last executing test programs: 10.49275953s ago: executing program 3 (id=351): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000000000e2ffff1204000008000300", @ANYRES32=r3, @ANYBLOB="040013000a00060008021100000000000600"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 9.797896782s ago: executing program 3 (id=352): ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, &(0x7f0000000100)={0x0, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x98f911, 0x8000, '\x00', @string=&(0x7f00000000c0)}}) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_G_SLICED_VBI_CAP(r1, 0xc0745645, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r2, 0xc0145b0d, &(0x7f0000000040)) 8.840061875s ago: executing program 0 (id=360): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 7.879538351s ago: executing program 0 (id=364): r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) r2 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x9, 0x5) ptrace(0x11, r3) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r7}) 6.825862452s ago: executing program 3 (id=369): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[], 0x35) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)) 6.50589372s ago: executing program 1 (id=371): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x2c1001, &(0x7f0000000380)='),[\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r5 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r5, 0x0, 0x0) r6 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r6, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 6.270149949s ago: executing program 2 (id=372): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mount(&(0x7f0000000100)=@filename='./file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='sysfs\x00', 0x2c1001, &(0x7f0000000380)='),[\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb3d68000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) r5 = openat$ptp0(0xffffffffffffff9c, 0x0, 0x20a00, 0x0) ioctl$PTP_EXTTS_REQUEST2(r5, 0xc4c03d16, 0x0) ioctl$IOMMU_VFIO_SET_IOMMU(r4, 0x3b66, 0x1) setresuid(0x0, 0xee00, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7}) r6 = add_key$fscrypt_provisioning(&(0x7f0000000040), &(0x7f0000000180)={'syz', 0x0}, &(0x7f0000000280)={0x2, 0x0, @a}, 0x48, 0xfffffffffffffffc) keyctl$chown(0x4, r6, 0x0, 0x0) r7 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(r7, 0xc0189375, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0}, './file0\x00'}) 5.714395626s ago: executing program 0 (id=374): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000000000e2ffff1204000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600080211000000000006001000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 5.624816736s ago: executing program 0 (id=375): r0 = syz_open_dev$vbi(0x0, 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 5.505356291s ago: executing program 1 (id=376): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='1', 0x1) r3 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) write(r3, &(0x7f0000000200)='1', 0x1) write(0xffffffffffffffff, &(0x7f0000000280)='0', 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) 4.806220076s ago: executing program 1 (id=378): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 4.763768702s ago: executing program 2 (id=379): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_usb_connect(0x3, 0x3d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000bdce4208110f80106afc0000000109022b00010000000009043700022ee5cd0009058010ff037f790209050e0320000980070705ab0b78"], 0x0) close(0x3) poll(&(0x7f00000000c0)=[{0xffffffffffffffff, 0x1a}], 0x1, 0x81) 4.598996675s ago: executing program 0 (id=380): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff09"}}, 0x11c) socket(0x40000000015, 0x5, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000d00)={0xc, {0x12, "11ff042000"/18}}, 0x18) write$UHID_INPUT2(r4, 0x0, 0x1a) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 4.486606008s ago: executing program 4 (id=381): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x17a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 3.882125873s ago: executing program 4 (id=382): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', 0x0, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./trace/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) 3.839780816s ago: executing program 1 (id=383): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x58f}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa04, &(0x7f0000000000)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1, 0x2}) r1 = openat$kvm(0xffffffffffffff9c, 0x0, 0xa0002, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) writev(0xffffffffffffffff, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) connect$inet6(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r3 = syz_open_dev$usbfs(&(0x7f0000000080), 0x206, 0x20182) ioctl$USBDEVFS_ALLOW_SUSPEND(r3, 0x5522) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mkdir(&(0x7f0000000100)='./config\x00', 0x850e856b79c500b0) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x1018042, 0x0) setsockopt$SO_J1939_SEND_PRIO(r4, 0x6b, 0x3, 0x0, 0x0) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1f3) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r5, 0x4068aea3, &(0x7f00000001c0)) ioctl$KVM_SET_CLOCK(r2, 0x4030ae7b, &(0x7f0000000000)={0x4, 0x4, 0x7ff, 0x0, 0x3ff}) 3.604217448s ago: executing program 0 (id=384): r0 = io_uring_setup(0x524, &(0x7f0000000040)={0x0, 0x3cb1, 0x1c080, 0x0, 0x20002f7}) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r1 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000040)=""/95) r2 = syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0], 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x8) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r3) ptrace(0x10, r3) ptrace$cont(0x20, r3, 0x9, 0x5) ptrace(0x11, r3) syz_usb_control_io$rtl8150(r2, 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) r6 = socket$kcm(0x2d, 0x2, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r7, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e3, &(0x7f0000000240)={0xffffffffffffffff, r7}) 3.355116646s ago: executing program 3 (id=385): socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="cf040000000000e2ffff1204000008000300", @ANYRES32=r3, @ANYBLOB="040013000a000600080211000000000006001000"], 0x44}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 3.060947471s ago: executing program 2 (id=386): syz_open_dev$sg(0x0, 0x508d48d4, 0x40902) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x404c010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x2000000000000013, &(0x7f0000000440)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, 0x0, 0x43}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x43, 0x0, &(0x7f0000000180)) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc25c4110, &(0x7f0000000100)={0x0, [[0x1, 0x0, 0x0, 0x2, 0x4, 0x101], [0x20000000, 0x500, 0x4, 0x0, 0x0, 0x0, 0xf4e], [0x40, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x20000000]], '\x00', [{0x1, 0x0, 0x0, 0x1, 0x1}, {0x0, 0x0, 0x0, 0x1}, {0x0, 0xe}, {0x5}, {0x1, 0x2}, {0x0, 0x3}, {}, {}, {0xfffffffc, 0xab9}, {0x82}, {0x400}, {0x6}], '\x00', 0x4b4}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x3, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, &(0x7f00000007c0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', r4}, 0x94) 2.960151429s ago: executing program 4 (id=387): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80322, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)}, {0x0}], 0x2) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000000180)={0x9f14, {"0000000000000000c031ff5b22fd9b7b", "3dfab043e15fad27a639f905b5e9f977", "a7ff0f000000000089000000ff4a70f3"}, 0xffffff00, 0x7}) 2.950805878s ago: executing program 1 (id=388): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4001}) r1 = socket$inet(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/test\x00', 0x777) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/test/memory.limit_in_bytes\x00', 0x2002, 0x8) write(r2, &(0x7f0000000180)='1', 0x1) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.cpu/test/memory.oom_control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup.cpu/test/cgroup.procs\x00', 0x2, 0x0) write(r3, &(0x7f0000000280)='0', 0x1) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000080)={'syzkaller0\x00', {0x2, 0x0, @rand_addr=0xac140001}}) landlock_create_ruleset(&(0x7f0000000140)={0x10895, 0x3, 0x2}, 0x18, 0x0) 2.789005189s ago: executing program 3 (id=389): r0 = syz_open_dev$video4linux(&(0x7f0000000040), 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, 0x0) 1.521031054s ago: executing program 2 (id=390): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1.483690625s ago: executing program 3 (id=391): r0 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r0, 0xc0845657, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000003c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x10000000002) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_io_uring_setup(0xf00, &(0x7f0000000400)={0x0, 0xab1, 0x10000, 0x8, 0x3e3}, &(0x7f0000000100)=0x0, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r5, r6, r7, &(0x7f0000000280)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xc, 0x4004, @fd_index=0x3, 0x5, 0x0, 0x0, 0x10, 0x0, {0x0, 0x0, 0x0, '\x00', 0x0}}) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=@nat={'nat\x00', 0x670, 0x5, 0x4a4, 0x348, 0x198, 0xffffffff, 0x198, 0x0, 0x410, 0x410, 0xffffffff, 0x410, 0x410, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010100, @local, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'veth0_macvtap\x00', {}, {0xff}, 0x16}, 0x0, 0x164, 0x198, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x7, 0x100c, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x76, 0x2, {0x1}}}, @common=@unspec=@devgroup={{0x34}, {0x3, 0x0, 0x3, 0x3, 0x81}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0xae, {0x2e, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e24, @port=0x4e24}}}}, {{@uncond, 0x0, 0xc8, 0xf8, 0x0, {}, [@common=@addrtype={{0x2c}, {0x40, 0x200, 0x0, 0x1}}, @common=@inet=@tcp={{0x2c}, {[0x4e24, 0x4e22], [0x4e22, 0x4e24], 0x4, 0xc2, 0x1, 0x2}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'veth1_to_bridge\x00', {}, {}, 0x0, 0x0, 0x5e}, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@empty, @ipv4=@empty, @port=0x4e22, @icmp_id=0x65}}}, {{@ip={@loopback, @remote, 0xff, 0x0, 'batadv_slave_1\x00', 'ip_vti0\x00', {}, {0xff}, 0x84, 0x1, 0x5}, 0x0, 0x94, 0xc8, 0x0, {}, [@common=@icmp={{0x24}, {0x4, '\x00', 0x1}}]}, @DNAT0={0x34, 'DNAT\x00', 0x0, {0x1, {0x10, @local, @dev={0xac, 0x14, 0x14, 0x2a}, @port=0x4e22, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x500) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) io_uring_enter(r4, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) 1.415681741s ago: executing program 4 (id=392): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x17a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000d80)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x3, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000040)="630b008646dc3f0adf33c9f7b986", 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r5, 0x2000000, 0x0, 0x0, &(0x7f0000000040), 0x0, 0xcf25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x80}, 0x50) 1.183213451s ago: executing program 1 (id=393): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1b6) ftruncate(r0, 0x100000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/nvmet/subsystems/testsubsys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/nvmet/subsystems/testsubsys/attr_allow_any_host\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/nvmet/subsystems/testsubsys/namespaces/1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/nvmet/subsystems/testsubsys/namespaces/1/buffered_io\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/nvmet/subsystems/testsubsys/namespaces/1/device_path\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='./file0\n', 0x8) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/nvmet/subsystems/testsubsys/namespaces/1/enable\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='1\n', 0x2) close(r4) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/nvmet/ports/1\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/nvmet/ports/1/addr_trtype\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='loop\n', 0x5) close(r5) symlinkat(&(0x7f0000000680)='./config/nvmet/subsystems/testsubsys\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/nvmet/ports/1/subsystems/testsubsys\x00') r6 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000780), 0x2, 0x0) write(r6, &(0x7f0000000800)='transport=loop,nqn=testsubsys', 0x1d) nanosleep(&(0x7f0000000840)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000880)='./sys\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/class/block/nvme0n1/wwid\x00', 0x0, 0x0) 1.065557113s ago: executing program 4 (id=394): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_open_dev$video4linux(&(0x7f0000000140), 0x3, 0x88000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$uhid(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x4, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff09"}}, 0x11c) socket(0x40000000015, 0x5, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000d00)={0xc, {0x12, "11ff042000"/18}}, 0x18) write$UHID_INPUT2(r4, 0x0, 0x1a) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x22020600) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, 0x2f, 0x9, 0x70bd27, 0x25dfdbfb, {0x4}, [@typed={0xc, 0x17, 0x0, 0x0, @u64=0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x42914}, 0x4000014) 831.456229ms ago: executing program 2 (id=395): r0 = syz_usbip_server_init(0x1) syz_usb_connect(0x1, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109"], 0x0) write$usbip_server(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x35) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000440)) 1.937794ms ago: executing program 4 (id=396): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000040)={'ipvlan0\x00', {0x2, 0x4e20, @broadcast}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x421, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x0, 0x61}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_MODE={0x6, 0x1, 0xa8eb3e4526ebb9bd}]}}}]}, 0x3c}}, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f00000010c0)={{0x1, 0x1, 0x18, r0, {0x7}}, './file0\x00'}) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000001100)={0x18, 0x9, 0x1, 0x7fffffff, 0x4a, "a8b7694fbe5e5a52844f8e4954575173538f69"}) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x1, 0x0, 0x111, 0x3}}, 0x20) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x28048005) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) msgsnd(0x0, &(0x7f0000000080)={0x0, "df5284eedfe0f36db1de469c5a32401a1744f0b9ce91bfad87f9dac4"}, 0x24, 