last executing test programs: 7.401816749s ago: executing program 3 (id=502): syz_mount_image$fuse(0x0, 0x0, 0x3000009, 0x0, 0x1, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x70bd28, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x0, 0x0, 0x7, 0x200}, [@RTA_IIF={0x8}, @RTA_DST={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x33}}]}, 0x2c}}, 0xea5bc50b6199d77e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f0000000340)={0x10000000000000cf, 0x0, [{}]}) 7.330154886s ago: executing program 3 (id=503): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000800)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000840)) 7.143617805s ago: executing program 1 (id=504): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x206c02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000001a001a00bca30000000000002403000020feffff620af0fff8ffffff71a4f2ff000000001f030000000000002e1a0200000000002604fdffff02000014010000030000001d140000000000007a0a00fe0000001f0f14000000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f300020000fe275daf51efd601b6bf01c8e8b1b526375ee4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff61623604000000000000006a89adaf17b0a6041bdeebdfd1f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564163427afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101a3062cd54f9ff51d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566d674e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48153baae244e7bf573eac34b781337ad5905c6bbf1137548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a90144022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab540b8d7b4ead35a385e0b4a26b702396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb11883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcd857ab15e355713767c536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ced301efeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef0981000000000000ff0f40b1888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fc08001011e32f80fb60e14b9eee094277bbc170882c8890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f62e3f753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bb25b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963342aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b6ef9d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec035d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf79a43746979f99f6a1527f004f1e37a3926937e84fb478199dc1020f4beb98b8074bf7df8b5e783637da740800000000000000c55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae633d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80eba439772bf60a1db18c472dafc5569adc282928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a6a2740000000000000000000000000000000000000000000a0009dd14b38f2f4426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4100260ffcd8f1d04166d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb0000000000000005375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10baa804a707f0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d34d3757b1450fdb0a9a69f432e277f3a0386eb2bd3305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07618b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e040000003c3ffad44d2a376def42e41e9fc31678257e040fa7cf32c221aaac08000000000000001a00000000000000000000173570f0c11ae694b0f7a4f9c2f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d641ef02e4d5295d756e110522a7a945b93fb705b95b6aae27a8fb33732ce1da1c0b1af8eb9222a06e984ab1e6984c8bdc12360627137ab67b6b68ab08acb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481efe46a4ce86be0b1d8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0c6cb4bed8594a39bd76d3ef8a7ab014e787596db796bd93a36c2880423291e3bccc86f66ba792ff4d87b3f80e5908779e51c5e9055fc5b23605cd000c723187ef09dcf4b07b06a9342f3f62ee7acddff292082c1f4d8eb9561f80873a09a1ae0c9af1121175e5600f43a1179484502009759264a5729f07c2b218fa36ba2316a99aaad0130df83d0bda1e711290f78c143ea143967b00adcd77e6ad5e48d839ea61aadb83e4d071c54691924a3830d3e7b5c198bb0ed623153590000000000000000004b985ea1702f34f2f85b168c083e810ed567e3f1979b9ed1a4bf6a10dac825c96a0828b335de445a4880bb6474157efd1a72ca46ae4cbe3ab648c9bc4867a5a4cb87d7d6d55475b34b3cb6aa9e2337d4e04a37e35109752522ac9b186ddd80c47da6a2f4ef7bb909c975520000000000000000000000219cf5c1376ab33786f6b856d354e90a2733f78f2d188057cead3480eade49d55b770fad7fa000d23da6275768810b6b2df91d3a991ea98d929d271696c258d5b735d5db11df434e7dd1b7c1ca05cea3977df564115f4ec6ffab1d2ff8a642ca50934b3fbe44b0abeba9df209566984a29dfc0466e439a94e177b3c4d5f6e92b8176b9d6ddeeeb196fa964217f88"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0), 0x8, 0x10, &(0x7f0000001b40), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001c40)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001d40), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001dc0)=0x2) recvmmsg(r3, &(0x7f0000001e00), 0x80002c1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001e40)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001f40)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x4c840) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x8, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000800040000000000080000006b110b000000000095"], &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="2801000000000000010000007cc746ab48cc155da55035f97437c9ad34b2973fc3fe86e98e72ade1cbeb8b32e42fcd731bcccc5058f7bcaf94e44094b508127c958fb4e0d831b66f54e516832b3ceddbe86e8547c6dd4cec7136365a292a06becb9159eb084666b7ef12ae9c01476f0d682848fe4330b0294b6584e4968c3c037717bdbfd2aff76a949e1600a1c514ddb3e50dff393c809cb6cdb8a70000", @ANYBLOB="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"], 0x128}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 5.12194026s ago: executing program 1 (id=513): r0 = timerfd_create(0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5188}], 0x1, 0xfffffffffffffffd, &(0x7f0000000040)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000080)) timerfd_settime(r0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x1000}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010028bd7000fcdbdf2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc) 5.085744714s ago: executing program 1 (id=514): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.079458335s ago: executing program 3 (id=515): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010f20421140000000000010902240001060000000904000102030084000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 5.053385447s ago: executing program 0 (id=516): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000880)=@newlink={0x38, 0x10, 0x437, 0x800000, 0x0, {0x0, 0x0, 0x0, r2, 0x504c3}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c014}, 0x0) sendmsg$inet(r0, &(0x7f0000000f80)={&(0x7f0000000900)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}, 0x200000e0) 4.869312146s ago: executing program 0 (id=517): mkdir(&(0x7f0000000300)='./dev\x00', 0x1fc) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000005c0)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 4.689125674s ago: executing program 0 (id=518): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001740)={0x44, &(0x7f0000000500)={0x0, 0x1a, 0x2, "6619"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.174926866s ago: executing program 2 (id=522): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa104}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) 4.174420547s ago: executing program 4 (id=523): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000980)=""/75, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x25000, 0x91, &(0x7f00000007c0)=""/145}, {0x4, 0x2b, &(0x7f0000000b80)=""/43}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 4.161985318s ago: executing program 2 (id=524): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x206c02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0), 0x8, 0x10, &(0x7f0000001b40), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001c40)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001d40), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001dc0)=0x2) recvmmsg(r3, &(0x7f0000001e00), 0x80002c1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001e40)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001f40)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, 0x0, 0x4c840) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x8, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000800040000000000080000006b110b000000000095"], &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="2801000000000000010000007cc746ab48cc155da55035f97437c9ad34b2973fc3fe86e98e72ade1cbeb8b32e42fcd731bcccc5058f7bcaf94e44094b508127c958fb4e0d831b66f54e516832b3ceddbe86e8547c6dd4cec7136365a292a06becb9159eb084666b7ef12ae9c01476f0d682848fe4330b0294b6584e4968c3c037717bdbfd2aff76a949e1600a1c514ddb3e50dff393c809cb6cdb8a70000", @ANYBLOB="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"], 0x128}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 4.158782198s ago: executing program 4 (id=525): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000800)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000840)) 2.727771033s ago: executing program 2 (id=526): r0 = timerfd_create(0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5188}], 0x1, 0xfffffffffffffffd, &(0x7f0000000040)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000080)) timerfd_settime(r0, 0x1, &(0x7f00000003c0)={{}, {0x0, 0x1000}}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010028bd7000fcdbdf2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000500), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc) 2.714008525s ago: executing program 2 (id=527): r0 = timerfd_create(0x5, 0x0) ppoll(&(0x7f0000000000)=[{r0, 0x5188}], 0x1, 0xfffffffffffffffd, &(0x7f0000000040)={[0x8]}, 0x8) clock_gettime(0x0, &(0x7f0000000080)) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x1c0) mount(0x0, 0x0, &(0x7f0000000280)='proc\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000002c0)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000380)=0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fcdbdf2501000000000000000241000000030013"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000440)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f00000004c0), 0x651, 0x0) recvmmsg(r4, &(0x7f0000000500), 0x4000087, 0x2, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x101402, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x7, 0x401d031, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000540)='keyring\x00', &(0x7f0000000580)={'syz', 0x0}, 0x0, 0xfffff, 0xfffffffffffffffc) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000005c0), 0xca00, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r6, 0x29, 0x48, &(0x7f0000000700)={0x6, 0x1, '\x00', [@pad1, @ra={0x5, 0x2, 0x5}, @generic={0x8}]}, 0x18) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) 1.976062259s ago: executing program 1 (id=528): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f0000000380)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ef) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4008, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './mydev'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 1.77375703s ago: executing program 4 (id=529): mkdir(&(0x7f0000000300)='./dev\x00', 0x1fc) mount(0x0, &(0x7f00000003c0)='./dev\x00', &(0x7f0000000400)='devtmpfs\x00', 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./mnt\x00', 0x1ff) mount(&(0x7f0000000480)=@filename='./dev/sda1\x00', &(0x7f00000004c0)='./mnt\x00', &(0x7f0000000500)='ext4\x00', 0x8410, 0x0) chdir(0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/sda\x00', 0x1c5e42, 0x0) write$P9_RUNLINKAT(r0, &(0x7f00000005c0)={0xfffffffffffffecb, 0x4d, 0x1}, 0xffffffd7) 1.764940511s ago: executing program 3 (id=530): r0 = socket$inet_tcp(0x2, 0x1, 0x6) r1 = socket$inet_tcp(0x2, 0x1, 0x6) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, 0x0, 0x0) accept$inet(r0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000280)={0x1, &(0x7f00000002c0)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.710435207s ago: executing program 1 (id=531): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, &(0x7f0000000040), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) getuid() prlimit64(0x0, 0xe, &(0x7f0000000080)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000140)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000001c0)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000240), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000280), 0x4000087, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$binderfs_log(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder_logs/transactions_hashed\x00', 0x0, 0x0) dup(0xffffffffffffffff) ioctl$FS_IOC_FIEMAP(0xffffffffffffffff, 0xc020660b, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000300)='veth1_to_team\x00', 0x10) sendto$inet(r3, 0x0, 0x0, 0x804, &(0x7f0000000340)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$SIOCGSTAMPNS(r3, 0x8907, 0x0) recvmmsg(r3, &(0x7f0000000380)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x20, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'lo\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=@ipv6_newaddr={0x34, 0x14, 0x4, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r4}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) gettid() syz_open_dev$loop(&(0x7f00000003c0), 0x8f, 0x40240) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={0xffffffffffffffff, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000009c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.66985473s ago: executing program 4 (id=532): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f00000001c0)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0xaf01, 0x0) r3 = eventfd(0xfffffdfe) ioctl$VHOST_SET_LOG_FD(r2, 0x4004af07, &(0x7f0000000040)=r3) ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000080)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f00000000c0)={0x1, 0x1, 0x0, 0x0, &(0x7f0000000100)=""/61, 0x60000}) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f0000000140)=0x1) 1.624052465s ago: executing program 0 (id=533): mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file1\x00', 0x42, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./file2\x00', 0x207) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000400)='./file0/file1\x00', 0x40, 0x83) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, 0x0) 1.617067576s ago: executing program 0 (id=534): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000280), r1) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r1) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0xa104}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@NLBL_MGMT_A_DOMAIN={0xa, 0x1, '\xbb\xbb\xbb\xbb\xbb\xbb'}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x8010}, 0x40000) 1.606379517s ago: executing program 4 (id=535): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) r2 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000300)=r2) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r2}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000780)={0x0, 0x0, 0x0, &(0x7f0000000980)=""/75, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/247, &(0x7f00000000c0)=""/87, &(0x7f0000000880)=""/91}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000bc0)={0x2, 0x0, [{0x25000, 0x91, &(0x7f00000007c0)=""/145}, {0x4, 0x2b, &(0x7f0000000b80)=""/43}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 1.570122811s ago: executing program 2 (id=536): prlimit64(0x0, 0x6, &(0x7f0000000000)={0x5, 0x800001000089}, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket(0x10, 0x2, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000580)={0x6, 0x3, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000002000095"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffec8}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000006c0)={'veth1_to_hsr\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000900)='syzkaller\x00'}, 0x94) r4 = fsopen(&(0x7f0000000940)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) fsmount(r4, 0x0, 0x80) r5 = fsopen(&(0x7f00000009c0)='cgroup2\x00', 0x0) r6 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) preadv(r6, &(0x7f0000000b00)=[{0x0}, {&(0x7f0000000b40)=""/92, 0x5c}], 0x2, 0xfff, 0x8) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r5, 0x0, 0x8) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000a00)={r3, r7, 0x0, 0x0, @val=@netfilter={0x0, 0x1, 0x6}}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000a40)={@fallback=r7, 0x0, 0x1, 0xce2c, &(0x7f0000000a80)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r1, r2, 0x25, 0x2, @val=@netkit={@void, @value=r1}}, 0x1c) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newtfilter={0x24, 0x11, 0xd27, 0xffffffff, 0x0, {0x0, 0x0, 0x74, r2, {0x0, 0x7}, {0x0, 0xfff1}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 1.547213073s ago: executing program 0 (id=537): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x206c02, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/stat\x00', 0x0, 0x0) sendfile(r0, r1, 0x0, 0x20000023896) ioctl$TCXONC(r1, 0x540a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f0000001a80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000001ac0), 0x8, 0x10, &(0x7f0000001b40), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000001b80)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000001c00)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000001c40)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c80)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000001cc0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000001d40), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000001dc0)=0x2) recvmmsg(r3, &(0x7f0000001e00), 0x80002c1, 0x2, 0x0) clock_gettime(0x0, &(0x7f0000001e40)) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001f40)={'batadv_slave_0\x00'}) sendmsg$nl_route_sched(r5, &(0x7f0000001f80)={0x0, 0x0, 0x0}, 