last executing test programs: 1m28.948578977s ago: executing program 0 (id=487): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers_probe\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='pcspkr\x00', 0x6) close(r0) 1m28.948388867s ago: executing program 0 (id=488): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf11, 0x1000, 0x104, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbf, 0x57, 0x5a, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000), 0x0) 1m28.707414473s ago: executing program 1 (id=489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001010203010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='ccgx-ucsi 0x08\n\x00', 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m28.160382187s ago: executing program 2 (id=490): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(0x0, 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r1) 1m28.043431401s ago: executing program 2 (id=491): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g7\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(0xffffffffffffffff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g7/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0x0104\x00', 0x7) close(r1) mkdir(&(0x7f0000000340)='./config/usb_gadget/g7/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g7/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g7/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g7/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='Product\x00', 0x8) close(r4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g7/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g7/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g7/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g7/functions/mass_storage.usb6/lun.0/file\x00', 0x1, 0x0) write(r6, &(0x7f0000000680)='/proc/self/cwd/file6\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g7/functions/mass_storage.usb6\x00', &(0x7f0000000700)='./config/usb_gadget/g7/configs/c.1/mass_storage.usb6\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g7/UDC\x00', 0x1, 0x0) write(r7, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r7) 1m27.999679602s ago: executing program 2 (id=493): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0x0525', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='0xa4a1', 0x6) close(r3) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='syzkaller%d', 0xb) close(r4) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001500)='dummy_udc.0', 0xb) close(r5) setns(0xc9, 0x0) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001800)={'syzkaller1\x00', 0x41}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a00)={'syzkaller1\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000001b00)='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012345678912', 0x40, 0x0, &(0x7f0000001c00)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) sendto$packet(r8, &(0x7f0000001b00)='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012345678912', 0x40, 0x0, &(0x7f0000001d00)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 1m2.345857073s ago: executing program 32 (id=488): syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xf11, 0x1000, 0x104, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbf, 0x57, 0x5a, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}]}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000002000), 0x0) 1m2.304420494s ago: executing program 33 (id=489): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001010203010902120001010080320904000000ff000000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x3}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='ccgx-ucsi 0x08\n\x00', 0xf) nanosleep(&(0x7f0000000300)={0x0, 0x1dcd6500}, 0x0) 1m2.281658404s ago: executing program 34 (id=493): mkdir(&(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/dummy_udc/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_udc.0', 0xb) close(r1) mkdir(&(0x7f0000000600)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000600)='./config\x00', &(0x7f0000000700)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r2, &(0x7f0000000a00)='0x0525', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r3, &(0x7f0000000c00)='0xa4a1', 0x6) close(r3) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/ecm.usb0/ifname\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='syzkaller%d', 0xb) close(r4) chdir(&(0x7f0000001100)='./config/usb_gadget/g1\x00') symlink(&(0x7f0000001200)='functions/ecm.usb0\x00', &(0x7f0000001300)='configs/c.1/ecm.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001400)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001500)='dummy_udc.0', 0xb) close(r5) setns(0xc9, 0x0) r6 = socket(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001700)={'syzkaller0\x00', 0x41}) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x8914, &(0x7f0000001800)={'syzkaller1\x00', 0x41}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000001a00)={'syzkaller1\x00', 0x0}) r8 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r8, &(0x7f0000001b00)='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012345678912', 0x40, 0x0, &(0x7f0000001c00)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) sendto$packet(r8, &(0x7f0000001b00)='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ012345678912', 0x40, 0x0, &(0x7f0000001d00)={0x11, 0x300, r7, 0x1, 0x0, 0x6, @random='abcdef'}, 0x14) 1m2.271237124s ago: executing program 35 (id=492): mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./gadget\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./gadget\x00', &(0x7f0000000200)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)="000000000902190001010080320904000001ff00000007058102400000120100020000004012345678000100000001", 0x2f) nanosleep(&(0x7f0000000500)={0x0, 0x11e1a300}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)="0000000007058102400000", 0xb) write(r1, &(0x7f0000000800)='AAAA', 0x4) 1m2.236316885s ago: executing program 36 (id=486): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='devices\n', 0x8) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='freeze', 0x6) close(r2) 42.325186372s ago: executing program 7 (id=550): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000100)={{0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}, {0x0, 0xffff, 0x0, 0xb, 0x1}, {0x0, 0xffff, 0x0, 0x2, 0x1}, {}, {}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfee00000}) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040ae80, &(0x7f0000000200)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 42.224702605s ago: executing program 7 (id=551): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(0x0, 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r1) 42.101073578s ago: executing program 7 (id=552): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00), 0x0) 42.036573419s ago: executing program 7 (id=553): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000000)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x23, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10185200901150025ff75089506810285300901150025ff750895028102c0"}}, 0x111c) 40.503870078s ago: executing program 8 (id=563): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00), 0x0) 40.484514519s ago: executing program 8 (id=564): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/pcspkr/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='pcspkr\x00', 0x7) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='xhci-hcd\x00', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000000600)='pcspkr\x00', 0x7) 40.416450431s ago: executing program 8 (id=565): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x0, 0x0, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x0, r2}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x0, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x0, 0x0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x0, 0x0, 0x1}]}, 0x3c}}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x3c, r1, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x0, 0x0, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x0, 0x0, r3}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x0, 0x0, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x0, 0x0}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x0, 0x0, 0x1}]}, 0x3c}}, 0x0) 40.416030761s ago: executing program 8 (id=566): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/usb_gadget/g7\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g7/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g7/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g7/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g7/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g7/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g7/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g7/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g7/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g7/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g7/functions/mass_storage.usb6/lun.0/file\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='/proc/self/cwd/file6\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g7/functions/mass_storage.usb6\x00', &(0x7f0000000700)='./config/usb_gadget/g7/configs/c.1/mass_storage.usb6\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g7/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r8) 