last executing test programs: 45.085891868s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000100)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='./dev/mtdblock0\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400)='jffs2\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x42, 0x1ff) unlinkat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/test\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mnt/test2\x00', 0x42, 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/zero\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000) 44.850451251s ago: executing program 0 (id=6): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/nullb/nullb1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/nullb/nullb1/zoned\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/nullb/nullb1/power\x00', 0x2, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) 44.514524573s ago: executing program 0 (id=7): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x84, &(0x7f0000000600), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) 43.785012686s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:01.1/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000100)='\n', 0x1, 0x3c) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:01.1/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1\x00', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1\x00', 0x1) nanosleep(&(0x7f0000000500)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/pci/devices/0000:00:01.1/driver/unbind\x00', 0x1, 0x0) write(r3, &(0x7f0000000280)='0000:00:01.1\x00', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/devices/0000:00:01.1/config\x00', 0x2, 0x0) pwrite64(r4, &(0x7f0000000300)='\x00', 0x1, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/drivers/i801_smbus/new_id\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='ffffffff ffffffff ffffffff ffffffff 0 0 3f\x00', 0x2a) r6 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/pci/drivers/i801_smbus/bind\x00', 0x1, 0x0) write(r6, &(0x7f0000000400)='0000:00:01.1\x00', 0xc) 42.95014578s ago: executing program 2 (id=12): r0 = io_uring_setup(0x1, &(0x7f0000000080)={0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0}) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x1, 0x0, 0x8, 0x0, &(0x7f0000000200)={&(0x7f0000001000)='\x00'/4096, 0x1000}, &(0x7f0000000300)={&(0x7f0000002000)='\x00'/4096, 0x1000, 0x1}, {}, 0x0, 0x1000}, 0x1) io_uring_register$IORING_REGISTER_ZCRX_CTRL(r0, 0x24, &(0x7f0000000400), 0x0) 42.883428514s ago: executing program 2 (id=13): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01", 0x1, 0x20d1) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="54190100", 0x4, 0x2558) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00', 0x4, 0x2d50) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=sunx86\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 42.843753883s ago: executing program 3 (id=14): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010000000904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f0000000600)={0x40, 0x2}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") 42.743782684s ago: executing program 2 (id=15): r0 = syz_usb_connect(0x3, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd0c390001010203010109022e0001010080fa0904000004ff00000007050102000200070581020002000705020200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)='\b\x00\x00\x00\x00') syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000100)="0801000000") syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="0814") syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)='\b\x00') syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\b') nanosleep(&(0x7f0000000200)={0x2}, 0x0) syz_open_dev$video(&(0x7f0000000300), 0x0, 0x0) 42.023976529s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x42, 0x1b6) fallocate(r0, 0x0, 0x0, 0x10000) pwrite64(r0, &(0x7f0000000100)="fc4e2ba901000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba90100"/260, 0x102, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='none\x00', 0x5) 41.933998461s ago: executing program 1 (id=18): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000100)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f0000000102), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000300)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000302), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000304), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000306)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000308), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000030a), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f000000030c)={0x2, 0xfa}, 0x2) 41.836547717s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_print_times\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='devices', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='freeze', 0x6) 40.566264158s ago: executing program 1 (id=20): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='zstd\x00', 0x4) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 40.467668844s ago: executing program 1 (id=21): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff401e041c400001010203010902220001010080fa0904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000110)={0x84, &(0x7f0000000210)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000120)={0x84, &(0x7f0000000220)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000130)={0x84, &(0x7f0000000230)={0x40, 0xa1, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000150)={0x84, &(0x7f0000000250)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000160)={0x84, &(0x7f0000000260)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000170)={0x84, &(0x7f0000000270)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000280)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000190)={0x84, &(0x7f0000000290)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001a0)={0x84, &(0x7f00000002a0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001b0)={0x84, &(0x7f00000002b0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001c0)={0x84, &(0x7f00000002c0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001d0)={0x84, &(0x7f00000002d0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f00000001e0)={0x84, &(0x7f00000002e0)={0x40, 0xa1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$video(&(0x7f0000000080), 0x0, 0x2) read(r1, &(0x7f0000000300)=""/4096, 0x1000) 39.64878177s ago: executing program 3 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='mydomain /export 2147483647 8192 0 0 0\n\x00', 0x27) 39.585393377s ago: executing program 2 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='mem\x00', 0x2) 39.355650295s ago: executing program 2 (id=25): r0 = syz_usb_connect(0x2, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d0492080001000000010902220001010080320904000000ffffff000904000101ffffff0007058101000201"], &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x1, "ff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)={0x84, &(0x7f0000002100)={0x0, 0x0, 0x1, "02"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000003000)={0x84, &(0x7f0000003100)={0x0, 0x0, 0x1, '0'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000004000)={0x84, &(0x7f0000004100)={0x0, 0x0, 0x1, '1'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000002000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000300)={0x4, 0x1, 0x1}) ioctl$VIDIOC_STREAMON(r1, 0x40045612, &(0x7f0000000400)=0x1) 37.9860614s ago: executing program 3 (id=28): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000005000), 0x88, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 37.166176478s ago: executing program 4 (id=30): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000280)='mydomain / 2147483647 24576 0 0 0\n\x00', 0x22) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs4\x00', 0x0, &(0x7f00000003c0)='nolock,addr=127.0.0.1,port=2049\x00') openat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt/file\x00', 0x42, 0x1ff) 36.860746763s ago: executing program 3 (id=31): syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100000000000109028f00020100800009040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050101000201000007250100000000090401020101020000072401010101000b2402010204200180bb0009050101000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x0, &(0x7f0000000540)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x0, 0x0) 36.208225435s ago: executing program 1 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./lower\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./upper\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./work\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./merge\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./lower/file\x00', 0x81c0, 0x0) mount$overlay(0x0, &(0x7f00000001c0)='./merge\x00', &(0x7f0000000200), 0x0, &(0x7f0000000240)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./merge\x00', 0x0, 0x0) name_to_handle_at(r0, &(0x7f0000000300)='file\x00', &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, &(0x7f0000000340), 0x0) close(r0) umount2(&(0x7f0000000380)='./merge\x00', 0x0) mount$overlay(0x0, &(0x7f00000003c0)='./merge\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)={[{@lowerdir={'lowerdir', 0x3d, './lower'}}, {@upperdir={'upperdir', 0x3d, './upper'}}, {@workdir={'workdir', 0x3d, './work'}}, {@index_on}, {@nfs_export_on}, {@uuid_on, 0x0}]}) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./merge\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)=@raw={0x40, 0x0, {'\x00'/64}}, 0x0) 36.084381808s ago: executing program 1 (id=33): r0 = syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001000000010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 35.871820071s ago: executing program 2 (id=34): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) read(r3, &(0x7f0000000210)=""/4096, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) read(r4, &(0x7f0000000210)=""/4096, 0x1000) r5 = syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0) read(r5, &(0x7f0000000210)=""/4096, 0x1000) 35.615751153s ago: executing program 4 (id=35): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x33, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085120901953f810009019100c0"}}, 0x14b) read(r0, &(0x7f0000001000), 0x111c) read(r0, &(0x7f0000002000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001002005a"}}, 0xd) read(r0, &(0x7f0000003000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff0100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000600)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000700)={0xc, {0x14, "11ff0100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000800)={0xc, {0x14, "11ff00000300"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000900)={0xc, {0x14, "11ff0300"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000a00)={0xc, {0x14, "11ff03100800"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000b00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000c00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000d00)={0xc, {0x14, "11ff042000"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000e00)={0xc, {0x14, "11ff00000400"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000f00)={0xc, {0x14, "11ff04100800"/20}}, 0x1a) 35.524316317s ago: executing program 4 (id=36): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r2 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r2, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r3, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 35.23837806s ago: executing program 4 (id=37): r0 = io_uring_setup(0x4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_ZCRX_IFQ(r0, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)={&(0x7f0000001000), 0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000300)={&(0x7f0000002000)}}, 0x1) mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x3, 0x11, r0, 0x30000000) 35.036705919s ago: executing program 4 (id=38): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a32000000000800410072786500140033006c6f00"/56], 0x38}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/infiniband_srp\x00', 0x2, 0x0) 34.901877875s ago: executing program 4 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) io_uring_enter(r3, 0x0, 0x1, 0x1, 0x0, 0x0) 17.011532012s ago: executing program 32 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_debug_messages\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='0', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_print_times\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='0', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/pm_test\x00', 0x2, 0x0) write(r2, &(0x7f00000001c0)='devices', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/power/state\x00', 0x2, 0x0) write(r3, &(0x7f0000000240)='freeze', 0x6) 16.927427789s ago: executing program 33 (id=33): r0 = syz_usb_connect(0x2, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040da0b31280001000000010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 16.864731354s ago: executing program 34 (id=34): r0 = syz_usb_connect(0x3, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ca08100100010102030109023e0001010080fa0904000002ff00000007058302000200070504020002000904000103ff000000070583020002000705040200020007058101000201"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000100)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000110)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000120)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000130)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000140)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000150)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000160)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f0000000170)="0200"/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f0000000180)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f0000000190)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001a0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001b0)=""/2) syz_usb_ep_read(r0, 0x4, 0x1, &(0x7f00000001c0)=""/1) syz_usb_ep_write(r0, 0x83, 0x10, &(0x7f00000001d0)='\x00'/16) syz_usb_ep_read(r0, 0x4, 0x2, &(0x7f00000001e0)=""/2) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$video(&(0x7f0000000200), 0x0, 0x0) read(r1, &(0x7f0000000210)=""/4096, 0x1000) r2 = syz_open_dev$video(&(0x7f0000000200), 0x1, 0x0) read(r2, &(0x7f0000000210)=""/4096, 0x1000) r3 = syz_open_dev$video(&(0x7f0000000200), 0x2, 0x0) read(r3, &(0x7f0000000210)=""/4096, 0x1000) r4 = syz_open_dev$video(&(0x7f0000000200), 0x3, 0x0) read(r4, &(0x7f0000000210)=""/4096, 0x1000) r5 = syz_open_dev$video(&(0x7f0000000200), 0x10, 0x0) read(r5, &(0x7f0000000210)=""/4096, 0x1000) 16.745396193s ago: executing program 35 (id=31): syz_usb_connect(0x0, 0xa1, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040ba23000100000000000109028f00020100800009040000000101000009240100011e0001010c2402010101000203000000092403020103000100090401000001020000090401010101020000072401010101000b2402010202100180bb0009050101000201000007250100000000090401020101020000072401010101000b2402010204200180bb0009050101000201000007250100000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0x0, &(0x7f0000000540)) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x0, &(0x7f0000000400)={0x0, &(0x7f0000000500)='\x00'/16, 0x10}) ioctl$SNDRV_PCM_IOCTL_START(r0, 0x0, 0x0) 16.660701565s ago: executing program 36 (id=39): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) io_uring_enter(r3, 0x0, 0x1, 0x1, 0x0, 0x0) 4.44324008s ago: executing program 7 