0x4c840) fchdir(0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000002080)={0x8, 0x4, &(0x7f0000002140)=ANY=[@ANYBLOB="180000000800040000000000080000006b110b000000000095"], &(0x7f0000002180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="2801000000000000010000007cc746ab48cc155da55035f97437c9ad34b2973fc3fe86e98e72ade1cbeb8b32e42fcd731bcccc5058f7bcaf94e44094b508127c958fb4e0d831b66f54e516832b3ceddbe86e8547c6dd4cec7136365a292a06becb9159eb084666b7ef12ae9c01476f0d682848fe4330b0294b6584e4968c3c037717bdbfd2aff76a949e1600a1c514ddb3e50dff393c809cb6cdb8a70000", @ANYBLOB="cf67bbfea9b3669e01211f6fec46efad3b35220fc1c7278d19bfbe2291fd92acb836f07e2f2c4743e06932bf5671758f1f47c16f5f07cddbb1cb32a652d423b31c2f801132a6c0489114d6dc2e0a9ebb1347af0144afe46f5c0050703d787be7307f008ef543026fb60470c1b470aabe4cf9ad4677200356be9c8081c7a788b901d2ee18d3a7e10983d311c6dea0af756e67f37c63e2f2369bc1fbbebf4d5e5067be296034362b9222e8635f95387b811c01c9f66b02cac7fcf93fa316fc97a856702b41c741ff9c223de3fee17610124b2ed2b14e419bb8164d1520473a05cb4ce5dd16ee04363e174d3b4e04ed95c6d24387d28f83058a95b1adbfdfa9454fc0961db30e08810ff7875a438e93f6c57d9377c5cc58790f95bec3923abf8694dd916cbadb15f15fff94a2819b3f9ae6c4b9427c8a8437265347f8f7d864bd63537bcef8859d80889e07e9f815c33fd51fcbe9b24d0872b7023f576446c0328bb17764832e511a5b0a54d6e13f8da2b1772d5b5046b514e5ba78043b9bc153743584bee3be7b23b0da382cee6af14fcea6fe048f71c7d4825b08f2ef1bfa9d927171e3faaca5e94db36208a6078b62bbf6b7f422d46b00d8c7d47f9543c506ef9de8ce194f63be795be039d3581f0e143ee6240c1af9f86ef1075466291d64ebfab9b319782b8e882a4d836f4a7241c396de3fc81f346aee2e46fbd7504b5da22ffb8b8616c0332ed6fb3592566be549146b0d3570ceda3006621bf9598e35bbd95a475cd3cc92b6903275914be1602ec6850e196c157db1dc451b9a8ca57f5de44ba2d1ef38650212dec3541dce6bf2517b801fe0c11e32993bfef0b083f00e3ddbc99366b4a773d922af43aa366e6ec0d486264a56df331bc87767ded1395be867ac8b7c8ef8f54eed385aac115072bcf7f31dea8c56d47b0cde7fc28da46bfe261037353110659732e520fab9b6b0d9217328aa9015454d03d3451e8373933af645e965d7dab6dc37963305ee8353e84b2f463a53b97d16dc61007be1d80fe62dfef8b3fb037b4203ce3207d993d252ed3516fb6a612a4a260c43bda8c3a882c03e73ff4ac78cd791a69110cbcd79a4f8f1f788e1872f27159e4c8eed133cb940add577706afd6eea60fc7069a080eaab0c959e6f85a903a552bdcb50adac14a39cfc1da25394fe18941f88216b51a06c1e3254f4c3fbb3c09ea2fe621d2c886e2f8f2762d115baf47e8c84a6496ea2b4a096ebe0c33c329db5ea0230ca4cff2d8e623c3cb6dec8bd4912a779b7fe142ae33710b3b44c3c47e410bf6974a4ed8aef79ba6a14f5db6405f4420163c336e8d95d3fa7e912a4ee962ce12c4567273da4a279c5ec1f9923e512d2c135eac196468c9e7abd942ee17231f55963b9d7a62eeec15d0394b542caccf1caaf7f0eeabc6fbf887d5f8434f3e92da46b044436e8e2bce4b8148c52cc14ce2064b95f76e212deff238f615626ea5617bb6a627212405a475ae31060e9f66b9d015123de4cc7cf6fdf5c05c2518a1ad4559a3a9ec485c02cf7aff687159c2f0c14438b536bbb31889181dbf9f0e46be5c49a4c2cf234f288229af6e952f40ee4ac329795a49f5d0293d777d6eed81ab96222c8e91174627e96546ea72e00cb635f90d20d46fa77b9ed9324e358d6b726d69c49b7fbd27076b6c72a009c02df2a5bc5206ea9d03ad89cae30d955b5783310a09e007b3f11e61bc335543140634f9b053bae63eff858f807e8108bc4e30c1c1d526d22c21a966f0b82673c1f4246cb1fb0cbc3187a17317ea094c18d5a9635aea61e21f2a1cfed15916a55eea3e3544426b75e9372d12905186098eb9742b39fafa56048eab8b5ffc6f78a2cd8da6ba3b591b84c9413c471bf716164d844ade77e21d600c2d2eb2260d3f45864ada6a88870b4c0f0225642d502cad344f3b59704c9c66b06f9156812818a00b0385f68933e237a1679b849b09436e1e222216572446b1b10c8ff01c2d8d35e41bb394dced57eafe3e82799fac165fa51781073336e0a649dcb4eebabb803e1f82378770867e950c733716a87c9a29a64fc56e3344ffdd1320ced56a2af65d95cc1a1b3553f96671fd5234d60eb3e34712d9b9a32c9119f2bae37c1c53223323d9b0b314836a43276cfe2ab536678fb88b7eab9aaa0447d828e0c0de3a688048ebd596c977f7c61998be292032796361ae84a7c82cb5ad8585ef1c328fe726badcd2d7435f632fec2a74de4e139297f853c934349e37f79aa97a77ab48a3d522f87c3bbd23b9195884031705753bd21fcd0b2ebde715271a4a837e394a21799f3a8ac150ee6dba46a298876bf396be1186ba3c1daa57f7dc1705cc8aa998ba27ee3744443be0c3a8aef2505c31363ed32965574eb925a3fdbdb971d21105d950765bc9bc79f2a3ced2e4d2ae49b9c6ec7bcbec5a4fa9cdbd8e9ce6754d9bdb17e102eee79d8ef5bd3c5e4652c90878092bfe46a9c66b3f9e5b52a92f48fec0a98d0be6da879c4895918425ba41d09db58143754e8430914a82d960dabef685726e37c0a2853707f561f3d3de7395b01389f5ef86c12be8d48b44e18e63568f986b6ed852ae6ba53315166dad4b4c25677c9ea7fe257b94d9531b2cf4b1d586cc5515c440e0cfcf991dc16480f761797e8643669daf42d32657555c3daac4160045015d9a33d04c543cead4f432d8eafdca7475cba6e2ec55c20294e6e496544bb830e595393f1139186e21c390bfe63e62ccbf36519bece0d751185d8b86bc89bd93edee5a0534a61321d6d20ece3a288bcfcc0648d0b3035029760ab6f9c4da726245103c774b25591337efb8abaa0d3a076a133e5f3ff23d3c7a63effefc83bcc0cb2401b1597e10d4f24535a893d83a844f2dcb3de6154a803ed14a8fe01ffd18b3fbcd294d04819971dd74e8acd547dc7b15a2625a28b4476e0ec4c12b8c3da52b337027ade636b01ae04246ad9272150204f3c85e60268122b0cf8e6fff183fb32b6868a301c78dd0636c318e123b00a06e4538a7e889ee9f9ef987aa65542d0cde85656c7bd480858ea70e35c494fcc97a5fd155c243492d64eb6983b7c091c7d52ed6df16caa040a8898c9ea804fc7573dd30d9caa390096a6775d2debaae79e2ef6af470e3fe568d996da67984ec41d4f3811f8f29815b2103785d64a35d10ba74032755abe7957991751b4b84be8fff683453623b159dd18862c398447e4b9603f1f7eee49d88bb9a2ed215f9140f7459a5bf173792a7034b0ef90a33f440b9206efcb90a2d2e888b017c6bdbe962f3a59ad6dba1680ebf7950009de826b41894981f8686fa9a37073cda477a745ef1aeafc60948dfef63ef02f02aae68ff89a13c5dffe44c4b74915d33f1329d7e476bf9b325db38689f59e1b3fc5a0ba335a54d2e09ec6dbd0324b99b346b33a3ce0a7e49e7c0b61ee8e526a691236d5f77d605146ae8b0f668a100d10056689fed50b3a02221f795027e1048f3bdd93d56439cd9e78c182100dbe0f46922113c2935c2915bd6402c0151bf6deb8ae28675a54fd54c6a0e859e09fe6627d92918c79d6068f96830de8a1ff5c0c38c7a43c92e896d7bc06ce93e816e91365503b4ad31f0e2df400ceb143246b89fa9e70269798e5bc2390e74b5c1752774da000a8999d3725ce28027e5825fdbeede20f9af7ae0c02feed957b76b235d4a954249f267d49a5cb3015e8a3603c08718359850b3082de6de3b25151c72eb2aaeed96bab78741a870231d85f4817d2109f6994b60a90e44bf4d15dd8806c6fbc8c5114597ff75e2414a6c81d45035c8d9967713f5a86470a7dba6513f82c918b63572434034653afc0b61b5e7010fe9301993f855f3b577b0025af1440c2283f46e37728efb8553d61bb71a88865648962effc18ea23e75ec5bded30f9783f2e8545cd6570b122895876361078db636b9a10e479e6c773399a8e95806ae9dd5bff1fe10fa0844111bd9d750a4644d4bd4dee694183661d6cda69a8471d8c03d7bfbbbf5ea990d8553943f783e2ee9dac1eaba8e9cb1391e3487f9c96a9dab60ad5e2061d3de530b457caad02a3ebb91c8e0e84df46fb37eea3bbcf8b90819b9ab27b9e206621f5579854e6024058d1f2eef96b729b4405bc5aebba89760ed490a6cfa3ee64774afbcbe0c8f2d8894bf228cedb5eda785fceceb7173ceaea7a03d289825c3bbb1ad50974f85542fad6781b5bf137f9e245977377003132b024286be510ff2191990a01891b4e2f7f87c8fa793dccfbcf561b1932edbc413bab18c39fd0a3fc889ff2bfb44b409a638b76037dc32db6b65fad98bf01471d88e1c9f598e5efb4e9ea92b2ebb57685f925baefd5831bdc3efd0393cdaa33198dd6f6d10f82c56a9823816e9a7ec33efc45b1ff2716145cfd57783e9223966a446c303eaa257eef5aaa15f130209bf2b6127dae1275efb414a13683eab3c4ebb6510957d8e2a3ed73ef38bd55fff4f61a7c3a0ad81237052345863ee3b1fe55b8a571f3979209a9c1122dbfd943e08735fbb7a041c652fa6775379047567a27ac339f16c7f458a7804390e4b75a7778f35bfe5d5894b2de1a28fe875ac5c083f5a5c451870769ac146a48c94cd7484905c0c391009c1a8f05dd8ddc5e629cbb9e3b131a0fd2bdc35af46bc2e15033c09ec8448035df2a2a44931dad24c8436c2cefeece27b1c77309652064b41e72571c1ce263351e452b0b65eab862fff638ad386c9d67fe73d3327c5ebe057532987e1639e6cd286ce951f6e83f5bca783b7e2bcaf7cc8c86c57e87b0ef75a29c71cdb0064022240c46629345a386b18a85cf12129c90211574f6255fd3f8f4f908c0749ff8c11965090bdfc9a1659c1c80faf13cf6ca37bbc8de797ec9366694ecf365c41d9b805e1d3ba55bac5c6fecba3e3fd199a75f03372a1ccd023d49f966e1c9c1ae9aa73a54df6ee74bb342ebf8148e0e79fc78fbd3d471c0536d5d061955e794bebdf9a2aeb1d1c53384d54e561e96679234ee0092da01a86da4513b25069064e2f56dad352328c223d91e3b1d3ba29bcd02921be645199d92a67a0a3e42a40a4abf5faaa9b9a1d99864e650227b4487c773343fd7c4166674d4b12e75bf7632e6db33fa432a4e9591acc2b76d4496dad9b67125f58844b69c8a9b65dbc6f42e47bbfa433d242c1f70f1bcc0255297a59f2512d8f630f5463058fd3684ab8a01e820acfe5471f9b92d7e2c0e86dfb745ae7a8684fe2c8c4e642028da19c6acf1630cde93b92057b711edcdd0d85823a46f421a70b8c750968bccf862a2cdbbeee30e961318d9609fb7b50134afb8ea2099913d94ae44172b3c4aa73905754e99e68b337e1e195ab0a3046bb2bfbfc7da2b51c7a364c0de919e76645d8352d536a85986e868081191efc31f78e758a6a62bd64e152d79b30d7a7d50962f7939fff362b471350e43a1f75866feffe307f69151290bbe14016b266fad2f55e23fd587648ec445b452f2c5d7706cccb1d39042b998f75437951077e2df83553688170fb8e19b6989a5f1da64ce0892cab5c356f8826d4da34491d48e6314dc4135fadabd6b3ee45b1bada92f4f36e4bd182868e6948030d0d0b8bfa3b0c58d9d189e13d7e76fd5f515ccaa2f9864584490a4bef093a31240d1462db4893e9e895f63c6944f60d24c0cf31d3d577e32b5df587f05240b0a3e383497acae0af52457e3e1b3f647a08e0eb991d9672833f7b145631d47fc5c979724e60a9958a62483e475acb0e5de091c8aed0e631f9bc3246fde075d"], 0x128}, 0x840) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) 389.089701ms ago: executing program 4 (id=538): r0 = syz_usb_connect$uac2(0x5, 0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000000882052500400001020301090271000301f81005080b020001052008090400000001"], 0x0) syz_usb_control_io$uac2(r0, &(0x7f00000009c0)={0x14, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0003040000000403"]}, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 301.8187ms ago: executing program 1 (id=539): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) bind$inet(0xffffffffffffffff, 0x0, 0x0) openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) fsopen(0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000800)=0xf) ioctl$TCFLSH(r1, 0x400455c8, 0x0) ioctl$sock_bt_hci(r0, 0x400448e1, &(0x7f0000000840)) 231.500257ms ago: executing program 3 (id=540): openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x81) r1 = ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) preadv(r1, &(0x7f0000000140)=[{&(0x7f00000031c0)=""/4097, 0x1001}], 0x1, 0x1b, 0x10) 55.654354ms ago: executing program 2 (id=541): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="1201000000000010f20421140000000000010902240001060000000904000102030084000921"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218000000050c150825ff0904a1010901a1007508950109308102c0c0"], 0x0}, 0x0) 0s ago: executing program 3 (id=542): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x1c5) mount$overlay(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) umount2(&(0x7f0000000380)='./file0\x00', 0x9) mkdirat(0xffffffffffffff9c, 0x0, 0x1ef) mount$overlay(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x4008, &(0x7f0000000300)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './mydev'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.252' (ED25519) to the list of known hosts. [ 31.271897][ T28] audit: type=1400 audit(1793961588.122:64): avc: denied { mounton } for pid=278 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 31.295906][ T28] audit: type=1400 audit(1793961588.152:65): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.300170][ T278] cgroup: Unknown subsys name 'net' [ 31.324347][ T28] audit: type=1400 audit(1793961588.172:66): avc: denied { unmount } for pid=278 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 31.344670][ T278] cgroup: Unknown subsys name 'devices' [ 31.468944][ T278] cgroup: Unknown subsys name 'hugetlb' [ 31.474683][ T278] cgroup: Unknown subsys name 'rlimit' [ 31.591890][ T28] audit: type=1400 audit(1793961588.442:67): avc: denied { setattr } for pid=278 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 31.615324][ T28] audit: type=1400 audit(1793961588.442:68): avc: denied { mounton } for pid=278 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 31.640190][ T28] audit: type=1400 audit(1793961588.442:69): avc: denied { mount } for pid=278 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 31.672481][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 31.682221][ T28] audit: type=1400 audit(1793961588.542:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.707685][ T28] audit: type=1400 audit(1793961588.542:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.725310][ T278] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.734548][ T28] audit: type=1400 audit(1793961588.572:72): avc: denied { read } for pid=278 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.767830][ T28] audit: type=1400 audit(1793961588.572:73): avc: denied { open } for pid=278 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 33.620911][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.628244][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.636122][ T288] device bridge_slave_0 entered promiscuous mode [ 33.651428][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.658522][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.666212][ T286] device bridge_slave_0 entered promiscuous mode [ 33.686590][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.693663][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.701356][ T288] device bridge_slave_1 entered promiscuous mode [ 33.716332][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.723405][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.731094][ T286] device bridge_slave_1 entered promiscuous mode [ 33.757444][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.764573][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.772410][ T287] device bridge_slave_0 entered promiscuous mode [ 33.783689][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.790835][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.798446][ T287] device bridge_slave_1 entered promiscuous mode [ 33.809188][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.816406][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.823871][ T290] device bridge_slave_0 entered promiscuous mode [ 33.835421][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.842593][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.850256][ T290] device bridge_slave_1 entered promiscuous mode [ 34.021177][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.028346][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.036082][ T289] device bridge_slave_0 entered promiscuous mode [ 34.078841][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.086155][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.093799][ T289] device bridge_slave_1 entered promiscuous mode [ 34.210438][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.217553][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.224966][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.232043][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.248665][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.255767][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.263070][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.270147][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.319056][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.326196][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.333503][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.340576][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.364720][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.371835][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.379157][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.386233][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.402814][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.409895][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.417286][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.424334][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.445456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.457574][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.464874][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.472473][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.479908][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.487563][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.494890][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.502450][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.509853][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.517351][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.525267][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.555123][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.563592][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.570731][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.578568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.587566][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.594633][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.627408][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.636077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.659279][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.666952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.674607][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.683154][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.692095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.700519][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.708828][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.717580][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.726160][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.733205][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.766492][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.775103][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.783591][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.790686][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.798887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.807446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.815800][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.822857][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.830406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.838955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.847460][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.854579][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.862160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.870859][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.879667][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.887390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.894931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.903649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.912054][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.919115][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.942391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.950960][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.959514][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.966577][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.974330][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.983354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.991639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.999946][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.011226][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.019560][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.027751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.036134][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.044429][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.052505][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.064156][ T287] device veth0_vlan entered promiscuous mode [ 35.086137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 35.093928][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.101846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.110252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.118751][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.127164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.145753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 35.154527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.163178][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.170354][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.178064][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 35.186931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.195107][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.202187][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.209878][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.218467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.238891][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.248633][ T287] device veth1_macvtap entered promiscuous mode [ 35.266618][ T290] device veth0_vlan entered promiscuous mode [ 35.280828][ T289] device veth0_vlan entered promiscuous mode [ 35.298352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.307287][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.314848][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.322719][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.331546][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.340439][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.349082][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.357262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.365438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 35.374278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.382791][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 35.391189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.399631][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.407364][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.430653][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.439322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.448241][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.457029][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.468658][ T290] device veth1_macvtap entered promiscuous mode [ 35.493280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.502635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.512134][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 35.512884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.528647][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.549575][ T288] device veth0_vlan entered promiscuous mode [ 35.558030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.566233][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.573955][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 35.583660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.587177][ T311] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 35.593389][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.619755][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.632374][ T289] device veth1_macvtap entered promiscuous mode [ 35.660846][ T286] device veth0_vlan entered promiscuous mode [ 35.667847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 35.677204][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.687211][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.696333][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.705120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.712870][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.737406][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.747077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.767716][ T288] device veth1_macvtap entered promiscuous mode [ 35.776073][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.784965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.794455][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 35.802554][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.811451][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.836442][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 35.845181][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.853847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 35.865380][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.875846][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 35.885331][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.005419][ T286] device veth1_macvtap entered promiscuous mode [ 36.040806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.051352][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.061908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.051293][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.066227][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.254248][ T28] kauditd_printk_skb: 30 callbacks suppressed [ 37.254279][ T28] audit: type=1400 audit(1793961594.102:104): avc: denied { map_create } for pid=329 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.785618][ C0] sched: RT throttling activated [ 38.814994][ T28] audit: type=1400 audit(1793961594.142:105): avc: denied { map_read map_write } for pid=329 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 39.066190][ T28] audit: type=1400 audit(1793961594.412:106): avc: denied { read } for pid=329 comm="syz.3.4" name="transactions_hashed" dev="binder" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.121451][ T28] audit: type=1400 audit(1793961594.412:107): avc: denied { open } for pid=329 comm="syz.3.4" path="/dev/binderfs/binder_logs/transactions_hashed" dev="binder" ino=1048628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 40.170060][ T28] audit: type=1400 audit(1793961594.412:108): avc: denied { create } for pid=329 comm="syz.3.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.215375][ T28] audit: type=1400 audit(1793961594.412:109): avc: denied { setopt } for pid=329 comm="syz.3.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.249517][ T28] audit: type=1400 audit(1793961594.412:110): avc: denied { write } for pid=329 comm="syz.3.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.375988][ T28] audit: type=1400 audit(1793961594.412:111): avc: denied { ioctl } for pid=329 comm="syz.3.4" path="socket:[15235]" dev="sockfs" ino=15235 ioctlcmd=0x8907 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.599105][ T341] loop4: detected capacity change from 0 to 40427 [ 40.621103][ T28] audit: type=1400 audit(1793961594.412:112): avc: denied { read } for pid=329 comm="syz.3.4" lport=2 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.649365][ T341] F2FS-fs (loop4): invalid crc value [ 40.665298][ T28] audit: type=1400 audit(1793961594.472:113): avc: denied { write } for pid=329 comm="syz.3.4" name="loop3" dev="devtmpfs" ino=121 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 40.728110][ T341] F2FS-fs (loop4): Found nat_bits in checkpoint [ 40.814433][ T341] F2FS-fs (loop4): Start checkpoint disabled! [ 40.821770][ T341] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 40.829767][ T341] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 40.935796][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 42.085667][ T19] usb 2-1: Using ep0 maxpacket: 16 [ 42.093473][ T19] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 42.117324][ T19] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 42.133465][ T368] loop2: detected capacity change from 0 to 40427 [ 42.135868][ T19] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.154436][ T19] usb 2-1: Product: syz [ 42.159805][ T8] kworker/u4:0: attempt to access beyond end of device [ 42.159805][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 42.166650][ T19] usb 2-1: Manufacturer: syz [ 42.180059][ T368] F2FS-fs (loop2): invalid crc value [ 42.187605][ T368] F2FS-fs (loop2): Found nat_bits in checkpoint [ 42.194208][ T19] usb 2-1: SerialNumber: syz [ 42.209249][ T19] r8152-cfgselector 2-1: config 0 descriptor?? [ 42.324283][ T368] F2FS-fs (loop2): Start checkpoint disabled! [ 42.356443][ T368] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 42.374422][ T368] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 42.455934][ T19] r8152-cfgselector 2-1: Needed 2 retries to read version [ 42.463313][ T19] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.485924][ T19] r8152-cfgselector 2-1: bad CDC descriptors [ 42.620309][ T384] netlink: 4 bytes leftover after parsing attributes in process `syz.4.16'. [ 42.729733][ T19] r8152-cfgselector 2-1: Unknown version 0x0000 [ 42.741274][ T19] r8152-cfgselector 2-1: USB disconnect, device number 2 [ 43.932468][ T10] kworker/u4:1: attempt to access beyond end of device [ 43.932468][ T10] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 44.168023][ T391] loop0: detected capacity change from 0 to 40427 [ 44.229667][ T391] F2FS-fs (loop0): invalid crc value [ 44.244958][ T389] loop3: detected capacity change from 0 to 40427 [ 44.271907][ T391] F2FS-fs (loop0): Found nat_bits in checkpoint [ 44.313188][ T389] F2FS-fs (loop3): invalid crc value [ 44.335752][ T389] F2FS-fs (loop3): Found nat_bits in checkpoint [ 44.473389][ T391] F2FS-fs (loop0): Start checkpoint disabled! [ 44.501693][ T391] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 44.526376][ T389] F2FS-fs (loop3): Start checkpoint disabled! [ 44.532840][ T391] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 44.548298][ T389] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 44.582470][ T389] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 44.665923][ T370] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 44.740479][ T395] FAULT_INJECTION: forcing a failure. [ 44.740479][ T395] name failslab, interval 1, probability 0, space 0, times 1 [ 44.775901][ T395] CPU: 0 PID: 395 Comm: syz.1.22 Not tainted syzkaller #0 [ 44.783122][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 44.793351][ T395] Call Trace: [ 44.796820][ T395] [ 44.799798][ T395] __dump_stack+0x21/0x24 [ 44.804406][ T395] dump_stack_lvl+0x110/0x170 [ 44.809177][ T395] ? __cfi_dump_stack_lvl+0x8/0x8 [ 44.814273][ T395] dump_stack+0x15/0x24 [ 44.818574][ T395] should_fail_ex+0x3bf/0x510 [ 44.823629][ T395] __should_failslab+0xac/0xf0 [ 44.828519][ T395] should_failslab+0x9/0x20 [ 44.833104][ T395] __kmem_cache_alloc_node+0x3d/0x2d0 [ 44.838569][ T395] ? tcf_block_get_ext+0x13d/0x12e0 [ 44.844369][ T395] ? tcf_block_get_ext+0x13d/0x12e0 [ 44.849642][ T395] kmalloc_trace+0x29/0xb0 [ 44.854136][ T395] tcf_block_get_ext+0x13d/0x12e0 [ 44.859240][ T395] ? ____sys_sendmsg+0x5fb/0x9c0 [ 44.864521][ T395] ? x64_sys_call+0x171/0x9a0 [ 44.869270][ T395] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 44.875530][ T395] tcf_block_get+0x65/0x90 [ 44.880272][ T395] ? __cfi_tcf_chain_head_change_dflt+0x10/0x10 [ 44.886584][ T395] multiq_init+0x74/0x2f0 [ 44.890993][ T395] ? __cfi_multiq_init+0x10/0x10 [ 44.896324][ T395] qdisc_create+0x89b/0x1180 [ 44.901082][ T395] ? qdisc_notify+0x360/0x360 [ 44.906120][ T395] ? qdisc_lookup+0x310/0x4d0 [ 44.910892][ T395] tc_modify_qdisc+0x924/0x19c0 [ 44.915819][ T395] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 44.921233][ T395] ? __kasan_check_write+0x14/0x20 [ 44.927192][ T395] ? mutex_lock+0x93/0x1b0 [ 44.931702][ T395] ? __cfi_mutex_lock+0x10/0x10 [ 44.936667][ T395] ? ns_capable+0x8c/0xf0 [ 44.941094][ T395] ? netlink_net_capable+0x125/0x160 [ 44.946481][ T395] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 44.951924][ T395] rtnetlink_rcv_msg+0xb28/0xde0 [ 44.957135][ T395] ? 0xffffffffa0003e40 [ 44.961411][ T395] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 44.966961][ T395] ? __kernel_text_address+0xd/0x30 [ 44.972249][ T395] ? avc_has_perm_noaudit+0x390/0x490 [ 44.977757][ T395] ? memcpy+0x56/0x70 [ 44.982046][ T395] ? avc_has_perm_noaudit+0x30a/0x490 [ 44.987492][ T395] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 44.993290][ T395] ? kasan_save_alloc_info+0x1f/0x30 [ 44.998856][ T395] ? avc_has_perm+0x163/0x250 [ 45.003643][ T395] ? __alloc_skb+0x226/0x4a0 [ 45.008702][ T395] ? netlink_sendmsg+0x635/0xbd0 [ 45.013925][ T395] ? ____sys_sendmsg+0x5fb/0x9c0 [ 45.018963][ T395] ? __cfi_avc_has_perm+0x10/0x10 [ 45.024337][ T395] ? selinux_nlmsg_lookup+0x38f/0x440 [ 45.029876][ T395] netlink_rcv_skb+0x200/0x450 [ 45.034732][ T395] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 45.040268][ T395] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 45.046073][ T395] ? __netlink_lookup+0x387/0x3b0 [ 45.051197][ T395] rtnetlink_rcv+0x1c/0x20 [ 45.055712][ T395] netlink_unicast+0x8c1/0xa60 [ 45.060611][ T395] netlink_sendmsg+0x8b9/0xbd0 [ 45.065701][ T395] ? __cfi_netlink_sendmsg+0x10/0x10 [ 45.071133][ T395] ? security_socket_sendmsg+0x93/0xb0 [ 45.076919][ T395] ? __cfi_netlink_sendmsg+0x10/0x10 [ 45.082298][ T395] ____sys_sendmsg+0x5fb/0x9c0 [ 45.087431][ T395] ? __sys_sendmsg_sock+0x40/0x40 [ 45.092508][ T395] ? import_iovec+0x7c/0xb0 [ 45.097138][ T395] ___sys_sendmsg+0x2a2/0x360 [ 45.102089][ T395] ? __sys_sendmsg+0x290/0x290 [ 45.106939][ T395] ? __fdget+0x19c/0x220 [ 45.111276][ T395] __x64_sys_sendmsg+0x20d/0x2e0 [ 45.116554][ T395] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 45.122066][ T395] ? __kasan_check_write+0x14/0x20 [ 45.127308][ T395] ? fpregs_restore_userregs+0x128/0x260 [ 45.133246][ T395] ? switch_fpu_return+0xe/0x10 [ 45.138161][ T395] x64_sys_call+0x171/0x9a0 [ 45.142732][ T395] do_syscall_64+0x4c/0xa0 [ 45.147299][ T395] ? clear_bhb_loop+0x30/0x80 [ 45.152231][ T395] ? clear_bhb_loop+0x30/0x80 [ 45.156981][ T395] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 45.162953][ T395] RIP: 0033:0x7f1b8c59fb19 [ 45.167589][ T395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 45.187273][ T395] RSP: 002b:00007f1b8d4a8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 45.196023][ T395] RAX: ffffffffffffffda RBX: 00007f1b8c825fa0 RCX: 00007f1b8c59fb19 [ 45.204476][ T395] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 45.212548][ T395] RBP: 00007f1b8c637b70 R08: 0000000000000000 R09: 0000000000000000 [ 45.220789][ T395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 45.229084][ T395] R13: 00007f1b8c826038 R14: 00007f1b8c825fa0 R15: 00007ffcea28cea8 [ 45.237121][ T395] [ 45.287395][ T393] loop4: detected capacity change from 0 to 40427 [ 45.300758][ T370] usb 3-1: config index 0 descriptor too short (expected 45, got 30) [ 45.329693][ T370] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 45.377570][ T370] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 45.518723][ T393] F2FS-fs (loop4): invalid crc value [ 45.542467][ T370] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 46.097604][ T393] F2FS-fs (loop4): Found nat_bits in checkpoint [ 46.106916][ T370] usb 3-1: config 1 interface 0 has no altsetting 0 [ 46.168505][ T370] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 46.208659][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.238979][ T370] usb 3-1: Product: syz [ 46.243276][ T370] usb 3-1: Manufacturer: syz [ 46.282681][ T370] usb 3-1: SerialNumber: syz [ 46.307200][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 46.307234][ T28] audit: type=1400 audit(1793961603.162:130): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 46.367315][ T399] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 46.678673][ T393] F2FS-fs (loop4): Start checkpoint disabled! [ 46.691307][ T10] kworker/u4:1: attempt to access beyond end of device [ 46.691307][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 46.723038][ T393] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 46.924215][ T370] rtl8150 3-1:1.0: couldn't find required endpoints [ 47.038335][ T370] rtl8150: probe of 3-1:1.0 failed with error -5 [ 47.218740][ T370] usb 3-1: USB disconnect, device number 2 [ 48.051652][ T28] audit: type=1400 audit(1793961604.902:131): avc: denied { create } for pid=418 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.086911][ T419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.24'. [ 48.097915][ T28] audit: type=1400 audit(1793961604.942:132): avc: denied { write } for pid=418 comm="syz.0.