last executing test programs: 10.938979571s ago: executing program 2 (id=16): syz_usb_connect(0x0, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff404020002400010102030109023c0001010080fa0904000006ffffff00070581020002000705020200020007058303400001070504034000010705850100020107050601000201"], 0x0) clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r0 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r0, 0x5446, 0x0) 9.266668811s ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='snd_hda_intel\x00', 0xe) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/snd_hda_intel/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:00.0\x00', 0xd) 9.16664321s ago: executing program 3 (id=15): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) read(r2, &(0x7f0000000018), 0x8) read(r3, &(0x7f0000000020), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 8.249131377s ago: executing program 3 (id=18): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x19}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022190000000600ff0901a101150026ff00750895400901810209019102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022190000000600ff0901a101150026ff00750895400901810209019102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022190000000600ff0901a101150026ff00750895400901810209019102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0022190000000600ff0901a101150026ff00750895400901810209019102c0"], 0x0}, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="20014000"/70], 0x0}) 7.729360037s ago: executing program 2 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) write(0xffffffffffffffff, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='dwc3-haps\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='dwc3-haps\x00', 0x9) 7.727568337s ago: executing program 2 (id=30): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000102030109022e0001010000000904000004ffffff0007058102000200070502020002000705830200020007050402000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0xc0, 0x0, 0xf, "0f00000100"/15}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 5.189898152s ago: executing program 3 (id=27): r0 = syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c800000010102030109022e0001010080fa0904000004ffffff0007058103400001070501034000010705820140000107050601400001"], 0x0) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000080)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f00000000c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000100)) nanosleep(&(0x7f0000000300)={0x3}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000400), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc1105513, &(0x7f0000000500)={{0xc}, 0x0, [0x10, 0x10]}) 4.690204931s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='1000\x00', 0x4, 0x0) pwrite64(r0, &(0x7f0000000000)='0\x00', 0x1, 0x0) 4.68988712s ago: executing program 2 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001000000010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0xc, &(0x7f0000001100)={0x0, 0x0, 0x40, "0100"/96}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.667883294s ago: executing program 1 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x0499\n', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x1000\n', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/midi2.0/process_ump\x00', 0x2, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/direction\x00', 0x2, 0x0) write(r3, &(0x7f00000003c0)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi2.0/ep.0/block.0/active\x00', 0x2, 0x0) write(r4, &(0x7f0000000440)='1\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/midi2.0/ep.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/direction\x00', 0x2, 0x0) write(r5, &(0x7f0000000540)='2\n', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/midi2.0/ep.1/block.0/active\x00', 0x2, 0x0) write(r6, &(0x7f00000005c0)='1\n', 0x2) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='dummy_udc.0\n', 0xc) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 3.145796496s ago: executing program 1 (id=35): r0 = syz_usb_connect(0x2, 0x49, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cc1769190001010203010902370001010080fa0904000000ffffff000904000104ffffff0007058102400000070501024000000705820100020107050601000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000300)=""/64) syz_usb_ep_write(r0, 0x81, 0xf, &(0x7f0000000100)="010000000001010101010101010100") nanosleep(&(0x7f0000000200)={0x0, 0x10000000}, 0x0) syz_usb_disconnect(r0) 2.130610405s ago: executing program 0 (id=36): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000100)={0x0, 0x989680}, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) 2.060584255s ago: executing program 3 (id=37): r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') r1 = openat(r0, &(0x7f0000000040)='net\x00', 0x0, 0x0) setns(r1, 0x40000000) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x38, 0x1403, 0x5, 0x0, 0x0, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband/rxe0/node_desc\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='new_node_desc\x00', 0xe) 1.850421533s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001900)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r4 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r5 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r6, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs\x00', 0x0, &(0x7f0000001300)='nolock,v4,addr=127.0.0.1\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r7, &(0x7f0000001500)='test\x00', 0x4) 1.648369486s ago: executing program 1 (id=39): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000080)='./sys/module/zswap/parameters/compressor\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='zstd\x00', 0x4) mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r1, &(0x7f0000000000), 0x10000) r2 = eventfd(0x11111111) r3 = eventfd(0x22222222) read(r2, &(0x7f0000000008), 0x8) read(r3, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 1.647379802s ago: executing program 1 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/resource1\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:02.0/resource2\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:04.0/resource0\x00', 0x2, 0x0) pwrite64(r3, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120) write(0xffffffffffffffff, &(0x7f0000000400)='0000:00:02.0\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/devices/0000:00:04.0/driver/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000500)='0000:00:04.0\x00', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0) write(r5, &(0x7f0000000600)='dwc3-haps\x00', 0x9) openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000600)='dwc3-haps\x00', 0x9) 1.597843368s ago: executing program 2 (id=41): r0 = memfd_create(&(0x7f0000000000)='loop0\x00', 0x0) ftruncate(r0, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000005000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = memfd_create(&(0x7f0000000100)='loop1\x00', 0x0) ftruncate(r2, 0x100000) r3 = syz_open_dev$loop(&(0x7f0000005000), 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = memfd_create(&(0x7f0000000200)='loop2\x00', 0x0) ftruncate(r4, 0x100000) r5 = syz_open_dev$loop(&(0x7f0000005000), 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = memfd_create(&(0x7f0000000300)='loop3\x00', 0x0) ftruncate(r6, 0x100000) r7 = syz_open_dev$loop(&(0x7f0000005000), 0x3, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x8000, 0x900) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000001100)="000000005a00000000000000000000000500000000000100040000000300000000000000000000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r8, 0x40140921, &(0x7f0000002000)="0000000007000000000000000000000006000000") ioctl(r8, 0x40140921, &(0x7f0000002100)="0100000007000000010000000100000006000000") ioctl(r8, 0x40140921, &(0x7f0000002200)="0200000007000000020000000200000006000000") ioctl(r8, 