last executing test programs: 3.876497597s ago: executing program 0 (id=18): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x30}}, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b80, &(0x7f0000000040)={0x0, 0x8970, 0x1f280, 0x0, 0x8000399}) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c045942824251d7d17b5191584bcd4fbe40a23424d", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1d19cb307b3472ab9cdb042d2", "643fcbb2c5a57df67d074af6e8dafe09"}}}}}}}, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0x22fe0}], 0x1}, 0x0) io_uring_enter(r0, 0x8ae, 0xfbb9, 0x1f, 0x0, 0x0) 3.061293268s ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) rmdir(&(0x7f0000000340)='./config/usb_gadget/g1/functions/phonet.usb0\x00') 3.059336489s ago: executing program 0 (id=27): getdents64(0xffffffffffffffff, &(0x7f0000000600), 0x1000) 3.007809272s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000800), 0x0) 2.931834245s ago: executing program 0 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='always\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='10000\x00', 0x6) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(0x0, 0x400000, 0xe) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 2.930519026s ago: executing program 1 (id=24): r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/ip6_flowlabel\x00') pread64(r0, &(0x7f0000000600)=""/4091, 0xffb, 0x1010000) 2.874180126s ago: executing program 1 (id=26): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}, @TCA_FQ_CE_THRESHOLD={0x8, 0xc, 0x9}]}}]}, 0x40}}, 0x0) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 2.768648365s ago: executing program 1 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000080)={0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000180)={0x1, 0x4, 0x1000, 0x1000, &(0x7f0000ff0000/0x1000)=nil, 0x0, r2}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x1000, 0x1000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000340)={0x1000, 0x1000}) (async) close(r2) 1.844414801s ago: executing program 3 (id=33): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='dev_mnt\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='dev_mnt\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='sys_mnt/block/zram0/comp_algorithm\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='lzo-rle', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='sys_mnt/block/zram0/disksize\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='1', 0x1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='dev_mnt/zram0\x00', 0x2, 0x0) write(r2, &(0x7f0000000480)="001122334455", 0x6) close(r2) 1.751183958s ago: executing program 3 (id=35): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="000000a2", @ANYRES16=0x0, @ANYBLOB="000325bd7000fddbdf25070000003c0004800900010073797a31000000002c0007800800040004000000080001001800000008000200090000000800040005000000080004000004"], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3d000000100001040300"/20, @ANYRES32=0x0, @ANYBLOB="00010000000000001c00128009000100626f6e64000000000c00028008000300030000"], 0x3c}}, 0x54) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) 1.693869189s ago: executing program 0 (id=36): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf11, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbf, 0x57, 0x5a, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) 1.693660359s ago: executing program 3 (id=37): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)=0x0) timer_settime(r1, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r2 = syz_open_dev$sg(&(0x7f0000001940), 0x0, 0x0) ioctl$SG_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000100)={'\x00', 0x3ff, 0x3, 0x5, 0xfffffffffffffeff, 0x4, r0}) ioctl$SG_IO(r2, 0x2285, &(0x7f0000000040)={0x53, 0xfffffffffffffffb, 0x6, 0x4, @scatter={0xf7, 0x0, 0x0}, &(0x7f00000000c0)="a109a81b133d", 0x0, 0x0, 0x10012, 0x0, 0x0}) setsockopt$MRT6_ADD_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd2, &(0x7f00000000c0)={{0xa, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x691]}}, 0x5c) 1.693555196s ago: executing program 1 (id=38): mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a00)='dir0/trace_marker\x00', 0x700, 0xc8) 1.634776082s ago: executing program 2 (id=39): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000002540)={0x73622a85, 0x1114, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x24, 0x0, &(0x7f0000000000)=[@request_death, @clear_death, @register_looper], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000200)="0ebc406132894962fe4f10229cd970fa80895a0ab6cabf63e0c52104572f16d388de2d4fe7c4809b5dcab54b5717be26fb12d870a9fe153b944434f40330f4912fae6ed2a57383f0e385ad2ba4d736b2"}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000001500)={0xc, 0x0, &(0x7f0000000440)=[@dead_binder_done], 0x0, 0x0, 0x0}) 1.634652202s ago: executing program 1 (id=40): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0009030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000023c0)={'sit0\x00', 0x1}) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r2, &(0x7f0000000000)=""/172, 0xac) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_usb_disconnect(0xffffffffffffffff) syz_open_dev$sg(&(0x7f00000000c0), 0x7, 0x202000) syz_usb_disconnect(r0) 1.634519791s ago: executing program 2 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x1, 0x0, 0x10000, 0x1000, &(0x7f0000000000/0x1000)=nil}) close(r1) 