last executing test programs: 1.661392746s ago: executing program 0 (id=5): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000600)='7', 0x1) 1.661241729s ago: executing program 3 (id=4): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000600000795"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) 1.587068806s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0xa242, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f00000002c0)="6764dd460c66b857008ed82e0f32c4e2bd9c2ac4c2d992141866ba200066ba6100ed66b80b000f00d0c7442400542c8130c744240287000000c7442406000000000f011c24f0f792209b00000f01c8aa", 0x50}], 0x1, 0x1e, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x54}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.586926602s ago: executing program 2 (id=3): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 1.532300781s ago: executing program 1 (id=2): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) 1.45153701s ago: executing program 3 (id=7): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, 0x0, 0x0) 1.450888627s ago: executing program 2 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x04', 0x4) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f00000003c0)='1\n', 0x2) write(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='2', 0x1) write(0xffffffffffffffff, 0x0, 0x0) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 1.370037896s ago: executing program 3 (id=9): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x24040004) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1004c005}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0xa, 0x4e21, 0x80000, @loopback, 0x3}, 0x1c, 0x0}, 0x440e0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.36951886s ago: executing program 1 (id=10): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 1.368761679s ago: executing program 0 (id=11): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r0, 0x6, 0x19, &(0x7f0000000040)=0x8, 0x19) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @empty}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="a11300e3aebb4102000000000034c5d2af03a5f261a35c07d07d371a4402394549d78c3f511bb4793daf4b4e28410e598769487fb27044ece0b4e738d9c7e1ce3aa7a3df2572a082809f40", 0x4b, 0x4040004, 0x0, 0x0) 1.280390285s ago: executing program 1 (id=12): mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) r0 = open(&(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/yuyv/720p/wHeight\x00', 0x241, 0x1ff) write(r0, &(0x7f0000000600)='7', 0x1) 1.279108169s ago: executing program 2 (id=13): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$inet(0x2, 0x3, 0x7f) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_SCAN(r7, 0x0, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[], 0x78) connect$inet(r6, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r4, 0x0, r6, 0x0, 0x8000, 0x0) 1.181189328s ago: executing program 0 (id=14): r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r1, &(0x7f0000000280)='0', 0x1) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000140)={0x3ff, 0x2, 0xb5}) 1.180995984s ago: executing program 1 (id=15): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000600000795"], &(0x7f0000000200)='GPL\x00', 0xe, 0x0, 0x0, 0x0, 0x0, '\x00', r1}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000500)=ANY=[], 0x20) 881.319338ms ago: executing program 1 (id=16): syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) 738.543413ms ago: executing program 0 (id=17): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x2c, r1, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0xc4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24040000}, 0x804) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, 0x0, 0x0) 221.303µs ago: executing program 0 (id=18): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x1}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_IE={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 0s ago: executing program 1 (id=19): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) mkdirat(0xffffffffffffff9c, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) kernel console output (not intermixed with test programs): [ 37.911162][ T42] audit: type=1400 audit(1785903902.829:115): avc: denied { siginh } for pid=5639 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '[localhost]:45281' (ED25519) to the list of known hosts. [ 39.801272][ T42] audit: type=1400 audit(1785903904.739:116): avc: denied { name_bind } for pid=5650 comm="sshd-session" src=30000 scontext=system_u:system_r:sshd_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 41.098458][ T42] kauditd_printk_skb: 2 callbacks suppressed [ 41.098473][ T42] audit: type=1400 audit(1785903906.039:119): avc: denied { write } for pid=5654 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.186481][ T42] audit: