Warning: Permanently added '[localhost]:46926' (ECDSA) to the list of known hosts. [ 78.308199][ T38] audit: type=1400 audit(1668359510.069:75): avc: denied { execute } for pid=3671 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 78.324829][ T38] audit: type=1400 audit(1668359510.079:76): avc: denied { execute_no_trans } for pid=3671 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/11/13 17:11:50 fuzzer started 2022/11/13 17:11:51 dialing manager at localhost:36479 [ 80.242940][ T38] audit: type=1400 audit(1668359511.999:77): avc: denied { mounton } for pid=3682 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 80.252208][ T3682] cgroup: Unknown subsys name 'net' [ 80.269606][ T38] audit: type=1400 audit(1668359511.999:78): avc: denied { mount } for pid=3682 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.288941][ T38] audit: type=1400 audit(1668359512.039:79): avc: denied { unmount } for pid=3682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 80.490391][ T3682] cgroup: Unknown subsys name 'rlimit' [ 80.646246][ T38] audit: type=1400 audit(1668359512.409:80): avc: denied { mounton } for pid=3682 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 80.676081][ T38] audit: type=1400 audit(1668359512.409:81): avc: denied { mount } for pid=3682 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2022/11/13 17:11:52 syscalls: 3833 2022/11/13 17:11:52 code coverage: enabled 2022/11/13 17:11:52 comparison tracing: enabled 2022/11/13 17:11:52 extra coverage: enabled 2022/11/13 17:11:52 delay kcov mmap: enabled 2022/11/13 17:11:52 setuid sandbox: enabled 2022/11/13 17:11:52 namespace sandbox: enabled 2022/11/13 17:11:52 Android sandbox: enabled 2022/11/13 17:11:52 fault injection: enabled 2022/11/13 17:11:52 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/11/13 17:11:52 net packet injection: enabled 2022/11/13 17:11:52 net device setup: enabled 2022/11/13 17:11:52 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/13 17:11:52 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/13 17:11:52 NIC VF setup: PCI device 0000:00:11.0 is not available 2022/11/13 17:11:52 USB emulation: enabled 2022/11/13 17:11:52 hci packet injection: enabled 2022/11/13 17:11:52 wifi device emulation: enabled 2022/11/13 17:11:52 802.15.4 emulation: enabled [ 80.694760][ T38] audit: type=1400 audit(1668359512.409:82): avc: denied { setattr } for pid=3682 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=761 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 2022/11/13 17:11:52 fetching corpus: 0, signal 0/2000 (executing program) [ 80.715753][ T38] audit: type=1400 audit(1668359512.409:83): avc: denied { create } for pid=3682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.731785][ T38] audit: type=1400 audit(1668359512.409:84): avc: denied { write } for pid=3682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 80.752645][ T38] audit: type=1400 audit(1668359512.409:85): avc: denied { read } for pid=3682 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/11/13 17:11:52 fetching corpus: 49, signal 52595/55519 (executing program) 2022/11/13 17:11:53 fetching corpus: 97, signal 65874/69804 (executing program) 2022/11/13 17:11:53 fetching corpus: 146, signal 78991/83720 (executing program) 2022/11/13 17:11:53 fetching corpus: 191, signal 91386/96690 (executing program) 2022/11/13 17:11:54 fetching corpus: 241, signal 102354/108029 (executing program) 2022/11/13 17:11:54 fetching corpus: 290, signal 108346/114527 (executing program) 2022/11/13 17:11:54 fetching corpus: 340, signal 114876/121405 (executing program) 2022/11/13 17:11:55 fetching corpus: 388, signal 121490/128284 (executing program) 2022/11/13 17:11:55 fetching corpus: 438, signal 128460/135345 (executing program) 2022/11/13 17:11:55 fetching corpus: 485, signal 134913/141740 (executing program) 2022/11/13 17:11:56 fetching corpus: 533, signal 139520/146406 (executing program) 2022/11/13 17:11:56 fetching corpus: 582, signal 147176/153690 (executing program) 2022/11/13 17:11:56 fetching corpus: 632, signal 151748/158075 (executing program) 2022/11/13 17:11:57 fetching corpus: 681, signal 154768/161067 (executing program) 2022/11/13 17:11:57 fetching corpus: 730, signal 158416/164552 (executing program) 2022/11/13 17:11:57 fetching corpus: 780, signal 164440/170005 (executing program) 2022/11/13 17:11:58 fetching corpus: 827, signal 167753/173056 (executing program) 2022/11/13 17:11:58 fetching corpus: 876, signal 172465/177140 (executing program) 2022/11/13 17:11:58 fetching corpus: 922, signal 175626/179944 (executing program) 2022/11/13 17:11:59 fetching corpus: 970, signal 178205/182195 (executing program) 2022/11/13 17:11:59 fetching corpus: 1020, signal 181140/184734 (executing program) 2022/11/13 17:11:59 fetching corpus: 1069, signal 183899/186976 (executing program) 2022/11/13 17:12:00 fetching corpus: 1117, signal 186801/189304 (executing program) 2022/11/13 17:12:00 fetching corpus: 1167, signal 191753/193129 (executing program) 2022/11/13 17:12:01 fetching corpus: 1214, signal 193767/194658 (executing program) 2022/11/13 17:12:01 fetching corpus: 1225, signal 194270/195090 (executing program) 2022/11/13 17:12:01 fetching corpus: 1227, signal 194295/195151 (executing program) 2022/11/13 17:12:01 fetching corpus: 1227, signal 194295/195176 (executing program) 2022/11/13 17:12:01 fetching corpus: 1227, signal 194295/195221 (executing program) 2022/11/13 17:12:01 fetching corpus: 1227, signal 194295/195259 (executing program) 2022/11/13 17:12:01 fetching corpus: 1227, signal 194295/195300 (executing program) 2022/11/13 17:12:01 fetching corpus: 1228, signal 194325/195358 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195475 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195509 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195564 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195612 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195652 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195697 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195743 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195778 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195812 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195853 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195887 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195916 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194417/195950 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194418/196006 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194418/196047 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194418/196084 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194418/196116 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194419/196153 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196200 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196241 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196286 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196329 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196355 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196395 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196441 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196480 