40.409859711s ago: executing program 8 (id=567): syz_usb_connect(0x0, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040c505020000010102030109024a0001010080fa0904000008ff0000000705810240000007058202400000070583024000000705840240000007050102400000070502024000000705030240000007050402400000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 39.727280168s ago: executing program 5 (id=578): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18, 0x1}, @nested_amd_vmsave={0x183, 0x18, 0x1}, @nested_amd_vmload={0x182, 0x18, 0x1}]}) ioctl$KVM_RUN(r3, 0x0, 0x0) mkdir(&(0x7f0000000100)='./my_configfs\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./my_configfs\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./my_configfs/acpi/table/my_table\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./my_configfs/acpi/table/my_table/aml\x00', 0x1, 0x0) write(r4, &(0x7f0000000700)="5353445435000000024900000000000000000000000000000000000000000000000000005b820f50434930085f4849440c080ad041", 0x35) 39.708952109s ago: executing program 5 (id=579): r0 = epoll_create(0x1) epoll_wait(r0, &(0x7f0000000700), 0x0, 0x3e8) 39.644446871s ago: executing program 5 (id=580): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x242, 0x1b6) pwrite64(r0, &(0x7f0000000080)="0000000000000000010000000000000001000000533153555350454e4400533153555350454e4400", 0x28, 0xfd8) pwrite64(r0, &(0x7f00000000c0)='\x00', 0x1, 0x1fff) r1 = syz_open_dev$loop(&(0x7f0000000300), 0x0, 0x2) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/power/resume\x00', 0x1, 0x0) write(r2, &(0x7f0000000000)='7:0\n\x00', 0x4) 39.644202991s ago: executing program 5 (id=581): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, 0x0) 39.583803322s ago: executing program 5 (id=582): clock_nanosleep(0x0, 0x0, &(0x7f0000001400)={0x1}, 0x0) 39.353759878s ago: executing program 6 (id=583): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0), 0x0) 39.280455749s ago: executing program 6 (id=584): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(0x0, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r1) 39.206032392s ago: executing program 6 (id=586): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, {0x40000001, 0x0, 0x0, 0x1000}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d05, 0x0, 0x1}]}) ioctl$KVM_CAP_HALT_POLL(r1, 0x4068aea3, &(0x7f0000000300)={0xb6, 0x0, 0x30d40}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040ae80, &(0x7f0000000040)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000500)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040ae80, &(0x7f0000000080)) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000500)=0x3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 39.205085042s ago: executing program 9 (id=587): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:02.0/driver/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000001000)='0000:00:02.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/net2280/new_id\x00', 0x1, 0x0) write(r1, &(0x7f0000001100)='8086 10d3 ffffffff ffffffff 0 0 1\x00', 0x22) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/net2280/bind\x00', 0x1, 0x0) write(r2, &(0x7f0000001200)='0000:00:02.0\x00', 0xd) 39.150504413s ago: executing program 9 (id=588): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mkdir(&(0x7f0000000200)='./config/usb_gadget/g7\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g7/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g7/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g7/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g7/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g7/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g7/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g7/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g7/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g7/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g7/functions/mass_storage.usb6/lun.0/file\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='/proc/self/cwd/file6\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g7/functions/mass_storage.usb6\x00', &(0x7f0000000700)='./config/usb_gadget/g7/configs/c.1/mass_storage.usb6\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g7/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r8) 39.150209873s ago: executing program 9 (id=589): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_GUEST_MEMFD(r1, 0xc040aed4, &(0x7f0000000040)={0x1000}) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x4, 0x10000, 0x1000, 0x0, 0x0, r2}) close(r2) ioctl$KVM_SET_USER_MEMORY_REGION2(r1, 0x40a0ae49, &(0x7f0000000080)={0x0, 0x0, 0x10000}) 39.076465905s ago: executing program 9 (id=590): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./debug\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./debug\x00', &(0x7f0000000700)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./tracing/events/kvm/kvm_inj_virq/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000900)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./tracing/events/enable\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='1\n', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./debug/tracing/events/kvm/kvm_inj_virq/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./debug/tracing/events/enable\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='1\n', 0x2) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000001000), 0x2, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_INTERRUPT(r6, 0x4004ae86, &(0x7f0000001100)=0x20) ioctl$KVM_RUN(r6, 0xae80, 0x0) 39.076141655s ago: executing program 9 (id=591): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./sys\x00', 0x1ff) mount(&(0x7f0000002000)=@nullb, &(0x7f0000003000)='./sys\x00', &(0x7f0000004000)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000005000)='./sys/power/pm_test\x00', 0x1, 0x0) write(r1, &(0x7f0000006000)='core\n', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000007000)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000008000)='mem\n', 0x4) 38.936488038s ago: executing program 6 (id=592): syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000008ac05001200010102000109022900010100c0500904000002030000000921000100012200000705810308000a0705020308000a"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000300)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/power_supply/apple_mfi_fastcharge_5-1/charge_full_design\x00', 0x0, 0x0) read(r0, &(0x7f0000000500)=""/1, 0x100) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/class/power_supply/apple_mfi_fastcharge_5-1/uevent\x00', 0x0, 0x0) read(r1, &(0x7f0000000600)=""/1, 0x100) 27.129319529s ago: executing program 8 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='freeze\n', 0x7) write(r0, &(0x7f00000001c0)='mem\n', 0x4) write(r0, &(0x7f0000000200)='disk\n', 0x5) 27.076442891s ago: executing program 7 (id=594): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0), 0x0) 27.076200251s ago: executing program 6 (id=595): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@cpuid={0x0, 0x0, {0x1}}]}) r4 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000300)={0x0, &(0x7f0000000400)=[@cpuid={0x0, 0x0, {0x1}}]}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae05) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r3, 0x0) mmap$KVM_VCPU(&(0x7f000000a000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000500)) ioctl$KVM_SET_SREGS(r4, 0x4138ae84, &(0x7f0000000500)) ioctl$KVM_GET_VCPU_EVENTS(r3, 0x8040ae9f, &(0x7f0000000600)) ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4040aea0, &(0x7f0000000600)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 27.07598672s ago: executing program 5 (id=596): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(0x0, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r1) 27.046348161s ago: executing program 7 (id=597): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='dummy_', 0x6) 27.017446922s ago: executing program 9 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:01.0\x00', 0xd) 26.944468034s ago: executing program 6 (id=599): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1000, 0x3e8) 6.932839143s ago: executing program 37 (id=596): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(0x0, &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(0xffffffffffffffff) write(0xffffffffffffffff, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(0xffffffffffffffff) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r1) 6.909925734s ago: executing program 38 (id=599): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100)=""/1000, 0x3e8) 6.866158935s ago: executing program 39 (id=597): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='dummy_', 0x6) 6.809900907s ago: executing program 40 (id=593): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='freeze\n', 0x7) write(r0, &(0x7f00000001c0)='mem\n', 0x4) write(r0, &(0x7f0000000200)='disk\n', 0x5) 6.772839347s ago: executing program 41 (id=598): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='0000:00:01.0\x00', 0xd) 3.555600269s ago: executing program 4 (id=604): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401097207700010102030109022000010100c0000904000002ff0000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write(r0, &(0x7f0000000100)='hello', 0x5) 