0x800) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x50, 0x9, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @rand_addr=0x64010101}}]}]}, 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778625d52}, 0x4) 0s ago: executing program 2 (id=397): openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000300)={{{@in=@remote, @in6=@mcast2}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000140)=0xe8) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000040)='tracefs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r3, &(0x7f0000000180), 0x1000) kernel console output (not intermixed with test programs): [ 53.441797][ T29] audit: type=1400 audit(1787639223.160:113): avc: denied { write } for pid=5463 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.496187][ T29] audit: type=1400 audit(1787639223.210:114): avc: denied { write } for pid=5474 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.688100][ T29] audit: type=1400 audit(1787639223.400:115): avc: denied { write } for pid=5477 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.747074][ T29] audit: type=1400 audit(1787639223.460:116): avc: denied { write } for pid=5488 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.945480][ T29] audit: type=1400 audit(1787639223.660:117): avc: denied { write } for pid=5491 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.006737][ T29] audit: type=1400 audit(1787639223.720:118): avc: denied { write } for pid=5502 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.201125][ T29] audit: type=1400 audit(1787639223.910:119): avc: denied { write } for pid=5506 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.259705][ T29] audit: type=1400 audit(1787639223.970:120): avc: denied { write } for pid=5517 comm="rm" name="hook-state" dev="tmpfs" ino=1774 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 60.930236][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 60.930252][ T29] audit: type=1400 audit(1787639230.640:129): avc: denied { mounton } for pid=5584 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.960645][ T29] audit: type=1400 audit(1787639230.670:130): avc: denied { mount } for pid=5584 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.965246][ T5584] cgroup: Unknown subsys name 'net' [ 60.989641][ T29] audit: type=1400 audit(1787639230.700:131): avc: denied { unmount } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 61.134069][ T5584] cgroup: Unknown subsys name 'cpuset' [ 61.142709][ T5584] cgroup: Unknown subsys name 'rlimit' [ 61.243401][ T29] audit: type=1400 audit(1787639230.960:132): avc: denied { setattr } for pid=5584 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=819 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 61.283921][ T29] audit: type=1400 audit(1787639230.960:133): avc: denied { create } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.304738][ T29] audit: type=1400 audit(1787639230.960:134): avc: denied { write } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.325451][ T29] audit: type=1400 audit(1787639230.960:135): avc: denied { read } for pid=5584 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 61.354261][ T5586] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 61.364000][ T29] audit: type=1400 audit(1787639231.080:136): avc: denied { relabelto } for pid=5586 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.390013][ T29] audit: type=1400 audit(1787639231.080:137): avc: denied { write } for pid=5586 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 61.430695][ T29] audit: type=1400 audit(1787639231.140:138): avc: denied { read } for pid=5584 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 62.350910][ T5584] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 64.488765][ T5603] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.502385][ T5600] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.512223][ T5608] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.522593][ T5608] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.522593][ T5611] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.523323][ T5612] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 64.530939][ T5608] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.538193][ T5612] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.545564][ T5608] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.553164][ T5612] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.559896][ T5608] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.573185][ T5611] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 64.579418][ T5608] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.588358][ T5612] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.595585][ T5608] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.602499][ T5612] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.609151][ T5608] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.622271][ T5614] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.622760][ T5608] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.630168][ T5614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.637909][ T5608] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.652525][ T5608] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.660430][ T5608] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 64.673541][ T5608] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 64.682607][ T5608] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.964299][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.970889][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 66.099476][ T5605] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.107041][ T5605] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.114227][ T5605] bridge_slave_0: entered allmulticast mode [ 66.121154][ T5605] bridge_slave_0: entered promiscuous mode [ 66.162623][ T5605] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.169750][ T5605] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.176874][ T5605] bridge_slave_1: entered allmulticast mode [ 66.183629][ T5605] bridge_slave_1: entered promiscuous mode [ 66.203033][ T5597] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.210335][ T5597] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.217663][ T5597] bridge_slave_0: entered allmulticast mode [ 66.224504][ T5597] bridge_slave_0: entered promiscuous mode [ 66.254018][ T5597] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.261078][ T5597] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.268191][ T5597] bridge_slave_1: entered allmulticast mode [ 66.275232][ T5597] bridge_slave_1: entered promiscuous mode [ 66.317002][ T5605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.359092][ T5605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.368418][ T5596] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.376095][ T5596] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.383400][ T5596] bridge_slave_0: entered allmulticast mode [ 66.390049][ T5596] bridge_slave_0: entered promiscuous mode [ 66.397217][ T5594] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.404340][ T5594] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.411468][ T5594] bridge_slave_0: entered allmulticast mode [ 66.418153][ T5594] bridge_slave_0: entered promiscuous mode [ 66.434054][ T5597] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.456728][ T5596] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.463836][ T5596] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.471033][ T5596] bridge_slave_1: entered allmulticast mode [ 66.478043][ T5596] bridge_slave_1: entered promiscuous mode [ 66.484797][ T5594] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.492288][ T5594] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.499411][ T5594] bridge_slave_1: entered allmulticast mode [ 66.506778][ T5594] bridge_slave_1: entered promiscuous mode [ 66.513730][ T5595] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.520793][ T5595] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.527998][ T5595] bridge_slave_0: entered allmulticast mode [ 66.534766][ T5595] bridge_slave_0: entered promiscuous mode [ 66.543610][ T5597] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.560808][ T5605] team0: Port device team_slave_0 added [ 66.581005][ T5595] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.588343][ T5595] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.595553][ T5595] bridge_slave_1: entered allmulticast mode [ 66.602372][ T5595] bridge_slave_1: entered promiscuous mode [ 66.619254][ T5605] team0: Port device team_slave_1 added [ 66.647545][ T5597] team0: Port device team_slave_0 added [ 66.663323][ T5596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.674400][ T5594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.684074][ T5603] Bluetooth: hci0: command tx timeout [ 66.686590][ T5594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.691480][ T5603] Bluetooth: hci2: command tx timeout [ 66.709098][ T5597] team0: Port device team_slave_1 added [ 66.729063][ T5596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.756751][ T5595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.765847][ T5603] Bluetooth: hci1: command tx timeout [ 66.768570][ T5595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.771736][ T5608] Bluetooth: hci3: command tx timeout [ 66.780431][ T5600] Bluetooth: hci4: command tx timeout [ 66.796294][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.803354][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.829545][ T5605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.864600][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 66.871595][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.897710][ T5597] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 66.909111][ T5605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.916370][ T5605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 66.942246][ T5605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 66.954768][ T5596] team0: Port device team_slave_0 added [ 66.962170][ T5594] team0: Port device team_slave_0 added [ 66.976199][ T5597] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 66.983199][ T5597] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.011669][ T5597] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.030761][ T5596] team0: Port device team_slave_1 added [ 67.037931][ T5594] team0: Port device team_slave_1 added [ 67.045567][ T5595] team0: Port device team_slave_0 added [ 67.074036][ T5595] team0: Port device team_slave_1 added [ 67.124123][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.131122][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.157477][ T5595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.168933][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.176129][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.202050][ T5596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.213408][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.220407][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.246328][ T5594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.273150][ T5595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.280172][ T5595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.306089][ T5595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.317430][ T5596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.324464][ T5596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.350378][ T5596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.362409][ T5594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.369388][ T5594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 67.395307][ T5594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.412643][ T5597] hsr_slave_0: entered promiscuous mode [ 67.418762][ T5597] hsr_slave_1: entered promiscuous mode [ 67.429473][ T5605] hsr_slave_0: entered promiscuous mode [ 67.435558][ T5605] hsr_slave_1: entered promiscuous mode [ 67.441480][ T5605] debugfs: 'hsr0' already exists in 'hsr' [ 67.447243][ T5605] Cannot create hsr debugfs directory [ 67.570803][ T5595] hsr_slave_0: entered promiscuous mode [ 67.577682][ T5595] hsr_slave_1: entered promiscuous mode [ 67.583722][ T5595] debugfs: 'hsr0' already exists in 'hsr' [ 67.589712][ T5595] Cannot create hsr debugfs directory [ 67.598952][ T5596] hsr_slave_0: entered promiscuous mode [ 67.605177][ T5596] hsr_slave_1: entered promiscuous mode [ 67.611085][ T5596] debugfs: 'hsr0' already exists in 'hsr' [ 67.616947][ T5596] Cannot create hsr debugfs directory [ 67.625769][ T5594] hsr_slave_0: entered promiscuous mode [ 67.632029][ T5594] hsr_slave_1: entered promiscuous mode [ 67.637910][ T5594] debugfs: 'hsr0' already exists in 'hsr' [ 67.643799][ T5594] Cannot create hsr debugfs directory [ 68.006719][ T5597] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 68.017244][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.025142][ T5597] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 68.034557][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.042730][ T5597] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 68.052600][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.067123][ T5597] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 68.076412][ T5597] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.150186][ T5605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 68.162971][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.170993][ T5605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 68.179823][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.187802][ T5605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 68.196680][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.204606][ T5605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 68.213955][ T5605] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.293941][ T5595] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 68.304436][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.312888][ T5595] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 68.322483][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.330082][ T5595] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 68.339065][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.346803][ T5595] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 68.357774][ T5595] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.402132][ T5597] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.475633][ T5597] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.487135][ T5596] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 68.495747][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.504427][ T5596] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 68.513645][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.527241][ T5596] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 68.535901][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.544238][ T5596] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 68.552768][ T5596] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.565240][ T1109] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.572540][ T1109] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.615386][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.622483][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.656267][ T5605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.698389][ T5594] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 68.708051][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 68.716800][ T5594] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 68.726235][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 68.738845][ T5594] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 68.748661][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 68.756701][ T5594] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 68.763822][ T5600] Bluetooth: hci2: command tx timeout [ 68.763850][ T5600] Bluetooth: hci0: command tx timeout [ 68.776984][ T5594] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 68.814233][ T5595] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.835016][ T5605] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.842273][ T5608] Bluetooth: hci4: command tx timeout [ 68.852133][ T5608] Bluetooth: hci3: command tx timeout [ 68.852332][ T5600] Bluetooth: hci1: command tx timeout [ 68.874969][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.882094][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 68.917065][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.924147][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 68.940418][ T5595] 8021q: adding VLAN 0 to HW filter on device team0 [ 68.972553][ T3383] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.979691][ T3383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.000996][ T3383] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.008147][ T3383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.104754][ T5596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.168950][ T5596] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.201014][ T1089] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.208162][ T1089] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.250874][ T5595] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 69.278550][ T1089] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.285687][ T1089] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.323935][ T5594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.394927][ T5594] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.445562][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.452736][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.500179][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.507325][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.541741][ T5597] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 69.747245][ T5597] veth0_vlan: entered promiscuous mode [ 69.819081][ T5597] veth1_vlan: entered promiscuous mode [ 69.929166][ T5597] veth0_macvtap: entered promiscuous mode [ 69.953643][ T5597] veth1_macvtap: entered promiscuous mode [ 70.005129][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.039063][ T5605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.067192][ T5597] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.118993][ T5595] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.333850][ T5605] veth0_vlan: entered promiscuous mode [ 70.379200][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.388655][ T5605] veth1_vlan: entered promiscuous mode [ 70.408072][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.506597][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.519026][ T5596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.527379][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.557978][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 70.557991][ T29] audit: type=1400 audit(1787639240.270:150): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.AVliWr/syz-tmp" dev="sda1" ino=2042 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 70.595198][ T5605] veth0_macvtap: entered promiscuous mode [ 70.615579][ T29] audit: type=1400 audit(1787639240.310:151): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 70.641983][ T29] audit: type=1400 audit(1787639240.320:152): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.AVliWr/syz-tmp/newroot/dev" dev="tmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 70.678592][ T5605] veth1_macvtap: entered promiscuous mode [ 70.699230][ T29] audit: type=1400 audit(1787639240.320:153): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 70.718294][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.727585][ T29] audit: type=1400 audit(1787639240.330:154): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.AVliWr/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 70.770126][ T5597] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 70.781697][ T29] audit: type=1400 audit(1787639240.330:155): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/root/syzkaller.AVliWr/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=7292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 70.792802][ T5596] veth0_vlan: entered promiscuous mode [ 70.819440][ T29] audit: type=1400 audit(1787639240.360:156): avc: denied { unmount } for pid=5597 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 70.834288][ T5594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.839789][ T29] audit: type=1400 audit(1787639240.360:157): avc: denied { sys_module } for pid=5594 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 70.854844][ T5595] veth0_vlan: entered promiscuous mode [ 70.869064][ T5600] Bluetooth: hci0: command tx timeout [ 70.873848][ T5608] Bluetooth: hci2: command tx timeout [ 70.878399][ T29] audit: type=1400 audit(1787639240.390:158): avc: denied { mounton } for pid=5597 comm="syz-executor" path="/dev/gadgetfs" dev="devtmpfs" ino=2780 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 70.893482][ T5595] veth1_vlan: entered promiscuous mode [ 70.909196][ T29] audit: type=1400 audit(1787639240.390:159): avc: denied { mount } for pid=5597 comm="syz-executor" name="/" dev="gadgetfs" ino=7302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 70.935154][ T5608] Bluetooth: hci1: command tx timeout [ 70.943098][ T13] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.943665][ T5608] Bluetooth: hci3: command tx timeout [ 70.953584][ T13] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.957704][ T5608] Bluetooth: hci4: command tx timeout [ 70.972782][ T5596] veth1_vlan: entered promiscuous mode [ 70.983254][ T5605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.002551][ T1109] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.012204][ T1109] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.147477][ T1109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.180268][ T5596] veth0_macvtap: entered promiscuous mode [ 71.217071][ T5594] veth0_vlan: entered promiscuous mode [ 71.247473][ T5595] veth0_macvtap: entered promiscuous mode [ 71.258808][ T5596] veth1_macvtap: entered promiscuous mode [ 71.300582][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.317549][ T5595] veth1_macvtap: entered promiscuous mode [ 71.345293][ T5594] veth1_vlan: entered promiscuous mode [ 71.353630][ T5596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.363853][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.377526][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.421212][ T1109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.423245][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.431570][ T1109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.442526][ T5595] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.493077][ T41] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.524878][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.568913][ T5594] veth0_macvtap: entered promiscuous mode [ 71.608839][ T5594] veth1_macvtap: entered promiscuous mode [ 71.662975][ T570] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.750040][ T5798] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 71.757813][ T5798] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 72.229422][ T3383] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.450277][ T1109] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.463326][ T48] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.525401][ T1109] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.586672][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 72.642726][ T5594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 72.654083][ T3383] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.678089][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.686343][ T570] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.686387][ T570] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.686422][ T570] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.704299][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.726754][ T570] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.820984][ T570] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.837367][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 72.846546][ T570] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.863490][ T41] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.877289][ T41] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.900846][ T5808] netlink: 12 bytes leftover after parsing attributes in process `syz.0.10'. [ 72.913764][ T5808] Zero length message leads to an empty skb [ 72.921554][ T5608] Bluetooth: hci0: command tx timeout [ 72.935058][ T5608] Bluetooth: hci2: command tx timeout [ 72.962920][ T41] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.003456][ T5608] Bluetooth: hci4: command tx timeout [ 73.003478][ T5600] Bluetooth: hci1: command tx timeout [ 73.003503][ T5600] Bluetooth: hci3: command tx timeout [ 73.042385][ T48] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.066789][ T48] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.085054][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.178634][ T5809] bond0: (slave bond_slave_1): Releasing backup interface [ 73.369642][ T1113] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.385266][ T1113] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.470159][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 73.479211][ T41] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.509898][ T41] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.512019][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 73.542775][ T570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.564153][ T5332] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 73.701439][ T1109] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.728555][ T1109] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 73.784289][ T5332] usb 2-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 73.821186][ T5332] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.836990][ T5332] usb 2-1: Product: syz [ 73.851381][ T5332] usb 2-1: Manufacturer: syz [ 73.868285][ T5332] usb 2-1: SerialNumber: syz [ 73.916050][ T5332] usb 2-1: config 0 descriptor?? [ 74.984472][ T5332] RobotFuzz Open Source InterFace, OSIF 2-1:0.0: version d4.15 found at bus 002 address 002 [ 76.011368][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.051356][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.181358][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.191353][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.291365][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 76.396891][ T29] kauditd_printk_skb: 110 callbacks suppressed [ 76.396907][ T29] audit: type=1400 audit(1787639246.110:270): avc: denied { create } for pid=5852 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 76.629889][ T29] audit: type=1326 audit(1787639246.140:271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 76.770874][ T91] usb 2-1: USB disconnect, device number 2 [ 76.885771][ T29] audit: type=1326 audit(1787639246.140:272): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 77.166924][ T29] audit: type=1400 audit(1787639246.200:273): avc: denied { setopt } for pid=5852 comm="syz.4.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 77.391435][ T29] audit: type=1400 audit(1787639246.270:274): avc: denied { connect } for pid=5846 comm="syz.3.18" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.463215][ T29] audit: type=1400 audit(1787639246.290:275): avc: denied { write } for pid=5846 comm="syz.3.18" laddr=::1 lport=2 faddr=::1 fport=20005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 77.517850][ T29] audit: type=1326 audit(1787639246.330:276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 77.612123][ T29] audit: type=1326 audit(1787639246.330:277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 77.680343][ T29] audit: type=1326 audit(1787639246.330:278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 77.720521][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.4.26'. [ 77.761935][ T29] audit: type=1326 audit(1787639246.390:279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5819 comm="syz.1.12" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f8e72b9e0d9 code=0x7ffc0000 [ 78.276580][ T5886] netlink: 'syz.3.29': attribute type 30 has an invalid length. [ 79.545739][ T3383] IPVS: starting estimator thread 0... [ 79.552965][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 79.565766][ T5898] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 79.575098][ T5897] netlink: 8 bytes leftover after parsing attributes in process `syz.1.35'. [ 79.652920][ T5900] IPVS: using max 36 ests per chain, 86400 per kthread [ 79.886505][ T5909] netlink: 4 bytes leftover after parsing attributes in process `syz.3.38'. [ 80.014546][ T91] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 80.211409][ T91] usb 2-1: Using ep0 maxpacket: 32 [ 80.220735][ T91] usb 2-1: New USB device found, idVendor=0582, idProduct=74ce, bcdDevice=ba.38 [ 80.258521][ T91] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 80.287426][ T91] usb 2-1: config 9 has an invalid interface number: 221 but max is 1 [ 80.309638][ T91] usb 2-1: config 9 has an invalid descriptor of length 0, skipping remainder of the config [ 80.331913][ T24] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 80.343542][ T91] usb 2-1: config 9 has 1 interface, different from the descriptor's value: 2 [ 80.387605][ T91] usb 2-1: config 9 has no interface number 0 [ 80.417732][ T91] usb 2-1: config 9 interface 221 altsetting 64 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 80.480521][ T91] usb 2-1: config 9 interface 221 has no altsetting 0 [ 80.517163][ T91] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.532386][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 80.557152][ T5917] netlink: 68 bytes leftover after parsing attributes in process `syz.2.40'. [ 80.567401][ T24] usb 4-1: unable to get BOS descriptor or descriptor too short [ 80.584124][ T91] usb 2-1: Product: syz [ 80.593421][ T24] usb 4-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40 [ 80.607326][ T91] usb 2-1: Manufacturer: syz [ 80.625918][ T91] usb 2-1: SerialNumber: syz [ 80.640500][ T24] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 80.698976][ T24] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 80.719760][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 80.735834][ T24] usb 4-1: Product: syz [ 80.752177][ T24] usb 4-1: Manufacturer: syz [ 80.770592][ T24] usb 4-1: SerialNumber: syz [ 81.883885][ T10] cfg80211: failed to load regulatory.db [ 81.922392][ T24] usb 4-1: cannot find UAC_HEADER [ 82.098128][ T29] kauditd_printk_skb: 28 callbacks suppressed [ 82.098144][ T29] audit: type=1400 audit(1787639251.810:308): avc: denied { ioctl } for pid=5925 comm="syz.1.44" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=8085 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 82.131372][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 82.150581][ T24] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 82.172760][ T24] usb 4-1: USB disconnect, device number 2 [ 82.249839][ T5927] ======================================================= [ 82.249839][ T5927] WARNING: The mand mount option has been deprecated and [ 82.249839][ T5927] and is ignored by this kernel. Remove the mand [ 82.249839][ T5927] option from the mount to silence this warning. [ 82.249839][ T5927] ======================================================= [ 82.380621][ T29] audit: type=1400 audit(1787639251.950:309): avc: denied { write } for pid=5925 comm="syz.1.44" name="001" dev="devtmpfs" ino=741 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 82.663224][ T29] audit: type=1400 audit(1787639252.000:310): avc: denied { mount } for pid=5925 comm="syz.1.44" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 82.885098][ T29] audit: type=1400 audit(1787639252.000:311): avc: denied { setopt } for pid=5925 comm="syz.1.44" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 83.028863][ T29] audit: type=1400 audit(1787639252.010:312): avc: denied { search } for pid=5925 comm="syz.1.44" name="/" dev="configfs" ino=72 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.234682][ T5609] udevd[5609]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 83.395776][ T29] audit: type=1400 audit(1787639252.010:313): avc: denied { search } for pid=5925 comm="syz.1.44" name="usb_gadget" dev="configfs" ino=3648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 83.814883][ T29] audit: type=1400 audit(1787639253.530:314): avc: denied { unmount } for pid=5596 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 83.849339][ T91] usb 2-1: USB disconnect, device number 3 [ 83.966301][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:9.221/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 84.026850][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.3.47'. [ 84.159995][ T5939] warning: `syz.0.49' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 84.380746][ T29] audit: type=1400 audit(1787639254.090:315): avc: denied { read write } for pid=5942 comm="syz.0.51" name="rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.401423][ T91] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 84.443581][ T29] audit: type=1400 audit(1787639254.120:316): avc: denied { open } for pid=5942 comm="syz.0.51" path="/dev/infiniband/rdma_cm" dev="devtmpfs" ino=1269 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:infiniband_device_t tclass=chr_file permissive=1 [ 84.503339][ T5700] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 84.540254][ T5700] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 84.571425][ T91] usb 2-1: Using ep0 maxpacket: 16 [ 84.607818][ T91] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 84.645120][ T91] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 84.682502][ T91] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 84.734568][ T91] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.774796][ T91] usb 2-1: config 0 descriptor?? [ 85.090735][ T29] audit: type=1400 audit(1787639254.800:317): avc: denied { write } for pid=5954 comm="syz.4.54" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 85.371424][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 85.544334][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 85.558343][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 85.602786][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 85.644314][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 85.866176][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 85.896200][ T10] usb 1-1: Product: syz [ 85.910183][ T10] usb 1-1: Manufacturer: syz [ 85.955426][ T10] usb 1-1: SerialNumber: syz [ 86.078807][ T3383] IPVS: starting estimator thread 0... [ 86.109094][ T5968] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 86.191698][ T5969] IPVS: using max 34 ests per chain, 81600 per kthread [ 86.359708][ T10] usb 1-1: selecting invalid altsetting 1 [ 86.479274][ T10] usb 1-1: unit 6 not found! [ 87.515297][ T9] usb 2-1: USB disconnect, device number 4 [ 87.528667][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.594602][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.688813][ T5974] fuse: Bad value for 'fd' [ 87.708164][ T5943] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 87.824767][ T5943] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 87.962129][ T29] audit: type=1400 audit(1787639257.670:318): avc: denied { read write } for pid=5942 comm="syz.0.51" name="usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.098457][ T5977] syz.3.62 uses obsolete (PF_INET,SOCK_PACKET) [ 88.120458][ T10] usb 1-1: 2:0: cannot get min/max values for control 1 (id 2) [ 88.135844][ T29] audit: type=1400 audit(1787639257.670:319): avc: denied { open } for pid=5942 comm="syz.0.51" path="/dev/usbmon9" dev="devtmpfs" ino=742 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 88.178967][ T5981] syzkaller0: entered promiscuous mode [ 88.184584][ T5981] syzkaller0: entered allmulticast mode [ 88.194349][ T29] audit: type=1400 audit(1787639257.910:320): avc: denied { ioctl } for pid=5976 comm="syz.3.62" path="socket:[10374]" dev="sockfs" ino=10374 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.219146][ T29] audit: type=1400 audit(1787639257.910:321): avc: denied { write } for pid=5978 comm="syz.2.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.263349][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 88.280580][ T10] usb 1-1: USB disconnect, device number 2 [ 88.280673][ T5983] Driver unsupported XDP return value 0 on prog (id 6) dev N/A, expect packet loss! [ 88.377736][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 89.027789][ T5994] hpfs: Bad magic ... probably not HPFS [ 89.696600][ T29] audit: type=1400 audit(1787639258.750:322): avc: denied { read } for pid=5988 comm="syz.3.67" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.742249][ T29] audit: type=1400 audit(1787639258.750:323): avc: denied { open } for pid=5988 comm="syz.3.67" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 89.825889][ T29] audit: type=1400 audit(1787639258.810:324): avc: denied { mount } for pid=5988 comm="syz.3.67" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 89.896961][ T1109] IPVS: starting estimator thread 0... [ 89.901511][ T29] audit: type=1400 audit(1787639259.410:325): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 89.978394][ T29] audit: type=1400 audit(1787639259.650:326): avc: denied { write } for pid=6002 comm="syz.4.73" name="radio0" dev="devtmpfs" ino=956 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 90.002984][ T6004] IPVS: using max 36 ests per chain, 86400 per kthread [ 90.243610][ T29] audit: type=1400 audit(1787639259.950:327): avc: denied { create } for pid=6012 comm="syz.0.77" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 90.281715][ T6013] tipc: Started in network mode [ 90.305793][ T6013] tipc: Node identity de30103daa4, cluster identity 4711 [ 90.329613][ T6013] tipc: Enabled bearer , priority 0 [ 90.364828][ T6010] kvm: pic: non byte write [ 90.410372][ T6017] syzkaller0: entered promiscuous mode [ 90.416063][ T6017] syzkaller0: entered allmulticast mode [ 90.422920][ T6017] tipc: Resetting bearer [ 90.437538][ T6012] tipc: Resetting bearer [ 91.081512][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 91.253842][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 91.266340][ T9] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 91.289706][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 91.306193][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 91.327561][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.342168][ T9] usb 4-1: config 0 descriptor?? [ 91.355456][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 91.719380][ T6012] tipc: Disabling bearer [ 91.727992][ T6025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.80'. [ 91.737955][ T5714] tipc: Node number set to 1953501245 [ 91.743632][ T6027] block nbd2: not configured, cannot reconfigure [ 92.540888][ T3383] IPVS: starting estimator thread 0... [ 92.672625][ T6040] IPVS: using max 34 ests per chain, 81600 per kthread [ 93.149611][ T6046] hpfs: Bad magic ... probably not HPFS [ 93.657952][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 93.657976][ T29] audit: type=1400 audit(1787639263.370:333): avc: denied { setopt } for pid=6052 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 93.878593][ T29] audit: type=1400 audit(1787639263.420:334): avc: denied { write } for pid=6052 comm="syz.2.88" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 94.556829][ T5700] usb 4-1: USB disconnect, device number 3 [ 94.619740][ T6056] netlink: 144 bytes leftover after parsing attributes in process `syz.0.89'. [ 94.730588][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz.3.93'. [ 94.758245][ T6061] block nbd3: not configured, cannot reconfigure [ 94.987002][ T29] audit: type=1400 audit(1787639264.700:335): avc: denied { ioctl } for pid=6076 comm="syz.3.97" path="/dev/binderfs/binder0" dev="binder" ino=16 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 94.989551][ T6077] binder: 6076:6077 ioctl c0306201 200000000080 returned -14 [ 95.041311][ T6077] binder: 6076:6077 ioctl c0306201 2000000003c0 returned -14 [ 95.062116][ T29] audit: type=1400 audit(1787639264.700:336): avc: denied { set_context_mgr } for pid=6076 comm="syz.3.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 95.178626][ T29] audit: type=1400 audit(1787639264.890:337): avc: denied { connect } for pid=6080 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.186216][ T6082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.99'. [ 95.202174][ T29] audit: type=1400 audit(1787639264.890:338): avc: denied { write } for pid=6080 comm="syz.2.99" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 95.233408][ T29] audit: type=1400 audit(1787639264.920:339): avc: denied { read write } for pid=6078 comm="syz.0.98" name="sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.266607][ T29] audit: type=1400 audit(1787639264.920:340): avc: denied { open } for pid=6078 comm="syz.0.98" path="/dev/sg0" dev="devtmpfs" ino=800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 95.286317][ T6084] oom_control is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.301009][ T29] audit: type=1400 audit(1787639264.920:341): avc: denied { ioctl } for pid=6078 comm="syz.0.98" path="/dev/sg0" dev="devtmpfs" ino=800 ioctlcmd=0x5393 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1 [ 96.329892][ T29] audit: type=1400 audit(1787639266.040:342): avc: denied { read } for pid=6095 comm="syz.3.106" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 96.492095][ T5700] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 96.549106][ T6108] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 96.557064][ T6108] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 96.651793][ T5700] usb 3-1: Using ep0 maxpacket: 16 [ 96.661518][ T91] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 96.674528][ T5700] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 96.692858][ T5700] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 96.703613][ T5700] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 96.718449][ T5700] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.782222][ T5700] usb 3-1: config 0 descriptor?? [ 96.811625][ T91] usb 4-1: device descriptor read/64, error -71 [ 96.834042][ T5700] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 96.892949][ T6117] netlink: 'syz.1.112': attribute type 29 has an invalid length. [ 96.912548][ T6117] netlink: 'syz.1.112': attribute type 3 has an invalid length. [ 97.061468][ T91] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 97.231464][ T91] usb 4-1: device descriptor read/64, error -71 [ 97.361804][ T91] usb usb4-port1: attempt power cycle [ 97.711948][ T91] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 97.751903][ T91] usb 4-1: device descriptor read/8, error -71 [ 98.001442][ T91] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 98.022779][ T91] usb 4-1: device descriptor read/8, error -71 [ 98.142866][ T91] usb usb4-port1: unable to enumerate USB device [ 98.523789][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805559dc00: rx timeout, send abort [ 99.032713][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88805559dc00: abort rx timeout. Force session deactivation [ 99.221426][ T5332] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 99.267518][ T9] usb 3-1: USB disconnect, device number 2 [ 99.364639][ T29] kauditd_printk_skb: 16 callbacks suppressed [ 99.364655][ T29] audit: type=1400 audit(1787639269.080:359): avc: denied { read } for pid=6139 comm="syz.4.120" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.473552][ T29] audit: type=1400 audit(1787639269.080:360): avc: denied { read open } for pid=6139 comm="syz.4.120" path="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 99.503322][ T6144] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 99.505959][ T5332] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 99.509954][ T6144] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 99.522408][ T6144] vhci_hcd vhci_hcd.0: Device attached [ 99.547590][ T5332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.559698][ T5332] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.570795][ T5332] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 99.588741][ T5332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.600161][ T5332] usb 2-1: config 0 descriptor?? [ 99.781566][ T5700] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 99.871662][ T9] usb 3-1: new low-speed USB device number 3 using