Warning: Permanently added '[localhost]:38010' (ECDSA) to the list of known hosts. [ 72.411581][ T38] audit: type=1400 audit(1668708376.645:75): avc: denied { execute } for pid=3704 comm="sh" name="syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 [ 72.427494][ T38] audit: type=1400 audit(1668708376.645:76): avc: denied { execute_no_trans } for pid=3704 comm="sh" path="/syz-fuzzer" dev="sda1" ino=1134 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:etc_runtime_t tclass=file permissive=1 2022/11/17 18:06:17 fuzzer started 2022/11/17 18:06:17 dialing manager at localhost:36695 [ 74.488028][ T38] audit: type=1400 audit(1668708378.715:77): avc: denied { mounton } for pid=3715 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1136 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 74.501406][ T3715] cgroup: Unknown subsys name 'net' [ 74.509312][ T38] audit: type=1400 audit(1668708378.725:78): avc: denied { mount } for pid=3715 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.529982][ T38] audit: type=1400 audit(1668708378.765:79): avc: denied { unmount } for pid=3715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 74.789569][ T3715] cgroup: Unknown subsys name 'rlimit' [ 74.904763][ T38] audit: type=1400 audit(1668708379.135:80): avc: denied { mounton } for pid=3715 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2022/11/17 18:06:19 syscalls: 3833 2022/11/17 18:06:19 code coverage: enabled 2022/11/17 18:06:19 comparison tracing: enabled 2022/11/17 18:06:19 extra coverage: enabled 2022/11/17 18:06:19 delay kcov mmap: enabled 2022/11/17 18:06:19 setuid sandbox: enabled 2022/11/17 18:06:19 namespace sandbox: enabled 2022/11/17 18:06:19 Android sandbox: enabled 2022/11/17 18:06:19 fault injection: enabled 2022/11/17 18:06:19 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2022/11/17 18:06:19 net packet injection: enabled 2022/11/17 18:06:19 net device setup: enabled 2022/11/17 18:06:19 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2022/11/17 18:06:19 devlink PCI setup: PCI device 0000:00:10.0 is not available 2022/11/17 18:06:19 NIC VF setup: PCI device 0000:00:11.0 is not available 2022/11/17 18:06:19 USB emulation: enabled 2022/11/17 18:06:19 hci packet injection: enabled 2022/11/17 18:06:19 wifi device emulation: enabled 2022/11/17 18:06:19 802.15.4 emulation: enabled [ 74.924525][ T38] audit: type=1400 audit(1668708379.155:81): avc: denied { mount } for pid=3715 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2022/11/17 18:06:19 fetching corpus: 0, signal 0/2000 (executing program) [ 74.950380][ T38] audit: type=1400 audit(1668708379.155:82): avc: denied { setattr } for pid=3715 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=763 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 74.974802][ T38] audit: type=1400 audit(1668708379.155:83): avc: denied { create } for pid=3715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 75.001356][ T38] audit: type=1400 audit(1668708379.155:84): avc: denied { write } for pid=3715 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 2022/11/17 18:06:19 fetching corpus: 48, signal 42112/45339 (executing program) 2022/11/17 18:06:19 fetching corpus: 96, signal 61988/66290 (executing program) 2022/11/17 18:06:20 fetching corpus: 146, signal 73569/78870 (executing program) 2022/11/17 18:06:20 fetching corpus: 195, signal 87707/93658 (executing program) 2022/11/17 18:06:20 fetching corpus: 244, signal 97873/104484 (executing program) 2022/11/17 18:06:21 fetching corpus: 294, signal 103705/111104 (executing program) 2022/11/17 18:06:21 fetching corpus: 344, signal 109880/117885 (executing program) 2022/11/17 18:06:21 fetching corpus: 394, signal 118253/126586 (executing program) 2022/11/17 18:06:22 fetching corpus: 444, signal 126130/134615 (executing program) 2022/11/17 18:06:22 fetching corpus: 494, signal 131960/140707 (executing program) 2022/11/17 18:06:23 fetching corpus: 544, signal 138179/147031 (executing program) 2022/11/17 18:06:23 fetching corpus: 592, signal 143801/152790 (executing program) 2022/11/17 18:06:24 fetching corpus: 642, signal 146885/156136 (executing program) 2022/11/17 18:06:24 fetching corpus: 692, signal 150844/160164 (executing program) 2022/11/17 18:06:24 fetching corpus: 739, signal 153734/163233 (executing program) 2022/11/17 18:06:25 fetching corpus: 789, signal 158068/167501 (executing program) 2022/11/17 18:06:25 fetching corpus: 837, signal 160400/169988 (executing program) 2022/11/17 18:06:25 fetching corpus: 886, signal 163220/172854 (executing program) 2022/11/17 18:06:26 fetching corpus: 936, signal 166872/176393 (executing program) 2022/11/17 18:06:26 fetching corpus: 986, signal 171333/180559 (executing program) 2022/11/17 18:06:26 fetching corpus: 1035, signal 174211/183305 (executing program) [ 82.484149][ T1369] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.489959][ T1369] ieee802154 phy1 wpan1: encryption failed: -22 2022/11/17 18:06:26 fetching corpus: 1083, signal 178526/187115 (executing program) 2022/11/17 18:06:27 fetching corpus: 1133, signal 181120/189513 (executing program) 2022/11/17 18:06:27 fetching corpus: 1180, signal 183512/191777 (executing program) 2022/11/17 18:06:27 fetching corpus: 1227, signal 185707/193827 (executing program) 2022/11/17 18:06:28 fetching corpus: 1277, signal 188252/196053 (executing program) 2022/11/17 18:06:28 fetching corpus: 1327, signal 190267/197903 (executing program) 2022/11/17 18:06:29 fetching corpus: 1374, signal 192287/199732 (executing program) 2022/11/17 18:06:29 fetching corpus: 1424, signal 194319/201453 (executing program) 2022/11/17 18:06:29 fetching corpus: 1474, signal 199000/205051 (executing program) 2022/11/17 18:06:30 fetching corpus: 1521, signal 200944/206637 (executing program) 2022/11/17 18:06:30 fetching corpus: 1571, signal 204368/209257 (executing program) 2022/11/17 18:06:31 fetching corpus: 1621, signal 206274/210755 (executing program) 2022/11/17 18:06:31 fetching corpus: 1671, signal 208683/212583 (executing program) 2022/11/17 18:06:31 fetching corpus: 1721, signal 210254/213694 (executing program) 2022/11/17 18:06:31 fetching corpus: 1770, signal 212536/215278 (executing program) 2022/11/17 18:06:32 fetching corpus: 1820, signal 214064/216356 (executing program) 2022/11/17 18:06:32 fetching corpus: 1869, signal 216004/217689 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218200 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218238 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218277 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218322 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218372 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218412 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218451 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218483 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218512 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218546 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218591 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216724/218617 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218664 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218706 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218755 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218790 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218825 (executing program) 2022/11/17 18:06:32 fetching corpus: 1881, signal 216727/218863 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/218901 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/218943 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/218984 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219019 