last executing test programs: 30.060471431s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ed) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x0104\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ed) symlinkat(&(0x7f0000000300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='dummy_udc.0\n', 0xc) close(r2) nanosleep(&(0x7f0000000400)={0x2}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='\n', 0x1) close(r3) 29.945134164s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/split_huge_pages\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./test_file\x00', 0x42, 0x1ff) ftruncate(r1, 0x2000000) mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x11, r1, 0x0) madvise(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0xe) write(r1, &(0x7f0000000000), 0x2000000) madvise(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x19) write(r0, &(0x7f0000000180)='./test_file,0x0,0x1000,0,-1\x00', 0x20) 29.690015059s ago: executing program 1 (id=11): r0 = syz_usb_connect(0x3, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000403419060700000102030109022f0001010080320904000003ff000000070581020002000705020200020007058303400001"], 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write(r0, 0x81, 0x4, &(0x7f0000000200)='`A`B') nanosleep(&(0x7f0000000300)={0x2}, 0x0) 29.214058202s ago: executing program 3 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='ehci-platform\x00', 0xe) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='serial8250\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='ehci-pci\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 29.132838124s ago: executing program 3 (id=13): r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xaf0, 0x6711, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 26.847211979s ago: executing program 4 (id=28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000200)={[{0x1, 0x2, 0x0, 0x0, 0x0, 0x2}]}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@in_dx={0x69, 0x20, {0x40, 0x1}}], 0x20}) ioctl$KVM_RUN(r3, 0xae80, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 26.813649289s ago: executing program 2 (id=30): syz_mount_image$tmpfs(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='rescan\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 26.80384608s ago: executing program 2 (id=31): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000100)='./mysys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000100)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/class/i2c-adapter/i2c-0/new_device\x00', 0x1, 0x0) 26.671315973s ago: executing program 4 (id=32): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSBRK(r0, 0x5409, 0x1) 26.671015223s ago: executing program 4 (id=33): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000300)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x5}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 26.631045404s ago: executing program 1 (id=34): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 26.620336674s ago: executing program 1 (id=35): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1, 0x4, 0x4, 0x400, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x4, 0x400, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x17, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0x2, &(0x7f0000000400)=@raw=[@generic={0xb7}, @exit], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) 26.419298749s ago: executing program 1 (id=36): syz_usb_connect(0x3, 0x32, &(0x7f0000000b00)=ANY=[@ANYBLOB="1201000200000040c30b01000100000000010902200001010080320904000002ffffff000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/ttyUSB0\x00', 0x2, 0x0) nanosleep(&(0x7f0000000c00)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/ttyUSB0\x00', 0x2, 0x0) 26.101393406s ago: executing program 3 (id=37): r0 = syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000202000040257d15a400010102030109022300010100c001090400000102090000052400100105241400020705810310000a"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0xb0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="a101000000000000") syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000080)="a101000000000000") read$char_usb(r1, &(0x7f0000000200), 0x100) 25.851578823s ago: executing program 4 (id=38): mmap(0x0, 0x4000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x10000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x1000, 0x1000, &(0x7f0000001000)=nil}) getpid() 25.791273654s ago: executing program 4 (id=39): syz_usb_connect(0x1, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040fd0b06000001010200010902200001010080fa0904000002ffff00000705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 25.507012311s ago: executing program 0 (id=42): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303080001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, "c0c0c0c0c0c0"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000002000)='eth0\x00'/39) 25.351359945s ago: executing program 2 (id=43): syz_usb_connect(0x0, 0x32, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4e6, 0x1010, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000080)=[{}], 0x1, 0x0) 24.027967897s ago: executing program 0 (id=44): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) ioctl$TIOCCBRK(r0, 0x5428) ioctl$TCSBRK(r0, 0x5409, 0x1) 23.971336159s ago: executing program 0 (id=45): r0 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/ttyGS0\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) 23.971137639s ago: executing program 0 (id=46): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={&(0x7f00000001c0), 0xc, &(0x7f0000000200)={&(0x7f0000000240)=@newtfilter={0x34, 0x2c, 0x401, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x1}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={&(0x7f00000002c0), 0xc, &(0x7f0000000300)={&(0x7f0000000340)=@deltfilter={0x34, 0x2d, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {}, {0xfff1, 0xffff}, {0x3, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000003c0), 0xc, &(0x7f0000000400)={&(0x7f0000000440)=@delqdisc={0x30, 0x25, 0x1, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x1, {0x0, 0xffff}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0xbebc200}, 0x0) 23.869495451s ago: executing program 1 (id=47): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='stm32g0-typec 0x35\n', 0x13) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='stm32g0-typec 0x35\n', 0x13) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='freeze\n\x00'/23, 0x7) close(r3) 23.798886842s ago: executing program 0 (id=48): syz_usb_connect(0x0, 0x40, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040cd06210100010102030109022e00010100a0320904000004ff00000007058102400000070501024000000705020240000007058203400001"], 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000080)='./ttyUSB0\x00', 0x2, 0x0) 23.667070206s ago: executing program 2 (id=49): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x74, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}]}, 0x74}}, 0x0) sendmsg$nl_generic(0x999, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x34, 0x1c, 0x1, 0x0, 0x0, {0x14}, [@typed={0xc, 0x99, 0x0, 0x0, @u64=0x1}, @typed={0xa, 0x6, 0x0, 0x0, @binary="001122334455"}, @typed={0x8, 0x139, 0x0, 0x0, @u32=0x1}]}, 0x34}}, 0x0) 23.666902256s ago: executing program 2 (id=50): r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000040)=@urb_type_interrupt={0x1, {0x81}, 0x0, 0x0, &(0x7f0000000080), 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000040)) 23.666817606s ago: executing program 2 (id=51): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') syz_open_dev$usbfs(&(0x7f0000000000), 0x0, 0x0) 23.273224285s ago: executing program 0 (id=52): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000650)=""/64, 0x40) close(r0) 23.06563425s ago: executing program 3 (id=53): syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040030431c60000010200010902120001010080320904000000000000000000"], 0x0) nanosleep(&(0x7f0000000080)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='stm32g0-typec 0x35\n', 0x13) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-3/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='stm32g0-typec 0x35\n', 0x13) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/i2c/devices/i2c-4/new_device\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='stm32g0-typec 0x35\n', 0x13) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000340)='freezzzzz', 0x6) close(r3) 22.775172267s ago: executing program 4 (id=54): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0xc, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000300), 0xd, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000400), 0xe, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000500), 0xf, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000000600), 0x10, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000000700), 0x11, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000000800), 0x12, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) ioctl$USBDEVFS_RESET(r2, 0x5514) ioctl$USBDEVFS_RESET(r3, 0x5514) ioctl$USBDEVFS_RESET(r4, 0x5514) ioctl$USBDEVFS_RESET(r5, 0x5514) ioctl$USBDEVFS_RESET(r6, 0x5514) ioctl$USBDEVFS_RESET(r7, 0x5514) ioctl$USBDEVFS_RESET(r8, 0x5514) 0s ago: executing program 32 (id=52): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040d81201000001010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read(r0, &(0x7f0000000650)=""/64, 0x40) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.6' (ED25519) to the list of known hosts. [ 21.135182][ T30] audit: type=1400 audit(1786957661.827:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.136208][ T277] cgroup: Unknown subsys name 'net' [ 21.158057][ T30] audit: type=1400 audit(1786957661.827:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.185870][ T30] audit: type=1400 audit(1786957661.847:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.186018][ T277] cgroup: Unknown subsys name 'devices' [ 21.326458][ T277] cgroup: Unknown subsys name 'hugetlb' [ 21.332082][ T277] cgroup: Unknown subsys name 'rlimit' [ 21.468426][ T30] audit: type=1400 audit(1786957662.157:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.491839][ T30] audit: type=1400 audit(1786957662.157:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.516842][ T30] audit: type=1400 