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196518 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196552 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196594 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196629 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196675 (executing program) 2022/11/13 17:12:01 fetching corpus: 1229, signal 194421/196707 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196746 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196790 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196829 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196869 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196909 (executing program) 2022/11/13 17:12:02 fetching corpus: 1229, signal 194421/196958 (executing program) 2022/11/13 17:12:02 fetching corpus: 1230, signal 194440/196997 (executing program) 2022/11/13 17:12:02 fetching corpus: 1230, signal 194440/197031 (executing program) 2022/11/13 17:12:02 fetching corpus: 1230, signal 194440/197074 (executing program) 2022/11/13 17:12:02 fetching corpus: 1230, signal 194440/197100 (executing program) 2022/11/13 17:12:02 fetching corpus: 1230, signal 194440/197145 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197201 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197239 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197281 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197326 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197363 (executing program) 2022/11/13 17:12:02 fetching corpus: 1231, signal 194465/197384 (executing program) 2022/11/13 17:12:02 fetching corpus: 1232, signal 194484/197439 (executing program) 2022/11/13 17:12:02 fetching corpus: 1232, signal 194484/197500 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194561/197591 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194561/197628 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194561/197659 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194563/197696 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194563/197730 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194563/197766 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194563/197800 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194563/197841 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194566/197885 (executing program) 2022/11/13 17:12:02 fetching corpus: 1233, signal 194566/197928 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194583/197987 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194593/198028 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194593/198074 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194593/198096 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194593/198147 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194596/198152 (executing program) 2022/11/13 17:12:02 fetching corpus: 1234, signal 194596/198152 (executing program) 2022/11/13 17:12:06 starting 4 fuzzer processes 17:12:06 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x6, 0xa, 0x0, 0x0) 17:12:06 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 17:12:06 executing program 2: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:06 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) [ 95.029253][ T38] audit: type=1400 audit(1668359526.789:86): avc: denied { execmem } for pid=3688 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 95.261825][ T38] audit: type=1400 audit(1668359527.019:87): avc: denied { mounton } for pid=3693 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 95.289059][ T38] audit: type=1400 audit(1668359527.019:88): avc: denied { mount } for pid=3693 comm="syz-executor.0" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 95.306946][ T38] audit: type=1400 audit(1668359527.019:89): avc: denied { create } for pid=3693 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.321761][ T3699] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.321855][ T38] audit: type=1400 audit(1668359527.019:90): avc: denied { read write } for pid=3693 comm="syz-executor.0" name="vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.327576][ T38] audit: type=1400 audit(1668359527.029:91): avc: denied { open } for pid=3693 comm="syz-executor.0" path="/dev/vhci" dev="devtmpfs" ino=1105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 95.357541][ T3700] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 95.359390][ T3707] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 95.360755][ T3707] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.361947][ T3707] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 95.362265][ T3707] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.362671][ T3707] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 95.362869][ T3707] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.363064][ T38] audit: type=1400 audit(1668359527.049:92): avc: denied { ioctl } for pid=3695 comm="syz-executor.2" path="socket:[4095]" dev="sockfs" ino=4095 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 95.364674][ T3707] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.365209][ T3707] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.365543][ T3699] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.365664][ T3707] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 95.365767][ T3707] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 95.366243][ T3707] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.366874][ T3707] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.367314][ T3699] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.367486][ T3699] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.368281][ T3702] Bluetooth: hci3: HCI_REQ-0x0c1a [ 95.369009][ T3693] Bluetooth: hci0: HCI_REQ-0x0c1a [ 95.374987][ T3700] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 95.375334][ T38] audit: type=1400 audit(1668359527.129:93): avc: denied { read } for pid=3693 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.376531][ T38] audit: type=1400 audit(1668359527.129:94): avc: denied { open } for pid=3693 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 95.376570][ T38] audit: type=1400 audit(1668359527.129:95): avc: denied { mounton } for pid=3693 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 95.378895][ T3707] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 95.386564][ T3700] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 95.390886][ T3707] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 95.405789][ T3708] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 95.417286][ T3701] Bluetooth: hci2: HCI_REQ-0x0c1a [ 95.421721][ T3707] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 95.546268][ T3707] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 95.554053][ T3695] Bluetooth: hci1: HCI_REQ-0x0c1a [ 95.758241][ T3702] chnl_net:caif_netlink_parms(): no params data found [ 95.835573][ T3693] chnl_net:caif_netlink_parms(): no params data found [ 95.931302][ T3702] [ 95.933602][ T3702] ====================================================== [ 95.940423][ T3702] WARNING: possible circular locking dependency detected [ 95.946710][ T3702] 6.1.0-rc4-syzkaller-00372-gaf7a05689189 #0 Not tainted [ 95.957338][ T3702] ------------------------------------------------------ [ 95.962232][ T3702] syz-executor.1/3702 is trying to acquire lock: [ 95.966708][ T3702] ffffffff8c0c2268 (zonelist_update_seq.seqcount){...