last executing test programs: 8.882276502s ago: executing program 2 (id=3): unshare(0x40000000) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000600)={'lo\x00', 0x41}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000700)={'lo\x00', {0x2, 0x0, @empty=0x7f000001}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r3, &(0x7f0000000140)='0\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r4, &(0x7f00000001c0)='0\n\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r5, &(0x7f0000000240)='1\n\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000002c0)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000340)='mydomain / 2147483647 9216 0 0 0\n\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./mnt\x00', 0x1ff) mount(&(0x7f00000003c0)=@filename='127.0.0.1:/\x00', &(0x7f0000000380)='./mnt\x00', &(0x7f0000000400)='nfs4\x00', 0x0, &(0x7f0000000440)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000480)='./mnt/file\x00', 0x42, 0x1ff) 8.483583439s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/class/drm/card0/uevent\x00', 0x0, 0x0) read(r0, &(0x7f0000000400)=""/256, 0x100) 8.411663024s ago: executing program 3 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='8086 100e\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:04.0\x00', 0xd) 8.264428316s ago: executing program 3 (id=7): r0 = syz_usb_connect(0x2, 0x80, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408c0d030100010102030109026400020100803209040000000101000009240100011e0001010c2402010102000203000000092403020101000100090401000001020000090401010101020000072401020101000b2402010202100180bb0009058101c0000100000725010100"/128], &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x10, &(0x7f0000000600)={0x20, 0x81, 0x3, "80bb00"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc0c85512, &(0x7f0000000400)={{0x1}}) 7.885055689s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/nfs/parameters/callback_tcpport\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='2049\n', 0x5) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./nfsd\x00', &(0x7f0000000240)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='tcp 2050\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00') mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00') mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00') mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00') mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs\x00', &(0x7f0000000440)='nfs4\x00', 0x0, &(0x7f0000000480)='vers=4.0,addr=127.0.0.1,port=2050\x00') r4 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r4, &(0x7f0000000500)={0x2, 0x801, @loopback}, 0x10) write(r4, &(0x7f0000000600)="80000028123456780000000000000002000186a30000000300000000000003e700"/44, 0x2c) 7.864127355s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r5 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 7.69773919s ago: executing program 4 (id=5): r0 = syz_usb_connect(0x3, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004024042c0100000000000109022e0001010080320904000004ffffff0007058102400000070502024000000705830240000007050402400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x4, "04000001"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.145320902s ago: executing program 2 (id=8): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x0, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.937099437s ago: executing program 0 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='10 1 1\x00', 0x6) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x32, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x33, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x34, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x35, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x36, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x37, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x38, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x39, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3a, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3b, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000b80)=@newqdisc={0x88, 0x24, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x3c, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x1, [0x1]}}}}]}, 0x88}}, 0x0) 5.856203625s ago: executing program 1 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000240)='nfs4\x00', 0x0, &(0x7f0000000280)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt/file\x00', 0x42, 0x1ff) 5.536742544s ago: executing program 0 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./dummy\x00', 0x42, 0x1ff) ftruncate(r0, 0x30000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/uprobe_events\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='p:mygroup/myevent ./dummy:0x10000\n\x00', 0x22) write(r1, &(0x7f0000000400)='p:mygroup/myevent ./dummy:0x20000\n\x00', 0x22) 5.484710372s ago: executing program 0 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='reg-fixed-voltage\x00', 0x12) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/reg-fixed-voltage/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) 5.418834432s ago: executing program 0 (id=13): r0 = syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff4082057d0000000000000109026800030100c0000904000000ffffff000904000101ffffff000b2402010203180144ac00070501010002010904010000ffffff000904010101ffffff000b2402010203180144ac00070582010002010904020002ffffff000705030200020007058402000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x4, "44ac0000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x2}, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000400), 0x1, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000500), 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000600), 0x2, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000700), 0x2, 0x0) 5.287442738s ago: executing program 1 (id=14): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600)={0x0, 0x0, 0x2, '\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 5.186822191s ago: executing program 3 (id=15): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000000c0)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000180), 0x2) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000100)="02fa", 0x2}, {&(0x7f0000000110)="0200", 0x2}, {&(0x7f0000000120)="0200", 0x2}, {&(0x7f0000000130)="02fa", 0x2}, {&(0x7f0000000140)="0273", 0x2}, {&(0x7f0000000150)="0202", 0x2}, {&(0x7f0000000160)="0264", 0x2}], 0x7) 4.608322016s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000001d00)='./nfsd/recoverydir\x00', 0x2, 0x0) write(r2, &(0x7f0000001e00)='/tmp\n', 0x5) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r4, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r6 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000900)='127.0.0.1 / 2147483647 74754 0 0 0\n', 0x23) r7 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r7, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r8, &(0x7f0000000f00)='2\n', 