last executing test programs: 32.045618554s ago: executing program 1 (id=2): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x27, 0x5, 0x46d, 0xb012, 0x0, 0x0, "0600ff0901a1018510150026ff00750895068100910085119513810091008512953f81009100c0"}}, 0x13f) nanosleep(&(0x7f0000000100)={0x0, 0x30000000}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000200)={0xc, {0x7, "10ff001102005a"}}, 0xd) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x14, "11ff00000100"/20}}, 0x1a) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000400)={0xc, {0x14, "11ff012000"/20}}, 0x1a) nanosleep(&(0x7f0000000100)={0x0, 0x10000000}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000500)={0xc, {0x14, "11ff01100800"/20}}, 0x1a) 19.225690939s ago: executing program 1 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/platform/drivers/hpet_acpi/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='PNP0103:00\x00', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0103:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='acpi-thermal\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/platform/drivers/acpi-thermal/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='PNP0103:00\x00', 0xb) 19.15526915s ago: executing program 1 (id=16): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902220001010080fa090400000103000000092111010001224e0007058103400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)={0x0, 0x22, 0x4e, {0x5, 0x1, "0901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) write(r2, &(0x7f0000000700)='auto\x00', 0x4) write(r3, &(0x7f0000000700)='auto\x00', 0x4) write(r4, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) write(r2, &(0x7f0000000800)='on\x00', 0x2) write(r3, &(0x7f0000000800)='on\x00', 0x2) write(r4, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 17.863236322s ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r1, &(0x7f0000000140)='* / 2147483647 0 0 0 0 fsloc 1 server1 / 1\n\x00', 0x2b) 17.802059424s ago: executing program 3 (id=20): r0 = syz_usb_connect(0x2, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) (async) syz_usb_control_io(r0, &(0x7f0000000200)={0x2c, &(0x7f0000000300)={0x0, 0x1, 0x12, {0x12, 0x1, "000200000010582005109bc100000001"}}, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 17.724846925s ago: executing program 0 (id=26): r0 = syz_usb_connect(0x0, 0x43, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402020b10000000000010902310002010080320904000000ffffff00080b0101ffffff000904010002ffffff000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x40, 0xd, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 16.32107974s ago: executing program 0 (id=27): mknodat(0xffffffffffffff9c, &(0x7f0000000080)='./ram0\x00', 0x81ff, 0x100) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./ram0\x00', 0x2, 0x0) ioctl(r0, 0x127b, &(0x7f0000000000)='\x00'/16) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3f0000) pwrite64(r0, &(0x7f0000000000)='Z\x00\x00\x00', 0x4, 0x3f0008) pwrite64(r0, &(0x7f0000000000)="01000000", 0x4, 0x3f0028) pwrite64(r0, &(0x7f0000000000)="5d4f2ba9", 0x4, 0x3f0098) pwrite64(r0, &(0x7f0000000000)="06000000", 0x4, 0x3f0210) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./md0\x00', 0x81ff, 0x900) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./md0\x00', 0x2, 0x0) ioctl(r1, 0x40480923, &(0x7f0000000000)='\x00'/72) ioctl(r1, 0x40140921, &(0x7f0000000000)="000000000100"/20) 16.263659681s ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x4b, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002ffffff4010110f900001000000010902390003010080fa0904000001ffffff00070584034000010904010001ffffff00070502024000000904020001ffffff0007058202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/1-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/2-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/devices/dummy_hcd.0-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/128, 0x80) 16.238317892s ago: executing program 1 (id=29): r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file\x00', 0x42, 0x1ff) pwrite64(r0, &(0x7f0000000040)="fc4e2ba9010000000004000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000a000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000008000000000000000a00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b532ba900"/220, 0x100, 0x0) pwrite64(r0, &(0x7f0000000140)='\x00', 0x1, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000000180), 0x1, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='md123\x00', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md123/md/metadata_version\x00', 0x1, 0x0) write(r3, &(0x7f0000000300)='1.1\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/block/md123/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000380)='7:1\x00', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/block/md123/md/array_state\x00', 0x1, 0x0) write(r5, &(0x7f0000000400)='active\x00', 0x7) 16.219851972s ago: executing program 1 (id=30): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr2_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr2_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr2_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr2_input\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/64, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/hwmon/hwmon4/curr2_input\x00', 0x0, 0x0) read(r5, &(0x7f0000000600)=""/64, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/hwmon/hwmon5/curr2_input\x00', 0x0, 0x0) read(r6, &(0x7f0000000600)=""/64, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/hwmon/hwmon6/curr2_input\x00', 0x0, 0x0) read(r7, &(0x7f0000000600)=""/64, 0x40) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/hwmon/hwmon7/curr2_input\x00', 0x0, 0x0) read(r8, &(0x7f0000000600)=""/64, 0x40) 14.788112278s ago: executing program 3 (id=34): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000b00)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r2, &(0x7f0000000f00)='1\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\n\x00', 0x2) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./nfs_mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./nfs_mnt\x00', &(0x7f0000000600)='nfs4\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,clientaddr=127.0.0.1,vers=4.2\x00') openat(0xffffffffffffff9c, &(0x7f0000000d00)='./nfs_mnt/file\x00', 0x42, 0x1ff) chmod(&(0x7f0000000d00)='./nfs_mnt/file\x00', 0x1ff) 14.659639791s ago: executing program 2 (id=35): r0 = socket$inet(0x2, 0x2, 0x0) write(r0, &(0x7f0000000100)="13000000010000000100000001000000", 0x10) ioctl(r0, 0x8946, &(0x7f0000000000)="65746830000000000000000000000000000100000000007f") 14.6595484s ago: executing program 2 (id=36): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/devices/0000:00:02.0\x00', 0x0, 0x0) 14.65943328s ago: executing program 2 (id=37): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040120a105d0000000000010902270001010080320904000003ffffff00070581034000010705020240000007058602400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0x0, 0x0, 0x4, "02000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 14.210201022s ago: executing program 0 (id=38): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000408612a41f0000000000010902240001010080fa0904000002ffffff00090502020002000000090586020002000000"], 0x0) syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') syz_usb_ep_write(r0, 0x86, 0x2, &(0x7f0000000200)='\x00\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f0000000400)='mem', 0x3) 135.902457ms ago: executing program 32 (id=30): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b1c, 0x1c03, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x80, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x1, 0x1, 0x0, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x1d}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x40, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000500)={0x24, 0x0, 0x0, &(0x7f0000001000)=ANY=[@ANYBLOB="00221d0000000600ff0901a1010901150026ff007508954081020901750895409102c0"], 0x0}, &(0x7f0000000600)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="20014000"/70], 0x0}) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="fe03") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0399") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="039a") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="034f") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0340") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0200") syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000200)="0344") nanosleep(&(0x7f0000000300)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./sys\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='sysfs\x00', &(0x7f0000000400)='./sys\x00', &(0x7f0000000440)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/hwmon/hwmon0/curr2_input\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/64, 0x40) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/class/hwmon/hwmon1/curr2_input\x00', 0x0, 0x0) read(r2, &(0x7f0000000600)=""/64, 0x40) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/class/hwmon/hwmon2/curr2_input\x00', 0x0, 0x0) read(r3, &(0x7f0000000600)=""/64, 0x40) r4 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/class/hwmon/hwmon3/curr2_input\x00', 0x0, 0x0) read(r4, &(0x7f0000000600)=""/64, 0x40) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/class/hwmon/hwmon4/curr2_input\x00', 0x0, 0x0) read(r5, &(0x7f0000000600)=""/64, 0x40) r6 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/class/hwmon/hwmon5/curr2_input\x00', 0x0, 0x0) read(r6, &(0x7f0000000600)=""/64, 0x40) r7 = openat(0xffffffffffffff9c, &(0x7f00000006c0)='./sys/class/hwmon/hwmon6/curr2_input\x00', 0x0, 0x0) read(r7, &(0x7f0000000600)=""/64, 0x40) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/class/hwmon/hwmon7/curr2_input\x00', 0x0, 0x0) read(r8, &(0x7f0000000600)=""/64, 0x40) 125.693537ms ago: executing program 3 (id=40): syz_open_dev$loop(&(0x7f0000000400), 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sh\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)='#!