last executing test programs: 2.919388939s ago: executing program 2 (id=3): mmap(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x3, 0x32, 0xffffffffffffffff, 0x0) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/sub1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/sub1/attr_allow_any_host\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='1\n', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/nvmet/subsystems/sub1/namespaces/1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/subsystems/sub1/namespaces/1/device_path\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='/dev/ram0\x00', 0xa) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/sub1/namespaces/1/enable\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\n', 0x2) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000940)='./dev/nvme0\x00', 0x2, 0x0) ioctl(r3, 0xc0484e41, &(0x7f0000000a00)="06000000000000000000000000000000000000000000000000100000007f000000000000001000001900"/72) 2.795839776s ago: executing program 2 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:02.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='ohci-pci\x00', 0x9) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/ohci-platform/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='pcspkr\x00', 0x7) 2.676138028s ago: executing program 2 (id=7): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x40, 0x0, 0x1, "03"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000500)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/i2c-dev\x00', 0x20000, 0x0) 2.421784093s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x79, 0x0, 0x18}) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000200)={0x1, 0x0, [{0x0, 0x2, 0x0, 0x0, @msi={0xfee00000, 0x0, 0x20}}]}) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@wrmsr={0x65, 0x0, {0x80f, 0x80000000}}, @wrmsr={0x65, 0x0, {0x80b}}], 0x40}) ioctl$KVM_SET_LAPIC(r3, 0x4400ae89, &(0x7f0000000500)={"000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f000"}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2.098582689s ago: executing program 0 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r1, 0xc138fd06, &(0x7f0000000800)="04000000000000000000000040010000380100000000000000000000000000000000000000000000000000000000000077") 1.996181591s ago: executing program 4 (id=5): mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='wcd939x-usbss 0x42\x00', 0x13) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='wcd939x-usbss 0x42\x00', 0x13) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='wcd939x-usbss 0x42\x00', 0x13) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='wcd939x-usbss 0x42\x00', 0x13) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='wcd939x-usbss 0x42\x00', 0x13) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='nb7vpq904m 0x43\x00', 0xf) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='nb7vpq904m 0x43\x00', 0xf) openat(0xffffffffffffff9c, &(0x7f00000004c0)='sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r7, &(0x7f0000000580)='ptn36502 0x44\x00', 0xd) r8 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='sys/bus/i2c/devices/i2c-1/new_device\x00', 0x1, 0x0) write(r8, &(0x7f0000000600)='ptn36502 0x44\x00', 0xd) openat(0xffffffffffffff9c, &(0x7f0000000640)='sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000700)='PNP0CA0:00\x00', 0xb) r9 = openat(0xffffffffffffff9c, &(0x7f0000000740)='sys/bus/platform/drivers/ucsi_acpi/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000000780)='PNP0CA0:00\x00', 0xb) openat(0xffffffffffffff9c, &(0x7f00000007c0)='sys/bus/platform/drivers/ucsi_acpi/unbind\x00', 0x1, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='sys/bus/platform/drivers/ucsi_acpi/bind\x00', 0x1, 0x0) write(r10, &(0x7f0000000880)='ucsi_acpi.0\x00', 0xc) r11 = openat(0xffffffffffffff9c, &(0x7f0000000940)='sys/bus/platform/drivers/intel_pmc_usb/bind\x00', 0x1, 0x0) write(r11, &(0x7f0000000980)='intel_pmc_usb.0\x00', 0x10) 1.966018132s ago: executing program 0 (id=9): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = creat(&(0x7f0000000140)='./temp\x00', 0x1ff) write(r0, &(0x7f0000000180)="20000000000000000000000000000000000000000000000000000000000000000000000000100000", 0x28) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./temp\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/e1000/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/devices/0000:00:03.0/config\x00', 0x1, 0x0) pwrite64(r3, &(0x7f00000002c0)='\a\x00', 0x2, 0x4) mmap(&(0x7f00000a0000)=nil, 0x1000, 0x3, 0x11, 0xffffffffffffffff, 0x0) read(r1, &(0x7f00000a0000), 0x28) r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000400)='0000:00:03.0\x00', 0xd) r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000480)='0000:00:03.0\x00', 0xd) 1.687521365s ago: executing program 1 (id=2): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./file1\x00', 0x42, 0x1b6) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x1b6) ftruncate(r2, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000060), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) ioctl$LOOP_SET_FD(0xffffffffffffffff, 0x4c00, r1) r4 = syz_open_dev$loop(&(0x7f00000000a0), 0x2, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r5, &(0x7f00000001a0)='md0\n', 0x4) r6 = openat(0xffffffffffffff9c, &(0x7f00000001e0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r6, &(0x7f0000000220)='raid5\n', 0x6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r7, &(0x7f0000000280)='65536\n', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r8, &(0x7f00000002e0)='0\n', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r9, &(0x7f0000000340)='3\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000360)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r10, &(0x7f00000003a0)='7:0\n', 0x4) r11 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r11, &(0x7f0000000420)='7:1\n', 