last executing test programs: 14.993605578s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0\x00', 0x2) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r5, &(0x7f0000000780)='0\x00', 0x2) 14.966500238s ago: executing program 3 (id=6): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys_mnt\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) readlink(&(0x7f0000000300)='./sys_mnt/bus/pci/devices/0000:00:01.2/driver\x00', &(0x7f0000000400), 0x64) 14.786373243s ago: executing program 1 (id=2): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0000:00:01.0\x00', 0xd) 14.699435085s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./test_file\x00', 0x42, 0x1ff) ftruncate(r1, 0x2000000) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0xe) write(r1, &(0x7f0000000000), 0x2000000) madvise(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x19) write(r0, &(0x7f0000000180)='./test_file,0x0,0x1000,0,-1\x00', 0x20) 14.699289475s ago: executing program 2 (id=3): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e0001010080320904000004080662000705010200020004240100070582020002000424020007058302000200042404000705040200020004240300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 14.634898167s ago: executing program 4 (id=5): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_connect$hid(0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0}) 14.441064231s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='freezer\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f00000001c0)='freeze', 0x6) 1.664555489s ago: executing program 4 (id=9): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040753280000000010200010902200001010080320904000002000000000705810240000007050202400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="0300420044004100"]}]}) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1.664158039s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='0x80', 0x4) close(r3) write(0xffffffffffffffff, &(0x7f00000004c0)='500', 0x3) 1.664072579s ago: executing program 3 (id=12): mkdir(0x0, 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) 1.662982749s ago: executing program 3 (id=13): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r3) 1.62866164s ago: executing program 2 (id=14): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:10.0\x00', 0xd) write(r0, &(0x7f00000001c0)='0000:00:11.0\x00', 0xd) write(r0, &(0x7f0000000200)='0000:00:12.0\x00', 0xd) write(r0, &(0x7f0000000240)='0000:00:13.0\x00', 0xd) write(r0, &(0x7f0000000280)='0000:00:14.0\x00', 0xd) write(r0, &(0x7f00000002c0)='0000:00:15.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:10.0\x00', 0xd) write(r1, &(0x7f0000000380)='0000:00:11.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0) write(r2, &(0x7f00000006c0)='1af4 1000\x00', 0xa) 1.61046513s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0xa4a6', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='0x0100', 0x6) 1.60951469s ago: executing program 1 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) chdir(&(0x7f0000000240)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000000280)='functions/gser.usb0\x00', &(0x7f00000002c0)='configs/c.1/gser.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='0x0525', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0xa4a6', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='bcdDevice\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='0x0100', 0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='bcdUSB\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='0x0200', 0x6) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='bMaxPacketSize0\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='64', 0x2) 1.581457671s ago: executing program 2 (id=17): mkdir(&(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:01.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0000:00:01.0\x00', 0xd) 1.542417062s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x0525\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0xa4a7\x00', 0x6) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./dev\x00', 0x1ff) mount(&(0x7f00000004c0)=@filename='devtmpfs\x00', &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r2, 0x5427) 1.542106162s ago: executing program 2 (id=19): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) close(0xffffffffffffffff) 1.439978895s ago: executing program 1 (id=20): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022d000100000000090400000203000000092100000001222200090581030800000000090502030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000200), 0x1, 0x802) syz_open_dev$evdev(&(0x7f0000000280), 0xd, 0x40) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000300)="0102030405060708") write$hidraw(r1, &(0x7f0000000380)="0102030405060708", 0x8) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) 1.439759604s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 1.413761576s ago: executing program 2 (id=22): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='raw\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs/events/xhci-hcd/xhci_portsc_writel/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0xb, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000680)={0x23, 0x3, 0x4, 0x1, 0x0, 