type=1400 audit(1785903906.129:120): avc: denied { write } for pid=5657 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.286106][ T42] audit: type=1400 audit(1785903906.229:121): avc: denied { write } for pid=5660 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.355632][ T42] audit: type=1400 audit(1785903906.299:122): avc: denied { write } for pid=5663 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.592287][ T42] audit: type=1400 audit(1785903906.529:123): avc: denied { write } for pid=5666 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.652655][ T42] audit: type=1400 audit(1785903906.589:124): avc: denied { write } for pid=5669 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.849220][ T42] audit: type=1400 audit(1785903906.789:125): avc: denied { write } for pid=5672 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.901358][ T42] audit: type=1400 audit(1785903906.839:126): avc: denied { write } for pid=5675 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 41.986296][ T42] audit: type=1400 audit(1785903906.929:127): avc: denied { write } for pid=5678 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.039028][ T42] audit: type=1400 audit(1785903906.979:128): avc: denied { write } for pid=5681 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.749109][ T5651] cgroup: Unknown subsys name 'net' [ 42.959135][ T5651] cgroup: Unknown subsys name 'cpuset' [ 42.966170][ T5651] cgroup: Unknown subsys name 'rlimit' [ 43.203394][ T5699] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 44.107743][ T5651] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.549875][ T42] kauditd_printk_skb: 33 callbacks suppressed [ 48.549894][ T42] audit: type=1400 audit(1785903913.489:162): avc: denied { execmem } for pid=5733 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 48.814972][ T42] audit: type=1400 audit(1785903913.759:163): avc: denied { create } for pid=5737 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.822892][ T42] audit: type=1400 audit(1785903913.759:165): avc: denied { read write } for pid=5738 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.834255][ T42] audit: type=1400 audit(1785903913.759:164): avc: denied { read write } for pid=5737 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.844006][ T42] audit: type=1400 audit(1785903913.759:166): avc: denied { open } for pid=5737 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.853696][ T42] audit: type=1400 audit(1785903913.759:167): avc: denied { open } for pid=5738 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 48.860992][ T42] audit: type=1400 audit(1785903913.769:168): avc: denied { ioctl } for pid=5740 comm="syz-executor" path="socket:[3877]" dev="sockfs" ino=3877 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 48.865394][ T5749] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 48.872709][ T5749] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 48.876531][ T5749] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 48.878570][ T5750] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 48.880188][ T5754] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 48.884581][ T5750] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 48.886494][ T5754] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 48.889002][ T5750] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 48.891624][ T5749] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 48.892140][ T5756] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 48.892505][ T5754] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 48.892995][ T5756] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 48.893066][ T5754] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 48.894967][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 48.898664][ T5749] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 48.900373][ T5750] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 48.903133][ T5749] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 48.906963][ T5750] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 48.909321][ T42] audit: type=1400 audit(1785903913.849:169): avc: denied { read } for pid=5740 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.917945][ T5754] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 48.920100][ T42] audit: type=1400 audit(1785903913.849:170): avc: denied { open } for pid=5740 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 48.922838][ T5754] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 48.944675][ T42] audit: type=1400 audit(1785903913.849:171): avc: denied { mounton } for pid=5740 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 49.390547][ T5739] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.393734][ T5739] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.396619][ T5739] bridge_slave_0: entered allmulticast mode [ 49.399313][ T5739] bridge_slave_0: entered promiscuous mode [ 49.413770][ T5739] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.416822][ T5739] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.419766][ T5739] bridge_slave_1: entered allmulticast mode [ 49.423847][ T5739] bridge_slave_1: entered promiscuous mode [ 49.455117][ T5739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.461627][ T5739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 49.519239][ T5739] team0: Port device team_slave_0 added [ 49.523844][ T5739] team0: Port device team_slave_1 added [ 49.609673][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 49.612267][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.622540][ T5739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 49.652826][ T5739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 49.655403][ T5739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 49.665533][ T5739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 49.790735][ T5739] hsr_slave_0: entered promiscuous mode [ 49.794406][ T5739] hsr_slave_1: entered promiscuous mode [ 49.865997][ T5737] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.869351][ T5737] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.872465][ T5737] bridge_slave_0: entered allmulticast mode [ 49.876834][ T5737] bridge_slave_0: entered promiscuous mode [ 49.907548][ T5737] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.910924][ T5737] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.914333][ T5737] bridge_slave_1: entered allmulticast mode [ 49.918276][ T5737] bridge_slave_1: entered promiscuous mode [ 49.985815][ T5737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 49.997314][ T5738] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.000504][ T5738] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.003661][ T5738] bridge_slave_0: entered allmulticast mode [ 50.007516][ T5738] bridge_slave_0: entered promiscuous mode [ 50.012601][ T5738] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.015803][ T5738] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.018845][ T5738] bridge_slave_1: entered allmulticast mode [ 50.022812][ T5738] bridge_slave_1: entered promiscuous mode [ 50.034978][ T5737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.113187][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.116349][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.119352][ T5740] bridge_slave_0: entered allmulticast mode [ 50.123222][ T5740] bridge_slave_0: entered promiscuous mode [ 50.128597][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.131639][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.135224][ T5740] bridge_slave_1: entered allmulticast mode [ 50.139340][ T5740] bridge_slave_1: entered promiscuous mode [ 50.145438][ T5738] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.149760][ T5737] team0: Port device team_slave_0 added [ 50.152966][ T5737] team0: Port device team_slave_1 added [ 50.182334][ T5738] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.237619][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.240367][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.248841][ T5737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.258003][ T5737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.260166][ T5737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.268237][ T5737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.274630][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 50.279610][ T5738] team0: Port device team_slave_0 added [ 50.297687][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 50.303220][ T5738] team0: Port device team_slave_1 added [ 50.342824][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.346329][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.357028][ T5738] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.372014][ T5738] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.375030][ T5738] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.385495][ T5738] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.411293][ T5740] team0: Port device team_slave_0 added [ 50.422698][ T5740] team0: Port device team_slave_1 added [ 50.443983][ T5737] hsr_slave_0: entered promiscuous mode [ 50.446398][ T5737] hsr_slave_1: entered promiscuous mode [ 50.448536][ T5737] debugfs: 'hsr0' already exists in 'hsr' [ 50.450596][ T5737] Cannot create hsr debugfs directory [ 50.510659][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 50.513904][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.524714][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 50.533636][ T5738] hsr_slave_0: entered promiscuous mode [ 50.535923][ T5738] hsr_slave_1: entered promiscuous mode [ 50.537986][ T5738] debugfs: 