/bin/sh\n/sbin/make-bcache -C /dev/loop0 && echo /dev/loop0 > /sys/fs/bcache/register\n\x00', 0x55) close(r0) execve(&(0x7f0000000000)='./sh\x00', &(0x7f0000000200)={[&(0x7f0000000000)]}, &(0x7f0000000300)) 125.596287ms ago: executing program 0 (id=41): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./char0\x00', 0x2180, 0x103) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./char0\x00', 0x2, 0x0) ioctl(r0, 0x1260, &(0x7f0000000200)) 125.285587ms ago: executing program 2 (id=42): r0 = memfd_create(&(0x7f0000000000)='loop0\x00', 0x0) ftruncate(r0, 0x100000) r1 = syz_open_dev$loop(&(0x7f0000005000), 0x0, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) r2 = memfd_create(&(0x7f0000000100)='loop1\x00', 0x0) ftruncate(r2, 0x100000) r3 = syz_open_dev$loop(&(0x7f0000005000), 0x1, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = memfd_create(&(0x7f0000000200)='loop2\x00', 0x0) ftruncate(r4, 0x100000) r5 = syz_open_dev$loop(&(0x7f0000005000), 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r4) r6 = memfd_create(&(0x7f0000000300)='loop3\x00', 0x0) ftruncate(r6, 0x100000) r7 = syz_open_dev$loop(&(0x7f0000005000), 0x3, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r6) mknodat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x8000, 0x900000) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./md0\x00', 0x2, 0x0) ioctl(r8, 0x40480923, &(0x7f0000001100)="000000005a00000000000000000000000500000000000100040000000300000000000000000000000000000000000000000000000000000000000000000000000000000000100000") ioctl(r8, 0x40140921, &(0x7f0000002000)="0000000007000000000000000000000006000000") ioctl(r8, 0x40140921, &(0x7f0000002100)="0100000007000000010000000100000006000000") ioctl(r8, 0x40140921, &(0x7f0000002200)="0200000007000000020000000200000006000000") ioctl(r8, 0x40140921, &(0x7f0000002300)="0300000007000000030000000300000000000400") ioctl(r8, 0x40080930, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000003000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000003000)='./sys\x00', &(0x7f0000003100)='sysfs\x00', 0x0, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000004000)='./sys/block/md0/md/chunk_size\x00', 0x2, 0x0) write(r9, &(0x7f0000004100)='8192\x00', 0x5) 55.665709ms ago: executing program 0 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-pci\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='0000:00:03.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0000:00:03.0\x00', 0xd) 55.573379ms ago: executing program 2 (id=44): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000040)='disk', 0x4) 55.493269ms ago: executing program 3 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x90, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@generic="3400018014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700003400028014000180080001007f000001080002007f0000011c00028005000100110000000600020006b700000600030006b700000c0005800800010052415300080007000000012c"]}, 0x90}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000300)='\x00', 0x1, 0x0, &(0x7f0000000400)={0x2, 0x6b7, @loopback}, 0x10) 11.64315ms ago: executing program 3 (id=46): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x1f90, @loopback}, 0x10) listen(r0, 0x1) r1 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='source\x00', &(0x7f0000000780)='127.0.0.1:8080:/\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000800)='ms_mode\x00', &(0x7f0000000880)='legacy\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) r2 = accept(r0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001000)='ceph v027', 0x9, 0x0, 0x0, 0x0) recvfrom$inet(r2, &(0x7f0000002000), 0x13a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000003000)="07ffffffffffffffff00"/26, 0x1a, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000004000)="010100000000000000000000000000000012000000000022000000000000000000000000000100000000000000000000000000000000001e000000010118000000000000000000000000000000000000000100"/110, 0x6d, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 0s ago: executing program 2 (id=47): r0 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402000240000000000010902270001010080fa0904000003ffffff00070501020002000705810200020007058402000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000100)='\x00') (async) syz_usb_ep_read(r0, 0x1, 0x40, &(0x7f0000000200)=""/64) (async) nanosleep(&(0x7f0000000300)={0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.156' (ED25519) to the list of known hosts. [ 23.378403][ T36] audit: type=1400 audit(1785848702.830:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.381863][ T286] cgroup: Unknown subsys name 'net' [ 23.401077][ T36] audit: type=1400 audit(1785848702.830:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.428369][ T36] audit: type=1400 audit(1785848702.860:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.428716][ T286] cgroup: Unknown subsys name 'devices' [ 23.552356][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.557990][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.673278][ T36] audit: type=1400 audit(1785848703.130:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.696442][ T36] audit: type=1400 audit(1785848703.130:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.721191][ T36] audit: type=1400 