last executing test programs: 3.134349276s ago: executing program 2 (id=3): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) r3 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x4903, 0x0) ioctl$CDROMVOLCTRL(r3, 0x31f, &(0x7f0000000040)={0xa1, 0xe, 0x44, 0x1}) 2.902058672s ago: executing program 2 (id=5): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20006854}, 0x800) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00') read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) (async) read$FUSE(r0, &(0x7f0000006300)={0x2020}, 0x2020) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x40, 0x42, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r3, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x28, r2, 0xcc071acbf25dbf8f, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f00000005c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000400)={0x16c, r2, 0x200, 0x70bd29, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0x84, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x27bd953b}]}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}]}, @TIPC_NLA_BEARER={0x90, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x10001}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffff3}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0xffffbae3, @private1={0xfc, 0x1, '\x00', 0x1}, 0x3}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8}]}]}, @TIPC_NLA_MON={0xc, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6f4e}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0x40000}, 0x1000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0}, 0x6}], 0x1, 0x40, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = syz_open_dev$usbfs(&(0x7f0000000080), 0x400000001fc, 0x181181) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) (async) ioctl$USBDEVFS_SUBMITURB(r7, 0x8038550a, &(0x7f0000000280)=@urb_type_control={0x2, {}, 0xfffffff7, 0x84, &(0x7f0000000000)={0x4b5a9da54893e123, 0x1, 0x10, 0x2}, 0x8, 0x203ffffb, 0x300, 0x0, 0x2, 0x20000, 0x0}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x4, 0x5, 0x9, 0x8], 0x25000, 0x304}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) (async) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)={0xc0000010}) userfaultfd(0x801) (async) r8 = userfaultfd(0x801) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) (async) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x18) ioctl$UFFDIO_REGISTER(r8, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f00004b2000/0x400000)=nil) writev(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000140)}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.943903655s ago: executing program 2 (id=15): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) socket(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x10}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000190a0101"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3a0, 0x0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff6}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@arp={@broadcast, @local, 0xff, 0xff000000, 0xa, 0x0, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3c, 0x0, 0x3a1, 0xc, 0x542, 0x5, 'team0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000d40)={0x2, 0x0, 0x1d, 0x1, 0x1ee, &(0x7f0000000940)="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"}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000900)={0x1, &(0x7f00000008c0)=[{0x6, 0x0, 0x0, 0x6}]}) (async) socket(0x10, 0x3, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth0_vlan\x00', 0x10}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="38000000190a0101"], 0x38}, 0x1, 0x0, 0x0, 0x20040850}, 0x44054) (async) socket(0x400000000010, 0x3, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000c40)={'filter\x00', 0x104, 0x4, 0x3a0, 0x0, 0xe8, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0xfff6}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x80ca, 0x8}}}, {{@arp={@broadcast, @local, 0xff, 0xff000000, 0xa, 0x0, {@mac=@remote, {[0x0, 0xff, 0xff, 0x0, 0x0, 0xff]}}, {@mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xd}, {[0xff, 0x0, 0xff, 0xff, 0x0, 0xff]}}, 0x3c, 0x0, 0x3a1, 0xc, 0x542, 0x5, 'team0\x00', 'team0\x00', {}, {0xff}, 0x0, 0x2}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) (async) socket$unix(0x1, 0x1, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x400000, 0x0) (async) ioctl$KDFONTOP_SET_DEF(r7, 0x4b72, &(0x7f0000000d40)={0x2, 0x0, 0x1d, 0x1, 0x1ee, &(0x7f0000000940)="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"}) (async) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x5}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r6, {0x7, 0x9}, {}, {0xc, 0x8}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x1, 0xd}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x60000080}, 0x20000000) (async) close_range(r0, 0xffffffffffffffff, 0x0) (async) 1.203482008s ago: executing program 1 (id=37): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0x240000, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000000)={0x3, 0x0, 0x0, 0xfdfdffff}) sendmsg$nl_xfrm(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@getae={0x4c, 0x1f, 0x1, 0x70bd27, 0x25dfdbff, {{@in6=@remote, 0x4da, 0x2, 0x6c}, @in=@loopback, 0x2, 0x34fd}, [@mark={0xc, 0x15, {0x35075c, 0x81}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20004045}, 0x40040) 1.203206279s ago: executing program 1 (id=38): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x4}}]}, 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/block/md0/md/dev-ram0/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='\x00\x00', 0x2) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000bc0)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, {}, {}, {0xa, 0xf}}, [@filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x80000001}, @TCA_U32_FLAGS={0x8, 0xb, 0x1}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044041}, 0x4040050) syz_init_net_socket$bt_hci(0x1f, 0x5, 0x8) 1.093791881s ago: executing program 1 (id=39): r0 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setns(0xc9, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/llc/core\x00') r2 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r2, 0xc2604111, &(0x7f0000000200)={0x0, [[0x6, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff], [0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0x3], [0xffffffff, 0xffffffff, 0xffffffff, 0x1, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x10, 0x10, 0x0, 0x0, 0x1}, {0x20, 0x20, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xac44, 0xac44, 0x0, 0x0, 0x1}, {0x1388, 0x186a0, 0x0, 0x0, 0x1}, {0x100, 0x400, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x2, 0x8, 0x0, 0x0, 0x1}, {0x2710, 0xf4240, 0x0, 0x0, 0x1}, {0x400, 0x1000, 0x0, 0x0, 0x1}, {0x0, 0x4000, 0x0, 0x0, 0x1}, {0x0, 0xf4240, 0x0, 0x0, 0x1}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) (async) r3 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f0000000000)=[{r3, 0x1000}], 0x1, 0x0, 0x0, 0x0) read$FUSE(r1, &(0x7f0000002c00)={0x2020}, 0x2020) ioctl$CDROMPAUSE(r0, 0x5301) (async) ioctl$CDROMPAUSE(r0, 0x5301) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x4, 0x5, 0x6, @lba=0x6, @lba=0x15300276}) (async) ioctl$CDROMSUBCHNL(r0, 0x530b, &(0x7f0000000040)={0x1, 0x4, 0x8, 0x4, 0x5, 0x6, @lba=0x6, @lba=0x15300276}) 1.092533311s ago: executing program 2 (id=40): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x3c, r3, 0x94909f8090b0d889, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x100, 0x75}}}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x4008800) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000200)={0x4c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x6, 0x36}}}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @action={{{}, {0x8}, @broadcast, @device_a, @from_mac=@broadcast, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x0, 0x3, 0xe, 0xf9}, @void}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 