last executing test programs:

16.347519884s ago: executing program 1 (id=19):
r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000420001000000010902190001010080320904000001ff00000007058202000200"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
nanosleep(&(0x7f0000000600)={0x1}, 0x0)
r1 = syz_open_dev$video(&(0x7f0000000400), 0x0, 0x0)
ioctl$VIDIOC_S_TUNER(r1, 0x4054565a, &(0x7f0000000500)={0x0, 'name\x00', 0x1})

16.208615442s ago: executing program 2 (id=20):
syz_usb_connect(0x3, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100010102030109028f00020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109000201000007250100000000090401020101020000072401010101000b2402010202100180bb0009050109000201000007250100000000"], 0x0) (async)
nanosleep(&(0x7f0000000300)={0x2, 0x2faf0800}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x3, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x800], [0x1]], '\x00', [{0x20, 0x20, 0x0, 0x0, 0x1}, {0x40, 0x40, 0x0, 0x0, 0x1}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}, {0x0, 0x7fffffff}], '\x00', 0xf07})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0)
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x4142, 0x0)

12.806548422s ago: executing program 4 (id=28):
r0 = openat$userio(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2)
write$USERIO_CMD_REGISTER(r0, &(0x7f0000000140), 0x2)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000240)="02fa", 0x2}, {&(0x7f0000000280)="0200", 0x2}, {&(0x7f00000002c0)="0200", 0x2}, {&(0x7f0000000300)="0264", 0x2}, {&(0x7f0000000340)="0273", 0x2}, {&(0x7f0000000380)="0202", 0x2}, {&(0x7f00000003c0)="0264", 0x2}, {&(0x7f0000000400)="028a", 0x2}, {&(0x7f0000000440)="0206", 0x2}, {&(0x7f0000000480)="0220", 0x2}], 0xa)

12.748835852s ago: executing program 2 (id=29):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6)
fallocate(r0, 0x0, 0x0, 0x10000)
pwrite64(r0, 0x0, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000500)='none\x00', 0x5)

12.693632715s ago: executing program 1 (id=30):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0xc00)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0xc00)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0xc00)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff)
sendfile(r4, r0, 0x0, 0xc00)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff)
sendfile(r5, r0, 0x0, 0xc00)
close(r5)
unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0)

12.665743531s ago: executing program 2 (id=31):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902200001010080fa0904000002ffffff00090502020002000000090586020002000000"], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0})
syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00')
syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000400)='mem', 0x3)

12.585279867s ago: executing program 1 (id=32):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a40000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000300)="050000000100000000040000000000000100"/28})

11.061030591s ago: executing program 4 (id=34):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', 0x0, 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00")
ioctl(r0, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

10.938361195s ago: executing program 4 (id=36):
r0 = io_uring_setup(0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff})
io_uring_register$IORING_REGISTER_MEM_REGION(r0, 0x22, &(0x7f0000003000)={&(0x7f0000002000)={0x0, 0x1000}}, 0x1)
mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x1000, 0x3, 0x13, r0, 0x20000000)

10.859613318s ago: executing program 4 (id=38):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x50, {0x50, 0x22, "05010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)

10.251290073s ago: executing program 1 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/versions\x00', 0x2, 0x0)
write(r0, &(0x7f00000000c0)='-2 -3 +4\n\x00', 0x9)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./nfsd/portlist\x00', 0x2, 0x0)
write(r1, &(0x7f0000000280)='tcp 2049\n\x00', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0)
write(r2, &(0x7f0000000380)='0\n\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0)
write(r3, &(0x7f0000000400)='0\n\x00', 0x2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0)
write(r4, &(0x7f0000000140)='8\n\x00', 0x2) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f00000001c0)='127.0.0.1:/\x00', &(0x7f0000000180)='./mnt\x00', &(0x7f0000000200), 0x0, &(0x7f0000000300)={[{'clientaddr=127.0.0.1'}, {'addr=127.0.0.1'}]}) (async)

9.902346716s ago: executing program 3 (id=49):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0)

9.799372578s ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.0\x00', 0x1ff)
symlinkat(&(0x7f0000000200)='./config/usb_gadget/g1/functions/midi2.0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/midi2.0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f00000002c0)='dummy_udc.0\x00', 0xc)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)

8.86309819s ago: executing program 3 (id=62):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendto(r0, &(0x7f0000000000)="30000000100001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000040)="30000000110001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000080)="30000000120001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000000c0)="30000000130001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000100)="30000000140001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000140)="30000000150001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000180)="30000000160001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000001c0)="30000000170001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000200)="30000000180001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000240)="30000000190001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000280)="300000001a0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000002c0)="300000001b0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000300)="300000001c0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000340)="300000001d0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000380)="300000001e0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f00000003c0)="300000001f0001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
sendto(r0, &(0x7f0000000400)="30000000200001000100000000000000110100000a0005007664706130000000100002007664706173696d5f6e657400", 0x30, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
r1 = socket$inet_tcp(0x2, 0x1, 0x0)
sendto(r0, &(0x7f0000000700)="1100"/36, 0x24, 0x0, 0x0, 0x0)
ioctl(r1, 0x8946, &(0x7f0000000600)="65746831000000000000000000000000000700000000007f000700000000007f000700000000007f000700000000007f")

8.764170412s ago: executing program 0 (id=64):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nullb/my_nullb\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nullb/my_nullb/zoned\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='1\x00', 0x2)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nullb/my_nullb/power\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='1\x00', 0x2)
mknodat(0xffffffffffffff9c, &(0x7f0000002000)='./my_nullb_dev\x00', 0x60600, 0xfa01)
r2 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./my_nullb_dev\x00', 0x2, 0x0)
pwrite64(r2, &(0x7f0000003000)='\x00'/4096, 0x1000, 0x0)
pwrite64(r2, &(0x7f0000004000)='SFOZ', 0x4, 0x0)
close(r2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./mnt\x00', 0x1ff)
mount(&(0x7f0000002000)=@filename='./my_nullb_dev\x00', &(0x7f0000000800)='./mnt\x00', &(0x7f0000000900)='zonefs\x00', 0x0, 0x0)

8.598673278s ago: executing program 1 (id=65):
syz_usb_connect(0x0, 0x7a, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004082057d0000000000000109026800030100c0000904000000010100000904000101010200000b2402010203180144ac00070501010002010904010000010100000904010101010200000b2402010203180144ac00070582010002010904020002010300000705030240000007058402400000"], 0x0)
nanosleep(&(0x7f0000000100)={0x1}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0x0)
syz_open_dev$sndpcmc(&(0x7f0000000300), 0x0, 0x0)

621.172219ms ago: executing program 3 (id=66):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, 0x0, &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100))
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0)
openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0)
io_uring_enter(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0x0)
nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00))
write(r0, &(0x7f0000000c00)='1\x00', 0x1)

566.853764ms ago: executing program 1 (id=67):
syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560000000000010902240001010080fa0904000002ff000000090581020002000000090502020002000000"], 0x0)
nanosleep(&(0x7f0000000400)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2)
ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200))

554.95847ms ago: executing program 4 (id=68):
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./dev\x00', &(0x7f0000000240)='devtmpfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000001000)="0400000032000000000000003801000038010000000000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d00")
ioctl(r0, 0xc138fd09, &(0x7f0000002000)="0400000032000000000000006c01000038010000010000000000000000000000000000000000000000000000000000006d795f7a6f6e65645f646d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000007a6f6e656400000000000000000000002e2f6465762f6e756c6c623100")

547.162854ms ago: executing program 0 (id=69):
r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc)
add_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x0}, &(0x7f0000000200)="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", 0x559, r0)

459.342113ms ago: executing program 2 (id=70):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/md-control\x00', 0x2, 0x0)

432.934415ms ago: executing program 3 (id=71):
r0 = socket$netlink(0x10, 0x3, 0x14)
sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'lo\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x5}, 0x100)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nvmet\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nvmet/subsystems\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testnqn\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nvmet/subsystems/testnqn/attr_allow_any_host\x00', 0x2, 0x0)
write(r1, &(0x7f0000000180)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn/namespaces\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/namespaces/1\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testnqn/namespaces/1/device_path\x00', 0x2, 0x0)
write(r2, &(0x7f0000000280)='/dev/nullb0\x00', 0xc)
r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testnqn/namespaces/1/enable\x00', 0x2, 0x0)
write(r3, &(0x7f0000000300)='1\x00', 0x1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/nvmet/ports\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/ports/1\x00', 0x1ff)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0)
write(r4, &(0x7f0000000400)='rdma\x00', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/ports/1/addr_adrfam\x00', 0x2, 0x0)
write(r5, &(0x7f0000000480)='ipv4\x00', 0x4)
r6 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/nvmet/ports/1/addr_traddr\x00', 0x2, 0x0)
write(r6, &(0x7f0000000500)='127.0.0.1\x00', 0xa)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/nvmet/ports/1/addr_trsvcid\x00', 0x2, 0x0)
write(r7, &(0x7f0000000580)='4421\x00', 0x4)
symlinkat(&(0x7f00000005c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/nvmet/ports/1/subsystems/testnqn\x00')
r8 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000640), 0x2, 0x0)
write(r8, &(0x7f0000000680)='nqn=testnqn,transport=rdma,traddr=127.0.0.1,trsvcid=4421\x00', 0x39)

