Warning: Permanently added '[localhost]:20813' (ECDSA) to the list of known hosts. [ 61.230998][ T38] audit: type=1400 audit(1669245898.440:75): avc: denied { execute } for pid=3696 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 61.245498][ T38] audit: type=1400 audit(1669245898.440:76): avc: denied { execute_no_trans } for pid=3696 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/11/23 23:24:58 fuzzer started 2022/11/23 23:24:59 dialing manager at localhost:36043 [ 94.181386][ T40] cfg80211: failed to load regulatory.db [ 115.171586][ T38] audit: type=1400 audit(1669245952.380:77): avc: denied { mounton } for pid=3719 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 115.183197][ T3719] cgroup: Unknown subsys name 'net' [ 115.187108][ T38] audit: type=1400 audit(1669245952.380:78): avc: denied { mount } for pid=3719 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.203310][ T38] audit: type=1400 audit(1669245952.410:79): avc: denied { unmount } for pid=3719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 115.378176][ T3719] cgroup: Unknown subsys name 'rlimit' [ 115.496246][ T38] audit: type=1400 audit(1669245952.700:80): avc: denied { mounton } for pid=3719 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 115.511956][ T38] audit: type=1400 audit(1669245952.700:81): avc: denied { mount } for pid=3719 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2022/11/23 23:25:52 syscalls: 3833 2022/11/23 23:25:52 code coverage: enabled 2022/11/23 23:25:52 comparison tracing: enabled 2022/11/23 23:25:52 extra coverage: enabled 2022/11/23 23:25:52 delay kcov mmap: enabled 2022/11/23 23:25:52 setuid sandbox: enabled 2022/11/23 23:25:52 namespace sandbox: enabled 2022/11/23 23:25:52 Android sandbox: enabled 2022/11/23 23:25:52 fault injection: enabled 2022/11/23 23:25:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/11/23 23:25:52 net packet injection: enabled 2022/11/23 23:25:52 net device setup: enabled 2022/11/23 23:25:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/23 23:25:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/23 23:25:52 NIC VF setup: PCI device 0000:00:11.0 is not available 2022/11/23 23:25:52 USB emulation: enabled 2022/11/23 23:25:52 hci packet injection: enabled 2022/11/23 23:25:52 wifi device emulation: enabled 2022/11/23 23:25:52 802.15.4 emulation: enabled 2022/11/23 23:25:52 fetching corpus: 0, signal 0/0 (executing program) 2022/11/23 23:25:52 fetching corpus: 0, signal 0/0 (executing program) [ 115.525639][ T38] audit: type=1400 audit(1669245952.710:82): avc: denied { setattr } for pid=3719 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.545555][ T38] audit: type=1400 audit(1669245952.710:83): avc: denied { create } for pid=3719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.561411][ T38] audit: type=1400 audit(1669245952.710:84): avc: denied { write } for pid=3719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 115.575447][ T38] audit: type=1400 audit(1669245952.710:85): avc: denied { read } for pid=3719 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/11/23 23:25:55 starting 4 fuzzer processes 23:25:55 executing program 0: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:25:55 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) 23:25:55 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:25:55 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 118.733320][ T38] audit: type=1400 audit(1669245955.940:86): avc: denied { execmem } for pid=3721 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 119.733091][ T3729] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 119.741806][ T3729] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 119.755885][ T3729] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 119.763843][ T3729] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 119.770469][ T3729] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 119.776876][ T3729] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 119.789901][ T3735] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 119.797047][ T3726] Bluetooth: hci0: HCI_REQ-0x0c1a [ 119.807214][ T64] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 119.813777][ T64] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 119.829091][ T3740] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.836679][ T3729] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 119.837177][ T3740] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.842472][ T3729] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 119.852257][ T3729] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 119.856463][ T3743] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.859214][ T3730] Bluetooth: hci1: HCI_REQ-0x0c1a [ 119.868654][ T3737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 119.869822][ T3740] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.875626][ T3729] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 119.883754][ T3740] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 119.884339][ T3729] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 119.889350][ T3740] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.894957][ T3729] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 119.900104][ T3732] Bluetooth: hci2: HCI_REQ-0x0c1a [ 119.903533][ T3740] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 119.912707][ T3740] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 119.918986][ T3741] Bluetooth: hci3: HCI_REQ-0x0c1a [ 120.345724][ T38] kauditd_printk_skb: 9 callbacks suppressed [ 120.345738][ T38] audit: type=1400 audit(1669245957.550:96): avc: denied { module_request } for pid=3732 comm="syz-executor.2" kmod="rtnl-link-nicvf" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 120.453649][ T3732] chnl_net:caif_netlink_parms(): no params data found [ 120.461002][ T3726] chnl_net:caif_netlink_parms(): no params data found [ 120.548508][ T3730] chnl_net:caif_netlink_parms(): no params data found [ 120.569339][ T3741] chnl_net:caif_netlink_parms(): no params data found [ 120.582102][ T3732] [ 120.583693][ T3732] ====================================================== [ 120.588050][ T3732] WARNING: possible circular locking dependency detected [ 120.592509][ T3732] 6.1.0-rc6-syzkaller-00012-g4312098baf37 #0 Not tainted [ 120.598192][ T3732] ------------------------------------------------------ [ 120.603586][ T3732] syz-executor.2/3732 is trying to acquire lock: [ 120.607910][ T3732] ffffffff8c6c98e8 (zonelist_update_seq.seqcount){...