0x40140921, &(0x7f0000002300)="0300000007000000030000000300000000000400") ioctl(r8, 0x40080930, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000003000)='./sys\x00', &(0x7f0000003100)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004000)='./sys/block/md0/md/chunk_size\x00', 0x2, 0x0) write(r9, &(0x7f0000004100)='8192\x00', 0x5) 1.550445484s ago: executing program 1 (id=42): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000001810d80402c00000000000010902220001010080320904000001030000000921110100012232000705810308000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022350000000600ff0901a10185110902150026ff0075089502810285210903150026ff0075089501810285920904150026ff00750895019102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.550242889s ago: executing program 2 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='freeze\n\x00', 0x7) 1.498794896s ago: executing program 3 (id=44): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407f1801020000010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x81, 0xd8, &(0x7f0000000100)="68020000d800000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/212) 200.301177ms ago: executing program 0 (id=45): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000080)='disk\n', 0x5) 150.779768ms ago: executing program 0 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='mem\n', 0x4) 150.556597ms ago: executing program 0 (id=47): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/my_zoned_dev\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nullb/my_zoned_dev/memory_backed\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_zoned_dev/zoned\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nullb/my_zoned_dev/power\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./dev\x00', &(0x7f0000000340)='devtmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/my_zoned_dev\x00', 0x2, 0x0) read(r3, &(0x7f0000000400), 0x200) 0s ago: executing program 0 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) kernel console output (not intermixed with test programs): [ 44.087215][ T42] audit: type=1400 audit(1785868501.584:120): avc: denied { write } for pid=5657 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '[localhost]:47356' (ED25519) to the list of known hosts. [ 48.730874][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.730892][ T42] audit: type=1400 audit(1785868506.234:141): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.744148][ T42] audit: type=1400 audit(1785868506.244:142): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.748973][ T5716] cgroup: Unknown subsys name 'net' [ 48.757657][ T42] audit: type=1400 audit(1785868506.264:143): avc: denied { unmount } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.890514][ T5716] cgroup: Unknown subsys name 'cpuset' [ 48.896939][ T5716] cgroup: Unknown subsys name 'rlimit' [ 49.078693][ T42] audit: type=1400 audit(1785868506.584:144): avc: denied { setattr } for pid=5716 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.085615][ T42] audit: type=1400 audit(1785868506.584:145): avc: denied { create } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.093253][ T42] audit: type=1400 audit(1785868506.584:146): avc: denied { write } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.101209][ T42] audit: type=1400 audit(1785868506.584:147): avc: denied { read } for pid=5716 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.107472][ T42] audit: type=1400 audit(1785868506.594:148): avc: denied { mounton } for pid=5716 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 49.114985][ T42] audit: type=1400 audit(1785868506.594:149): avc: denied { mount } for pid=5716 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 49.121968][ T42] audit: type=1400 audit(1785868506.614:150): avc: denied { read } for pid=5447 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 49.153811][ T5724] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 50.001474][ T5716] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.977528][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.977545][ T42] audit: type=1400 audit(1785868511.484:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 54.217126][ T42] audit: type=1400 audit(1785868511.724:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.223515][ T42] audit: type=1400 audit(1785868511.724:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.231384][ T42] audit: type=1400 audit(1785868511.724:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 54.239963][ T42] audit: type=1400 audit(1785868511.724:162): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[7318]" dev="sockfs" ino=7318 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 54.248191][ T5739] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.253739][ T5739] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.256630][ T5739] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 54.259325][ T5750] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.260776][ T5739] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.262570][ T5750] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 54.265193][ T5739] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.267744][ T5750] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 54.267756][ T5751] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.269425][ T5751] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 54.269552][ T5739] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.271126][ T5753] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 54.274578][ T5750] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 54.276414][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 54.277172][ T42] audit: type=1400 audit(1785868511.784:163): avc: denied { read } for pid=5734 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.280256][ T5739] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 54.280721][ T5751] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.282069][ T42] audit: type=1400 audit(1785868511.784:164): avc: denied { open } for pid=5734 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 54.284380][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.289485][ T42] audit: type=1400 audit(1785868511.784:165): avc: denied { mounton } for pid=5734 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 54.291876][ T5739] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 54.292118][ T5739] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.293506][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.301873][ T42] audit: type=1400 audit(1785868511.784:166): avc: denied { module_request } for pid=5734 comm="syz-executor" kmod="netdev-nr0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 54.332379][ T42] audit: type=1400 audit(1785868511.824:167): avc: denied { sys_module } for pid=5742 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.920584][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.925097][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.927851][ T5735] bridge_slave_0: entered allmulticast mode [ 54.931707][ T5735] bridge_slave_0: entered promiscuous mode [ 54.942657][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.945199][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.947447][ T5735] bridge_slave_1: entered allmulticast mode [ 54.950071][ T5735] bridge_slave_1: entered promiscuous mode [ 55.001908][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.025904][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.096214][ T5742] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.098535][ T5742] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.100852][ T5742] bridge_slave_0: entered allmulticast mode [ 55.104293][ T5742] bridge_slave_0: entered promiscuous mode [ 55.108904][ T5735] team0: Port device team_slave_0 added [ 55.112285][ T5735] team0: Port device team_slave_1 added [ 55.127083][ T5742] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.129585][ T5742] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.131840][ T5742] bridge_slave_1: entered allmulticast mode [ 55.134559][ T5742] bridge_slave_1: entered promiscuous mode [ 55.166429][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.169146][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.177101][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.193612][ T5742] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.198248][ T5742] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.201496][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.203892][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.212296][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.216202][ T5743] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.219271][ T5743] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.222301][ T5743] bridge_slave_0: entered allmulticast mode [ 55.226360][ T5743] bridge_slave_0: entered promiscuous mode [ 55.258379][ T5743] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.262148][ T5743] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.264524][ T5743] bridge_slave_1: entered allmulticast mode [ 55.267739][ T5743] bridge_slave_1: entered promiscuous mode [ 55.313224][ T5742] team0: Port device team_slave_0 added [ 55.338439][ T5743] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.343768][ T5742] team0: Port device team_slave_1 added [ 55.379224][ T5743] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.394523][ T5735] hsr_slave_0: entered promiscuous mode [ 55.397209][ T5735] hsr_slave_1: entered promiscuous mode [ 55.399664][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.402277][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.404532][ T5734] bridge_slave_0: entered allmulticast mode [ 55.408211][ T5734] bridge_slave_0: entered promiscuous mode [ 55.417779][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.420383][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.428464][ T5742] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.433684][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.436038][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.438284][ T5734] bridge_slave_1: entered allmulticast mode [ 55.440935][ T5734] bridge_slave_1: entered promiscuous mode [ 55.459161][ T5743] team0: Port device team_slave_0 added [ 55.461926][ T5742] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.464841][ T5742] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.474571][ T5742] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.509262][ T5743] team0: Port device team_slave_1 added [ 55.559927][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.562700][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.572928][ T5743] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.579418][ T5743] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.582205][ T5743] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.592443][ T5743] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.600401][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.625083][ T5742] hsr_slave_0: entered promiscuous mode [ 55.628249][ T5742] hsr_slave_1: entered promiscuous mode [ 55.631141][ T5742] debugfs: 'hsr0' already exists in 'hsr' [ 55.633527][ T5742] Cannot create hsr debugfs directory [ 55.644599][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.685078][ T5734] team0: Port device team_slave_0 added [ 55.732600][ T5734] team0: Port device team_slave_1 added [ 55.783172][ T5743] hsr_slave_0: entered promiscuous mode [ 55.786320][ T5743] hsr_slave_1: entered promiscuous mode [ 55.789013][ T5743] debugfs: 'hsr0' already exists in 'hsr' [ 55.791191][ T5743] Cannot create hsr debugfs directory [ 55.804182][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.806893][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.815247][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.831521][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.833628][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.842968][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.953779][ T5734] hsr_slave_0: entered promiscuous mode [ 55.957233][ T5734] hsr_slave_1: entered promiscuous mode [ 55.960118][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 55.962407][ T5734] Cannot create hsr debugfs directory [ 56.105688][ T5735] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.113171][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.125654][ T5735] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.135434][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.160848][ T5735] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.169324][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.189301][ T5735] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.195751][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.249893][ T5742] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.256014][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.264827][ T5742] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.270701][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.274216][ T5742] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.281931][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.286199][ T5742] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.293314][ T5742] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.326564][ T5745] Bluetooth: hci1: command tx timeout [ 56.334930][ T64] Bluetooth: hci3: command tx timeout [ 56.335052][ T5748] Bluetooth: hci2: command tx timeout [ 56.338761][ T5745] Bluetooth: hci0: command tx timeout [ 56.380037][ T5743] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.386359][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.389980][ T5743] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.397283][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.401034][ T5743] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.407662][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.411293][ T5743] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.417187][ T5743] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.503985][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.509712][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 56.519600][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.524294][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 56.528731][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.535580][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 56.540654][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 56.544857][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 56.561758][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.608315][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.623497][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.626067][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.638612][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.641225][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.658159][ T5742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.705884][ T5742] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.713722][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.717049][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.723987][ T5743] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.743644][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.746296][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.771006][ T5743] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.781850][ T92] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.784064][ T92] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.796615][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.806449][ T92] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.809037][ T92] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.838497][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.855495][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.858340][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.873702][ T60] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.876439][ T60] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.905362][ T5743] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.080090][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.120217][ T5735] veth0_vlan: entered promiscuous mode [ 57.129965][ T5735] veth1_vlan: entered promiscuous mode [ 57.162774][ T5735] veth0_macvtap: entered promiscuous mode [ 57.176144][ T5735] veth1_macvtap: entered promiscuous mode [ 57.196774][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.209436][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.230854][ T5742] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.253882][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.287020][ T5743] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.346248][ T5734] veth0_vlan: entered promiscuous mode [ 57.357176][ T5742] veth0_vlan: entered promiscuous mode [ 57.357810][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.363955][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.377777][ T5734] veth1_vlan: entered promiscuous mode [ 57.407747][ T5742] veth1_vlan: entered promiscuous mode [ 57.418998][ T92] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.422746][ T92] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.435311][ T5743] veth0_vlan: entered promiscuous mode [ 57.451637][ T5743] veth1_vlan: entered promiscuous mode [ 57.470354][ T5742] veth0_macvtap: entered promiscuous mode [ 57.474855][ T5583] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.483949][ T5734] veth0_macvtap: entered promiscuous mode [ 57.491213][ T5742] veth1_macvtap: entered promiscuous mode [ 57.500111][ T5734] veth1_macvtap: entered promiscuous mode [ 57.502006][ T5735] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 57.525280][ T5743] veth0_macvtap: entered promiscuous mode [ 57.534266][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.542346][ T5743] veth1_macvtap: entered promiscuous mode [ 57.554380][ T5742] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.558707][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.564969][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.577047][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.606169][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.637723][ T5743] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.650183][ T5888] e1000e 0000:00:02.0 eth1: removed PHC [ 57.787213][ T5888] e1000e 0000:00:02.0 eth1: NIC Link is Down [ 57.830216][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.833176][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.870244][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.872883][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.930377][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.939974][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.986219][ T92] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.995213][ T92] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.058061][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.061425][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.093923][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.101770][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.105022][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.225614][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.228382][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.231702][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.247490][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.286436][ T5583] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.290492][ T5583] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.293523][ T5583] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.297859][ T5583] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.301135][ T5583] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.304092][ T5583] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.309275][ T5583] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.312667][ T5583] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.316701][ T5583] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.338981][ T5920] lo speed is unknown, defaulting to 1000 [ 58.349403][ T5920] lo speed is unknown, defaulting to 1000 [ 58.353139][ T5920] lo speed is unknown, defaulting to 1000 [ 58.405626][ T5745] Bluetooth: hci2: command tx timeout [ 58.408511][ T64] Bluetooth: hci0: command tx timeout [ 58.408560][ T5739] Bluetooth: hci1: command tx timeout [ 58.412753][ T5748] Bluetooth: hci3: command tx timeout [ 58.470968][ T5920] infiniband syz0: set active [ 58.473772][ T5855] lo speed is unknown, defaulting to 1000 [ 58.478538][ T5920] infiniband syz0: added lo [ 58.504436][ T5920] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 58.509414][ T5920] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 58.515360][ T5920] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 58.531783][ T5920] RDS/IB: syz0: added [ 58.533753][ T5920] smc: adding ib device syz0 with port count 1 [ 58.536787][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 58.541179][ T5920] smc: ib device syz0 port 1 has no pnetid [ 58.550740][ T5855] lo speed is unknown, defaulting to 1000 [ 58.556640][ T5920] lo speed is unknown, defaulting to 1000 [ 58.719393][ T10] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice= 1.08 [ 58.723892][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.729971][ T10] usb 5-1: Product: syz [ 58.731724][ T10] usb 5-1: Manufacturer: syz [ 58.733618][ T10] usb 5-1: SerialNumber: syz [ 58.735957][ T5920] lo speed is unknown, defaulting to 1000 [ 58.989127][ T5902] syz.2.3 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 59.003847][ T5902] CPU: 1 UID: 0 PID: 5902 Comm: syz.2.3 Not tainted syzkaller #0 PREEMPT(full) [ 59.003864][ T5902] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 59.003881][ T5902] Call Trace: [ 59.003893][ T5902] [ 59.003898][ T5902] dump_stack_lvl+0x100/0x190 [ 59.003916][ T5902] dump_header+0xfb/0x606 [ 59.003929][ T5902] oom_kill_process.cold+0xd/0x330 [ 59.003942][ T5902] out_of_memory+0x340/0x14f0 [ 59.003962][ T5902] ? __pfx_out_of_memory+0x10/0x10 [ 59.003981][ T5902] mem_cgroup_out_of_memory+0xc6/0x130 [ 59.003993][ T5902] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 59.004004][ T5902] ? find_held_lock+0x2b/0x80 [ 59.004016][ T5902] ? do_raw_spin_unlock+0x145/0x1e0 [ 59.004032][ T5902] ? _raw_spin_unlock+0x28/0x50 [ 59.004044][ T5902] try_charge_memcg+0x6e5/0xdf0 [ 59.004062][ T5902] ? __pfx_try_charge_memcg+0x10/0x10 [ 59.004076][ T5902] ? find_held_lock+0x2b/0x80 [ 59.004085][ T5902] ? rcu_read_unlock+0x17/0x60 [ 59.004100][ T5902] ? rcu_read_unlock+0x17/0x60 [ 59.004115][ T5902] ? find_held_lock+0x2b/0x80 [ 59.004125][ T5902] ? rcu_read_unlock+0x17/0x60 [ 59.004142][ T5902] charge_memcg+0x187/0x1e0 [ 59.004157][ T5902] mem_cgroup_swapin_charge_folio+0xc1/0x450 [ 59.004176][ T5902] swap_cache_alloc_folio+0x548/0xc50 [ 59.004192][ T5902] ? __pfx_swap_cache_alloc_folio+0x10/0x10 [ 59.004203][ T5902] ? swap_cache_get_folio+0x28d/0x360 [ 59.004214][ T5902] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 59.004226][ T5902] ? __lock_acquire+0x49f/0x1a40 [ 59.004241][ T5902] swap_cache_read_folio+0x47/0x140 [ 59.004253][ T5902] swap_cluster_readahead+0x387/0x5f0 [ 59.004267][ T5902] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 59.004280][ T5902] ? lock_acquire+0x1b9/0x370 [ 59.004296][ T5902] ? __lock_acquire+0x49f/0x1a40 [ 59.004309][ T5902] ? get_vma_policy+0x23d/0x3b0 [ 59.004326][ T5902] swapin_readahead+0x159/0x1200 [ 59.004341][ T5902] ? __pfx_swapin_readahead+0x10/0x10 [ 59.004356][ T5902] ? swap_table_get+0x10d/0x2c0 [ 59.004366][ T5902] ? swap_cache_get_folio+0x28d/0x360 [ 59.004377][ T5902] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 59.004396][ T5902] ? __pfx_softleaf_type+0x10/0x10 [ 59.004410][ T5902] ? do_swap_page+0xf98/0x5780 [ 59.004426][ T5902] do_swap_page+0xf98/0x5780 [ 59.004448][ T5902] ? __pfx_do_swap_page+0x10/0x10 [ 59.004465][ T5902] ? __lock_acquire+0x49f/0x1a40 [ 59.004478][ T5902] ? rcu_is_watching+0x12/0xc0 [ 59.004495][ T5902] ? rcu_is_watching+0x12/0xc0 [ 59.004510][ T5902] ? __pte_offset_map+0x179/0x310 [ 59.004525][ T5902] __handle_mm_fault+0x192f/0x2a00 [ 59.004545][ T5902] ? reacquire_held_locks+0xce/0x1e0 [ 59.004558][ T5902] ? __pfx___handle_mm_fault+0x10/0x10 [ 59.004577][ T5902] ? lock_vma_under_rcu+0x17c/0x590 [ 59.004601][ T5902] handle_mm_fault+0x37b/0xa30 [ 59.004620][ T5902] do_user_addr_fault+0x5a3/0x12f0 [ 59.004656][ T5902] exc_page_fault+0x6f/0xd0 [ 59.004669][ T5902] asm_exc_page_fault+0x26/0x30 [ 59.004680][ T5902] RIP: 0033:0x7fa3f04517f0 [ 59.004690][ T5902] Code: 74 28 48 85 c9 74 29 45 38 1c 10 75 23 83 c0 01 44 39 d0 75 dc 48 89 f0 25 ff 1f 00 00 49 89 34 c1 41 88 3c 00 31 c0 c3 66 90 <41> 38 3c 10 74 0b 41 88 3c 10 31 c0 49 89 34 d1 c3 b8 01 00 00 00 [ 59.004700][ T5902] RSP: 002b:00007ffec09a3e58 EFLAGS: 00010246 [ 59.004710][ T5902] RAX: 0000000082870370 RBX: ffffffff82870370 RCX: ffffffff82870370 [ 59.004716][ T5902] RDX: 0000000000000370 RSI: ffffffff82870370 RDI: 0000000000000000 [ 59.004722][ T5902] RBP: 0000000000000000 R08: 00007fa3f0810000 R09: 00007fa3f0812000 [ 59.004728][ T5902] R10: 0000000082870374 R11: 0000000000000000 R12: 00007fa3f0826038 [ 59.004735][ T5902] R13: 000000000005e5d6 R14: ffffffff82870370 R15: 00007fa3f1355720 [ 59.004741][ T5902] ? lookup_page_ext+0xc0/0x100 [ 59.004755][ T5902] ? lookup_page_ext+0xc0/0x100 [ 59.004768][ T5902] ? lookup_page_ext+0xc0/0x100 [ 59.004780][ T5902] ? lookup_page_ext+0xc0/0x100 [ 59.004793][ T5902] [ 59.019696][ T5920] lo speed is unknown, defaulting to 1000 [ 59.027039][ T42] kauditd_printk_skb: 42 callbacks suppressed [ 59.027055][ T42] audit: type=1400 audit(1785868516.524:210): avc: denied { write } for pid=5943 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.061919][ T5902] memory: usage 307200kB, limit 307200kB, failcnt 2098 [ 59.200210][ T5902] memory+swap: usage 307368kB, limit 9007199254740988kB, failcnt 0 [ 59.203650][ T5902] kmem: usage 307180kB, limit 9007199254740988kB, failcnt 0 [ 59.207212][ T5902] Memory cgroup stats for /syz2: [ 59.207996][ T5902] cache 4096 [ 59.211380][ T5902] rss 0 [ 59.212382][ T5902] rss_huge 0 [ 59.213415][ T5902] shmem 0 [ 59.214428][ T5902] mapped_file 0 [ 59.217166][ T5902] dirty 0 [ 59.218212][ T5902] writeback 0 [ 59.219341][ T5902] workingset_refault_anon 3 [ 59.220769][ T5902] workingset_refault_file 0 [ 59.222157][ T5902] swap 172032 [ 59.224011][ T5902] swapcached 233472 [ 59.244790][ T5902] pgpgin 2105 [ 59.246144][ T5902] pgpgout 2100 [ 59.247559][ T5902] pgfault 114 [ 59.248862][ T5902] pgmajfault 5 [ 59.250348][ T5902] inactive_anon 8192 [ 59.251864][ T5902] active_anon 8192 [ 59.253073][ T5902] inactive_file 0 [ 59.259181][ T5902] active_file 0 [ 59.260343][ T5902] unevictable 0 [ 59.262467][ T5902] hierarchical_memory_limit 314572800 [ 59.264328][ T5902] hierarchical_memsw_limit 9223372036854771712 [ 59.266805][ T5902] total_cache 4096 [ 59.268151][ T5902] total_rss 0 [ 59.269215][ T5902] total_rss_huge 0 [ 59.270414][ T5902] total_shmem 0 [ 59.271514][ T5902] total_mapped_file 0 [ 59.273894][ T5902] total_dirty 0 [ 59.275924][ T5902] total_writeback 0 [ 59.277187][ T5902] total_workingset_refault_anon 3 [ 59.278821][ T5902] total_workingset_refault_file 0 [ 59.281094][ T42] audit: type=1400 audit(1785868516.784:211): avc: denied { write } for pid=5945 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.282590][ T5902] total_swap 172032 [ 59.328271][ T5920] lo speed is unknown, defaulting to 1000 [ 59.338993][ T5902] total_swapcached 233472 [ 59.340390][ T5902] total_pgpgin 2105 [ 59.343062][ T5902] total_pgpgout 2100 [ 59.346688][ T5902] total_pgfault 114 [ 59.348376][ T5902] total_pgmajfault 5 [ 59.350100][ T5902] total_inactive_anon 8192 [ 59.352098][ T5902] total_active_anon 8192 [ 59.353983][ T5902] total_inactive_file 0 [ 59.356737][ T5902] total_active_file 0 [ 59.358546][ T5902] total_unevictable 0 [ 59.360285][ T5902] anon_cost 0 [ 59.361778][ T5902] file_cost 0 [ 59.363311][ T5902] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.3,pid=5902,uid=0 [ 59.373578][ T5902] Memory cgroup out of memory: Killed process 5902 (syz.2.3) total-vm:106680kB, anon-rss:1276kB, file-rss:26760kB, shmem-rss:0kB, UID:0 pgtables:136kB oom_score_adj:1000 [ 59.388683][ T42] audit: type=1400 audit(1785868516.894:212): avc: denied { write } for pid=5951 comm="rm" name="hook-state" dev="tmpfs" ino=1841 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.478164][ T5954] ubi0: attaching mtd0 [ 59.482461][ T5954] ubi0: scanning is finished [ 59.484523][ T5954] ubi0: empty MTD device detected [ 59.514731][ T5841] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 59.581927][ T5958] UBIFS error (pid: 5958): cannot open "ubi0_0", error -19 [ 59.667883][ T5841] usb 6-1: not running at top speed; connect to a high speed hub [ 59.677887][ T5841] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 59.685464][ T5841] usb 6-1: New USB device found, idVendor=0bda, idProduct=2831, bcdDevice= 1.00 [ 59.688800][ T5841] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 59.692277][ T5954] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 59.695808][ T5954] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 59.698725][ T5954] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 59.701399][ T5954] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 59.702392][ T5947] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 59.704266][ T5954] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 59.710054][ T5954] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 59.713178][ T5954] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3210914765 [ 59.717143][ T5954] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 59.722309][ T5959] ubi0: background thread "ubi_bgt0d" started, PID 5959 [ 59.754777][ T5740] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 59.915910][ T5740] usb 7-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 1.00 [ 59.919463][ T5740] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.919855][ T5841] usb 6-1: dvb_usb_v2: found a 'Realtek RTL2831U reference design' in warm state [ 59.922510][ T5740] usb 7-1: Product: syz [ 59.928292][ T5740] usb 7-1: Manufacturer: syz [ 59.930052][ T5740] usb 7-1: SerialNumber: syz [ 59.940528][ T5740] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 60.123125][ T5841] dvb_usb_rtl28xxu 6-1:1.