378.439073ms ago: executing program 4 (id=72):
r0 = timerfd_create(0x8, 0x0)
timerfd_settime(r0, 0x0, &(0x7f0000000000)={{}, {0x2}}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='freeze', 0x6)

295.067454ms ago: executing program 2 (id=73):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x2, 0x0)
write(r0, &(0x7f0000000400)='i915\x00', 0x5)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/i915/bind\x00', 0x2, 0x0)
write(r1, &(0x7f0000000600)='0000:00:01.0\x00', 0xd)

294.825171ms ago: executing program 0 (id=74):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6)
fallocate(r0, 0x0, 0x0, 0x10000)
pwrite64(r0, 0x0, 0x0, 0x0)
syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0)
write(r1, &(0x7f0000000500)='none\x00', 0x5)

193.313526ms ago: executing program 0 (id=75):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
pwrite64(r0, &(0x7f0000000100)='\x00\x003U', 0x4, 0xc120)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='0000:00:02.0\x00', 0xc)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x2, 0x0)
write(r2, &(0x7f0000000600)='dwc3-haps\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/dwc3-haps/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000400)='0000:00:02.0\x00', 0xc)

193.082448ms ago: executing program 2 (id=76):
syz_usb_connect(0x0, 0x76, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040ba23000100010000000109026400020100803209040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050109c00001000007250100000000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2)
ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x0, &(0x7f0000000200)={0x0, [[0x8], [0x0, 0x20000], [0x1]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x2, 0x2, 0x0, 0x0, 0x1}, {0xbb80, 0xbb80, 0x0, 0x0, 0x1}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}], '\x00', 0xffffffff})
ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0)
ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10})
ioctl$SNDRV_PCM_IOCTL_START(r0, 0x0, 0x0)

92.496916ms ago: executing program 0 (id=77):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff)
mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, &(0x7f0000000800)='rp_size=0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/urandom\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x42, 0x1ff)
sendfile(r1, r0, 0x0, 0xc00)
close(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x42, 0x1ff)
sendfile(r2, r0, 0x0, 0xc00)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./mnt/f3\x00', 0x42, 0x1ff)
sendfile(r3, r0, 0x0, 0xc00)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./mnt/f4\x00', 0x42, 0x1ff)
sendfile(r4, r0, 0x0, 0xc00)
close(r4)
openat(0xffffffffffffff9c, &(0x7f0000001400)='./mnt/f5\x00', 0x42, 0x1ff)
unlinkat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt/f1\x00', 0x0)
unlinkat(0xffffffffffffff9c, &(0x7f0000001100)='./mnt/f2\x00', 0x0)

19.112911ms ago: executing program 3 (id=78):
r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0)
syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x50, {0x50, 0x22, "05010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000")
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
syz_usb_control_io(r0, &(0x7f00000001c0), 0x0)
syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0)
write(r1, &(0x7f0000000700)='auto\x00', 0x4)
nanosleep(&(0x7f0000000000)={0x1}, 0x0)
write(r1, &(0x7f0000000800)='on\x00', 0x2)

0s ago: executing program 0 (id=79):
unshare(0x40000000)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'lo\x00', 0x9})
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/versions\x00', 0x1, 0x0)
write(r1, &(0x7f0000000540)='-2 -3 +4\n', 0x9)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x1, 0x0)
write(r2, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 *\n', 0x1c)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/net/rpc/nfsd.export/channel\x00', 0x1, 0x0)
write(r3, &(0x7f0000000240)='* ./ 2147483647 139296 0 0 0\n', 0x1d)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/nfsd.fh/channel\x00', 0x1, 0x0)
write(r4, &(0x7f0000000280)='* 1 \\x00000000 2147483647 ./\n', 0x1d)
r5 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./nfsd/portlist\x00', 0x1, 0x0)
write(r5, &(0x7f00000002c0)='tcp 2049\n', 0x9)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0)
write(r6, &(0x7f0000000340)='1\n', 0x2) (async)
nanosleep(&(0x7f0000000380)={0x0, 0x5f5e100}, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./mnt\x00', 0x1ff)
mount$nfs4(&(0x7f0000000400)='127.0.0.1:/\x00', &(0x7f00000003c0)='./mnt\x00', &(0x7f0000000440), 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.1\x00'])

kernel console output (not intermixed with test programs):

Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts.
[   61.049396][   T29] audit: type=1400 audit(1785857822.431:129): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[   61.073457][   T29] audit: type=1400 audit(1785857822.461:130): avc:  denied  { mount } for  pid=5595 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   61.076962][ T5595] cgroup: Unknown subsys name 'net'
[   61.103660][   T29] audit: type=1400 audit(1785857822.491:131): avc:  denied  { unmount } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[   61.233963][ T5595] cgroup: Unknown subsys name 'cpuset'
[   61.242943][ T5595] cgroup: Unknown subsys name 'rlimit'
[   61.400410][   T29] audit: type=1400 audit(1785857822.781:132): avc:  denied  { setattr } for  pid=5595 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[   61.424041][   T29] audit: type=1400 audit(1785857822.781:133): avc:  denied  { create } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   61.450046][   T29] audit: type=1400 audit(1785857822.781:134): avc:  denied  { write } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   61.487549][   T29] audit: type=1400 audit(1785857822.781:135): avc:  denied  { read } for  pid=5595 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   61.516388][   T29] audit: type=1400 audit(1785857822.781:136): avc:  denied  { mounton } for  pid=5595 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[   61.520698][ T5597] SELinux:  Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[   61.541529][   T29] audit: type=1400 audit(1785857822.781:137): avc:  denied  { mount } for  pid=5595 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[   61.573321][   T29] audit: type=1400 audit(1785857822.941:138): avc:  denied  { relabelto } for  pid=5597 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[   62.519002][ T5595] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   64.969265][ T5610] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   64.979089][ T5610] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   64.988092][ T5610] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   64.992473][ T5615] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   64.996070][ T5610] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   65.009997][ T5615] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   65.012316][ T5610] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   65.026160][ T4928] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   65.035408][ T5615] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   65.035429][ T4928] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   65.050383][ T5613] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   65.051456][ T4928] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   65.064860][ T5613] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   65.082820][ T5613] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1
[   65.093094][ T5613] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   65.100988][ T5613] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   65.111271][ T5610] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9
[   65.119415][ T5610] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9
[   65.139453][ T5610] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1
[   65.148219][ T5619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4
[   65.156280][ T5619] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2
[   65.165342][ T5619] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9
[   65.173082][ T5619] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9
[   65.180796][ T5619] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4
[   65.188264][ T5619] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2
[   65.854198][ T1315] ieee802154 phy0 wpan0: encryption failed: -22
[   65.860977][ T1315] ieee802154 phy1 wpan1: encryption failed: -22
[   66.333294][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.340484][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.348894][ T5607] bridge_slave_0: entered allmulticast mode
[   66.355900][ T5607] bridge_slave_0: entered promiscuous mode
[   66.384054][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.391109][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.398300][ T5607] bridge_slave_1: entered allmulticast mode
[   66.405148][ T5607] bridge_slave_1: entered promiscuous mode
[   66.477125][ T5617] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.484309][ T5617] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.491649][ T5617] bridge_slave_0: entered allmulticast mode
[   66.498336][ T5617] bridge_slave_0: entered promiscuous mode
[   66.507320][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.533673][ T5617] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.540939][ T5617] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.548934][ T5617] bridge_slave_1: entered allmulticast mode
[   66.555753][ T5617] bridge_slave_1: entered promiscuous mode
[   66.563535][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.589773][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.596907][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.604105][ T5608] bridge_slave_0: entered allmulticast mode
[   66.610811][ T5608] bridge_slave_0: entered promiscuous mode
[   66.630975][ T5620] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.638135][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.645949][ T5620] bridge_slave_0: entered allmulticast mode
[   66.652808][ T5620] bridge_slave_0: entered promiscuous mode
[   66.665524][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.672607][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.679683][ T5608] bridge_slave_1: entered allmulticast mode
[   66.686573][ T5608] bridge_slave_1: entered promiscuous mode
[   66.700236][ T5607] team0: Port device team_slave_0 added
[   66.706102][ T5620] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.713264][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.720343][ T5620] bridge_slave_1: entered allmulticast mode
[   66.727098][ T5620] bridge_slave_1: entered promiscuous mode
[   66.747733][ T5617] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.758230][ T5607] team0: Port device team_slave_1 added
[   66.769952][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state
[   66.777577][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state
[   66.785514][ T5622] bridge_slave_0: entered allmulticast mode
[   66.792448][ T5622] bridge_slave_0: entered promiscuous mode
[   66.807103][ T5617] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.837281][ T5620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.846623][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state
[   66.854034][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state
[   66.861180][ T5622] bridge_slave_1: entered allmulticast mode
[   66.867911][ T5622] bridge_slave_1: entered promiscuous mode
[   66.876048][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   66.899711][ T5620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.916830][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   66.926892][ T5617] team0: Port device team_slave_0 added
[   66.933514][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0
[   66.940461][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   66.966552][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   66.997264][ T5617] team0: Port device team_slave_1 added
[   67.009744][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.016967][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.043140][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.062060][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   67.093014][ T5620] team0: Port device team_slave_0 added
[   67.100048][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   67.116780][ T5608] team0: Port device team_slave_0 added
[   67.123229][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.130181][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.156476][ T5613] Bluetooth: hci2: command tx timeout
[   67.156488][ T5619] Bluetooth: hci0: command tx timeout
[   67.156752][ T5615] Bluetooth: hci1: command tx timeout
[   67.162522][ T5617] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.174968][ T5617] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.190663][ T5617] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.202161][ T5613] Bluetooth: hci3: command tx timeout
[   67.221671][ T5617] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.234684][ T5620] team0: Port device team_slave_1 added
[   67.247707][ T5608] team0: Port device team_slave_1 added
[   67.271794][ T5622] team0: Port device team_slave_0 added
[   67.281554][ T5613] Bluetooth: hci4: command tx timeout
[   67.308454][ T5622] team0: Port device team_slave_1 added
[   67.331022][ T5607] hsr_slave_0: entered promiscuous mode
[   67.337348][ T5607] hsr_slave_1: entered promiscuous mode
[   67.344349][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.351941][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.378407][ T5620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.396764][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.403794][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.429770][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.444307][ T5617] hsr_slave_0: entered promiscuous mode
[   67.450342][ T5617] hsr_slave_1: entered promiscuous mode
[   67.456379][ T5617] debugfs: 'hsr0' already exists in 'hsr'
[   67.462629][ T5617] Cannot create hsr debugfs directory
[   67.476490][ T5620] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.483499][ T5620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.509754][ T5620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.527315][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.534333][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.560294][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.584562][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0
[   67.591641][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.617525][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   67.656914][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1