0x2) nanosleep(&(0x7f0000001c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r9, &(0x7f0000001500)='test\x00', 0x4) 4.429970143s ago: executing program 4 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000001b00)='-2 -3 +4\n', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000001700)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./nfsd/v4_end_grace\x00', 0x2, 0x0) write(r3, &(0x7f0000001900)='Y\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./proc\x00', &(0x7f0000000500)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000700)='nfsd 127.0.0.1 2147483647 127.0.0.1\n', 0x24) r5 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000900)='127.0.0.1 / 2147483647 9218 0 0 0\n', 0x22) r6 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000b00)='127.0.0.1 1 \\x00000000 2147483647 /\n', 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000c00)='./debug\x00', &(0x7f0000000d00)='debugfs\x00', 0x0, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/nfsd/io_cache_write\x00', 0x2, 0x0) write(r7, &(0x7f0000000f00)='2\n', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt\x00', 0x1ff) mount(&(0x7f0000001100)=@filename='127.0.0.1:/\x00', &(0x7f0000001000)='./mnt\x00', &(0x7f0000001200)='nfs4\x00', 0x0, &(0x7f0000001300)='addr=127.0.0.1,clientaddr=127.0.0.1\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/test\x00', 0x42, 0x0) write(r8, &(0x7f0000001500)='test\x00', 0x4) 4.401703454s ago: executing program 3 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./nfsd/versions\x00', 0x2, 0x0) write(r1, &(0x7f0000000740)='-2 -3 +4\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) write(r0, &(0x7f0000000640)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./tmp\x00', 0x1ff) mount(0x0, &(0x7f0000000400)='./tmp\x00', &(0x7f0000000440)='tmpfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 *\n\x00', 0x1c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000140)='* / 2147483647 8192 0 0 0 fsloc 1 127.0.0.1 / 1\n\x00', 0x30) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000540)='127.0.0.1:/\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580), 0x0, &(0x7f00000005c0)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) 3.186089982s ago: executing program 2 (id=19): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a300000000008004100727865000a0033007665746830000000"], 0x30}}, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="300000001e14010000000000000000000900020073797a310000000008004100727865000a0033007665746831000000"], 0x30}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) listen(r1, 0x10) r2 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r2, &(0x7f0000000500)={0x2, 0x0, @rand_addr=0xac141414}, 0x10) connect$inet(r2, &(0x7f0000000400)={0x2, 0x4d2, @rand_addr=0xac141415}, 0x10) 2.984512129s ago: executing program 3 (id=20): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40402000240001010203010902200001010080fa0904000002ffffff000705810200020007050102000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0800000100") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x6, &(0x7f0000000100)="080102000000") syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000001000)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') clock_nanosleep(0x0, 0x0, &(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) ioctl$VIDIOC_LOG_STATUS(r1, 0x5446, 0x0) 2.34703058s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='mem\n', 0x4) 1.657172646s ago: executing program 4 (id=22): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) 1.551461501s ago: executing program 1 (id=23): r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 -4.0 -4.1 +4.2\n\x00', 0x15) 1.4943796s ago: executing program 2 (id=24): syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407205feca00010000000109022e0001010080fa0904000004ff00000007058102400000070501024000000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) setns(0xc9, 0x0) r0 = socket(0x8, 0x2, 0x0) setsockopt(r0, 0x108, 0x16080002, &(0x7f0000000200)='010000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000005000000', 0x54) bind(r0, &(0x7f0000000300)=@generic={0x8}, 0xc) 1.386640433s ago: executing program 4 (id=25): r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000040)='\x00'/24) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40986f00, &(0x7f0000000140)="0000000001000000000000010000000003000600000000006d795f766f6c00"/154) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000240)=@filename='ubi0_0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000280)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000002c0)='./mnt/test\x00', 0x42, 0x1ff) 1.384751577s ago: executing program 1 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='e1000e\x00', 0x7) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/e1000e/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0000:00:03.0\x00', 0xd) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8923, &(0x7f0000000800)='eth0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00syzkaller0\x00'/40) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000a00)={'syzkaller0\x00', &(0x7f0000000b00)=@ethtool_test={0x1a, 0x1}}) 271.133754ms ago: executing program 4 (id=27): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) sendfile(r0, r1, 0x0, 0x20000) 0s ago: executing program 4 (id=28): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="002109000000092111010001224e00"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000400)={0x20, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) kernel console output (not intermixed with test programs): [ 53.973283][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 53.973297][ T30] audit: type=1400 audit(1785855172.872:127): avc: denied { write } for pid=5578 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.020554][ T30] audit: type=1400 audit(1785855172.922:128): avc: denied { write } for pid=5589 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.1.5' (ED25519) to the list of known hosts. [ 59.252211][ T30] audit: type=1400 audit(1785855178.152:129): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 59.275946][ T30] audit: type=1400 audit(1785855178.182:130): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.278652][ T5597] cgroup: Unknown subsys name 'net' [ 59.305614][ T30] audit: type=1400 audit(1785855178.212:131): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 59.426462][ T5597] cgroup: Unknown subsys name 'cpuset' [ 59.434604][ T5597] cgroup: Unknown subsys name 'rlimit' [ 59.551862][ T30] audit: type=1400 audit(1785855178.452:132): avc: denied { setattr } for pid=5597 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 59.575679][ T30] audit: type=1400 audit(1785855178.452:133): avc: denied { create } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.601516][ T30] audit: type=1400 audit(1785855178.452:134): avc: denied { write } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.638889][ T30] audit: type=1400 audit(1785855178.452:135): avc: denied { read } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.660178][ T30] audit: type=1400 audit(1785855178.452:136): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 59.664194][ T5599] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 59.685356][ T30] audit: type=1400 audit(1785855178.452:137): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 59.717437][ T30] audit: type=1400 audit(1785855178.602:138): avc: denied { relabelto } for pid=5599 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 60.648097][ T5597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 62.598766][ T5612] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 62.615038][ T5616] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 62.634567][ T5623] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 62.635335][ T5621] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 62.642426][ T5623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 62.650836][ T5621] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 62.662034][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 62.664499][ T5621] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 62.671341][ T5623] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 62.685183][ T5624] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 62.686200][ T5621] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 62.692866][ T5624] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 62.700004][ T5621] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 62.707982][ T5623] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 62.713572][ T5621] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 62.722700][ T5623] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 62.727829][ T5621] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 62.735407][ T5623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 62.743956][ T5621] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 62.749389][ T5623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.756891][ T5621] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 62.769606][ T5621] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 62.776810][ T50] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 62.784685][ T5621] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 62.791940][ T50] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.970547][ T5619] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.977748][ T5619] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.985048][ T5619] bridge_slave_0: entered allmulticast mode [ 63.991770][ T5619] bridge_slave_0: entered promiscuous mode [ 64.030300][ T5619] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.037503][ T5619] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.044660][ T5619] bridge_slave_1: entered allmulticast mode [ 64.051708][ T5619] bridge_slave_1: entered promiscuous mode [ 64.127044][ T5619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.159220][ T5619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.187557][ T5615] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.194671][ T5615] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.201759][ T5615] bridge_slave_0: entered allmulticast mode [ 64.208854][ T5615] bridge_slave_0: entered promiscuous mode [ 64.221267][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.228393][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.236351][ T5614] bridge_slave_0: entered allmulticast mode [ 64.242977][ T5614] bridge_slave_0: entered promiscuous mode [ 64.249821][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.256928][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.264069][ T5609] bridge_slave_0: entered allmulticast mode [ 64.270703][ T5609] bridge_slave_0: entered promiscuous mode [ 64.284520][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.291636][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.298951][ T5610] bridge_slave_0: entered allmulticast mode [ 64.306356][ T5610] bridge_slave_0: entered promiscuous mode [ 64.313042][ T5615] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.320153][ T5615] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.327339][ T5615] bridge_slave_1: entered allmulticast mode [ 64.334349][ T5615] bridge_slave_1: entered promiscuous mode [ 64.346886][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.354143][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.361302][ T5614] bridge_slave_1: entered allmulticast mode [ 64.368163][ T5614] bridge_slave_1: entered promiscuous mode [ 64.374889][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.381944][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.389220][ T5609] bridge_slave_1: entered allmulticast mode [ 64.395900][ T5609] bridge_slave_1: entered promiscuous mode [ 64.402973][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.410172][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.417578][ T5610] bridge_slave_1: entered allmulticast mode [ 64.424712][ T5610] bridge_slave_1: entered promiscuous mode [ 64.438396][ T5619] team0: Port device team_slave_0 added [ 64.478909][ T5619] team0: Port device team_slave_1 added [ 64.499905][ T5615] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.510754][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.527667][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.538614][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.549528][ T5615] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.560219][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.583472][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.593921][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.615709][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.622714][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.648769][ T5619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.679968][ T5610] team0: Port device team_slave_0 added [ 64.687703][ T5610] team0: Port device team_slave_1 added [ 64.698287][ T5619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.705294][ T5619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.731427][ T5619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.756172][ T5615] team0: Port device team_slave_0 added [ 64.774131][ T5614] team0: Port device team_slave_0 added [ 64.780844][ T5609] team0: Port device team_slave_0 added [ 64.788044][ T5615] team0: Port device team_slave_1 added [ 64.806818][ T5621] Bluetooth: hci4: command tx timeout [ 64.812266][ T5614] team0: Port device team_slave_1 added [ 64.814214][ T5609] team0: Port device team_slave_1 added [ 64.818415][ T5620] Bluetooth: hci1: command tx timeout [ 64.832161][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.839135][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.865076][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.883671][ T5620] Bluetooth: hci3: command tx timeout [ 64.889677][ T5621] Bluetooth: hci2: command tx timeout [ 64.889682][ T5612] Bluetooth: hci0: command tx timeout [ 64.903954][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.910897][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.936956][ T5615] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.948275][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.955270][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 64.981434][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.011468][ T5615] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.018527][ T5615] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.044433][ T5615] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.060365][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.067373][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.093268][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.108539][ T5619] hsr_slave_0: entered promiscuous mode [ 65.114803][ T5619] hsr_slave_1: entered promiscuous mode [ 65.121902][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.128951][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.154871][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.171887][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.178940][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.204909][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.220368][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.227380][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 65.253310][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.315307][ T5610] hsr_slave_0: entered promiscuous mode [ 65.321299][ T5610] hsr_slave_1: entered promiscuous mode [ 65.327577][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 65.333342][ T5610] Cannot create hsr debugfs directory [ 65.352717][ T5615] hsr_slave_0: entered promiscuous mode [ 65.358865][ T5615] hsr_slave_1: entered promiscuous mode [ 65.364884][ T5615] debugfs: 'hsr0' already exists in 'hsr' [ 65.370610][ T5615] Cannot create hsr debugfs directory [ 65.418868][ T5614] hsr_slave_0: entered promiscuous mode [ 65.424945][ T5614] hsr_slave_1: entered promiscuous mode [ 65.430831][ T5614] debugfs: 'hsr0' already exists in 'hsr' [ 65.436778][ T5614] Cannot create hsr debugfs directory [ 65.450337][ T5609] hsr_slave_0: entered promiscuous mode [ 65.456527][ T5609] hsr_slave_1: entered promiscuous mode [ 65.462391][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 65.468125][ T5609] Cannot create hsr debugfs directory [ 65.766511][ T1312] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.775041][ T1312] ieee802154 phy1 wpan1: encryption failed: -22 [ 65.795689][ T5619] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.806437][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.815534][ T5619] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.824891][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.832473][ T5619] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.841501][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.851016][ T5619] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.859773][ T5619] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 65.904670][ T5615] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.916921][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 65.930027][ T5615] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.940349][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 65.952417][ T5615] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.961426][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 65.969196][ T5615] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.978253][ T5615] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.041908][ T5610] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.051632][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.060130][ T5610] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.069869][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.077753][ T5610] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.086366][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.100315][ T5610] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.109097][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.204642][ T5614] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.213439][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.226541][ T5619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.238497][ T5614] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.247886][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.255743][ T5614] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.264329][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.272248][ T5614] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 66.280930][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.338490][ T5619] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.367291][ T5609] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.376930][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 66.386767][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.394258][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.408464][ T5609] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.416906][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 66.425744][ T5609] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.434810][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 66.448744][ T5615] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.461177][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.468289][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.475968][ T5609] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.485928][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 66.512849][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.535722][ T5615] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.562547][ T3360] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.569650][ T3360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.586473][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.605220][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.612329][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.630709][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.637789][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.678895][ T3360] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.686053][ T3360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.798476][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.865585][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.884268][ T5620] Bluetooth: hci4: command tx timeout [ 66.889685][ T5621] Bluetooth: hci1: command tx timeout [ 66.905539][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.932727][ T653] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.939909][ T653] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.963902][ T5621] Bluetooth: hci2: command tx timeout [ 66.964055][ T5612] Bluetooth: hci0: command tx