last executing test programs: 6.251365767s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x1, 0x1, 0x100000, 0x100000, &(0x7f0000000000/0x100000)=nil}) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@cpuid={0x64, 0x18}, @in_dx={0x69, 0x20, {0x3f8, 0x1}}, @out_dx={0x6a, 0x28, {0x3f8, 0x1, 0x41}}, @uexit={0x0, 0x18, 0x1}], 0x78}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000400)={0x1, 0x0, &(0x7f0000005000/0x1000)=nil}) 6.188365869s ago: executing program 0 (id=7): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) r0 = epoll_create(0x1) epoll_wait(r0, 0x0, 0x0, 0xbb8) 6.12847301s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x0, 0x34, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002000000406d0499c200010102000109022200010100a032090400000103000000092110010001221f000705810308000a"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="00221f00000005010904a101050109300931150025ff7508950281021901290795079102c0"], 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hid/drivers/logitech/0003:046D:C299.0002/range\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='540\n\x00', 0x4) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.11104447s ago: executing program 1 (id=2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x13, {"ebfe"}}], 0x13}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000180)=[@code={0xa, 0x13, {"ebfe"}}], 0x13}) ioctl$KVM_SET_TSC_KHZ_cpu(r3, 0xaea2, 0x186a0) ioctl$KVM_SET_TSC_KHZ_cpu(r4, 0xaea2, 0x186a0) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_CAP_XEN_HVM(r1, 0x4068aea3, &(0x7f0000000100)) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r4, 0xae80, 0x0) (async) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000200)={0x0, 0x1000}) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) 6.022883782s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x3, 0x3a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400a11501200010102000109022400010100c0010904000003ffffff00070581020002000705820200020007050102000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000400), 0x0, 0x2) ioctl$USBDEVFS_ALLOW_SUSPEND(r1, 0x5522) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) ioctl$USBDEVFS_FORBID_SUSPEND(r1, 0x5521) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 5.239747232s ago: executing program 1 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) mkdir(&(0x7f0000000100)='./local_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./local_sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./local_sys/bus/i2c/devices/i2c-0/name\x00', 0x0, 0x0) read(r1, &(0x7f0000000240)=""/100, 0x64) 4.48194593s ago: executing program 0 (id=14): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1b, {0x0, "f40f08"}}, @nested_vmlaunch={0x12f, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x7b}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.405003492s ago: executing program 0 (id=15): nanosleep(&(0x7f0000000000)={0x2}, 0x0) 3.618497641s ago: executing program 0 (id=16): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0x40, 0x1, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000480)={0x84, &(0x7f00000004c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000540)={0x40, 0x6, 0x4, "01020304"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f00000005c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000640)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000680)={0x84, &(0x7f00000006c0)={0x40, 0x6, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000740)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f00000007c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000800)={0x84, &(0x7f0000000840)={0x40, 0x6, 0x4, 'APP '}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000880)={0x84, &(0x7f00000008c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000940)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f00000009c0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000a40)={0x40, 0x6, 0x4, "01000000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000ac0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f0000000b40)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000b80)={0x84, &(0x7f0000000bc0)={0x40, 0x6, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c00)={0x84, &(0x7f0000000c40)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000c80)={0x84, &(0x7f0000000cc0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d00)={0x84, &(0x7f0000000d40)={0x40, 0x6, 0x4, '\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000d80)={0x84, &(0x7f0000000dc0)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e00)={0x84, &(0x7f0000000e40)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000e80)={0x84, &(0x7f0000000ec0)={0x40, 0x6, 0x5, '\x00\x00\x00\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000f00)={0x84, &(0x7f0000000f40)={0x40, 0x3, 0x1, "01"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='apple,cd321x 0x38\n\x00', 0x13) (async) nanosleep(&(0x7f0000001000)={0x1}, 0x0) 3.336357449s ago: executing program 1 (id=17): syz_usb_connect(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffffff40b11342000001010203010902460001010080fa0904000008ff0000000705810200020007058202000200070583020002000705840340000107050102000200070502020002000705030200020007050402000200"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r0) sendmsg$NL80211_CMD_DEL_STATION(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r1, 0x0, 0x0, 0x0, {{}, {@void, @void}}}, 0x14}}, 0x0) 3.065786735s ago: executing program 4 (id=18): syz_usb_connect(0x2, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040122901000000010203010902430002010080fa090400000102020100052400100105240100010424020205240600010705810310000a09040100020a0000000705020240000007058202400000"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x3}, 