last executing test programs: 9.612664209s ago: executing program 0 (id=1): unshare(0x40000000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/netdevsim/new_device\x00', 0x2, 0x0) write(r0, &(0x7f00000000c0)='1 1\x00', 0x3) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@getstats={0x1c, 0x5e, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8}}, 0x14}}, 0x0) 9.320573666s ago: executing program 0 (id=6): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f0000000100)={@my=0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000140)=0x1) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x1234, @host}, 0x10) 9.286923807s ago: executing program 0 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ed) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/versions\x00', 0x2, 0x0) write(r0, &(0x7f0000000440)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000004c0)='tcp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/threads\x00', 0x2, 0x0) write(r2, &(0x7f00000000c0)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r3, &(0x7f00000001c0)='nfsd 127.0.0.1 2147483647 myclient\n\x00', 0x23) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='myclient / 2147483647 0 0 0 0\n\x00', 0x1e) r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./proc/net/rpc/nfsd.fh/channel\x00', 0x2, 0x0) write(r5, &(0x7f00000002c0)='myclient 0 0 2147483647 /\n\x00', 0x1a) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ed) mount(&(0x7f0000000340)=@filename='127.0.0.1:/\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000380)='nfs\x00', 0x0, &(0x7f00000003c0)='vers=4.1,addr=127.0.0.1,clientaddr=127.0.0.1\x00') 9.251074727s ago: executing program 0 (id=8): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xf) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read(r5, &(0x7f0000c00000)=""/4194304, 0x400000) nanosleep(&(0x7f0000000000)={0x0, 0x10000000}, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x14) 9.138818151s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r0, &(0x7f00000001c0)='mem', 0x3) 9.117991851s ago: executing program 3 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/module/firmware_class/parameters/path\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='./\x00', 0x3) 3.97053112s ago: executing program 3 (id=12): syz_usb_connect$cdc_ecm(0x3, 0x56, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x44, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[{{0x9, 0x5, 0x81, 0x3, 0x10, 0x1}}], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000200)) ioctl$USBDEVFS_ALLOC_STREAMS(r0, 0x8008551c, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) ioctl$USBDEVFS_FREE_STREAMS(r0, 0x8008551d, &(0x7f0000000400)={0x2, 0x1, [{0x2, 0x1}]}) 3.954463341s ago: executing program 2 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='proc\x00', &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/vm/nr_hugepages\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) pwrite64(r0, &(0x7f0000000000)='100\x00', 0x3, 0x0) 3.903363022s ago: executing program 2 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x42, 0x1ff) fallocate(r0, 0x0, 0x0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file1\x00', 0x42, 0x1ff) fallocate(r1, 0x0, 0x0, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r2, 0x4c00, r0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r3, 0x4c00, r1) r4 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./dev/mapper/control\x00', 0x0, 0x0) ioctl(r4, 0xc138fd03, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dummy\x00', 0x42, 0x1ff) write(r5, &(0x7f0000000138)="0000000000000000000400000000000000000000000000007468696e2d706f6f6c000000000000002f6465762f6c6f6f7030202f6465762f6c6f6f7031203132382030000000", 0x46) ioctl(r4, 0xc138fd09, &(0x7f0000000000)="0400000000000000000000007e01000038010000010000000000000000000000000000000000000000000000000000007468696e706f6f6c00") ioctl(r4, 0xc138fd06, &(0x7f0000000000)="0400000000000000000000003801000000000000000000000000000000000000000000000000000000000000000000007468696e706f6f6c00") 3.896144982s ago: executing program 1 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/nfsv4gracetime\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0\n\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/nfsv4leasetime\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='0\n\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000580)='-2 -3 +4\n\x00', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./nfsd/portlist\x00', 0x2, 0x0) write(r3, &(0x7f00000000c0)='tcp 2049\n\x00', 0x9) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/threads\x00', 0x2, 0x0) write(r4, &(0x7f0000000240)='1\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./proc/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000340)='nfsd 127.0.0.1 2147483647 mydomain\n\x00', 0x23) r6 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./proc/net/rpc/nfsd.export/channel\x00', 0x2, 0x0) write(r6, &(0x7f00000003c0)='mydomain / 2147483647 0 0 0 0\n\x00', 0x1e) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./mnt\x00', 0x1ff) mount(&(0x7f0000000440)=@filename='127.0.0.1:/\x00', &(0x7f0000000400)='./mnt\x00', &(0x7f0000000480)='nfs4\x00', 0x0, &(0x7f00000004c0)='nolock,addr=127.0.0.1\x00') openat(0xffffffffffffff9c, &(0x7f0000000500)='./mnt/file\x00', 0x42, 0x1ff) 3.864981983s ago: executing program 0 (id=19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000140)=[@out_dx={0x6a, 0x28, {0x40, 0x1}}, @out_dx={0x6a, 0x28, {0x41, 0x1}}, @out_dx={0x6a, 0x28, {0x42, 0x1}}, @out_dx={0x6a, 0x28, {0x43, 0x1}}], 0xa0}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.835663494s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='dwc3-pci\n', 0x9) 3.757464596s ago: executing program 1 (id=21): unshare(0x40000000) socket$netlink(0x10, 0x3, 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./proc/sys/net/netfilter/nf_conntrack_helper\x00', 0x2, 0x0) write(r0, &(0x7f0000000100)='1\x00', 0x2) 3.686210298s ago: executing program 1 (id=22): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TIOCSPTLCK(r0, 0x40045431, &(0x7f0000000100)) syz_open_pts(r0, 0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x1) r1 = socket$inet(0x2, 0x2, 0x0) ioctl(r1, 0x8914, &(0x7f0000000400)="736c30000000000000000000000000000100"/40) write(r0, &(0x7f0000000200)="700000c0", 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 3.553131581s ago: executing program 0 (id=23): r0 = syz_usb_connect(0x0, 0x3b, &(0x7f0000000040)=ANY=[@ANYBLOB="120100020000004032151d010001000000010902290001010080fa090400000203000000092111010001224e000705810340000107050203400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000001c0)={0x2c, &(0x7f0000000000)=ANY=[@ANYBLOB="00224e00000005010901a101850105091901290315002501950375018102950175058103c00600ff0901a101150026ff0075089540850f0901b102850c09018102850909019102850a09019102850b09018102c0"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001000)="0b06000010000101") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000001100)="0b06000000000000") nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x13, &(0x7f0000001200)="0b1100"/19) nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) nanosleep(&(0x7f0000000000)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/1-1/power/control\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x4) nanosleep(&(0x7f0000000000)={0x1}, 0x0) write(r1, &(0x7f0000000800)='on\x00', 0x2) nanosleep(&(0x7f0000000000)={0x1}, 0x0) 3.388069085s ago: executing program 2 (id=24): syz_mount_image$ext4(&(0x7f0000000680)='ext4\x00', &(0x7f00000006c0)='./file0\x00', 0x0, &(0x7f0000000700), 0x0, 0x676, &(0x7f0000000740)="$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") r0 = syz_open_dev$loop(&(0x7f0000000000), 0x0, 0x0) pread64(r0, &(0x7f0000100000)=""/524288, 0x80000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r1, &(0x7f0000100000)='\x00'/524288, 0x80000) ftruncate(r1, 0x2000000) r2 = syz_open_dev$loop(&(0x7f0000000000), 0x1, 0x2) ioctl$LOOP_SET_FD(r2, 0x4c00, r1) close(r2) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x1ff) mknodat(0xffffffffffffff9c, &(0x7f0000000500)='./loop1\x00', 0x61b6, 0x701) mount(&(0x7f0000000600)=@filename='./loop1\x00', &(0x7f0000000300)='./mnt\x00', &(0x7f0000000680)='ext4\x00', 0x0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mnt\x00', 0x0, 0x0) ioctl(r3, 0x40086610, &(0x7f0000000800)="0080000000000000") 3.19952215s ago: executing program 2 (id=25): r0 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r0, &(0x7f0000000000), 0xc) sendto(r0, &(0x7f0000000040)='$\x00'/36, 0x24, 0x0, 0x0, 0x0) 3.108366212s ago: executing program 2 (id=26): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x4b, &(0x7f0000000080)=ANY=[@ANYBLOB="120100020000004010110f900001000000010902390003010080fa0904000001ffffff00070584030002010904010001ffffff00070502020002000904020001ffffff0007058202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/usb/devices/1-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r0, &(0x7f0000000180)=""/128, 0x80) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/2-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/128, 0x80) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/devices/dummy_hcd.0-1:1.0/stat_rxflow\x00', 0x0, 0x0) read(r2, &(0x7f00000002c0)=""/128, 0x80) 3.005039305s ago: executing program 4 (id=28): nanosleep(&(0x7f0000000000)={0x0, 0x2faf080}, 0x0) 2.904554718s ago: executing program 4 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000100)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='-2 -3 +4\n\x00', 0x9) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='udp 2049\n\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000500)='1\n\x00', 0x2) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r3, &(0x7f0000000600)={0x2, 0x801, @loopback}, 0x10) write(r3, &(0x7f0000000700)="123456780000000000000002000186a30000000300000000000003e700"/40, 0x28) 2.904414907s ago: executing program 4 (id=30): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ram1\x00', 0x8000, 0x101) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./ram1\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000000)="fc4e2ba9", 0x4, 0x3ff0000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='md0\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='0.90', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1:1', 0x3) 2.904250727s ago: executing program 4 (id=31): sendto$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) gettid() timer_create(0x2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) mount(0x0, &(0x7f00000000c0)='./sys\x00', 