'hsr0' already exists in 'hsr' [ 50.539764][ T5738] Cannot create hsr debugfs directory [ 50.554630][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 50.556884][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 50.564889][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 50.667235][ T5740] hsr_slave_0: entered promiscuous mode [ 50.670477][ T5740] hsr_slave_1: entered promiscuous mode [ 50.673565][ T5740] debugfs: 'hsr0' already exists in 'hsr' [ 50.676258][ T5740] Cannot create hsr debugfs directory [ 50.679459][ T5739] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 50.690195][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.719035][ T5739] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 50.726249][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.732517][ T5739] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 50.738039][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.740944][ T5739] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 50.746471][ T5739] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.904330][ T5754] Bluetooth: hci3: command tx timeout [ 50.930841][ T5737] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 50.934972][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 50.937709][ T5737] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 50.941397][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 50.945707][ T5737] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 50.950160][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 50.964635][ T5737] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 50.969477][ T5737] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 50.983678][ T5754] Bluetooth: hci1: command tx timeout [ 50.994276][ T5754] Bluetooth: hci0: command tx timeout [ 50.994288][ T64] Bluetooth: hci2: command tx timeout [ 51.024325][ T5738] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 51.028855][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.036692][ T5738] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 51.041343][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.044297][ T5738] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 51.048361][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.051082][ T5738] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 51.056056][ T5738] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.131249][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 51.137756][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 51.141376][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 51.148407][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 51.160883][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 51.166230][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 51.172894][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 51.178578][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 51.221575][ T5739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.235825][ T5737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.278077][ T5739] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.291357][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.294608][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.302547][ T5737] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.311401][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.314489][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.327688][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.330577][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.347043][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.349851][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.367475][ T5738] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.399321][ T5738] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.435645][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.438158][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.446576][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 51.463923][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.466974][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.496284][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 51.510730][ T40] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.513091][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.521843][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.524884][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.572642][ T5740] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 51.750445][ T5737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.761900][ T5739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.799844][ T5737] veth0_vlan: entered promiscuous mode [ 51.812598][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.826425][ T5737] veth1_vlan: entered promiscuous