[   67.664335][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[   67.690347][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   67.757841][ T5608] hsr_slave_0: entered promiscuous mode
[   67.764107][ T5608] hsr_slave_1: entered promiscuous mode
[   67.770055][ T5608] debugfs: 'hsr0' already exists in 'hsr'
[   67.777218][ T5608] Cannot create hsr debugfs directory
[   67.808448][ T5622] hsr_slave_0: entered promiscuous mode
[   67.814847][ T5622] hsr_slave_1: entered promiscuous mode
[   67.820744][ T5622] debugfs: 'hsr0' already exists in 'hsr'
[   67.827026][ T5622] Cannot create hsr debugfs directory
[   67.836629][ T5620] hsr_slave_0: entered promiscuous mode
[   67.842865][ T5620] hsr_slave_1: entered promiscuous mode
[   67.848806][ T5620] debugfs: 'hsr0' already exists in 'hsr'
[   67.854567][ T5620] Cannot create hsr debugfs directory
[   68.142621][ T5607] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   68.153925][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.161846][ T5607] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   68.171103][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.189762][ T5607] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   68.199955][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.208028][ T5607] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   68.216880][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.279038][ T5617] netdevsim netdevsim4 netdevsim0: renamed from eth0
[   68.289812][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.302738][ T5617] netdevsim netdevsim4 netdevsim1: renamed from eth1
[   68.312522][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.327048][ T5617] netdevsim netdevsim4 netdevsim2: renamed from eth2
[   68.336234][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.344305][ T5617] netdevsim netdevsim4 netdevsim3: renamed from eth3
[   68.353229][ T5617] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.415920][ T5608] netdevsim netdevsim3 netdevsim0: renamed from eth0
[   68.425519][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.433787][ T5608] netdevsim netdevsim3 netdevsim1: renamed from eth1
[   68.442907][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.450453][ T5608] netdevsim netdevsim3 netdevsim2: renamed from eth2
[   68.458950][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.466930][ T5608] netdevsim netdevsim3 netdevsim3: renamed from eth3
[   68.476047][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.578725][ T5622] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   68.589174][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.598802][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.610298][ T5622] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   68.620675][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.629690][ T5622] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   68.639224][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.648194][ T5622] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   68.656578][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.706222][ T5607] 8021q: adding VLAN 0 to HW filter on device team0
[   68.729059][ T5617] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.753280][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.760692][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.771686][ T5620] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   68.780567][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[   68.788627][ T5620] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   68.798562][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[   68.813127][ T5620] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   68.822348][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[   68.830893][ T5620] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   68.839453][ T5620] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[   68.858320][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.865467][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.883192][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0
[   68.896852][ T5617] 8021q: adding VLAN 0 to HW filter on device team0
[   68.925932][   T96] bridge0: port 1(bridge_slave_0) entered blocking state
[   68.933055][   T96] bridge0: port 1(bridge_slave_0) entered forwarding state
[   68.964539][ T1022] bridge0: port 2(bridge_slave_1) entered blocking state
[   68.971699][ T1022] bridge0: port 2(bridge_slave_1) entered forwarding state
[   68.997077][ T5608] 8021q: adding VLAN 0 to HW filter on device team0
[   69.036958][  T147] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.044050][  T147] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.055537][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.062661][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.188470][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.203776][ T5615] Bluetooth: hci1: command tx timeout
[   69.203807][ T5619] Bluetooth: hci0: command tx timeout
[   69.210171][ T5613] Bluetooth: hci2: command tx timeout
[   69.254537][ T5622] 8021q: adding VLAN 0 to HW filter on device team0
[   69.282768][ T5613] Bluetooth: hci3: command tx timeout
[   69.302500][ T5620] 8021q: adding VLAN 0 to HW filter on device bond0
[   69.335080][  T971] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.342263][  T971] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.366422][ T5613] Bluetooth: hci4: command tx timeout
[   69.388565][  T147] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.395728][  T147] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.416233][ T5620] 8021q: adding VLAN 0 to HW filter on device team0
[   69.428460][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state
[   69.435880][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state
[   69.480668][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state
[   69.487873][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state
[   69.893736][ T5617] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.035515][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.163757][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.224047][ T5607] veth0_vlan: entered promiscuous mode
[   70.274050][ T5607] veth1_vlan: entered promiscuous mode
[   70.336339][ T5608] veth0_vlan: entered promiscuous mode
[   70.369367][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.379181][ T5608] veth1_vlan: entered promiscuous mode
[   70.430905][ T5620] 8021q: adding VLAN 0 to HW filter on device batadv0
[   70.447897][ T5607] veth0_macvtap: entered promiscuous mode
[   70.457582][ T5607] veth1_macvtap: entered promiscuous mode
[   70.481065][ T5617] veth0_vlan: entered promiscuous mode
[   70.508404][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.520882][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.530836][ T5617] veth1_vlan: entered promiscuous mode
[   70.546263][ T5608] veth0_macvtap: entered promiscuous mode
[   70.567094][ T5608] veth1_macvtap: entered promiscuous mode
[   70.581063][ T5622] veth0_vlan: entered promiscuous mode
[   70.624414][ T5622] veth1_vlan: entered promiscuous mode
[   70.633034][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.640952][ T5620] veth0_vlan: entered promiscuous mode
[   70.657082][ T5617] veth0_macvtap: entered promiscuous mode
[   70.678819][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.704210][ T5617] veth1_macvtap: entered promiscuous mode
[   70.719800][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.732862][ T1176] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.736256][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.747464][ T5620] veth1_vlan: entered promiscuous mode
[   70.771670][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_0
[   70.783888][ T5617] batman_adv: batadv0: Interface activated: batadv_slave_1
[   70.806981][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   70.810652][ T5622] veth0_macvtap: entered promiscuous mode
[   70.819550][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   70.846570][   T29] kauditd_printk_skb: 14 callbacks suppressed
[   70.846585][   T29] audit: type=1400 audit(1785857832.231:153): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.tx99vr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1
[   70.862667][ T1124] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   70.882501][   T29] audit: type=1400 audit(1785857832.231:154): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   70.898428][ T5622] veth1_macvtap: entered promiscuous mode
[   70.910731][   T29] audit: type=1400 audit(1785857832.231:155): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.tx99vr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   70.940122][   T29] audit: type=1400 audit(1785857832.231:156): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   70.962766][   T29] audit: type=1400 audit(1785857832.241:157): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.tx99vr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   70.990107][  T147] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   70.998978][ T5607] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   71.014772][   T29] audit: type=1400 audit(1785857832.241:158): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/root/syzkaller.tx99vr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7494 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1
[   71.043959][   T29] audit: type=1400 audit(1785857832.241:159): avc:  denied  { unmount } for  pid=5607 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[   71.064884][   T29] audit: type=1400 audit(1785857832.271:160): avc:  denied  { mounton } for  pid=5607 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1
[   71.074988][  T971] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.089765][   T29] audit: type=1400 audit(1785857832.271:161): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="gadgetfs" ino=7495 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1
[   71.119069][   T29] audit: type=1400 audit(1785857832.271:162): avc:  denied  { mount } for  pid=5607 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[   71.125338][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.169980][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.232341][ T5620] veth0_macvtap: entered promiscuous mode