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="05000000030000000200000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000000000000fe, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binfmt(0xffffffffffffff9c, 0x0, 0x41, 0x1ff) r5 = getpid() kcmp(r5, r5, 0x5, 0xffffffffffffffff, 0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x2000000, 0x11, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.470895409s ago: executing program 4 (id=32): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x802c550a, &(0x7f0000000040)=@urb_type_control={0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.461130988s ago: executing program 1 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/cluster/mycluster/node/mynode\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/cluster/mycluster/node/mynode/ipv4_address\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='127.0.0.1\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/cluster/mycluster/node/mynode/ipv4_port\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='7777\x00', 0x4) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/cluster/mycluster/node/mynode/num\x00', 0x2, 0x0) write(r2, &(0x7f0000000280)='0\x00', 0x1) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/cluster/mycluster/node/mynode/local\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='1\x00', 0x1) close(r3) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/cluster/mycluster/heartbeat/myregion\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/cluster/mycluster/heartbeat/myregion/block_bytes\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='512\x00', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/cluster/mycluster/heartbeat/myregion/blocks\x00', 0x2, 0x0) write(r5, &(0x7f0000000440)='255\x00', 0x3) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/cluster/mycluster/heartbeat/myregion/start_block\x00', 0x2, 0x0) write(r6, &(0x7f00000004c0)='1\x00', 0x1) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./backing_file\x00', 0x42, 0x1ff) fallocate(r7, 0x0, 0x0, 0x100000) mknodat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x61c0, 0x700) r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r8, 0x4c00, r7) r9 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/cluster/mycluster/heartbeat/myregion/dev\x00', 0x2, 0x0) write(r9, &(0x7f00000005c0)='7:0\x00', 0x3) close(r9) 2.336647191s ago: executing program 1 (id=34): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000406d0422c200000000000109022d0001010080320904000002030000000921110100012223000905810340000a00000905020340000a0000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f00000002e0)={0x20, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f00000002e0)={0x20, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f00000002e0)={0x20, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0022230000000600ff0900a10185020901150026ff0075089508810209029512910209039503b102c0"], &(0x7f0000000080)={0x0, 0x21, 0x9, {0x9, 0x21, 0x111, 0x0, 0x1, {0x22, 0x23}}}}, &(0x7f0000000200)={0x2c, &(0x7f00000002e0)={0x20, 0x9}, &(0x7f0000000280)={0x0, 0xa, 0x1}, &(0x7f00000002a0)={0x0, 0x8, 0x1, 0x1}, &(0x7f0000000240)={0x20, 0x1, 0x4, "02000000"}, &(0x7f00000002c0)={0x20, 0x3, 0x1, 0x1}}) (async) nanosleep(&(0x7f0000000300)={0x2}, 0x0) syz_open_dev$hidraw(&(0x7f0000000500), 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x989680}, 0x0) syz_usb_ep_write(r0, 0x81, 0x9, &(0x7f0000000400)="020000000000000000") 440.404599ms ago: executing program 2 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0x1d6b', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0x0104', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000340)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000440)={0x0, 0x2faf0800}, 0x0) r3 = socket$inet(0x2, 0x2, 0x0) ioctl(r3, 0x8914, &(0x7f0000000480)="757362310000000000000000000000000100"/40) sendto$inet(r3, &(0x7f0000000500)='hello', 0x5, 0x0, &(0x7f0000000540)={0x2, 0x1234, @broadcast}, 0x10) 0s ago: executing program 4 (id=36): syslog(0x9, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/pm_test\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='devices\n', 0x8) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/power/state\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='mem\n', 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. [ 21.313465][ T24] audit: type=1400 audit(1785853071.320:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.314562][ T271] cgroup: Unknown subsys name 'net' [ 21.337665][ T24] audit: type=1400 audit(1785853071.320:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.367223][ T24] audit: type=1400 audit(1785853071.350:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.367701][ T271] cgroup: Unknown subsys name 'devices' [ 21.538135][ T271] cgroup: Unknown subsys name 'hugetlb' [ 21.545202][ T271] cgroup: Unknown subsys name 'rlimit' [ 21.652127][ T24] audit: type=1400 audit(1785853071.660:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.678402][ T24] audit: type=1400 audit(1785853071.660:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.704867][ T24] audit: type=1400 audit(1785853071.660:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.711867][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.742786][ T24] audit: type=1400 audit(1785853071.760:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 21.774121][ T24] audit: type=1400 