last executing test programs: 14.453892856s ago: executing program 1 (id=62): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xff, 0xff, 0xff, 0x40, 0x91e, 0x3, 0x0, 0x1, 0x2, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x10, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}, {{0x9, 0x5, 0x3, 0x2, 0x40}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000200)="00000000020000000400000001000000", 0x10) 11.461095549s ago: executing program 1 (id=67): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='7777\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./hbfile\x00', 0x42, 0x1ff) ftruncate(r4, 0x100000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = syz_open_dev$loop(&(0x7f0000001200), 0x0, 0x2) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/mycluster/heartbeat/reg1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/cluster/mycluster/heartbeat/reg1/block_bytes\x00', 0x1, 0x0) write(r7, &(0x7f0000001500)='512\n\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/cluster/mycluster/heartbeat/reg1/start_block\x00', 0x1, 0x0) write(r8, &(0x7f0000001700)='1\n\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./config/cluster/mycluster/heartbeat/reg1/blocks\x00', 0x1, 0x0) write(r9, &(0x7f0000001900)='10\n\x00', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/cluster/mycluster/heartbeat/reg1/dev\x00', 0x1, 0x0) write(r10, &(0x7f0000001b00)='loop0\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./dlmfs_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000002000)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002100)='./dlmfs_mnt/domain1\x00', 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000002200)='./dlmfs_mnt/domain1/lock1\x00', 0x42, 0x1ff) write(r11, &(0x7f0000002300)='EX\n\x00', 0x3) close(r11) unlinkat(0xffffffffffffff9c, &(0x7f0000002200)='./dlmfs_mnt/domain1/lock1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000002100)='./dlmfs_mnt/domain1\x00', 0x200) 11.326299383s ago: executing program 1 (id=68): r0 = syz_usb_connect(0x0, 0x32, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xb95, 0x7720, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)) 10.140938331s ago: executing program 3 (id=76): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000001810341278560000000000010902240001000000000904000009ff000000092100000001222200090581030800000000"], 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0x15, 0x2) ioctl$USBDEVFS_CONTROL(r0, 0xc0185500, &(0x7f0000000100)={0x80, 0x0, 0x0, 0x0, 0x2, 0x3e8, &(0x7f0000000200)}) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000200)) ioctl$USBDEVFS_SETCONFIGURATION(r0, 0x80045505, &(0x7f0000000040)) 8.690201587s ago: executing program 3 (id=84): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107500500010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) syz_usb_ep_write(r0, 0x8d, 0x4, &(0x7f0000000100)="01010101") syz_usb_disconnect(r0) getuid() 8.152860631s ago: executing program 1 (id=85): r0 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) r1 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/drivers/uss720/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='5-1:1.0\x00', 0x5) 6.5302938s ago: executing program 3 (id=98): delete_module(&(0x7f0000000000)='uhci_hcd\x00', 0x800) 6.467953422s ago: executing program 3 (id=99): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040b810bc1e0000010203010902200001010080500904000002ff0000000705810240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x0, &(0x7f0000000200)={0xc0, 0x15, 0x10, "0000010200"/16}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 4.612964778s ago: executing program 1 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='0x80', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='500', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='dummy_udc.0', 0xb) close(r5) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/5-1/dev\x00', 0x0, 0x0) close(r6) 3.081836185s ago: executing program 0 (id=109): openat(0xffffffffffffff9c, &(0x7f0000000040)='./new_id\x00', 0x41, 0x1ff) 3.076153795s ago: executing program 0 (id=111): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x10}) ioctl$KVM_SET_CPUID2(r3, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x1, 0x756e6547, 0x6c65746e, 0x49656e69}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.030221216s ago: executing program 1 (id=113): syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0xd, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x18, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0xf, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x12, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x13, 0x8041) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000200)) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000200)={0x41, 0xc}) 3.011879327s ago: executing program 0 (id=114): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000080)={&(0x7f00000000c0), 0xc, &(0x7f0000000100)={&(0x7f0000000140)={0x6c, 0x2, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x3}, @IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x4}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}]}]}, 0x6c}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000200), 0xc, &(0x7f0000000240)={&(0x7f0000000280)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000300)={&(0x7f0000000340), 0xc, &(0x7f0000000380)={&(0x7f00000003c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000440)={&(0x7f0000000480), 0xc, &(0x7f00000004c0)={&(0x7f0000000500)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000580)={&(0x7f00000005c0), 0xc, &(0x7f0000000600)={&(0x7f0000000640)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000006c0)={&(0x7f0000000700), 0xc, &(0x7f0000000740)={&(0x7f0000000780)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000800)={&(0x7f0000000840), 0xc, &(0x7f0000000880)={&(0x7f00000008c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000940)={&(0x7f0000000980), 0xc, &(0x7f00000009c0)={&(0x7f0000000a00)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000a80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b00)={&(0x7f0000000b40)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000bc0)={&(0x7f0000000c00), 0xc, &(0x7f0000000c40)={&(0x7f0000000c80)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000d00)={&(0x7f0000000d40), 0xc, &(0x7f0000000d80)={&(0x7f0000000dc0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) poll(0x0, 0x0, 0x4b0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000e40)={&(0x7f0000000e80), 0xc, &(0x7f0000000ec0)={&(0x7f0000000f00)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000f80)={&(0x7f0000000fc0), 0xc, &(0x7f0000001000)={&(0x7f0000001040)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001100), 0xc, &(0x7f0000001140)={&(0x7f0000001180)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001200)={&(0x7f0000001240), 0xc, &(0x7f0000001280)={&(0x7f00000012c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001340)={&(0x7f0000001380), 0xc, &(0x7f00000013c0)={&(0x7f0000001400)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001480)={&(0x7f00000014c0), 0xc, &(0x7f0000001500)={&(0x7f0000001540)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000015c0)={&(0x7f0000001600), 0xc, &(0x7f0000001640)={&(0x7f0000001680)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001700)={&(0x7f0000001740), 0xc, &(0x7f0000001780)={&(0x7f00000017c0)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001840)={&(0x7f0000001880), 0xc, &(0x7f00000018c0)={&(0x7f0000001900)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000001980)={&(0x7f00000019c0), 0xc, &(0x7f0000001a00)={&(0x7f0000001a40)={0x54, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e24}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}]}]}, 0x54}}, 0x0) 2.88232293s ago: executing program 3 (id=116): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='0\x00', &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='md0\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/block/md0/md/level\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='raid1\x00', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_mnt/block/md0/md/raid_disks\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='2\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_mnt/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='7:0\x00', 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_mnt/block/md0/md/array_state\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='active\x00', 0x7) nanosleep(&(0x7f0000000e00)={0x1}, 0x0) 2.169417187s ago: executing program 0 (id=117): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/msr/parameters/allow_writes\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/irq_vectors/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(0xffffffffffffffff) mount(&(0x7f00000003c0)=@filename='none\x00', &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000540)="f440040000000000", 0x8, 0x830) pwrite64(r2, &(0x7f0000000580)="f440080000000000", 0x8, 0x830) 2.152362218s ago: executing program 0 (id=118): syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201100100000040cd06040100010102030109022000010100c0010904000002000000000705010240000007058103400001"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x11e1a300}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCSBRK(r0, 0x542b) 2.05520857s ago: executing program 2 (id=121): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/bus/pci/devices\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000200), 0x1000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/bus/pci/drivers\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000400), 0x1000) 2.04854025s ago: executing program 3 (id=122): syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x409, 0x63, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 1.942329523s ago: executing program 2 (id=123): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000000/0x1000000)=nil}) madvise(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x17) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0) 1.66225844s ago: executing program 2 (id=124): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/PNP0501:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='acpi-battery\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/PNP0B00:00/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='acpi-battery\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/LNXPWRBN:00/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='acpi-battery\x00', 0xd) 1.65199066s ago: executing program 2 (id=125): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-adapter\x00', 0x0, 0x0) 1.598310011s ago: executing program 2 (id=126): syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x0) syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='dummy_udc.0\n', 0xc) pipe2(&(0x7f0000000400)={0x0, 0x0}, 0x0) read(r0, &(0x7f0000000500), 0x1) 1.313821408s ago: executing program 0 (id=127): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers_probe\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0\x00', 0x2) close(r0) r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff0040da0b538100200102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/r8152-cfgselector/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='5-1:1.0\x00', 0x8) (async) syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', 0x1}) nanosleep(&(0x7f0000000800)={0x1}, 0x0) 1.060274674s ago: executing program 2 (id=128): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040720c0c0000000000000109022000010100803209040000040000000007050102400000070581024000000705020240000007058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000200)=@ethtool_ts_info}) 103.219798ms ago: executing program 4 (id=129): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/msr/parameters/allow_writes\x00', 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing\x00', 0x1ff) mount(&(0x7f00000001c0)=@filename='none\x00', &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/events/irq_vectors/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\n', 0x2) close(0xffffffffffffffff) mount(&(0x7f00000003c0)=@filename='none\x00', &(0x7f0000000400)='./dev\x00', &(0x7f0000000440)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000540)="f440040000000000", 0x8, 0x830) pwrite64(r2, &(0x7f0000000580)="f440080000000000", 