0x0) 3.029741186s ago: executing program 3 (id=19): r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107000900010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8d, 0x4, &(0x7f0000000110)="11111111") (async) syz_usb_ep_write(r0, 0x8e, 0x20, &(0x7f0000000220)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"') (async) nanosleep(&(0x7f0000000330)={0x1}, 0x0) syz_usb_disconnect(r0) 2.897754579s ago: executing program 2 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000100)={0x100}) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, &(0x7f0000000200)=@vmx={0x1, 0x0, 0x2080}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x345}]}) 2.84182168s ago: executing program 2 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040d31375320000010200010902200001010080320904000002000000000705020200020007058102000200"], 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/dvb_usb_az6027/bind\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='5-1:1.0\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x8) 739.563142ms ago: executing program 1 (id=22): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./binfmt\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./binfmt\x00', &(0x7f0000000100)='binfmt_misc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/syz0\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='-1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./binfmt/register\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)="3a73797a323a4d3a303a7f454c460101013a3a2f66696c65313a4f430a00", 0x2e) close(r1) prlimit64(0x0, 0x4, &(0x7f0000000400)={0x7fffffff, 0x7fffffff}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) write(r2, &(0x7f0000000500)="7f454c460101010000000000000000000200030001000000588004083400000000000000000000003400200001000000000000000100000000000000008004080080040860000000001000000700000000100000000000000f0b000000000000", 0x60) close(r2) execveat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x0, 0x0, 0x0) 720.942503ms ago: executing program 2 (id=23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='proc\x00', &(0x7f00000000c0)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/sysrq-trigger\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='o', 0x1) 641.928785ms ago: executing program 1 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae8a, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x200000}, {0x0, 0x0, 0x0, 0x0, 0x756e6547, 0x6c65746e, 0x49656e69}]}) ioctl$KVM_SET_LAPIC(r2, 0x4400ae8f, &(0x7f0000000880)={"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"}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 588.235286ms ago: executing program 2 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x1) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000000)={0x200000}) ioctl$KVM_SET_MEMORY_ATTRIBUTES(r1, 0x4020aed2, &(0x7f0000000040)={0x0, 0x200000, 0x8}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, r2}) syz_clone(0x10f00, 0x0, 0x0, 0x0, 0x0, 0x0) syz_clone(0x10f00, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x0, 0x100000, 0x0, 0x0, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x1, 0x4, 0x100000, 0x100000, 0x0, 0x0, r2}) ioctl$KVM_PRE_FAULT_MEMORY(r3, 0xc040aed5, &(0x7f0000000100)={0x0, 0x200000}) 579.711766ms ago: executing program 1 (id=26): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 502.553418ms ago: executing program 2 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000a00)={0x0, 0x5f5e100}, 0x0) r1 = syz_usb_connect(0x0, 0x12, &(0x7f0000000b00)=ANY=[@ANYBLOB="120100020000004000000000000001020301"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0xbebc200}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) nanosleep(&(0x7f0000000e00)={0x0, 0x5f5e100}, 0x0) 502.357438ms ago: executing program 0 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) close(r0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 92.443138ms ago: executing program 4 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='snd_hda_codec_generic\x00', 0x16) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/hdaudio/drivers/snd_hda_codec_generic/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='pcspkr\x00', 0x7) 83.182848ms ago: executing program 4 (id=30): r0 = syz_open_dev$usbmon(&(0x7f0000001100), 0x0, 0x0) ioctl$MON_IOCH_MFLUSH(r0, 0x12345678, 0x0) 29.922389ms ago: executing program 4 (id=31): r0 = open(&(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) flock(r0, 0x2) 29.75076ms ago: executing program 4 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r0, &(0x7f00000002c0), 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000300), 0x2c0) bind$inet(r1, &(0x7f0000000800)={0x2, 0x1234, @loopback}, 0x10) sendto$inet(r1, &(0x7f0000000900)="12345678", 0x8, 0x0, &(0x7f0000000800)={0x2, 0x1234, @loopback}, 0x10) r2 = socket$inet(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000a00)={0x2, 0x2345, @loopback}, 0x10) listen(r2, 0x5) r3 = socket$inet(0x2, 0x1, 0x0) connect$inet(r3, &(0x7f0000000a00)={0x2, 0x2345, @loopback}, 0x10) 29.596569ms ago: executing program 4 (id=33): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/strings\x00', 0x1ff) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000700)='./config/usb_gadget/g1/configs\x00', 0x1ff) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1/strings\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/functions\x00', 0x1ff) mkdir(&(0x7f0000000c00)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdir(&(0x7f0000001c00)='./config/usb_gadget/g1/functions/loopback.