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219059 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219107 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219150 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219194 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219237 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219274 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219314 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219345 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219380 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219419 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219468 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219511 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219553 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219588 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219637 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219674 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219721 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219761 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219797 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219841 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219893 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219931 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/219976 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220009 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220039 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220075 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220105 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220153 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220194 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220232 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220265 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220299 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220333 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220371 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220414 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220458 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220499 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220531 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216727/220569 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220611 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220645 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220686 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220729 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220767 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220812 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220842 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220884 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220923 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220965 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220992 (executing program) 2022/11/17 18:06:33 fetching corpus: 1881, signal 216749/220992 (executing program) 2022/11/17 18:06:37 starting 4 fuzzer processes 18:06:37 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:37 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:37 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 18:06:37 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5ac9d8", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}}}, 0x0) [ 93.560931][ T38] kauditd_printk_skb: 1 callbacks suppressed [ 93.560943][ T38] audit: type=1400 audit(1668708397.795:86): avc: denied { execmem } for pid=3719 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 93.815005][ T38] audit: type=1400 audit(1668708398.045:87): avc: denied { mounton } for pid=3724 comm="syz-executor.0" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.838888][ T38] audit: type=1400 audit(1668708398.045:88): avc: denied { mounton } for pid=3725 comm="syz-executor.1" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 93.861372][ T38] audit: type=1400 audit(1668708398.045:89): avc: denied { mount } for pid=3725 comm="syz-executor.1" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 93.869506][ T3738] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 93.871078][ T3737] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 93.872507][ T3737] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 93.874364][ T3737] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 93.874827][ T3737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 93.875816][ T3737] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 93.876014][ T3737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 93.877661][ T3737] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 93.878080][ T3737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 93.878976][ T3737] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 93.879433][ T3737] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 93.879597][ T3737] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 93.880021][ T3737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 93.881055][ T3739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 93.882824][ T38] audit: type=1400 audit(1668708398.045:90): avc: denied { create } for pid=3725 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.882889][ T38] audit: type=1400 audit(1668708398.045:91): avc: denied { read write } for pid=3725 comm="syz-executor.1" name="vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 93.882927][ T38] audit: type=1400 audit(1668708398.045:92): avc: denied { open } for pid=3725 comm="syz-executor.1" path="/dev/vhci" dev="devtmpfs" ino=1107 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 93.882966][ T38] audit: type=1400 audit(1668708398.055:93): avc: denied { ioctl } for pid=3725 comm="syz-executor.1" path="socket:[30006]" dev="sockfs" ino=30006 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 93.886750][ T3725] Bluetooth: hci0: HCI_REQ-0x0c1a [ 93.889768][ T3731] Bluetooth: hci3: HCI_REQ-0x0c1a [ 93.908742][ T38] audit: type=1400 audit(1668708398.135:94): avc: denied { read } for pid=3731 comm="syz-executor.3" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.912127][ T3738] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 93.916410][ T38] audit: type=1400 audit(1668708398.135:95): avc: denied { open } for pid=3731 comm="syz-executor.3" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 93.920710][ T3738] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 93.925879][ T3739] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 93.931087][ T3738] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 93.937733][ T3739] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 93.941188][ T3738] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 93.955577][ T3741] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 93.962587][ T3738] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 93.980604][ T3739] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 93.996103][ T3724] Bluetooth: hci1: HCI_REQ-0x0c1a [ 94.013417][ T3739] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 94.108318][ T3728] Bluetooth: hci2: HCI_REQ-0x0c1a [ 94.325896][ T3731] chnl_net:caif_netlink_parms(): no params data found [ 94.375355][ T3725] chnl_net:caif_netlink_parms(): no params data found [ 94.444682][ T3731] [ 94.447181][ T3731] ====================================================== [ 94.453044][ T3731] WARNING: possible circular locking dependency detected [ 94.458813][ T3731] 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 Not tainted [ 94.470074][ T3731] ------------------------------------------------------ [ 94.477545][ T3731] syz-executor.3/3731 is trying to acquire lock: [ 94.484607][ T3731] ffffffff8c6c97e8 (zonelist_update_seq.seqcount){...