last executing test programs: 4.398485596s ago: executing program 0 (id=1): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d313113200000000000109022200010100803209040000000000000009040001010000000007058401340201"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000280)={0x84, &(0x7f00000002c0)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000380)={0x84, &(0x7f00000003c0)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000004c0)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000540)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000005c0)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000640)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000006c0)={0x40, 0x21, 0x1, "13"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x1}, 0x0) 4.086282666s ago: executing program 1 (id=2): syz_usb_connect(0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b1000000000001090209000101008032"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.899685594s ago: executing program 3 (id=4): syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x1}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x2}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x3}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x4}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x5}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x6}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x7}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x8}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0x9}}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0x0, &(0x7f0000000200)={{0xa}}) 3.719254562s ago: executing program 2 (id=3): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/class/graphics/fbcon/rotate_all\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='1\x00', 0x2) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./tty1\x00', 0x81b6, 0x401) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tty1\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='hello\x00', 0x6) nanosleep(&(0x7f0000000180)={0x1}, 0x0) 3.302732574s ago: executing program 4 (id=5): r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$6lowpan_enable(r0, &(0x7f0000000400)='1', 0x1) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="040e06010f04000000043e130100ca00000110aaaaaaaaaa00000000000000"], 0x1f) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r1 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) write$6lowpan_control(r1, &(0x7f0000000200)='connect aa:aa:aa:aa:aa:10 1', 0x1b) nanosleep(&(0x7f0000000a00)={0x0, 0x10000000}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt(r2, 0x1, 0x19, &(0x7f0000000600)='bt0\x00', 0x4) sendto$inet6(r2, &(0x7f0000000700)='\x00', 0x1, 0x0, &(0x7f0000000800)={0xa, 0x0, 0x0, @mcast2}, 0x1c) write$6lowpan_control(r1, &(0x7f0000000900)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) 2.91867306s ago: executing program 4 (id=6): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902200001010080fa0904000002080650000705810200020007050202000200"], 0x0) syz_usb_disconnect(r0) 2.757643154s ago: executing program 2 (id=7): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl(r0, 0x8914, &(0x7f0000000700)='lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\t\x00'/40) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./rpc_pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./rpc_pipefs\x00', &(0x7f0000000940)='rpc_pipefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0) write(r4, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d) r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9) r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r6, &(0x7f0000000340)='1\n', 0x2) (async) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) write(r7, &(0x7f00000009c0)='garbage\n', 0x8) nanosleep(&(0x7f0000000380)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00']) 2.462232713s ago: executing program 1 (id=8): r0 = memfd_create(&(0x7f0000000000)='loop0\x00', 0x0) ftruncate(r0, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000005000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = memfd_create(&(0x7f0000000100)='loop1\x00', 0x0) ftruncate(r2, 0x100000) r3 = syz_open_dev$loop(&(0x7f0000005000), 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = memfd_create(&(0x7f0000000200)='loop2\x00', 0x0) ftruncate(r4, 0x100000) r5 = syz_open_dev$loop(&(0x7f0000005000), 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = memfd_create(&(0x7f0000000300)='loop3\x00', 0x0) ftruncate(r6, 0x100000) r7 = syz_open_dev$loop(&(0x7f0000005000), 0x3, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x8000, 0x900000) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000001100)="000000005a00000000000000000000000500000000000100040000000300000000000000000000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r8, 0x40140921, &(0x7f0000002000)="0000000007000000000000000000000006000000") ioctl(r8, 0x40140921, &(0x7f0000002100)="0100000007000000010000000100000006000000") ioctl(r8, 0x40140921, &(0x7f0000002200)="0200000007000000020000000200000006000000") ioctl(r8, 0x40140921, &(0x7f0000002300)="0300000007000000030000000300000000000400") ioctl(r8, 0x40080930, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000003000)='./sys\x00', &(0x7f0000003100)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004000)='./sys/block/md0/md/chunk_size\x00', 