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000640)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f0000000140)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='./proc\x00', &(0x7f0000000540)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./export\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='mydomain /export 2147483647 8192 0 0 0\n\x00', 0x27) 4.070483424s ago: executing program 5 (id=40): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085"}}, 0x13f) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) 3.426587542s ago: executing program 8 (id=43): mkdirat(0xffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000100)='zstd\x00', 0x4) r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) read(r0, &(0x7f0000000000), 0x10000) r1 = eventfd(0x11111111) r2 = eventfd(0x22222222) read(r1, &(0x7f0000000008), 0x8) read(r2, &(0x7f0000000010), 0x8) madvise(&(0x7f0000000000/0x10000)=nil, 0x10000, 0x15) 3.400491331s ago: executing program 9 (id=44): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406a05b10000000000000109022200010100803209040000010300000009211101000122170007058103400001"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022170000000600ff0901a10185020901150026ff00750895098102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_open_dev$hidraw(&(0x7f0000000200), 0x0, 0x0) syz_open_dev$hidraw(&(0x7f0000000240), 0x1, 0x0) syz_open_dev$hidraw(&(0x7f0000000280), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000002c0), 0x0, 0x0) syz_open_dev$evdev(&(0x7f0000000300), 0x1, 0x0) syz_open_dev$evdev(&(0x7f0000000340), 0x2, 0x0) syz_open_dev$evdev(&(0x7f00000003c0), 0x4, 0x0) 3.226833557s ago: executing program 6 (id=48): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) write(r1, &(0x7f0000000c40)='128\x00', 0x3) 3.083841262s ago: executing program 5 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) 3.065202857s ago: executing program 8 (id=50): r0 = memfd_create(&(0x7f0000000000)='syzkaller\x00', 0x0) ftruncate(r0, 0x10000) pwrite64(r0, &(0x7f0000001000)='\b\x00\x00\x00\n\x00\x00\x00\v\x00\x00\x00\f\x00'/24, 0x18, 0x2008) pwrite64(r0, &(0x7f0000001020)="80000000800000000100000000100000000400000400000005000000", 0x1c, 0x2024) pwrite64(r0, &(0x7f0000001040)="00f0ffff00fcffff0c0000000a00000000000000000000000200000001000000", 0x20, 0x2048) pwrite64(r0, &(0x7f0000001060)="00080000000000000000000000040000200000000200000000000000", 0x1c, 0x2068) pwrite64(r0, &(0x7f0000001080)="0100000000000000", 0x8, 0x2088) pwrite64(r0, &(0x7f0000001090)="0d000000000400000004000001000000010000000100000001000000010000008000000080000000", 0x28, 0x2098) pwrite64(r0, &(0x7f00000010c0)="01000000640000006400000064000000", 0x10, 0x20c0) pwrite64(r0, &(0x7f00000010d0)="01", 0x1, 0x20d1) pwrite64(r0, &(0x7f00000011b0)="389d267c", 0x4, 0x24e0) pwrite64(r0, &(0x7f00000010e0)="54190100", 0x4, 0x2558) pwrite64(r0, &(0x7f00000010f0)="55020900", 0x4, 0x2804) pwrite64(r0, &(0x7f0000001100)="000000000100800080000000", 0xc, 0x280c) pwrite64(r0, &(0x7f0000001110)="01000000640000006400000064000000", 0x10, 0x2818) pwrite64(r0, &(0x7f0000001120)='\x00'/12, 0xc, 0x2828) pwrite64(r0, &(0x7f0000001130)="80000000a0000000c0000000e000000000010000", 0x14, 0x2854) pwrite64(r0, &(0x7f00000011a0)="04", 0x1, 0x28c0) pwrite64(r0, &(0x7f0000001150)="0000ffffffffffffffffffffffffffff", 0x10, 0x28e0) pwrite64(r0, &(0x7f0000001160)="ed410200", 0x4, 0x2d00) pwrite64(r0, &(0x7f0000001170)="0004000000000000", 0x8, 0x2d08) pwrite64(r0, &(0x7f0000001180)='\f\x00\x00\x00', 0x4, 0x2d50) pwrite64(r0, &(0x7f0000001190)="020000000c0001002e00000002000000f40302002e2e0000", 0x18, 0x3000) r1 = syz_open_dev$loop(&(0x7f0000002000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@loop={'/dev/loop', 0x0}, &(0x7f0000003000)='./mnt\x00', &(0x7f0000004000)='ufs\x00', 0x1, &(0x7f0000005000)='ufstype=44bsd\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000006000)='./mnt/file\x00', 0x42, 0x1ff) write(r2, &(0x7f0000007000)='A', 0x1) 2.89504516s ago: executing program 5 (id=51): r0 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'}) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0x16, &(0x7f0000000200)={[{0x12, 0x4e00, "0000000a0000000000020100000102000000"}]}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 2.891557296s ago: executing program 6 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000050)='./proc/net/afs/rootcell\x00', 0x2, 0x0) write(r0, &(0x7f0000000070)='syz0:invalid_ip', 0xf) 2.773192593s ago: executing program 8 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000402a1101000001010203010902270001010080fa0904000003ffffff00070581024000000705820240000007050302400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x40, "0100"/64}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/lirc0\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)="0100000002000000", 0x8) 2.643900183s ago: executing program 6 (id=54): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='none\x00', 0x5) 2.582511475s ago: executing program 6 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/nvmet/subsystems/testnqn\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/ports/1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/nvmet/ports/1/addr_trtype\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='loop\x00', 0x4) symlinkat(&(0x7f00000003c0)='./config/nvmet/subsystems/testnqn\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/nvmet/ports/1/subsystems/testnqn\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/nvmet/subsystems/testnqn/attr_qid_max\x00', 0x2, 0x0) r2 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) r3 = syz_io_uring_setup(0x10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000600)=0x0, &(0x7f0000000640)=0x0, &(0x7f0000000680)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000700)=@IORING_OP_WRITEV={0x2, 0x10, 0x0, @fd=r2, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)='transport=loop,nqn=testnqn,nr_io_queues=128\x00', 0x2b}], 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) io_uring_enter(r3, 0x1, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000a00)={0x0, 0x989680}, &(0x7f0000000b00)) write(r1, &(0x7f0000000c00)='1\x00', 0x1) 2.181564165s ago: executing program 6 (id=56): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="380000000314010000000000000000000900020073797a3000000000080041007369770014003300766574683000"/56], 0x38}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000004c0), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r1, &(0x7f0000000180)={0x3, 0x40, 0xfa00, {{0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, {0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}}, r2, 0x7}}, 0x48) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000200)={0x6, 0x118, 0xfa00, {{}, r2}}, 0x120) 1.123486009s ago: executing program 6 (id=57): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='freeze\n\x00', 0x8) 529.502247ms ago: executing program 9 (id=58): r0 = memfd_create(&(0x7f0000000100)='img\x00', 0x0) ftruncate(r0, 0x1000000) r1 = syz_open_dev$loop(&(0x7f0000000140), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r2, &(0x7f00000000c0)='/dev/loop0,65536\x00', 0x11) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) r3 = syz_open_dev$mtd(&(0x7f0000000600), 0x1, 0x2) ioctl$MEMERASE(r3, 0x40084d02, &(0x7f0000000640)={0x0, 0x1000000}) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl(r4, 0x40186f40, &(0x7f00000001c0)="000000000100"/24) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1312d00}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000380)='./dev/ubi0\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt\x00', 0x1ff) mount(&(0x7f0000000540)=@filename='ubi0_0\x00', &(0x7f0000000500)='./mnt\x00', &(0x7f0000000580)='ubifs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000005c0)='./mnt/test\x00', 0x42, 0x1ff) 186.579098ms ago: executing program 9 (id=59): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a10185100901150026ff007508950681000901910085110901951381000901910085"}}, 0x13f) read(r0, &(0x7f0000001000), 0x111c) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff00000200"/20}}, 0x1a) 0s ago: executing program 5 (id=60): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f0000000080)={0x1, 0x1}, 0x2) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) read(r0, &(0x7f0000000100)=""/1, 0x1) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000140)={0x2, 0xfa}, 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000180), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f00000001c0), 0x2) write$USERIO_CMD_SEND_INTERRUPT(r0, &(0x7f0000000200)={0x2, 0xfa}, 0x2) kernel console output (not intermixed with test programs): [ 58.770083][ T30] audit: type=1400 audit(1785856478.698:115): avc: denied { write } for pid=5489 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 58.826492][ T30] audit: type=1400 audit(1785856478.758:116): avc: denied { write } for pid=5500 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.461584][ T30] audit: type=1400 audit(1785856479.388:117): avc: denied { write } for pid=5503 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.519438][ T30] audit: type=1400 audit(1785856479.448:118): avc: denied { write } for pid=5514 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.702604][ T30] audit: type=1400 audit(1785856479.628:119): avc: denied { write } for pid=5517 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.762692][ T30] audit: type=1400 audit(1785856479.688:120): avc: denied { write } for pid=5528 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 59.948822][ T30] audit: type=1400 audit(1785856479.878:121): avc: denied { write } for pid=5531 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 60.006582][ T30] audit: type=1400 audit(1785856479.938:122): avc: denied { write } for pid=5542 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.48' (ED25519) to the list of known hosts. [ 66.206702][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 66.206718][ T30] audit: type=1400 audit(1785856486.138:129): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 66.236653][ T30] audit: type=1400 audit(1785856486.168:130): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.240364][ T5596] cgroup: Unknown subsys name 'net' [ 66.266154][ T30] audit: type=1400 audit(1785856486.198:131): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 66.397691][ T5596] cgroup: Unknown subsys name 'cpuset' [ 66.405747][ T5596] cgroup: Unknown subsys name 'rlimit' [ 66.537040][ T30] audit: type=1400 audit(1785856486.468:132): avc: denied { setattr } for pid=5596 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 66.571767][ T30] audit: type=1400 audit(1785856486.468:133): avc: denied { create } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.592602][ T30] audit: type=1400 audit(1785856486.468:134): avc: denied { write } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.625916][ T30] audit: type=1400 audit(1785856486.468:135): avc: denied { read } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.646546][ T30] audit: type=1400 audit(1785856486.468:136): avc: denied { mounton } for pid=5596 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 66.669678][ T5598] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 66.672962][ T30] audit: type=1400 audit(1785856486.468:137): avc: denied { mount } for pid=5596 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.705569][ T30] audit: type=1400 audit(1785856486.638:138): avc: denied { relabelto } for pid=5598 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 67.668658][ T5596] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.750391][ T5612] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.752845][ T5615] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.759268][ T5612] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.774040][ T5615] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.774934][ T5612] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.792220][ T5620] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.792702][ T5618] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.807282][ T5612] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.817004][ T5618] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.826589][ T5618] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.832565][ T5620] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.841500][ T5620] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.850659][ T5618] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.852487][ T5620] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.866609][ T5620] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.899668][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.912352][ T5615] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.913471][ T5618] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.929012][ T5615] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.929271][ T5618] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 69.943644][ T5615] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.952139][ T5615] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 69.961332][ T5615] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.968639][ T5615] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 69.976515][ T5615] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.107726][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.114669][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.359782][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.367902][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.375500][ T5608] bridge_slave_0: entered allmulticast mode [ 71.383274][ T5608] bridge_slave_0: entered promiscuous mode [ 71.417786][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.425002][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.432102][ T5608] bridge_slave_1: entered allmulticast mode [ 71.439235][ T5608] bridge_slave_1: entered promiscuous mode [ 71.456171][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.463277][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.470578][ T5610] bridge_slave_0: entered allmulticast mode [ 71.477440][ T5610] bridge_slave_0: entered promiscuous mode [ 71.515276][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.522437][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.529860][ T5610] bridge_slave_1: entered allmulticast mode [ 71.536669][ T5610] bridge_slave_1: entered promiscuous mode [ 71.575888][ T5621] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.583019][ T5621] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.590475][ T5621] bridge_slave_0: entered allmulticast mode [ 71.597361][ T5621] bridge_slave_0: entered promiscuous mode [ 71.621438][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.639128][ T5621] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.646367][ T5621] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.653620][ T5621] bridge_slave_1: entered allmulticast mode [ 71.660615][ T5621] bridge_slave_1: entered promiscuous mode [ 71.674075][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.685411][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.719683][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.762339][ T5608] team0: Port device team_slave_0 added [ 71.774230][ T5621] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 71.800438][ T5608] team0: Port device team_slave_1 added [ 71.815546][ T5621] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 71.833288][ T5610] team0: Port device team_slave_0 added [ 71.860766][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.867953][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.875228][ T5609] bridge_slave_0: entered allmulticast mode [ 71.882054][ T5609] bridge_slave_0: entered promiscuous mode [ 71.890777][ T5610] team0: Port device team_slave_1 added [ 71.903573][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.911498][ T50] Bluetooth: hci1: command tx timeout [ 71.911501][ T5615] Bluetooth: hci2: command tx timeout [ 71.912319][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.917791][ T50] Bluetooth: hci0: command tx timeout [ 71.935344][ T5622] bridge_slave_0: entered allmulticast mode [ 71.936896][ T5622] bridge_slave_0: entered promiscuous mode [ 71.956468][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.963689][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.970865][ T5609] bridge_slave_1: entered allmulticast mode [ 71.977779][ T5609] bridge_slave_1: entered promiscuous mode [ 71.992606][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 71.999666][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.025724][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.037176][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.044312][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.051665][ T5622] bridge_slave_1: entered allmulticast mode [ 72.058670][ T5622] bridge_slave_1: entered promiscuous mode [ 72.065263][ T5615] Bluetooth: hci3: command tx timeout [ 72.071175][ T50] Bluetooth: hci4: command tx timeout [ 72.079546][ T5621] team0: Port device team_slave_0 added [ 72.104411][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.111448][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.137409][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.157795][ T5621] team0: Port device team_slave_1 added [ 72.170993][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.178036][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.204576][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.223975][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.245455][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.255175][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.262146][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.288202][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.307071][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.332347][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.359591][ T5609] team0: Port device team_slave_0 added [ 72.373360][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.380516][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.406618][ T5621] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.433661][ T5609] team0: Port device team_slave_1 added [ 72.441132][ T5622] team0: Port device team_slave_0 added [ 72.449238][ T5622] team0: Port device team_slave_1 added [ 72.455418][ T5621] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.462415][ T5621] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.488825][ T5621] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.513009][ T5608] hsr_slave_0: entered promiscuous mode [ 72.519657][ T5608] hsr_slave_1: entered promiscuous mode [ 72.571915][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.578969][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.604865][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.620810][ T5610] hsr_slave_0: entered promiscuous mode [ 72.627068][ T5610] hsr_slave_1: entered promiscuous mode [ 72.632997][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 72.638847][ T5610] Cannot create hsr debugfs directory [ 72.652435][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.659456][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.685387][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.703974][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.711139][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.737659][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.760402][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.767564][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 72.793669][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.840738][ T5621] hsr_slave_0: entered promiscuous mode [ 72.847008][ T5621] hsr_slave_1: entered promiscuous mode [ 72.853093][ T5621] debugfs: 'hsr0' already exists in 'hsr' [ 72.858939][ T5621] Cannot create hsr debugfs directory [ 72.932352][ T5622] hsr_slave_0: entered promiscuous mode [ 72.938550][ T5622] hsr_slave_1: entered promiscuous mode [ 72.944504][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 72.950223][ T5622] Cannot create hsr debugfs directory [ 73.017348][ T5609] hsr_slave_0: entered promiscuous mode [ 73.023443][ T5609] hsr_slave_1: entered promiscuous mode [ 73.030432][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 73.036504][ T5609] Cannot create hsr debugfs directory [ 73.371455][ T5608] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.382694][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.390566][ T5608] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.400640][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.421081][ T5608] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.429722][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.437623][ T5608] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.447542][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.513693][ T5622] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 73.522708][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.532407][ T5622] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 73.541914][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.549895][ T5622] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 73.559307][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.567167][ T5622] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 73.577281][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.667704][ T5610] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 73.676643][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.691056][ T5610] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 73.699503][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.707776][ T5610] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 73.717318][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.732912][ T5610] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 73.741947][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.793208][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.837096][ T5621] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 73.852193][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 73.863824][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.877023][ T5621] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 73.886414][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 73.894115][ T5621] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 73.903680][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 73.912672][ T5621] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 73.922208][ T5621] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 73.936455][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.943798][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.959898][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.967014][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.986217][ T50] Bluetooth: hci0: command tx timeout [ 73.994676][ T5615] Bluetooth: hci2: command tx timeout [ 74.000380][ T50] Bluetooth: hci1: command tx timeout [ 74.055120][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.101483][ T5609] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.111001][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.129500][ T5609] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.138809][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.155939][ T5615] Bluetooth: hci3: command tx timeout [ 74.161390][ T50] Bluetooth: hci4: command tx timeout [ 74.167020][ T5609] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.179434][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.189110][ T5609] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.198056][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.243449][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.277924][ T1175] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.285087][ T1175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.301395][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.343168][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.350359][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.407418][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.425487][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.432590][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.458509][ T5621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.479817][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.486959][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.531885][ T5621] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.577227][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.584340][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.606704][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.627166][ T1175] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.634327][ T1175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.713350][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 74.759378][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.766554][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.800763][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.807930][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.878973][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.107948][ T5608] veth0_vlan: entered promiscuous mode [ 75.151955][ T5608] veth1_vlan: entered promiscuous mode [ 75.228887][ T5608] veth0_macvtap: entered promiscuous mode [ 75.248066][ T5608] veth1_macvtap: entered promiscuous mode [ 75.301602][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 75.357119][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 75.454572][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.515988][ T141] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.533574][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.561460][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 75.700195][ T1175] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.720406][ T1175] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.729837][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.792528][ T5622] veth0_vlan: entered promiscuous mode [ 75.814796][ T1018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.837190][ T1018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.868229][ T5610] veth0_vlan: entered promiscuous mode [ 75.885837][ T5622] veth1_vlan: entered promiscuous mode [ 75.892596][ T30] kauditd_printk_skb: 13 callbacks suppressed [ 75.892610][ T30] audit: type=1400 audit(1785856495.818:152): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.J5XYp6/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 75.904586][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 75.958758][ T30] audit: type=1400 audit(1785856495.818:153): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 75.989469][ T30] audit: type=1400 audit(1785856495.818:154): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.J5XYp6/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 76.018882][ T5622] veth0_macvtap: entered promiscuous mode [ 76.020541][ T30] audit: type=1400 audit(1785856495.818:155): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 76.051836][ T5622] veth1_macvtap: entered promiscuous mode [ 76.053008][ T30] audit: type=1400 audit(1785856495.868:156): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.J5XYp6/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 76.085735][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.087457][ T30] audit: type=1400 audit(1785856495.868:157): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/root/syzkaller.J5XYp6/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7798 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 76.124318][ T5610] veth1_vlan: entered promiscuous mode [ 76.125255][ T50] Bluetooth: hci1: command tx timeout [ 76.131186][ T5620] Bluetooth: hci0: command tx timeout [ 76.136114][ T30] audit: type=1400 audit(1785856495.878:158): avc: denied { unmount } for pid=5608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 76.141879][ T5615] Bluetooth: hci2: command tx timeout [ 76.161109][ T30] audit: type=1400 audit(1785856495.878:159): avc: denied { mounton } for pid=5608 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2784 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 76.190987][ T30] audit: type=1400 audit(1785856495.888:160): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="gadgetfs" ino=7799 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 76.191351][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.214678][ T30] audit: type=1400 audit(1785856495.888:161): avc: denied { mount } for pid=5608 comm="syz-executor" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 76.243076][ T5615] Bluetooth: hci4: command tx timeout [ 76.252304][ T5615] Bluetooth: hci3: command tx timeout [ 76.264250][ T5621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.265471][ T5608] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.285719][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.364556][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.373530][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.412602][ T5795] jffs2: notice: (5795) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 76.470575][ T5610] veth0_macvtap: entered promiscuous mode [ 76.504958][ T5621] veth0_vlan: entered promiscuous mode [ 76.541355][ T5610] veth1_macvtap: entered promiscuous mode [ 76.593102][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.602902][ T5621] veth1_vlan: entered promiscuous mode [ 76.617955][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.626046][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.681375][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.717699][ T5802] null_blk: nullb1: using native zone append [ 76.760876][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.769768][ T1018] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.779419][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.789405][ T1018] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.800682][ T5802] null_blk: disk nullb1 created [ 76.845138][ T13] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.887944][ T5621] veth0_macvtap: entered promiscuous mode [ 76.906017][ T141] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.945617][ T5621] veth1_macvtap: entered promiscuous mode [ 77.039824][ T141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.041147][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.051309][ T141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.079225][ T5621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.096501][ T5609] veth0_vlan: entered promiscuous mode [ 77.137765][ T5609] veth1_vlan: entered promiscuous mode [ 77.147865][ T1175] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.157008][ T1175] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.175097][ T141] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.204537][ T141] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.241159][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.245624][ T1175] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.260232][ T5741] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 77.262484][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.268445][ T5712] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 77.274582][ T1175] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.372829][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.381375][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.388956][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.400312][ T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.414086][ T5609] veth0_macvtap: entered promiscuous mode [ 77.430002][ T5712] usb 1-1: not running at top speed; connect to a high speed hub [ 77.451313][ T5741] usb 2-1: New USB device found, idVendor=045e, idProduct=0775, bcdDevice= 1.00 [ 77.461064][ T5609] veth1_macvtap: entered promiscuous mode [ 77.475482][ T5712] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 77.496060][ T5741] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 77.500623][ T1175] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 for subsystem testnqn not allowed [ 77.514618][ T5712] usb 1-1: config 0 has no interface number 0 [ 77.527870][ T5741] usb 2-1: Product: syz [ 77.536733][ T5741] usb 2-1: Manufacturer: syz [ 77.537379][ T5813] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 [ 77.542925][ T5712] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 77.609552][ T5712] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.611339][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.633086][ T5741] input: Samsung SUR40 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/input/input5 [ 77.661823][ T5712] usb 1-1: config 0 descriptor?? [ 77.668433][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.828514][ T1018] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.855323][ T5712] viperboard 1-1:0.143: version 0.00 found at bus 001 address 002 [ 77.865613][ T10] i801_smbus 0000:00:00.0: SMBus base address uninitialized, upgrade BIOS [ 77.874308][ T141] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.912790][ T10] i801_smbus 0000:00:01.0: SMBus base address uninitialized, upgrade BIOS [ 77.964559][ T1111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.030425][ T10] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 78.040826][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.056774][ T10] i801_smbus 0000:00:01.3: PCI INT A: no GSI [ 78.073971][ T10] i801_smbus 0000:00:01.3: SMBus base address uninitialized, upgrade BIOS [ 78.087892][ T5711] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 78.093759][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.103370][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.112358][ T5711] i801_smbus 0000:00:05.0: SMBus base address uninitialized, upgrade BIOS [ 78.135967][ T5712] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 78.144756][ T5620] Bluetooth: hci1: command tx timeout [ 78.146791][ T5615] Bluetooth: hci0: command tx timeout [ 78.164006][ T5712] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 78.216893][ T141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.227357][ T141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.236446][ T5615] Bluetooth: hci2: command tx timeout [ 78.314940][ T5615] Bluetooth: hci3: command tx timeout [ 78.315531][ T5620] Bluetooth: hci4: command tx timeout [ 78.366263][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.386508][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.396328][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.414113][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.432777][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.449400][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.478642][ T5712] hid-generic 0003:1234:5678.0001: unknown main item tag 0x0 [ 78.492920][ T5712] hid-generic 0003:1234:5678.0001: unbalanced collection at end of report description [ 78.508985][ T5712] hid-generic 0003:1234:5678.0001: probe with driver hid-generic failed with error -22 [ 78.585699][ T5837] loop0: detected capacity change from 0 to 128 [ 78.825160][ T5741] usb 2-1: USB disconnect, device number 2 [ 78.915125][ T994] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 78.934473][ T5781] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 78.988434][ T24] usb 1-1: USB disconnect, device number 2 [ 79.076763][ T994] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 79.086108][ T994] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 79.118246][ T5781] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice= 1.01 [ 79.127528][ T5781] usb 3-1: New USB device strings: Mfr=2, Product=3, SerialNumber=1 [ 79.136118][ T5781] usb 3-1: Product: syz [ 79.140564][ T5781] usb 3-1: Manufacturer: syz [ 79.145840][ T5781] usb 3-1: SerialNumber: syz [ 79.158559][ T5781] pvrusb2: Hardware description: Terratec Grabster AV400 [ 79.165742][ T5781] pvrusb2: ********** [ 79.169734][ T5781] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 79.180472][ T5781] pvrusb2: Important functionality might not be entirely working. [ 79.190956][ T5781] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 79.204069][ T5781] pvrusb2: ********** [ 79.449962][ T5852] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 79.497774][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 79.594722][ T5856] PM: suspend entry (s2idle) [ 79.666806][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 79.676578][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.107571][ T24] wacom 0003:056A:00B1.0002: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 80.124199][ T24] wacom 0003:056A:00B1.0002: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.4-1/input0 [ 80.137938][ T141] Filesystems sync: 0.535 seconds [ 80.139979][ T24] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/0003:056A:00B1.0002/input/input8 [ 80.409324][ T5856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 80.416395][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.433348][ T5856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 80.441371][ T5856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 80.447529][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.456171][ T5856] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 80.468328][ T5856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 80.474668][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.482552][ T5856] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 80.492826][ T5856] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 80.499262][ T5856] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.506490][ T5856] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 80.515523][ T5856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 80.523248][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 80.532501][ T5856] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 81.214576][ T24] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 81.310093][ T5845] usb 5-1: USB disconnect, device number 2 [ 81.366293][ T24] usb 2-1: not running at top speed; connect to a high speed hub [ 81.389399][ T24] usb 2-1: New USB device found, idVendor=041e, idProduct=401c, bcdDevice= 1.00 [ 81.404668][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.412716][ T24] usb 2-1: Product: syz [ 81.425343][ T24] usb 2-1: Manufacturer: syz [ 81.431580][ T24] usb 2-1: SerialNumber: syz [ 81.454285][ T24] gspca_main: gspca_zc3xx-2.14.0 probing 041e:401c [ 81.685076][ T994] usbhid 4-1:1.0: can't add hid device: -71 [ 81.705624][ T994] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 81.734278][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 81.734293][ T30] audit: type=1400 audit(1785856501.658:229): avc: denied { mount } for pid=5866 comm="syz.3.22" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 81.776551][ T994] usb 4-1: USB disconnect, device number 2 [ 81.783319][ T30] audit: type=1400 audit(1785856501.658:230): avc: denied { search } for pid=5866 comm="syz.3.22" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 81.805411][ T30] audit: type=1400 audit(1785856501.658:231): avc: denied { read write } for pid=5866 comm="syz.3.22" name="versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 81.841957][ T2366] pvrusb2: Failed to submit write-control URB status=-2 [ 81.868931][ T2366] pvrusb2: Device being rendered inoperable [ 81.880525][ T2366] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 81.896109][ T2366] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 81.909725][ T30] audit: type=1400 audit(1785856501.658:232): avc: denied { open } for pid=5866 comm="syz.3.22" path="/2/nfsd/versions" dev="nfsd" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=file permissive=1 [ 81.961569][ T5781] usb 3-1: USB disconnect, device number 2 [ 81.962059][ T5873] loop0: detected capacity change from 0 to 20480 [ 81.980957][ T5873] loop1: detected capacity change from 0 to 20480 [ 81.982741][ T30] audit: type=1400 audit(1785856501.678:233): avc: denied { search } for pid=5866 comm="syz.3.22" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=dir permissive=1 [ 82.042454][ T5873] loop2: detected capacity change from 0 to 20480 [ 82.231280][ T5620] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.258654][ T5699] logitech-hidpp-device 0005:046D:B012.0003: unbalanced collection at end of report description [ 82.271513][ T5699] logitech-hidpp-device 0005:046D:B012.0003: hidpp_probe:parse failed [ 82.280233][ T5699] logitech-hidpp-device 0005:046D:B012.0003: probe with driver logitech-hidpp-device failed with error -22 [ 82.394480][ T5781] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 82.464931][ T5620] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.544815][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 82.545881][ T50] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.550989][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 82.565595][ T5781] usb 3-1: not running at top speed; connect to a high speed hub [ 82.575620][ T5781] usb 3-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice= 1.00 [ 82.584824][ T5781] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 82.603419][ T5781] gspca_main: vc032x-2.14.0 probing 046d:0892 [ 83.085147][ T5868] NFSD: Unable to initialize client recovery tracking! (-110) [ 83.092998][ T5868] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 83.103344][ T5868] NFSD: starting 90-second grace period (net f000055f) [ 83.131787][ T30] audit: type=1400 audit(1785856503.058:234): avc: denied { read } for pid=5881 comm="syz.4.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.175344][ T30] audit: type=1400 audit(1785856503.058:235): avc: denied { open } for pid=5881 comm="syz.4.27" path="/dev/kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.199393][ T30] audit: type=1400 audit(1785856503.058:236): avc: denied { ioctl } for pid=5881 comm="syz.4.27" path="/dev/kvm" dev="devtmpfs" ino=84 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.259582][ T30] audit: type=1400 audit(1785856503.188:237): avc: denied { write } for pid=5881 comm="syz.4.27" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 83.429726][ T30] audit: type=1400 audit(1785856503.358:238): avc: denied { unmount } for pid=5621 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 84.117246][ T994] input: syz0 as /devices/virtual/misc/uhid/0003:17EF:6009.0004/input/input13 [ 84.147581][ T994] lenovo 0003:17EF:6009.0004: input,hidraw0: USB HID v0.00 Mouse [syz0] on syz0 [ 84.166167][ T5631] udevd[5631]: Error opening device "/dev/input/event4": No such device [ 84.181666][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90010, key code 190): Inappropriate ioctl for device [ 84.197572][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90011, key code 148): Inappropriate ioctl for device [ 84.228493][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90012, key code 152): Inappropriate ioctl for device [ 84.247035][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90013, key code 236): Inappropriate ioctl for device [ 84.262290][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90014, key code 238): Inappropriate ioctl for device [ 84.294259][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90015, key code 212): Inappropriate ioctl for device [ 84.305393][ T50] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.322256][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90016, key code 227): Inappropriate ioctl for device [ 84.326024][ T5895] fido_id[5895]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 84.354312][ T5741] libceph: mon0 (1)127.0.0.1:8080 socket closed (con state V1_BANNER) [ 84.367941][ T5888] ceph: No mds server is up or the cluster is laggy [ 84.374210][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90017, key code 191): Inappropriate ioctl for device [ 84.392302][ T5631] udevd[5631]: Error calling EVIOCSKEYCODE on device node '/dev/input/event4' (scan code 0x90019, key code 205): Inappropriate ioctl for device [ 84.546144][ T50] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.624509][ T50] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.625610][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.630747][ T5620] Bluetooth: hci4: command 0x0c1a tx timeout [ 84.688156][ T24] gspca_zc3xx: reg_r err -71 [ 84.784550][ T5741] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 84.945989][ T5741] usb 4-1: New USB device found, idVendor=23ba, idProduct=0100, bcdDevice= 0.00 [ 84.955221][ T5741] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 85.276018][ T5907] overlayfs: failed to decode file handle (len=16, type=0, flags=0, err=-22) [ 85.284915][ T24] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 85.291256][ T24] gspca_zc3xx 2-1:1.0: probe with driver gspca_zc3xx failed with error -71 [ 85.302726][ T24] usb 2-1: USB disconnect, device number 3 [ 85.483165][ T5712] usb 3-1: USB disconnect, device number 3 [ 85.564506][ T5898] NFSD: Unable to initialize client recovery tracking! (-110) [ 85.572957][ T5898] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 85.582842][ T5898] NFSD: starting 90-second grace period (net f00004c8) [ 85.684565][ T24] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 85.834562][ T5712] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 85.851769][ T5699] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 85.932215][ T5915] fido_id[5915]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 86.007826][ T5712] usb 3-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 86.017434][ T5712] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 86.025660][ T5712] usb 3-1: Product: syz [ 86.029866][ T5712] usb 3-1: Manufacturer: syz [ 86.034574][ T5712] usb 3-1: SerialNumber: syz [ 86.052208][ T5712] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 86.150561][ T5917] UBIFS error (pid: 5917): cannot open "ubi0_0", error -19 [ 86.385084][ T5615] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.425057][ T5741] usb 4-1: USB disconnect, device number 3 [ 86.503487][ T29] cfg80211: failed to load regulatory.db [ 86.526353][ T5856] Freezing user space processes [ 86.541848][ T5856] Freezing user space processes completed (elapsed 0.010 seconds) [ 86.550960][ T5856] OOM killer disabled. [ 86.555116][ T5856] Freezing remaining freezable tasks [ 86.624430][ T5615] Bluetooth: hci1: command 0x0c1a tx timeout [ 86.704515][ T5615] Bluetooth: hci4: command 0x0c1a tx timeout [ 86.704520][ T5620] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.714477][ T5615] Bluetooth: hci2: command 0x0c1a tx timeout [ 87.045341][ T5712] gspca_mr97310a: reg write [19] error -110 [ 87.051335][ T5712] mr97310a 3-1:1.0: probe with driver mr97310a failed with error -110 [ 90.886330][ T24] usb 2-1: unable to read config index 0 descriptor/start: -32 [ 90.893898][ T24] usb 2-1: chopping to 0 config(s) [ 90.899112][ T24] usb 2-1: can't read configurations, error -32 [ 91.045733][ T24] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 91.184545][ T24] usb 2-1: device descriptor read/64, error -32 [ 91.296026][ T24] usb usb2-port1: attempt power cycle [ 91.634497][ T24] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 91.654651][ T24] usb 2-1: device descriptor read/8, error -32 [ 91.894662][ T24] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 91.914674][ T24] usb 2-1: device descriptor read/8, error -32 [ 92.024591][ T24] usb usb2-port1: unable to enumerate USB device [ 92.034674][ T5856] Freezing remaining freezable tasks completed (elapsed 5.474 seconds) [ 92.043051][ T5856] printk: Suspending console(s) (use no_console_suspend to debug) [ 92.201542][ T5856] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 92.201595][ T5856] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 92.201637][ T5856] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 92.201679][ T5856] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 92.201723][ T5856] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 92.201765][ T5856] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 92.201814][ T5856] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 92.201867][ T5856] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 92.201909][ T5856] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 92.201950][ T5856] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 92.201991][ T5856] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 92.202037][ T5856] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 92.202080][ T5856] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 92.202122][ T5856] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 92.202164][ T5856] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 92.240935][ T1175] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 92.460513][ T5856] PM: suspend debug: Waiting for 5 second(s). [ 97.699166][ T178] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 97.741582][ T1175] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 97.741628][ T1175] pci 0000:00:01.3: PCI INT A: no GSI [ 98.036187][ T1111] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 103.254506][ T1111] usb 3-1: device descriptor read/64, error -110 [ 103.494551][ T1111] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 103.624525][ T1111] usb 3-1: device descriptor read/64, error -32 [ 103.864510][ T1111] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 103.884683][ T1111] usb 3-1: device descriptor read/8, error -32 [ 104.065754][ T1111] raw-gadget.0 gadget.2: failed to queue resume event [ 104.124550][ T1111] usb 3-1: reset high-speed USB device number 4 using dummy_hcd [ 104.144661][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 104.144792][ T1111] usb 3-1: device descriptor read/8, error -32 [ 104.254581][ T1111] raw-gadget.0 gadget.2: failed to queue suspend event [ 104.296387][ T5856] OOM killer enabled. [ 104.296945][ T5856] Restarting tasks: Starting [ 104.344629][ T5781] usb 3-1: USB disconnect, device number 4 [ 104.353600][ T5856] Restarting tasks: Done [ 104.365831][ T5856] random: crng reseeded on system resumption [ 104.367412][ T5856] PM: suspend exit [ 104.427886][ T5781] raw-gadget.0 gadget.2: failed to queue reset event [ 104.436236][ T5920] raw-gadget.0 gadget.2: failed to queue disconnect event [ 104.472337][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 104.472354][ T30] audit: type=1800 audit(1785856524.388:244): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.39" name="addr_trtype" dev="configfs" ino=9695 res=0 errno=0 [ 104.480680][ T5986] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 104.511227][ T30] audit: type=1800 audit(1785856524.438:245): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.4.39" name="attr_qid_max" dev="configfs" ino=9701 res=0 errno=0 [ 104.794460][ T5937] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 for subsystem testnqn not allowed [ 104.809066][ T5988] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 [ 104.908377][ T30] audit: type=1400 audit(1785856524.838:246): avc: denied { create } for pid=5993 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.912596][ T30] audit: type=1400 audit(1785856524.838:247): avc: denied { read write } for pid=5993 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.944475][ T30] audit: type=1400 audit(1785856524.838:248): avc: denied { open } for pid=5993 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 104.966212][ T30] audit: type=1400 audit(1785856524.898:249): avc: denied { ioctl } for pid=5993 comm="syz-executor" path="socket:[9726]" dev="sockfs" ino=9726 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 104.967447][ T5620] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 104.978385][ T5620] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 104.981227][ T5620] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 104.994473][ T5620] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 104.997483][ T5620] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 105.063381][ T5620] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 105.081013][ T5620] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 105.085414][ T5620] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 105.088693][ T5620] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 105.092424][ T5620] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 105.150041][ T5620] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 105.153689][ T5620] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 105.157854][ T5620] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 105.162387][ T5620] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 105.164337][ T5620] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 105.230831][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 105.236939][ T5615] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 105.239956][ T5615] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 105.245561][ T5615] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 105.247696][ T5615] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 105.275443][ T5615] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 105.280363][ T5615] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 105.283690][ T5615] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 105.290640][ T5615] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 105.294693][ T5615] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 106.115971][ T5932] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.271494][ T5932] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.386447][ T5932] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.454660][ T5932] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.765061][ T30] audit: type=1400 audit(1785856526.698:250): avc: denied { search } for pid=5274 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.771551][ T30] audit: type=1400 audit(1785856526.698:251): avc: denied { search } for pid=5274 comm="dhcpcd" name="udev" dev="tmpfs" ino=9 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.777125][ T30] audit: type=1400 audit(1785856526.698:252): avc: denied { search } for pid=5274 comm="dhcpcd" name="data" dev="tmpfs" ino=14 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 106.786724][ T30] audit: type=1400 audit(1785856526.698:253): avc: denied { read } for pid=5274 comm="dhcpcd" name="n30" dev="tmpfs" ino=2152 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 106.920890][ T5932] bridge_slave_1: left allmulticast mode [ 106.922248][ T5932] bridge_slave_1: left promiscuous mode [ 106.924917][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.938858][ T5932] bridge_slave_0: left allmulticast mode [ 106.939655][ T5932] bridge_slave_0: left promiscuous mode [ 106.940499][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.024687][ T5615] Bluetooth: hci5: command tx timeout [ 107.056696][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.059508][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.061510][ T5932] bond0 (unregistering): Released all slaves [ 107.107160][ T5615] Bluetooth: hci6: command tx timeout [ 107.184845][ T5615] Bluetooth: hci7: command tx timeout [ 107.265055][ T5615] Bluetooth: hci8: command tx timeout [ 107.355240][ T5615] Bluetooth: hci9: command tx timeout [ 107.531099][ T5998] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.533567][ T5998] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.540795][ T5998] bridge_slave_0: entered allmulticast mode [ 107.543278][ T5998] bridge_slave_0: entered promiscuous mode [ 107.612808][ T5998] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.613945][ T5998] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.618627][ T5998] bridge_slave_1: entered allmulticast mode [ 107.621653][ T5998] bridge_slave_1: entered promiscuous mode [ 107.685748][ T5274] 8021q: adding VLAN 0 to HW filter on device eth1 [ 107.737299][ T5998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.741869][ T5932] hsr_slave_0: left promiscuous mode [ 107.743062][ T5932] hsr_slave_1: left promiscuous mode [ 107.744152][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.745970][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.747577][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.748590][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.754042][ T5932] veth1_macvtap: left promiscuous mode [ 107.756606][ T5932] veth0_macvtap: left promiscuous mode [ 107.757432][ T5932] veth1_vlan: left promiscuous mode [ 107.758184][ T5932] veth0_vlan: left promiscuous mode [ 107.897892][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 107.905971][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 107.999804][ T5993] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.000923][ T5993] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.001951][ T5993] bridge_slave_0: entered allmulticast mode [ 108.003598][ T5993] bridge_slave_0: entered promiscuous mode [ 108.010945][ T5998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.023427][ T5995] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.027064][ T5995] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.028138][ T5995] bridge_slave_0: entered allmulticast mode [ 108.030375][ T5995] bridge_slave_0: entered promiscuous mode [ 108.033318][ T5995] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.034434][ T5995] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.035479][ T5995] bridge_slave_1: entered allmulticast mode [ 108.038446][ T5995] bridge_slave_1: entered promiscuous mode [ 108.051302][ T5993] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.052385][ T5993] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.053630][ T5993] bridge_slave_1: entered allmulticast mode [ 108.056045][ T5993] bridge_slave_1: entered promiscuous mode [ 108.125129][ T6001] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.126264][ T6001] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.127371][ T6001] bridge_slave_0: entered allmulticast mode [ 108.129998][ T6001] bridge_slave_0: entered promiscuous mode [ 108.133030][ T6001] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.134071][ T6001] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.135194][ T6001] bridge_slave_1: entered allmulticast mode [ 108.137407][ T6001] bridge_slave_1: entered promiscuous mode [ 108.140365][ T5998] team0: Port device team_slave_0 added [ 108.151433][ T5995] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.155307][ T5993] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.159291][ T5993] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.172252][ T5998] team0: Port device team_slave_1 added [ 108.175561][ T6004] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.176608][ T6004] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.177623][ T6004] bridge_slave_0: entered allmulticast mode [ 108.179295][ T6004] bridge_slave_0: entered promiscuous mode [ 108.182922][ T5995] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.232454][ T6004] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.233530][ T6004] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.235203][ T6004] bridge_slave_1: entered allmulticast mode [ 108.237746][ T6004] bridge_slave_1: entered promiscuous mode [ 108.260078][ T6001] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.262011][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.263022][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.266638][ T5998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.269958][ T5998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.270923][ T5998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.274313][ T5998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.300275][ T5995] team0: Port device team_slave_0 added [ 108.304186][ T5993] team0: Port device team_slave_0 added [ 108.308965][ T5993] team0: Port device team_slave_1 added [ 108.312202][ T6001] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.344112][ T6004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.348684][ T6004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.351892][ T5995] team0: Port device team_slave_1 added [ 108.428238][ T6001] team0: Port device team_slave_0 added [ 108.465125][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.466137][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.469849][ T5993] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.474133][ T6001] team0: Port device team_slave_1 added [ 108.502492][ T6004] team0: Port device team_slave_0 added [ 108.503980][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.505862][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.509296][ T5995] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.511695][ T5993] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.513378][ T5993] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.517442][ T5993] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.537240][ T5998] hsr_slave_0: entered promiscuous mode [ 108.538875][ T5998] hsr_slave_1: entered promiscuous mode [ 108.540252][ T5998] debugfs: 'hsr0' already exists in 'hsr' [ 108.541046][ T5998] Cannot create hsr debugfs directory [ 108.544164][ T6004] team0: Port device team_slave_1 added [ 108.546524][ T5995] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.547663][ T5995] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.551060][ T5995] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.560498][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.561942][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.565689][ T6001] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.590113][ T6001] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.591790][ T6001] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.596457][ T6001] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.662230][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.663762][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.667489][ T6004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.670590][ T6004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.671553][ T6004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.675469][ T6004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 108.748743][ T5932] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.777650][ T5993] hsr_slave_0: entered promiscuous mode [ 108.779324][ T5993] hsr_slave_1: entered promiscuous mode [ 108.780855][ T5993] debugfs: 'hsr0' already exists in 'hsr' [ 108.781665][ T5993] Cannot create