3.395309463s ago: executing program 3 (id=603): mkdirat(0xffffffffffffff9c, &(0x7f0000004000)='./mnt\x00', 0x1ff) mount(&(0x7f0000004040)=@filename='none\x00', &(0x7f0000004080)='./mnt\x00', &(0x7f00000040c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000004100)='./mnt/tracing_on\x00', 0x1, 0x0) write(r0, &(0x7f0000004140)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004180)='./mnt/events/cdns3/cdns3_ep0_queue/enable\x00', 0x1, 0x0) write(r1, &(0x7f00000041c0)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000004200)='./mnt/trace_marker\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000004240)='./mnt/events/cdns3/cdns3_ep0_queue/inject\x00', 0x1, 0x0) write(r2, &(0x7f0000004280)='\x00'/3930, 0xf5a) write(r3, &(0x7f0000005200)='dir=1 length=10', 0xf) write(r2, &(0x7f0000005240)='\x00'/3940, 0xf64) write(r3, &(0x7f00000061c0)='dir=1 length=15', 0xf) write(r2, &(0x7f0000006200)='\x00'/3950, 0xf6e) write(r3, &(0x7f0000007180)='dir=1 length=20', 0xf) write(r2, &(0x7f00000071c0)='\x00'/3960, 0xf78) write(r3, &(0x7f0000008140)='dir=1 length=25', 0xf) write(r2, &(0x7f0000008180)='\x00'/3970, 0xf82) write(r3, &(0x7f0000009140)='dir=1 length=30', 0xf) close(r2) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000009180)='./mnt/trace_pipe\x00', 0x0, 0x0) read(r4, &(0x7f00000091c0)=""/16384, 0x4000) close(r4) 3.310388335s ago: executing program 3 (id=605): syz_usb_connect(0x0, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0x0, 0x0, 0x40, 0xb95, 0x7720, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0xa0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x8, 0x1}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'lo\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth0\x00', 0x1}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'veth1\x00', 0x1}) 3.306635496s ago: executing program 0 (id=600): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g7\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g7/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g7/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g7/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g7/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g7/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g7/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g7/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g7/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g7/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g7/functions/mass_storage.usb6/lun.0/file\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='/proc/self/cwd/file6\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g7/functions/mass_storage.usb6\x00', &(0x7f0000000700)='./config/usb_gadget/g7/configs/c.1/mass_storage.usb6\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g7/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r8) 3.159918419s ago: executing program 0 (id=606): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0\x00', 0xb) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='dummy_hcd.0\x00', 0xb) close(r1) 2.962390104s ago: executing program 0 (id=607): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0), 0x0) 2.910220155s ago: executing program 0 (id=608): syz_usb_connect(0x3, 0x42, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000202000040ef176161000001020301090230000101008032090400000302020000052400100104240202070581034000100705820200020007050302000200"], &(0x7f0000000100)) nanosleep(&(0x7f0000000400)={0x1}, 0x0) 2.443851957s ago: executing program 2 (id=602): mkdir(&(0x7f0000000040)='./mysys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./mysys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./mysys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0000:00:10.0\x00', 0xd) write(r0, &(0x7f00000001c0)='0000:00:11.0\x00', 0xd) write(r0, &(0x7f0000000200)='0000:00:12.0\x00', 0xd) write(r0, &(0x7f0000000240)='0000:00:13.0\x00', 0xd) write(r0, &(0x7f0000000280)='0000:00:14.0\x00', 0xd) write(r0, &(0x7f00000002c0)='0000:00:15.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0000:00:10.0\x00', 0xd) write(r1, &(0x7f0000000380)='0000:00:11.0\x00', 0xd) write(r1, &(0x7f00000003c0)='0000:00:12.0\x00', 0xd) write(r1, &(0x7f0000000400)='0000:00:13.0\x00', 0xd) write(r1, &(0x7f0000000440)='0000:00:14.0\x00', 0xd) write(r1, &(0x7f0000000480)='0000:00:15.0\x00', 0xd) close(r1) 2.421040838s ago: executing program 1 (id=601): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0xef) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2) write$hidraw(r1, &(0x7f0000000400)='12345678', 0x8) 2.33642376s ago: executing program 2 (id=609): syz_mount_image$vfat(&(0x7f0000000200), &(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000280), 0x1, 0x1ea, &(0x7f00000002c0)="$eJzs289qE1EUBvCvf6zVLlLElboYcOMqtH0Cg1QQA0IlC10ZbAvSkUIKBQWtO3c+iC8j9Gm6ECrMxLap6UJKHez8fhDmkJsP7l0k5yxu3jx4v7O5u7f949NhFmeKzCePc5QsZzZzqc2Mn7NVvZCzvgQA+N9sbAx7Te+BqzUa9YZ3kiz9sTL43siGAAAAAAAAAAAAuDT3/wGgfdz/v/5Go97w/nh+m+T+PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAANCco+PjzvGU180ki0luJbmd5Pf7Te8XALg8/R8A2kf/B4D20f8BoH1evnr9vNfvr28UxWJSft0f7A/qZ73e2867lNnKSjr5Wc0BY3X99Fl/faWoLOdbeTDOH+wP5ibzq+lkeXp+tc4Xk/kb1dxxkl9LJ3en59em5hfy6OGZfDedHL7NbspsVvPMaf7zalE8edE/l1+qPgcA11G3ODG1f3e7F63X+b+YD8711/ncm2/27ADQVnsfPu4My3JrpFAoFCdF079MwFU7/dI3vRMAAAAAAAAAAAAAAOAi/+LvRE2fEQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAID2+RUAAP//XaXxig==") mkdir(&(0x7f0000001000)='./configfs\x00', 0x1ff) mount(0x0, &(0x7f0000001100)='./configfs\x00', &(0x7f0000001200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000001300)='./configfs/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./configfs/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000001500)='0x0525\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./configfs/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000001700)='0xa4a1\n\x00', 0x7) close(r1) mkdir(&(0x7f0000001800)='./configfs/usb_gadget/g1/functions/ncm.usb0\x00', 0x1ff) mkdir(&(0x7f0000001900)='./configfs/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlink(&(0x7f0000001a00)='./configfs/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', &(0x7f0000001b00)='./configfs/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001d00)='dummy_udc.0\n\x00', 0xc) close(r2) clock_nanosleep(0x0, 0x0, &(0x7f0000001e00)={0x2}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000001c00)='./configfs/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000002100)='\n\x00', 0x1) close(r3) 1.517328751s ago: executing program 2 (id=610): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/drivers_autoprobe\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0', 0x1) close(r0) syz_usb_connect(0x0, 0x32, &(0x7f0000000600)=ANY=[@ANYBLOB="1201000200000040720541000001010203010902200001010080fa0904000002ff0000000705010200020007058102000200"], 0x0) (async) nanosleep(&(0x7f0000000700)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/usb/drivers/conex/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='1-1:1.0', 0x7) write(r1, &(0x7f0000000a00)='2-1:1.0', 0x7) write(r1, &(0x7f0000000b00)='3-1:1.0', 0x7) write(r1, &(0x7f0000000c00)='4-1:1.0', 0x7) write(r1, &(0x7f0000000d00)='5-1:1.0', 0x7) close(r1) 1.507752771s ago: executing program 1 (id=611): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1c0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='0x1d6b\n', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0x0104\n', 0x7) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/functions/ncm.usb0\x00', 0x1c0) symlinkat(&(0x7f00000003c0)='./config/usb_gadget/g1/configs/c.1/../../functions/ncm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/ncm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\n', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r3, &(0x7f0000000500)='64\n', 0x3) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='MSFT100', 0x7) close(r4) symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/os_desc/../configs/c.1\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/os_desc/c.1\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='WINNCM', 0x6) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r6, &(0x7f0000000740)='dummy_udc.0', 0xb) close(r6) r7 = syz_open_dev$usbfs(&(0x7f0000000780), 0x16, 0x2) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f00000007c0)={0xc0, 0x40, 0x0, 0x4, 0x100, 0x3e8, &(0x7f0000000800)}) 1.429423223s ago: executing program 1 (id=612): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracefs\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracefs\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracefs/current_tracer\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='function', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracefs/trace_options\x00', 0x1, 0x0) write(r1, &(0x7f00000001c0)='bin', 0x3) close(r1) getpid() getuid() getgid() r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracefs/trace_pipe\x00', 0x800, 0x0) read(r2, &(0x7f0000000300), 0x1000) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracefs/trace\x00', 0x0, 0x0) read(r3, &(0x7f0000000500), 0x1000) close(r3) 1.385024414s ago: executing program 1 (id=613): syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000100)) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./debug\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./debug\x00', &(0x7f00000001c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./debug/failslab/probability\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='100\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./debug/failslab/times\x00', 0x1, 0x0) write(r1, &(0x7f00000002c0)='1\x00', 0x2) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./debug/failslab/task-filter\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='N\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000380)='./config\x00', 0x1c0) 307.952402ms ago: executing program 4 (id=614): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file6\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g7\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g7/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g7/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g7/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g7/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g7/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g7/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g7/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g7/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g7/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g7/functions/mass_storage.usb6/lun.0/file\x00', 0x1, 0x0) write(r7, &(0x7f0000000680)='/proc/self/cwd/file6\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g7/functions/mass_storage.usb6\x00', &(0x7f0000000700)='./config/usb_gadget/g7/configs/c.1/mass_storage.usb6\x00') r8 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./config/usb_gadget/g7/UDC\x00', 0x1, 0x0) write(r8, &(0x7f0000000780)='dummy_udc.0', 0xb) close(r8) 269.923073ms ago: executing program 1 (id=615): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0xf4240) close(r0) mkdir(&(0x7f0000000080)='./sys\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config\x00', 0x1ff) mount(&(0x7f0000000000), &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000280)='./config/usb_gadget/g1/functions/mass_storage.0\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/cdrom\x00', 0x2, 0x0) write(r1, &(0x7f0000000300)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/mass_storage.0/lun.0/file\x00', 0x2, 0x0) write(r2, &(0x7f0000000380)='file0\x00', 0x6) close(r2) symlink(&(0x7f00000003c0)='./config/usb_gadget/g1/functions/mass_storage.0\x00', &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/mass_storage.0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='dummy_udc.0', 0xb) close(r3) 251.321483ms ago: executing program 4 (id=616): unshare(0x10020000) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='WINN', 0x4) 221.813214ms ago: executing program 4 (id=617): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000500)={&(0x7f0000040000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000002020000000000000000027f000000002b00"/380, 0xd8}) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) 160.268035ms ago: executing program 3 (id=618): mknodat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x81b6, 0xaec) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd00, &(0x7f0000000100)="04000000320000000000000038010000380100"/292) 160.052805ms ago: executing program 3 (id=619): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x2, &(0x7f0000000680)=ANY=[@ANYBLOB="b7000000020000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r0, 0x1, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000400)={r0, 0x2, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000500)={r0, 0x3, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000600)={r0, 0x4, 0x25, 0x0, @void}, 0x30) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000700)={r0, 0x5, 0x25, 0x0, @void}, 0x30) 140.360536ms ago: executing program 3 (id=620): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tmp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/fs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/fs/nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'lo\x00', 0x1}) mount(&(0x7f00000001c0)=@filename='sunrpc\x00', &(0x7f0000000200)='./rpc_pipefs\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./proc/fs/nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r1, &(0x7f0000000380)='-2 -3\n', 0x6) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='tcp 2049\n', 0x9) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./rpc_pipefs/nfsd/cld\x00', 0x2, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000500)='net/rpc\x00') r5 = openat(r4, &(0x7f0000000540)='nfsd.export/channel\x00', 0x2, 0x0) write(r5, &(0x7f0000000580)='* /tmp 2147483647 0 65534 65534 0\n', 0x22) r6 = openat(r4, &(0x7f00000005c0)='nfsd.fh/channel\x00', 0x2, 0x0) write(r6, &(0x7f0000000600)='* 1 \\x00000000 2147483647 /tmp\n', 0x1f) mount(&(0x7f0000000640)=@filename='127.0.0.1:/\x00', &(0x7f0000000680)='./mnt\x00', &(0x7f00000006c0)='nfs\x00', 0x0, &(0x7f0000000700)='addr=127.0.0.1,vers=4.0\x00') r7 = openat(0xffffffffffffff9c, &(0x7f0000000740)='./mnt\x00', 0x10000, 0x0) getdents64(r7, &(0x7f0000000100), 0x100) 100.653607ms ago: executing program 3 (id=621): syz_usb_connect(0x3, 0x39, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0x0, 0x40, 0xb95, 0x1790, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x27, 0x1, 0x1, 0x0, 0xc0, 0x32, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0xff, 0xff, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}, {{0x9, 0x5, 0x83, 0x3, 0x40, 0x8}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 81.701648ms ago: executing program 4 (id=622): r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000440)="01010101", 0x4) read(r0, &(0x7f0000000480)=""/4, 0x4) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000500)=""/1024, 0x400) 0s ago: executing program 4 (id=623): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config_i2c\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config_i2c\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config_i2c/i2c-gpio\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config_i2c/i2c-gpio/bus0\x00', 0x1ff) kernel console output (not intermixed with test programs): d 05dc pid 0001: 2 [ 75.114747][ T311] scsi host1: usb-storage 2-1:1.0 [ 75.190101][ T24] audit: type=1400 audit(1786952572.223:184): avc: denied { mount } for pid=1377 comm="syz.2.291" name="/" dev="loop2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 75.214245][ T24] audit: type=1400 audit(1786952572.253:185): avc: denied { mounton } for pid=1377 comm="syz.2.291" path="/66/file0/configfs" dev="loop2" ino=1048595 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1 [ 75.250783][ T1383] udc-core: couldn't find an available UDC or it's busy [ 75.257965][ T1383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.267111][ T1383] udc-core: couldn't find an available UDC or it's busy [ 75.274060][ T1383] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.281638][ T301] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 75.387111][ T1385] ums-jumpshot 2-1:1.0: USB Mass Storage device detected [ 75.395213][ T1385] ums-jumpshot 2-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 75.403014][ T1385] scsi host1: usb-storage 2-1:1.0 [ 75.605099][ T301] usb 5-1: not running at top speed; connect to a high speed hub [ 75.705098][ T301] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 1024, setting to 1023 [ 75.794877][ T1390] udc-core: couldn't find an available UDC or it's busy [ 75.802025][ T1390] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 75.874985][ T301] usb 5-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice= 1.00 [ 75.884152][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 75.892196][ T301] usb 5-1: Product: syz [ 75.896447][ T301] usb 5-1: Manufacturer: syz [ 75.901055][ T301] usb 5-1: SerialNumber: syz [ 75.973939][ T24] audit: type=1400 audit(1786952573.003:186): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 76.050686][ T1392] Zero length message leads to an empty skb [ 76.296780][ T301] usb 2-1: USB disconnect, device number 16 [ 76.354983][ T311] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 76.835016][ T311] usb 3-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 76.844131][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 76.852246][ T311] usb 3-1: Product: syz [ 76.856760][ T311] usb 3-1: Manufacturer: syz [ 77.211767][ T311] usb 5-1: USB disconnect, device number 15 [ 77.226454][ T301] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 77.336123][ T380] usb 1-1: USB disconnect, device number 3 [ 77.343335][ T53] android_work: sent uevent USB_STATE=DISCONNECTED [ 77.355323][ T380] rndis_host 1-1:1.0 usb2: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 77.371833][ T24] audit: type=1400 audit(1786952574.403:187): avc: denied { search } for pid=1422 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.408122][ T24] audit: type=1400 audit(1786952574.433:188): avc: denied { read } for pid=1423 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.419811][ T1420] using random self ethernet address [ 77.447063][ T380] cdc_ncm 1-1:1.2 usb3: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 77.466641][ T24] audit: type=1400 audit(1786952574.433:189): avc: denied { open } for pid=1423 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.486734][ T1420] using random host ethernet address [ 77.521795][ T24] audit: type=1400 audit(1786952574.433:190): avc: denied { getattr } for pid=1423 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=416 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.577772][ T24] audit: type=1400 audit(1786952574.593:191): avc: denied { write } for pid=1422 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=415 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.595389][ T1441] udc-core: couldn't find an available UDC or it's busy [ 77.607655][ T353] usb 3-1: USB disconnect, device number 20 [ 77.617876][ T1441] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 77.635994][ T24] audit: type=1400 audit(1786952574.593:192): avc: denied { add_name } for pid=1422 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.665605][ T301] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice= 0.00 [ 77.679554][ T301] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.693233][ T24] audit: type=1400 audit(1786952574.613:193): avc: denied { remove_name } for pid=1437 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=2294 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 77.865402][ T380] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 77.884949][ T53] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 77.885162][ T353] android_work: sent uevent USB_STATE=CONNECTED [ 78.275014][ T53] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 78.275126][ T380] usb 1-1: Dual-Role OTG device on HNP port [ 78.305054][ T380] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 5.10 [ 78.314143][ T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.322226][ T380] usb 1-1: Product: Loopback Gadget [ 78.327462][ T380] usb 1-1: Manufacturer: Linux Foundation [ 78.333193][ T380] usb 1-1: SerialNumber: fedcba9876543210 [ 78.355805][ T366] android_work: sent uevent USB_STATE=CONFIGURED [ 78.434989][ T311] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 78.445084][ T53] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 78.454258][ T53] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 78.462437][ T53] usb 5-1: Product: syz [ 78.466744][ T53] usb 5-1: Manufacturer: syz [ 78.471344][ T53] usb 5-1: SerialNumber: syz [ 78.556457][ T380] rndis_host 1-1:1.0 usb2: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 42:3c:f4:d1:b7:fa [ 78.765088][ T380] cdc_ncm 1-1:1.2: MAC-Address: 2e:81:01:a9:2c:9b [ 78.773329][ T380] cdc_ncm 1-1:1.2 usb3: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 2e:81:01:a9:2c:9b [ 78.895608][ T380] cdc_acm 1-1:1.6: ttyACM0: USB ACM device [ 78.965025][ T311] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice= 0.00 [ 78.984486][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 79.003108][ T311] usb 3-1: Product: syz [ 79.014901][ T311] usb 3-1: Manufacturer: syz [ 79.019578][ T311] usb 3-1: SerialNumber: syz [ 79.075460][ T311] smsc75xx v1.0.0 [ 79.160363][ T1553] F2FS-fs (loop3): Small segment_count (9 < 1 * 24) [ 79.176231][ T1553] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 79.199934][ T1553] F2FS-fs (loop3): Found nat_bits in checkpoint [ 79.240458][ T1553] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 79.247648][ C1] cdc_ncm 1-1:1.2 usb3: 425 mbit/s downlink 425 mbit/s uplink [ 79.255442][ T1553] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 79.265182][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): usb3: link becomes ready [ 79.284936][ C1] cdc_ncm 1-1:1.2 usb3: 425 mbit/s downlink 425 mbit/s uplink [ 79.313309][ T280] attempt to access beyond end of device [ 79.313309][ T280] loop3: rw=2049, want=45112, limit=40427 [ 79.685020][ T53] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS [ 79.691195][ T53] cdc_ncm 5-1:1.0: bind() failure [ 79.697353][ T53] cdc_ncm 5-1:1.1: bind() failure [ 79.703388][ T53] usb 5-1: USB disconnect, device number 16 [ 79.709476][ T301] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 79.960166][ T53] usb 2-1: USB disconnect, device number 17 [ 80.015004][ T311] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 80.025933][ T311] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 80.035471][ T311] smsc75xx 3-1:1.0 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 80.045562][ T311] smsc75xx: probe of 3-1:1.0 failed with error -71 [ 80.052855][ T311] usb 3-1: USB disconnect, device number 21 [ 80.174265][ T1602] udc-core: couldn't find an available UDC or it's busy [ 80.195197][ T301] usb 4-1: New USB device found, idVendor=05dc, idProduct=0001, bcdDevice= 0.00 [ 80.204359][ T301] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 80.212574][ T301] usb 4-1: Product: syz [ 80.217128][ T301] usb 4-1: Manufacturer: syz [ 80.255661][ T301] ums-jumpshot 4-1:1.0: USB Mass Storage device detected [ 80.264057][ T301] ums-jumpshot 4-1:1.0: Quirks match for vid 05dc pid 0001: 2 [ 80.275524][ T301] scsi host1: usb-storage 4-1:1.0 [ 80.325063][ T53] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 80.454946][ T1451] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 80.463073][ T1625] udc-core: couldn't find an available UDC or it's busy [ 80.470205][ T1625] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 80.510359][ T24] kauditd_printk_skb: 9 callbacks suppressed [ 80.510374][ T24] audit: type=1400 audit(1786952577.543:203): avc: denied { read } for pid=1626 comm="syz.2.328" name="enable" dev="tracefs" ino=6667 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 80.585032][ T53] usb 2-1: Using ep0 maxpacket: 16 [ 80.672607][ T1636] udc-core: couldn't find an available UDC or it's busy [ 80.692870][ T24] audit: type=1400 audit(1786952577.723:204): avc: denied { map_create } for pid=1637 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.712225][ T53] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.723299][ T1451] usb 5-1: Using ep0 maxpacket: 8 [ 80.728735][ T24] audit: type=1400 audit(1786952577.723:205): avc: denied { map_read map_write } for pid=1637 comm="syz.2.332" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 80.748644][ T53] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 80.761489][ T53] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 80.771131][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.780814][ T53] usb 2-1: config 0 descriptor?? [ 80.845053][ T1451] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 80.854446][ T1451] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 81.065032][ T20] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 81.147133][ T311] usb 5-1: USB disconnect, device number 17 [ 81.218373][ T1650] udc-core: couldn't find an available UDC or it's busy [ 81.225702][ T1650] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 81.266241][ T53] HID 045e:07da: Invalid code 65791 type 1 [ 81.275234][ T53] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0008/input/input12 [ 81.287863][ T53] microsoft 0003:045E:07DA.0008: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 81.306723][ T53] scsi 1:0:0:0: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 81.323287][ T53] scsi 1:0:0:1: Direct-Access Lexar Jumpshot USB CF 0000 PQ: 0 ANSI: 0 CCS [ 81.515003][ T1613] usb 4-1: reset high-speed USB device number 16 using dummy_hcd [ 81.595061][ T20] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice= 0.00 [ 81.604406][ T20] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.612485][ T20] usb 3-1: Product: syz [ 81.616770][ T20] usb 3-1: Manufacturer: syz [ 81.621538][ T20] usb 3-1: SerialNumber: syz [ 81.868081][ T353] usb 3-1: USB disconnect, device number 22 [ 81.924964][ T25] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 82.070669][ T1600] udc-core: couldn't find an available UDC or it's busy [ 82.077780][ T1600] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.085865][ T353] usb 2-1: USB disconnect, device number 18 [ 82.274394][ C1] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 82.292063][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 82.302075][ T25] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 82.418166][ T1667] udc-core: couldn't find an available UDC or it's busy [ 82.465171][ T25] usb 5-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 82.482174][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.497399][ T25] usb 5-1: Product: syz [ 82.503256][ T25] usb 5-1: Manufacturer: syz [ 82.508483][ T25] usb 5-1: SerialNumber: syz [ 82.540203][ T1659] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.554625][ T1659] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 82.575884][ T25] ums-alauda 5-1:1.0: USB Mass Storage device detected [ 82.605946][ T25] ums-alauda 5-1:1.0: This device (0584,0008,0102 S 06 P 50) has an unneeded SubClass entry in unusual_devs.h (kernel syzkaller) [ 82.605946][ T25] Please send a copy of this message to and [ 82.666330][ T25] scsi host2: usb-storage 5-1:1.0 [ 82.737814][ T1693] udc-core: couldn't find an available UDC or it's busy [ 82.745258][ T1693] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 82.875021][ T366] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 82.995087][ T1613] usb 4-1: device descriptor read/64, error -71 [ 83.065047][ T311] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 83.115009][ T366] usb 3-1: Using ep0 maxpacket: 16 [ 83.235107][ T366] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 83.246374][ T366] usb 3-1: New USB device