0x2, 0x0) write(r9, &(0x7f0000004100)='8192\x00', 0x5) 2.230024582s ago: executing program 1 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000), 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) 2.029448455s ago: executing program 1 (id=10): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, 0x1403, 0x1, 0x70bd2c, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x854}, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0xbebc200}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000200)={0x3, 0x48, 0xfa00, {{0xa, 0x0, 0x0, @local, 0x3}, {0xa, 0x0, 0x0, @remote, 0x3}, r2, 0x3e8}}, 0x50) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000600)={0xc, 0x18, 0xfa00, {&(0x7f0000000700)}}, 0x18) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000400)={0x4, 0x8, 0xfa00, {r2, 0x3e8}}, 0x10) write$RDMA_USER_CM_CMD_GET_EVENT(r1, &(0x7f0000000800)={0xc, 0x18, 0xfa00, {&(0x7f0000000900)}}, 0x18) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000500)={0x6, 0x118, 0xfa00, {{0x6, 0xf, '\x00', 0x0, 0x40, 0x4, 0xa8, 0x3, 0xf, 0x4, 0x1}, r2}}, 0x120) 1.756047835s ago: executing program 3 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, &(0x7f0000000300)) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/i915\x00', 0x0, 0x0) 1.650205626s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001900)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r1, &(0x7f0000001b00)='/nonexistent\n', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f0000001700)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v4,addr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r8, &(0x7f0000001500)='test\x00', 0x4) 1.379807757s ago: executing program 4 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05b10000000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x0) syz_open_dev$evdev(&(0x7f0000000380), 0x3, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) syz_usb_ep_write(r0, 0x81, 0xa, &(0x7f0000000000)="02000000000000000000") 518.260258ms ago: executing program 1 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r0, &(0x7f00000003c0)='1\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r1, &(0x7f0000000540)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r2, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) 301.116761ms ago: executing program 0 (id=15): r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f0000000200)='rxrpc_s\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="0101010101010101", 0x8, r0) r1 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000180)='syz \x00', 0x5) bind$rxrpc(r1, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) listen(r1, 0xa) add_key(&(0x7f0000000300)='rxrpc\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="0000001c00000002000000010101010101010101000000080101010101010101", 0x20, 0xfffffffffffffffe) r2 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f00000003c0)='syz \x00', 0x5) connect$rxrpc(r2, &(0x7f0000000000)=@in4={0x21, 0x34, 0x2, 0x10, {0x2, 0x4e20, @loopback}}, 0x24) sendto$rxrpc(r2, &(0x7f0000000400)='hello', 0x5, 0x0, 0x0, 0x0) 289.173729ms ago: executing program 1 (id=16): r0 = syz_usb_connect(0x0, 0x7c, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026a00030100c000090400000001010000090400010101010000070583034000010904010000010200000904010101010200000b2402010203180144ac00070581010002010904020000010200000904020101010200000b2402010203180144ac0007050201000201"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x2, 0x0) 33.258737ms ago: executing program 0 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r3, r4, r5, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) 0s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv/720p\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/uvc.0/streaming/uncompressed/yuyv\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h/yuyv\x00') symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0x1ff) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.0/control/class/fs/h\x00') symlinkat(&(0x7f0000000640)='./config/usb_gadget/g1/functions/uvc.0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.0/control/class/ss/h\x00') symlinkat(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/uvc.0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/uvc.0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g1/functions/uvc.0/streaming_maxpacket\x00', 0x2, 0x0) write(r0, &(0x7f0000000780)='1023', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000007c0)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000800)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000840)={0x0, 0x5f5e100}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000880), 0x0, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r2, 0xc02c564a, &(0x7f00000008c0)={0x0, 0x56595559}) kernel console output (not intermixed with test programs): [ 59.752825][ T29] audit: type=1400 audit(1785856769.439:128): avc: denied { write } for pid=5585 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.15' (ED25519) to the list of known hosts. [ 67.277927][ T29] audit: type=1400 audit(1785856776.959:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 67.302037][ T29] audit: type=1400 audit(1785856776.989:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.305672][ T5596] cgroup: Unknown subsys name 'net' [ 67.331790][ T29] audit: type=1400 