audit(1786957662.157:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.522913][ T279] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.549630][ T30] audit: type=1400 audit(1786957662.237:70): avc: denied { relabelto } for pid=279 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.576979][ T30] audit: type=1400 audit(1786957662.237:71): avc: denied { write } for pid=279 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.604792][ T30] audit: type=1400 audit(1786957662.297:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.605203][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.630788][ T30] audit: type=1400 audit(1786957662.297:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.235329][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.242393][ T285] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.250002][ T285] device bridge_slave_0 entered promiscuous mode [ 22.258412][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.265676][ T285] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.273044][ T285] device bridge_slave_1 entered promiscuous mode [ 22.360873][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.368049][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.375652][ T287] device bridge_slave_0 entered promiscuous mode [ 22.382293][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.389531][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.397107][ T286] device bridge_slave_0 entered promiscuous mode [ 22.404023][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.411275][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.418807][ T286] device bridge_slave_1 entered promiscuous mode [ 22.425322][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.432360][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.439844][ T287] device bridge_slave_1 entered promiscuous mode [ 22.499046][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.506246][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.513633][ T289] device bridge_slave_0 entered promiscuous mode [ 22.523231][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.530310][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.537935][ T289] device bridge_slave_1 entered promiscuous mode [ 22.578625][ T285] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.585717][ T285] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.592985][ T285] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.600034][ T285] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.620661][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.627876][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.635369][ T288] device bridge_slave_0 entered promiscuous mode [ 22.654056][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.661327][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.668796][ T288] device bridge_slave_1 entered promiscuous mode [ 22.760237][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.767324][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.774616][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.781749][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.795787][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.803149][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.810917][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.818306][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.827261][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.834994][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.865651][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.873892][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.880980][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.888436][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.896855][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.903893][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.931336][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.939375][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.959322][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.974178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.983135][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.991395][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.998458][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.006137][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.014323][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.021395][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.028969][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.045013][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.053231][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.060827][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.068579][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.092563][ T285] device veth0_vlan entered promiscuous mode [ 