audit(1785853071.760:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.831405][ T24] audit: type=1400 audit(1785853071.840:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.858557][ T24] audit: type=1400 audit(1785853071.840:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.886689][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.361133][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.368510][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.380016][ T279] device bridge_slave_0 entered promiscuous mode [ 22.387900][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.397077][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.404811][ T279] device bridge_slave_1 entered promiscuous mode [ 22.484318][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.494645][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.502577][ T280] device bridge_slave_0 entered promiscuous mode [ 22.512595][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.519659][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.527315][ T280] device bridge_slave_1 entered promiscuous mode [ 22.540883][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.548134][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.555666][ T281] device bridge_slave_0 entered promiscuous mode [ 22.564690][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.572662][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.580037][ T281] device bridge_slave_1 entered promiscuous mode [ 22.628641][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.636059][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.643525][ T283] device bridge_slave_0 entered promiscuous mode [ 22.651632][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.659034][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.666568][ T283] device bridge_slave_1 entered promiscuous mode [ 22.682818][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.689898][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.697382][ T282] device bridge_slave_0 entered promiscuous mode [ 22.725955][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.733137][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.741081][ T282] device bridge_slave_1 entered promiscuous mode [ 22.788403][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.795454][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.803882][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.811165][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.860360][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.868499][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.878152][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.886706][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.941328][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.948912][ T282] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.957741][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.965653][ T282] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.979743][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.987516][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.994852][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.002166][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.013387][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.021011][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.028520][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.035827][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.062888][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.071595][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.080587][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.088587][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.096212][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.103834][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.112251][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.121287][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.128763][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.135913][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.143404][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.150598][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.158596][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.167009][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.174699][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.186777][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.195800][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.217498][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.230816][ T281] device veth0_vlan entered promiscuous mode [ 23.255793][ T279] device veth0_vlan entered promiscuous mode [ 