audit(1785856777.019:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 67.482994][ T5596] cgroup: Unknown subsys name 'cpuset' [ 67.490828][ T5596] cgroup: Unknown subsys name 'rlimit' [ 67.593457][ T29] audit: type=1400 audit(1785856777.279:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 67.617209][ T29] audit: type=1400 audit(1785856777.279:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.646857][ T29] audit: type=1400 audit(1785856777.279:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.668822][ T29] audit: type=1400 audit(1785856777.279:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 67.694370][ T29] audit: type=1400 audit(1785856777.299:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 67.723322][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 67.725032][ T29] audit: type=1400 audit(1785856777.299:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 67.756030][ T29] audit: type=1400 audit(1785856777.419:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 68.739864][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 70.880426][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 70.890055][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 70.912121][ T5623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 70.920047][ T5623] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.933872][ T5624] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.942680][ T5624] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 70.943419][ T5625] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.951406][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.958437][ T5625] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 70.971910][ T5627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.972593][ T5625] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 70.980336][ T5624] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 70.988127][ T5625] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.994376][ T5624] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.001780][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.007308][ T5627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 71.016697][ T5624] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 71.022155][ T5627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 71.028584][ T5624] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.036662][ T5627] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.049966][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 71.057812][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.064970][ T5627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 71.073600][ T5627] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 71.075568][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.087791][ T5627] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.091562][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.475964][ T5611] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.483146][ T5611] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.490272][ T5611] bridge_slave_0: entered allmulticast mode [ 72.497296][ T5611] bridge_slave_0: entered promiscuous mode [ 72.538580][ T5611] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.545842][ T5611] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.553162][ T5611] bridge_slave_1: entered allmulticast mode [ 72.560140][ T5611] bridge_slave_1: entered promiscuous mode [ 72.567192][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.574409][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.581720][ T5608] bridge_slave_0: entered allmulticast mode [ 72.588484][ T5608] bridge_slave_0: entered promiscuous mode [ 72.622615][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.629738][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.637431][ T5608] bridge_slave_1: entered allmulticast mode [ 72.644297][ T5608] bridge_slave_1: entered promiscuous mode [ 72.701349][ T5611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.741497][ T5611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.760787][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.774656][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.781815][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.788903][ T5609] bridge_slave_0: entered allmulticast mode [ 72.795894][ T5609] bridge_slave_0: entered promiscuous mode [ 72.818419][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.835567][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.842818][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.849895][ T5609] bridge_slave_1: entered allmulticast mode [ 72.857034][ T5609] bridge_slave_1: entered promiscuous mode [ 72.863833][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.871097][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.878196][ T5622] bridge_slave_0: entered allmulticast mode [ 72.885116][ T5622] bridge_slave_0: entered promiscuous mode [ 72.893525][ T5611] team0: Port device team_slave_0 added [ 72.915016][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.922168][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.929230][ T5610] bridge_slave_0: entered allmulticast mode [ 72.936681][ T5610] bridge_slave_0: entered promiscuous mode [ 72.950102][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.957252][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.964527][ T5622] bridge_slave_1: entered allmulticast mode [ 72.971625][ T5622] bridge_slave_1: entered promiscuous mode [ 72.987641][ T5611] team0: Port device team_slave_1 added [ 73.007421][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.014670][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.022040][ T5610] bridge_slave_1: entered allmulticast mode [ 73.028744][ T5610] bridge_slave_1: entered promiscuous mode [ 73.058390][ T5608] team0: Port device team_slave_0 added [ 73.064573][ T5627] Bluetooth: hci3: command tx timeout [ 73.067108][ T5608] team0: Port device team_slave_1 added [ 73.070583][ T5612] Bluetooth: hci0: command tx timeout [ 73.109963][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.122204][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.132029][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.138987][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.141245][ T5612] Bluetooth: hci2: command tx timeout [ 73.165790][ T5627] Bluetooth: hci1: command tx timeout [ 73.171218][ T5616] Bluetooth: hci4: command tx timeout [ 73.177283][ T5611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.204240][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.215105][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.226064][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.239840][ T5611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.246854][ T5611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.272900][ T5611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.284197][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.291556][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.317799][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.330619][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.360906][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.367849][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.396245][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.449259][ T5609] team0: Port device team_slave_0 added [ 73.456618][ T5622] team0: Port device team_slave_0 added [ 73.478294][ T5610] team0: Port device team_slave_0 added [ 73.485613][ T5609] team0: Port device team_slave_1 added [ 73.492812][ T5622] team0: Port device team_slave_1 added [ 73.515365][ T5610] team0: Port device team_slave_1 added [ 73.541829][ T5611] hsr_slave_0: entered promiscuous mode [ 73.548457][ T5611] hsr_slave_1: entered promiscuous mode [ 73.559429][ T5608] hsr_slave_0: entered promiscuous mode [ 73.565591][ T5608] hsr_slave_1: entered promiscuous mode [ 73.571655][ T5608] debugfs: 'hsr0' already exists in 'hsr' [ 73.577417][ T5608] Cannot create hsr debugfs directory [ 73.615165][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.622345][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.648614][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.667667][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.674687][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.700807][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.720733][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.727668][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.753946][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.765392][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.772568][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.798671][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.815015][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.822013][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.847912][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.864141][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.871142][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.897035][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.072357][ T5609] hsr_slave_0: entered promiscuous mode [ 74.078421][ T5609] hsr_slave_1: entered promiscuous mode [ 74.084552][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 74.090266][ T5609] Cannot create hsr debugfs directory [ 74.108035][ T5622] hsr_slave_0: entered promiscuous mode [ 74.114228][ T5622] hsr_slave_1: entered promiscuous mode [ 74.120123][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 74.125859][ T5622] Cannot create hsr debugfs directory [ 74.136247][ T5610] hsr_slave_0: entered promiscuous mode [ 74.142783][ T5610] hsr_slave_1: entered promiscuous mode [ 74.148691][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 74.154643][ T5610] Cannot create hsr debugfs directory [ 74.444141][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.455199][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.479449][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.488876][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.511933][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.521376][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.542048][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.551305][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.602598][ T5611] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 74.611958][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.619675][ T5611] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 74.629789][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.637960][ T5611] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 