0x3e8, &(0x7f00000006c0)}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000700)={0x23, 0x3, 0x4, 0x1, 0x0, 0x3e8, &(0x7f0000000740)}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000007c0)=""/1024, 0x400) 968.787746ms ago: executing program 0 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000000)='\x00'/2097152, 0x200000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x200000, &(0x7f0000000000/0x200000)=nil}) madvise(&(0x7f0000000000/0x200000)=nil, 0x200000, 0xe) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/kernel/mm/transparent_hugepage/enabled\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='always\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/kernel/mm/transparent_hugepage/khugepaged/scan_sleep_millisecs\x00', 0x2, 0x0) write(r4, &(0x7f0000000380)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x2, 0x0) write(r5, &(0x7f0000000380)='0\x00', 0x2) r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x2, 0x0) write(r6, &(0x7f0000000480)='10000\x00', 0x6) nanosleep(&(0x7f0000000500)={0x1}, 0x0) 359.385052ms ago: executing program 3 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x0, {0x320, 0x30}}, @wrmsr={0x65, 0x0, {0x280, 0x10}}, @uexit], 0x30}) ioctl$KVM_X86_SETUP_MCE(r3, 0x400cae94, &(0x7f0000000300)={0x20, 0x5, 0x20}) ioctl$KVM_X86_SET_MCE(r3, 0x4040ae9e, &(0x7f0000000400)={0x8000000000000000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 230.387625ms ago: executing program 3 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mount\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys_mount\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys_mount/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='dummy_hcd.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys_mount/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='dummy_hcd.0', 0xb) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c60511920001010203010902200001010080fa0904000002ffffff000705810200020007050202000200"], &(0x7f0000001000)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys_mount/bus/usb/drivers/qcserial/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='1-1:1.0', 0x7) 33.00548ms ago: executing program 0 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) close(r2) write(0xffffffffffffffff, &(0x7f0000000440)='0x80', 0x4) 0s ago: executing program 0 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x2b, &(0x7f0000000100)=ANY=[@ANYBLOB="12010002000000401aeb20280000010203010902190001010080fa0904000001ff00000007058202000200"], 0x0) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/drivers/em28xx/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1-1:1.0\x00', 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.110' (ED25519) to the list of known hosts. [ 22.662549][ T24] audit: type=1400 audit(1786951509.330:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.666053][ T271] cgroup: Unknown subsys name 'net' [ 22.685465][ T24] audit: type=1400 audit(1786951509.330:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.712726][ T24] audit: type=1400 audit(1786951509.360:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.713076][ T271] cgroup: Unknown subsys name 'devices' [ 22.852521][ T271] cgroup: Unknown subsys name 'hugetlb' [ 22.858182][ T271] cgroup: Unknown subsys name 'rlimit' [ 22.969592][ T24] audit: type=1400 audit(1786951509.630:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.992808][ T24] audit: type=1400 audit(1786951509.630:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.009063][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.019963][ T24] audit: type=1400 audit(1786951509.630:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.051504][ T24] audit: type=1400 audit(1786951509.700:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.077166][ T24] audit: type=1400 audit(1786951509.700:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.077663][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.103252][ T24] audit: type=1400 audit(1786951509.720:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.103305][ T24] audit: type=1400 audit(1786951509.720:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.066545][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.073660][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.081333][ T279] device bridge_slave_0 entered promiscuous mode [ 24.089946][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.097298][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.105599][ T279] device bridge_slave_1 entered promiscuous mode [ 24.166127][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.173205][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.180518][ T280] device bridge_slave_0 entered promiscuous mode [ 24.190053][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.197128][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.204564][ T280] device bridge_slave_1 entered promiscuous mode [ 24.241938][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249098][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.256586][ T282] device bridge_slave_0 entered promiscuous mode [ 24.265860][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.272950][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.280485][ T282] device bridge_slave_1 entered promiscuous mode [ 24.287019][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.294110][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.301538][ T283] device bridge_slave_0 entered promiscuous mode [ 24.311286][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.318367][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.325847][ T281] device bridge_slave_0 entered promiscuous mode [ 24.335454][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.342711][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.350144][ T281] device bridge_slave_1 entered promiscuous mode [ 24.356732][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.363939][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.371403][ T283] device bridge_slave_1 entered promiscuous mode [ 24.524836][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.531934][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.539249][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.546331][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.560389][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.567597][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.574930][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.582017][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.590146][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.597212][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.604519][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.611842][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.651587][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.658664][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.666005][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.673062][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.690169][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.697269][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.704562][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.711626][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.742070][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.749659][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.756970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.765057][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.772714][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.779851][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.787817][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.795194][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.802612][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.809791][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.817217][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.824476][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.852935][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.861616][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.869034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.876768][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.886159][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.893246][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.900827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.908979][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.916059][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.923698][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.932160][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.940223][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.947707][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.955931][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.963015][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.970424][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.978774][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.985812][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.993309][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.002591][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.009623][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.017115][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.025144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.033777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.062392][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.070971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.079103][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.086440][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.094940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.103671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.111904][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.118940][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.126341][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.134989][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.143543][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.151708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.159830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.168114][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.176181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.184585][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.200375][ T280] device veth0_vlan entered promiscuous mode [ 25.210789][ T281] device veth0_vlan entered promiscuous mode [ 25.221118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.229535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.239381][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.247621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.255716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.264682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.272891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.280349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.288304][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.295869][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.304032][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.312421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.326082][ T280] device veth1_macvtap entered promiscuous mode [ 25.334220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 25.341722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.350085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.358907][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.367760][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.375552][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.384018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.393565][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.400651][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.408283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.423652][ T279] device veth0_vlan entered promiscuous mode [ 25.432323][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.441101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.449275][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.456404][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.465273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.473814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.482416][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.490268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.498750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.507101][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.515396][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.523008][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.532730][ T281] device veth1_macvtap entered promiscuous mode [ 25.547353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.555505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.563891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.572571][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.581333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.589602][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.604162][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.612627][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.621350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.629694][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.637987][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.646933][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.671550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.680268][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.682262][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 25.692726][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.704891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.715505][ T279] device veth1_macvtap entered promiscuous mode [ 25.725578][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.736469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.744471][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.764846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.773973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.785854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.796904][ T282] device veth0_vlan entered promiscuous mode [ 25.805701][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.813842][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.822156][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.829875][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.852881][ T282] device veth1_macvtap entered promiscuous mode [ 25.862900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.871849][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.880011][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.899491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.908568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.918157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.928327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.936770][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.947341][ T283] device veth0_vlan entered promiscuous mode [ 25.961257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.970489][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.978430][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.012418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.023508][ T283] device veth1_macvtap entered promiscuous mode [ 26.041979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 