23.263252][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.271282][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.280383][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.289344][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.296899][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.304614][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.312839][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.320476][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.328270][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.335777][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.344238][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.351290][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.358764][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.367253][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.374367][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.381924][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.390326][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.397406][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.405104][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.413452][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.420764][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.442465][ T281] device veth1_macvtap entered promiscuous mode [ 23.450848][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.459769][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.468773][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.477251][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.485520][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.494202][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.502630][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.510614][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.518438][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.528070][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.536740][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.546965][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.554938][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.562627][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.570923][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.581298][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.591258][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.600162][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.608960][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.623168][ T279] device veth1_macvtap entered promiscuous mode [ 23.637420][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.646000][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.655410][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.663977][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.672446][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.680909][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.689293][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.698139][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.706125][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.715472][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.723634][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.736703][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.745151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.755168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.763759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.787539][ T280] device veth0_vlan entered promiscuous mode [ 23.794429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.802966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.811389][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.819953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.828343][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.836872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.845773][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.855156][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.863452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.871153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.882247][ T282] device veth0_vlan entered promiscuous mode [ 23.890192][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 23.894709][ T283] device veth0_vlan entered promiscuous mode [ 23.908587][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 23.920181][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.929031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.937664][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.946376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.954853][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.962979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.971088][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.978829][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.986222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.993844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.004998][ T282] device veth1_macvtap entered promiscuous mode [ 24.019527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.028659][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.037566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.048283][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.056836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.070811][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.079266][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.098024][ T280] device veth1_macvtap entered promiscuous mode [ 24.123000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.131630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.140519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.149675][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.158399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.170308][ T283] device