74.647345][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.655310][ T5611] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 74.663799][ T5611] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.744859][ T5609] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.753959][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.762460][ T5609] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.771516][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.779484][ T5609] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.789021][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.796713][ T5609] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.805551][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.906163][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.917901][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.926573][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.936251][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.944414][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.953197][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.967389][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.976036][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.035787][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.109203][ T5610] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 75.118524][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.127659][ T5610] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 75.136403][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.144477][ T5610] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 75.151274][ T5616] Bluetooth: hci3: command tx timeout [ 75.151385][ T5612] Bluetooth: hci0: command tx timeout [ 75.165200][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.172900][ T5610] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 75.181654][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.190382][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.200877][ T5611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.209968][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.221965][ T5616] Bluetooth: hci4: command tx timeout [ 75.222160][ T5627] Bluetooth: hci1: command tx timeout [ 75.227740][ T5612] Bluetooth: hci2: command tx timeout [ 75.252200][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.259501][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.282411][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.289481][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.331724][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.346331][ T5611] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.362848][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.369925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.392886][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.400016][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.423009][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.430080][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.438605][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.445674][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.514496][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.589899][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.621357][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.628511][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.677555][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.684691][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.708908][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.793697][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.873811][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.880984][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.942441][ T1168] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.949759][ T1168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.366908][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.493894][ T5608] veth0_vlan: entered promiscuous mode [ 76.529483][ T5608] veth1_vlan: entered promiscuous mode [ 76.565144][ T5611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.601471][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.693745][ T5608] veth0_macvtap: entered promiscuous mode [ 76.734518][ T5608] veth1_macvtap: entered promiscuous mode [ 76.765619][ T5609] veth0_vlan: entered promiscuous mode [ 76.793593][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.803778][ T5611] veth0_vlan: entered promiscuous mode [ 76.820280][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.829692][ T5609] veth1_vlan: entered promiscuous mode [ 76.863767][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.873688][ T5611] veth1_vlan: entered promiscuous mode [ 76.920871][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.937466][ T5609] veth0_macvtap: entered promiscuous mode [ 76.963092][ T5609] veth1_macvtap: entered promiscuous mode [ 76.982649][ T56] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.000026][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.056084][ T5611] veth0_macvtap: entered promiscuous mode [ 77.073922][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.091327][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.101637][ T5611] veth1_macvtap: entered promiscuous mode [ 77.119951][ T5622] veth0_vlan: entered