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 48.116676][ T419] netlink: 40 bytes leftover after parsing attributes in process `syz.0.24'. [ 48.235954][ T370] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 48.262650][ T423] loop0: detected capacity change from 0 to 512 [ 48.310832][ T423] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 48.377068][ T423] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 48.387577][ T423] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 48.409344][ T28] audit: type=1400 audit(1793961605.262:133): avc: denied { remove_name } for pid=418 comm="syz.0.24" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.440698][ T370] usb 3-1: config index 0 descriptor too short (expected 45, got 30) [ 48.455786][ T423] EXT4-fs error (device loop0): ext4_get_first_dir_block:3583: inode #12: comm syz.0.24: Directory hole found for htree leaf block 0 [ 48.470270][ T370] usb 3-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 48.491312][ T370] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 48.511981][ T28] audit: type=1400 audit(1793961605.262:134): avc: denied { rename } for pid=418 comm="syz.0.24" name="file0" dev="loop0" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 48.517435][ T370] usb 3-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 48.574908][ T370] usb 3-1: config 1 interface 0 has no altsetting 0 [ 48.594575][ T370] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 48.606005][ T370] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.618577][ T370] usb 3-1: Product: syz [ 48.625422][ T370] usb 3-1: Manufacturer: syz [ 48.632362][ T370] usb 3-1: SerialNumber: syz [ 48.652980][ T416] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 48.881776][ T28] audit: type=1326 audit(1793961605.732:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=418 comm="syz.0.24" exe="/root/ci2-android-6-1/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7aaf39fb19 code=0x7fc00000 [ 49.039683][ T289] EXT4-fs (loop0): unmounting filesystem. [ 49.180457][ T370] rtl8150 3-1:1.0: couldn't find required endpoints [ 49.197142][ T370] rtl8150: probe of 3-1:1.0 failed with error -5 [ 49.235538][ T370] usb 3-1: USB disconnect, device number 3 [ 49.805876][ T440] loop0: detected capacity change from 0 to 40427 [ 49.861023][ T440] F2FS-fs (loop0): invalid crc value [ 49.881040][ T440] F2FS-fs (loop0): Found nat_bits in checkpoint [ 50.007496][ T440] F2FS-fs (loop0): Start checkpoint disabled! [ 50.015191][ T440] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 50.033611][ T440] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 51.310836][ T443] FAULT_INJECTION: forcing a failure. [ 51.310836][ T443] name failslab, interval 1, probability 0, space 0, times 0 [ 51.380770][ T443] CPU: 1 PID: 443 Comm: syz.2.31 Not tainted syzkaller #0 [ 51.388740][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 51.398839][ T443] Call Trace: [ 51.402162][ T443] [ 51.405159][ T443] __dump_stack+0x21/0x24 [ 51.410110][ T443] dump_stack_lvl+0x110/0x170 [ 51.414849][ T443] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.419945][ T443] ? __slab_alloc+0x5e/0xa0 [ 51.424741][ T443] ? __set_page_owner_handle+0x3c7/0x410 [ 51.430416][ T443] dump_stack+0x15/0x24 [ 51.434620][ T443] should_fail_ex+0x3bf/0x510 [ 51.439421][ T443] __should_failslab+0xac/0xf0 [ 51.444263][ T443] should_failslab+0x9/0x20 [ 51.448826][ T443] __kmem_cache_alloc_node+0x3d/0x2d0 [ 51.454256][ T443] ? qdisc_alloc+0x82/0x750 [ 51.458906][ T443] ? qdisc_alloc+0x82/0x750 [ 51.463494][ T443] __kmalloc_node+0xa2/0x1e0 [ 51.468170][ T443] qdisc_alloc+0x82/0x750 [ 51.472561][ T443] qdisc_create+0x183/0x1180 [ 51.477258][ T443] ? qdisc_notify+0x360/0x360 [ 51.482154][ T443] ? qdisc_lookup+0x310/0x4d0 [ 51.487006][ T443] tc_modify_qdisc+0x924/0x19c0 [ 51.491903][ T443] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 51.497239][ T443] ? __kasan_check_write+0x14/0x20 [ 51.502418][ T443] ? mutex_lock+0x93/0x1b0 [ 51.506913][ T443] ? __cfi_mutex_lock+0x10/0x10 [ 51.511818][ T443] ? ns_capable+0x8c/0xf0 [ 51.516195][ T443] ? netlink_net_capable+0x125/0x160 [ 51.521568][ T443] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 51.526919][ T443] rtnetlink_rcv_msg+0xb28/0xde0 [ 51.531894][ T443] ? 0xffffffffa0003e40 [ 51.536160][ T443] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 51.541871][ T443] ? __kernel_text_address+0xd/0x30 [ 51.547178][ T443] ? avc_has_perm_noaudit+0x390/0x490 [ 51.552639][ T443] ? memcpy+0x56/0x70 [ 51.556696][ T443] ? avc_has_perm_noaudit+0x30a/0x490 [ 51.562142][ T443] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 51.568005][ T443] ? kasan_save_alloc_info+0x1f/0x30 [ 51.573404][ T443] ? avc_has_perm+0x163/0x250 [ 51.578464][ T443] ? __alloc_skb+0x226/0x4a0 [ 51.583156][ T443] ? netlink_sendmsg+0x635/0xbd0 [ 51.588160][ T443] ? ____sys_sendmsg+0x5fb/0x9c0 [ 51.593173][ T443] ? __cfi_avc_has_perm+0x10/0x10 [ 51.598276][ T443] ? selinux_nlmsg_lookup+0x38f/0x440 [ 51.603706][ T443] netlink_rcv_skb+0x200/0x450 [ 51.608526][ T443] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 51.614035][ T443] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 51.619370][ T443] ? __netlink_lookup+0x387/0x3b0 [ 51.624460][ T443] rtnetlink_rcv+0x1c/0x20 [ 51.628978][ T443] netlink_unicast+0x8c1/0xa60 [ 51.633810][ T443] netlink_sendmsg+0x8b9/0xbd0 [ 51.638625][ T443] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.643973][ T443] ? security_socket_sendmsg+0x93/0xb0 [ 51.649625][ T443] ? __cfi_netlink_sendmsg+0x10/0x10 [ 51.655360][ T443] ____sys_sendmsg+0x5fb/0x9c0 [ 51.660395][ T443] ? __sys_sendmsg_sock+0x40/0x40 [ 51.665464][ T443] ? import_iovec+0x7c/0xb0 [ 51.670146][ T443] ___sys_sendmsg+0x2a2/0x360 [ 51.675110][ T443] ? __sys_sendmsg+0x290/0x290 [ 51.679926][ T443] ? __fdget+0x19c/0x220 [ 51.684211][ T443] __x64_sys_sendmsg+0x20d/0x2e0 [ 51.689202][ T443] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 51.694720][ T443] x64_sys_call+0x171/0x9a0 [ 51.699290][ T443] do_syscall_64+0x4c/0xa0 [ 51.703821][ T443] ? clear_bhb_loop+0x30/0x80 [ 51.708604][ T443] ? clear_bhb_loop+0x30/0x80 [ 51.713350][ T443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.719303][ T443] RIP: 0033:0x7f4f9b99fb19 [ 51.723914][ T443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 51.743573][ T443] RSP: 002b:00007f4f9c798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 51.752120][ T443] RAX: ffffffffffffffda RBX: 00007f4f9bc25fa0 RCX: 00007f4f9b99fb19 [ 51.760136][ T443] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 51.768156][ T443] RBP: 00007f4f9ba37b70 R08: 0000000000000000 R09: 0000000000000000 [ 51.776183][ T443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 51.784200][ T443] R13: 00007f4f9bc26038 R14: 00007f4f9bc25fa0 R15: 00007fff5336b3c8 [ 51.792306][ T443] [ 51.836760][ T8] kworker/u4:0: attempt to access beyond end of device [ 51.836760][ T8] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 51.896557][ T10] kworker/u4:1: attempt to access beyond end of device [ 51.896557][ T10] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 52.278392][ T455] netlink: 4 bytes leftover after parsing attributes in process `syz.3.33'. [ 53.827641][ T467] netlink: 4 bytes leftover after parsing attributes in process `syz.3.37'. [ 54.062154][ T453] loop2: detected capacity change from 0 to 40427 [ 54.119073][ T453] F2FS-fs (loop2): invalid crc value [ 54.137628][ T453] F2FS-fs (loop2): Found nat_bits in checkpoint [ 54.190093][ T473] loop3: detected capacity change from 0 to 512 [ 54.289771][ T473] EXT4-fs (loop3): Test dummy encryption mode enabled [ 54.296059][ T453] F2FS-fs (loop2): Start checkpoint disabled! [ 54.327828][ T453] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 54.355993][ T453] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 54.357713][ T473] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 54.546004][ T473] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 54.596758][ T470] FAULT_INJECTION: forcing a failure. [ 54.596758][ T470] name failslab, interval 1, probability 0, space 0, times 0 [ 54.630213][ T470] CPU: 0 PID: 470 Comm: syz.0.38 Not tainted syzkaller #0 [ 54.637484][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 54.647594][ T470] Call Trace: [ 54.650959][ T470] [ 54.653955][ T470] __dump_stack+0x21/0x24 [ 54.658686][ T470] dump_stack_lvl+0x110/0x170 [ 54.663442][ T470] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.668718][ T470] ? unwind_get_return_address+0x4d/0x90 [ 54.674471][ T470] dump_stack+0x15/0x24 [ 54.678704][ T470] should_fail_ex+0x3bf/0x510 [ 54.683511][ T470] __should_failslab+0xac/0xf0 [ 54.688339][ T470] should_failslab+0x9/0x20 [ 54.692901][ T470] __kmem_cache_alloc_node+0x3d/0x2d0 [ 54.698385][ T470] ? tcf_block_get_ext+0x2d1/0x12e0 [ 54.703801][ T470] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 54.710009][ T470] ? tcf_block_get_ext+0x2d1/0x12e0 [ 54.715269][ T470] kmalloc_trace+0x29/0xb0 [ 54.719724][ T470] tcf_block_get_ext+0x2d1/0x12e0 [ 54.724820][ T470] ? netlink_sendmsg+0x8b9/0xbd0 [ 54.729969][ T470] ? ____sys_sendmsg+0x5fb/0x9c0 [ 54.735299][ T470] ? x64_sys_call+0x171/0x9a0 [ 54.740056][ T470] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.746194][ T470] tcf_block_get+0x65/0x90 [ 54.750731][ T470] ? __cfi_tcf_chain_head_change_dflt+0x10/0x10 [ 54.757147][ T470] multiq_init+0x74/0x2f0 [ 54.761560][ T470] ? __cfi_multiq_init+0x10/0x10 [ 54.766778][ T470] qdisc_create+0x89b/0x1180 [ 54.771506][ T470] ? qdisc_notify+0x360/0x360 [ 54.776417][ T470] ? qdisc_lookup+0x310/0x4d0 [ 54.781180][ T470] tc_modify_qdisc+0x924/0x19c0 [ 54.786113][ T470] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 54.791588][ T470] ? __kasan_check_write+0x14/0x20 [ 54.796645][ T28] audit: type=1400 audit(1793961611.642:136): avc: denied { create } for pid=477 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.796746][ T470] ? mutex_lock+0x93/0x1b0 [ 54.820459][ T470] ? __cfi_mutex_lock+0x10/0x10 [ 54.825744][ T470] ? ns_capable+0x8c/0xf0 [ 54.830173][ T470] ? netlink_net_capable+0x125/0x160 [ 54.835542][ T470] ? __cfi_tc_modify_qdisc+0x10/0x10 [ 54.836089][ T28] audit: type=1400 audit(1793961611.642:137): avc: denied { setopt } for pid=477 comm="syz.1.40" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 54.841104][ T470] rtnetlink_rcv_msg+0xb28/0xde0 [ 54.841138][ T470] ? 0xffffffffa0003e40 [ 54.869551][ T470] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 54.875286][ T470] ? __kernel_text_address+0xd/0x30 [ 54.880777][ T470] ? avc_has_perm_noaudit+0x390/0x490 [ 54.886301][ T470] ? memcpy+0x56/0x70 [ 54.890426][ T470] ? avc_has_perm_noaudit+0x30a/0x490 [ 54.895905][ T470] ? __cfi_avc_has_perm_noaudit+0x10/0x10 [ 54.901754][ T470] ? kasan_save_alloc_info+0x1f/0x30 [ 54.907265][ T470] ? avc_has_perm+0x163/0x250 [ 54.912011][ T470] ? __alloc_skb+0x226/0x4a0 [ 54.916766][ T470] ? netlink_sendmsg+0x635/0xbd0 [ 54.922051][ T470] ? ____sys_sendmsg+0x5fb/0x9c0 [ 54.927066][ T470] ? __cfi_avc_has_perm+0x10/0x10 [ 54.932190][ T470] ? selinux_nlmsg_lookup+0x38f/0x440 [ 54.937784][ T470] netlink_rcv_skb+0x200/0x450 [ 54.942804][ T470] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 54.948346][ T470] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 54.953736][ T470] ? __netlink_lookup+0x387/0x3b0 [ 54.958863][ T470] rtnetlink_rcv+0x1c/0x20 [ 54.963390][ T470] netlink_unicast+0x8c1/0xa60 [ 54.968229][ T470] netlink_sendmsg+0x8b9/0xbd0 [ 54.973123][ T470] ? __cfi_netlink_sendmsg+0x10/0x10 [ 54.978516][ T470] ? security_socket_sendmsg+0x93/0xb0 [ 54.984139][ T470] ? __cfi_netlink_sendmsg+0x10/0x10 [ 54.989631][ T470] ____sys_sendmsg+0x5fb/0x9c0 [ 54.994447][ T470] ? __sys_sendmsg_sock+0x40/0x40 [ 54.999536][ T470] ? import_iovec+0x7c/0xb0 [ 55.004146][ T470] ___sys_sendmsg+0x2a2/0x360 [ 55.008901][ T470] ? __sys_sendmsg+0x290/0x290 [ 55.013731][ T470] ? __fdget+0x19c/0x220 [ 55.018059][ T470] __x64_sys_sendmsg+0x20d/0x2e0 [ 55.023149][ T470] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 55.028662][ T470] ? __kasan_check_write+0x14/0x20 [ 55.033901][ T470] ? fpregs_restore_userregs+0x128/0x260 [ 55.039632][ T470] ? switch_fpu_return+0xe/0x10 [ 55.044614][ T470] x64_sys_call+0x171/0x9a0 [ 55.049181][ T470] do_syscall_64+0x4c/0xa0 [ 55.053898][ T470] ? clear_bhb_loop+0x30/0x80 [ 55.058660][ T470] ? clear_bhb_loop+0x30/0x80 [ 55.063429][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.069394][ T470] RIP: 0033:0x7f7aaf39fb19 [ 55.073909][ T470] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 55.093577][ T470] RSP: 002b:00007f7ab0333028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 55.102276][ T470] RAX: ffffffffffffffda RBX: 00007f7aaf625fa0 RCX: 00007f7aaf39fb19 [ 55.110310][ T470] RDX: 0000000000000000 RSI: 0000200000000480 RDI: 0000000000000004 [ 55.118330][ T470] RBP: 00007f7aaf437b70 R08: 0000000000000000 R09: 0000000000000000 [ 55.126379][ T470] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 55.134550][ T470] R13: 00007f7aaf626038 R14: 00007f7aaf625fa0 R15: 00007ffd8a6a78b8 [ 55.142624][ T470] [ 55.378917][ T473] EXT4-fs (loop3): 1 truncate cleaned up [ 56.063214][ T473] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 56.162544][ T8] kworker/u4:0: attempt to access beyond end of device [ 56.162544][ T8] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 56.297886][ T28] audit: type=1400 audit(1793961613.152:138): avc: denied { create } for pid=471 comm="syz.3.39" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.525927][ T28] audit: type=1400 audit(1793961613.362:139): avc: denied { ioctl } for pid=471 comm="syz.3.39" path="socket:[17472]" dev="sockfs" ino=17472 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 56.551215][ T28] audit: type=1400 audit(1793961613.362:140): avc: denied { write } for pid=471 comm="syz.3.39" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 56.591114][ T28] audit: type=1400 audit(1793961613.362:141): avc: denied { watch } for pid=471 comm="syz.3.39" path="/5/bus" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 56.709229][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 57.018611][ T498] netlink: 8 bytes leftover after parsing attributes in process `syz.2.42'. [ 57.052565][ T498] netlink: 40 bytes leftover after parsing attributes in process `syz.2.42'. [ 57.193788][ T498] loop2: detected capacity change from 0 to 512 [ 57.254836][ T498] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 57.388108][ T498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 57.425939][ T498] ext4 filesystem being mounted at /9/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 57.506507][ T498] EXT4-fs error (device loop2): ext4_get_first_dir_block:3583: inode #12: comm syz.2.42: Directory hole found for htree leaf block 0 [ 57.720203][ T286] EXT4-fs (loop2): unmounting filesystem. [ 57.922452][ T492] loop0: detected capacity change from 0 to 40427 [ 57.964988][ T492] F2FS-fs (loop0): invalid crc value [ 57.999664][ T492] F2FS-fs (loop0): Found nat_bits in checkpoint [ 58.237535][ T492] F2FS-fs (loop0): Start checkpoint disabled! [ 58.247475][ T506] loop2: detected capacity change from 0 to 512 [ 58.273347][ T506] EXT4-fs (loop2): Test dummy encryption mode enabled [ 58.282592][ T492] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 58.290987][ T506] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 58.318806][ T506] EXT4-fs (loop2): 1 truncate cleaned up [ 58.324701][ T492] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 58.335291][ T506] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 58.767374][ T45] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 59.817726][ T288] EXT4-fs (loop3): unmounting filesystem. [ 59.887133][ T502] loop4: detected capacity change from 0 to 40427 [ 59.948736][ T502] F2FS-fs (loop4): invalid crc value [ 59.960214][ T520] netlink: 4 bytes leftover after parsing attributes in process `syz.1.51'. [ 59.979793][ T502] F2FS-fs (loop4): Found nat_bits in checkpoint [ 60.115968][ T502] F2FS-fs (loop4): Start checkpoint disabled! [ 60.136670][ T502] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 60.161449][ T502] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 60.395876][ T494] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 60.521530][ T286] EXT4-fs (loop2): unmounting filesystem. [ 61.358078][ T37] kworker/u4:2: attempt to access beyond end of device [ 61.358078][ T37] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 61.445847][ T28] audit: type=1400 audit(1793961618.292:142): avc: denied { create } for pid=527 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.511193][ T530] loop3: detected capacity change from 0 to 512 [ 61.519192][ T28] audit: type=1400 audit(1793961618.292:143): avc: denied { connect } for pid=527 comm="syz.1.