last executing test programs: 3.231018409s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x42200, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d03, 0x0, 0x1}]}) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x1e, 0x4, 0x0) recvmsg$unix(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/246, 0xf6}], 0x1}, 0x20) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="12011003000000085247110040000102030109022cffff01fe10810904000002010300060905f10a40000fd702042501000905"], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000580)={0xbe, 0x0, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.21647957s ago: executing program 3 (id=4): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r2, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x0, 0xe}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4b, 0x0, &(0x7f0000000400)) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4000, @dev={0xac, 0x14, 0x14, 0x38}}, 0x2, 0x1, 0xfffffffc, 0xfffffffe}}, 0x2e) 3.19640893s ago: executing program 0 (id=1): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) wait4(r0, 0x0, 0x40000000, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x4000044) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x45) write$FUSE_LSEEK(r1, &(0x7f0000002700)={0x79, 0x7ffffffffffffffa, 0x0, {0xff}}, 0x18) ptrace$setregs(0xd, r0, 0x8, &(0x7f0000000a40)="47aaf63e3722d2a83d6b95a71d14ea166ec1bbec3c5baae7afd00a52a3543b68c1bda7e00de23c816f603aba4d37d816b52752b766b487aad71d38b670f6f3b3cc48ed3a5315da46c08b579ac8e19d569f448837157ea3057dc0648ec5c071b72aac5f9ba0fcf2002c8d131dad49288f1fc6a2cf9d1138215e83e17555d582393941219571a5d2efdf") r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) r3 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r4 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)=0x0) r8 = syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, r3, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=0x0) r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r8, 0x2) syz_ublk_setup_queues(r10, r9, &(0x7f0000000700)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000000800)=[{}, {}, {}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r4}}], 0x1, &(0x7f0000000900)={0x2e, 0x10, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x0, 0x0, 0x0, &(0x7f0000000a00)=@buf_4k}}, &(0x7f0000000b00)) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000828bd7000fddbdf2751000000000099007d00007c0c0000ffffffffff00000a600600080211000001000089c131473757ccba1f1eca7ad705000000000000000774f3b9e8221d76cb713f03d985b7eb4160162ca92a57eac2b0fe4e6aef9bb32021d7beebf2f07d657b000000"], 0x40}}, 0x0) ptrace$getregset(0x4204, r0, 0x1, &(0x7f0000000100)={0x0}) r11 = inotify_init1(0x0) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) inotify_add_watch(r11, &(0x7f0000000040)='./file0\x00', 0x50007a2) read(r11, &(0x7f0000000200)=""/149, 0x95) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) stat(&(0x7f0000000380)='./sys/../file0\x00', &(0x7f0000000480)) r12 = syz_open_dev$mouse(&(0x7f0000000000), 0x80000001, 0x400001) sendmsg$AUDIT_USER(r12, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000002bbd7000ffdb00"], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x20000890) syz_clone(0x1022000, 0x0, 0xfffffffffffffc76, 0x0, 0x0, 0x0) 3.187654161s ago: executing program 2 (id=3): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r1, &(0x7f0000000100)="e800000000", 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r3 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='1', 0x1) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r1, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) ptrace$cont(0x7, r4, 0x0, 0x0) wait4(r4, 0x0, 0x0, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) socket(0x10, 0x2, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r5, 0x400448c8, &(0x7f0000000140)={r0, 0xffffffffffffffff, 0x400, 0x0, 0x0, 0xbc, 0x4, 0x3, 0x2, 0x200, 0x4, 0x27c, 'syz1\x00'}) 3.100974872s ago: executing program 3 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./mysys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f00000017c0)='./file0\x00', 0x2480, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x72) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) fcntl$lock(r5, 0x25, &(0x7f0000000000)={0x0, 0x0, 0x8, 0x3}) setsockopt(r0, 0x1, 0x8, &(0x7f00000002c0)="01000100", 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}, 0x7}, 0x1c) dup(r2) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000000280)=0x8002, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x4041, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0xa1, 0x4) r6 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x4e61, @remote}, 0x25) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r6, 0x0, &(0x7f00000003c0)={0x2e, 0x15, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000380)=@new_dev={0x3, 0x32c, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x111}}}, &(0x7f0000000200)) 2.919362896s ago: executing program 2 (id=6): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setns(0xc9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x60000600) socket$nl_audit(0x10, 0x3, 0x9) r2 = socket$nl_audit(0x10, 0x3, 