timeout [ 66.975501][ T5620] Bluetooth: hci3: command tx timeout [ 66.982816][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.989978][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.028242][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.057559][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.064712][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.087426][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.094583][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.117987][ T5614] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 67.130835][ T5614] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.298829][ T5619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.437804][ T5619] veth0_vlan: entered promiscuous mode [ 67.478726][ T5619] veth1_vlan: entered promiscuous mode [ 67.543039][ T5619] veth0_macvtap: entered promiscuous mode [ 67.580625][ T5619] veth1_macvtap: entered promiscuous mode [ 67.640223][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.675887][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.687531][ T5619] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.720500][ T5615] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.769181][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.900569][ T5610] veth0_vlan: entered promiscuous mode [ 67.964461][ T5610] veth1_vlan: entered promiscuous mode [ 67.983161][ T3342] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.988385][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.015917][ T3342] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.035166][ T912] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.063964][ T912] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.088314][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.117414][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.138331][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 68.138344][ T30] audit: type=1400 audit(1785855187.042:152): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/root/syzkaller.P54VVf/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 68.149460][ T5610] veth0_macvtap: entered promiscuous mode [ 68.188895][ T30] audit: type=1400 audit(1785855187.082:153): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 68.200044][ T5610] veth1_macvtap: entered promiscuous mode [ 68.213073][ T30] audit: type=1400 audit(1785855187.082:154): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/root/syzkaller.P54VVf/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 68.254020][ T30] audit: type=1400 audit(1785855187.082:155): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 68.256753][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.278351][ T30] audit: type=1400 audit(1785855187.082:156): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/root/syzkaller.P54VVf/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 68.303872][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.322951][ T5619] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.328636][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.342165][ T30] audit: type=1400 audit(1785855187.082:157): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/root/syzkaller.P54VVf/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7383 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 68.373959][ T912] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.383378][ T30] audit: type=1400 audit(1785855187.092:158): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 68.384702][ T5614] veth0_vlan: entered promiscuous mode [ 68.404408][ T30] audit: type=1400 audit(1785855187.152:159): avc: denied { mounton } for pid=5619 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 68.443290][ T5615] veth0_vlan: entered promiscuous mode [ 68.445608][ T30] audit: type=1400 audit(1785855187.152:160): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="gadgetfs" ino=7384 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 68.472172][ T30] audit: type=1400 audit(1785855187.152:161): avc: denied { mount } for pid=5619 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 68.513441][ T5609] veth0_vlan: entered promiscuous mode [ 68.533902][ T48] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.552710][ T5614] veth1_vlan: entered promiscuous mode [ 68.576568][ T5609] veth1_vlan: entered promiscuous mode [ 68.598591][ T5615] veth1_vlan: entered promiscuous mode [ 68.616440][ T48] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.693887][ T653] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.707379][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.717942][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.766697][ T5609] veth0_macvtap: entered promiscuous mode [ 68.776719][ T5614] veth0_macvtap: entered promiscuous mode [ 68.795804][ T5609] veth1_macvtap: entered promiscuous mode [ 68.826420][ T5614] veth1_macvtap: entered promiscuous mode [ 68.835889][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.838060][ T5615] veth0_macvtap: entered promiscuous mode [ 68.846503][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.868107][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.876424][ T5615] veth1_macvtap: entered promiscuous mode [ 68.903599][ T48] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.922364][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.965633][ T5612] Bluetooth: hci1: command tx timeout [ 68.971426][ T5612] Bluetooth: hci4: command tx timeout [ 68.984111][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.004606][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.023216][ T5615] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.035697][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.045654][ T5612] Bluetooth: hci0: command tx timeout [ 69.051463][ T5620] Bluetooth: hci3: command tx timeout [ 69.051485][ T5621] Bluetooth: hci2: command tx timeout [ 69.126750][ T912] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.144578][ T912] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.214057][ T912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.222109][ T912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.265264][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.273488][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.301119][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.322416][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.340456][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.365378][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.383454][ T912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.408559][ T912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.447202][ T5797] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 69.492347][ T3342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.504079][ T653] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.511536][ T3342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.560003][ T653] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.606785][ T653] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.616202][ T5797] usb 4-1: not running at top speed; connect to a high speed hub [ 69.651408][ T5797] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0103, bcdDevice= 1.00 [ 69.668212][ T3342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.671650][ T5797] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.682351][ T3342] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.690657][ T5797] usb 4-1: Product: syz [ 69.735110][ T3319] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.741291][ T5797] usb 4-1: Manufacturer: syz [ 69.761052][ T5797] usb 4-1: SerialNumber: syz [ 69.806815][ T3342] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.853928][ T5800] NFSD: Unable to initialize client recovery tracking! (-110) [ 69.862971][ T5800] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 69.863076][ T653] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.876423][ T5800] NFSD: starting 90-second grace period (net f0000441) [ 69.891036][ T653] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.914054][ T912] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.063640][ T29] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 70.220029][ T29] usb 5-1: config index 0 descriptor too short (expected 46, got 44) [ 70.238131][ T29] usb 5-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 70.251389][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 70.267532][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 70.281141][ T29] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 70.291509][ T29] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 70.305091][ T29] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 70.314379][ T29] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 70.336649][ T5823] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.344636][ T5823] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.352041][ T5823] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 70.362832][ T29] usb 5-1: probing VID:PID(0424:012C) [ 70.370185][ T29] usb 5-1: vub300 testing BULK IN EndPoint(0) 81 [ 70.378322][ T29] usb 5-1: vub300 testing BULK OUT EndPoint(1) 02 [ 70.384784][ T29] usb 5-1: vub300 testing BULK IN EndPoint(2) 83 [ 70.391109][ T29] usb 5-1: Could not find two sets of bulk-in/out endpoint pairs [ 70.426114][ T29] vub300 5-1:1.0: probe with driver vub300 failed with error -22 [ 71.043826][ T5621] Bluetooth: hci4: command tx timeout [ 71.044153][ T5612] Bluetooth: hci1: command tx timeout [ 71.124789][ T5621] Bluetooth: hci3: command tx timeout [ 71.124798][ T5620] Bluetooth: hci2: command tx timeout [ 71.132504][ T5612] Bluetooth: hci0: command tx timeout [ 71.413637][ T5820] NFSD: Unable to initialize client recovery tracking! (-110) [ 71.421633][ T5820] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 71.430686][ T5820] NFSD: starting 90-second grace period (net f00005d8) [ 71.453585][ T5824] svc: failed to register lockdv1 RPC service (errno 111). [ 71.461422][ T5824] lockd_up: makesock failed, error=-111 [ 71.475396][ T5824] svc: failed to register nfsdv3 RPC service (errno 512). [ 71.482692][ T5824] svc: failed to register nfsaclv3 RPC service (errno 512). [ 71.490156][ T5824] failed to unregister tcp with rpcbind [ 71.496692][ T5824] svc: failed to register nfsdv3 RPC service (errno 97). [ 71.506112][ T5824] svc: failed to register nfsaclv3 RPC service (errno 97). [ 71.513341][ T5824] failed to unregister tcp with rpcbind [ 71.817863][ T5797] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 71.831426][ T5839] svc: failed to register lockdv1 RPC service (errno 111). [ 71.840104][ T3342] netdevsim netdevsim10 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.960492][ T5847] reg-fixed-voltage pcspkr: probe with driver reg-fixed-voltage failed with error -12 [ 71.973718][ T5797] usb 3-1: Using ep0 maxpacket: 8 [ 71.980954][ T5797] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 71.989946][ T5797] usb 3-1: config 0 has no interface number 0 [ 71.999201][ T5797] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 72.010365][ T5797] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.029301][ T5797] usb 3-1: config 0 descriptor?? [ 72.043418][ T5839] svc: failed to register nfsdv3 RPC service (errno 111). [ 72.055962][ T5839] svc: failed to register nfsaclv3 RPC service (errno 111). [ 72.063295][ T5839] failed to unregister tcp with rpcbind [ 72.070012][ T5839] svc: failed to register nfsdv3 RPC service (errno 97). [ 72.077478][ T5839] svc: failed to register nfsaclv3 RPC service (errno 97). [ 72.085965][ T5839] failed to unregister tcp with rpcbind [ 72.147396][ T5797] viperboard 3-1:0.143: version 0.00 found at bus 003 address 002 [ 72.177137][ T5797] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 72.188938][ T5797] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 72.205867][ T29] usb 4-1: USB disconnect, device number 2 [ 72.252525][ T5797] usb 3-1: USB disconnect, device number 2 [ 72.283812][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 72.424136][ T24] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 72.454922][ T9] usb 1-1: New USB device found, idVendor=0582, idProduct=007d, bcdDevice= 0.00 [ 72.464240][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.584415][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 72.593146][ T24] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 72.601638][ T24] usb 2-1: config 0 has no interface number 0 [ 72.609144][ T24] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 72.618220][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 72.629592][ T24] usb 2-1: config 0 descriptor?? [ 72.753967][ T24] viperboard 2-1:0.143: version 0.00 found at bus 002 address 002 [ 72.775040][ T24] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 72.787548][ T24] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 72.967202][ T9] usb 5-1: USB disconnect, device number 2 [ 73.194636][ T5859] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 73.334257][ T5859] usb 1-1: device descriptor read/64, error -32 [ 73.573636][ T5859] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 74.013876][ T5856] NFSD: Unable to initialize client recovery tracking! (-110) [ 74.021449][ T5856] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 74.030600][ T5856] NFSD: starting 90-second grace period (net f0000441) [ 74.217249][ T5865] NFSD: Failed to start, no listeners configured. [ 74.225381][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 74.225413][ T30] audit: type=1400 audit(1785855193.132:188): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 74.427985][ T30] audit: type=1400 audit(1785855193.332:189): avc: denied { unmount } for pid=5610 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.088908][ T30] audit: type=1400 audit(1785855193.992:190): avc: denied { mounton } for pid=5875 comm="syz.0.21" path="/5/sys" dev="tmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 