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000e00)='0x1d6b', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000001000)='0x0104', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='Foo', 0x3) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r3, &(0x7f0000001400)='Bar', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r4, &(0x7f0000001600)='Conf 1', 0x6) close(r4) symlink(&(0x7f0000001700)='acm.usb0\x00', &(0x7f0000001800)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') symlink(&(0x7f0000001d00)='loopback.usb0\x00', &(0x7f0000001e00)='./config/usb_gadget/g1/configs/c.1/loopback.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001900)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001a00)='dummy_udc.0', 0xb) close(r5) nanosleep(&(0x7f0000001b00)={0x1}, 0x0) 14.79782ms ago: executing program 3 (id=34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x1a, {0x0, "9df4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x62}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) 0s ago: executing program 3 (id=35): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/fscaps', 0x0, 0x0) getdents64(r0, &(0x7f0000000080), 0x100) kernel console output (not intermixed with test programs): rocess permissive=1 [ 11.375878][ T24] audit: type=1400 audit(1786959930.219:63): avc: denied { siginh } for pid=214 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.54' (ED25519) to the list of known hosts. [ 17.958284][ T24] audit: type=1400 audit(1786959936.829:64): avc: denied { mounton } for pid=257 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 17.959311][ T257] cgroup: Unknown subsys name 'net' [ 17.980940][ T24] audit: type=1400 audit(1786959936.829:65): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.008237][ T24] audit: type=1400 audit(1786959936.859:66): avc: denied { unmount } for pid=257 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 18.008429][ T257] cgroup: Unknown subsys name 'devices' [ 18.146053][ T257] cgroup: Unknown subsys name 'hugetlb' [ 18.151659][ T257] cgroup: Unknown subsys name 'rlimit' [ 18.259346][ T24] audit: type=1400 audit(1786959937.129:67): avc: denied { setattr } for pid=257 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 18.282526][ T24] audit: type=1400 audit(1786959937.129:68): avc: denied { mounton } for pid=257 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 18.306657][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 18.307495][ T24] audit: type=1400 audit(1786959937.129:69): avc: denied { mount } for pid=257 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 18.338965][ T24] audit: type=1400 audit(1786959937.189:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.338986][ T257] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 18.364344][ T24] audit: type=1400 audit(1786959937.189:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.398825][ T24] audit: type=1400 audit(1786959937.199:72): avc: denied { read } for pid=257 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.424336][ T24] audit: type=1400 audit(1786959937.199:73): avc: denied { open } for pid=257 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 18.956465][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 18.963519][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 18.971074][ T279] device bridge_slave_0 entered promiscuous mode [ 18.978818][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 18.985956][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 18.993308][ T279] device bridge_slave_1 entered promiscuous mode [ 19.093923][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.101114][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.108478][ T281] device bridge_slave_0 entered promiscuous mode [ 19.118097][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.125231][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.132455][ T281] device bridge_slave_1 entered promiscuous mode [ 19.140172][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.147224][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.154474][ T283] device bridge_slave_0 entered promiscuous mode [ 19.163770][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.170822][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.178185][ T283] device bridge_slave_1 entered promiscuous mode [ 19.184756][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.191768][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.199145][ T280] device bridge_slave_0 entered promiscuous mode [ 19.208130][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.215256][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.222515][ T280] device bridge_slave_1 entered promiscuous mode [ 19.299252][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.306482][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.313837][ T282] device bridge_slave_0 entered promiscuous mode [ 19.321715][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.328979][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.336332][ T282] device bridge_slave_1 entered promiscuous mode [ 19.365857][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.372895][ T281] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.380190][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.387210][ T281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.404135][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.411205][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.418459][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.425482][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.492320][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 