0x9) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) accept$inet(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000010c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000060ec97000fc82c00fe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES16=r2], 0xffe) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="01032757c38d085641a726"], 0x20}, 0x1, 0x0, 0x0, 0x20000805}, 0x48d4) r7 = socket(0x10, 0x2, 0x0) r8 = dup(r7) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) write(r7, &(0x7f0000000480)="1c0000001a009b8a140000003b00"/28, 0x1c) bind$802154_dgram(r0, &(0x7f0000000100), 0x14) 2.627702982s ago: executing program 2 (id=7): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000000)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000000924030201010003000c24050301000002000000000705810310000609040100000e0200000e240101470082000200000001001b240401015955593200001000800000aa00389b711001000000001e24050100a000780000c0e00000c0e000009600001516050001"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f00000005c0)={0x0, 0x12, 0x66, "b198601db7e43d2841888aff0daa0e24da848b4ed158493137a4a8fe8467fcd7e4c97a953b6194376004d2bf9376f383edd8d44f47ced9f64720666ae3443994559dd2135ba955a0b53983a0037e4aeff167c1d5c41c6317175192553a8d4c4a78366c69d121"}, 0x0, 0x0, 0x0, 0x0}) 2.043590725s ago: executing program 0 (id=8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bfd000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, 0x0}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) preadv2(r4, &(0x7f0000000440)=[{&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f00000002c0)=""/254, 0xfe}, {&(0x7f00000003c0)=""/99, 0x63}], 0x4, 0x9, 0x3, 0x2) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000040), 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r5, 0xc0145401, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x3}) ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000280)=0x9) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4, 0x0, 0x8, 0xeffffdff, 0x0, [{0x3, 0xff, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x3, '\x00', 0x79}, {0xfc, 0x13, 0x4}, {0x13, 0x5}, {0x0, 0x1, 0x6, '\x00', 0xfd}, {0xfe, 0x0, 0x5, '\x00', 0x1}, {0xf5, 0xfc, 0x26, '\x00', 0x40}, {0x6f, 0x0, 0x3, '\x00', 0xb5}, {0x40, 0x93, 0xf5, '\x00', 0xfc}, {0xb8, 0x6, 0x0, '\x00', 0x21}, {0xd0, 0x0, 0x9, '\x00', 0xd}, {0xc, 0x7, 0x81, '\x00', 0x1}, {0x0, 0x49, 0xb, '\x00', 0x3}, {0x2, 0x0, 0x3}, {0xc3, 0x0, 0x0, '\x00', 0x5}, {0x0, 0x34, 0x84, '\x00', 0x10}, {0x8, 0x0, 0xe7}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x0, 0x80, 0x9, '\x00', 0x2}, {0xe, 0x4, 0xc, '\x00', 0x37}, {0x0, 0x9, 0x0, '\x00', 0x5}, {0xa0, 0x2, 0x9}, {0x4a, 0xff, 0x3}]}}) 1.947055567s ago: executing program 3 (id=9): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast2}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0xce, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'batadv_slave_1\x00', {0x2, 0x0, @broadcast}}) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, &(0x7f0000000080)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffc}}) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000100)={0x6, @rand_addr=0x64010100, 0x4e21, 0x2, 'wrr\x00', 0x0, 0x81, 0x79}, 0x2c) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) r2 = openat$binfmt_register(0xffffffffffffff9c, &(0x7f0000000440), 0x1, 0x0) write(r2, &(0x7f0000000480)="4d4287ac770767f7429748", 0xb) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0x100120}], 0x1}, 0x0) futex(0x0, 0x84, 0x2, 0x0, &(0x7f00000001c0), 0x22) recvmsg(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000002900)=[{&(0x7f0000000740)=""/4096, 0x1000}, {&(0x7f0000001740)=""/4096, 0x1000}], 0x2}, 0x700) clock_settime(0xcc80f84dcac64fc7, &(0x7f0000000680)) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) write$tun(r3, &(0x7f0000000240)={@void, @void, @ipv6=@tipc_packet={0xb, 0x6, "d1b386", 0x28, 0x6, 0x1, @empty, @mcast2, {[], @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x0, 0xa, 0xb, 0x2, 0xad, 0x0, 0x0, 0x6, 0x2, 0x0, 0x4e21, 0x4e23, 0x3, 0x4, 0x0, 0x0, 0x1}}}}}, 0x50) syz_usb_connect$cdc_ecm(0x2, 0x53, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x5, 0x30, 0x81, "", [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x2, 0x6, 0x0, 0x0, {{0xb, 0x24, 0x6, 0x0, 0x0, "be440f497aff"}, {0x5, 0x24, 0x0, 0x2}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x9, 0xb5d, 0x3}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x40, 0x1, 0x4, 0x3}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x2, 0x9}}}}}]}}]}}, &(0x7f0000000400)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x200, 0x8, 0x0, 0x8, 0x8, 0x9}, 0xc5, &(0x7f0000000180)={0x5, 0xf, 0xc5, 0x3, [@generic={0x88, 0x10, 0x2, "f3843ad2d680a85a9edc19514bd4276fb0e39174dc6e6c803fbc5913b5c1729368cddb3295f5f57db0a6314459a33e7a272406cb2364223c8480322114c9d190b5fa1f824f729b95f5caac8c70c9c5d759b2207073ef786328ac5a4c203793a377dc2b7d400c3c958e9a33d6a12a5a8206d6c6208015a8554a330e1ec48e5e3ddefbe73d8a"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x5, 0xff, 0x28, 0x9098}, @generic={0x2e, 0x10, 0xa, "a5747ab13bfaa63b3618a0e4769693c632f4311cfdfab56795b91f2b935307ebea282bde07a96ff5e31a63"}]}, 0x5, [{0x4, &(0x7f0000000280)=@lang_id={0x4, 0x3, 0x2e73}}, {0x5b, &(0x7f00000002c0)=@string={0x5b, 