[   71.242037][  T971] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.250812][ T5800] loop0: detected capacity change from 0 to 128
[   71.253197][  T971] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.282431][ T5613] Bluetooth: hci2: command tx timeout
[   71.282440][ T5619] Bluetooth: hci1: command tx timeout
[   71.292392][ T5619] Bluetooth: hci0: command tx timeout
[   71.314154][ T5620] veth1_macvtap: entered promiscuous mode
[   71.350088][ T5800] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   71.362134][ T5619] Bluetooth: hci3: command tx timeout
[   71.367646][  T971] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.376775][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.388585][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.444163][ T5619] Bluetooth: hci4: command tx timeout
[   71.452427][  T147] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.482035][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.490742][ T5803] jffs2: notice: (5803) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found.
[   71.491931][  T971] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.517217][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.530506][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_0
[   71.561537][  T971] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   71.594465][ T5620] batman_adv: batadv0: Interface activated: batadv_slave_1
[   71.622714][ T1124] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   71.663143][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.676502][   T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.694854][   T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.703883][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   71.783540][ T1022] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.827775][   T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   71.852253][   T35] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.872398][ T1124] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   71.892439][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   71.926731][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.035814][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.072408][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.126767][  T147] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.153134][ T5798] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[   72.163912][  T147] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.274032][ T1124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   72.291703][  T147] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   72.321941][ T1124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   72.329377][ T5798] usb 1-1: Dual-Role OTG device on HNP port
[   72.336465][  T147] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   72.360342][ T1124] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.364388][ T5798] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 7.02
[   72.409710][ T1176] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   72.426685][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.437421][  T971] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   72.470670][ T5827] jffs2: notice: (5827) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 6 of xref (0 dead, 4 orphan) found.
[   72.508229][ T5820] svc: failed to register lockdv1 RPC service (errno 111).
[   72.522767][ T5820] lockd_up: makesock failed, error=-111
[   72.533874][ T5708] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[   72.661586][   T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[   72.739218][ T5708] usb 5-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00
[   72.777793][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.845714][   T10] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[   72.893031][   T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.910564][ T5820] svc: failed to register nfsdv3 RPC service (errno 111).
[   72.937924][ T5820] svc: failed to register nfsaclv3 RPC service (errno 111).
[   72.946995][ T5820] failed to unregister tcp with rpcbind
[   72.959063][ T5820] svc: failed to register nfsdv3 RPC service (errno 97).
[   72.987316][ T5820] svc: failed to register nfsaclv3 RPC service (errno 97).
[   73.003219][ T5820] failed to unregister tcp with rpcbind
[   73.119314][ T5838] loop0: detected capacity change from 0 to 128
[   73.154074][ T5838] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   73.237908][ T5842] jffs2: notice: (5842) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found.
[   73.346392][ T5848] Bluetooth: MGMT ver 1.23
[   73.362242][ T5613] Bluetooth: hci2: command tx timeout
[   73.373226][ T5613] Bluetooth: hci0: command tx timeout
[   73.380416][ T5615] Bluetooth: hci1: command tx timeout
[   73.441808][ T5615] Bluetooth: hci3: command tx timeout
[   73.482691][ T5854] jffs2: notice: (5854) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   73.522187][ T5615] Bluetooth: hci4: command tx timeout
[   73.667824][ T5708] gud 5-1:1.0: Failed to get connectors (error=-5)
[   73.674936][ T5708] gud 5-1:1.0: probe with driver gud failed with error -5
[   73.692478][ T5798] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[   73.842002][ T5737] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[   73.864331][ T5798] usb 2-1: New USB device found, idVendor=2040, idProduct=4200, bcdDevice= 1.00
[   73.873663][ T5798] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   73.890873][ T5798] em28xx 2-1:1.0: New device   @ 480 Mbps (2040:4200, interface 0, class 0)
[   73.906322][ T5798] em28xx 2-1:1.0: Video interface 0 found: bulk
[   73.996238][ T5737] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[   74.005681][ T5737] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.014922][ T5737] usb 3-1: Product: syz
[   74.019994][ T5737] usb 3-1: Manufacturer: syz
[   74.025688][ T5737] usb 3-1: SerialNumber: syz
[   74.194725][ T5863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.211265][ T5863] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.497123][ T5798] em28xx 2-1:1.0: unknown em28xx chip ID (0)
[   74.542347][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.549587][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.556832][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.564304][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.572683][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.580691][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.587828][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.595004][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.602405][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.609467][   T10] hid-rmi 0003:1532:011D.0001: unknown main item tag 0x0
[   74.620413][   T10] hid-rmi 0003:1532:011D.0001: hidraw0: USB HID v1.11 Device [HID 1532:011d] on usb-dummy_hcd.3-1/input0
[   74.906410][ T5798] em28xx 2-1:1.0: reading from i2c device at 0xa0 failed (error=-5)
[   74.915598][ T5798] em28xx 2-1:1.0: board has no eeprom
[   75.203338][ T5798] em28xx 2-1:1.0: Identified as Hauppauge WinTV USB 2 (card=4)
[   75.211265][ T5798] em28xx 2-1:1.0: analog set to bulk mode.
[   75.218168][ T5736] em28xx 2-1:1.0: Registering V4L2 extension
[   75.342051][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x80 failed (error=-5)
[   75.351908][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x88 failed (error=-5)
[   75.363841][ T5619] Bluetooth: hci0: Opcode 0x0c1a failed: -110
[   75.387740][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xb8 failed (error=-5)
[   75.396836][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xba failed (error=-5)
[   75.428782][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x84 failed (error=-5)
[   75.439594][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x86 failed (error=-5)
[   75.447680][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout
[   75.455536][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x94 failed (error=-5)
[   75.464401][ T5736] em28xx 2-1:1.0: reading from i2c device at 0x96 failed (error=-5)
[   75.494013][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xc0 failed (error=-5)
[   75.503592][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xc2 failed (error=-5)
[   75.512272][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xc4 failed (error=-5)
[   75.740516][   T24] usb 5-1: USB disconnect, device number 2
[   75.840190][ T5875] jffs2: notice: (5875) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 2 orphan) found.
[   75.860755][   T29] kauditd_printk_skb: 112 callbacks suppressed
[   75.860769][   T29] audit: type=1400 audit(1785857837.251:275): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.896607][   T29] audit: type=1400 audit(1785857837.251:276): avc:  denied  { write } for  pid=5874 comm="syz.4.22" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.950405][   T29] audit: type=1400 audit(1785857837.261:277): avc:  denied  { write } for  pid=5874 comm="syz.4.22" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   75.989506][   T29] audit: type=1400 audit(1785857837.281:278): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.026082][   T29] audit: type=1400 audit(1785857837.281:279): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.051104][   T29] audit: type=1400 audit(1785857837.281:280): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.059976][ T5882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   76.075342][ T5880] svc: failed to register nfsdv3 RPC service (errno 111).
[   76.096467][ T5882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   76.110064][ T5880] svc: failed to register nfsaclv3 RPC service (errno 111).
[   76.134801][   T29] audit: type=1400 audit(1785857837.281:281): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.178022][   T29] audit: type=1400 audit(1785857837.281:282): avc:  denied  { write } for  pid=5876 comm="syz.0.23" name="/" dev="jffs2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[   76.225598][ T5883] NFSD: Failed to start, no listeners configured.