-}-{0:0}, at: __alloc_pages+0x4a6/0x5a0 [ 95.973129][ T3702] [ 95.973129][ T3702] but task is already holding lock: [ 95.978185][ T3702] ffff88802ca294d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x60c/0xe30 [ 95.983936][ T3702] [ 95.983936][ T3702] which lock already depends on the new lock. [ 95.983936][ T3702] [ 95.991246][ T3702] [ 95.991246][ T3702] the existing dependency chain (in reverse order) is: [ 95.997653][ T3702] [ 95.997653][ T3702] -> #4 (&base->lock){-.-.}-{2:2}: [ 96.002577][ T3702] _raw_spin_lock_irqsave+0x39/0x50 [ 96.006378][ T3702] lock_timer_base+0x5a/0x1f0 [ 96.009761][ T3702] __mod_timer+0x398/0xe30 [ 96.012931][ T3702] __queue_delayed_work+0x1a7/0x270 [ 96.016725][ T3702] queue_delayed_work_on+0x105/0x120 [ 96.020322][ T3702] psi_task_change+0x1bb/0x2f0 [ 96.023789][ T3702] enqueue_task+0x1ec/0x3a0 [ 96.026874][ T3702] wake_up_new_task+0x62e/0xda0 [ 96.030584][ T3702] kernel_clone+0x225/0x980 [ 96.033850][ T3702] user_mode_thread+0xad/0xe0 [ 96.037015][ T3702] rest_init+0x23/0x270 [ 96.040087][ T3702] arch_call_rest_init+0xf/0x14 [ 96.044269][ T3702] start_kernel+0x478/0x499 [ 96.047828][ T3702] secondary_startup_64_no_verify+0xce/0xdb [ 96.052550][ T3702] [ 96.052550][ T3702] -> #3 (&rq->__lock){-.-.}-{2:2}: [ 96.057718][ T3702] _raw_spin_lock_nested+0x30/0x40 [ 96.061118][ T3702] raw_spin_rq_lock_nested+0x2b/0x120 [ 96.064955][ T3702] task_fork_fair+0x68/0x520 [ 96.068331][ T3702] sched_cgroup_fork+0x3cd/0x540 [ 96.071878][ T3702] copy_process+0x4351/0x7190 [ 96.075177][ T3702] kernel_clone+0xe7/0x980 [ 96.078548][ T3702] user_mode_thread+0xad/0xe0 [ 96.082600][ T3702] rest_init+0x23/0x270 [ 96.086247][ T3702] arch_call_rest_init+0xf/0x14 [ 96.090313][ T3702] start_kernel+0x478/0x499 [ 96.094298][ T3702] secondary_startup_64_no_verify+0xce/0xdb [ 96.099416][ T3702] [ 96.099416][ T3702] -> #2 (&p->pi_lock){-.-.}-{2:2}: [ 96.104694][ T3702] _raw_spin_lock_irqsave+0x39/0x50 [ 96.108623][ T3702] try_to_wake_up+0xb2/0x20f0 [ 96.112443][ T3702] up+0x75/0xb0 [ 96.115507][ T3702] __up_console_sem+0xa4/0xc0 [ 96.119309][ T3702] console_unlock+0x4ca/0x600 [ 96.122669][ T3702] vga_remove_vgacon.cold+0x99/0x9e [ 96.126301][ T3702] virtio_gpu_probe.cold+0xe3/0x15d [ 96.130006][ T3702] virtio_dev_probe+0x577/0x870 [ 96.134534][ T3702] really_probe+0x249/0xb90 [ 96.138445][ T3702] __driver_probe_device+0x1df/0x4d0 [ 96.142975][ T3702] driver_probe_device+0x4c/0x1a0 [ 96.146923][ T3702] __driver_attach+0x1d0/0x550 [ 96.150844][ T3702] bus_for_each_dev+0x147/0x1d0 [ 96.155321][ T3702] bus_add_driver+0x4c9/0x640 [ 96.159576][ T3702] driver_register+0x220/0x3a0 [ 96.164324][ T3702] do_one_initcall+0x13d/0x780 [ 96.168738][ T3702] kernel_init_freeable+0x6ff/0x788 [ 96.173621][ T3702] kernel_init+0x1a/0x1d0 [ 96.177773][ T3702] ret_from_fork+0x1f/0x30 [ 96.181900][ T3702] [ 96.181900][ T3702] -> #1 ((console_sem).lock){-...}-{2:2}: [ 96.188347][ T3702] _raw_spin_lock_irqsave+0x39/0x50 [ 96.194017][ T3702] down_trylock+0xe/0x60 [ 96.198099][ T3702] __down_trylock_console_sem+0x40/0x120 [ 96.203137][ T3702] vprintk_emit+0x167/0x5f0 [ 96.207008][ T3702] vprintk+0x80/0x90 [ 96.210220][ T3702] _printk+0xba/0xed [ 96.213635][ T3702] build_zonelists+0x2e7/0x400 [ 96.218208][ T3702] __build_all_zonelists+0x122/0x180 [ 96.226985][ T3702] build_all_zonelists_init+0x35/0x12f [ 96.231268][ T3702] build_all_zonelists+0x11f/0x140 [ 96.235178][ T3702] start_kernel+0xb9/0x499 [ 96.239212][ T3702] secondary_startup_64_no_verify+0xce/0xdb [ 96.244753][ T3702] [ 96.244753][ T3702] -> #0 (zonelist_update_seq.seqcount){...-}-{0:0}: [ 96.252101][ T3702] __lock_acquire+0x2a43/0x56d0 [ 96.256743][ T3702] lock_acquire+0x1df/0x630 [ 96.260973][ T3702] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 96.266685][ T3702] __alloc_pages+0x4a6/0x5a0 [ 96.270885][ T3702] cache_grow_begin+0x75/0x360 [ 96.275262][ T3702] cache_alloc_refill+0x27f/0x380 [ 96.280096][ T3702] kmem_cache_alloc+0x35c/0x450 [ 96.285427][ T3702] fill_pool+0x264/0x5c0 [ 96.289534][ T3702] __debug_object_init+0x7a/0xd10 [ 96.294237][ T3702] debug_object_activate+0x32c/0x3e0 [ 96.298604][ T3702] __mod_timer+0x77d/0xe30 [ 96.301988][ T3702] __queue_delayed_work+0x1a7/0x270 [ 96.305639][ T3702] queue_delayed_work_on+0x105/0x120 [ 96.309954][ T3702] wg_ratelimiter_init+0x198/0x2c0 [ 96.314966][ T3702] wg_newlink+0x46c/0x8f0 [ 96.319099][ T3702] __rtnl_newlink+0x1087/0x17e0 [ 96.323941][ T3702] rtnl_newlink+0x64/0xa0 [ 96.327901][ T3702] rtnetlink_rcv_msg+0x43a/0xca0 [ 96.332185][ T3702] netlink_rcv_skb+0x153/0x420 [ 96.336394][ T3702] netlink_unicast+0x543/0x7f0 [ 96.340118][ T3702] netlink_sendmsg+0x917/0xe10 [ 96.344394][ T3702] sock_sendmsg+0xcf/0x120 [ 96.348606][ T3702] __sys_sendto+0x236/0x340 [ 96.353007][ T3702] __x64_sys_sendto+0xdd/0x1b0 [ 96.357485][ T3702] do_syscall_64+0x35/0xb0 [ 96.361565][ T3702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.366994][ T3702] [ 96.366994][ T3702] other info that might help us debug this: [ 96.366994][ T3702] [ 96.374702][ T3702] Chain exists of: [ 96.374702][ T3702] zonelist_update_seq.seqcount --> &rq->__lock --> &base->lock [ 96.374702][ T3702] [ 96.385684][ T3702] Possible unsafe locking scenario: [ 96.385684][ T3702] [ 96.392012][ T3702] CPU0 CPU1 [ 96.396845][ T3702] ---- ---- [ 96.401662][ T3702] lock(&base->lock); [ 96.405426][ T3702] lock(&rq->__lock); [ 96.411371][ T3702] lock(&base->lock); [ 96.415905][ T3702] lock(zonelist_update_seq.seqcount); [ 96.420522][ T3702] [ 96.420522][ T3702] *** DEADLOCK *** [ 96.420522][ T3702] [ 96.426779][ T3702] 3 locks held by syz-executor.1/3702: [ 96.430583][ T3702] #0: ffffffff8d7af528 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e5/0xca0 [ 96.436945][ T3702] #1: ffffffff8ccb9628 (init_lock){+.+.}-{3:3}, at: wg_ratelimiter_init+0x17/0x2c0 [ 96.443828][ T3702] #2: ffff88802ca294d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x60c/0xe30 [ 96.450315][ T3702] [ 96.450315][ T3702] stack backtrace: [ 96.454991][ T3702] CPU: 2 PID: 3702 Comm: syz-executor.1 Not tainted 6.1.0-rc4-syzkaller-00372-gaf7a05689189 #0 [ 96.463308][ T3702] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 96.469834][ T3702] Call Trace: [ 96.473098][ T3702] [ 96.476018][ T3702] dump_stack_lvl+0xcd/0x134 [ 96.479660][ T3702] check_noncircular+0x25f/0x2e0 [ 96.483572][ T3702] ? print_circular_bug+0x1e0/0x1e0 [ 96.487777][ T3702] ? stack_trace_save+0x8c/0xc0 [ 96.491798][ T3702] ? filter_irq_stacks+0x90/0x90 [ 96.495646][ T3702] __lock_acquire+0x2a43/0x56d0 [ 96.499789][ T3702] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 96.504987][ T3702] lock_acquire+0x1df/0x630 [ 96.508107][ T3702] ? __alloc_pages+0x4a6/0x5a0 [ 96.511746][ T3702] ? lock_release+0x810/0x810 [ 96.515777][ T3702] ? unwind_next_frame+0xfa9/0x1cc0 [ 96.520060][ T3702] ? arch_stack_walk+0x5c/0xe0 [ 96.523597][ T3702] ? __module_text_address+0xc7/0x1a0 [ 96.527010][ T3702] ? __zone_watermark_ok+0x271/0x450 [ 96.530242][ T3702] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 