last executing test programs: 3m25.049692468s ago: executing program 2 (id=1748): setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r0 = gettid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x28f41000) remap_file_pages(&(0x7f00005fd000/0x4000)=nil, 0x4000, 0x0, 0x5, 0x20) mbind(&(0x7f0000000000/0x600000)=nil, 0x600006, 0x8003, &(0x7f0000000000)=0x6, 0x8, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000b00)='net/rpc\x00') openat(r1, &(0x7f0000000c00)='auth.unix.ip/channel\x00', 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00012abd7000ffdbdf255a000000", @ANYRES32=0x0], 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20040010) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x0, 0x0) r4 = openat(r3, &(0x7f0000000140)='bus/pci/devices/0000:00:1f.3\x00', 0x0, 0x0) r5 = openat(r4, &(0x7f0000000180)='driver/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000200)='0000:00:1f.3\n', 0xd) close(r5) openat(r4, &(0x7f0000000240)='driver_override\x00', 0x1, 0x0) close(r4) r6 = openat(r3, &(0x7f0000000300)='bus/pci/drivers/thunderbolt/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:1f.3\n\x00', 0xd) close(r6) 3m24.632475267s ago: executing program 2 (id=1756): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000000)=@x86={0x4, 0x5, 0x17, 0x0, 0x3, 0xf9, 0x2, 0x79, 0xff, 0x88, 0x1, 0x1, 0x0, 0x8, 0x1, 0x8, 0x2, 0x3, 0xba, '\x00', 0x3}) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2000009, 0x200000005c832, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m24.444032943s ago: executing program 2 (id=1759): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) timer_settime(0x0, 0x0, &(0x7f0000000500)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f00000001c0)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 3m24.285600517s ago: executing program 2 (id=1761): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(&(0x7f0000000280)='./file0/../file0\x00', &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x1000, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x11050ca, 0x0) umount2(&(0x7f00000001c0)='./file0/../file0\x00', 0xa) 3m24.251714347s ago: executing program 2 (id=1762): r0 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x62, 0x37, 0x34, 0x30, 0x65, 0x35, 0x36, 0x65, 0x30, 0x66, 0x64, 0x65, 0x31, 0x38, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x36}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @desc4}, &(0x7f0000000640)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889900bbccddeeff", 0x34}, 0x48, r0) keyctl$get_persistent(0x16, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000180), &(0x7f0000000200)={'fscrypt:', @auto=[0x37, 0x30, 0x39, 0x30, 0x30, 0x39, 0x30, 0x35, 0x30, 0x32, 0x65, 0x30, 0x30, 0x30, 0x66, 0x34]}, &(0x7f0000000100)={0x0, "0011223344550500000000000000eeff00112205445566778899aabbda03000000000000445566778899aabbccddeeff0000000000000000000000000300", 0x40}, 0x48, r0) add_key$user(&(0x7f00000008c0), &(0x7f0000000900)={'syz', 0x1}, &(0x7f0000000a00)='v', 0x1, r0) add_key$fscrypt_v1(&(0x7f00000009c0), &(0x7f0000000240)={'fscrypt:', @auto=[0x64, 0x30, 0x30, 0x30, 0x37, 0x32, 0x30, 0x65, 0x30, 0x61, 0x34, 0x61, 0x30, 0x30, 0x66, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r0) add_key$fscrypt_v1(&(0x7f00000004c0), &(0x7f0000000500)={'fscrypt:', @desc3}, &(0x7f00000006c0)={0x0, "ad87652fcd9e264d4c430dcb7011e3133727accc2c218f16422462edfe8abe7761a89d75dae8f2b74b94b489cefb28065be018b8f9d0d40fd3879ef24240cc2c", 0x3f}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x64, 0x34, 0x63, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x31, 0x30, 0x30, 0x37, 0x30, 0x62, 0x35, 0x39, 0x51, 0x62, 0x35, 0x30, 0x64, 0x30, 0x30, 0x37]}, &(0x7f0000000580)={0x0, "001122334455668899c8bbccddeeff000000cf0000000000000000000000000000000000000000000000002100000000000000000000000077abfff700", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000300), &(0x7f0000000600)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x39, 0x5e, 0x30, 0x34, 0x63, 0x34, 0x61, 0x30, 0x66, 0x35, 0x65, 0x36, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00ff00112233445566778899aabbccddeeff00", 0x1e}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x30, 0x39, 0x30, 0x61, 0x30, 0x61, 0x30, 0x39, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000440), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x37, 0x62, 0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x34, 0x30, 0x37, 0x63, 0x66, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff0011223344556677878d486ca0bac53400112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000780), &(0x7f00000007c0)={'fscrypt:', @desc2}, &(0x7f0000000940)={0x0, "ef109787d612ac11b41aa4b4b5be49eb1291f124fc3f4e619e7250f4ebd6b550758a2888f4acea75da290d48fac1c3806dab2a63b5c987489ac0a6db7464e61e", 0x35}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x39, 0x62, 0x61, 0x30, 0x39, 0x32, 0x63, 0x30, 0x30, 0x33, 0x62, 0x30, 0x35, 0x33, 0x62]}, &(0x7f0000000100)={0x0, "00112233100000008899aabbccddeeff00112233445566fd8899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aebbccddeeff", 0x8040}, 0x48, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x37, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39, 0x64, 0x39, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$keyring(&(0x7f0000000740), &(0x7f0000000840)={'syz', 0x1}, 0x0, 0x0, r0) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x61, 0x32, 0x35, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35, 0x36, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r0) add_key$user(&(0x7f0000000000), 0x0, &(0x7f00000000c0)='c', 0x1, r0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000900)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r1, &(0x7f0000002980)={0x2020}, 0x2020) 3m23.85186401s ago: executing program 2 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x0, 0x2}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m23.792345951s ago: executing program 32 (id=1768): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x0, 0x2}, {'\x00', "0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500"}}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000040)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e0000002ebe660f38049f9e0064f30fc7b000101f20f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f08b8f4008ee0", 0x5b}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m4.613702518s ago: executing program 3 (id=3202): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x3000, 0x7, &(0x7f0000ffd000/0x3000)=nil) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x2}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f00007fe000/0x800000)=nil) 1m4.257379832s ago: executing program 3 (id=3205): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, &(0x7f0000000180)=0xfffffffa, 0x4) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r3, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="3abb87518784cda676", 0x9}], 0x1}}], 0x400015b, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r3, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m3.926313903s ago: executing program 3 (id=3209): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x1100, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x1000, 0x4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 1m3.768862551s ago: executing program 3 (id=3211): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mmap(&(0x7f0000800000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r1, &(0x7f0000000180)='p:s/p ./file0:0', 0xf) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/s/p/enable\x00', 0x1, 0x0) syz_clone(0x2000, &(0x7f0000000340)="129efba091dba22d6f535a9262a02aeb3e989c13510f8bcd89b079ba95e1716eaaf1774e932d0226fd3c00aff529480e7eb0d305b2bfa1f36eb6af105b1251fb9995d54125ebc0f7dfb63902dfa3ccb59ed65321c3a2b95a68a866c99d1c59f02b44270bacfb435a89934f2601c14bc19234d43fc1d39091dc8d013d5649b54e1b47", 0x82, 0x0, &(0x7f00000004c0), 0x0) write(r2, &(0x7f0000000240)='1', 0x1) 1m3.349463748s ago: executing program 3 (id=3215): ioctl$TFD_IOC_SET_TICKS(0xffffffffffffffff, 0x40085400, &(0x7f00000006c0)=0x2) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = fanotify_init(0x200, 0x0) fanotify_mark(r1, 0x1, 0x12, r0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r2 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0xbda2, 0x1c080, 0x1, 0x88}) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000000)='source', 0x0, 0x0) io_uring_enter(r2, 0x2219, 0x9fb0, 0x16, 0x0, 0x0) 1m2.140088976s ago: executing program 3 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="260f11120f798371f0b809008ec8ba2000ec0f2314f30f32f36f66b9bd09000066b80e00000066ba000000000f30f0820200662622c5", 0x36}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1m2.043590662s ago: executing program 33 (id=3220): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="260f11120f798371f0b809008ec8ba2000ec0f2314f30f32f36f66b9bd09000066b80e00000066ba000000000f30f0820200662622c5", 0x36}], 0x1, 0x1b, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000007c0)=[@text32={0x20, 0x0}], 0x1, 0x9, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 47.757283105s ago: executing program 4 (id=3322): openat$snapshot(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) r0 = landlock_create_ruleset(&(0x7f0000000380)={0x7b36}, 0x30, 0x0) landlock_restrict_self(r0, 0xe) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000d88000/0x1000)=nil, &(0x7f00007f2000/0x2000)=nil, &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24058041) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc8a1, 0xc000, 0x8, 0xc1}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="16"], 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) 47.593514945s ago: executing program 4 (id=3325): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0xc7) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0xc0406618, 0x0) 47.535606293s ago: executing program 4 (id=3327): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mnt\x00', 0xa1) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, 0x0) 47.493792024s ago: executing program 4 (id=3328): mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x12, 0x8031, 0xffffffffffffffff, 0x6a855000) r0 = open(&(0x7f0000000040)='.\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="1000000002"], 0x513300) 47.234447677s ago: executing program 4 (id=3331): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000200)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x8, 0x0) chdir(&(0x7f00000000c0)='./file1\x00') ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 47.155703619s ago: executing program 4 (id=3332): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r0}, 0x9) 42.880573788s ago: executing program 1 (id=3365): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_smc(0x2b, 0x1, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x4, 0x0, 0x8000, 0x4, 0x10000000000001}, 0x0, &(0x7f00000002c0)={0x1ff, 0x6, 0xffffffffffffffff, 0x9, 0x4, 0xf, 0x80000006}, 0x0, 0x0) 41.99134637s ago: executing program 1 (id=3385): mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./sys\x00', &(0x7f0000000540)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='rtsx_usb_ms\x00', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='pcspkr\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/platform/devices/pcspkr/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000600)='auto\x00', 0x5) nanosleep(&(0x7f0000000640)={0x0, 0x1dcd6500}, 0x0) write(r2, &(0x7f0000000680)='on\x00', 0x3) 41.401716472s ago: executing program 1 (id=3392): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff9080edc4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x4, 0x2}}, 0x50) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x2c) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="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", 0x2000, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)={0xb0, 0x0, 0xfffffffffffffff9, [{{0x20000003, 0x8, 0x4, 0x8, 0xbc88, 0x9, {0x4, 0x5, 0x5, 0x6, 0x3, 0x12e, 0x7, 0x8, 0xf7fffffa, 0xc000, 0x0, r2, r3, 0x80, 0x8}}, {0xffffdfffffffffff, 0x401, 0x6, 0x3, '\x9e\xaf\x82\xa7\x13&'}}]}, 0x0, 0x0, 0x0}) getdents64(r4, 0x0, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000000)={0x2f, 0x6, 0x0, {0x1, 0x20000003, 0x6, 0x0, '\x9e\xaf\x82\xa7\x13&'}}, 0x2f) 41.297469116s ago: executing program 1 (id=3394): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x53) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x1000001, 0x4c032, 0xffffffffffffffff, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r1, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[0x4], 0x0, 0xec6f, 0x1, 0x1}}, 0x40) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='fdinfo/3\x00') preadv(r2, &(0x7f0000000c40)=[{&(0x7f0000000140)=""/127, 0x7f}], 0x1, 0x0, 0x1) 41.188452136s ago: executing program 1 (id=3395): mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f00000001c0)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f00000002c0)='.\x00', 0x101000, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) r1 = syz_open_procfs(0x0, 0x0) getdents64(r1, 0x0, 0x0) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000200)='debugfs\x00', 0x0, 0x0) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, 0x0) 41.149743265s ago: executing program 1 (id=3397): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close(0xffffffffffffffff) openat(r1, &(0x7f0000000040)='./proc\x00', 0x0, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) 31.977543199s ago: executing program 34 (id=3332): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r1) syz_open_procfs$namespace(0x0, &(0x7f0000000300)='ns/net\x00') r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r2, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000d00)={0x0, 0x0}, 0x8) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000380)=r3, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, r0}, 0x9) 25.956305018s ago: executing program 35 (id=3397): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r1, &(0x7f0000000000)='3', 0x4e) close(0xffffffffffffffff) openat(r1, &(0x7f0000000040)='./proc\x00', 0x0, 0x48) syz_open_dev$tty20(0xc, 0x4, 0x1) 16.360411826s ago: executing program 0 (id=3576): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0xfffffe14) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r3 = openat(0xffffffffffffff9c, 0x0, 0x20c01, 0x0) dup3(r1, r3, 0x6700000000000000) close_range(r0, 0xffffffffffffffff, 0x0) lchown(&(0x7f00000001c0)='./file0\x00', 0xee00, 0x0) 16.287593547s ago: executing program 0 (id=3578): r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, 0x0) r2 = dup(r1) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000000)={0x1, r2}) exit(0xffff) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 15.404159464s ago: executing program 0 (id=3591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f0000000040)="0f01cb650f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed", 0x32}], 0x1, 0x4498bda7e2139f51, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000240)={[{0x2, 0x5, 0x9b, 0x1, 0x0, 0x5f, 0x9, 0x20, 0xa7, 0x0, 0x5, 0x9, 0x4554}, {0x0, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0xce, 0x0, 0x4, 0xbf, 0x0, 0xf5, 0x800000000000000}, {0xff7fff01, 0x6, 0x8, 0x0, 0x4, 0x1, 0x7, 0xfe, 0x7, 0x8, 0x7a, 0x1, 0x1000000000000004}], 0x7}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000003c0)={[0x0, 0x0, 0x8000, 0x40, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffe, 0x5, 0x7fff, 0x1000200004, 0x3, 0x2, 0x0, 0x1], 0x8080000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15.145813535s ago: executing program 0 (id=3595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000183, 0x2, 0x7, 0xf2, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x8000b, 0x7, 0xfffffffffffffff8, 0x9, 0x4], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/memory.limit_in_bytes\x00', 0x2, 0x0) write(r3, &(0x7f0000000080)='4', 0x1) 13.424851665s ago: executing program 0 (id=3603): syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 12.65043246s ago: executing program 0 (id=3610): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x1d, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) mkdir(&(0x7f0000000100)='./my_sysfs\x00', 0x171) mount(0x0, &(0x7f0000000040)='./my_sysfs\x00', &(0x7f0000000300)='sysfs\x00', 0x1, 0x0) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f00000000c0)='sysfs\x00', 0x80, 0x0) 1.401277674s ago: executing program 5 (id=3708): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000100)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0}) ioctl$IOMMU_HWPT_ALLOC$NONE(r0, 0x3b89, &(0x7f0000000180)={0x28, 0x1, r3, r1, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)}) ioctl$IOMMU_HWPT_ALLOC$TEST(r0, 0x3b89, &(0x7f0000000200)={0x28, 0x0, r3, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000240)}) ioctl$IOMMU_HWPT_INVALIDATE$TEST(r0, 0x3b8d, &(0x7f0000000280)={0x20, r5, &(0x7f00000002c0)=[{}], 0xdeadbeef, 0x8, 0x1}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000300)={0x8, r5}) ioctl$IOMMU_DESTROY$hwpt(r0, 0x3b80, &(0x7f0000000340)={0x8, r4}) ioctl$IOMMU_GET_HW_INFO(r0, 0x3b8a, &(0x7f0000000380)={0x24, 0x0, r3, 0x1c, &(0x7f00000003c0)=""/28}) ioctl$IOMMU_DESTROY$stdev(r0, 0x3b80, &(0x7f0000000400)={0x8, r2}) ioctl$IOMMU_DESTROY$ioas(r0, 0x3b80, &(0x7f0000000440)={0x8, r1}) close(r0) 1.380090261s ago: executing program 5 (id=3709): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x68) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000680)=ANY=[@ANYBLOB="4400000010000104fcfffffffbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="0315000004000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r5, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x90a2c342030985a5}, 0x40) 1.020040748s ago: executing program 5 (id=3714): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x4, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x0, {}, 0x1, 0xffffffffffffffff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x810) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4000890}, 0x4000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.019878725s ago: executing program 6 (id=3715): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(0x0, &(0x7f0000000040)='./file1\x00', 0x0, 0x200000, 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) writev(r1, &(0x7f0000000400)=[{&(0x7f0000000340)='kP', 0x2}], 0x1) 971.133953ms ago: executing program 5 (id=3716): mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./my_configfs/target/dbroot\x00', 0x1, 0x0) openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1978, &(0x7f0000000040)={0x0, 0xca72, 0x1cc91, 0x0, 0x20002fb}) r1 = socket$inet(0x2, 0x80001, 0x84) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x130, 0x0, 0x2, {0x1, 0x0, 0x0, '\x00', {0x9ca7a16b958dcf33, 0x8001, 0xffffffffffffffff, 0xfffffff3, 0x0, 0x0, 0x2000, '\x00', 0xfffffffffffdfffe, 0x0, 0xffffffffffffc2f3, 0x0, {0xfffffffffffffffd, 0xfffffffc}, {0x5}, {0x0, 0x4}, {0x5, 0xfffffffe}, 0x62, 0x0, 0x7fff}}}}) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000300)=0x8) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 954.072309ms ago: executing program 7 (id=3717): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x8080, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0x605, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x1, 0x0, 0x1}}]}}]}, 0x44}}, 0x4084) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@newqdisc={0x170, 0x24, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0x1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x140, 0x2, [@TCA_GRED_PARMS={0x38, 0x1, {0x1000, 0x0, 0x64, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1}}, @TCA_GRED_STAB={0x104}]}}]}, 0x170}}, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000100)={'syzkaller0\x00', 0x1}) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='syzkaller0\x00', 0xb) read(r1, &(0x7f0000000000)=""/41, 0x29) sendto$inet(r4, 0x0, 0x0, 0x0, &(0x7f0000000900)={0x2, 0x4e20, @loopback}, 0x10) 944.189337ms ago: executing program 5 (id=3718): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r1 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r2 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r0, r3, 0x25, 0x0, @val=@netkit={@void, @value=r0}}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x4) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r5, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x66) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5800000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00030000057e010008000a00", @ANYRES32=r6, @ANYBLOB="280012800900010076657468"], 0x58}, 0x1, 0x0, 0x0, 0x2000c0c1}, 0x0) 851.738143ms ago: executing program 6 (id=3719): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4102}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) setsockopt$sock_attach_bpf(r2, 0x107, 0xf, &(0x7f0000000600), 0x56) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=@newqdisc={0x54, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0x4}, {0xffff, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x24, 0x2, [@TCA_CAKE_AUTORATE={0x8, 0x9, 0x7fffffff}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x2}, @TCA_CAKE_NAT={0x8, 0xb, 0x1}, @TCA_CAKE_MEMORY={0x8, 0xa, 0x3}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x40040e0}, 0x0) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000580)=@xdp={0x2c, 0x0, r4, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200e61114120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0xfdef}], 0x1, 0x0, 0x0, 0x1000000}, 0x0) 690.924756ms ago: executing program 5 (id=3720): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000000140)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$kcm(0x23, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) recvmsg$kcm(r1, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000240)=0x9, 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="1c0000f500000000000000862dfdff00000065"], 0x78) 690.756511ms ago: executing program 6 (id=3721): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000020000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000008000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000003f000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="400401000000000008000a00", @ANYRES32=r3], 0x50}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01"], 0x3c}}, 0x0) 574.405473ms ago: executing program 7 (id=3722): mkdirat(0xffffffffffffff9c, 0x0, 0x180) mount(0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x40001, 0x113) write(r0, 0x0, 0x0) shmctl$IPC_INFO(0x0, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, @xdp}, 0x70) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000002200)={r3, r2, 0x25, 0x0, @val=@netfilter={0x0, 0x0, 0x6}}, 0x20) syz_emit_ethernet(0x1392, &(0x7f0000002bc0)=ANY=[], 0x0) rt_sigprocmask(0x1, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 453.637064ms ago: executing program 7 (id=3723): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x7, 0x2, 0x1}}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2b, 0x2, {0x0, 0x0, 0x0, r7, {0x0, 0xffff}, {}, {0xd, 0xffe0}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_TO={0x8}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000b00)=@newqdisc={0x24, 0x29, 0x4ee4e6a52ff56541, 0x4001, 0xfffdfdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xffff, 0xfff2}}}, 0x24}, 0x1, 0x1000000, 0x0, 0x400c0}, 0x44840) 409.021086ms ago: executing program 6 (id=3724): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000000000020000000000000000850000001700000095"], &(0x7f00000005c0)='GPL\x00'}, 0x94) r4 = socket(0x10, 0x803, 0x8) sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x2d}, 0x1, 0x0, 0x0, 0x8801}, 0x8000) r5 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r4, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r6, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x40000) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000001c0)={r3, r6, 0x25, 0x0, @val=@netkit={@void, @value=r3}}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=r2, @ANYBLOB="46ff0f00000000001c00128009000100626f6e64000000000c000280050001"], 0x3c}, 0x1, 0x0, 0x0, 0x690}, 0x20048040) 342.637035ms ago: executing program 6 (id=3725): openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x0) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f00000001c0)='ext4\x00', 0x8410, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x84042, 0x1fa) write$P9_RUNLINKAT(r1, &(0x7f0000000000)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 224.977952ms ago: executing program 7 (id=3726): socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0xffff, 0xffff}, {0x0, 0xffe0}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x20040084) socket$netlink(0x10, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r5, {0xf000, 0xffff}, {}, {0x7, 0xfff3}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x4, 0xfff1}}]}}]}, 0x38}}, 0x200c8080) 129.832312ms ago: executing program 7 (id=3727): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x8) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp6}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, 0x0, 0x20000000) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$inet(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x2, 0x4e24, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000200)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3c}, @dev={0xac, 0x14, 0x14, 0x12}}}}], 0x20}, 0x0) 73.0629ms ago: executing program 7 (id=3728): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x214000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000180)=0x800, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f00000000c0)=0x20000, 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000400)={'dummy0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x0, r3}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008188040f46ecdb4cb9cca7480e1211000000e3bd012a128748b429021627e305dd2b7a146efb4400", 0x2e}], 0x1}, 0x4048004) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) 0s ago: executing program 6 (id=3729): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/f/dwFrameInterval\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)="19", 0x1) keyctl$KEYCTL_WATCH_KEY(0x20, 0x0, 0xffffffffffffffff, 0x1a) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) arch_prctl$ARCH_SET_CPUID(0x1012, 