[   76.228772][   T29] audit: type=1400 audit(1785857837.371:283): avc:  denied  { node_bind } for  pid=5879 comm="syz.4.24" src=2049 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[   76.271567][   T29] audit: type=1400 audit(1785857837.371:284): avc:  denied  { read } for  pid=5879 comm="syz.4.24" name="portlist" dev="nfsd" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1
[   76.432577][ T5737] usb 3-1: USB disconnect, device number 2
[   76.519881][ T5700] usb 2-1: USB disconnect, device number 2
[   76.520992][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xc6 failed (error=-5)
[   76.561336][ T5700] em28xx 2-1:1.0: Disconnecting em28xx
[   76.565282][ T5736] em28xx 2-1:1.0: reading from i2c device at 0xc8 failed (error=-19)
[   76.575540][ T5736] em28xx 2-1:1.0: Config register raw data: 0xffffffed
[   76.586543][ T5736] em28xx 2-1:1.0: AC97 chip type couldn't be determined
[   76.597124][ T5736] em28xx 2-1:1.0: No AC97 audio processor
[   76.610073][ T5736] em28xx 2-1:1.0: em28xx_v4l2_init: em28xx_write_reg - msp34xx(1) failed! error [-19]
[   76.621212][ T5736] em28xx 2-1:1.0: Registering input extension
[   76.682132][ T5736] rc_core: IR keymap rc-hauppauge not found
[   76.702096][ T5736] Registered IR keymap rc-empty
[   76.708494][ T5736] rc rc0: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0
[   76.726161][ T5736] input: Hauppauge WinTV USB 2 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/rc/rc0/input5
[   76.728352][   T24] usb 4-1: USB disconnect, device number 2
[   76.745625][ T5736] em28xx 2-1:1.0: Input extension successfully initialized
[   76.773886][ T5700] em28xx 2-1:1.0: Closing input extension
[   76.907966][ T5893] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+
[   76.909441][ T5700] em28xx 2-1:1.0: Freeing device
[   76.942680][ T5893] md: could not open device unknown-block(7,0).
[   77.135040][ T5899] jffs2: notice: (5899) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   77.164616][ T5901] PM: suspend entry (deep)
[   77.522450][   T24] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[   77.657535][   T73] Filesystems sync: 0.485 seconds
[   77.695939][   T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 0.00
[   77.706750][   T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   77.707833][ T5906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.732040][ T5906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.734474][   T24] usbtest 2-1:1.0: Linux gadget zero
[   77.746357][   T24] usbtest 2-1:1.0: high-speed {control in/out bulk-in bulk-out} tests (+alt)
[   78.767053][ T5911] jffs2: notice: (5911) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   78.888035][ T5918] iommufd_mock iommufd_mock0: Adding to iommu group 0
[   78.953778][    T9] usb 2-1: USB disconnect, device number 3
[   79.041882][ T5922] md: could not open device unknown-block(7,0).
[   79.092835][ T5924] lo speed is unknown, defaulting to 1000
[   79.099669][ T5924] lo speed is unknown, defaulting to 1000
[   79.108626][ T5924] lo speed is unknown, defaulting to 1000
[   79.115656][ T5924] smbdirect: ib_dev[syz2]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000
[   79.130423][ T5924] smbdirect: ib_dev[syz2]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6
[   79.151143][ T5924] smbdirect: ib_dev[syz2]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008
[   79.164237][ T5924] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   79.178695][ T5924] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   79.201574][   T24] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[   79.218488][ T5924] lo speed is unknown, defaulting to 1000
[   79.227744][ T5924] lo speed is unknown, defaulting to 1000
[   79.229804][ T5926] nvmet: adding nsid 1 to subsystem testnqn
[   79.235669][ T5924] lo speed is unknown, defaulting to 1000
[   79.248212][ T5924] lo speed is unknown, defaulting to 1000
[   79.254826][ T5926] nvmet_rdma: enabling port 1 (127.0.0.1:4421)
[   79.263668][ T5924] lo speed is unknown, defaulting to 1000
[   79.360690][ T5926] nvme nvme0: rdma_resolve_addr failed (-19).
[   79.386360][   T24] usb 5-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[   79.406417][   T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.420668][ T5931] jffs2: notice: (5931) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   79.608738][ T5936] null_blk: nullb1: using native zone append
[   79.761987][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout
[   79.765159][ T5901] Bluetooth: hci1: Opcode 0x0c1a failed: -110
[   79.789665][ T5936] null_blk: disk nullb1 created
[   79.793425][ T5950] jffs2: notice: (5950) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   79.856151][ T5944] block device autoloading is deprecated and will be removed.
[   80.003949][ T5955] md: could not open device unknown-block(7,0).
[   80.160890][ T5901] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.180683][ T5901] Bluetooth: hci1: Opcode 0x0406 failed: -4
[   80.195103][ T5901] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   80.209491][ T5901] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   80.239431][ T5901] Bluetooth: hci0: Opcode 0x0406 failed: -4
[   80.249423][ T5901] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   80.256639][ T5901] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.265186][ T5901] Bluetooth: hci2: Opcode 0x0406 failed: -4
[   80.276135][ T5901] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   80.284528][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.296393][ T5901] Bluetooth: hci3: Opcode 0x0406 failed: -4
[   80.308826][ T5901] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   80.316760][ T5901] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   80.332544][ T5901] Bluetooth: hci4: Opcode 0x0406 failed: -4
[   80.353209][ T5967] vim2m pcspkr: Device registered as /dev/video103
[   80.678844][ T5979] jffs2: notice: (5979) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   80.771593][ T5938] NFSD: Unable to initialize client recovery tracking! (-110)
[   80.779666][ T5938] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   80.790843][ T5938] NFSD: starting 10-second grace period (net f000044b)
[   80.911259][ T5989] netlink: 'syz.3.62': attribute type 5 has an invalid length.
[   81.051971][   T24] hid_parser_main: 68 callbacks suppressed
[   81.051993][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.084322][   T29] kauditd_printk_skb: 59 callbacks suppressed
[   81.084338][   T29] audit: type=1400 audit(1785857842.461:344): avc:  denied  { write } for  pid=5995 comm="syz.0.64" name="nullb" dev="configfs" ino=2947 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   81.086393][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.120911][ T5996] null_blk: my_nullb: using native zone append
[   81.130391][   T29] audit: type=1800 audit(1785857842.501:345): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.64" name="zoned" dev="configfs" ino=8939 res=0 errno=0
[   81.167480][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.170849][   T29] audit: type=1800 audit(1785857842.501:346): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.0.64" name="power" dev="configfs" ino=8940 res=0 errno=0
[   81.205845][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.209301][ T5999] ./my_nullb_dev: Can't lookup blockdev
[   81.219171][   T42] cfg80211: failed to load regulatory.db
[   81.229503][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.244792][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.252980][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.260754][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.268539][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.274569][ T5901] Freezing user space processes
[   81.275649][   T24] hid-rmi 0003:1532:011D.0002: unknown main item tag 0x0
[   81.292751][ T5996] null_blk: disk my_nullb created
[   81.295022][   T24] hid-rmi 0003:1532:011D.0002: hidraw0: USB HID v1.11 Device [HID 1532:011d] on usb-dummy_hcd.4-1/input0
[   81.298690][ T5901] Freezing user space processes completed (elapsed 0.007 seconds)
[   81.317958][ T5901] OOM killer disabled.
[   81.322047][ T5901] Freezing remaining freezable tasks
[   81.331856][ T5901] Freezing remaining freezable tasks completed (elapsed 0.004 seconds)
[   81.341678][ T5901] printk: Suspending console(s) (use no_console_suspend to debug)
[   81.486534][ T5901] vhci_hcd vhci_hcd.14: suspend vhci_hcd
[   81.486581][ T5901] vhci_hcd vhci_hcd.13: suspend vhci_hcd
[   81.486632][ T5901] vhci_hcd vhci_hcd.12: suspend vhci_hcd
[   81.486669][ T5901] vhci_hcd vhci_hcd.11: suspend vhci_hcd
[   81.486706][ T5901] vhci_hcd vhci_hcd.10: suspend vhci_hcd
[   81.486755][ T5901] vhci_hcd vhci_hcd.9: suspend vhci_hcd
[   81.486797][ T5901] vhci_hcd vhci_hcd.8: suspend vhci_hcd
[   81.486833][ T5901] vhci_hcd vhci_hcd.7: suspend vhci_hcd
[   81.486870][ T5901] vhci_hcd vhci_hcd.6: suspend vhci_hcd
[   81.486920][ T5901] vhci_hcd vhci_hcd.5: suspend vhci_hcd
[   81.486958][ T5901] vhci_hcd vhci_hcd.4: suspend vhci_hcd
[   81.486993][ T5901] vhci_hcd vhci_hcd.3: suspend vhci_hcd
[   81.487041][ T5901] vhci_hcd vhci_hcd.2: suspend vhci_hcd
[   81.487078][ T5901] vhci_hcd vhci_hcd.1: suspend vhci_hcd
[   81.487115][ T5901] vhci_hcd vhci_hcd.0: suspend vhci_hcd
[   81.504436][ T1022] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[   81.852560][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout
[   82.235977][ T5901] ACPI: PM: Preparing to enter system sleep state S3
[   82.236453][ T5901] ACPI: PM: Saving platform NVS memory
[   82.237560][ T5901] Disabling non-boot CPUs ...
[   82.241727][ T5619] Bluetooth: hci0: command 0x0c1a tx timeout
[   82.251304][ T5901] smpboot: CPU 1 is now offline
[   82.262573][ T5619] Bluetooth: hci2: command 0x0c1a tx timeout
[   82.265274][ T5901] ACPI: PM: Low-level resume complete
[   82.265318][ T5901] ACPI: PM: Restoring platform NVS memory
[   82.282876][ T5901] Enabling non-boot CPUs ...
[   82.284011][ T5901] smpboot: Booting Node 0 Processor 1 APIC 0x1
[   82.293137][ T5901] CPU1 is up
[   82.293671][ T5901] ACPI: PM: Waking up from system sleep state S3
[   82.300169][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout
[   82.330879][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout
[   82.367951][ T6007] virtio_scsi virtio0: 1/0/0 default/read/poll queues
[   82.771389][ T6032] usb 1-1: reset high-speed USB device number 2 using dummy_hcd
[   82.781322][ T6005] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   83.940898][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout
[   84.340277][ T5615] Bluetooth: hci3: command 0x0c1a tx timeout
[   84.340318][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout
[   84.340730][ T5610] Bluetooth: hci0: command 0x0c1a tx timeout
[   84.340955][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout
[   86.420226][ T5613] Bluetooth: hci2: command 0x0c1a tx timeout
[   86.420264][ T5613] Bluetooth: hci0: command 0x0c1a tx timeout
[   86.430236][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout
[   86.430274][ T5619] Bluetooth: hci3: command 0x0c1a tx timeout
[   88.000265][ T6005] usb 5-1: device descriptor read/64, error -110
[   88.240278][ T6005] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   88.370316][ T6005] usb 5-1: device descriptor read/64, error -32
[   88.610234][ T6005] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   88.640815][ T6005] usb 5-1: device descriptor read/8, error -32
[   88.820320][ T6005] raw-gadget.1 gadget.4: failed to queue resume event
[   88.880283][ T6005] usb 5-1: reset high-speed USB device number 3 using dummy_hcd
[   88.900433][    C1] raw-gadget.1 gadget.4: ignoring, device is not running
[   88.900528][ T6005] usb 5-1: device descriptor read/8, error -32
[   89.021024][ T6005] raw-gadget.1 gadget.4: failed to queue suspend event
[   89.087595][ T5901] OOM killer enabled.
[   89.088161][ T5901] Restarting tasks: Starting
[   89.095403][   T42] usb 5-1: USB disconnect, device number 3
[   89.175254][ T5901] Restarting tasks: Done
[   89.179875][ T5901] random: crng reseeded on system resumption
[   89.189687][ T5920] raw-gadget.1 gadget.4: failed to queue disconnect event
[   89.191273][ T5901] PM: suspend exit
[   89.351768][   T29] audit: type=1400 audit(1785857850.766:347): avc:  denied  { write } for  pid=6073 comm="syz.0.69" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[   89.354460][ T6066] fido_id[6066]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory
[   89.464305][ T6078] rdma_rxe: rxe_newlink: failed to add lo
[   89.482602][   T29] audit: type=1400 audit(1785857850.906:348): avc:  denied  { wake_alarm } for  pid=6079 comm="syz.4.72" capability=35  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[   89.493906][ T6081] PM: suspend entry (s2idle)
[   89.503768][   T29] audit: type=1800 audit(1785857850.926:349): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="attr_allow_any_host" dev="configfs" ino=9115 res=0 errno=0
[   89.511126][   T29] audit: type=1800 audit(1785857850.936:350): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="device_path" dev="configfs" ino=9116 res=0 errno=0
[   89.519439][   T29] audit: type=1800 audit(1785857850.936:351): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="enable" dev="configfs" ino=9117 res=0 errno=0
[   89.520900][ T6078] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store
[   89.526156][   T29] audit: type=1800 audit(1785857850.946:352): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="addr_trtype" dev="configfs" ino=9120 res=0 errno=0
[   89.541755][   T29] audit: type=1800 audit(1785857850.956:353): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="addr_adrfam" dev="configfs" ino=9121 res=0 errno=0
[   89.542118][ T6078] nvmet: Disable port '1' before changing attribute in nvmet_addr_adrfam_store
[   89.568425][   T29] audit: type=1800 audit(1785857850.986:354): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="addr_traddr" dev="configfs" ino=9122 res=0 errno=0
[   89.570669][ T6078] nvmet: Disable port '1' before changing attribute in nvmet_addr_traddr_store
[   89.577666][   T29] audit: type=1800 audit(1785857850.996:355): pid=6078 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.3.71" name="addr_trsvcid" dev="configfs" ino=9592 res=0 errno=0
[   89.584626][ T6078] nvmet: Disable port '1' before changing attribute in nvmet_addr_trsvcid_store
[   89.613083][ T5736] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[   89.644614][   T29] audit: type=1400 audit(1785857851.056:356): avc:  denied  { read write } for  pid=6087 comm="syz.0.75" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1
[   89.693812][ T6078] nvme nvme0: rdma_resolve_addr failed (-19).
[   89.697587][ T6013] Filesystems sync: 0.200 seconds
[   89.726882][ T6092] jffs2: notice: (6092) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (1 unchecked, 0 orphan) and 4 of xref (0 dead, 3 orphan) found.
[   89.764030][ T5736] usb 2-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00
[   89.772248][ T5736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.790681][ T5736] input: USB Touchscreen 1234:5678 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input12
[   89.870633][ T5798] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[   89.875909][ T6097] lo speed is unknown, defaulting to 1000
[   90.021691][ T5798] usb 3-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 1.00
[   90.023083][ T5798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.040245][ T5700] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[   90.202237][ T5700] usb 4-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00
[   90.203602][ T5700] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.317448][ T6081] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[   90.318505][ T6081] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[   90.320333][ T6081] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[   90.321281][ T6081] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[   90.322251][ T6081] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[   90.324003][ T6081] Freezing user space processes
[   91.070260][ T6098] NFSD: Unable to initialize client recovery tracking! (-110)
[   91.071348][ T6098] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING.
[   91.072561][ T6098] NFSD: starting 90-second grace period (net f00005dc)
[   91.780272][ T5619] Bluetooth: hci1: command 0x0c1a tx timeout
[   92.341112][ T5619] Bluetooth: hci4: command 0x0c1a tx timeout
[   92.341420][ T5613] Bluetooth: hci3: command 0x0c1a tx timeout
[   92.342019][ T5610] Bluetooth: hci2: command 0x0c1a tx timeout
[   92.342845][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout
[   95.102809][ T6101] ==================================================================
[   95.103988][ T6101] BUG: KASAN: slab-use-after-free in snd_usb_midi_v2_free+0x52d/0x670
[   95.105156][ T6101] Write of size 8 at addr ffff888054d7a350 by task syz.1.67/6101
[   95.106199][ T6101] 
[   95.106581][ T6101] CPU: 1 UID: 0 PID: 6101 Comm: syz.1.67 Not tainted syzkaller #0 PREEMPT(full) 
[   95.106595][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   95.106602][ T6101] Call Trace:
[   95.106607][ T6101]  <TASK>
[   95.106611][ T6101]  dump_stack_lvl+0x100/0x190
[   95.106625][ T6101]  print_report+0x13d/0x4b0
[   95.106643][ T6101]  ? __virt_addr_valid+0x239/0x430
[   95.106658][ T6101]  ? snd_usb_midi_v2_free+0x52d/0x670
[   95.106670][ T6101]  kasan_report+0xdf/0x1c0
[   95.106684][ T6101]  ? snd_usb_midi_v2_free+0x52d/0x670
[   95.106697][ T6101]  snd_usb_midi_v2_free+0x52d/0x670
[   95.106709][ T6101]  ? __pfx_snd_ctl_dev_free+0x10/0x10
[   95.106723][ T6101]  snd_usb_midi_v2_free_all+0x85/0xe0
[   95.106737][ T6101]  snd_usb_audio_free+0x4e/0x120
[   95.106753][ T6101]  ? __pfx_snd_usb_audio_free+0x10/0x10
[   95.106767][ T6101]  release_card_device+0xb2/0x1a0
[   95.106777][ T6101]  ? __pfx_release_card_device+0x10/0x10
[   95.106787][ T6101]  device_release+0xd2/0x270
[   95.106798][ T6101]  kobject_put+0x1f7/0x640
[   95.106813][ T6101]  ? snd_card_disconnect.part.0+0x443/0x5b0
[   95.106824][ T6101]  put_device+0x1f/0x30
[   95.106834][ T6101]  snd_card_free_when_closed+0x2b/0x40
[   95.106844][ T6101]  usb_audio_disconnect+0x210/0x680
[   95.106859][ T6101]  usb_unbind_interface+0x1dd/0x9e0
[   95.106878][ T6101]  ? __pfx_usb_unbind_interface+0x10/0x10
[   95.106893][ T6101]  device_remove+0x12a/0x180
[   95.106907][ T6101]  device_release_driver_internal+0x44e/0x620
[   95.106922][ T6101]  ? __might_fault+0x40/0x140
[   95.106933][ T6101]  usb_driver_release_interface+0x10e/0x190
[   95.106949][ T6101]  proc_ioctl+0x5cd/0x6f0
[   95.106966][ T6101]  usbdev_ioctl+0x1017/0x3aa0
[   95.106978][ T6101]  ? __pfx_usbdev_ioctl+0x10/0x10
[   95.106989][ T6101]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.107002][ T6101]  ? do_vfs_ioctl+0x226/0x13e0
[   95.107018][ T6101]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   95.107033][ T6101]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   95.107052][ T6101]  ? __fget_files+0x215/0x3d0
[   95.107063][ T6101]  ? hook_file_ioctl_common+0x140/0x440
[   95.107083][ T6101]  ? selinux_file_ioctl+0x13b/0x290
[   95.107100][ T6101]  ? selinux_file_ioctl+0xb6/0x290
[   95.107118][ T6101]  ? __pfx_usbdev_ioctl+0x10/0x10
[   95.107129][ T6101]  __x64_sys_ioctl+0x18e/0x210
[   95.107146][ T6101]  do_syscall_64+0x115/0x870
[   95.107160][ T6101]  ? clear_bhb_loop+0x40/0x90
[   95.107172][ T6101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.107184][ T6101] RIP: 0033:0x7f693739e019
[   95.107194][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.107204][ T6101] RSP: 002b:00007f6938198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.107215][ T6101] RAX: ffffffffffffffda RBX: 00007f6937626090 RCX: 00007f693739e019
[   95.107222][ T6101] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004
[   95.107228][ T6101] RBP: 00007f693743500c R08: 0000000000000000 R09: 0000000000000000
[   95.107234][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.107241][ T6101] R13: 00007f6937626128 R14: 00007f6937626090 R15: 00007fff763a3988
[   95.107250][ T6101]  </TASK>
[   95.107254][ T6101] 
[   95.153192][ T6101] Allocated by task 5798:
[   95.153857][ T6101]  kasan_save_stack+0x30/0x50
[   95.154546][ T6101]  kasan_save_track+0x14/0x30
[   95.155260][ T6101]  __kasan_kmalloc+0xaa/0xb0
[   95.155916][ T6101]  __kmalloc_cache_noprof+0x2e5/0x6c0
[   95.156875][ T6101]  snd_ump_endpoint_new+0x93/0x470