96.534585][ T3702] ? __alloc_pages+0x4a6/0x5a0 [ 96.537982][ T3702] ? warn_alloc+0x180/0x180 [ 96.542201][ T3702] ? kasan_save_stack+0x31/0x40 [ 96.546112][ T3702] ? __zone_watermark_ok+0x450/0x450 [ 96.549851][ T3702] ? prepare_alloc_pages+0x178/0x570 [ 96.553181][ T3702] ? wg_newlink+0x46c/0x8f0 [ 96.556028][ T3702] ? __rtnl_newlink+0x1087/0x17e0 [ 96.559550][ T3702] ? rtnl_newlink+0x64/0xa0 [ 96.563244][ T3702] __alloc_pages+0x4a6/0x5a0 [ 96.566769][ T3702] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.570640][ T3702] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 96.575772][ T3702] ? print_shortest_lock_dependencies_backwards+0x80/0x80 [ 96.581825][ T3702] ? check_path.constprop.0+0x24/0x50 [ 96.586135][ T3702] cache_grow_begin+0x75/0x360 [ 96.589927][ T3702] cache_alloc_refill+0x27f/0x380 [ 96.593824][ T3702] kmem_cache_alloc+0x35c/0x450 [ 96.597353][ T3702] fill_pool+0x264/0x5c0 [ 96.600440][ T3702] ? __list_del_entry_valid+0x110/0x110 [ 96.604842][ T3702] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 96.609323][ T3702] __debug_object_init+0x7a/0xd10 [ 96.613162][ T3702] ? debug_object_activate+0x1b3/0x3e0 [ 96.617276][ T3702] ? lock_downgrade+0x6e0/0x6e0 [ 96.621097][ T3702] ? debug_object_free+0x350/0x350 [ 96.625165][ T3702] debug_object_activate+0x32c/0x3e0 [ 96.628879][ T3702] ? lock_release+0x810/0x810 [ 96.631983][ T3702] ? debug_object_assert_init+0x2e0/0x2e0 [ 96.636108][ T3702] ? rwlock_bug.part.0+0x90/0x90 [ 96.639871][ T3702] ? lock_timer_base+0x174/0x1f0 [ 96.643285][ T3702] __mod_timer+0x77d/0xe30 [ 96.646354][ T3702] ? enqueue_timer+0x660/0x660 [ 96.649903][ T3702] ? mark_held_locks+0x9f/0xe0 [ 96.653514][ T3702] __queue_delayed_work+0x1a7/0x270 [ 96.657635][ T3702] queue_delayed_work_on+0x105/0x120 [ 96.661617][ T3702] wg_ratelimiter_init+0x198/0x2c0 [ 96.665557][ T3702] wg_newlink+0x46c/0x8f0 [ 96.668597][ T3702] ? wg_pm_notification+0x170/0x170 [ 96.672598][ T3702] __rtnl_newlink+0x1087/0x17e0 [ 96.676039][ T3702] ? lock_downgrade+0x6e0/0x6e0 [ 96.679727][ T3702] ? rtnl_link_unregister+0x250/0x250 [ 96.683712][ T3702] ? do_raw_spin_unlock+0x171/0x230 [ 96.688094][ T3702] ? mark_held_locks+0x9f/0xe0 [ 96.692474][ T3702] rtnl_newlink+0x64/0xa0 [ 96.695947][ T3702] ? __rtnl_newlink+0x17e0/0x17e0 [ 96.700007][ T3702] rtnetlink_rcv_msg+0x43a/0xca0 [ 96.703743][ T3702] ? rtnl_getlink+0xae0/0xae0 [ 96.707964][ T3702] netlink_rcv_skb+0x153/0x420 [ 96.711713][ T3702] ? rtnl_getlink+0xae0/0xae0 [ 96.714756][ T3702] ? netlink_ack+0xd50/0xd50 [ 96.717954][ T3702] ? netlink_deliver_tap+0x1a2/0xc40 [ 96.721725][ T3702] ? netlink_deliver_tap+0x1b1/0xc40 [ 96.725399][ T3702] netlink_unicast+0x543/0x7f0 [ 96.729530][ T3702] ? netlink_attachskb+0x880/0x880 [ 96.733882][ T3702] netlink_sendmsg+0x917/0xe10 [ 96.738034][ T3702] ? netlink_unicast+0x7f0/0x7f0 [ 96.742181][ T3702] ? netlink_unicast+0x7f0/0x7f0 [ 96.746057][ T3702] sock_sendmsg+0xcf/0x120 [ 96.749021][ T3702] __sys_sendto+0x236/0x340 [ 96.751815][ T3702] ? __ia32_sys_getpeername+0xb0/0xb0 [ 96.755853][ T3702] ? __ct_user_exit+0xff/0x150 [ 96.758589][ T3702] ? lock_downgrade+0x6e0/0x6e0 [ 96.761749][ T3702] ? lock_downgrade+0x6e0/0x6e0 [ 96.765232][ T3702] ? restore_fpregs_from_fpstate+0xbd/0x1c0 [ 96.769342][ T3702] __x64_sys_sendto+0xdd/0x1b0 [ 96.772920][ T3702] ? syscall_enter_from_user_mode+0x22/0xb0 [ 96.776999][ T3702] do_syscall_64+0x35/0xb0 [ 96.781165][ T3702] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 96.785461][ T3702] RIP: 0033:0x7f1aa183d58c [ 96.788781][ T3702] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 96.805038][ T3702] RSP: 002b:00007ffef9b60ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 96.811023][ T3702] RAX: ffffffffffffffda RBX: 00007f1aa24d4320 RCX: 00007f1aa183d58c [ 96.816887][ T3702] RDX: 000000000000003c RSI: 00007f1aa24d4370 RDI: 0000000000000003 [ 96.823287][ T3702] RBP: 0000000000000000 R08: 00007ffef9b60f14 R09: 000000000000000c [ 96.829861][ T3702] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 96.836420][ T3702] R13: 00007f1aa24d4370 R14: 0000000000000003 R15: 0000000000000000 [ 96.842322][ T3702] [ 96.946225][ T3701] chnl_net:caif_netlink_parms(): no params data found [ 97.006196][ T3702] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.012722][ T3702] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.021783][ T3702] device bridge_slave_0 entered promiscuous mode [ 97.083226][ T3702] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.090264][ T3702] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.100334][ T3702] device bridge_slave_1 entered promiscuous mode [ 97.250646][ T3693] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.255775][ T3693] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.267869][ T3693] device bridge_slave_0 entered promiscuous mode [ 97.278700][ T3702] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.297281][ T3693] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.313166][ T3693] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.324608][ T3693] device bridge_slave_1 entered promiscuous mode [ 97.334889][ T3702] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.441828][ T3707] Bluetooth: hci2: command 0x0409 tx timeout [ 97.446846][ T3707] Bluetooth: hci0: command 0x0409 tx timeout [ 97.451030][ T3707] Bluetooth: hci3: command 0x0409 tx timeout [ 97.520954][ T3701] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.529188][ T3701] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.537696][ T3701] device bridge_slave_0 entered promiscuous mode [ 97.545339][ T3693] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.553497][ T3693] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.565948][ T3702] team0: Port device team_slave_0 added [ 97.577129][ T3701] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.583990][ T3701] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.591869][ T3701] device bridge_slave_1 entered promiscuous mode [ 97.594674][ T3707] Bluetooth: hci1: command 0x0409 tx timeout [ 97.616097][ T3702] team0: Port device team_slave_1 added [ 97.619802][ T3695] chnl_net:caif_netlink_parms(): no params data found [ 97.870628][ T3693] team0: Port device team_slave_0 added [ 97.878628][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.889614][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.919978][ T3702] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.942908][ T3702] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.952765][ T3702] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.983807][ T3702] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.000991][ T3701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.027410][ T3693] team0: Port device team_slave_1 added [ 98.105141][ T3701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.160180][ T825] cfg80211: failed to load regulatory.db [ 98.290255][ T3695] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.300440][ T3695] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.315333][ T3695] device bridge_slave_0 entered promiscuous mode [ 98.433730][ T3695] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.454204][ T3695] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.463742][ T3695] device bridge_slave_1 