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 60.171839][ T10] ath6kl: Failed to read usb control message: -71 [ 60.174266][ T10] ath6kl: Unable to read the bmi data from the device: -71 [ 60.178802][ T10] ath6kl: Unable to recv target info: -71 [ 60.184523][ T10] ath6kl: Failed to init ath6kl core: -71 [ 60.196432][ T42] audit: type=1400 audit(1785868517.704:213): avc: denied { read } for pid=5955 comm="syz.2.16" name="video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.204371][ T42] audit: type=1400 audit(1785868517.704:214): avc: denied { open } for pid=5955 comm="syz.2.16" path="/dev/video0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.204829][ T10] ath6kl_usb 5-1:1.0: probe with driver ath6kl_usb failed with error -71 [ 60.212522][ T42] audit: type=1400 audit(1785868517.704:215): avc: denied { ioctl } for pid=5955 comm="syz.2.16" path="/dev/video0" dev="devtmpfs" ino=956 ioctlcmd=0x5446 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 60.234475][ T10] usb 5-1: USB disconnect, device number 2 [ 60.351567][ T42] audit: type=1400 audit(1785868517.854:216): avc: denied { mount } for pid=5963 comm="syz.3.9" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 60.359616][ T42] audit: type=1400 audit(1785868517.854:217): avc: denied { search } for pid=5963 comm="syz.3.9" name="/" dev="configfs" ino=3094 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.368145][ T42] audit: type=1400 audit(1785868517.854:218): avc: denied { search } for pid=5963 comm="syz.3.9" name="usb_gadget" dev="configfs" ino=4749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.376556][ T42] audit: type=1400 audit(1785868517.864:219): avc: denied { write search } for pid=5963 comm="syz.3.9" name="usb_gadget" dev="configfs" ino=4749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 60.485633][ T5748] Bluetooth: hci2: command tx timeout [ 60.486030][ T5745] Bluetooth: hci3: command tx timeout [ 60.487940][ T5748] Bluetooth: hci1: command tx timeout [ 60.490991][ T5739] Bluetooth: hci0: command tx timeout [ 60.726017][ T61] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 60.877009][ T61] usb 5-1: Dual-Role OTG device on HNP port [ 60.879878][ T61] usb 5-1: New USB device found, idVendor=0499, idProduct=1000, bcdDevice= 7.02 [ 60.884435][ T61] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 60.897410][ T61] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.902264][ T61] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -2 [ 60.911648][ T61] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 60.914918][ T61] usb 5-1: invalid MIDI out EP 0 [ 61.103130][ T61] snd-usb-audio 5-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 61.187998][ T5984] snd_hda_intel 0000:00:00.0: Unknown PCI class/subclass/prog-if information (0x060000) found, selecting HDAudio legacy driver [ 62.148541][ T2520] pvrusb2: Invalid write control endpoint [ 62.155572][ T5740] usb 7-1: USB disconnect, device number 2 [ 62.161164][ T2520] usb 7-1: Direct firmware load for v4l-pvrusb2-24xxx-01.fw failed with error -2 [ 62.167820][ T2520] usb 7-1: Falling back to sysfs fallback for: v4l-pvrusb2-24xxx-01.fw [ 62.414812][ T5848] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 62.511298][ T10] usb 6-1: USB disconnect, device number 2 [ 62.551791][ T5996] (NULL device *): [drm] All planes must have at least one possible CRTC [ 62.565040][ T5745] Bluetooth: hci3: command tx timeout [ 62.565116][ T5748] Bluetooth: hci2: command tx timeout [ 62.570045][ T5739] Bluetooth: hci0: command tx timeout [ 62.574908][ T5739] Bluetooth: hci1: command tx timeout [ 62.576560][ T5848] usb 8-1: New USB device found, idVendor=1b1c, idProduct=1c03, bcdDevice= 0.00 [ 62.580545][ T5848] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.590713][ T5848] usb 8-1: config 0 descriptor?? [ 62.944899][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 63.013160][ T5848] corsair-psu 0003:1B1C:1C03.0002: hidraw1: USB HID v0.00 Device [HID 1b1c:1c03] on usb-dummy_hcd.3-1/input0 [ 63.076341][ T5848] corsair-psu 0003:1B1C:1C03.0002: unable to initialize device (-38) [ 63.084299][ T5848] corsair-psu 0003:1B1C:1C03.0002: probe with driver corsair-psu failed with error -38 [ 63.129500][ T10] usb 6-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 0.00 [ 63.135473][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.486766][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.492735][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.501097][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.504833][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.509055][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.513100][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.519179][ T6019] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.522905][ T6019] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 65.200127][ T5736] usb 8-1: USB disconnect, device number 2 [ 65.554862][ T5736] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 65.686642][ T5848] usb 6-1: USB disconnect, device number 3 [ 65.713108][ T5736] usb 8-1: New USB device found, idVendor=0ccd, idProduct=0080, bcdDevice= 1.00 [ 65.719566][ T5736] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.722897][ T5736] usb 8-1: Product: syz [ 65.724624][ T5736] usb 8-1: Manufacturer: syz [ 65.726642][ T5736] usb 8-1: SerialNumber: syz [ 65.947720][ T5736] snd-usb-6fire 8-1:1.0: unable to receive device firmware state. [ 65.952853][ T5736] snd-usb-6fire 8-1:1.0: probe with driver snd-usb-6fire failed with error -121 [ 66.004357][ T6038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 66.008390][ T6038] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 66.583678][ T42] kauditd_printk_skb: 114 callbacks suppressed [ 66.583695][ T42] audit: type=1400 audit(1785868524.084:334): avc: denied { mount } for pid=6040 comm="syz.0.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 66.595366][ T42] audit: type=1400 audit(1785868524.094:335): avc: denied { search } for pid=6040 comm="syz.0.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 66.604150][ T42] audit: type=1400 audit(1785868524.094:336): avc: denied { read write } for pid=6040 comm="syz.0.33" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 66.613040][ T42] audit: type=1400 audit(1785868524.094:337): avc: denied { open } for pid=6040 comm="syz.0.33" path="/10/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 66.622518][ T42] audit: type=1400 audit(1785868524.094:338): avc: denied { search } for pid=6040 comm="syz.0.33" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 66.710680][ T42] audit: type=1400 audit(1785868524.214:339): avc: denied { mount } for pid=6040 comm="syz.0.33" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 66.747424][ T42] audit: type=1800 audit(1785868524.254:340): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.34" name="idVendor" dev="configfs" ino=9094 res=0 errno=0 [ 66.756720][ T42] audit: type=1800 audit(1785868524.254:341): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.34" name="idProduct" dev="configfs" ino=9095 res=0 errno=0 [ 66.767553][ T42] audit: type=1800 audit(1785868524.254:342): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.34" name="process_ump" dev="configfs" ino=9096 res=0 errno=0 [ 66.775556][ T42] audit: type=1800 audit(1785868524.254:343): pid=6045 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.34" name="direction" dev="configfs" ino=9097 res=0 errno=0 [ 67.544765][ T2330] usb 6-1: new full-speed USB device number 4 using dummy_hcd [ 67.711025][ T2330] usb 6-1: not running at top speed; connect to a high speed hub [ 67.718833][ T2330] usb 6-1: New USB device found, idVendor=17cc, idProduct=1969, bcdDevice= 1.00 [ 67.722640][ T2330] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.725898][ T2330] usb 6-1: Product: syz [ 67.727543][ T2330] usb 6-1: Manufacturer: syz [ 67.729626][ T2330] usb 6-1: SerialNumber: syz [ 67.864900][ T6042] NFSD: Unable to initialize client recovery tracking! (-110) [ 67.868695][ T6042] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 67.872430][ T6042] NFSD: starting 90-second grace period (net f0000521) [ 67.993250][ T2330] snd-usb-caiaq 6-1:1.0: can't set alt interface. [ 67.996251][ T2330] usb 6-1: unable to init card! (ret=-5) [ 67.999291][ T2330] snd-usb-caiaq 6-1:1.0: probe with driver snd-usb-caiaq failed with error -5 [ 68.005704][ T2330] usb 6-1: USB disconnect, device number 4 [ 68.304374][ T5848] usb 8-1: USB disconnect, device number 3 [ 68.343077][ T6056] syz0: rxe_newlink: already configured on lo [ 68.822612][ T6068] loop0: detected capacity change from 0 to 2048 [ 68.829963][ T6068] loop1: detected capacity change from 0 to 2048 [ 68.841739][ T6068] loop2: detected capacity change from 0 to 2048 [ 68.849743][ T6068] loop3: detected capacity change from 0 to 2048 [ 68.945560][ T6073] PM: suspend entry (s2idle) [ 68.998013][ T5583] Filesystems sync: 0.047 seconds [ 69.134905][ T5886] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 