0x4) r12 = openat(0xffffffffffffff9c, &(0x7f0000000460)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r12, &(0x7f00000004a0)='7:2\n', 0x4) r13 = openat(0xffffffffffffff9c, &(0x7f00000004e0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r13, &(0x7f0000000520)='0\n', 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r14, &(0x7f0000000580)='1\n', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f00000005a0)='./sys/block/md0/md/dev-loop2/slot\x00', 0x1, 0x0) write(r15, &(0x7f00000005e0)='2\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/block/md0/md/array_state\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='131072\n', 0x7) write(r8, &(0x7f00000006a0)='1\n', 0x2) 1.395119969s ago: executing program 3 (id=4): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file8\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g9/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g9/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000380)='./config/usb_gadget/g9/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g9/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g9/functions/mass_storage.usb8/lun.0/file\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='/proc/self/cwd/file8\x00', 0x14) 1.27716023s ago: executing program 3 (id=10): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000020)='./file1\x00', 0x42, 0x1b6) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x42, 0x1b6) ftruncate(r2, 0x1000000) r3 = syz_open_dev$loop(&(0x7f0000000060), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r0) r4 = syz_open_dev$loop(&(0x7f0000000080), 0x1, 0x2) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) r5 = syz_open_dev$loop(&(0x7f00000000a0), 0x2, 0x2) ioctl$LOOP_SET_FD(r5, 0x4c00, r2) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000120)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000160)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r6, &(0x7f00000001a0)='md0\n', 0x4) r7 = openat(0xffffffffffffff9c, &(0x7f00000001e0)='./sys/block/md0/md/level\x00', 0x1, 0x0) write(r7, &(0x7f0000000220)='raid5\n', 0x6) r8 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/block/md0/md/chunk_size\x00', 0x1, 0x0) write(r8, &(0x7f0000000280)='65536\n', 0x6) r9 = openat(0xffffffffffffff9c, &(0x7f00000002a0)='./sys/block/md0/md/layout\x00', 0x1, 0x0) write(r9, &(0x7f00000002e0)='0\n', 0x2) r10 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r10, &(0x7f0000000340)='3\n', 0x2) openat(0xffffffffffffff9c, &(0x7f0000000360)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) r11 = openat(0xffffffffffffff9c, &(0x7f00000003e0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r11, &(0x7f0000000420)='7:1\n', 0x4) r12 = openat(0xffffffffffffff9c, &(0x7f0000000460)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r12, &(0x7f00000004a0)='7:2\n', 0x4) r13 = openat(0xffffffffffffff9c, &(0x7f00000004e0)='./sys/block/md0/md/dev-loop0/slot\x00', 0x1, 0x0) write(r13, &(0x7f0000000520)='0\n', 0x2) r14 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/block/md0/md/dev-loop1/slot\x00', 0x1, 0x0) write(r14, &(0x7f0000000580)='1\n', 0x2) r15 = openat(0xffffffffffffff9c, &(0x7f00000005a0)='./sys/block/md0/md/dev-loop2/slot\x00', 0x1, 0x0) write(r15, &(0x7f00000005e0)='2\n', 0x2) write(0xffffffffffffffff, &(0x7f0000000640)='active\n', 0x7) write(r9, &(0x7f00000006a0)='1\n', 0x2) 1.276002087s ago: executing program 1 (id=11): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000800000/0x1000)=nil, 0x1000}, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000800000/0x1000)=nil}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000000c0)={0x1, 0x0, [{0x40000001, 0x0, 0x0, 0xc010}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d02, 0x0, 0x9}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f0000000300)={{&(0x7f0000800000/0x1000)=nil, 0x1000}}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d02, 0x0, 0x9}]}) 928.825782ms ago: executing program 3 (id=12): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='devtmpfs\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f0000000a00)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000c00)='0x40\x00', 0x5) close(r1) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/ncm.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') symlink(&(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000001200)='./config/usb_gadget/g1/os_desc/c.1\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='dummy_udc.0', 0xb) close(r2) r3 = socket(0x2, 0x1, 0x0) listen(r3, 0x1) accept(r3, 0x0, 0x0) 824.009043ms ago: executing program 1 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1/authorized\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='1\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/authorized\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/3-1/authorized\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/4-1/authorized\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='1\n\x00', 0x2) 551.872362ms ago: executing program 0 (id=14): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c605159200000102000109022700050100a0320904040003ff000000070581030002ff0705820200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000150)='./sys\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/class/net/wwan0/qmi/raw_ip\x00', 0x0, 0x0) read(r1, &(0x7f0000000300), 0x10) 0s ago: executing program 3 (id=15): r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), 0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r4 = syz_ublk_add_dev(r1, 0x0, r2, r3, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) syz_io_uring_submit$UBLK(0x0, r2, r3, &(0x7f0000000600)=@ublk_set_params_sqe={0x2e, 0x0, 0x0, r0, 0xc0207508, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x30, &(0x7f0000000680)={0x30, 0x1, {0x0, 0x9, 0xc, 0xc, 0x9, 0x8}}}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) r6 