23.099600][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.108472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.116715][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.125756][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.134034][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.141109][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.148532][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.156901][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.163918][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.171615][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.179918][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.186964][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.197160][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.206164][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.214724][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.222889][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.230300][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.239531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.248296][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.262301][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.270796][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.278585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.287165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.296908][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.304029][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.311664][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.320151][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.328739][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.335834][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.343470][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.358576][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.366684][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.378703][ T286] device veth0_vlan entered promiscuous mode [ 23.385798][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.393326][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.401309][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.409482][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.417584][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.425698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.435721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.443889][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.457716][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.465923][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.473814][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.482087][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.490397][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.498612][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.506698][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.514945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.533994][ T285] device veth1_macvtap entered promiscuous mode [ 23.544815][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.552768][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.561424][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.570155][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.579161][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.592714][ T289] device veth0_vlan entered promiscuous mode [ 23.602076][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.610057][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.618339][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.626472][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.634354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.641993][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.649964][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.657666][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.669527][ T286] device veth1_macvtap entered promiscuous mode [ 23.676148][ T288] device veth0_vlan entered promiscuous mode [ 23.685133][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.693286][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.701790][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.709705][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.718237][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.726567][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.734857][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.754332][ T287] device veth0_vlan entered promiscuous mode [ 23.763980][ T289] device veth1_macvtap entered promiscuous mode [ 23.771304][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.779833][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.788893][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.797556][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.805891][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.813788][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.821952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.830265][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.838764][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.846955][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.855243][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.862708][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.880925][ T285] request_module fs-gadgetfs succeeded, but still no fs? [ 