0x8, 0x830) 102.969718ms ago: executing program 4 (id=130): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/null\x00', 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/zero\x00', 0x2, 0x0) 102.784438ms ago: executing program 4 (id=131): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='md0\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='1.0\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff) ftruncate(r2, 0x200000) pwrite64(r2, &(0x7f0000001000)="fc4e2ba90100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006400000000000000010000000000000000080000000000004000000002000000000000000000000000000000000000000000000000000000000000000008000000000000f00f0000f00f0000000000000000000000000000000000000000000000000000000000000000640000000000000001000000000000000000000000000000eb7f2ca902000000000200000000000000000000000000000000000000000000000000000100", 0x104, 0x1fe000) r3 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x2) ioctl$LOOP_SET_FD(r3, 0x4c00, r2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r4, &(0x7f0000000a00)='7:0\n\x00', 0x4) 46.35901ms ago: executing program 4 (id=132): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="6c6e6fc3", 0x4}], 0x1, 0x0, &(0x7f0000000000), 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16.09501ms ago: executing program 4 (id=133): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 0s ago: executing program 4 (id=134): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0) write(r1, &(0x7f00000001c0)='\n03U', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='dwc3-pci\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0) mmap(&(0x7f0000810000/0x10000)=nil, 0x10000, 0x3, 0x11, r4, 0x0) write(r4, &(0x7f0000000320)='\n03U', 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r5, &(0x7f0000000380)='dwc3-pci\x00', 0x9) write(r3, &(0x7f00000003c0)='0000:00:02.0\x00', 0xd) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/platform/devices/dwc3.0.auto/power/control\x00', 0x1, 0x0) write(r6, &(0x7f0000000480)='auto\x00', 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/platform/devices/dwc3.1.auto/power/control\x00', 0x1, 0x0) write(r7, &(0x7f0000000500)='auto\x00', 0x5) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r8, &(0x7f0000000580)='auto\x00', 0x5) nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0) write(r6, &(0x7f0000000640)='on\x00', 0x3) write(r7, &(0x7f0000000680)='on\x00', 0x3) write(r8, &(0x7f00000006c0)='on\x00', 0x3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.146' (ED25519) to the list of known hosts. [ 22.548731][ T24] audit: type=1400 audit(1786956873.560:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.551446][ T271] cgroup: Unknown subsys name 'net' [ 22.571621][ T24] audit: type=1400 audit(1786956873.560:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.598832][ T24] audit: type=1400 audit(1786956873.590:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.599253][ T271] cgroup: Unknown subsys name 'devices' [ 22.836470][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.842062][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.981695][ T24] audit: type=1400 audit(1786956873.990:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.004869][ T24] audit: type=1400 audit(1786956873.990:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.029579][ T24] audit: type=1400 audit(1786956873.990:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.058425][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 23.067476][ T24] audit: type=1400 audit(1786956874.080:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.092909][ T24] audit: type=1400 audit(1786956874.080:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.118590][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.118677][ T24] audit: type=1400 audit(1786956874.110:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.152811][ T24] audit: type=1400 audit(1786956874.110:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.067850][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.075596][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.082993][ T279] device bridge_slave_0 entered promiscuous mode [ 24.090707][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.097793][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.105185][ T279] device bridge_slave_1 entered promiscuous mode [ 24.192503][ T284] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.199729][ T284] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.207232][ T284] device bridge_slave_0 entered promiscuous mode [ 24.226093][ T284] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.233144][ T284] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.240595][ T284] device bridge_slave_1 entered promiscuous mode [ 24.276634][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.283689][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.291175][ T282] device bridge_slave_0 entered promiscuous mode [ 24.298248][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.305340][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.312692][ T282] device bridge_slave_1 entered promiscuous mode [ 24.338653][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.345737][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.353080][ T281] device bridge_slave_0 entered promiscuous mode [ 24.362207][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.369287][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.376663][ T281] device bridge_slave_1 entered promiscuous mode [ 24.391828][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.398868][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.406165][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.413193][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.455390][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.462432][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.470114][ T280] device bridge_slave_0 entered promiscuous mode [ 24.478636][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.485758][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.493001][ T280] device bridge_slave_1 entered promiscuous mode [ 24.595161][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.602371][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.610838][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.618327][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.640832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.649301][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.656374][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.697624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.706116][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.714213][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.721308][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.728924][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.736889][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.753369][ T279] device veth0_vlan entered promiscuous mode [ 24.765401][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.772932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.781622][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.790220][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.797891][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.805422][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.813506][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.820559][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.827975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.836151][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.843193][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.850534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.858645][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.865681][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.875644][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.883367][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 24.891323][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.900011][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.907097][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.919324][ T279] device veth1_macvtap entered promiscuous mode [ 24.941497][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.949306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.957635][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.966394][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.974260][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.982497][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.989559][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.997246][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.005177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.013255][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.020310][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.027718][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.035910][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.042920][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.050510][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.058137][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.082804][ T280] device veth0_vlan entered promiscuous mode [ 25.089617][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.098598][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.108177][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.116359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.124278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.132643][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.140923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.149029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.157176][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.165456][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.173733][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.180789][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.188227][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.196325][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.204180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.212539][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.220868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.228848][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.238985][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.246452][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.261224][ T281] device veth0_vlan entered promiscuous mode [ 25.268061][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.276328][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.284278][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.292740][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.301309][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.309157][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.318787][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.326249][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.342746][ T284] device veth0_vlan entered promiscuous mode [ 25.357149][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.365035][ T279] request_module fs-gadgetfs succeeded, but still no fs? [ 25.372548][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.380717][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.389055][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.397409][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.405790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.413997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.422005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.430024][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.437490][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.451009][ T281] device veth1_macvtap entered promiscuous mode [ 25.459875][ T280] device veth1_macvtap entered promiscuous mode [ 25.466494][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.467159][ T279] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.475573][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.500788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.508620][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.516964][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.525373][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.533487][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.541631][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.550087][ T284] device veth1_macvtap entered promiscuous mode [ 25.560951][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.568629][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.577121][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.599408][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.607893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.619664][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.628632][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.637945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.646648][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.654975][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.663168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.676050][ T282] device veth0_vlan entered promiscuous mode [ 25.682263][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.690879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.699729][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.707790][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.716382][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.724655][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.733728][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.741197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.765679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.773899][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.776256][ T310] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.797996][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.806732][ T282] device veth1_macvtap entered promiscuous mode [ 25.835848][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.846445][ T310] APIC base relocation is unsupported by KVM [ 25.862649][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.892246][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.901086][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.901424][ T314] FAULT_INJECTION: forcing a failure. [ 25.901424][ T314] name fail_futex, interval 1, probability 0, space 0, times 1 [ 25.910187][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.935104][ T314] CPU: 0 PID: 314 Comm: syz.4.6 Not tainted syzkaller #0 [ 25.942144][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 25.952214][ T314] Call Trace: [ 25.955565][ T314] __dump_stack+0x21/0x24 [ 25.959905][ T314] dump_stack_lvl+0x1a7/0x208 [ 25.964598][ T314] ? thaw_kernel_threads+0x220/0x220 [ 25.969895][ T314] ? show_regs_print_info+0x18/0x18 [ 25.975091][ T314] ? remove_hrtimer+0x225/0x490 [ 25.979959][ T314] dump_stack+0x15/0x1c [ 25.984103][ T314] should_fail+0x3ab/0x500 [ 25.988515][ T314] get_futex_key+0x13f/0xc30 [ 25.993150][ T314] ? futex_wait_restart+0x240/0x240 [ 25.998341][ T314] futex_wake+0x11c/0x570 [ 26.002664][ T314] ? futex_wait+0x6f0/0x6f0 [ 26.007157][ T314] do_futex+0xfad/0x1270 [ 26.011385][ T314] ? can_reuse_spf_vma+0xe0/0xe0 [ 26.016318][ T314] ? __kasan_check_write+0x14/0x20 [ 26.021426][ T314] ? futex_exit_release+0x1e0/0x1e0 [ 26.026613][ T314] ? get_timespec64+0x116/0x1b0 [ 26.031461][ T314] ? timespec64_add_safe+0x1f0/0x1f0 [ 26.036755][ T314] ? __kasan_check_write+0x14/0x20 [ 26.042336][ T314] __se_sys_futex+0x2ba/0x370 [ 26.047016][ T314] ? __kasan_check_write+0x14/0x20 [ 26.052519][ T314] ? __x64_sys_futex+0x100/0x100 [ 26.057879][ T314] ? fpu__clear_all+0x20/0x20 [ 26.062952][ T314] __x64_sys_futex+0xe5/0x100 [ 26.067632][ T314] do_syscall_64+0x31/0x40 [ 26.072046][ T314] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.077937][ T314] RIP: 0033:0x7f60ebef20d9 [ 26.082344][ T314] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.101955][ T314] RSP: 002b:00007ffd3c01ef78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 26.110355][ T314] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60ebef20d9 [ 26.118319][ T314] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f60ec179fa8 [ 26.126281][ T314] RBP: 000000000000085d R08: 0000000000000013 R09: 0000000000000000 [ 26.134245][ T314] R10: 00007f60ec179fa0 R11: 0000000000000246 R12: 0000000000000000 [ 26.135641][ T20] usb 2-1: Using ep0 maxpacket: 8 [ 26.142252][ T314] R13: 00007f60ec179fac R14: 00007f60ec179fa8 R15: 00007f60ec179fa0 [ 26.205207][ T313] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.264917][ T20] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 26.273602][ T20] usb 2-1: config 0 has no interface number 0 [ 26.280359][ T20] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 26.289884][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.299993][ T20] usb 2-1: config 0 descriptor?? [ 26.454882][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.488042][ T25] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 26.565038][ T313] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 26.575086][ T313] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 26.604848][ T323] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.745040][ T313] usb 1-1: New USB device found, idVendor=04dd, idProduct=8005, bcdDevice= 0.00 [ 26.754124][ T313] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.762215][ T313] usb 1-1: Product: syz [ 26.766399][ T313] usb 1-1: Manufacturer: syz [ 26.771020][ T313] usb 1-1: SerialNumber: syz [ 26.794891][ T320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.802057][ T320] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 26.844914][ T323] usb 5-1: Using ep0 maxpacket: 32 [ 26.855000][ T15] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 26.864987][ T15] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 26.914875][ T25] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 26.922745][ T25] usb 3-1: can't read configurations, error -71 [ 26.974923][ T323] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 26.984084][ T323] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.992861][ T323] usb 5-1: config 0 descriptor?? [ 27.034886][ T15] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.01 [ 27.045253][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.053276][ T15] usb 4-1: Product: syz [ 27.057504][ T15] usb 4-1: Manufacturer: syz [ 27.062195][ T15] usb 4-1: SerialNumber: syz [ 27.084909][ T322] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.092020][ T322] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 27.287387][ T54] usb 5-1: USB disconnect, device number 2 [ 27.814840][ T25] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.823893][ T54] usb 4-1: USB disconnect, device number 2 [ 28.035043][ T313] zaurus: probe of 1-1:1.0 failed with error -71 [ 28.042820][ T313] usb 1-1: USB disconnect, device number 2 [ 28.333983][ T24] kauditd_printk_skb: 44 callbacks suppressed [ 28.333995][ T24] audit: type=1400 audit(1786956879.340:118): avc: denied { create } for pid=348 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.359807][ T25] usb 3-1: New USB device found, idVendor=2040, idProduct=b120, bcdDevice= 0.00 [ 28.370014][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.376083][ T24] audit: type=1400 audit(1786956879.340:119): avc: denied { bind } for pid=348 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.397650][ T25] usb 3-1: Product: syz [ 28.397660][ T25] usb 3-1: Manufacturer: syz [ 28.397669][ T25] usb 3-1: SerialNumber: syz [ 28.411458][ T24] audit: type=1400 audit(1786956879.340:120): avc: denied { setopt } for pid=348 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.431593][ T24] audit: type=1400 audit(1786956879.340:121): avc: denied { connect } for pid=348 comm="syz.3.16" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 28.461269][ T24] audit: type=1400 audit(1786956879.470:122): avc: denied { write } for pid=351 comm="syz.3.17" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 28.540737][ T24] audit: type=1400 audit(1786956879.550:123): avc: denied { map_create } for pid=361 comm="syz.0.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 28.578394][ T24] audit: type=1400 audit(1786956879.590:124): avc: denied { create } for pid=365 comm="syz.0.23" dev="anon_inodefs" ino=16440 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.586953][ T366] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 28.600089][ T24] audit: type=1400 audit(1786956879.590:125): avc: denied { ioctl } for pid=365 comm="syz.0.23" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=16440 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 28.644018][ T15] input: syz0 as /devices/virtual/misc/uhid/0003:0001:0001.0001/input/input4 [ 28.653192][ T24] audit: type=1400 audit(1786956879.650:126): avc: denied { read write } for pid=367 comm="syz.0.24" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.670034][ T15] hid-generic 0003:0001:0001.0001: input,hidraw0: USB HID v0.01 Keyboard [syz0] on syz0 [ 28.677740][ T24] audit: type=1400 audit(1786956879.650:127): avc: denied { open } for pid=367 comm="syz.0.24" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 28.743527][ T369] fido_id[369]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 28.831468][ T377] smpboot: CPU 1 is now offline [ 28.840027][ T377] x86: Booting SMP configuration: [ 28.845241][ T377] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 28.851854][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 28.852955][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 28.878074][ T377] smpboot: CPU 1 is now offline [ 28.885865][ T377] x86: Booting SMP configuration: [ 28.890934][ T377] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 28.897812][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 28.898644][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 28.934839][ T25] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.074831][ T15] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 29.274838][ T313] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 29.434867][ T15] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.445264][ T15] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.455023][ T25] usb 4-1: New USB device found, idVendor=0bda, idProduct=2832, bcdDevice= 1.00 [ 29.467184][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.475200][ T25] usb 4-1: Product: syz [ 29.479377][ T25] usb 4-1: Manufacturer: syz [ 29.483966][ T25] usb 4-1: SerialNumber: syz [ 29.624865][ T15] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 29.633973][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.635070][ T313] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 29.642630][ T15] usb 1-1: Product: syz [ 29.651922][ T313] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 29.656488][ T15] usb 1-1: Manufacturer: syz [ 29.670381][ T15] usb 1-1: SerialNumber: syz [ 29.715305][ T15] usb-storage 1-1:1.0: USB Mass Storage device detected [ 29.722856][ T15] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 29.736498][ T25] usb 4-1: USB disconnect, device number 3 [ 29.824967][ T313] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 29.834080][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.842190][ T313] usb 5-1: Product: syz [ 29.846415][ T313] usb 5-1: Manufacturer: syz [ 29.850997][ T313] usb 5-1: SerialNumber: syz [ 29.917339][ T15] usb 1-1: USB disconnect, device number 3 [ 30.314657][ T305] usb 3-1: USB disconnect, device number 3 [ 30.488267][ C0] Spurious interrupt (vector 0xf4) on CPU#0. Acked [ 30.546051][ C0] Spurious interrupt (vector 0xf4) on CPU#0. Acked [ 30.674837][ T305] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.744841][ T15] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.764961][ T290] android_work: sent uevent USB_STATE=CONNECTED [ 30.914835][ T305] usb 3-1: Using ep0 maxpacket: 8 [ 31.034856][ T305] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 31.043033][ T305] usb 3-1: config 0 has no interface number 0 [ 31.064845][ T305] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 31.073891][ T305] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.095462][ T305] usb 3-1: config 0 descriptor?? [ 31.154903][ T15] usb 1-1: Dual-Role OTG device on HNP port [ 31.174969][ T15] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 5.10 [ 31.184158][ T15] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.215110][ T290] android_work: sent uevent USB_STATE=CONFIGURED [ 31.315317][ T15] cdc_acm 1-1:1.0: ttyACM1: USB ACM device [ 31.341580][ T390] using random self ethernet address [ 31.353996][ T390] using random host ethernet address [ 31.365507][ T25] usb 3-1: USB disconnect, device number 4 [ 31.379139][ T416] udc-core: couldn't find an available UDC or it's busy [ 31.387940][ T416] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.764951][ T15] usb 4-1: new low-speed USB device number 4 using dummy_hcd [ 31.945231][ T313] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 31.956239][ T313] usb 5-1: USB disconnect, device number 3 [ 32.004815][ T15] usb 4-1: Invalid ep0 maxpacket: 64 [ 32.154845][ T15] usb 4-1: new low-speed USB device number 5 using dummy_hcd [ 32.294833][ T290] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 32.314842][ T313] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.394831][ T15] usb 4-1: Invalid ep0 maxpacket: 64 [ 32.400430][ T15] usb usb4-port1: attempt power cycle [ 32.654890][ T290] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 32.664901][ T290] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 32.784893][ T290] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice= 1.00 [ 32.794127][ T290] usb 3-1: New USB device strings: Mfr=1, Product=1, SerialNumber=0 [ 32.802168][ T290] usb 3-1: Product: syz [ 32.806400][ T290] usb 3-1: Manufacturer: syz [ 32.814835][ T15] usb 4-1: new low-speed USB device number 6 using dummy_hcd [ 32.815400][ T313] usb 5-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= 0.00 [ 32.825160][ T432] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 32.831504][ T313] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 32.838849][ T432] raw-gadget.4 gadget: fail, usb_ep_enable returned -22 [ 32.846496][ T313] usb 5-1: Product: syz [ 32.857481][ T313] usb 5-1: Manufacturer: syz [ 32.904865][ T15] usb 4-1: Invalid ep0 maxpacket: 64 [ 33.054843][ T15] usb 4-1: new low-speed USB device number 7 using dummy_hcd [ 33.144882][ T15] usb 4-1: Invalid ep0 maxpacket: 64 [ 33.150402][ T15] usb usb4-port1: unable to enumerate USB device [ 33.162442][ T313] usb 2-1: USB disconnect, device number 2 [ 33.599139][ T25] usb 5-1: USB disconnect, device number 4 [ 33.624826][ T313] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 34.067929][ T25] usb 3-1: USB disconnect, device number 5 [ 34.374836][ T290] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.392001][ T447] udc-core: couldn't find an available UDC or it's busy [ 34.399122][ T447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.407630][ T447] udc-core: couldn't find an available UDC or it's busy [ 34.414673][ T447] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 34.434460][ T24] kauditd_printk_skb: 17 callbacks suppressed [ 34.434471][ T24] audit: type=1400 audit(1786956885.440:145): avc: denied { read } for pid=448 comm="syz.3.53" name="idVendor" dev="configfs" ino=15771 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 34.436383][ T449] file system registered [ 34.545273][ T455] process 'syz.3.55' launched './file1' with NULL argv: empty string added [ 34.554318][ T24] audit: type=1400 audit(1786956885.560:146): avc: denied { execute } for pid=454 comm="syz.3.55" name="file1" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.576568][ T24] audit: type=1400 audit(1786956885.560:147): avc: denied { execute_no_trans } for pid=454 comm="syz.3.55" path="/16/file1" dev="tmpfs" ino=107 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 34.587834][ T454] process '/newroot/16/file1' started with executable stack [ 34.612245][ T24] audit: type=1400 audit(1786956885.620:148): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 34.644373][ T24] audit: type=1400 audit(1786956885.620:149): avc: denied { bpf } for pid=456 comm="syz.2.56" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 34.665146][ T24] audit: type=1400 audit(1786956885.680:150): avc: denied { sys_module } for pid=460 comm="syz.2.58" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 34.904868][ T290] usb 5-1: New USB device found, idVendor=083a, idProduct=1046, bcdDevice= 0.00 [ 34.913992][ T290] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.922058][ T290] usb 5-1: Product: syz [ 34.926386][ T290] usb 5-1: Manufacturer: syz [ 34.930970][ T290] usb 5-1: SerialNumber: syz [ 34.994833][ T15] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 35.114835][ T313] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 35.122478][ T313] usb 2-1: can't read configurations, error -71 [ 35.394858][ T15] usb 4-1: unable to get BOS descriptor or descriptor too short [ 35.595120][ T15] usb 4-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 35.604341][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 35.612373][ T15] usb 4-1: Product: syz [ 35.616573][ T15] usb 4-1: Manufacturer: syz [ 35.655553][ T15] uvcvideo: Found UVC 1.00 device syz (8086:0ad2) [ 35.824829][ T311] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 36.024836][ T313] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 36.094841][ T15] uvcvideo: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 36.134857][ T15] uvcvideo: Failed to query (129) UVC probe control : -32 (exp. 26). [ 36.143007][ T15] uvcvideo: Failed to initialize the device (-5). [ 36.184863][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 36.194926][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 36.204633][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 36.214522][ T311] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 36.224281][ T311] usb 3-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 1.00 [ 36.233406][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.254918][ T474] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 36.261951][ T474] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 36.269001][ T474] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 36.276039][ T474] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 36.394853][ T313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 36.404769][ T313] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 36.534863][ T313] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 36.543992][ T313] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 36.552007][ T313] usb 2-1: Product: syz [ 36.556220][ T313] usb 2-1: Manufacturer: syz [ 36.574955][ T472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.581978][ T472] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 36.644616][ T477] device lo entered promiscuous mode [ 36.650175][ T477] device veth0 entered promiscuous mode [ 36.932623][ T482] udc-core: couldn't find an available UDC or it's busy [ 36.939696][ T482] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 37.116653][ T311] usb 4-1: USB disconnect, device number 8 [ 37.680677][ T323] usb 5-1: USB disconnect, device number 5 [ 37.894832][ T311] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 38.094848][ T323] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 38.414924][ T311] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 38.424155][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.432235][ T311] usb 4-1: Product: syz [ 38.436659][ T311] usb 4-1: Manufacturer: syz [ 38.441255][ T311] usb 4-1: SerialNumber: syz [ 38.525281][ T311] usb 2-1: USB disconnect, device number 4 [ 38.539261][ T24] audit: type=1400 audit(1786956889.550:151): avc: denied { read write } for pid=489 comm="syz.1.67" name="loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.563855][ T24] audit: type=1400 audit(1786956889.550:152): avc: denied { open } for pid=489 comm="syz.1.67" path="/dev/loop-control" dev="devtmpfs" ino=114 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.588413][ T24] audit: type=1400 audit(1786956889.550:153): avc: denied { ioctl } for pid=489 comm="syz.1.67" path="/dev/loop-control" dev="devtmpfs" ino=114 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 38.624869][ T323] usb 5-1: New USB device found, idVendor=0bda, idProduct=8156, bcdDevice=30.00 [ 38.633938][ T323] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.642157][ T323] usb 5-1: Product: syz [ 38.646374][ T323] usb 5-1: Manufacturer: syz [ 38.651002][ T323] usb 5-1: SerialNumber: syz [ 38.861959][ T54] usb 3-1: USB disconnect, device number 6 [ 38.976197][ T323] usb 5-1: USB disconnect, device number 6 [ 39.034825][ T311] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.343686][ T313] usb 4-1: USB disconnect, device number 9 [ 39.364824][ T54] usb 3-1: new low-speed USB device number 7 using dummy_hcd [ 39.394865][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.405030][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 39.574876][ T311] usb 2-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 1.00 [ 39.584003][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.592061][ T311] usb 2-1: Product: syz [ 39.596299][ T311] usb 2-1: Manufacturer: syz [ 39.600884][ T311] usb 2-1: SerialNumber: syz [ 39.614824][ T54] usb 3-1: Invalid ep0 maxpacket: 64 [ 39.645292][ T311] asix: probe of 2-1:1.0 failed with error -22 [ 39.764822][ T54] usb 3-1: new low-speed USB device number 8 using dummy_hcd [ 40.004824][ T54] usb 3-1: Invalid ep0 maxpacket: 64 [ 40.010236][ T54] usb usb3-port1: attempt power cycle [ 40.030045][ T24] audit: type=1400 audit(1786956891.040:154): avc: denied { map_read map_write } for pid=519 comm="syz.0.79" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 40.124854][ T311] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 40.150113][ T527] udc-core: couldn't find an available UDC or it's busy [ 40.157142][ T527] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.374818][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 40.434818][ T54] usb 3-1: new low-speed USB device number 9 using dummy_hcd [ 40.504870][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.515834][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 40.524992][ T54] usb 3-1: Invalid ep0 maxpacket: 64 [ 40.528775][ T311] usb 4-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 40.543028][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.551577][ T311] usb 4-1: config 0 descriptor?? [ 40.684821][ T54] usb 3-1: new low-speed USB device number 10 using dummy_hcd [ 40.724840][ T15] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 40.774853][ T54] usb 3-1: Invalid ep0 maxpacket: 64 [ 40.780245][ T54] usb usb3-port1: unable to enumerate USB device [ 40.796824][ T54] usb 4-1: USB disconnect, device number 10 [ 40.974829][ T15] usb 5-1: Using ep0 maxpacket: 8 [ 41.094916][ T15] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 41.103181][ T15] usb 5-1: config 0 has no interface number 0 [ 41.109313][ T15] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 41.118397][ T15] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.126957][ T15] usb 5-1: config 0 descriptor?? [ 41.366663][ T305] usb 5-1: USB disconnect, device number 7 [ 41.574820][ T54] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 41.672467][ T305] usb 2-1: USB disconnect, device number 5 [ 41.796634][ T535] udc-core: couldn't find an available UDC or it's busy [ 41.803590][ T535] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 41.880170][ T537] FAULT_INJECTION: forcing a failure. [ 41.880170][ T537] name fail_futex, interval 1, probability 0, space 0, times 0 [ 41.893062][ T537] CPU: 1 PID: 537 Comm: syz.4.87 Tainted: G S syzkaller #0 [ 41.901581][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 41.911776][ T537] Call Trace: [ 41.915060][ T537] __dump_stack+0x21/0x24 [ 41.919377][ T537] dump_stack_lvl+0x1a7/0x208 [ 41.924097][ T537] ? thaw_kernel_threads+0x220/0x220 [ 41.929385][ T537] ? show_regs_print_info+0x18/0x18 [ 41.934593][ T537] ? remove_hrtimer+0x225/0x490 [ 41.939437][ T537] dump_stack+0x15/0x1c [ 41.943619][ T537] should_fail+0x3ab/0x500 [ 41.948033][ T537] get_futex_key+0x13f/0xc30 [ 41.952613][ T537] ? futex_wait_restart+0x240/0x240 [ 41.957806][ T537] futex_wake+0x11c/0x570 [ 41.962155][ T537] ? futex_wait+0x6f0/0x6f0 [ 41.966677][ T537] ? __kasan_check_write+0x14/0x20 [ 41.971793][ T537] ? put_vma+0x82/0xa0 [ 41.975852][ T537] ? __handle_speculative_fault+0xb79/0x1390 [ 41.981821][ T537] do_futex+0xfad/0x1270 [ 41.986065][ T537] ? finish_fault+0xa60/0xa60 [ 41.990726][ T537] ? __kasan_check_write+0x14/0x20 [ 41.995828][ T537] ? futex_exit_release+0x1e0/0x1e0 [ 42.001021][ T537] ? get_timespec64+0x116/0x1b0 [ 42.005855][ T537] ? timespec64_add_safe+0x1f0/0x1f0 [ 42.011136][ T537] ? __kasan_check_write+0x14/0x20 [ 42.016237][ T537] __se_sys_futex+0x2ba/0x370 [ 42.020906][ T537] ? __kasan_check_write+0x14/0x20 [ 42.026003][ T537] ? __x64_sys_futex+0x100/0x100 [ 42.030940][ T537] ? fpu__clear_all+0x20/0x20 [ 42.035627][ T537] __x64_sys_futex+0xe5/0x100 [ 42.040314][ T537] do_syscall_64+0x31/0x40 [ 42.044736][ T537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.050628][ T537] RIP: 0033:0x7f60ebef20d9 [ 42.055030][ T537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 42.074626][ T537] RSP: 002b:00007ffd3c01ef78 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 42.083030][ T537] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f60ebef20d9 [ 42.090998][ T537] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f60ec179fa8 [ 42.098959][ T537] RBP: 00000000000011bb R08: 0000000000000007 R09: 0000000000000000 [ 42.106924][ T537] R10: 00007f60ec179fa0 R11: 0000000000000246 R12: 0000000000000000 [ 42.114889][ T537] R13: 00007f60ec179fac R14: 00007f60ec179fa8 R15: 00007f60ec179fa0 [ 42.164900][ T54] usb 4-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 1.00 [ 42.173950][ T54] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.194853][ T305] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 42.554909][ T305] usb 2-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 1.00 [ 42.563999][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.604852][ T25] usb 3-1: new full-speed USB device number 11 using dummy_hcd [ 42.667708][ T305] usb 4-1: USB disconnect, device number 11 [ 42.807733][ T311] usb 2-1: USB disconnect, device number 6 [ 42.824184][ T7] blk_update_request: I/O error, dev sda, sector 595686 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 0 [ 42.836142][ T7] blk_update_request: I/O error, dev sda, sector 596192 op 0x1:(WRITE) flags 0x4000 phys_seg 17 prio class 0 [ 42.848031][ T7] blk_update_request: I/O error, dev sda, sector 596704 op 0x1:(WRITE) flags 0x4000 phys_seg 18 prio class 0 [ 42.859663][ T7] blk_update_request: I/O error, dev sda, sector 597216 op 0x1:(WRITE) flags 0x4000 phys_seg 12 prio class 0 [ 42.871523][ T7] blk_update_request: I/O error, dev sda, sector 597728 op 0x1:(WRITE) flags 0x4000 phys_seg 11 prio class 0 [ 42.883240][ T7] blk_update_request: I/O error, dev sda, sector 598240 op 0x1:(WRITE) flags 0x4000 phys_seg 9 prio class 0 [ 42.895007][ T7] blk_update_request: I/O error, dev sda, sector 598752 op 0x1:(WRITE) flags 0x4000 phys_seg 14 prio class 0 [ 42.906995][ T7] blk_update_request: I/O error, dev sda, sector 599264 op 0x1:(WRITE) flags 0x4000 phys_seg 28 prio class 0 [ 42.918746][ T7] blk_update_request: I/O error, dev sda, sector 599776 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 0 [ 42.930485][ T7] blk_update_request: I/O error, dev sda, sector 600288 op 0x1:(WRITE) flags 0x4000 phys_seg 64 prio class 0 [ 42.943759][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2021 starting block 75119) [ 42.955741][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2021 starting block 75604) [ 42.967339][ T306] Buffer I/O error on device sda1, logical block 75081 [ 42.974416][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75815) [ 42.975437][ T306] Buffer I/O error on device sda1, logical block 75082 [ 42.987059][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75822) [ 42.992836][ T306] Buffer I/O error on device sda1, logical block 75083 [ 43.004386][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75851) [ 43.011162][ T306] Buffer I/O error on device sda1, logical block 75084 [ 43.022594][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75862) [ 43.030247][ T306] Buffer I/O error on device sda1, logical block 75085 [ 43.041082][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75901) [ 43.048196][ T306] Buffer I/O error on device sda1, logical block 75086 [ 43.066379][ T25] usb 3-1: unable to get BOS descriptor or descriptor too short [ 43.074077][ T306] Buffer I/O error on device sda1, logical block 75087 [ 43.077969][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75926) [ 43.081549][ T306] Buffer I/O error on device sda1, logical block 75088 [ 43.092642][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75959) [ 43.100179][ T306] Buffer I/O error on device sda1, logical block 75089 [ 43.111046][ T7] EXT4-fs warning (device sda1): ext4_end_bio:351: I/O error 10 writing to inode 2022 starting block 75984) [ 43.118327][ T25] usb 3-1: not running at top speed; connect to a high speed hub [ 43.130252][ T306] Buffer I/O error on device sda1, logical block 75090 [ 43.148108][ T58] Aborting journal on device sda1-8. [ 43.149470][ T560] Buffer I/O error on dev sda1, logical block 0, lost async page write [ 43.153636][ T37] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 43.162240][ T560] Buffer I/O error on dev sda1, logical block 129, lost async page write [ 43.170495][ T58] JBD2: Error -5 detected when updating journal superblock for sda1-8. [ 43.178893][ T560] Buffer I/O error on dev sda1, logical block 135, lost async page write [ 43.195555][ T560] Buffer I/O error on dev sda1, logical block 137, lost async page write [ 43.203974][ T560] Buffer I/O error on dev sda1, logical block 138, lost async page write [ 43.212472][ T560] Buffer I/O error on dev sda1, logical block 145, lost async page write [ 43.220963][ T560] Buffer I/O error on dev sda1, logical block 150, lost async page write [ 43.229696][ T560] Buffer I/O error on dev sda1, logical block 157, lost async page write [ 43.238169][ T560] Buffer I/O error on dev sda1, logical block 158, lost async page write [ 43.255886][ T560] JBD2: Error while async write back metadata bh 0. [ 43.256598][ T560] JBD2: Error while async write back metadata bh 129. [ 43.263361][ T560] JBD2: Error while async write back metadata bh 135. [ 43.270206][ T560] JBD2: Error while async write back metadata bh 137. [ 43.277001][ T560] JBD2: Error while async write back metadata bh 138. [ 43.283764][ T560] JBD2: Error while async write back metadata bh 145. [ 43.285147][ T25] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 120, changing to 4 [ 43.290887][ T560] JBD2: Error while async write back metadata bh 150. [ 43.309004][ T560] JBD2: Error while async write back metadata bh 157. [ 43.315962][ T560] JBD2: Error while async write back metadata bh 158. [ 43.322797][ T560] JBD2: Error while async write back metadata bh 159. [ 43.330214][ T560] JBD2: Error while async write back metadata bh 221. [ 43.337069][ T560] JBD2: Error while async write back metadata bh 224. [ 43.343892][ T560] JBD2: Error while async write back metadata bh 226. [ 43.351004][ T560] JBD2: Error while async write back metadata bh 243. [ 43.358203][ T560] JBD2: Error while async write back metadata bh 261. [ 43.359174][ T271] EXT4-fs (sda1): previous I/O error to superblock detected [ 43.365291][ T560] JBD2: Error while async write back metadata bh 270. [ 43.379248][ T560] JBD2: Error while async write back metadata bh 657. [ 43.386363][ T560] JBD2: Error while async write back metadata bh 4241. [ 43.396916][ T271] EXT4-fs (sda1): I/O error while writing superblock [ 43.400263][ T560] JBD2: Error while async write back metadata bh 5747. [ 43.403931][ T271] EXT4-fs error (device sda1): ext4_journal_check_start:83: Detected aborted journal [ 43.416597][ T560] JBD2: Error while async write back metadata bh 5748. [ 43.417652][ T305] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 43.427556][ T560] JBD2: Error while async write back metadata bh 5749. [ 43.441566][ T560] JBD2: Error while async write back metadata bh 5750. [ 43.446667][ T271] EXT4-fs (sda1): Remounting filesystem read-only [ 43.449137][ T560] JBD2: Error while async write back metadata bh 5751. [ 43.463576][ T564] udc-core: couldn't find an available UDC or it's busy [ 43.469277][ T560] JBD2: Error while async write back metadata bh 5752. [ 43.477616][ T25] usb 3-1: New USB device found, idVendor=0b05, idProduct=1743, bcdDevice= 0.40 [ 43.477644][ T564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.484505][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.507156][ T560] JBD2: Error while async write back metadata bh 5753. [ 43.509170][ T560] JBD2: Error while async write back metadata bh 5754. [ 43.517069][ T560] JBD2: Error while async write back metadata bh 5755. [ 43.520860][ T25] usb 3-1: Product: syz [ 43.535143][ T560] JBD2: Error while async write back metadata bh 5756. [ 43.535165][ T560] JBD2: Error while async write back metadata bh 5757. [ 43.537331][ T25] usb 3-1: Manufacturer: syz [ 43.542313][ T560] JBD2: Error while async write back metadata bh 5758. [ 43.548911][ T25] usb 3-1: SerialNumber: syz [ 43.565080][ T560] JBD2: Error while async write back metadata bh 5759. [ 43.565103][ T560] JBD2: Error while async write back metadata bh 8208. [ 43.571954][ T560] JBD2: Error while async write back metadata bh 8209. [ 43.579373][ T560] JBD2: Error while async write back metadata bh 23725. [ 43.586600][ T560] JBD2: Error while async write back metadata bh 33717. [ 43.598910][ T560] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 43.687423][ T559] ------------[ cut here ]------------ [ 43.692971][ T559] bdi-(unknown) not registered [ 43.698243][ T559] WARNING: CPU: 0 PID: 559 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 43.707667][ T559] Modules linked in: [ 43.708571][ T564] udc-core: couldn't find an available UDC or it's busy [ 43.711611][ T559] CPU: 0 PID: 559 Comm: syz.4.96 Tainted: G S syzkaller #0 [ 43.719217][ T564] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 43.727088][ T559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 43.741497][ T24] audit: type=1400 audit(1786956894.750:155): avc: denied { create } for pid=563 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.744674][ T559] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 43.765854][ T24] audit: type=1400 audit(1786956894.750:156): avc: denied { write } for pid=563 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.770653][ T559] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 43.791439][ T24] audit: type=1400 audit(1786956894.750:157): avc: denied { read } for pid=563 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 43.810163][ T559] RSP: 0000:ffffc9000c96f7d8 EFLAGS: 00010246 [ 43.810175][ T559] RAX: 6d6e2a3b269b6700 RBX: 1ffff11023906cd3 RCX: ffff8881187f3b40 [ 43.810182][ T559] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 43.810190][ T559] RBP: ffffc9000c96f820 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 43.810197][ T559] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff88810aaac068 [ 43.810203][ T559] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 43.810237][ T559] FS: 000055558c227500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 43.885120][ T559] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.891700][ T559] CR2: 0000001b2e623f50 CR3: 0000000129aae000 CR4: 00000000003506b0 [ 43.899721][ T559] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.907712][ T559] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.915724][ T559] Call Trace: [ 43.919019][ T559] mark_buffer_dirty+0x21b/0x330 [ 43.923957][ T559] __block_commit_write+0x1ab/0x240 [ 43.929177][ T559] block_page_mkwrite+0x239/0x270 [ 43.934200][ T559] ? ext4_da_release_space+0x420/0x420 [ 43.939676][ T559] ext4_page_mkwrite+0xb02/0x12f0 [ 43.944708][ T559] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 43.950953][ T559] wp_page_shared+0x45f/0x740 [ 43.955632][ T559] do_wp_page+0xb68/0xd00 [ 43.959963][ T559] handle_pte_fault+0xbc3/0x3910 [ 43.964931][ T559] handle_mm_fault+0xf86/0x1720 [ 43.969781][ T559] ? can_reuse_spf_vma+0xe0/0xe0 [ 43.974723][ T559] ? pick_next_task_fair+0x81d/0xa50 [ 43.980054][ T559] ? __kasan_check_write+0x14/0x20 [ 43.985188][ T559] ? down_read_trylock+0x106/0x160 [ 43.990326][ T559] ? __kasan_check_write+0x14/0x20 [ 43.995449][ T559] ? can_reuse_spf_vma+0xc8/0xe0 [ 44.000394][ T559] do_user_addr_fault+0x576/0xe20 [ 44.005436][ T559] ? do_kern_addr_fault+0x80/0x80 [ 44.010458][ T559] ? __kasan_check_read+0x11/0x20 [ 44.015493][ T559] ? asm_sysvec_reschedule_ipi+0xa/0x20 [ 44.021030][ T559] exc_page_fault+0x5a/0xc0 [ 44.025543][ T559] ? asm_exc_page_fault+0x8/0x30 [ 44.030481][ T559] asm_exc_page_fault+0x1e/0x30 [ 44.035333][ T559] RIP: 0033:0x7f60ebdc6846 [ 44.039748][ T559] Code: 89 4c 24 18 48 89 74 24 10 e8 e6 91 fe ff 49 8b 47 40 48 8b 74 24 10 48 8b 4c 24 18 41 01 77 30 48 29 f0 83 e1 06 49 89 47 40 00 00 b8 01 00 00 00 0f 84 b4 fe ff ff 66 66 2e 0f 1f 84 00 00 [ 44.059401][ T559] RSP: 002b:00007ffd3c01eeb0 EFLAGS: 00010202 [ 44.065504][ T559] RAX: 0000001b2e623f50 RBX: ffffffff818bdd84 RCX: 0000000000000004 [ 44.073484][ T559] RDX: 0000001b2e224220 RSI: 0000000000000004 RDI: 00007f60ecca9720 [ 44.081567][ T559] RBP: 0000000000000000 R08: 00007f60ec164000 R09: 00007f60ec166000 [ 44.089636][ T559] R10: 00000000818bdd88 R11: 0000000000000003 R12: 00007f60ec17a038 [ 44.097638][ T559] R13: 000000000006849d R14: ffffffff818bdf63 R15: 00007f60ecca9720 [ 44.105638][ T559] ? __remove_mapping+0x5a3/0x6b0 [ 44.110658][ T559] ? __remove_mapping+0x3c4/0x6b0 [ 44.115698][ T559] ---[ end trace 37c136a957668e8d ]--- [ 44.121178][ T542] ------------[ cut here ]------------ [ 44.126681][ T542] bdi-(unknown) not registered [ 44.131535][ T542] WARNING: CPU: 1 PID: 542 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 44.140934][ T542] Modules linked in: [ 44.144884][ T542] CPU: 1 PID: 542 Comm: syz.2.89 Tainted: G S W syzkaller #0 [ 44.153392][ T542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.163540][ T542] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 44.169415][ T542] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 44.189178][ T542] RSP: 0000:ffffc9000c45f8b8 EFLAGS: 00010246 [ 44.195438][ T542] RAX: 407d9078c5997700 RBX: 1ffff11023906046 RCX: ffff888117bf3b40 [ 44.203440][ T542] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.211475][ T542] RBP: ffffc9000c45f900 R08: ffffc9000c45f247 R09: fffff5200188be7c [ 44.219520][ T542] R10: dffffc0000000000 R11: fffff5200188be49 R12: ffff88810aaac068 [ 44.227531][ T542] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 44.235521][ T542] FS: 00005555869fb500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 44.244462][ T542] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.251069][ T542] CR2: 0000001b2e423ffc CR3: 000000011701b000 CR4: 00000000003506a0 [ 44.259051][ T542] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.267047][ T542] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.275070][ T542] Call Trace: [ 44.278363][ T542] mark_buffer_dirty+0x21b/0x330 [ 44.283298][ T542] __block_commit_write+0x1ab/0x240 [ 44.288540][ T542] block_page_mkwrite+0x239/0x270 [ 44.293568][ T542] ? ext4_da_release_space+0x420/0x420 [ 44.299056][ T542] ext4_page_mkwrite+0xb02/0x12f0 [ 44.304079][ T542] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 44.310341][ T542] handle_pte_fault+0x1dde/0x3910 [ 44.315385][ T542] handle_mm_fault+0xf86/0x1720 [ 44.320259][ T542] ? can_reuse_spf_vma+0xe0/0xe0 [ 44.325259][ T542] ? __kasan_check_write+0x14/0x20 [ 44.330362][ T542] ? down_read_trylock+0x106/0x160 [ 44.335506][ T542] ? __kasan_check_write+0x14/0x20 [ 44.340622][ T542] ? can_reuse_spf_vma+0xc8/0xe0 [ 44.345570][ T542] do_user_addr_fault+0x576/0xe20 [ 44.350589][ T542] ? do_kern_addr_fault+0x80/0x80 [ 44.355620][ T542] ? debug_smp_processor_id+0x17/0x20 [ 44.360983][ T542] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.367064][ T542] ? exit_to_user_mode_prepare+0x2f/0xa0 [ 44.372690][ T542] exc_page_fault+0x5a/0xc0 [ 44.377200][ T542] ? asm_exc_page_fault+0x8/0x30 [ 44.382130][ T542] asm_exc_page_fault+0x1e/0x30 [ 44.387016][ T542] RIP: 0033:0x7f90d8a94789 [ 44.391444][ T542] Code: 89 dc 41 83 e4 03 0f 85 c9 01 00 00 4c 89 ff be 04 00 00 00 e8 98 92 fe ff 49 8b 47 40 41 83 47 30 04 48 8d 50 fc 49 89 57 40 <89> 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 [ 44.411063][ T542] RSP: 002b:00007ffeab4cfe10 EFLAGS: 00010202 [ 44.417139][ T542] RAX: 0000001b2e424000 RBX: 0000000000000000 RCX: 00000000003ffde8 [ 44.425244][ T542] RDX: 0000001b2e423ffc RSI: 00000000003ffde8 RDI: 00007f90d9977700 [ 44.433230][ T542] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007f90d8e34000 [ 44.441210][ T542] R10: 00007f90d9977700 R11: 0000000000000000 R12: 0000000000000000 [ 44.449187][ T542] R13: 000000000000134d R14: ffffffff8128d1c8 R15: 00007f90d9977720 [ 44.457185][ T542] ? switch_fpu_return+0x178/0x330 [ 44.462297][ T542] ---[ end trace 37c136a957668e8e ]--- [ 44.467764][ T271] ------------[ cut here ]------------ [ 44.468456][ T305] usb 2-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 1.00 [ 44.473272][ T271] bdi-(unknown) not registered [ 44.487160][ T305] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 44.487291][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 44.504540][ T271] Modules linked in: [ 44.508488][ T271] CPU: 0 PID: 271 Comm: syz-executor Tainted: G S W syzkaller #0 [ 44.517414][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 44.527568][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 44.533377][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 44.552935][ T302] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.553129][ T271] RSP: 0000:ffffc9000093f7d8 EFLAGS: 00010246 [ 44.566255][ T302] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.570462][ T271] RAX: d013e97c59dacb00 RBX: 1ffff11023906d90 RCX: ffff88811e5513c0 [ 44.582837][ T302] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.589813][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 44.589822][ T271] RBP: ffffc9000093f820 R08: ffff8881f7052fbf R09: 1ffff1103ee0a5f7 [ 44.589830][ T271] R10: dffffc0000000000 R11: ffffed103ee0a5f8 R12: ffff88810aaac068 [ 44.589837][ T271] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 44.589874][ T271] FS: 0000555562fc1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 44.635237][ T25] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 44.642100][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 44.651085][ T25] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 44.657068][ T271] CR2: 00007f5cac587020 CR3: 000000011e4e5000 CR4: 00000000003506b0 [ 44.657077][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.657101][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.665815][ T25] usb 3-1: 1:1 : unknown format tag 0x5 is detected. processed as MPEG. [ 44.672956][ T271] Call Trace: [ 44.700694][ T271] mark_buffer_dirty+0x21b/0x330 [ 44.704896][ T25] usb 3-1: found format II with max.bitrate = 512, frame size=4095 [ 44.705717][ T271] __block_commit_write+0x1ab/0x240 [ 44.718758][ T271] block_page_mkwrite+0x239/0x270 [ 44.723799][ T271] ? ext4_da_release_space+0x420/0x420 [ 44.729302][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 44.732683][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #259: comm udevd: reading directory lblock 0 [ 44.734394][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 44.751928][ T271] wp_page_shared+0x45f/0x740 [ 44.752047][ T305] usb 2-1: USB disconnect, device number 7 [ 44.756652][ T271] do_wp_page+0xb68/0xd00 [ 44.756667][ T271] handle_pte_fault+0xbc3/0x3910 [ 44.756689][ T271] handle_mm_fault+0xf86/0x1720 [ 44.756736][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 44.774067][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.776654][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 44.776700][ T271] ? vfs_write+0xaeb/0xd70 [ 44.783609][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.794211][ T271] ? __kasan_check_write+0x14/0x20 [ 44.794224][ T271] ? down_read_trylock+0x106/0x160 [ 44.794235][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 44.794245][ T271] ? vmacache_update+0xb7/0x120 [ 44.794266][ T271] ? find_vma+0x13b/0x150 [ 44.794276][ T271] do_user_addr_fault+0x576/0xe20 [ 44.794311][ T271] ? do_kern_addr_fault+0x80/0x80 [ 44.805004][ T25] usb 3-1: 2:1: invalid format type 0x1002 is detected, processed as PCM [ 44.814974][ T271] ? debug_smp_processor_id+0x17/0x20 [ 44.814988][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.815037][ T271] exc_page_fault+0x5a/0xc0 [ 44.836404][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.839173][ T271] ? asm_exc_page_fault+0x8/0x30 [ 44.844596][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1642: comm udevd: reading directory lblock 0 [ 44.849215][ T271] asm_exc_page_fault+0x1e/0x30 [ 44.849223][ T271] RIP: 0033:0x7f5cb32f40c7 [ 44.849233][ T271] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 44.849240][ T271] RSP: 002b:00007ffe1baf9fd8 EFLAGS: 00010207 [ 44.858987][ T95] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #1480: comm udevd: reading directory lblock 0 [ 44.863069][ T271] RAX: 00007f5cac587000 RBX: 0000555562fe0c30 RCX: 00007f5cac587000 [ 44.881761][ T343] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 44.884996][ T271] RDX: 00007f5cac5878ba RSI: 0000555562fddf50 RDI: 00007f5cac587020 [ 44.900391][ T25] usb 3-1: USB disconnect, device number 11 [ 44.901314][ T271] RBP: 00007ffe1baf9ff0 R08: 0000000000000000 R09: 0000000000000000 [ 44.988880][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555562fd6470 [ 44.996901][ T271] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 45.004915][ T271] ---[ end trace 37c136a957668e8f ]--- [ 45.010414][ T311] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 45.017031][ T271] ------------[ cut here ]------------ [ 45.023455][ T271] bdi-(unknown) not registered [ 45.028336][ T271] WARNING: CPU: 1 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 45.037731][ T271] Modules linked in: [ 45.041640][ T271] CPU: 1 PID: 271 Comm: syz-executor Tainted: G S W syzkaller #0 [ 45.050514][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.060717][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 45.066675][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 45.086593][ T271] RSP: 0000:ffffc9000093f7d8 EFLAGS: 00010246 [ 45.092691][ T271] RAX: d013e97c59dacb00 RBX: 1ffff1102390662e RCX: ffff88811e5513c0 [ 45.100770][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 45.108847][ T271] RBP: ffffc9000093f820 R08: ffffc9000093f167 R09: fffff52000127e60 [ 45.116900][ T271] R10: dffffc0000000000 R11: fffff52000127e2d R12: ffff88810aaac068 [ 45.124918][ T271] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 45.132901][ T271] FS: 0000555562fc1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.141889][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.148514][ T271] CR2: 00007f5caf186f98 CR3: 000000011e4e5000 CR4: 00000000003526a0 [ 45.156574][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.164556][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.172555][ T271] Call Trace: [ 45.175861][ T271] mark_buffer_dirty+0x21b/0x330 [ 45.180779][ T271] __block_commit_write+0x1ab/0x240 [ 45.186001][ T271] block_page_mkwrite+0x239/0x270 [ 45.191041][ T271] ? ext4_da_release_space+0x420/0x420 [ 45.196521][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 45.201570][ T271] ? ktime_get_coarse_real_ts64+0xda/0xf0 [ 45.207334][ T271] ? current_time+0x1ad/0x2c0 [ 45.212029][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 45.218329][ T271] wp_page_shared+0x45f/0x740 [ 45.223015][ T271] do_wp_page+0xb68/0xd00 [ 45.227375][ T271] handle_pte_fault+0xbc3/0x3910 [ 45.232310][ T271] handle_mm_fault+0xf86/0x1720 [ 45.237191][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 45.242135][ T271] ? __kasan_check_write+0x14/0x20 [ 45.247283][ T271] ? down_read_trylock+0x106/0x160 [ 45.252402][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 45.257113][ T271] ? vmacache_update+0xb7/0x120 [ 45.261968][ T271] ? find_vma+0x13b/0x150 [ 45.266326][ T271] do_user_addr_fault+0x576/0xe20 [ 45.271453][ T271] ? do_kern_addr_fault+0x80/0x80 [ 45.276521][ T271] ? debug_smp_processor_id+0x17/0x20 [ 45.281902][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.288011][ T271] exc_page_fault+0x5a/0xc0 [ 45.292538][ T271] ? asm_exc_page_fault+0x8/0x30 [ 45.297514][ T271] asm_exc_page_fault+0x1e/0x30 [ 45.302369][ T271] RIP: 0033:0x7f5cb31f7163 [ 45.306808][ T271] Code: 85 0e 01 00 00 be 04 00 00 00 48 89 df e8 c5 b8 fe ff 48 8b 43 40 83 43 30 04 48 89 df be 08 00 00 00 48 8d 50 fc 48 89 53 40 <89> 68 fc 8b 6b 30 e8 a2 b8 fe ff 48 8b 43 48 be 06 00 00 00 89 28 [ 45.326474][ T271] RSP: 002b:00007ffe1baf9e10 EFLAGS: 00010202 [ 45.332555][ T271] RAX: 00007f5caf186f9c RBX: 00007ffe1baf9f40 RCX: 0000000000000000 [ 45.340584][ T271] RDX: 00007f5caf186f98 RSI: 0000000000000008 