19.499731][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.506918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.515070][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.523249][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 19.535973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.544091][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.551129][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.577361][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 19.584780][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.593322][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.601837][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.608893][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.624884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.633898][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.640950][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.655384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.663463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.674609][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.697414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.705708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.713778][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.720818][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.728635][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.736796][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.743799][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.751179][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.760496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.769757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.786000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 19.793663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 19.801962][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 19.809898][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 19.817676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 19.825205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.833290][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.840336][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.847778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.856175][ T281] device veth0_vlan entered promiscuous mode [ 19.866079][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 19.874258][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 19.881298][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 19.888779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 19.905384][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.913645][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.920702][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.928688][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 19.937298][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 19.944305][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 19.951681][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 19.959833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 19.978524][ T280] device veth0_vlan entered promiscuous mode [ 19.989660][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 19.998187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.006359][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.014330][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.022628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.031040][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.039523][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.047351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.055318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.063511][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.072436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.080046][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.092330][ T281] device veth1_macvtap entered promiscuous mode [ 20.102828][ T279] device veth0_vlan entered promiscuous mode [ 20.109846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 20.117929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 20.125825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.133874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.142716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.150463][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 20.158800][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 20.166784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.174641][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.182582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.191035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.199272][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.206758][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.218289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.226620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.236368][ T280] device veth1_macvtap entered promiscuous mode [ 20.250492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.258214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.266611][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.275374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.283549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.296886][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.304822][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.318971][ T282] device veth0_vlan entered promiscuous mode [ 20.319647][ T281] request_module fs-gadgetfs succeeded, but still no fs? [ 20.330618][ T282] device veth1_macvtap entered promiscuous mode [ 20.340037][ T283] device veth0_vlan entered promiscuous