26.051080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.071855][ T15] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.079693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 26.093729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.140727][ T5] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.311236][ T15] usb 4-1: Using ep0 maxpacket: 8 [ 26.320852][ T313] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.365384][ T322] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.381511][ T5] usb 1-1: Using ep0 maxpacket: 16 [ 26.393189][ T308] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.395765][ T322] PM: suspend entry (s2idle) [ 26.440789][ T15] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 26.449210][ T15] usb 4-1: config 0 has no interface number 0 [ 26.455772][ T15] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 26.465744][ T15] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.475663][ T15] usb 4-1: config 0 descriptor?? [ 26.500803][ T5] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.511842][ T5] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 26.526202][ T5] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 26.535787][ T5] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.544424][ T5] usb 1-1: config 0 descriptor?? [ 26.555625][ T322] Filesystems sync: 0.149 seconds [ 26.560940][ T322] Freezing user space processes ... [ 26.640693][ T308] usb 5-1: Using ep0 maxpacket: 16 [ 31.600740][ T313] usb 3-1: device descriptor read/all, error -110 [ 31.607300][ T5] usb 1-1: can't set config #0, error -110 [ 31.617388][ T322] (elapsed 5.056 seconds) done. [ 31.622315][ T322] OOM killer disabled. [ 31.626382][ T322] Freezing remaining freezable tasks ... [ 31.690732][ T308] usb 5-1: device descriptor read/all, error -110 [ 31.770709][ T313] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.850714][ T308] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 31.990776][ T313] usb 3-1: device descriptor read/64, error -32 [ 32.060739][ T308] usb 5-1: device descriptor read/64, error -32 [ 32.320710][ T313] usb 3-1: device descriptor read/64, error -32 [ 32.391176][ T308] usb 5-1: device descriptor read/64, error -32 [ 32.440774][ T313] usb usb3-port1: attempt power cycle [ 32.510932][ T308] usb usb5-port1: attempt power cycle [ 32.850734][ T313] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.920727][ T308] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.960920][ T313] usb 3-1: device descriptor read/8, error -32 [ 33.030751][ T308] usb 5-1: device descriptor read/8, error -32 [ 33.170723][ T313] usb 3-1: device descriptor read/8, error -32 [ 33.240748][ T308] usb 5-1: device descriptor read/8, error -32 [ 33.440719][ T313] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 33.510722][ T308] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 33.550741][ T313] usb 3-1: device descriptor read/8, error -32 [ 33.620724][ T308] usb 5-1: device descriptor read/8, error -32 [ 33.760732][ T313] usb 3-1: device descriptor read/8, error -32 [ 33.830754][ T308] usb 5-1: device descriptor read/8, error -32 [ 33.880753][ T313] usb usb3-port1: unable to enumerate USB device [ 33.950810][ T308] usb usb5-port1: unable to enumerate USB device [ 33.959125][ T322] (elapsed 2.332 seconds) done. [ 33.964053][ T322] PM: suspend debug: Waiting for 5 second(s). [ 38.978014][ T322] OOM killer enabled. [ 38.982160][ T322] Restarting tasks ... done. [ 38.998966][ T308] usb 4-1: USB disconnect, device number 2 [ 39.009338][ T322] Resume cause unknown [ 39.017648][ T5] usb 1-1: USB disconnect, device number 2 [ 39.030114][ T322] PM: suspend exit [ 39.045577][ T24] kauditd_printk_skb: 32 callbacks suppressed [ 39.045590][ T24] audit: type=1400 audit(1786951525.700:106): avc: denied { mount } for pid=333 comm="syz.0.10" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.089854][ T340] using random self ethernet address [ 39.118753][ T340] using random host ethernet address [ 39.134420][ T24] audit: type=1400 audit(1786951525.710:107): avc: denied { search } for pid=333 comm="syz.0.10" name="/" dev="configfs" ino=14098 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.168953][ T24] audit: type=1400 audit(1786951525.710:108): avc: denied { write } for pid=333 comm="syz.0.10" name="usb_gadget" dev="configfs" ino=14099 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.207588][ T353] usb0: HOST MAC 86:19:8c:fa:79:5a [ 39.213059][ T353] usb0: MAC da:61:0f:aa:35:19 [ 39.218823][ T24] audit: type=1400 audit(1786951525.710:109): avc: denied { add_name } for pid=333 comm="syz.0.10" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 39.252778][ T24] audit: type=1400 audit(1786951525.710:110): avc: denied { create } for pid=333 comm="syz.0.10" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 39.274440][ T24] audit: type=1400 audit(1786951525.730:111): avc: denied { write } for pid=333 comm="syz.0.10" name="no_out_endpoint" dev="configfs" ino=15281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 39.328525][ T24] audit: type=1400 audit(1786951525.730:112): avc: denied { open } for pid=333 comm="syz.0.10" path="/1/config/usb_gadget/g1/functions/hid.usb0/no_out_endpoint" dev="configfs" ino=15281 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 