mode [ 51.845520][ T5739] veth0_vlan: entered promiscuous mode [ 51.879658][ T5737] veth0_macvtap: entered promiscuous mode [ 51.885076][ T5740] veth0_vlan: entered promiscuous mode [ 51.888561][ T5739] veth1_vlan: entered promiscuous mode [ 51.894581][ T5737] veth1_macvtap: entered promiscuous mode [ 51.911386][ T5738] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 51.924423][ T5740] veth1_vlan: entered promiscuous mode [ 51.939701][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.958502][ T5737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.986965][ T5739] veth0_macvtap: entered promiscuous mode [ 52.001503][ T5738] veth0_vlan: entered promiscuous mode [ 52.015061][ T5740] veth0_macvtap: entered promiscuous mode [ 52.019153][ T5739] veth1_macvtap: entered promiscuous mode [ 52.029071][ T5738] veth1_vlan: entered promiscuous mode [ 52.037803][ T5740] veth1_macvtap: entered promiscuous mode [ 52.060050][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.088218][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.091272][ T5739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.091919][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.097814][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.116796][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.136775][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.139525][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.164837][ T5738] veth0_macvtap: entered promiscuous mode [ 52.185644][ T5738] veth1_macvtap: entered promiscuous mode [ 52.217575][ T5737] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 52.224123][ T5845] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.238337][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.242692][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.251660][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 52.263787][ T5738] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 52.278309][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.287823][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.322279][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.326458][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.351272][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.357952][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.387941][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.397894][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.404042][ T5800] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.455033][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.462347][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.483846][ T5800] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.487827][ T5800] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.543846][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.555402][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.565349][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.594683][ T5800] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.624112][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.633868][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.641075][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.695935][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.715909][ T5845] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.720203][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.721399][ T5905] sound umpC3D1: No UMP Group is found in FB [ 52.723955][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.729544][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 52.905399][ T5909] kvm: kvm [5907]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0xc2) = 0xe940 [ 52.968326][ T5927] faux_driver vgem: [drm] Unknown color mode 181; guessing buffer size. [ 53.000952][ T5754] Bluetooth: hci3: command tx timeout [ 53.034830][ T3272] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 53.396484][ T5754] Bluetooth: hci0: command tx timeout [ 53.399118][ T5097] Bluetooth: hci2: command tx timeout [ 53.399158][ T64] Bluetooth: hci1: command tx timeout [ 54.156123][ T3272] usb 5-1: Dual-Role OTG device on HNP port [ 54.162904][ T3272] usb 5-1: New USB device found, idVendor=0004, idProduct=0000, bcdDevice= 7.02 [ 54.170466][ T3272] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.199897][ C2] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 54.204957][ C2] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 54.208587][ C2] CPU: 2 UID: 0 PID: 3272 Comm: kworker/2:2 Not tainted syzkaller #0 PREEMPT(full) [ 54.212540][ C2] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 54.216758][ C2] Workqueue: usb_hub_wq hub_event [ 54.218904][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 54.221416][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 54.229358][ C2] RSP: 0018:ffffc900006489e8 EFLAGS: 00010002 [ 54.231906][ C2] RAX: dffffc0000000000 RBX: ffff888055898000 RCX: ffffffff87e73e89 [ 54.235215][ C2] RDX: 00000000000000e6 RSI: ffffffff87e73cc6 RDI: ffff888055898128 [ 54.238514][ C2] RBP: ffff888055898128 R08: 0000000000000004 R09: 0000000000000020 [ 54.241836][ C2] R10: 0000000000000020 R11: 000000000000758b R12: ffff8880558980f0 [ 54.245142][ C2] R13: ffff888055898128 R14: ffff888055898740 R15: 0000000000000001 [ 54.248444][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 54.252153][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.254961][ C2] CR2: 0000000000000000 CR3: 000000004a3c1000 CR4: 0000000000352ef0 [ 54.258301][ C2] Call Trace: [ 54.259739][ C2] [ 54.260954][ C2] f_midi2_set_alt+0x444/0x5f0 [ 54.262989][ C2] composite_setup+0x16f8/0x9290 [ 54.265138][ C2] ? __lock_acquire+0x49f/0x1a40 [ 54.267280][ C2] ? slab_free_after_rcu_debug+0x4c/0x170 [ 54.269711][ C2] ? __pfx_composite_setup+0x10/0x10 [ 54.271972][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.274251][ C2] ? do_raw_spin_lock+0x128/0x260 [ 54.275929][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.277997][ C2] ? configfs_composite_setup+0xfb/0x130 [ 54.280362][ C2] configfs_composite_setup+0xfb/0x130 [ 54.282675][ C2] dummy_timer+0x2045/0x36f0 [ 54.284734][ C2] ? do_raw_spin_lock+0x128/0x260 [ 54.286869][ C2] ? find_held_lock+0x2b/0x80 [ 54.288866][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.291248][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.293620][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.296103][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.298480][ C2] ? __pfx_debug_object_deactivate+0x10/0x10 [ 54.301028][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 54.303153][ C2] ? mark_held_locks+0x40/0x70 [ 54.305224][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.307687][ C2] ? __pfx_dummy_timer+0x10/0x10 [ 54.309734][ C2] __hrtimer_run_queues+0x462/0x9c0 [ 54.311851][ C2] hrtimer_run_softirq+0x17d/0x2c0 [ 54.313951][ C2] handle_softirqs+0x1ea/0x9b0 [ 54.315904][ C2] ? __pfx_handle_softirqs+0x10/0x10 [ 54.318191][ C2] ? _raw_spin_unlock+0x28/0x50 [ 54.320286][ C2] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 54.322661][ C2] __irq_exit_rcu+0x162/0x210 [ 54.324698][ C2] irq_exit_rcu+0x9/0x30 [ 54.326523][ C2] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 54.328882][ C2] [ 54.330144][ C2] [ 54.331412][ C2] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 54.333968][ C2] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 54.336689][ C2] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 f6 d0 27 f6 48 89 df e8 7e 20 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 05 2e 17 f6 65 8b 05 4e 57 a6 08 85 c0 74 16 5b [ 54.344760][ C2] RSP: 0018:ffffc90025bae928 EFLAGS: 00000246 [ 54.347321][ C2] RAX: 0000000000000002 RBX: ffff88802c4ac000 RCX: 0000000000000040 [ 54.350628][ C2] RDX: 0000000000000000 RSI: ffffffff8e1a81ca RDI: ffffffff8c402680 [ 54.353965][ C2] RBP: 0000000000000246 R08: 0000000000000001 R09: 0000000000000000 [ 54.357066][ C2] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000080000000 [ 54.360183][ C2] R13: ffff88802d1a8478 R14: 0000000000000000 R15: ffff88802d1a8400 [ 54.363387][ C2] dummy_urb_enqueue+0x56c/0x880 [ 54.365540][ C2] ? bus_for_each_drv+0x91/0x1e0 [ 54.367624][ C2] usb_hcd_submit_urb+0x268/0x2150 [ 54.369778][ C2] ? __device_attach+0x1e4/0x4d0 [ 54.371870][ C2] ? device_initial_probe+0xaf/0xd0 [ 54.374104][ C2] ? bus_probe_device+0x64/0x160 [ 54.376198][ C2] ? device_add+0x121d/0x1970 [ 54.378193][ C2] ? usb_new_device.cold+0x685/0x115c [ 54.380455][ C2] ? hub_event+0x30a3/0x4a60 [ 54.382401][ C2] ? process_one_work+0xa23/0x1940 [ 54.384573][ C2] usb_submit_urb+0x827/0x19b0 [ 54.386596][ C2] ? __init_swait_queue_head+0xca/0x150 [ 54.388949][ C2] usb_start_wait_urb+0x10e/0x580 [ 54.391078][ C2] ? __pfx_usb_start_wait_urb+0x10/0x10 [ 54.393407][ C2] ? trace_kmalloc+0xeb/0x110 [ 54.395436][ C2] ? __asan_memset+0x23/0x50 [ 54.397434][ C2] usb_control_msg+0x328/0x4b0 [ 54.399471][ C2] ? __pfx_usb_control_msg+0x10/0x10 [ 54.401681][ C2] ? _raw_spin_unlock_irq+0x23/0x50 [ 54.403893][ C2] usb_control_msg_send+0xca/0x130 [ 54.406062][ C2] usb_set_interface+0x9b6/0xe20 [ 54.408117][ C2] snd_usb_midi_v2_create+0x629/0x4070 [ 54.410421][ C2] ? __mutex_unlock_slowpath+0x35d/0x930 [ 54.412818][ C2] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 54.415399][ C2] ? snd_info_create_entry+0x6f/0x400 [ 54.417663][ C2] ? lockdep_init_map_type+0x5c/0x250 [ 54.419914][ C2] ? __pfx_snd_usb_midi_v2_create+0x10/0x10 [ 54.422411][ C2] ? snd_info_create_entry+0x314/0x400 [ 54.424723][ C2] ? usb_ifnum_to_if+0x16f/0x1d0 [ 54.426807][ C2] snd_usb_create_stream.isra.0+0x386/0x4d0 [ 54.429327][ C2] usb_audio_probe+0xf05/0x3b10 [ 54.431385][ C2] ? __pfx_usb_audio_probe+0x10/0x10 [ 54.433431][ C2] ? do_raw_spin_lock+0x128/0x260 [ 54.435495][ C2] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 54.437773][ C2] ? mark_held_locks+0x40/0x70 [ 54.439759][ C2] ? _raw_spin_lock_irqsave+0x52/0x60 [ 54.442003][ C2] ? mark_held_locks+0x40/0x70 [ 54.443925][ C2] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 54.446379][ C2] usb_probe_interface+0x303/0x8f0 [ 54.448561][ C2] ? __pfx_usb_probe_interface+0x10/0x10 [ 54.450908][ C2] really_probe+0x241/0xa60 [ 54.452843][ C2] __driver_probe_device+0x20e/0x450 [ 54.455105][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.457581][ C2] driver_probe_device+0x4a/0x140 [ 54.459648][ C2] __device_attach_driver+0x1df/0x320 [ 54.461855][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 54.464312][ C2] bus_for_each_drv+0x159/0x1e0 [ 54.466303][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.468503][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 54.470609][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.473026][ C2] __device_attach+0x1e4/0x4d0 [ 54.475090][ C2] ? __pfx___device_attach+0x10/0x10 [ 54.477333][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.479521][ C2] device_initial_probe+0xaf/0xd0 [ 54.481657][ C2] bus_probe_device+0x64/0x160 [ 54.483689][ C2] device_add+0x121d/0x1970 [ 54.485605][ C2] ? __pfx_device_add+0x10/0x10 [ 54.487664][ C2] ? mark_held_locks+0x40/0x70 [ 54.489683][ C2] usb_set_configuration+0xd97/0x1c60 [ 54.491918][ C2] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 54.494481][ C2] usb_generic_driver_probe+0xa1/0xe0 [ 54.496694][ C2] usb_probe_device+0xef/0x400 [ 54.498701][ C2] ? __pfx_usb_probe_device+0x10/0x10 [ 54.500976][ C2] really_probe+0x241/0xa60 [ 54.502894][ C2] __driver_probe_device+0x20e/0x450 [ 54.505150][ C2] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 54.507629][ C2] driver_probe_device+0x4a/0x140 [ 54.509756][ C2] __device_attach_driver+0x1df/0x320 [ 54.511987][ C2] ? __pfx___device_attach_driver+0x10/0x10 [ 54.514493][ C2] bus_for_each_drv+0x159/0x1e0 [ 54.516521][ C2] ? __pfx_bus_for_each_drv+0x10/0x10 [ 54.518722][ C2] ? lockdep_hardirqs_on+0x78/0x100 [ 54.520915][ C2] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 54.523302][ C2] __device_attach+0x1e4/0x4d0 [ 54.525332][ C2] ? __pfx___device_attach+0x10/0x10 [ 54.527495][ C2] ? do_raw_spin_unlock+0x145/0x1e0 [ 54.529654][ C2] device_initial_probe+0xaf/0xd0 [ 54.531694][ C2] bus_probe_device+0x64/0x160 [ 54.533737][ C2] device_add+0x121d/0x1970 [ 54.535632][ C2] ? __pfx_device_add+0x10/0x10 [ 54.537661][ C2] ? usb_detect_static_quirks+0x335/0x3e0 [ 54.540001][ C2] usb_new_device.cold+0x685/0x115c [ 54.541985][ C2] ? _mutex_trylock_nest_lock+0x241/0x310 [ 54.543879][ C2] ? __pfx_usb_new_device+0x10/0x10 [ 54.545594][ C2] ? mark_held_locks+0x40/0x70 [ 54.547219][ C2] hub_event+0x30a3/0x4a60 [ 54.548722][ C2] ? __pfx_hub_event+0x10/0x10 [ 54.550288][ C2] ? debug_object_deactivate+0x2e4/0x3b0 [ 54.552222][ C2] ? rcu_is_watching+0x12/0xc0 [ 54.553893][ C2] process_one_work+0xa23/0x1940 [ 54.555522][ C2] ? __pfx_process_one_work+0x10/0x10 [ 54.557360][ C2] ? __pfx_hub_event+0x10/0x10 [ 54.558924][ C2] worker_thread+0x5ef/0xe50 [ 54.560579][ C2] ? __pfx_worker_thread+0x10/0x10 [ 54.562250][ C2] ? kthread+0x13a/0x450 [ 54.563718][ C2] ? __pfx_worker_thread+0x10/0x10 [ 54.565487][ C2] kthread+0x370/0x450 [ 54.566899][ C2] ? __pfx_kthread+0x10/0x10 [ 54.568434][ C2] ret_from_fork+0x72b/0xd50 [ 54.569997][ C2] ? __pfx_ret_from_fork+0x10/0x10 [ 54.571713][ C2] ? __switch_to+0x800/0x10f0 [ 54.573236][ C2] ? __pfx_kthread+0x10/0x10 [ 54.574842][ C2] ret_from_fork_asm+0x1a/0x30 [ 54.576447][ C2] [ 54.577650][ C2] Modules linked in: [ 54.578944][ C2] ---[ end trace 0000000000000000 ]--- [ 54.580790][ C2] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 54.583090][ C2] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 54.590913][ C2] RSP: 0018:ffffc900006489e8 EFLAGS: 00010002 [ 54.593381][ C2] RAX: dffffc0000000000 RBX: ffff888055898000 RCX: ffffffff87e73e89 [ 54.596233][ C2] RDX: 00000000000000e6 RSI: ffffffff87e73cc6 RDI: ffff888055898128 [ 54.599513][ C2] RBP: ffff888055898128 R08: 0000000000000004 R09: 0000000000000020 [ 54.602754][ C2] R10: 0000000000000020 R11: 000000000000758b R12: ffff8880558980f0 [ 54.606046][ C2] R13: ffff888055898128 R14: ffff888055898740 R15: 0000000000000001 [ 54.609299][ C2] FS: 0000000000000000(0000) GS:ffff8880d5fd8000(0000) knlGS:0000000000000000 [ 54.612952][ C2] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.615702][ C2] CR2: 0000000000000000 CR3: 000000004a3c1000 CR4: 0000000000352ef0 [ 54.618973][ C2] Kernel panic - not syncing: Fatal exception in interrupt [ 54.622730][ C2] Kernel Offset: disabled [ 54.624576][ C2] Rebooting in 86400 seconds..