entered promiscuous mode [ 98.542657][ T3701] team0: Port device team_slave_0 added [ 98.553107][ T3693] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.562323][ T3693] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.591241][ T3693] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.694560][ T3701] team0: Port device team_slave_1 added [ 98.703375][ T3693] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.711411][ T3693] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.749822][ T3693] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.770947][ T3695] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.825381][ T3702] device hsr_slave_0 entered promiscuous mode [ 98.839230][ T3702] device hsr_slave_1 entered promiscuous mode [ 98.864842][ T3695] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.986418][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.993987][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.024750][ T3701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.141584][ T3695] team0: Port device team_slave_0 added [ 99.149848][ T3701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.156233][ T3701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.178862][ T3701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.195230][ T3693] device hsr_slave_0 entered promiscuous mode [ 99.203574][ T3693] device hsr_slave_1 entered promiscuous mode [ 99.212487][ T3693] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.223962][ T3693] Cannot create hsr debugfs directory [ 99.264751][ T3695] team0: Port device team_slave_1 added [ 99.446841][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.455338][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.485259][ T3695] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.497957][ T3701] device hsr_slave_0 entered promiscuous mode [ 99.503593][ T3701] device hsr_slave_1 entered promiscuous mode [ 99.508145][ T3701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.518369][ T3701] Cannot create hsr debugfs directory [ 99.524916][ T3707] Bluetooth: hci0: command 0x041b tx timeout [ 99.525960][ T3700] Bluetooth: hci3: command 0x041b tx timeout [ 99.526027][ T3700] Bluetooth: hci2: command 0x041b tx timeout [ 99.555528][ T3695] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.567221][ T3695] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.596867][ T3695] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.674708][ T3696] Bluetooth: hci1: command 0x041b tx timeout [ 99.836424][ T3695] device hsr_slave_0 entered promiscuous mode [ 99.845577][ T3695] device hsr_slave_1 entered promiscuous mode [ 99.855863][ T3695] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.863733][ T3695] Cannot create hsr debugfs directory [ 100.136480][ T3702] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.155072][ T3702] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.185416][ T3702] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.201719][ T3702] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.278417][ T3701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.307289][ T3701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.319820][ T3701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.337987][ T3701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 100.382228][ T3693] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.392561][ T3693] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.405307][ T3693] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.426966][ T3693] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.467612][ T3702] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.531911][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 100.541329][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 100.558205][ T3702] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.568038][ T3695] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.587635][ T3695] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.603376][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 100.612152][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 100.619747][ T824] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.627315][ T824] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.639586][ T3695] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.653003][ T3695] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.680769][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 100.689090][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 100.697970][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 100.704508][ T3735] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.709963][ T3735] bridge0: port 2(bridge_slave_1) entered forwarding state [ 100.717526][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 100.747224][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 100.784295][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 100.792659][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 100.805828][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 100.837091][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 100.850689][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 100.877542][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 100.888064][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 100.915140][ T3701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.937767][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 100.947540][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 100.964761][ T3693] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.974770][ T3702] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 100.998983][ T3701] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.037897][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.045336][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.073564][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.082583][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.084824][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 101.084840][ T38] audit: type=1400 audit(1668359532.849:97): avc: denied { sys_module } for pid=3702 comm="syz-executor.1" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 101.092486][ T3734] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.129020][ T3734] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.136894][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.143553][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.151472][ T3734] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.158120][ T3734] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.165950][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.183084][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.203345][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.235413][ T3693] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.243299][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.270096][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.307607][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.317988][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.329074][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.340473][ T3732] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.347722][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.378580][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.388757][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.398365][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.409750][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.416704][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.431514][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.438676][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.445589][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.452851][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.460138][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.487360][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.495670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.515472][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.525510][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.547310][ T3702] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.559352][ T3701] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.570398][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.580002][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.588163][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.596162][ T3707] Bluetooth: hci0: command 0x040f tx timeout [ 101.608122][ T3707] Bluetooth: hci2: command 0x040f tx timeout [ 101.619643][ T3696] Bluetooth: hci3: command 0x040f tx timeout [ 101.638388][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.657464][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.668145][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.680004][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.690512][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.701174][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.729775][ T3693] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.749483][ T3693] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.754873][ T3700] Bluetooth: hci1: command 0x040f tx timeout [ 101.769148][ T3695] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.804785][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.813415][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.822947][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.862655][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.872952][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.907958][ T3695] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.923062][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.931483][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.940930][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.948816][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.961583][ T3702] device veth0_vlan entered promiscuous mode [ 101.973258][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.983363][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.006123][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.016590][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.026359][ T3733] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.033161][ T3733] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.042393][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.060948][ T3702] device veth1_vlan entered promiscuous mode [ 102.095315][ T3701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.104657][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.115318][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.123362][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.136384][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.146287][ T3742] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.153493][ T3742] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.161590][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.168031][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.184928][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 102.200449][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 102.252202][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.267580][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.278177][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.293074][ T3693] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.323055][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.332909][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.363522][ T3702] device veth0_macvtap entered promiscuous mode [ 102.383428][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.391593][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.402923][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.416499][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.426725][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.435631][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.446120][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.455466][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.466608][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.487321][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.494238][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.504138][ T3702] device veth1_macvtap entered promiscuous mode [ 102.518127][ T3701] device veth0_vlan entered promiscuous mode [ 102.546462][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 102.553863][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.562587][ T6] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 102.585401][ T3701] device veth1_vlan entered promiscuous mode [ 102.616774][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 102.629272][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 102.640073][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 102.649737][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 102.659300][ T3734] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 102.673865][ T3695] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 102.693188][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.716452][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 102.734287][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 102.748209][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 102.757678][ T3702] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.772795][ T3693] device veth0_vlan entered promiscuous mode [ 102.791986][ T3702] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.800041][ T3702] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.808462][ T3702] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.816321][ T3702] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.829265][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 102.839798][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 102.852692][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 102.867942][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 102.884801][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 102.900575][ T3730] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 102.925228][ T3701] device veth0_macvtap entered promiscuous mode [ 102.934013][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 102.943300][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 