RDI: 00007ffe1baf9f40 [ 45.348585][ T271] RBP: 00000000000003e6 R08: 0000000000000000 R09: 0000000000000000 [ 45.356591][ T271] R10: 00007ffe1baf9f20 R11: 0000000000000000 R12: 0000000000000000 [ 45.364589][ T271] R13: 0000000000000064 R14: ffffffffffffff9c R15: 0000000000000000 [ 45.372593][ T271] ---[ end trace 37c136a957668e90 ]--- [ 45.378442][ T271] ------------[ cut here ]------------ [ 45.378707][ T571] FAULT_INJECTION: forcing a failure. [ 45.378707][ T571] name fail_futex, interval 1, probability 0, space 0, times 0 [ 45.383943][ T271] bdi-(unknown) not registered [ 45.384032][ T271] WARNING: CPU: 1 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 45.384035][ T271] Modules linked in: [ 45.384052][ T271] CPU: 1 PID: 271 Comm: syz-executor Tainted: G S W syzkaller #0 [ 45.384058][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.384072][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 45.384083][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 45.384090][ T271] RSP: 0000:ffffc9000093f7d8 EFLAGS: 00010246 [ 45.384115][ T271] RAX: d013e97c59dacb00 RBX: 1ffff110239064b4 RCX: ffff88811e5513c0 [ 45.384122][ T271] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 45.384131][ T271] RBP: ffffc9000093f820 R08: ffff8881f7127453 R09: 1ffff1103ee24e8a [ 45.384139][ T271] R10: dffffc0000000000 R11: ffffed103ee24e8b R12: ffff88810aaac068 [ 45.384147][ T271] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 45.384157][ T271] FS: 0000555562fc1500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.384188][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.397697][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 45.401746][ T271] CR2: 00007f5cafb87020 CR3: 000000011e4e5000 CR4: 00000000003526a0 [ 45.401778][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.414987][ T311] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 45.415349][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.424279][ T571] CPU: 0 PID: 571 Comm: syz.0.101 Tainted: G S W syzkaller #0 [ 45.434298][ T271] Call Trace: [ 45.439836][ T571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 45.439839][ T571] Call Trace: [ 45.439854][ T571] __dump_stack+0x21/0x24 [ 45.439882][ T571] dump_stack_lvl+0x1a7/0x208 [ 45.439893][ T571] ? thaw_kernel_threads+0x220/0x220 [ 45.439904][ T571] ? show_regs_print_info+0x18/0x18 [ 45.439917][ T571] ? remove_hrtimer+0x225/0x490 [ 45.439927][ T571] dump_stack+0x15/0x1c [ 45.439959][ T571] should_fail+0x3ab/0x500 [ 45.459884][ T271] mark_buffer_dirty+0x21b/0x330 [ 45.465597][ T571] get_futex_key+0x13f/0xc30 [ 45.465609][ T571] ? futex_wait_restart+0x240/0x240 [ 45.465621][ T571] futex_wake+0x11c/0x570 [ 45.465632][ T571] ? yield_to_task_fair+0x150/0x150 [ 45.465643][ T571] ? futex_wait+0x6f0/0x6f0 [ 45.465654][ T571] ? wake_up_new_task+0x4b8/0x6b0 [ 45.465663][ T571] do_futex+0xfad/0x1270 [ 45.465695][ T571] ? kernel_clone+0x695/0x950 [ 45.473674][ T271] __block_commit_write+0x1ab/0x240 [ 45.481617][ T571] ? __delayed_free_task+0x20/0x20 [ 45.481628][ T571] ? create_io_thread+0x170/0x170 [ 45.481640][ T571] ? __kasan_check_write+0x14/0x20 [ 45.481651][ T571] ? futex_exit_release+0x1e0/0x1e0 [ 45.481662][ T571] ? get_timespec64+0x116/0x1b0 [ 45.481673][ T571] ? timespec64_add_safe+0x1f0/0x1f0 [ 45.481685][ T571] ? __set_current_blocked+0x208/0x230 [ 45.481724][ T571] __se_sys_futex+0x2ba/0x370 [ 45.490117][ T271] block_page_mkwrite+0x239/0x270 [ 45.497628][ T571] ? __kasan_check_write+0x14/0x20 [ 45.497639][ T571] ? __x64_sys_futex+0x100/0x100 [ 45.497650][ T571] ? fpu__clear_all+0x20/0x20 [ 45.497661][ T571] __x64_sys_futex+0xe5/0x100 [ 45.497673][ T571] do_syscall_64+0x31/0x40 [ 45.497683][ T571] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.497691][ T571] RIP: 0033:0x7f5fbbcf90d9 [ 45.497725][ T571] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.505932][ T271] ? ext4_da_release_space+0x420/0x420 [ 45.514609][ T571] RSP: 002b:00007ffd24381148 EFLAGS: 00000246 [ 45.521410][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 45.530946][ T571] ORIG_RAX: 00000000000000ca [ 45.530954][ T571] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007f5fbbcf90d9 [ 45.530960][ T571] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f5fbbf81098 [ 45.530966][ T571] RBP: 000000000000085d R08: 0000000000000009 R09: 0000000000000000 [ 45.530971][ T571] R10: 00007f5fbbf80fa0 R11: 0000000000000246 R12: 0000000000000001 [ 45.530978][ T571] R13: 00007f5fbbf8109c R14: 00007f5fbbf81098 R15: 00007f5fbbf81090 [ 45.695041][ T311] usb 4-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 0.00 [ 45.697490][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 45.702720][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.708164][ T271] wp_page_shared+0x45f/0x740 [ 45.713511][ T311] usb 4-1: Product: syz [ 45.717864][ T271] do_wp_page+0xb68/0xd00 [ 45.724020][ T311] usb 4-1: Manufacturer: syz [ 45.727980][ T271] handle_pte_fault+0xbc3/0x3910 [ 45.732889][ T311] usb 4-1: SerialNumber: syz [ 45.737364][ T271] handle_mm_fault+0xf86/0x1720 [ 45.765167][ T568] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.772157][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 45.777810][ T568] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 45.783486][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 45.914375][ T271] ? vfs_write+0xaeb/0xd70 [ 45.918854][ T271] ? __kasan_check_write+0x14/0x20 [ 45.923981][ T271] ? down_read_trylock+0x106/0x160 [ 45.929125][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 45.933811][ T271] ? vmacache_update+0xb7/0x120 [ 45.938709][ T271] ? find_vma+0x13b/0x150 [ 45.943067][ T271] do_user_addr_fault+0x576/0xe20 [ 45.948201][ T271] ? do_kern_addr_fault+0x80/0x80 [ 45.953262][ T271] ? debug_smp_processor_id+0x17/0x20 [ 45.958700][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.964816][ T271] exc_page_fault+0x5a/0xc0 [ 45.969327][ T271] ? asm_exc_page_fault+0x8/0x30 [ 45.974255][ T271] asm_exc_page_fault+0x1e/0x30 [ 45.979152][ T271] RIP: 0033:0x7f5cb32f40c7 [ 45.983579][ T271] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 46.003248][ T271] RSP: 002b:00007ffe1baf9fd8 EFLAGS: 00010207 [ 46.009360][ T271] RAX: 00007f5cafb87000 RBX: 0000555562fd81e0 RCX: 00007f5cafb87000 [ 46.017402][ T271] RDX: 00007f5cafb8747b RSI: 0000555562fde8a0 RDI: 00007f5cafb87020 [ 46.025435][ T271] RBP: 00007ffe1baf9ff0 R08: 0000000000000000 R09: 0000000000000000 [ 46.033432][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555562fd9b60 [ 46.041444][ T271] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.049499][ T271] ---[ end trace 37c136a957668e91 ]--- [ 46.055170][ T271] ------------[ cut here ]------------ [ 46.060663][ T271] bdi-(unknown) not registered [ 46.065551][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 46.067646][ T24] audit: type=1400 audit(1786956897.080:158): avc: denied { write } for pid=578 comm="syz.1.102" name="UDC" dev="configfs" ino=16092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 46.074944][ T271] Modules linked in: [ 46.074989][ T271] CPU: 0 PID: 271 Comm: syz-executor Tainted: G S W syzkaller #0 [ 46.098638][ T24] audit: type=1400 audit(1786956897.110:159): avc: denied { open } for pid=578 comm="syz.1.102" path="/8/config/usb_gadget/g1/UDC" dev="configfs" ino=16092 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 46.101085][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.111525][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 46.134422][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 46.165938][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 46.185642][ T271] RSP: 0000:ffffc9000093f7d8 EFLAGS: 00010246 [ 46.191742][ T271] RAX: d013e97c59dacb00 RBX: 1ffff11023906922 RCX: ffff88811e5513c0 [ 46.199796][ T271] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 46.207819][ T271] RBP: ffffc9000093f820 R08: ffffc9000093f167 R09: fffff52000127e60 [ 46.215885][ T271] R10: dffffc0000000000 R11: fffff52000127e2d R12: ffff88810aaac068 [ 46.223861][ T271] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 46.231918][ T271] FS: 0000555562fc1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.240933][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.247605][ T271] CR2: 00007f5cb11e1fb6 CR3: 000000011e4e5000 CR4: 00000000003506b0 [ 46.255634][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.263617][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.271608][ T271] Call Trace: [ 46.274938][ T271] mark_buffer_dirty+0x21b/0x330 [ 46.279873][ T271] __block_commit_write+0x1ab/0x240 [ 46.285229][ T271] block_page_mkwrite+0x239/0x270 [ 46.290276][ T271] ? ext4_da_release_space+0x420/0x420 [ 46.295761][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 46.300791][ T271] ? memcpy+0x56/0x70 [ 46.304824][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 46.311071][ T271] wp_page_shared+0x45f/0x740 [ 46.315801][ T271] do_wp_page+0xb68/0xd00 [ 46.320139][ T271] handle_pte_fault+0xbc3/0x3910 [ 46.325103][ T271] handle_mm_fault+0xf86/0x1720 [ 46.330006][ T271] ? kernel_sock_ip_overhead+0x240/0x240 [ 46.335678][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 46.340614][ T271] ? __kasan_check_write+0x14/0x20 [ 46.345761][ T271] ? down_read_trylock+0x106/0x160 [ 46.350877][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 46.355615][ T271] ? vmacache_update+0xb7/0x120 [ 46.360494][ T271] ? find_vma+0x13b/0x150 [ 46.364872][ T271] do_user_addr_fault+0x576/0xe20 [ 46.369910][ T271] ? do_kern_addr_fault+0x80/0x80 [ 46.374979][ T271] ? debug_smp_processor_id+0x17/0x20 [ 46.380357][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.386450][ T271] exc_page_fault+0x5a/0xc0 [ 46.390964][ T271] ? asm_exc_page_fault+0x8/0x30 [ 46.395942][ T271] asm_exc_page_fault+0x1e/0x30 [ 46.400831][ T271] RIP: 0033:0x7f5cb3203662 [ 46.405299][ T271] Code: 48 83 e8 01 48 89 ca 48 c1 e0 0e 48 83 c6 08 48 c1 ea 06 48 c1 e9 03 48 01 f8 bf 01 00 00 00 81 e2 ff 3f 00 00 83 e1 07 d3 e7 <40> 08 bc 02 40 40 00 00 49 39 f0 0f 85 e7 fe ff ff 48 8b 44 24 10 [ 46.424959][ T271] RSP: 002b:00007ffe1bafa110 EFLAGS: 00010246 [ 46.431017][ T271] RAX: 00007f5cb11db000 RBX: 0000555562fd81e0 RCX: 0000000000000000 [ 46.439020][ T271] RDX: 0000000000002f76 RSI: 0000555562fd5fe8 RDI: 0000000000000001 [ 46.447039][ T271] RBP: 00007ffe1bafa610 R08: 0000555562fd5fe8 R09: 0000000000000039 [ 46.455060][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 00007ffe1bafa450 [ 46.463066][ T271] R13: 00007ffe1bafa240 R14: 585858582e7a7973 R15: 00007ffe1bafa190 [ 46.471087][ T271] ---[ end trace 37c136a957668e92 ]--- [ 46.477879][ T271] ------------[ cut here ]------------ [ 46.483346][ T271] bdi-(unknown) not registered [ 46.488249][ T271] WARNING: CPU: 0 PID: 271 at fs/fs-writeback.c:2337 __mark_inode_dirty+0x650/0x960 [ 46.498045][ T271] Modules linked in: [ 46.501940][ T271] CPU: 0 PID: 271 Comm: syz-executor Tainted: G S W syzkaller #0 [ 46.510871][ T271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 46.521015][ T271] RIP: 0010:__mark_inode_dirty+0x650/0x960 [ 46.526944][ T271] Code: fc ff df 41 80 7c 05 00 00 74 08 4c 89 ff e8 a7 f4 ec ff 49 8b 3f e8 0f af de ff 48 c7 c7 e0 65 29 85 48 89 c6 e8 80 e5 c6 02 <0f> 0b e9 2f fe ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 8e fc ff [ 46.546992][ T271] RSP: 0000:ffffc9000093f7d8 EFLAGS: 00010246 [ 46.553301][ T271] RAX: d013e97c59dacb00 RBX: 1ffff11023906a9c RCX: ffff88811e5513c0 [ 46.561399][ T271] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 46.569477][ T271] RBP: ffffc9000093f820 R08: ffffc9000093f167 R09: fffff52000127e60 [ 46.577572][ T271] R10: dffffc0000000000 R11: fffff52000127e2d R12: ffff88810aaac068 [ 46.585644][ T271] R13: 1ffff1102155580c R14: 0000000000000000 R15: ffff88810aaac060 [ 46.593636][ T271] FS: 0000555562fc1500(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.602649][ T271] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.609282][ T271] CR2: 00007f5cae987020 CR3: 000000011e4e5000 CR4: 00000000003506b0 [ 46.617291][ T271] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.625280][ T271] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.633237][ T271] Call Trace: [ 46.636568][ T271] mark_buffer_dirty+0x21b/0x330 [ 46.641524][ T271] __block_commit_write+0x1ab/0x240 [ 46.646766][ T271] block_page_mkwrite+0x239/0x270 [ 46.651803][ T271] ? ext4_da_release_space+0x420/0x420 [ 