promiscuous mode [ 77.142932][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.177736][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.190853][ T154] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.193470][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.215350][ T5622] veth1_vlan: entered promiscuous mode [ 77.224003][ T5612] Bluetooth: hci0: command tx timeout [ 77.224014][ T5627] Bluetooth: hci3: command tx timeout [ 77.225546][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.250989][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.281630][ T5611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.304843][ T5612] Bluetooth: hci2: command tx timeout [ 77.304858][ T5627] Bluetooth: hci4: command tx timeout [ 77.310895][ T5616] Bluetooth: hci1: command tx timeout [ 77.339374][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.349838][ T154] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.360818][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.382363][ T3285] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.391676][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 77.391689][ T29] audit: type=1400 audit(1785856787.069:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BCvHqD/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 77.426542][ T29] audit: type=1400 audit(1785856787.079:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 77.450304][ T29] audit: type=1400 audit(1785856787.079:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BCvHqD/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 77.451304][ T56] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.476331][ T29] audit: type=1400 audit(1785856787.079:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 77.521338][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.533896][ T29] audit: type=1400 audit(1785856787.079:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BCvHqD/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 77.567574][ T29] audit: type=1400 audit(1785856787.079:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.BCvHqD/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 77.575877][ T5622] veth0_macvtap: entered promiscuous mode [ 77.598646][ T29] audit: type=1400 audit(1785856787.079:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.614962][ T5622] veth1_macvtap: entered promiscuous mode [ 77.627636][ T29] audit: type=1400 audit(1785856787.109:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 77.650716][ T29] audit: type=1400 audit(1785856787.109:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 77.662968][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.677978][ T29] audit: type=1400 audit(1785856787.109:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 77.722391][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.797738][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.811898][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.838773][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.868944][ T5610] veth0_vlan: entered promiscuous mode [ 77.876553][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.887408][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.897825][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.928497][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.929094][ T5610] veth1_vlan: entered promiscuous mode [ 77.944989][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.011650][ T3285] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.024325][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 78.058182][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.068521][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.102614][ T3285] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.115237][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.127394][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.176787][ T5610] veth0_macvtap: entered promiscuous mode [ 78.177546][ T3285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.187276][ T9] usb 1-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice= 0.00 [ 78.192531][ T3285] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.221883][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 78.238508][ T5610] veth1_macvtap: entered promiscuous mode [ 78.260869][ T1120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.310890][ T1120] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.334012][ T9] dvb-usb: found a 'Pinnacle PCTV 310e' in warm state. [ 78.355974][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.364265][ T9] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 78.379114][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.413551][ T9] dvbdev: DVB: registering new adapter (Pinnacle PCTV 310e) [ 78.434224][ T9] usb 1-1: media controller created [ 78.483858][ T3285] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.487466][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 78.532012][ T56] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.545272][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.590858][ T5617] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 78.595823][ T3285] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.595842][ T3285] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.622457][ T9] DVB: Unable to find symbol mt352_attach() [ 