to ffff888027f43400 [ 524.682498][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 524.682557][T12130] No more buffers in queue [ 524.895058][ T1481] Added buffer head 1 to ffff888027f43400 [ 524.895095][ T1481] Added buffer head 6 to ffff888027f43400 [ 524.895934][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 524.896016][T12130] No more buffers in queue [ 524.905230][ C3] wireguard: wg0: Handshake for peer 25 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 524.905470][T14691] net_ratelimit: 170 callbacks suppressed [ 524.905484][T14691] wireguard: wg0: Sending handshake initiation to peer 25 (127.0.0.1:20002) [ 524.905771][T14691] wireguard: wg0: No route to 127.0.0.1:20002, error -101 [ 524.975238][ C3] wireguard: wg0: Sending keepalive packet to peer 71 ([::1]:20003/0%0) [ 524.976118][ T2329] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=1) => 00000000 [ 525.108163][ T1481] Added buffer head 6 to ffff888027f43400 [ 525.108227][ T1481] Added buffer head 1 to ffff888027f43400 [ 525.109046][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 525.109096][T12130] No more buffers in queue [ 525.225231][ C2] wireguard: wg0: Sending keepalive packet to peer 64 ([::1]:20002/0%0) [ 525.225279][ C2] wireguard: wg0: Sending keepalive packet to peer 52 ([::1]:20002/0%0) [ 525.228140][T18792] wireguard: wg1: Receiving keepalive packet from peer 54 ([::1]:20001/0%0) [ 525.228250][T19077] wireguard: wg1: Receiving keepalive packet from peer 66 ([::1]:20001/0%0) [ 525.308116][ T1481] Added buffer head 1 to ffff888027f43400 [ 525.308147][ T1481] Added buffer head 6 to ffff888027f43400 [ 525.308909][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 525.308969][T12130] No more buffers in queue [ 525.521577][ T1481] Added buffer head 6 to ffff888027f43400 [ 525.521613][ T1481] Added buffer head 1 to ffff888027f43400 [ 525.522373][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 525.522425][T12130] No more buffers in queue [ 525.535192][ C0] wireguard: wg0: Handshake for peer 71 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 525.535192][ C3] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 525.535285][ C0] wireguard: wg2: Handshake for peer 41 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 2) [ 525.535346][T14691] wireguard: wg2: Sending handshake initiation to peer 42 (127.0.0.1:20002) [ 525.535481][ C3] wireguard: wg2: Sending keepalive packet to peer 74 ([::1]:20001/0%0) [ 525.734803][ T1481] Added buffer head 1 to ffff888027f43400 [ 525.734828][ T1481] Added buffer head 6 to ffff888027f43400 [ 525.737403][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 525.741557][T12130] No more buffers in queue [ 525.948493][ T1481] Added buffer head 6 to ffff888027f43400 [ 525.948531][ T1481] Added buffer head 1 to ffff888027f43400 [ 525.949366][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 525.949434][T12130] No more buffers in queue [ 526.148187][ T1481] Added buffer head 1 to ffff888027f43400 [ 526.148229][ T1481] Added buffer head 6 to ffff888027f43400 [ 526.149083][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 526.149147][T12130] No more buffers in queue [ 526.362011][ T1481] Added buffer head 6 to ffff888027f43400 [ 526.362036][ T1481] Added buffer head 1 to ffff888027f43400 [ 526.362828][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 526.362889][T12130] No more buffers in queue [ 526.575410][ T1481] Added buffer head 1 to ffff888027f43400 [ 526.575472][ T1481] Added buffer head 6 to ffff888027f43400 [ 526.576378][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 526.576429][T12130] No more buffers in queue [ 526.789001][T12130] Added buffer head 6 to ffff888027f43400 [ 526.789040][T12130] Added buffer head 1 to ffff888027f43400 [ 526.789880][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 526.789954][ T1481] No more buffers in queue [ 526.817899][ C0] wireguard: wg1: Handshake for peer 34 (127.0.0.1:20003) did not complete after 20 attempts, giving up [ 526.818326][ C2] wireguard: wg1: Handshake for peer 39 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 4) [ 526.988305][ T1481] Added buffer head 1 to ffff888027f43400 [ 526.988347][ T1481] Added buffer head 6 to ffff888027f43400 [ 526.989165][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 526.989235][T12130] No more buffers in queue [ 527.201827][ T1481] Added buffer head 6 to ffff888027f43400 [ 527.201852][ T1481] Added buffer head 1 to ffff888027f43400 [ 527.202633][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 527.202680][T12130] No more buffers in queue [ 527.415550][ T1481] Added buffer head 1 to ffff888027f43400 [ 527.415586][ T1481] Added buffer head 6 to ffff888027f43400 [ 527.416429][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 527.416489][T12130] No more buffers in queue [ 527.455201][ C0] wireguard: wg0: Handshake for peer 37 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 527.455230][ C2] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 527.455282][ C0] wireguard: wg0: Handshake for peer 31 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 527.628856][ T1481] Added buffer head 6 to ffff888027f43400 [ 527.628882][ T1481] Added buffer head 1 to ffff888027f43400 [ 527.629675][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 527.629740][T12130] No more buffers in queue [ 527.829076][ T1481] Added buffer head 1 to ffff888027f43400 [ 527.829121][ T1481] Added buffer head 6 to ffff888027f43400 [ 527.829950][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 527.830014][T12130] No more buffers in queue [ 528.041686][ T1481] Added buffer head 6 to ffff888027f43400 [ 528.041730][ T1481] Added buffer head 1 to ffff888027f43400 [ 528.042536][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 528.042599][T12130] No more buffers in queue [ 528.105193][ C2] wireguard: wg1: Handshake for peer 33 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 528.268771][ T1481] Added buffer head 1 to ffff888027f43400 [ 528.268795][ T1481] Added buffer head 6 to ffff888027f43400 [ 528.269644][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 528.269700][T12130] No more buffers in queue [ 528.468597][ T1481] Added buffer head 6 to ffff888027f43400 [ 528.468622][ T1481] Added buffer head 1 to ffff888027f43400 [ 528.469429][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 528.469478][T12130] No more buffers in queue [ 528.665198][ C3] wireguard: wg0: Handshake for peer 32 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 528.681734][ T1481] Added buffer head 1 to ffff888027f43400 [ 528.681772][ T1481] Added buffer head 6 to ffff888027f43400 [ 528.682587][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 528.682654][T12130] No more buffers in queue [ 528.745174][ C0] wireguard: wg1: Handshake for peer 28 (127.0.0.1:20003) did not complete after 5 seconds, retrying (try 4) [ 528.745242][ C0] wireguard: wg0: Handshake for peer 26 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 528.745600][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 528.895224][T12130] Added buffer head 6 to ffff888027f43400 [ 528.895263][T12130] Added buffer head 1 to ffff888027f43400 [ 528.896099][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 528.896157][ T1481] No more buffers in queue [ 529.109084][T12130] Added buffer head 1 to ffff888027f43400 [ 529.109120][T12130] Added buffer head 6 to ffff888027f43400 [ 529.109899][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 529.109961][ T1481] No more buffers in queue [ 529.322209][T12130] Added buffer head 6 to ffff888027f43400 [ 529.322247][T12130] Added buffer head 1 to ffff888027f43400 [ 529.323093][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 529.323154][ T1481] No more buffers in queue [ 529.375214][ C2] wireguard: wg1: Handshake for peer 27 (127.0.0.1:20001) did not complete after 5 seconds, retrying (try 15) [ 529.535127][T12130] Added buffer head 1 to ffff888027f43400 [ 529.535218][T12130] Added buffer head 6 to ffff888027f43400 [ 529.536080][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 529.536123][ T1481] No more buffers in queue [ 529.748923][T12130] Added buffer head 6 to ffff888027f43400 [ 529.748962][T12130] Added buffer head 1 to ffff888027f43400 [ 