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 61.646070][ T530] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 61.929669][ T530] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 61.998376][ T8] kworker/u4:0: attempt to access beyond end of device [ 61.998376][ T8] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 62.047878][ T543] loop2: detected capacity change from 0 to 512 [ 62.096313][ T530] ext4 filesystem being mounted at /6/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 62.117640][ T543] EXT4-fs (loop2): Test dummy encryption mode enabled [ 62.215383][ T543] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 62.324047][ T543] EXT4-fs (loop2): 1 truncate cleaned up [ 62.353072][ T543] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 62.383446][ T530] EXT4-fs error (device loop3): ext4_get_first_dir_block:3583: inode #12: comm syz.3.50: Directory hole found for htree leaf block 0 [ 63.264680][ T288] EXT4-fs (loop3): unmounting filesystem. [ 63.538095][ T286] EXT4-fs (loop2): unmounting filesystem. [ 63.758466][ T556] FAULT_INJECTION: forcing a failure. [ 63.758466][ T556] name fail_futex, interval 1, probability 0, space 0, times 1 [ 63.771549][ T556] CPU: 0 PID: 556 Comm: syz.0.60 Not tainted syzkaller #0 [ 63.778961][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 63.789111][ T556] Call Trace: [ 63.792432][ T556] [ 63.795437][ T556] __dump_stack+0x21/0x24 [ 63.800198][ T556] dump_stack_lvl+0x110/0x170 [ 63.804927][ T556] ? __cfi_dump_stack_lvl+0x8/0x8 [ 63.810033][ T556] dump_stack+0x15/0x24 [ 63.814326][ T556] should_fail_ex+0x3bf/0x510 [ 63.819238][ T556] should_fail+0xb/0x10 [ 63.823539][ T556] get_futex_key+0x143/0xb10 [ 63.828234][ T556] ? __cfi_get_futex_key+0x10/0x10 [ 63.833408][ T556] ? _parse_integer_limit+0x18e/0x1d0 [ 63.838879][ T556] futex_wait_setup+0xb8/0x260 [ 63.843816][ T556] ? __cfi_futex_wait_setup+0x10/0x10 [ 63.849303][ T556] ? futex_setup_timer+0xb0/0xc0 [ 63.854311][ T556] futex_wait+0x1ce/0x900 [ 63.858725][ T556] ? __cfi_futex_wait+0x10/0x10 [ 63.863628][ T556] ? __cfi_futex_wake+0x10/0x10 [ 63.868540][ T556] ? vfs_write+0xa51/0xd00 [ 63.873060][ T556] do_futex+0x2e2/0x430 [ 63.877275][ T556] ? __cfi_do_futex+0x10/0x10 [ 63.882026][ T556] ? __kasan_check_write+0x14/0x20 [ 63.887305][ T556] ? mutex_unlock+0x8f/0x230 [ 63.891976][ T556] __se_sys_futex+0x136/0x310 [ 63.896743][ T556] ? __x64_sys_futex+0x100/0x100 [ 63.901877][ T556] ? ksys_write+0x1fa/0x260 [ 63.906635][ T556] ? __cfi_ksys_write+0x10/0x10 [ 63.911542][ T556] __x64_sys_futex+0xe5/0x100 [ 63.916258][ T556] x64_sys_call+0x7ec/0x9a0 [ 63.920838][ T556] do_syscall_64+0x4c/0xa0 [ 63.925450][ T556] ? clear_bhb_loop+0x30/0x80 [ 63.930180][ T556] ? clear_bhb_loop+0x30/0x80 [ 63.934924][ T556] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 63.940868][ T556] RIP: 0033:0x7f7aaf39fb19 [ 63.945396][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 63.965309][ T556] RSP: 002b:00007f7ab03330e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 63.973948][ T556] RAX: ffffffffffffffda RBX: 00007f7aaf625fa8 RCX: 00007f7aaf39fb19 [ 63.981970][ T556] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7aaf625fa8 [ 63.989987][ T556] RBP: 00007f7aaf625fa0 R08: 0000000000000000 R09: 0000000000000000 [ 63.998039][ T556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 64.006073][ T556] R13: 00007f7aaf626038 R14: 00007ffd8a6a77d0 R15: 00007ffd8a6a78b8 [ 64.014103][ T556] [ 64.265946][ T567] netlink: 4 bytes leftover after parsing attributes in process `syz.0.63'. [ 64.445776][ T324] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 64.637906][ T541] loop1: detected capacity change from 0 to 40427 [ 64.648537][ T324] usb 4-1: config index 0 descriptor too short (expected 45, got 30) [ 64.666412][ T324] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 64.716876][ T324] usb 4-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 64.724348][ T541] F2FS-fs (loop1): invalid crc value [ 64.765796][ T324] usb 4-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 64.798728][ T541] F2FS-fs (loop1): Found nat_bits in checkpoint [ 64.826893][ T324] usb 4-1: config 1 interface 0 has no altsetting 0 [ 64.857688][ T324] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 64.881981][ T324] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 64.912502][ T324] usb 4-1: Product: syz [ 64.926182][ T324] usb 4-1: Manufacturer: syz [ 64.943507][ T324] usb 4-1: SerialNumber: syz [ 64.974348][ T563] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 65.171308][ T541] F2FS-fs (loop1): Start checkpoint disabled! [ 65.218333][ T541] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 65.539366][ T324] rtl8150 4-1:1.0: couldn't find required endpoints [ 65.553236][ T324] rtl8150: probe of 4-1:1.0 failed with error -5 [ 65.615673][ T324] usb 4-1: USB disconnect, device number 2 [ 65.875253][ T586] loop1: detected capacity change from 0 to 512 [ 65.957139][ T586] EXT4-fs (loop1): Test dummy encryption mode enabled [ 66.012551][ T586] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 66.099279][ T586] EXT4-fs (loop1): 1 truncate cleaned up [ 66.105028][ T586] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 66.296190][ T8] Bluetooth: hci0: Frame reassembly failed (-84) [ 66.413487][ T579] loop0: detected capacity change from 0 to 40427 [ 66.587504][ T579] F2FS-fs (loop0): invalid crc value [ 66.662824][ T579] F2FS-fs (loop0): Found nat_bits in checkpoint [ 67.158777][ T579] F2FS-fs (loop0): Start checkpoint disabled! [ 67.247700][ T579] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 67.315919][ T579] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 68.034925][ T28] audit: type=1400 audit(1793961624.882:144): avc: denied { read write } for pid=601 comm="syz.3.76" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.094653][ T598] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 68.113456][ T28] audit: type=1400 audit(1793961624.912:145): avc: denied { open } for pid=601 comm="syz.3.76" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 68.149804][ T598] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 68.196522][ T598] pit: kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 68.240772][ T598] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 68.288087][ T598] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 68.328033][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 68.335932][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 68.362909][ T598] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 68.706219][ T41] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 68.898001][ T287] EXT4-fs (loop1): unmounting filesystem. [ 68.945878][ T41] usb 1-1: Using ep0 maxpacket: 8 [ 68.964734][ T41] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 69.143184][ T41] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 69.183763][ T41] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 69.256750][ T41] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 69.295701][ T41] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 69.324324][ T41] usb 1-1: Product: syz [ 69.334465][ T41] usb 1-1: Manufacturer: syz [ 69.354693][ T41] usb 1-1: SerialNumber: syz [ 69.677533][ T28] audit: type=1400 audit(1793961626.532:146): avc: denied { name_bind } for pid=615 comm="syz.1.79" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 69.715516][ T618] overlayfs: failed to resolve './file2': -2 [ 69.721530][ T28] audit: type=1400 audit(1793961626.532:147): avc: denied { node_bind } for pid=615 comm="syz.1.79" saddr=127.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 69.767728][ T28] audit: type=1400 audit(1793961626.552:148): avc: denied { mount } for pid=617 comm="syz.3.81" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 70.791970][ T28] audit: type=1400 audit(1793961627.642:149): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 71.753810][ T41] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 71.773574][ T41] usb 1-1: clock source 0 is not valid, cannot use [ 71.883640][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 71.890398][ T28] audit: type=1400 audit(1793961628.722:150): avc: denied { read } for pid=641 comm="syz.4.90" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.971311][ T28] audit: type=1400 audit(1793961628.722:151): avc: denied { open } for pid=641 comm="syz.4.90" path="net:[4026532644]" dev="nsfs" ino=4026532644 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 71.999545][ T41] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 72.058528][ T650] Zero length message leads to an empty skb [ 72.071310][ T41] usb 1-1: USB disconnect, device number 2 [ 72.195845][ T324] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 72.359750][ T661] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 72.369455][ T661] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 72.376159][ T324] usb 2-1: Using ep0 maxpacket: 8 [ 72.380041][ T294] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 72.392222][ T324] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.393036][ T661] pit: kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 72.402850][ T324] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 72.420464][ T324] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 72.421838][ T661] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 72.434711][ T324] usb 2-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 72.448556][ T324] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.457141][ T324] usb 2-1: Product: syz [ 72.461674][ T324] usb 2-1: Manufacturer: syz [ 72.466903][ T324] usb 2-1: SerialNumber: syz [ 72.595777][ T294] usb 4-1: Using ep0 maxpacket: 16 [ 72.603925][ T294] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 72.623199][ T294] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 72.633732][ T294] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.642898][ T294] usb 4-1: Product: syz [ 72.648498][ T294] usb 4-1: Manufacturer: syz [ 72.653474][ T294] usb 4-1: SerialNumber: syz [ 72.664299][ T28] audit: type=1400 audit(1793961629.512:152): avc: denied { read } for pid=673 comm="syz.0.104" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.691119][ T674] binder: 673:674 ioctl c0306201 200000000580 returned -14 [ 72.707175][ T294] r8152-cfgselector 4-1: config 0 descriptor?? [ 72.743709][ T28] audit: type=1400 audit(1793961629.542:153): avc: denied { open } for pid=673 comm="syz.0.104" path="/dev/binderfs/binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 72.932037][ T294] r8152-cfgselector 4-1: Needed 1 retries to read version [ 72.940136][ T294] r8152-cfgselector 4-1: Unknown version 0x0000 [ 72.947400][ T294] r8152-cfgselector 4-1: bad CDC descriptors [ 74.720304][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 74.736700][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 74.745467][ T642] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 74.751941][ T294] r8152-cfgselector 4-1: Unknown version 0x0000 [ 74.765511][ T294] r8152-cfgselector 4-1: USB disconnect, device number 3 [ 74.876378][ T324] usb 2-1: clock source 0 is not valid, cannot use [ 74.909267][ T685] overlayfs: failed to resolve './file2': -2 [ 74.923386][ T324] usb 2-1: 1:1: cannot get freq (v2/v3): err -71 [ 74.932017][ T324] usb 2-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 75.003112][ T324] usb 2-1: USB disconnect, device number 3 [ 75.064415][ T695] create_pit_timer: 17 callbacks suppressed [ 75.064465][ T695] pit: kvm: requested 134933 ns i8254 timer period limited to 200000 ns [ 75.079734][ T695] pit: kvm: requested 54476 ns i8254 timer period limited to 200000 ns [ 75.088818][ T695] pit: kvm: requested 111466 ns i8254 timer period limited to 200000 ns [ 75.100369][ T695] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 75.109230][ T695] pit: kvm: requested 5866 ns i8254 timer period limited to 200000 ns [ 75.122399][ T695] pit: kvm: requested 130742 ns i8254 timer period limited to 200000 ns [ 75.133525][ T695] pit: kvm: requested 135771 ns i8254 timer period limited to 200000 ns [ 75.142977][ T695] pit: kvm: requested 74590 ns i8254 timer period limited to 200000 ns [ 75.153887][ T695] pit: kvm: requested 72914 ns i8254 timer period limited to 200000 ns [ 75.162962][ T695] pit: kvm: requested 24304 ns i8254 timer period limited to 200000 ns [ 75.293290][ T705] binder: 704:705 ioctl c0306201 200000000580 returned -14 [ 75.391952][ T713] overlayfs: failed to resolve './file2': -2 [ 75.541041][ T28] kauditd_printk_skb: 1 callbacks suppressed [ 75.541092][ T28] audit: type=1400 audit(1793961632.392:155): avc: denied { create } for pid=721 comm="syz.4.124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 75.795339][ T28] audit: type=1400 audit(1793961632.642:156): avc: denied { mount } for pid=727 comm="syz.4.126" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.045354][ T28] audit: type=1400 audit(1793961632.892:157): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 76.327275][ T28] audit: type=1400 audit(1793961632.962:158): avc: denied { unlink } for pid=729 comm="syz.2.127" name="#1" dev="tmpfs" ino=164 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 76.407007][ T28] audit: type=1400 audit(1793961633.232:159): avc: denied { write } for pid=735 comm="syz.2.130" name="001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.481166][ T28] audit: type=1400 audit(1793961633.242:160): avc: denied { map } for pid=735 comm="syz.2.130" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 76.530965][ T741] overlayfs: failed to resolve './file2': -2 [ 76.596535][ T41] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 76.795698][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 76.802896][ T41] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 76.813138][ T41] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 76.822533][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 76.830785][ T41] usb 5-1: Product: syz [ 76.835209][ T41] usb 5-1: Manufacturer: syz [ 76.840241][ T41] usb 5-1: SerialNumber: syz [ 76.855932][ T41] r8152-cfgselector 5-1: config 0 descriptor?? [ 76.936134][ T6] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 77.011301][ T28] audit: type=1400 audit(1793961633.862:161): avc: denied { append } for pid=770 comm="syz.1.145" name="sda" dev="devtmpfs" ino=154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 77.064876][ T772] overlayfs: failed to resolve './file2': -2 [ 77.076338][ T41] r8152-cfgselector 5-1: Needed 1 retries to read version [ 77.083735][ T41] r8152-cfgselector 5-1: Unknown version 0x0000 [ 77.090421][ T41] r8152-cfgselector 5-1: bad CDC descriptors [ 77.135935][ T6] usb 1-1: Using ep0 maxpacket: 8 [ 77.142997][ T6] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 77.163702][ T6] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 77.184057][ T6] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 77.205891][ T6] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 77.223820][ T6] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 77.232283][ T6] usb 1-1: Product: syz [ 77.236689][ T6] usb 1-1: Manufacturer: syz [ 77.241547][ T6] usb 1-1: SerialNumber: syz [ 77.290391][ T41] r8152-cfgselector 5-1: Unknown version 0x0000 [ 77.305957][ T779] overlayfs: failed to resolve './file2': -2 [ 77.312484][ T41] r8152-cfgselector 5-1: USB disconnect, device number 2 [ 77.468306][ T6] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 77.477423][ T6] usb 1-1: clock source 0 is not valid, cannot use [ 77.484351][ T6] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 77.491158][ T6] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 77.522897][ T6] usb 1-1: USB disconnect, device number 3 [ 77.643971][ T28] audit: type=1400 audit(1793961634.492:162): avc: denied { unlink } for pid=794 comm="syz.1.155" name="#5" dev="tmpfs" ino=277 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 77.684628][ T28] audit: type=1400 audit(1793961634.522:163): avc: denied { mount } for pid=794 comm="syz.1.155" name="/" dev="overlay" ino=271 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.707242][ T28] audit: type=1400 audit(1793961634.552:164): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 77.781095][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 77.857319][ T804] overlayfs: failed to resolve './file2': -2 [ 78.177197][ T836] overlayfs: failed to resolve './file2': -2 [ 78.405718][ T294] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 78.536161][ T6] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 78.605762][ T294] usb 2-1: Using ep0 maxpacket: 16 [ 78.616485][ T294] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 78.627545][ T294] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 78.637389][ T294] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.645560][ T294] usb 2-1: Product: syz [ 78.650736][ T294] usb 2-1: Manufacturer: syz [ 78.655448][ T294] usb 2-1: SerialNumber: syz [ 78.671177][ T294] r8152-cfgselector 2-1: config 0 descriptor?? [ 78.745689][ T6] usb 4-1: Using ep0 maxpacket: 8 [ 78.753179][ T6] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 78.767824][ T6] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 78.778398][ T6] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 78.796926][ T6] usb 4-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 78.806423][ T6] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.814524][ T6] usb 4-1: Product: syz [ 78.838528][ T6] usb 4-1: Manufacturer: syz [ 78.843455][ T6] usb 4-1: SerialNumber: syz [ 78.855794][ T465] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 78.890476][ T294] r8152-cfgselector 2-1: Needed 1 retries to read version [ 78.898628][ T294] r8152-cfgselector 2-1: Unknown version 0x0000 [ 78.905168][ T294] r8152-cfgselector 2-1: bad CDC descriptors [ 79.055721][ T465] usb 1-1: Using ep0 maxpacket: 8 [ 79.063298][ T465] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 79.085124][ T465] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 79.170835][ T294] r8152-cfgselector 2-1: Unknown version 0x0000 [ 79.177382][ T465] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 79.265992][ T465] usb 1-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 79.337197][ T465] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.403970][ T465] usb 1-1: Product: syz [ 79.443903][ T465] usb 1-1: Manufacturer: syz [ 79.485411][ T465] usb 1-1: SerialNumber: syz [ 79.772297][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 79.781028][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 79.804058][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 79.812700][ C1] raw-gadget.2 gadget.0: ignoring, device is not running [ 79.820850][ T465] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 79.914959][ T465] usb 1-1: clock source 0 is not valid, cannot use [ 79.945235][ T465] usb 1-1: 1:1: cannot get freq (v2/v3): err -71 [ 79.971588][ T465] usb 1-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 80.064041][ T465] usb 1-1: USB disconnect, device number 4 [ 80.158273][ T362] udevd[362]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 80.438655][ T6] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 80.450778][ T294] r8152-cfgselector 2-1: USB disconnect, device number 4 [ 80.458275][ T6] usb 4-1: clock source 0 is not valid, cannot use [ 80.469424][ T6] usb 4-1: 1:1: cannot get freq (v2/v3): err -71 [ 80.478255][ T6] usb 4-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 