-}-{0:0}, at: __alloc_pages+0x4aa/0x5b0 [ 120.616382][ T3732] [ 120.616382][ T3732] but task is already holding lock: [ 120.622554][ T3732] ffff88802c62a4d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 [ 120.629322][ T3732] [ 120.629322][ T3732] which lock already depends on the new lock. [ 120.629322][ T3732] [ 120.637690][ T3732] [ 120.637690][ T3732] the existing dependency chain (in reverse order) is: [ 120.644385][ T3732] [ 120.644385][ T3732] -> #4 (&base->lock){-.-.}-{2:2}: [ 120.650108][ T3732] _raw_spin_lock_irqsave+0x3d/0x60 [ 120.654585][ T3732] lock_timer_base+0x5a/0x1f0 [ 120.657761][ T3732] __mod_timer+0x398/0xe30 [ 120.660753][ T3732] __queue_delayed_work+0x1a7/0x270 [ 120.664586][ T3732] queue_delayed_work_on+0x109/0x120 [ 120.668096][ T3732] psi_task_change+0x1bf/0x2f0 [ 120.671159][ T3732] enqueue_task+0x1ec/0x3a0 [ 120.674369][ T3732] wake_up_new_task+0x632/0xdb0 [ 120.678050][ T3732] kernel_clone+0x229/0x980 [ 120.681060][ T3732] user_mode_thread+0xb1/0xf0 [ 120.684854][ T3732] rest_init+0x27/0x270 [ 120.688047][ T3732] arch_call_rest_init+0x13/0x1c [ 120.692661][ T3732] start_kernel+0x477/0x498 [ 120.696481][ T3732] secondary_startup_64_no_verify+0xce/0xdb [ 120.701382][ T3732] [ 120.701382][ T3732] -> #3 (&rq->__lock){-.-.}-{2:2}: [ 120.706652][ T3732] _raw_spin_lock_nested+0x34/0x40 [ 120.710667][ T3732] raw_spin_rq_lock_nested+0x2f/0x120 [ 120.715018][ T3732] task_fork_fair+0x6c/0x520 [ 120.718905][ T3732] sched_cgroup_fork+0x3d1/0x540 [ 120.724009][ T3732] copy_process+0x4351/0x7190 [ 120.728082][ T3732] kernel_clone+0xeb/0x980 [ 120.731847][ T3732] user_mode_thread+0xb1/0xf0 [ 120.735648][ T3732] rest_init+0x27/0x270 [ 120.738536][ T3732] arch_call_rest_init+0x13/0x1c [ 120.741827][ T3732] start_kernel+0x477/0x498 [ 120.745456][ T3732] secondary_startup_64_no_verify+0xce/0xdb [ 120.750001][ T3732] [ 120.750001][ T3732] -> #2 (&p->pi_lock){-.-.}-{2:2}: [ 120.755731][ T3732] _raw_spin_lock_irqsave+0x3d/0x60 [ 120.760026][ T3732] try_to_wake_up+0xb2/0x20f0 [ 120.764082][ T3732] up+0x79/0xb0 [ 120.767037][ T3732] __up_console_sem+0xa4/0xc0 [ 120.770227][ T3732] console_unlock+0x4ce/0x600 [ 120.773614][ T3732] vga_remove_vgacon.cold+0x99/0x9e [ 120.777757][ T3732] virtio_gpu_probe.cold+0xe3/0x15d [ 120.782186][ T3732] virtio_dev_probe+0x57b/0x870 [ 120.786188][ T3732] really_probe+0x249/0xb90 [ 120.790079][ T3732] __driver_probe_device+0x1df/0x4d0 [ 120.794187][ T3732] driver_probe_device+0x4c/0x1a0 [ 120.797709][ T3732] __driver_attach+0x1d4/0x550 [ 120.800864][ T3732] bus_for_each_dev+0x14b/0x1d0 [ 120.804184][ T3732] bus_add_driver+0x4cd/0x640 [ 120.807194][ T3732] driver_register+0x224/0x3a0 [ 120.810394][ T3732] do_one_initcall+0x141/0x780 [ 120.813854][ T3732] kernel_init_freeable+0x6ff/0x788 [ 120.817345][ T3732] kernel_init+0x1e/0x1d0 [ 120.820264][ T3732] ret_from_fork+0x1f/0x30 [ 120.823404][ T3732] [ 120.823404][ T3732] -> #1 ((console_sem).lock){-...}-{2:2}: [ 120.828120][ T3732] _raw_spin_lock_irqsave+0x3d/0x60 [ 120.831573][ T3732] down_trylock+0x12/0x70 [ 120.834528][ T3732] __down_trylock_console_sem+0x40/0x120 [ 120.838115][ T3732] vprintk_emit+0x16b/0x600 [ 120.841146][ T3732] vprintk+0x84/0xa0 [ 120.843681][ T3732] _printk+0xbe/0xf1 [ 120.846414][ T3732] build_zonelists+0x2e7/0x400 [ 120.849696][ T3732] __build_all_zonelists+0x122/0x180 [ 120.853187][ T3732] build_all_zonelists_init+0x35/0x12f [ 120.856855][ T3732] build_all_zonelists+0x123/0x140 [ 120.859967][ T3732] start_kernel+0xbd/0x498 [ 120.862923][ T3732] secondary_startup_64_no_verify+0xce/0xdb [ 120.866800][ T3732] [ 120.866800][ T3732] -> #0 (zonelist_update_seq.seqcount){...-}-{0:0}: [ 120.872073][ T3732] __lock_acquire+0x2a43/0x56d0 [ 120.875381][ T3732] lock_acquire+0x1e3/0x630 [ 120.878582][ T3732] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 120.883067][ T3732] __alloc_pages+0x4aa/0x5b0 [ 120.886379][ T3732] cache_grow_begin+0x75/0x360 [ 120.889674][ T3732] cache_alloc_refill+0x27f/0x380 [ 120.893055][ T3732] kmem_cache_alloc+0x364/0x460 [ 120.896188][ T3732] fill_pool+0x264/0x5c0 [ 120.899295][ T3732] __debug_object_init+0x7a/0xd10 [ 120.902808][ T3732] debug_object_activate+0x330/0x3e0 [ 120.906661][ T3732] __mod_timer+0x77d/0xe30 [ 120.910318][ T3732] __queue_delayed_work+0x1a7/0x270 [ 120.913998][ T3732] queue_delayed_work_on+0x109/0x120 [ 120.917579][ T3732] wg_ratelimiter_init+0x19c/0x2c0 [ 120.921215][ T3732] wg_newlink+0x470/0x8f0 [ 120.925185][ T3732] __rtnl_newlink+0x1087/0x17e0 [ 120.929510][ T3732] rtnl_newlink+0x68/0xa0 [ 120.932834][ T3732] rtnetlink_rcv_msg+0x43e/0xca0 [ 120.936985][ T3732] netlink_rcv_skb+0x157/0x430 [ 120.940459][ T3732] netlink_unicast+0x547/0x7f0 [ 120.943757][ T3732] netlink_sendmsg+0x91b/0xe10 [ 120.947194][ T3732] sock_sendmsg+0xd3/0x120 [ 120.950398][ T3732] __sys_sendto+0x23a/0x340 [ 120.953466][ T3732] __x64_sys_sendto+0xe1/0x1b0 [ 120.956355][ T3732] do_syscall_64+0x39/0xb0 [ 120.959364][ T3732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 120.963305][ T3732] [ 120.963305][ T3732] other info that might help us debug this: [ 120.963305][ T3732] [ 120.969530][ T3732] Chain exists of: [ 120.969530][ T3732] zonelist_update_seq.seqcount --> &rq->__lock --> &base->lock [ 120.969530][ T3732] [ 120.977681][ T3732] Possible unsafe locking scenario: [ 120.977681][ T3732] [ 120.981896][ T3732] CPU0 CPU1 [ 120.985094][ T3732] ---- ---- [ 120.988774][ T3732] lock(&base->lock); [ 120.991184][ T3732] lock(&rq->__lock); [ 120.995723][ T3732] lock(&base->lock); [ 121.000068][ T3732] lock(zonelist_update_seq.seqcount); [ 121.003536][ T3732] [ 121.003536][ T3732] *** DEADLOCK *** [ 121.003536][ T3732] [ 121.008885][ T3732] 3 locks held by syz-executor.2/3732: [ 121.012505][ T3732] #0: ffffffff8deabd68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 121.018396][ T3732] #1: ffffffff8d3bd5e8 (init_lock){+.+.