46.657328][ T271] ext4_page_mkwrite+0xb02/0x12f0 [ 46.662408][ T271] ? ext4_change_inode_journal_flag+0x5e0/0x5e0 [ 46.668718][ T271] wp_page_shared+0x45f/0x740 [ 46.673408][ T271] do_wp_page+0xb68/0xd00 [ 46.677785][ T271] handle_pte_fault+0xbc3/0x3910 [ 46.682729][ T271] handle_mm_fault+0xf86/0x1720 [ 46.687611][ T271] ? fsnotify_clear_child_dentry_flag+0xe0/0xe0 [ 46.693872][ T271] ? can_reuse_spf_vma+0xe0/0xe0 [ 46.698829][ T271] ? vfs_write+0xaeb/0xd70 [ 46.703271][ T271] ? __kasan_check_write+0x14/0x20 [ 46.708414][ T271] ? down_read_trylock+0x106/0x160 [ 46.713534][ T271] ? __init_rwsem+0x1c0/0x1c0 [ 46.718238][ T271] ? vmacache_update+0xb7/0x120 [ 46.723158][ T271] ? find_vma+0x13b/0x150 [ 46.727523][ T271] do_user_addr_fault+0x576/0xe20 [ 46.732559][ T271] ? do_kern_addr_fault+0x80/0x80 [ 46.737620][ T271] ? debug_smp_processor_id+0x17/0x20 [ 46.743022][ T271] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.749144][ T271] exc_page_fault+0x5a/0xc0 [ 46.753659][ T271] ? asm_exc_page_fault+0x8/0x30 [ 46.758623][ T271] asm_exc_page_fault+0x1e/0x30 [ 46.763493][ T271] RIP: 0033:0x7f5cb32f40c7 [ 46.767952][ T271] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 46.787591][ T271] RSP: 002b:00007ffe1baf9fd8 EFLAGS: 00010203 [ 46.793760][ T271] RAX: 00007f5cae987000 RBX: 0000555562fd5b00 RCX: 00007f5cae987000 [ 46.801756][ T271] RDX: 00007f5cae9870e1 RSI: 0000555562fd8620 RDI: 00007f5cae987020 [ 46.809746][ T271] RBP: 00007ffe1baf9ff0 R08: 0000000000000000 R09: 0000000000000000 [ 46.817747][ T271] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555562fd6190 [ 46.825738][ T271] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.833711][ T271] ---[ end trace 37c136a957668e93 ]--- [ 46.889369][ T24] audit: type=1400 audit(1786956897.900:160): avc: denied { mount } for pid=594 comm="syz.2.110" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.922138][ T24] audit: type=1400 audit(1786956897.930:161): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 46.984533][ T24] audit: type=1400 audit(1786956897.990:162): avc: denied { create } for pid=606 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.005180][ T24] audit: type=1400 audit(1786956898.000:163): avc: denied { write } for pid=606 comm="syz.0.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 47.065047][ T311] usb 4-1: USB disconnect, device number 12 [ 47.154890][ T575] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 47.224818][ T15] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 47.424825][ T575] usb 5-1: device descriptor read/64, error -71 [ 47.464814][ T15] usb 2-1: Using ep0 maxpacket: 8 [ 47.584979][ T15] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 47.593398][ T15] usb 2-1: config 179 has no interface number 0 [ 47.599732][ T15] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10 [ 47.611097][ T15] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024 [ 47.622437][ T15] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 47.633756][ T15] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 47.643878][ T15] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 47.657224][ T15] usb 2-1: config 179 interface 65 has no altsetting 0 [ 47.664097][ T15] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 47.673175][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.694914][ T604] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 47.716479][ T15] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 47.824812][ T575] usb 5-1: device descriptor read/64, error -71 [ 47.844945][ T617] udc-core: couldn't find an available UDC or it's busy [ 47.851954][ T617] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 47.888063][ T24] audit: type=1400 audit(1786956898.900:164): avc: denied { read write } for pid=620 comm="syz.2.120" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 47.890592][ T621] device-mapper: ioctl: ioctl interface mismatch: kernel(4.44.0), user(4.50.0), cmd(3) [ 47.924279][ T24] audit: type=1400 audit(1786956898.900:165): avc: denied { open } for pid=620 comm="syz.2.120" path="/24/dev_mnt/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 47.949037][ T24] audit: type=1400 audit(1786956898.900:166): avc: denied { ioctl } for pid=620 comm="syz.2.120" path="/24/dev_mnt/mapper/control" dev="devtmpfs" ino=260 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 47.975409][ T623] usb usb1: usbfs: process 623 (syz.1.113) did not claim interface 0 before use [ 47.985156][ T623] usb usb2: usbfs: process 623 (syz.1.113) did not claim interface 0 before use [ 47.996900][ T623] usb usb3: usbfs: process 623 (syz.1.113) did not claim interface 0 before use [ 48.094853][ T575] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 48.264841][ T15] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 48.364926][ T575] usb 5-1: device descriptor read/64, error -71 [ 48.406794][ T24] audit: type=1400 audit(1786956899.420:167): avc: denied { create } for pid=638 comm="syz.2.126" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 48.584902][ T15] usb 4-1: not running at top speed; connect to a high speed hub [ 48.664926][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 48.679100][ T642] udc-core: couldn't find an available UDC or it's busy [ 48.681349][ T15] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64 [ 48.686111][ T642] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 48.764832][ T575] usb 5-1: device descriptor read/64, error -71 [ 48.854868][ T15] usb 4-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00 [ 48.863997][ T15] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.872057][ T15] usb 4-1: Product: syz [ 48.876291][ T15] usb 4-1: Manufacturer: syz [ 48.880879][ T15] usb 4-1: SerialNumber: syz [ 48.885620][ T575] usb usb5-port1: attempt power cycle [ 48.904896][ T627] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 48.911950][ T627] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 49.285023][ T313] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 49.294855][ T575] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 49.464828][ T575] usb 5-1: device descriptor read/8, error -71 [ 49.529417][ T179] EXT4-fs warning: 26 callbacks suppressed [ 49.529430][ T179] EXT4-fs warning (device sda1): htree_dirblock_to_tree:1063: inode #121: lblock 0: comm crond: error -5 reading directory block [ 49.628005][ T305] usb 4-1: USB disconnect, device number 13 [ 49.644857][ T313] usb 3-1: config index 0 descriptor too short (expected 32, got 18) [ 49.653009][ T313] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4 [ 49.665936][ T313] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 0.00 [ 49.675010][ T313] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 49.717845][ T570] EXT4-fs error: 28 callbacks suppressed [ 49.717855][ T570] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 49.735039][ T570] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 49.746614][ T570] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #264: comm udevd: reading directory lblock 0 [ 49.774932][ T575] usb 5-1: device descriptor read/8, error -71 [ 49.981516][ T659] Zero length message leads to an empty skb [ 50.004000][ T661] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 50.015707][ T661] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 50.024126][ T661] CPU: 1 PID: 661 Comm: syz.4.134 Tainted: G S W syzkaller #0 [ 50.032698][ T661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 50.042771][ T661] RIP: 0010:software_node_register+0x36/0x1f0 [ 50.048842][ T661] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 5d e9 b2 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 cc 5e ed fe 4d 8b 34 24 4d 85 f6 4c [ 50.068438][ T661] RSP: 0018:ffffc9000d48f770 EFLAGS: 00010202 [ 50.074525][ T661] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 [ 50.082519][ T661] RDX: ffffc90003d65000 RSI: 000000000000849c RDI: 000000000000849d [ 50.090499][ T661] RBP: ffffc9000d48f7b0 R08: ffff8881173443bf R09: 1ffff11022e68877 [ 50.098477][ T661] R10: dffffc0000000000 R11: ffffed1022e68878 R12: 0000000000000008 [ 50.106447][ T661] R13: ffff88811d363010 R14: 0000000000000000 R15: 0000000000000000 [ 50.114422][ T661] FS: 00007f60ea94b6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 50.123379][ T661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.129966][ T661] CR2: 00007f60ea94aff8 CR3: 000000011d13d000 CR4: 00000000003506a0 [ 50.138052][ T661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.146035][ T661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.154023][ T661] Call Trace: [ 50.157333][ T661] device_add_software_node+0x1ac/0x310 [ 50.162899][ T661] dwc3_pci_probe+0x397/0x980 [ 50.167584][ T661] ? dwc3_link_state_show+0x4c0/0x4c0 [ 50.173075][ T661] ? mutex_trylock+0xb0/0xb0 [ 50.177716][ T661] ? pci_match_device+0xa27/0xa70 [ 50.182754][ T661] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 50.188570][ T661] pci_device_probe+0x27a/0x440 [ 50.193431][ T661] really_probe+0x373/0xa60 [ 50.197948][ T661] driver_probe_device+0xe1/0x190 [ 50.202974][ T661] device_driver_attach+0x17a/0x280 [ 50.208215][ T661] bind_store+0x369/0x3c0 [ 50.212551][ T661] ? unbind_store+0x300/0x300 [ 50.217238][ T661] ? __kasan_check_write+0x14/0x20 [ 50.222352][ T661] ? mutex_lock+0x92/0xf0 [ 50.226681][ T661] ? unbind_store+0x300/0x300 [ 50.231366][ T661] drv_attr_store+0x79/0xa0 [ 50.235880][ T661] ? drv_attr_show+0x90/0x90 [ 50.240474][ T661] sysfs_kf_write+0x129/0x150 [ 50.245165][ T661] ? sysfs_kf_read+0x270/0x270 [ 50.249934][ T661] kernfs_fop_write_iter+0x2bd/0x400 [ 50.255227][ T661] vfs_write+0x770/0xd70 [ 50.259477][ T661] ? kernel_write+0x3c0/0x3c0 [ 50.264168][ T661] ? mutex_trylock+0xb0/0xb0 [ 50.268771][ T661] ? __fget_files+0x2e1/0x340 [ 50.273460][ T661] ? __fdget_pos+0x2d2/0x380 [ 50.278066][ T661] ? ksys_write+0x70/0x260 [ 50.282497][ T661] ksys_write+0x14a/0x260 [ 50.286836][ T661] ? __ia32_sys_read+0x90/0x90 [ 50.291611][ T661] ? __kasan_check_read+0x11/0x20 [ 50.296655][ T661] __x64_sys_write+0x7b/0x90 [ 50.301250][ T661] do_syscall_64+0x31/0x40 [ 50.305674][ T661] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 50.311572][ T661] RIP: 0033:0x7f60ebef20d9 [ 50.316006][ T661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 50.335607][ T661] RSP: 002b:00007f60ea94b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 50.344045][ T661] RAX: ffffffffffffffda RBX: 00007f60ec179fa0 RCX: 00007f60ebef20d9 [ 50.352183][ T661] RDX: 000000000000000d RSI: 00002000000002c0 RDI: 0000000000000005 [ 50.360152][ T661] RBP: 00007f60ebf89024 R08: 0000000000000000 R09: 0000000000000000 [ 50.368120][ T661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 50.376123][ T661] R13: 00007f60ec17a038 R14: 00007f60ec179fa0 R15: 00007ffd3c01ee18 [ 50.384107][ T661] Modules linked in: [ 50.388731][ T77] EXT4-fs error (device sda1): __ext4_find_entry:1657: inode #2: comm syslogd: reading directory lblock 0 [ 50.390301][ T661] ---[ end trace 37c136a957668e94 ]--- [ 50.405895][ T661] RIP: 0010:software_node_register+0x36/0x1f0 [ 50.412062][ T661] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 5d e9 b2 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 cc 5e ed fe 4d 8b 34 24 4d 85 f6 4c Aug 17 08:55:01 syzkaller kern.a[ 50.434136][ T661] RSP: 0018:ffffc9000d48f770 EFLAGS: 00010202 lert kernel: [ [ 50.441163][ T661] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 50.015707][ T6[ 50.450579][ T661] RDX: ffffc90003d65000 RSI: 000000000000849c RDI: 000000000000849d 61] KASAN: null-[ 50.459987][ T661] RBP: ffffc9000d48f7b0 R08: ffff8881173443bf R09: 1ffff11022e68877 ptr-deref in ran[ 50.469760][ T661] R10: dffffc0000000000 R11: ffffed1022e68878 R12: 0000000000000008 ge [0x0000000000[ 50.478675][ T661] R13: ffff88811d363010 R14: 0000000000000000 R15: 0000000000000000 000008-0x0000000[ 50.488097][ T661] FS: 00007f60ea94b6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 00000000f] [ 50.498415][ T661] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.505873][ T661] CR2: 00007f15dc5d22f8 CR3: 000000011d13d000 CR4: 00000000003506b0 [ 50.513904][ T661] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.521977][ T661] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.529994][ T661] Kernel panic - not syncing: Fatal exception [ 50.536324][ T661] Kernel Offset: disabled [ 50.540653][ T661] Rebooting in 86400 seconds..