102.953207][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 102.981829][ T3701] device veth1_macvtap entered promiscuous mode [ 102.994646][ T3693] device veth1_vlan entered promiscuous mode [ 103.042891][ T3702] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 103.068392][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.076029][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.083225][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.092510][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.101777][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.118237][ T3695] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.160171][ T3701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.173152][ T3701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.187099][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.201569][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.203750][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.216272][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.220735][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.242243][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.262953][ T3702] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 103.288115][ T3701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.299860][ T3701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.314053][ T3701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.326597][ T3701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.336435][ T3701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.345542][ T3701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.353298][ T3701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.375486][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.385333][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.394082][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.406329][ T3448] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.442712][ T3693] device veth0_macvtap entered promiscuous mode [ 103.464219][ T3693] device veth1_macvtap entered promiscuous mode [ 103.485629][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.492431][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.517792][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.532202][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.544756][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 103.572341][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.592523][ T3740] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.625199][ T38] audit: type=1400 audit(1668359535.379:98): avc: denied { mounton } for pid=3702 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2385 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 103.659028][ T38] audit: type=1400 audit(1668359535.399:99): avc: denied { mount } for pid=3702 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 103.688696][ T3707] Bluetooth: hci2: command 0x0419 tx timeout [ 103.688764][ T3700] Bluetooth: hci3: command 0x0419 tx timeout [ 103.688864][ T3696] Bluetooth: hci0: command 0x0419 tx timeout [ 103.693240][ T3695] device veth0_vlan entered promiscuous mode [ 103.712325][ T3695] device veth1_vlan entered promiscuous mode [ 103.743763][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.755997][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.767190][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.794668][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.802395][ T3733] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.812755][ T3701] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 103.825826][ T3693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.835035][ T3708] Bluetooth: hci1: command 0x0419 tx timeout [ 103.838638][ T3693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.855180][ T3693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.868792][ T3693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.884799][ T3693] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.903346][ T3693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.917869][ T3693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.937158][ T3693] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.952623][ T3693] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.968312][ T3693] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.009058][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.021303][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.023398][ T38] audit: type=1400 audit(1668359535.779:100): avc: denied { read write } for pid=3702 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.083873][ T38] audit: type=1400 audit(1668359535.779:101): avc: denied { open } for pid=3702 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=658 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.084077][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.117497][ T38] audit: type=1400 audit(1668359535.779:102): avc: denied { ioctl } for pid=3702 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=658 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 104.119193][ T38] audit: type=1400 audit(1668359535.879:103): avc: denied { ioctl } for pid=3757 comm="syz-executor.1" path="socket:[28550]" dev="sockfs" ino=28550 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 104.130318][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.201383][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.243857][ T3693] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.253445][ T3693] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 17:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 104.265714][ T3693] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.273844][ T38] audit: type=1400 audit(1668359536.029:104): avc: denied { read } for pid=3115 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 104.288362][ T3693] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 17:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 104.365850][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.380239][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.400177][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.402290][ T3701] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 104.410919][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.432662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 104.443880][ T3695] device veth0_macvtap entered promiscuous mode [ 104.456329][ T3695] device veth1_macvtap entered promiscuous mode [ 104.539248][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 17:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 104.555219][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.572880][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.589494][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.604627][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.619805][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.636969][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.672801][ T3693] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' 17:12:16 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 