}-{3:3}, at: wg_ratelimiter_init+0x1b/0x2c0 [ 121.024093][ T3732] #2: ffff88802c62a4d8 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x5a/0x1f0 [ 121.030510][ T3732] [ 121.030510][ T3732] stack backtrace: [ 121.034244][ T3732] CPU: 0 PID: 3732 Comm: syz-executor.2 Not tainted 6.1.0-rc6-syzkaller-00012-g4312098baf37 #0 [ 121.040641][ T3732] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 121.045965][ T3732] Call Trace: [ 121.048199][ T3732] [ 121.050364][ T3732] dump_stack_lvl+0xd1/0x138 [ 121.053601][ T3732] check_noncircular+0x25f/0x2e0 [ 121.056545][ T3732] ? print_circular_bug+0x1e0/0x1e0 [ 121.060261][ T3732] ? stack_trace_save+0x90/0xc0 [ 121.063834][ T3732] ? filter_irq_stacks+0x90/0x90 [ 121.067268][ T3732] __lock_acquire+0x2a43/0x56d0 [ 121.070693][ T3732] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 121.074397][ T3732] ? unwind_next_frame+0xd61/0x1d00 [ 121.077874][ T3732] ? arch_stack_walk+0x60/0xf0 [ 121.080938][ T3732] lock_acquire+0x1e3/0x630 [ 121.083837][ T3732] ? __alloc_pages+0x4aa/0x5b0 [ 121.086933][ T3732] ? lock_release+0x810/0x810 [ 121.089872][ T3732] ? unwind_next_frame+0xd61/0x1d00 [ 121.093250][ T3732] ? arch_stack_walk+0x60/0xf0 [ 121.096722][ T3732] ? __module_text_address+0xcb/0x1a0 [ 121.100942][ T3732] ? __zone_watermark_ok+0x275/0x460 [ 121.104840][ T3732] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 121.109535][ T3732] ? __alloc_pages+0x4aa/0x5b0 [ 121.112672][ T3732] ? warn_alloc+0x190/0x190 [ 121.115554][ T3732] ? kasan_save_stack+0x35/0x40 [ 121.118818][ T3732] ? __zone_watermark_ok+0x460/0x460 [ 121.122867][ T3732] ? prepare_alloc_pages+0x178/0x570 [ 121.127116][ T3732] ? wg_newlink+0x470/0x8f0 [ 121.130467][ T3732] ? __rtnl_newlink+0x1087/0x17e0 [ 121.133528][ T3732] ? rtnl_newlink+0x68/0xa0 [ 121.136172][ T3732] __alloc_pages+0x4aa/0x5b0 [ 121.139285][ T3732] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.143820][ T3732] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 121.148964][ T3732] ? find_held_lock+0x2d/0x110 [ 121.152637][ T3732] ? lock_downgrade+0x6e0/0x6e0 [ 121.156346][ T3732] ? do_raw_spin_lock+0x124/0x2b0 [ 121.159902][ T3732] cache_grow_begin+0x75/0x360 [ 121.163314][ T3732] cache_alloc_refill+0x27f/0x380 [ 121.166903][ T3732] kmem_cache_alloc+0x364/0x460 [ 121.170509][ T3732] fill_pool+0x264/0x5c0 [ 121.173382][ T3732] ? __list_del_entry_valid+0x110/0x110 [ 121.177259][ T3732] __debug_object_init+0x7a/0xd10 [ 121.180901][ T3732] ? debug_object_activate+0x1b7/0x3e0 [ 121.185819][ T3732] ? lock_downgrade+0x6e0/0x6e0 [ 121.189623][ T3732] ? debug_object_free+0x360/0x360 [ 121.193549][ T3732] debug_object_activate+0x330/0x3e0 [ 121.197861][ T3732] ? debug_object_assert_init+0x2e0/0x2e0 [ 121.202321][ T3732] ? get_nohz_timer_target+0x21/0x6a0 [ 121.206588][ T3732] ? lock_timer_base+0x174/0x1f0 [ 121.210525][ T3732] __mod_timer+0x77d/0xe30 [ 121.213917][ T3732] ? enqueue_timer+0x660/0x660 [ 121.217908][ T3732] ? mark_held_locks+0x9f/0xe0 [ 121.221836][ T3732] __queue_delayed_work+0x1a7/0x270 [ 121.226147][ T3732] queue_delayed_work_on+0x109/0x120 [ 121.229792][ T3732] wg_ratelimiter_init+0x19c/0x2c0 [ 121.233317][ T3732] wg_newlink+0x470/0x8f0 [ 121.236311][ T3732] ? wg_pm_notification+0x180/0x180 [ 121.239900][ T3732] __rtnl_newlink+0x1087/0x17e0 [ 121.243044][ T3732] ? lock_downgrade+0x6e0/0x6e0 [ 121.246125][ T3732] ? rtnl_link_unregister+0x250/0x250 [ 121.250130][ T3732] ? do_raw_spin_unlock+0x175/0x230 [ 121.254371][ T3732] ? mark_held_locks+0x9f/0xe0 [ 121.258414][ T3732] rtnl_newlink+0x68/0xa0 [ 121.261171][ T3732] ? __rtnl_newlink+0x17e0/0x17e0 [ 121.264531][ T3732] rtnetlink_rcv_msg+0x43e/0xca0 [ 121.267710][ T3732] ? rtnl_getlink+0xae0/0xae0 [ 121.270682][ T3732] netlink_rcv_skb+0x157/0x430 [ 121.273613][ T3732] ? rtnl_getlink+0xae0/0xae0 [ 121.276403][ T3732] ? netlink_ack+0xd60/0xd60 [ 121.279425][ T3732] ? netlink_deliver_tap+0x1a2/0xc50 [ 121.282558][ T3732] ? netlink_deliver_tap+0x1b1/0xc50 [ 121.285675][ T3732] netlink_unicast+0x547/0x7f0 [ 121.288650][ T3732] ? netlink_attachskb+0x890/0x890 [ 121.291910][ T3732] netlink_sendmsg+0x91b/0xe10 [ 121.294903][ T3732] ? netlink_unicast+0x7f0/0x7f0 [ 121.298111][ T3732] ? netlink_unicast+0x7f0/0x7f0 [ 121.301281][ T3732] sock_sendmsg+0xd3/0x120 [ 121.304139][ T3732] __sys_sendto+0x23a/0x340 [ 121.307362][ T3732] ? __ia32_sys_getpeername+0xb0/0xb0 [ 121.311341][ T3732] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 121.315963][ T3732] __x64_sys_sendto+0xe1/0x1b0 [ 121.319678][ T3732] ? syscall_enter_from_user_mode+0x26/0xb0 [ 121.324355][ T3732] do_syscall_64+0x39/0xb0 [ 121.328044][ T3732] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 121.332555][ T3732] RIP: 0033:0x7fda3503e10c [ 121.336153][ T3732] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 121.348953][ T3732] RSP: 002b:00007ffc3ab8dd70 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 121.354967][ T3732] RAX: ffffffffffffffda RBX: 00007fda35cd4620 RCX: 00007fda3503e10c [ 121.360465][ T3732] RDX: 000000000000003c RSI: 00007fda35cd4670 RDI: 0000000000000003 [ 121.366377][ T3732] RBP: 0000000000000000 R08: 00007ffc3ab8ddc4 R09: 000000000000000c [ 121.371732][ T3732] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 121.376433][ T3732] R13: 00007fda35cd4670 R14: 0000000000000003 R15: 0000000000000000 [ 121.381427][ T3732] [ 121.538135][ T3732] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.542926][ T3732] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.548996][ T3732] device bridge_slave_0 entered promiscuous mode [ 121.613249][ T3732] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.618715][ T3732] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.630652][ T3732] device bridge_slave_1 entered promiscuous mode [ 121.738201][ T3726] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.742556][ T3726] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.748092][ T3726] device bridge_slave_0 entered promiscuous mode [ 121.753957][ T3730] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.759916][ T3730] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.765364][ T3730] device bridge_slave_0 entered promiscuous mode [ 121.772293][ T3730] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.776666][ T3730] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.781862][ T3730] device bridge_slave_1 entered promiscuous mode [ 121.786322][ T3741] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.790862][ T3741] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.796234][ T3741] device bridge_slave_0 entered promiscuous mode [ 121.804911][ T3732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.812282][ T3726] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.816785][ T3726] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.822513][ T3726] device bridge_slave_1 entered promiscuous mode [ 121.843801][ T3741] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.849593][ T3741] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.857471][ T3729] Bluetooth: hci0: command 0x0409 tx timeout [ 121.860762][ T3741] device bridge_slave_1 entered promiscuous mode [ 121.870139][ T3732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.937866][ T3733] Bluetooth: hci3: command 0x0409 tx timeout [ 121.938019][ T3729] Bluetooth: hci2: command 0x0409 tx timeout [ 121.941963][ T3735] Bluetooth: hci1: command 0x0409 tx timeout [ 121.989494][ T3726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.003600][ T3730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.014045][ T3741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.023649][ T3741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.060395][ T3732] team0: Port device team_slave_0 added [ 122.068262][ T3726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.113483][ T3730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.214697][ T3732] team0: Port device team_slave_1 added [ 122.276766][ T3741] team0: Port device team_slave_0 added [ 122.312673][ T3732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.317517][ T3732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.334259][ T3732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.343545][ T3726] team0: Port device team_slave_0 added [ 122.349060][ T3730] team0: Port device team_slave_0 added [ 122.353903][ T3741] team0: Port device team_slave_1 added [ 122.369431][ T3732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.373956][ T3732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.392134][ T3732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.404187][ T3726] team0: Port device team_slave_1 added [ 122.423325][ T3730] team0: Port device team_slave_1 added [ 122.494003][ T3730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.498656][ T3730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.518831][ T3730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.528660][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.532834][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.555866][ T3741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.566994][ T3741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.572724][ T3741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.593857][ T3741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.620103][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 122.624463][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.645203][ T3726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 122.664056][ T3730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.668998][ T3730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.690984][ T3730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.757897][ T3732] device hsr_slave_0 entered promiscuous mode [ 122.763844][ T3732] device hsr_slave_1 entered promiscuous mode [ 122.778387][ T3726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 122.783820][ T3726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 122.804705][ T3726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.846332][ T3741] device hsr_slave_0 entered promiscuous mode [ 122.851245][ T3741] device hsr_slave_1 entered promiscuous mode [ 122.858629][ T3741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.864364][ T3741] Cannot create hsr debugfs directory [ 122.973975][ T3730] device hsr_slave_0 entered promiscuous mode [ 122.979076][ T3730] device hsr_slave_1 entered promiscuous mode [ 122.985250][ T3730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.992105][ T3730] Cannot create hsr debugfs directory [ 123.096478][ T3726] device hsr_slave_0 entered promiscuous mode [ 123.103455][ T3726] device hsr_slave_1 entered promiscuous mode [ 123.111287][ T3726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 123.119731][ T3726] Cannot create hsr debugfs directory [ 123.723447][ T3732] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 123.732277][ T3732] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 123.744785][ T3732] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 123.755230][ T3732] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 123.816623][ T3726] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 123.825603][ T3726] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 123.848381][ T3726] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 123.856961][ T3726] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 123.937873][ T3740] Bluetooth: hci0: command 0x041b tx timeout [ 123.945376][ T3730] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.956700][ T3730] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.980180][ T3730] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.997697][ T3741] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 124.005821][ T3741] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 124.015972][ T3730] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 124.026153][ T3741] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 124.028399][ T3740] Bluetooth: hci1: command 0x041b tx timeout [ 124.028437][ T3735] Bluetooth: hci3: command 0x041b tx timeout [ 124.030196][ T3729] Bluetooth: hci2: command 0x041b tx timeout [ 124.051213][ T3741] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 124.108037][ T3732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.143769][ T3726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.150078][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.156718][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.168979][ T3732] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.203581][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.210441][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.217120][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.226509][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.233930][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.239951][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.246995][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.268878][ T3726] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.273167][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.281490][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.289966][ T28] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.294230][ T28] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.311913][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.327859][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.335160][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.341615][ T3768] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.345806][ T3768] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.363784][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.369160][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.375756][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.382735][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.387725][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.392691][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.400080][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.425891][ T3741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.436340][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.444086][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.451841][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.460439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.468432][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.475346][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.483439][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.496326][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.505150][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.511705][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.517416][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.533600][ T3741] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.543382][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.549843][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.555285][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.561805][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.583089][ T3726] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.592123][ T3726] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.598209][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.604934][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.611494][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.618016][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.625238][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.629961][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.635014][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.642120][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.650042][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.655852][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.661434][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.666004][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.671369][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.678682][ T3730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.690745][ T3732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.698219][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 124.706816][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.712780][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.718174][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.724364][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 124.730712][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 124.743797][ T3730] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.758419][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.766286][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.773927][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.779539][ T38] audit: type=1400 audit(1669245961.990:97): avc: denied { sys_module } for pid=3732 comm="syz-executor.2" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 124.782396][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.819861][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 124.826845][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 124.833248][ T23] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.838568][ T23] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.844091][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 124.850458][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 124.855546][ T23] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.860304][ T23] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.865655][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.871703][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.878137][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 124.885258][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.892204][ T23] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.904903][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 124.911452][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 124.918788][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 124.924377][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 124.936441][ T3730] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 124.944074][ T3730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 124.955175][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 124.961290][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 124.967251][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 124.974196][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 124.980078][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 124.985760][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 124.991593][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 124.998436][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 125.003517][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 125.009309][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.017077][ T3741] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 125.038693][ T3726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.047015][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.051678][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.055940][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.062013][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.070874][ T3732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.089284][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.095935][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.105496][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.111808][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.132151][ T3732] device veth0_vlan entered promiscuous mode [ 125.138980][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.146477][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.154436][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.161706][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.174367][ T3726] device veth0_vlan entered promiscuous mode [ 125.179473][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.185853][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.193211][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.199052][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.205026][ T3732] device veth1_vlan entered promiscuous mode [ 125.228150][ T3726] device veth1_vlan entered promiscuous mode [ 125.237131][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.242551][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.248469][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.254990][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.262100][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.270761][ T3732] device veth0_macvtap entered promiscuous mode [ 125.286729][ T3730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.295652][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.301980][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.310107][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.314894][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.319532][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 125.324142][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 125.332278][ T3732] device veth1_macvtap entered promiscuous mode [ 125.352419][ T3741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.362726][ T3732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.370677][ T3726] device veth0_macvtap entered promiscuous mode [ 125.378982][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.386371][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.393381][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.401800][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.407548][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.413814][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.430547][ T3726] device veth1_macvtap entered promiscuous mode [ 125.435420][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.441203][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.447146][ T3769] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.460307][ T3732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.465752][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.472463][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.487799][ T3732] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.493442][ T3732] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.499925][ T3732] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.505636][ T3732] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.518748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.526283][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.533185][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 125.539004][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 125.544997][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.550614][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.557142][ T3730] device veth0_vlan entered promiscuous mode [ 125.571411][ T3730] device veth1_vlan entered promiscuous mode [ 125.585397][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.592625][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.600590][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.612268][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.624247][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 125.630975][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 125.639098][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 125.650255][ T3726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.658272][ T3726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.668786][ T3726] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 125.686881][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 125.698024][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 125.712891][ T3726] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.718765][ T3726] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.724532][ T3726] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.730625][ T3726] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 125.740790][ T3732] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 125.749271][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 125.756025][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 125.763238][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 125.769993][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 125.794835][ T3730] device veth0_macvtap entered promiscuous mode [ 125.801259][ T3741] device veth0_vlan entered promiscuous mode [ 125.819450][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 125.826190][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 125.842290][ T3732] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 125.842349][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.857579][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.866369][ T3730] device veth1_macvtap entered promiscuous mode [ 125.873207][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 125.880124][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 125.886285][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 125.898004][ T3741] device veth1_vlan entered promiscuous mode [ 125.919698][ T3726] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 125.930618][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.936019][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.946799][ T3767] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 125.947066][ T3730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.953575][ T3767] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 125.960667][ T3730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.971497][ T3730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.978435][ T3730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.985244][ T3730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.991026][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 125.996976][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 126.004035][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.010072][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.015975][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.022286][ T3740] Bluetooth: hci0: command 0x040f tx timeout [ 126.023348][ T835] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 126.041894][ T38] audit: type=1400 audit(1669245963.250:98): avc: denied { mounton } for pid=3732 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 126.048440][ T3726] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 126.058259][ T38] audit: type=1400 audit(1669245963.250:99): avc: denied { mount } for pid=3732 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 126.069210][ T3730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.085574][ T3730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.092413][ T3730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.097659][ T3729] Bluetooth: hci2: command 0x040f tx timeout [ 126.097680][ T3740] Bluetooth: hci1: command 0x040f tx timeout [ 126.097712][ T3740] Bluetooth: hci3: command 0x040f tx timeout [ 126.100774][ T3730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.119322][ T3730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.127808][ T3741] device veth0_macvtap entered promiscuous mode [ 126.137707][ T3741] device veth1_macvtap entered promiscuous mode [ 126.149361][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.154906][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.161500][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 126.166971][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 126.172864][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 126.177902][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 126.187184][ T3730] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.194029][ T3730] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.202161][ T3730] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.207918][ T38] audit: type=1400 audit(1669245963.410:100): avc: denied { read write } for pid=3732 comm="syz-executor.2" name="loop2" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.209388][ T3730] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.232178][ T38] audit: type=1400 audit(1669245963.410:101): avc: denied { open } for pid=3732 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=661 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 23:26:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) [ 126.267508][ T38] audit: type=1400 audit(1669245963.410:102): avc: denied { ioctl } for pid=3732 comm="syz-executor.2" path="/dev/loop2" dev="devtmpfs" ino=661 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.289631][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.296758][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.301112][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 23:26:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) [ 126.310450][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.318500][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.325213][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.331342][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 126.331355][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.332327][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_0 23:26:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) [ 126.363114][ T3730] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' [ 126.369321][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.375220][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 126.382050][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 23:26:03 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) [ 126.392369][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.406914][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.413606][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.422212][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.422224][ T3741] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.422234][ T3741] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.423581][ T3741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.466410][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 126.475727][ T3773] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 126.499635][ T3741] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.506226][ T3741] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.512960][ T38] audit: type=1400 audit(1669245963.720:103): avc: denied { read write } for pid=3806 comm="syz-executor.3" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.517622][ T3741] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.530756][ T38] audit: type=1400 audit(1669245963.720:104): avc: denied { open } for pid=3806 comm="syz-executor.3" path="/dev/raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.536075][ T3741] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.555720][ T38] audit: type=1400 audit(1669245963.720:105): avc: denied { ioctl } for pid=3806 comm="syz-executor.3" path="/dev/raw-gadget" dev="devtmpfs" ino=763 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 126.582900][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.592420][ T3730] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 126.592859][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.620261][ T3798] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.640342][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.640775][ T3741] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 126.646618][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.668977][ T3799] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 126.704569][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.707524][ T3741] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 126.711796][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 23:26:03 executing program 0: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) [ 126.731798][ T3784] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 