0x3, "34146263aef9595a3eee969be8744f5e99d074d113976aa91f0efd658599f54f72ec03eecd22e331755e4d97145559ecf436dc16789b4a829d4596ed8f179d1bfd2c6b2e7bd55ab49841c973d4b63729102699c65aa64081ed"}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x410}}, {0x4, &(0x7f00000003c0)=@lang_id={0x4, 0x3, 0x812}}]}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f00000004c0)={0x9, {{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x88) 866.013701ms ago: executing program 2 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) gettid() ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000240)={0x34, 0x2e, 0x503, 0x0, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic='^']}, 0x34}], 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000a52000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="67f2e00d64360fae8197530f00cf64f75dd72e3edb3b0f38f173882e64640f01c5baf80c66b866878a8566efbafc0ced0fc72ff30fc7b30000", 0x39}], 0xaaaaaaaaaaaad33, 0x58, 0x0, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f00000002c0)={0x7, 0x0, [{0xd, 0x2, 0x1, 0x2, 0x8, 0x20, 0x10001}, {0xc0000000, 0x1f, 0x0, 0x5, 0x0, 0x81, 0x7}, {0x40000000, 0x10001, 0x4, 0x7fffffff, 0xa, 0x271, 0x7}, {0xa, 0xac14, 0x2, 0xa, 0x10000, 0x4, 0xe}, {0x0, 0x2, 0x5, 0x8, 0x5, 0x3ff}, {0x80000007, 0x7f, 0x0, 0x18, 0x7, 0x8d08, 0x80}, {0x0, 0x6, 0x5, 0xfec6, 0x4fb, 0x28000}]}) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) unlink(&(0x7f0000000140)='./file1\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x22180, 0x38) lseek(r6, 0xab07, 0x1) r7 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/ttyS0\x00', 0x2, 0x0) ioctl(r7, 0x545c, 0x0) ioctl$RNDCLEARPOOL(r7, 0x5206, &(0x7f00000000c0)=0x9) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001680)={0x14, 0x14, 0x1, 0x4, 0x25dfdbfd, {0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x24004805}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) read(r3, &(0x7f0000000140)=""/193, 0xc1) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r9 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r10 = openat(r9, &(0x7f0000000040)='./binfmt\x00', 0x400001, 0xc0) pwritev(r10, &(0x7f00000004c0)=[{&(0x7f0000000280)="2fa5ef", 0x3}], 0x1, 0x0, 0x0) 633.504006ms ago: executing program 2 (id=11): creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) (async) r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) unshare(0x62040200) r1 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) syz_clone3(&(0x7f0000000080)={0x204801600, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) (async) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) write$binfmt_elf64(r0, &(0x7f0000000a40)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x1, 0x9, 0xe4, 0x8, 0x3, 0x3e, 0xfffffdf9, 0x1d8, 0x40, 0x2d9, 0xd33, 0x5, 0x38, 0x1, 0x78, 0x1f, 0x9}, [{0x4, 0x101, 0x7, 0xffff, 0x5, 0x40, 0x1, 0x63b}]}, 0x78) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) (async) lsetxattr$security_capability(&(0x7f0000002580)='./file0\x00', &(0x7f00000025c0), 0x0, 0x0, 0x0) close(r0) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) (async) execve(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 558.915107ms ago: executing program 2 (id=12): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x86800) ioctl$KVM_TDX_FINALIZE_VM(r0, 0xc008aeba, &(0x7f0000000180)) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1bc) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000280)=ANY=[@ANYBLOB="12010000e2793b10d10501200010010203010902120001000000000904"], 0x0) syz_usb_control_io$lan78xx(r1, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x40, 0x10, 0x62, "2b16802515d0e2e9c9011afc014c26bb47cd26151c9d6dd1e9f68d3dca5768ad0070a7d7f501921f359db77fbf778a2b0250d2dddd73c912257339d590d52623620f8dfe1acab4cb947985083d7f355b5ba8fc58d5241357863edbb049035f9c7e68"}, 0x0, 0x0, 0x0, 0x0, 0x0}) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x55, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c001090400000102020100052400100104240202052401000105240600010705810308000a09040100020a00000007058202000200070503020002"], 0x0) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_usb_control_io(r2, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./dev/ttyACM0\x00', 0x1aff80, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) syz_usb_disconnect(r2) 500.186128ms ago: executing program 3 (id=13): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000080)={0x20000000000000c2, &(0x7f0000000000)=[{0x35, 0x40, 0x0, 0x7fffe}, {0x5c, 0x0, 0x8}, {0xa, 0x0, 0xff, 0x7ffffe39}]}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600707, 0x18) syz_clone(0x80000, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)="e1bd3206") r0 = timerfd_create(0x0, 0x0) close(r0) mprotect(&(0x7f000053f000/0x1000)=nil, 0x1000, 0x0) mprotect(&(0x7f0000204000/0x1000)=nil, 0x1000, 0x4) 370.480812ms ago: executing program 3 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), &(0x7f0000000080)=@md5={0x1, "0afebb53a9c5ff39a8c6fdd6325bbf32"}, 0x11, 0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f00000000c0)={@host}) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000801, 0xee01, &(0x7f0000000100)={0x2, 0xd9, 0x73d0, 0x1, 0xfffffffffffffffa, 0xffffffffffff8000, 0x8, 0x0, 0x7}) r1 