dummy_hcd [ 99.930413][ T29] audit: type=1400 audit(1787639269.640:361): avc: denied { write } for pid=6159 comm="syz.3.127" name="uinput" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.037734][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.056515][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.064571][ T9] usb 3-1: can't read configurations, error -61 [ 100.091504][ T5713] usb 1-1: new low-speed USB device number 3 using dummy_hcd [ 100.100006][ T5332] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 100.211822][ T9] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 100.314787][ T5713] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 100.332945][ T5713] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 100.344491][ T5713] usb 1-1: config 0 has no interface number 0 [ 100.354170][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 100.367490][ T5713] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 100.398312][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 100.413846][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 100.424383][ T5713] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 100.438981][ T5713] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 100.452297][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 100.463170][ T9] usb 3-1: can't read configurations, error -61 [ 100.469529][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 100.489308][ T9] usb usb3-port1: attempt power cycle [ 100.504964][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 100.566429][ T5713] usb 1-1: config 0 descriptor?? [ 100.592201][ T6158] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.600582][ T6158] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 100.861740][ T9] usb 3-1: new low-speed USB device number 5 using dummy_hcd [ 100.874613][ T5713] ldusb 1-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 100.938069][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.154794][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 101.166139][ T24] usb 1-1: USB disconnect, device number 3 [ 101.187667][ T9] usb 3-1: can't read configurations, error -61 [ 101.203755][ T24] ldusb 1-1:0.55: LD USB Device #1 now disconnected [ 101.261183][ T6171] netlink: 144 bytes leftover after parsing attributes in process `syz.4.130'. [ 101.354008][ T9] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 101.386131][ T9] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 101.399280][ T9] usb 3-1: unable to read config index 0 descriptor/start: -61 [ 101.404112][ T29] audit: type=1400 audit(1787639271.120:362): avc: denied { connect } for pid=6174 comm="syz.4.132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 101.408807][ T9] usb 3-1: can't read configurations, error -61 [ 101.433781][ T29] audit: type=1400 audit(1787639271.140:363): avc: denied { read write } for pid=6174 comm="syz.4.132" name="ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.451720][ T9] usb usb3-port1: unable to enumerate USB device [ 101.466449][ T29] audit: type=1400 audit(1787639271.140:364): avc: denied { open } for pid=6174 comm="syz.4.132" path="/dev/ppp" dev="devtmpfs" ino=708 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 101.491486][ T29] audit: type=1400 audit(1787639271.140:365): avc: denied { ioctl } for pid=6174 comm="syz.4.132" path="/dev/ppp" dev="devtmpfs" ino=708 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 102.231481][ T91] usb 2-1: USB disconnect, device number 5 [ 102.895686][ T6145] vhci_hcd: connection reset by peer [ 102.937688][ T13] vhci_hcd vhci_hcd.2: stop threads [ 102.971409][ T13] vhci_hcd vhci_hcd.2: release socket [ 102.999874][ T13] vhci_hcd vhci_hcd.2: disconnect device [ 103.010732][ T6207] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 103.024472][ T29] audit: type=1400 audit(1787639272.730:366): avc: denied { ioctl } for pid=6206 comm="syz.4.146" path="socket:[9888]" dev="sockfs" ino=9888 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.229695][ T29] audit: type=1400 audit(1787639272.940:367): avc: denied { write } for pid=6212 comm="syz.1.149" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 103.289450][ T29] audit: type=1400 audit(1787639273.000:368): avc: denied { bind } for pid=6216 comm="syz.2.150" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 103.351884][ T6219] sctp: [Deprecated]: syz.1.149 (pid 6219) Use of int in max_burst socket option. [ 103.351884][ T6219] Use struct sctp_assoc_value instead [ 103.397721][ T6215] netlink: 'syz.0.148': attribute type 3 has an invalid length. [ 103.418609][ T6224] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 103.425836][ T6215] netlink: 666 bytes leftover after parsing attributes in process `syz.0.148'. [ 105.191462][ T5700] vhci_hcd vhci_hcd.2: vhci_device speed not set [ 105.530597][ T6239] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(3) [ 105.537144][ T6239] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 105.736974][ T6239] vhci_hcd vhci_hcd.0: Device attached [ 105.791958][ T10] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 105.960703][ T6250] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 105.991481][ T5713] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 106.003591][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.037175][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.063931][ T10] usb 2-1: can't read configurations, error -61 [ 106.224558][ T10] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 106.402531][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.425685][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.440681][ T10] usb 2-1: can't read configurations, error -61 [ 106.456236][ T10] usb usb2-port1: attempt power cycle [ 106.515240][ T6259] netlink: 144 bytes leftover after parsing attributes in process `syz.0.154'. [ 106.697181][ T6265] tipc: Started in network mode [ 106.712732][ T6265] tipc: Node identity a66583dfd095, cluster identity 4711 [ 106.738563][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 106.738585][ T29] audit: type=1400 audit(1787639276.450:370): avc: denied { create } for pid=6266 comm="syz.0.164" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 106.752404][ T6265] tipc: Enabled bearer , priority 0 [ 106.821501][ T10] usb 2-1: new low-speed USB device number 8 using dummy_hcd [ 106.852497][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 106.869002][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 106.881421][ T10] usb 2-1: can't read configurations, error -61 [ 106.907128][ T6268] syzkaller0: entered promiscuous mode [ 106.977089][ T6268] syzkaller0: entered allmulticast mode [ 107.021763][ T10] usb 2-1: new low-speed USB device number 9 using dummy_hcd [ 107.056850][ T6265] tipc: Resetting bearer [ 107.068066][ T10] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 107.088243][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 107.098263][ T10] usb 2-1: can't read configurations, error -61 [ 107.121606][ T10] usb usb2-port1: unable to enumerate USB device [ 107.202947][ T6264] tipc: Resetting bearer [ 107.266727][ T6264] tipc: Disabling bearer [ 107.992239][ T6242] vhci_hcd: connection reset by peer [ 108.004908][ T6282] syzkaller0: entered promiscuous mode [ 108.027703][ T58] vhci_hcd vhci_hcd.1: stop threads [ 108.051933][ T6282] syzkaller0: entered allmulticast mode [ 108.065857][ T58] vhci_hcd vhci_hcd.1: release socket [ 108.091036][ T58] vhci_hcd vhci_hcd.1: disconnect device [ 108.132305][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 108.163004][ T6283] block nbd0: not configured, cannot reconfigure [ 108.179613][ T6283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.168'. [ 109.381532][ T6310] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 109.388083][ T6310] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 109.427201][ T6310] vhci_hcd vhci_hcd.0: Device attached [ 109.484172][ T5714] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 109.571427][ T10] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 109.631531][ T5714] usb 5-1: device descriptor read/64, error -71 [ 109.661787][ T24] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 109.911850][ T5714] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 110.083242][ T5714] usb 5-1: device descriptor read/64, error -71 [ 110.229204][ T5714] usb usb5-port1: attempt power cycle [ 110.279864][ T5332] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 110.502106][ T10] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 110.511962][ T5332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.523923][ T10] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 110.539870][ T5332] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.547569][ T5332] usb 1-1: can't read configurations, error -61 [ 110.553940][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 110.568015][ T10] usb 2-1: config 0 descriptor?? [ 110.591450][ T5714] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 110.611866][ T5714] usb 5-1: device descriptor read/8, error -71 [ 110.711463][ T5332] usb 1-1: new low-speed USB device number 5 using dummy_hcd [ 110.787120][ T10] usbhid 2-1:0.0: can't add hid device: -71 [ 110.799565][ T10] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 110.820112][ T10] usb 2-1: USB disconnect, device number 10 [ 110.851848][ T5714] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 110.872152][ T5332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 110.883528][ T5714] usb 5-1: device descriptor read/8, error -71 [ 110.890763][ T5332] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 110.898571][ T5332] usb 1-1: can't read configurations, error -61 [ 110.905367][ T5332] usb usb1-port1: attempt power cycle [ 110.911270][ T6325] syzkaller0: entered promiscuous mode [ 110.916903][ T6325] syzkaller0: entered allmulticast mode [ 110.992204][ T5714] usb usb5-port1: unable to enumerate USB device [ 111.152392][ T5713] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 111.623916][ T5332] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 111.663063][ T5332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 111.674129][ T5332] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 111.681820][ T5332] usb 1-1: can't read configurations, error -61 [ 111.691425][ T10] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 112.739967][ T29] audit: type=1400 audit(1787639282.250:371): avc: denied { mount } for pid=6340 comm="syz.3.190" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.743049][ T5332] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 112.842863][ T5332] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 112.855976][ T5332] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 112.859823][ T29] audit: type=1400 audit(1787639282.490:372): avc: denied { unmount } for pid=5594 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 112.863910][ T5332] usb 1-1: can't read configurations, error -61 [ 112.892514][ T5332] usb usb1-port1: unable to enumerate USB device [ 112.905286][ T10] usb 2-1: device descriptor read/all, error -71 [ 112.971479][ T24] usb 33-1: device descriptor read/64, error -71 [ 113.176396][ T6354] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 113.221438][ T24] usb 33-1: new low-speed USB device number 3 using vhci_hcd [ 113.250219][ T29] audit: type=1400 audit(1787639282.960:373): avc: denied { execute } for pid=6346 comm="syz.1.193" dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.271811][ T6357] process 'syz.1.193' launched '/dev/fd/6' with NULL argv: empty string added [ 113.308039][ T29] audit: type=1400 audit(1787639283.010:374): avc: denied { execute_no_trans } for pid=6346 comm="syz.1.193" path=2F6D656D66643A5B0BDB58AE5B1AA9FDFAADD16D64C8854858A9250C1A65E0202864656C6574656429 dev="tmpfs" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.377926][ T29] audit: type=1400 audit(1787639283.090:375): avc: denied { mounton } for pid=6346 comm="syz.1.193" path="/35/file0" dev="tmpfs" ino=202 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 113.424116][ T29] audit: type=1400 audit(1787639283.130:376): avc: denied { ioctl } for pid=6346 comm="syz.1.193" path="/dev/vhost-vsock" dev="devtmpfs" ino=1272 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 113.606438][ T6354] nvme nvme0: failed to connect socket: -111 [ 113.760350][ T29] audit: type=1400 audit(1787639283.470:377): avc: denied { name_bind } for pid=6366 comm="syz.3.197" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 113.864470][ T6311] vhci_hcd: connection closed [ 113.866078][ T5854] vhci_hcd vhci_hcd.0: stop threads [ 113.888058][ T5854] vhci_hcd vhci_hcd.0: release socket [ 113.908280][ T5854] vhci_hcd vhci_hcd.0: disconnect device [ 114.119307][ T6374] hpfs: Bad magic ... probably not HPFS [ 115.695362][ T29] audit: type=1400 audit(1787639285.410:378): avc: denied { read } for pid=6390 comm="syz.2.204" name="v4l-subdev5" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 115.816979][ T29] audit: type=1400 audit(1787639285.430:379): avc: denied { open } for pid=6390 comm="syz.2.204" path="/dev/v4l-subdev5" dev="devtmpfs" ino=946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.124281][ T29] audit: type=1400 audit(1787639285.500:380): avc: denied { ioctl } for pid=6390 comm="syz.2.204" path="/dev/v4l-subdev5" dev="devtmpfs" ino=946 ioctlcmd=0x5602 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 116.801416][ T91] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 116.842084][ T5332] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 116.951874][ T91] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 116.961991][ T91] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 116.970853][ T91] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 116.982103][ T91] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 116.990102][ T91] usb 1-1: Manufacturer: syz [ 116.993377][ T5332] usb 4-1: unable to get BOS descriptor or descriptor too short [ 117.004350][ T91] usb 1-1: config 0 descriptor?? [ 117.006252][ T5332] usb 4-1: not running at top speed; connect to a high speed hub [ 117.022533][ T5332] usb 4-1: New USB device found, idVendor=046d, idProduct=c291, bcdDevice=34.88 [ 117.032763][ T5332] usb 4-1: config 11 has an invalid interface number: 20 but max is 0 [ 117.041119][ T5332] usb 4-1: config 11 has no interface number 0 [ 117.047693][ T5332] usb 4-1: config 11 interface 20 has no altsetting 0 [ 117.056213][ T5332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.064354][ T5332] usb 4-1: Product: syz [ 117.069232][ T5332] usb 4-1: Manufacturer: syz [ 117.071437][ T91] rc_core: IR keymap rc-hauppauge not found [ 117.073880][ T5332] usb 4-1: SerialNumber: syz [ 117.080109][ T91] Registered IR keymap rc-empty [ 117.095309][ T91] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 117.107798][ T91] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input6 [ 117.221942][ T6401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 