hsr debugfs directory [ 108.801687][ T6001] hsr_slave_0: entered promiscuous mode [ 108.803383][ T6001] hsr_slave_1: entered promiscuous mode [ 108.808736][ T6001] debugfs: 'hsr0' already exists in 'hsr' [ 108.809582][ T6001] Cannot create hsr debugfs directory [ 108.837806][ T5995] hsr_slave_0: entered promiscuous mode [ 108.839132][ T5995] hsr_slave_1: entered promiscuous mode [ 108.840251][ T5995] debugfs: 'hsr0' already exists in 'hsr' [ 108.841040][ T5995] Cannot create hsr debugfs directory [ 108.845450][ T5274] 8021q: adding VLAN 0 to HW filter on device eth2 [ 108.896384][ T5932] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.960195][ T6004] hsr_slave_0: entered promiscuous mode [ 108.961535][ T6004] hsr_slave_1: entered promiscuous mode [ 108.962672][ T6004] debugfs: 'hsr0' already exists in 'hsr' [ 108.963450][ T6004] Cannot create hsr debugfs directory [ 109.018508][ T5932] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.104653][ T5615] Bluetooth: hci5: command tx timeout [ 109.133545][ T5932] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.184729][ T5615] Bluetooth: hci6: command tx timeout [ 109.267393][ T5615] Bluetooth: hci7: command tx timeout [ 109.344940][ T5615] Bluetooth: hci8: command tx timeout [ 109.424484][ T5615] Bluetooth: hci9: command tx timeout [ 109.488291][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 109.488315][ T30] audit: type=1400 audit(1785856529.418:269): avc: denied { write } for pid=6110 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.580839][ T30] audit: type=1400 audit(1785856529.508:270): avc: denied { write } for pid=6121 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 109.583564][ T5998] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 109.600677][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.604157][ T5998] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 109.613756][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.639608][ T5998] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 109.650111][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.652218][ T5274] 8021q: adding VLAN 0 to HW filter on device eth3 [ 109.682511][ T5998] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 109.689259][ T5998] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.715528][ T5932] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.751835][ T5995] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 109.757926][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.761449][ T5995] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 109.768203][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 109.773019][ T5995] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 109.781567][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 109.783335][ T5995] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 109.790061][ T5995] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 109.816096][ T5932] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.926704][ T5932] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.961865][ T5993] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 109.971767][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 109.987839][ T5993] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 109.996953][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.016096][ T5932] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.030611][ T5993] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 110.036135][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.037855][ T5993] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 110.042172][ T5993] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.122379][ T30] audit: type=1400 audit(1785856530.048:271): avc: denied { write } for pid=6133 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.220095][ T30] audit: type=1400 audit(1785856530.148:272): avc: denied { write } for pid=6154 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.301611][ T5998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.306090][ T6001] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 110.309394][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.312114][ T5274] 8021q: adding VLAN 0 to HW filter on device eth4 [ 110.331693][ T6001] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 110.342553][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.344306][ T6001] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 110.348598][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.354229][ T6001] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 110.359251][ T6001] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.436570][ T5998] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.490563][ T5926] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.491654][ T5926] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.509663][ T5932] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.518791][ T5995] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.526105][ T6004] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 110.529238][ T6004] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 110.530836][ T6004] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 110.534697][ T6004] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 110.547527][ T6004] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 110.553728][ T6004] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 110.557530][ T6004] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 110.561686][ T6004] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 110.568347][ T5961] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.569425][ T5961] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.616128][ T5995] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.652515][ T5932] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.722117][ T5961] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.723217][ T5961] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.738884][ T5993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 110.764252][ T5932] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.793504][ T5926] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.794624][ T5926] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.842100][ T30] audit: type=1400 audit(1785856530.768:273): avc: denied { write } for pid=6169 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.867626][ T5932] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.903217][ T5993] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.935913][ T30] audit: type=1400 audit(1785856530.858:274): avc: denied { write } for pid=6182 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 110.957444][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.958543][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.013344][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5 [ 111.019901][ T5963] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.020993][ T5963] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.187734][ T5615] Bluetooth: hci5: command tx timeout [ 111.262701][ T6001] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.264637][ T5615] Bluetooth: hci6: command tx timeout [ 111.336263][ T6004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.345521][ T5615] Bluetooth: hci7: command tx timeout [ 111.405008][ T5932] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.425464][ T5615] Bluetooth: hci8: command tx timeout [ 111.490074][ T6001] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.505313][ T5615] Bluetooth: hci9: command tx timeout [ 111.562125][ T5932] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.619570][ T6004] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.622884][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.623948][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.659616][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.660727][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.668416][ T1111] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.669478][ T1111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.741937][ T5932] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.777567][ T1111] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.778740][ T1111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 111.849976][ T5998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 111.887521][ T5932] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.033037][ T30] audit: type=1400 audit(1785856531.958:275): avc: denied { write } for pid=6198 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.048204][ T5995] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.303924][ T30] audit: type=1400 audit(1785856532.218:276): avc: denied { write } for pid=6230 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 112.390641][ T5932] bridge_slave_1: left allmulticast mode [ 112.391493][ T5932] bridge_slave_1: left promiscuous mode [ 112.392849][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.398627][ T5932] bridge_slave_0: left allmulticast mode [ 112.399444][ T5932] bridge_slave_0: left promiscuous mode [ 112.400373][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.415914][ T5932] bridge_slave_1: left allmulticast mode [ 112.416741][ T5932] bridge_slave_1: left promiscuous mode [ 112.417666][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.421153][ T5932] bridge_slave_0: left allmulticast mode [ 112.421928][ T5932] bridge_slave_0: left promiscuous mode [ 112.422770][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.431724][ T5932] bridge_slave_1: left allmulticast mode [ 112.432504][ T5932] bridge_slave_1: left promiscuous mode [ 112.433347][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.439830][ T5932] bridge_slave_0: left allmulticast mode [ 112.440658][ T5932] bridge_slave_0: left promiscuous mode [ 112.441587][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.456019][ T5932] bridge_slave_1: left allmulticast mode [ 112.456817][ T5932] bridge_slave_1: left promiscuous mode [ 112.457773][ T5932] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.460079][ T5932] bridge_slave_0: left allmulticast mode [ 112.460875][ T5932] bridge_slave_0: left promiscuous mode [ 112.461706][ T5932] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.611056][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.613647][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.626129][ T5932] bond0 (unregistering): Released all slaves [ 112.696768][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.699316][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.701324][ T5932] bond0 (unregistering): Released all slaves [ 112.771555][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.781533][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.793657][ T5932] bond0 (unregistering): Released all slaves [ 112.871508][ T5932] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.882560][ T5932] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.892122][ T5932] bond0 (unregistering): Released all slaves [ 112.921444][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6 [ 113.200122][ T5993] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.268697][ T5615] Bluetooth: hci5: command tx timeout [ 113.349432][ T5615] Bluetooth: hci6: command tx timeout [ 113.425348][ T5615] Bluetooth: hci7: command tx timeout [ 113.509142][ T5615] Bluetooth: hci8: command tx timeout [ 113.584504][ T5615] Bluetooth: hci9: command tx timeout [ 113.701594][ T5998] veth0_vlan: entered promiscuous mode [ 113.801760][ T6001] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 113.853396][ T5998] veth1_vlan: entered promiscuous mode [ 113.994026][ T5995] veth0_vlan: entered promiscuous mode [ 114.041806][ T6004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.126562][ T5995] veth1_vlan: entered promiscuous mode [ 114.132095][ T30] audit: type=1400 audit(1785856534.058:277): avc: denied { write } for pid=6260 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.250899][ T5998] veth0_macvtap: entered promiscuous mode [ 114.292072][ T30] audit: type=1400 audit(1785856534.218:278): avc: denied { write } for pid=6289 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 114.354327][ T5998] veth1_macvtap: entered promiscuous mode [ 114.391759][ T5993] veth0_vlan: entered promiscuous mode [ 114.431676][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7 [ 114.461504][ T5995] veth0_macvtap: entered promiscuous mode [ 114.499711][ T5995] veth1_macvtap: entered promiscuous mode [ 114.513565][ T5993] veth1_vlan: entered promiscuous mode [ 114.524280][ T5932] hsr_slave_0: left promiscuous mode [ 114.530108][ T5932] hsr_slave_1: left promiscuous mode [ 114.536866][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.544260][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.553582][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.561510][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.571407][ T5932] hsr_slave_0: left promiscuous mode [ 114.577197][ T5932] hsr_slave_1: left promiscuous mode [ 114.583021][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.590506][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.598168][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.605697][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.617635][ T5932] hsr_slave_0: left promiscuous mode [ 114.623310][ T5932] hsr_slave_1: left promiscuous mode [ 114.629867][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.640082][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.648108][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.655632][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.665718][ T5932] hsr_slave_0: left promiscuous mode [ 114.671388][ T5932] hsr_slave_1: left promiscuous mode [ 114.677227][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.684610][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 114.692151][ T5932] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 114.699582][ T5932] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.723161][ T5932] veth1_macvtap: left promiscuous mode [ 114.728958][ T5932] veth0_macvtap: left promiscuous mode [ 114.734570][ T5932] veth1_vlan: left promiscuous mode [ 114.739921][ T5932] veth0_vlan: left promiscuous mode [ 114.746026][ T5932] veth1_macvtap: left promiscuous mode [ 114.751485][ T5932] veth0_macvtap: left promiscuous mode [ 114.757124][ T5932] veth1_vlan: left promiscuous mode [ 114.762354][ T5932] veth0_vlan: left promiscuous mode [ 114.769793][ T5932] veth1_macvtap: left promiscuous mode [ 114.775470][ T5932] veth0_macvtap: left promiscuous mode [ 114.780999][ T5932] veth1_vlan: left promiscuous mode [ 114.787485][ T5932] veth0_vlan: left promiscuous mode [ 114.793497][ T5932] veth1_macvtap: left promiscuous mode [ 114.799013][ T5932] veth0_macvtap: left promiscuous mode [ 114.804811][ T5932] veth1_vlan: left promiscuous mode [ 114.810012][ T5932] veth0_vlan: left promiscuous mode [ 115.097556][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 115.117110][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 115.283656][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 115.307107][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 115.473246][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 115.489891][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 115.669556][ T5932] team0 (unregistering): Port device team_slave_1 removed [ 115.690739][ T5932] team0 (unregistering): Port device team_slave_0 removed [ 115.787352][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.812366][ T5998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.851477][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.928479][ T5995] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.978356][ T5926] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.018171][ T5926] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.076123][ T6001] veth0_vlan: entered promiscuous mode [ 116.090200][ T6004] veth0_vlan: entered promiscuous mode [ 116.117020][ T5993] veth0_macvtap: entered promiscuous mode [ 116.155772][ T5993] veth1_macvtap: entered promiscuous mode [ 116.211303][ T6001] veth1_vlan: entered promiscuous mode [ 116.231951][ T6004] veth1_vlan: entered promiscuous mode [ 116.266116][ T30] audit: type=1400 audit(1785856536.188:279): avc: denied { write } for pid=6297 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.330721][ T5939] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.367469][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.378456][ T5926] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.386470][ T5993] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.408895][ T5926] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.436354][ T5963] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.455256][ T30] audit: type=1400 audit(1785856536.388:280): avc: denied { write } for pid=6308 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 116.503041][ T5929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.517746][ T5929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.597270][ T5926] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.615454][ T6004] veth0_macvtap: entered promiscuous mode [ 116.633184][ T5274] 8021q: adding VLAN 0 to HW filter on device eth8 [ 116.644760][ T6001] veth0_macvtap: entered promiscuous mode [ 116.659068][ T5926] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.666960][ T5939] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.667260][ T5939] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.686424][ T5929] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.689559][ T5926] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.704553][ T5929] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.717909][ T6004] veth1_macvtap: entered promiscuous mode [ 116.740132][ T5964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.752713][ T6001] veth1_macvtap: entered promiscuous mode [ 116.769832][ T5964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.800232][ T5963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.809137][ T5961] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.812192][ T30] audit: type=1400 audit(1785856536.748:281): avc: denied { mount } for pid=5998 comm="syz-executor" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 116.828120][ T5963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.863658][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.895592][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.968052][ T6001] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.017463][ T6004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.040070][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.045898][ T5939] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.064320][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.126721][ T5926] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.175087][ T5939] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.211349][ T5939] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.384533][ T5939] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.417524][ T5939] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.441209][ T5699] logitech-hidpp-device 0005:046D:B012.0006: item fetching failed at offset 38/39 [ 117.469590][ T5699] logitech-hidpp-device 0005:046D:B012.0006: hidpp_probe:parse failed [ 117.508718][ T5699] logitech-hidpp-device 0005:046D:B012.0006: probe with driver logitech-hidpp-device failed with error -22 [ 117.532454][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.547260][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.562418][ T30] audit: type=1800 audit(1785856537.488:282): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.46" name="addr_trtype" dev="configfs" ino=12894 res=0 errno=0 [ 117.587312][ T5939] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.594435][ T6330] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 117.609798][ T30] audit: type=1800 audit(1785856537.538:283): pid=6330 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.46" name="attr_qid_max" dev="configfs" ino=14173 res=0 errno=0 [ 117.676557][ T5939] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.705374][ T5939] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.771120][ T30] audit: type=1400 audit(1785856537.698:284): avc: denied { write } for pid=6314 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 117.810871][ T5929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.819756][ T5939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.829417][ T5963] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.840955][ T5929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.850985][ T5939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.874516][ T5964] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.935684][ T5932] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.960327][ T30] audit: type=1400 audit(1785856537.888:285): avc: denied { write } for pid=6339 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 118.062700][ T5274] 8021q: adding VLAN 0 to HW filter on device eth9 [ 118.120859][ T6338] UBIFS error (pid: 6338): cannot open "ubi0_0", error -19 [ 118.287530][ T6313] NFSD: Unable to initialize client recovery tracking! (-110) [ 118.321547][ T30] audit: type=1800 audit(1785856538.248:286): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.48" name="addr_trtype" dev="configfs" ino=14353 res=0 errno=0 [ 118.326662][ T5712] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 118.349441][ T6313] NFSD: Is nfsdcld running? If not, enable CONFIG_NFSD_LEGACY_CLIENT_TRACKING. [ 118.351597][ T6350] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.404446][ T6313] NFSD: starting 90-second grace period (net f000083e) [ 118.427221][ T6354] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.436598][ T30] audit: type=1800 audit(1785856538.358:287): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.6.48" name="attr_qid_max" dev="configfs" ino=14358 res=0 errno=0 [ 118.480214][ T30] audit: type=1800 audit(1785856538.388:288): pid=6354 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.5.49" name="attr_qid_max" dev="configfs" ino=13056 res=0 errno=0 [ 118.586847][ T5712] usb 10-1: New USB device found, idVendor=056a, idProduct=00b1, bcdDevice= 0.00 [ 118.623468][ T5712] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 118.806497][ T24] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 118.887209][ T6376] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 118.947869][ T5932] nvmet: connect by host nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 for subsystem testnqn not allowed [ 118.963045][ T5711] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 118.972690][ T6377] nvme nvme0: Connect for subsystem testnqn is not allowed, hostnqn: nqn.2014-08.org.nvmexpress:uuid:e85ba060-a25e-449e-84df-c5b2fb08d391 [ 118.990340][ T24] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 118.999933][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.011627][ T5274] 8021q: adding VLAN 0 to HW filter on device eth10 [ 119.012646][ T24] usb 6-1: Product: syz [ 119.022925][ T24] usb 6-1: Manufacturer: syz [ 119.033158][ T24] usb 6-1: SerialNumber: syz [ 119.113693][ T5712] wacom 0003:056A:00B1.0007: Unknown device_type for 'HID 056a:00b1'. Assuming pen. [ 119.140659][ T5711] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 119.152659][ T5712] wacom 0003:056A:00B1.0007: hidraw0: USB HID v1.11 Device [HID 056a:00b1] on usb-dummy_hcd.9-1/input0 [ 119.167697][ T994] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 119.177721][ T5711] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 119.194001][ T5712] input: Wacom Intuos3 6x8 Pen as /devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.0/0003:056A:00B1.0007/input/input14 [ 119.217580][ T5711] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 119.242705][ T5711] usb 9-1: New USB device found, idVendor=112a, idProduct=0001, bcdDevice= 1.00 [ 119.263838][ T5711] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.294694][ T5711] usb 9-1: Product: syz [ 119.309685][ T5711] usb 9-1: Manufacturer: syz [ 119.322811][ T5711] usb 9-1: SerialNumber: syz [ 119.376647][ T6369] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 119.414009][ T6369] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 119.443410][ T6369] raw-gadget.2 gadget.8: fail, usb_ep_enable returned -22 [ 119.489967][ T6388] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 119.509330][ T6388] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 119.542757][ T6388] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 119.562161][ T6388] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 119.583032][ T6388] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 119.912414][ T5274] 8021q: adding VLAN 0 to HW filter on device eth11 [ 120.312353][ T5712] usb 10-1: USB disconnect, device number 2 [ 120.351021][ T6414] PM: suspend entry (s2idle) [ 120.465449][ T994] usb 6-1: Service connection timeout for: 256 [ 120.472670][ T994] ath9k_htc 6-1:1.0: ath9k_htc: Unable to initialize HTC services [ 120.509011][ T994] ath9k_htc: Failed to initialize the device [ 120.530978][ T994] usb 6-1: ath9k_htc: USB layer deinitialized [ 120.549770][ T5274] 8021q: adding VLAN 0 to HW filter on device eth12 [ 120.585709][ T5932] Filesystems sync: 0.226 seconds [ 120.689268][ T5711] redrat3 9-1:1.0: Firmware rev: [ 120.843695][ T10] usb 6-1: USB disconnect, device number 2 [ 120.893166][ T5711] redrat3 9-1:1.0: Failed to read timeout from hardware [ 120.994689][ T5711] rc_core: IR keymap rc-hauppauge not found [ 121.010638][ T5711] Registered IR keymap rc-empty [ 121.060405][ T5274] 8021q: adding VLAN 0 to HW filter on device eth13 [ 121.094088][ T5711] rc rc0: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/rc/rc0 [ 121.111207][ T5711] input: RedRat3 Infrared Remote Transceiver as /devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/rc/rc0/input17 [ 121.148970][ T6431] UBIFS error (pid: 6431): cannot open "ubi0_0", error -19 [ 121.159364][ T6414] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 121.211139][ T6414] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 121.242821][ T6414] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 121.258013][ T6414] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 121.278724][ T6414] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 121.292131][ T24] logitech-hidpp-device 0005:046D:B012.0008: item fetching failed at offset 38/39 [ 121.309294][ T6414] Bluetooth: hci6: Opcode 0x0406 failed: -4 [ 121.318750][ T24] logitech-hidpp-device 0005:046D:B012.0008: hidpp_probe:parse failed [ 121.328839][ T6414] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 121.342514][ T6414] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 121.350097][ T24] logitech-hidpp-device 0005:046D:B012.0008: probe with driver logitech-hidpp-device failed with error -22 [ 121.405230][ T6414] Bluetooth: hci7: Opcode 0x0406 failed: -4 [ 121.418635][ T6414] Bluetooth: hci8: Opcode 0x0c1a failed: -4 [ 121.443082][ T6414] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 121.462055][ T6414] Bluetooth: hci8: Opcode 0x0406 failed: -4 [ 121.470465][ T6414] Bluetooth: hci9: Opcode 0x0c1a failed: -4 [ 121.478040][ T6414] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 121.489256][ T6414] Bluetooth: hci9: Opcode 0x0406 failed: -4 [ 121.498657][ T5711] redrat3 9-1:1.0: redrat3_enable_detector: detector status: 0, should be 1 [ 121.519733][ T6414] Freezing user space processes [ 121.533337][ T5711] redrat3 9-1:1.0: probe with driver redrat3 failed with error -5 [ 122.704515][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 123.266114][ T5615] Bluetooth: hci6: command 0x0c1a tx timeout [ 123.344512][ T5615] Bluetooth: hci7: command 0x0c1a tx timeout [ 123.434410][ T5615] Bluetooth: hci8: command 0x0c1a tx timeout [ 123.504473][ T5615] Bluetooth: hci9: command 0x0c1a tx timeout [ 124.231219][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 124.784457][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 125.344532][ T5615] Bluetooth: hci6: command 0x0c1a tx timeout [ 125.424550][ T5615] Bluetooth: hci7: command 0x0c1a tx timeout [ 125.508154][ T5615] Bluetooth: hci8: command 0x0c1a tx timeout [ 125.584558][ T5615] Bluetooth: hci9: command 0x0c1a tx timeout [ 126.864763][ T5615] Bluetooth: hci5: command 0x0c1a tx timeout [ 127.435221][ T5615] Bluetooth: hci6: command 0x0c1a tx timeout [ 127.514445][ T5615] Bluetooth: hci7: command 0x0c1a tx timeout [ 127.584489][ T5615] Bluetooth: hci8: command 0x0c1a tx timeout [ 127.604447][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 127.674504][ T5615] Bluetooth: hci9: command 0x0c1a tx timeout [ 130.984480][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 132.545882][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.552801][ T1316] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.344962][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 138.524599][ T24] misc userio: Buffer overflowed, userio client isn't keeping up [ 140.473420][ T24] input: PS/2 Generic Mouse as /devices/serio3/input/input19 [ 140.754538][ T24] psmouse serio3: Failed to enable mouse on [ 140.783256][ T6414] Freezing user space processes completed (elapsed 19.251 seconds) [ 140.791426][ T6414] OOM killer disabled. [ 140.795524][ T6414] Freezing remaining freezable tasks [ 140.803531][ T6414] Freezing remaining freezable tasks completed (elapsed 0.002 seconds) [ 140.812657][ T6414] printk: Suspending console(s) (use no_console_suspend to debug) [ 140.952910][ T6414] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 140.952959][ T6414] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 140.953001][ T6414] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 140.953043][ T6414] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 140.953085][ T6414] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 140.953126][ T6414] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 140.953167][ T6414] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 140.953209][ T6414] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 140.953250][ T6414] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 140.953296][ T6414] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 140.953338][ T6414] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 140.953380][ T6414] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 140.953422][ T6414] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 140.953465][ T6414] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 140.953506][ T6414] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 141.008412][ T5947] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 141.180401][ T6414] PM: suspend debug: Waiting for 5 second(s). [ 146.437279][ T5947] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 146.476973][ T5936] ACPI: \_SB_.LNKS: No IRQ available. Try pci=noacpi or acpi=off [ 146.476999][ T5936] pci 0000:00:01.3: PCI INT A: no GSI [ 146.815885][ T5982] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 151.954516][ T5982] usb 9-1: device descriptor read/64, error -110 [ 152.214494][ T5982] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 152.344461][ T5982] usb 9-1: device descriptor read/64, error -32 [ 152.594451][ T5982] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 152.614679][ T5982] usb 9-1: device descriptor read/8, error -32 [ 152.794470][ T5982] raw-gadget.2 gadget.8: failed to queue resume event [ 152.854456][ T5982] usb 9-1: reset high-speed USB device number 2 using dummy_hcd [ 152.874616][ C0] raw-gadget.2 gadget.8: ignoring, device is not running [ 152.874722][ T5982] usb 9-1: device descriptor read/8, error -32 [ 152.985151][ T5982] raw-gadget.2 gadget.8: failed to queue suspend event [ 153.030597][ T6414] OOM killer enabled. [ 153.031167][ T6414] Restarting tasks: Starting [ 153.059890][ T6414] Restarting tasks: Done [ 153.060654][ T6414] random: crng reseeded on system resumption [ 153.073356][ T5781] usb 9-1: USB disconnect, device number 2 [ 153.082065][ T6368] raw-gadget.2 gadget.8: failed to queue disconnect event [ 153.106714][ T4979] ================================================================== [ 153.107858][ T4979] BUG: KASAN: slab-use-after-free in string+0x471/0x4d0 [ 153.108824][ T4979] Read of size 1 at addr ffff8880510d0758 by task udevd/4979 [ 153.109700][ T6414] PM: suspend exit [ 153.109810][ T4979] [ 153.109840][ T4979] CPU: 1 UID: 0 PID: 4979 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 153.109862][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.109881][ T4979] Call Trace: [ 153.109887][ T4979] [ 153.109895][ T4979] dump_stack_lvl+0x100/0x190 [ 153.109925][ T4979] print_report+0x13d/0x4b0 [ 153.109952][ T4979] ? __virt_addr_valid+0x239/0x430 [ 153.109978][ T4979] ? string+0x471/0x4d0 [ 153.109996][ T4979] kasan_report+0xdf/0x1c0 [ 153.110022][ T4979] ? string+0x471/0x4d0 [ 153.110043][ T4979] string+0x471/0x4d0 [ 153.110062][ T4979] ? __pfx_string+0x10/0x10 [ 153.110085][ T4979] vsnprintf+0x422/0x1300 [ 153.110110][ T4979] ? __pfx_vsnprintf+0x10/0x10 [ 153.110130][ T4979] ? ksys_read+0x12a/0x250 [ 153.110157][ T4979] ? do_syscall_64+0x115/0x870 [ 153.110179][ T4979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.110202][ T4979] add_uevent_var+0x183/0x3a0 [ 153.110222][ T4979] ? __pfx_add_uevent_var+0x10/0x10 [ 153.110244][ T4979] ? rc_dev_uevent+0x12d/0x1c0 [ 153.110272][ T4979] ? __pfx_rc_dev_uevent+0x10/0x10 [ 153.110299][ T4979] rc_dev_uevent+0x17d/0x1c0 [ 153.110327][ T4979] dev_uevent+0x2f1/0x870 [ 153.110354][ T4979] ? __pfx_dev_uevent+0x10/0x10 [ 153.110376][ T4979] ? kasan_save_track+0x14/0x30 [ 153.110393][ T4979] ? __kasan_kmalloc+0xaa/0xb0 [ 153.110409][ T4979] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 153.110432][ T4979] ? uevent_show+0x166/0x3a0 [ 153.110450][ T4979] ? __pfx_uevent_show+0x10/0x10 [ 153.110466][ T4979] uevent_show+0x1ca/0x3a0 [ 153.110484][ T4979] ? __pfx_uevent_show+0x10/0x10 [ 153.110501][ T4979] dev_attr_show+0x52/0xa0 [ 153.110523][ T4979] ? __pfx_dev_attr_show+0x10/0x10 [ 153.110546][ T4979] sysfs_kf_seq_show+0x217/0x3f0 [ 153.110580][ T4979] seq_read_iter+0x32f/0x1270 [ 153.110597][ T4979] ? cp_new_stat+0x484/0x5c0 [ 153.110620][ T4979] kernfs_fop_read_iter+0x46c/0x610 [ 153.110642][ T4979] ? rw_verify_area+0xce/0x6d0 [ 153.110666][ T4979] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 153.110687][ T4979] vfs_read+0x82e/0xb40 [ 153.110711][ T4979] ? __pfx_vfs_read+0x10/0x10 [ 153.110737][ T4979] ? __pfx___do_sys_newfstat+0x10/0x10 [ 153.110765][ T4979] ksys_read+0x12a/0x250 [ 153.110791][ T4979] ? __pfx_ksys_read+0x10/0x10 [ 153.110821][ T4979] do_syscall_64+0x115/0x870 [ 153.110844][ T4979] ? clear_bhb_loop+0x40/0x90 [ 153.110867][ T4979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.110887][ T4979] RIP: 0033:0x7f8d368a7407 [ 153.110909][ T4979] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 153.110932][ T4979] RSP: 002b:00007fff05567180 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 153.110957][ T4979] RAX: ffffffffffffffda RBX: 00007f8d36f80880 RCX: 00007f8d368a7407 [ 153.110970][ T4979] RDX: 0000000000001000 RSI: 000055a6625d6fc0 RDI: 000000000000000c [ 153.110983][ T4979] RBP: 00007f8d369efff0 R08: 0000000000000000 R09: 0000000000000000 [ 153.110995][ T4979] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 153.111007][ T4979] R13: 00007f8d369efea0 R14: 0000000000000000 R15: 000055a6625641e0 [ 153.111025][ T4979] [ 153.111032][ T4979] [ 153.152026][ T4979] Allocated by task 5711: [ 153.152630][ T4979] kasan_save_stack+0x30/0x50 [ 153.153280][ T4979] kasan_save_track+0x14/0x30 [ 153.153926][ T4979] __kasan_kmalloc+0xaa/0xb0 [ 153.154560][ T4979] __kmalloc_cache_noprof+0x2e5/0x6c0 [ 153.155312][ T4979] redrat3_dev_probe+0x326/0x2b50 [ 153.156008][ T4979] usb_probe_interface+0x303/0x8f0 [ 153.156714][ T4979] really_probe+0x241/0xa60 [ 153.157428][ T4979] __driver_probe_device+0x20e/0x450 [ 153.158153][ T4979] driver_probe_device+0x4a/0x140 [ 153.158845][ T4979] __device_attach_driver+0x1df/0x320 [ 153.159580][ T4979] bus_for_each_drv+0x159/0x1e0 [ 153.160243][ T4979] __device_attach+0x1e4/0x4d0 [ 153.160898][ T4979] device_initial_probe+0xaf/0xd0 [ 153.161591][ T4979] bus_probe_device+0x64/0x160 [ 153.162245][ T4979] device_add+0x121d/0x1970 [ 153.162869][ T4979] usb_set_configuration+0xd97/0x1c60 [ 153.163604][ T4979] usb_generic_driver_probe+0xa1/0xe0 [ 153.164340][ T4979] usb_probe_device+0xef/0x400 [ 153.165000][ T4979] really_probe+0x241/0xa60 [ 153.165627][ T4979] __driver_probe_device+0x20e/0x450 [ 153.166354][ T4979] driver_probe_device+0x4a/0x140 [ 153.167045][ T4979] __device_attach_driver+0x1df/0x320 [ 153.167784][ T4979] bus_for_each_drv+0x159/0x1e0 [ 153.168451][ T4979] __device_attach+0x1e4/0x4d0 [ 153.169107][ T4979] device_initial_probe+0xaf/0xd0 [ 153.169798][ T4979] bus_probe_device+0x64/0x160 [ 153.170452][ T4979] device_add+0x121d/0x1970 [ 153.171078][ T4979] usb_new_device.cold+0x685/0x115c [ 153.171794][ T4979] hub_event+0x30a3/0x4a60 [ 153.172408][ T4979] process_one_work+0xa23/0x1940 [ 153.173085][ T4979] worker_thread+0x5ef/0xe50 [ 153.173718][ T4979] kthread+0x370/0x450 [ 153.174282][ T4979] ret_from_fork+0x72b/0xd50 [ 153.174921][ T4979] ret_from_fork_asm+0x1a/0x30 [ 153.175582][ T4979] [ 153.175911][ T4979] Freed by task 5711: [ 153.176457][ T4979] kasan_save_stack+0x30/0x50 [ 153.177102][ T4979] kasan_save_track+0x14/0x30 [ 153.177749][ T4979] kasan_save_free_info+0x3b/0x70 [ 153.178445][ T4979] __kasan_slab_free+0x5f/0x80 [ 153.179102][ T4979] kfree+0x22b/0x6c0 [ 153.179651][ T4979] redrat3_dev_probe+0x107a/0x2b50 [ 153.180357][ T4979] usb_probe_interface+0x303/0x8f0 [ 153.181062][ T4979] really_probe+0x241/0xa60 [ 153.181686][ T4979] __driver_probe_device+0x20e/0x450 [ 153.182409][ T4979] driver_probe_device+0x4a/0x140 [ 153.183098][ T4979] __device_attach_driver+0x1df/0x320 [ 153.183834][ T4979] bus_for_each_drv+0x159/0x1e0 [ 153.184498][ T4979] __device_attach+0x1e4/0x4d0 [ 153.185158][ T4979] device_initial_probe+0xaf/0xd0 [ 153.185849][ T4979] bus_probe_device+0x64/0x160 [ 153.186514][ T4979] device_add+0x121d/0x1970 [ 153.187143][ T4979] usb_set_configuration+0xd97/0x1c60 [ 153.187876][ T4979] usb_generic_driver_probe+0xa1/0xe0 [ 153.188606][ T4979] usb_probe_device+0xef/0x400 [ 153.189261][ T4979] really_probe+0x241/0xa60 [ 153.189885][ T4979] __driver_probe_device+0x20e/0x450 [ 153.190610][ T4979] driver_probe_device+0x4a/0x140 [ 153.191300][ T4979] __device_attach_driver+0x1df/0x320 [ 153.192036][ T4979] bus_for_each_drv+0x159/0x1e0 [ 153.192704][ T4979] __device_attach+0x1e4/0x4d0 [ 153.193362][ T4979] device_initial_probe+0xaf/0xd0 [ 153.194053][ T4979] bus_probe_device+0x64/0x160 [ 153.194708][ T4979] device_add+0x121d/0x1970 [ 153.195335][ T4979] usb_new_device.cold+0x685/0x115c [ 153.196048][ T4979] hub_event+0x30a3/0x4a60 [ 153.196666][ T4979] process_one_work+0xa23/0x1940 [ 153.197343][ T4979] worker_thread+0x5ef/0xe50 [ 153.197974][ T4979] kthread+0x370/0x450 [ 153.198539][ T4979] ret_from_fork+0x72b/0xd50 [ 153.199179][ T4979] ret_from_fork_asm+0x1a/0x30 [ 153.199840][ T4979] [ 153.200173][ T4979] The buggy address belongs to the object at ffff8880510d0000 [ 153.200173][ T4979] which belongs to the cache kmalloc-2k of size 2048 [ 153.202015][ T4979] The buggy address is located 1880 bytes inside of [ 153.202015][ T4979] freed 2048-byte region [ffff8880510d0000, ffff8880510d0800) [ 153.203849][ T4979] [ 153.204181][ T4979] The buggy address belongs to the physical page: [ 153.205047][ T4979] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880510d0000 pfn:0x510d0 [ 153.206383][ T4979] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 153.207584][ T4979] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 153.208734][ T4979] page_type: f5(slab) [ 153.209289][ T4979] raw: 00fff00000000240 ffff88813fe28000 ffffea00006f5c10 ffffea0001e49610 [ 153.210439][ T4979] raw: ffff8880510d0000 0000000800080001 00000000f5000000 0000000000000000 [ 153.211584][ T4979] head: 00fff00000000240 ffff88813fe28000 ffffea00006f5c10 ffffea0001e49610 [ 153.212739][ T4979] head: ffff8880510d0000 0000000800080001 00000000f5000000 0000000000000000 [ 153.213892][ T4979] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 153.215048][ T4979] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 153.216196][ T4979] page dumped because: kasan: bad access detected [ 153.217064][ T4979] page_owner tracks the page as allocated [ 153.217831][ T4979] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6154, tgid 6154 (rm), ts 110219946038, free_ts 109270656517 [ 153.220457][ T4979] post_alloc_hook+0xfd/0x120 [ 153.221110][ T4979] get_page_from_freelist+0xf48/0x3530 [ 153.221853][ T4979] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 153.222656][ T4979] new_slab+0xa2/0x640 [ 153.223219][ T4979] refill_objects+0xe3/0x410 [ 153.223849][ T4979] __pcs_replace_empty_main+0x376/0x680 [ 153.224614][ T4979] __kmalloc_node_track_caller_noprof+0x679/0x830 [ 153.225485][ T4979] kmalloc_reserve+0xe8/0x350 [ 153.226140][ T4979] __alloc_skb+0x185/0x710 [ 153.226752][ T4979] audit_log_start+0x350/0x930 [ 153.227407][ T4979] common_lsm_audit+0xb2/0x2b0 [ 153.228061][ T4979] slow_avc_audit+0x186/0x210 [ 153.228705][ T4979] audit_inode_permission+0x1ea/0x2a0 [ 153.229439][ T4979] selinux_inode_permission+0x7ed/0x1130 [ 153.230211][ T4979] security_inode_permission+0xda/0x250 [ 153.230977][ T4979] inode_permission+0x36c/0x620 [ 153.231648][ T4979] page last free pid 5998 tgid 5998 stack trace: [ 153.232498][ T4979] __free_frozen_pages+0x79f/0x1090 [ 153.233219][ T4979] qlist_free_all+0x47/0xf0 [ 153.233862][ T4979] kasan_quarantine_reduce+0x1a0/0x1f0 [ 153.234606][ T4979] __kasan_slab_alloc+0x69/0x90 [ 153.235274][ T4979] kmem_cache_alloc_noprof+0x26b/0x6a0 [ 153.236017][ T4979] __kernfs_new_node+0xd2/0xa10 [ 153.236688][ T4979] kernfs_new_node+0x117/0x150 [ 153.237344][ T4979] __kernfs_create_file+0x53/0x350 [ 153.238047][ T4979] sysfs_add_file_mode_ns+0x207/0x3c0 [ 153.238788][ T4979] internal_create_group+0x593/0xfb0 [ 153.239510][ T4979] internal_create_groups+0x9d/0x150 [ 153.240233][ T4979] device_add+0xf60/0x1970 [ 153.240849][ T4979] netdev_register_kobject+0x1a9/0x3d0 [ 153.241594][ T4979] register_netdevice+0x15b6/0x25a0 [ 153.242314][ T4979] nsim_create+0xc93/0x1420 [ 153.242932][ T4979] __nsim_dev_port_add+0x3ba/0x8f0 [ 153.243637][ T4979] [ 153.243967][ T4979] Memory state around the buggy address: [ 153.244753][ T4979] ffff8880510d0600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.245825][ T4979] ffff8880510d0680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.246899][ T4979] >ffff8880510d0700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.247969][ T4979] ^ [ 153.248914][ T4979] ffff8880510d0780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 153.249984][ T4979] ffff8880510d0800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 153.251055][ T4979] ================================================================== [ 153.254392][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 153.254407][ T30] audit: type=1400 audit(1785856573.038:304): avc: denied { write } for pid=6436 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 153.294222][ T4979] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 153.295249][ T4979] CPU: 1 UID: 0 PID: 4979 Comm: udevd Not tainted syzkaller #0 PREEMPT(full) [ 153.296443][ T4979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 153.297781][ T4979] Call Trace: [ 153.298244][ T4979] [ 153.298662][ T4979] dump_stack_lvl+0x100/0x190 [ 153.299315][ T4979] vpanic+0x552/0x970 [ 153.299871][ T4979] ? __pfx_vpanic+0x10/0x10 [ 153.300491][ T4979] ? mark_held_locks+0x40/0x70 [ 153.301153][ T4979] ? string+0x471/0x4d0 [ 153.301729][ T4979] panic+0xd1/0xe0 [ 153.302249][ T4979] ? __pfx_panic+0x10/0x10 [ 153.302859][ T4979] ? string+0x471/0x4d0 [ 153.303436][ T4979] ? preempt_schedule_common+0x42/0xc0 [ 153.304186][ T4979] ? check_panic_on_warn+0x1f/0x90 [ 153.304886][ T4979] check_panic_on_warn.cold+0x19/0x34 [ 153.305622][ T4979] end_report.part.0+0x3a/0x90 [ 153.306287][ T4979] kasan_report.cold+0xe/0x18 [ 153.306940][ T4979] ? string+0x471/0x4d0 [ 153.307520][ T4979] string+0x471/0x4d0 [ 153.308080][ T4979] ? __pfx_string+0x10/0x10 [ 153.308706][ T4979] vsnprintf+0x422/0x1300 [ 153.309311][ T4979] ? __pfx_vsnprintf+0x10/0x10 [ 153.309968][ T4979] ? ksys_read+0x12a/0x250 [ 153.310586][ T4979] ? do_syscall_64+0x115/0x870 [ 153.311243][ T4979] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.312068][ T4979] add_uevent_var+0x183/0x3a0 [ 153.312713][ T4979] ? __pfx_add_uevent_var+0x10/0x10 [ 153.313429][ T4979] ? rc_dev_uevent+0x12d/0x1c0 [ 153.314095][ T4979] ? __pfx_rc_dev_uevent+0x10/0x10 [ 153.314802][ T4979] rc_dev_uevent+0x17d/0x1c0 [ 153.315442][ T4979] dev_uevent+0x2f1/0x870 [ 153.316049][ T4979] ? __pfx_dev_uevent+0x10/0x10 [ 153.316721][ T4979] ? kasan_save_track+0x14/0x30 [ 153.317395][ T4979] ? __kasan_kmalloc+0xaa/0xb0 [ 153.318055][ T4979] ? __kmalloc_cache_noprof+0x2e5/0x6c0 [ 153.318822][ T4979] ? uevent_show+0x166/0x3a0 [ 153.319459][ T4979] ? __pfx_uevent_show+0x10/0x10 [ 153.320139][ T4979] uevent_show+0x1ca/0x3a0 [ 153.320754][ T4979] ? __pfx_uevent_show+0x10/0x10 [ 153.321445][ T4979] dev_attr_show+0x52/0xa0 [ 153.322062][ T4979] ? __pfx_dev_attr_show+0x10/0x10 [ 153.322768][ T4979] sysfs_kf_seq_show+0x217/0x3f0 [ 153.323457][ T4979] seq_read_iter+0x32f/0x1270 [ 153.324101][ T4979] ? cp_new_stat+0x484/0x5c0 [ 153.324742][ T4979] kernfs_fop_read_iter+0x46c/0x610 [ 153.325462][ T4979] ? rw_verify_area+0xce/0x6d0 [ 153.326124][ T4979] ? __pfx_kernfs_fop_read_iter+0x10/0x10 [ 153.326909][ T4979] vfs_read+0x82e/0xb40 [ 153.327497][ T4979] ? __pfx_vfs_read+0x10/0x10 [ 153.328153][ T4979] ? __pfx___do_sys_newfstat+0x10/0x10 [ 153.328907][ T4979] ksys_read+0x12a/0x250 [ 153.329505][ T4979] ? __pfx_ksys_read+0x10/0x10 [ 153.330177][ T4979] do_syscall_64+0x115/0x870 [ 153.330813][ T4979] ? clear_bhb_loop+0x40/0x90 [ 153.331459][ T4979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.332259][ T4979] RIP: 0033:0x7f8d368a7407 [ 153.332868][ T4979] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 153.335452][ T4979] RSP: 002b:00007fff05567180 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 153.336580][ T4979] RAX: ffffffffffffffda RBX: 00007f8d36f80880 RCX: 00007f8d368a7407 [ 153.337642][ T4979] RDX: 0000000000001000 RSI: 000055a6625d6fc0 RDI: 000000000000000c [ 153.338702][ T4979] RBP: 00007f8d369efff0 R08: 0000000000000000 R09: 0000000000000000 [ 153.339762][ T4979] R10: 0000000000000000 R11: 0000000000000202 R12: 000000000000000a [ 153.340822][ T4979] R13: 00007f8d369efea0 R14: 0000000000000000 R15: 000055a6625641e0 [ 153.341891][ T4979] [ 153.342552][ T4979] Kernel Offset: disabled [ 153.343142][ T4979] Rebooting in 86400 seconds..