75.090602][ T5876] PM: suspend entry (deep) [ 75.513620][ T5869] NFSD: Unable to initialize client recovery tracking! (-110) [ 75.521119][ T5869] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 75.530585][ T5869] NFSD: starting 90-second grace period (net f00003fb) [ 75.759554][ T653] Filesystems sync: 0.640 seconds [ 75.782095][ T30] audit: type=1400 audit(1785855194.682:191): avc: denied { create } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.807823][ T30] audit: type=1400 audit(1785855194.692:192): avc: denied { write } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 75.835246][ T5730] usb 1-1: USB disconnect, device number 2 [ 75.847925][ T5715] usb 2-1: USB disconnect, device number 2 [ 75.870623][ T30] audit: type=1400 audit(1785855194.702:193): avc: denied { create } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.923254][ T5876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 75.942393][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 75.958802][ T30] audit: type=1400 audit(1785855194.712:194): avc: denied { bind } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 75.998284][ T5876] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 76.028418][ T5876] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 76.035678][ T5889] ubi0: attaching mtd0 [ 76.047728][ T30] audit: type=1400 audit(1785855194.712:195): avc: denied { listen } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.051103][ T5889] ubi0: scanning is finished [ 76.073637][ T5708] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 76.077464][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.094711][ T30] audit: type=1400 audit(1785855194.722:196): avc: denied { connect } for pid=5878 comm="syz.2.19" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 76.111726][ T5891] UBIFS error (pid: 5891): cannot open "ubi0_0", error -19 [ 76.117095][ T30] audit: type=1400 audit(1785855195.002:197): avc: denied { mount } for pid=5888 comm="syz.4.25" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 76.117476][ T5876] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 76.124694][ T5889] ubi0: empty MTD device detected [ 76.173018][ T5876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 76.179234][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.186464][ T13] device offline error, dev sda, sector 749878 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.198081][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2029 starting block 93734) [ 76.210511][ T13] Buffer I/O error on device sda1, logical block 93696 [ 76.218560][ T13] device offline error, dev sda, sector 770358 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.229209][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2028 starting block 96294) [ 76.241067][ T13] Buffer I/O error on device sda1, logical block 96256 [ 76.248380][ T13] device offline error, dev sda, sector 778542 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.254003][ T5708] usb 4-1: New USB device found, idVendor=2040, idProduct=2400, bcdDevice= 1.00 [ 76.258928][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2028 starting block 97317) [ 76.281100][ T13] Buffer I/O error on device sda1, logical block 97279 [ 76.281268][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.288135][ T13] device offline error, dev sda, sector 790838 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.296126][ T29] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 76.317609][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2031 starting block 98854) [ 76.321081][ T5708] usb 4-1: Product: syz [ 76.346183][ T13] Buffer I/O error on device sda1, logical block 98816 [ 76.360902][ T13] device offline error, dev sda, sector 799030 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.363537][ T5708] usb 4-1: Manufacturer: syz [ 76.373044][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2036 starting block 99878) [ 76.378569][ T5708] usb 4-1: SerialNumber: syz [ 76.392937][ T13] Buffer I/O error on device sda1, logical block 99840 [ 76.400300][ T13] device offline error, dev sda, sector 803126 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.405985][ T5708] pvrusb2: Hardware description: WinTV PVR USB2 Model 24xxx [ 76.411460][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2030 starting block 100390) [ 76.436421][ T13] Buffer I/O error on device sda1, logical block 100352 [ 76.445579][ T13] device offline error, dev sda, sector 811310 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.456161][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2030 starting block 101413) [ 76.468309][ T13] device offline error, dev sda, sector 815182 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.468327][ T912] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 76.478832][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2030 starting block 101897) [ 76.495263][ T912] Buffer I/O error on device sda1, logical block 101375 [ 76.511630][ T13] Buffer I/O error on device sda1, logical block 101859 [ 76.514018][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 76.521014][ T13] device offline error, dev sda, sector 819510 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 76.531303][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 76.540323][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2032 starting block 102438) [ 76.549878][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 76.561200][ T13] Buffer I/O error on device sda1, logical block 102400 [ 76.572390][ T29] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 76.578628][ T13] device offline error, dev sda, sector 831558 op 0x1:(WRITE) flags 0x0 phys_seg 9 prio class 2 [ 76.587979][ T29] usb 3-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 1.00 [ 76.598103][ T13] EXT4-fs warning (device sda1): ext4_end_bio:368: I/O error 16 writing to inode 2032 starting block 103944) [ 76.607329][ T29] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 76.627425][ T13] Buffer I/O error on device sda1, logical block 103906 [ 76.635733][ T3319] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2037, error -5) [ 76.655407][ T4941] Aborting journal on device sda1-8. [ 76.662963][ T5876] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 76.663545][ T11] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 76.671834][ T5887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.683671][ T4941] JBD2: I/O error when updating journal superblock for sda1-8. [ 76.686561][ T5887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.699628][ T13] EXT4-fs error (device sda1): ext4_journal_check_start:86: comm kworker/u8:1: Detected aborted journal [ 76.713449][ T11] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 76.722842][ T13] EXT4-fs (sda1): I/O error while writing superblock [ 76.726133][ T5887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.730023][ T13] EXT4-fs (sda1): Remounting filesystem