-}-{0:0}, at: __alloc_pages+0x4aa/0x5b0 [ 94.494808][ T3731] [ 94.494808][ T3731] but task is already holding lock: [ 94.501779][ T3731] ffff88802c72a4d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x60c/0xe30 [ 94.510860][ T3731] [ 94.510860][ T3731] which lock already depends on the new lock. [ 94.510860][ T3731] [ 94.519573][ T3731] [ 94.519573][ T3731] the existing dependency chain (in reverse order) is: [ 94.526161][ T3731] [ 94.526161][ T3731] -> #4 (&base->lock){-.-.}-{2:2}: [ 94.532338][ T3731] _raw_spin_lock_irqsave+0x3d/0x60 [ 94.537207][ T3731] lock_timer_base+0x5a/0x1f0 [ 94.541167][ T3731] __mod_timer+0x398/0xe30 [ 94.544553][ T3731] __queue_delayed_work+0x1a7/0x270 [ 94.549193][ T3731] queue_delayed_work_on+0x109/0x120 [ 94.554064][ T3731] psi_task_change+0x1bf/0x2f0 [ 94.559267][ T3731] enqueue_task+0x1ec/0x3a0 [ 94.563391][ T3731] wake_up_new_task+0x632/0xdb0 [ 94.567316][ T3731] kernel_clone+0x229/0x980 [ 94.570772][ T3731] user_mode_thread+0xb1/0xf0 [ 94.574756][ T3731] rest_init+0x27/0x270 [ 94.579614][ T3731] arch_call_rest_init+0x13/0x1c [ 94.584200][ T3731] start_kernel+0x477/0x498 [ 94.588652][ T3731] secondary_startup_64_no_verify+0xce/0xdb [ 94.592753][ T3731] [ 94.592753][ T3731] -> #3 (&rq->__lock){-.-.}-{2:2}: [ 94.598366][ T3731] _raw_spin_lock_nested+0x34/0x40 [ 94.602470][ T3731] raw_spin_rq_lock_nested+0x2f/0x120 [ 94.606891][ T3731] task_fork_fair+0x6c/0x520 [ 94.609993][ T3731] sched_cgroup_fork+0x3d1/0x540 [ 94.613743][ T3731] copy_process+0x4351/0x7190 [ 94.620650][ T3731] kernel_clone+0xeb/0x980 [ 94.624601][ T3731] user_mode_thread+0xb1/0xf0 [ 94.628763][ T3731] rest_init+0x27/0x270 [ 94.631791][ T3731] arch_call_rest_init+0x13/0x1c [ 94.635222][ T3731] start_kernel+0x477/0x498 [ 94.638310][ T3731] secondary_startup_64_no_verify+0xce/0xdb [ 94.642514][ T3731] [ 94.642514][ T3731] -> #2 (&p->pi_lock){-.-.}-{2:2}: [ 94.648490][ T3731] _raw_spin_lock_irqsave+0x3d/0x60 [ 94.653596][ T3731] try_to_wake_up+0xb2/0x20f0 [ 94.657610][ T3731] up+0x79/0xb0 [ 94.661245][ T3731] __up_console_sem+0xa4/0xc0 [ 94.665146][ T3731] console_unlock+0x4ce/0x600 [ 94.669482][ T3731] vga_remove_vgacon.cold+0x99/0x9e [ 94.675023][ T3731] virtio_gpu_probe.cold+0xe3/0x15d [ 94.679096][ T3731] virtio_dev_probe+0x57b/0x870 [ 94.683243][ T3731] really_probe+0x249/0xb90 [ 94.687633][ T3731] __driver_probe_device+0x1df/0x4d0 [ 94.692378][ T3731] driver_probe_device+0x4c/0x1a0 [ 94.695952][ T3731] __driver_attach+0x1d4/0x550 [ 94.699907][ T3731] bus_for_each_dev+0x14b/0x1d0 [ 94.703978][ T3731] bus_add_driver+0x4cd/0x640 [ 94.708432][ T3731] driver_register+0x224/0x3a0 [ 94.712658][ T3731] do_one_initcall+0x141/0x780 [ 94.717013][ T3731] kernel_init_freeable+0x6ff/0x788 [ 94.721597][ T3731] kernel_init+0x1e/0x1d0 [ 94.725072][ T3731] ret_from_fork+0x1f/0x30 [ 94.728255][ T3731] [ 94.728255][ T3731] -> #1 ((console_sem).lock){-...}-{2:2}: [ 94.734296][ T3731] _raw_spin_lock_irqsave+0x3d/0x60 [ 94.739359][ T3731] down_trylock+0x12/0x70 [ 94.743184][ T3731] __down_trylock_console_sem+0x40/0x120 [ 94.747765][ T3731] vprintk_emit+0x16b/0x600 [ 94.752226][ T3731] vprintk+0x84/0xa0 [ 94.755843][ T3731] _printk+0xbe/0xf1 [ 94.758984][ T3731] build_zonelists+0x2e7/0x400 [ 94.762959][ T3731] __build_all_zonelists+0x122/0x180 [ 94.767253][ T3731] build_all_zonelists_init+0x35/0x12f [ 94.771963][ T3731] build_all_zonelists+0x123/0x140 [ 94.776428][ T3731] start_kernel+0xbd/0x498 [ 94.780572][ T3731] secondary_startup_64_no_verify+0xce/0xdb [ 94.786144][ T3731] [ 94.786144][ T3731] -> #0 (zonelist_update_seq.seqcount){...-}-{0:0}: [ 94.793729][ T3731] __lock_acquire+0x2a43/0x56d0 [ 94.798887][ T3731] lock_acquire+0x1e3/0x630 [ 94.803241][ T3731] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 94.810158][ T3731] __alloc_pages+0x4aa/0x5b0 [ 94.814553][ T3731] cache_grow_begin+0x75/0x360 [ 94.817933][ T3731] cache_alloc_refill+0x27f/0x380 [ 94.821381][ T3731] kmem_cache_alloc+0x364/0x460 [ 94.824361][ T3731] fill_pool+0x264/0x5c0 [ 94.827143][ T3731] __debug_object_init+0x7a/0xd10 [ 94.830833][ T3731] debug_object_activate+0x330/0x3e0 [ 94.836048][ T3731] __mod_timer+0x77d/0xe30 [ 94.840910][ T3731] __queue_delayed_work+0x1a7/0x270 [ 94.845799][ T3731] queue_delayed_work_on+0x109/0x120 [ 94.849418][ T3731] wg_ratelimiter_init+0x19c/0x2c0 [ 94.854027][ T3731] wg_newlink+0x470/0x8f0 [ 94.858093][ T3731] __rtnl_newlink+0x1087/0x17e0 [ 94.863334][ T3731] rtnl_newlink+0x68/0xa0 [ 94.867907][ T3731] rtnetlink_rcv_msg+0x43e/0xca0 [ 94.872488][ T3731] netlink_rcv_skb+0x157/0x430 [ 94.879274][ T3731] netlink_unicast+0x547/0x7f0 [ 94.884800][ T3731] netlink_sendmsg+0x91b/0xe10 [ 94.889390][ T3731] sock_sendmsg+0xd3/0x120 [ 94.893303][ T3731] __sys_sendto+0x23a/0x340 [ 94.897370][ T3731] __x64_sys_sendto+0xe1/0x1b0 [ 94.901527][ T3731] do_syscall_64+0x39/0xb0 [ 94.904911][ T3731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 94.910140][ T3731] [ 94.910140][ T3731] other info that might help us debug this: [ 94.910140][ T3731] [ 94.918706][ T3731] Chain exists of: [ 94.918706][ T3731] zonelist_update_seq.seqcount --> &rq->__lock --> &base->lock [ 94.918706][ T3731] [ 94.929484][ T3731] Possible unsafe locking scenario: [ 94.929484][ T3731] [ 94.936034][ T3731] CPU0 CPU1 [ 94.940495][ T3731] ---- ---- [ 94.945268][ T3731] lock(&base->lock); [ 94.948755][ T3731] lock(&rq->__lock); [ 94.953971][ T3731] lock(&base->lock); [ 94.959589][ T3731] lock(zonelist_update_seq.seqcount); [ 94.964196][ T3731] [ 94.964196][ T3731] *** DEADLOCK *** [ 94.964196][ T3731] [ 94.971810][ T3731] 3 locks held by syz-executor.3/3731: [ 94.976537][ T3731] #0: ffffffff8dec6d68 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3e9/0xca0 [ 94.985483][ T3731] #1: ffffffff8d3d86a8 (init_lock){+.+.}-{3:3}, at: wg_ratelimiter_init+0x1b/0x2c0 [ 94.992225][ T3731] #2: ffff88802c72a4d8 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x60c/0xe30 [ 94.999940][ T3731] [ 94.999940][ T3731] stack backtrace: [ 95.004766][ T3731] CPU: 1 PID: 3731 Comm: syz-executor.3 Not tainted 6.1.0-rc5-syzkaller-00103-g81ac25651a62 #0 [ 95.013537][ T3731] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.14.0-2 04/01/2014 [ 95.021827][ T3731] Call Trace: [ 95.025406][ T3731] [ 95.028168][ T3731] dump_stack_lvl+0xd1/0x138 [ 95.031322][ T3731] check_noncircular+0x25f/0x2e0 [ 95.035819][ T3731] ? print_circular_bug+0x1e0/0x1e0 [ 95.039996][ T3731] ? stack_trace_save+0x90/0xc0 [ 95.043959][ T3731] ? filter_irq_stacks+0x90/0x90 [ 95.048984][ T3731] __lock_acquire+0x2a43/0x56d0 [ 95.053596][ T3731] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 95.059286][ T3731] lock_acquire+0x1e3/0x630 [ 95.063751][ T3731] ? __alloc_pages+0x4aa/0x5b0 [ 95.067416][ T3731] ? lock_release+0x810/0x810 [ 95.071443][ T3731] ? unwind_next_frame+0xd61/0x1d00 [ 95.075562][ T3731] ? arch_stack_walk+0x60/0xf0 [ 95.079319][ T3731] ? __module_text_address+0xcb/0x1a0 [ 95.083704][ T3731] ? __zone_watermark_ok+0x275/0x460 [ 95.087818][ T3731] __alloc_pages_slowpath.constprop.0+0x1ae/0x23d0 [ 95.093410][ T3731] ? __alloc_pages+0x4aa/0x5b0 [ 95.098282][ T3731] ? warn_alloc+0x190/0x190 [ 95.102890][ T3731] ? kasan_save_stack+0x35/0x40 [ 95.107173][ T3731] ? __zone_watermark_ok+0x460/0x460 [ 95.111468][ T3731] ? prepare_alloc_pages+0x178/0x570 [ 95.116698][ T3731] ? wg_newlink+0x470/0x8f0 [ 95.121014][ T3731] ? __rtnl_newlink+0x1087/0x17e0 [ 95.124912][ T3731] ? rtnl_newlink+0x68/0xa0 [ 95.128734][ T3731] __alloc_pages+0x4aa/0x5b0 [ 95.132143][ T3731] ? entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.137024][ T3731] ? __alloc_pages_slowpath.constprop.0+0x23d0/0x23d0 [ 95.142620][ T3731] ? find_held_lock+0x2d/0x110 [ 95.147946][ T3731] ? lock_downgrade+0x6e0/0x6e0 [ 95.151854][ T3731] ? do_raw_spin_lock+0x124/0x2b0 [ 95.155217][ T3731] cache_grow_begin+0x75/0x360 [ 95.158575][ T3731] cache_alloc_refill+0x27f/0x380 [ 95.162082][ T3731] kmem_cache_alloc+0x364/0x460 [ 95.165188][ T3731] fill_pool+0x264/0x5c0 [ 95.167803][ T3731] ? __list_del_entry_valid+0x110/0x110 [ 95.171416][ T3731] __debug_object_init+0x7a/0xd10 [ 95.174778][ T3731] ? debug_object_activate+0x1b7/0x3e0 [ 95.178031][ T3731] ? lock_downgrade+0x6e0/0x6e0 [ 95.181217][ T3731] ? debug_object_free+0x360/0x360 [ 95.184641][ T3731] debug_object_activate+0x330/0x3e0 [ 95.188158][ T3731] ? lock_release+0x810/0x810 [ 95.191411][ T3731] ? debug_object_assert_init+0x2e0/0x2e0 [ 95.195325][ T3731] ? rwlock_bug.part.0+0x90/0x90 [ 95.198468][ T3731] ? lock_timer_base+0x174/0x1f0 [ 95.201837][ T3731] __mod_timer+0x77d/0xe30 [ 95.204488][ T3731] ? enqueue_timer+0x660/0x660 [ 95.207117][ T3731] ? mark_held_locks+0x9f/0xe0 [ 95.210092][ T3731] __queue_delayed_work+0x1a7/0x270 [ 95.213013][ T3731] queue_delayed_work_on+0x109/0x120 [ 95.216417][ T3731] wg_ratelimiter_init+0x19c/0x2c0 [ 95.219622][ T3731] wg_newlink+0x470/0x8f0 [ 95.222345][ T3731] ? wg_pm_notification+0x180/0x180 [ 95.225775][ T3731] __rtnl_newlink+0x1087/0x17e0 [ 95.228458][ T3731] ? lock_downgrade+0x6e0/0x6e0 [ 95.231740][ T3731] ? rtnl_link_unregister+0x250/0x250 [ 95.236154][ T3731] ? do_raw_spin_unlock+0x175/0x230 [ 95.239980][ T3731] ? mark_held_locks+0x9f/0xe0 [ 95.243222][ T3731] rtnl_newlink+0x68/0xa0 [ 95.246314][ T3731] ? __rtnl_newlink+0x17e0/0x17e0 [ 95.249413][ T3731] rtnetlink_rcv_msg+0x43e/0xca0 [ 95.252838][ T3731] ? rtnl_getlink+0xae0/0xae0 [ 95.255718][ T3731] netlink_rcv_skb+0x157/0x430 [ 95.259561][ T3731] ? rtnl_getlink+0xae0/0xae0 [ 95.263765][ T3731] ? netlink_ack+0xd60/0xd60 [ 95.267607][ T3731] ? netlink_deliver_tap+0x1a2/0xc50 [ 95.272108][ T3731] ? netlink_deliver_tap+0x1b1/0xc50 [ 95.276997][ T3731] netlink_unicast+0x547/0x7f0 [ 95.281030][ T3731] ? netlink_attachskb+0x890/0x890 [ 95.285576][ T3731] netlink_sendmsg+0x91b/0xe10 [ 95.290167][ T3731] ? netlink_unicast+0x7f0/0x7f0 [ 95.294081][ T3731] ? netlink_unicast+0x7f0/0x7f0 [ 95.297487][ T3731] sock_sendmsg+0xd3/0x120 [ 95.300536][ T3731] __sys_sendto+0x23a/0x340 [ 95.303850][ T3731] ? __ia32_sys_getpeername+0xb0/0xb0 [ 95.307198][ T3731] ? restore_fpregs_from_fpstate+0xc1/0x1c0 [ 95.310661][ T3731] __x64_sys_sendto+0xe1/0x1b0 [ 95.314356][ T3731] ? syscall_enter_from_user_mode+0x26/0xb0 [ 95.318225][ T3731] do_syscall_64+0x39/0xb0 [ 95.321016][ T3731] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 95.325534][ T3731] RIP: 0033:0x7fb78ac3d58c [ 95.328948][ T3731] Code: fa fa ff ff 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 20 fb ff ff 48 8b [ 95.343060][ T3731] RSP: 002b:00007ffcef9c14c0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 95.349336][ T3731] RAX: ffffffffffffffda RBX: 00007fb78b8d4320 RCX: 00007fb78ac3d58c [ 95.354635][ T3731] RDX: 000000000000003c RSI: 00007fb78b8d4370 RDI: 0000000000000003 [ 95.360942][ T3731] RBP: 0000000000000000 R08: 00007ffcef9c1514 R09: 000000000000000c [ 95.368605][ T3731] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 95.375234][ T3731] R13: 00007fb78b8d4370 R14: 0000000000000003 R15: 0000000000000000 [ 95.381755][ T3731] [ 95.450277][ T3724] chnl_net:caif_netlink_parms(): no params data found [ 95.610280][ T3725] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.614831][ T3725] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.622259][ T3725] device bridge_slave_0 entered promiscuous mode [ 95.629083][ T3731] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.634157][ T3731] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.640143][ T3731] device bridge_slave_0 entered promiscuous mode [ 95.676563][ T3725] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.682812][ T3725] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.689821][ T3725] device bridge_slave_1 entered promiscuous mode [ 95.721667][ T3731] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.727693][ T3731] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.734871][ T3731] device bridge_slave_1 entered promiscuous mode [ 95.830248][ T3725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.841337][ T3725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.867786][ T3731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.874956][ T3724] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.881018][ T3724] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.887690][ T3724] device bridge_slave_0 entered promiscuous mode [ 95.894373][ T3728] chnl_net:caif_netlink_parms(): no params data found [ 95.901446][ T3724] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.907784][ T3724] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.914524][ T3724] device bridge_slave_1 entered promiscuous mode [ 95.928814][ T3739] Bluetooth: hci3: command 0x0409 tx timeout [ 95.938062][ T3731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.008860][ T3739] Bluetooth: hci0: command 0x0409 tx timeout [ 96.024628][ T3731] team0: Port device team_slave_0 added [ 96.048526][ T3725] team0: Port device team_slave_0 added [ 96.078877][ T3730] Bluetooth: hci1: command 0x0409 tx timeout [ 96.086909][ T3731] team0: Port device team_slave_1 added [ 96.112714][ T3724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.121895][ T3725] team0: Port device team_slave_1 added [ 96.158861][ T3730] Bluetooth: hci2: command 0x0409 tx timeout [ 96.176665][ T3724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.223719][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.230044][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.252492][ T3725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.267471][ T3731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.272829][ T3731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.294573][ T3731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.305397][ T3731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.310972][ T3731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.335047][ T3731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.355451][ T3724] team0: Port device team_slave_0 added [ 96.359346][ T3725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.364095][ T3725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.386987][ T3725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.437195][ T3724] team0: Port device team_slave_1 added [ 96.449796][ T3728] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.458807][ T3728] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.466370][ T3728] device bridge_slave_0 entered promiscuous mode [ 96.542615][ T3728] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.548413][ T3728] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.556508][ T3728] device bridge_slave_1 entered promiscuous mode [ 96.619744][ T3725] device hsr_slave_0 entered promiscuous mode [ 96.624038][ T3725] device hsr_slave_1 entered promiscuous mode [ 96.652105][ T3731] device hsr_slave_0 entered promiscuous mode [ 96.657590][ T3731] device hsr_slave_1 entered promiscuous mode [ 96.663884][ T3731] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.672982][ T3731] Cannot create hsr debugfs directory [ 96.677890][ T3724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.682883][ T3724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.700538][ T3724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.708843][ T3724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.713541][ T3724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.731672][ T3724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.769461][ T3728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.780746][ T3728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.900794][ T3728] team0: Port device team_slave_0 added [ 96.954446][ T3728] team0: Port device team_slave_1 added [ 96.989410][ T3724] device hsr_slave_0 entered promiscuous mode [ 96.995984][ T3724] device hsr_slave_1 entered promiscuous mode [ 97.004125][ T3724] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.011818][ T3724] Cannot create hsr debugfs directory [ 97.044698][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.052855][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.081858][ T3728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.097040][ T3728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.101724][ T3728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.119696][ T3728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.313337][ T3728] device hsr_slave_0 entered promiscuous mode [ 97.323575][ T3728] device hsr_slave_1 entered promiscuous mode [ 97.337195][ T3728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 97.361966][ T3728] Cannot create hsr debugfs directory [ 97.546915][ T3725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 97.585725][ T3725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 97.597857][ T3725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 97.632774][ T3725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 97.665449][ T3731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 97.679724][ T3731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.693593][ T3731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.706256][ T3731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.747116][ T3724] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 97.759783][ T3724] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 97.779129][ T3724] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 97.819526][ T3724] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.839467][ T3728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 97.845642][ T55] cfg80211: failed to load regulatory.db [ 97.847687][ T3728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 97.873354][ T3728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 97.881003][ T3728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 97.951024][ T3725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.983114][ T3731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.998731][ T3730] Bluetooth: hci3: command 0x041b tx timeout [ 98.004991][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.011027][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.033915][ T3725] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.073823][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.081848][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.087535][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.089071][ T3739] Bluetooth: hci0: command 0x041b tx timeout [ 98.095956][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.106397][ T3770] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.114277][ T3770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.121120][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.129457][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.137365][ T3770] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.143757][ T3770] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.150285][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.157938][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.158822][ T3739] Bluetooth: hci1: command 0x041b tx timeout [ 98.166069][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.175794][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.185708][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.192540][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.205713][ T3724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.226091][ T3731] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.248964][ T3730] Bluetooth: hci2: command 0x041b tx timeout [ 98.255410][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.266534][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.274967][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.284407][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.293963][ T185] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.301672][ T185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.308977][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.316347][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.323034][ T185] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.330837][ T185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.337621][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.352398][ T3725] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.360622][ T3725] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.370491][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.377375][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.398221][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.407653][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.416127][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.429619][ T3728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.447173][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.459825][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.495396][ T3728] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.506283][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.513868][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.520606][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.533088][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.540104][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.547758][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.554846][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.560295][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.565633][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.571359][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.577558][ T3772] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.582247][ T3772] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.593896][ T3724] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.601385][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.607557][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.629633][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.636338][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.643382][ T55] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.649355][ T55] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.656260][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.663235][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.669606][ T55] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.675236][ T55] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.681181][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.688200][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.695141][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.702356][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.713645][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 98.720326][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.727031][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.735053][ T3771] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.740759][ T3771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.746888][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.754060][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.761233][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.766688][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.775434][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.819297][ T3725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.832350][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.840506][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.846655][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.854504][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.862216][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.867041][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.872081][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.879171][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.886389][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.894934][ T3731] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.927684][ T3728] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.936434][ T3728] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.966882][ T3724] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.974457][ T3724] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.984735][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.990779][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.996299][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.003206][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.011090][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.017866][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.025396][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.032210][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.040185][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.047467][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.056176][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.061139][ T3772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.083535][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.090493][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.096864][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.104531][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.137622][ T3725] device veth0_vlan entered promiscuous mode [ 99.149667][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.156718][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.167910][ T3725] device veth1_vlan entered promiscuous mode [ 99.190826][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.198343][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.206111][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.213834][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.225500][ T3731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.240189][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.248299][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.261996][ T3725] device veth0_macvtap entered promiscuous mode [ 99.278076][ T3725] device veth1_macvtap entered promiscuous mode [ 99.286038][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.293247][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.298947][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.305451][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.323329][ T3728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.335434][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.340803][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.345917][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.351630][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.358506][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.364519][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.376265][ T3731] device veth0_vlan entered promiscuous mode [ 99.390186][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 99.397205][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 99.412271][ T3724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.423999][ T3731] device veth1_vlan entered promiscuous mode [ 99.440024][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.468377][ T3728] device veth0_vlan entered promiscuous mode [ 99.474664][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.481892][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.487392][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.494186][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.501194][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.508944][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.516136][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.528478][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.551127][ T3728] device veth1_vlan entered promiscuous mode [ 99.565674][ T3725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.573300][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.579911][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.585094][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.592700][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.598199][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.624122][ T3725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.635229][ T3725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.645274][ T3725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.654848][ T3725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.682304][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 99.689615][ T3771] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.706163][ T3731] device veth0_macvtap entered promiscuous mode [ 99.734277][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.743934][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.755292][ T3731] device veth1_macvtap entered promiscuous mode [ 99.780860][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.787684][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.799649][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.807659][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.817453][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.826287][ T838] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.850483][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.856399][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.869498][ T3724] device veth0_vlan entered promiscuous mode [ 99.880538][ T3725] ieee80211 phy3: Selected rate control algorithm 'minstrel_ht' [ 99.888342][ T3728] device veth0_macvtap entered promiscuous mode [ 99.898166][ T3731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.905533][ T3731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.914425][ T3731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.941711][ T3728] device veth1_macvtap entered promiscuous mode [ 99.965558][ T3724] device veth1_vlan entered promiscuous mode [ 99.973608][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.981044][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.990582][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.000209][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.009705][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.042538][ T3731] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.051420][ T3731] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.061371][ T3731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.079381][ T3739] Bluetooth: hci3: command 0x040f tx timeout [ 100.083469][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.095530][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.104138][ T55] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.115402][ T3731] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.123935][ T3731] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.132093][ T3731] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.141704][ T3731] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.158853][ T3730] Bluetooth: hci0: command 0x040f tx timeout [ 100.160631][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.170736][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.173842][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.186025][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.195512][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.204516][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.215501][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.222710][ T3725] ieee80211 phy4: Selected rate control algorithm 'minstrel_ht' [ 100.239017][ T3739] Bluetooth: hci1: command 0x040f tx timeout [ 100.240172][ T3724] device veth0_macvtap entered promiscuous mode [ 100.258847][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.265770][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.275021][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.282219][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.290294][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.297755][ T28] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.317878][ T3724] device veth1_macvtap entered promiscuous mode [ 100.324250][ T3739] Bluetooth: hci2: command 0x040f tx timeout [ 100.345630][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.358759][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.365161][ T3728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.374336][ T3728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.389022][ T3728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.408423][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.416623][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.424256][ T185] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.436095][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.440937][ T3731] ieee80211 phy5: Selected rate control algorithm 'minstrel_ht' [ 100.442387][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.461052][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.472105][ T3728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.482767][ T3728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.493329][ T3728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.499505][ T3728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.520082][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.528460][ T38] kauditd_printk_skb: 3 callbacks suppressed [ 100.528471][ T38] audit: type=1400 audit(1668708404.755:99): avc: denied { mounton } for pid=3725 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=2388 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 100.528982][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.533920][ T38] audit: type=1400 audit(1668708404.755:100): avc: denied { mount } for pid=3725 comm="syz-executor.1" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 100.554834][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.584382][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.593317][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.603567][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.614982][ T3724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.642095][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.648006][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.660012][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.668267][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.678519][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.687304][ T38] audit: type=1400 audit(1668708404.915:101): avc: denied { read write } for pid=3725 comm="syz-executor.1" name="loop1" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.687508][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.713135][ T38] audit: type=1400 audit(1668708404.915:102): avc: denied { open } for pid=3725 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=660 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.713182][ T38] audit: type=1400 audit(1668708404.915:103): avc: denied { ioctl } for pid=3725 comm="syz-executor.1" path="/dev/loop1" dev="devtmpfs" ino=660 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 100.748514][ T38] audit: type=1400 audit(1668708404.985:104): avc: denied { create } for pid=3792 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.774676][ T3724] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.791721][ T38] audit: type=1400 audit(1668708404.985:105): avc: denied { setopt } for pid=3792 comm="syz-executor.1" lport=3 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 100.803754][ T3724] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.822705][ T38] audit: type=1400 audit(1668708405.025:106): avc: denied { read } for pid=3138 comm="syslogd" name="log" dev="sda1" ino=1125 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 100.832010][ T3724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.862898][ T3731] ieee80211 phy6: Selected rate control algorithm 'minstrel_ht' [ 100.863185][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.888899][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.899484][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.907836][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.915787][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.988953][ T3724] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.997375][ T3724] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.005326][ T3724] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.019090][ T3724] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.030813][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.036430][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.065935][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.073383][ T3728] ieee80211 phy7: Selected rate control algorithm 'minstrel_ht' 18:06:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5ac9d8", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}}}, 0x0) 18:06:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5ac9d8", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}}}, 0x0) [ 101.147972][ T3724] ieee80211 phy8: Selected rate control algorithm 'minstrel_ht' 18:06:45 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) [ 101.176448][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 18:06:45 executing program 3: syz_emit_ethernet(0x36, &(0x7f00000000c0)={@multicast, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "5ac9d8", 0x0, 0x2f, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @mcast2}}}}, 0x0) [ 101.183352][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.196915][ T3728] ieee80211 phy9: Selected rate control algorithm 'minstrel_ht' [ 101.214197][ T3768] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.229105][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.236811][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.257923][ T3724] ieee80211 phy10: Selected rate control algorithm 'minstrel_ht' [ 101.268536][ T3802] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 101.301915][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.317049][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.324094][ T3765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.324765][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.331253][ T3765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.353938][ T3770] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.404348][ T38] audit: type=1400 audit(1668708405.635:107): avc: denied { create } for pid=3808 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 101.442752][ T38] audit: type=1400 audit(1668708405.635:108): avc: denied { ioctl } for pid=3808 comm="syz-executor.2" path="socket:[32881]" dev="sockfs" ino=32881 ioctlcmd=0x890c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 102.169387][ T3739] Bluetooth: hci3: command 0x0419 tx timeout [ 102.241080][ T3739] Bluetooth: hci0: command 0x0419 tx timeout 18:06:46 executing program 3: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 18:06:46 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:46 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) [ 102.336115][ T3739] Bluetooth: hci1: command 0x0419 tx timeout 18:06:46 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, 0x0) 18:06:46 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) [ 102.408914][ T3739] Bluetooth: hci2: command 0x0419 tx timeout 18:06:46 executing program 1: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:46 executing program 3: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:46 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:47 executing program 3: unshare(0x40000000) r0 = socket$inet(0x2, 0x3, 0x3) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x2, [{}, {}]}, 0x48) 18:06:47 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:47 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:47 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:47 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:48 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:48 executing program 3: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) 18:06:48 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0)) write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0) ioctl$VHOST_SET_VRING_BASE(0xffffffffffffffff, 0xaf01, 0x0) add_key$user(0x0, &(0x7f00000010c0)={'syz', 0x2}, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_clone(0x4a108000, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x20a01) recvmmsg(0xffffffffffffffff, &(0x7f0000001100)=[{{&(0x7f0000000540)=@nfc, 0x80, &(0x7f0000000740)=[{&(0x7f0000000000)=""/25, 0x19}, {&(0x7f00000005c0)=""/92, 0x5c}, {&(0x7f0000001080)=""/27, 0x1b}, {&(0x7f0000000640)=""/71, 0x47}, {&(0x7f0000001200)=""/115, 0x73}], 0x5}, 0xffffffff}, {{&(0x7f00000007c0)=@nl=@unspec, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000840)=""/170, 0xaa}, {&(0x7f0000000900)=""/129, 0x81}], 0x2, &(0x7f0000000a00)=""/188, 0xbc}, 0x2713}, {{&(0x7f0000000ac0)=@ax25={{0x3, @default}, [@null, @bcast, @rose, @null, @remote, @netrom, @null]}, 0x80, &(0x7f0000000c40)=[{&(0x7f0000000b40)=""/188, 0xbc}], 0x1, &(0x7f0000000c80)=""/236, 0xec}, 0xfff}, {{&(0x7f0000000d80)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000001000)=[{&(0x7f0000000e00)=""/194, 0xc2}, {&(0x7f0000000f00)=""/161, 0xa1}, {&(0x7f0000000fc0)=""/19, 0x13}], 0x3}}], 0x4, 0x2000, &(0x7f0000001040)={0x77359400}) ioctl$USBDEVFS_IOCTL(r2, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect={0x0, 0x5517, 0x48000000}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x208e24b) ioctl$VHOST_SET_MEM_TABLE(0xffffffffffffffff, 0x4008af03, &(0x7f0000000480)={0x4, 0x0, [{0x10000, 0xaa, &(0x7f0000000200)=""/170}, {0x3000, 0xffd2, &(0x7f00000002c0)=""/1}, {0x10001, 0x3d, &(0x7f0000000300)=""/61}, {0x100000, 0x95, &(0x7f00000003c0)=""/149}]}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$USBDEVFS_CONNECTINFO(r3, 0x40085511, &(0x7f0000000080)) socket$inet(0x2, 0x3, 0x2) VM DIAGNOSIS: 18:06:39 Registers: info registers vcpu 0 RAX=0000000000000000 RBX=ffffffff8c2bc9c0 RCX=ffffffff89f106b5 RDX=ffffed10058c6b92 RSI=0000000000000000 RDI=ffffffff89f42943 RBP=dffffc0000000000 RSP=ffffffff8c207e10 R8 =0000000000000000 R9 =ffff88802c635c8b R10=ffffed10058c6b91 R11=0000000000000001 R12=0000000000000000 R13=0000000000000000 R14=ffffffff8e529fd0 R15=0000000000000000 RIP=ffffffff89f4202f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c600000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fae65d1b300 CR3=00000000602a6000 CR4=00150ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000ff000000000000ff0000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=0000000000000035 RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff846b31c5 RDI=ffffffff91cafee0 RBP=ffffffff91cafea0 RSP=ffffc90003176550 R8 =0000000000000001 R9 =000000000000001f R10=0000000000000000 R11=63722d302e312e36 R12=0000000000000000 R13=0000000000000035 R14=ffffffff846b3160 R15=0000000000000000 RIP=ffffffff846b31ef RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555574a1400 ffffffff 00c00000 GS =0000 ffff88802c700000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3f526f9300 CR3=0000000060af5000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=6c4aad2470befa16c02da41f1e4c9170 XMM01=909d4e0c25bef3f7ba64ddd3acc77091 XMM02=5050feda1d7a35ba28a99ae238c56a34 XMM03=9820d71415b64b24f4233ede76e5e3e3 XMM04=00000000000000000000000000348142 XMM05=0000000000000000e3f20000828dc2fb XMM06=000000000000000000000000e3f20000 XMM07=e3f20000828dc2fb0034814231af59a6 XMM08=42000000f6000000f60000000c000000 XMM09=00000000000000000000000000000000 XMM10=fa2ebab1e31b23e0d8e07fc6a2e373c6 XMM11=4bcbf1f0c65e4243b9408cf7d6bdab0c XMM12=0d0c0f0e09080b0a0504070601000302 XMM13=0c0f0e0d080b0a090407060500030201 XMM14=00000000000000000000000000000680 XMM15=00000000000000000000000000000040 info registers vcpu 2 RAX=0000000000000002 RBX=ffff888012d08200 RCX=ffffffff89f106b5 RDX=ffffed1005906b92 RSI=0000000000000000 RDI=ffffffff89f42943 RBP=dffffc0000000000 RSP=ffffc9000067fdf8 R8 =0000000000000000 R9 =ffff88802c835c8b R10=ffffed1005906b91 R11=0000000000000001 R12=0000000000000002 R13=0000000000000002 R14=ffffffff8e529fd0 R15=0000000000000000 RIP=ffffffff89f4202f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000000000000000 ffffffff 00c00000 GS =0000 ffff88802c800000 ffffffff 00c00000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe0000091000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe000008f000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f4e98ac3300 CR3=0000000060120000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00007f4e98d6050000007f4e98a3f000 XMM02=00007f4e98a3f00000007f4e98d619b0 XMM03=00007f4e98d614b000007f4e98d93a08 XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=00000064010100000000000000000002 XMM06=0101037f0001000000007ffe1315b000 XMM07=000000000000000000007ffe13016e29 XMM08=646863660027732527206f742079726f XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 3 RAX=0000000000000003 RBX=ffff888012d0a240 RCX=ffffffff89f106b5 RDX=ffffed1005926b92 RSI=0000000000000000 RDI=ffffffff89f42943 RBP=dffffc0000000000 RSP=ffffc9000068fdf8 R8 =0000000000000000 R9 =ffff88802c935c8b R10=ffffed1005926b91 R11=0000000000000001 R12=0000000000000003 R13=0000000000000003 R14=ffffffff8e529fd0 R15=0000000000000000 RIP=ffffffff89f4202f RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=1 ES =0000 0000000000000000 ffffffff 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00000000 FS =0000 0000000000000000 ffffffff 00000000 GS =0000 ffff88802c900000 ffffffff 00000000 LDT=0000 0000000000000000 00000000 00000000 TR =0040 fffffe00000d8000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe00000d6000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f3f529ca038 CR3=0000000060af5000 CR4=00150ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=00000000000000000000000000000000 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=0000ff000000ff000000000000000000 XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000