126.759420][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.765534][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.773615][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 23:26:04 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) [ 126.810789][ T38] audit: type=1400 audit(1669245964.020:106): avc: denied { create } for pid=3813 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 126.832772][ T38] audit: type=1400 audit(1669245964.020:107): avc: denied { write } for pid=3813 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 23:26:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) 23:26:04 executing program 0: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:26:04 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:04 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:26:04 executing program 0: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:26:04 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZE(r0, 0x4b4d, &(0x7f00000001c0)={0x0, 0x3347}) 23:26:04 executing program 1: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:26:04 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:04 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:04 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 127.478252][ T33] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 127.497919][ T3769] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 127.547802][ T3798] usb 6-1: new high-speed USB device number 2 using dummy_hcd 23:26:05 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:05 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:05 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:05 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 128.112561][ T3729] Bluetooth: hci0: command 0x0419 tx timeout [ 128.177764][ T3729] Bluetooth: hci2: command 0x0419 tx timeout [ 128.177804][ T3735] Bluetooth: hci3: command 0x0419 tx timeout [ 128.178607][ T3740] Bluetooth: hci1: command 0x0419 tx timeout [ 128.487803][ T3769] usb 5-1: device descriptor read/64, error -71 23:26:05 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:05 executing program 2: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 128.667538][ T3784] usb usb7-port1: Cannot enable. Maybe the USB cable is bad? 23:26:05 executing program 1: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) [ 128.819117][ T3784] usb 7-1: new high-speed USB device number 3 using dummy_hcd 23:26:06 executing program 0: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:06 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:26:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:26:06 executing program 1: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:26:06 executing program 2: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000001e80)=@del={0xe0, 0x11, 0x25, 0x0, 0x0, {{'aegis128l-generic\x00'}}}, 0xe0}}, 0x0) 23:26:06 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:06 executing program 1: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:26:06 executing program 1: setreuid(0xee01, 0xee00) clock_adjtime(0x0, &(0x7f0000000000)={0x5}) 23:26:07 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 3: timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000240)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) syz_usb_connect(0x0, 0x58, &(0x7f00000000c0)=ANY=[], 0x0) 23:26:07 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9cffffff}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) 23:26:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 1: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 2: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) 23:26:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000f00)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [], 0x0, [0x4], [0x0, 0x80]}}}}]}, 0x88}}, 0x0) VM DIAGNOSIS: 23:25:58 Registers: info registers vcpu 0 RAX=0000000000000030 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff84671c05 RDI=ffffffff91c92de0 RBP=ffffffff91c92da0 RSP=ffffc90002fde550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=63722d302e312e36 R12=0000000000000000 R13=0000000000000030 R14=ffffffff84671ba0 R15=0000000000000000 RIP=ffffffff84671c2f RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557080400 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f8124403300 CR3=00000000569ee000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000ff000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff888012d061c0 RCX=ffffffff89ecee95 RDX=ffffed10058e6b92 RSI=0000000000000000 RDI=ffffffff89f01123 RBP=dffffc0000000000 RSP=ffffc9000066fdf8 R8 =0000000000000000 R9 =ffff88802c735c8b R10=ffffed10058e6b91 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8e50efd0 R15=0000000000000000 RIP=ffffffff89f0080f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f681ab7c270 CR3=00000000553f5000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=000000000000000041517dbe00000000 XMM03=32322035312e322e302e303120343638 XMM04=00000000000000000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000002 RBX=ffff888012d08200 RCX=ffffffff89ecee95 RDX=ffffed1005906b92 RSI=0000000000000000 RDI=ffffffff89f01123 RBP=dffffc0000000000 RSP=ffffc9000067fdf8 R8 =0000000000000000 R9 =ffff88802c835c8b R10=ffffed1005906b91 R11=0000000000000001 R12=0000000000000002 R13=0000000000000002 R14=ffffffff8e50efd0 R15=0000000000000000 RIP=ffffffff89f0080f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f681ab7b300 CR3=0000000056de0000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000ff000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000000 RBX=ffff88802c645f80 RCX=0000000000000000 RDX=ffff88801e606100 RSI=ffffffff817441ed RDI=0000000000000005 RBP=0000000000000000 RSP=ffffc900039c7970 R8 =0000000000000005 R9 =0000000000000000 R10=0000000000000001 R11=0000000000000000 R12=0000000000000003 R13=ffffed10058c8bf1 R14=0000000000000001 R15=dffffc0000000000 RIP=ffffffff817441ef RFL=00000293 [--S-A-C] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f681ae18028 CR3=000000000c28e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a XMM01=000000000000000000000000000000ff XMM02=000000000000000000000000000000ff XMM03=6e6863205d3134373354205b5d393333 XMM04=7379733d7373616c637420745f6c656e XMM05=65747379733d747865746e6f63742074 XMM06=3a746f6f723d747865746e6f63732022 XMM07=3d646f6d6b2022322e726f7475636578 XMM08=3230303136342e30323120205b3e3400 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000