audit(1785848703.130:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.751104][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.759851][ T36] audit: type=1400 audit(1785848703.210:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.785361][ T36] audit: type=1400 audit(1785848703.210:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.818353][ T36] audit: type=1400 audit(1785848703.270:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.843924][ T36] audit: type=1400 audit(1785848703.270:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.844532][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.684956][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.692075][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.699301][ T293] bridge_slave_0: entered allmulticast mode [ 24.705698][ T293] bridge_slave_0: entered promiscuous mode [ 24.718516][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.725631][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.732867][ T294] bridge_slave_0: entered allmulticast mode [ 24.739129][ T294] bridge_slave_0: entered promiscuous mode [ 24.745667][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.752793][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.759864][ T294] bridge_slave_1: entered allmulticast mode [ 24.766270][ T294] bridge_slave_1: entered promiscuous mode [ 24.778198][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.785289][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.792395][ T293] bridge_slave_1: entered allmulticast mode [ 24.798634][ T293] bridge_slave_1: entered promiscuous mode [ 24.813849][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.820949][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.828002][ T296] bridge_slave_0: entered allmulticast mode [ 24.834378][ T296] bridge_slave_0: entered promiscuous mode [ 24.843649][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.850841][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.857905][ T296] bridge_slave_1: entered allmulticast mode [ 24.864254][ T296] bridge_slave_1: entered promiscuous mode [ 24.927016][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.934106][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.941184][ T295] bridge_slave_0: entered allmulticast mode [ 24.947477][ T295] bridge_slave_0: entered promiscuous mode [ 24.969601][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.976875][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.984084][ T295] bridge_slave_1: entered allmulticast mode [ 24.990419][ T295] bridge_slave_1: entered promiscuous mode [ 25.082912][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.090057][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.097400][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.104492][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.119128][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.126198][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.133736][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.140791][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.156933][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.164000][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.171304][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.178343][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.214360][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.221479][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.228747][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.235793][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.261715][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.268997][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.276293][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.283700][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.291515][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.298675][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.305970][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.313774][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.326130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.333187][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.344107][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.351172][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.359109][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.366198][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.378263][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.385351][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.415852][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.422923][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.431246][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.438317][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.463363][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.470438][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.482821][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.489872][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.500955][ T293] veth0_vlan: entered promiscuous mode [ 25.516374][ T293] veth1_macvtap: entered