found, idVendor=04d8, idProduct=f002, bcdDevice= 0.00 [ 83.255793][ T366] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 83.264852][ T366] usb 3-1: config 0 descriptor?? [ 83.417048][ T1613] usb 4-1: device firmware changed [ 83.430636][ T1696] udc-core: couldn't find an available UDC or it's busy [ 83.438050][ T380] usb 4-1: USB disconnect, device number 16 [ 83.465733][ T375] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=0x00 [ 83.468831][ T374] sd 1:0:0:1: [sdc] Read Capacity(10) failed: Result: hostbyte=0x01 driverbyte=0x00 [ 83.478128][ T375] sd 1:0:0:0: [sdb] Sense not available. [ 83.485385][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 83.491696][ T375] sd 1:0:0:0: [sdb] 0 512-byte logical blocks: (0 B/0 B) [ 83.508707][ T311] usb 2-1: can't read configurations, error -61 [ 83.518317][ T374] sd 1:0:0:1: [sdc] Sense not available. [ 83.526055][ T375] sd 1:0:0:0: [sdb] 0-byte physical blocks [ 83.528600][ T374] sd 1:0:0:1: [sdc] 0 512-byte logical blocks: (0 B/0 B) [ 83.534240][ T375] sd 1:0:0:0: [sdb] Write Protect is off [ 83.540364][ T374] sd 1:0:0:1: [sdc] 0-byte physical blocks [ 83.550753][ T375] sd 1:0:0:0: [sdb] Asking for cache data failed [ 83.552867][ T374] sd 1:0:0:1: [sdc] Write Protect is off [ 83.560281][ T375] sd 1:0:0:0: [sdb] Assuming drive cache: write through [ 83.570943][ T374] sd 1:0:0:1: [sdc] Asking for cache data failed [ 83.577905][ T374] sd 1:0:0:1: [sdc] Assuming drive cache: write through [ 83.602134][ T374] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 83.621594][ T375] sd 1:0:0:0: [sdb] Read Capacity(10) failed: Result: hostbyte=0x07 driverbyte=0x00 [ 83.631370][ T375] sd 1:0:0:0: [sdb] Sense not available. [ 83.637392][ T375] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 83.685134][ T311] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 83.705673][ T53] scsi 2:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 83.762224][ T53] scsi 2:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 83.776414][ T366] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 83.784799][ T366] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 83.795850][ T366] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 83.803834][ T366] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 83.812975][ T366] hid-picolcd 0003:04D8:F002.0009: unknown main item tag 0x0 [ 83.831134][ T312] usb 1-1: USB disconnect, device number 4 [ 83.837905][ T312] rndis_host 1-1:1.0 usb2: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 83.838219][ T25] android_work: sent uevent USB_STATE=DISCONNECTED [ 83.885163][ T366] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf3 found [ 83.895430][ T366] hid-picolcd 0003:04D8:F002.0009: No report with id 0xf4 found [ 83.912436][ T312] cdc_ncm 1-1:1.2 usb3: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 83.958112][ T366] usb 5-1: USB disconnect, device number 18 [ 83.965029][ T380] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 83.986138][ T374] sd 2:0:0:0: [sdb] Attached SCSI removable disk [ 84.005581][ T375] sd 2:0:0:1: [sdd] Attached SCSI removable disk [ 84.115201][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 84.132621][ T311] usb 2-1: can't read configurations, error -61 [ 84.153571][ T311] usb usb2-port1: attempt power cycle [ 84.158707][ T1736] udc-core: couldn't find an available UDC or it's busy [ 84.202716][ T1744] udc-core: couldn't find an available UDC or it's busy [ 84.211665][ T1744] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 84.355122][ T380] usb 4-1: New USB device found, idVendor=0572, idProduct=cafe, bcdDevice= 0.00 [ 84.364536][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.375127][ T312] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 84.405274][ T353] android_work: sent uevent USB_STATE=CONNECTED [ 84.455151][ T302] udevd[302]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 84.471671][ T365] udevd[365]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 84.471769][ T364] udevd[364]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 84.528240][ T302] udevd[302]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 84.565108][ T311] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 84.574220][ T365] udevd[365]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 84.603762][ T1551] udevd[1551]: inotify_add_watch(7, /dev/sdd, 10) failed: No such file or directory [ 84.645819][ T302] udevd[302]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 84.677596][ T380] usb 4-1: USB disconnect, device number 17 [ 84.735726][ T366] android_work: sent uevent USB_STATE=DISCONNECTED [ 84.754687][ T1799] kobject_add_internal failed for syzkaller0 (error: -2 parent: net) [ 84.765221][ T312] usb 1-1: string descriptor 0 read error: -71 [ 84.771518][ T1799] udc dummy_udc.0: failed to start g1: -2 [ 84.771790][ T312] usb 1-1: Dual-Role OTG device on HNP port [ 84.781526][ T1799] dummy_udc: probe of dummy_udc.0 failed with error -2 [ 84.796453][ T302] udevd[302]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 84.813327][ T312] usb 1-1: can't set HNP mode: -71 [ 84.835129][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 84.842992][ T311] usb 2-1: can't read configurations, error -61 [ 84.980980][ T366] usb 3-1: USB disconnect, device number 23 [ 85.015052][ T311] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 85.245067][ T380] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 85.295250][ T311] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 85.302899][ T311] usb 2-1: can't read configurations, error -61 [ 85.309777][ T311] usb usb2-port1: unable to enumerate USB device [ 85.502205][ T1861] udc-core: couldn't find an available UDC or it's busy [ 85.605170][ T380] usb 4-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 85.614536][ T380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.105002][ T53] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 86.115137][ T20] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 86.345063][ T53] usb 5-1: Using ep0 maxpacket: 8 [ 86.465197][ T53] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 86.474339][ T53] usb 5-1: config 0 has no interface number 0 [ 86.480873][ T53] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 86.490450][ T20] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 86.500558][ T53] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.509691][ T20] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 86.520483][ T20] usb 2-1: New USB device found, idVendor=1199, idProduct=0017, bcdDevice= 0.01 [ 86.530057][ T53] usb 5-1: config 0 descriptor?? [ 86.535597][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.565114][ T1872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.572504][ T1872] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 86.628642][ T1451] usb 4-1: USB disconnect, device number 18 [ 86.648410][ T1888] Config c/1 of g7 needs at least one function. [ 86.655199][ T1888] udc dummy_udc.0: failed to start g7: -22 [ 86.843853][ T53] usb 2-1: USB disconnect, device number 23 [ 86.855061][ T380] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 87.215122][ T380] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 87.227501][ T380] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 87.237991][ T380] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 87.247538][ T380] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.375818][ T380] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 87.385320][ T380] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 87.393429][ T380] usb 3-1: Product: syz [ 87.397966][ T380] usb 3-1: Manufacturer: syz [ 87.435611][ T380] cdc_wdm 3-1:1.0: skipping garbage [ 87.441917][ T380] cdc_wdm 3-1:1.0: skipping garbage [ 87.449000][ T380] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 87.715024][ T53] usb 2-1: new full-speed USB device number 24 using dummy_hcd [ 87.783246][ T353] usb 5-1: USB disconnect, device number 19 [ 87.815072][ T312] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 87.844999][ T380] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 88.035102][ T53] usb 2-1: not running at top speed; connect to a high speed hub [ 88.065079][ T312] usb 4-1: Using ep0 maxpacket: 8 [ 88.115142][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 88.126120][ T53] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 256, setting to 64 [ 88.136962][ T53] usb 2-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 1.00 [ 88.146234][ T53] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.175090][ T1902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.182158][ T1902] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 88.185461][ T312] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 88.197621][ T312] usb 4-1: config 0 has no interface number 0 [ 88.203708][ T312] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 88.207169][ T53] ftdi_sio 2-1:1.0: FTDI USB Serial Device converter detected [ 88.220477][ T380] usb 1-1: config index 0 descriptor too short (expected 74, got 62) [ 88.225325][ T53] usb 2-1: Detected SIO [ 88.228685][ T380] usb 1-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 88.238738][ T53] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 88.243074][ T312] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 88.259317][ T380] usb 1-1: config 1 interface 