mode [ 20.346983][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.354449][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.362337][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 20.370660][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 20.379119][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 20.387042][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 20.395240][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.403292][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.411632][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.421395][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 20.428899][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 20.438806][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.447031][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.457411][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.465836][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.474142][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.482753][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.495738][ T281] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 20.507697][ T279] device veth1_macvtap entered promiscuous mode [ 20.515882][ T303] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 20.536552][ T283] device veth1_macvtap entered promiscuous mode [ 20.546352][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.554223][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.563093][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.571680][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.580098][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.588830][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 20.597232][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 20.607229][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 20.642044][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.656163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.666151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.675978][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.684272][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 20.692549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 20.700897][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 20.709257][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 20.776691][ T321] user requested TSC rate below hardware speed [ 20.790941][ T321] user requested TSC rate below hardware speed [ 20.974624][ T305] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 21.014610][ T25] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 21.024671][ T287] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 21.134606][ T314] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 21.384632][ T287] usb 5-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 21.403848][ T287] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 21.494759][ T305] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 21.503877][ T314] usb 3-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 21.514821][ T25] usb 4-1: New USB device found, idVendor=046d, idProduct=c299, bcdDevice= 1.00 [ 21.517238][ T305] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 21.531946][ T314] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 21.532149][ T25] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 21.553196][ T25] usb 4-1: Product: syz [ 21.554676][ T305] usb 1-1: Product: syz [ 21.557538][ T25] usb 4-1: Manufacturer: syz [ 21.563713][ T305] usb 1-1: Manufacturer: syz [ 21.570702][ T305] usb 1-1: SerialNumber: syz [ 21.675152][ T314] usb 3-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice= 1.00 [ 21.684287][ T314] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 21.692323][ T314] usb 3-1: Product: syz [ 21.696546][ T314] usb 3-1: Manufacturer: syz [ 21.820159][ T314] usb 1-1: USB disconnect, device number 2 [ 21.894686][ T311] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 22.046092][ T25] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/0003:046D:C299.0001/input/input4 [ 22.057961][ T25] logitech 0003:046D:C299.0001: input,hidraw0: USB HID v1.10 Joystick [syz syz] on usb-dummy_hcd.3-1/input0 [ 22.069650][ T25] logitech 0003:046D:C299.0001: Force feedback support for Logitech Gaming Wheels [ 22.284648][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 22.295563][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 22.305313][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 22.318495][ T311] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 22.330085][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 22.338882][ T311] usb 2-1: config 0 descriptor?? [ 22.815261][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.822731][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.830341][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.837774][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.845365][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.852789][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.860285][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.867694][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.875157][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.882530][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.890085][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.897587][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.905133][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.912695][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.920103][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.927505][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.934912][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.942311][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.949739][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.957148][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.964511][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.971932][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.979341][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.986772][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 