promiscuous mode [ 25.535447][ T294] veth0_vlan: entered promiscuous mode [ 25.548644][ T296] veth0_vlan: entered promiscuous mode [ 25.562171][ T294] veth1_macvtap: entered promiscuous mode [ 25.589387][ T295] veth0_vlan: entered promiscuous mode [ 25.612481][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.634370][ T295] veth1_macvtap: entered promiscuous mode [ 25.642303][ T296] veth1_macvtap: entered promiscuous mode [ 25.752238][ T314] logitech-hidpp-device 0005:046D:B012.0001: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 25.785779][ T327] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.839761][ T332] PM: hibernation: hibernation entry [ 25.988254][ T342] loop0: detected capacity change from 0 to 2048 [ 25.995752][ T342] loop1: detected capacity change from 0 to 2048 [ 26.003566][ T342] loop2: detected capacity change from 0 to 2048 [ 26.011320][ T342] loop3: detected capacity change from 0 to 2048 [ 26.111363][ T314] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.150494][ T13] Filesystems sync: 0.249 seconds [ 26.156067][ T332] Freezing user space processes [ 26.162795][ T332] Freezing user space processes completed (elapsed 0.001 seconds) [ 26.170696][ T332] OOM killer disabled. [ 26.193998][ T332] PM: hibernation: Preallocating image memory [ 26.341350][ T9] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 30.229241][ T332] PM: hibernation: Allocated 552152 pages for snapshot [ 30.236133][ T332] PM: hibernation: Allocated 2208608 kbytes in 4.02 seconds (549.40 MB/s) [ 30.244999][ T332] Freezing remaining freezable tasks [ 31.360901][ T314] usb 4-1: device descriptor read/all, error -110 [ 31.490277][ T9] usb 3-1: device descriptor read/64, error -32 [ 31.496596][ T314] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.630271][ T314] usb 4-1: device descriptor read/64, error -32 [ 31.730326][ T9] usb 3-1: device descriptor read/64, error -32 [ 31.870300][ T314] usb 4-1: device descriptor read/64, error -32 [ 31.970261][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 31.980275][ T314] usb usb4-port1: attempt power cycle [ 32.100294][ T9] usb 3-1: device descriptor read/64, error -32 [ 32.320272][ T314] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.340304][ T9] usb 3-1: device descriptor read/64, error -32 [ 32.346978][ T314] usb 4-1: device descriptor read/8, error -32 [ 32.450399][ T9] usb usb3-port1: attempt power cycle [ 32.455966][ T9] raw-gadget.1 gadget.2: failed to queue reset event [ 32.480805][ T314] usb 4-1: device descriptor read/8, error -32 [ 32.530303][ T9] raw-gadget.1 gadget.2: failed to queue resume event [ 32.537206][ T9] raw-gadget.1 gadget.2: failed to queue reset event [ 32.590353][ T314] raw-gadget.0 gadget.3: failed to queue reset event [ 32.660291][ T314] raw-gadget.0 gadget.3: failed to queue resume event [ 32.720314][ T314] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.740397][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.747618][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.754802][ T9] raw-gadget.1 gadget.2: failed to queue resume event [ 32.761872][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.768917][ T314] usb 4-1: device descriptor read/8, error -32 [ 32.820282][ T9] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 32.840413][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 32.847638][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 32.854886][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 32.862000][ T9] usb 3-1: device descriptor read/8, error -32 [ 32.900398][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.907649][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.914897][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 32.921966][ T314] usb 4-1: device descriptor read/8, error -32 [ 32.990416][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 32.997665][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.004933][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.012011][ T9] usb 3-1: device descriptor read/8, error -32 [ 33.030254][ T314] raw-gadget.0 gadget.3: failed to queue suspend event [ 33.037170][ T314] usb usb4-port1: unable to enumerate USB device [ 33.120422][ T9] raw-gadget.1 gadget.2: failed to queue suspend event [ 33.127388][ T9] raw-gadget.1 gadget.2: failed to queue reset event [ 33.200400][ T9] raw-gadget.1 gadget.2: failed to queue resume event [ 33.260307][ T9] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 33.280452][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.287681][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.294941][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.302038][ T9] usb 3-1: device descriptor read/8, error -32 [ 33.430395][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.437622][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.444858][ C0] raw-gadget.1 gadget.2: ignoring, device is not running [ 33.451956][ T9] usb 3-1: device descriptor read/8, error -32 [ 33.560397][ T9] raw-gadget.1 gadget.2: failed to queue suspend event [ 33.567339][ T9] usb usb3-port1: unable to enumerate USB device [ 33.576757][ T332] Freezing