104.689282][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.723596][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.736939][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.749332][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.765542][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.779850][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.794627][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.807255][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.820092][ T3695] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.832393][ T3695] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.848058][ T3695] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.872592][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.885885][ T3751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.901384][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.918369][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.924752][ T3695] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.934739][ T3695] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.946631][ T3695] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.960659][ T3695] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.011738][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.038353][ T3693] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' [ 105.042024][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.081483][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.140284][ T3742] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.172589][ T3695] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 105.195540][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.211155][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.221699][ T824] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.225038][ T38] audit: type=1400 audit(1668359536.979:105): avc: denied { create } for pid=3772 comm="syz-executor.3" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.256442][ T38] audit: type=1400 audit(1668359536.979:106): avc: denied { map } for pid=3772 comm="syz-executor.3" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=31320 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 105.301051][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.303230][ T3695] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 105.313639][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.335526][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready 17:12:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x6, 0xa, 0x0, 0x0) 17:12:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) [ 105.393380][ T3726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.404165][ T3726] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.414128][ T3735] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 17:12:17 executing program 2: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x6, 0xa, 0x0, 0x0) 17:12:17 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}}, 0x0) 17:12:17 executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x6, 0xa, 0x0, 0x0) 17:12:17 executing program 1: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 0: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 2: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 1: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 2: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 1: r0 = syz_io_uring_setup(0x15b6, &(0x7f0000000340), &(0x7f0000eea000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x10061}, 0x0) io_uring_enter(r0, 0x90e, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 0: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 0: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 2: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) 17:12:17 executing program 3: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) 17:12:17 executing program 0: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001340), 0x0, 0x0) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000001380)=0x3) 17:12:17 executing program 1: openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x4000, 0x0) 17:12:17 executing program 2: r0 = syz_io_uring_setup(0x1999, &(0x7f00000002c0), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000380)=0x0, &(0x7f0000000100)=0x0) r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000008540)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x0, 0x0, {0x0, r3}}, 0x10001) mmap$IORING_OFF_SQES(&(0x7f0000ee7000/0x3000)=nil, 0x3000, 0x6, 0x11, r0, 0x10000000) syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x2d5b, 0x0, 0x0, 0x0, 0x0) VM DIAGNOSIS: 17:12:08 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff8bcbc9c0 RCX=ffffffff898eb1e5 RDX=ffffed1005906992 RSI=0000000000000000 RDI=ffffffff8991d12f RBP=dffffc0000000000 RSP=ffffffff8bc07e10 R8 =0000000000000000 R9 =ffff88802c834c8b R10=ffffed1005906991 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8de18250 R15=0000000000000000 RIP=ffffffff8991c81b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff0ecc42300 CR3=000000005e6a5000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=00000000ff0000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000001 RBX=ffff8880125021c0 RCX=ffffffff898eb1e5 RDX=ffffed1005926992 RSI=0000000000000000 RDI=ffffffff8991d12f RBP=dffffc0000000000 RSP=ffffc9000066fdf8 R8 =0000000000000000 R9 =ffff88802c934c8b R10=ffffed1005926991 R11=0000000000000001 R12=0000000000000001 R13=0000000000000001 R14=ffffffff8de18250 R15=0000000000000000 RIP=ffffffff8991c81b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c900000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3f044a7300 CR3=000000000bc8e000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f3f0474450000007f3f04423000 XMM02=00007f3f0442300000007f3f047459b0 XMM03=00007f3f047454b000007f3f04777a08 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000064010100000000000000000002 XMM06=0101037f0001000000007ffd3cdeb000 XMM07=000000000000000000007ffd3cd98b49 XMM08=646863660027732527206f742079726f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 2 RAX=0000000000000037 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff846304b1 RDI=ffffffff914d1720 RBP=ffffffff914d16e0 RSP=ffffc900031ee550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=63722d302e312e36 R12=0000000000000000 R13=0000000000000037 R14=ffffffff84630450 R15=0000000000000000 RIP=ffffffff846304db RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555557485400 ffffffff 00c00000 GS =0000 ffff88802ca00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fa6c02b5300 CR3=000000005e911000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000032939 RBX=ffff888012506240 RCX=ffffffff898eb1e5 RDX=0000000000000000 RSI=0000000000000001 RDI=0000000000000000 RBP=dffffc0000000000 RSP=ffffc9000068fdf8 R8 =0000000000000001 R9 =ffff88802cb34c8b R10=ffffed1005966991 R11=0000000000000000 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8de18250 R15=0000000000000000 RIP=ffffffff8991c81b RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802cb00000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fd49bad4320 CR3=000000005e911000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=ff00000000000000000000ff00000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000