78.622481][ T9] dvb-usb: no frontend was attached by 'Pinnacle PCTV 310e' [ 78.634294][ T9] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input5 [ 78.653592][ T9] dvb-usb: schedule remote query interval to 100 msecs. [ 78.653763][ T9] dvb-usb: Pinnacle PCTV 310e successfully initialized and connected. [ 78.668457][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669415][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.669450][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.703789][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.703810][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.066340][ T5803] dvb-usb: error while querying for an remote control event. [ 79.301462][ T5616] Bluetooth: hci0: command tx timeout [ 79.310589][ T5616] Bluetooth: hci3: command tx timeout [ 79.382319][ T5612] Bluetooth: hci4: command tx timeout [ 79.382330][ T5627] Bluetooth: hci1: command tx timeout [ 79.469773][ T5345] dvb-usb: error while querying for an remote control event. [ 79.481194][ T5719] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.665224][ T5719] usb 5-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 79.669012][ T5832] loop0: detected capacity change from 0 to 2048 [ 79.674580][ T5719] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.714574][ T5719] usb-storage 5-1:1.0: USB Mass Storage device detected [ 79.727136][ T5832] loop1: detected capacity change from 0 to 2048 [ 79.753312][ T5719] scsi host1: usb-storage 5-1:1.0 [ 79.767614][ T5832] loop2: detected capacity change from 0 to 2048 [ 79.815982][ T5617] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 79.832082][ T5832] loop3: detected capacity change from 0 to 2048 [ 79.868042][ T5617] usb 4-1: can't read configurations, error -71 [ 79.891219][ T5802] dvb-usb: error while querying for an remote control event. [ 79.982413][ T5807] usb 5-1: USB disconnect, device number 2 [ 80.257805][ T5841] infiniband syz1: set active [ 80.264401][ T5841] infiniband syz1: added veth0 [ 80.284887][ T5841] smbdirect: ib_dev[syz1]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 80.301652][ T5841] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 80.307684][ T5825] dvb-usb: error while querying for an remote control event. [ 80.320336][ T5841] smbdirect: ib_dev[syz1]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 80.425250][ T5841] RDS/IB: syz1: added [ 80.429864][ T5841] smc: adding ib device syz1 with port count 1 [ 80.436864][ T5841] smc: ib device syz1 port 1 has no pnetid [ 81.000814][ T86] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 81.172321][ T86] usb 5-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 81.190529][ T86] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.658934][ T86] wacom 0003:056A:00B1.0001: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 81.684801][ T86] wacom 0003:056A:00B1.0001: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.4-1/input0 [ 81.716226][ T5855] UDC core: g1: couldn't find an available UDC or it's busy [ 81.717001][ T86] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:00B1.0001/input/input6 [ 81.780524][ T9] dvb_usb_m920x 1-1:1.0: probe with driver dvb_usb_m920x failed with error -71 [ 81.789728][ T5825] m920x_read = error: -71 [ 81.805280][ T5825] dvb-usb: error while querying for an remote control event. [ 81.845141][ T9] usb 1-1: USB disconnect, device number 2 [ 81.935460][ T5617] m920x_read = error: -19 [ 81.954392][ T5617] dvb-usb: error while querying for an remote control event. [ 82.090675][ T5807] m920x_read = error: -19 [ 82.096263][ T5807] dvb-usb: error while querying for an remote control event. [ 82.140522][ T5825] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 82.210717][ T5807] m920x_read = error: -19 [ 82.223548][ T5807] dvb-usb: error while querying for an remote control event. [ 82.304107][ T5868] configfs-gadget.g1 gadget.0: uvc: uvc_function_bind() [ 82.311985][ T5868] configfs-gadget.g1 gadget.0: uvc: Unable to allocate streaming EP [ 82.312870][ T5825] usb 2-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 82.329537][ T5825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.351885][ T5807] m920x_read = error: -19 [ 82.360018][ T5807] dvb-usb: error while querying for an remote control event. [ 82.384457][ T5825] snd-ua101 2-1:1.0: sample format descriptor not found [ 82.442215][ T5868] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000e6: 0000 [#1] SMP KASAN NOPTI [ 82.454302][ T5868] KASAN: null-ptr-deref in range [0x0000000000000730-0x0000000000000737] [ 82.462719][ T5868] CPU: 1 UID: 0 PID: 5868 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT(full) [ 82.471808][ T5868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 82.481839][ T5868] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 82.487722][ T5868] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 82.490604][ T5825] m920x_read = error: -19 [ 82.507310][ T5868] RSP: 0018:ffffc90002597830 EFLAGS: 00010202 [ 82.507336][ T5868] RAX: dffffc0000000000 RBX: ffff88802749c158 RCX: ffffc90005c89000 [ 82.507350][ T5868] RDX: 00000000000000e6 RSI: ffffffff87e73786 RDI: ffff88802749c128 [ 82.507363][ T5868] RBP: ffff88802749c150 R08: 0000000000000001 R09: 0000000000000000 [ 82.507375][ T5868] R10: 0000000000000001 R11: ffffffff81000130 R12: 0000000000000020 [ 82.507391][ T5868] R13: ffff88802749c128 R14: ffff88807bbfc920 R15: ffff88802749c000 [ 82.507403][ T5868] FS: 00007fd4926d76c0(0000) GS:ffff888123ed8000(0000) knlGS:0000000000000000 [ 82.507422][ T5868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 82.507436][ T5868] CR2: 00007f055f8f3190 CR3: 000000005944f000 CR4: 00000000003526f0 [ 82.507451][ T5868] Call Trace: [ 82.507458][ T5868] [ 82.507467][ T5868] ? f_midi2_unbind+0x146/0x800 [ 82.507497][ T5868] f_midi2_unbind+0x265/0x800 [ 82.507521][ T5868] ? __pfx_f_midi2_unbind+0x10/0x10 [ 82.507544][ T5868] purge_configs_funcs+0x285/0x510 [ 82.507575][ T5868] configfs_composite_bind+0xf2c/0x1960 [ 82.507606][ T5868] ? kernfs_create_link+0x1bd/0x240 [ 82.507640][ T5868] gadget_bind_driver+0x28c/0xbf0 [ 82.507661][ T5868] ? __pfx_dummy_udc_set_speed+0x10/0x10 [ 82.507685][ T5868] ? __pfx_gadget_bind_driver+0x10/0x10 [ 82.507703][ T5868] really_probe+0x241/0xa60 [ 82.507727][ T5868] __driver_probe_device+0x20e/0x450 [ 82.512237][ T5825] dvb-usb: error while querying for an remote control event. [ 82.518079][ T5868] driver_probe_device+0x4a/0x140 [ 82.518110][ T5868] __driver_attach+0x21f/0x5b0 [ 82.529507][ T29] kauditd_printk_skb: 139 callbacks suppressed [ 82.529519][ T29] audit: type=1400 audit(1785856792.179:301): avc: denied { read } for pid=4960 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 82.533990][ T5868] ? __pfx___driver_attach+0x10/0x10 [ 82.534021][ T5868] bus_for_each_dev+0x13e/0x1d0 [ 82.534044][ T5868] ? __pfx_bus_for_each_dev+0x10/0x10 [ 82.542974][ T29] audit: type=1400 audit(1785856792.179:302): avc: denied { search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.549924][ T5868] ? bus_add_driver+0x2b5/0x5b0 [ 82.549954][ T5868] bus_add_driver+0x305/0x5b0 [ 82.558803][ T29] audit: type=1400 audit(1785856792.179:303): avc: denied { write search } for pid=4960 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.566810][ T5868] driver_register+0x1e2/0x360 [ 82.566842][ T5868] usb_gadget_register_driver_owner+0x132/0x210 [ 82.596765][ T29] audit: type=1400 audit(1785856792.179:304): avc: denied { add_name } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 82.597003][ T5868] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 82.607676][ T29] audit: type=1400 audit(1785856792.179:305): avc: denied { create } for pid=4960 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.612764][ T5868] configfs_write_iter+0x302/0x4e0 [ 82.612795][ T5868] vfs_write+0x6ac/0x1050 [ 82.612826][ T5868] ? __pfx_configfs_write_iter+0x10/0x10 [ 82.829570][ T5868] ? __pfx_vfs_write+0x10/0x10 [ 82.834371][ T5868] ksys_write+0x12a/0x250 [ 82.838689][ T5868] ? __pfx_ksys_write+0x10/0x10 [ 82.843534][ T5868] do_syscall_64+0x115/0x870 [ 82.848118][ T5868] ? clear_bhb_loop+0x40/0x90 [ 82.852792][ T5868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 82.858680][ T5868] RIP: 0033:0x7fd49179e019 [ 82.863080][ T5868] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 82.882678][ T5868] RSP: 002b:00007fd4926d7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 82.891092][ T5868] RAX: ffffffffffffffda RBX: 00007fd491a25fa0 RCX: 00007fd49179e019 [ 82.899052][ T5868] RDX: 000000000000000b RSI: 0000200000000800 RDI: 0000000000000004 [ 82.907007][ T5868] RBP: 00007fd49183500c R08: 0000000000000000 R09: 0000000000000000 [ 82.914963][ T5868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 82.922920][ T5868] R13: 00007fd491a26038 R14: 00007fd491a25fa0 R15: 00007fffddebb2d8 [ 82.930881][ T5868] [ 82.933894][ T5868] Modules linked in: [ 82.937944][ T5825] m920x_read = error: -19 [ 82.942487][ T5825] dvb-usb: error while querying for an remote control event. [ 82.943330][ T5868] ---[ end trace 0000000000000000 ]--- [ 82.958630][ T29] audit: type=1400 audit(1785856792.179:306): avc: denied { append open } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.968725][ T5868] RIP: 0010:f_midi2_free_ep_reqs+0x56/0x2b0 [ 82.986149][ T29] audit: type=1400 audit(1785856792.179:307): avc: denied { getattr } for pid=4960 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 82.988529][ T5868] Code: 85 6a 02 00 00 49 8b 45 00 48 89 44 24 18 48 05 30 07 00 00 48 89 c2 48 89 44 24 20 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <0f> b6 04 02 84 c0 74 08 3c 03 0f 8e b5 01 00 00 48 8b 44 24 18 31 [ 83.031482][ T5868] RSP: 0018:ffffc90002597830 EFLAGS: 00010202 [ 83.037663][ T5868] RAX: dffffc0000000000 RBX: ffff88802749c158 RCX: ffffc90005c89000 [ 83.046149][ T5868] RDX: 00000000000000e6 RSI: ffffffff87e73786 RDI: ffff88802749c128 [ 83.046577][ T992] usb 5-1: USB disconnect, device number 3 [ 83.054368][ T5868] RBP: ffff88802749c150 R08: 0000000000000001 R09: 0000000000000000 [ 83.069597][ T5825] m920x_read = error: -19 [ 83.072683][ T5868] R10: 0000000000000001 R11: ffffffff81000130 R12: 0000000000000020 [ 83.074076][ T5825] dvb-usb: error while querying for an remote control event. [ 83.082022][ T5868] R13: ffff88802749c128 R14: ffff88807bbfc920 R15: ffff88802749c000 [ 83.097432][ T5868] FS: 00007fd4926d76c0(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 83.106465][ T5868] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.113141][ T5868] CR2: 0000001b33601ff8 CR3: 000000005944f000 CR4: 00000000003526f0 [ 83.121188][ T5868] Kernel panic - not syncing: Fatal exception [ 83.127466][ T5868] Kernel Offset: disabled [ 83.131770][ T5868] Rebooting in 86400 seconds..