1.030953816s ago: executing program 2 (id=42): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000800)={0x44, &(0x7f00000005c0)={0x40, 0x17, 0x4, "371ee6e4"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x300000000000000) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$EVIOCGMASK(r1, 0x5b01, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x8, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff}, [@jmp={0x6, 0x0, 0xc, 0x0, 0x0, 0x1, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @exit, @cb_func={0x18, 0x0, 0x4, 0x0, 0xffffffffffffffff}]}, &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) 873.304279ms ago: executing program 0 (id=47): mmap$IORING_OFF_SQ_RING(0x0, 0xc00001, 0x1000005, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0xf04, &(0x7f0000000400)={0x0, 0x595f, 0x10000, 0x7, 0x10000051}, &(0x7f0000000200), &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(0x0, r1, r2, &(0x7f0000000280)=@IORING_OP_FUTEX_WAITV={0x35, 0x4, 0x0, 0x0, 0x0, &(0x7f00000006c0)=[{0x100000001, 0x0, 0x82}], 0x1, 0x0, 0x1}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x5, 0x0, &(0x7f00000006c0)='\x00\x00\x00\x00\x00', 0x0, 0x60ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) io_uring_enter(r0, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000004c0), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000180)={0x54, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_DEVKEY={0x20, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x404}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x54}, 0x1, 0x0, 0x0, 0x48010}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000200)={'ip6_vti0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x2000008, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xfff1, 0xffff}, {0x0, 0xc}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x40}}, 0x0) syz_emit_vhci(&(0x7f00000000c0)=@HCI_ACLDATA_PKT={0x2, {0xc8, 0x2, 0x0, 0xc}, @l2cap_cid_signaling={{0x8}, [@l2cap_disconn_rsp={{0x7, 0x8, 0x4}, {0x7}}]}}, 0x11) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x15, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020692500000000002020207b1a00fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000650000000600000085100000010000009500000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x3}, 0x90) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r5) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000280)={&(0x7f00000000c0), 0xc, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0097010054bd141b41180000", @ANYRES16=r10, @ANYBLOB="000225bd7000fbdbdf2507000000080004000100000008000700ac14140e080001002940b100"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x4000) 793.740257ms ago: executing program 0 (id=48): r0 = socket(0x11, 0x3, 0x0) sendmmsg(r0, &(0x7f0000000080)=[{{&(0x7f0000000640)=@qipcrtr={0x2a, 0x1, 0x4001}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)="d479183d7d98d181a4b5f3e38100e2f288a8d2", 0x66}, {&(0x7f0000001c00)="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", 0xfdd}], 0x2}}], 0x1, 0x24044015) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x210101, 0x0) sendmsg$OSF_MSG_REMOVE(r1, &(0x7f0000000700)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000180)={0x4bc, 0x1, 0x5, 0x3, 0x0, 0x0, {0x1, 0x0, 0x3}, [{{0x254, 0x1, {{0x3, 0x4}, 0x1, 0x5, 0x3, 0x0, 0x21, 'syz0\x00', "30e52428b2bc18ef840f3058f4f58bb1c34713645fd71ef9658fcfef3d819c95", "684873ec7983c1c9ba97e2047912192d501adf5cb822fb926ebfc0c91285b356", [{0x81, 0x0, {0x2, 0xfffffffc}}, {0x67, 0x81, {0x0, 0x7f}}, {0x8, 0x1, {0x1, 0x81}}, {0xec, 0x8, {0x2, 0x1000}}, {0xfffd, 0x2, {0x3, 0x9}}, {0xdea, 0xc983, {0x1, 0xffff}}, {0x7f, 0x1b6f, {0x1, 0x8}}, {0x8000, 0x802, {0x1}}, {0x88e, 0x8, {0x2}}, {0x8, 0x5, {0x2, 0x1}}, {0x3, 0x3, {0x1, 0x3}}, {0xffff, 0xa10c, {0x2, 0x6}}, {0x10, 0x5264, {0x1}}, {0x3, 0x698f, {0x1, 0x9}}, {0xd, 0x1, {0x0, 0x9}}, {0x3, 0x7fff, {0x3, 0x8}}, {0xf45, 0x8, {0x3, 0x1}}, {0x6, 0x40, {0x3, 0x7ff}}, {0xffff, 0x9, {0x2, 0x8000}}, {0x4, 0x3, {0x2, 0x9}}, {0x0, 0x4, {0x2, 0x9}}, {0x7, 0x6, {0x2, 0x3}}, {0x9, 0x1, {0x0, 0x9}}, {0xc000, 0x3, {0x1, 0x5}}, {0xb9, 0x0, {0x1, 0x482a5b10}}, {0x666, 0x0, {0x3, 0x1000}}, {0xf2d2, 0x4, {0x2, 0x7f}}, {0x9, 0x7f, {0x2, 0x80000000}}, {0x2, 0x1ff, {0x3, 0x2}}, {0x81, 0x7, {0x0, 0x10000}}, {0x6, 0x5, {0x3, 0x4}}, {0x33, 0x8, {0x1, 0x4}}, {0x81, 0x9, {0x1, 0xfffffc00}}, {0x100, 0x5, {0x1, 0x4}}, {0x9, 0x1000, {0x1, 0x46}}, {0x4, 0x9, {0x1, 0x9}}, {0x8, 0xff81, {0x0, 0x81}}, {0x0, 0x19, {0x2, 0x5}}, {0x0, 0x9, {0x3, 0xf0e}}, {0x9, 0x4, {0x1, 0x4}}]}}}, {{0x254, 0x1, {{0x2, 0x5}, 0x8c, 0xff, 0xfffc, 0x4, 0x13, 'syz1\x00', "fbe6550c49e244815686d1dfcc469b98b3d65c47e06606b167b046fb77d1982d", "7e556b662ffeed96936e0e69dce0f4a0dfedc3f6e4891a9d5136860e879ba3a1", [{0xff, 0x7f, {0x1, 0xd}}, {0x6, 0x8, {0x3, 0x800}}, {0xfffe, 0x3ff, {0x2, 0x5}}, {0x3, 0x6, {0x3, 0xc}}, {0xf, 0xff, {0x0, 0xffffff25}}, {0x5, 0x80, {0x0, 0xc67}}, {0x5, 0x8, {0x2, 0x7}}, {0xff, 0x6a9, {0x1, 0x1}}, {0x3, 0x8, {0x0, 0x8}}, {0x1, 0x3, {0x1, 0x6}}, {0x80, 0x9, {0x1, 0x8}}, {0x2, 0x4, {0x3, 0x1}}, {0x1, 0x2, {0x3, 0x9}}, {0x1000, 0x8, {0x2}}, {0x1, 0x109e, {0x2, 0x2ca0bcd3}}, {0x5, 0x1adf, {0x1, 0x6}}, {0x4, 0x3, {0x3, 0x8}}, {0x9, 0x9, {0xbb008be79ac6cea4, 0x6}}, {0x6, 0x8, {0x3, 0x4}}, {0x8, 0x1, {0x2, 0x9}}, {0x80, 0x1ff, {0x0, 0xffffffff}}, {0xfff8, 0xa4, {0x0, 0xc2ff}}, {0x0, 0x7, {0x6c3ebf61534e8624, 0x8}}, {0xff, 0xa, {0x2, 0x8000}}, {0x8, 0x9547, {0x2, 0x8}}, {0x4, 0xff, {0x3, 0x7}}, {0x1, 0x3, {0x1, 0x100}}, {0x2f, 0x101, {0x0, 0x10}}, {0x0, 0x0, {0x1, 0x5}}, {0x8, 0xe, {0x1, 0x7fffffff}}, {0x0, 0x1, {0x2, 0xb4}}, {0x6, 0x9, {0x2, 0x1}}, {0x9, 0x7, {0x2, 0x5}}, {0x9, 0x1000, {0x3, 0xffff}}, {0x0, 0x40, {0x1, 0x9}}, {0xfffd, 0x1, {0x2}}, {0x8, 0x251, {0x0, 0x8d}}, {0x3ff, 0x0, {0x1, 0x5}}, {0x1, 0xfaab, {0x0, 0x4cf0}}, {0x10, 0x1000, {0x0, 0x3}}]}}}]}, 0x4bc}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000800)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x60, 0x2, 0x7, 0x201, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_QUOTA={0xc}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x3fff8000000}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4008000) 743.397013ms ago: executing program 0 (id=49): mount(&(0x7f00000006c0)=@sr0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='iso9660\x00', 0x204001, 0x0) ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, &(0x7f0000000140)={{0x1, 0x1, 0x18, 0xffffffffffffffff}, '.\x00'}) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_INITSTATE(r2, 0x113, 0x4, 0x0, &(0x7f0000000000)) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000500)={0x2d, 0x6, 0x0, {0x1, 0x6, 0x4, 0x0, '{:-\''}}, 0x2d) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[], 0x18}}, 0x20004000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@gettaction={0x50, 0x32, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@action_gd=@TCA_ACT_TAB={0x1c, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'mirred\x00'}}, {0xc, 0x1b, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x40}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24040040}, 0x4048840) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b0001006272696467650000180002"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) read$FUSE(r1, &(0x7f000000b1c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0xfffffffffffffff5, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x8, 0x80002, 0x5, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x6000, 0xd, r5, 0x0, 0x800000}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006780)={0x90, 0x0, 0x3, {0x5, 0x0, 0xd04, 0xfffffffffffffffc, 0x0, 0x100000, {0x0, 0x8, 0xfffffffffffffffd, 0x3, 0xffffffffffffffff, 0x0, 0x4, 0x4, 0x4, 0x2000, 0x101, r5, r6, 0xf0ee, 0xb}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$SNAPSHOT_ALLOC_SWAP_PAGE(r0, 0x80083314, &(0x7f00000004c0)) getgroups(0x2, &(0x7f0000000180)=[0xee00, 