23.883674][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.897666][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.906301][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.915395][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.924439][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.932910][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.941923][ T287] device veth1_macvtap entered promiscuous mode [ 23.958989][ T288] device veth1_macvtap entered promiscuous mode 0000 80861237 0 0 0 0 0 0 [ 23.980733][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 0 [ 23.991006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 0 [ 23.999603][ T314] file system registered 0 0 0 0 0 0 0 [ 24.013129][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 0008 80867110 0 0 [ 24.025495][ T314] read descriptors 0 [ 24.030896][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready 0 [ 24.031072][ T314] udc dummy_udc.0: failed to start g1: -19 0 [ 24.040112][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready 0 [ 24.056736][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 0 [ 24.065804][ T285] ffs_data_put(): freeing 0 0 0 0 0 0 0 0 000b 80867113 9 0 0 0 0 0 0 0 0 0 [ 24.097434][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 0 0 [ 24.107172][ T317] udc dummy_udc.0: failed to start g1: -19 0 0 0 0018 1af41004 b [ 24.118952][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready c001[ 24.128623][ T320] udc dummy_udc.0: failed to start g1: -19 fe800000 0 0 0 0 0 40 80 0 0 0 0 0 virtio-pci 0020 1[ 24.155527][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready af41000 a [ 24.165418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready c041 fe801000 0 0 0 0 0 40 80 0 0 0 0 [ 24.191991][ T324] Mass Storage Function, version: 2009/09/11 0 virtio-p[ 24.199988][ T324] LUN: removable file: (no medium) ci 0028 1ae0a002 a fe000000 0 0 0 0 0 c0002 800000 0 0 0 0 0 20000 0030 1af41002 a c081 0 0 0 0 0 0 20 0 0 0 0 0 0 virtio-pci 0038 1af41005 b c0a1 [ 24.253209][ T336] UDC core: couldn't find an available UDC or it's busy: -16 fe802000 0[ 24.263928][ T336] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 0 0 0 0 20 40 0 0 0 0 0 virtio-pci [ 24.474539][ T318] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.494916][ T311] android_work: sent uevent USB_STATE=CONNECTED [ 24.514575][ T60] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.754578][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.834630][ T318] usb 1-1: Dual-Role OTG device on HNP port [ 24.854766][ T318] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 5.15 [ 24.864013][ T318] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.872071][ T318] usb 1-1: Product: Product [ 24.876664][ T318] usb 1-1: Manufacturer: Manufacturer [ 24.882056][ T318] usb 1-1: SerialNumber: 1234567890 [ 24.904764][ T311] android_work: sent uevent USB_STATE=CONFIGURED [ 24.927312][ T343] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 24.936943][ T343] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 24.965042][ T318] usb-storage 1-1:1.0: USB Mass Storage device detected [ 24.973281][ T318] scsi host1: usb-storage 1-1:1.0 [ 25.094687][ T60] usb 5-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 25.104227][ T60] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.112560][ T60] usb 5-1: Product: syz [ 25.116855][ T312] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.127012][ T60] usb 5-1: Manufacturer: syz [ 25.131607][ T60] usb 5-1: SerialNumber: syz [ 25.294663][ T318] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 25.294702][ T312] usb 2-1: New USB device found, idVendor=1934, idProduct=0706, bcdDevice= 0.00 [ 25.311268][ T341] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.318788][ T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.326987][ T312] usb 2-1: Product: syz [ 25.331233][ T312] usb 2-1: Manufacturer: syz [ 25.335925][ T312] usb 2-1: SerialNumber: syz [ 25.704772][ T341] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.715174][ T341] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.824632][ T318] usb 4-1: New USB device found, idVendor=0af0, idProduct=6711, bcdDevice= 0.00 [ 25.833979][ T318] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.842044][ T318] usb 4-1: Product: syz [ 25.846243][ T318] usb 4-1: Manufacturer: syz [ 25.850834][ T318] usb 4-1: SerialNumber: syz [ 25.904860][ T341] usb 3-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice= 1.00 [ 25.913977][ T341] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.922130][ T341] usb 3-1: Product: syz [ 25.926408][ T341] usb 3-1: Manufacturer: syz [ 25.931004][ T341] usb 3-1: SerialNumber: syz [ 25.975127][ T341] ums-usbat 3-1:1.0: USB Mass Storage device detected [ 25.982998][ T341] ums-usbat 3-1:1.0: Quirks match for vid 04e6 pid 1010: 1 [ 25.990322][ T341] ums-usbat 3-1:1.0: This device (04e6,1010,0100 S 06 P 80) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 25.990322][ T341] Please send a copy of this message to and [ 26.095389][ T318] scsi 1:0:0:0: Direct-Access Linux File-Stor Gadget 0515 PQ: 0 ANSI: 2 [ 26.197349][ T60] usb 3-1: USB disconnect, device number 2 [ 26.224660][ C0] sd 1:0:0:0: Power-on or device reset occurred [ 26.324772][ T8] sd 1:0:0:0: [sdb] 2048 512-byte