remaining freezable tasks completed (elapsed 3.326 seconds) [ 33.585869][ T332] printk: Suspending console(s) (use no_console_suspend to debug) [ 33.799702][ T332] ACPI: PM: Preparing to enter system sleep state S4 [ 33.799877][ T332] ACPI: PM: Saving platform NVS memory [ 33.799953][ T332] Disabling non-boot CPUs ... [ 33.812135][ T332] smpboot: CPU 1 is now offline [ 33.814986][ T332] PM: hibernation: Creating image: [ 34.902467][ T332] PM: hibernation: Need to copy 541432 pages [ 36.764863][ T332] PM: hibernation: Image created (312569 pages copied, 228863 zero pages) [ 36.765070][ T332] ACPI: PM: Restoring platform NVS memory [ 36.777876][ T332] Enabling non-boot CPUs ... [ 36.778038][ T332] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 36.780698][ T332] CPU1 is up [ 36.780893][ T332] ACPI: PM: Waking up from system sleep state S4 [ 36.818281][ T350] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 37.038210][ T332] PM: Cannot find swap device, try swapon -a [ 37.039200][ T332] PM: Cannot get swap writer [ 38.480346][ T332] OOM killer enabled. [ 38.481053][ T332] Restarting tasks ... [ 38.483169][ T66] raw-gadget.0 gadget.3: failed to queue reset event [ 38.494754][ T332] done. [ 38.495240][ T332] PM: hibernation: hibernation exit [ 38.505157][ T336] raw-gadget.0 gadget.3: failed to queue disconnect event [ 38.524797][ T366] raw-gadget.1 gadget.2: failed to queue disconnect event [ 38.549260][ T36] kauditd_printk_skb: 39 callbacks suppressed [ 38.549276][ T36] audit: type=1400 audit(1785848718.014:113): avc: denied { mount } for pid=371 comm="syz.2.14" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 38.556758][ T370] PM: suspend entry (deep) [ 38.593312][ T13] Filesystems sync: 0.035 seconds [ 38.627055][ T370] Freezing user space processes [ 38.672847][ T370] Freezing user space processes completed (elapsed 0.044 seconds) [ 38.674022][ T370] OOM killer disabled. [ 38.674644][ T370] Freezing remaining freezable tasks [ 39.441119][ T370] Freezing remaining freezable tasks completed (elapsed 0.765 seconds) [ 39.442456][ T370] printk: Suspending console(s) (use no_console_suspend to debug) [ 39.495007][ T349] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 39.671164][ T370] ACPI: PM: Preparing to enter system sleep state S3 [ 39.671352][ T370] ACPI: PM: Saving platform NVS memory [ 39.671385][ T370] Disabling non-boot CPUs ... [ 39.674737][ T370] smpboot: CPU 1 is now offline [ 39.677867][ T370] ACPI: PM: Low-level resume complete [ 39.677932][ T370] ACPI: PM: Restoring platform NVS memory [ 39.688898][ T370] Enabling non-boot CPUs ... [ 39.689056][ T370] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 39.691640][ T370] CPU1 is up [ 39.691842][ T370] ACPI: PM: Waking up from system sleep state S3 [ 39.718621][ T309] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 39.899512][ T370] OOM killer enabled. [ 39.900128][ T370] Restarting tasks ... done. [ 39.907469][ T370] random: crng reseeded on system resumption [ 39.918162][ T370] Resume cause unknown [ 39.918964][ T370] PM: suspend exit [ 39.926750][ T36] audit: type=1400 audit(1785848719.385:114): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 39.993583][ T401] loop0: detected capacity change from 0 to 40 [ 40.042394][ T36] audit: type=1400 audit(1785848719.505:115): avc: denied { unmount } for pid=294 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 40.187839][ T314] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 40.207853][ T387] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 40.257829][ T45] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 40.287834][ T346] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 40.358663][ T387] usb 4-1: not running at top speed; connect to a high speed hub [ 40.360687][ T387] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 40.361914][ T387] usb 4-1: config 0 has no interface number 0 [ 40.362802][ T387] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 40.364086][ T387] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.366186][ T387] usb 4-1: config 0 descriptor?? [ 40.439010][ T346] usb 1-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 40.440574][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.570767][ T36] audit: type=1400 audit(1785848720.035:116): avc: denied { write } for pid=392 comm="syz.3.20" name="002" dev="devtmpfs" ino=462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 40.697871][ T393] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 40.827911][ T393] usb 1-1: device descriptor read/64, error -32 [ 41.412829][ T45] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 41.414041][ T45] usb 3-1: can't read configurations, error -71 [ 41.536355][ T419] loop1: detected capacity change from 0 to 2048 [ 41.768037][ T66] usb 1-1: USB disconnect, device number 2 [ 41.847832][ T314] usb 2-1: device descriptor read/64, error -71 [ 41.897852][ T66] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 57.937128][ T471] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 57.939220][ T471] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 57.940506][ T471] CPU: 1 UID: 0 PID: 