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020bd28940000000000000109022400010000000009040100010300000009210000000122070009058103"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000240)={0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="002e19"], 0x0, 0x0, 0x0}, 0x0) ioctl$IOC_PR_REGISTER(r0, 0x401870c8, &(0x7f0000002a80)={0x1, 0x7, 0x14}) 128.053747ms ago: executing program 1 (id=15): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x3c, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r0, 0x29, 0x3e, &(0x7f00002cef88)="d84f7398", 0x4) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0xdc0, @remote, 0x7}, 0x1c) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x1d, &(0x7f0000000000)=0x4, 0x4) sendto$inet6(r0, &(0x7f0000000800)="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"/1453, 0x5ad, 0x0, &(0x7f0000000080)={0xa, 0x5e20, 0x3, @mcast2}, 0x1c) recvmmsg(r0, &(0x7f0000006600)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/46, 0x2e}, 0x6}, {{0x0, 0x0, 0x0}, 0x6}], 0x2, 0x40010163, 0x0) 82.387458ms ago: executing program 1 (id=16): r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000080)={0x1, 0x0, 0xe}) 9.721039ms ago: executing program 1 (id=17): accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000580)=0x1c) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000600)={r0, 0x2}) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r3 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) add_key(&(0x7f00000001c0)='asymmetric\x00', 0x0, 0x0, 0x0, r3) r4 = dup(r2) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x10820, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB="2c77665216646e6f3d", @ANYRESHEX=r4, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB=',\x00']) sendmsg$unix(r4, &(0x7f0000000540)={&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000240)="b165a555396736e59dd2febd1e4c827cacedc4348203b5ef485d44af879c54402a5503874939373da35691f432e4551d8d96432bd981b7661eddb1e40498be06c06d29ff26843bc41240bc7b4e509763b16f51c7b97ed5245ed2e5d4d0f31751e9ab67f6c3026f037fdf71d522fb736669ad9208b82d44f49e501c9f1281e26f728c0a13d3f65ea5f0be66678a944dcf8acb39aec7af966f4157d8f0ad0e37", 0x9f}, {&(0x7f0000000300)="5fa7554abe573d4c2058771d8058838a8ca3f1c887af07d268b867c91ec5d68973e71479b241f881daef75f65541fcf42aad56c565d9f56089a5dbf8e7f9945fcb84224b43d227202b61f315001b67c996abdd53e1d05b354a441c5313b83ec147b1b220542d10fd5a07b584569a1ed3bebc09ae443c8c95c2f4c406ba6f588c88429d3b1709fb2ff835c117087d0f", 0x8f}, {&(0x7f00000003c0)="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", 0xfa}], 0x3, 0x0, 0x0, 0x1800}, 0xb9dff6b5f46d448) ioctl$KVM_CAP_XEN_HVM(r4, 0x4068aea3, &(0x7f0000000140)={0x26, 0x0, 0x6}) 0s ago: executing program 1 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) (async, rerun: 64) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) (async, rerun: 64) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config/usb_gadget/g1\x00') (async, rerun: 64) syz_usb_connect$uac2(0x1, 0xb4, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000086307331040000102134b955c29818203010902a200030180e003080b0181010a20030904000000010120000924010200063800040c240303e4c3f9030700000207240405072a430d240b74089e917674d9ce712405240405c20a240405f8fda163fd0109040100000102200009040101010102200009050109400005049508250181000902000904020000010220000904020101010220000a24020207000f00730109058209ff030509100825018203025400"], 0x0) (rerun: 64) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 28.438801][ T36] audit: type=1400 audit(1787688315.190:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 28.445418][ T286] cgroup: Unknown subsys name 'net' [ 28.463507][ T36] audit: type=1400 audit(1787688315.190:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.495741][ T36] audit: type=1400 audit(1787688315.260:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 28.496323][ T286] cgroup: Unknown subsys name 'devices' [ 28.625769][ T286] cgroup: Unknown subsys name 'hugetlb' [ 28.631464][ T286] cgroup: Unknown subsys name 'rlimit' [ 28.727237][ T36] audit: type=1400 audit(1787688315.480:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 28.753149][ T36] audit: type=1400 audit(1787688315.480:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 28.784230][ T36] audit: type=1400 audit(1787688315.480:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 28.821220][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 28.831262][ T36] audit: type=1400 audit(1787688315.580:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.862335][ T36] audit: type=1400 audit(1787688315.580:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.863697][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 28.892161][ T36] audit: type=1400 audit(1787688315.620:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.930995][ T36] audit: type=1400 audit(1787688315.620:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.390203][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.397733][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.405251][ T296] bridge_slave_0: entered allmulticast mode [ 30.412342][ T296] bridge_slave_0: entered promiscuous mode [ 30.425970][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.433481][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.440820][ T296] bridge_slave_1: entered allmulticast mode [ 30.447644][ T296] bridge_slave_1: entered promiscuous mode [ 30.474947][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.482587][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.490339][ T293] bridge_slave_0: entered allmulticast mode [ 30.496976][ T293] bridge_slave_0: entered promiscuous mode [ 30.507887][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.516231][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.523687][ T293] bridge_slave_1: entered allmulticast mode [ 30.530228][ T293] bridge_slave_1: entered promiscuous mode [ 30.549170][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.557336][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.566291][ T295] bridge_slave_0: entered allmulticast mode [ 30.573297][ T295] bridge_slave_0: entered promiscuous mode [ 30.580994][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.588325][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.596180][ T295] bridge_slave_1: entered allmulticast mode [ 30.602911][ T295] bridge_slave_1: entered promiscuous mode [ 30.711978][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.719799][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.728859][ T294] bridge_slave_0: entered allmulticast mode [ 30.737725][ T294] bridge_slave_0: entered promiscuous mode [ 30.748560][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.756350][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.765446][ T294] bridge_slave_1: entered allmulticast mode [ 30.773242][ T294] bridge_slave_1: entered promiscuous mode [ 30.922670][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.930272][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.938070][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.946702][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.960477][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.970370][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.981693][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.992825][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.014769][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.024325][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.032717][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.041494][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.070975][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.081280][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.092328][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.101962][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.170284][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.184968][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.198065][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.208108][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.216681][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.224740][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.233793][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.242603][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.267543][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.277413][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.288397][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.296428][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.305327][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.312940][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.323806][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.334758][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.346098][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.355768][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.377043][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.386099][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.419392][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.426694][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.435516][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.442863][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.477173][ T294] veth0_vlan: entered promiscuous mode [ 31.509724][ T296] veth0_vlan: entered promiscuous mode [ 31.519609][ T293] veth0_vlan: entered promiscuous mode [ 31.531428][ T295] veth0_vlan: entered promiscuous mode [ 31.544328][ T294] veth1_macvtap: entered promiscuous mode [ 31.556417][ T296] veth1_macvtap: entered promiscuous mode [ 31.581200][ T293] veth1_macvtap: entered promiscuous mode [ 31.592645][ T295] veth1_macvtap: entered promiscuous mode [ 31.630480][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 31.707764][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.083161][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.172597][ T335] Unsupported ieee802154 address type: 0 [ 32.563651][ T312] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.729803][ T312] usb 3-1: unable to get BOS descriptor or descriptor too short [ 32.751147][ T312] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 32.776030][ T312] usb 3-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 32.803060][ T312] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 32.823211][ T312] usb 3-1: Product: syz [ 32.837144][ T312] usb 3-1: Manufacturer: syz [ 32.858335][ T312] usb 3-1: Found UVC 