117.230817][ T6401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 117.311084][ T5332] usb 4-1: USB disconnect, device number 8 [ 117.327119][ T10] usb 1-1: USB disconnect, device number 8 [ 117.619235][ T6427] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 118.652282][ T24] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 119.007146][ T5332] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 119.018965][ T6427] nvme nvme0: failed to connect socket: -512 [ 119.055839][ T5332] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 119.492624][ T5332] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 119.712651][ T5332] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 119.734124][ T5332] usb 1-1: no configurations [ 119.749198][ T5332] usb 1-1: can't read configurations, error -22 [ 119.771486][ T5713] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 119.891431][ T5332] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 119.934398][ T5713] usb 2-1: unable to get BOS descriptor or descriptor too short [ 120.066351][ T5713] usb 2-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 120.244932][ T5713] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.258250][ T5332] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 120.275739][ T5713] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 120.285369][ T5332] usb 1-1: no configurations [ 120.296959][ T5332] usb 1-1: can't read configurations, error -22 [ 120.307708][ T5713] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.317345][ T5332] usb usb1-port1: attempt power cycle [ 120.326445][ T5713] usb 2-1: Product: syz [ 120.344685][ T5713] usb 2-1: Manufacturer: syz [ 120.349555][ T5713] usb 2-1: SerialNumber: syz [ 120.448987][ T5713] usb 2-1: selecting invalid altsetting 1 [ 120.478855][ T5713] usb 2-1: unit 6 not found! [ 120.548746][ T6467] netlink: 8 bytes leftover after parsing attributes in process `syz.4.230'. [ 120.671553][ T5332] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 120.712468][ T5332] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 120.726680][ T5332] usb 1-1: no configurations [ 120.737386][ T5332] usb 1-1: can't read configurations, error -22 [ 120.796475][ T6469] hpfs: Bad magic ... probably not HPFS [ 120.893805][ T5332] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 120.931755][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 120.980706][ T5332] usb 1-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice=f6.00 [ 121.041256][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.062948][ T5332] usb 1-1: no configurations [ 121.098281][ T5332] usb 1-1: can't read configurations, error -22 [ 121.149412][ T5332] usb usb1-port1: unable to enumerate USB device [ 121.168736][ T6443] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 121.192059][ T6443] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 121.210762][ T5713] usb 2-1: 2:0: cannot get min/max values for control 1 (id 2) [ 121.298341][ T5713] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 121.317349][ T5713] usb 2-1: USB disconnect, device number 13 [ 121.385560][ T5975] udevd[5975]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 122.270073][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 122.270089][ T29] audit: type=1400 audit(1787639291.980:383): avc: denied { map_create } for pid=6478 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.343340][ T29] audit: type=1400 audit(1787639291.980:384): avc: denied { map_read map_write } for pid=6478 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.403297][ T29] audit: type=1400 audit(1787639292.010:385): avc: denied { prog_load } for pid=6478 comm="syz.2.234" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.573697][ T29] audit: type=1400 audit(1787639292.290:386): avc: denied { prog_run } for pid=6485 comm="syz.0.236" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 122.678098][ T6489] netlink: 16 bytes leftover after parsing attributes in process `syz.1.237'. [ 122.845285][ T6493] netlink: 144 bytes leftover after parsing attributes in process `syz.1.239'. [ 122.928671][ T6495] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 123.081599][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 123.135365][ T6497] block nbd1: not configured, cannot reconfigure [ 123.155702][ T6497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.240'. [ 123.198542][ T6495] nvme nvme0: failed to connect socket: -111 [ 124.205828][ T29] audit: type=1400 audit(1787639293.920:387): avc: denied { read } for pid=6513 comm="syz.2.245" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.277694][ T29] audit: type=1400 audit(1787639293.920:388): avc: denied { open } for pid=6513 comm="syz.2.245" path="/dev/autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.349119][ T29] audit: type=1400 audit(1787639293.950:389): avc: denied { ioctl } for pid=6513 comm="syz.2.245" path="/dev/autofs" dev="devtmpfs" ino=98 ioctlcmd=0x9375 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 124.415839][ T29] audit: type=1400 audit(1787639294.050:390): avc: denied { write } for pid=6517 comm="syz.3.246" name="subsystems" dev="configfs" ino=3439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.418755][ T6518] nvmet: adding nsid 1 to subsystem testsubsys [ 124.476783][ T29] audit: type=1400 audit(1787639294.050:391): avc: denied { add_name } for pid=6517 comm="syz.3.246" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 124.580056][ T29] audit: type=1400 audit(1787639294.060:392): avc: denied { create } for pid=6517 comm="syz.3.246" name="testsubsys" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 124.676240][ T6528] netlink: 144 bytes leftover after parsing attributes in process `syz.0.250'. [ 124.696742][ T3383] nvmet: Created nvm controller 1 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 124.757260][ T6518] nvme nvme0: creating 2 I/O queues. [ 124.858506][ T6518] nvme nvme0: new ctrl: "testsubsys" [ 125.604582][ T6548] size and base must be multiples of 4 kiB [ 125.610438][ T6548] CPU: 1 UID: 0 PID: 6548 Comm: syz.0.254 Not tainted syzkaller #0 PREEMPT(full) [ 125.610466][ T6548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 125.610485][ T6548] Call Trace: [ 125.610492][ T6548] [ 125.610500][ T6548] dump_stack_lvl+0x100/0x190 [ 125.610552][ T6548] mtrr_add.cold+0x74/0x87 [ 125.610578][ T6548] mtrr_ioctl+0x25a/0xcf0 [ 125.610610][ T6548] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 125.610641][ T6548] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.610671][ T6548] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 125.610715][ T6548] ? __pfx_mtrr_ioctl+0x10/0x10 [ 125.610744][ T6548] proc_reg_unlocked_ioctl+0x229/0x320 [ 125.610772][ T6548] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 125.610798][ T6548] __x64_sys_ioctl+0x18e/0x210 [ 125.610827][ T6548] do_syscall_64+0x123/0x790 [ 125.610854][ T6548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.610873][ T6548] RIP: 0033:0x7f424cd9e0d9 [ 125.610895][ T6548] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.610918][ T6548] RSP: 002b:00007f424dbe4028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 125.610943][ T6548] RAX: ffffffffffffffda RBX: 00007f424d026180 RCX: 00007f424cd9e0d9 [ 125.610956][ T6548] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 125.610968][ T6548] RBP: 00007f424ce35024 R08: 0000000000000000 R09: 0000000000000000 [ 125.610980][ T6548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.610992][ T6548] R13: 00007f424d026218 R14: 00007f424d026180 R15: 00007ffc68d613c8 [ 125.611020][ T6548] [ 126.021175][ T6553] netlink: 8 bytes leftover after parsing attributes in process `syz.4.256'. [ 126.213067][ T6556] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 126.496298][ T6565] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 126.503898][ T6565] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 126.541406][ T6567] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 127.405013][ T1307] ieee802154 phy0 wpan0: encryption failed: -22 [ 127.418216][ T1307] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.448722][ T6567] nvme nvme1: failed to connect socket: -512 [ 127.625244][ T6583] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 128.612589][ T24] logitech-hidpp-device 0005:046D:B012.0004: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 128.625308][ T1170] nvmet: Created nvm controller 2 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 128.717182][ T6583] nvme nvme1: creating 2 I/O queues. [ 128.782096][ T6591] fido_id[6591]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 128.856498][ T6583] nvme nvme1: new ctrl: "testsubsys" [ 129.208663][ T6602] size and base must be multiples of 4 kiB [ 129.214632][ T6602] CPU: 1 UID: 0 PID: 6602 Comm: syz.1.269 Not tainted syzkaller #0 PREEMPT(full) [ 129.214662][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 129.214676][ T6602] Call Trace: [ 129.214683][ T6602] [ 129.214692][ T6602] dump_stack_lvl+0x100/0x190 [ 129.214729][ T6602] mtrr_add.cold+0x74/0x87 [ 129.214752][ T6602] mtrr_ioctl+0x25a/0xcf0 [ 129.214782][ T6602] ? ioctl_has_perm.constprop.0.isra.0+0x380/0x540 [ 129.214809][ T6602] ? __pfx_mtrr_ioctl+0x10/0x10 [ 129.214836][ T6602] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 129.214879][ T6602] ? __pfx_mtrr_ioctl+0x10/0x10 [ 129.214908][ T6602] proc_reg_unlocked_ioctl+0x229/0x320 [ 129.214932][ T6602] ? __pfx_proc_reg_unlocked_ioctl+0x10/0x10 [ 129.214958][ T6602] __x64_sys_ioctl+0x18e/0x210 [ 129.214986][ T6602] do_syscall_64+0x123/0x790 [ 129.215012][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.215032][ T6602] RIP: 0033:0x7f8e72b9e0d9 [ 129.215048][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.215067][ T6602] RSP: 002b:00007f8e73a42028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.215086][ T6602] RAX: ffffffffffffffda RBX: 00007f8e72e26180 RCX: 00007f8e72b9e0d9 [ 129.215099][ T6602] RDX: 0000200000000a00 RSI: 0000000040104d01 RDI: 0000000000000005 [ 129.215111][ T6602] RBP: 00007f8e72c35024 R08: 0000000000000000 R09: 0000000000000000 [ 129.215122][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.215133][ T6602] R13: 00007f8e72e26218 R14: 00007f8e72e26180 R15: 00007ffc794b4df8 [ 129.215160][ T6602] [ 129.488499][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.272'. [ 129.707844][ T6612] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 129.715327][ T6612] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 130.785140][ T6625] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 130.857632][ T58] nvmet: Created nvm controller 3 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 130.920363][ T6625] nvme nvme2: creating 2 I/O queues. [ 130.945521][ T6625] nvme nvme2: new ctrl: "testsubsys" [ 131.044610][ T6638] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 131.371647][ T6638] nvme nvme3: failed to connect socket: -111 [ 131.559571][ T5714] logitech-hidpp-device 0005:046D:B012.0005: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 131.597196][ T5714] hid-generic 0000:0000:0000.0006: unknown main item tag 0x0 [ 131.626046][ T5714] hid-generic 0000:0000:0000.0006: hidraw1: HID v0.00 Device [syz1] on syz0 [ 131.681857][ T5332] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 131.862801][ T5332] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 131.886145][ T5332] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 131.905326][ T5332] usb 3-1: config 0 has no interface number 0 [ 131.921445][ T5332] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 131.944194][ T5332] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 131.973106][ T5332] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 131.994117][ T5332] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 132.022169][ T5332] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 132.042316][ T5332] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 132.072754][ T5332] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.104039][ T5332] usb 3-1: config 0 descriptor?? [ 132.119728][ T6651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.141476][ T6651] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 132.157436][ T5332] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 132.260037][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 132.260052][ T29] audit: type=1326 audit(1787639301.970:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424cd9e0d9 code=0x7ffc0000 [ 132.331418][ T29] audit: type=1326 audit(1787639301.970:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f424cd9e0d9 code=0x7ffc0000 [ 132.359798][ T29] audit: type=1326 audit(1787639301.980:409): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f424cd5e90e code=0x7ffc0000 [ 132.386985][ T29] audit: type=1326 audit(1787639301.980:410): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.413615][ T29] audit: type=1326 audit(1787639301.980:411): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.445911][ T29] audit: type=1326 audit(1787639301.980:412): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.473350][ T29] audit: type=1326 audit(1787639301.980:413): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.475321][ T5332] usb 3-1: USB disconnect, device number 7 [ 132.500102][ C0] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 132.500632][ T29] audit: type=1326 audit(1787639302.100:414): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.551449][ T29] audit: type=1326 audit(1787639302.260:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.612348][ T10] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 132.629080][ T29] audit: type=1326 audit(1787639302.340:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=6660 comm="syz.0.290" exe="/root/ci-upstream-kasan-gce-selinux-root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f424cd9dd6b code=0x7ffc0000 [ 132.658133][ T5332] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 132.785192][ T10] usb 1-1: New USB device found, idVendor=1964, idProduct=0001, bcdDevice=d4.15 [ 132.815624][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.825301][ T10] usb 1-1: Product: syz [ 132.831579][ T10] usb 1-1: Manufacturer: syz [ 132.842168][ T10] usb 1-1: SerialNumber: syz [ 132.857796][ T10] usb 1-1: config 0 descriptor?? [ 133.996643][ T10] RobotFuzz Open Source InterFace, OSIF 1-1:0.0: version d4.15 found at bus 001 address 013 [ 134.109222][ T6677] netlink: 144 bytes leftover after parsing attributes in process `syz.2.296'. [ 134.228915][ T6683] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 134.280870][ T1089] nvmet: Created nvm controller 4 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 134.298161][ T6683] nvme nvme3: creating 2 I/O queues. [ 134.307355][ T6683] nvme nvme3: new ctrl: "testsubsys" [ 134.321418][ T5714] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 134.472072][ T5714] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 134.483774][ T5714] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 134.493423][ T91] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 134.501753][ T5714] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.513345][ T5714] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 134.521670][ T5714] usb 5-1: Manufacturer: syz [ 134.529784][ T5714] usb 5-1: config 0 descriptor?? [ 134.582042][ T5714] rc_core: IR keymap rc-hauppauge not found [ 134.588054][ T5714] Registered IR keymap rc-empty [ 134.594748][ T5714] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 134.609406][ T5714] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 134.641575][ T91] usb 2-1: device descriptor read/64, error -71 [ 134.660900][ T6693] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 134.750979][ T6678] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 134.778187][ T6678] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 134.892060][ T91] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 134.974433][ T24] usb 5-1: USB disconnect, device number 6 [ 135.051935][ T91] usb 2-1: device descriptor read/64, error -71 [ 135.115295][ T6693] nvme nvme4: failed to connect socket: -111 [ 135.155066][ T10] hid-generic 0000:0000:0000.0007: unknown main item tag 0x0 [ 135.179654][ T10] hid-generic 0000:0000:0000.0007: hidraw0: HID v0.00 Device [syz1] on syz0 [ 135.182403][ T91] usb usb2-port1: attempt power cycle [ 135.338526][ T24] usb 1-1: USB disconnect, device number 13 [ 135.697580][ T91] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 135.752591][ T91] usb 2-1: device descriptor read/8, error -71 [ 136.525265][ T6714] netlink: 'syz.4.306': attribute type 23 has an invalid length. [ 136.551868][ T10] logitech-hidpp-device 0005:046D:B012.0008: item fetching failed at offset 3/4 [ 136.581674][ T91] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 137.329998][ T10] logitech-hidpp-device 0005:046D:B012.0008: hidpp_probe:parse failed [ 137.376564][ T10] logitech-hidpp-device 0005:046D:B012.0008: probe with driver logitech-hidpp-device failed with error -22 [ 137.421806][ T91] usb 2-1: device descriptor read/8, error -71 [ 137.531765][ T91] usb usb2-port1: unable to enumerate USB device [ 137.593238][ T6722] netlink: 144 bytes leftover after parsing attributes in process `syz.1.310'. [ 137.725224][ T6726] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 137.754081][ T5714] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 137.934246][ T5714] usb 3-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 138.016626][ T5714] usb 3-1: config 0 has an invalid interface number: 55 but max is 0 [ 138.130960][ T5714] usb 3-1: config 0 has no interface number 0 [ 138.233469][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 138.274814][ T5714] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8 [ 138.309578][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 138.329546][ T13] nvmet: Created nvm controller 5 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 138.369916][ T5714] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 138.396335][ T6726] nvme nvme4: creating 2 I/O queues. [ 138.398004][ T5714] usb 3-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8 [ 138.431385][ T5714] usb 3-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 138.474873][ T5714] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 138.507313][ T5714] usb 3-1: config 0 descriptor?? [ 138.547687][ T6719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.556771][ T6726] nvme nvme4: new ctrl: "testsubsys" [ 138.589359][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.1.314'. [ 138.593082][ T6719] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 138.690772][ T5714] ldusb 3-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 138.751293][ T29] kauditd_printk_skb: 44 callbacks suppressed [ 138.751307][ T29] audit: type=1400 audit(1787639308.460:461): avc: denied { bind } for pid=6742 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.829594][ T29] audit: type=1400 audit(1787639308.540:462): avc: denied { setopt } for pid=6742 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.870526][ T29] audit: type=1400 audit(1787639308.570:463): avc: denied { accept } for pid=6742 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 138.910620][ T29] audit: type=1400 audit(1787639308.570:464): avc: denied { create } for pid=6742 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.937740][ T29] audit: type=1400 audit(1787639308.580:465): avc: denied { setopt } for pid=6742 comm="syz.3.317" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 138.942162][ T6747] netlink: 9 bytes leftover after parsing attributes in process `syz.3.317'. [ 138.966535][ T5733] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 138.980667][ T5714] usb 3-1: USB disconnect, device number 8 [ 138.986620][ C1] ldusb 3-1:0.55: usb_submit_urb failed (-19) [ 139.002546][ T5714] ldusb 3-1:0.55: LD USB Device #0 now disconnected [ 139.023965][ T6747] 0: renamed from hsr0 (while UP) [ 139.094363][ T6747] 0: entered allmulticast mode [ 139.106955][ T6747] hsr_slave_0: entered allmulticast mode [ 139.123243][ T6747] hsr_slave_1: entered allmulticast mode [ 139.129779][ T6747] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 139.142525][ T5733] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 139.157259][ T5733] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 139.181829][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 139.186287][ T5713] logitech-hidpp-device 0005:046D:B012.0009: item fetching failed at offset 3/4 [ 139.202498][ T6752] netlink: 'syz.1.319': attribute type 23 has an invalid length. [ 139.224478][ T5733] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 139.230184][ T5713] logitech-hidpp-device 0005:046D:B012.0009: hidpp_probe:parse failed [ 139.241035][ T5733] usb 1-1: Manufacturer: syz [ 139.246512][ T5713] logitech-hidpp-device 0005:046D:B012.0009: probe with driver logitech-hidpp-device failed with error -22 [ 139.280117][ T5733] usb 1-1: config 0 descriptor?? [ 139.286989][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 139.308275][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 139.391404][ T5733] rc_core: IR keymap rc-hauppauge not found [ 139.398239][ T5733] Registered IR keymap rc-empty [ 139.412466][ T5733] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 139.460688][ T5733] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input8 [ 139.549454][ T6741] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 139.610394][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 139.661267][ T6750] ceph: No mds server is up or the cluster is laggy [ 139.669460][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 139.686971][ T6741] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 140.297514][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 140.338292][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 140.475089][ T6771] nvme_fabrics: unknown parameter or missing value '#! 1R?&n%~[6=p͊yz\Uj@5NfWrs)q' in ctrl creation request [ 140.691361][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 141.723676][ T6771] nvme nvme5: failed to connect socket: -111 [ 141.825783][ T5713] usb 1-1: USB disconnect, device number 14 [ 141.945355][ T29] audit: type=1400 audit(1787639311.660:466): avc: denied { connect } for pid=6791 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 141.992450][ T6795] netlink: 16 bytes leftover after parsing attributes in process `syz.0.329'. [ 142.020353][ T6789] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 142.038877][ T29] audit: type=1400 audit(1787639311.660:467): avc: denied { bind } for pid=6791 comm="syz.3.330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 142.099373][ T6798] netlink: 9 bytes leftover after parsing attributes in process `syz.3.330'. [ 142.157187][ T6798] 1: renamed from c0 (while UP) [ 142.217245][ T6798] A link change request failed with some changes committed already. Interface c1 may have been left with an inconsistent configuration, please check. [ 142.237297][ T48] nvmet: Created nvm controller 6 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 142.265027][ T6789] nvme nvme5: creating 2 I/O queues. [ 142.408652][ T6789] nvme nvme5: new ctrl: "testsubsys" [ 142.439294][ T6806] netlink: 'syz.4.332': attribute type 23 has an invalid length. [ 142.456302][ T10] logitech-hidpp-device 0005:046D:B012.000A: item fetching failed at offset 3/4 [ 142.473864][ T10] logitech-hidpp-device 0005:046D:B012.000A: hidpp_probe:parse failed [ 142.488263][ T10] logitech-hidpp-device 0005:046D:B012.000A: probe with driver logitech-hidpp-device failed with error -22 [ 142.701411][ T5713] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 142.901408][ T5713] usb 1-1: Using ep0 maxpacket: 8 [ 142.910951][ T5713] usb 1-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 142.925776][ T5713] usb 1-1: config 0 has an invalid interface number: 55 but max is 0 [ 142.934999][ T5713] usb 1-1: config 0 has no interface number 0 [ 142.943671][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 142.954934][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 142.967350][ T5713] usb 1-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 142.979947][ T5713] usb 1-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 142.993857][ T5713] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 143.129389][ T5713] usb 1-1: config 0 descriptor?? [ 143.305587][ T5713] ldusb 1-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 143.324682][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 143.365931][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 143.526756][ T6813] ceph: No mds server is up or the cluster is laggy [ 143.720573][ T6831] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 143.741423][ T5713] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 143.968514][ T5713] usb 3-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 143.985083][ T5713] usb 3-1: config index 0 descriptor too short (expected 23569, got 27) [ 144.003590][ T5713] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 144.390263][ T5713] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 144.398734][ T5713] usb 3-1: Manufacturer: syz [ 144.418590][ T5713] usb 3-1: config 0 descriptor?? [ 144.459126][ T5332] usb 1-1: USB disconnect, device number 15 [ 144.484444][ T6840] netlink: 9 bytes leftover after parsing attributes in process `syz.1.344'. [ 144.500738][ T6840] 0: renamed from hsr0 (while UP) [ 144.515587][ T5332] ldusb 1-1:0.55: LD USB Device #0 now disconnected [ 144.550642][ T6840] 0: entered allmulticast mode [ 144.561408][ T5713] rc_core: IR keymap rc-hauppauge not found [ 144.571431][ T6840] hsr_slave_0: entered allmulticast mode [ 144.577110][ T5713] Registered IR keymap rc-empty [ 144.586592][ T5713] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0 [ 144.596794][ T6840] hsr_slave_1: entered allmulticast mode [ 144.606098][ T5713] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input9 [ 144.623502][ T6840] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 144.672333][ T6848] nvmet: disable ns before setting buffered_io value. [ 144.686293][ T6848] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 144.701627][ T6827] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 144.734140][ T6827] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 144.871609][ T1089] nvmet: Created nvm controller 7 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 144.986867][ T6861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.351'. [ 145.000514][ T6848] nvme nvme6: creating 2 I/O queues. [ 145.075659][ T6848] nvme nvme6: new ctrl: "testsubsys" [ 145.180210][ T6867] netlink: 'syz.1.349': attribute type 23 has an invalid length. [ 145.556950][ T10] logitech-hidpp-device 0005:046D:B012.000B: item fetching failed at offset 3/4 [ 145.577199][ T10] logitech-hidpp-device 0005:046D:B012.000B: hidpp_probe:parse failed [ 145.615091][ T10] logitech-hidpp-device 0005:046D:B012.000B: probe with driver logitech-hidpp-device failed with error -22 [ 145.891476][ T91] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 146.105009][ T5733] libceph: connect (1)[c::]:6789 error -101 [ 146.115408][ T5733] libceph: mon0 (1)[c::]:6789 connect error [ 146.381392][ T91] usb 4-1: Using ep0 maxpacket: 8 [ 146.389901][ T91] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 146.404740][ T91] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 146.416511][ T91] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 146.427023][ T91] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 146.437286][ T91] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 146.450907][ T91] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 146.462321][ T6894] netlink: 9 bytes leftover after parsing attributes in process `syz.0.359'. [ 146.471832][ T6894] 0: renamed from hsr0 (while UP) [ 146.485591][ T6894] 0: entered allmulticast mode [ 146.491620][ T6894] hsr_slave_0: entered allmulticast mode [ 146.497418][ T6894] hsr_slave_1: entered allmulticast mode [ 146.504124][ T6894] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 146.530953][ T6881] ceph: No mds server is up or the cluster is laggy [ 146.563290][ T5714] libceph: connect (1)[c::]:6789 error -101 [ 146.585489][ T5714] libceph: mon0 (1)[c::]:6789 connect error [ 146.750950][ T91] usb 4-1: GET_CAPABILITIES returned 0 [ 146.756529][ T5733] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 146.768689][ T91] usbtmc 4-1:16.0: can't read capabilities [ 146.921510][ T5733] usb 2-1: Using ep0 maxpacket: 8 [ 146.975128][ T5733] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 147.060347][ T5733] usb 2-1: config 0 has an invalid interface number: 55 but max is 0 [ 147.133846][ T5733] usb 2-1: config 0 has no interface number 0 [ 147.188798][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 147.257334][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 147.315665][ T5733] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 147.370804][ T5733] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 147.393666][ C1] usbtmc 4-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 147.452377][ T6902] netlink: 16 bytes leftover after parsing attributes in process `syz.2.362'. [ 147.512137][ T5700] usb 4-1: USB disconnect, device number 9 [ 147.518019][ T5733] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 147.541055][ T5733] usb 2-1: config 0 descriptor?? [ 147.560993][ T5733] ldusb 2-1:0.55: LD USB Device #1 now attached to major 180 minor 1 [ 147.608123][ T6904] nvmet: disable ns before setting buffered_io value. [ 147.642332][ T6904] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 147.711222][ T12] nvmet: Created nvm controller 8 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 147.729235][ T6904] nvme nvme7: creating 2 I/O queues. [ 147.737547][ T6904] nvme nvme7: new ctrl: "testsubsys" [ 147.761400][ T91] usb 2-1: USB disconnect, device number 