0x0) syz_emit_ethernet(0x76, &(0x7f0000005d00)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd63269fe000403a01fc010000000000000000000000000000fe8000000000000000000000000000aa03019078020000006339afb8f6480001200100000000000000000000000000020001000000000000000000000000000111000400fc68050032000400ff000500"], 0x0) kernel console output (not intermixed with test programs): rintk messages dropped ** ** 267 printk messages dropped ** ** 240 printk messages dropped ** ** 238 printk messages dropped ** ** 218 printk messages dropped ** ** 253 printk messages dropped ** ** 248 printk messages dropped ** ** 149 printk messages dropped ** ** 115 printk messages dropped ** ** 120 printk messages dropped ** ** 114 printk messages dropped ** ** 170 printk messages dropped ** ** 151 printk messages dropped ** ** 149 printk messages dropped ** ** 243 printk messages dropped ** ** 258 printk messages dropped ** ** 257 printk messages dropped ** ** 256 printk messages dropped ** ** 233 printk messages dropped ** ** 216 printk messages dropped ** ** 238 printk messages dropped ** ** 236 printk messages dropped ** ** 255 printk messages dropped ** ** 265 printk messages dropped ** ** 233 printk messages dropped ** ** 251 printk messages dropped ** ** 239 printk messages dropped ** ** 243 printk messages dropped ** ** 306 printk messages dropped ** ** 283 printk messages dropped ** ** 295 printk messages dropped ** ** 265 printk messages dropped ** ** 277 printk messages dropped ** ** 261 printk messages dropped ** ** 300 printk messages dropped ** ** 289 printk messages dropped ** ** 286 printk messages dropped ** ** 273 printk messages dropped ** ** 269 printk messages dropped ** ** 238 printk messages dropped ** ** 256 printk messages dropped ** ** 310 printk messages dropped ** ** 241 printk messages dropped ** ** 279 printk messages dropped ** ** 248 printk messages dropped ** ** 124 printk messages dropped ** ** 123 printk messages dropped ** ** 130 printk messages dropped ** ** 129 printk messages dropped ** ** 124 printk messages dropped ** ** 128 printk messages dropped ** ** 132 printk messages dropped ** ** 139 printk messages dropped ** ** 121 printk messages dropped ** ** 138 printk messages dropped ** ** 124 printk messages dropped ** ** 128 printk messages dropped ** ** 129 printk messages dropped ** ** 230 printk messages dropped ** ** 238 printk messages dropped ** ** 255 printk messages dropped ** ** 269 printk messages dropped ** ** 246 printk messages dropped ** ** 252 printk messages dropped ** ** 257 printk messages dropped ** ** 255 printk messages dropped ** ** 251 printk messages dropped ** ** 253 printk messages dropped ** ** 258 printk messages dropped ** ** 336 printk messages dropped ** ** 212 printk messages dropped ** ** 260 printk messages dropped ** ** 239 printk messages dropped ** ** 251 printk messages dropped ** ** 255 printk messages dropped ** ** 250 printk messages dropped ** ** 276 printk messages dropped ** ** 238 printk messages dropped ** ** 266 printk messages dropped ** ** 243 printk messages dropped ** ** 247 printk messages dropped ** ** 258 printk messages dropped ** ** 250 printk messages dropped ** ** 285 printk messages dropped ** ** 301 printk messages dropped ** ** 296 printk messages dropped ** ** 263 printk messages dropped ** ** 264 printk messages dropped ** ** 256 printk messages dropped ** ** 109 printk messages dropped ** ** 154 printk messages dropped ** ** 187 printk messages dropped ** ** 343 printk messages dropped ** ** 331 printk messages dropped ** ** 241 printk messages dropped ** ** 274 printk messages dropped ** ** 293 printk messages dropped ** ** 320 printk messages dropped ** ** 326 printk messages dropped ** ** 269 printk messages dropped ** ** 278 printk messages dropped ** ** 314 printk messages dropped ** ** 310 printk messages dropped ** ** 260 printk messages dropped ** ** 273 printk messages dropped ** ** 384 printk messages dropped ** ** 274 printk messages dropped ** ** 242 printk messages dropped ** ** 216 printk messages dropped ** ** 239 printk messages dropped ** ** 195 printk messages dropped ** ** 161 printk messages dropped ** ** 175 printk messages dropped ** ** 175 printk messages dropped ** ** 207 printk messages dropped ** ** 206 printk messages dropped ** ** 160 printk messages dropped ** ** 157 printk messages dropped ** ** 187 printk messages dropped ** ** 221 printk messages dropped ** ** 227 printk messages dropped ** ** 171 printk messages dropped ** ** 165 printk messages dropped ** ** 205 printk messages dropped ** ** 265 printk messages dropped ** ** 108 printk messages dropped ** ** 143 printk messages dropped ** ** 153 printk messages dropped ** ** 183 printk messages dropped ** ** 156 printk messages dropped ** ** 160 printk messages dropped ** ** 158 printk messages dropped ** ** 147 printk messages dropped ** ** 114 printk messages dropped ** ** 74 printk messages dropped ** ** 87 printk messages dropped ** ** 130 printk messages dropped ** ** 204 printk messages dropped ** ** 250 printk messages dropped ** ** 253 printk messages dropped ** ** 183 printk messages dropped ** ** 162 printk messages dropped ** ** 172 printk messages dropped ** ** 192 printk messages dropped ** ** 186 printk messages dropped ** ** 154 printk messages dropped ** ** 160 printk messages dropped ** ** 165 printk messages dropped ** ** 196 printk messages dropped ** ** 192 printk messages dropped ** ** 153 printk messages dropped ** ** 151 printk messages dropped ** ** 161 printk messages dropped ** ** 180 printk messages dropped ** ** 226 printk messages dropped ** ** 255 printk messages dropped ** ** 224 printk messages dropped ** ** 192 printk messages dropped ** ** 196 printk messages dropped ** ** 229 printk messages dropped ** ** 218 printk messages dropped ** ** 180 printk messages dropped ** ** 183 printk messages dropped ** ** 232 printk messages dropped ** ** 208 printk messages dropped ** ** 156 printk messages dropped ** ** 162 printk messages dropped ** ** 160 printk messages dropped ** ** 156 printk messages dropped ** ** 211 printk messages dropped ** ** 227 printk messages dropped ** ** 174 printk messages dropped ** ** 163 printk messages dropped ** ** 145 printk messages dropped ** ** 87 printk messages dropped ** ** 90 printk messages dropped ** ** 80 printk messages dropped ** ** 78 printk messages dropped ** ** 72 printk messages dropped ** ** 70 printk messages dropped ** ** 73 printk messages dropped ** ** 73 printk messages dropped ** ** 79 printk messages dropped ** ** 86 printk messages dropped ** ** 90 printk messages dropped ** ** 91 printk messages dropped ** ** 76 printk messages dropped ** ** 75 printk messages dropped ** ** 86 printk messages dropped ** ** 148 printk messages dropped ** ** 57 printk messages dropped ** ** 103 printk messages dropped ** ** 116 printk messages dropped ** ** 123 printk messages dropped ** ** 111 printk messages dropped ** ** 92 printk messages dropped ** ** 115 printk messages dropped ** ** 137 printk messages dropped ** ** 111 printk messages dropped ** ** 84 printk messages dropped ** ** 85 printk messages dropped ** ** 86 printk messages dropped ** ** 161 printk messages dropped ** ** 91 printk messages dropped ** ** 87 printk messages dropped ** ** 84 printk messages dropped ** ** 90 printk messages dropped ** ** 113 printk messages dropped ** ** 114 printk messages dropped ** ** 95 printk messages dropped ** ** 89 printk messages dropped ** ** 88 printk messages dropped ** ** 99 printk messages dropped ** ** 77 printk messages dropped ** ** 83 printk messages dropped ** ** 98 printk messages dropped ** ** 99 printk messages dropped ** ** 79 printk messages dropped ** ** 83 printk messages dropped ** ** 109 printk messages dropped ** ** 101 printk messages dropped ** ** 101 printk messages dropped ** ** 142 printk messages dropped ** ** 149 printk messages dropped ** ** 150 printk messages dropped ** ** 140 printk messages dropped ** ** 156 printk messages dropped ** ** 147 printk messages dropped ** ** 114 printk messages dropped ** ** 207 printk messages dropped ** ** 213 printk messages dropped ** ** 202 printk messages dropped ** ** 103 printk messages dropped ** ** 153 printk messages dropped ** ** 131 printk messages dropped ** ** 139 printk messages dropped ** ** 146 printk messages dropped ** ** 211 printk messages dropped ** ** 333 printk messages dropped ** ** 259 printk messages dropped ** ** 236 printk messages dropped ** ** 326 printk messages dropped ** ** 286 printk messages dropped ** ** 295 printk messages dropped ** ** 232 printk messages dropped ** ** 217 printk messages dropped ** ** 323 printk messages dropped ** ** 343 printk messages dropped ** ** 306 printk messages dropped ** ** 282 printk messages dropped ** ** 246 printk messages dropped ** ** 314 printk messages dropped ** ** 329 printk messages dropped ** ** 253 printk messages dropped ** ** 234 printk messages dropped ** ** 217 printk messages dropped ** ** 238 printk messages dropped ** ** 249 printk messages dropped ** ** 230 printk messages dropped ** ** 132 printk messages dropped ** ** 180 printk messages dropped ** ** 176 printk messages dropped ** ** 149 printk messages dropped ** ** 151 printk messages dropped ** ** 130 printk messages dropped ** ** 86 printk messages dropped ** ** 110 printk messages dropped ** ** 136 printk messages dropped ** ** 127 printk messages dropped ** ** 130 printk messages dropped ** ** 128 printk messages dropped ** ** 166 printk messages dropped ** ** 215 printk messages dropped ** ** 230 printk messages dropped ** ** 209 printk messages dropped ** ** 221 printk messages dropped ** ** 210 printk messages dropped ** ** 207 printk messages dropped ** ** 206 printk messages dropped ** ** 223 printk messages dropped ** ** 206 printk messages dropped ** ** 212 printk messages dropped ** ** 204 printk messages dropped ** ** 213 printk messages dropped ** ** 198 printk messages dropped ** ** 216 printk messages dropped ** ** 206 printk messages dropped ** ** 232 printk messages dropped ** ** 225 printk messages dropped ** ** 216 printk messages dropped ** ** 201 printk messages dropped ** ** 228 printk messages dropped ** ** 209 printk messages dropped ** ** 241 printk messages dropped ** ** 201 printk messages dropped ** ** 218 printk messages dropped ** ** 159 printk messages dropped ** ** 72 printk messages dropped ** ** 65 printk messages dropped ** ** 89 printk messages dropped ** ** 119 printk messages dropped ** ** 118 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 97 printk messages dropped ** ** 99 printk messages dropped ** ** 65 printk messages dropped ** ** 63 printk messages dropped ** ** 68 printk messages dropped ** ** 67 printk messages dropped ** ** 74 printk messages dropped ** ** 163 printk messages dropped ** ** 361 printk messages dropped ** ** 391 printk messages dropped ** ** 345 printk messages dropped ** ** 350 printk messages dropped ** ** 365 printk messages dropped ** ** 342 printk messages dropped ** ** 369 printk messages dropped ** ** 333 printk messages dropped ** ** 316 printk messages dropped ** ** 130 printk messages dropped ** ** 128 printk messages dropped ** ** 152 printk messages dropped ** ** 163 printk messages dropped ** ** 166 printk messages dropped ** ** 174 printk messages dropped ** ** 152 printk messages dropped ** ** 163 printk messages dropped ** ** 133 printk messages dropped ** ** 110 printk messages dropped ** ** 120 printk messages dropped ** ** 131 printk messages dropped ** ** 162 printk messages dropped ** ** 128 printk messages dropped ** ** 214 printk messages dropped ** ** 117 printk messages dropped ** ** 102 printk messages dropped ** [ 283.104712][ T5806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.129883][ T5806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface ** 2732 printk messages dropped ** ** 333 printk messages dropped ** ** 267 printk messages dropped ** ** 207 printk messages dropped ** ** 168 printk messages dropped ** ** 2469 printk messages dropped ** ** 386 printk messages dropped ** ** 328 printk messages dropped ** ** 319 printk messages dropped ** ** 353 printk messages dropped ** ** 320 printk messages dropped ** ** 341 printk messages dropped ** ** 313 printk messages dropped ** ** 123 printk messages dropped ** ** 105 printk messages dropped ** ** 106 printk messages dropped ** ** 107 printk messages dropped ** ** 101 printk messages dropped ** ** 109 printk messages dropped ** ** 116 printk messages dropped ** ** 102 printk messages dropped ** ** 150 printk messages dropped ** ** 265 printk messages dropped ** ** 268 printk messages dropped ** ** 278 printk messages dropped ** ** 280 printk messages dropped ** ** 268 printk messages dropped ** ** 286 printk messages dropped ** ** 302 printk messages dropped ** ** 280 printk messages dropped ** ** 518 printk messages dropped ** ** 310 printk messages dropped ** ** 315 printk messages dropped ** ** 248 printk messages dropped ** ** 176 printk messages dropped ** ** 271 printk messages dropped ** ** 287 printk messages dropped ** ** 286 printk messages dropped ** ** 289 printk messages dropped ** ** 275 printk messages dropped ** ** 284 printk messages dropped ** ** 287 printk messages dropped ** ** 193 printk messages dropped ** ** 280 printk messages dropped ** ** 304 printk messages dropped ** ** 368 printk messages dropped ** ** 285 printk messages dropped ** ** 311 printk messages dropped ** ** 312 printk messages dropped ** ** 279 printk messages dropped ** ** 267 printk messages dropped ** ** 425 printk messages dropped ** ** 284 printk messages dropped ** ** 291 printk messages dropped ** ** 272 printk messages dropped ** ** 296 printk messages dropped ** ** 270 printk messages dropped ** ** 287 printk messages dropped ** ** 291 printk messages dropped ** ** 248 printk messages dropped ** ** 284 printk messages dropped ** ** 287 printk messages dropped ** ** 268 printk messages dropped ** ** 276 printk messages dropped ** ** 298 printk messages dropped ** ** 299 printk messages dropped ** ** 293 printk messages dropped ** ** 247 printk messages dropped ** ** 249 printk messages dropped ** ** 154 printk messages dropped ** ** 145 printk messages dropped ** ** 172 printk messages dropped ** ** 169 printk messages dropped ** ** 160 printk messages dropped ** ** 184 printk messages dropped ** ** 185 printk messages dropped ** ** 268 printk messages dropped ** ** 273 printk messages dropped ** ** 281 printk messages dropped ** ** 269 printk messages dropped ** ** 292 printk messages dropped ** ** 307 printk messages dropped ** ** 322 printk messages dropped ** ** 326 printk messages dropped ** ** 363 printk messages dropped ** ** 330 printk messages dropped ** ** 346 printk messages dropped ** ** 367 printk messages dropped ** ** 348 printk messages dropped ** ** 327 printk messages dropped ** ** 310 printk messages dropped ** ** 292 printk messages dropped ** ** 233 printk messages dropped ** ** 109 printk messages dropped ** ** 102 printk messages dropped ** ** 105 printk messages dropped ** ** 196 printk messages dropped ** ** 273 printk messages dropped ** ** 306 printk messages dropped ** ** 294 printk messages dropped ** ** 297 printk messages dropped ** ** 278 printk messages dropped ** ** 289 printk messages dropped ** ** 284 printk messages dropped ** ** 284 printk messages dropped ** ** 270 printk messages dropped ** ** 269 printk messages dropped ** ** 293 printk messages dropped ** ** 311 printk messages dropped ** ** 321 printk messages dropped ** ** 280 printk messages dropped ** ** 293 printk messages dropped ** ** 277 printk messages dropped ** ** 269 printk messages dropped ** ** 262 printk messages dropped ** ** 272 printk messages dropped ** ** 187 printk messages dropped ** ** 129 printk messages dropped ** ** 9 printk messages dropped ** ** 13 printk messages dropped ** ** 7 printk messages dropped ** ** 12 printk messages dropped ** ** 12 printk messages dropped ** ** 6 printk messages dropped ** ** 1670 printk messages dropped ** ** 154 printk messages dropped ** ** 146 printk messages dropped ** ** 141 printk messages dropped ** ** 166 printk messages dropped ** ** 131 printk messages dropped ** ** 122 printk messages dropped ** ** 115 printk messages dropped ** ** 106 printk messages dropped ** ** 131 printk messages dropped ** ** 123 printk messages dropped ** ** 142 printk messages dropped ** ** 154 printk messages dropped ** ** 122 printk messages dropped ** ** 86 printk messages dropped ** ** 57 printk messages dropped ** ** 60 printk messages dropped ** ** 61 printk messages dropped ** ** 789 printk messages dropped ** ** 100 printk messages dropped ** ** 100 printk messages dropped ** ** 171 printk messages dropped ** ** 157 printk messages dropped ** ** 156 printk messages dropped ** ** 181 printk messages dropped ** ** 219 printk messages dropped ** ** 210 printk messages dropped ** ** 175 printk messages dropped ** ** 174 printk messages dropped ** ** 172 printk messages dropped ** ** 177 printk messages dropped ** ** 162 printk messages dropped ** ** 158 printk messages dropped ** ** 157 printk messages dropped ** ** 149 printk messages dropped ** ** 146 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 149 printk messages dropped ** ** 157 printk messages dropped ** ** 157 printk messages dropped ** ** 155 printk messages dropped ** ** 169 printk messages dropped ** ** 145 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 152 printk messages dropped ** ** 145 printk messages dropped ** ** 153 printk messages dropped ** ** 161 printk messages dropped ** ** 160 printk messages dropped ** ** 148 printk messages dropped ** ** 145 printk messages dropped ** ** 128 printk messages dropped ** ** 91 printk messages dropped ** ** 90 printk messages dropped ** ** 80 printk messages dropped ** ** 71 printk messages dropped ** ** 70 printk messages dropped ** ** 67 printk messages dropped ** ** 71 printk messages dropped ** ** 72 printk messages dropped ** ** 71 printk messages dropped ** ** 76 printk messages dropped ** ** 90 printk messages dropped ** ** 90 printk messages dropped ** ** 88 printk messages dropped ** ** 110 printk messages dropped ** ** 101 printk messages dropped ** ** 118 printk messages dropped ** ** 135 printk messages dropped ** ** 401 printk messages dropped ** ** 145 printk messages dropped ** ** 150 printk messages dropped ** ** 142 printk messages dropped ** ** 136 printk messages dropped ** ** 137 printk messages dropped ** ** 139 printk messages dropped ** ** 133 printk messages dropped ** ** 128 printk messages dropped ** ** 124 printk messages dropped ** ** 138 printk messages dropped ** ** 144 printk messages dropped ** ** 146 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 140 printk messages dropped ** ** 142 printk messages dropped ** ** 138 printk messages dropped ** ** 138 printk messages dropped ** ** 140 printk messages dropped ** ** 175 printk messages dropped ** ** 145 printk messages dropped ** ** 142 printk messages dropped ** ** 138 printk messages dropped ** ** 140 printk messages dropped ** ** 137 printk messages dropped ** ** 147 printk messages dropped ** ** 139 printk messages dropped ** ** 141 printk messages dropped ** ** 139 printk messages dropped ** ** 142 printk messages dropped ** ** 137 printk messages dropped ** ** 152 printk messages dropped ** ** 150 printk messages dropped ** ** 141 printk messages dropped ** ** 158 printk messages dropped ** ** 140 printk messages dropped ** ** 146 printk messages dropped ** ** 140 printk messages dropped ** ** 145 printk messages dropped ** ** 142 printk messages dropped ** ** 140 printk messages dropped ** ** 139 printk messages dropped ** ** 138 printk messages dropped ** ** 136 printk messages dropped ** ** 139 printk messages dropped ** ** 154 printk messages dropped ** ** 139 printk messages dropped ** ** 99 printk messages dropped ** ** 92 printk messages dropped ** ** 94 printk messages dropped ** ** 82 printk messages dropped ** ** 75 printk messages dropped ** ** 70 printk messages dropped ** ** 76 printk messages dropped ** ** 76 printk messages dropped ** ** 80 printk messages dropped ** ** 77 printk messages dropped ** ** 83 printk messages dropped ** ** 93 printk messages dropped ** ** 91 printk messages dropped ** ** 93 printk messages dropped ** ** 95 printk messages dropped ** ** 97 printk messages dropped ** ** 75 printk messages dropped ** ** 71 printk messages dropped ** ** 76 printk messages dropped ** ** 75 printk messages dropped ** ** 74 printk messages dropped ** ** 84 printk messages dropped ** ** 85 printk messages dropped ** ** 83 printk messages dropped ** ** 84 printk messages dropped ** ** 72 printk messages dropped ** ** 65 printk messages dropped ** ** 78 printk messages dropped ** ** 71 printk messages dropped ** ** 75 printk messages dropped ** ** 71 printk messages dropped ** ** 75 printk messages dropped ** ** 72 printk messages dropped ** ** 72 printk messages dropped ** ** 77 printk messages dropped ** ** 68 printk messages dropped ** ** 69 printk messages dropped ** ** 71 printk messages dropped ** ** 74 printk messages dropped ** ** 73 printk messages dropped ** ** 69 printk messages dropped ** ** 72 printk messages dropped ** ** 74 printk messages dropped ** ** 18 printk messages dropped ** ** 4 printk messages dropped ** ** 3 printk messages dropped ** ** 4 printk messages dropped ** ** 31 printk messages dropped ** [ 283.707612][ T969] wg2 speed is unknown, defaulting to 1000 [ 283.709199][ T969] syz0: Port: 1 Link DOWN [ 283.755147][ T5806] tipc: Disabling bearer [ 283.755312][ T5806] tipc: Disabling bearer [ 283.755392][ T5806] tipc: Left network mode [ 283.757259][ T969] wg2 speed is unknown, defaulting to 1000 [ 283.944926][ T5733] Bluetooth: hci3: command tx timeout [ 283.975920][T14219] binder: 14217:14219 ioctl c0306201 200000000040 returned -14 [ 283.978760][ T43] audit: type=1400 audit(1790207183.170:1105): avc: denied { write } for pid=14216 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 283.982955][T14219] binder: 14217:14219 unknown command 0 [ 283.982970][T14219] binder: 14217:14219 ioctl c0306201 200000000640 returned -22 [ 284.064643][ T43] audit: type=1400 audit(1790207183.250:1106): avc: denied { write } for pid=14225 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.135213][T14229] FAULT_INJECTION: forcing a failure. [ 284.135213][T14229] name failslab, interval 1, probability 0, space 0, times 0 [ 284.135230][T14229] CPU: 3 UID: 0 PID: 14229 Comm: syz.1.3233 Tainted: G L syzkaller #0 PREEMPT(full) [ 284.135246][T14229] Tainted: [L]=SOFTLOCKUP [ 284.135250][T14229] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 284.135257][T14229] Call Trace: [ 284.135261][T14229] [ 284.135266][T14229] dump_stack_lvl+0x100/0x190 [ 284.135286][T14229] should_fail_ex.cold+0x5/0xa [ 284.135303][T14229] should_failslab+0xc2/0x120 [ 284.135325][T14229] __kmalloc_cache_noprof+0x91/0x6d0 [ 284.135344][T14229] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 284.135360][T14229] ? sctp_auth_init+0x12c/0x530 [ 284.135375][T14229] sctp_auth_init+0x12c/0x530 [ 284.135389][T14229] sctp_setsockopt+0x64d6/0xb370 [ 284.135407][T14229] ? __pfx_sctp_setsockopt+0x10/0x10 [ 284.135421][T14229] ? __fget_files+0x215/0x3d0 [ 284.135461][T14229] ? selinux_socket_setsockopt+0x6a/0x80 [ 284.135474][T14229] ? sock_common_setsockopt+0x2e/0xf0 [ 284.135493][T14229] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 284.135513][T14229] do_sock_setsockopt+0xf3/0x1d0 [ 284.135532][T14229] __sys_setsockopt+0x195/0x220 ** 3 printk messages dropped ** ** 86 printk messages dropped ** ** 122 printk messages dropped ** ** 88 printk messages dropped ** [ 284.255653][T14227] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 284.256505][ T5442] 8021q: adding VLAN 0 to HW filter on device eth11 [ 284.267353][T14233] binder: 14232:14233 ioctl c0306201 200000000040 returned -14 [ 284.267937][T14233] binder: 14232:14233 ioctl c0306201 200000000640 returned -22 [ 284.522144][T14162] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 284.556732][ T43] audit: type=1400 audit(1790207183.750:1107): avc: denied { write } for pid=14242 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.562792][T14162] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 284.563258][T14162] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 284.583923][T14162] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 284.584754][T14162] netdevsim netdevsim5 netdevsim2: renamed from eth2 ** 72 printk messages dropped ** ** 14 printk messages dropped ** [ 284.661806][T14162] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 284.662768][T14162] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 284.716220][T14162] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 284.733642][ T43] audit: type=1400 audit(1790207183.920:1108): avc: denied { write } for pid=14246 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 284.865693][ T5442] 8021q: adding VLAN 0 to HW filter on device eth12 [ 284.983639][ T5806] hsr_slave_0: left promiscuous mode [ 285.019049][ T5806] hsr_slave_1: left promiscuous mode [ 285.020900][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.020909][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.021686][ T5806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.021695][ T5806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.128983][ T5806] veth1_macvtap: left promiscuous mode [ 285.129030][ T5806] veth0_macvtap: left promiscuous mode [ 285.129076][ T5806] veth1_vlan: left promiscuous mode [ 285.129145][ T5806] veth0_vlan: left promiscuous mode [ 285.683478][ T5806] team0 (unregistering): Port device team_slave_1 removed [ 285.711574][ T5806] team0 (unregistering): Port device team_slave_0 removed [ 285.767897][T11376] smc: removing ib device syz0 [ 285.900833][T14278] FAULT_INJECTION: forcing a failure. [ 285.900833][T14278] name failslab, interval 1, probability 0, space 0, times 0 [ 285.900852][T14278] CPU: 3 UID: 0 PID: 14278 Comm: syz.4.3244 Tainted: G L syzkaller #0 PREEMPT(full) [ 285.900867][T14278] Tainted: [L]=SOFTLOCKUP [ 285.900872][T14278] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 285.900879][T14278] Call Trace: [ 285.900883][T14278] [ 285.900888][T14278] dump_stack_lvl+0x100/0x190 [ 285.900909][T14278] should_fail_ex.cold+0x5/0xa [ 285.900926][T14278] should_failslab+0xc2/0x120 [ 285.900946][T14278] __kmalloc_noprof+0xfc/0x840 [ 285.900960][T14278] ? tomoyo_encode2+0xfb/0x3c0 [ 285.900978][T14278] tomoyo_encode2+0xfb/0x3c0 [ 285.901024][T14278] tomoyo_encode+0x29/0x50 [ 285.901038][T14278] tomoyo_realpath_from_path+0x18c/0x690 [ 285.901057][T14278] tomoyo_mount_acl+0x1b6/0x8b0 [ 285.901074][T14278] ? is_bpf_text_address+0x8a/0x1a0 [ 285.901091][T14278] ? is_bpf_text_address+0x8a/0x1a0 [ 285.901107][T14278] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 285.901124][T14278] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 285.901137][T14278] ? kernel_text_address+0x8d/0x100 [ 285.901158][T14278] ? unwind_get_return_address+0x59/0xa0 ** 134 printk messages dropped ** ** 76 printk messages dropped ** ** 84 printk messages dropped ** ** 89 printk messages dropped ** ** 79 printk messages dropped ** ** 77 printk messages dropped ** ** 79 printk messages dropped ** ** 84 printk messages dropped ** ** 73 printk messages dropped ** ** 76 printk messages dropped ** ** 87 printk messages dropped ** ** 98 printk messages dropped ** ** 79 printk messages dropped ** ** 117 printk messages dropped ** ** 139 printk messages dropped ** ** 489 printk messages dropped ** ** 108 printk messages dropped ** ** 100 printk messages dropped ** ** 123 printk messages dropped ** ** 123 printk messages dropped ** ** 125 printk messages dropped ** ** 125 printk messages dropped ** ** 126 printk messages dropped ** ** 121 printk messages dropped ** ** 134 printk messages dropped ** ** 126 printk messages dropped ** ** 137 printk messages dropped ** ** 130 printk messages dropped ** ** 131 printk messages dropped ** ** 138 printk messages dropped ** ** 131 printk messages dropped ** ** 141 printk messages dropped ** ** 133 printk messages dropped ** ** 132 printk messages dropped ** ** 120 printk messages dropped ** ** 131 printk messages dropped ** ** 123 printk messages dropped ** ** 134 printk messages dropped ** ** 125 printk messages dropped ** ** 4 printk messages dropped ** ** 12 printk messages dropped ** ** 26 printk messages dropped ** ** 121 printk messages dropped ** ** 131 printk messages dropped ** ** 116 printk messages dropped ** ** 135 printk messages dropped ** ** 127 printk messages dropped ** ** 127 printk messages dropped ** ** 133 printk messages dropped ** ** 151 printk messages dropped ** ** 139 printk messages dropped ** ** 131 printk messages dropped ** ** 129 printk messages dropped ** ** 129 printk messages dropped ** ** 116 printk messages dropped ** ** 148 printk messages dropped ** ** 139 printk messages dropped ** ** 141 printk messages dropped ** ** 144 printk messages dropped ** ** 134 printk messages dropped ** ** 148 printk messages dropped ** ** 88 printk messages dropped ** ** 156 printk messages dropped ** ** 122 printk messages dropped ** ** 124 printk messages dropped ** ** 138 printk messages dropped ** ** 131 printk messages dropped ** ** 151 printk messages dropped ** ** 142 printk messages dropped ** ** 151 printk messages dropped ** ** 93 printk messages dropped ** [ 286.002843][T11376] smbdirect: ib_dev[syz0] removed [ 286.011649][ T5733] Bluetooth: hci3: command tx timeout [ 286.164762][T14162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.181306][T14162] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.184110][T11396] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.184154][T11396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.209152][T11396] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.209197][T11396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.401285][ T43] audit: type=1400 audit(1790207185.580:1109): avc: denied { write } for pid=14287 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.521641][ T43] audit: type=1400 audit(1790207185.710:1110): avc: denied { write } for pid=14297 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 286.610374][ T5442] 8021q: adding VLAN 0 to HW filter on device eth13 [ 286.858470][T14162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.116364][T14162] veth0_vlan: entered promiscuous mode [ 287.124416][T14162] veth1_vlan: entered promiscuous mode [ 287.231523][T14162] veth0_macvtap: entered promiscuous mode [ 287.234216][T14162] veth1_macvtap: entered promiscuous mode [ 287.243955][T14162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.252311][T14162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.376659][T11376] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.376670][T11376] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.386869][T14260] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.386894][T14260] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.386912][T14260] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.386930][T14260] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.426650][T14253] net_ratelimit: 113 callbacks suppressed [ 287.427791][T11376] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.427799][T11376] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.486915][ T43] audit: type=1400 audit(1790207186.680:1111): avc: denied { mounton } for pid=14162 comm="syz-executor" path="/syzkaller.MJuHJT/syz-tmp" dev="sda1" ino=2045 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 287.513175][ T5806] IPVS: stop unused estimator thread 0... [ 287.701880][T14355] EXT4-fs warning (device sda1): __ext4_ioctl:1563: Setting inode version is not supported with metadata_csum enabled. [ 287.739655][T14358] EXT4-fs (sda1): resizing filesystem from 262144 to 1 blocks [ 287.739669][T14358] EXT4-fs warning (device sda1): ext4_resize_fs:2041: can't shrink FS - resize aborted [ 288.086198][ T5733] Bluetooth: hci3: command tx timeout [ 288.155588][ T5811] usb 9-1: new high-speed USB device number 32 using dummy_hcd [ 288.305636][ T5811] usb 9-1: Using ep0 maxpacket: 32 [ 288.306082][ T5811] usb 9-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 288.306851][ T5811] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 288.306864][ T5811] usb 9-1: config 0 has no interfaces? [ 288.306888][ T5811] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 288.308409][ T5811] usb 9-1: config 0 descriptor?? [ 288.469280][T14381] tipc: Started in network mode [ 288.469292][T14381] tipc: Node identity 1, cluster identity 4711 [ 288.469299][T14381] tipc: Node number set to 1 [ 288.656079][ T5832] usb 9-1: USB disconnect, device number 32 [ 288.668690][ T43] audit: type=1400 audit(1790207187.860:1112): avc: denied { write } for pid=14384 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 288.750863][ T43] audit: type=1400 audit(1790207187.940:1113): avc: denied { write } for pid=14387 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 289.372206][T14400] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 289.574612][T14407] FAULT_INJECTION: forcing a failure. [ 289.574612][T14407] name failslab, interval 1, probability 0, space 0, times 0 [ 289.574635][T14407] CPU: 2 UID: 0 PID: 14407 Comm: syz.4.3279 Tainted: G L syzkaller #0 PREEMPT(full) [ 289.574662][T14407] Tainted: [L]=SOFTLOCKUP [ 289.574668][T14407] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 289.574679][T14407] Call Trace: [ 289.574686][T14407] [ 289.574693][T14407] dump_stack_lvl+0x100/0x190 [ 289.574722][T14407] should_fail_ex.cold+0x5/0xa [ 289.574748][T14407] should_failslab+0xc2/0x120 [ 289.574782][T14407] __kmalloc_cache_noprof+0x91/0x6d0 [ 289.574808][T14407] ? jffs2_scan_medium+0x1e8/0x59c0 [ 289.574835][T14407] jffs2_scan_medium+0x1e8/0x59c0 [ 289.574867][T14407] ? __pfx_jffs2_scan_medium+0x10/0x10 [ 289.574883][T14407] ? trace_kmalloc+0xeb/0x110 [ 289.574897][T14407] ? __kasan_kmalloc+0xaa/0xb0 [ 289.574910][T14407] ? __kmalloc_noprof+0x350/0x840 [ 289.574922][T14407] ? jffs2_sum_init+0xc4/0x1b0 [ 289.574954][T14407] jffs2_do_mount_fs+0x8a0/0x2300 [ 289.574972][T14407] ? rcu_is_watching+0x13/0xc0 [ 289.574990][T14407] ? trace_kmalloc+0xeb/0x110 [ 289.575005][T14407] ? lockdep_init_map_type+0x5c/0x250 [ 289.575019][T14407] ? __pfx_jffs2_do_mount_fs+0x10/0x10 [ 289.575034][T14407] ? __raw_spin_lock_init+0x3a/0x110 [ 289.575059][T14407] ? __init_rwsem+0x10e/0x180 [ 289.575080][T14407] jffs2_do_fill_super+0x3d4/0xa50 [ 289.575095][T14407] jffs2_fill_super+0x283/0x370 [ 289.575109][T14407] ? __pfx_jffs2_fill_super+0x10/0x10 [ 289.575121][T14407] mtd_get_sb+0x2f0/0x4c0 [ 289.575137][T14407] ? __pfx_jffs2_fill_super+0x10/0x10 [ 289.575151][T14407] get_tree_mtd+0x6f9/0x8a0 [ 289.575171][T14407] ? __pfx_get_tree_mtd+0x10/0x10 [ 289.575185][T14407] ? cap_capable+0x107/0x430 [ 289.575207][T14407] ? bpf_lsm_capable+0x9/0x10 [ 289.575233][T14407] ? security_capable+0x80/0x260 [ 289.575309][T14407] vfs_get_tree+0x92/0x320 [ 289.575339][T14407] path_mount+0x7d0/0x24c0 [ 289.575372][T14407] ? __pfx_path_mount+0x10/0x10 [ 289.575395][T14407] ? lockdep_hardirqs_on+0x7d/0x110 [ 289.575424][T14407] ? putname+0xb1/0x110 [ 289.575446][T14407] ? kmem_cache_free+0x127/0x6c0 [ 289.575482][T14407] ? __x64_sys_mount+0x293/0x310 [ 289.575502][T14407] __x64_sys_mount+0x293/0x310 [ 289.575520][T14407] ? __pfx___x64_sys_mount+0x10/0x10 [ 289.575540][T14407] ? trace_syscall_enter+0xcc/0x120 [ 289.575569][T14407] do_syscall_64+0x123/0x790 [ 289.575598][T14407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 289.575617][T14407] RIP: 0033:0x7f17e0b9e159 [ 289.575633][T14407] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 289.575651][T14407] RSP: 002b:00007f17e1a5d028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 289.575670][T14407] RAX: ffffffffffffffda RBX: 00007f17e0e25fa0 RCX: 00007f17e0b9e159 [ 289.575683][T14407] RDX: 0000200000000300 RSI: 0000200000000100 RDI: 0000200000000200 [ 289.575694][T14407] RBP: 00007f17e0c3506b R08: 0000000000000000 R09: 0000000000000000 [ 289.575706][T14407] R10: 0000000000800000 R11: 0000000000000246 R12: 0000000000000000 [ 289.575716][T14407] R13: 00007f17e0e26038 R14: 00007f17e0e25fa0 R15: 00007ffefabee088 [ 289.575741][T14407] [ 289.575826][T14407] jffs2: warning: (14407) jffs2_scan_medium: Can't allocate memory for summary [ 289.904654][T14413] Console: switching to colour dummy device 80x25 [ 290.260746][ T43] audit: type=1400 audit(1790207189.450:1114): avc: denied { write } for pid=14416 comm="syz.5.3283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 290.274444][T14414] pci 0000:00:01.0: [1af4:1050] type 00 class 0x030000 conventional PCI endpoint [ 290.296334][T14414] pci 0000:00:01.0: BAR 0 [mem 0xfe000000-0xfe7fffff pref] [ 290.296520][T14414] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref] [ 290.296596][T14414] pci 0000:00:01.0: BAR 4 [mem 0xfeaf4000-0xfeaf4fff] [ 290.297152][T14414] pci 0000:00:01.0: ROM [mem 0xfeae0000-0xfeaeffff pref] [ 290.297694][T14414] pci 0000:00:01.0: Video device with shadowed ROM at [mem 0x000c0000-0x000dffff] [ 290.305581][ T43] audit: type=1400 audit(1790207189.490:1115): avc: denied { write } for pid=14418 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.334936][T14414] pci 0000:00:01.0: Adding to iommu group 1 [ 290.350008][T14414] pci 0000:00:01.0: vgaarb: setting as boot VGA device [ 290.350020][T14414] pci 0000:00:01.0: vgaarb: bridge control possible [ 290.350029][T14414] pci 0000:00:01.0: vgaarb: VGA device added: decodes=io+mem,owns=io+mem,locks=none [ 290.374307][ T43] audit: type=1400 audit(1790207189.560:1116): avc: denied { write } for pid=14421 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.382487][T14414] pci 0000:00:01.0: BAR 0 [mem 0x80000000-0x807fffff pref]: assigned [ 290.390335][T14414] pci 0000:00:01.0: BAR 2 [mem 0x380800000000-0x380800003fff 64bit pref]: assigned [ 290.405981][T14414] pci 0000:00:01.0: BAR 4 [mem 0x80800000-0x80800fff]: assigned [ 290.471632][T14414] [drm] pci: virtio-vga detected at 0000:00:01.0 [ 290.471691][T14414] virtio-pci 0000:00:01.0: vgaarb: deactivate vga console [ 290.476100][T14414] [drm] features: -virgl +edid -resource_blob -host_visible [ 290.476114][T14414] [drm] features: -context_init -blob_alignment [ 290.497620][T14414] [drm] number of scanouts: 1 [ 290.497652][T14414] [drm] number of cap sets: 0 [ 290.504596][ T43] audit: type=1400 audit(1790207189.690:1117): avc: denied { write } for pid=14430 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.542276][T14414] [drm] Initialized virtio_gpu 0.1.0 for 0000:00:01.0 on minor 1 [ 290.561967][T14423] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 290.568755][ T43] audit: type=1400 audit(1790207189.760:1118): avc: denied { write } for pid=14435 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 290.688448][T14414] Console: switching to colour frame buffer device 160x50 [ 290.742151][T14414] virtio-pci 0000:00:01.0: [drm] fb0: virtio_gpudrmfb frame buffer device [ 290.896742][ T43] audit: type=1400 audit(1790207190.090:1119): avc: denied { mount } for pid=14448 comm="syz.5.3289" name="/" dev="configfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 290.897943][ T43] audit: type=1400 audit(1790207190.090:1120): avc: denied { write } for pid=14448 comm="syz.5.3289" name="nullb" dev="configfs" ino=1251 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 291.010730][T14456] input: syz1 as /devices/virtual/input/input37 [ 291.036121][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3292'. [ 291.036133][T14458] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3292'. [ 291.097928][T14461] loop5: detected capacity change from 0 to 7 [ 291.098752][T14461] loop5: [ 291.098771][T14461] loop5: partition table partially beyond EOD, truncated [ 291.397077][T14476] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3301'. [ 291.779127][ T5736] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 292.454029][ T5442] net_ratelimit: 191 callbacks suppressed [ 293.309907][T14552] FAULT_INJECTION: forcing a failure. [ 293.309907][T14552] name failslab, interval 1, probability 0, space 0, times 0 [ 293.309939][T14552] CPU: 0 UID: 0 PID: 14552 Comm: syz.0.3315 Tainted: G L syzkaller #0 PREEMPT(full) [ 293.309965][T14552] Tainted: [L]=SOFTLOCKUP [ 293.309972][T14552] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 293.309981][T14552] Call Trace: [ 293.309987][T14552] [ 293.309995][T14552] dump_stack_lvl+0x100/0x190 [ 293.310040][T14552] should_fail_ex.cold+0x5/0xa [ 293.310061][T14552] should_failslab+0xc2/0x120 [ 293.310111][T14552] __kvmalloc_node_noprof+0x113/0x9b0 [ 293.310126][T14552] ? bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 293.310142][T14552] bpf_jit_binary_pack_alloc+0xd2/0x2b0 [ 293.310153][T14552] ? __pfx_jit_fill_hole+0x10/0x10 [ 293.310169][T14552] bpf_int_jit_compile+0x526/0x1820 [ 293.310190][T14552] ? __pfx_bpf_int_jit_compile+0x10/0x10 [ 293.310214][T14552] __bpf_prog_select_runtime+0x896/0xbd0 [ 293.310234][T14552] ? __asan_memcpy+0x3c/0x60 [ 293.310246][T14552] bpf_prepare_filter+0xd32/0x11e0 [ 293.310267][T14552] ? __pfx_seccomp_check_filter+0x10/0x10 [ 293.310284][T14552] ? __pfx_bpf_prepare_filter+0x10/0x10 [ 293.310302][T14552] ? __asan_memcpy+0x3c/0x60 [ 293.310312][T14552] ? kmemdup_noprof+0x49/0x60 [ 293.310335][T14552] bpf_prog_create_from_user+0x1df/0x2e0 [ 293.310354][T14552] ? __pfx_seccomp_check_filter+0x10/0x10 [ 293.310371][T14552] do_seccomp+0x870/0x27c0 [ 293.310388][T14552] ? __pfx_eprobe_trigger_func+0x10/0x10 [ 293.310402][T14552] ? __pfx_do_seccomp+0x10/0x10 [ 293.310418][T14552] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 293.310432][T14552] ? cap_task_prctl+0x104/0xa50 [ 293.310444][T14552] ? static_key_count+0x5a/0x70 [ 293.310463][T14552] prctl_set_seccomp+0x4b/0x70 [ 293.310479][T14552] __do_sys_prctl+0xe7b/0x2270 [ 293.310497][T14552] ? __pfx___do_sys_prctl+0x10/0x10 [ 293.310513][T14552] ? trace_syscall_enter+0xcc/0x120 [ 293.310531][T14552] do_syscall_64+0x123/0x790 [ 293.310553][T14552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 293.310565][T14552] RIP: 0033:0x7feba759e159 [ 293.310576][T14552] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 293.310587][T14552] RSP: 002b:00007feba8463028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 293.310599][T14552] RAX: ffffffffffffffda RBX: 00007feba7825fa0 RCX: 00007feba759e159 [ 293.310606][T14552] RDX: 00002000000001c0 RSI: 0000000000000002 RDI: 0000000000000016 [ 293.310613][T14552] RBP: 00007feba763506b R08: 0000000000000000 R09: 0000000000000000 [ 293.310620][T14552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 293.310628][T14552] R13: 00007feba7826038 R14: 00007feba7825fa0 R15: 00007ffc403f8d38 [ 293.310650][T14552] [ 293.335976][ T9126] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 293.352379][ T43] kauditd_printk_skb: 8 callbacks suppressed [ 293.352396][ T43] audit: type=1326 audit(1790207192.540:1129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.0.3315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba759e159 code=0x7ffc0000 [ 293.352644][ T43] audit: type=1326 audit(1790207192.540:1130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.0.3315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba759e159 code=0x7ffc0000 [ 293.373962][ T43] audit: type=1326 audit(1790207192.560:1131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.0.3315" exe="/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7feba755e98e code=0x7ffc0000 [ 293.374010][ T43] audit: type=1326 audit(1790207192.560:1132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.0.3315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba759e159 code=0x7ffc0000 [ 293.374047][ T43] audit: type=1326 audit(1790207192.560:1133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14551 comm="syz.0.3315" exe="/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feba759e159 code=0x7ffc0000 [ 293.485644][ T9126] usb 6-1: Using ep0 maxpacket: 32 [ 293.486418][ T9126] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 293.487538][ T9126] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 293.487560][ T9126] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 293.487619][ T9126] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 293.487659][ T9126] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.487680][ T9126] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.487758][ T9126] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 293.487813][ T9126] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.497087][ T9126] usb 6-1: config 0 descriptor?? [ 293.722535][ T9126] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 47 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.740921][ T9126] usb 6-1: USB disconnect, device number 47 [ 293.745218][ T9126] usblp0: removed [ 293.788166][ T43] audit: type=1800 audit(1790207192.980:1134): pid=14565 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.0.3320" name="(" dev="sda1" ino=2042 res=0 errno=0 [ 293.986392][T14571] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 293.986752][T14571] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 293.986877][T14571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 293.989554][T14571] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 294.005992][T14571] hwrng_fill thread creation failed [ 294.235740][T10208] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 294.366150][ T9] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 294.415581][T10208] usb 6-1: Using ep0 maxpacket: 32 [ 294.416926][T10208] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 294.418587][T10208] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 294.418610][T10208] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 294.418631][T10208] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 294.418671][T10208] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 294.418692][T10208] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 294.418715][T10208] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 294.418805][T10208] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 294.422592][T10208] usb 6-1: config 0 descriptor?? [ 294.434409][ T43] audit: type=1400 audit(1790207193.620:1135): avc: denied { mounton } for pid=14592 comm="syz.4.3331" path="/359/file1/file1" dev="autofs" ino=73046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=dir permissive=1 [ 294.535559][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 294.536296][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 294.537824][ T9] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 294.541258][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 294.541275][ T9] usb 5-1: Product: syz [ 294.541289][ T9] usb 5-1: Manufacturer: syz [ 294.541354][ T9] usb 5-1: SerialNumber: syz [ 294.547352][ T9] usb 5-1: config 0 descriptor?? [ 294.550187][T14583] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 294.551842][ T9] hub 5-1:0.0: bad descriptor, ignoring hub [ 294.551857][ T9] hub 5-1:0.0: probe with driver hub failed with error -5 [ 294.606190][ T9126] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 294.634958][T10208] usblp 6-1:0.0: usblp1: USB Bidirectional printer dev 48 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 294.756360][ T9126] usb 10-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.00 [ 294.757502][ T9126] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 294.757546][ T9126] usb 10-1: config 1 interface 1 altsetting 1 bulk endpoint 0x87 has invalid maxpacket 64 [ 294.757568][ T9126] usb 10-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 294.759742][ T9126] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 294.759758][ T9126] usb 10-1: Product: syz [ 294.759769][ T9126] usb 10-1: Manufacturer: syz [ 294.759781][ T9126] usb 10-1: SerialNumber: syz [ 294.886845][ T5811] usb 6-1: USB disconnect, device number 48 [ 295.160459][T14583] usb 5-1: reset high-speed USB device number 50 using dummy_hcd [ 295.178953][T14591] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 295.310531][T14583] usb 5-1: device firmware changed [ 295.316137][ T5832] usb 5-1: USB disconnect, device number 50 [ 295.320587][ T5811] usblp1: removed [ 295.455535][ T5832] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 295.605578][ T5832] usb 5-1: Using ep0 maxpacket: 32 [ 295.606405][ T5832] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 295.608125][ T5832] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 295.610875][ T5832] usb 5-1: string descriptor 0 read error: -22 [ 295.610992][ T5832] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 295.612905][ T5832] usb 5-1: config 0 descriptor?? [ 295.613549][T14594] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 295.614433][ T5832] hub 5-1:0.0: bad descriptor, ignoring hub [ 295.614444][ T5832] hub 5-1:0.0: probe with driver hub failed with error -5 [ 295.869820][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3333'. [ 295.870915][T14598] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3333'. [ 295.938293][ T62] usb 5-1: USB disconnect, device number 51 [ 296.005907][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 296.005981][ T5736] Bluetooth: hci2: command 0x0401 tx timeout [ 296.594357][ T9126] ATM dev 0: failed to start ADSL synchronisation: -71 [ 296.594846][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803dd86600 failed (-71)! [ 296.594892][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803dd86400 failed (-71)! [ 296.594921][ C1] ATM dev 0: usbatm_complete: urb 0xffff88803dd86300 failed (-71)! [ 296.607812][ T9126] usb 10-1: USB disconnect, device number 2 [ 297.525545][ C1] net_ratelimit: 109 callbacks suppressed [ 297.916977][T14640] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 297.937304][T14647] binder: 14646:14647 ioctl c0306201 200000000080 returned -14 [ 297.940420][T14647] binder: 14646:14647 ioctl c0306201 2000000003c0 returned -14 [ 298.086047][ T5736] Bluetooth: hci3: command 0x0c1a tx timeout [ 298.376778][ T43] kauditd_printk_skb: 10 callbacks suppressed [ 298.376794][ T43] audit: type=1400 audit(1790207197.570:1145): avc: denied { write } for pid=14674 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.452806][ T43] audit: type=1400 audit(1790207197.640:1146): avc: denied { write } for pid=14678 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 298.490076][T14683] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3357'. [ 298.577951][ T43] audit: type=1400 audit(1790207197.770:1147): avc: denied { transfer } for pid=14688 comm="syz.0.3360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 298.773408][ T43] audit: type=1400 audit(1790207197.960:1148): avc: denied { create } for pid=14703 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 298.774636][ T43] audit: type=1400 audit(1790207197.960:1149): avc: denied { bind } for pid=14703 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 298.775525][ T43] audit: type=1400 audit(1790207197.960:1150): avc: denied { listen } for pid=14703 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 298.776694][ T43] audit: type=1400 audit(1790207197.970:1151): avc: denied { connect } for pid=14703 comm="syz.1.3365" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 299.107067][T14719] batadv1: entered allmulticast mode [ 299.108007][T14719] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 299.108383][T14719] bridge0: port 3(batadv1) entered blocking state [ 299.108426][T14719] bridge0: port 3(batadv1) entered disabled state [ 299.109657][T14719] batadv1: entered promiscuous mode [ 299.239389][T14721] overlayfs: failed to get index nlink (file0/file1, err=-61) [ 299.312889][ T43] audit: type=1400 audit(1790207198.500:1152): avc: denied { mounton } for pid=14724 comm="syz.0.3373" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 299.383730][T14729] FAULT_INJECTION: forcing a failure. [ 299.383730][T14729] name failslab, interval 1, probability 0, space 0, times 0 [ 299.383751][T14729] CPU: 2 UID: 0 PID: 14729 Comm: syz.0.3376 Tainted: G L syzkaller #0 PREEMPT(full) [ 299.383768][T14729] Tainted: [L]=SOFTLOCKUP [ 299.383772][T14729] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 299.383778][T14729] Call Trace: [ 299.383782][T14729] [ 299.383787][T14729] dump_stack_lvl+0x100/0x190 [ 299.383808][T14729] should_fail_ex.cold+0x5/0xa [ 299.383824][T14729] should_failslab+0xc2/0x120 [ 299.383848][T14729] __kmalloc_noprof+0xfc/0x840 [ 299.383862][T14729] ? argv_split+0x173/0x420 [ 299.383884][T14729] argv_split+0x173/0x420 [ 299.383901][T14729] ? __pfx___trace_uprobe_create+0x10/0x10 [ 299.383918][T14729] trace_probe_create+0x7d/0x100 [ 299.383932][T14729] ? __pfx_trace_probe_create+0x10/0x10 [ 299.383948][T14729] dyn_event_create+0x50/0x90 [ 299.383966][T14729] create_or_delete_trace_uprobe+0x5a/0xb0 [ 299.383981][T14729] trace_parse_run_command+0x1ab/0x3b0 [ 299.383994][T14729] ? __pfx_create_or_delete_trace_uprobe+0x10/0x10 [ 299.384013][T14729] ? __pfx_probes_write+0x10/0x10 [ 299.384026][T14729] vfs_writev+0x5ed/0xdd0 [ 299.384041][T14729] ? __pfx_vfs_writev+0x10/0x10 [ 299.384055][T14729] ? lock_acquire+0x1d1/0x380 [ 299.384066][T14729] ? __fget_files+0x34/0x3d0 [ 299.384085][T14729] ? __fget_files+0x21f/0x3d0 [ 299.384103][T14729] ? do_writev+0x13e/0x340 [ 299.384112][T14729] do_writev+0x13e/0x340 [ 299.384123][T14729] ? __pfx_do_writev+0x10/0x10 [ 299.384132][T14729] ? trace_syscall_enter+0xcc/0x120 [ 299.384151][T14729] do_syscall_64+0x123/0x790 [ 299.384174][T14729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.384190][T14729] RIP: 0033:0x7feba759e159 [ 299.384205][T14729] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 299.384220][T14729] RSP: 002b:00007feba8463028 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 299.384236][T14729] RAX: ffffffffffffffda RBX: 00007feba7825fa0 RCX: 00007feba759e159 [ 299.384247][T14729] RDX: 0000000000000001 RSI: 0000200000002100 RDI: 0000000000000003 [ 299.384260][T14729] RBP: 00007feba763506b R08: 0000000000000000 R09: 0000000000000000 [ 299.384270][T14729] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.384279][T14729] R13: 00007feba7826038 R14: 00007feba7825fa0 R15: 00007ffc403f8d38 [ 299.384302][T14729] [ 299.607803][ T5777] batman_adv: batadv1: IGMP Querier appeared [ 299.607812][ T5777] batman_adv: batadv1: MLD Querier appeared [ 299.719109][ T43] audit: type=1400 audit(1790207198.910:1153): avc: denied { read } for pid=14755 comm="syz.0.3387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 299.723525][ T43] audit: type=1400 audit(1790207198.910:1154): avc: denied { write } for pid=14751 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 300.031810][T14771] overlayfs: upper fs does not support file handles, falling back to index=off. [ 300.031815][T14771] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 300.053947][T14771] overlayfs: upper fs does not support file handles, falling back to index=off. [ 300.053952][T14771] overlayfs: NFS export requires "index=on", falling back to nfs_export=off. [ 300.165654][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.594961][T14797] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3399'. [ 300.599480][T14797] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 300.599495][T14797] netlink: 'syz.0.3399': attribute type 2 has an invalid length. [ 300.599790][T14797] netlink: 'syz.0.3399': attribute type 1 has an invalid length. [ 300.599799][T14797] netlink: 'syz.0.3399': attribute type 2 has an invalid length. [ 300.617468][T14797] ovs-dp0: entered promiscuous mode [ 300.915549][ T9] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 301.065640][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 301.066866][ T9] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 301.069538][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 301.069560][ T9] usb 5-1: SerialNumber: syz [ 301.072279][ T9] usb 5-1: config 0 descriptor?? [ 301.080645][ T9] as10x_usb: device has been detected [ 301.081291][ T9] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 301.114276][ T9] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 301.130485][ T9] as10x_usb: error during firmware upload part1 [ 301.130978][ T9] Registered device nBox DVB-T Dongle [ 301.246535][T14811] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 301.283773][ T42] usb 5-1: USB disconnect, device number 52 [ 301.307569][ T42] Unregistered device nBox DVB-T Dongle [ 301.310174][ T42] as10x_usb: device has been disconnected [ 301.795644][ T42] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 301.858424][T14822] tipc: Enabled bearer , priority 0 [ 301.876771][T14822] syzkaller0: entered promiscuous mode [ 301.876788][T14822] syzkaller0: entered allmulticast mode [ 301.877272][T14822] tipc: Resetting bearer [ 301.894370][T14821] tipc: Resetting bearer [ 301.963542][ T42] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 301.963562][ T42] usb 5-1: too many configurations: 13, using maximum allowed: 8 [ 301.969929][ T42] usb 5-1: config 0 has no interfaces? [ 301.970388][ T42] usb 5-1: config 0 has no interfaces? [ 301.970856][ T42] usb 5-1: config 0 has no interfaces? [ 301.971264][ T42] usb 5-1: config 0 has no interfaces? [ 301.971664][ T42] usb 5-1: config 0 has no interfaces? [ 301.972067][ T42] usb 5-1: config 0 has no interfaces? [ 301.972486][ T42] usb 5-1: config 0 has no interfaces? [ 301.979050][ T42] usb 5-1: config 0 has no interfaces? [ 301.981042][ T42] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 301.981053][ T42] usb 5-1: Product: syz [ 301.981061][ T42] usb 5-1: Manufacturer: syz [ 301.981070][ T42] usb 5-1: SerialNumber: syz [ 301.982520][ T42] usb 5-1: config 0 descriptor?? [ 302.245681][ T5733] Bluetooth: hci3: command 0x0c1a tx timeout [ 302.400885][ T42] usb 5-1: USB disconnect, device number 53 [ 302.735530][ C3] net_ratelimit: 307 callbacks suppressed [ 302.845708][ T9126] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 303.005553][ T9126] usb 5-1: Using ep0 maxpacket: 32 [ 303.006054][ T9126] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 303.007716][ T9126] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 303.007727][ T9126] usb 5-1: SerialNumber: syz [ 303.012251][ T9126] usb 5-1: config 0 descriptor?? [ 303.028676][ T9126] as10x_usb: device has been detected [ 303.029077][ T9126] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 303.052988][ T9126] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 303.063805][ T9126] as10x_usb: error during firmware upload part1 [ 303.064316][ T9126] Registered device nBox DVB-T Dongle [ 303.433800][ T57] usb 5-1: USB disconnect, device number 54 [ 303.486485][ T57] Unregistered device nBox DVB-T Dongle [ 303.488042][ T57] as10x_usb: device has been disconnected [ 303.677921][T14821] tipc: Disabling bearer [ 304.014920][T14832] No control pipe specified [ 304.028777][ T42] bridge0: entered promiscuous mode [ 304.077508][T14834] picdev_read: 76 callbacks suppressed [ 304.077519][T14834] kvm: pic: non byte read [ 304.078377][T14834] kvm: pic: non byte read [ 304.079149][T14834] pic_ioport_write: 10 callbacks suppressed [ 304.079158][T14834] kvm: pic: single mode not supported [ 304.079162][T14834] pic_ioport_write: 12 callbacks suppressed [ 304.079169][T14834] kvm: pic: level sensitive irq not supported [ 304.079570][T14834] kvm: pic: non byte read [ 304.080098][T14834] kvm: pic: single mode not supported [ 304.080316][T14834] kvm: pic: non byte read [ 304.205946][T14841] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 304.259114][T14843] binder_alloc: 14842: binder_alloc_buf size -240 failed, no address space [ 304.259183][T14843] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 304.632388][ T30] wiimote 0005:057E:0330.0010: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 304.633376][ T30] wiimote 0005:057E:0330.0010: New device registered [ 304.731109][T14848] wiimote 0005:057E:0330.0010: Device removed [ 305.148519][ T43] kauditd_printk_skb: 12 callbacks suppressed [ 305.148528][ T43] audit: type=1400 audit(1790207204.340:1167): avc: denied { write } for pid=14854 comm="syz.0.3423" name="dlm" dev="configfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 305.150699][ T43] audit: type=1400 audit(1790207204.340:1168): avc: denied { write } for pid=14854 comm="syz.0.3423" name="comms" dev="configfs" ino=73449 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 305.401103][T14861] netlink: 92 bytes leftover after parsing attributes in process `syz.0.3426'. [ 306.805591][ T30] wiimote 0005:057E:0330.0010: detected device: Nintendo Wii Remote Plus (Gen 2) [ 306.833870][ T30] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input39 [ 306.838395][ T30] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input40 [ 306.840119][ T30] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0330.0010/input/input38 [ 307.346018][T14874] binder: 14873:14874 ioctl c0306201 200000000080 returned -14 [ 307.349749][T14874] binder: 14873:14874 ioctl c0306201 2000000003c0 returned -14 [ 307.925566][ C3] net_ratelimit: 52 callbacks suppressed [ 309.770284][ T5736] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 309.772847][ T5736] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 309.774045][ T5736] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 309.775778][ T5736] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 309.790279][ T5736] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 309.991152][ T5777] bond0 (unregistering): Released all slaves [ 309.995368][ T5777] bond1 (unregistering): Released all slaves [ 310.092512][ T5777] : left promiscuous mode [ 310.221469][ T5777] tipc: Disabling bearer [ 310.221791][ T5777] tipc: Left network mode [ 310.383252][T14876] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 310.583381][ T5777] hsr_slave_0: left promiscuous mode [ 310.583908][ T5777] hsr_slave_1: left promiscuous mode [ 310.832161][T14884] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.832240][T14884] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.832315][T14884] bridge_slave_0: entered allmulticast mode [ 310.833202][T14884] bridge_slave_0: entered promiscuous mode [ 310.834680][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.834751][T14884] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.834823][T14884] bridge_slave_1: entered allmulticast mode [ 310.835667][T14884] bridge_slave_1: entered promiscuous mode [ 310.860927][T14884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.863991][T14884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.892847][T14884] team0: Port device team_slave_0 added [ 310.909383][T14884] team0: Port device team_slave_1 added [ 310.933531][T14884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.933537][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.933550][T14884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.934498][T14884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.934504][T14884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.934517][T14884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.974304][T14884] hsr_slave_0: entered promiscuous mode [ 310.974822][T14884] hsr_slave_1: entered promiscuous mode [ 311.185953][T14884] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 311.193644][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 311.194411][T14884] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 311.199341][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 311.200073][T14884] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 311.211095][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 311.211882][T14884] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 311.221032][T14884] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 311.234052][T14884] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.235995][T14884] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.275360][T14884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.282042][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.294671][T14884] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.302131][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.302193][T11392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.307715][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.307759][T11392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.500377][T14915] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3659427032 (29275416256 ns) > initial count (200000 ns). Using initial count to start timer. [ 311.678396][T14884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 311.845586][ T5733] Bluetooth: hci4: command tx timeout [ 311.851944][T14884] veth0_vlan: entered promiscuous mode [ 311.856312][T14884] veth1_vlan: entered promiscuous mode [ 311.874933][T14884] veth0_macvtap: entered promiscuous mode [ 311.883127][T14884] veth1_macvtap: entered promiscuous mode [ 311.901122][T14884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.910261][T14884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.966198][ T5806] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.985599][ T5806] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.985634][ T5806] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.985661][ T5806] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.029546][T11392] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.029559][T11392] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.056707][T11398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.056718][T11398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.240566][T14939] Bluetooth: MGMT ver 1.23 [ 312.240599][T14939] Bluetooth: hci1: too big key_count value 60421 [ 312.251293][T14937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.291116][ T5803] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 312.291128][ T5803] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 312.312288][T11392] wlan1: authenticated [ 312.312608][T14942] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.323245][T14944] netlink: 'syz.5.3442': attribute type 1 has an invalid length. [ 312.328044][T11392] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 312.343545][T14944] 8021q: adding VLAN 0 to HW filter on device bond1 [ 312.372094][T11398] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 312.372290][T11398] wlan1: associated [ 312.372979][T14937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.403639][T14944] bond1: (slave veth3): Enslaving as an active interface with a down link [ 312.437851][T14944] bond1: (slave dummy0): making interface the new active one [ 312.438651][T14944] dummy0: entered promiscuous mode [ 312.438929][T14944] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 312.453724][T14944] netlink: 'syz.5.3442': attribute type 10 has an invalid length. [ 312.453737][T14944] netlink: 40 bytes leftover after parsing attributes in process `syz.5.3442'. [ 312.466877][T14944] bond1: (slave dummy0): Releasing active interface [ 312.524490][T14950] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 312.838303][T14964] lo speed is unknown, defaulting to 1000 [ 312.840455][T14964] lo speed is unknown, defaulting to 1000 [ 312.841016][T14964] lo speed is unknown, defaulting to 1000 [ 313.001390][ T43] audit: type=1400 audit(1790207212.190:1169): avc: denied { accept } for pid=14963 comm="syz.5.3449" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 313.030516][ T43] audit: type=1400 audit(1790207212.220:1170): avc: denied { write } for pid=14969 comm="syz.6.3451" name="/" dev="9p" ino=71827605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 313.035412][T14964] infiniband syz0: set active [ 313.040447][ T3272] lo speed is unknown, defaulting to 1000 [ 313.040524][T14964] infiniband syz0: added lo [ 313.048635][ C0] net_ratelimit: 197 callbacks suppressed [ 313.058464][T14964] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 313.058492][T14964] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 313.058524][T14964] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 313.106594][T14964] RDS/IB: syz0: added [ 313.106619][T14964] smc: adding ib device syz0 with port count 1 [ 313.106630][T14964] smc: ib device syz0 port 1 has no pnetid [ 313.109744][ T9] lo speed is unknown, defaulting to 1000 [ 313.110729][T14964] lo speed is unknown, defaulting to 1000 [ 313.233484][T14964] lo speed is unknown, defaulting to 1000 [ 313.356030][T14964] lo speed is unknown, defaulting to 1000 [ 313.360029][T14975] kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 313.362210][T14975] kvm: requested 49447 ns i8254 timer period limited to 200000 ns [ 313.363423][T14975] kvm: requested 119847 ns i8254 timer period limited to 200000 ns [ 313.364320][T14975] kvm: requested 129904 ns i8254 timer period limited to 200000 ns [ 313.365213][T14975] kvm: requested 79619 ns i8254 timer period limited to 200000 ns [ 313.368624][T14975] kvm: requested 15923 ns i8254 timer period limited to 200000 ns [ 313.369767][T14975] kvm: requested 193600 ns i8254 timer period limited to 200000 ns [ 313.371173][T14975] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 313.372060][T14975] kvm: requested 173485 ns i8254 timer period limited to 200000 ns [ 313.374583][T14975] kvm: requested 139962 ns i8254 timer period limited to 200000 ns [ 313.456127][T14964] lo speed is unknown, defaulting to 1000 [ 313.565245][T14979] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3453'. [ 313.633212][T14965] infiniband syz1: set active [ 313.636229][T14965] infiniband syz1: added veth0 [ 313.658081][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:482701793/482701794 [ 313.658572][T14982] tipc: Failed to remove unknown binding: 66,0,0/0:482701793/482701794 [ 313.662759][T14965] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 313.662780][T14965] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 313.662802][T14965] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 313.718869][T14965] RDS/IB: syz1: added [ 313.718894][T14965] smc: adding ib device syz1 with port count 1 [ 313.718904][T14965] smc: ib device syz1 port 1 has no pnetid [ 313.811418][T14992] Could not find key with description: [syz0] [ 313.811428][T14992] process_request_key_err: No key [ 313.811433][T14992] Could not find valid key in user session keyring for sig specified in mount option: [syz0] [ 313.811438][T14992] One or more global auth toks could not properly register; rc = [-2] [ 313.811455][T14992] Error validating options; rc = [-2] [ 313.928842][ T5733] Bluetooth: hci4: command tx timeout [ 314.069919][ T43] audit: type=1400 audit(1790207213.260:1171): avc: denied { watch watch_reads } for pid=15001 comm="syz.0.3463" path="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=dir permissive=1 [ 314.267457][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.319166][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.320690][T15011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.415640][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 314.567560][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 314.569017][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.777783][ T10] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 315.032738][ T10] usb 5-1: USB disconnect, device number 55 [ 315.089480][T15035] lo speed is unknown, defaulting to 1000 [ 315.248050][ T43] audit: type=1400 audit(1790207214.440:1172): avc: denied { setopt } for pid=15008 comm="syz.0.3466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 315.830931][ T5736] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 315.832408][ T5736] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 315.836914][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 315.858292][ T5736] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 315.867012][ T5736] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 316.016217][ T5733] Bluetooth: hci4: command tx timeout [ 316.032708][T15056] kvm [15054]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0xc0010002) = 0x80ffffff [ 316.233964][T15052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.291694][T15040] lo speed is unknown, defaulting to 1000 [ 316.294396][ T43] audit: type=1400 audit(1790207215.480:1173): avc: denied { write } for pid=15065 comm="syz.6.3482" name="configs" dev="configfs" ino=13053 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.295218][ T43] audit: type=1400 audit(1790207215.480:1174): avc: denied { write } for pid=15065 comm="syz.6.3482" name="functions" dev="configfs" ino=13052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.300111][ T43] audit: type=1400 audit(1790207215.490:1175): avc: denied { write } for pid=15065 comm="syz.6.3482" name="c.1" dev="configfs" ino=78100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.302024][ T43] audit: type=1400 audit(1790207215.490:1176): avc: denied { create } for pid=15065 comm="syz.6.3482" name="uac2.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 316.307218][ T43] audit: type=1400 audit(1790207215.490:1177): avc: denied { write } for pid=15065 comm="syz.6.3482" name="c.1" dev="configfs" ino=78100 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 316.320944][ T43] audit: type=1400 audit(1790207215.510:1178): avc: denied { write } for pid=15064 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 316.729933][T15080] kvm_do_msr_access: 2327 callbacks suppressed [ 316.897452][ T1445] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.897479][ T1445] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.013114][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.013215][T15040] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.013435][T15040] bridge_slave_0: entered allmulticast mode [ 317.014356][T15040] bridge_slave_0: entered promiscuous mode [ 317.018093][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.018165][T15040] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.018237][T15040] bridge_slave_1: entered allmulticast mode [ 317.019125][T15040] bridge_slave_1: entered promiscuous mode [ 317.065636][T15040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.077237][T15040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.117747][T15040] team0: Port device team_slave_0 added [ 317.119359][T15040] team0: Port device team_slave_1 added [ 317.151358][T15040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.151364][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.151377][T15040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.152436][T15040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.152443][T15040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 317.152455][T15040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.185931][T15098] kvm: apic: phys broadcast and lowest prio [ 317.218370][T15040] hsr_slave_0: entered promiscuous mode [ 317.219033][T15040] hsr_slave_1: entered promiscuous mode [ 317.219420][T15040] debugfs: 'hsr0' already exists in 'hsr' [ 317.219430][T15040] Cannot create hsr debugfs directory [ 317.487752][T15040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 317.507653][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 317.508087][T15040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 317.513056][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 317.513721][T15040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 317.520003][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 317.520588][T15040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 317.525997][T15040] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 317.550556][T15040] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.550598][T15040] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.550733][T15040] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.550895][T15040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.604541][T15040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.611239][T11392] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.611783][T11392] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.620058][T15040] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.626128][T11392] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.626172][T11392] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.629747][T11392] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.629788][T11392] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.935774][ T5733] Bluetooth: hci0: command tx timeout [ 317.945008][T15040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.087563][ T5733] Bluetooth: hci4: command tx timeout [ 318.225275][T15040] veth0_vlan: entered promiscuous mode [ 318.240147][T15040] veth1_vlan: entered promiscuous mode [ 318.245561][ C1] net_ratelimit: 248 callbacks suppressed [ 318.269518][T15040] veth0_macvtap: entered promiscuous mode [ 318.274107][T15040] veth1_macvtap: entered promiscuous mode [ 318.286426][T15040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.293810][T15040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.363259][T11398] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.363267][T11398] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.394040][T11398] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.394049][T11398] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.407443][T14260] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.407481][T14260] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.407503][T14260] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.407525][T14260] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.536784][T15152] FAULT_INJECTION: forcing a failure. [ 318.536784][T15152] name failslab, interval 1, probability 0, space 0, times 0 [ 318.536808][T15152] CPU: 0 UID: 0 PID: 15152 Comm: syz.6.3500 Tainted: G L syzkaller #0 PREEMPT(full) [ 318.536856][T15152] Tainted: [L]=SOFTLOCKUP [ 318.536865][T15152] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 318.536877][T15152] Call Trace: [ 318.536884][T15152] [ 318.536891][T15152] dump_stack_lvl+0x100/0x190 [ 318.536922][T15152] should_fail_ex.cold+0x5/0xa [ 318.536948][T15152] should_failslab+0xc2/0x120 [ 318.536985][T15152] __kmalloc_noprof+0xfc/0x840 [ 318.537007][T15152] ? lsm_blob_alloc+0x68/0x90 [ 318.537029][T15152] lsm_blob_alloc+0x68/0x90 [ 318.537044][T15152] security_prepare_creds+0x2d/0x290 [ 318.537060][T15152] prepare_creds+0x5d6/0x950 [ 318.537072][T15152] restrict_one_thread_callback+0x180/0xba0 [ 318.537090][T15152] ? _raw_spin_unlock_irq+0x23/0x50 [ 318.537107][T15152] task_work_run+0x150/0x240 [ 318.537124][T15152] ? __pfx_task_work_run+0x10/0x10 [ 318.537145][T15152] get_signal+0x1bd/0x21e0 [ 318.537159][T15152] ? __pfx_io_submit_one+0x10/0x10 [ 318.537178][T15152] ? __pfx_get_signal+0x10/0x10 [ 318.537192][T15152] ? __lock_acquire+0x5c0/0x1f40 [ 318.537208][T15152] arch_do_signal_or_restart+0x91/0x7e0 [ 318.537234][T15152] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 318.537266][T15152] ? find_held_lock+0x2b/0x80 [ 318.537290][T15152] ? __might_fault+0xc5/0x140 [ 318.537321][T15152] exit_to_user_mode_loop+0x139/0x700 [ 318.537343][T15152] ? rcu_is_watching+0x13/0xc0 [ 318.537368][T15152] do_syscall_64+0x661/0x790 [ 318.537397][T15152] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.537415][T15152] RIP: 0033:0x7fb1e019e159 [ 318.537430][T15152] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 318.537479][T15152] RSP: 002b:00007fb1e0fe3028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 318.537498][T15152] RAX: 0000000000000001 RBX: 00007fb1e0425fa0 RCX: 00007fb1e019e159 [ 318.537512][T15152] RDX: 00002000000011c0 RSI: 0000000000000001 RDI: 00007fb1e0fc2000 [ 318.537524][T15152] RBP: 00007fb1e023506b R08: 0000000000000000 R09: 0000000000000000 [ 318.537535][T15152] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.537547][T15152] R13: 00007fb1e0426038 R14: 00007fb1e0425fa0 R15: 00007ffdc0e90c78 [ 318.537571][T15152] [ 318.754005][T15161] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3502'. [ 319.351510][T15167] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 319.354945][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 319.355135][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 319.355893][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 319.355962][T15166] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3503'. [ 319.561612][T15176] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3506'. [ 319.822553][T15178] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 319.969657][T15188] loop6: detected capacity change from 0 to 2640 [ 319.970876][T15190] FAULT_INJECTION: forcing a failure. [ 319.970876][T15190] name failslab, interval 1, probability 0, space 0, times 0 [ 319.970897][T15190] CPU: 1 UID: 0 PID: 15190 Comm: syz.7.3511 Tainted: G L syzkaller #0 PREEMPT(full) [ 319.970913][T15190] Tainted: [L]=SOFTLOCKUP [ 319.970917][T15190] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 319.970924][T15190] Call Trace: [ 319.970928][T15190] [ 319.970934][T15190] dump_stack_lvl+0x100/0x190 [ 319.970954][T15190] should_fail_ex.cold+0x5/0xa [ 319.970972][T15190] should_failslab+0xc2/0x120 [ 319.970988][T15190] __kvmalloc_node_noprof+0x113/0x9b0 [ 319.971008][T15190] ? __pfx___mutex_lock+0x10/0x10 [ 319.971026][T15190] ? nf_hook_entries_grow+0x255/0x870 [ 319.971043][T15190] nf_hook_entries_grow+0x255/0x870 [ 319.971057][T15190] ? __call_rcu_common.constprop.0+0x3f2/0x9b0 [ 319.971075][T15190] __nf_register_net_hook+0x112/0x780 [ 319.971090][T15190] nf_register_net_hook+0xdb/0x170 [ 319.971104][T15190] nf_register_net_hooks+0x5d/0xd0 [ 319.971118][T15190] nf_ct_netns_do_get+0x387/0x610 [ 319.971132][T15190] ? __pfx_nf_ct_netns_do_get+0x10/0x10 [ 319.971147][T15190] ? rcu_is_watching+0x13/0xc0 [ 319.971164][T15190] ? trace_contention_end+0x126/0x160 [ 319.971180][T15190] nf_ct_netns_get+0x3d/0x160 [ 319.971194][T15190] xt_ct_tg_check+0x165/0xd00 [ 319.971207][T15190] ? xt_find_target+0x1d3/0x270 [ 319.971222][T15190] ? __pfx_xt_ct_tg_check+0x10/0x10 [ 319.971235][T15190] ? xt_check_target_common+0x280/0xb30 [ 319.971254][T15190] xt_ct_tg_check_v0+0x1a5/0x280 [ 319.971268][T15190] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 319.971286][T15190] ? xt_find_target+0x1d8/0x270 [ 319.971301][T15190] ? __pfx_xt_ct_tg_check_v0+0x10/0x10 [ 319.971315][T15190] xt_check_target+0x117/0x1c0 [ 319.971335][T15190] find_check_entry.isra.0+0x79c/0x990 [ 319.971357][T15190] ? __pfx_find_check_entry.isra.0+0x10/0x10 [ 319.971379][T15190] ? kasan_quarantine_put+0x104/0x240 [ 319.971393][T15190] ? translate_table+0xaf2/0x1630 [ 319.971402][T15190] ? kfree+0x22b/0x6d0 [ 319.971419][T15190] ? xt_check_table_hooks+0x206/0x330 [ 319.971436][T15190] translate_table+0xbcd/0x1630 [ 319.971453][T15190] ? __pfx_translate_table+0x10/0x10 [ 319.971468][T15190] do_ipt_set_ctl+0x689/0xcf0 [ 319.971480][T15190] ? nf_sockopt_find.isra.0+0x222/0x290 [ 319.971495][T15190] ? nf_sockopt_find.isra.0+0x222/0x290 [ 319.971514][T15190] ? __pfx_do_ipt_set_ctl+0x10/0x10 [ 319.971525][T15190] ? __mutex_unlock_slowpath+0x35d/0x930 [ 319.971543][T15190] ? sockopt_release_sock+0x5c/0x70 [ 319.971558][T15190] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 319.971581][T15190] ? nf_sockopt_find.isra.0+0x222/0x290 [ 319.971597][T15190] nf_setsockopt+0x8d/0xf0 [ 319.971613][T15190] ip_setsockopt+0xcb/0xf0 [ 319.971626][T15190] udp_setsockopt+0x64/0xb0 [ 319.971641][T15190] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 319.971659][T15190] do_sock_setsockopt+0xf3/0x1d0 [ 319.971676][T15190] __sys_setsockopt+0x195/0x220 [ 319.971693][T15190] __x64_sys_setsockopt+0xbd/0x160 [ 319.971706][T15190] ? trace_syscall_enter+0xd6/0x120 [ 319.971720][T15190] do_syscall_64+0x123/0x790 [ 319.971738][T15190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.971750][T15190] RIP: 0033:0x7f1737b9e159 [ 319.971760][T15190] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 319.971771][T15190] RSP: 002b:00007f1738a29028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 319.971782][T15190] RAX: ffffffffffffffda RBX: 00007f1737e25fa0 RCX: 00007f1737b9e159 [ 319.971790][T15190] RDX: 0000000000000040 RSI: 0000000000000000 RDI: 0000000000000004 [ 319.971796][T15190] RBP: 00007f1737c3506b R08: 00000000000003d0 R09: 0000000000000000 [ 319.971803][T15190] R10: 0000200000000400 R11: 0000000000000246 R12: 0000000000000000 [ 319.971812][T15190] R13: 00007f1737e26038 R14: 00007f1737e25fa0 R15: 00007fffd523da98 [ 319.971834][T15190] [ 319.977113][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.982342][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.982584][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.982818][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 319.983080][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.006053][ T5733] Bluetooth: hci0: command tx timeout [ 320.016447][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.016709][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.016963][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.017197][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.017459][ T5729] Buffer I/O error on dev loop6, logical block 0, async page read [ 320.307521][T15205] binder: 15203:15205 ioctl c0306201 200000000080 returned -14 [ 320.324705][T15205] binder: 15203:15205 ioctl c0306201 2000000003c0 returned -14 [ 320.335833][T15206] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 320.342129][T15206] iommufd_mock iommufd_mock1: Adding to iommu group 10 [ 320.363072][T15206] iommufd_mock iommufd_mock2: Adding to iommu group 11 [ 320.531823][T15217] kvm: user requested TSC rate below hardware speed [ 320.532106][T15217] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=540686624 (1081373248 ns) > initial count (1080055392 ns). Using initial count to start timer. [ 320.589378][T15217] kvm: pic: non byte write [ 321.717808][T15245] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 322.091034][ T5733] Bluetooth: hci0: command tx timeout [ 322.319778][ T10] usb 11-1: new high-speed USB device number 2 using dummy_hcd [ 322.489105][ T10] usb 11-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 322.501891][ T10] usb 11-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 322.501908][ T10] usb 11-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 322.501918][ T10] usb 11-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 322.501950][ T10] usb 11-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.503316][ T10] usb 11-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 322.503326][ T10] usb 11-1: Product: syz [ 322.503333][ T10] usb 11-1: Manufacturer: syz [ 322.508505][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 322.508512][ T10] cdc_wdm 11-1:1.0: skipping garbage [ 322.511806][ T10] cdc_wdm 11-1:1.0: cdc-wdm0: USB WDM device [ 322.511815][ T10] cdc_wdm 11-1:1.0: Unknown control protocol [ 322.780955][ C0] cdc_wdm 11-1:1.0: nonzero urb status received: -71 [ 322.781026][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - 0 bytes [ 322.781082][ C0] cdc_wdm 11-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 322.782478][ T10] usb 11-1: USB disconnect, device number 2 [ 323.445541][ C1] net_ratelimit: 276 callbacks suppressed [ 323.494131][T15295] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd b704, magic b7 != 6b] [ 323.732080][ T43] kauditd_printk_skb: 4 callbacks suppressed [ 323.732093][ T43] audit: type=1800 audit(1790207222.920:1183): pid=15309 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.5.3551" name="devlink" dev="sda1" ino=2046 res=0 errno=0 [ 323.733222][T15309] EXT4-fs warning (device sda1): verify_group_input:136: Cannot add at group 25965 (only 8 groups) [ 323.819585][T15312] netlink: 'syz.5.3552': attribute type 1 has an invalid length. [ 323.819596][T15312] netlink: 'syz.5.3552': attribute type 1 has an invalid length. [ 323.819603][T15312] netlink: 180 bytes leftover after parsing attributes in process `syz.5.3552'. [ 323.819611][T15312] netlink: 'syz.5.3552': attribute type 1 has an invalid length. [ 323.943675][ T43] audit: type=1400 audit(1790207223.130:1184): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.950212][ T43] audit: type=1400 audit(1790207223.140:1185): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.950339][ T43] audit: type=1400 audit(1790207223.140:1186): avc: denied { read } for pid=15315 comm="syz.0.3554" name="v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 323.954604][ T43] audit: type=1400 audit(1790207223.140:1187): avc: denied { open } for pid=15315 comm="syz.0.3554" path="/968/nfsd/v4_end_grace" dev="nfsd" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 323.955719][ T43] audit: type=1400 audit(1790207223.150:1188): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.969396][ T43] audit: type=1400 audit(1790207223.160:1189): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.970038][ T43] audit: type=1400 audit(1790207223.160:1190): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.971492][ T43] audit: type=1400 audit(1790207223.160:1191): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 323.971519][ T43] audit: type=1400 audit(1790207223.160:1192): avc: denied { search } for pid=15315 comm="syz.0.3554" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 324.042147][T15323] nftables ruleset with unbound chain [ 324.095927][T15321] fuse-io-uring is disabled by module parameter [ 324.131514][T15317] iommufd_mock iommufd_mock0: Adding to iommu group 9 [ 324.176092][ T5733] Bluetooth: hci0: command tx timeout [ 324.336602][T15335] input: syz1 as /devices/virtual/input/input41 [ 324.561144][T15349] overlayfs: failed to resolve './bus': -2 [ 324.625801][T15349] smpboot: CPU 1 is now offline [ 324.688742][T15353] FAULT_INJECTION: forcing a failure. [ 324.688742][T15353] name failslab, interval 1, probability 0, space 0, times 0 [ 324.688762][T15353] CPU: 0 UID: 0 PID: 15353 Comm: syz.5.3567 Tainted: G L syzkaller #0 PREEMPT(full) [ 324.688777][T15353] Tainted: [L]=SOFTLOCKUP [ 324.688782][T15353] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 324.688789][T15353] Call Trace: [ 324.688794][T15353] [ 324.688799][T15353] dump_stack_lvl+0x100/0x190 [ 324.688854][T15353] should_fail_ex.cold+0x5/0xa [ 324.688871][T15353] should_failslab+0xc2/0x120 [ 324.688891][T15353] __kmalloc_noprof+0xfc/0x840 [ 324.688904][T15353] ? sock_kmalloc+0x111/0x170 [ 324.688928][T15353] sock_kmalloc+0x111/0x170 [ 324.688946][T15353] ipv6_sock_ac_join+0x257/0xd80 [ 324.688960][T15353] ? _copy_from_user+0x59/0xd0 [ 324.688974][T15353] ? __pfx_ipv6_sock_ac_join+0x10/0x10 [ 324.688986][T15353] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 324.689004][T15353] ? __local_bh_enable_ip+0xa5/0x120 [ 324.689017][T15353] ? lockdep_hardirqs_on+0x7d/0x110 [ 324.689042][T15353] do_ipv6_setsockopt+0x3874/0x44a0 [ 324.689056][T15353] ? avc_has_perm_noaudit+0x56/0x470 [ 324.689075][T15353] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 324.689090][T15353] ? avc_has_perm_noaudit+0x145/0x470 [ 324.689108][T15353] ? avc_has_perm+0x135/0x1e0 [ 324.689124][T15353] ? __pfx_avc_has_perm+0x10/0x10 [ 324.689146][T15353] ? sock_has_perm+0x25a/0x2f0 [ 324.689157][T15353] ? __pfx_sock_has_perm+0x10/0x10 [ 324.689169][T15353] ? selinux_netlbl_socket_setsockopt+0x134/0x470 [ 324.689184][T15353] ? __pfx_selinux_netlbl_socket_setsockopt+0x10/0x10 [ 324.689202][T15353] ? ipv6_setsockopt+0xcb/0x170 [ 324.689214][T15353] ipv6_setsockopt+0xcb/0x170 [ 324.689229][T15353] udpv6_setsockopt+0x64/0xb0 [ 324.689246][T15353] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 324.689270][T15353] do_sock_setsockopt+0xf3/0x1d0 [ 324.689294][T15353] __sys_setsockopt+0x195/0x220 [ 324.689318][T15353] __x64_sys_setsockopt+0xbd/0x160 [ 324.689338][T15353] ? trace_syscall_enter+0xd6/0x120 [ 324.689361][T15353] do_syscall_64+0x123/0x790 [ 324.689388][T15353] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.689406][T15353] RIP: 0033:0x7f59dd39e159 [ 324.689422][T15353] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 324.689439][T15353] RSP: 002b:00007f59de1f4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 324.689458][T15353] RAX: ffffffffffffffda RBX: 00007f59dd625fa0 RCX: 00007f59dd39e159 [ 324.689471][T15353] RDX: 000000000000001b RSI: 0000000000000029 RDI: 0000000000000005 [ 324.689483][T15353] RBP: 00007f59dd43506b R08: 0000000000000014 R09: 0000000000000000 [ 324.689493][T15353] R10: 0000200000000100 R11: 0000000000000246 R12: 0000000000000000 [ 324.689504][T15353] R13: 00007f59dd626038 R14: 00007f59dd625fa0 R15: 00007ffcd0cbaec8 [ 324.689527][T15353] [ 324.783760][T15355] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 325.954935][T15401] lo speed is unknown, defaulting to 1000 [ 327.215740][ T5733] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 327.370636][T15444] FAULT_INJECTION: forcing a failure. [ 327.370636][T15444] name failslab, interval 1, probability 0, space 0, times 0 [ 327.370665][T15444] CPU: 3 UID: 0 PID: 15444 Comm: syz.6.3598 Tainted: G L syzkaller #0 PREEMPT(full) [ 327.370681][T15444] Tainted: [L]=SOFTLOCKUP [ 327.370686][T15444] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 327.370693][T15444] Call Trace: [ 327.370697][T15444] [ 327.370702][T15444] dump_stack_lvl+0x100/0x190 [ 327.370722][T15444] should_fail_ex.cold+0x5/0xa [ 327.370740][T15444] should_failslab+0xc2/0x120 [ 327.370762][T15444] kmem_cache_alloc_noprof+0x92/0x6a0 [ 327.370774][T15444] ? sk_skb_reason_drop+0x114/0x1b0 [ 327.370791][T15444] ? skb_clone+0x190/0x400 [ 327.370813][T15444] skb_clone+0x190/0x400 [ 327.370836][T15444] bpf_clone_redirect+0x166/0x500 [ 327.370862][T15444] ? __pfx___cant_migrate+0x10/0x10 [ 327.370886][T15444] bpf_prog_26e1271c592147e7+0x22/0x2a [ 327.370897][T15444] bpf_test_run+0x39c/0xa40 [ 327.370909][T15444] ? bpf_test_run+0x1c6/0xa40 [ 327.370922][T15444] ? __pfx_bpf_test_run+0x10/0x10 [ 327.370943][T15444] ? eth_type_trans+0x2e3/0x720 [ 327.370958][T15444] bpf_prog_test_run_skb+0x15b3/0x3530 [ 327.370972][T15444] ? lock_acquire+0x1d1/0x380 [ 327.370987][T15444] ? __fget_files+0x1a1/0x3d0 ** 185 printk messages dropped ** ** 140 printk messages dropped ** ** 153 printk messages dropped ** ** 148 printk messages dropped ** ** 141 printk messages dropped ** ** 159 printk messages dropped ** ** 144 printk messages dropped ** ** 138 printk messages dropped ** ** 101 printk messages dropped ** [ 328.485566][ C0] net_ratelimit: 175 callbacks suppressed [ 328.705197][T15477] kvm: pic: non byte write [ 328.775697][ T43] kauditd_printk_skb: 16 callbacks suppressed [ 328.775707][ T43] audit: type=1400 audit(1790207227.970:1209): avc: denied { write } for pid=15487 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.869552][ T43] audit: type=1400 audit(1790207228.050:1210): avc: denied { write } for pid=15489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 328.942854][ T43] audit: type=1400 audit(1790207228.130:1211): avc: denied { write } for pid=15494 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.024177][ T43] audit: type=1400 audit(1790207228.210:1212): avc: denied { write } for pid=15497 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.080421][ T43] audit: type=1400 audit(1790207228.270:1213): avc: denied { write } for pid=15500 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.221599][ T43] audit: type=1400 audit(1790207228.410:1214): avc: denied { write } for pid=15504 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.299603][T15509] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 329.302918][ T43] audit: type=1400 audit(1790207228.490:1215): avc: denied { write } for pid=15507 comm="rm" name="hook-state" dev="tmpfs" ino=1839 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 329.650616][ T43] audit: type=1400 audit(1790207228.840:1216): avc: denied { rmdir } for pid=5730 comm="syz-executor" name="proc" dev="sda1" ino=1264 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 329.769149][ T43] audit: type=1400 audit(1790207228.960:1217): avc: denied { setopt } for pid=15521 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 329.772024][ T43] audit: type=1400 audit(1790207228.960:1218): avc: denied { bind } for pid=15521 comm="syz.5.3616" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 330.066254][T15529] FAULT_INJECTION: forcing a failure. [ 330.066254][T15529] name failslab, interval 1, probability 0, space 0, times 0 [ 330.066276][T15529] CPU: 3 UID: 0 PID: 15529 Comm: syz.5.3619 Tainted: G L syzkaller #0 PREEMPT(full) [ 330.066293][T15529] Tainted: [L]=SOFTLOCKUP [ 330.066297][T15529] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 330.066304][T15529] Call Trace: [ 330.066309][T15529] [ 330.066314][T15529] dump_stack_lvl+0x100/0x190 [ 330.066335][T15529] should_fail_ex.cold+0x5/0xa [ 330.066353][T15529] should_failslab+0xc2/0x120 [ 330.066369][T15529] __kmalloc_cache_noprof+0x91/0x6d0 [ 330.066386][T15529] ? get_mm_exe_file+0x8a/0x1a0 [ 330.066398][T15529] ? get_current_details+0xa0/0x670 [ 330.066420][T15529] get_current_details+0xa0/0x670 [ 330.066441][T15529] landlock_merge_ruleset+0x7ea/0xd10 [ 330.066455][T15529] __do_sys_landlock_restrict_self+0x264/0x10a0 [ 330.066481][T15529] do_syscall_64+0x123/0x790 [ 330.066501][T15529] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.066514][T15529] RIP: 0033:0x7f59dd39e159 [ 330.066524][T15529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 330.066536][T15529] RSP: 002b:00007f59de1f4028 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 330.066548][T15529] RAX: ffffffffffffffda RBX: 00007f59dd625fa0 RCX: 00007f59dd39e159 [ 330.066556][T15529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 330.066564][T15529] RBP: 00007f59dd43506b R08: 0000000000000000 R09: 0000000000000000 [ 330.066571][T15529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 330.066579][T15529] R13: 00007f59dd626038 R14: 00007f59dd625fa0 R15: 00007ffcd0cbaec8 [ 330.066595][T15529] [ 330.324425][T15536] io-wq is not configured for unbound workers [ 331.639770][T11396] IPVS: starting estimator thread 0... [ 331.640352][T11396] IPVS: stopping estimator thread 0... [ 331.644030][T11396] IPVS: starting estimator thread 0... [ 331.736654][T15553] IPVS: using max 28 ests per chain, 67200 per kthread [ 331.767793][T15558] binder_alloc: 15557: binder_alloc_buf, no vma [ 332.136745][T15577] fuse: Bad value for 'fd' [ 332.185115][ T5733] Bluetooth: hci3: SCO packet for unknown connection handle 201 [ 332.741585][T15595] fuse: Bad value for 'fd' [ 332.815197][T15597] fuse: Bad value for 'fd' [ 333.322024][T15610] fuse: fd is not a fuse device [ 333.525523][ C0] net_ratelimit: 74 callbacks suppressed [ 333.558963][T15617] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000 [ 333.841416][T15628] siw: device registration error -23 [ 334.263929][T15630] overlayfs: failed to clone upperpath [ 334.666283][T15634] Bluetooth: MGMT ver 1.23 [ 334.931463][T15590] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 335.038542][T15643] ceph: No mds server is up or the cluster is laggy [ 335.475653][ T10] usb 11-1: new high-speed USB device number 3 using dummy_hcd [ 335.636956][ T10] usb 11-1: New USB device found, idVendor=0451, idProduct=505f, bcdDevice= 1.00 [ 335.638199][ T10] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.639144][ T10] usb 11-1: config 2 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 335.641241][ T10] usb 11-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.641257][ T10] usb 11-1: Product: syz [ 335.641269][ T10] usb 11-1: Manufacturer: syz [ 335.641282][ T10] usb 11-1: SerialNumber: syz [ 335.679766][ T10] ti_usb_3410_5052 11-1:2.0: TI USB 5052 2 port adapter converter detected [ 335.690666][ T9] usb 12-1: new high-speed USB device number 2 using dummy_hcd [ 335.716979][ T10] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB0 [ 335.741043][ T10] usb 11-1: TI USB 5052 2 port adapter converter now attached to ttyUSB1 [ 335.848817][ T9] usb 12-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 335.849793][ T9] usb 12-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 335.849850][ T9] usb 12-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.937690][ T9] keyspan 12-1:1.0: Keyspan 2 port adapter converter detected [ 335.937900][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 81 [ 335.937970][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 1 [ 335.939241][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 84 [ 335.939318][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 2 [ 335.966402][ T9] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 335.967273][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 88 [ 335.967313][ T9] keyspan 12-1:1.0: found no endpoint descriptor for endpoint 6 [ 335.983915][ T9] usb 12-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 336.599752][ T5811] usb 12-1: USB disconnect, device number 2 [ 336.603522][ T5811] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 336.633243][ T5811] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 336.637845][ T5811] keyspan 12-1:1.0: device disconnected [ 337.010472][T15687] netlink: 'syz.7.3679': attribute type 1 has an invalid length. [ 337.011532][T15687] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3679'. [ 337.442661][ T43] kauditd_printk_skb: 5 callbacks suppressed [ 337.442681][ T43] audit: type=1400 audit(1790207236.630:1224): avc: denied { read } for pid=5730 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 337.443040][ T43] audit: type=1400 audit(1790207236.630:1225): avc: denied { open } for pid=5730 comm="syz-executor" path="/977/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 337.444798][ T43] audit: type=1804 audit(1790207236.630:1226): pid=5730 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz-executor" name="/newroot/977/mnt/swap-file" dev="sda1" ino=2025 res=1 errno=0 [ 337.445405][ T43] audit: type=1400 audit(1790207236.630:1227): avc: denied { setattr } for pid=5730 comm="syz-executor" path="/977/mnt/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 338.016406][T15655] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set config on port 0, -110 [ 338.016593][T15655] ti_usb_3410_5052_2 ttyUSB0: ti_write_byte - failed, -32 [ 338.016612][T15655] ti_usb_3410_5052_2 ttyUSB0: ti_set_termios - cannot set modem control on port 0, -32 [ 338.016968][T15655] ti_usb_3410_5052_2 ttyUSB0: ti_open - cannot send open command (2), -32 [ 338.022169][ T3272] usb 11-1: USB disconnect, device number 3 [ 338.025182][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.025598][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.025925][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.026999][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.030574][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.030648][ T3272] ti_usb_3410_5052_2 ttyUSB0: TI USB 5052 2 port adapter converter now disconnected from ttyUSB0 [ 338.031270][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.031352][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.031681][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.034119][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.034363][ T3272] ti_usb_3410_5052_2 ttyUSB1: TI USB 5052 2 port adapter converter now disconnected from ttyUSB1 [ 338.034461][ T5139] udevd[5139]: could not touch /run/udev/queue: No such file or directory [ 338.036845][ T3272] ti_usb_3410_5052 11-1:2.0: device disconnected [ 338.262246][T15703] fuse: fd is not a fuse device [ 338.385080][ T43] audit: type=1400 audit(1790207237.570:1228): avc: denied { node_bind } for pid=15715 comm="syz.5.3690" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 338.645512][ C3] net_ratelimit: 770 callbacks suppressed [ 338.678966][T15722] overlayfs: failed to clone upperpath [ 338.726033][T15724] fuse: fd is not a fuse device [ 338.835603][ T42] usb 11-1: new high-speed USB device number 4 using dummy_hcd [ 338.997173][ T42] usb 11-1: unable to get BOS descriptor or descriptor too short [ 338.997194][ T42] usb 11-1: New USB device found, idVendor=09c4, idProduct=0011, bcdDevice= 6.38 [ 338.997873][ T42] usb 11-1: unable to read config index 0 descriptor/start: -71 [ 338.997889][ T42] usb 11-1: can't read configurations, error -71 [ 339.265113][T15730] __vm_enough_memory: pid: 15730, comm: syz.7.3694, bytes: 11727088533504 not enough memory for the allocation [ 339.265262][T15730] __vm_enough_memory: pid: 15730, comm: syz.7.3694, bytes: 11727088533504 not enough memory for the allocation [ 339.883458][T15750] fuse: fd is not a fuse device [ 340.258075][T15772] netlink: 'syz.5.3709': attribute type 1 has an invalid length. [ 340.286953][T15772] bond2: entered promiscuous mode [ 340.287150][T15772] 8021q: adding VLAN 0 to HW filter on device bond2 [ 340.360899][T15772] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.360908][T15772] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 340.360916][T15772] bond2: (slave ipvlan2): Setting fail_over_mac to active for active-backup mode [ 340.478343][T15780] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 340.478357][T15780] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 340.690136][ T43] audit: type=1800 audit(1790207239.880:1229): pid=15795 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3715" name="file1" dev="sda1" ino=19 res=0 errno=0 [ 340.723184][T15798] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3718'. [ 340.797761][T15798] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3718'. [ 340.797773][T15798] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3718'. [ 340.854197][T15798] veth5: entered allmulticast mode [ 340.864255][T15798] bond3: (slave veth5): Enslaving as an active interface with an up link [ 340.918872][ T43] audit: type=1400 audit(1790207240.110:1230): avc: denied { write } for pid=15805 comm="syz.5.3720" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 340.961709][T15808] netlink: 'syz.6.3721': attribute type 1 has an invalid length. [ 341.069052][T15808] bond1: (slave veth3): Enslaving as an active interface with a down link [ 341.122856][T15808] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3721'. [ 341.128996][T15808] 8021q: adding VLAN 0 to HW filter on device bond1 [ 341.227063][T15819] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3724'. [ 341.259298][T15819] bond2: entered promiscuous mode [ 341.259306][T15819] bond2: entered allmulticast mode [ 341.463189][ T43] audit: type=1800 audit(1790207240.650:1231): pid=15831 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.6.3725" name="file1" dev="sda1" ino=19 res=0 errno=0 [ 341.619044][T15835] netlink: 14 bytes leftover after parsing attributes in process `syz.7.3728'. [ 341.631391][ T43] audit: type=1400 audit(1790207240.820:1232): avc: denied { write } for pid=15837 comm="syz.6.3729" name="functions" dev="configfs" ino=13052 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.656597][T15835] dummy0 (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 341.656626][T15835] net dummy0: siw: event 6 [ 341.657575][T15835] dummy0 (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 341.657601][T15835] net dummy0: siw: event 18 [ 341.657669][T15835] kernfs rps_cpus: removing [ 341.657718][T15835] kernfs rps_flow_cnt: removing [ 341.657754][T15835] kobject: 'rx-1' (ffff888037606550): kobject_cleanup, parent ffff888056c2b350 [ 341.657773][T15835] kobject: 'rx-1' (ffff888037606550): auto cleanup kobject_del [ 341.657785][T15835] kobject: 'rx-1' (ffff888037606550): auto cleanup 'remove' event [ 341.657799][T15835] kobject: 'rx-1' (ffff888037606550): kobject_uevent_env [ 341.657839][T15835] kobject: 'rx-1' (ffff888037606550): fill_kobj_path: path = '/devices/virtual/net/dummy0/queues/rx-1' [ 341.657950][T15835] kernfs rx-1: removing [ 341.657987][T15835] kobject: 'rx-1' (ffff888037606550): calling ktype release [ 341.658011][T15835] kobject: 'rx-1': free name [ 341.658037][T15835] kernfs rps_cpus: removing [ 341.658078][T15835] kernfs rps_flow_cnt: removing [ 341.658113][T15835] kobject: 'rx-0' (ffff888037606450): kobject_cleanup, parent ffff888056c2b350 [ 341.658129][T15835] kobject: 'rx-0' (ffff888037606450): auto cleanup kobject_del [ 341.658141][T15835] kobject: 'rx-0' (ffff888037606450): auto cleanup 'remove' event [ 341.658155][T15835] kobject: 'rx-0' (ffff888037606450): kobject_uevent_env [ 341.658214][T15835] kobject: 'rx-0' (ffff888037606450): fill_kobj_path: path = '/devices/virtual/net/dummy0/queues/rx-0' [ 341.658315][T15835] kernfs rx-0: removing [ 341.658350][T15835] kobject: 'rx-0' (ffff888037606450): calling ktype release [ 341.658372][T15835] kobject: 'rx-0': free name [ 341.658399][T15835] kernfs tx_timeout: removing [ 341.658439][T15835] kernfs traffic_class: removing [ 341.658489][T15835] kernfs xps_cpus: removing [ 341.658625][T15835] kernfs xps_rxqs: removing [ 341.658668][T15835] kernfs tx_maxrate: removing [ 341.658703][T15835] kobject: 'tx-1' (ffff8880360091e0): kobject_cleanup, parent ffff888056c2b350 [ 341.658721][T15835] kobject: 'tx-1' (ffff8880360091e0): auto cleanup kobject_del [ 341.658732][ T43] audit: type=1400 audit(1790207240.850:1233): avc: denied { write } for pid=15837 comm="syz.6.3729" name="uncompressed" dev="configfs" ino=83381 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 341.658734][T15835] kobject: 'tx-1' (ffff8880360091e0): auto cleanup 'remove' event [ 341.658748][T15835] kobject: 'tx-1' (ffff8880360091e0): kobject_uevent_env [ 341.658789][T15835] kobject: 'tx-1' (ffff8880360091e0): fill_kobj_path: path = '/devices/virtual/net/dummy0/queues/tx-1' [ 341.658901][T15835] kernfs tx-1: removing [ 341.658945][T15835] kobject: 'tx-1' (ffff8880360091e0): calling ktype release [ 341.658968][T15835] kobject: 'tx-1': free name [ 341.658995][T15835] kernfs tx_timeout: removing [ 341.659037][T15835] kernfs traffic_class: removing [ 341.659077][T15835] kernfs xps_cpus: removing [ 341.659116][T15835] kernfs xps_rxqs: removing [ 341.659155][T15835] kernfs tx_maxrate: removing [ 341.659189][T15835] kobject: 'tx-0' (ffff888036009020): kobject_cleanup, parent ffff888056c2b350 [ 341.659204][T15835] kobject: 'tx-0' (ffff888036009020): auto cleanup kobject_del [ 341.659216][T15835] kobject: 'tx-0' (ffff888036009020): auto cleanup 'remove' event [ 341.659228][T15835] kobject: 'tx-0' (ffff888036009020): kobject_uevent_env [ 341.659264][T15835] kobject: 'tx-0' (ffff888036009020): fill_kobj_path: path = '/devices/virtual/net/dummy0/queues/tx-0' [ 341.659366][T15835] kernfs tx-0: removing [ 341.659400][T15835] kobject: 'tx-0' (ffff888036009020): calling ktype release [ 341.659420][T15835] kobject: 'tx-0': free name [ 341.659446][T15835] kernfs queues: removing [ 341.659479][T15835] kobject: 'queues' (ffff888056c2b350): kobject_cleanup, parent 0000000000000000 [ 341.659495][T15835] kobject: 'queues' (ffff888056c2b350): calling ktype release [ 341.659508][T15835] kobject: 'queues' (ffff888056c2b350): kset_release [ 341.659533][T15835] kobject: 'queues': free name [ 341.659577][T15835] kernfs runtime_status: removing [ 341.659616][T15835] kernfs control: removing [ 341.659747][T15835] kernfs runtime_suspended_time: removing [ 341.659789][T15835] kernfs runtime_active_time: removing [ 341.659829][T15835] kernfs autosuspend_delay_ms: removing [ 341.659896][T15835] kernfs power: removing [ 341.659951][T15835] kernfs subsystem: removing [ 341.659994][T15835] kernfs dummy0: removing [ 341.660043][T15835] kernfs uevent: removing [ 341.660095][T15835] kernfs rx_packets: removing [ 341.660136][T15835] kernfs tx_packets: removing [ 341.660176][T15835] kernfs rx_bytes: removing [ 341.660214][T15835] kernfs tx_bytes: removing [ 341.660253][T15835] kernfs rx_errors: removing [ 341.660292][T15835] kernfs tx_errors: removing [ 341.660330][T15835] kernfs rx_dropped: removing [ 341.660370][T15835] kernfs tx_dropped: removing [ 341.660409][T15835] kernfs multicast: removing [ 341.660446][T15835] kernfs collisions: removing [ 341.660485][T15835] kernfs rx_length_errors: removing [ 341.660523][T15835] kernfs rx_over_errors: removing [ 341.660562][T15835] kernfs rx_crc_errors: removing [ 341.660601][T15835] kernfs rx_frame_errors: removing [ 341.660641][T15835] kernfs rx_fifo_errors: removing [ 341.660679][T15835] kernfs rx_missed_errors: removing [ 341.660718][T15835] kernfs tx_aborted_errors: removing [ 341.660872][T15835] kernfs tx_carrier_errors: removing [ 341.660919][T15835] kernfs tx_fifo_errors: removing [ 341.660959][T15835] kernfs tx_heartbeat_errors: removing [ 341.660999][T15835] kernfs tx_window_errors: removing [ 341.661040][T15835] kernfs rx_compressed: removing [ 341.661079][T15835] kernfs tx_compressed: removing [ 341.661119][T15835] kernfs rx_nohandler: removing [ 341.661157][T15835] kernfs statistics: removing [ 341.661206][T15835] kernfs netdev_group: removing [ 341.661246][T15835] kernfs type: removing [ 341.661284][T15835] kernfs dev_id: removing [ 341.661321][T15835] kernfs dev_port: removing [ 341.661360][T15835] kernfs iflink: removing [ 341.661400][T15835] kernfs ifindex: removing [ 341.661437][T15835] kernfs name_assign_type: removing [ 341.661476][T15835] kernfs addr_assign_type: removing [ 341.661515][T15835] kernfs addr_len: removing [ 341.661553][T15835] kernfs link_mode: removing [ 341.661591][T15835] kernfs address: removing [ 341.661629][T15835] kernfs broadcast: removing [ 341.661667][T15835] kernfs speed: removing [ 341.661704][T15835] kernfs duplex: removing [ 341.661742][T15835] kernfs dormant: removing [ 341.661780][T15835] kernfs testing: removing [ 341.661817][T15835] kernfs operstate: removing [ 341.661855][T15835] kernfs carrier_changes: removing [ 341.661986][T15835] kernfs ifalias: removing [ 341.662027][T15835] kernfs carrier: removing [ 341.662066][T15835] kernfs mtu: removing [ 341.662106][T15835] kernfs flags: removing [ 341.662145][T15835] kernfs tx_queue_len: removing [ 341.662185][T15835] kernfs gro_flush_timeout: removing [ 341.662224][T15835] kernfs napi_defer_hard_irqs: removing [ 341.662263][T15835] kernfs proto_down: removing [ 341.662301][T15835] kernfs carrier_up_count: removing [ 341.662340][T15835] kernfs carrier_down_count: removing [ 341.662379][T15835] kernfs threaded: removing [ 341.662412][T15835] PM: Removing info for No Bus:dummy0 [ 341.662434][T15835] kobject: 'dummy0' (ffff88802dda27c0): kobject_uevent_env [ 341.662470][T15835] kobject: 'dummy0' (ffff88802dda27c0): fill_kobj_path: path = '/devices/virtual/net/dummy0' [ 341.662578][T15835] kernfs dummy0: removing [ 341.665397][T15838] [ 341.715770][T15839] kcov: kcov_start: t = ffff888056e12580, size = 524288, area = ffffc90038255000 [ 341.976697][T15838] ====================================================== [ 341.979700][T15838] WARNING: possible circular locking dependency detected [ 341.982721][T15838] syzkaller #0 Tainted: G L [ 341.985387][T15838] ------------------------------------------------------ [ 341.988408][T15838] syz.6.3729/15838 is trying to acquire lock: [ 341.991030][T15838] ffffffff903fde68 (gadget_subsys.su_mutex){+.+.}-{4:4}, at: uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 341.995893][T15838] [ 341.995893][T15838] but task is already holding lock: [ 341.999076][T15838] ffff888062cf5270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 342.003082][T15838] [ 342.003082][T15838] which lock already depends on the new lock. [ 342.003082][T15838] [ 342.007553][T15838] [ 342.007553][T15838] the existing dependency chain (in reverse order) is: [ 342.011409][T15838] [ 342.011409][T15838] -> #4 (&p->frag_sem){++++}-{4:4}: [ 342.014657][T15838] lock_acquire+0x1d1/0x380 [ 342.016923][T15838] down_write_killable+0x93/0x240 [ 342.019299][T15838] configfs_rmdir+0x3fa/0x950 [ 342.021724][T15838] vfs_rmdir+0x328/0x8a0 [ 342.023832][T15838] filename_rmdir+0x31a/0x5c0 [ 342.026123][T15838] __x64_sys_unlinkat+0xf5/0x130 [ 342.028462][T15838] do_syscall_64+0x123/0x790 [ 342.030711][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.033440][T15838] [ 342.033440][T15838] -> #3 (&sb->s_type->i_mutex_key#25){++++}-{4:4}: [ 342.037103][T15838] lock_acquire+0x1d1/0x380 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 342.039284][T15838] down_write+0x8b/0x1f0 [ 342.041427][T15838] configfs_depend_item_unlocked+0xf3/0x6a0 [ 342.044253][T15838] usbg_make_tpg+0x251/0x610 [ 342.046534][T15838] target_fabric_make_tpg+0xab/0x8c0 [ 342.049041][T15838] configfs_mkdir+0x525/0xd40 [ 342.051361][T15838] vfs_mkdir+0x364/0x850 [ 342.053451][T15838] filename_mkdirat+0x48b/0x5e0 [ 342.055801][T15838] __x64_sys_mkdirat+0x89/0xc0 [ 342.058167][T15838] do_syscall_64+0x123/0x790 [ 342.060347][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.063103][T15838] [ 342.063103][T15838] -> #2 (tpg_instances_lock){+.+.}-{4:4}: [ 342.066528][T15838] lock_acquire+0x1d1/0x380 [ 342.068801][T15838] __mutex_lock+0x1a4/0x1bd0 [ 342.071011][T15838] tcm_alloc_inst+0x5f/0x1e0 [ 342.073241][T15838] try_get_usb_function_instance+0x136/0x1f0 [ 342.076014][T15838] usb_get_function_instance+0x16/0x70 [ 342.078605][T15838] function_make+0x18c/0x3f0 [ 342.080821][T15838] configfs_mkdir+0x525/0xd40 [ 342.083112][T15838] vfs_mkdir+0x364/0x850 [ 342.085157][T15838] filename_mkdirat+0x48b/0x5e0 [ 342.087418][T15838] __x64_sys_mkdirat+0x89/0xc0 [ 342.089804][T15838] do_syscall_64+0x123/0x790 [ 342.092071][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.094876][T15838] [ 342.094876][T15838] -> #1 (func_lock){+.+.}-{4:4}: [ 342.097974][T15838] lock_acquire+0x1d1/0x380 [ 342.100335][T15838] __mutex_lock+0x1a4/0x1bd0 [ 342.102587][T15838] try_get_usb_function_instance+0x26/0x1f0 [ 342.105391][T15838] usb_get_function_instance+0x16/0x70 [ 342.107979][T15838] function_make+0x18c/0x3f0 [ 342.110207][T15838] configfs_mkdir+0x525/0xd40 [ 342.112565][T15838] vfs_mkdir+0x364/0x850 [ 342.114588][T15838] filename_mkdirat+0x48b/0x5e0 [ 342.117104][T15838] __x64_sys_mkdirat+0x89/0xc0 [ 342.118913][T15838] do_syscall_64+0x123/0x790 [ 342.120643][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.122761][T15838] [ 342.122761][T15838] -> #0 (gadget_subsys.su_mutex){+.+.}-{4:4}: [ 342.125447][T15838] check_prev_add+0xeb/0xe60 [ 342.127114][T15838] __lock_acquire+0x1528/0x1f40 [ 342.128893][T15838] lock_acquire+0x1d1/0x380 [ 342.130647][T15838] __mutex_lock+0x1a4/0x1bd0 [ 342.132325][T15838] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.134574][T15838] configfs_write_iter+0x302/0x4e0 [ 342.136495][T15838] vfs_write+0x6af/0x1050 [ 342.138120][T15838] ksys_write+0x12a/0x250 [ 342.139735][T15838] do_syscall_64+0x123/0x790 [ 342.141431][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.143585][T15838] [ 342.143585][T15838] other info that might help us debug this: [ 342.143585][T15838] [ 342.146891][T15838] Chain exists of: [ 342.146891][T15838] gadget_subsys.su_mutex --> &sb->s_type->i_mutex_key#25 --> &p->frag_sem [ 342.146891][T15838] [ 342.151582][T15838] Possible unsafe locking scenario: [ 342.151582][T15838] [ 342.154022][T15838] CPU0 CPU1 [ 342.155871][T15838] ---- ---- [ 342.157609][T15838] rlock(&p->frag_sem); [ 342.159013][T15838] lock(&sb->s_type->i_mutex_key#25); [ 342.161583][T15838] lock(&p->frag_sem); [ 342.163738][T15838] lock(gadget_subsys.su_mutex); [ 342.165474][T15838] [ 342.165474][T15838] *** DEADLOCK *** [ 342.165474][T15838] [ 342.168173][T15838] locks held by syz.6.3729/15838: 4, last CPU#3: [ 342.170190][T15838] #0: ffff888036aeb7b0 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2aa/0x380 [ 342.173093][T15838] #1: ffff8880244da460 (sb_writers#14){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 342.176027][T15838] #2: ffff888027158680 (&buffer->mutex){+.+.}-{4:4}, at: configfs_write_iter+0x76/0x4e0 [ 342.179247][T15838] #3: ffff888062cf5270 (&p->frag_sem){++++}-{4:4}, at: configfs_write_iter+0x218/0x4e0 [ 342.182378][T15838] [ 342.182378][T15838] stack backtrace: [ 342.184242][T15838] CPU: 3 UID: 0 PID: 15838 Comm: syz.6.3729 Tainted: G L syzkaller #0 PREEMPT(full) [ 342.187775][T15838] Tainted: [L]=SOFTLOCKUP [ 342.189243][T15838] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 342.192549][T15838] Call Trace: [ 342.193821][T15838] [ 342.194865][T15838] dump_stack_lvl+0x100/0x190 [ 342.196477][T15838] print_circular_bug.cold+0x178/0x1be [ 342.198300][T15838] check_noncircular+0x146/0x160 [ 342.199893][T15838] check_prev_add+0xeb/0xe60 [ 342.201533][T15838] __lock_acquire+0x1528/0x1f40 [ 342.203190][T15838] ? __pfx_stack_trace_save+0x10/0x10 [ 342.204979][T15838] lock_acquire+0x1d1/0x380 [ 342.206507][T15838] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.208652][T15838] ? __pfx___might_resched+0x10/0x10 [ 342.210403][T15838] ? __lock_acquire+0x5c0/0x1f40 [ 342.212012][T15838] __mutex_lock+0x1a4/0x1bd0 [ 342.213544][T15838] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.215638][T15838] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.217815][T15838] ? __pfx___mutex_lock+0x10/0x10 [ 342.219449][T15838] ? find_held_lock+0x2b/0x80 [ 342.221041][T15838] ? __might_fault+0xc5/0x140 [ 342.222647][T15838] ? __might_fault+0xc5/0x140 [ 342.224415][T15838] ? lock_acquire+0x1d1/0x380 [ 342.226619][T15838] ? configfs_write_iter+0x218/0x4e0 [ 342.229039][T15838] ? uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.231957][T15838] uvcg_frame_dw_frame_interval_store+0xdf/0x4b0 [ 342.234922][T15838] ? __pfx_uvcg_frame_dw_frame_interval_store+0x10/0x10 [ 342.237688][T15838] ? __kmalloc_cache_noprof+0x2f8/0x6d0 [ 342.239482][T15838] ? configfs_write_iter+0x388/0x4e0 [ 342.241256][T15838] configfs_write_iter+0x302/0x4e0 [ 342.243135][T15838] vfs_write+0x6af/0x1050 [ 342.245022][T15838] ? __pfx_configfs_write_iter+0x10/0x10 [ 342.246903][T15838] ? __pfx_vfs_write+0x10/0x10 [ 342.248475][T15838] ? find_held_lock+0x2b/0x80 [ 342.250090][T15838] ksys_write+0x12a/0x250 [ 342.251501][T15838] ? __pfx_ksys_write+0x10/0x10 [ 342.253234][T15838] do_syscall_64+0x123/0x790 [ 342.254743][T15838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.256693][T15838] RIP: 0033:0x7fb1e019e159 [ 342.258271][T15838] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 342.264392][T15838] RSP: 002b:00007fb1e0fe3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.267067][T15838] RAX: ffffffffffffffda RBX: 00007fb1e0425fa0 RCX: 00007fb1e019e159 [ 342.269653][T15838] RDX: 0000000000000001 RSI: 0000200000000a00 RDI: 0000000000000003 [ 342.272166][T15838] RBP: 00007fb1e023506b R08: 0000000000000000 R09: 0000000000000000 [ 342.274745][T15838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.277358][T15838] R13: 00007fb1e0426038 R14: 00007fb1e0425fa0 R15: 00007ffdc0e90c78 [ 342.279989][T15838] [ 342.281276][ T10] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 342.281301][ T10] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 342.281333][ C0] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 342.281335][ C3] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 8) [ 342.281346][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 342.281379][ T10] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 342.281390][ T10] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 342.281406][ C0] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 342.281417][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 342.295042][ T42] Added buffer head 1 to ffff888054f31400 [ 342.295063][ T42] Added buffer head 2 to ffff888054f31400 [ 342.299667][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 342.302011][T15039] kcov: kcov_task_exit: t = ffff8880608ba580, kcov->t = ffff8880608ba580 [ 342.304224][ T5723] kcov: kcov_task_exit: t = ffff88802dee2580, kcov->t = ffff88802dee2580 [ 342.305633][T14158] kcov: kcov_task_exit: t = ffff888043434b00, kcov->t = ffff888043434b00 [ 342.306614][T14883] kcov: kcov_task_exit: t = ffff888026de4b00, kcov->t = ffff888026de4b00 [ 342.307293][ T42] No more buffers in queue [ 342.324387][T15835] kobject: 'dummy0' (ffff88802dda27c0): kobject_cleanup, parent 0000000000000000 [ 342.324409][T15835] kobject: 'dummy0' (ffff88802dda27c0): calling ktype release [ 342.324433][T15835] kobject: 'dummy0': free name [ 342.330142][T15840] kcov: kcov_start: t = ffff888056e10000, size = 524288, area = ffffc9002ca37000 [ 342.344844][T15839] kcov: kcov_task_exit: t = ffff888056e12580, kcov->t = ffff888056e12580 [ 342.351995][T15835] kcov: kcov_task_exit: t = ffff888056e14b00, kcov->t = ffff888056e14b00 [ 342.354240][T15810] kcov: kcov_task_exit: t = ffff888027d34b00, kcov->t = ffff888027d34b00 [ 342.356221][T15806] kcov: kcov_task_exit: t = ffff888023b84b00, kcov->t = ffff888023b84b00 [ 342.385857][T15838] kcov: kcov_task_exit: t = ffff8880493d8000, kcov->t = ffff8880493d8000 [ 342.397848][ T13] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 342.402671][T15840] kcov: kcov_task_exit: t = ffff888056e10000, kcov->t = ffff888056e10000 [ 342.475068][T15840] ffff888038704000 name hci4 bus 0 [ 342.483926][T15806] ffff8881204e0000 name hci3 bus 0 [ 342.485473][ C3] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 3) [ 342.486073][ C2] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 342.491886][ T5832] Added buffer head 2 to ffff888054f31400 [ 342.491906][ T5832] Added buffer head 1 to ffff888054f31400 [ 342.492716][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 342.492769][ T42] No more buffers in queue [ 342.498224][T15840] hci4: Updating devcoredump state from IDLE to IDLE. [ 342.498240][T15840] hci4 ffff888038704000 [ 342.498248][T15840] hci4: [ 342.500889][T15840] hci4: err 0x13 [ 342.500902][T15840] hci4: cancelling interleave scan [ 342.500921][T15840] All LE pending actions cleared [ 342.500926][T15840] hdev hci4 [ 342.500932][T15840] hcon ffff8880588d4000 reason 22 [ 342.500940][T15840] hcon ffff8880588d4000 conn ffff8880566b7800, err 103 [ 342.500960][T15840] hci4 hcon ffff8880588d4000 chan ffff888027758800 [ 342.504983][T15840] hci4 hcon ffff8880588d4000 handle 200 [ 342.504995][T15840] hci4: hcon ffff8880588d4000 [ 342.505350][T15840] hcon ffff8880588d4000 [ 342.505361][T15840] hci4: conn ffff8880588d4000 [ 342.505372][T15840] device: 'hci4:200': device_unregister [ 342.505391][T15840] kernfs runtime_status: removing [ 342.505414][T15840] kernfs control: removing [ 342.505427][T15840] kernfs runtime_suspended_time: removing [ 342.506770][T15840] kernfs runtime_active_time: removing [ 342.506785][T15840] kernfs autosuspend_delay_ms: removing [ 342.506804][T15840] kernfs power: removing [ 342.506824][T15840] kernfs device: removing [ 342.506838][T15840] kernfs subsystem: removing [ 342.506850][T15840] kernfs hci4:200: removing [ 342.506873][T15840] kernfs uevent: removing [ 342.506885][T15840] PM: Removing info for No Bus:hci4:200 [ 342.506897][T15840] kobject: 'hci4:200' (ffff8880588d4cf0): kobject_uevent_env [ 342.506920][T15840] kobject: 'hci4:200' (ffff8880588d4cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:200' [ 342.506981][T15840] kernfs hci4:200: removing [ 342.507022][T15840] kobject: 'hci4:200' (ffff8880588d4cf0): kobject_cleanup, parent 0000000000000000 [ 342.507034][T15840] kobject: 'hci4:200' (ffff8880588d4cf0): calling ktype release [ 342.507051][T15840] kobject: 'hci4:200': free name [ 342.507060][T15840] hci4 orig refcnt 11 [ 342.507068][T15840] hcon ffff888037a24000 reason 22 [ 342.507075][T15840] hcon ffff888037a24000 conn ffff8880566b3000, err 103 [ 342.507094][T15840] hci4 hcon ffff888037a24000 chan ffff888028311900 [ 342.511231][T15840] hci4 hcon ffff888037a24000 handle 201 [ 342.511246][T15840] hci4: hcon ffff888037a24000 [ 342.512435][T15840] hcon ffff888037a24000 [ 342.512444][T15840] hci4: conn ffff888037a24000 [ 342.512451][T15840] device: 'hci4:201': device_unregister [ 342.512467][T15840] kernfs runtime_status: removing [ 342.512483][T15840] kernfs control: removing [ 342.512496][T15840] kernfs runtime_suspended_time: removing [ 342.512508][T15840] kernfs runtime_active_time: removing [ 342.512520][T15840] kernfs autosuspend_delay_ms: removing [ 342.512538][T15840] kernfs power: removing [ 342.512555][T15840] kernfs device: removing [ 342.512569][T15840] kernfs subsystem: removing [ 342.512581][T15840] kernfs hci4:201: removing [ 342.512602][T15840] kernfs uevent: removing [ 342.512612][T15840] PM: Removing info for No Bus:hci4:201 [ 342.512623][T15840] kobject: 'hci4:201' (ffff888037a24cf0): kobject_uevent_env [ 342.512642][T15840] kobject: 'hci4:201' (ffff888037a24cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/hci4:201' [ 342.512697][T15840] kernfs hci4:201: removing [ 342.512706][T15840] kobject: 'hci4:201' (ffff888037a24cf0): kobject_cleanup, parent 0000000000000000 [ 342.512716][T15840] kobject: 'hci4:201' (ffff888037a24cf0): calling ktype release [ 342.512753][T15840] kobject: 'hci4:201': free name [ 342.512764][T15840] hci4 orig refcnt 7 [ 342.512771][T15840] hdev hci4 event 4 [ 342.512784][T15840] hdev 0000000000000000 len 8 [ 342.512799][T15840] hci4: Cleanup of MSFT extension [ 342.512850][T15840] hdev hci4 event 8 [ 342.512857][T15840] hci4 orig refcnt 6 [ 342.512879][T15840] channel 3 len 6 [ 342.512898][T15840] channel 3 len 8 [ 342.512911][T15840] hdev hci4 event 2 [ 342.512922][T15840] hdev 0000000000000000 len 8 [ 342.512943][T15840] kernfs runtime_status: removing [ 342.512956][T15840] kernfs control: removing [ 342.512967][T15840] kernfs runtime_suspended_time: removing [ 342.512979][T15840] kernfs runtime_active_time: removing [ 342.512991][T15840] kernfs autosuspend_delay_ms: removing [ 342.513007][T15840] kernfs power: removing [ 342.513019][T15840] kernfs device: removing [ 342.513031][T15840] kernfs subsystem: removing [ 342.513048][T15840] kernfs rfkill43: removing [ 342.513060][T15840] kernfs uevent: removing [ 342.514185][T15840] kernfs name: removing [ 342.514201][T15840] kernfs type: removing [ 342.514213][T15840] kernfs index: removing [ 342.514224][T15840] kernfs persistent: removing [ 342.514236][T15840] kernfs state: removing [ 342.514247][T15840] kernfs soft: removing [ 342.514258][T15840] kernfs hard: removing [ 342.514269][T15840] kernfs hard_block_reasons: removing [ 342.514281][T15840] PM: Removing info for No Bus:rfkill43 [ 342.514290][T15840] kobject: 'rfkill43' (ffff888031c82110): kobject_uevent_env [ 342.514306][T15840] kobject: 'rfkill43' (ffff888031c82110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4/rfkill43' [ 342.514355][T15840] kernfs rfkill43: removing [ 342.514404][T15840] kobject: 'rfkill43' (ffff888031c82110): kobject_cleanup, parent 0000000000000000 [ 342.514415][T15840] kobject: 'rfkill43' (ffff888031c82110): calling ktype release [ 342.514431][T15840] kobject: 'rfkill43': free name [ 342.514449][T15840] kernfs runtime_status: removing [ 342.514462][T15840] kernfs control: removing [ 342.514474][T15840] kernfs runtime_suspended_time: removing [ 342.514485][T15840] kernfs runtime_active_time: removing [ 342.514498][T15840] kernfs autosuspend_delay_ms: removing [ 342.514514][T15840] kernfs power: removing [ 342.514527][T15840] kernfs subsystem: removing [ 342.514539][T15840] kernfs hci4: removing [ 342.514552][T15840] kernfs uevent: removing [ 342.514562][T15840] kernfs reset: removing [ 342.514574][T15840] PM: Removing info for No Bus:hci4 [ 342.514593][T15840] kobject: 'hci4' (ffff8880387054b0): kobject_uevent_env [ 342.514608][T15840] kobject: 'hci4' (ffff8880387054b0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci4' [ 342.514651][T15840] kernfs hci4: removing [ 342.514660][T15840] hci4 orig refcnt 2 [ 342.514667][T15840] kobject: 'hci4' (ffff8880387054b0): kobject_cleanup, parent 0000000000000000 [ 342.514675][T15840] kobject: 'hci4' (ffff8880387054b0): calling ktype release [ 342.514768][T15840] All LE connection parameters were removed [ 342.514775][T15840] hci4: Unregister MSFT extension [ 342.514809][T15840] kobject: 'hci4': free name [ 342.519975][T15835] ffff88802b484000 name hci0 bus 0 [ 342.533429][T15835] hci0: Updating devcoredump state from IDLE to IDLE. [ 342.533455][T15835] hci0 ffff88802b484000 [ 342.533469][T15835] hci0: [ 342.547490][T15835] hci0: err 0x13 [ 342.547503][T15835] hci0: cancelling interleave scan [ 342.547533][T15835] channel 3 len 10 [ 342.547550][T15835] All LE pending actions