1.00 device syz (8086:0ad2) [ 33.271794][ T312] usb 3-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 33.353131][ T310] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 33.489952][ T344] usb 3-1: USB disconnect, device number 2 [ 33.544424][ T310] usb 4-1: config 1 interface 0 has no altsetting 0 [ 33.555779][ T310] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 33.567360][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.583082][ T310] usb 4-1: Product: ࠚ [ 33.587623][ T310] usb 4-1: Manufacturer: ᐴ换瑩婙鮖瓨幏킙텴霓ꥪฟ旽馅俵⋍㇣幵靍唔㛴ᛜ魸艊䖝តᮝ⳽⹫핻둚䆘珉뛔⤷☐욙Ꙛ腀 [ 33.613017][ T310] usb 4-1: SerialNumber: А [ 33.823645][ T310] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 33.846439][ T310] usb 4-1: USB disconnect, device number 2 [ 34.057774][ T351] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 34.089071][ T36] kauditd_printk_skb: 69 callbacks suppressed [ 34.089096][ T36] audit: type=1400 audit(1787688320.840:143): avc: denied { mount } for pid=350 comm="syz.2.10" name="/" dev="ramfs" ino=3612 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 34.490281][ T36] audit: type=1400 audit(1787688321.240:144): avc: denied { mount } for pid=365 comm="syz.3.14" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 34.613094][ T344] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 34.793132][ T310] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 34.803648][ T344] usb 3-1: Using ep0 maxpacket: 16 [ 34.822290][ T344] usb 3-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=10.00 [ 34.843936][ T36] audit: type=1400 audit(1787688321.600:145): avc: denied { read write } for pid=372 comm="syz.1.17" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.849685][ T344] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.899833][ T36] audit: type=1400 audit(1787688321.630:146): avc: denied { open } for pid=372 comm="syz.1.17" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.916577][ T344] usb 3-1: Product: syz [ 34.935535][ T344] usb 3-1: Manufacturer: syz [ 34.937867][ T36] audit: type=1400 audit(1787688321.630:147): avc: denied { ioctl } for pid=372 comm="syz.1.17" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x5874 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 34.941349][ T344] usb 3-1: SerialNumber: syz [ 34.971337][ T36] audit: type=1400 audit(1787688321.630:148): avc: denied { write } for pid=372 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 34.993259][ T310] usb 4-1: device descriptor read/64, error -71 [ 35.003111][ T375] BUG: scheduling while atomic: syz.1.18/375/0x00000002 [ 35.017577][ T375] Modules linked in: [ 35.022519][ T375] CPU: 1 UID: 0 PID: 375 Comm: syz.1.18 Not tainted syzkaller #0 2456bfd0916d80188827445f664284f1a044436b [ 35.022555][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.022576][ T375] Call Trace: [ 35.022585][ T375] [ 35.022596][ T375] __dump_stack+0x21/0x30 [ 35.022635][ T375] dump_stack_lvl+0x140/0x1c0 [ 35.022662][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 35.022691][ T375] dump_stack+0x19/0x20 [ 35.022717][ T375] __schedule_bug+0x12b/0x200 [ 35.022740][ T375] ? find_proxy_task+0x2460/0x2460 [ 35.022763][ T375] __schedule+0xb85/0x20b0 [ 35.022791][ T375] ? kernel_text_address+0xa9/0xe0 [ 35.022819][ T375] ? __kernel_text_address+0x11/0x40 [ 35.022845][ T375] ? unwind_get_return_address+0x51/0x90 [ 35.023121][ T375] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 35.023150][ T375] ? arch_stack_walk+0x10a/0x170 [ 35.023169][ T36] audit: type=1400 audit(1787688321.630:149): avc: denied { remount } for pid=372 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 35.023173][ T375] ? __sched_text_start+0x10/0x10 [ 35.023208][ T375] ? __kasan_check_read+0x15/0x20 [ 35.023265][ T375] ? rwsem_spin_on_owner+0xa4/0x3b0 [ 35.023860][ T375] ? sysvec_apic_timer_interrupt+0x50/0x90 [ 35.023938][ T375] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 35.024010][ T375] schedule+0xc5/0x240 [ 35.024183][ T375] schedule_preempt_disabled+0x14/0x30 [ 35.024441][ T375] rwsem_down_write_slowpath+0x5c9/0x1b60 [ 35.024583][ T375] ? arch_stack_walk+0x10a/0x170 [ 35.024671][ T375] ? rwsem_down_read_slowpath+0x14c0/0x14c0 [ 35.024766][ T375] ? is_bpf_text_address+0x17b/0x1a0 [ 35.024866][ T375] ? kernel_text_address+0xa9/0xe0 [ 35.025282][ T375] ? __cfi_core_kernel_text+0x1/0x10 [ 35.025413][ T375] ? rwsem_read_trylock+0x275/0x5a0 [ 35.025548][ T375] ? __kasan_check_write+0x18/0x20 [ 35.025627][ T375] down_write+0x163/0x2b0 [ 35.025707][ T375] ? __cfi_down_write+0x10/0x10 [ 35.025787][ T375] ? __kasan_check_write+0x18/0x20 [ 35.025857][ T375] ? down_write+0xee/0x2b0 [ 35.025929][ T375] __kernfs_remove+0xcd/0x940 [ 35.026556][ T375] kernfs_remove_by_name_ns+0x100/0x180 [ 35.026663][ T375] sysfs_unmerge_group+0xd7/0x130 [ 35.026764][ T375] dpm_sysfs_remove+0x7b/0xd0 [ 35.027265][ T375] device_del+0x241/0xcf0 [ 35.027453][ T375] ? __cfi_class_find_device+0x10/0x10 [ 35.027530][ T375] ? __cfi_device_del+0x10/0x10 [ 35.027618][ T375] ? __kasan_check_write+0x18/0x20 [ 35.027646][ T375] ? kobject_put+0x1cc/0x2a0 [ 35.027672][ T375] device_destroy+0xb0/0x100 [ 35.027689][ T375] ? __cfi_device_destroy+0x10/0x10 [ 35.027716][ T375] ? __kasan_check_write+0x18/0x20 [ 35.027806][ T375] android_device_destroy+0x118/0x180 [ 35.027915][ T375] gadgets_drop+0x1d/0x30 [ 35.027973][ T375] ? __cfi_gadgets_drop+0x10/0x10 [ 35.028029][ T375] configfs_rmdir+0x8b7/0x9b0 [ 35.028174][ T375] vfs_rmdir+0x3db/0x560 [ 35.028268][ T375] do_rmdir+0x29a/0x590 [ 35.028355][ T375] ? __cfi_do_rmdir+0x10/0x10 [ 35.028445][ T375] ? __kasan_check_write+0x18/0x20 [ 35.028513][ T375] __x64_sys_rmdir+0x4b/0x60 [ 35.028601][ T375] x64_sys_call+0xaf7/0x2ee0 [ 35.028676][ T375] do_syscall_64+0x57/0xf0 [ 35.028759][ T375] ? clear_bhb_loop+0x50/0xa0 [ 35.028844][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.028973][ T375] RIP: 0033:0x7fc90c79e0d9 [ 35.029029][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 35.029068][ T375] RSP: 002b:00007fc90d70c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 35.029106][ T375] RAX: ffffffffffffffda RBX: 00007fc90ca25fa0 RCX: 00007fc90c79e0d9 [ 35.029416][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 35.029464][ T375] RBP: 00007fc90c835024 R08: 0000000000000000 R09: 0000000000000000 [ 35.029509][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 35.029733][ T375] R13: 00007fc90ca26038 R14: 00007fc90ca25fa0 R15: 00007fffcfa54148 [ 35.029821][ T375] [ 35.553843][ T36] audit: type=1400 audit(1787688321.680:150): avc: denied { mount } for pid=374 comm="syz.1.18" name="/" dev="configfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 35.578689][ T375] ------------[ cut here ]------------ [ 35.580482][ T344] usb 3-1: config 0 descriptor?? [ 35.593511][ T36] audit: type=1400 audit(1787688321.680:151): avc: denied { mounton } for pid=374 comm="syz.1.18" path="/4/config" dev="configfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.626120][ T344] ftdi_sio 3-1:0.0: FTDI USB Serial Device converter detected [ 35.643722][ T375] WARNING: CPU: 0 PID: 375 at lib/stackdepot.c:635 stack_depot_save_flags+0x266/0x800 [ 35.657568][ T375] Modules linked in: [ 35.663978][ T375] CPU: 0 UID: 0 PID: 375 Comm: syz.1.18 Tainted: G W syzkaller #0 2456bfd0916d80188827445f664284f1a044436b [ 35.682365][ T375] Tainted: [W]=WARN [ 35.690361][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 35.706766][ T375] RIP: 0010:stack_depot_save_flags+0x266/0x800 [ 35.716808][ T375] Code: 48 83 3d 34 f8 db 05 00 0f 84 00 04 00 00 48 c7 45 c0 00 00 00 00 48 89 d3 65 8b 05 4c 69 1e 7d 4d 89 d7 a9 00 00 f0 00 74 2d <0f> 0b 48 c7 45 c8 00 00 00 00 9c 8f 45 c8 4c 8b 6d c8 fa 48 c7 c7 [ 35.747997][ T375] RSP: 0018:ffffc9000b84f980 EFLAGS: 00010206 [ 35.762281][ T375] RAX: 000000007fffffff RBX: ffff8881f5b5cdf0 RCX: 000000000095cdf0 [ 35.776440][ T375] RDX: ffff8881f5b5cdf0 RSI: 0000000000000001 RDI: 00000000c8d807db [ 35.787575][ T36] audit: type=1400 audit(1787688321.690:152): avc: denied { search } for pid=374 comm="syz.1.18" name="/" dev="configfs" ino=2450 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.790646][ T375] RBP: ffffc9000b84f9e0 R08: 00000000f3e20c76 R09: 00000000dbd95c00 [ 35.839548][ T375] R10: 000000000000000d R11: ffffffff81759ed0 R12: 0000000015995cdf [ 35.855467][ T375] R13: 0000000000000000 R14: ffffc9000b84f9f0 R15: 000000000000000d [ 35.869296][ T375] FS: 00007fc90d70c6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 35.880988][ T375] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.891556][ T375] CR2: 00007fc90c670000 CR3: 0000000118f68000 CR4: 00000000003526b0 [ 35.905904][ T375] Call Trace: [ 35.912110][ T375] [ 35.916260][ T375] ? do_syscall_64+0x57/0xf0 [ 35.923543][ T375] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 35.934015][ T375] kasan_save_track+0x4f/0x80 [ 35.943493][ T375] ? kasan_save_track+0x3e/0x80 [ 35.950806][ T375] ? kasan_save_free_info+0x44/0x50 [ 35.958204][ T375] ? __kasan_slab_free+0x5f/0x80 [ 35.965046][ T375] ? kfree+0x158/0x440 [ 35.971865][ T375] ? gadget_info_attr_release+0xcb/0x130 [ 35.981136][ T375] ? config_item_put+0x178/0x240 [ 35.989559][ T375] ? configfs_rmdir+0x8e8/0x9b0 [ 35.996617][ T375] ? vfs_rmdir+0x3db/0x560 [ 36.003602][ T375] ? do_rmdir+0x29a/0x590 [ 36.009699][ T375] ? __x64_sys_rmdir+0x4b/0x60 [ 36.016517][ T375] ? x64_sys_call+0xaf7/0x2ee0 [ 36.022502][ T375] ? do_syscall_64+0x57/0xf0 [ 36.030687][ T375] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.038188][ T375] kasan_save_free_info+0x44/0x50 [ 36.044813][ T375] __kasan_slab_free+0x5f/0x80 [ 36.053622][ T375] kfree+0x158/0x440 [ 36.059914][ T375] ? gadget_info_attr_release+0xcb/0x130 [ 36.067541][ T375] ? __cfi_gadget_info_attr_release+0x10/0x10 [ 36.078214][ T375] gadget_info_attr_release+0xcb/0x130 [ 36.087539][ T375] config_item_put+0x178/0x240 [ 36.098834][ T375] ? __cfi_gadgets_drop+0x10/0x10 [ 36.108235][ T375] configfs_rmdir+0x8e8/0x9b0 [ 36.115169][ T375] vfs_rmdir+0x3db/0x560 [ 36.124523][ T375] do_rmdir+0x29a/0x590 [ 36.133161][ T375] ? __cfi_do_rmdir+0x10/0x10 [ 36.139908][ T375] ? __kasan_check_write+0x18/0x20 [ 36.149123][ T375] __x64_sys_rmdir+0x4b/0x60 [ 36.158023][ T375] x64_sys_call+0xaf7/0x2ee0 [ 36.163906][ T375] do_syscall_64+0x57/0xf0 [ 36.170709][ T375] ? clear_bhb_loop+0x50/0xa0 [ 36.176707][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.185794][ T375] RIP: 0033:0x7fc90c79e0d9 [ 36.188248][ T378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.190907][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.190934][ T375] RSP: 002b:00007fc90d70c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 36.190961][ T375] RAX: ffffffffffffffda RBX: 00007fc90ca25fa0 RCX: 00007fc90c79e0d9 [ 36.223345][ T378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.229033][ T375] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000600 [ 36.275479][ T375] RBP: 00007fc90c835024 R08: 0000000000000000 R09: 0000000000000000 [ 36.286960][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.299887][ T375] R13: 00007fc90ca26038 R14: 00007fc90ca25fa0 R15: 00007fffcfa54148 [ 36.311601][ T375] [ 36.315672][ T375] ---[ end trace 0000000000000000 ]--- [ 36.327242][ T344] usb 3-1: Detected FT-X [ 36.338578][ T375] BUG: scheduling while atomic: syz.1.18/375/0x00000000 [ 36.351090][ T375] Modules linked in: [ 36.357097][ T375] CPU: 1 UID: 0 PID: 375 Comm: syz.1.18 Tainted: G W syzkaller #0 2456bfd0916d80188827445f664284f1a044436b [ 36.357137][ T375] Tainted: [W]=WARN [ 36.357158][ T375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.357173][ T375] Call Trace: [ 36.357180][ T375] [ 36.357189][ T375] __dump_stack+0x21/0x30 [ 36.357228][ T375] dump_stack_lvl+0x140/0x1c0 [ 36.357261][ T375] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.357292][ T375] ? __set_page_owner+0x3eb/0x600 [ 36.357326][ T375] dump_stack+0x19/0x20 [ 36.357357][ T375] __schedule_bug+0x12b/0x200 [ 36.357383][ T375] ? find_proxy_task+0x2460/0x2460 [ 36.357409][ T375] ? is_bpf_text_address+0x17b/0x1a0 [ 36.357446][ T375] __schedule+0xb85/0x20b0 [ 36.357480][ T375] ? __kernel_text_address+0x11/0x40 [ 36.357514][ T375] ? plist_check_list+0x2a1/0x2c0 [ 36.357547][ T375] ? __sched_text_start+0x10/0x10 [ 36.357580][ T375] ? plist_add+0x4d4/0x570 [ 36.357611][ T375] ? __futex_queue+0x19f/0x350 [ 36.357643][ T375] ? __cfi___futex_queue+0x10/0x10 [ 36.357961][ T375] schedule+0xc5/0x240 [ 36.358014][ T375] futex_wait_queue+0xfc/0x240 [ 36.358038][ T375] __futex_wait+0x15b/0x3d0 [ 36.358062][ T375] ? __cfi___futex_wait+0x10/0x10 [ 36.358086][ T375] ? __cfi_futex_wake_mark+0x10/0x10 [ 36.358110][ T375] ? __kasan_check_read+0x15/0x20 [ 36.358136][ T375] ? futex_wake+0x627/0x950 [ 36.358159][ T375] ? futex_setup_timer+0xb4/0xd0 [ 36.358191][ T375] futex_wait+0x128/0x7c0 [ 36.358216][ T375] ? __cfi_futex_wait+0x10/0x10 [ 36.358245][ T375] do_futex+0x32a/0x510 [ 36.358389][ T375] ? __cfi_do_futex+0x10/0x10 [ 36.358425][ T375] ? __kasan_slab_free+0x6a/0x80 [ 36.358454][ T375] ? kmem_cache_free+0x1bd/0x4f0 [ 36.358479][ T375] __se_sys_futex+0x13c/0x320 [ 36.358510][ T375] ? putname+0x113/0x150 [ 36.358537][ T375] ? __x64_sys_futex+0x110/0x110 [ 36.358568][ T375] ? __cfi_do_rmdir+0x10/0x10 [ 36.358602][ T375] __x64_sys_futex+0xe9/0x110 [ 36.358634][ T375] x64_sys_call+0x227f/0x2ee0 [ 36.358657][ T375] do_syscall_64+0x57/0xf0 [ 36.358687][ T375] ? clear_bhb_loop+0x50/0xa0 [ 36.358721][ T375] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.358756][ T375] RIP: 0033:0x7fc90c79e0d9 [ 36.358859][ T375] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 36.358878][ T375] RSP: 002b:00007fc90d70c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 36.358902][ T375] RAX: ffffffffffffffda RBX: 00007fc90ca25fa8 RCX: 00007fc90c79e0d9 [ 36.358919][ T375] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc90ca25fa8 [ 36.358934][ T375] RBP: 00007fc90ca25fa0 R08: 0000000000000000 R09: 0000000000000000 [ 36.358947][ T375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 36.358959][ T375] R13: 00007fc90ca26038 R14: 00007fffcfa54060 R15: 00007fffcfa54148 [ 36.358984][ T375] [ 36.413358][ T310] usb 4-1: device descriptor read/64, error -71 [ 36.774943][ T344] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 36.785349][ T344] ftdi_sio 3-1:0.0: GPIO initialisation failed: -71 [ 36.799371][ T344] usb 3-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 36.816140][ T344] usb 3-1: USB disconnect, device number 3 [ 36.848986][ T344] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 36.893370][ T344] ftdi_sio 3-1:0.0: device disconnected [ 36.993092][ T10] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 37.033155][ T310] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 37.153861][ T10] usb 2-1: too many configurations: 75, using maximum allowed: 8 [ 37.174407][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 37.184900][ T310] usb 4-1: device descriptor read/64, error -71 [ 37.192568][ T10] usb 2-1: can't read configurations, error -61 [ 37.201913][ T10] usb usb2-port1: attempt power cycle [ 37.443158][ T310] usb 4-1: device descriptor read/64, error -71 [ 37.563090][ T10] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 37.571349][ T310] usb usb4-port1: attempt power cycle [ 37.593764][ T10] usb 2-1: too many configurations: 75, using maximum allowed: 8 [ 37.614200][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 37.628684][ T10] usb 2-1: can't read configurations, error -61 [ 37.784208][ T10] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 37.824510][ T10] usb 2-1: too many configurations: 75, using maximum allowed: 8 [ 37.839990][ T10] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 37.849955][ T10] usb 2-1: can't read configurations, error -61 [ 37.859664][ T10] usb usb2-port1: unable to enumerate USB device