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r4, 0x2) syz_ublk_setup_queues(r6, r5, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) r7 = getpid() syz_io_uring_submit$UBLK(0x0, r2, r3, &(0x7f0000000c00)=@ublk_start_dev_sqe={0x2e, 0x0, 0x0, r0, 0xc0207506, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {r4, 0xffff, 0x0, 0x0, r7}}) io_uring_enter(r1, 0x1, 0x1, 0x1, 0x0, 0x0) nanosleep(&(0x7f0000001a80)={0x5}, &(0x7f0000001ac0)) syz_open_dev$ublk_bdev(&(0x7f0000003000), r4, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.184' (ED25519) to the list of known hosts. [ 64.773503][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 64.773518][ T30] audit: type=1400 audit(1786956855.680:129): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 64.803330][ T30] audit: type=1400 audit(1786956855.710:130): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.806115][ T5580] cgroup: Unknown subsys name 'net' [ 64.832230][ T30] audit: type=1400 audit(1786956855.750:131): avc: denied { unmount } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 64.996191][ T5580] cgroup: Unknown subsys name 'cpuset' [ 65.003657][ T5580] cgroup: Unknown subsys name 'rlimit' [ 65.123368][ T30] audit: type=1400 audit(1786956856.030:132): avc: denied { setattr } for pid=5580 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 65.147049][ T30] audit: type=1400 audit(1786956856.040:133): avc: denied { create } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.172071][ T30] audit: type=1400 audit(1786956856.040:134): avc: denied { write } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.209030][ T30] audit: type=1400 audit(1786956856.040:135): avc: denied { read } for pid=5580 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 65.233096][ T30] audit: type=1400 audit(1786956856.050:136): avc: denied { mounton } for pid=5580 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 65.257363][ T5583] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 65.258656][ T30] audit: type=1400 audit(1786956856.050:137): avc: denied { mount } for pid=5580 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 65.289962][ T30] audit: type=1400 audit(1786956856.190:138): avc: denied { relabelto } for pid=5583 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 66.205164][ T5580] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 68.243238][ T5599] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 68.252318][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 68.264747][ T5600] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 68.273362][ T5600] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 68.280922][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 68.282535][ T5606] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 68.288840][ T5600] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 68.296495][ T5606] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 68.304686][ T5600] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 68.317571][ T5606] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 68.322933][ T5607] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 68.325625][ T5606] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 68.333102][ T5600] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 68.341698][ T5606] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 68.347562][ T5607] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 68.354262][ T5606] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 68.361639][ T5600] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 68.368488][ T5606] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 68.376634][ T5600] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 68.382454][ T5606] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 68.388963][ T5600] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 68.405752][ T5600] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 68.405844][ T5606] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 68.414635][ T5600] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 68.427416][ T5606] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.572295][ T5598] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.580147][ T5598] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.588505][ T5598] bridge_slave_0: entered allmulticast mode [ 69.596395][ T5598] bridge_slave_0: entered promiscuous mode [ 69.636861][ T5598] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.644020][ T5598] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.651189][ T5598] bridge_slave_1: entered allmulticast mode [ 69.658024][ T5598] bridge_slave_1: entered promiscuous mode [ 69.739462][ T5591] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.746921][ T5591] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.754107][ T5591] bridge_slave_0: entered allmulticast mode [ 69.760723][ T5591] bridge_slave_0: entered promiscuous mode [ 69.773019][ T5598] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.794588][ T5591] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.801708][ T5591] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.808996][ T5591] bridge_slave_1: entered allmulticast mode [ 69.815776][ T5591] bridge_slave_1: entered promiscuous mode [ 69.830738][ T5598] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 69.892912][ T5592] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.900135][ T5592] bridge0: port 1(bridge_slave_0) entered disabled state [ 69.907591][ T5592] bridge_slave_0: entered allmulticast mode [ 69.914446][ T5592] bridge_slave_0: entered promiscuous mode [ 69.940158][ T5591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 69.949477][ T5592] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.956695][ T5592] bridge0: port 2(bridge_slave_1) entered disabled state [ 69.963959][ T5592] bridge_slave_1: entered allmulticast mode [ 69.970607][ T5592] bridge_slave_1: entered promiscuous mode [ 69.978685][ T5598] team0: Port device team_slave_0 added [ 69.988177][ T5593] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.995411][ T5593] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.002576][ T5593] bridge_slave_0: entered allmulticast mode [ 70.009422][ T5593] bridge_slave_0: entered promiscuous mode [ 70.018070][ T5591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.034771][ T5598] team0: Port device team_slave_1 added [ 70.047681][ T5593] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.054829][ T5593] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.062029][ T5593] bridge_slave_1: entered allmulticast mode [ 70.068862][ T5593] bridge_slave_1: entered promiscuous mode [ 70.114114][ T5592] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.129215][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.136500][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.143620][ T5595] bridge_slave_0: entered allmulticast mode [ 70.150489][ T5595] bridge_slave_0: entered promiscuous mode [ 70.164537][ T5591] team0: Port device team_slave_0 added [ 70.171759][ T5592] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.181943][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.189048][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.214995][ T5598] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.226638][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.234101][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.241203][ T5595] bridge_slave_1: entered allmulticast mode [ 70.248048][ T5595] bridge_slave_1: entered promiscuous mode [ 70.256996][ T5593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.267699][ T5591] team0: Port device team_slave_1 added [ 70.279676][ T5598] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.286740][ T5598] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.313308][ T5598] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.332037][ T5593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.382276][ T5592] team0: Port device team_slave_0 added [ 70.389693][ T5592] team0: Port device team_slave_1 added [ 70.397183][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.412598][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.419818][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.444752][ T5606] Bluetooth: hci2: command tx timeout [ 70.446034][ T5594] Bluetooth: hci1: command tx timeout [ 70.451566][ T5600] Bluetooth: hci4: command tx timeout [ 70.456957][ T5594] Bluetooth: hci0: command tx timeout [ 70.468669][ T5591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.480804][ T5591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.487904][ T5591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.513835][ T5591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.533246][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.537777][ T5594] Bluetooth: hci3: command tx timeout [ 70.551730][ T5593] team0: Port device team_slave_0 added [ 70.582468][ T5593] team0: Port device team_slave_1 added [ 70.599419][ T5598] hsr_slave_0: entered promiscuous mode [ 70.605725][ T5598] hsr_slave_1: entered promiscuous mode [ 70.612224][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.619397][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.645306][ T5592] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.657836][ T5595] team0: Port device team_slave_0 added [ 70.677291][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.684271][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.710160][ T5593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.721838][ T5592] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.728817][ T5592] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.755220][ T5592] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.767377][ T5595] team0: Port device team_slave_1 added [ 70.785654][ T5593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.792688][ T5593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.818606][ T5593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.854654][ T5591] hsr_slave_0: entered promiscuous mode [ 70.860705][ T5591] hsr_slave_1: entered promiscuous mode [ 70.866785][ T5591] debugfs: 'hsr0' already exists in 'hsr' [ 70.872544][ T5591] Cannot create hsr debugfs directory [ 70.920164][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.927219][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 70.953543][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.985469][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.992486][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 71.019182][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 71.026157][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.037449][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.045218][ T5593] hsr_slave_0: entered promiscuous mode [ 71.051270][ T5593] hsr_slave_1: entered promiscuous mode [ 71.057613][ T5593] debugfs: 'hsr0' already exists in 'hsr' [ 71.063343][ T5593] Cannot create hsr debugfs directory [ 71.094979][ T5592] hsr_slave_0: entered promiscuous mode [ 71.101025][ T5592] hsr_slave_1: entered promiscuous mode [ 71.107205][ T5592] debugfs: 'hsr0' already exists in 'hsr' [ 71.112939][ T5592] Cannot create hsr debugfs directory [ 71.210151][ T5595] hsr_slave_0: entered promiscuous mode [ 71.216216][ T5595] hsr_slave_1: entered promiscuous mode [ 71.222061][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 71.227822][ T5595] Cannot create hsr debugfs directory [ 71.469928][ T5598] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 71.480917][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.489662][ T5598] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 71.499329][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.507067][ T5598] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 