471 Comm: syz.0.43 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 [ 57.942228][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.943864][ T471] RIP: 0010:software_node_register+0x3a/0x200 [ 57.944839][ T471] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 45 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 28 08 9a fe 4d 8b 34 24 4d 85 f6 4c [ 57.947887][ T471] RSP: 0018:ffffc9000dd47810 EFLAGS: 00010202 [ 57.948922][ T471] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 [ 57.950197][ T471] RDX: ffffc90002ef7000 RSI: 0000000000008d23 RDI: 0000000000008d24 [ 57.951465][ T471] RBP: ffffc9000dd47850 R08: 0000000000000000 R09: 0000000000000000 [ 57.952757][ T471] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 57.954050][ T471] R13: ffff88814ae52810 R14: 0000000000000000 R15: 0000000000000000 [ 57.955321][ T471] FS: 00007f7bc19d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 57.956816][ T471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.957880][ T471] CR2: 00007f7bc2feb700 CR3: 0000000114e94000 CR4: 00000000003526b0 [ 57.958474][ T474] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.959108][ T471] Call Trace: [ 57.959118][ T471] [ 57.960395][ T474] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.960878][ T471] device_add_software_node+0x1a7/0x310 [ 57.961750][ T474] bridge_slave_0: entered allmulticast mode [ 57.962513][ T471] ? dwc3_pci_probe+0x456/0xab0 [ 57.965233][ T471] dwc3_pci_probe+0x5a4/0xab0 [ 57.965263][ T474] bridge_slave_0: entered promiscuous mode [ 57.967244][ T471] ? __cfi_dwc3_pci_probe+0x10/0x10 [ 57.967438][ T474] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.968156][ T471] ? __cfi_mutex_unlock+0x10/0x10 [ 57.969450][ T474] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.970259][ T471] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 57.971535][ T474] bridge_slave_1: entered allmulticast mode [ 57.972291][ T471] pci_device_probe+0x282/0x440 [ 57.974027][ T471] ? __cfi_pci_device_probe+0x10/0x10 [ 57.974938][ T471] really_probe+0x2e1/0x8b0 [ 57.974963][ T474] bridge_slave_1: entered promiscuous mode [ 57.976791][ T471] __driver_probe_device+0x193/0x280 [ 57.977653][ T471] device_driver_attach+0xdb/0x1f0 [ 57.978555][ T471] bind_store+0x1dc/0x230 [ 57.979267][ T471] ? __cfi_bind_store+0x10/0x10 [ 57.980060][ T471] drv_attr_store+0x91/0xb0 [ 57.980831][ T471] ? __cfi_drv_attr_store+0x10/0x10 [ 57.981667][ T471] sysfs_kf_write+0x141/0x160 [ 57.982505][ T471] ? __cfi_sysfs_kf_write+0x10/0x10 [ 57.983432][ T471] kernfs_fop_write_iter+0x319/0x510 [ 57.984342][ T471] vfs_write+0x762/0xfd0 [ 57.985050][ T471] ? __cfi_vfs_write+0x10/0x10 [ 57.985844][ T471] ? __cfi_mutex_lock+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 57.986650][ T471] ksys_write+0x145/0x260 [ 57.987508][ T471] ? xfd_validate_state+0x68/0x140 [ 57.988509][ T471] ? __cfi_ksys_write+0x10/0x10 [ 57.989359][ T471] ? __kasan_check_write+0x18/0x20 [ 57.990198][ T471] ? fpregs_restore_userregs+0x11c/0x260 [ 57.991134][ T471] __x64_sys_write+0x7f/0x90 [ 57.991897][ T471] x64_sys_call+0x271c/0x2ee0 [ 57.992684][ T471] do_syscall_64+0x57/0xf0 [ 57.993631][ T471] ? clear_bhb_loop+0x50/0xa0 [ 57.994507][ T471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.995474][ T471] RIP: 0033:0x7f7bc2f9e019 [ 57.996244][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.999361][ T471] RSP: 002b:00007f7bc19d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 58.000768][ T471] RAX: ffffffffffffffda RBX: 00007f7bc3226090 RCX: 00007f7bc2f9e019 [ 58.001986][ T471] RDX: 000000000000000d RSI: 0000200000000240 RDI: 0000000000000005 [ 58.003223][ T471] RBP: 00007f7bc303500c R08: 0000000000000000 R09: 0000000000000000 [ 58.004507][ T471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 58.005826][ T471] R13: 00007f7bc3226128 R14: 00007f7bc3226090 R15: 00007ffc6c334148 [ 58.007096][ T471] [ 58.007617][ T471] Modules linked in: [ 58.008338][ T471] ---[ end trace 0000000000000000 ]--- Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.937128][ T471] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.939220][ T471] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.940506][ T471] CPU: 1 UID: 0 PID: 471 Comm: syz.0.43 Not tainted syzkaller #0 89da86cd63dd77ed75a7a6b832383be384370f21 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.942228][ T471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.943864][ T471] RIP: 0010:software_node_register+0x3a/0x200 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.944839][ T471] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 45 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 28 08 9a fe 4d 8b 34 24 4d 85 f6 4c Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.947887][ T471] RSP: 0018:ffffc9000dd47810 EFLAGS: 00010202 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.948922][ T471] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.950197][ T471] RDX: ffffc90002ef7000 RSI: 0000000000008d23 RDI: 0000000000008d24 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.951465][ T471] RBP: ffffc9000dd47850 R08: 0000000000000000 R09: 0000000000000000 