529.749754][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 529.749820][ T1481] No more buffers in queue [ 529.935251][ C2] net_ratelimit: 123 callbacks suppressed [ 529.935275][ C2] wireguard: wg0: Sending keepalive packet to peer 58 ([::1]:20002/0%0) [ 529.935895][T18942] wireguard: wg1: Receiving keepalive packet from peer 60 ([::1]:20001/0%0) [ 529.948432][T12130] Added buffer head 1 to ffff888027f43400 [ 529.948454][T12130] Added buffer head 6 to ffff888027f43400 [ 529.949236][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 529.949296][ T1481] No more buffers in queue [ 530.015203][ C3] wireguard: wg2: Handshake for peer 30 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 4) [ 530.015450][ C3] wireguard: wg2: Handshake for peer 29 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 6) [ 530.015512][ C3] wireguard: wg1: Sending keepalive packet to peer 67 (127.0.0.1:20003) [ 530.015636][T14721] wireguard: wg2: Sending handshake initiation to peer 30 (127.0.0.1:20002) [ 530.015804][T19080] wireguard: wg2: Receiving keepalive packet from peer 69 (127.0.0.1:20002) [ 530.015841][T14721] wireguard: wg2: No route to 127.0.0.1:20002, error -101 [ 530.015858][ T224] wireguard: wg2: Sending handshake initiation to peer 29 ([::1]:20001/0%0) [ 530.015994][ T224] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 530.016011][ T224] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 530.016023][ T224] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 530.161787][T12130] Added buffer head 6 to ffff888027f43400 [ 530.161812][T12130] Added buffer head 1 to ffff888027f43400 [ 530.162646][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 530.162698][ T1481] No more buffers in queue [ 530.376050][T12130] Added buffer head 1 to ffff888027f43400 [ 530.376091][T12130] Added buffer head 6 to ffff888027f43400 [ 530.376949][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 530.377011][ T1481] No more buffers in queue [ 530.588592][T12130] Added buffer head 6 to ffff888027f43400 [ 530.588631][T12130] Added buffer head 1 to ffff888027f43400 [ 530.589483][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 530.589549][ T1481] No more buffers in queue [ 530.655180][ C0] wireguard: wg2: Handshake for peer 41 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 3) [ 530.655208][ C2] wireguard: wg0: Handshake for peer 25 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 2) [ 530.656151][ T224] nf_nat: Already setup manip DST for ct ffff888027150f00 (status bits 0x188) [ 530.656176][ T224] nf_nat: Already setup manip SRC for ct ffff888027150f00 (status bits 0x188) [ 530.788842][T12130] Added buffer head 1 to ffff888027f43400 [ 530.788867][T12130] Added buffer head 6 to ffff888027f43400 [ 530.789661][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 530.789728][ T1481] No more buffers in queue [ 531.002065][T12130] Added buffer head 6 to ffff888027f43400 [ 531.002095][T12130] Added buffer head 1 to ffff888027f43400 [ 531.002946][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 531.003009][ T1481] No more buffers in queue [ 531.215954][T12130] Added buffer head 1 to ffff888027f43400 [ 531.215996][T12130] Added buffer head 6 to ffff888027f43400 [ 531.216844][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 531.216893][ T1481] No more buffers in queue [ 531.295225][ C0] wireguard: wg2: Handshake for peer 42 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 5) [ 531.295312][ C0] wireguard: wg0: Handshake for peer 71 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 531.428862][T12130] Added buffer head 6 to ffff888027f43400 [ 531.428901][T12130] Added buffer head 1 to ffff888027f43400 [ 531.429719][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 531.429782][ T1481] No more buffers in queue [ 531.628667][T12130] Added buffer head 1 to ffff888027f43400 [ 531.628691][T12130] Added buffer head 6 to ffff888027f43400 [ 531.629566][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 531.629627][ T1481] No more buffers in queue [ 531.841984][T12130] Added buffer head 6 to ffff888027f43400 [ 531.842008][T12130] Added buffer