logical blocks: (1.05 MB/1.00 MiB) [ 26.384699][ T8] sd 1:0:0:0: [sdb] Write Protect is off [ 26.444690][ T8] sd 1:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 26.718024][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 26.718041][ T30] audit: type=1400 audit(1786957667.407:124): avc: denied { read write } for pid=361 comm="syz.2.17" name="UDC" dev="configfs" ino=15541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 26.747125][ T30] audit: type=1400 audit(1786957667.407:125): avc: denied { open } for pid=361 comm="syz.2.17" path="/4/file0/usb_gadget/g1/UDC" dev="configfs" ino=15541 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 26.787787][ T366] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.788064][ T30] audit: type=1400 audit(1786957667.467:126): avc: denied { read } for pid=365 comm="syz.2.19" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.831772][ T30] audit: type=1400 audit(1786957667.477:127): avc: denied { open } for pid=365 comm="syz.2.19" path="/dev/kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.855244][ T30] audit: type=1400 audit(1786957667.477:128): avc: denied { ioctl } for pid=365 comm="syz.2.19" path="/dev/kvm" dev="devtmpfs" ino=82 ioctlcmd=0xae01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 26.889621][ T374] UDC core: couldn't find an available UDC or it's busy: -16 [ 26.894793][ T30] audit: type=1400 audit(1786957667.587:129): avc: denied { read write } for pid=375 comm="syz.2.23" name="uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.906483][ T60] hid-generic 0003:0B05:1866.0001: item fetching failed at offset 42/43 [ 26.921813][ T30] audit: type=1400 audit(1786957667.587:130): avc: denied { open } for pid=375 comm="syz.2.23" path="/dev/uhid" dev="devtmpfs" ino=263 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 26.929981][ T60] hid-generic: probe of 0003:0B05:1866.0001 failed with error -22 [ 27.027970][ T385] UDC core: couldn't find an available UDC or it's busy: -16 [ 27.035550][ T385] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 27.064279][ T387] loop2: detected capacity change from 0 to 64 [ 27.135351][ T387] EXT4-fs (loop2): VFS: Can't find ext4 filesystem [ 27.194883][ T8] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 27.235855][ T60] usb 5-1: USB disconnect, device number 2 [ 27.286385][ T30] audit: type=1400 audit(1786957667.977:131): avc: denied { write } for pid=389 comm="syz.4.28" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 27.498062][ T311] usb 2-1: USB disconnect, device number 2 [ 27.517119][ T30] audit: type=1400 audit(1786957668.207:132): avc: denied { map_create } for pid=407 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.536308][ T30] audit: type=1400 audit(1786957668.207:133): avc: denied { map_read map_write } for pid=407 comm="syz.1.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.594550][ T312] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.834639][ T312] usb 3-1: Using ep0 maxpacket: 8 [ 27.984654][ T312] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 27.992901][ T312] usb 3-1: config 0 has no interface number 0 [ 27.999118][ T312] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 28.008800][ T312] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.016575][ T293] usb 4-1: USB disconnect, device number 2 [ 28.018197][ T312] usb 3-1: config 0 descriptor?? [ 28.064635][ T311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.269876][ T20] usb 3-1: USB disconnect, device number 3 [ 28.384652][ T293] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.424699][ T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 28.434769][ T311] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 28.444804][ T311] usb 2-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01 [ 28.453848][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.474658][ T410] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.481669][ T410] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 28.581734][ T425] UDC core: couldn't find an available UDC or it's busy: -16 [ 28.589632][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 28.594618][ T312] usb 5-1: new low-speed USB device number 3 using dummy_hcd [ 28.864715][ T312] usb 5-1: Invalid ep0 maxpacket: 64 [ 28.914631][ T293] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 1.00 [ 28.924075][ T293] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.932303][ T293] usb 4-1: Product: syz [ 28.936569][ T293] usb 4-1: Manufacturer: syz [ 28.941272][ T293] usb 4-1: SerialNumber: syz [ 28.985784][ T293] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 29.024649][ T312] usb 5-1: new low-speed USB device number 4 using dummy_hcd [ 29.064597][ T20] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 29.274678][ T312] usb 5-1: Invalid ep0 maxpacket: 64 [ 29.280221][ T312] usb usb5-port1: attempt power cycle [ 29.454752][ T20] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.465621][ T20] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 29.644689][ T20] usb 3-1: New USB device found, idVendor=04e6, idProduct=1010, bcdDevice= 1.00 [ 29.654030][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.662183][ T20] usb 3-1: Product: syz [ 29.666543][ T20] usb 3-1: Manufacturer: syz [ 29.671290][ T20] usb 3-1: SerialNumber: syz [ 29.704625][ T312] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 29.715195][ T20] ums-usbat 3-1:1.0: USB Mass Storage device detected [ 29.723162][ T20] ums-usbat 3-1:1.0: Quirks match for vid 04e6 pid 1010: 1 [ 29.730531][ T20] ums-usbat 3-1:1.0: This device (04e6,1010,0100 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 29.730531][ T20] Please send a copy of this message to and [ 29.751313][ T293] usb 2-1: USB disconnect, device number 3 [ 29.794666][ T312] usb 5-1: Invalid ep0 maxpacket: 64 [ 29.918205][ T20] usb 3-1: USB disconnect, device number 4 [ 29.954687][ T312] usb 5-1: new low-speed USB device number 6 using dummy_hcd [ 30.044679][ T312] usb 5-1: Invalid ep0 maxpacket: 64 [ 30.050283][ T312] usb usb5-port1: unable to enumerate USB device [ 30.338396][ T443] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.345840][ T443] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 30.534572][ T318] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.714576][ T293] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 30.863853][ T451] UDC core: couldn't find an available UDC or it's busy: -16 [ 30.871554][ T451] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 31.014659][ T318] usb 2-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 31.023906][ T318] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 31.032118][ T318] usb 2-1: Product: syz [ 31.036453][ T318] usb 2-1: Manufacturer: syz [ 31.065054][ T311] usb 4-1: USB disconnect, device number 3 [ 31.074632][ T293] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 31.164683][ T293] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.173875][ T293] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 31.182084][ T293] usb 3-1: SerialNumber: syz [ 31.328142][ T457] PM: suspend entry (s2idle) [ 31.464619][ T311] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 31.495898][ T457] Filesystems sync: 0.163 seconds [ 31.501220][ T457] Freezing user space processes ... [ 31.774594][ T39] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 36.634725][ T293] cdc_ether: probe of 3-1:1.0 failed with error -32 [ 36.644636][ T457] (elapsed 5.143 seconds) done. [ 36.649556][ T457] OOM killer disabled. [ 36.653625][ T457] Freezing remaining freezable tasks ... [ 36.664575][ T311] usb 4-1: device descriptor read/64, error -110 [ 36.984593][ T39] usb 5-1: device descriptor read/64, error -110 [ 37.314576][ T39] usb 5-1: device descriptor read/64, error -32 [ 37.584587][ T39] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 37.794602][ T39] usb 5-1: device descriptor read/64, error -32 [ 38.124688][ T39] usb 5-1: device descriptor read/64, error -32 [ 38.244922][ T39] usb usb5-port1: attempt power cycle [ 38.654616][ T39] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 38.764588][ T39] usb 5-1: device descriptor read/8, error -32 [ 38.974621][ T39] usb 5-1: device descriptor read/8, error -32 [ 39.244615][ T39] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 39.354605][ T39] usb 5-1: device descriptor read/8, error -32 [ 39.564592][ T39] usb 5-1: device descriptor read/8, error -32 [ 39.684728][ T39] usb usb5-port1: unable to enumerate USB device [ 42.064586][ T311] usb 4-1: device descriptor read/64, error -32 [ 42.334583][ T311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.544581][ T311] usb 4-1: device descriptor read/64, error -32 [ 42.874585][ T311] usb 4-1: device descriptor read/64, error -32 [ 42.994747][ T311] usb usb4-port1: attempt power cycle [ 43.404587][ T311] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 43.514609][ T311] usb 4-1: device descriptor read/8, error -32 [ 43.724595][ T311] usb 4-1: device descriptor read/8, error -32 [ 43.994586][ T311] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 44.104593][ T311] usb 4-1: device descriptor read/8, error -32 [ 44.314585][ T311] usb 4-1: device descriptor read/8, error -32 [ 44.444617][ T311] usb usb4-port1: unable to enumerate USB device [ 44.454634][ T457] (elapsed 7.801 seconds) done. [ 44.459533][ T457] printk: Suspending console(s) (use no_console_suspend to debug) [ 44.504693][ T309] sd 1:0:0:0: [sdb] Synchronizing SCSI cache [ 45.944727][ T309] sd 1:0:0:0: [sdb] Synchronize Cache(10) failed: Result: hostbyte=0x07 driverbyte=DRIVER_OK [ 45.944745][ T309] PM: dpm_run_callback(): scsi_bus_suspend+0x0/0x200 returns -5 [ 45.944780][ T309] sd 1:0:0:0: PM: failed to suspend async: error -5 [ 45.944957][ T457] PM: Some devices failed to suspend, or early wake event detected [ 46.254619][ T468] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 46.254625][ T467] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 46.464592][ T468] usb 3-1: device descriptor read/64, error -32 [ 46.794578][ T468] usb 3-1: device descriptor read/64, error -32 [ 47.064596][ T468] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 47.274578][ T468] usb 3-1: device descriptor read/64, error -32 [ 47.604578][ T468] usb 3-1: device descriptor read/64, error -32 [ 47.874599][ T468] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 47.984603][ T468] usb 3-1: device