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.952757][ T471] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.954050][ T471] R13: ffff88814ae52810 R14: 0000000000000000 R15: 0000000000000000 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.955321][ T471] FS: 00007f7bc19d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.956816][ T471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.957880][ T471] CR2: 00007f7bc2feb700 CR3: 0000000114e94000 CR4: 00000000003526b0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.959108][ T471] Call Trace: Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.959118][ T471] Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.960878][ T471] device_add_software_node+0x1a7/0x310 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.962513][ T471] ? dwc3_pci_probe+0x456/0xab0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.965233][ T471] dwc3_pci_probe+0x5a4/0xab0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.967244][ T471] ? __cfi_dwc3_pci_probe+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.968156][ T471] ? __cfi_mutex_unlock+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.970259][ T471] ? _raw_spin_unlock_irqrestore+0x4a/0x70 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.972291][ T471] pci_device_probe+0x282/0x440 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.974027][ T471] ? __cfi_pci_device_probe+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.974938][ T471] really_probe+0x2e1/0x8b0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.976791][ T471] __driver_probe_device+0x193/0x280 Aug 4 13:05:37 syzkaller kern.[ 58.063141][ T386] veth1_macvtap: left promiscuous mode alert kernel: [ 57.977653][ T471] device_driver_attach+0xdb/0x1f0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.978555][ T471] bind_store+0x1dc/0x230 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.979267][ T471] ? __cfi_bind_store+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.980060][ T471] drv_attr_store+0x91/0xb0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.980831][ T471] ? __cfi_drv_attr_store+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.981667][ T471] sysfs_kf_write+0x141/0x160 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.982505][ T471] ? __cfi_sysfs_kf_write+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.983432][ T471] kernfs_fop_write_iter+0x319/0x510 Aug 4 13:05:37 syzkaller kern.aler[ 58.076143][ T386] veth0_vlan: left promiscuous mode t kernel: [ 57.984342][ T471] vfs_write+0x762/0xfd0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.985050][ T471] ? __cfi_vfs_write+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.985844][ T471] ? __cfi_mutex_lock+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.986650][ T471] ksys_write+0x145/0x260 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.987508][ T471] ? xfd_validate_state+0x68/0x140 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.988509][ T471] ? __cfi_ksys_write+0x10/0x10 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.989359][ T471] ? __kasan_check_write+0x18/0x20 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.990198][ T471] ? fpregs_restore_userregs+0x11c/0x260 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.991134][ T471] __x64_sys_write+0x7f/0x90 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.991897][ T471] x64_s[ 58.091280][ T471] RIP: 0010:software_node_register+0x3a/0x200 ys_call+0x271c/0[ 58.092464][ T471] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 45 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 28 08 9a fe 4d 8b 34 24 4d 85 f6 4c x2ee0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.992684][ T471] do_syscall_64+0x57/0[ 58.096944][ T471] RSP: 0018:ffffc9000dd47810 EFLAGS: 00010202 xf0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.993631][ T471] ? clear_bhb_loop+0x50/0xa0 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.994507][ T471] entry_SYSCALL_64_after_hwframe+0x76/0x7e Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.995474][ T471] RIP: 0033:0x7f7bc2f9e019 [ 58.104256][ T471] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.996244][ T471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 57.999361][ T471] RSP: 002b:00007f7bc19d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 Aug 4 13:05:37 syzkaller kern.alert kernel: [ 58.000768][ T471] RAX: ffffffffffffffda RBX: 00007f7bc3226090 RCX: 00007f7bc2f9e019 [ 58.114660][ T471] RDX: ffffc90002ef7000 RSI: 0000000000008d23 RDI: 0000000000008d24 [ 58.115910][ T471] RBP: ffffc9000dd47850 R08: 0000000000000000 R09: 0000000000000000 [ 58.117177][ T471] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 58.118512][ T471] R13: ffff88814ae52810 R14: 0000000000000000 R15: 0000000000000000 [ 58.119779][ T471] FS: 00007f7bc19d66c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.119806][ T471] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.119824][ T471] CR2: 000055f28828c1f0 CR3: 0000000114e94000 CR4: 00000000003526b0 [ 58.119848][ T471] Kernel panic - not syncing: Fatal exception [ 58.119977][ T471] Kernel Offset: disabled