cleared [ 342.547556][T15835] hdev hci0 [ 342.547561][T15835] hcon ffff888023a98000 reason 22 [ 342.547569][T15835] hcon ffff888023a98000 conn ffff888042c42000, err 103 [ 342.547583][T15835] hci0 hcon ffff888023a98000 chan ffff8880311acf00 [ 342.555878][T15835] hci0 hcon ffff888023a98000 handle 200 [ 342.555892][T15835] hci0: hcon ffff888023a98000 [ 342.564820][T15806] hci3: Updating devcoredump state from IDLE to IDLE. [ 342.564847][T15806] hci3 ffff8881204e0000 [ 342.564861][T15806] hci3: [ 342.566262][ T9089] ffff8880362f8000 name hci2 bus 0 [ 342.566402][T15806] hci3: err 0x13 [ 342.566417][T15806] hci3: cancelling interleave scan [ 342.566439][T15806] All LE pending actions cleared [ 342.566448][T15806] hdev hci3 [ 342.566458][T15806] hdev hci3 event 4 [ 342.566485][T15806] hdev 0000000000000000 len 8 [ 342.566515][T15806] hci3: Cleanup of MSFT extension [ 342.566682][T15806] hdev hci3 event 8 [ 342.566694][T15806] hci3 orig refcnt 6 [ 342.566882][T15806] channel 3 len 6 [ 342.566920][T15806] channel 3 len 8 [ 342.566944][T15806] hdev hci3 event 2 [ 342.566966][T15806] hdev 0000000000000000 len 8 [ 342.567022][T15806] kernfs runtime_status: removing [ 342.567051][T15806] kernfs control: removing [ 342.567074][T15806] kernfs runtime_suspended_time: removing [ 342.567096][T15806] kernfs runtime_active_time: removing [ 342.567118][T15806] kernfs autosuspend_delay_ms: removing [ 342.567151][T15806] kernfs power: removing [ 342.567181][T15806] kernfs device: removing [ 342.567203][T15806] kernfs subsystem: removing [ 342.567225][T15806] kernfs rfkill37: removing [ 342.567261][T15806] kernfs uevent: removing [ 342.567281][T15806] kernfs name: removing [ 342.567304][T15806] kernfs type: removing [ 342.567325][T15806] kernfs index: removing [ 342.567347][T15806] kernfs persistent: removing [ 342.567369][T15806] kernfs state: removing [ 342.567391][T15806] kernfs soft: removing [ 342.567412][T15806] kernfs hard: removing [ 342.567431][T15806] kernfs hard_block_reasons: removing [ 342.567452][T15806] PM: Removing info for No Bus:rfkill37 [ 342.567470][T15806] kobject: 'rfkill37' (ffff888136e4b110): kobject_uevent_env [ 342.567500][T15806] kobject: 'rfkill37' (ffff888136e4b110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3/rfkill37' [ 342.567601][T15806] kernfs rfkill37: removing [ 342.567625][T15806] kobject: 'rfkill37' (ffff888136e4b110): kobject_cleanup, parent 0000000000000000 [ 342.567642][T15806] kobject: 'rfkill37' (ffff888136e4b110): calling ktype release [ 342.567669][T15806] kobject: 'rfkill37': free name [ 342.567696][T15806] kernfs runtime_status: removing [ 342.567719][T15806] kernfs control: removing [ 342.567740][T15806] kernfs runtime_suspended_time: removing [ 342.567762][T15806] kernfs runtime_active_time: removing [ 342.567784][T15806] kernfs autosuspend_delay_ms: removing [ 342.567815][T15806] kernfs power: removing [ 342.567838][T15806] kernfs subsystem: removing [ 342.567859][T15806] kernfs hci3: removing [ 342.567882][T15806] kernfs uevent: removing [ 342.567949][T15806] kernfs reset: removing [ 342.567983][T15806] PM: Removing info for No Bus:hci3 [ 342.568027][T15806] kobject: 'hci3' (ffff8881204e14b0): kobject_uevent_env [ 342.568057][T15806] kobject: 'hci3' (ffff8881204e14b0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci3' [ 342.568136][T15806] kernfs hci3: removing [ 342.568153][T15806] hci3 orig refcnt 2 [ 342.568164][T15806] kobject: 'hci3' (ffff8881204e14b0): kobject_cleanup, parent 0000000000000000 [ 342.568179][T15806] kobject: 'hci3' (ffff8881204e14b0): calling ktype release [ 342.568260][T15806] All LE connection parameters were removed [ 342.568270][T15806] hci3: Unregister MSFT extension [ 342.568333][T15806] kobject: 'hci3': free name [ 342.568432][T15835] hcon ffff888023a98000 [ 342.568444][T15835] hci0: conn ffff888023a98000 [ 342.568457][T15835] device: 'hci0:200': device_unregister [ 342.568480][T15835] kernfs runtime_status: removing [ 342.568504][T15835] kernfs control: removing [ 342.568527][T15835] kernfs runtime_suspended_time: removing [ 342.568549][T15835] kernfs runtime_active_time: removing [ 342.568572][T15835] kernfs autosuspend_delay_ms: removing [ 342.568649][T15835] kernfs power: removing [ 342.568676][T15835] kernfs device: removing [ 342.568699][T15835] kernfs subsystem: removing [ 342.568722][T15835] kernfs hci0:200: removing [ 342.568773][T15835] kernfs uevent: removing [ 342.568790][T15835] PM: Removing info for No Bus:hci0:200 [ 342.568804][T15835] kobject: 'hci0:200' (ffff888023a98cf0): kobject_uevent_env [ 342.568834][T15835] kobject: 'hci0:200' (ffff888023a98cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:200' [ 342.568923][T15835] kernfs hci0:200: removing [ 342.568939][T15835] kobject: 'hci0:200' (ffff888023a98cf0): kobject_cleanup, parent 0000000000000000 [ 342.568956][T15835] kobject: 'hci0:200' (ffff888023a98cf0): calling ktype release [ 342.568987][T15835] kobject: 'hci0:200': free name [ 342.569014][T15835] hci0 orig refcnt 11 [ 342.569027][T15835] hcon ffff88803e384000 reason 22 [ 342.569073][T15835] hcon ffff88803e384000 conn ffff8880366de800, err 103 [ 342.569098][T15835] hci0 hcon ffff88803e384000 chan ffff888053627d00 [ 342.569162][ T5832] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 342.569183][ T5832] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 342.569230][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 342.569253][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 342.576922][ T9089] hci2: Updating devcoredump state from IDLE to IDLE. [ 342.576950][ T9089] hci2 ffff8880362f8000 [ 342.576962][ T9089] hci2: [ 342.577056][T15806] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 342.577081][T15806] net syz_tun: siw: event 10 [ 342.577144][T15835] hci0 hcon ffff88803e384000 handle 201 [ 342.577154][T15835] hci0: hcon ffff88803e384000 [ 342.587574][ T9089] hci2: err 0x13 [ 342.587585][ T9089] hci2: cancelling interleave scan [ 342.587615][ T9089] channel 3 len 10 [ 342.587638][ T9089] All LE pending actions cleared [ 342.587646][ T9089] hdev hci2 [ 342.587651][T15835] hcon ffff88803e384000 [ 342.587654][ T9089] hdev hci2 event 4 [ 342.587662][T15835] hci0: conn ffff88803e384000 [ 342.587670][T15835] device: 'hci0:201': device_unregister [ 342.587676][ T9089] hdev 0000000000000000 len 8 [ 342.587688][T15835] kernfs runtime_status: removing [ 342.587700][ T9089] hci2: Cleanup of MSFT extension [ 342.587711][T15835] kernfs control: removing [ 342.587723][T15835] kernfs runtime_suspended_time: removing [ 342.587736][T15835] kernfs runtime_active_time: removing [ 342.587748][T15835] kernfs autosuspend_delay_ms: removing [ 342.587765][T15835] kernfs power: removing [ 342.587785][T15835] kernfs device: removing [ 342.587797][T15835] kernfs subsystem: removing [ 342.587810][T15835] kernfs hci0:201: removing [ 342.587823][T15835] kernfs uevent: removing [ 342.587833][T15835] PM: Removing info for No Bus:hci0:201 [ 342.587844][T15835] kobject: 'hci0:201' (ffff88803e384cf0): kobject_uevent_env [ 342.587863][T15835] kobject: 'hci0:201' (ffff88803e384cf0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/hci0:201' [ 342.587891][ T9089] hdev hci2 event 8 [ 342.587903][ T9089] hci2 orig refcnt 6 [ 342.587920][T15835] kernfs hci0:201: removing [ 342.587930][T15835] kobject: 'hci0:201' (ffff88803e384cf0): kobject_cleanup, parent 0000000000000000 [ 342.587940][T15835] kobject: 'hci0:201' (ffff88803e384cf0): calling ktype release [ 342.587959][T15835] kobject: 'hci0:201': free name [ 342.587968][T15835] hci0 orig refcnt 7 [ 342.587975][T15835] hdev hci0 event 4 [ 342.587987][T15835] hdev 0000000000000000 len 8 [ 342.588006][T15835] hci0: Cleanup of MSFT extension [ 342.588033][ T9089] channel 3 len 6 [ 342.588064][T15835] hdev hci0 event 8 [ 342.588069][ T9089] channel 3 len 8 [ 342.588071][T15835] hci0 orig refcnt 6 [ 342.588085][T15835] channel 3 len 6 [ 342.588096][ T9089] hdev hci2 event 2 [ 342.588103][T15835] channel 3 len 8 [ 342.588116][ T9089] hdev 0000000000000000 len 8 [ 342.588119][T15835] hdev hci0 event 2 [ 342.588131][T15835] hdev 0000000000000000 len 8 [ 342.588159][T15835] kernfs runtime_status: removing [ 342.588237][ T9089] kernfs runtime_status: removing [ 342.588265][ T9089] kernfs control: removing [ 342.588286][ T9089] kernfs runtime_suspended_time: removing [ 342.588306][ T9089] kernfs runtime_active_time: removing [ 342.588321][ T9089] kernfs autosuspend_delay_ms: removing [ 342.588338][T15806] In tnode_resize ffff8880589ad620 inflate_threshold=50 threshold=25 [ 342.588350][T15806] In tnode_resize ffff8880589ad6a0 inflate_threshold=50 threshold=25 [ 342.588358][T15806] In tnode_resize ffff8880589ad2a0 inflate_threshold=50 threshold=25 [ 342.588359][ T9089] kernfs power: removing [ 342.588368][T15806] In tnode_resize ffff8880589adba0 inflate_threshold=50 threshold=25 [ 342.588376][T15806] In tnode_resize ffff8880589adea0 inflate_threshold=50 threshold=25 [ 342.588385][T15806] In tnode_resize ffff8880589ad520 inflate_threshold=50 threshold=25 [ 342.588386][ T9089] kernfs device: removing [ 342.588394][T15806] In tnode_resize ffff8880589ad5a0 inflate_threshold=50 threshold=25 [ 342.588402][T15806] In tnode_resize ffff88802cdaa820 inflate_threshold=50 threshold=25 [ 342.588408][ T9089] kernfs subsystem: removing [ 342.588411][T15806] In tnode_resize ffff88802cdaa920 inflate_threshold=50 threshold=25 [ 342.588420][T15806] In tnode_resize ffff88802cdaaf20 inflate_threshold=50 threshold=25 [ 342.588424][ T9089] kernfs rfkill7: removing [ 342.588429][T15806] In tnode_resize ffff88802cdaa0a0 inflate_threshold=50 threshold=25 [ 342.588438][T15806] In tnode_resize ffff888033227aa0 inflate_threshold=50 threshold=25 [ 342.588445][ T9089] kernfs uevent: removing [ 342.588447][T15806] In tnode_resize ffff8880332277a0 inflate_threshold=50 threshold=25 [ 342.588455][T15806] In tnode_resize ffff888033227a20 inflate_threshold=50 threshold=25 [ 342.588464][T15806] In tnode_resize ffff88802f192120 inflate_threshold=50 threshold=25 [ 342.588472][ T9089] kernfs name: removing [ 342.588493][ T9089] kernfs type: removing [ 342.588502][T15806] In tnode_resize ffff8880570f8020 inflate_threshold=50 threshold=25 [ 342.588511][T15806] In tnode_resize ffff88802e26cba0 inflate_threshold=50 threshold=25 [ 342.588513][ T9089] kernfs index: removing [ 342.588520][T15806] In tnode_resize ffff88802e26cc20 inflate_threshold=50 threshold=25 [ 342.588528][T15806] trie_flush found=1 [ 342.588533][ T9089] kernfs persistent: removing [ 342.588548][ T9089] kernfs state: removing [ 342.588549][T15806] In tnode_resize ffff8880589ad620 inflate_threshold=50 threshold=25 [ 342.588558][T15806] In tnode_resize ffff8880589ad6a0 inflate_threshold=50 threshold=25 [ 342.588567][T15806] In tnode_resize ffff8880589ad2a0 inflate_threshold=50 threshold=25 [ 342.588568][ T9089] kernfs soft: removing [ 342.588576][T15806] In tnode_resize ffff8880589adba0 inflate_threshold=50 threshold=25 [ 342.588585][T15806] In tnode_resize ffff8880589adea0 inflate_threshold=50 threshold=25 [ 342.588590][ T9089] kernfs hard: removing [ 342.588594][T15806] In tnode_resize ffff8880589ad520 inflate_threshold=50 threshold=25 [ 342.588603][T15806] In tnode_resize ffff8880589ad5a0 inflate_threshold=50 threshold=25 [ 342.588610][ T9089] kernfs hard_block_reasons: removing [ 342.588611][T15806] In tnode_resize ffff88802cdaa820 inflate_threshold=50 threshold=25 [ 342.588620][T15806] In tnode_resize ffff88802cdaa920 inflate_threshold=50 threshold=25 [ 342.588629][ T9089] PM: Removing info for No Bus:rfkill7 [ 342.588629][T15806] In tnode_resize ffff88802cdaaf20 inflate_threshold=50 threshold=25 [ 342.588638][T15806] In tnode_resize ffff88802cdaa0a0 inflate_threshold=50 threshold=25 [ 342.588641][ T9089] kobject: 'rfkill7' (ffff8880234dc110): kobject_uevent_env [ 342.588647][T15806] In tnode_resize ffff888033227aa0 inflate_threshold=50 threshold=25 [ 342.588656][T15806] In tnode_resize ffff8880332277a0 inflate_threshold=50 threshold=25 [ 342.588665][T15806] In tnode_resize ffff888033227a20 inflate_threshold=50 threshold=25 [ 342.588669][ T9089] kobject: 'rfkill7' (ffff8880234dc110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2/rfkill7' [ 342.588673][T15806] In tnode_resize ffff88802f192120 inflate_threshold=50 threshold=25 [ 342.588682][T15806] In tnode_resize ffff8880570f8020 inflate_threshold=50 threshold=25 [ 342.588691][T15806] In tnode_resize ffff88802e26cba0 inflate_threshold=50 threshold=25 [ 342.588699][T15806] In tnode_resize ffff88802e26cc20 inflate_threshold=50 threshold=25 [ 342.588707][T15806] trie_flush found=1 [ 342.588719][T15806] syz_tun: bond_netdev_event received NETDEV_DOWN [ 342.588754][T15806] net syz_tun: siw: event 2 [ 342.588777][ T9089] kernfs rfkill7: removing [ 342.588812][ T9089] kobject: 'rfkill7' (ffff8880234dc110): kobject_cleanup, parent 0000000000000000 [ 342.588825][T15835] kernfs control: removing [ 342.588827][ T9089] kobject: 'rfkill7' (ffff8880234dc110): calling ktype release [ 342.588841][T15835] kernfs runtime_suspended_time: removing [ 342.588848][ T9089] kobject: 'rfkill7': free name [ 342.588853][T15835] kernfs runtime_active_time: removing [ 342.588867][T15835] kernfs autosuspend_delay_ms: removing [ 342.588916][T15806] IPv6: walker ffffc900060b7230 adjusted by delroute [ 342.588980][T15806] IPv6: walker ffffc900060b7230 adjusted by delroute [ 342.589063][T15806] IPv6: walker ffffc900060b7230 adjusted by delroute [ 342.589071][T15806] IPv6: fixing tree: plen=128 iter=0 [ 342.589079][T15806] IPv6: W ffffc900060b7230 adjusted by delnode 1, s=4/2 [ 342.589087][T15806] IPv6: fixing tree: plen=120 iter=1 [ 342.589093][T15806] IPv6: W ffffc900060b7230 adjusted by delnode 2, s=2 [ 342.589101][T15806] IPv6: fixing tree: plen=97 iter=2 [ 342.589162][T15806] IPv6: walker ffffc900060b7230 adjusted by delroute [ 342.589169][T15806] IPv6: fixing tree: plen=128 iter=0 [ 342.589176][T15806] IPv6: W ffffc900060b7230 adjusted by delnode 1, s=4/2 [ 342.589184][T15806] IPv6: fixing tree: plen=120 iter=1 [ 342.589190][T15806] IPv6: W ffffc900060b7230 adjusted by delnode 2, s=2 [ 342.589197][T15806] IPv6: fixing tree: plen=69 iter=2 [ 342.589236][T15806] IPv6: walker ffffc900060b7230 adjusted by delroute [ 342.589901][T15835] kernfs power: removing [ 342.589926][T15835] kernfs device: removing [ 342.589939][T15835] kernfs subsystem: removing [ 342.589951][T15835] kernfs rfkill46: removing [ 342.589964][T15835] kernfs uevent: removing [ 342.589976][T15835] kernfs name: removing [ 342.589989][T15835] kernfs type: removing [ 342.590007][T15835] kernfs index: removing [ 342.590019][T15835] kernfs persistent: removing [ 342.590031][T15835] kernfs state: removing [ 342.590043][T15835] kernfs soft: removing [ 342.590054][T15835] kernfs hard: removing [ 342.590067][T15835] kernfs hard_block_reasons: removing [ 342.590078][T15835] PM: Removing info for No Bus:rfkill46 [ 342.590088][T15835] kobject: 'rfkill46' (ffff8880609c8110): kobject_uevent_env [ 342.590106][T15835] kobject: 'rfkill46' (ffff8880609c8110): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0/rfkill46' [ 342.590157][T15835] kernfs rfkill46: removing [ 342.590169][T15835] kobject: 'rfkill46' (ffff8880609c8110): kobject_cleanup, parent 0000000000000000 [ 342.590179][T15835] kobject: 'rfkill46' (ffff8880609c8110): calling ktype release [ 342.590194][T15835] kobject: 'rfkill46': free name [ 342.591427][ T9089] kernfs runtime_status: removing [ 342.591448][ T9089] kernfs control: removing [ 342.591513][T15835] kernfs runtime_status: removing [ 342.591544][T15835] kernfs control: removing [ 342.591560][T15835] kernfs runtime_suspended_time: removing [ 342.591572][T15835] kernfs runtime_active_time: removing [ 342.591584][T15835] kernfs autosuspend_delay_ms: removing [ 342.591605][T15835] kernfs power: removing [ 342.591655][T15835] kernfs subsystem: removing [ 342.591669][T15835] kernfs hci0: removing [ 342.591682][T15835] kernfs uevent: removing [ 342.591695][T15835] kernfs reset: removing [ 342.591707][T15835] PM: Removing info for No Bus:hci0 [ 342.591738][T15835] kobject: 'hci0' (ffff88802b4854b0): kobject_uevent_env [ 342.591753][ T9089] kernfs runtime_suspended_time: removing [ 342.591754][T15835] kobject: 'hci0' (ffff88802b4854b0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci0' [ 342.591777][ T9089] kernfs runtime_active_time: removing [ 342.591839][T15835] kernfs hci0: removing [ 342.591849][T15835] hci0 orig refcnt 2 [ 342.591849][ T9089] kernfs autosuspend_delay_ms: removing [ 342.591856][T15835] kobject: 'hci0' (ffff88802b4854b0): kobject_cleanup, parent 0000000000000000 [ 342.591865][T15835] kobject: 'hci0' (ffff88802b4854b0): calling ktype release [ 342.591881][ T9089] kernfs power: removing [ 342.591904][ T9089] kernfs subsystem: removing [ 342.591920][T15835] All LE connection parameters were removed [ 342.591926][T15835] hci0: Unregister MSFT extension [ 342.591923][ T9089] kernfs hci2: removing [ 342.591949][ T9089] kernfs uevent: removing [ 342.591965][T15835] kobject: 'hci0': free name [ 342.591965][ T9089] kernfs reset: removing [ 342.591984][ T9089] PM: Removing info for No Bus:hci2 [ 342.592019][ T9089] kobject: 'hci2' (ffff8880362f94b0): kobject_uevent_env [ 342.592196][ T9089] kobject: 'hci2' (ffff8880362f94b0): fill_kobj_path: path = '/devices/virtual/bluetooth/hci2' [ 342.592293][ T9089] kernfs hci2: removing [ 342.592325][ T9089] kernfs bluetooth: removing [ 342.592338][ T9089] kobject: 'bluetooth' (ffff88803087db00): kobject_cleanup, parent 0000000000000000 [ 342.592348][ T9089] kobject: 'bluetooth' (ffff88803087db00): calling ktype release [ 342.592365][ T9089] kobject: 'bluetooth': free name [ 342.592374][ T9089] hci2 orig refcnt 2 [ 342.592384][ T9089] kobject: 'hci2' (ffff8880362f94b0): kobject_cleanup, parent 0000000000000000 [ 342.592398][ T9089] kobject: 'hci2' (ffff8880362f94b0): calling ktype release [ 342.592462][ T9089] All LE connection parameters were removed [ 342.592471][ T9089] hci2: Unregister MSFT extension [ 342.592525][ T9089] kobject: 'hci2': free name [ 342.597066][T15806] Deleting ac141400/24 dsfield=0x00 t=ffff888058b996b0 [ 342.597100][T15806] Deleting ac1414ff/32 dsfield=0x00 t=ffff888058b996b0 [ 342.597122][T15806] Deleting ac1414aa/32 dsfield=0x00 t=ffff888058b996b0 [ 342.597196][T15806] In tnode_resize ffff8880570f8020 inflate_threshold=50 threshold=25 [ 342.597208][T15806] In tnode_resize ffff88802e26cba0 inflate_threshold=50 threshold=25 [ 342.597221][T15806] In tnode_resize ffff88802e26cc20 inflate_threshold=50 threshold=25 [ 342.597339][T15806] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 342.597362][T15806] net syz_tun: siw: event 6 [ 342.597965][T15806] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 342.597985][T15806] net syz_tun: siw: event 18 [ 342.603876][T15806] kernfs rps_cpus: removing [ 342.603907][T15806] kernfs rps_flow_cnt: removing [ 342.603932][T15806] kobject: 'rx-0' (ffff888131492050): kobject_cleanup, parent ffff888022bfff50 [ 342.603948][T15806] kobject: 'rx-0' (ffff888131492050): auto cleanup kobject_del [ 342.603957][T15806] kobject: 'rx-0' (ffff888131492050): auto cleanup 'remove' event [ 342.603966][T15806] kobject: 'rx-0' (ffff888131492050): kobject_uevent_env [ 342.603997][T15806] kobject: 'rx-0' (ffff888131492050): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 342.604067][T15806] kernfs rx-0: removing [ 342.604082][T15806] kobject: 'rx-0' (ffff888131492050): calling ktype release [ 342.604099][T15806] kobject: 'rx-0': free name [ 342.604117][T15806] kernfs tx_timeout: removing [ 342.604137][T15806] kernfs traffic_class: removing [ 342.604156][T15806] kernfs xps_cpus: removing [ 342.604175][T15806] kernfs xps_rxqs: removing [ 342.604190][T15806] kernfs tx_maxrate: removing [ 342.604208][T15806] kobject: 'tx-0' (ffff888057a67820): kobject_cleanup, parent ffff888022bfff50 [ 342.604223][T15806] kobject: 'tx-0' (ffff888057a67820): auto cleanup kobject_del [ 342.604234][T15806] kobject: 'tx-0' (ffff888057a67820): auto cleanup 'remove' event [ 342.604245][T15806] kobject: 'tx-0' (ffff888057a67820): kobject_uevent_env [ 342.604269][T15806] kobject: 'tx-0' (ffff888057a67820): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 342.604326][T15806] kernfs tx-0: removing [ 342.604345][T15806] kobject: 'tx-0' (ffff888057a67820): calling ktype release [ 342.604361][T15806] kobject: 'tx-0': free name [ 342.604376][T15806] kernfs queues: removing [ 342.604390][T15806] kobject: 'queues' (ffff888022bfff50): kobject_cleanup, parent 0000000000000000 [ 342.604404][T15806] kobject: 'queues' (ffff888022bfff50): calling ktype release [ 342.604415][T15806] kobject: 'queues' (ffff888022bfff50): kset_release [ 342.604433][T15806] kobject: 'queues': free name [ 342.604455][T15806] kernfs runtime_status: removing [ 342.604477][T15806] kernfs control: removing [ 342.604495][T15806] kernfs runtime_suspended_time: removing [ 342.604510][T15806] kernfs runtime_active_time: removing [ 342.604529][T15806] kernfs autosuspend_delay_ms: removing [ 342.604559][T15806] kernfs power: removing [ 342.604689][T15806] kernfs subsystem: removing [ 342.604712][T15806] kernfs syz_tun: removing [ 342.604755][T15806] kernfs uevent: removing [ 342.604781][T15806] kernfs tun_flags: removing [ 342.604800][T15806] kernfs owner: removing [ 342.604816][T15806] kernfs group: removing [ 342.604838][T15806] kernfs rx_packets: removing [ 342.604857][T15806] kernfs tx_packets: removing [ 342.604877][T15806] kernfs rx_bytes: removing [ 342.604896][T15806] kernfs tx_bytes: removing [ 342.604916][T15806] kernfs rx_errors: removing [ 342.604936][T15806] kernfs tx_errors: removing [ 342.604956][T15806] kernfs rx_dropped: removing [ 342.604976][T15806] kernfs tx_dropped: removing [ 342.604995][T15806] kernfs multicast: removing [ 342.605014][T15806] kernfs collisions: removing [ 342.605029][T15806] kernfs rx_length_errors: removing [ 342.605059][T15806] kernfs rx_over_errors: removing [ 342.605080][T15806] kernfs rx_crc_errors: removing [ 342.605100][T15806] kernfs rx_frame_errors: removing [ 342.605120][T15806] kernfs rx_fifo_errors: removing [ 342.605133][T15806] kernfs rx_missed_errors: removing [ 342.605161][T15806] kernfs tx_aborted_errors: removing [ 342.605181][T15806] kernfs tx_carrier_errors: removing [ 342.605200][T15806] kernfs tx_fifo_errors: removing [ 342.605215][T15806] kernfs tx_heartbeat_errors: removing [ 342.605234][T15806] kernfs tx_window_errors: removing [ 342.605254][T15806] kernfs rx_compressed: removing [ 342.605274][T15806] kernfs tx_compressed: removing [ 342.605300][T15806] kernfs rx_nohandler: removing [ 342.605317][T15806] kernfs statistics: removing [ 342.605336][T15806] kernfs netdev_group: removing [ 342.605357][T15806] kernfs type: removing [ 342.605376][T15806] kernfs dev_id: removing [ 342.605396][T15806] kernfs dev_port: removing [ 342.605415][T15806] kernfs iflink: removing [ 342.608684][T15806] kernfs ifindex: removing [ 342.608714][T15806] kernfs name_assign_type: removing [ 342.608861][T15806] kernfs addr_assign_type: removing [ 342.608884][T15806] kernfs addr_len: removing [ 342.608898][T15806] kernfs link_mode: removing [ 342.608917][T15806] kernfs address: removing [ 342.608941][T15806] kernfs broadcast: removing [ 342.608961][T15806] kernfs speed: removing [ 342.608980][T15806] kernfs duplex: removing [ 342.608999][T15806] kernfs dormant: removing [ 342.609012][T15806] kernfs testing: removing [ 342.609032][T15806] kernfs operstate: removing [ 342.609051][T15806] kernfs carrier_changes: removing [ 342.609071][T15806] kernfs ifalias: removing [ 342.609090][T15806] kernfs carrier: removing [ 342.609109][T15806] kernfs mtu: removing [ 342.609122][T15806] kernfs flags: removing [ 342.609141][T15806] kernfs tx_queue_len: removing [ 342.609161][T15806] kernfs gro_flush_timeout: removing [ 342.609181][T15806] kernfs napi_defer_hard_irqs: removing [ 342.609200][T15806] kernfs proto_down: removing [ 342.609215][T15806] kernfs carrier_up_count: removing [ 342.609233][T15806] kernfs carrier_down_count: removing [ 342.609254][T15806] kernfs threaded: removing [ 342.609273][T15806] PM: Removing info for No Bus:syz_tun [ 342.609344][T15806] kobject: 'syz_tun' (ffff8881316847c0): kobject_uevent_env [ 342.609374][T15806] kobject: 'syz_tun' (ffff8881316847c0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 342.609436][T15806] kernfs syz_tun: removing [ 342.614287][T15835] syz_tun: bond_netdev_event received NETDEV_GOING_DOWN [ 342.614305][T15835] net syz_tun: siw: event 10 [ 342.617736][T15835] In tnode_resize ffff8880478e6020 inflate_threshold=50 threshold=25 [ 342.617751][T15835] trie_flush found=1 [ 342.617777][T15835] In tnode_resize ffff8880362d9e20 inflate_threshold=50 threshold=25 [ 342.617796][T15835] In tnode_resize ffff88801d7c2420 inflate_threshold=50 threshold=25 [ 342.617815][T15835] In tnode_resize ffff88804580a420 inflate_threshold=50 threshold=25 [ 342.617826][T15835] In tnode_resize ffff88802701ef20 inflate_threshold=50 threshold=25 [ 342.617838][T15835] In tnode_resize ffff88804590d920 inflate_threshold=50 threshold=25 [ 342.617851][T15835] In tnode_resize ffff8880588e44a0 inflate_threshold=50 threshold=25 [ 342.617864][T15835] In tnode_resize ffff8880588e4020 inflate_threshold=50 threshold=25 [ 342.617878][T15835] trie_flush found=1 [ 342.617894][T15835] syz_tun: bond_netdev_event received NETDEV_DOWN [ 342.617912][T15835] net syz_tun: siw: event 2 [ 342.618194][T15835] IPv6: walker ffffc90005ecf230 adjusted by delroute [ 342.618296][T15835] IPv6: walker ffffc90005ecf230 adjusted by delroute [ 342.618410][T15835] IPv6: walker ffffc90005ecf230 adjusted by delroute [ 342.618419][T15835] IPv6: fixing tree: plen=128 iter=0 [ 342.618427][T15835] IPv6: W ffffc90005ecf230 adjusted by delnode 1, s=4/2 [ 342.618441][T15835] IPv6: fixing tree: plen=120 iter=1 [ 342.618451][T15835] IPv6: W ffffc90005ecf230 adjusted by delnode 2, s=2 [ 342.618462][T15835] IPv6: fixing tree: plen=97 iter=2 [ 342.618679][T15835] IPv6: walker ffffc90005ecf230 adjusted by delroute [ 342.618690][T15835] IPv6: fixing tree: plen=128 iter=0 [ 342.618701][T15835] IPv6: W ffffc90005ecf230 adjusted by delnode 1, s=4/2 [ 342.618713][T15835] IPv6: fixing tree: plen=120 iter=1 [ 342.618723][T15835] IPv6: W ffffc90005ecf230 adjusted by delnode 2, s=2 [ 342.618744][T15835] IPv6: fixing tree: plen=72 iter=2 [ 342.618803][T15835] IPv6: walker ffffc90005ecf230 adjusted by delroute [ 342.623090][T15835] Deleting ac141400/24 dsfield=0x00 