0x0]) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000001c0)={{{@in6=@private1, @in6=@ipv4={""/10, ""/2, @initdev}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}}}, &(0x7f00000002c0)=0xe8) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000100), 0x29aa094, &(0x7f0000000300)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x2000}, 0x2c, {'user_id', 0x3d, r5}, 0x2c, {'group_id', 0x3d, r7}, 0x2c, {[{@blksize={'blksize', 0x3d, 0x200}}, {@allow_other}, {@default_permissions}, {@max_read={'max_read', 0x3d, 0x9}}, {@max_read={'max_read', 0x3d, 0x2}}, {@default_permissions}], [{@smackfshat}, {@subj_user={'subj_user', 0x3d, 'iso9660\x00'}}, {@subj_user}, {@fsmagic={'fsmagic', 0x3d, 0x17a}}, {@euid_eq={'euid', 0x3d, r8}}, {@appraise}, {@smackfsfloor={'smackfsfloor', 0x3d, 'iso9660\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '+'}}]}}) 633.61658ms ago: executing program 0 (id=52): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000060000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb080001"], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 573.872654ms ago: executing program 0 (id=53): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbffdff811628400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 503.982299ms ago: executing program 0 (id=55): r0 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x8, @multicast2}}, 0x24) sendmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18, 0xe000}, 0x5}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00), 0xf000, 0x10002, 0x0) recvmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, 0x0}, 0x1800}], 0x1, 0x40018142, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x82801, 0x0) 313.91633ms ago: executing program 3 (id=58): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x101c02, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) dup3(r4, r3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x12, r3, 0xfc778000) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000440)=[@text32={0x20, 0x0}], 0x1, 0x6d, 0x0, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000080)={0x3, 0xbde, 0x0, &(0x7f0000000180)="a1984ec3aec3fc2e025f90eda6dbc903939aac644fd36f1e65174cae030c42cbacc392851a695f247112e91f059460a2c031929dc0515ac7cd20775ff9da9c2b6cb48968dcd6d8d982c492932c572f084d3af58650d207eec0794b3e47c5678c36b99eed61e1dbac68ce8a79aa21a51202018bdc4a51489844f785887083841d65c129992bbe5a51c71b95a9847d2bdede66c6e3184c386faf938fd6db888e73a5c0dcc69c3de7458e68ed33226a8d1c8e17", 0x0, 0xb2}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000002c0)={0x1, 0x0, [{0x40000073, 0x0, 0x81}]}) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) socket$inet(0x2, 0x4000000000000001, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x200000b, 0x204031, 0xffffffffffffffff, 0xec776000) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000d00)=0x224d, 0x4) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r9 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r9, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r10 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r10, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) 183.976131ms ago: executing program 1 (id=59): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000380)={0x0, 0x13, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x150}}, 0x0) 183.636646ms ago: executing program 3 (id=60): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$getregs(0xe, r0, 0x0, &(0x7f0000000480)=""/114) setns(0xc9, 0x0) r1 = socket(0x2d, 0x2, 0x0) setsockopt(r1, 0x11d, 0x9, &(0x7f0000000200)="01000000", 0x4) sendmsg(r1, &(0x7f0000000400)={&(0x7f0000000500)=@generic={0x2d, "00000000000008011800020000000600"}, 0x80, 0x0}, 0x0) r2 = syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) ioctl(r2, 0x5, &(0x7f0000000000)="bb23428ebef6544201f491646a269c5a9a49e5d94c93fb25ae2fb6d57569d92ced3583ba10ddd3e913a2d7aa2efb6ae5a5ca72230a924108ad75d5ea11df3d8c74cc967b8246724cbc2dcfe84a3d6f577145a0aa6bdd4aa26d4d3aeb1afec57b4f92d148018ad58f") mmap$snddsp_control(&(0x7f0000000000/0x3000)=nil, 0x1000, 0x1, 0x11, r2, 0x82000000) mount(&(0x7f0000000080)=@filename='./file0\x00', &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='vxfs\x00', 0x40400, &(0x7f0000000140)='-\x00') 182.390352ms ago: executing program 1 (id=61): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="f001000000010104200000000000000002000000240001801400018008000100e000000108000200000000000c0002800500010000110000240002800c00028005000100000000001400018008000100e000000108000200ac1e00010800074000000000080008400000000280000d8014000380060001004e240000060002004e240000140005000000000000000000000000000000000108000200e0000002140004000000000000000000000000000000000014000400fc00000000000000000000000000000114000400fe80000000000000000000000000002308000200ac1414bb080001"], 0x1f0}, 0x1, 0x0, 0x0, 0x2000c004}, 0x0) 102.917813ms ago: executing program 3 (id=62): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x405}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x31}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) setsockopt$inet_sctp_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, &(0x7f0000000140)=0x8001, 0x4) add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@newlink={0x4c, 0x10, 0xffffffffffffffff, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x42, 0x2021}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x2}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x8000002) 102.680438ms ago: executing program 1 (id=63): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, &(0x7f0000000100)={0x2, &(0x7f00000001c0)=[{0x6, 0x0, 0x8, 0x1}, {0x400, 0xe9, 0x2, 0x10}]}) r0 = socket$xdp(0x2c, 0x3, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) userfaultfd(0x801) socket(0x1d, 0x2, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0xf5d1b000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x5dd8, 0x0, &(0x7f0000000280), &(0x7f0000000200), &(0x7f0000000240)) socket$inet_mptcp(0x2, 0x1, 0x106) timer_create(0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) connect$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000100)='gid_map\x00') preadv(r2, &(0x7f0000004780)=[{&(0x7f0000000640)=""/4112, 0x1010}, {&(0x7f0000004800)=""/4109, 0x1ef}, {&(0x7f00000036c0)=""/77, 0x4d}, {&(0x7f0000003740)=""/49, 0x31}, {&(0x7f0000003780)=""/4096, 0x1000}], 0x5, 0x4000, 0x2) syz_io_uring_setup(0x20c6, &(0x7f0000000300)={0x0, 0xfa61, 0x400, 0x3, 0x2a6}, &(0x7f0000000380), &(0x7f00000003c0), 0x0) r4 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') openat$binfmt(0xffffffffffffff9c, r4, 0x42, 0x1ff) r5 = syz_open_dev$video4linux(&(0x7f0000000080), 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SETSEL(r6, 0x541c, &(0x7f00000000c0)={0x2, {0x2, 0x0, 0x8, 0x1ff, 0x0, 0x4}}) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000080)={0xfffffe01, 0x8, 0xeffffe01, 0x9, 0x3, "fe67e23fb562000010000800", 0x6, 0x14}) ioctl$TIOCL_PASTESEL(r6, 0x541c, &(0x7f0000000000)) ioctl$VIDIOC_QUERYMENU(r5, 0xc008561c, &(0x7f00000000c0)={0x980901, 0x2, @name="2a0bfa91762a67fc38beda01496988cd2bae0aa03dc5d7b06bef2d1e67d01e0c"}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x211021, 0x4) 102.504027ms ago: executing program 3 (id=64): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0x4, &(0x7f0000001a40)=ANY=[@ANYBLOB="180000004f0c000000000000fcbffeff811628400000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, 0x2b, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r1, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) 2.77262ms ago: executing program 3 (id=65): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x154}}, 0x8044) 0s ago: executing program 3 (id=66): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000fed000/0x13000)=nil, &(0x7f0000ff5000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000fe9000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) io_uring_setup(0x4fee, &(0x7f0000000040)={0x0, 0xf4ac, 0xc000, 0xa, 