veth1_macvtap entered promiscuous mode [ 24.183937][ T280] IPv6: veth1_to_batadv: Failed to add prefix route for address fe80::3d; dropping [ 24.202146][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.219150][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.224818][ T315] PM: suspend entry (s2idle) [ 24.228314][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.252037][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.262658][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.289402][ T319] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.310771][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.322759][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.331716][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.340960][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.388047][ T322] EXT4-fs (loop4): Unsupported blocksize for fs-verity [ 24.403640][ T325] PM: suspend entry (deep) [ 24.408279][ T325] PM: suspend exit [ 24.419665][ T315] Filesystems sync: 0.177 seconds [ 24.425673][ T315] Freezing user space processes ... (elapsed 0.029 seconds) done. [ 24.464209][ T315] OOM killer disabled. [ 24.468895][ T315] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 24.479233][ T315] PM: suspend debug: Waiting for 5 second(s). [ 29.511293][ T315] OOM killer enabled. [ 29.515311][ T315] Restarting tasks ... done. [ 29.539328][ T315] Resume cause unknown [ 29.544317][ T315] PM: suspend exit [ 29.573127][ T24] kauditd_printk_skb: 34 callbacks suppressed [ 29.573138][ T24] audit: type=1400 audit(1785853079.580:108): avc: denied { read write } for pid=335 comm="syz.3.12" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.642921][ T24] audit: type=1400 audit(1785853079.580:109): avc: denied { open } for pid=335 comm="syz.3.12" path="/dev/raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.696725][ T350] netlink: 'syz.4.18': attribute type 5 has an invalid length. [ 29.709416][ T24] audit: type=1400 audit(1785853079.580:110): avc: denied { ioctl } for pid=335 comm="syz.3.12" path="/dev/raw-gadget" dev="devtmpfs" ino=253 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.757378][ T350] netlink: 'syz.4.18': attribute type 5 has an invalid length. [ 29.781839][ T24] audit: type=1400 audit(1785853079.650:111): avc: denied { mount } for pid=343 comm="syz.2.16" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 29.846573][ T24] audit: type=1400 audit(1785853079.690:112): avc: denied { create } for pid=349 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.880192][ T24] audit: type=1400 audit(1785853079.700:113): avc: denied { write } for pid=349 comm="syz.4.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 29.904133][ T24] audit: type=1400 audit(1785853079.840:114): avc: denied { create } for pid=357 comm="syz.1.21" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.906625][ T52] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 29.936758][ T24] audit: type=1400 audit(1785853079.890:115): avc: denied { sys_module } for pid=363 comm="syz.1.22" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 30.012022][ T24] audit: type=1400 audit(1785853080.020:116): avc: denied { read } for pid=343 comm="syz.2.16" name="control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 30.019523][ T344] device-mapper: table: 253:0: thin-pool: unknown target type [ 30.036574][ T24] audit: type=1400 audit(1785853080.020:117): avc: denied { open } for pid=343 comm="syz.2.16" path="/2/dev/mapper/control" dev="devtmpfs" ino=260 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 30.044296][ T344] device-mapper: ioctl: error adding target to table [ 30.237950][ T369] EXT4-fs (loop2): Unsupported blocksize for fs-verity [ 30.256832][ T25] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.318924][ T369] EXT4-fs (loop1): VFS: Can't find ext4 filesystem [ 30.406752][ T52] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.416159][ T52] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 30.425257][ T52] usb 4-1: SerialNumber: syz [ 30.646527][ T20] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 30.992275][ T25] usb 1-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 31.005825][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.326694][ T20] usb 3-1: New USB device found, idVendor=1110, idProduct=900f, bcdDevice= 1.00 [ 31.336247][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.356544][ T287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 31.496567][ T301] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.606541][ T287] usb 5-1: Using ep0 maxpacket: 8 [ 31.726533][ T287] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 31.738088][ T287] usb 5-1: config 0 has no interface number 0 [ 31.746914][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 7) [ 31.759881][ T287] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 31.774146][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.783516][ T287] usb 5-1: config 0 descriptor?? [ 31.856632][ T301] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 31.866393][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.016552][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 7) [ 32.178107][ T301] lg-g15 0003:046D:C222.0002: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 32.266542][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 7) [ 