18 [ 147.782108][ T91] ldusb 2-1:0.55: LD USB Device #1 now disconnected [ 147.831410][ T5733] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 147.984459][ T5733] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 147.999225][ T5733] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 148.017531][ T5733] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 148.031652][ T5733] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 148.040110][ T5733] usb 1-1: Manufacturer: syz [ 148.048221][ T6914] netlink: 'syz.4.366': attribute type 23 has an invalid length. [ 148.114760][ T91] logitech-hidpp-device 0005:046D:B012.000C: item fetching failed at offset 3/4 [ 148.179290][ T5733] usb 1-1: config 0 descriptor?? [ 148.247849][ T91] logitech-hidpp-device 0005:046D:B012.000C: hidpp_probe:parse failed [ 148.333594][ T91] logitech-hidpp-device 0005:046D:B012.000C: probe with driver logitech-hidpp-device failed with error -22 [ 148.525197][ T6917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.367'. [ 148.528528][ T6906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 148.586875][ T6906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 148.608860][ T6921] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(3) [ 148.615388][ T6921] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 148.625319][ T5733] rc_core: IR keymap rc-hauppauge not found [ 148.646116][ T5733] Registered IR keymap rc-empty [ 148.655959][ T5733] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 148.667110][ T6921] vhci_hcd vhci_hcd.0: Device attached [ 148.680462][ T5733] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input10 [ 148.913217][ T91] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 148.923821][ T5700] usb 4-1: new low-speed USB device number 10 using dummy_hcd [ 148.950580][ T10] usb 1-1: USB disconnect, device number 16 [ 148.963703][ T6934] netlink: 9 bytes leftover after parsing attributes in process `syz.4.370'. [ 148.974705][ T6934] 0: renamed from hsr0 (while UP) [ 148.999872][ T6934] 0: entered allmulticast mode [ 149.007877][ T6934] hsr_slave_0: entered allmulticast mode [ 149.015249][ T6934] hsr_slave_1: entered allmulticast mode [ 149.021928][ T6934] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 149.842991][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 149.864172][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 149.876266][ T5700] usb 4-1: can't read configurations, error -61 [ 150.047353][ T6948] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 150.054742][ T6948] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 150.083413][ T5700] usb 4-1: new low-speed USB device number 11 using dummy_hcd [ 150.249913][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 150.341964][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 150.380730][ T5700] usb 4-1: can't read configurations, error -61 [ 150.417903][ T5700] usb usb4-port1: attempt power cycle [ 150.718526][ T6952] netlink: 144 bytes leftover after parsing attributes in process `syz.4.377'. [ 150.833675][ T6954] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 150.845161][ T5700] usb 4-1: new low-speed USB device number 12 using dummy_hcd [ 150.886108][ T6958] nvmet: disable ns before setting buffered_io value. [ 150.933830][ T6958] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 151.009853][ T6954] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 151.022312][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.032894][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.040600][ T5700] usb 4-1: can't read configurations, error -61 [ 151.047089][ T1113] nvmet: Created nvm controller 9 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 151.066292][ T6958] nvme nvme8: creating 2 I/O queues. [ 151.123365][ T6966] netlink: 'syz.0.380': attribute type 23 has an invalid length. [ 151.302800][ T10] logitech-hidpp-device 0005:046D:B012.000D: item fetching failed at offset 3/4 [ 151.429612][ T10] logitech-hidpp-device 0005:046D:B012.000D: hidpp_probe:parse failed [ 151.477703][ T6958] nvme nvme8: new ctrl: "testsubsys" [ 151.494148][ T10] logitech-hidpp-device 0005:046D:B012.000D: probe with driver logitech-hidpp-device failed with error -22 [ 151.531453][ T5700] usb 4-1: new low-speed USB device number 13 using dummy_hcd [ 151.554338][ T5700] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 151.565928][ T5700] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 151.581812][ T5700] usb 4-1: can't read configurations, error -61 [ 151.588942][ T5700] usb usb4-port1: unable to enumerate USB device [ 151.976542][ T6922] vhci_hcd: connection reset by peer [ 152.015049][ T570] vhci_hcd vhci_hcd.3: stop threads [ 152.104723][ T570] vhci_hcd vhci_hcd.3: release socket [ 152.198377][ T570] vhci_hcd vhci_hcd.3: disconnect device [ 152.632505][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 153.624871][ T6985] dmxdev: DVB (dvb_dmxdev_filter_start): could not set feed [ 153.632216][ T6985] dvb_demux: dvb_demux_feed_del: feed not in list (type=1 state=0 pid=ffff) [ 153.883013][ T10] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 153.905752][ T10] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 153.914737][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 153.925844][ T10] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 153.953218][ T10] usb 1-1: Manufacturer: syz [ 153.979760][ T10] usb 1-1: config 0 descriptor?? [ 154.032103][ T91] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 154.036499][ T29] audit: type=1400 audit(1787639323.740:468): avc: denied { bind } for pid=6989 comm="syz.2.390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 154.087936][ T29] audit: type=1400 audit(1787639323.740:469): avc: denied { node_bind } for pid=6989 comm="syz.2.390" saddr=172.20.20.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 154.127299][ T10] rc_core: IR keymap rc-hauppauge not found [ 154.135467][ T10] Registered IR keymap rc-empty [ 154.143637][ T10] rc rc1: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1 [ 154.164884][ T10] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input11 [ 154.225143][ T6976] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.250459][ T6976] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.302197][ T7000] nvmet: disable ns before setting buffered_io value. [ 154.398977][ T7000] nvmet: Disable port '1' before changing attribute in nvmet_addr_trtype_store [ 154.582884][ T7007] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 154.589430][ T7007] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 154.600582][ T7007] vhci_hcd vhci_hcd.0: Device attached [ 154.618734][ T7007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 154.644805][ T7007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 154.666392][ T7008] usbip_core: unknown command [ 154.678459][ T7008] vhci_hcd: unknown pdu 0 [ 154.714761][ T7008] usbip_core: unknown command [ 154.745760][ T7014] netlink: 'syz.4.394': attribute type 23 has an invalid length. [ 154.861675][ T5714] usb 37-1: new low-speed USB device number 3 using vhci_hcd [ 154.900942][ T48] vhci_hcd vhci_hcd.2: stop threads [ 154.968847][ T48] vhci_hcd vhci_hcd.2: release socket [ 155.014759][ T48] vhci_hcd vhci_hcd.2: disconnect device [ 155.231429][ T48] nvmet: Created nvm controller 10 for subsystem testsubsys for NQN nqn.2014-08.org.nvmexpress:uuid:d666d318-19cd-4754-b595-e01276d6b45e. [ 155.373113][ T7000] nvme nvme9: creating 2 I/O queues. [ 155.392811][ T7000] blk-mq: failed to allocate request map [ 155.409473][ T7000] ------------[ cut here ]------------ [ 155.415016][ T7000] timer_delete_sync(&sdp->delay_work) && rcu_segcblist_n_cbs(&sdp->srcu_cblist) [ 155.415045][ T7000] WARNING: kernel/rcu/srcutree.c:706 at cleanup_srcu_struct+0x6e4/0xb30, CPU#1: syz.1.393/7000 [ 155.436252][ T7000] Modules linked in: [ 155.440316][ T7000] CPU: 1 UID: 0 PID: 7000 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 155.449939][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 155.460390][ T7000] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 155.467092][ T7000] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 155.487179][ T7000] RSP: 0018:ffffc90007faf9c8 EFLAGS: 00010202 [ 155.493492][ T7000] RAX: 0000000000000001 RBX: ffffe8ffffc7f000 RCX: ffffc90005b09000 [ 155.501609][ T7000] RDX: ffffe8ffffc7f180 RSI: ffffffff81f5e92f RDI: ffff888030dacb00 [ 155.509584][ T7000] RBP: ffff888067421800 R08: 0000000000000005 R09: 00000000ffffffff [ 155.517622][ T7000] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880540bc310 [ 155.525642][ T7000] R13: 0000000000000000 R14: ffffffff8e6b00b0 R15: ffff8880540bc350 [ 155.533662][ T7000] FS: 00007f8e73a846c0(0000) GS:ffff888123c79000(0000) knlGS:0000000000000000 [ 155.542832][ T7000] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 155.549431][ T7000] CR2: 0000001b32821ff8 CR3: 000000002abe0000 CR4: 00000000003526f0 [ 155.557543][ T7000] Call Trace: [ 155.560825][ T7000] [ 155.563887][ T7000] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 155.569778][ T7000] nvme_alloc_io_tag_set+0x3bc/0x750 [ 155.575474][ T7000] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 155.581304][ T7000] ? nvmet_sq_init+0x250/0x320 [ 155.586123][ T7000] ? __pfx_nvmet_sq_init+0x10/0x10 [ 155.591249][ T7000] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 155.597373][ T7000] ? nvme_loop_init_io_queues+0x12a/0x190 [ 155.603146][ T7000] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 155.609236][ T7000] nvme_loop_create_ctrl+0x6bc/0xee0 [ 155.614622][ T7000] nvmf_dev_write+0x4ee/0xb60 [ 155.619319][ T7000] vfs_write+0x2aa/0x1050 [ 155.623729][ T7000] ? __pfx_nvmf_dev_write+0x10/0x10 [ 155.628944][ T7000] ? __pfx_vfs_write+0x10/0x10 [ 155.633778][ T7000] ? find_held_lock+0x2b/0x80 [ 155.638474][ T7000] ? __fget_files+0x215/0x3d0 [ 155.643506][ T7000] ? __fget_files+0x215/0x3d0 [ 155.648206][ T7000] ? __fget_files+0x21f/0x3d0 [ 155.652944][ T7000] ksys_write+0x12a/0x250 [ 155.657292][ T7000] ? __pfx_ksys_write+0x10/0x10 [ 155.662339][ T7000] do_syscall_64+0x123/0x790 [ 155.666956][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.673478][ T7000] RIP: 0033:0x7f8e72b9e0d9 [ 155.677903][ T7000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 155.697959][ T7000] RSP: 002b:00007f8e73a84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 155.706434][ T7000] RAX: ffffffffffffffda RBX: 00007f8e72e25fa0 RCX: 00007f8e72b9e0d9 [ 155.714437][ T7000] RDX: 000000000000001d RSI: 0000200000000800 RDI: 0000000000000005 [ 155.722675][ T7000] RBP: 00007f8e72c35024 R08: 0000000000000000 R09: 0000000000000000 [ 155.730647][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.738674][ T7000] R13: 00007f8e72e26038 R14: 00007f8e72e25fa0 R15: 00007ffc794b4df8 [ 155.746719][ T7000] [ 155.749736][ T7000] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 155.757009][ T7000] CPU: 1 UID: 0 PID: 7000 Comm: syz.1.393 Not tainted syzkaller #0 PREEMPT(full) [ 155.766203][ T7000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 155.776253][ T7000] Call Trace: [ 155.779534][ T7000] [ 155.782459][ T7000] dump_stack_lvl+0x100/0x190 [ 155.787148][ T7000] vpanic+0x553/0x970 [ 155.791130][ T7000] ? __pfx_vpanic+0x10/0x10 [ 155.795642][ T7000] panic+0xd1/0xe0 [ 155.799366][ T7000] ? __pfx_panic+0x10/0x10 [ 155.803797][ T7000] check_panic_on_warn.cold+0x19/0x34 [ 155.809177][ T7000] ? cleanup_srcu_struct+0x6e4/0xb30 [ 155.814462][ T7000] __warn.cold+0x191/0x318 [ 155.818885][ T7000] __report_bug+0x30f/0x440 [ 155.823395][ T7000] ? cleanup_srcu_struct+0x6e4/0xb30 [ 155.828686][ T7000] ? __pfx___report_bug+0x10/0x10 [ 155.833713][ T7000] ? debug_object_deactivate+0x2e4/0x3b0 [ 155.839354][ T7000] ? __pfx_debug_object_deactivate+0x10/0x10 [ 155.845341][ T7000] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 155.850719][ T7000] ? _raw_spin_lock_irqsave+0x52/0x60 [ 155.856097][ T7000] ? cleanup_srcu_struct+0x6e4/0xb30 [ 155.861386][ T7000] report_bug+0xb3/0x220 [ 155.865635][ T7000] ? cleanup_srcu_struct+0x6e4/0xb30 [ 155.870919][ T7000] handle_bug+0x16a/0x2a0 [ 155.875266][ T7000] exc_invalid_op+0x17/0x50 [ 155.879789][ T7000] asm_exc_invalid_op+0x1a/0x20 [ 155.884649][ T7000] RIP: 0010:cleanup_srcu_struct+0x6e4/0xb30 [ 155.890543][ T7000] Code: 00 fc ff df 48 c1 ea 03 80 3c 02 00 0f 85 f4 03 00 00 48 8b 83 e8 00 00 00 48 8d 93 80 01 00 00 48 85 c0 0f 84 a7 fc ff ff 90 <0f> 0b 90 48 8d 8b 00 02 00 00 48 b8 00 00 00 00 00 fc ff df 48 89 [ 155.910150][ T7000] RSP: 0018:ffffc90007faf9c8 EFLAGS: 00010202 [ 155.916218][ T7000] RAX: 0000000000000001 RBX: ffffe8ffffc7f000 RCX: ffffc90005b09000 [ 155.924185][ T7000] RDX: ffffe8ffffc7f180 RSI: ffffffff81f5e92f RDI: ffff888030dacb00 [ 155.932153][ T7000] RBP: ffff888067421800 R08: 0000000000000005 R09: 00000000ffffffff [ 155.940119][ T7000] R10: 0000000000000001 R11: 0000000000000000 R12: ffff8880540bc310 [ 155.948085][ T7000] R13: 0000000000000000 R14: ffffffff8e6b00b0 R15: ffff8880540bc350 [ 155.956064][ T7000] ? __timer_delete_sync+0x10f/0x1c0 [ 155.961369][ T7000] ? cleanup_srcu_struct+0x36f/0xb30 [ 155.966663][ T7000] blk_mq_alloc_tag_set+0xdd8/0x1330 [ 155.971970][ T7000] nvme_alloc_io_tag_set+0x3bc/0x750 [ 155.977269][ T7000] ? __pfx_nvme_alloc_io_tag_set+0x10/0x10 [ 155.983090][ T7000] ? nvmet_sq_init+0x250/0x320 [ 155.987857][ T7000] ? __pfx_nvmet_sq_init+0x10/0x10 [ 155.992969][ T7000] ? __pfx_nvmf_connect_admin_queue+0x10/0x10 [ 155.999047][ T7000] ? nvme_loop_init_io_queues+0x12a/0x190 [ 156.004784][ T7000] ? __pfx_nvme_loop_init_io_queues+0x10/0x10 [ 156.010878][ T7000] nvme_loop_create_ctrl+0x6bc/0xee0 [ 156.016185][ T7000] nvmf_dev_write+0x4ee/0xb60 [ 156.020875][ T7000] vfs_write+0x2aa/0x1050 [ 156.025215][ T7000] ? __pfx_nvmf_dev_write+0x10/0x10 [ 156.030420][ T7000] ? __pfx_vfs_write+0x10/0x10 [ 156.035188][ T7000] ? find_held_lock+0x2b/0x80 [ 156.039869][ T7000] ? __fget_files+0x215/0x3d0 [ 156.044543][ T7000] ? __fget_files+0x215/0x3d0 [ 156.049227][ T7000] ? __fget_files+0x21f/0x3d0 [ 156.053912][ T7000] ksys_write+0x12a/0x250 [ 156.058251][ T7000] ? __pfx_ksys_write+0x10/0x10 [ 156.063118][ T7000] do_syscall_64+0x123/0x790 [ 156.067720][ T7000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.073618][ T7000] RIP: 0033:0x7f8e72b9e0d9 [ 156.078030][ T7000] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 156.097635][ T7000] RSP: 002b:00007f8e73a84028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 156.106052][ T7000] RAX: ffffffffffffffda RBX: 00007f8e72e25fa0 RCX: 00007f8e72b9e0d9 [ 156.114024][ T7000] RDX: 000000000000001d RSI: 0000200000000800 RDI: 0000000000000005 [ 156.121989][ T7000] RBP: 00007f8e72c35024 R08: 0000000000000000 R09: 0000000000000000 [ 156.129957][ T7000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 156.137925][ T7000] R13: 00007f8e72e26038 R14: 00007f8e72e25fa0 R15: 00007ffc794b4df8 [ 156.145914][ T7000] [ 156.149142][ T7000] Kernel Offset: disabled [ 156.153455][ T7000] Rebooting in 86400 seconds..