71.516317][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.524920][ T5598] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 71.534669][ T5598] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.595982][ T5591] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 71.605988][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.615963][ T5591] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 71.624735][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.632351][ T5591] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 71.641522][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.651752][ T5591] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 71.660728][ T5591] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.726615][ T5592] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.736110][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.752314][ T5592] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.761538][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.769508][ T5592] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.778796][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.786972][ T5592] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.795676][ T5592] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.836797][ T5598] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.887841][ T5593] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 71.897697][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 71.906796][ T5593] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 71.916465][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 71.930963][ T5593] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 71.939458][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 71.947570][ T5593] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 71.956380][ T5593] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 71.978962][ T5598] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.998645][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.005966][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.036180][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.043304][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.080402][ T5595] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 72.089923][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 72.098410][ T5595] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 72.108677][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 72.127985][ T5595] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 72.137159][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 72.150584][ T5595] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 72.160471][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 72.197227][ T5591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.252166][ T5592] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.266999][ T5591] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.294097][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.294491][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 72.294502][ T30] audit: type=1400 audit(1786956863.210:152): avc: denied { sys_module } for pid=5598 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 72.301204][ T443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.357730][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.364895][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.409198][ T5593] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.418050][ T5592] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.441538][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.448645][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.488094][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.495261][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.515335][ T5593] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.526248][ T5594] Bluetooth: hci0: command tx timeout [ 72.526272][ T5600] Bluetooth: hci4: command tx timeout [ 72.532166][ T5594] Bluetooth: hci2: command tx timeout [ 72.537517][ T5606] Bluetooth: hci1: command tx timeout [ 72.559633][ T5592] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 72.571406][ T5592] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 72.604269][ T5594] Bluetooth: hci3: command tx timeout [ 72.625109][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 72.663165][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.670338][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.701238][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.708434][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.752114][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 72.784888][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.792019][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.831297][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.838458][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.028245][ T5598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.209922][ T5598] veth0_vlan: entered promiscuous mode [ 73.261060][ T5598] veth1_vlan: entered promiscuous mode [ 73.291640][ T5591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.374486][ T5592] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.408176][ T5598] veth0_macvtap: entered promiscuous mode [ 73.435523][ T5598] veth1_macvtap: entered promiscuous mode [ 73.499017][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.527632][ T5598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.637717][ T5592] veth0_vlan: entered promiscuous mode [ 73.684284][ T5592] veth1_vlan: entered promiscuous mode [ 73.741692][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.806795][ T5593] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.815770][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.826434][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.831948][ T5592] veth0_macvtap: entered promiscuous mode [ 73.857779][ T5592] veth1_macvtap: entered promiscuous mode [ 73.900392][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.904921][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.912539][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.947860][ T5592] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.959073][ T30] audit: type=1400 audit(1786956864.870:153): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.7N328F/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 73.993423][ T30] audit: type=1400 audit(1786956864.870:154): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 74.013131][ T5591] veth0_vlan: entered promiscuous mode [ 74.016177][ T30] audit: type=1400 audit(1786956864.870:155): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.7N328F/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 74.050344][ T30] audit: type=1400 audit(1786956864.870:156): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 74.051840][ T5591] veth1_vlan: entered promiscuous mode [ 74.087136][ T5598] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 74.098165][ T30] audit: type=1400 audit(1786956864.870:157): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.7N328F/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 74.130980][ T30] audit: type=1400 audit(1786956864.870:158): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/root/syzkaller.7N328F/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=8242 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 74.139662][ T5593] veth0_vlan: entered promiscuous mode [ 74.165712][ T5749] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.168137][ T30] audit: type=1400 audit(1786956864.870:159): avc: denied { unmount } for pid=5598 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 74.194928][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.212085][ T30] audit: type=1400 audit(1786956864.900:160): avc: denied { mounton } for pid=5598 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 74.255753][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.290518][ T30] audit: type=1400 audit(1786956864.900:161): avc: denied { mount } for pid=5598 comm="syz-executor" name="/" dev="gadgetfs" ino=8263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 74.299895][ T5591] veth0_macvtap: entered promiscuous mode [ 74.349894][ T5593] veth1_vlan: entered promiscuous mode [ 74.366540][ T5595] veth0_vlan: entered promiscuous mode [ 74.377642][ T5591] veth1_macvtap: entered promiscuous mode [ 74.385843][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.395573][ T5749] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.418067][ T5749] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.440127][ T5595] veth1_vlan: entered promiscuous mode [ 74.493869][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.505270][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.515573][ T57] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.545886][ T57] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.562630][ T5591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.573280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.577686][ T5593] veth0_macvtap: entered promiscuous mode [ 74.584795][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.600610][ T5593] veth1_macvtap: entered promiscuous mode [ 74.604734][ T5594] Bluetooth: hci2: command tx timeout [ 74.607443][ T50] Bluetooth: hci1: command tx timeout [ 74.611848][ T5594] Bluetooth: hci0: command tx timeout [ 74.620399][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.623494][ T5600] Bluetooth: hci4: command tx timeout [ 74.668460][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.680493][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.688665][ T5594] Bluetooth: hci3: command tx timeout [ 74.727573][ T5595] veth0_macvtap: entered promiscuous mode [ 74.739956][ T5593] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.754550][ T5749] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.775042][ T982] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 74.814601][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.832093][ T5595] veth1_macvtap: entered promiscuous mode [ 74.845239][ T57] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.848178][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.861920][ T443] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.864675][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.902794][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 74.944758][ T982] usb 3-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 74.956744][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.969733][ T982] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.988896][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.003404][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.007641][ T982] i2c-tiny-usb 3-1:1.0: version 1.00 found at bus 003 address 002 [ 75.043433][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.063651][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.084182][ T443] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.209175][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.223349][ T982] (null): failure reading functionality [ 75.244105][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.265376][ T982] i2c i2c-1: failure reading functionality [ 75.270779][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.307920][ T5805] i2c i2c-0: new_device: Instantiated device wcd939x-usbss at 0x42 [ 75.315299][ T982] i2c i2c-1: connected i2c-tiny-usb device [ 75.322124][ T36] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.356638][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.365037][ T5805] i2c i2c-1: new_device: Instantiated device wcd939x-usbss at 0x42 [ 75.411229][ T5805] i2c i2c-0: new_device: Instantiated