1.464671574s ago: executing program 2 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r0, &(0x7f0000000800), 0x0) 1.464494757s ago: executing program 3 (id=43): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=@newtaction={0x204, 0x30, 0x871a15abc695fb3d, 0x1, 0x0, {}, [{0x1f0, 0x1, [@m_tunnel_key={0xa8, 0x17, 0x0, 0x0, {{0xf}, {0x24, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_IPV4_SRC={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1a}}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}, @TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0xfffffff7}]}, {0x55, 0x6, "b36c9360a687b7b48dab4646d9ca683e6f662cdd59e47700fe58c607f2e1944e6d769925ab9d591039d5e685ae47c195900d58202e5b7c9f7144b2ec9b078940184666c5cf7d3e11408e96ff85bc8b3529"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}, @m_xt={0x94, 0xb, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_TABLE={0x24, 0x1, 'nat\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX={0x8, 0x3, 0x6}]}, {0x19, 0x6, "b0c788834491db917a9a992c9833c17cff3b436365"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}, @m_mirred={0xb0, 0x16, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x1, 0x20000000, 0x4, 0xcb8a}, 0x2}}]}, {0x61, 0x6, "a611650f26be9cd7202da28cac16d8d11fdb771f20ce375a34e3dba9f39705a673d73efe471bb4fd0d2fbed092b7ee194fceec6f36a9fd75fe5dedc20749c4f127768202979a913d3c140ae84f54b33f261beb283c20852cc5b0027f9a"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x2}}}}]}]}, 0x204}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f0000000080)={0x29, 0x0, [{0x296, 0x0, 0x2}]}) 1.464333721s ago: executing program 2 (id=44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@uexit={0x0, 0x18, 0xaaaa}], 0x18}) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys_mnt\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='always\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='0\x00', 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys_mnt/kernel/mm/transparent_hugepage/khugepaged/pages_to_scan\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='10000\x00', 0x6) mmap(0x0, 0x400000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) madvise(0x0, 0x400000, 0xe) nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0) 1.372641896s ago: executing program 3 (id=45): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB="5000000002060108000034e4000000000000000805000400000000000900020073797a3100000000050005000200000016000300686173683a6e65742c706f72742c6e65740000000500010007"], 0x50}, 0x1, 0x0, 0x0, 0x20044000}, 0x8042) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001880)=ANY=[@ANYBLOB="60000000090603000000000000000000050000000900020073797a3100000000050001000700000038000780060004404e21000005000700ff0000000c000180080001400a0101010c00028008000140e00000020c00148008000140"], 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x7, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20004080}, 0x48810) recvmsg(r2, &(0x7f000000c1c0)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f00000001c0)=""/116, 0x74}, {&(0x7f0000000380)=""/86, 0x56}, {&(0x7f0000000500)=""/145, 0x91}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/10, 0xa}, {&(0x7f0000001780)=""/69, 0x45}], 0x7}, 0x20) 664.99032ms ago: executing program 2 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./sys/kernel/config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) 601.806177ms ago: executing program 2 (id=47): mkdir(&(0x7f00000000c0)='./dev\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, &(0x7f00000001c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./dev/ubi_ctrl\x00', 0x2, 0x0) ioctl(r0, 0x40186f40, &(0x7f0000000240)="ffffffff00"/24) nanosleep(&(0x7f0000000280)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./dev/ubi0\x00', 0x2, 0x0) ioctl(r1, 0x40982f00, &(0x7f0000000300)="ffffffff0100000000001000000000000300040000000000766f6c3000"/148) mkdir(&(0x7f00000003c0)='./debugfs\x00', 0x1ff) mount(&(0x7f0000000400)=@filename='none\x00', &(0x7f0000000440)='./debugfs\x00', &(0x7f0000000480)='debugfs\x00', 0x0, &(0x7f00000004c0)) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./debugfs/ubifs/chk_index\x00', 0x2, 0x0) write(r2, &(0x7f0000000540)='1\x00', 0x2) mkdir(&(0x7f0000000580)='./file0\x00', 0x1ff) mount(&(0x7f00000005c0)=@filename='ubi0_0\x00', &(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='ubifs\x00', 0x0, &(0x7f0000000680)) 543.891391ms ago: executing program 0 (id=48): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0xc00, 0x0) syz_usb_connect$midi(0x0, 0xbd, &(0x7f00000003c0)=ANY=[@ANYBLOB="120101020000001044060f804000010203010902ab00010101200209040000060103303a0624020144040f2403000a0408010101020603029c06240207050609050d00080081b6051125010df0552f91ffb555f13d7eb3a44a09050604200002650404250100090500102000ff590005"], &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) openat$sequencer2(0xffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000009f40), 0x0, 0x4000054) r5 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 0s ago: executing program 3 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='dummy_hcd.0\x00', 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '[localhost]:30319' (ED25519) to the list of known hosts. [ 48.283633][ T42] kauditd_printk_skb: 20 callbacks suppressed [ 48.283649][ T42] audit: type=1400 audit(1785161666.650:141): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.296730][ T42] audit: type=1400 audit(1785161666.670:142): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.299298][ T5721] cgroup: Unknown subsys name 'net' [ 48.309785][ T42] audit: type=1400 audit(1785161666.680:143): avc: denied { unmount } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.489555][ T5721] cgroup: Unknown subsys name 'cpuset' [ 48.495973][ T5721] cgroup: Unknown subsys name 'rlimit' [ 48.709192][ T42] audit: type=1400 audit(1785161667.080:144): avc: denied { setattr } for pid=5721 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=850 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.718377][ T42] audit: type=1400 audit(1785161667.080:145): avc: denied { create } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.726523][ T42] audit: type=1400 audit(1785161667.080:146): avc: denied { write } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.733089][ T42] audit: type=1400 audit(1785161667.090:147): avc: denied { read } for pid=5721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.739579][ T42] audit: type=1400 audit(1785161667.090:148): avc: denied { mounton } for pid=5721 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.748494][ T42] audit: type=1400 audit(1785161667.090:149): avc: denied { mount } for pid=5721 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 48.755880][ T42] audit: type=1400 audit(1785161667.100:150): avc: denied { read } for pid=5448 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 48.772816][ T5723] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 49.616350][ T5721] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.458256][ T42] kauditd_printk_skb: 7 callbacks suppressed [ 53.458268][ T42] audit: type=1400 audit(1785161671.820:158): avc: denied { execmem } for pid=5730 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 53.629455][ T42] audit: type=1400 audit(1785161672.000:159): avc: denied { create } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.638952][ T42] audit: type=1400 audit(1785161672.000:160): avc: denied { read write } for pid=5734 comm="syz-executor" name="vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.651113][ T42] audit: type=1400 audit(1785161672.000:161): avc: denied { open } for pid=5734 comm="syz-executor" path="/dev/vhci" dev="devtmpfs" ino=1292 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 53.660328][ T42] audit: type=1400 audit(1785161672.010:162): avc: denied { ioctl } for pid=5734 comm="syz-executor" path="socket:[7333]" dev="sockfs" ino=7333 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.669115][ T5742] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.676102][ T5743] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.685102][ T5745] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.685796][ T5747] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.687990][ T5745] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.691801][ T5747] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.693570][ T5745] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.696568][ T5747] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.698590][ T5745] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.701298][ T5747] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.703545][ T5745] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.705560][ T5747] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.708596][ T5745] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.709624][ T5751] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.711381][ T5750] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.712381][ T5747] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.712726][ T5751] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.713321][ T5747] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.713558][ T5747] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.724050][ T42] audit: type=1400 audit(1785161672.090:163): avc: denied { read } for pid=5735 comm="syz-executor" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.728956][ T5742] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.730167][ T42] audit: type=1400 audit(1785161672.090:164): avc: denied { open } for pid=5735 comm="syz-executor" path="net:[4026531833]" dev="nsfs" ino=4026531833 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 53.750520][ T42] audit: type=1400 audit(1785161672.090:165): avc: denied { mounton } for pid=5735 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 53.758928][ T42] audit: type=1400 audit(1785161672.100:166): avc: denied { module_request } for pid=5735 comm="syz-executor" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 53.771615][ T42] audit: type=1400 audit(1785161672.140:167): avc: denied { sys_module } for pid=5740 comm="syz-executor" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 54.328047][ T5740] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.331773][ T5740] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.335327][ T5740] bridge_slave_0: entered allmulticast mode [ 54.339253][ T5740] bridge_slave_0: entered promiscuous mode [ 54.368357][ T5740] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.371604][ T5740] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.376012][ T5740] bridge_slave_1: entered allmulticast mode [ 54.380133][ T5740] bridge_slave_1: entered promiscuous mode [ 54.455341][ T5740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.485516][ T5740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.497807][ T5746] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.500598][ T5746] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.502982][ T5746] bridge_slave_0: entered allmulticast mode [ 54.505811][ T5746] bridge_slave_0: entered promiscuous mode [ 54.534242][ T5740] team0: Port device team_slave_0 added [ 54.536430][ T5746] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.539318][ T5746] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.541713][ T5746] bridge_slave_1: entered allmulticast mode [ 54.544503][ T5746] bridge_slave_1: entered promiscuous mode [ 54.554683][ T5734] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.557127][ T5734] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.559447][ T5734] bridge_slave_0: entered allmulticast mode [ 54.562181][ T5734] bridge_slave_0: entered promiscuous mode [ 54.565526][ T5734] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.567905][ T5734] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.571002][ T5734] bridge_slave_1: entered allmulticast mode [ 54.574954][ T5734] bridge_slave_1: entered promiscuous mode [ 54.591989][ T5740] team0: Port device team_slave_1 added [ 54.642306][ T5746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.655563][ T5735] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.657851][ T5735] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.660223][ T5735] bridge_slave_0: entered allmulticast mode [ 54.662795][ T5735] bridge_slave_0: entered promiscuous mode [ 54.666210][ T5735] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.668455][ T5735] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.671259][ T5735] bridge_slave_1: entered allmulticast mode [ 54.674448][ T5735] bridge_slave_1: entered promiscuous mode [ 54.677282][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.679474][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.687323][ T5740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.692696][ T5740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.695968][ T5740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.703904][ T5740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.708600][ T5746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.721060][ T5734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.764020][ T5735] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.769035][ T5734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.774014][ T5746] team0: Port device team_slave_0 added [ 54.778457][ T5735] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.798589][ T5746] team0: Port device team_slave_1 added [ 54.821385][ T5734] team0: Port device team_slave_0 added [ 54.830364][ T5734] team0: Port device team_slave_1 added [ 54.855550][ T5735] team0: Port device team_slave_0 added [ 54.875280][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.878236][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.888878][ T5746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.895294][ T5735] team0: Port device team_slave_1 added [ 54.900593][ T5740] hsr_slave_0: entered promiscuous mode [ 54.904154][ T5740] hsr_slave_1: entered promiscuous mode [ 54.919214][ T5746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.922102][ T5746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.932597][ T5746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.952739][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.955584][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.963590][ T5734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.976752][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.978932][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 54.987606][ T5735] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.992174][ T5734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.994853][ T5734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.004442][ T5734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.030148][ T5735] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.033045][ T5735] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 55.043923][ T5735] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.092775][ T5734] hsr_slave_0: entered promiscuous mode [ 55.095928][ T5734] hsr_slave_1: entered promiscuous mode [ 55.098786][ T5734] debugfs: 'hsr0' already exists in 'hsr' [ 55.100920][ T5734] Cannot create hsr debugfs directory [ 55.163401][ T5746] hsr_slave_0: entered promiscuous mode [ 55.165791][ T5746] hsr_slave_1: entered promiscuous mode [ 55.168111][ T5746] debugfs: 'hsr0' already exists in 'hsr' [ 55.170005][ T5746] Cannot create hsr debugfs directory [ 55.181151][ T5735] hsr_slave_0: entered promiscuous mode [ 55.184264][ T5735] hsr_slave_1: entered promiscuous mode [ 55.187057][ T5735] debugfs: 'hsr0' already exists in 'hsr' [ 55.189332][ T5735] Cannot create hsr debugfs directory [ 55.500188][ T5740] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.508321][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.510898][ T5740] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.515833][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.519412][ T5740] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.523670][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.535241][ T5740] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.539157][ T5740] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.584184][ T5735] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.593894][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.598146][ T5735] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.603697][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.606921][ T5735] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.612133][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.617522][ T5735] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.621538][ T5735] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.686907][ T5734] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.692730][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.696474][ T5734] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.702795][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.706594][ T5734] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.712738][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.717127][ T5734] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.722641][ T5734] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.735469][ T5095] Bluetooth: hci1: command tx timeout [ 55.808631][ T5746] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 55.813089][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 55.814672][ T5095] Bluetooth: hci0: command tx timeout [ 55.814889][ T64] Bluetooth: hci3: command tx timeout [ 55.815033][ T64] Bluetooth: hci2: command tx timeout [ 55.816229][ T5746] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 55.823911][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 55.827160][ T5746] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 55.830781][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 55.841841][ T5746] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 55.846133][ T5746] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 55.861484][ T5740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.892367][ T5740] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.908572][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.911300][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.919952][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.923010][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.933381][ T5735] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.960850][ T5735] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.982121][ T5734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.996021][ T162] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.998368][ T162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.016893][ T162] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.019134][ T162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.041753][ T5734] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.060763][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.063662][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.073980][ T1172] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.076209][ T1172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.088121][ T5746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.123506][ T5746] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.150468][ T1172] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.152727][ T1172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.166987][ T89] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.169255][ T89] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.342401][ T5740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.380344][ T5735] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.392041][ T5740] veth0_vlan: entered promiscuous mode [ 56.411276][ T5740] veth1_vlan: entered promiscuous mode [ 56.440456][ T5735] veth0_vlan: entered promiscuous mode [ 56.446822][ T5735] veth1_vlan: entered promiscuous mode [ 56.455029][ T5746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.471480][ T5740] veth0_macvtap: entered promiscuous mode [ 56.482180][ T5740] veth1_macvtap: entered promiscuous mode [ 56.490648][ T5735] veth0_macvtap: entered promiscuous mode [ 56.507710][ T5734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.516026][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.522731][ T5735] veth1_macvtap: entered promiscuous mode [ 56.531780][ T5740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.558146][ T5746] veth0_vlan: entered promiscuous mode [ 56.561425][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.570193][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.573405][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.590549][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.594821][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.601026][ T5735] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.619959][ T5746] veth1_vlan: entered promiscuous mode [ 56.627250][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.631238][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.648396][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.674805][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.683429][ T5734] veth0_vlan: entered promiscuous mode [ 56.688596][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.691705][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.700110][ T5734] veth1_vlan: entered promiscuous mode [ 56.747340][ T5746] veth0_macvtap: entered promiscuous mode [ 56.747674][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.752145][ T5746] veth1_macvtap: entered promiscuous mode [ 56.752749][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.785881][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.788711][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.792338][ T5734] veth0_macvtap: entered promiscuous mode [ 56.802402][ T5734] veth1_macvtap: entered promiscuous mode [ 56.826219][ T5740] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 56.829158][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.831931][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.835050][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 56.846281][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.849360][ T5746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.869397][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.874631][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.879733][ T5734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.895003][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.900401][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.918002][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.921743][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.928091][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.947618][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.984477][ T89] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 56.987297][ T89] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.033285][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.039114][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.048725][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.054987][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.072815][ T89] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.075632][ T89] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.307705][ T5902] device ioctl magic numbers don't match! Did you rebuild pvfs2-client-core/libpvfs2? [cmd c0189379, magic 93 != 6b] [ 57.347854][ T5886] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 57.477376][ T5912] zram0: detected capacity change from 0 to 8 [ 57.515541][ T5886] usb 8-1: Using ep0 maxpacket: 32 [ 57.520338][ T5886] usb 8-1: too many endpoints for config 0 interface 0 altsetting 252: 223, using maximum allowed: 30 [ 57.523985][ T5886] usb 8-1: config 0 interface 0 altsetting 252 has 1 endpoint descriptor, different from the interface descriptor's value: 223 [ 57.528167][ T5886] usb 8-1: config 0 interface 0 has no altsetting 0 [ 57.530233][ T5886] usb 8-1: New USB device found, idVendor=056a, idProduct=00c5, bcdDevice= 0.00 [ 57.533231][ T5886] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.538147][ T5886] usb 8-1: config 0 descriptor?? [ 57.614390][ T5837] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 57.638365][ T5917] FAULT_INJECTION: forcing a failure. [ 57.638365][ T5917] name fail_futex, interval 1, probability 0, space 0, times 1 [ 57.646863][ T5917] CPU: 1 UID: 0 PID: 5917 Comm: syz.0.13 Not tainted syzkaller #0 PREEMPT(full) [ 57.646883][ T5917] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 57.646890][ T5917] Call Trace: [ 57.646894][ T5917] [ 57.646898][ T5917] dump_stack_lvl+0x100/0x190 [ 57.646918][ T5917] should_fail_ex.cold+0x5/0xa [ 57.646943][ T5917] get_futex_key+0x1d2/0x14f0 [ 57.646962][ T5917] ? __pfx_get_futex_key+0x10/0x10 [ 57.646978][ T5917] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 57.646990][ T5917] ? hrtimer_try_to_cancel.part.0+0x194/0x600 [ 57.647010][ T5917] futex_wake+0xf4/0x5e0 [ 57.647020][ T5917] ? futex_wait+0x11e/0x370 [ 57.647032][ T5917] ? __pfx_futex_wake+0x10/0x10 [ 57.647049][ T5917] do_futex+0x2b2/0x440 [ 57.647065][ T5917] ? __pfx_do_futex+0x10/0x10 [ 57.647082][ T5917] ? ktime_get+0x22c/0x320 [ 57.647094][ T5917] ? lockdep_hardirqs_on+0x78/0x100 [ 57.647114][ T5917] __x64_sys_futex+0x34f/0x4d0 [ 57.647132][ T5917] ? __pfx___x64_sys_futex+0x10/0x10 [ 57.647154][ T5917] do_syscall_64+0x115/0x870 [ 57.647166][ T5917] ? clear_bhb_loop+0x40/0x90 [ 57.647179][ T5917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 57.647190][ T5917] RIP: 0033:0x7ff2e699de99 [ 57.647200][ T5917] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.647210][ T5917] RSP: 002b:00007ffed3def998 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 57.647221][ T5917] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007ff2e699de99 [ 57.647228][ T5917] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007ff2e6c25fa8 [ 57.647235][ T5917] RBP: 00000000000000f7 R08: 0000000000000001 R09: 0000000000000000 [ 57.647241][ T5917] R10: 00007ff2e6c25fa0 R11: 0000000000000246 R12: 0000000000000000 [ 57.647247][ T5917] R13: 00007ff2e6c25fac R14: 00007ff2e6c25fa8 R15: 00007ff2e6c25fa0 [ 57.647260][ T5917] [ 57.826001][ T5095] Bluetooth: hci1: command tx timeout [ 57.894638][ T5095] Bluetooth: hci0: command tx timeout [ 57.905377][ T5095] Bluetooth: hci2: command tx timeout [ 57.905397][ T5751] Bluetooth: hci3: command tx timeout [ 58.014446][ T847] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 58.178460][ T847] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 58.182200][ T847] usb 7-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 58.191214][ T847] usb 7-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 1.00 [ 58.194397][ T847] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 58.197143][ T847] usb 7-1: Product: syz [ 58.198541][ T847] usb 7-1: Manufacturer: syz [ 58.200077][ T847] usb 7-1: SerialNumber: syz [ 58.209586][ T847] ark3116 7-1:1.0: required endpoints missing [ 58.416191][ T5822] usb 7-1: USB disconnect, device number 2 [ 58.524916][ T42] kauditd_printk_skb: 84 callbacks suppressed [ 58.524929][ T42] audit: type=1400 audit(1785161676.900:252): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 58.533510][ T42] audit: type=1400 audit(1785161676.900:253): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 58.541525][ T42] audit: type=1400 audit(1785161676.910:254): avc: denied { unmount } for pid=5734 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1 [ 59.270361][ C2] ata1: illegal qc_active transition (00000000->00000100) [ 59.379598][ T5942] zram: Can't change algorithm for initialized device [ 59.384189][ T5942] zram: Cannot change disksize for initialized device [ 59.425739][ T42] audit: type=1400 audit(1785161677.790:255): avc: denied { write } for pid=5943 comm="syz.1.19" name="functions" dev="configfs" ino=11348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.438734][ T42] audit: type=1400 audit(1785161677.800:256): avc: denied { write } for pid=5943 comm="syz.1.19" name="functions" dev="configfs" ino=11348 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 59.499400][ T42] audit: type=1400 audit(1785161677.870:257): avc: denied { write } for pid=5951 comm="syz.1.24" name="ip6_flowlabel" dev="proc" ino=4026533113 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 59.552144][ T42] audit: type=1400 audit(1785161677.920:258): avc: denied { create } for pid=5956 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.563182][ T42] audit: type=1400 audit(1785161677.930:259): avc: denied { write } for pid=5956 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.576149][ T42] audit: type=1400 audit(1785161677.930:260): avc: denied { connect } for pid=5956 comm="syz.1.26" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 59.588006][ T42] audit: type=1400 audit(1785161677.930:261): avc: denied { name_connect } for pid=5956 comm="syz.1.26" dest=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 59.605544][ T1134] ata1: SATA link up 1.5 Gbps (SStatus 113 SControl 300) [ 59.609756][ T1134] ata1.00: configured for UDMA/100 [ 59.894414][ T5095] Bluetooth: hci1: command tx timeout [ 59.974861][ T5095] Bluetooth: hci3: command tx timeout [ 60.097439][ T5886] usbhid 8-1:0.0: can't add hid device: -71 [ 60.099391][ T5886] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 60.104862][ T5886] usb 8-1: USB disconnect, device number 2 [ 60.497096][ T5964] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 60.501102][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.510118][ T5964] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 60.518924][ T5964] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 60.524646][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.534108][ T5964] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 60.542984][ T5964] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 60.546168][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.551387][ T5964] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 60.555473][ T5964] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 60.558000][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.563429][ T5964] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 60.638464][ T6024] zram: Can't change algorithm for initialized device [ 60.642459][ T6024] zram: Cannot change disksize for initialized device [ 60.945162][ T55] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 61.025714][ T847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 61.097980][ T55] usb 5-1: Using ep0 maxpacket: 8 [ 61.101788][ T55] usb 5-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.00 [ 61.108292][ T55] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 61.174668][ T847] usb 6-1: Using ep0 maxpacket: 32 [ 61.178339][ T847] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 61.184283][ T847] usb 6-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 61.188791][ T847] usb 6-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 61.192071][ T847] usb 6-1: Product: syz [ 61.193769][ T847] usb 6-1: Manufacturer: syz [ 61.195741][ T847] usb 6-1: SerialNumber: syz [ 61.200385][ T847] usb 6-1: config 0 descriptor?? [ 61.204080][ T6039] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 61.209182][ T847] hub 6-1:0.0: bad descriptor, ignoring hub [ 61.211884][ T847] hub 6-1:0.0: probe with driver hub failed with error -5 [ 61.318137][ T55] usb 5-1: string descriptor 0 read error: -71 [ 61.320469][ T55] ldusb 5-1:1.0: Interrupt out endpoint not found (using control endpoint instead) [ 61.327274][ T55] ldusb 5-1:1.0: LD USB Device #1 now attached to major 180 minor 1 [ 61.334977][ T55] usb 5-1: USB disconnect, device number 2 [ 61.340349][ T55] ldusb 5-1:1.0: LD USB Device #1 now disconnected [ 61.734661][ T5095] Bluetooth: hci0: command 0x0419 tx timeout [ 62.115732][ T55] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 62.255455][ T231] raw-gadget.1 gadget.1: failed to queue suspend event [ 62.264463][ T55] usb 5-1: Using ep0 maxpacket: 16 [ 62.268536][ T55] usb 5-1: unable to get BOS descriptor or descriptor too short [ 62.271776][ T6054] raw-gadget.1 gadget.1: failed to queue disconnect event [ 62.272685][ T55] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 62.278639][ T55] usb 5-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 62.282806][ T55] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 6 [ 62.287836][ T847] usb 6-1: USB disconnect, device number 3 [ 62.289607][ T55] usb 5-1: string descriptor 0 read error: -22 [ 62.292680][ T55] usb 5-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 62.296310][ T55] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 62.322818][ T55] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 62.325849][ T55] usb 5-1: MIDIStreaming interface descriptor not found [ 62.354768][ T6051] Set syz1 is full, maxelem 65536 reached [ 62.421521][ T6061] dummy_hcd dummy_hcd.0: remove, state 1 [ 62.427571][ T6061] usb usb5: USB disconnect, device number 1 [ 62.431884][ T6061] usb 5-1: USB disconnect, device number 3 [ 62.500847][ T6061] dummy_hcd dummy_hcd.0: stopped [ 62.502496][ T6061] dummy_hcd dummy_hcd.0: USB bus 5 deregistered [ 62.516310][ T6057] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN NOPTI [ 62.519888][ T6057] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 62.522572][ T6057] CPU: 3 UID: 0 PID: 6057 Comm: syz.0.48 Not tainted syzkaller #0 PREEMPT(full) [ 62.525249][ T6057] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014 [ 62.528160][ T6057] RIP: 0010:set_link_state+0x27/0xc70 [ 62.529765][ T6057] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 ea 70 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 62.535967][ T6057] RSP: 0018:ffffc90004f67b88 EFLAGS: 00010046 [ 62.537782][ T6057] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d0fe33 [ 62.540117][ T6057] RDX: 0000000000000000 RSI: ffffffff87d0ef56 RDI: 0000000000000000 [ 62.542490][ T6057] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 62.544863][ T6057] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 62.547189][ T6057] R13: ffff88802c438000 R14: 0000000000000000 R15: ffff88802c438c00 [ 62.549564][ T6057] FS: 000055557a12a500(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 62.552150][ T6057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.554092][ T6057] CR2: 000000110c4470a5 CR3: 0000000059fea000 CR4: 0000000000352ef0 [ 62.556267][ T6057] Call Trace: [ 62.557294][ T6057] [ 62.558179][ T6057] ? __pfx_dummy_pullup+0x10/0x10 [ 62.559716][ T6057] dummy_pullup+0xf3/0x170 [ 62.561031][ T6057] ? __pfx_dummy_pullup+0x10/0x10 [ 62.562540][ T6057] usb_gadget_disconnect_locked+0x142/0x4e0 [ 62.564338][ T6057] gadget_unbind_driver+0xd8/0x4f0 [ 62.566462][ T6057] ? __pfx_gadget_unbind_driver+0x10/0x10 [ 62.568728][ T6057] device_remove+0xcb/0x180 [ 62.570584][ T6057] device_release_driver_internal+0x44e/0x620 [ 62.573043][ T6057] driver_detach+0xd8/0x1b0 [ 62.574753][ T6057] bus_remove_driver+0x13b/0x2e0 [ 62.576506][ T6057] driver_unregister+0x76/0xb0 [ 62.578211][ T6057] usb_gadget_unregister_driver+0x49/0x70 [ 62.580261][ T6057] raw_release+0x19b/0x260 [ 62.581857][ T6057] ? __pfx_raw_release+0x10/0x10 [ 62.583543][ T6057] __fput+0x3ff/0xb50 [ 62.584929][ T6057] task_work_run+0x150/0x240 [ 62.586501][ T6057] ? __pfx_task_work_run+0x10/0x10 [ 62.588226][ T6057] exit_to_user_mode_loop+0x1d8/0x6f0 [ 62.590012][ T6057] ? rcu_is_watching+0x12/0xc0 [ 62.591733][ T6057] do_syscall_64+0x666/0x870 [ 62.593408][ T6057] ? clear_bhb_loop+0x40/0x90 [ 62.595078][ T6057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.597184][ T6057] RIP: 0033:0x7ff2e699de99 [ 62.598756][ T6057] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 62.605378][ T6057] RSP: 002b:00007ffed3def998 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 62.608325][ T6057] RAX: 0000000000000000 RBX: 00007ffed3defa80 RCX: 00007ff2e699de99 [ 62.611088][ T6057] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 62.613769][ T6057] RBP: 000000000000f12c R08: 0000000000000001 R09: 0000000000000000 [ 62.616602][ T6057] R10: 0000001b32220000 R11: 0000000000000246 R12: 00007ffed3defac0 [ 62.619374][ T6057] R13: 00007ff2e6c25fac R14: 000000000000f3f8 R15: 00007ff2e6c25fa0 [ 62.622190][ T6057] [ 62.623314][ T6057] Modules linked in: [ 62.624771][ T6057] ---[ end trace 0000000000000000 ]--- [ 62.626646][ T6057] RIP: 0010:set_link_state+0x27/0xc70 [ 62.628582][ T6057] Code: 90 90 90 41 57 41 56 41 55 41 54 55 53 48 89 fb 48 83 ec 18 e8 ea 70 39 fa 48 89 da 48 b8 00 00 00 00 00 fc ff df 48 c1 ea 03 <80> 3c 02 00 0f 85 35 0b 00 00 4c 8d ab a3 00 00 00 48 8b 2b 48 b8 [ 62.635315][ T6057] RSP: 0018:ffffc90004f67b88 EFLAGS: 00010046 [ 62.637369][ T6057] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffffff87d0fe33 [ 62.640112][ T6057] RDX: 0000000000000000 RSI: ffffffff87d0ef56 RDI: 0000000000000000 [ 62.642834][ T6057] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 62.645466][ T6057] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 62.648251][ T6057] R13: ffff88802c438000 R14: 0000000000000000 R15: ffff88802c438c00 [ 62.651014][ T6057] FS: 000055557a12a500(0000) GS:ffff8880d60dc000(0000) knlGS:0000000000000000 [ 62.654179][ T6057] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.656525][ T6057] CR2: 000000110c4470a5 CR3: 0000000059fea000 CR4: 0000000000352ef0 [ 62.659302][ T6057] Kernel panic - not syncing: Fatal exception [ 62.662074][ T6057] Kernel Offset: disabled [ 62.663360][ T6057] Rebooting in 86400 seconds..