0x20002f9}) mremap(&(0x7f000000d000/0x2000)=nil, 0xfffffffffffffe74, 0x1000, 0x3, &(0x7f0000007000/0x1000)=nil) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407b0603230001000000010902270001010080320904000003ff0000000705810240000007050202400000070583030a"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./dev/ttyUSB0\x00', 0x28d00, 0x0) syz_usb_control_io$uac3(r1, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f000004b000/0x3000)=nil, 0x3000, 0x13) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:59513' (ED25519) to the list of known hosts. [ 42.741650][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 42.741943][ T42] audit: type=1400 audit(1788646937.493:141): avc: denied { mounton } for pid=5714 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 42.744858][ T42] audit: type=1400 audit(1788646937.503:142): avc: denied { mount } for pid=5714 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.747335][ T5714] cgroup: Unknown subsys name 'net' [ 42.749546][ T42] audit: type=1400 audit(1788646937.503:143): avc: denied { unmount } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 42.905489][ T5714] cgroup: Unknown subsys name 'cpuset' [ 42.912707][ T5714] cgroup: Unknown subsys name 'rlimit' [ 43.074404][ T42] audit: type=1400 audit(1788646937.833:144): avc: denied { setattr } for pid=5714 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=848 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 43.074808][ T42] audit: type=1400 audit(1788646937.833:145): avc: denied { create } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.075008][ T42] audit: type=1400 audit(1788646937.833:146): avc: denied { write } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.075255][ T42] audit: type=1400 audit(1788646937.833:147): avc: denied { read } for pid=5714 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.114280][ T42] audit: type=1400 audit(1788646937.873:148): avc: denied { read } for pid=5443 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 43.120202][ T42] audit: type=1400 audit(1788646937.873:149): avc: denied { read } for pid=5443 comm="dhcpcd" name="n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.120453][ T42] audit: type=1400 audit(1788646937.873:150): avc: denied { open } for pid=5443 comm="dhcpcd" path="/run/udev/data/n31" dev="tmpfs" ino=1889 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.150627][ T5721] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 43.929379][ T5714] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.969852][ T42] kauditd_printk_skb: 6 callbacks suppressed [ 47.969942][ T42] audit: type=1400 audit(1788646942.723:157): avc: denied { create } for pid=5727 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 47.970392][ T42] audit: type=1400 audit(1788646942.723:158): avc: denied { read write } for pid=5727 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.970857][ T42] audit: type=1400 audit(1788646942.723:159): avc: denied { open } for pid=5727 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1290 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 47.984910][ T42] audit: type=1400 audit(1788646942.743:160): avc: denied { ioctl } for pid=5727 comm="syz-executor" path="socket:[4096]" dev="sockfs" ino=4096 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.003631][ T5730] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.009836][ T5734] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.010197][ T5734] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.019916][ T5736] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.020306][ T5736] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.021569][ T5737] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.022911][ T5737] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.023510][ T5737] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.024927][ T5737] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.025362][ T5737] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.025802][ T5737] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.026950][ T5737] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.027902][ T5737] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.028175][ T5737] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.028637][ T5737] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.028811][ T5737] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.029066][ T5737] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.029387][ T5737] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.032066][ T67] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.035674][ T67] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.043135][ T42] audit: type=1400 audit(1788646942.793:161): avc: denied { read } for pid=5733 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.043161][ T42] audit: type=1400 audit(1788646942.793:162): avc: denied { read } for pid=5732 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.043180][ T42] audit: type=1400 audit(1788646942.793:163): avc: denied { open } for pid=5733 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.043199][ T42] audit: type=1400 audit(1788646942.793:164): avc: denied { mounton } for pid=5732 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 48.048791][ T42] audit: type=1400 audit(1788646942.803:165): avc: denied { module_request } for pid=5733 comm="syz-executor" kmod="netdev-nr1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.079335][ T42] audit: type=1400 audit(1788646942.833:166): avc: denied { sys_module } for pid=5727 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 48.781338][ T5731] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.781474][ T5731] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.781570][ T5731] bridge_slave_0: entered allmulticast mode [ 48.783095][ T5731] bridge_slave_0: entered promiscuous mode [ 48.787679][ T5731] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.787750][ T5731] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.787837][ T5731] bridge_slave_1: entered allmulticast mode [ 48.790031][ T5731] bridge_slave_1: entered promiscuous mode [ 48.806882][ T5727] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.807016][ T5727] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.807129][ T5727] bridge_slave_0: entered allmulticast mode [ 48.808507][ T5727] bridge_slave_0: entered promiscuous mode [ 48.810291][ T5727] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.810331][ T5727] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.810385][ T5727] bridge_slave_1: entered allmulticast mode [ 48.811069][ T5727] bridge_slave_1: entered promiscuous mode [ 48.877371][ T5731] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.879354][ T5727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.890718][ T5727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.898651][ T5731] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 48.908281][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.908499][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.908557][ T5732] bridge_slave_0: entered allmulticast mode [ 48.909483][ T5732] bridge_slave_0: entered promiscuous mode [ 48.936040][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.936221][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.937214][ T5732] bridge_slave_1: entered allmulticast mode [ 48.938527][ T5732] bridge_slave_1: entered promiscuous mode [ 48.957326][ T5727] team0: Port device team_slave_0 added [ 48.965065][ T5731] team0: Port device team_slave_0 added [ 48.967316][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 48.967518][ T5733] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.967583][ T5733] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.967752][ T5733] bridge_slave_0: entered allmulticast mode [ 48.968985][ T5733] bridge_slave_0: entered promiscuous mode [ 48.973773][ T5733] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.973836][ T5733] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.973983][ T5733] bridge_slave_1: entered allmulticast mode [ 48.974817][ T5733] bridge_slave_1: entered promiscuous mode [ 48.976418][ T5727] team0: Port device team_slave_1 added [ 48.983997][ T5731] team0: Port device team_slave_1 added [ 48.994216][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.050249][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.050331][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.050945][ T5727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.054202][ T5727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.054224][ T5727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.054249][ T5727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.055347][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.055360][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.055384][ T5731] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.067291][ T5731] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.067305][ T5731] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.067325][ T5731] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.089363][ T5733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.090437][ T5732] team0: Port device team_slave_0 added [ 49.093110][ T5733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.098849][ T5732] team0: Port device team_slave_1 added [ 49.139631][ T5733] team0: Port device team_slave_0 added [ 49.147091][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.147130][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.147343][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.174287][ T5733] team0: Port device team_slave_1 added [ 49.174805][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.174816][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.174829][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.184668][ T5731] hsr_slave_0: entered promiscuous mode [ 49.185125][ T5731] hsr_slave_1: entered promiscuous mode [ 49.197441][ T5727] hsr_slave_0: entered promiscuous mode [ 49.198457][ T5727] hsr_slave_1: entered promiscuous mode [ 49.199025][ T5727] debugfs: 'hsr0' already exists in 'hsr' [ 49.199118][ T5727] Cannot create hsr debugfs directory [ 49.199611][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.199622][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.199635][ T5733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.204491][ T5733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.204501][ T5733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.204514][ T5733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.285572][ T5732] hsr_slave_0: entered promiscuous mode [ 49.286500][ T5732] hsr_slave_1: entered promiscuous mode [ 49.287124][ T5732] debugfs: 'hsr0' already exists in 'hsr' [ 49.287143][ T5732] Cannot create hsr debugfs directory [ 49.325645][ T5733] hsr_slave_0: entered promiscuous mode [ 49.326551][ T5733] hsr_slave_1: entered promiscuous mode [ 49.327326][ T5733] debugfs: 'hsr0' already exists in 'hsr' [ 49.327344][ T5733] Cannot create hsr debugfs directory [ 49.609697][ T5727] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 49.616402][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.616918][ T5727] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 49.624871][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.625319][ T5727] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 49.631539][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.635046][ T5727] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 49.641381][ T5727] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.694308][ T5731] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 49.698871][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.699991][ T5731] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 49.704186][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.704930][ T5731] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 49.709358][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.726287][ T5731] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 49.731106][ T5731] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.794619][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 49.800181][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.800912][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 49.804483][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.812833][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 49.818560][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.819603][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 49.824424][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.856896][ T5727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.911045][ T5733] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 49.916709][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 49.917368][ T5733] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 49.921779][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 49.929690][ T5727] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.929955][ T5733] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 49.935149][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 49.936475][ T5733] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 49.939979][ T5733] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 49.952752][ T1166] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.952919][ T1166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.963923][ T5731] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.971934][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.972066][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.002400][ T5731] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.018957][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.019069][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.050931][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.051023][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.055098][ T5089] Bluetooth: hci3: command tx timeout [ 50.055103][ T5737] Bluetooth: hci2: command tx timeout [ 50.055151][ T5741] Bluetooth: hci1: command tx timeout [ 50.061355][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.081383][ T5732] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.099288][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.099405][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.119003][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.119165][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.143056][ T5741] Bluetooth: hci0: command tx timeout [ 50.144652][ T5733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 50.181389][ T5733] 8021q: adding VLAN 0 to HW filter on device team0 [ 50.205169][ T3684] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.205271][ T3684] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.225964][ T3684] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.226127][ T3684] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.388228][ T5727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.437740][ T5727] veth0_vlan: entered promiscuous mode [ 50.446358][ T5727] veth1_vlan: entered promiscuous mode [ 50.469161][ T5727] veth0_macvtap: entered promiscuous mode [ 50.484605][ T5727] veth1_macvtap: entered promiscuous mode [ 50.499901][ T5731] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.504454][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.515658][ T5727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.582611][ T5806] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.582884][ T5806] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.582958][ T5806] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.583012][ T5806] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.596063][ T5731] veth0_vlan: entered promiscuous mode [ 50.607564][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.619046][ T5733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.636655][ T5731] veth1_vlan: entered promiscuous mode [ 50.658076][ T558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.658143][ T558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.701587][ T558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.701641][ T558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.711096][ T5731] veth0_macvtap: entered promiscuous mode [ 50.721115][ T5733] veth0_vlan: entered promiscuous mode [ 50.724918][ T5733] veth1_vlan: entered promiscuous mode [ 50.732960][ T5731] veth1_macvtap: entered promiscuous mode [ 50.737673][ T5732] veth0_vlan: entered promiscuous mode [ 50.745738][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.748675][ T5731] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.752900][ T5732] veth1_vlan: entered promiscuous mode [ 50.758010][ T5727] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 50.778507][ T5733] veth0_macvtap: entered promiscuous mode [ 50.788387][ T5733] veth1_macvtap: entered promiscuous mode [ 50.800847][ T5732] veth0_macvtap: entered promiscuous mode [ 50.807664][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.811410][ T5732] veth1_macvtap: entered promiscuous mode [ 50.830544][ T5733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.856265][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.880244][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.900089][ T1167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.900137][ T1167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.943944][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947485][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947517][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947539][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947560][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947589][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947669][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.947690][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.991553][ T1167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.991630][ T1167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.008810][ T558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.008873][ T558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.033210][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.033273][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.072306][ T558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.072343][ T558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.107970][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.108045][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.122612][ T5806] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.122689][ T5806] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.122728][ T5806] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.136820][ T5806] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.150710][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.150774][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.168621][ T5886] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.168673][ T5886] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4'. [ 51.171556][ T5886] Zero length message leads to an empty skb [ 51.174677][ T5779] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.174923][ T5779] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.175136][ T5779] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.194114][ T5779] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 51.258408][ T5893] netlink: 'syz.0.1': attribute type 3 has an invalid length. [ 51.351979][ T5904] bridge_slave_0: left allmulticast mode [ 51.352037][ T5904] bridge_slave_0: left promiscuous mode [ 51.352886][ T5904] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.360422][ T5904] bridge_slave_1: left allmulticast mode [ 51.360525][ T5904] bridge_slave_1: left promiscuous mode [ 51.361628][ T5904] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.375475][ T5904] bond0: (slave bond_slave_0): Releasing backup interface [ 51.382514][ T5904] bond0: (slave bond_slave_1): Releasing backup interface [ 51.390042][ T5904] team0: Port device team_slave_0 removed [ 51.395288][ T5904] team0: Port device team_slave_1 removed [ 51.395692][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 51.395704][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 51.399855][ T5904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 51.399872][ T5904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 51.403638][ T5904] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 51.520128][ T5909] [U] vÔ3¸Âfù¾"SçÁ/Éê4:ÃXTz“W¡t‘’lWµ«= [ 51.520185][ T5909] [U] J"—e:ÀÆ" [ 51.591956][ T5911] bond1 (unregistering): Released all slaves [ 52.055667][ T5922] netlink: 36 bytes leftover after parsing attributes in process `syz.2.15'. [ 52.072709][ T5921] nbd0: detected capacity change from 0 to 63 [ 52.077909][ T68] block nbd0: Receive control failed (result -32) [ 52.078496][ T5083] block nbd0: Send control failed (result -32) [ 52.078563][ T5083] block nbd0: Request send failed, requeueing [ 52.086433][ T5083] block nbd0: Dead connection, failed to find a fallback [ 52.087911][ T5083] block nbd0: shutting down sockets [ 52.088386][ T5083] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.088739][ T5083] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.090193][ T5083] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090219][ T5083] Buffer I/O error on dev nbd0, logical block 1, async page read [ 52.090335][ T5083] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090355][ T5083] Buffer I/O error on dev nbd0, logical block 2, async page read [ 52.090436][ T5083] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090456][ T5083] Buffer I/O error on dev nbd0, logical block 3, async page read [ 52.090612][ T5083] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090632][ T5083] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.090700][ T5083] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090718][ T5083] Buffer I/O error on dev nbd0, logical block 1, async page read [ 52.090790][ T5083] I/O error, dev nbd0, sector 4 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090809][ T5083] Buffer I/O error on dev nbd0, logical block 2, async page read [ 52.090882][ T5083] I/O error, dev nbd0, sector 6 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.090902][ T5083] Buffer I/O error on dev nbd0, logical block 3, async page read [ 52.090981][ T5083] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.091000][ T5083] Buffer I/O error on dev nbd0, logical block 0, async page read [ 52.091067][ T5083] I/O error, dev nbd0, sector 2 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2 [ 52.091086][ T5083] Buffer I/O error on dev nbd0, logical block 1, async page read [ 52.095708][ T5738] ldm_validate_partition_table(): Disk read failed. [ 52.099709][ T5738] Dev nbd0: unable to read RDB block 0 [ 52.103712][ T5738] nbd0: unable to read partition table [ 52.114940][ T5738] ldm_validate_partition_table(): Disk read failed. [ 52.115821][ T5738] Dev nbd0: unable to read RDB block 0 [ 52.124165][ T5738] nbd0: unable to read partition table [ 52.135240][ T5741] Bluetooth: hci3: command tx timeout [ 52.135261][ T5741] Bluetooth: hci2: command tx timeout [ 52.135274][ T5741] Bluetooth: hci1: command tx timeout [ 52.212450][ T5089] Bluetooth: hci0: command tx timeout [ 52.245452][ T5939] ======================================================= [ 52.245452][ T5939] WARNING: The mand mount option has been deprecated and [ 52.245452][ T5939] and is ignored by this kernel. Remove the mand [ 52.245452][ T5939] option from the mount to silence this warning. [ 52.245452][ T5939] ======================================================= [ 52.252489][ T5944] netlink: 260 bytes leftover after parsing