69.174769][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.294784][ T5886] usb 6-1: Using ep0 maxpacket: 16 [ 69.299208][ T5886] usb 6-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 69.303198][ T5886] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 69.338252][ T10] usb 8-1: New USB device found, idVendor=187f, idProduct=0201, bcdDevice= 0.00 [ 69.342040][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.345614][ T10] usb 8-1: Product: syz [ 69.347671][ T10] usb 8-1: Manufacturer: syz [ 69.349486][ T10] usb 8-1: SerialNumber: syz [ 69.363046][ T10] smsusb:smsusb_probe: board id=3, interface number 0 [ 69.381439][ T10] smsusb:siano_media_device_register: media controller created [ 69.723855][ T5886] hid-picolcd 0003:04D8:C002.0003: unbalanced collection at end of report description [ 69.731929][ T5886] hid-picolcd 0003:04D8:C002.0003: device report parse failed [ 69.735603][ T5886] hid-picolcd 0003:04D8:C002.0003: probe with driver hid-picolcd failed with error -22 [ 69.762806][ T6073] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 69.767787][ T6073] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.780780][ T6073] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 69.789083][ T6073] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 69.792178][ T6073] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.802154][ T6073] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 69.807016][ T6073] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 69.809558][ T6073] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.813285][ T6073] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 69.820353][ T6073] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 69.822915][ T6073] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.830365][ T6073] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 69.854938][ T6060] NFSD: Unable to initialize client recovery tracking! (-110) [ 69.858296][ T6060] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 69.862327][ T6060] NFSD: starting 90-second grace period (net f0000521) [ 70.263888][ T6080] PM: suspend entry (deep) [ 70.269332][ T6080] PM: suspend exit [ 70.318612][ T6082] null_blk: my_zoned_dev: using native zone append [ 70.368544][ T6082] null_blk: disk my_zoned_dev created [ 70.408961][ T10] smsmdtv:smscore_sendrequest_and_wait: sendrequest returned error -110 [ 70.414417][ T10] smsmdtv:smscore_set_device_mode: mode detect failed -110 [ 70.417055][ T10] smsmdtv:smscore_start_device: set device mode failed , rc -110 [ 70.419767][ T10] smsusb:smsusb_init_device: smscore_start_device(...) failed [ 70.423264][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.426121][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.429050][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.432023][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.436248][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.440462][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.442994][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.445700][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.448699][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.451483][ C0] smsusb:smsusb_onresponse: error, urb status -2, 0 bytes [ 70.457298][ T10] ------------[ cut here ]------------ [ 70.459140][ T10] !PageLargeKmalloc(page) [ 70.459149][ T10] WARNING: mm/slub.c:6602 at free_large_kmalloc+0xbf/0x100, CPU#0: kworker/0:1/10 [ 70.463817][ T10] Modules linked in: [ 70.466029][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 70.469844][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.474144][ T10] Workqueue: usb_hub_wq hub_event [ 70.476783][ T10] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 70.479286][ T10] Code: 28 90 0f 0b 90 80 3d 16 d0 9b 0e 00 0f 84 c7 c7 b5 fe 48 8b 74 24 28 48 89 ef e8 8c 3b 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 16 3a 19 8e 5b 5d 41 5c 41 [ 70.487493][ T10] RSP: 0018:ffffc900000d6d80 EFLAGS: 00010202 [ 70.489682][ T10] RAX: 00000000000000ff RBX: ffffea0001767880 RCX: 000000000000002e [ 70.492213][ T10] RDX: 0000000000000000 RSI: ffff88805d9e2000 RDI: ffffea0001767880 [ 70.494758][ T10] RBP: ffff88805d9e2000 R08: 0000000000000005 R09: 0000000000000000 [ 70.497319][ T10] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888056df8000 [ 70.500478][ T10] R13: ffff888056df9000 R14: dffffc0000000000 R15: ffff888056df80f0 [ 70.503796][ T10] FS: 0000000000000000(0000) GS:ffff8880d5dd8000(0000) knlGS:0000000000000000 [ 70.507622][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 70.510331][ T10] CR2: 000055558f4eaa28 CR3: 000000002b036000 CR4: 0000000000352ef0 [ 70.513544][ T10] Call Trace: [ 70.515094][ T10] [ 70.516343][ T10] usb_free_urb.part.0+0xf8/0x110 [ 70.518519][ T10] usb_free_urb+0x1f/0x30 [ 70.520473][ T10] smsusb_term_device+0x108/0x200 [ 70.522637][ T10] smsusb_init_device+0xb4e/0xbb0 [ 70.524878][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 70.527028][ T10] ? kfree+0x1e5/0x6c0 [ 70.528506][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 70.530400][ T10] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 70.532526][ T10] smsusb_probe+0xd7f/0xe1f [ 70.534366][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 70.536591][ T10] ? mark_held_locks+0x40/0x70 [ 70.538575][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.540899][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.543224][ T10] ? __pm_runtime_set_status+0x13c/0x970 [ 70.545822][ T10] usb_probe_interface+0x303/0x8f0 [ 70.548150][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 70.550549][ T10] really_probe+0x241/0xa60 [ 70.552471][ T10] __driver_probe_device+0x20e/0x450 [ 70.554562][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.557077][ T10] driver_probe_device+0x4a/0x140 [ 70.559192][ T10] __device_attach_driver+0x1df/0x320 [ 70.561387][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 70.563827][ T10] bus_for_each_drv+0x159/0x1e0 [ 70.566101][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.568370][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 70.570535][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.573064][ T10] __device_attach+0x1e4/0x4d0 [ 70.575132][ T10] ? __pfx___device_attach+0x10/0x10 [ 70.577648][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.579802][ T10] device_initial_probe+0xaf/0xd0 [ 70.581792][ T10] bus_probe_device+0x64/0x160 [ 70.583703][ T10] device_add+0x121d/0x1970 [ 70.586022][ T10] ? __pfx_device_add+0x10/0x10 [ 70.587953][ T10] ? mark_held_locks+0x40/0x70 [ 70.589976][ T10] usb_set_configuration+0xd97/0x1c60 [ 70.592267][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 70.594820][ T10] usb_generic_driver_probe+0xa1/0xe0 [ 70.597151][ T10] usb_probe_device+0xef/0x400 [ 70.599109][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 70.601362][ T10] really_probe+0x241/0xa60 [ 70.603231][ T10] __driver_probe_device+0x20e/0x450 [ 70.605490][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.607982][ T10] driver_probe_device+0x4a/0x140 [ 70.610130][ T10] __device_attach_driver+0x1df/0x320 [ 70.612397][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 70.615006][ T10] bus_for_each_drv+0x159/0x1e0 [ 70.617098][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.619332][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 70.621486][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.623943][ T10] __device_attach+0x1e4/0x4d0 [ 70.626169][ T10] ? __pfx___device_attach+0x10/0x10 [ 70.628371][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.630354][ T10] device_initial_probe+0xaf/0xd0 [ 70.632283][ T10] bus_probe_device+0x64/0x160 [ 70.634086][ T10] device_add+0x121d/0x1970 [ 70.636114][ T10] ? __pfx_device_add+0x10/0x10 [ 70.638116][ T10] ? add_device_randomness+0xc9/0x110 [ 70.640185][ T10] usb_new_device.cold+0x685/0x115c [ 70.642415][ T10] ? _mutex_trylock_nest_lock+0x241/0x310 [ 