32.506515][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 7) [ 32.588819][ T52] usb 3-1: USB disconnect, device number 2 [ 32.766529][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 18) [ 33.006537][ C1] hid-rmi 0003:1532:011D.0001: Event data for report 11 was too short (64 vs 18) [ 33.029173][ T52] usb 5-1: USB disconnect, device number 2 [ 33.101081][ T411] using random self ethernet address [ 33.107607][ T411] using random host ethernet address [ 33.114271][ T411] udc-core: couldn't find an available UDC or it's busy [ 33.539295][ T418] PM: suspend entry (deep) [ 33.704441][ T418] Filesystems sync: 0.160 seconds [ 33.711039][ T418] Freezing user space processes ... [ 36.676595][ T25] hid-rmi 0003:1532:011D.0001: unable to set rmi mode to 1 (-110) [ 36.689861][ T25] hid-rmi 0003:1532:011D.0001: failed to set rmi mode [ 36.717629][ T25] hid-rmi 0003:1532:011D.0001: hiddev96,hidraw1: USB HID v1.11 Pointer [HID 1532:011d] on usb-dummy_hcd.0-1/input0 [ 37.306577][ T301] lg-g15 0003:046D:C222.0002: Error -110 disabling keyboard emulation for the G-keys, falling back to generic hid-input driver [ 37.324784][ T418] (elapsed 3.613 seconds) done. [ 37.329685][ T418] OOM killer disabled. [ 37.333820][ T418] Freezing remaining freezable tasks ... (elapsed 0.001 seconds) done. [ 37.346902][ T9] general protection fault, probably for non-canonical address 0xdffffc0000000013: 0000 [#1] PREEMPT SMP KASAN [ 37.358845][ T9] KASAN: null-ptr-deref in range [0x0000000000000098-0x000000000000009f] [ 37.369245][ T9] CPU: 1 PID: 9 Comm: kworker/u4:1 Not tainted syzkaller #0 [ 37.378435][ T9] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 37.389177][ T9] Workqueue: events_unbound async_run_entry_fn [ 37.397018][ T9] RIP: 0010:rmi_driver_suspend+0x38/0x180 [ 37.402796][ T9] Code: 83 ec 10 89 75 cc 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 da 64 42 fe 4c 89 75 d0 49 81 c6 98 00 00 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 da d9 7c fe 4d 8b 3e 4c 89 f8 48 c1 [ 37.423089][ T9] RSP: 0018:ffffc90000097930 EFLAGS: 00010202 [ 37.429330][ T9] RAX: 0000000000000013 RBX: dffffc0000000000 RCX: ffff888100248000 [ 37.437373][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.445342][ T9] RBP: ffffc90000097968 R08: ffff888100248000 R09: 0000000000000002 [ 37.453573][ T9] R10: 0000000000000008 R11: 0000000000000000 R12: dffffc0000000000 [ 37.461647][ T9] R13: 0000000000000003 R14: 0000000000000098 R15: 0000000000000000 [ 37.469700][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.478821][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.485398][ T9] CR2: 00007f9648fc8700 CR3: 000000000640f000 CR4: 00000000003506a0 [ 37.493488][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.501486][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.509803][ T9] Call Trace: [ 37.515021][ T9] rmi_suspend+0xa3/0xf0 [ 37.519454][ T9] ? rmi_input_configured+0x4c0/0x4c0 [ 37.525222][ T9] hid_suspend+0xe5/0x610 [ 37.529578][ T9] usb_suspend_both+0x2fc/0x11c0 [ 37.534508][ T9] ? usb_suspend+0x6c0/0x6c0 [ 37.539085][ T9] usb_suspend+0x562/0x6c0 [ 37.543486][ T9] usb_dev_suspend+0x1a/0x20 [ 37.548078][ T9] ? usb_dev_complete+0x20/0x20 [ 37.553092][ T9] dpm_run_callback+0x70/0x4b0 [ 37.557853][ T9] ? pm_runtime_barrier+0x161/0x1e0 [ 37.563230][ T9] ? usb_dev_complete+0x20/0x20 [ 37.568081][ T9] __device_suspend+0xaa8/0x1240 [ 37.573029][ T9] ? async_suspend+0x1e0/0x1e0 [ 37.577790][ T9] ? slab_free_freelist_hook+0xc5/0x190 [ 37.583350][ T9] ? dpm_propagate_wakeup_to_parent+0x140/0x140 [ 37.589764][ T9] async_suspend+0x28/0x1e0 [ 37.594248][ T9] ? dpm_propagate_wakeup_to_parent+0x140/0x140 [ 37.600532][ T9] async_run_entry_fn+0xe7/0x410 [ 37.605488][ T9] ? strscpy+0x9b/0x290 [ 37.609630][ T9] process_one_work+0x6fd/0xbc0 [ 37.614466][ T9] worker_thread+0xa8e/0x13c0 [ 37.619123][ T9] kthread+0x324/0x3b0 [ 37.623184][ T9] ? worker_clr_flags+0x190/0x190 [ 37.628196][ T9] ? kthread_blkcg+0xd0/0xd0 [ 37.632763][ T9] ret_from_fork+0x1f/0x30 [ 37.637145][ T9] Modules linked in: [ 37.641468][ T9] ---[ end trace 2d9684d073c7a857 ]--- [ 37.647325][ T9] RIP: 0010:rmi_driver_suspend+0x38/0x180 [ 37.653023][ T9] Code: 83 ec 10 89 75 cc 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 da 64 42 fe 4c 89 75 d0 49 81 c6 98 00 00 00 4c 89 f0 48 c1 e8 03 <80> 3c 18 00 74 08 4c 89 f7 e8 da d9 7c fe 4d 8b 3e 4c 89 f8 48 c1 [ 37.672761][ T9] RSP: 0018:ffffc90000097930 EFLAGS: 00010202 [ 37.678836][ T9] RAX: 0000000000000013 RBX: dffffc0000000000 RCX: ffff888100248000 [ 37.686905][ T9] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 37.694871][ T9] RBP: ffffc90000097968 R08: ffff888100248000 R09: 0000000000000002 [ 37.702856][ T9] R10: 0000000000000008 R11: 0000000000000000 R12: dffffc0000000000 [ 37.710870][ T9] R13: 0000000000000003 R14: 0000000000000098 R15: 0000000000000000 [ 37.718880][ T9] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 37.727940][ T9] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 37.734519][ T9] CR2: 00007f9648fc8700 CR3: 000000000640f000 CR4: 00000000003506a0 [ 37.742499][ T9] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 37.750473][ T9] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 37.758478][ T9] Kernel panic - not syncing: Fatal exception [ 37.764776][ T9] Kernel Offset: disabled [ 37.769296][ T9] Rebooting in 86400 seconds..