[   95.157727][ T6101]  create_midi2_ump+0x2dd/0x920
[   95.158475][ T6101]  snd_usb_midi_v2_create+0x11fa/0x4070
[   95.159243][ T6101]  snd_usb_create_stream.isra.0+0x386/0x4d0
[   95.160255][ T6101]  usb_audio_probe+0xf05/0x3b10
[   95.160995][ T6101]  usb_probe_interface+0x303/0x8f0
[   95.161726][ T6101]  really_probe+0x241/0xa60
[   95.162520][ T6101]  __driver_probe_device+0x20e/0x450
[   95.163304][ T6101]  driver_probe_device+0x4a/0x140
[   95.164040][ T6101]  __device_attach_driver+0x1df/0x320
[   95.164826][ T6101]  bus_for_each_drv+0x159/0x1e0
[   95.165639][ T6101]  __device_attach+0x1e4/0x4d0
[   95.166299][ T6101]  device_initial_probe+0xaf/0xd0
[   95.166997][ T6101]  bus_probe_device+0x64/0x160
[   95.167657][ T6101]  device_add+0x121d/0x1970
[   95.168309][ T6101]  usb_set_configuration+0xd97/0x1c60
[   95.169124][ T6101]  usb_generic_driver_probe+0xa1/0xe0
[   95.169919][ T6101]  usb_probe_device+0xef/0x400
[   95.170651][ T6101]  really_probe+0x241/0xa60
[   95.171292][ T6101]  __driver_probe_device+0x20e/0x450
[   95.172023][ T6101]  driver_probe_device+0x4a/0x140
[   95.172728][ T6101]  __device_attach_driver+0x1df/0x320
[   95.173588][ T6101]  bus_for_each_drv+0x159/0x1e0
[   95.174463][ T6101]  __device_attach+0x1e4/0x4d0
[   95.175335][ T6101]  device_initial_probe+0xaf/0xd0
[   95.176183][ T6101]  bus_probe_device+0x64/0x160
[   95.176849][ T6101]  device_add+0x121d/0x1970
[   95.177511][ T6101]  usb_new_device.cold+0x685/0x115c
[   95.178270][ T6101]  hub_event+0x30a3/0x4a60
[   95.178904][ T6101]  process_one_work+0xa23/0x1940
[   95.179604][ T6101]  worker_thread+0x5ef/0xe50
[   95.180288][ T6101]  kthread+0x370/0x450
[   95.180873][ T6101]  ret_from_fork+0x72b/0xd50
[   95.181523][ T6101]  ret_from_fork_asm+0x1a/0x30
[   95.182298][ T6101] 
[   95.182628][ T6101] Freed by task 6101:
[   95.183177][ T6101]  kasan_save_stack+0x30/0x50
[   95.183844][ T6101]  kasan_save_track+0x14/0x30
[   95.184533][ T6101]  kasan_save_free_info+0x3b/0x70
[   95.185346][ T6101]  __kasan_slab_free+0x5f/0x80
[   95.186006][ T6101]  kfree+0x22b/0x6c0
[   95.186554][ T6101]  snd_rawmidi_dev_free+0x3e/0x60
[   95.187239][ T6101]  __snd_device_free+0x1a3/0x300
[   95.187918][ T6101]  snd_device_free_all+0xf3/0x220
[   95.188618][ T6101]  release_card_device+0x77/0x1a0
[   95.189303][ T6101]  device_release+0xd2/0x270
[   95.189932][ T6101]  kobject_put+0x1f7/0x640
[   95.190546][ T6101]  put_device+0x1f/0x30
[   95.191122][ T6101]  snd_card_free_when_closed+0x2b/0x40
[   95.191861][ T6101]  usb_audio_disconnect+0x210/0x680
[   95.192596][ T6101]  usb_unbind_interface+0x1dd/0x9e0
[   95.193307][ T6101]  device_remove+0x12a/0x180
[   95.193936][ T6101]  device_release_driver_internal+0x44e/0x620
[   95.194770][ T6101]  usb_driver_release_interface+0x10e/0x190
[   95.195584][ T6101]  proc_ioctl+0x5cd/0x6f0
[   95.196184][ T6101]  usbdev_ioctl+0x1017/0x3aa0
[   95.196822][ T6101]  __x64_sys_ioctl+0x18e/0x210
[   95.197480][ T6101]  do_syscall_64+0x115/0x870
[   95.198110][ T6101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.198906][ T6101] 
[   95.199237][ T6101] The buggy address belongs to the object at ffff888054d7a000
[   95.199237][ T6101]  which belongs to the cache kmalloc-4k of size 4096
[   95.201081][ T6101] The buggy address is located 848 bytes inside of
[   95.201081][ T6101]  freed 4096-byte region [ffff888054d7a000, ffff888054d7b000)
[   95.202900][ T6101] 
[   95.203311][ T6101] The buggy address belongs to the physical page:
[   95.204165][ T6101] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x54d78
[   95.205339][ T6101] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[   95.206523][ T6101] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[   95.207610][ T6101] page_type: f5(slab)
[   95.208267][ T6101] raw: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122
[   95.209429][ T6101] raw: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[   95.210581][ T6101] head: 00fff00000000040 ffff88813fe28140 dead000000000100 dead000000000122
[   95.211753][ T6101] head: 0000000000000000 0000000800040004 00000000f5000000 0000000000000000
[   95.212982][ T6101] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[   95.214245][ T6101] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[   95.215478][ T6101] page dumped because: kasan: bad access detected
[   95.216800][ T6101] page_owner tracks the page as allocated
[   95.217576][ T6101] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5620, tgid 5620 (syz-executor), ts 72583840072, free_ts 17582736686
[   95.220360][ T6101]  post_alloc_hook+0xfd/0x120
[   95.221010][ T6101]  get_page_from_freelist+0xf48/0x3530
[   95.221752][ T6101]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[   95.222547][ T6101]  new_slab+0xa2/0x640
[   95.223128][ T6101]  refill_objects+0xe3/0x410
[   95.223757][ T6101]  __pcs_replace_empty_main+0x376/0x680
[   95.224533][ T6101]  __kmalloc_noprof+0x66d/0x820
[   95.225196][ T6101]  tomoyo_realpath_from_path+0xb6/0x690
[   95.225946][ T6101]  tomoyo_path_number_perm+0x23c/0x580
[   95.226691][ T6101]  security_file_ioctl+0xd3/0x230
[   95.227384][ T6101]  __x64_sys_ioctl+0xb7/0x210
[   95.228040][ T6101]  do_syscall_64+0x115/0x870
[   95.228688][ T6101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.229527][ T6101] page last free pid 1 tgid 1 stack trace:
[   95.230308][ T6101]  free_pages_prepare+0x586/0xd80
[   95.231033][ T6101]  __free_contig_range_common+0x14f/0x250
[   95.231883][ T6101]  destroy_args+0xa8/0x7a0
[   95.232520][ T6101]  debug_vm_pgtable+0x1d69/0x3490
[   95.233212][ T6101]  do_one_initcall+0x11d/0x700
[   95.233912][ T6101]  kernel_init_freeable+0x6ea/0x7b0
[   95.234637][ T6101]  kernel_init+0x1f/0x1e0
[   95.235237][ T6101]  ret_from_fork+0x72b/0xd50
[   95.235870][ T6101]  ret_from_fork_asm+0x1a/0x30
[   95.236528][ T6101] 
[   95.236859][ T6101] Memory state around the buggy address:
[   95.237613][ T6101]  ffff888054d7a200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.238684][ T6101]  ffff888054d7a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.239764][ T6101] >ffff888054d7a300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.240831][ T6101]                                                  ^
[   95.241746][ T6101]  ffff888054d7a380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.242827][ T6101]  ffff888054d7a400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[   95.243911][ T6101] ==================================================================
[   95.247847][ T6101] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[   95.249067][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.1.67 Not tainted syzkaller #0 PREEMPT(full) 
[   95.250315][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[   95.251725][ T6101] Call Trace:
[   95.252329][ T6101]  <TASK>
[   95.252750][ T6101]  dump_stack_lvl+0x100/0x190
[   95.253504][ T6101]  vpanic+0x552/0x970
[   95.254070][ T6101]  ? __pfx_vpanic+0x10/0x10
[   95.254681][ T6101]  ? rcu_is_watching+0x12/0xc0
[   95.255353][ T6101]  ? snd_usb_midi_v2_free+0x52d/0x670
[   95.256454][ T6101]  panic+0xd1/0xe0
[   95.257088][ T6101]  ? __pfx_panic+0x10/0x10
[   95.257808][ T6101]  ? snd_usb_midi_v2_free+0x52d/0x670
[   95.258572][ T6101]  ? preempt_schedule_common+0x42/0xc0
[   95.259351][ T6101]  check_panic_on_warn.cold+0x19/0x34
[   95.260112][ T6101]  end_report.part.0+0x3a/0x90
[   95.260818][ T6101]  kasan_report.cold+0xe/0x18
[   95.261878][ T6101]  ? snd_usb_midi_v2_free+0x52d/0x670
[   95.262631][ T6101]  snd_usb_midi_v2_free+0x52d/0x670
[   95.263332][ T6101]  ? __pfx_snd_ctl_dev_free+0x10/0x10
[   95.264065][ T6101]  snd_usb_midi_v2_free_all+0x85/0xe0
[   95.264790][ T6101]  snd_usb_audio_free+0x4e/0x120
[   95.265588][ T6101]  ? __pfx_snd_usb_audio_free+0x10/0x10
[   95.266625][ T6101]  release_card_device+0xb2/0x1a0
[   95.267816][ T6101]  ? __pfx_release_card_device+0x10/0x10
[   95.268656][ T6101]  device_release+0xd2/0x270
[   95.269529][ T6101]  kobject_put+0x1f7/0x640
[   95.270214][ T6101]  ? snd_card_disconnect.part.0+0x443/0x5b0
[   95.271168][ T6101]  put_device+0x1f/0x30
[   95.271737][ T6101]  snd_card_free_when_closed+0x2b/0x40
[   95.272480][ T6101]  usb_audio_disconnect+0x210/0x680
[   95.273193][ T6101]  usb_unbind_interface+0x1dd/0x9e0
[   95.273904][ T6101]  ? __pfx_usb_unbind_interface+0x10/0x10
[   95.274917][ T6101]  device_remove+0x12a/0x180
[   95.275725][ T6101]  device_release_driver_internal+0x44e/0x620
[   95.276593][ T6101]  ? __might_fault+0x40/0x140
[   95.277338][ T6101]  usb_driver_release_interface+0x10e/0x190
[   95.278158][ T6101]  proc_ioctl+0x5cd/0x6f0
[   95.278755][ T6101]  usbdev_ioctl+0x1017/0x3aa0
[   95.279415][ T6101]  ? __pfx_usbdev_ioctl+0x10/0x10
[   95.280114][ T6101]  ? __sanitizer_cov_trace_switch+0x54/0x90
[   95.280953][ T6101]  ? do_vfs_ioctl+0x226/0x13e0
[   95.281611][ T6101]  ? __pfx_do_vfs_ioctl+0x10/0x10
[   95.282300][ T6101]  ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10
[   95.283312][ T6101]  ? __fget_files+0x215/0x3d0
[   95.284011][ T6101]  ? hook_file_ioctl_common+0x140/0x440
[   95.284805][ T6101]  ? selinux_file_ioctl+0x13b/0x290
[   95.285562][ T6101]  ? selinux_file_ioctl+0xb6/0x290
[   95.286329][ T6101]  ? __pfx_usbdev_ioctl+0x10/0x10
[   95.287047][ T6101]  __x64_sys_ioctl+0x18e/0x210
[   95.287705][ T6101]  do_syscall_64+0x115/0x870
[   95.288498][ T6101]  ? clear_bhb_loop+0x40/0x90
[   95.289172][ T6101]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[   95.289971][ T6101] RIP: 0033:0x7f693739e019
[   95.290641][ T6101] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   95.293367][ T6101] RSP: 002b:00007f6938198028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   95.294533][ T6101] RAX: ffffffffffffffda RBX: 00007f6937626090 RCX: 00007f693739e019
[   95.295712][ T6101] RDX: 0000200000000200 RSI: 00000000c0105512 RDI: 0000000000000004
[   95.296926][ T6101] RBP: 00007f693743500c R08: 0000000000000000 R09: 0000000000000000
[   95.298173][ T6101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[   95.299311][ T6101] R13: 00007f6937626128 R14: 00007f6937626090 R15: 00007fff763a3988
[   95.300434][ T6101]  </TASK>
[   95.301099][ T6101] Kernel Offset: disabled
[   95.301691][ T6101] Rebooting in 86400 seconds..