head 1 to ffff888027f43400 [ 531.842831][ C0] virtqueue callback for ffff888027f43400 (ffffffff8665fe00) [ 531.842882][ T1481] No more buffers in queue [ 531.938033][ T13] kernfs bonding_masters: removing [ 531.938249][ T13] wireguard: wg2: Creating namespace exiting [ 531.938407][ T13] wireguard: wg1: Creating namespace exiting [ 531.938511][ T13] wireguard: wg0: Creating namespace exiting [ 531.938647][ T13] kernfs bridge_slave_1: removing [ 531.938666][ T13] bridge_slave_1: left allmulticast mode [ 531.938681][ T13] bridge_slave_1: left promiscuous mode [ 531.938789][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.938802][ T13] bridge0: port 2(bridge_slave_1) event 16 [ 531.938825][ T13] bridge0: br_fill_ifinfo event 16 port bridge_slave_1 master bridge0 [ 531.939012][ T13] bridge0: port 2(bridge_slave_1) event 17 [ 531.939035][ T13] bridge0: br_fill_ifinfo event 17 port bridge_slave_1 master bridge0 [ 531.939307][ T13] bridge_slave_1: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 531.939333][ T13] net bridge_slave_1: siw: event 27 [ 531.939371][ T13] Remove adjacency: dev bridge_slave_1 adj_dev bridge0 ref_nr 1 [ 531.939388][ T13] kernfs master: removing [ 531.939436][ T13] kernfs upper_bridge0: removing [ 531.939450][ T13] adjacency: dev_put for bridge0, because link removed from bridge_slave_1 to bridge0 [ 531.939468][ T13] Remove adjacency: dev bridge0 adj_dev bridge_slave_1 ref_nr 1 [ 531.939485][ T13] kernfs lower_bridge_slave_1: removing [ 531.939503][ T13] adjacency: dev_put for bridge_slave_1, because link removed from bridge0 to bridge_slave_1 [ 531.939643][ T13] bridge_slave_1: bond_netdev_event received NETDEV_CHANGEUPPER [ 531.939662][ T13] net bridge_slave_1: siw: event 22 [ 531.939909][ T13] kobject: 'brport' (ffff888014287160): kobject_uevent_env [ 531.939925][ T13] kobject: 'brport' (ffff888014287160): kobject_uevent_env: filter function caused the event to drop! [ 531.939941][ T13] kernfs brport: removing [ 531.940181][ T13] kernfs bridge_slave_0: removing [ 531.940201][ T13] bridge_slave_0: left allmulticast mode [ 531.940214][ T13] bridge_slave_0: left promiscuous mode [ 531.940291][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.940300][ T13] bridge0: port 1(bridge_slave_0) event 16 [ 531.940315][ T13] bridge0: br_fill_ifinfo event 16 port bridge_slave_0 master bridge0 [ 531.940463][ T13] bridge0: port 1(bridge_slave_0) event 17 [ 531.940478][ T13] bridge0: br_fill_ifinfo event 17 port bridge_slave_0 master bridge0 [ 531.941772][ T13] bridge_slave_0: bond_netdev_event received NETDEV_PRECHANGEUPPER [ 531.941787][ T13] net bridge_slave_0: siw: event 27 [ 531.941804][ T13] Remove adjacency: dev bridge_slave_0 adj_dev bridge0 ref_nr 1 [ 531.941815][ T13] kernfs master: removing [ 531.941832][ T13] kernfs upper_bridge0: removing [ 531.941843][ T13] adjacency: dev_put for bridge0, because link removed from bridge_slave_0 to bridge0 [ 531.941853][ T13] Remove adjacency: dev bridge0 adj_dev bridge_slave_0 ref_nr 1 [ 531.941864][ T13] kernfs lower_bridge_slave_0: removing [ 531.941875][ T13] adjacency: dev_put for bridge_slave_0, because link removed from bridge0 to bridge_slave_0 [ 531.941940][ T13] bridge_slave_0: bond_netdev_event received NETDEV_CHANGEUPPER [ 531.941952][ T13] net bridge_slave_0: siw: event 22 [ 531.942892][ T13] kobject: 'brport' (ffff888035c15160): kobject_uevent_env [ 531.942904][ T13] kobject: 'brport' (ffff888035c15160): kobject_uevent_env: filter function caused the event to drop! [ 531.942915][ T13] kernfs brport: removing [ 531.943099][ T13] bridge0: toggle option: 10 state: 0 -> 0 [ 531.943147][ T13] kobject: 'brif' (ffff88803e072280): kobject_cleanup, parent ffff88802ee047c0 [ 531.943157][ T13] kobject: 'brif' (ffff88803e072280): auto cleanup kobject_del [ 531.943165][ T13] kernfs brif: removing [ 531.943177][ T13] kobject: 'brif' (ffff88803e072280): calling ktype release [ 531.943185][ T13] kobject: (ffff88803e072280): dynamic_kobj_release [ 531.943194][ T13] kobject: 'brif': free name [ 531.943202][ T13] kernfs brforward: removing [ 531.943216][ T13] kernfs forward_delay: removing [ 531.943230][ T13] kernfs hello_time: removing [ 531.943241][ T13] kernfs max_age: removing [ 531.943252][ T13] kernfs ageing_time: removing [ 531.943263][ T13] kernfs stp_state: removing [ 531.943274][ T13] kernfs group_fwd_mask: removing [ 531.943286][ T13] kernfs priority: removing [ 531.943297][ T13] kernfs bridge_id: removing [ 531.943307][ T13] kernfs root_id: removing [ 531.943318][ T13] kernfs root_path_cost: removing [ 531.943333][ T13] kernfs root_port: removing [ 531.943344][ T13] kernfs topology_change: removing [ 531.943356][ T13] kernfs topology_change_detected: removing [ 531.943367][ T13] kernfs hello_timer: removing [ 531.943378][ T13] kernfs tcn_timer: removing [ 531.943389][ T13] kernfs topology_change_timer: removing [ 531.943423][ T13] kernfs gc_timer: removing [ 531.943434][ T13] kernfs group_addr: removing [ 531.943445][ T13] kernfs flush: removing [ 531.943456][ T13] kernfs no_linklocal_learn: removing [ 531.943467][ T13] kernfs multicast_router: removing [ 531.943478][ T13] kernfs multicast_snooping: removing [ 531.943492][ T13] kernfs multicast_querier: removing [ 531.943503][ T13] kernfs multicast_query_use_ifaddr: removing [ 531.943515][ T13] kernfs hash_elasticity: removing [ 531.943526][ T13] kernfs hash_max: removing [ 531.943537][ T13] kernfs multicast_last_member_count: removing [ 531.943549][ T13] kernfs multicast_startup_query_count: removing [ 531.943561][ T13] kernfs multicast_last_member_interval: removing [ 531.943572][ T13] kernfs multicast_membership_interval: removing [ 531.943589][ T13] kernfs multicast_querier_interval: removing [ 531.943600][ T13] kernfs multicast_query_interval: removing [ 531.943611][ T13] kernfs multicast_query_response_interval: removing [ 531.943623][ T13] kernfs multicast_startup_query_interval: removing [ 531.943635][ T13] kernfs multicast_stats_enabled: removing [ 531.943647][ T13] kernfs multicast_igmp_version: removing [ 531.943659][ T13] kernfs multicast_mld_version: removing [ 531.943670][ T13] kernfs nf_call_iptables: removing [ 531.943681][ T13] kernfs nf_call_ip6tables: removing [ 531.943692][ T13] kernfs nf_call_arptables: removing [ 531.943703][ T13] kernfs vlan_filtering: removing [ 531.943714][ T13] kernfs vlan_protocol: removing [ 531.943725][ T13] kernfs default_pvid: removing [ 531.943736][ T13] kernfs vlan_stats_enabled: removing [ 531.943747][ T13] kernfs vlan_stats_per_port: removing [ 531.943758][ T13] kernfs bridge: removing [ 531.944071][ T13] In tnode_resize ffff88803c0ad420 inflate_threshold=50 threshold=25 [ 531.944223][ T13] In tnode_resize ffff88802c01f420 inflate_threshold=50 threshold=25 [ 531.944351][ T13] In tnode_resize ffff88804aca9c20 inflate_threshold=50 threshold=25 [ 531.944364][ T13] In tnode_resize ffff888023e7d620 inflate_threshold=50 threshold=25 [ 531.944388][ T13] In tnode_resize ffff8880267c36a0 inflate_threshold=50 threshold=25 [ 531.944399][ T13] In tnode_resize ffff888022771720 inflate_threshold=50 threshold=25 [ 531.944410][ T13] In tnode_resize ffff888033e4cea0 inflate_threshold=50 threshold=25 [ 531.944421][ T13] trie_flush found=108 [ 531.944560][ T13] trie_flush found=49 [ 531.944636][ T13] ip6gre0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944649][ T13] net ip6gre0: siw: event 10 [ 531.944669][ T13] ip6gretap0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944679][ T13] net ip6gretap0: siw: event 10 [ 531.944696][ T13] ip6tnl0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944706][ T13] net ip6tnl0: siw: event 10 [ 531.944722][ T13] sit0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944732][ T13] net sit0: siw: event 10 [ 531.944748][ T13] sit1: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944758][ T13] net sit1: siw: event 10 [ 531.944775][ T13] ip6_vti0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944784][ T13] net ip6_vti0: siw: event 10 [ 531.944800][ T13] xfrm0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944811][ T13] net xfrm0: siw: event 10 [ 531.944827][ T13] ip_vti0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944837][ T13] net ip_vti0: siw: event 10 [ 531.944853][ T13] erspan0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944863][ T13] net erspan0: siw: event 10 [ 531.944879][ T13] gretap0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944889][ T13] net gretap0: siw: event 10 [ 531.944905][ T13] gre0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944915][ T13] net gre0: siw: event 10 [ 531.944932][ T13] tunl0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944941][ T13] net tunl0: siw: event 10 [ 531.944958][ T13] geneve1: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944968][ T13] net geneve1: siw: event 10 [ 531.944984][ T13] geneve0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.944994][ T13] net geneve0: siw: event 10 [ 531.945060][ T13] bridge0: bond_netdev_event received NETDEV_GOING_DOWN [ 531.945074][ T13] net bridge0: siw: event 10 [ 531.947778][ T13] ip6gre0: bond_netdev_event received NETDEV_DOWN [ 531.947794][ T13] net ip6gre0: siw: event 2 [ 531.947813][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.947855][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.947924][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.947931][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.947939][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.947948][ T13] IPv6: fixing tree: plen=127 iter=1 [ 531.947955][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.947962][ T13] IPv6: fixing tree: plen=125 iter=2 [ 531.948028][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948035][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.948042][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.948050][ T13] IPv6: fixing tree: plen=69 iter=1 [ 531.948057][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.948064][ T13] IPv6: fixing tree: plen=67 iter=2 [ 531.948092][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948400][ T13] ip6gretap0: bond_netdev_event received NETDEV_DOWN [ 531.948486][ T13] net ip6gretap0: siw: event 2 [ 531.948501][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948535][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948593][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948601][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.948608][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.948616][ T13] IPv6: fixing tree: plen=125 iter=1 [ 531.948622][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.948630][ T13] IPv6: fixing tree: plen=124 iter=2 [ 531.948681][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.948691][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.948702][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.948717][ T13] IPv6: fixing tree: plen=124 iter=1 [ 531.948727][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.948740][ T13] IPv6: fixing tree: plen=123 iter=2 [ 531.948798][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949214][ T13] ip6tnl0: bond_netdev_event received NETDEV_DOWN [ 531.949226][ T13] net ip6tnl0: siw: event 2 [ 531.949269][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949304][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949354][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949361][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.949368][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.949376][ T13] IPv6: fixing tree: plen=124 iter=1 [ 531.949383][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.949390][ T13] IPv6: fixing tree: plen=123 iter=2 [ 531.949429][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949436][ T13] IPv6: fixing tree: plen=128 iter=0 [ 531.949442][ T13] IPv6: W ffffc90000107390 adjusted by delnode 1, s=4/2 [ 531.949451][ T13] IPv6: fixing tree: plen=68 iter=1 [ 531.949457][ T13] IPv6: W ffffc90000107390 adjusted by delnode 2, s=2 [ 531.949464][ T13] IPv6: fixing tree: plen=66 iter=2 [ 531.949498][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949907][ T13] sit0: bond_netdev_event received NETDEV_DOWN [ 531.949921][ T13] net sit0: siw: event 2 [ 531.949934][ T13] IPv6: walker ffffc90000107390 adjusted by delroute [ 531.949964][ T13] IPv6: walker ffffc90000107390 adjusted by delroute