70.648540][ T10] ? do_raw_spin_lock+0x128/0x260 [ 70.650707][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 70.652900][ T10] ? mark_held_locks+0x40/0x70 [ 70.656727][ T10] hub_event+0x30a3/0x4a60 [ 70.658679][ T10] ? __pfx_hub_event+0x10/0x10 [ 70.660740][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.662912][ T10] ? rcu_is_watching+0x12/0xc0 [ 70.664485][ T10] process_one_work+0xa23/0x1940 [ 70.666223][ T10] ? __pfx_process_one_work+0x10/0x10 [ 70.667959][ T10] ? __pfx_hub_event+0x10/0x10 [ 70.669645][ T10] worker_thread+0x5ef/0xe50 [ 70.671240][ T10] ? __pfx_worker_thread+0x10/0x10 [ 70.673337][ T10] ? kthread+0x13a/0x450 [ 70.675263][ T10] ? __pfx_worker_thread+0x10/0x10 [ 70.677391][ T10] kthread+0x370/0x450 [ 70.679471][ T10] ? __pfx_kthread+0x10/0x10 [ 70.681410][ T10] ret_from_fork+0x72b/0xd50 [ 70.683023][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 70.684981][ T10] ? __switch_to+0x800/0x10f0 [ 70.686558][ T10] ? __pfx_kthread+0x10/0x10 [ 70.688115][ T10] ret_from_fork_asm+0x1a/0x30 [ 70.690118][ T10] [ 70.691473][ T10] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 70.693836][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted syzkaller #0 PREEMPT(full) [ 70.697234][ T10] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 70.701047][ T10] Workqueue: usb_hub_wq hub_event [ 70.702991][ T10] Call Trace: [ 70.704270][ T10] [ 70.705421][ T10] dump_stack_lvl+0x100/0x190 [ 70.707263][ T10] vpanic+0x552/0x970 [ 70.708854][ T10] ? __pfx_vpanic+0x10/0x10 [ 70.710629][ T10] panic+0xd1/0xe0 [ 70.712129][ T10] ? __pfx_panic+0x10/0x10 [ 70.713905][ T10] ? check_panic_on_warn+0x1f/0x90 [ 70.715975][ T10] check_panic_on_warn.cold+0x19/0x34 [ 70.718026][ T10] ? free_large_kmalloc+0xbf/0x100 [ 70.719983][ T10] __warn.cold+0x191/0x318 [ 70.721678][ T10] __report_bug+0x30f/0x440 [ 70.723414][ T10] ? free_large_kmalloc+0xbf/0x100 [ 70.725361][ T10] ? __pfx___report_bug+0x10/0x10 [ 70.727315][ T10] ? __device_attach+0x1e4/0x4d0 [ 70.729217][ T10] ? device_initial_probe+0xaf/0xd0 [ 70.731232][ T10] ? bus_probe_device+0x64/0x160 [ 70.733261][ T10] ? device_add+0x121d/0x1970 [ 70.735328][ T10] ? usb_new_device.cold+0x685/0x115c [ 70.737644][ T10] ? hub_event+0x30a3/0x4a60 [ 70.739630][ T10] ? process_one_work+0xa23/0x1940 [ 70.741771][ T10] ? worker_thread+0x5ef/0xe50 [ 70.743709][ T10] ? kthread+0x370/0x450 [ 70.745309][ T10] ? ret_from_fork+0x72b/0xd50 [ 70.747169][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 70.749118][ T10] ? find_held_lock+0x2b/0x80 [ 70.750950][ T10] ? smscore_unregister_device+0x537/0x7f0 [ 70.753140][ T10] ? smscore_unregister_device+0x537/0x7f0 [ 70.755489][ T10] ? free_large_kmalloc+0xbf/0x100 [ 70.757154][ T10] report_bug+0xb2/0x220 [ 70.758485][ T10] ? free_large_kmalloc+0xbf/0x100 [ 70.760137][ T10] handle_bug+0x16a/0x2a0 [ 70.761607][ T10] exc_invalid_op+0x17/0x50 [ 70.763251][ T10] asm_exc_invalid_op+0x1a/0x20 [ 70.765083][ T10] RIP: 0010:free_large_kmalloc+0xbf/0x100 [ 70.767219][ T10] Code: 28 90 0f 0b 90 80 3d 16 d0 9b 0e 00 0f 84 c7 c7 b5 fe 48 8b 74 24 28 48 89 ef e8 8c 3b 0c 00 b8 00 f0 ff ff 45 31 ed eb 9d 90 <0f> 0b 90 48 83 c4 08 48 89 df 48 c7 c6 16 3a 19 8e 5b 5d 41 5c 41 [ 70.774616][ T10] RSP: 0018:ffffc900000d6d80 EFLAGS: 00010202 [ 70.776765][ T10] RAX: 00000000000000ff RBX: ffffea0001767880 RCX: 000000000000002e [ 70.779311][ T10] RDX: 0000000000000000 RSI: ffff88805d9e2000 RDI: ffffea0001767880 [ 70.781783][ T10] RBP: ffff88805d9e2000 R08: 0000000000000005 R09: 0000000000000000 [ 70.784250][ T10] R10: ffffffffffffffff R11: 0000000000000000 R12: ffff888056df8000 [ 70.786809][ T10] R13: ffff888056df9000 R14: dffffc0000000000 R15: ffff888056df80f0 [ 70.789345][ T10] usb_free_urb.part.0+0xf8/0x110 [ 70.790958][ T10] usb_free_urb+0x1f/0x30 [ 70.792375][ T10] smsusb_term_device+0x108/0x200 [ 70.793970][ T10] smsusb_init_device+0xb4e/0xbb0 [ 70.795652][ T10] ? __pfx_smsusb_init_device+0x10/0x10 [ 70.797411][ T10] ? kfree+0x1e5/0x6c0 [ 70.798684][ T10] ? __pfx_smsusb_sendrequest+0x10/0x10 [ 70.800819][ T10] ? usb_hcd_reset_endpoint+0xaf/0x240 [ 70.802866][ T10] smsusb_probe+0xd7f/0xe1f [ 70.804350][ T10] ? __pfx_smsusb_probe+0x10/0x10 [ 70.806191][ T10] ? mark_held_locks+0x40/0x70 [ 70.808140][ T10] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 70.810009][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.812068][ T10] ? __pm_runtime_set_status+0x13c/0x970 [ 70.814319][ T10] usb_probe_interface+0x303/0x8f0 [ 70.816165][ T10] ? __pfx_usb_probe_interface+0x10/0x10 [ 70.817944][ T10] really_probe+0x241/0xa60 [ 70.819789][ T10] __driver_probe_device+0x20e/0x450 [ 70.821701][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.823455][ T10] driver_probe_device+0x4a/0x140 [ 70.825355][ T10] __device_attach_driver+0x1df/0x320 [ 70.827447][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 70.829309][ T10] bus_for_each_drv+0x159/0x1e0 [ 70.830811][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.832962][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 70.834957][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.836754][ T10] __device_attach+0x1e4/0x4d0 [ 70.838382][ T10] ? __pfx___device_attach+0x10/0x10 [ 70.840381][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.842393][ T10] device_initial_probe+0xaf/0xd0 [ 70.844208][ T10] bus_probe_device+0x64/0x160 [ 70.845753][ T10] device_add+0x121d/0x1970 [ 70.847375][ T10] ? __pfx_device_add+0x10/0x10 [ 70.849315][ T10] ? mark_held_locks+0x40/0x70 [ 70.851266][ T10] usb_set_configuration+0xd97/0x1c60 [ 70.853161][ T10] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 70.855154][ T10] usb_generic_driver_probe+0xa1/0xe0 [ 70.857317][ T10] usb_probe_device+0xef/0x400 [ 70.859277][ T10] ? __pfx_usb_probe_device+0x10/0x10 [ 70.861230][ T10] really_probe+0x241/0xa60 [ 70.862682][ T10] __driver_probe_device+0x20e/0x450 [ 70.864607][ T10] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 70.866993][ T10] driver_probe_device+0x4a/0x140 [ 70.868887][ T10] __device_attach_driver+0x1df/0x320 [ 70.870588][ T10] ? __pfx___device_attach_driver+0x10/0x10 [ 70.872773][ T10] bus_for_each_drv+0x159/0x1e0 [ 70.874722][ T10] ? __pfx_bus_for_each_drv+0x10/0x10 [ 70.876910][ T10] ? lockdep_hardirqs_on+0x78/0x100 [ 70.878617][ T10] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 70.880555][ T10] __device_attach+0x1e4/0x4d0 [ 70.882465][ T10] ? __pfx___device_attach+0x10/0x10 [ 70.884580][ T10] ? do_raw_spin_unlock+0x145/0x1e0 [ 70.886303][ T10] device_initial_probe+0xaf/0xd0 [ 70.887980][ T10] bus_probe_device+0x64/0x160 [ 70.889874][ T10] device_add+0x121d/0x1970 [ 70.891694][ T10] ? __pfx_device_add+0x10/0x10 [ 70.893502][ T10] ? add_device_randomness+0xc9/0x110 [ 70.895236][ T10] usb_new_device.cold+0x685/0x115c [ 70.897202][ T10] ? _mutex_trylock_nest_lock+0x241/0x310 [ 70.899463][ T10] ? do_raw_spin_lock+0x128/0x260 [ 70.901412][ T10] ? __pfx_usb_new_device+0x10/0x10 [ 70.903082][ T10] ? mark_held_locks+0x40/0x70 [ 70.904798][ T10] hub_event+0x30a3/0x4a60 [ 70.906628][ T10] ? __pfx_hub_event+0x10/0x10 [ 70.908542][ T10] ? debug_object_deactivate+0x2e4/0x3b0 [ 70.910515][ T10] ? rcu_is_watching+0x12/0xc0 [ 70.912054][ T10] process_one_work+0xa23/0x1940 [ 70.913970][ T10] ? __pfx_process_one_work+0x10/0x10 [ 70.916152][ T10] ? __pfx_hub_event+0x10/0x10 [ 70.917799][ T10] worker_thread+0x5ef/0xe50 [ 70.919275][ T10] ? __pfx_worker_thread+0x10/0x10 [ 70.921214][ T10] ? kthread+0x13a/0x450 [ 70.922919][ T10] ? __pfx_worker_thread+0x10/0x10 [ 70.924685][ T10] kthread+0x370/0x450 [ 70.926028][ T10] ? __pfx_kthread+0x10/0x10 [ 70.927825][ T10] ret_from_fork+0x72b/0xd50 [ 70.929685][ T10] ? __pfx_ret_from_fork+0x10/0x10 [ 70.931459][ T10] ? __switch_to+0x800/0x10f0 [ 70.932954][ T10] ? __pfx_kthread+0x10/0x10 [ 70.934755][ T10] ret_from_fork_asm+0x1a/0x30 [ 70.936723][ T10] [ 70.938596][ T10] Kernel Offset: disabled [ 70.939934][ T10] Rebooting in 86400 seconds..