80.479347][ T889] overlayfs: failed to resolve './file2': -2 [ 80.560468][ T6] usb 4-1: USB disconnect, device number 4 [ 80.824259][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 80.872583][ T921] overlayfs: failed to resolve './file2': -2 [ 81.065918][ T324] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 82.314881][ T930] loop0: detected capacity change from 0 to 2048 [ 82.475739][ T324] usb 5-1: Using ep0 maxpacket: 16 [ 82.484662][ T324] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 82.548035][ T930] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 82.557374][ T930] ext4 filesystem being mounted at /56/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 82.695718][ T324] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 82.785963][ T294] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 82.806196][ T324] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.814795][ T324] usb 5-1: Product: syz [ 82.819593][ T324] usb 5-1: Manufacturer: syz [ 82.824495][ T324] usb 5-1: SerialNumber: syz [ 82.833587][ T324] r8152-cfgselector 5-1: config 0 descriptor?? [ 82.916007][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 83.048959][ T324] r8152-cfgselector 5-1: Needed 1 retries to read version [ 83.056793][ T324] r8152-cfgselector 5-1: Unknown version 0x0000 [ 83.063629][ T324] r8152-cfgselector 5-1: bad CDC descriptors [ 83.267271][ T289] EXT4-fs (loop0): unmounting filesystem. [ 83.278253][ T324] r8152-cfgselector 5-1: Unknown version 0x0000 [ 83.323007][ T324] r8152-cfgselector 5-1: USB disconnect, device number 3 [ 83.355916][ T294] usb 3-1: Using ep0 maxpacket: 8 [ 83.364507][ T294] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 83.375655][ T294] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 83.384868][ T294] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 83.398397][ T294] usb 3-1: New USB device found, idVendor=0582, idProduct=0025, bcdDevice= 0.40 [ 83.415912][ T294] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.428403][ T294] usb 3-1: Product: syz [ 83.432714][ T294] usb 3-1: Manufacturer: syz [ 83.439785][ T294] usb 3-1: SerialNumber: syz [ 83.490045][ T955] overlayfs: missing 'lowerdir' [ 83.782994][ T915] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 84.807812][ T294] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 85.118582][ T983] loop0: detected capacity change from 0 to 2048 [ 85.574614][ T983] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 85.583819][ T983] ext4 filesystem being mounted at /63/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 85.786203][ T294] usb 3-1: clock source 0 is not valid, cannot use [ 85.793435][ T294] usb 3-1: 1:1: cannot get freq (v2/v3): err -71 [ 85.806697][ T294] usb 3-1: uac_clock_source_is_valid(): cannot get clock validity for id 0 [ 86.114581][ T1011] ./dev/sda1: Can't open blockdev [ 86.122176][ T1011] overlayfs: failed to resolve './file2': -2 [ 86.774670][ T41] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 86.793964][ T289] EXT4-fs (loop0): unmounting filesystem. [ 87.015746][ T41] usb 5-1: Using ep0 maxpacket: 16 [ 87.040545][ T41] usb 5-1: config index 0 descriptor too short (expected 51443, got 18) [ 87.066764][ T1017] ./dev/sda1: Can't open blockdev [ 87.095181][ T41] usb 5-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 87.135845][ T41] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 87.144018][ T41] usb 5-1: Product: syz [ 87.189587][ T41] usb 5-1: Manufacturer: syz [ 87.212646][ T41] usb 5-1: SerialNumber: syz [ 87.248988][ T41] r8152-cfgselector 5-1: config 0 descriptor?? [ 87.480170][ T294] usb 3-1: USB disconnect, device number 4 [ 87.516056][ T41] r8152-cfgselector 5-1: Needed 1 retries to read version [ 87.523353][ T41] r8152-cfgselector 5-1: Unknown version 0x0000 [ 87.567276][ T41] r8152-cfgselector 5-1: bad CDC descriptors [ 87.675075][ T1043] ./dev/sda1: Can't open blockdev [ 87.697030][ T1043] overlayfs: failed to resolve './file2': -2 [ 87.839578][ C1] hrtimer: interrupt took 131465 ns [ 87.880476][ T41] r8152-cfgselector 5-1: Unknown version 0x0000 [ 88.014093][ T41] r8152-cfgselector 5-1: USB disconnect, device number 4 [ 88.063077][ T1047] ./dev/sda1: Can't open blockdev [ 88.802809][ T1030] loop0: detected capacity change from 0 to 40427 [ 88.825158][ T1030] F2FS-fs (loop0): invalid crc value [ 89.057402][ T1060] loop2: detected capacity change from 0 to 2048 [ 89.222239][ T1030] F2FS-fs (loop0): Found nat_bits in checkpoint [ 89.309177][ T1060] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 89.318758][ T1060] ext4 filesystem being mounted at /50/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 89.754607][ T1030] F2FS-fs (loop0): Start checkpoint disabled! [ 89.766881][ T1030] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 89.776876][ T1030] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 90.872875][ T286] EXT4-fs (loop2): unmounting filesystem. [ 90.908053][ T1089] ./dev/sda1: Can't open blockdev [ 90.914909][ T1089] overlayfs: failed to resolve './file2': -2 [ 91.010740][ T1092] ./dev/sda1: Can't open blockdev [ 91.088573][ T10] kworker/u4:1: attempt to access beyond end of device [ 91.088573][ T10] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 91.296316][ T1062] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 91.485712][ T1062] usb 4-1: Using ep0 maxpacket: 16 [ 91.495112][ T1062] usb 4-1: config index 0 descriptor too short (expected 51443, got 18) [ 91.592175][ T1062] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 91.664571][ T1062] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.775284][ T1062] usb 4-1: Product: syz [ 91.809894][ T1062] usb 4-1: Manufacturer: syz [ 91.852144][ T1062] usb 4-1: SerialNumber: syz [ 91.936154][ T1062] r8152-cfgselector 4-1: config 0 descriptor?? [ 92.213436][ T1062] r8152-cfgselector 4-1: Needed 1 retries to read version [ 92.229811][ T1062] r8152-cfgselector 4-1: Unknown version 0x0000 [ 92.250732][ T1117] netlink: 4 bytes leftover after parsing attributes in process `syz.0.275'. [ 92.276675][ T1062] r8152-cfgselector 4-1: bad CDC descriptors [ 92.424922][ T1062] r8152-cfgselector 4-1: Unknown version 0x0000 [ 92.528997][ T1062] r8152-cfgselector 4-1: USB disconnect, device number 5 [ 92.800736][ T1103] loop4: detected capacity change from 0 to 40427 [ 92.811191][ T1124] ./dev/sda1: Can't open blockdev [ 92.842134][ T1103] F2FS-fs (loop4): invalid crc value [ 92.866874][ T1124] overlayfs: failed to resolve './file2': -2 [ 92.911260][ T1129] ./dev/sda1: Can't open blockdev [ 93.021133][ T1134] overlayfs: missing 'lowerdir' [ 93.028910][ T1103] F2FS-fs (loop4): Found nat_bits in checkpoint [ 93.207270][ T1103] F2FS-fs (loop4): Start checkpoint disabled! [ 93.235337][ T1103] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 93.275265][ T1103] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 93.564641][ T1158] netlink: 4 bytes leftover after parsing attributes in process `syz.2.287'. [ 93.740549][ T10] kworker/u4:1: attempt to access beyond end of device [ 93.740549][ T10] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 93.945774][ T1164] ./dev/sda1: Can't open blockdev [ 93.952329][ T1164] overlayfs: failed to resolve './file2': -2 [ 94.010348][ T1169] ./dev/sda1: Can't open blockdev [ 95.290499][ T1200] ./dev/sda1: Can't open blockdev [ 95.327161][ T1200] overlayfs: failed to resolve './file2': -2 [ 95.621350][ T1209] ./dev/sda1: Can't open blockdev [ 96.677778][ T1190] loop2: detected capacity change from 0 to 40427 [ 96.796394][ T1190] F2FS-fs (loop2): invalid crc value [ 96.865036][ T1190] F2FS-fs (loop2): Found nat_bits in checkpoint [ 97.056520][ T1190] F2FS-fs (loop2): Start checkpoint disabled! [ 97.080100][ T1190] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 97.133444][ T1190] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 97.538637][ T1241] overlayfs: failed to resolve './file2': -2 [ 97.752587][ T1243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.315'. [ 97.813682][ T1248] ./dev/sda1: Can't open blockdev [ 98.190922][ T37] kworker/u4:2: attempt to access beyond end of device [ 98.190922][ T37] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 98.207390][ T6] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 99.266022][ T6] usb 5-1: device descriptor read/64, error -71 [ 99.438755][ T1276] overlayfs: failed to resolve './file2': -2 [ 99.537576][ T6] usb 5-1: device descriptor read/64, error -71 [ 101.169695][ T1281] ./dev/sda1: Can't open blockdev [ 101.473578][ T1283] FAULT_INJECTION: forcing a failure. [ 101.473578][ T1283] name fail_futex, interval 1, probability 0, space 0, times 0 [ 101.486612][ T1283] CPU: 0 PID: 1283 Comm: syz.4.329 Not tainted syzkaller #0 [ 101.493977][ T1283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 101.504181][ T1283] Call Trace: [ 101.507514][ T1283] [ 101.510494][ T1283] __dump_stack+0x21/0x24 [ 101.515078][ T1283] dump_stack_lvl+0x110/0x170 [ 101.519828][ T1283] ? __cfi_dump_stack_lvl+0x8/0x8 [ 101.524920][ T1283] ? __kasan_check_write+0x14/0x20 [ 101.530155][ T1283] ? put_pid+0xde/0x120 [ 101.534371][ T1283] dump_stack+0x15/0x24 [ 101.538608][ T1283] should_fail_ex+0x3bf/0x510 [ 101.543395][ T1283] should_fail+0xb/0x10 [ 101.547602][ T1283] get_futex_key+0x143/0xb10 [ 101.552280][ T1283] ? __cfi_get_futex_key+0x10/0x10 [ 101.557486][ T1283] ? ____sys_sendmsg+0x821/0x9c0 [ 101.562539][ T1283] futex_wait_setup+0xb8/0x260 [ 101.567392][ T1283] ? __cfi_futex_wait_setup+0x10/0x10 [ 101.569983][ T1289] netlink: 4 bytes leftover after parsing attributes in process `syz.2.331'. [ 101.572828][ T1283] ? futex_setup_timer+0xb0/0xc0 [ 101.572871][ T1283] futex_wait+0x1ce/0x900 [ 101.572897][ T1283] ? __cfi_futex_wait+0x10/0x10 [ 101.572923][ T1283] ? __cfi_futex_wake+0x10/0x10 [ 101.572953][ T1283] do_futex+0x2e2/0x430 [ 101.572973][ T1283] ? __cfi_do_futex+0x10/0x10 [ 101.572992][ T1283] __se_sys_futex+0x136/0x310 [ 101.573068][ T1283] ? __x64_sys_futex+0x100/0x100 [ 101.573130][ T1283] __x64_sys_futex+0xe5/0x100 [ 101.573150][ T1283] x64_sys_call+0x7ec/0x9a0 [ 101.628824][ T1283] do_syscall_64+0x4c/0xa0 [ 101.633319][ T1283] ? clear_bhb_loop+0x30/0x80 [ 101.638115][ T1283] ? clear_bhb_loop+0x30/0x80 [ 101.642831][ T1283] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 101.648793][ T1283] RIP: 0033:0x7f886c59fb19 [ 101.653502][ T1283] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.673173][ T1283] RSP: 002b:00007f886d4410e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 101.681722][ T1283] RAX: ffffffffffffffda RBX: 00007f886c825fa8 RCX: 00007f886c59fb19 [ 101.689720][ T1283] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f886c825fa8 [ 101.697769][ T1283] RBP: 00007f886c825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 101.705810][ T1283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.713839][ T1283] R13: 00007f886c826038 R14: 00007ffec9092130 R15: 00007ffec9092218 [ 101.721842][ T1283] [ 101.744763][ T1294] loop3: detected capacity change from 0 to 512 [ 101.806099][ T1294] EXT4-fs (loop3): Test dummy encryption mode enabled [ 101.841652][ T1294] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 101.932286][ T1294] EXT4-fs (loop3): 1 truncate cleaned up [ 101.938376][ T1294] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 101.950650][ T1305] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 102.005641][ T288] EXT4-fs (loop3): unmounting filesystem. [ 102.015002][ T1305] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 102.091493][ T1315] ./dev/sda1: Can't open blockdev [ 102.100306][ T1305] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 102.315027][ T1118] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 102.619655][ T1322] loop3: detected capacity change from 0 to 2048 [ 102.633435][ T1118] usb 2-1: device descriptor read/64, error -71 [ 102.822657][ T1322] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 102.831944][ T1322] ext4 filesystem being mounted at /64/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 103.175674][ T1118] usb 2-1: device descriptor read/64, error -71 [ 103.499324][ T288] EXT4-fs (loop3): unmounting filesystem. [ 103.507640][ T1332] overlayfs: failed to resolve './file2': -2 [ 103.555802][ T1118] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 103.735713][ T1118] usb 2-1: device descriptor read/64, error -71 [ 104.025785][ T1118] usb 2-1: device descriptor read/64, error -71 [ 104.159097][ T1118] usb usb2-port1: attempt power cycle [ 104.263575][ T1336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.347'. [ 104.575707][ T1118] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 104.643109][ T1118] usb 2-1: device descriptor read/8, error -71 [ 104.928629][ T1339] FAULT_INJECTION: forcing a failure. [ 104.928629][ T1339] name fail_futex, interval 1, probability 0, space 0, times 0 [ 104.941717][ T1339] CPU: 1 PID: 1339 Comm: syz.3.348 Not tainted syzkaller #0 [ 104.949077][ T1339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 104.959379][ T1339] Call Trace: [ 104.962923][ T1339] [ 104.966127][ T1339] __dump_stack+0x21/0x24 [ 104.970701][ T1339] dump_stack_lvl+0x110/0x170 [ 104.975442][ T1339] ? __cfi_dump_stack_lvl+0x8/0x8 [ 104.980527][ T1339] ? __kasan_check_write+0x14/0x20 [ 104.985782][ T1339] ? put_pid+0xde/0x120 [ 104.990228][ T1339] dump_stack+0x15/0x24 [ 104.994452][ T1339] should_fail_ex+0x3bf/0x510 [ 104.999271][ T1339] should_fail+0xb/0x10 [ 105.003498][ T1339] get_futex_key+0x143/0xb10 [ 105.008164][ T1339] ? __cfi_get_futex_key+0x10/0x10 [ 105.013330][ T1339] ? ____sys_sendmsg+0x821/0x9c0 [ 105.018386][ T1339] futex_wait_setup+0xb8/0x260 [ 105.023197][ T1339] ? __cfi_futex_wait_setup+0x10/0x10 [ 105.028606][ T1339] ? futex_setup_timer+0xb0/0xc0 [ 105.033605][ T1339] futex_wait+0x1ce/0x900 [ 105.037995][ T1339] ? __cfi_futex_wait+0x10/0x10 [ 105.042897][ T1339] ? __cfi_futex_wake+0x10/0x10 [ 105.047890][ T1339] do_futex+0x2e2/0x430 [ 105.052099][ T1339] ? __cfi_do_futex+0x10/0x10 [ 105.056969][ T1339] __se_sys_futex+0x136/0x310 [ 105.061830][ T1339] ? __x64_sys_futex+0x100/0x100 [ 105.066882][ T1339] __x64_sys_futex+0xe5/0x100 [ 105.071669][ T1339] x64_sys_call+0x7ec/0x9a0 [ 105.076498][ T1339] do_syscall_64+0x4c/0xa0 [ 105.080969][ T1339] ? clear_bhb_loop+0x30/0x80 [ 105.085745][ T1339] ? clear_bhb_loop+0x30/0x80 [ 105.090556][ T1339] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.096524][ T1339] RIP: 0033:0x7f7fa059fb19 [ 105.101106][ T1339] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.120753][ T1339] RSP: 002b:00007f7fa15320e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.129341][ T1339] RAX: ffffffffffffffda RBX: 00007f7fa0825fa8 RCX: 00007f7fa059fb19 [ 105.137363][ T1339] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f7fa0825fa8 [ 105.145428][ T1339] RBP: 00007f7fa0825fa0 R08: 0000000000000000 R09: 0000000000000000 [ 105.153478][ T1339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.161639][ T1339] R13: 00007f7fa0826038 R14: 00007ffcd343a7c0 R15: 00007ffcd343a8a8 [ 105.169761][ T1339] [ 105.216066][ T1118] usb 2-1: device descriptor read/8, error -71 [ 105.687867][ T1367] netlink: 4 bytes leftover after parsing attributes in process `syz.3.359'. [ 105.836519][ T1371] overlayfs: failed to resolve './file2': -2 [ 105.973086][ T308] Bluetooth: hci0: Frame reassembly failed (-84) [ 106.095653][ T19] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 106.265645][ T19] usb 4-1: device descriptor read/64, error -71 [ 106.535655][ T19] usb 4-1: device descriptor read/64, error -71 [ 106.805706][ T19] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 106.975642][ T19] usb 4-1: device descriptor read/64, error -71 [ 107.019823][ T1377] loop2: detected capacity change from 0 to 40427 [ 107.070924][ T1377] F2FS-fs (loop2): invalid crc value [ 107.117853][ T1377] F2FS-fs (loop2): Found nat_bits in checkpoint [ 107.179779][ T1380] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 107.199928][ T1380] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 107.225379][ T1380] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 107.245696][ T19] usb 4-1: device descriptor read/64, error -71 [ 107.366267][ T19] usb usb4-port1: attempt power cycle [ 107.416343][ T1377] F2FS-fs (loop2): Start checkpoint disabled! [ 107.436160][ T1377] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 107.455704][ T1377] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 107.776075][ T19] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 107.818315][ T19] usb 4-1: device descriptor read/8, error -71 [ 107.995325][ T19] usb 4-1: device descriptor read/8, error -71 [ 108.105819][ T512] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 108.265689][ T19] usb 4-1: new full-speed USB device number 9 using dummy_hcd [ 108.309980][ T19] usb 4-1: device descriptor read/8, error -71 [ 108.469340][ T19] usb 4-1: device descriptor read/8, error -71 [ 108.595974][ T19] usb usb4-port1: unable to enumerate USB device [ 108.708150][ T308] kworker/u4:3: attempt to access beyond end of device [ 108.708150][ T308] loop2: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 108.938224][ T1375] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 109.315702][ T19] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 109.347209][ T1415] overlayfs: missing 'lowerdir' [ 109.475753][ T19] usb 4-1: device descriptor read/64, error -71 [ 109.745977][ T19] usb 4-1: device descriptor read/64, error -71 [ 109.948093][ T1421] loop4: detected capacity change from 0 to 40427 [ 109.975355][ T1421] F2FS-fs (loop4): invalid crc value [ 110.000320][ T1421] F2FS-fs (loop4): Found nat_bits in checkpoint [ 110.016020][ T19] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 110.073984][ T1421] F2FS-fs (loop4): Start checkpoint disabled! [ 110.082354][ T1421] F2FS-fs (loop4): f2fs_disable_checkpoint() finish, err:0 [ 110.090954][ T1421] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 110.108409][ T1423] loop0: detected capacity change