descriptor read/8, error -32 [ 48.194607][ T468] usb 3-1: device descriptor read/8, error -32 [ 48.464714][ T468] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 48.574669][ T468] usb 3-1: device descriptor read/8, error -32 [ 48.784606][ T468] usb 3-1: device descriptor read/8, error -32 [ 51.464626][ T467] usb 2-1: device descriptor read/64, error -110 [ 51.794574][ T467] usb 2-1: device descriptor read/64, error -32 [ 52.064615][ T467] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 52.274579][ T467] usb 2-1: device descriptor read/64, error -32 [ 52.604639][ T467] usb 2-1: device descriptor read/64, error -32 [ 52.874591][ T467] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 52.984621][ T467] usb 2-1: device descriptor read/8, error -32 [ 53.194600][ T467] usb 2-1: device descriptor read/8, error -32 [ 53.464588][ T467] usb 2-1: reset high-speed USB device number 4 using dummy_hcd [ 53.574614][ T467] usb 2-1: device descriptor read/8, error -32 [ 53.784614][ T467] usb 2-1: device descriptor read/8, error -32 [ 54.106040][ T457] OOM killer enabled. [ 54.110107][ T457] Restarting tasks ... done. [ 54.124568][ T341] usb 3-1: USB disconnect, device number 5 [ 54.144958][ T6] usb 2-1: USB disconnect, device number 4 [ 54.162499][ T312] usb 1-1: USB disconnect, device number 2 [ 54.183821][ T457] Abort: Callback failed on 1:0:0:0 in scsi_bus_suspend+0x0/0x200 returned -5 [ 54.194894][ T307] sdb: detected capacity change from 2048 to 0 SYZFAIL: failed to send rpc fd=3 want=208 sent=0 n=-1 (errno 32: Broken pipe) [ 54.220133][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 54.220150][ T30] audit: type=1400 audit(1786957694.907:141): avc: denied { write } for pid=277 comm="syz-executor" path="pipe:[491]" dev="pipefs" ino=491 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 54.249902][ T457] PM: suspend exit [ 54.304513][ T6] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 54.327388][ T287] syz-executor (287) used greatest stack depth: 22056 bytes left [ 54.345409][ T285] syz-executor (285) used greatest stack depth: 21440 bytes left [ 54.514683][ T6] usb 2-1: device descriptor read/64, error -32 [ 54.634621][ T312] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 54.975215][ T468] device bridge_slave_1 left promiscuous mode [ 54.981527][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.988999][ T468] device bridge_slave_0 left promiscuous mode [ 54.994578][ T312] usb 1-1: Dual-Role OTG device on HNP port [ 54.995200][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.008621][ T468] device veth1_macvtap left promiscuous mode [ 55.014576][ T312] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 5.15 [ 55.014673][ T468] device veth0_vlan left promiscuous mode [ 55.023630][ T312] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.037367][ T312] usb 1-1: Product: Product [ 55.041883][ T312] usb 1-1: Manufacturer: Manufacturer [ 55.047350][ T312] usb 1-1: SerialNumber: 1234567890 [ 55.064682][ T60] android_work: sent uevent USB_STATE=CONFIGURED [ 55.125221][ T312] usb-storage 1-1:1.0: USB Mass Storage device detected [ 55.132884][ T312] scsi host2: usb-storage 1-1:1.0 [ 55.149767][ T307] udevd[307]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 56.055573][ T468] device bridge_slave_1 left promiscuous mode [ 56.061833][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.069362][ T468] device bridge_slave_0 left promiscuous mode [ 56.075644][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.083488][ T468] device bridge_slave_1 left promiscuous mode [ 56.089691][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.097241][ T468] device bridge_slave_0 left promiscuous mode [ 56.103363][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.111423][ T468] device bridge_slave_1 left promiscuous mode [ 56.117570][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.125191][ T468] device bridge_slave_0 left promiscuous mode [ 56.131527][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.139364][ T468] device bridge_slave_1 left promiscuous mode [ 56.145566][ T468] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.152990][ T468] device bridge_slave_0 left promiscuous mode [ 56.159305][ T468] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.167866][ T468] device veth1_macvtap left promiscuous mode [ 56.173872][ T468] device veth0_vlan left promiscuous mode [ 56.180029][ T468] device veth1_macvtap left promiscuous mode [ 56.186050][ T468] device veth0_vlan left promiscuous mode [ 56.191987][ T468] device veth1_macvtap left promiscuous mode [ 56.198397][ T468] device veth0_vlan left promiscuous mode [ 56.204370][ T468] device veth1_macvtap left promiscuous mode [ 56.210407][ T468] device veth0_vlan left promiscuous mode [ 56.254714][ T6] scsi 2:0:0:0: Direct-Access Linux File-Stor Gadget 0515 PQ: 0 ANSI: 2 [ 56.364865][ C1] sd 2:0:0:0: Power-on or device reset occurred [ 56.464782][ T467] sd 2:0:0:0: [sdb] 2048 512-byte logical blocks: (1.05 MB/1.00 MiB) [ 56.524910][ T467] sd 2:0:0:0: [sdb] Write Protect is off [ 56.584755][ T467] sd 2:0:0:0: [sdb] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA [ 57.264767][ T467] sd 2:0:0:0: [sdb] Attached SCSI removable disk