read-only [ 76.744218][ T13] EXT4-fs (sda1): ext4_do_writepages: jbd2_start: 9223372036854775806 pages, ino 2035; err -30 [ 76.745503][ T5876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 76.773902][ T5889] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 76.794370][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.800511][ T5887] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 76.803134][ T5892] EXT4-fs (sda1): shut down requested (2) [ 76.808409][ T5889] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 76.830835][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=1135 [ 76.864785][ T5876] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 76.882084][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=1135 [ 76.896897][ T5889] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 76.900364][ T5901] cxacru 3-1:1.0: loading /lib/firmware/updates/syzkaller/cxacru-fw.bin failed with error -5 [ 76.912120][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=1135 [ 76.929481][ T5901] cxacru 3-1:1.0: loading /lib/firmware/updates/cxacru-fw.bin failed with error -5 [ 76.934081][ T5876] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 76.955292][ T5889] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 76.960237][ T5901] cxacru 3-1:1.0: loading /lib/firmware/syzkaller/cxacru-fw.bin failed with error -5 [ 76.968128][ T5876] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 76.978812][ T5602] SELinux: inode_doinit_use_xattr: getxattr returned 5 for dev=sda1 ino=1135 [ 76.982485][ T5889] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 76.999795][ T5901] cxacru 3-1:1.0: loading /lib/firmware/cxacru-fw.bin failed with error -5 [ 77.000299][ T5876] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 77.011155][ T5889] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 77.033866][ T5901] cxacru 3-1:1.0: Direct firmware load for cxacru-fw.bin failed with error -5 [ 77.044017][ T5889] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 3319615299 [ 77.053530][ T5901] cxacru 3-1:1.0: Falling back to sysfs fallback for: cxacru-fw.bin [ 77.055299][ T5889] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 77.081642][ T5892] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 77.109849][ T5900] ubi0: background thread "ubi_bgt0d" started, PID 5900 [ 77.472550][ T3342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.533112][ T5707] e1000e 0000:00:03.0: Interrupt Throttling Rate (ints/sec) set to dynamic conservative mode [ 77.546675][ T5707] e1000e 0000:00:03.0 0000:00:03.0 (uninitialized): Failed to initialize MSI interrupts. Falling back to legacy interrupts. [ 77.566279][ T5707] BUG: unable to handle page fault for address: ffffc90004090b58 [ 77.574002][ T5707] #PF: supervisor read access in kernel mode [ 77.579971][ T5707] #PF: error_code(0x0000) - not-present page [ 77.585940][ T5707] PGD 13fe5c067 P4D 13fe5c067 PUD 1cae3067 PMD 26930067 PTE 0 [ 77.593403][ T5707] Oops: Oops: 0000 [#1] SMP KASAN NOPTI [ 77.598928][ T5707] CPU: 0 UID: 0 PID: 5707 Comm: kworker/0:4 Not tainted syzkaller #0 PREEMPT(full) [ 77.608288][ T5707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 77.618320][ T5707] Workqueue: sync_wq local_pci_probe_callback [ 77.624371][ T5707] RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 [ 77.630764][ T5707] Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a [ 77.650359][ T5707] RSP: 0018:ffffc90004207a00 EFLAGS: 00010246 [ 77.656407][ T5707] RAX: ffffc9000408b000 RBX: ffff88802c119694 RCX: ffffffff86fb44f8 [ 77.664355][ T5707] RDX: 1ffff110058232b8 RSI: ffffffff86fb4506 RDI: ffff8880293b8000 [ 77.672306][ T5707] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 77.680254][ T5707] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000840f45 [ 77.688203][ T5707] R13: ffff88802c1195c0 R14: ffff88802c1195b8 R15: ffff88802c118ec0 [ 77.696154][ T5707] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 77.705067][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.711631][ T5707] CR2: ffffc90004090b58 CR3: 000000005d0f9000 CR4: 00000000003526f0 [ 77.719580][ T5707] Call Trace: [ 77.722847][ T5707] [ 77.725758][ T5707] ? __pfx_e1000e_check_for_copper_link+0x10/0x10 [ 77.732154][ T5707] ? __pfx_e1000e_get_speed_and_duplex_copper+0x10/0x10 [ 77.739068][ T5707] ? __pfx_e1000_get_variants_82571+0x10/0x10 [ 77.745112][ T5707] ? synchronize_irq+0x2d/0x40 [ 77.749855][ T5707] ? e1000_irq_disable+0x2d0/0x5c0 [ 77.754946][ T5707] e1000_probe+0x1123/0x36b0 [ 77.759528][ T5707] ? find_held_lock+0x2b/0x80 [ 77.764184][ T5707] ? __pfx_e1000_probe+0x10/0x10 [ 77.769104][ T5707] ? mark_held_locks+0x40/0x70 [ 77.773851][ T5707] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 77.779638][ T5707] ? lockdep_hardirqs_on+0x78/0x100 [ 77.784816][ T5707] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 77.790603][ T5707] ? __pfx_e1000_probe+0x10/0x10 [ 77.795523][ T5707] local_pci_probe+0xdd/0x1b0 [ 77.800179][ T5707] local_pci_probe_callback+0x35/0x80 [ 77.805528][ T5707] process_one_work+0xa23/0x1940 [ 77.810465][ T5707] ? __pfx_process_one_work+0x10/0x10 [ 77.815825][ T5707] ? __pfx_local_pci_probe_callback+0x10/0x10 [ 77.821874][ T5707] worker_thread+0x5ef/0xe50 [ 77.826446][ T5707] ? kthread+0x13a/0x450 [ 77.830666][ T5707] ? __pfx_worker_thread+0x10/0x10 [ 77.835754][ T5707] kthread+0x370/0x450 [ 77.839798][ T5707] ? __pfx_kthread+0x10/0x10 [ 77.844369][ T5707] ret_from_fork+0x72b/0xd50 [ 77.848951][ T5707] ? __pfx_ret_from_fork+0x10/0x10 [ 77.854062][ T5707] ? __switch_to+0x800/0x10f0 [ 77.858745][ T5707] ? __pfx_kthread+0x10/0x10 [ 77.863320][ T5707] ret_from_fork_asm+0x1a/0x30 [ 77.868075][ T5707] [ 77.871072][ T5707] Modules linked in: [ 77.874944][ T5707] CR2: ffffc90004090b58 [ 77.879070][ T5707] ---[ end trace 0000000000000000 ]--- [ 77.884497][ T5707] RIP: 0010:e1000_get_variants_82571+0xe08/0x1c30 [ 77.890894][ T5707] Code: f6 ff ff e8 da 1f 0f fb 4c 89 ea 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f7 0b 00 00 49 8b 87 00 07 00 00 <8b> a8 58 5b 00 00 89 e8 31 ff 83 e0 02 89 c6 89 44 24 10 e8 10 1a [ 77.910494][ T5707] RSP: 0018:ffffc90004207a00 EFLAGS: 00010246 [ 77.916538][ T5707] RAX: ffffc9000408b000 RBX: ffff88802c119694 RCX: ffffffff86fb44f8 [ 77.924486][ T5707] RDX: 1ffff110058232b8 RSI: ffffffff86fb4506 RDI: ffff8880293b8000 [ 77.932435][ T5707] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000001 [ 77.940383][ T5707] R10: 0000000000000000 R11: 0000000000000000 R12: 1ffff92000840f45 [ 77.948336][ T5707] R13: ffff88802c1195c0 R14: ffff88802c1195b8 R15: ffff88802c118ec0 [ 77.956285][ T5707] FS: 0000000000000000(0000) GS:ffff888123dd8000(0000) knlGS:0000000000000000 [ 77.965193][ T5707] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 77.971755][ T5707] CR2: ffffc90004090b58 CR3: 000000005d0f9000 CR4: 00000000003526f0 [ 77.979710][ T5707] Kernel panic - not syncing: Fatal exception [ 77.985955][ T5707] Kernel Offset: disabled [ 77.990256][ T5707] Rebooting in 86400 seconds..