attributes in process `syz.1.21'. [ 52.283355][ T5948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=61 sclass=netlink_route_socket pid=5948 comm=syz.0.22 [ 52.389951][ T5958] netlink: 12 bytes leftover after parsing attributes in process `syz.0.22'. [ 52.542706][ T5969] netlink: 260 bytes leftover after parsing attributes in process `syz.0.31'. [ 52.591455][ T5973] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(4) [ 52.591486][ T5973] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 52.593023][ T5973] vhci_hcd vhci_hcd.0: Device attached [ 52.600673][ T5973] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 52.612495][ T5976] vhci_hcd: connection closed [ 52.615212][ T5779] vhci_hcd vhci_hcd.3: stop threads [ 52.615524][ T5779] vhci_hcd vhci_hcd.3: release socket [ 52.615541][ T5779] vhci_hcd vhci_hcd.3: disconnect device [ 52.855995][ T6013] netlink: 260 bytes leftover after parsing attributes in process `syz.0.41'. [ 53.019405][ T6025] ªªªªªª: renamed from vlan0 (while UP) [ 53.050070][ T42] kauditd_printk_skb: 94 callbacks suppressed [ 53.050168][ T42] audit: type=1400 audit(1788646947.803:261): avc: denied { mmap_zero } for pid=6026 comm="syz.0.47" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 53.099541][ T42] audit: type=1400 audit(1788646947.853:262): avc: denied { create } for pid=6029 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.101462][ T42] audit: type=1400 audit(1788646947.853:263): avc: denied { write } for pid=6029 comm="syz.0.48" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 53.107941][ T5821] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 53.151286][ T42] audit: type=1400 audit(1788646947.903:264): avc: denied { mounton } for pid=6031 comm="syz.0.49" path="/syzcgroup/unified/syz0" dev="cgroup2" ino=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 53.172987][ T6033] isofs_fill_super: bread failed, dev=sr0, iso_blknum=32, block=32 [ 53.177947][ T42] audit: type=1400 audit(1788646947.933:265): avc: denied { read write } for pid=6031 comm="syz.0.49" name="fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.178047][ T42] audit: type=1400 audit(1788646947.933:266): avc: denied { open } for pid=6031 comm="syz.0.49" path="/dev/fuse" dev="devtmpfs" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 53.178572][ T42] audit: type=1400 audit(1788646947.933:267): avc: denied { create } for pid=6031 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.178916][ T42] audit: type=1400 audit(1788646947.933:268): avc: denied { getopt } for pid=6031 comm="syz.0.49" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 53.179875][ T6033] netlink: 'syz.0.49': attribute type 21 has an invalid length. [ 53.204270][ T6033] netlink: 'syz.0.49': attribute type 21 has an invalid length. [ 53.213702][ T5779] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.214172][ T5779] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.214238][ T5779] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.214269][ T5779] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 53.231657][ T42] audit: type=1400 audit(1788646947.983:269): avc: denied { append } for pid=6035 comm="syz.3.51" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.248172][ T6036] syzkaller1: entered promiscuous mode [ 53.248239][ T6036] syzkaller1: entered allmulticast mode [ 53.248877][ T42] audit: type=1400 audit(1788646948.003:270): avc: denied { ioctl } for pid=6035 comm="syz.3.51" path="socket:[11538]" dev="sockfs" ino=11538 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 53.255801][ T6036] i2c i2c-1: dtv_property_process_set: SET cmd 0x00000000 undefined [ 53.272313][ T5821] usb 7-1: Using ep0 maxpacket: 8 [ 53.273228][ T5821] usb 7-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 53.274349][ T5821] usb 7-1: config index 0 descriptor too short (expected 301, got 45) [ 53.274372][ T5821] usb 7-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 53.274383][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 53.274395][ T5821] usb 7-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 53.274406][ T5821] usb 7-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 53.274424][ T5821] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.288176][ T6036] netlink: 'syz.3.51': attribute type 10 has an invalid length. [ 53.290771][ T6036] syz_tun: entered promiscuous mode [ 53.298231][ T6036] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 53.486579][ T5821] usb 7-1: usb_control_msg returned -32 [ 53.486666][ T5821] usbtmc 7-1:16.0: can't read capabilities [ 53.609006][ T6056] binder: binder_mmap: 6055 200000000000-200000200000 bad vm_flags failed -1 [ 53.773363][ T9] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.844031][ T6070] usbtmc 7-1:16.0: INDICATOR_PULSE returned 37 [ 53.933641][ T9] usb 5-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.03 [ 53.936400][ T9] usb 5-1: Dual-Role OTG device on HNP port [ 53.936853][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.950097][ T9] gspca_main: spca501-2.14.0 probing 0000:0000 [ 53.954485][ T9] gspca_spca501: reg write: error -32 [ 53.954537][ T9] spca501 5-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 53.954573][ T9] spca501 5-1:1.0: ** replaying previous printk message ** [ 53.954573][ T9] spca501 5-1:1.0: probe with driver spca501 failed with error -22 [ 53.961046][ C0] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 53.969470][ C0] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 53.972609][ C0] CPU: 0 UID: 0 PID: 9 Comm: kworker/0:0 Not tainted syzkaller #0 PREEMPT(full) [ 53.976495][ C0] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 53.980026][ C0] Workqueue: usb_hub_wq hub_event [ 53.981732][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 53.984061][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 53.991086][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 53.993087][ C0] RAX: dffffc0000000000 RBX: ffff88804036c000 RCX: 0000000000000103 [ 53.995669][ C0] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff88804036c128 [ 53.998471][ C0] RBP: ffff88804036c128 R08: 0000000000000004 R09: 0000000000000020 [ 54.001367][ C0] R10: 0000000000000020 R11: 000000000000761b R12: ffff88804036c0f0 [ 54.003901][ C0] R13: ffff88804036c128 R14: ffff88804036c740 R15: 0000000000000001 [ 54.006392][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 54.009213][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.011439][ C0] CR2: 000000110c2b0005 CR3: 000000005b3c5000 CR4: 0000000000352ef0 [ 54.014490][ C0] Call Trace: [ 54.015623][ C0] [ 54.016667][ C0] f_midi2_set_alt+0x444/0x5f0 [ 54.018341][ C0] composite_setup+0x16f8/0x9290 [ 54.019846][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 54.021409][ C0] ? __lock_acquire+0x4c5/0x1ec0 [ 54.023095][ C0] ? __pfx_composite_setup+0x10/0x10 [ 54.024781][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.026475][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.028122][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.029827][ C0] ? configfs_composite_setup+0xfb/0x130 [ 54.031692][ C0] configfs_composite_setup+0xfb/0x130 [ 54.033526][ C0] dummy_timer+0x2039/0x3700 [ 54.035118][ C0] ? trace_pid_list_next+0xd1/0x290 [ 54.036932][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.038792][ C0] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.040603][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 54.042173][ C0] ? mark_held_locks+0x40/0x70 [ 54.043663][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.045473][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 54.047084][ C0] __hrtimer_run_queues+0x462/0x9c0 [ 54.048898][ C0] hrtimer_run_softirq+0x1ca/0x360 [ 54.050716][ C0] handle_softirqs+0x1e6/0x9d0 [ 54.052328][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 54.053979][ C0] ? _raw_spin_unlock+0x28/0x50 [ 54.055453][ C0] ? __hrtimer_rearm_deferred+0x9b/0x7b0 [ 54.057148][ C0] __irq_exit_rcu+0x194/0x210 [ 54.058540][ C0] irq_exit_rcu+0x9/0x30 [ 54.059880][ C0] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 54.061691][ C0] [ 54.062671][ C0] [ 54.063643][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.065717][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 54.068011][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 26 4d 14 f6 48 89 df e8 4e a3 14 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 25 aa 03 f6 65 48 83 3d e4 34 b9 08 00 74 16 5b [ 54.074001][ C0] RSP: 0018:ffffc900000c6880 EFLAGS: 00000246 [ 54.075843][ C0] RAX: 0000000000000002 RBX: ffff88802825c000 RCX: 0000000000000040 [ 54.078256][ C0] RDX: 0000000000000001 RSI: ffffffff8e3eb977 RDI: ffffffff8c620f80 [ 54.080766][ C0] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 54.083297][ C0] R10: 0000000000000001 R11: 0000000000000001 R12: 0000000080000000 [ 54.085739][ C0] R13: ffff88802c2cd478 R14: 0000000000000000 R15: ffff88802c2cd400 [ 54.089099][ C0] dummy_urb_enqueue+0x56c/0x880 [ 54.091048][ C0] ? __device_attach_driver+0xf1/0x320 [ 54.092946][ C0] usb_hcd_submit_urb+0x268/0x2150 [ 54.094648][ C0] ? bus_for_each_drv+0x159/0x1e0 [ 54.096153][ C0] ? __device_attach+0x1e4/0x4d0 [ 54.097816][ C0] ? device_initial_probe+0xaf/0xd0 [ 54.099752][ C0] ? bus_probe_device+0x64/0x160 [ 54.101998][ C0] ? device_add+0x121d/0x1970 [ 54.103860][ C0] ? usb_new_device.part.0+0xcc2/0x1686 [ 54.105771][ C0] ? hub_event.cold+0x1e3/0xe90 [ 54.107405][ C0] usb_submit_urb+0x827/0x19b0 [ 54.108906][ C0] ? __init_swait_queue_head+0xca/0x150 [ 54.110615][ C0] usb_start_wait_urb+0x10e/0x580 [ 54.112118][ C0] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 54.113754][ C0] ? __asan_memset+0x23/0x50 [ 54.115126][ C0] usb_control_msg+0x328/0x4b0 [ 54.116531][ C0] ? __pfx_usb_control_msg+0x10/0x10 [ 54.118155][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.119705][ C0] usb_control_msg_send+0xca/0x130 [ 54.121565][ C0] usb_set_interface+0x9b6/0xe20 [ 54.123435][ C0] snd_usb_midi_v2_create+0x629/0x4070 [ 54.125415][ C0] ? __mutex_unlock_slowpath+0x35d/0x930 [ 54.127269][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.129398][ C0] ? snd_info_create_entry+0x6f/0x400 [ 54.131050][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 54.132678][ C0] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 54.134458][ C0] ? lockdep_init_map_type+0x5c/0x250 [ 54.136235][ C0] ? snd_info_create_entry+0x314/0x400 [ 54.138057][ C0] ? usb_ifnum_to_if+0x16f/0x1d0 [ 54.139795][ C0] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 54.142048][ C0] usb_audio_probe+0xf0b/0x3b10 [ 54.143745][ C0] ? __pfx_usb_audio_probe+0x10/0x10 [ 54.145484][ C0] ? do_raw_spin_lock+0x128/0x260 [ 54.147105][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.148827][ C0] ? mark_held_locks+0x40/0x70 [ 54.150419][ C0] ? _raw_spin_lock_irqsave+0x52/0x60 [ 54.152108][ C0] ? find_held_lock+0x2b/0x80 [ 54.153599][ C0] ? mark_held_locks+0x40/0x70 [ 54.155199][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.157231][ C0] usb_probe_interface+0x386/0x9b0 [ 54.159235][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 54.161657][ C0] ? kernfs_put+0x3f/0x60 [ 54.163441][ C0] ? sysfs_create_link+0x68/0xc0 [ 54.165116][ C0] ? __pfx_usb_probe_interface+0x10/0x10 [ 54.167012][ C0] really_probe+0x241/0xa60 [ 54.168556][ C0] __driver_probe_device+0x210/0x460 [ 54.170253][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.172090][ C0] driver_probe_device+0x4a/0x140 [ 54.173623][ C0] __device_attach_driver+0x1df/0x320 [ 54.175256][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 54.177311][ C0] bus_for_each_drv+0x159/0x1e0 [ 54.178995][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.181164][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.182912][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.184672][ C0] __device_attach+0x1e4/0x4d0 [ 54.186120][ C0] ? __pfx___device_attach+0x10/0x10 [ 54.187722][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.189345][ C0] device_initial_probe+0xaf/0xd0 [ 54.191013][ C0] bus_probe_device+0x64/0x160 [ 54.192661][ C0] device_add+0x121d/0x1970 [ 54.194223][ C0] ? __pfx_device_add+0x10/0x10 [ 54.195877][ C0] ? mark_held_locks+0x40/0x70 [ 54.197440][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.199263][ C0] usb_set_configuration+0xd97/0x1c60 [ 54.201159][ C0] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 54.203594][ C0] usb_generic_driver_probe+0xa1/0xe0 [ 54.205670][ C0] usb_probe_device+0xef/0x400 [ 54.207616][ C0] ? __pfx_usb_probe_device+0x10/0x10 [ 54.209818][ C0] really_probe+0x241/0xa60 [ 54.211792][ C0] __driver_probe_device+0x210/0x460 [ 54.212392][ T5089] Bluetooth: hci1: command tx timeout [ 54.212438][ T5741] Bluetooth: hci2: command tx timeout [ 54.212480][ T5741] Bluetooth: hci3: command tx timeout [ 54.221065][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.223422][ C0] driver_probe_device+0x4a/0x140 [ 54.225489][ C0] __device_attach_driver+0x1df/0x320 [ 54.227743][ C0] ? __pfx___device_attach_driver+0x10/0x10 [ 54.230151][ C0] bus_for_each_drv+0x159/0x1e0 [ 54.232265][ C0] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.234666][ C0] ? lockdep_hardirqs_on+0x7d/0x110 [ 54.236904][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.239299][ C0] __device_attach+0x1e4/0x4d0 [ 54.241329][ C0] ? __pfx___device_attach+0x10/0x10 [ 54.243380][ C0] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.245575][ C0] device_initial_probe+0xaf/0xd0 [ 54.247820][ C0] bus_probe_device+0x64/0x160 [ 54.249863][ C0] device_add+0x121d/0x1970 [ 54.251797][ C0] ? __pfx_device_add+0x10/0x10 [ 54.254080][ C0] ? usb_detect_static_quirks+0x335/0x3e0 [ 54.256251][ C0] usb_new_device.part.0+0xcc2/0x1686 [ 54.257888][ C0] ? __pfx_usb_new_device.part.0+0x10/0x10 [ 54.259690][ C0] ? mark_held_locks+0x40/0x70 [ 54.261586][ C0] hub_event.cold+0x1e3/0xe90 [ 54.263812][ C0] ? __pfx_hub_event+0x10/0x10 [ 54.266122][ C0] ? mark_lock+0xea0/0x1020 [ 54.268092][ C0] ? lock_acquire+0x1d1/0x380 [ 54.270067][ C0] ? process_one_work+0xa2c/0x1b10 [ 54.272226][ C0] ? process_one_work+0x906/0x1b10 [ 54.274396][ C0] ? process_one_work+0x906/0x1b10 [ 54.276371][ C0] process_one_work+0xac7/0x1b10 [ 54.278730][ C0] ? __pfx_process_one_work+0x10/0x10 [ 54.280995][ C0] ? lock_acquire+0x1d1/0x380 [ 54.282558][ C0] ? __pfx_hub_event+0x10/0x10 [ 54.284070][ C0] worker_thread+0x5ef/0xe50 [ 54.285611][ C0] ? kthread+0x13a/0x450 [ 54.287258][ C0] ? __pfx_worker_thread+0x10/0x10 [ 54.289330][ C0] kthread+0x373/0x450 [ 54.291085][ C0] ? __pfx_kthread+0x10/0x10 [ 54.292286][ T5737] Bluetooth: hci0: command tx timeout [ 54.295329][ C0] ret_from_fork+0x730/0xd60 [ 54.297021][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 54.299039][ C0] ? __switch_to+0x800/0x10f0 [ 54.300985][ C0] ? __pfx_kthread+0x10/0x10 [ 54.302556][ C0] ret_from_fork_asm+0x1a/0x30 [ 54.304372][ C0] [ 54.305752][ C0] Modules linked in: [ 54.307279][ C0] ---[ end trace 0000000000000000 ]--- [ 54.309625][ C0] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 54.309667][ C0] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 54.309685][ C0] RSP: 0018:ffffc900000079d8 EFLAGS: 00010002 [ 54.309702][ C0] RAX: dffffc0000000000 RBX: ffff88804036c000 RCX: 0000000000000103 [ 54.309715][ C0] RDX: 00000000000000e6 RSI: ffffffff87f54ff6 RDI: ffff88804036c128 [ 54.309728][ C0] RBP: ffff88804036c128 R08: 0000000000000004 R09: 0000000000000020 [ 54.309740][ C0] R10: 0000000000000020 R11: 000000000000761b R12: ffff88804036c0f0 [ 54.309752][ C0] R13: ffff88804036c128 R14: ffff88804036c740 R15: 0000000000000001 [ 54.309765][ C0] FS: 0000000000000000(0000) GS:ffff8880d5b5f000(0000) knlGS:0000000000000000 [ 54.309799][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.309814][ C0] CR2: 000000110c2b0005 CR3: 000000005b3c5000 CR4: 0000000000352ef0 [ 54.309829][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 54.354317][ C0] Kernel Offset: disabled [ 54.356404][ C0] Rebooting in 86400 seconds..