39.362385][ T24] audit: type=1400 audit(1786951525.750:113): avc: denied { create } for pid=336 comm="syz.2.11" name="acm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 39.383364][ T24] audit: type=1400 audit(1786951525.770:114): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 39.405061][ T24] audit: type=1400 audit(1786951525.870:115): avc: denied { write } for pid=339 comm="syz.3.13" name="001" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 39.440457][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 39.510780][ T307] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.570720][ T20] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 39.620833][ T5] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 39.641187][ T308] android_work: sent uevent USB_STATE=CONNECTED [ 39.730706][ T300] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 39.840677][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 39.880905][ T307] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 39.890907][ T307] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 39.980913][ T5] usb 1-1: Dual-Role OTG device on HNP port [ 40.000793][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 40.000873][ T5] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 40.011890][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 40.024697][ T5] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.032169][ T300] usb 3-1: Using ep0 maxpacket: 8 [ 40.046151][ T20] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 40.056384][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.062751][ T313] android_work: sent uevent USB_STATE=CONFIGURED [ 40.064770][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 40.082191][ T20] usb 2-1: config 0 descriptor?? [ 40.133229][ T5] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 40.152070][ T307] usb 5-1: language id specifier not provided by device, defaulting to English [ 40.170935][ T300] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 40.179685][ T300] usb 3-1: config 0 has no interface number 0 [ 40.186189][ T300] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 40.196031][ T300] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 40.205365][ T300] usb 3-1: config 0 descriptor?? [ 40.240818][ T307] usb 5-1: New USB device found, idVendor=3275, idProduct=0080, bcdDevice= 0.00 [ 40.250036][ T307] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 40.258579][ T307] usb 5-1: Product: syz [ 40.267043][ T307] usb 5-1: Manufacturer: syz [ 40.290805][ T330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 40.298086][ T330] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 40.332659][ T5] rndis_host 1-1:1.2 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 2e:0a:a1:6e:06:92 [ 40.476360][ T389] dummy_hcd dummy_hcd.0: remove, state 1 [ 40.482591][ T389] usb usb1: USB disconnect, device number 1 [ 40.489827][ T389] usb 1-1: USB disconnect, device number 3 [ 40.506756][ T389] rndis_host 1-1:1.2 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 40.573619][ T20] HID 045e:07da: Invalid code 65791 type 1 [ 40.583818][ T389] dummy_hcd dummy_hcd.0: stopped [ 40.590336][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0001/input/input4 [ 40.604330][ T389] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 40.612028][ T20] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 40.628429][ T20] usb 3-1: USB disconnect, device number 6 [ 40.750073][ T409] udc-core: couldn't find an available UDC or it's busy [ 40.758666][ T409] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 40.871230][ T5] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 40.950841][ C0] general protection fault, probably for non-canonical address 0xdffffc0000000009: 0000 [#1] PREEMPT SMP KASAN [ 40.962616][ C0] KASAN: null-ptr-deref in range [0x0000000000000048-0x000000000000004f] [ 40.971071][ C0] CPU: 0 PID: 30 Comm: khugepaged Not tainted syzkaller #0 [ 40.978273][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 40.988374][ C0] RIP: 0010:dummy_queue+0x1b7/0x870 [ 40.996078][ C0] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 12 50 92 fe 4d 8b 24 24 49 83 c4 48 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 80 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 41.016485][ C0] RSP: 0018:ffffc900000071a0 EFLAGS: 00010206 [ 41.019630][ T20] usb 5-1: USB disconnect, device number 6 [ 41.023820][ C0] RAX: 0000000000000009 RBX: ffff8881085f7310 RCX: dffffc0000000000 [ 41.023828][ C0] RDX: ffff8881002fe2c0 RSI: 0000000000000003 RDI: 0000000000000005 [ 41.023836][ C0] RBP: ffffc90000007218 R08: ffff8881000554b7 R09: 1ffff1102000aa96 [ 41.023843][ C0] R10: dffffc0000000000 R11: ffffed102000aa97 R12: 0000000000000048 [ 41.023851][ C0] R13: ffff8881085f7300 R14: 1ffff110210bee60 R15: ffff888103f8cc90 [ 41.023864][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.023872][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.023879][ C0] CR2: 00007f3356c51e9c CR3: 0000000124dc6000 CR4: 00000000003506b0 [ 41.023890][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.023897][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.023901][ C0] Call Trace: [ 41.023907][ C0] [ 41.023929][ C0] usb_ep_queue+0xce/0x210 [ 41.023963][ C0] eth_start_xmit+0x811/0xd40 [ 41.127720][ C0] dev_hard_start_xmit+0x245/0x680 [ 41.132875][ C0] sch_direct_xmit+0x26d/0x990 [ 41.137683][ C0] ? stp_proto_unregister+0x200/0x200 [ 41.143095][ C0] __qdisc_run+0xa3a/0x1400 [ 41.147646][ C0] qdisc_run+0x100/0x2f0 [ 41.152191][ C0] __dev_queue_xmit+0xbc6/0x2500 [ 41.157157][ C0] ? dev_queue_xmit+0x20/0x20 [ 41.161847][ C0] ? __local_bh_enable_ip+0x53/0x80 [ 41.167507][ C0] ? __local_bh_enable_ip+0x53/0x80 [ 41.172723][ C0] ? ipv6_chk_mcast_addr+0x3d1/0x3f0 [ 41.178026][ C0] ? ip6_finish_output2+0xcd0/0x1540 [ 41.183597][ C0] dev_queue_xmit+0x17/0x20 [ 41.189004][ C0] ip6_finish_output2+0xea9/0x1540 [ 41.194470][ C0] ? __ip6_finish_output+0x790/0x790 [ 41.200019][ C0] ? ip6table_mangle_hook+0x2c3/0x730 [ 41.205478][ C0] __ip6_finish_output+0x5fd/0x790 [ 41.210863][ C0] ip6_finish_output+0x33/0x1e0 [ 41.217043][ C0] ip6_output+0x1fa/0x420 [ 41.221399][ C0] ? ac6_seq_show+0xf0/0xf0 [ 41.226017][ C0] ? ip6_output+0x420/0x420 [ 41.230703][ C0] ? ip6table_filter_table_init+0xf0/0xf0 [ 41.236460][ C0] mld_sendpack+0x61e/0xb00 [ 41.240969][ C0] ? add_grec+0x1330/0x1330 [ 41.245477][ C0] ? mld_send_report+0x1f0/0x1f0 [ 41.250417][ C0] ? add_grec+0x10b/0x1330 [ 41.255068][ C0] ? _raw_spin_lock_irq+0xf0/0xf0 [ 41.260209][ C0] mld_ifc_timer_expire+0x862/0xc60 [ 41.265434][ C0] ? mld_gq_timer_expire+0xe0/0xe0 [ 41.270886][ C0] call_timer_fn+0x38/0x290 [ 41.275412][ C0] ? mld_gq_timer_expire+0xe0/0xe0 [ 41.280569][ C0] __run_timers+0x637/0x9a0 [ 41.285116][ C0] ? calc_index+0x200/0x200 [ 41.289634][ C0] run_timer_softirq+0x6a/0xf0 [ 41.294788][ C0] __do_softirq+0x255/0x563 [ 41.299307][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 41.304867][ C0] asm_call_irq_on_stack+0xf/0x20 [ 41.309902][ C0] [ 41.312862][ C0] do_softirq_own_stack+0x60/0x80 [ 41.317926][ C0] __irq_exit_rcu+0x128/0x150 [ 41.322737][ C0] irq_exit_rcu+0x9/0x10 [ 41.326986][ C0] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 41.332633][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 41.338648][ C0] RIP: 0010:memset_erms+0x9/0x10 [ 41.343600][ C0] Code: c1 e9 03 40 0f b6 f6 48 b8 01 01 01 01 01 01 01 01 48 0f af c6 f3 48 ab 89 d1 f3 aa 4c 89 c8 c3 90 49 89 f9 40 88 f0 48 89 d1 aa 4c 89 c8 c3 90 49 89 fa 40 0f b6 ce 48 b8 01 01 01 01 01 01 [ 41.363230][ C0] RSP: 0018:ffffc900001ffb18 EFLAGS: 00010207 [ 41.369340][ C0] RAX: ffffed10254400ff RBX: 0000000000000000 RCX: 0000000000035bc0 [ 41.377345][ C0] RDX: 0000000000040000 RSI: 00000000000000ff RDI: ffffed102544a440 [ 41.385322][ C0] RBP: ffffc900001ffb20 R08: dffffc0000000000 R09: ffffed1025440000 [ 41.393298][ C0] R10: dffffc0000000000 R11: ffffed102084d7fb R12: dffffc0000000000 [ 41.401534][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffea0004a88000 [ 41.409522][ C0] ? kasan_poison+0x62/0x70 [ 41.414030][ C0] __kasan_poison_pages+0x2d/0x30 [ 41.419059][ C0] __free_pages_ok+0x24b/0x830 [ 41.423827][ C0] ? __kasan_check_write+0x14/0x20 [ 41.428941][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 41.434420][ C0] ? set_pageblock_migratetype+0x150/0x150 [ 41.440257][ C0] ? __alloc_pages_nodemask+0x5fc/0x640 [ 41.445819][ C0] free_compound_page+0x73/0x90 [ 41.450874][ C0] free_transhuge_page+0x20c/0x230 [ 41.455989][ C0] ? _raw_spin_trylock_bh+0x150/0x150 [ 41.461380][ C0] __put_compound_page+0x77/0xb0 [ 41.466318][ C0] __put_page+0xbd/0xe0 [ 41.470487][ C0] khugepaged+0x875/0xf60 [ 41.474835][ C0] ? start_stop_khugepaged+0x170/0x170 [ 41.480303][ C0] ? io_schedule+0xe0/0xe0 [ 41.484931][ C0] ? __kasan_check_write+0x14/0x20 [ 41.490048][ C0] ? io_schedule+0xe0/0xe0 [ 41.494719][ C0] ? __kasan_check_read+0x11/0x20 [ 41.499777][ C0] ? __kthread_parkme+0xb3/0x1b0 [ 41.504715][ C0] kthread+0x324/0x3b0 [ 41.508784][ C0] ? start_stop_khugepaged+0x170/0x170 [ 41.514243][ C0] ? kthread_blkcg+0xd0/0xd0 [ 41.518837][ C0] ret_from_fork+0x1f/0x30 [ 41.523285][ C0] Modules linked in: [ 41.527901][ C0] ---[ end trace b9bdc835ce4f6401 ]--- [ 41.533444][ C0] RIP: 0010:dummy_queue+0x1b7/0x870 [ 41.538670][ C0] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 12 50 92 fe 4d 8b 24 24 49 83 c4 48 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 80 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 41.559006][ C0] RSP: 0018:ffffc900000071a0 EFLAGS: 00010206 [ 41.565159][ C0] RAX: 0000000000000009 RBX: ffff8881085f7310 RCX: dffffc0000000000 [ 41.573196][ C0] RDX: ffff8881002fe2c0 RSI: 0000000000000003 RDI: 0000000000000005 [ 41.581602][ C0] RBP: ffffc90000007218 R08: ffff8881000554b7 R09: 1ffff1102000aa96 [ 41.589613][ C0] R10: dffffc0000000000 R11: ffffed102000aa97 R12: 0000000000000048 [ 41.597667][ C0] R13: ffff8881085f7300 R14: 1ffff110210bee60 R15: ffff888103f8cc90 [ 41.605718][ C0] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.614741][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.621396][ C0] CR2: 00007f3356c51e9c CR3: 0000000124dc6000 CR4: 00000000003506b0 [ 41.629407][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.637558][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.645675][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 41.653772][ C0] Kernel Offset: disabled [ 41.658110][ C0] Rebooting in 86400 seconds..