from 0 to 40427 [ 110.126666][ T1423] F2FS-fs (loop0): invalid crc value [ 110.185755][ T19] usb 4-1: device descriptor read/64, error -71 [ 110.256207][ T6] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 110.266943][ T1423] F2FS-fs (loop0): Found nat_bits in checkpoint [ 110.364139][ T1423] F2FS-fs (loop0): Start checkpoint disabled! [ 110.379159][ T37] kworker/u4:2: attempt to access beyond end of device [ 110.379159][ T37] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 110.380942][ T1423] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 110.431439][ T1423] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 110.445888][ T6] usb 3-1: device descriptor read/64, error -71 [ 110.495734][ T19] usb 4-1: device descriptor read/64, error -71 [ 110.615894][ T19] usb usb4-port1: attempt power cycle [ 110.725981][ T6] usb 3-1: device descriptor read/64, error -71 [ 110.857818][ T37] kworker/u4:2: attempt to access beyond end of device [ 110.857818][ T37] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 110.996018][ T6] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 111.045768][ T19] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 111.092468][ T19] usb 4-1: device descriptor read/8, error -71 [ 111.155946][ T6] usb 3-1: device descriptor read/64, error -71 [ 111.204665][ T37] Bluetooth: hci0: Frame reassembly failed (-84) [ 111.247609][ T19] usb 4-1: device descriptor read/8, error -71 [ 111.425900][ T6] usb 3-1: device descriptor read/64, error -71 [ 111.515656][ T19] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 111.545939][ T6] usb usb3-port1: attempt power cycle [ 111.553085][ T19] usb 4-1: device descriptor read/8, error -71 [ 111.706981][ T19] usb 4-1: device descriptor read/8, error -71 [ 111.790597][ T1453] overlayfs: missing 'lowerdir' [ 111.825871][ T19] usb usb4-port1: unable to enumerate USB device [ 111.966005][ T6] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 112.007808][ T6] usb 3-1: device descriptor read/8, error -71 [ 112.129424][ T1461] loop1: detected capacity change from 0 to 40427 [ 112.140211][ T1461] F2FS-fs (loop1): invalid crc value [ 112.157848][ T6] usb 3-1: device descriptor read/8, error -71 [ 112.164410][ T1461] F2FS-fs (loop1): Found nat_bits in checkpoint [ 112.248894][ T1461] F2FS-fs (loop1): Start checkpoint disabled! [ 112.257727][ T1461] F2FS-fs (loop1): f2fs_disable_checkpoint() finish, err:0 [ 112.267160][ T1461] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 112.285235][ T1463] loop3: detected capacity change from 0 to 40427 [ 112.306001][ T1463] F2FS-fs (loop3): invalid crc value [ 112.349987][ T1463] F2FS-fs (loop3): Found nat_bits in checkpoint [ 112.433299][ T1463] F2FS-fs (loop3): Start checkpoint disabled! [ 112.441826][ T1463] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 112.449719][ T6] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 112.458684][ T1463] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 112.487537][ T6] usb 3-1: device descriptor read/8, error -71 [ 112.543923][ T1470] loop4: detected capacity change from 0 to 256 [ 112.561487][ T1470] ======================================================= [ 112.561487][ T1470] WARNING: The mand mount option has been deprecated and [ 112.561487][ T1470] and is ignored by this kernel. Remove the mand [ 112.561487][ T1470] option from the mount to silence this warning. [ 112.561487][ T1470] ======================================================= [ 112.621950][ T28] audit: type=1400 audit(1793961669.472:165): avc: denied { mount } for pid=1469 comm="syz.4.396" name="/" dev="loop4" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.653762][ T28] audit: type=1400 audit(1793961669.502:166): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 112.674207][ T6] usb 3-1: device descriptor read/8, error -71 [ 112.789312][ T8] kworker/u4:0: attempt to access beyond end of device [ 112.789312][ T8] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 112.836725][ T37] kworker/u4:2: attempt to access beyond end of device [ 112.836725][ T37] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 112.856650][ T6] usb usb3-port1: unable to enumerate USB device [ 113.180330][ T1487] overlayfs: missing 'lowerdir' [ 113.285966][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 113.292780][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 113.301867][ T1442] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 113.465878][ T19] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 113.625737][ T19] usb 3-1: device descriptor read/64, error -71 [ 113.695659][ T370] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 113.875690][ T370] usb 2-1: device descriptor read/64, error -71 [ 113.905885][ T19] usb 3-1: device descriptor read/64, error -71 [ 114.145637][ T370] usb 2-1: device descriptor read/64, error -71 [ 114.185688][ T19] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 114.355881][ T19] usb 3-1: device descriptor read/64, error -71 [ 114.415749][ T370] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 114.454910][ T1499] No source specified [ 114.625796][ T19] usb 3-1: device descriptor read/64, error -71 [ 114.665747][ T370] usb 2-1: device descriptor read/64, error -71 [ 114.920386][ T1505] loop4: detected capacity change from 0 to 2048 [ 115.085804][ T370] usb 2-1: device descriptor read/64, error -71 [ 115.118358][ T1505] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 115.127857][ T1505] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 115.216337][ T370] usb usb2-port1: attempt power cycle [ 115.633225][ T1504] loop3: detected capacity change from 0 to 40427 [ 115.657301][ T1504] F2FS-fs (loop3): invalid crc value [ 115.678279][ T1504] F2FS-fs (loop3): Found nat_bits in checkpoint [ 115.707164][ T370] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 115.725801][ T309] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 115.750162][ T370] usb 2-1: device descriptor read/8, error -71 [ 115.769467][ T1504] F2FS-fs (loop3): Start checkpoint disabled! [ 115.777416][ T1504] F2FS-fs (loop3): f2fs_disable_checkpoint() finish, err:0 [ 115.785362][ T1504] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 115.787835][ T19] usb usb3-port1: attempt power cycle [ 115.925476][ T290] EXT4-fs (loop4): unmounting filesystem. [ 115.967185][ T370] usb 2-1: device descriptor read/8, error -71 [ 115.977993][ T309] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 115.999889][ T309] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 116.013022][ T309] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 116.022948][ T309] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.121195][ T10] kworker/u4:1: attempt to access beyond end of device [ 116.121195][ T10] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 116.137423][ T1520] overlayfs: missing 'workdir' [ 116.211909][ T1526] No source specified [ 116.235699][ T370] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 116.277711][ T370] usb 2-1: device descriptor read/8, error -71 [ 116.409193][ T1534] netlink: 4 bytes leftover after parsing attributes in process `syz.3.412'. [ 116.429224][ T370] usb 2-1: device descriptor read/8, error -71 [ 116.556022][ T370] usb usb2-port1: unable to enumerate USB device [ 117.778085][ T1555] loop4: detected capacity change from 0 to 2048 [ 117.816390][ T1555] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 117.825302][ T1555] ext4 filesystem being mounted at /54/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 118.467649][ T370] usb 1-1: USB disconnect, device number 5 [ 119.282081][ T290] EXT4-fs (loop4): unmounting filesystem. [ 119.484931][ T1571] overlayfs: missing 'workdir' [ 119.958025][ T370] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 120.007453][ T1577] No source specified [ 120.125780][ T370] usb 1-1: device descriptor read/64, error -71 [ 120.159468][ T1584] netlink: 4 bytes leftover after parsing attributes in process `syz.2.435'. [ 120.321759][ T28] audit: type=1400 audit(1793961677.172:167): avc: denied { read write } for pid=1589 comm="syz.2.437" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 120.386397][ T28] audit: type=1400 audit(1793961677.172:168): avc: denied { open } for pid=1589 comm="syz.2.437" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 120.414153][ T370] usb 1-1: device descriptor read/64, error -71 [ 120.444410][ T28] audit: type=1400 audit(1793961677.172:169): avc: denied { mount } for pid=1589 comm="syz.2.437" name="/" dev="ramfs" ino=20316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 120.506536][ T28] audit: type=1400 audit(1793961677.222:170): avc: denied { create } for pid=1589 comm="syz.2.437" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 120.645872][ T19] usb 3-1: new full-speed USB device number 12 using dummy_hcd [ 120.685963][ T370] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 120.795461][ T1595] overlayfs: failed to resolve './file2': -2 [ 120.845778][ T370] usb 1-1: device descriptor read/64, error -71 [ 120.848917][ T19] usb 3-1: not running at top speed; connect to a high speed hub [ 120.937044][ T19] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 120.978074][ T19] usb 3-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 121.005764][ T19] usb 3-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 121.046456][ T19] usb 3-1: Product: syz [ 121.051066][ T19] usb 3-1: Manufacturer: syz [ 121.353456][ T370] usb 1-1: device descriptor read/64, error -71 [ 121.475864][ T370] usb usb1-port1: attempt power cycle [ 121.618165][ T1603] overlayfs: missing 'workdir' [ 121.885899][ T370] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 121.948110][ T370] usb 1-1: device descriptor read/8, error -71 [ 122.097561][ T370] usb 1-1: device descriptor read/8, error -71 [ 122.375790][ T370] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 122.439080][ T370] usb 1-1: device descriptor read/8, error -71 [ 122.594459][ T1601] loop4: detected capacity change from 0 to 2048 [ 122.600597][ T19] usb 3-1: Found UVC 1.00 device syz (225a:e1d4) [ 122.607862][ T19] usb 3-1: No streaming interface found for terminal 2. [ 122.626558][ T370] usb 1-1: device descriptor read/8, error -71 [ 122.679468][ T19] usb 3-1: USB disconnect, device number 12 [ 122.733426][ T1601] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 122.742122][ T1601] ext4 filesystem being mounted at /58/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 122.756022][ T370] usb usb1-port1: unable to enumerate USB device [ 122.966773][ T290] EXT4-fs (loop4): unmounting filesystem. [ 123.314159][ T1629] netlink: 4 bytes leftover after parsing attributes in process `syz.0.451'. [ 124.795729][ T19] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 124.985670][ T19] usb 2-1: device descriptor read/64, error -71 [ 125.135298][ T1670] netlink: 4 bytes leftover after parsing attributes in process `syz.2.466'. [ 125.265670][ T1269] usb 1-1: new full-speed USB device number 10 using dummy_hcd [ 125.275834][ T19] usb 2-1: device descriptor read/64, error -71 [ 125.289223][ T1605] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 125.465667][ T1605] usb 5-1: device descriptor read/64, error -71 [ 125.482009][ T1269] usb 1-1: not running at top speed; connect to a high speed hub [ 125.506525][ T1269] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.527552][ T1269] usb 1-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 125.545668][ T19] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 125.553596][ T1269] usb 1-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 125.572724][ T1269] usb 1-1: Product: syz [ 125.577359][ T1269] usb 1-1: Manufacturer: syz [ 125.601964][ T1269] usb 1-1: Found UVC 1.00 device syz (225a:e1d4) [ 125.615717][ T1269] usb 1-1: No streaming interface found for terminal 2. [ 125.705660][ T19] usb 2-1: device descriptor read/64, error -71 [ 125.735687][ T1605] usb 5-1: device descriptor read/64, error -71 [ 125.809497][ T294] usb 1-1: USB disconnect, device number 10 [ 126.005788][ T1605] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 126.175830][ T1605] usb 5-1: device descriptor read/64, error -71 [ 126.445729][ T1605] usb 5-1: device descriptor read/64, error -71 [ 126.585976][ T1605] usb usb5-port1: attempt power cycle [ 127.788501][ T1701] loop1: detected capacity change from 0 to 256 [ 127.894165][ T1605] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 128.077293][ T19] usb 2-1: device descriptor read/64, error -71 [ 128.181139][ T1717] overlayfs: failed to resolve './file2': -2 [ 128.337282][ T1605] usb 5-1: device not accepting address 9, error -71 [ 128.350901][ T1723] overlayfs: filesystem on './file0' not supported as upperdir [ 128.657456][ T19] usb usb2-port1: attempt power cycle [ 128.737073][ T1605] usb 5-1: new full-speed USB device number 10 using dummy_hcd [ 128.776695][ T1605] usb 5-1: not running at top speed; connect to a high speed hub [ 128.785343][ T1605] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 128.796951][ T1605] usb 5-1: New USB device found, idVendor=225a, idProduct=e1d4, bcdDevice=a7.ad [ 128.806158][ T1605] usb 5-1: New USB device strings: Mfr=245, Product=210, SerialNumber=0 [ 128.816873][ T1605] usb 5-1: Product: syz [ 128.852931][ T1605] usb 5-1: Manufacturer: syz [ 128.868451][ T1605] usb 5-1: Found UVC 1.00 device syz (225a:e1d4) [ 128.874874][ T1605] usb 5-1: No streaming interface found for terminal 2. [ 129.104374][ T1605] usb 5-1: USB disconnect, device number 10 [ 130.811202][ T1745] loop3: detected capacity change from 0 to 256 [ 130.900123][ T1751] overlayfs: failed to resolve './file2': -2 [ 130.958936][ T19] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 130.966639][ T6] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 130.974488][ T294] usb 1-1: new full-speed USB device number 11 using dummy_hcd [ 131.007232][ T19] usb 2-1: device descriptor read/8, error -71 [ 131.135644][ T6] usb 3-1: device descriptor read/64, error -71 [ 131.156183][ T378] Bluetooth: hci0: Frame reassembly failed (-84) [ 131.166985][ T19] usb 2-1: device descriptor read/8, error -71 [ 131.173238][ T294] usb 1-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 131.183396][ T294] usb 1-1: config 6 has 0 interfaces, different from the descriptor's value: 1 [ 131.192662][ T294] usb 1-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 131.201760][ T294] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.275634][ T1605] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 131.383578][ T370] usb 1-1: USB disconnect, device number 11 [ 131.425763][ T1605] usb 5-1: device descriptor read/64, error -71 [ 131.657288][ T1775] loop0: detected capacity change from 0 to 256 [ 131.705725][ T1605] usb 5-1: device descriptor read/64, error -71 [ 131.970934][ T1777] overlayfs: failed to resolve './file2': -2 [ 131.977520][ T1605] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 132.206963][ T1605] usb 5-1: device descriptor read/64, error -71 [ 132.786241][ T6] usb 3-1: device descriptor read/64, error -71 [ 133.341931][ T512] Bluetooth: hci0: command 0x1003 tx timeout [ 133.355884][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 133.362333][ T1765] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 133.415746][ T1605] usb 5-1: device descriptor read/64, error -71 [ 133.535936][ T1605] usb usb5-port1: attempt power cycle [ 133.865692][ T24] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 134.005642][ T1605] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 134.046273][ T1605] usb 5-1: device descriptor read/8, error -71 [ 134.061259][ T24] usb 4-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 134.071858][ T24] usb 4-1: config 6 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 134.087035][ T24] usb 4-1: config 6 interface 0 has no altsetting 0 [ 134.093702][ T24] usb 4-1: New USB device found, idVendor=04f2, idProduct=1421, bcdDevice= 0.00 [ 134.103113][ T370] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 134.110874][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.138011][ T24] usbhid 4-1:6.0: couldn't find an input interrupt endpoint [ 134.196307][ T1605] usb 5-1: device descriptor read/8, error -71 [ 134.265679][ T370] usb 1-1: device descriptor read/64, error -71 [ 134.325617][ T19] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 134.335345][ T10] Bluetooth: hci0: Frame reassembly failed (-84) [ 134.356809][ T19] usb 2-1: device descriptor read/8, error -71 [ 134.545668][ T370] usb 1-1: device descriptor read/64, error -71 [ 134.845732][ T370] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 135.005760][ T370] usb 1-1: device descriptor read/64, error -71 [ 135.295690][ T370] usb 1-1: device descriptor read/64, error -71 [ 135.376832][ T19] usb 2-1: device descriptor read/8, error -71 [ 135.415742][ T370] usb usb1-port1: attempt power cycle [ 135.495721][ T19] usb usb2-port1: unable to enumerate USB device [ 135.825767][ T370] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 135.857463][ T370] usb 1-1: device descriptor read/8, error -71 [ 136.008195][ T370] usb 1-1: device descriptor read/8, error -71 [ 136.275693][ T370] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 136.307317][ T370] usb 1-1: device descriptor read/8, error -71 [ 136.395668][ T494] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 136.395707][ T45] Bluetooth: hci0: command 0x1003 tx timeout [ 136.467313][ T370] usb 1-1: device descriptor read/8, error -71 [ 136.476632][ T1819] Bluetooth: hci0: Opcode 0x080f failed: -22 [ 136.585984][ T370] usb usb1-port1: unable to enumerate USB device [ 136.693907][ T370] usb 4-1: USB disconnect, device number 14 [ 136.721409][ T1830] overlayfs: failed to resolve './mydev': -2 [ 137.169155][ T1848] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 138.495723][ T309] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 138.548347][ T1867] overlayfs: failed to resolve './mydev': -2 [ 138.555589][ C1] ================================================================== [ 138.563687][ C1] BUG: KASAN: use-after-free in __run_timers+0x341/0x9b0 [ 138.570937][ C1] Write of size 8 at addr ffff888116940a00 by task syz.0.537/1856 [ 138.578775][ C1] [ 138.581186][ C1] CPU: 1 PID: 1856 Comm: syz.0.537 Not tainted syzkaller #0 [ 138.588493][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 138.598570][ C1] Call Trace: [ 138.601866][ C1] [ 138.604731][ C1] __dump_stack+0x21/0x24 [ 138.609208][ C1] dump_stack_lvl+0x110/0x170 [ 138.613907][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 138.618971][ C1] ? __cfi_trigger_load_balance+0x10/0x10 [ 138.624734][ C1] ? __run_timers+0x341/0x9b0 [ 138.629436][ C1] print_address_description+0x71/0x200 [ 138.635040][ C1] print_report+0x4a/0x60 [ 138.639391][ C1] kasan_report+0x122/0x150 [ 138.643939][ C1] ? __run_timers+0x341/0x9b0 [ 138.648638][ C1] __asan_report_store8_noabort+0x17/0x20 [ 138.654375][ C1] __run_timers+0x341/0x9b0 [ 138.658906][ C1] ? sched_clock_cpu+0x6e/0x260 [ 138.663770][ C1] ? calc_index+0x200/0x200 [ 138.668302][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 138.673535][ C1] run_timer_softirq+0x6a/0xf0 [ 138.678319][ C1] handle_softirqs+0x1dd/0x5f0 [ 138.683115][ C1] __irq_exit_rcu+0x52/0xf0 [ 138.687641][ C1] irq_exit_rcu+0x9/0x10 [ 138.691920][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 138.697576][ C1] [ 138.700520][ C1] [ 138.703464][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 138.709509][ C1] RIP: 0010:finish_task_switch+0x173/0x7c0 [ 138.715342][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 49 a7 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 25 ab b4 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 138.734974][ C1] RSP: 0000:ffffc9000dd073a8 EFLAGS: 00000282 [ 138.741144][ C1] RAX: 0000000080000001 RBX: ffff888117f4dc48 RCX: 0000000000000000 [ 138.749129][ C1] RDX: 0000000000000001 RSI: ffffffff85ca72c0 RDI: 00000000ffffffff [ 138.757114][ C1] RBP: ffffc9000dd073f0 R08: ffff88811b11bcc7 R09: 1ffff11023623798 [ 138.765106][ C1] R10: dffffc0000000000 R11: ffffed1023623799 R12: ffff8881f6f37f00 [ 138.773090][ C1] R13: 0000000000000000 R14: ffff8881f6f38a60 R15: ffff888117f4d100 [ 138.781088][ C1] ? finish_task_switch+0x16b/0x7c0 [ 138.786309][ C1] ? switch_mm_irqs_off+0x724/0x960 [ 138.791535][ C1] __schedule+0xcbb/0x1700 [ 138.795983][ C1] ? release_firmware_map_entry+0x190/0x190 [ 138.801889][ C1] ? avc_has_perm+0x163/0x250 [ 138.806658][ C1] schedule+0xbd/0x170 [ 138.810763][ C1] schedule_timeout+0xba/0x340 [ 138.815545][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 138.820943][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 138.826764][ C1] ? prepare_to_wait_exclusive+0x1ab/0x1f0 [ 138.832598][ C1] unix_wait_for_peer+0x1f2/0x2e0 [ 138.837700][ C1] ? unix_find_other+0x820/0x820 [ 138.842658][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 138.848752][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 138.853986][ C1] ? security_unix_may_send+0x8c/0xb0 [ 138.859377][ C1] unix_dgram_sendmsg+0xece/0x1710 [ 138.864536][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 138.870099][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 138.875577][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 138.881146][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 138.886003][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 138.891044][ C1] ? import_iovec+0x7c/0xb0 [ 138.895588][ C1] ___sys_sendmsg+0x2a2/0x360 [ 138.900281][ C1] ? __sys_sendmsg+0x290/0x290 [ 138.905063][ C1] ? __fdget+0x19c/0x220 [ 138.909347][ C1] __sys_sendmmsg+0x2cc/0x4e0 [ 138.914092][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 138.919317][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 138.925079][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 138.930786][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 138.935672][ C1] x64_sys_call+0x3f5/0x9a0 [ 138.940285][ C1] do_syscall_64+0x4c/0xa0 [ 138.944758][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.949460][ C1] ? clear_bhb_loop+0x30/0x80 [ 138.954170][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 138.960089][ C1] RIP: 0033:0x7f7aaf39fb19 [ 138.964667][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 138.984308][ C1] RSP: 002b:00007f7ab0333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 138.992758][ C1] RAX: ffffffffffffffda RBX: 00007f7aaf625fa0 RCX: 00007f7aaf39fb19 [ 139.000750][ C1] RDX: 0400000000000041 RSI: 0000200000001d40 RDI: 0000000000000006 [ 139.008742][ C1] RBP: 00007f7aaf437b70 R08: 0000000000000000 R09: 0000000000000000 [ 139.016727][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 139.024724][ C1] R13: 00007f7aaf626038 R14: 00007f7aaf625fa0 R15: 00007ffd8a6a78b8 [ 139.032805][ C1] [ 139.035874][ C1] [ 139.038217][ C1] Allocated by task 1819: [ 139.042618][ C1] kasan_set_track+0x4b/0x70 [ 139.047246][ C1] kasan_save_alloc_info+0x1f/0x30 [ 139.052389][ C1] __kasan_kmalloc+0x95/0xb0 [ 139.057014][ C1] __kmalloc+0xb4/0x1e0 [ 139.061215][ C1] hci_alloc_dev_priv+0x27/0x1bd0 [ 139.066415][ C1] hci_uart_tty_ioctl+0x3c4/0xa70 [ 139.071547][ C1] tty_ioctl+0x8ef/0xc60 [ 139.075872][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 139.080585][ C1] __x64_sys_ioctl+0x7b/0x90 [ 139.085220][ C1] x64_sys_call+0x58b/0x9a0 [ 139.089938][ C1] do_syscall_64+0x4c/0xa0 [ 139.094386][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.100301][ C1] [ 139.102641][ C1] Freed by task 1819: [ 139.106680][ C1] kasan_set_track+0x4b/0x70 [ 139.111287][ C1] kasan_save_free_info+0x2b/0x40 [ 139.116319][ C1] ____kasan_slab_free+0x132/0x180 [ 139.121444][ C1] __kasan_slab_free+0x11/0x20 [ 139.126389][ C1] slab_free_freelist_hook+0xc2/0x190 [ 139.131770][ C1] __kmem_cache_free+0xb7/0x1b0 [ 139.136663][ C1] kfree+0x6f/0xf0 [ 139.140404][ C1] hci_release_dev+0x12a3/0x13b0 [ 139.145348][ C1] bt_host_release+0x82/0x90 [ 139.149962][ C1] device_release+0xa4/0x1d0 [ 139.154604][ C1] kobject_put+0x19d/0x280 [ 139.159030][ C1] put_device+0x1f/0x30 [ 139.163193][ C1] hci_dev_cmd+0x279/0x740 [ 139.167653][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 139.172356][ C1] sock_do_ioctl+0x114/0x330 [ 139.176969][ C1] sock_ioctl+0x475/0x700 [ 139.181330][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 139.186129][ C1] __x64_sys_ioctl+0x7b/0x90 [ 139.190727][ C1] x64_sys_call+0x58b/0x9a0 [ 139.195247][ C1] do_syscall_64+0x4c/0xa0 [ 139.199677][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.205607][ C1] [ 139.207946][ C1] Last potentially related work creation: [ 139.213682][ C1] kasan_save_stack+0x3a/0x60 [ 139.218400][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 139.223786][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 139.229605][ C1] insert_work+0x51/0x300 [ 139.233985][ C1] __queue_work+0x9d0/0xd50 [ 139.238496][ C1] queue_work_on+0xde/0x150 [ 139.243007][ C1] __hci_cmd_sync_sk+0xaa8/0xd80 [ 139.248018][ C1] hci_cmd_sync_status+0x53/0x120 [ 139.253058][ C1] hci_dev_cmd+0x642/0x740 [ 139.257492][ C1] hci_sock_ioctl+0x41e/0x7f0 [ 139.262194][ C1] sock_do_ioctl+0x114/0x330 [ 139.266797][ C1] sock_ioctl+0x475/0x700 [ 139.271151][ C1] __se_sys_ioctl+0x12f/0x1b0 [ 139.275846][ C1] __x64_sys_ioctl+0x7b/0x90 [ 139.280440][ C1] x64_sys_call+0x58b/0x9a0 [ 139.284956][ C1] do_syscall_64+0x4c/0xa0 [ 139.289390][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 139.295302][ C1] [ 139.297629][ C1] Second to last potentially related work creation: [ 139.304220][ C1] kasan_save_stack+0x3a/0x60 [ 139.308916][ C1] __kasan_record_aux_stack+0xb6/0xc0 [ 139.314307][ C1] kasan_record_aux_stack_noalloc+0xb/0x10 [ 139.320126][ C1] insert_work+0x51/0x300 [ 139.324459][ C1] __queue_work+0x9d0/0xd50 [ 139.328971][ C1] queue_work_on+0xde/0x150 [ 139.333488][ C1] hci_cmd_timeout+0x191/0x200 [ 139.338265][ C1] process_one_work+0x717/0xc30 [ 139.343120][ C1] worker_thread+0xa4d/0x11d0 [ 139.347823][ C1] kthread+0x281/0x320 [ 139.351901][ C1] ret_from_fork+0x1f/0x30 [ 139.356328][ C1] [ 139.358667][ C1] The buggy address belongs to the object at ffff888116940000 [ 139.358667][ C1] which belongs to the cache kmalloc-8k of size 8192 [ 139.372781][ C1] The buggy address is located 2560 bytes inside of [ 139.372781][ C1] 8192-byte region [ffff888116940000, ffff888116942000) [ 139.386244][ C1] [ 139.388597][ C1] The buggy address belongs to the physical page: [ 139.395091][ C1] page:ffffea00045a5000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x116940 [ 139.405356][ C1] head:ffffea00045a5000 order:3 compound_mapcount:0 compound_pincount:0 [ 139.413693][ C1] flags: 0x4000000000010200(slab|head|zone=1) [ 139.419778][ C1] raw: 4000000000010200 0000000000000000 dead000000000001 ffff888100043500 [ 139.428373][ C1] raw: 0000000000000000 0000000080020002 00000001ffffffff 0000000000000000 [ 139.436990][ C1] page dumped because: kasan: bad access detected [ 139.443472][ C1] page_owner tracks the page as allocated [ 139.449199][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 506, tgid 505 (syz.2.46), ts 58306585737, free_ts 56424942542 [ 139.471451][ C1] post_alloc_hook+0x1f5/0x210 [ 139.476273][ C1] prep_new_page+0x1c/0x110 [ 139.480880][ C1] get_page_from_freelist+0x2ca9/0x2d20 [ 139.486455][ C1] __alloc_pages+0x1fa/0x610 [ 139.491069][ C1] alloc_slab_page+0x6e/0xf0 [ 139.495676][ C1] new_slab+0x98/0x3e0 [ 139.499750][ C1] ___slab_alloc+0x70f/0xb70 [ 139.504373][ C1] __slab_alloc+0x5e/0xa0 [ 139.508720][ C1] __kmem_cache_alloc_node+0x204/0x2d0 [ 139.514196][ C1] __kmalloc+0xa4/0x1e0 [ 139.518408][ C1] mb_cache_create+0x194/0x5b0 [ 139.523185][ C1] ext4_xattr_create_cache+0x13/0x20 [ 139.528548][ C1] ext4_fill_super+0x5a37/0x73e0 [ 139.533503][ C1] get_tree_bdev+0x450/0x6a0 [ 139.538130][ C1] ext4_get_tree+0x1c/0x20 [ 139.542553][ C1] vfs_get_tree+0x9a/0x270 [ 139.546980][ C1] page last free stack trace: [ 139.551672][ C1] free_unref_page_prepare+0x81b/0x820 [ 139.557165][ C1] free_unref_page+0x93/0x530 [ 139.561870][ C1] __free_pages+0x67/0x100 [ 139.566308][ C1] __free_slab+0xc7/0x1a0 [ 139.570646][ C1] __unfreeze_partials+0x15a/0x190 [ 139.575796][ C1] put_cpu_partial+0xa9/0x100 [ 139.580509][ C1] __slab_free+0x1c4/0x280 [ 139.584981][ C1] ___cache_free+0xbf/0xd0 [ 139.589427][ C1] qlist_free_all+0xc6/0x140 [ 139.594039][ C1] kasan_quarantine_reduce+0x14a/0x170 [ 139.599518][ C1] __kasan_slab_alloc+0x24/0x80 [ 139.604402][ C1] slab_post_alloc_hook+0x4f/0x2d0 [ 139.609538][ C1] kmem_cache_alloc+0x166/0x320 [ 139.614447][ C1] __alloc_file+0x28/0x2a0 [ 139.618898][ C1] alloc_empty_file+0x97/0x180 [ 139.623693][ C1] path_openat+0xf4/0x2f30 [ 139.628132][ C1] [ 139.630480][ C1] Memory state around the buggy address: [ 139.636130][ C1] ffff888116940900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.644204][ C1] ffff888116940980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.652275][ C1] >ffff888116940a00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.660348][ C1] ^ [ 139.664422][ C1] ffff888116940a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.672493][ C1] ffff888116940b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 139.680561][ C1] ================================================================== [ 139.688628][ C1] Disabling lock debugging due to kernel taint [ 139.695226][ C1] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 139.707013][ C1] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 139.715434][ C1] CPU: 1 PID: 1856 Comm: syz.0.537 Tainted: G B syzkaller #0 [ 139.724212][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/15/2026 [ 139.734283][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 139.739599][ C1] Code: b4 00 00 00 e8 0f 5a 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 2d fa b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 20 f6 6e 00 49 8b 3e e8 c8 f5 b9 03 [ 139.759222][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 139.765307][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117f4d100 [ 139.773291][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 139.781277][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 139.789266][ C1] R10: dffffc0000000000 R11: ffffed1022d28139 R12: ffff8881169409c8 [ 139.797281][ C1] R13: ffff888119067400 R14: 0000000000000000 R15: 000000007fffffff [ 139.805262][ C1] FS: 00007f7ab03336c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 139.814203][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 139.820812][ C1] CR2: 00007f4f9b93b980 CR3: 000000011d3c9000 CR4: 00000000003506a0 [ 139.828804][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 139.836809][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 139.844811][ C1] Call Trace: [ 139.848103][ C1] [ 139.851023][ C1] delayed_work_timer_fn+0x61/0x80 [ 139.856176][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 139.862002][ C1] call_timer_fn+0x46/0x2a0 [ 139.866530][ C1] ? __cfi_delayed_work_timer_fn+0x10/0x10 [ 139.872388][ C1] __run_timers+0x672/0x9b0 [ 139.876914][ C1] ? calc_index+0x200/0x200 [ 139.881440][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 139.886674][ C1] run_timer_softirq+0x6a/0xf0 [ 139.891458][ C1] handle_softirqs+0x1dd/0x5f0 [ 139.896238][ C1] __irq_exit_rcu+0x52/0xf0 [ 139.900755][ C1] irq_exit_rcu+0x9/0x10 [ 139.905012][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 139.910669][ C1] [ 139.913639][ C1] [ 139.916591][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 139.922588][ C1] RIP: 0010:finish_task_switch+0x173/0x7c0 [ 139.928414][ C1] Code: 80 3c 2b 00 74 08 4c 89 f7 e8 49 a7 69 00 4d 8b 2e 4d 85 ed 0f 85 cd 00 00 00 4c 89 e7 e8 25 ab b4 03 fb 49 8d 9f 48 0b 00 00 <48> 89 d8 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 0f b6 04 28 [ 139.948056][ C1] RSP: 0000:ffffc9000dd073a8 EFLAGS: 00000282 [ 139.954141][ C1] RAX: 0000000080000001 RBX: ffff888117f4dc48 RCX: 0000000000000000 [ 139.962138][ C1] RDX: 0000000000000001 RSI: ffffffff85ca72c0 RDI: 00000000ffffffff [ 139.970121][ C1] RBP: ffffc9000dd073f0 R08: ffff88811b11bcc7 R09: 1ffff11023623798 [ 139.978112][ C1] R10: dffffc0000000000 R11: ffffed1023623799 R12: ffff8881f6f37f00 [ 139.986113][ C1] R13: 0000000000000000 R14: ffff8881f6f38a60 R15: ffff888117f4d100 [ 139.994114][ C1] ? finish_task_switch+0x16b/0x7c0 [ 139.999348][ C1] ? switch_mm_irqs_off+0x724/0x960 [ 140.004580][ C1] __schedule+0xcbb/0x1700 [ 140.009035][ C1] ? release_firmware_map_entry+0x190/0x190 [ 140.014946][ C1] ? avc_has_perm+0x163/0x250 [ 140.019663][ C1] schedule+0xbd/0x170 [ 140.023773][ C1] schedule_timeout+0xba/0x340 [ 140.028560][ C1] ? __cfi_schedule_timeout+0x10/0x10 [ 140.033958][ C1] ? _raw_spin_unlock_irqrestore+0x5a/0x80 [ 140.039788][ C1] ? prepare_to_wait_exclusive+0x1ab/0x1f0 [ 140.045619][ C1] unix_wait_for_peer+0x1f2/0x2e0 [ 140.050678][ C1] ? unix_find_other+0x820/0x820 [ 140.055633][ C1] ? __cfi_autoremove_wake_function+0x10/0x10 [ 140.061728][ C1] ? __cfi__raw_spin_lock+0x10/0x10 [ 140.066943][ C1] ? security_unix_may_send+0x8c/0xb0 [ 140.072330][ C1] unix_dgram_sendmsg+0xece/0x1710 [ 140.077463][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 140.083041][ C1] ? security_socket_sendmsg+0x93/0xb0 [ 140.088519][ C1] ? __cfi_unix_dgram_sendmsg+0x10/0x10 [ 140.094101][ C1] ____sys_sendmsg+0x5fb/0x9c0 [ 140.098881][ C1] ? __sys_sendmsg_sock+0x40/0x40 [ 140.103917][ C1] ? import_iovec+0x7c/0xb0 [ 140.108568][ C1] ___sys_sendmsg+0x2a2/0x360 [ 140.113298][ C1] ? __sys_sendmsg+0x290/0x290 [ 140.118119][ C1] ? __fdget+0x19c/0x220 [ 140.122399][ C1] __sys_sendmmsg+0x2cc/0x4e0 [ 140.127112][ C1] ? __cfi___sys_sendmmsg+0x10/0x10 [ 140.132348][ C1] ? __cfi_preempt_schedule_irq+0x10/0x10 [ 140.138116][ C1] ? asm_sysvec_reschedule_ipi+0x1b/0x20 [ 140.143772][ C1] __x64_sys_sendmmsg+0xa0/0xb0 [ 140.148671][ C1] x64_sys_call+0x3f5/0x9a0 [ 140.153198][ C1] do_syscall_64+0x4c/0xa0 [ 140.157664][ C1] ? clear_bhb_loop+0x30/0x80 [ 140.162351][ C1] ? clear_bhb_loop+0x30/0x80 [ 140.167041][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 140.172978][ C1] RIP: 0033:0x7f7aaf39fb19 [ 140.177412][ C1] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 140.197302][ C1] RSP: 002b:00007f7ab0333028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 140.205730][ C1] RAX: ffffffffffffffda RBX: 00007f7aaf625fa0 RCX: 00007f7aaf39fb19 [ 140.213713][ C1] RDX: 0400000000000041 RSI: 0000200000001d40 RDI: 0000000000000006 [ 140.221694][ C1] RBP: 00007f7aaf437b70 R08: 0000000000000000 R09: 0000000000000000 [ 140.229672][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.237676][ C1] R13: 00007f7aaf626038 R14: 00007f7aaf625fa0 R15: 00007ffd8a6a78b8 [ 140.245670][ C1] [ 140.248693][ C1] Modules linked in: [ 140.252621][ C1] ---[ end trace 0000000000000000 ]--- [ 140.258079][ C1] RIP: 0010:__queue_work+0x582/0xd50 [ 140.263384][ C1] Code: b4 00 00 00 e8 0f 5a 29 00 48 bb 00 00 00 00 00 fc ff df 4c 89 ef e8 2d fa b9 03 4c 8b 65 d0 4c 8b 6d c0 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 20 f6 6e 00 49 8b 3e e8 c8 f5 b9 03 [ 140.282995][ C1] RSP: 0000:ffffc900001b0c78 EFLAGS: 00010046 [ 140.289074][ C1] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: ffff888117f4d100 [ 140.297068][ C1] RDX: 0000000000000100 RSI: 000000007fffffff RDI: 000000007fffffff [ 140.305059][ C1] RBP: ffffc900001b0d08 R08: 0000000000000007 R09: 00000000fffffffb [ 140.313045][ C1] R10: dffffc0000000000 R11: ffffed1022d28139 R12: ffff8881169409c8 [ 140.321034][ C1] R13: ffff888119067400 R14: 0000000000000000 R15: 000000007fffffff [ 140.329031][ C1] FS: 00007f7ab03336c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 140.337978][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 140.344573][ C1] CR2: 00007f4f9b93b980 CR3: 000000011d3c9000 CR4: 00000000003506a0 [ 140.352566][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 140.360549][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 140.368545][ C1] Kernel panic - not syncing: Fatal exception in interrupt [ 140.376483][ C1] Kernel Offset: disabled [ 140.380818][ C1] Rebooting in 86400 seconds..