t=ffff888059586130 [ 342.623124][T15835] Deleting ac1414ff/32 dsfield=0x00 t=ffff88803087e8b0 [ 342.623149][T15835] Deleting ac1414aa/32 dsfield=0x00 t=ffff88803087e8b0 [ 342.623222][T15835] In tnode_resize ffff88802701ef20 inflate_threshold=50 threshold=25 [ 342.623236][T15835] In tnode_resize ffff8880588e4020 inflate_threshold=50 threshold=25 [ 342.623385][T15835] syz_tun (unregistering): bond_netdev_event received NETDEV_UNREGISTER [ 342.623407][T15835] net syz_tun: siw: event 6 [ 342.623868][T15835] syz_tun (unregistering): bond_netdev_event received NETDEV_PRE_UNINIT [ 342.623880][T15835] net syz_tun: siw: event 18 [ 342.641422][T15835] kernfs rps_cpus: removing [ 342.641456][T15835] kernfs rps_flow_cnt: removing [ 342.641471][T15835] kobject: 'rx-0' (ffff88802f58b050): kobject_cleanup, parent ffff88803cfd1f50 [ 342.641486][T15835] kobject: 'rx-0' (ffff88802f58b050): auto cleanup kobject_del [ 342.641498][T15835] kobject: 'rx-0' (ffff88802f58b050): auto cleanup 'remove' event [ 342.641509][T15835] kobject: 'rx-0' (ffff88802f58b050): kobject_uevent_env [ 342.641541][T15835] kobject: 'rx-0' (ffff88802f58b050): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/rx-0' [ 342.641604][T15835] kernfs rx-0: removing [ 342.641625][T15835] kobject: 'rx-0' (ffff88802f58b050): calling ktype release [ 342.641643][T15835] kobject: 'rx-0': free name [ 342.641661][T15835] kernfs tx_timeout: removing [ 342.641685][T15835] kernfs traffic_class: removing [ 342.641702][T15835] kernfs xps_cpus: removing [ 342.641722][T15835] kernfs xps_rxqs: removing [ 342.641742][T15835] kernfs tx_maxrate: removing [ 342.641760][T15835] kobject: 'tx-0' (ffff888035613420): kobject_cleanup, parent ffff88803cfd1f50 [ 342.641774][T15835] kobject: 'tx-0' (ffff888035613420): auto cleanup kobject_del [ 342.641784][T15835] kobject: 'tx-0' (ffff888035613420): auto cleanup 'remove' event [ 342.641791][T15835] kobject: 'tx-0' (ffff888035613420): kobject_uevent_env [ 342.641814][T15835] kobject: 'tx-0' (ffff888035613420): fill_kobj_path: path = '/devices/virtual/net/syz_tun/queues/tx-0' [ 342.641880][T15835] kernfs tx-0: removing [ 342.641895][T15835] kobject: 'tx-0' (ffff888035613420): calling ktype release [ 342.641911][T15835] kobject: 'tx-0': free name [ 342.641930][T15835] kernfs queues: removing [ 342.641949][T15835] kobject: 'queues' (ffff88803cfd1f50): kobject_cleanup, parent 0000000000000000 [ 342.641963][T15835] kobject: 'queues' (ffff88803cfd1f50): calling ktype release [ 342.641971][T15835] kobject: 'queues' (ffff88803cfd1f50): kset_release [ 342.641986][T15835] kobject: 'queues': free name [ 342.642010][T15835] kernfs runtime_status: removing [ 342.642030][T15835] kernfs control: removing [ 342.642049][T15835] kernfs runtime_suspended_time: removing [ 342.642069][T15835] kernfs runtime_active_time: removing [ 342.642089][T15835] kernfs autosuspend_delay_ms: removing [ 342.642228][T15835] kernfs power: removing [ 342.642248][T15835] kernfs subsystem: removing [ 342.642271][T15835] kernfs syz_tun: removing [ 342.642294][T15835] kernfs uevent: removing [ 342.642318][T15835] kernfs tun_flags: removing [ 342.642333][T15835] kernfs owner: removing [ 342.642352][T15835] kernfs group: removing [ 342.642374][T15835] kernfs rx_packets: removing [ 342.642394][T15835] kernfs tx_packets: removing [ 342.642414][T15835] kernfs rx_bytes: removing [ 342.642431][T15835] kernfs tx_bytes: removing [ 342.642450][T15835] kernfs rx_errors: removing [ 342.642470][T15835] kernfs tx_errors: removing [ 342.642490][T15835] kernfs rx_dropped: removing [ 342.642509][T15835] kernfs tx_dropped: removing [ 342.642525][T15835] kernfs multicast: removing [ 342.642541][T15835] kernfs collisions: removing [ 342.642561][T15835] kernfs rx_length_errors: removing [ 342.642582][T15835] kernfs rx_over_errors: removing [ 342.642601][T15835] kernfs rx_crc_errors: removing [ 342.642621][T15835] kernfs rx_frame_errors: removing [ 342.642636][T15835] kernfs rx_fifo_errors: removing [ 342.642656][T15835] kernfs rx_missed_errors: removing [ 342.642676][T15835] kernfs tx_aborted_errors: removing [ 342.642697][T15835] kernfs tx_carrier_errors: removing [ 342.642716][T15835] kernfs tx_fifo_errors: removing [ 342.642731][T15835] kernfs tx_heartbeat_errors: removing [ 342.642751][T15835] kernfs tx_window_errors: removing [ 342.642771][T15835] kernfs rx_compressed: removing [ 342.642790][T15835] kernfs tx_compressed: removing [ 342.642810][T15835] kernfs rx_nohandler: removing [ 342.642823][T15835] kernfs statistics: removing [ 342.642846][T15835] kernfs netdev_group: removing [ 342.642867][T15835] kernfs type: removing [ 342.642886][T15835] kernfs dev_id: removing [ 342.642905][T15835] kernfs dev_port: removing [ 342.642924][T15835] kernfs iflink: removing [ 342.642944][T15835] kernfs ifindex: removing [ 342.642963][T15835] kernfs name_assign_type: removing [ 342.642983][T15835] kernfs addr_assign_type: removing [ 342.643002][T15835] kernfs addr_len: removing [ 342.643022][T15835] kernfs link_mode: removing [ 342.643038][T15835] kernfs address: removing [ 342.643054][T15835] kernfs broadcast: removing [ 342.643074][T15835] kernfs speed: removing [ 342.643093][T15835] kernfs duplex: removing [ 342.643112][T15835] kernfs dormant: removing [ 342.643131][T15835] kernfs testing: removing [ 342.643144][T15835] kernfs operstate: removing [ 342.643164][T15835] kernfs carrier_changes: removing [ 342.643185][T15835] kernfs ifalias: removing [ 342.643204][T15835] kernfs carrier: removing [ 342.643223][T15835] kernfs mtu: removing [ 342.643238][T15835] kernfs flags: removing [ 342.643254][T15835] kernfs tx_queue_len: removing [ 342.643275][T15835] kernfs gro_flush_timeout: removing [ 342.643294][T15835] kernfs napi_defer_hard_irqs: removing [ 342.643314][T15835] kernfs proto_down: removing [ 342.643333][T15835] kernfs carrier_up_count: removing [ 342.643352][T15835] kernfs carrier_down_count: removing [ 342.643365][T15835] kernfs threaded: removing [ 342.643384][T15835] PM: Removing info for No Bus:syz_tun [ 342.643401][T15835] kobject: 'syz_tun' (ffff8880596dc7c0): kobject_uevent_env [ 342.643426][T15835] kobject: 'syz_tun' (ffff8880596dc7c0): fill_kobj_path: path = '/devices/virtual/net/syz_tun' [ 342.643610][T15835] kernfs syz_tun: removing [ 342.646496][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 342.646516][ T5777] net lo: siw: event 6 [ 342.705294][ T5832] Added buffer head 1 to ffff888054f31400 [ 342.705331][ T5832] Added buffer head 2 to ffff888054f31400 [ 342.706116][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 342.706166][ T42] No more buffers in queue [ 342.715983][T15806] kobject: 'syz_tun' (ffff8881316847c0): kobject_cleanup, parent 0000000000000000 [ 342.716003][T15806] kobject: 'syz_tun' (ffff8881316847c0): calling ktype release [ 342.716037][T15806] kobject: 'syz_tun': free name [ 342.796067][T15835] kobject: 'syz_tun' (ffff8880596dc7c0): kobject_cleanup, parent 0000000000000000 [ 342.796083][T15835] kobject: 'syz_tun' (ffff8880596dc7c0): calling ktype release [ 342.796107][T15835] kobject: 'syz_tun': free name [ 342.919247][ T5832] Added buffer head 2 to ffff888054f31400 [ 342.919269][ T5832] Added buffer head 1 to ffff888054f31400 [ 342.921928][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 342.922000][ T42] No more buffers in queue [ 342.988317][ T13] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 343.119068][ T5832] Added buffer head 1 to ffff888054f31400 [ 343.119090][ T5832] Added buffer head 2 to ffff888054f31400 [ 343.119877][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 343.119916][ T42] No more buffers in queue [ 343.136189][ C0] nf_nat: Already setup manip DST for ct ffff888035bafb00 (status bits 0x198) [ 343.136217][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafb00 (status bits 0x198) [ 343.345544][ T42] Added buffer head 2 to ffff888054f31400 [ 343.345568][ T42] Added buffer head 1 to ffff888054f31400 [ 343.346379][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 343.346420][ T5832] No more buffers in queue [ 343.555740][T14946] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 343.558736][ T42] Added buffer head 1 to ffff888054f31400 [ 343.558771][ T42] Added buffer head 2 to ffff888054f31400 [ 343.559616][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 343.559674][ T5832] No more buffers in queue [ 343.605777][ T42] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 343.605807][ T42] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 343.605865][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 343.605889][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 343.766055][ C2] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 10) [ 343.766192][T11386] net_ratelimit: 181 callbacks suppressed [ 343.766208][T11386] wireguard: wg2: Sending handshake initiation to peer 17 ([::1]:20001/0%0) [ 343.766423][T11386] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 343.766452][T11386] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 343.766472][T11386] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 343.766496][T11386] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 343.766518][T11386] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 343.772985][ T5832] Added buffer head 2 to ffff888054f31400 [ 343.773021][ T5832] Added buffer head 1 to ffff888054f31400 [ 343.773860][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 343.773923][ T42] No more buffers in queue [ 343.925528][ C0] wireguard: wg0: Sending keepalive packet to peer 20 ([::1]:20003/0%0) [ 343.925780][ T5829] wireguard: wg2: Receiving keepalive packet from peer 23 ([::1]:20001/0%0) [ 343.972100][ T5832] Added buffer head 1 to ffff888054f31400 [ 343.972138][ T5832] Added buffer head 2 to ffff888054f31400 [ 343.972997][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 343.973057][ T42] No more buffers in queue [ 343.985736][T11386] ieee80211 phy18: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static) [ 343.985892][T11386] ieee80211 phy19: mac80211_hwsim_config (freq=2452(2452 - 0)/noht idle=0 ps=0 smps=static) [ 343.985948][T11386] ieee80211 phy18: mac80211_hwsim_link_info_changed(changed=0x100 vif->addr=08:02:11:00:00:00, link id 0) [ 343.986012][T11386] ieee80211 phy19: mac80211_hwsim_link_info_changed(changed=0x100 vif->addr=08:02:11:00:00:01, link id 0) [ 344.085644][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 344.085677][ T5777] net lo: siw: event 6 [ 344.105643][ T5806] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 344.185557][ T5832] Added buffer head 2 to ffff888054f31400 [ 344.185593][ T5832] Added buffer head 1 to ffff888054f31400 [ 344.186404][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 344.186457][ T42] No more buffers in queue [ 344.325686][ C3] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 344.326551][ T5827] wireguard: wg1: Receiving keepalive packet from peer 21 ([::1]:20001/0%0) [ 344.399156][ T5832] Added buffer head 1 to ffff888054f31400 [ 344.399194][ T5832] Added buffer head 2 to ffff888054f31400 [ 344.400053][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 344.400093][ T42] No more buffers in queue [ 344.405569][ C3] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 344.599788][ T42] Added buffer head 2 to ffff888054f31400 [ 344.599826][ T42] Added buffer head 1 to ffff888054f31400 [ 344.600678][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 344.600767][ T5832] No more buffers in queue [ 344.645922][ T42] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 344.645942][ T42] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 344.645980][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 344.645994][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 344.655740][ T5806] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 344.812505][ T42] Added buffer head 1 to ffff888054f31400 [ 344.812529][ T42] Added buffer head 2 to ffff888054f31400 [ 344.813381][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 344.813423][ T5832] No more buffers in queue [ 345.025984][ T42] Added buffer head 2 to ffff888054f31400 [ 345.026008][ T42] Added buffer head 1 to ffff888054f31400 [ 345.026805][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 345.026845][ T5832] No more buffers in queue [ 345.165689][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 345.165725][ T5777] net lo: siw: event 6 [ 345.205804][T14946] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 345.238849][ T42] Added buffer head 1 to ffff888054f31400 [ 345.238873][ T42] Added buffer head 2 to ffff888054f31400 [ 345.239754][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 345.239803][ T5832] No more buffers in queue [ 345.285721][ C0] gtp0: no PDP ctx found for ff02:0000:0000:0000:0000:0000:0000:0002, skip [ 345.285899][ T9] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 345.285923][ T9] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 345.285965][ C0] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 345.285988][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 345.439095][ T42] Added buffer head 2 to ffff888054f31400 [ 345.439133][ T42] Added buffer head 1 to ffff888054f31400 [ 345.440012][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 345.440073][ T5832] No more buffers in queue [ 345.652106][ T5832] Added buffer head 1 to ffff888054f31400 [ 345.652130][ T5832] Added buffer head 2 to ffff888054f31400 [ 345.652937][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 345.654198][ T42] No more buffers in queue [ 345.686057][ C0] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 345.686404][ T42] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 345.686428][ T42] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 345.686460][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 345.686482][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 345.766257][ T5806] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 345.866651][ T5832] Added buffer head 2 to ffff888054f31400 [ 345.866690][ T5832] Added buffer head 1 to ffff888054f31400 [ 345.867513][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 345.867570][ T1353] No more buffers in queue [ 346.079157][ T5832] Added buffer head 1 to ffff888054f31400 [ 346.079197][ T5832] Added buffer head 2 to ffff888054f31400 [ 346.080029][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 346.080093][ T1353] No more buffers in queue [ 346.235622][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 346.235654][ T5777] net lo: siw: event 6 [ 346.279217][ T3272] Added buffer head 2 to ffff888054f31400 [ 346.279252][ T3272] Added buffer head 1 to ffff888054f31400 [ 346.280158][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 346.280309][ T5832] No more buffers in queue [ 346.316008][T14946] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 346.492539][ T5811] Added buffer head 1 to ffff888054f31400 [ 346.492577][ T5811] Added buffer head 2 to ffff888054f31400 [ 346.493422][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 346.493468][ T1353] No more buffers in queue [ 346.719233][ T5811] Added buffer head 2 to ffff888054f31400 [ 346.719268][ T5811] Added buffer head 1 to ffff888054f31400 [ 346.720140][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 346.720190][ T1353] No more buffers in queue [ 346.725760][ T1353] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 346.725778][ T1353] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 346.725811][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 346.725825][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 346.885769][ T5806] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 346.932290][ T5811] Added buffer head 1 to ffff888054f31400 [ 346.932314][ T5811] Added buffer head 2 to ffff888054f31400 [ 346.933140][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 346.933187][ T1353] No more buffers in queue [ 346.965539][ C3] wireguard: wg2: Handshake for peer 36 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 7) [ 346.965610][ C3] wireguard: wg0: Handshake for peer 13 ([::1]:20002/0%0) did not complete after 5 seconds, retrying (try 2) [ 347.146666][ T5811] Added buffer head 2 to ffff888054f31400 [ 347.146706][ T5811] Added buffer head 1 to ffff888054f31400 [ 347.147564][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 347.147625][ T1353] No more buffers in queue [ 347.275625][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 347.275657][ T5777] net lo: siw: event 6 [ 347.359180][ T5811] Added buffer head 1 to ffff888054f31400 [ 347.359205][ T5811] Added buffer head 2 to ffff888054f31400 [ 347.360050][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 347.360112][ T1353] No more buffers in queue [ 347.446039][T14946] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 347.572433][ T5811] Added buffer head 2 to ffff888054f31400 [ 347.572458][ T5811] Added buffer head 1 to ffff888054f31400 [ 347.573297][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 347.573354][ T1353] No more buffers in queue [ 347.605511][ C0] wireguard: wg2: Handshake for peer 18 (127.0.0.1:20002) did not complete after 5 seconds, retrying (try 9) [ 347.616302][ C3] wireguard: wg0: Handshake for peer 38 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 4) [ 347.765758][ T1353] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 347.765779][ T1353] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 347.765812][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 347.765826][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 347.787103][ T5811] Added buffer head 1 to ffff888054f31400 [ 347.787136][ T5811] Added buffer head 2 to ffff888054f31400 [ 347.787910][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 347.787949][ T1353] No more buffers in queue [ 347.999736][ T5811] Added buffer head 2 to ffff888054f31400 [ 347.999775][ T5811] Added buffer head 1 to ffff888054f31400 [ 348.000627][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 348.000698][ T1353] No more buffers in queue [ 348.006568][T14260] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 348.199524][ T5811] Added buffer head 1 to ffff888054f31400 [ 348.199562][ T5811] Added buffer head 2 to ffff888054f31400 [ 348.200432][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 348.200485][ T1353] No more buffers in queue [ 348.326411][ T10] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 348.326447][ T10] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 348.326495][ C0] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 348.326517][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 348.385766][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 348.385791][ T5777] net lo: siw: event 6 [ 348.412496][ T5811] Added buffer head 2 to ffff888054f31400 [ 348.412522][ T5811] Added buffer head 1 to ffff888054f31400 [ 348.413406][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 348.413467][ T1353] No more buffers in queue [ 348.565964][ T13] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 348.625751][ T5811] Added buffer head 1 to ffff888054f31400 [ 348.625780][ T5811] Added buffer head 2 to ffff888054f31400 [ 348.626578][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 348.626625][ T1353] No more buffers in queue [ 348.805521][ C3] net_ratelimit: 101 callbacks suppressed [ 348.805536][ C3] wireguard: wg0: Sending keepalive packet to peer 31 ([::1]:20002/0%0) [ 348.805697][ T42] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 348.805712][ T42] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 348.805745][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 348.805757][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 348.805864][T14250] wireguard: wg1: Receiving keepalive packet from peer 33 ([::1]:20001/0%0) [ 348.839110][ T5811] Added buffer head 2 to ffff888054f31400 [ 348.839135][ T5811] Added buffer head 1 to ffff888054f31400 [ 348.840008][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 348.840149][ T1353] No more buffers in queue [ 349.053365][ T10] Added buffer head 1 to ffff888054f31400 [ 349.053403][ T10] Added buffer head 2 to ffff888054f31400 [ 349.054342][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 349.054396][ T1353] No more buffers in queue [ 349.126903][ T5806] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 349.266454][ T10] Added buffer head 2 to ffff888054f31400 [ 349.266492][ T10] Added buffer head 1 to ffff888054f31400 [ 349.267321][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 349.267473][ T1353] No more buffers in queue [ 349.365588][ C0] wireguard: wg0: Sending keepalive packet to peer 44 ([::1]:20003/0%0) [ 349.455490][ C0] wireguard: wg0: Handshake for peer 14 ([::1]:20003/0%0) did not complete after 5 seconds, retrying (try 2) [ 349.455774][T11400] wireguard: wg0: Sending handshake initiation to peer 14 ([::1]:20003/0%0) [ 349.455971][T11400] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:0000:0001, type=16, ifindex=8) => 00000000 [ 349.455989][T11400] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:14aa, type=128, ifindex=8) => 00000003 [ 349.456000][T11400] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140b, type=128, ifindex=8) => 00000003 [ 349.456014][T11400] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:ac14:140a, type=128, ifindex=8) => 00000003 [ 349.456026][T11400] ipv6_addr_label(addr=0000:0000:0000:0000:0000:0000:7f00:0001, type=128, ifindex=8) => 00000003 [ 349.475617][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 349.475649][ T5777] net lo: siw: event 6 [ 349.479172][ T10] Added buffer head 1 to ffff888054f31400 [ 349.479206][ T10] Added buffer head 2 to ffff888054f31400 [ 349.480043][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 349.480099][ T1353] No more buffers in queue [ 349.525553][ C3] wireguard: wg2: Handshake for peer 17 ([::1]:20001/0%0) did not complete after 5 seconds, retrying (try 11) [ 349.525622][ C3] wireguard: wg0: Sending keepalive packet to peer 19 ([::1]:20002/0%0) [ 349.676179][ T13] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 349.679108][ T10] Added buffer head 2 to ffff888054f31400 [ 349.679132][ T10] Added buffer head 1 to ffff888054f31400 [ 349.680022][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 349.680073][ T1353] No more buffers in queue [ 349.845734][ T1353] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 349.845755][ T1353] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 349.845788][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 349.845803][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 349.906811][ T10] Added buffer head 1 to ffff888054f31400 [ 349.906847][ T10] Added buffer head 2 to ffff888054f31400 [ 349.907639][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 349.907697][ T1353] No more buffers in queue [ 350.119292][ T10] Added buffer head 2 to ffff888054f31400 [ 350.119332][ T10] Added buffer head 1 to ffff888054f31400 [ 350.120323][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 350.120370][ T1353] No more buffers in queue [ 350.225661][ T13] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 350.319735][ T10] Added buffer head 1 to ffff888054f31400 [ 350.319758][ T10] Added buffer head 2 to ffff888054f31400 [ 350.320650][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 350.320741][ T1353] No more buffers in queue [ 350.525682][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 350.525717][ T5777] net lo: siw: event 6 [ 350.532531][ T10] Added buffer head 2 to ffff888054f31400 [ 350.532555][ T10] Added buffer head 1 to ffff888054f31400 [ 350.533385][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 350.533437][ T1353] No more buffers in queue [ 350.745876][ T10] Added buffer head 1 to ffff888054f31400 [ 350.745900][ T10] Added buffer head 2 to ffff888054f31400 [ 350.746702][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 350.746747][ T42] No more buffers in queue [ 350.785794][ T13] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 350.885671][ T42] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 350.885692][ T42] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 350.885726][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 350.885739][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 350.959374][ T10] Added buffer head 2 to ffff888054f31400 [ 350.959400][ T10] Added buffer head 1 to ffff888054f31400 [ 350.960324][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 350.960379][ T1353] No more buffers in queue [ 351.173479][ T10] Added buffer head 1 to ffff888054f31400 [ 351.173504][ T10] Added buffer head 2 to ffff888054f31400 [ 351.174406][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 351.174451][ T1353] No more buffers in queue [ 351.345638][T14260] bond1: (slave veth3): Send learning packet: mac a2:1d:a1:5f:b6:c3 vlan 0 [ 351.365901][ T9] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 351.365922][ T9] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 351.365960][ C0] nf_nat: Already setup manip DST for ct ffff888035bafc80 (status bits 0x188) [ 351.365974][ C0] nf_nat: Already setup manip SRC for ct ffff888035bafc80 (status bits 0x188) [ 351.385913][ T10] Added buffer head 2 to ffff888054f31400 [ 351.385942][ T10] Added buffer head 1 to ffff888054f31400 [ 351.387232][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 351.390816][ T1353] No more buffers in queue [ 351.445980][ C3] geneve1: no route to fc00:0000:0000:0000:0000:0000:0000:0001 [ 351.575631][ T5777] lo (unregistered): bond_netdev_event received NETDEV_UNREGISTER [ 351.575654][ T5777] net lo: siw: event 6 [ 351.585916][ T10] Added buffer head 1 to ffff888054f31400 [ 351.585948][ T10] Added buffer head 2 to ffff888054f31400 [ 351.589673][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 351.593895][ T1353] No more buffers in queue [ 351.799922][ T10] Added buffer head 2 to ffff888054f31400 [ 351.799949][ T10] Added buffer head 1 to ffff888054f31400 [ 351.800791][ C3] virtqueue callback for ffff888054f31400 (ffffffff86655260) [ 351.800863][ T1353] No more buffers in queue [ 351.895808][T14260] bond1: (slave veth3): Send learning packet: mac be:0a:4f:97:3a:c0 vlan 0 [ 351.935836][ T1353] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 351.935868][ T1353] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188) [ 351.935913][ C3] nf_nat: Already setup manip DST for ct ffff888037a3de00 (status bits 0x188) [ 351.935935][ C3] nf_nat: Already setup manip SRC for ct ffff888037a3de00 (status bits 0x188)