22.994167][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.001592][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.008995][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.016415][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.023801][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.031210][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.038609][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.046043][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.054066][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.061608][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.069218][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.076620][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.083997][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.091400][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 23.098895][ T311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 23.107647][ T311] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw1: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0 [ 23.121623][ T311] usb 2-1: USB disconnect, device number 2 [ 23.137437][ T355] fido_id[355]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 23.320040][ T314] usb 4-1: USB disconnect, device number 2 [ 23.324603][ C1] logitech 0003:046D:C299.0001: usb_submit_urb(ctrl) failed: -19 [ 23.514821][ T20] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 23.755565][ T287] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 23.765975][ T287] usb 5-1: USB disconnect, device number 2 [ 23.794670][ T54] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 23.894654][ T20] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 23.903730][ T20] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 23.957202][ T20] usb 3-1: USB disconnect, device number 2 [ 24.094635][ T311] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 24.124618][ T287] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 24.164662][ T54] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 24.174858][ T54] usb 2-1: config 1 interface 0 altsetting 0 has 7 endpoint descriptors, different from the interface descriptor's value: 8 [ 24.344692][ T54] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 1.00 [ 24.353788][ T54] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.361905][ T54] usb 2-1: Product: syz [ 24.366094][ T54] usb 2-1: Manufacturer: syz [ 24.370674][ T54] usb 2-1: SerialNumber: syz [ 24.374598][ T20] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 24.464815][ T311] usb 4-1: New USB device found, idVendor=0711, idProduct=0900, bcdDevice= 1.00 [ 24.473854][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.482084][ T287] usb 5-1: not running at top speed; connect to a high speed hub [ 24.667145][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 24.667154][ T24] audit: type=1400 audit(1786959943.539:105): avc: denied { create } for pid=358 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.693892][ T24] audit: type=1400 audit(1786959943.539:106): avc: denied { write } for pid=358 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.714034][ T24] audit: type=1400 audit(1786959943.539:107): avc: denied { read } for pid=358 comm="syz.1.17" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.724687][ T287] usb 5-1: New USB device found, idVendor=2912, idProduct=0001, bcdDevice= 0.00 [ 24.743113][ T287] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.751237][ T287] usb 5-1: Product: syz [ 24.755409][ T287] usb 5-1: Manufacturer: syz [ 24.759994][ T287] usb 5-1: SerialNumber: syz [ 24.864619][ T20] usb 3-1: New USB device found, idVendor=13d3, idProduct=3275, bcdDevice= 0.00 [ 24.873705][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 24.882010][ T20] usb 3-1: Product: syz [ 24.886223][ T20] usb 3-1: Manufacturer: syz [ 25.617024][ T20] usb 2-1: USB disconnect, device number 3 [ 25.626390][ T54] usb 3-1: USB disconnect, device number 3 [ 26.126611][ T380] process 'syz.1.22' launched './file1' with NULL argv: empty string added [ 26.138687][ T24] audit: type=1400 audit(1786959945.009:108): avc: denied { execute } for pid=379 comm="syz.1.22" name="file1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.148130][ T379] process '/newroot/3/file1' started with executable stack [ 26.161098][ T24] audit: type=1400 audit(1786959945.009:109): avc: denied { execute_no_trans } for pid=379 comm="syz.1.22" path="/3/file1" dev="tmpfs" ino=35 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 26.190800][ T24] audit: type=1400 audit(1786959945.049:110): avc: denied { unmount } for pid=280 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 26.225379][ T384] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 26.234405][ T384] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 26.239353][ T24] audit: type=1400 audit(1786959945.099:111): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 26.289280][ T301] usb 1-1: USB disconnect, device number 3 [ 26.306982][ T24] audit: type=1400 audit(1786959945.179:112): avc: denied { mount } for pid=393 comm="syz.2.27" name="/" dev="configfs" ino=13686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 26.309391][ T394] Config c/1 of g1 needs at least one function. [ 26.330324][ T24] audit: type=1400 audit(1786959945.179:113): avc: denied { search } for pid=393 comm="syz.2.27" name="/" dev="configfs" ino=13686 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.336550][ T394] udc dummy_udc.0: failed to start g1: -22 [ 26.358634][ T24] audit: type=1400 audit(1786959945.179:114): avc: denied { write } for pid=393 comm="syz.2.27" name="usb_gadget" dev="configfs" ino=13687 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 26.554676][ T20] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 26.794609][ T20] usb 2-1: Using ep0 maxpacket: 16 [ 26.797504][ T403] Zero length message leads to an empty skb [ 26.818689][ T405] Config c/1 of g1 needs at least one function. [ 26.825070][ T405] udc dummy_udc.0: failed to start g1: -22 [ 26.825455][ T287] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 26.835609][ T54] usb 4-1: USB disconnect, device number 3 [ 26.846262][ T287] usb 5-1: USB disconnect, device number 3 [ 26.867310][ T287] general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] PREEMPT SMP KASAN [ 26.879049][ T287] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 26.887570][ T287] CPU: 1 PID: 287 Comm: kworker/1:2 Not tainted syzkaller #0 [ 26.894920][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.905010][ T287] Workqueue: usb_hub_wq hub_event [ 26.910032][ T287] RIP: 0010:klist_remove+0x150/0x300 [ 26.915318][ T287] Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 12 6c 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 f4 6b 45 ff 49 8b 46 20 48 89 44 24 18 4c [ 26.934922][ T287] RSP: 0018:ffffc90000c874c0 EFLAGS: 00010202 [ 26.940973][ T287] RAX: 0000000000000004 RBX: ffff8881118c5848 RCX: 0000000000000000 [ 26.949096][ T287] RDX: ffffc90008bfd000 RSI: 0000000000002e1f RDI: 0000000000000020 [ 26.957057][ T287] RBP: ffffc90000c875a8 R08: 0000000000000003 R09: 0000000000000004 [ 26.965037][ T287] R10: dffffc0000000000 R11: fffff52000190e88 R12: dffffc0000000000 [ 26.972997][ T287] R13: 1ffff92000190e9c R14: 0000000000000000 R15: 1ffff11022318b09 [ 26.980956][ T287] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 26.989963][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.996534][ T287] CR2: 00007f6fd5a44060 CR3: 000000010dcf8000 CR4: 00000000003506a0 [ 27.004495][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.012450][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.020567][ T287] Call Trace: [ 27.023978][ T287] ? klist_del+0x100/0x100 [ 27.028381][ T287] ? __kasan_check_write+0x14/0x20 [ 27.033669][ T287] ? mutex_unlock+0x1c/0x40 [ 27.038168][ T287] ? pm_runtime_reinit+0xd3/0x250 [ 27.043181][ T287] device_release_driver_internal+0x67e/0x7c0 [ 27.049230][ T287] device_release_driver+0x19/0x20 [ 27.054442][ T287] usb_driver_release_interface+0x140/0x1b0 [ 27.060421][ T287] acm_disconnect+0xa5a/0xb20 [ 27.065090][ T287] usb_unbind_interface+0x212/0x8a0 [ 27.070272][ T287] ? kernfs_remove_by_name_ns+0x120/0x160 [ 27.075976][ T287] ? usb_driver_release_interface+0x1b0/0x1b0 [ 27.082023][ T287] device_release_driver_internal+0x531/0x7c0 [ 27.088078][ T287] device_release_driver+0x19/0x20 [ 27.093294][ T287] bus_remove_device+0x2df/0x340 [ 27.098210][ T287] device_del+0x62e/0xe60 [ 27.102522][ T287] ? kill_device+0xd0/0xd0 [ 27.107029][ T287] ? device_unregister+0x27/0x40 [ 27.111976][ T287] usb_disable_device+0x3a8/0x750 [ 27.117013][ T287] usb_disconnect+0x32d/0x870 [ 27.121677][ T287] hub_event+0x19c2/0x4220 [ 27.126082][ T287] ? hub_post_resume+0x120/0x120 [ 27.131017][ T287] ? __kasan_check_read+0x11/0x20 [ 27.136044][ T287] ? read_word_at_a_time+0x12/0x20 [ 27.141174][ T287] ? strscpy+0x9b/0x290 [ 27.145314][ T287] process_one_work+0x6fd/0xbc0 [ 27.150143][ T287] worker_thread+0xd1c/0x13c0 [ 27.154812][ T287] ? __kthread_parkme+0xb3/0x1b0 [ 27.159731][ T287] kthread+0x324/0x3b0 [ 27.163782][ T287] ? worker_clr_flags+0x190/0x190 [ 27.168873][ T287] ? kthread_blkcg+0xd0/0xd0 [ 27.173446][ T287] ret_from_fork+0x1f/0x30 [ 27.177926][ T287] Modules linked in: [ 27.185559][ T287] ---[ end trace 261d8398b02d6b81 ]--- [ 27.191680][ T287] RIP: 0010:klist_remove+0x150/0x300 [ 27.197555][ T287] Code: 28 02 49 89 df 49 c1 ef 03 43 80 3c 27 00 74 08 48 89 df e8 12 6c 45 ff 4c 8b 33 49 83 e6 fe 49 8d 7e 20 48 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 05 e8 f4 6b 45 ff 49 8b 46 20 48 89 44 24 18 4c [ 27.219055][ T20] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.229939][ T287] RSP: 0018:ffffc90000c874c0 EFLAGS: 00010202 [ 27.236093][ T20] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 27.248883][ T287] RAX: 0000000000000004 RBX: ffff8881118c5848 RCX: 0000000000000000 [ 27.256893][ T287] RDX: ffffc90008bfd000 RSI: 0000000000002e1f RDI: 0000000000000020 [ 27.265000][ T20] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 27.274008][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.282034][ T287] RBP: ffffc90000c875a8 R08: 0000000000000003 R09: 0000000000000004 [ 27.290045][ T287] R10: dffffc0000000000 R11: fffff52000190e88 R12: dffffc0000000000 [ 27.299341][ T287] R13: 1ffff92000190e9c R14: 0000000000000000 R15: 1ffff11022318b09 [ 27.307912][ T287] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 27.317044][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.323653][ T287] CR2: 00007f6fd5a44060 CR3: 000000012b397000 CR4: 00000000003506a0 [ 27.331689][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.339885][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.347896][ T287] Kernel panic - not syncing: Fatal exception [ 27.354189][ T287] Kernel Offset: disabled [ 27.358530][ T287] Rebooting in 86400 seconds..