device nb7vpq904m at 0x43 [ 75.428718][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.434889][ T5805] i2c i2c-1: failure reading functionality [ 75.445344][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.461882][ T5805] i2c i2c-1: failure reading functionality [ 75.481252][ T5810] i2c i2c-0: new_device: Instantiated device ptn36502 at 0x44 [ 75.525469][ T5812] loop0: detected capacity change from 0 to 32768 [ 75.535286][ T5812] loop2: detected capacity change from 0 to 32768 [ 75.535800][ T5328] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 75.566855][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.581688][ T5812] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 75.593575][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.617167][ T5749] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.642627][ T5749] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.654068][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.743860][ T5328] usb 1-1: Using ep0 maxpacket: 8 [ 75.749531][ T5328] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 75.775654][ T5812] md: loop1 has zero or unknown size, marking faulty! [ 75.775821][ T5328] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 75.803475][ T5328] usb 1-1: config 0 has no interface number 0 [ 75.815782][ T5328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 75.830235][ T5328] usb 1-1: config 0 descriptor?? [ 75.947371][ T5328] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 75.996308][ T5818] loop1: detected capacity change from 0 to 32768 [ 76.011763][ T5818] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 76.058195][ T5328] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 76.086311][ T5328] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 76.128442][ T5328] usb 1-1: USB disconnect, device number 2 [ 76.187600][ T5818] md: could not open device unknown-block(7,2). [ 76.418149][ T5823] configfs-gadget.g1 gadget.0: HOST MAC f6:e3:7e:ee:71:88 [ 76.427298][ T5823] configfs-gadget.g1 gadget.0: MAC 36:3c:31:c4:51:45 [ 76.657338][ T5686] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 76.671839][ T5838] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 76.685965][ T5594] Bluetooth: hci0: command tx timeout [ 76.689776][ T5606] Bluetooth: hci1: command tx timeout [ 76.691518][ T50] Bluetooth: hci2: command tx timeout [ 76.696817][ T5600] Bluetooth: hci4: command tx timeout [ 76.711977][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 76.734759][ T5838] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 76.763943][ T50] Bluetooth: hci3: command tx timeout [ 76.813899][ T5686] usb 2-1: Using ep0 maxpacket: 8 [ 76.821247][ T5686] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 76.837466][ T5686] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 76.848818][ T5686] usb 2-1: config 0 has no interface number 0 [ 76.855185][ T5686] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.869225][ T5686] usb 2-1: config 0 descriptor?? [ 76.877540][ T10] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 76.890475][ T10] usb 1-1: Dual-Role OTG device on HNP port [ 76.897417][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.947313][ T10] cdc_ncm 1-1:1.0: MAC-Address: f6:e3:7e:ee:71:88 [ 76.972710][ T10] cdc_ncm 1-1:1.0 usb1: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM (NO ZLP), f6:e3:7e:ee:71:88 [ 76.994689][ T5686] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 77.051389][ T5686] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 77.067094][ T5686] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 77.284671][ T5810] i2c i2c-1: failure reading functionality [ 77.285125][ T5805] i2c i2c-1: failure reading functionality [ 77.298688][ T5805] nb7vpq904m 1-0043: Failed to allocate register map [ 77.303713][ T9] usb 3-1: USB disconnect, device number 2 [ 77.312973][ T5810] i2c i2c-1: failure reading functionality [ 77.327810][ T5805] nb7vpq904m 1-0043: probe with driver nb7vpq904m failed with error -524 [ 77.342362][ T5810] i2c i2c-1: failure reading functionality [ 77.348812][ T30] kauditd_printk_skb: 48 callbacks suppressed [ 77.348828][ T30] audit: type=1400 audit(1786956868.260:210): avc: denied { write } for pid=5859 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.352769][ T5805] i2c i2c-1: new_device: Instantiated device nb7vpq904m at 0x43 [ 77.355167][ T5810] ptn36502 1-0044: Failed to allocate register map [ 77.355208][ T5810] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000028: 0000 [#1] SMP KASAN NOPTI [ 77.355226][ T5810] KASAN: null-ptr-deref in range [0x0000000000000140-0x0000000000000147] [ 77.355243][ T5810] CPU: 1 UID: 0 PID: 5810 Comm: syz.4.5 Not tainted syzkaller #0 PREEMPT(full) [ 77.355265][ T5810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.355276][ T5810] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 77.355309][ T5810] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 77.355327][ T5810] RSP: 0018:ffffc9000520f530 EFLAGS: 00010286 [ 77.355344][ T5810] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 77.355355][ T5810] RDX: 0000000000000000 RSI: ffffffff81e54cd4 RDI: dffffc0000000028 [ 77.355366][ T5810] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 77.355377][ T5810] R10: ffff888055b4d9b3 R11: 0000000000000000 R12: ffffffff81e54cd4 [ 77.355388][ T5810] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 77.355398][ T5810] FS: 00007f85c47f66c0(0000) GS:ffff888123cde000(0000) knlGS:0000000000000000 [ 77.510745][ T5810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.517316][ T5810] CR2: 00007fafbcbeb7c0 CR3: 000000002a79a000 CR4: 00000000003526f0 [ 77.525269][ T5810] Call Trace: [ 77.528526][ T5810] [ 77.531434][ T5810] __kasan_check_byte+0x13/0x50 [ 77.536272][ T5810] lock_acquire+0x132/0x370 [ 77.540760][ T5810] ? __pfx___might_resched+0x10/0x10 [ 77.546027][ T5810] down_write_nested+0x94/0x200 [ 77.550888][ T5810] ? __simple_recursive_removal+0x7f/0x5c0 [ 77.556686][ T5810] ? __pfx_down_write_nested+0x10/0x10 [ 77.562130][ T5810] ? __simple_recursive_removal+0x3d/0x5c0 [ 77.567919][ T5810] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.573103][ T5810] __simple_recursive_removal+0x7f/0x5c0 [ 77.578717][ T5810] ? __pfx_remove_one+0x10/0x10 [ 77.583553][ T5810] ? mntput+0x70/0xa0 [ 77.587518][ T5810] debugfs_remove+0x5d/0x80 [ 77.592005][ T5810] i2c_device_probe+0x6e2/0xd10 [ 77.596842][ T5810] ? kernfs_put+0x3f/0x60 [ 77.601152][ T5810] ? __pfx_i2c_device_probe+0x10/0x10 [ 77.606510][ T5810] ? sysfs_create_link+0x68/0xc0 [ 77.611444][ T5810] ? __pfx_i2c_device_probe+0x10/0x10 [ 77.616801][ T5810] really_probe+0x241/0xa60 [ 77.621291][ T5810] __driver_probe_device+0x20e/0x450 [ 77.626572][ T5810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 77.632458][ T5810] driver_probe_device+0x4a/0x140 [ 77.637467][ T5810] __device_attach_driver+0x1df/0x320 [ 77.642823][ T5810] ? __pfx___device_attach_driver+0x10/0x10 [ 77.648698][ T5810] bus_for_each_drv+0x159/0x1e0 [ 77.653529][ T5810] ? __pfx_bus_for_each_drv+0x10/0x10 [ 77.658970][ T5810] ? lockdep_hardirqs_on+0x78/0x100 [ 77.664151][ T5810] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.669952][ T5810] __device_attach+0x1e4/0x4d0 [ 77.674712][ T5810] ? __pfx___device_attach+0x10/0x10 [ 77.679980][ T5810] ? do_raw_spin_unlock+0x145/0x1e0 [ 77.685182][ T5810] device_initial_probe+0xaf/0xd0 [ 77.690191][ T5810] bus_probe_device+0x64/0x160 [ 77.694937][ T5810] device_add+0x121d/0x1970 [ 77.699427][ T5810] ? __pfx_device_add+0x10/0x10 [ 77.704263][ T5810] ? lockdep_init_map_type+0x5c/0x250 [ 77.709618][ T5810] ? __init_waitqueue_head+0xca/0x150 [ 77.714975][ T5810] i2c_new_client_device+0x660/0xd30 [ 77.720249][ T5810] new_device_store+0x20f/0x420 [ 77.725085][ T5810] ? __lock_acquire+0x49f/0x1a40 [ 77.730002][ T5810] ? __pfx_new_device_store+0x10/0x10 [ 77.735362][ T5810] ? find_held_lock+0x2b/0x80 [ 77.740017][ T5810] ? sysfs_file_kobj+0xe4/0x290 [ 77.744856][ T5810] ? sysfs_file_kobj+0xe4/0x290 [ 77.749691][ T5810] ? __pfx_new_device_store+0x10/0x10 [ 77.755060][ T5810] dev_attr_store+0x58/0x80 [ 77.759550][ T5810] ? __pfx_dev_attr_store+0x10/0x10 [ 77.764738][ T5810] sysfs_kf_write+0xf2/0x150 [ 77.769309][ T5810] kernfs_fop_write_iter+0x3e0/0x5f0 [ 77.774578][ T5810] ? __pfx_sysfs_kf_write+0x10/0x10 [ 77.779755][ T5810] vfs_write+0x6ac/0x1050 [ 77.784061][ T5810] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 77.789854][ T5810] ? __pfx_vfs_write+0x10/0x10 [ 77.794613][ T5810] ksys_write+0x12a/0x250 [ 77.798919][ T5810] ? __pfx_ksys_write+0x10/0x10 [ 77.803748][ T5810] do_syscall_64+0x115/0x870 [ 77.808320][ T5810] ? clear_bhb_loop+0x70/0xc0 [ 77.812982][ T5810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 77.818855][ T5810] RIP: 0033:0x7f85c659e0d9 [ 77.823350][ T5810] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 77.842951][ T5810] RSP: 002b:00007f85c47f6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 77.851356][ T5810] RAX: ffffffffffffffda RBX: 00007f85c6826090 RCX: 00007f85c659e0d9 [ 77.859305][ T5810] RDX: 000000000000000d RSI: 0000200000000600 RDI: 0000000000000008 [ 77.867256][ T5810] RBP: 00007f85c6635024 R08: 0000000000000000 R09: 0000000000000000 [ 77.875207][ T5810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 77.883157][ T5810] R13: 00007f85c6826128 R14: 00007f85c6826090 R15: 00007ffd65f05fa8 [ 77.891109][ T5810] [ 77.894108][ T5810] Modules linked in: [ 77.899380][ T5810] ---[ end trace 0000000000000000 ]--- [ 77.905087][ T30] audit: type=1400 audit(1786956868.820:211): avc: denied { read } for pid=4944 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 77.923078][ T5810] RIP: 0010:kasan_byte_accessible+0x15/0x30 [ 77.932963][ T30] audit: type=1400 audit(1786956868.820:212): avc: denied { search } for pid=4944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.932973][ T5810] Code: 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 48 b8 00 00 00 00 00 fc ff df 48 c1 ef 03 48 01 c7 <0f> b6 07 3c 07 0f 96 c0 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 [ 77.932993][ T5810] RSP: 0018:ffffc9000520f530 EFLAGS: 00010286 [ 77.974104][ T30] audit: type=1400 audit(1786956868.820:213): avc: denied { write search } for pid=4944 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.974139][ T30] audit: type=1400 audit(1786956868.820:214): avc: denied { add_name } for pid=4944 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.974164][ T30] audit: type=1400 audit(1786956868.820:215): avc: denied { create } for pid=4944 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.974190][ T30] audit: type=1400 audit(1786956868.820:216): avc: denied { append open } for pid=4944 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 77.974214][ T30] audit: type=1400 audit(1786956868.820:217): avc: denied { getattr } for pid=4944 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 78.096411][ T5686] usb 2-1: USB disconnect, device number 2 [ 78.121295][ T5810] [ 78.123668][ T5810] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 78.132621][ T5810] RDX: 0000000000000000 RSI: ffffffff81e54cd4 RDI: dffffc0000000028 [ 78.155422][ T5810] RBP: 0000000000000140 R08: 0000000000000001 R09: 0000000000000000 [ 78.163453][ T5810] R10: ffff888055b4d9b3 R11: 0000000000000000 R12: ffffffff81e54cd4 [ 78.173012][ T5810] R13: 0000000000000001 R14: 0000000000000002 R15: 0000000000000000 [ 78.181056][ T5810] FS: 00007f85c47f66c0(0000) GS:ffff888123bde000(0000) knlGS:0000000000000000 [ 78.190993][ T5810] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 78.199719][ T5810] CR2: 0000559eafe556d8 CR3: 000000002a79a000 CR4: 00000000003526f0 [ 78.208246][ T5810] Kernel panic - not syncing: Fatal exception [ 78.214522][ T5810] Kernel Offset: disabled [ 78.218825][ T5810] Rebooting in 86400 seconds..