1 altsetting 1 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 88.274482][ T312] usb 4-1: config 0 descriptor?? [ 88.309485][ T1916] udc-core: couldn't find an available UDC or it's busy [ 88.423873][ T53] usb 2-1: USB disconnect, device number 24 [ 88.431417][ T53] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 88.435564][ T380] usb 1-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice= 1.00 [ 88.443356][ T53] ftdi_sio 2-1:1.0: device disconnected [ 88.454171][ T380] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 88.464723][ T380] usb 1-1: Product: syz [ 88.469354][ T380] usb 1-1: Manufacturer: syz [ 88.474071][ T380] usb 1-1: SerialNumber: syz [ 88.521065][ T380] usb 4-1: USB disconnect, device number 19 [ 88.605190][ T20] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 88.845003][ T20] usb 5-1: Using ep0 maxpacket: 8 [ 88.965237][ T20] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 88.973706][ T20] usb 5-1: config 0 has no interface number 0 [ 88.980997][ T20] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 88.992208][ T20] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.010987][ T20] usb 5-1: config 0 descriptor?? [ 89.063507][ T24] audit: type=1400 audit(1786952586.093:206): avc: denied { create } for pid=1927 comm="syz.3.404" dev="anon_inodefs" ino=31950 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.087413][ T24] audit: type=1400 audit(1786952586.093:207): avc: denied { ioctl } for pid=1927 comm="syz.3.404" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=31950 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 89.176474][ T1933] kvm: vcpu 0: requested 128 ns lapic timer period limited to 200000 ns [ 89.184862][ T1933] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 89.264183][ T1918] udc-core: couldn't find an available UDC or it's busy [ 89.271710][ T1918] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 89.580083][ T1451] usb 3-1: USB disconnect, device number 24 [ 89.599916][ T53] usb 1-1: USB disconnect, device number 7 [ 89.625001][ T20] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 89.864989][ T20] usb 4-1: Using ep0 maxpacket: 16 [ 89.879512][ T1948] udc-core: couldn't find an available UDC or it's busy [ 89.985878][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.997083][ T20] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 90.008047][ T53] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 90.015801][ T20] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 90.024848][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.033894][ T20] usb 4-1: config 0 descriptor?? [ 90.225028][ T380] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 90.281203][ T311] usb 5-1: USB disconnect, device number 20 [ 90.287370][ T312] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 90.464991][ T380] usb 3-1: Using ep0 maxpacket: 8 [ 90.516417][ T20] HID 045e:07da: Invalid code 65791 type 1 [ 90.525567][ T20] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.000A/input/input13 [ 90.535230][ T312] usb 2-1: Using ep0 maxpacket: 8 [ 90.542361][ T20] microsoft 0003:045E:07DA.000A: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 90.585296][ T380] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 90.593516][ T380] usb 3-1: config 0 has no interface number 0 [ 90.600703][ T380] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 90.610511][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.633222][ T380] usb 3-1: config 0 descriptor?? [ 90.655201][ T312] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 90.663807][ T312] usb 2-1: config 0 has no interface number 0 [ 90.670145][ T312] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 90.680778][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.691018][ T312] usb 2-1: config 0 descriptor?? [ 90.881675][ T1959] udc-core: couldn't find an available UDC or it's busy [ 90.888862][ T1959] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.897156][ T312] usb 3-1: USB disconnect, device number 25 [ 90.937418][ T1955] udc-core: couldn't find an available UDC or it's busy [ 90.944681][ T1955] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 90.952954][ T366] usb 2-1: USB disconnect, device number 25 [ 91.195003][ T53] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 91.270737][ T20] usb 4-1: USB disconnect, device number 20 [ 91.555084][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 91.564390][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 91.590226][ T53] usb 1-1: config 0 descriptor?? [ 91.615204][ T53] usb 1-1: can't set config #0, error -71 [ 91.625465][ T53] usb 1-1: USB disconnect, device number 9 [ 91.641459][ T1977] udc-core: couldn't find an available UDC or it's busy [ 91.825133][ T25] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 91.975055][ T53] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 92.005010][ T1451] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 92.055022][ T20] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 92.185088][ T25] usb 2-1: config index 0 descriptor too short (expected 71, got 53) [ 92.193214][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 92.203480][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 92.213444][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 92.223468][ T25] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 92.325182][ T1451] usb 3-1: not running at top speed; connect to a high speed hub [ 92.345180][ T53] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 92.354308][ T53] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.363763][ T53] usb 1-1: config 0 descriptor?? [ 92.395130][ T25] usb 2-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 0.00 [ 92.404290][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.413543][ T25] usb 2-1: Product: syz [ 92.417932][ T20] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 0.00 [ 92.427243][ T25] usb 2-1: Manufacturer: syz [ 92.431854][ T25] usb 2-1: SerialNumber: syz [ 92.436577][ T20] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.465218][ T1972] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.472416][ T1972] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.479611][ T1972] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.486854][ T1972] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 92.565212][ T1451] usb 3-1: New USB device found, idVendor=1608, idProduct=0005, bcdDevice= 1.00 [ 92.574533][ T1451] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 92.582827][ T1451] usb 3-1: Product: syz [ 92.587162][ T1451] usb 3-1: Manufacturer: syz [ 92.591774][ T1451] usb 3-1: SerialNumber: syz [ 92.759896][ T1451] usb 2-1: USB disconnect, device number 26 [ 92.836523][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.844042][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.851555][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.859011][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.866663][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.874069][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.881569][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.889016][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.896492][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.903899][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.911396][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.918986][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.926653][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.934070][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.941523][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.948956][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.956470][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.964023][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.971934][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.979583][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.987024][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 92.994416][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.001895][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.009370][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.016857][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.024287][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.031772][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.039267][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.046815][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.054245][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.061714][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.069187][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.076802][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.084216][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.091699][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.099464][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.106985][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.114417][ T53] plantronics 0003:047F:FFFF.000B: unknown main item tag 0x0 [ 93.122244][ T53] plantronics 0003:047F:FFFF.000B: No inputs registered, leaving [ 93.132047][ T53] plantronics 0003:047F:FFFF.000B: hiddev96,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 93.172696][ T24] audit: type=1400 audit(1786952590.203:208): avc: denied { ioctl } for pid=1994 comm="syz.4.428" path="socket:[32104]" dev="sockfs" ino=32104 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 93.485003][ T312] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 93.913495][ T53] usb 3-1: USB disconnect, device number 26 [ 94.005083][ T312] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 94.014202][ T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.022453][ T312] usb 5-1: Product: syz [ 94.028008][ T312] usb 5-1: Manufacturer: syz [ 94.032631][ T312] usb 5-1: SerialNumber: syz [ 94.278175][ T20] usb 5-1: USB disconnect, device number 21 [ 94.335040][ T53] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 94.470244][ T312] usb 1-1: USB disconnect, device number 10 [ 94.504214][ T2009] Config c/1 of g7 needs at least one function. [ 94.510687][ T2009] udc dummy_udc.0: failed to start g7: -22 [ 94.695157][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 94.705382][ T53] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 94.715684][ T53] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 94.792692][ T25] usb 4-1: USB disconnect, device number 21 [ 94.885099][ T53] usb 3-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 0.00 [ 94.894410][ T20] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 94.902557][ T53] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.910828][ T53] usb 3-1: Product: syz [ 94.915619][ T53] usb 3-1: Manufacturer: syz [ 94.920302][ T53] usb 3-1: SerialNumber: syz [ 94.945131][ T2006] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 94.952370][ T2006] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 95.094996][ T1451] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 95.145000][ T301] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 95.255091][ T20] usb 2-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice= 1.00 [ 95.264471][ T20] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.305972][ T20] usb-storage 2-1:1.0: USB Mass Storage device detected [ 95.314243][ T20] usb-storage 2-1:1.0: Quirks match for vid 054c pid 087d: 4000000 [ 95.322908][ T20] scsi host1: usb-storage 2-1:1.0 [ 95.356766][ T2040] device-mapper: ioctl: populate_table: no targets specified [ 95.383013][ T2043] udc-core: couldn't find an available UDC or it's busy [ 95.495091][ T1451] usb 1-1: string descriptor 0 read error: -71 [ 95.501603][ T1451] usb 1-1: New USB device found, idVendor=1608, idProduct=0215, bcdDevice= 0.00 [ 95.510932][ T301] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 95.521268][ T1451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.529389][ T301] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 95.555139][ T1451] usb 1-1: can't set config #1, error -71 [ 95.562175][ T1451] usb 1-1: USB disconnect, device number 11 [ 95.570412][ T2053] usb 2-1: USB disconnect, device number 27 [ 95.621509][ T2053] hub 2-0:1.0: USB hub found [ 95.626319][ T2053] hub 2-0:1.0: 1 port detected [ 95.670678][ T380] usb 3-1: USB disconnect, device number 27 [ 95.695078][ T301] usb 5-1: New USB device found, idVendor=1608, idProduct=0005, bcdDevice= 1.00 [ 95.704465][ T301] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 95.712939][ T301] usb 5-1: Product: syz [ 95.717912][ T301] usb 5-1: Manufacturer: syz [ 95.722523][ T301] usb 5-1: SerialNumber: syz [ 95.745118][ T2032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 95.752229][ T2032] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 95.759366][ T20] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 95.775028][ T53] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 95.915010][ T1451] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 96.021308][ T312] usb 5-1: USB disconnect, device number 22 [ 96.285135][ T20] usb 4-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice= 0.00 [ 96.294440][ T20] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.302691][ T20] usb 4-1: Product: syz [ 96.307053][ T20] usb 4-1: Manufacturer: syz [ 96.311678][ T20] usb 4-1: SerialNumber: syz [ 96.435174][ T1451] usb 1-1: New USB device found, idVendor=1608, idProduct=0215, bcdDevice= 0.00 [ 96.444449][ T1451] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.452666][ T1451] usb 1-1: Product: syz [ 96.457012][ T1451] usb 1-1: Manufacturer: syz [ 96.461615][ T1451] usb 1-1: SerialNumber: syz [ 96.575794][ T20] cdc_acm 4-1:1.0: ttyACM0: USB ACM device [ 96.587019][ T20] usb 4-1: USB disconnect, device number 22 [ 96.814994][ T380] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 96.875065][ T312] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 97.054978][ T380] usb 3-1: Using ep0 maxpacket: 8 [ 97.081503][ T2073] udc-core: couldn't find an available UDC or it's busy [ 97.120580][ T366] usb 1-1: USB disconnect, device number 12 [ 97.175238][ T380] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 97.184214][ T380] usb 3-1: config 0 has no interface number 0 [ 97.190596][ T380] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 97.199885][ T380] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.209033][ T380] usb 3-1: config 0 descriptor?? [ 97.235040][ T312] usb 5-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 97.246965][ T312] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 97.257137][ T312] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 97.270244][ T312] usb 5-1: New USB device found, idVendor=1d50, idProduct=60c6, bcdDevice= 0.00 [ 97.279627][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 97.305179][ T2071] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 97.312254][ T2071] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 97.434999][ T311] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 97.448125][ T20] usb 3-1: USB disconnect, device number 28 [ 97.495025][ T366] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 97.648894][ T2065] dyndbg: unknown flag 'd' [ 97.653426][ T2065] dyndbg: flags parse failed [ 97.955145][ T311] usb 4-1: New USB device found, idVendor=0404, idProduct=0202, bcdDevice= 0.00 [ 97.964372][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.972465][ T311] usb 4-1: Product: syz [ 97.976789][ T311] usb 4-1: Manufacturer: syz [ 97.981388][ T311] usb 4-1: SerialNumber: syz [ 98.025008][ T20] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 98.035673][ T301] usb 5-1: USB disconnect, device number 23 [ 98.395053][ T20] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 98.405026][ T20] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 98.414794][ T20] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 98.424700][ T20] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 98.434661][ T20] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 64 [ 98.444616][ T20] usb 3-1: New USB device found, idVendor=06cd, idProduct=0131, bcdDevice= 1.00 [ 98.453807][ T20] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.475134][ T2065] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 98.482329][ T2065] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 98.489737][ T2065] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 98.496836][ T2065] raw-gadget.2 gadget: fail, usb_ep_enable returned -22 [ 98.719461][ T20] usb 3-1: USB disconnect, device number 29 [ 98.825308][ T312] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 99.145711][ T366] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 99.185141][ T312] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 99.195245][ T312] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 99.205051][ T312] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 99.215055][ T312] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 99.224858][ T312] usb 5-1: New USB device found, idVendor=0424, idProduct=012c, bcdDevice= 0.00 [ 99.233949][ T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.255094][ T2085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.262161][ T2085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.269474][ T2085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.276731][ T2085] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 99.515044][ T301] usb 3-1: new high-speed USB device number 30 using dummy_hcd [ 99.515070][ T366] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.533678][ T366] usb 1-1: New USB device found, idVendor=0000, idProduct=ffff, bcdDevice= 0.00 [ 99.542809][ T366] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.552217][ T366] usb 1-1: config 0 descriptor?? [ 100.026422][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.034012][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.041531][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.045559][ T301] usb 3-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 100.049320][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.059539][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 100.067031][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.075632][ T301] usb 3-1: Product: syz [ 100.082499][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.086775][ T301] usb 3-1: Manufacturer: syz [ 100.094246][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.098904][ T301] usb 3-1: SerialNumber: syz [ 100.106498][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.117865][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.125358][ T366] hid-generic 0003:0000:FFFF.000C: unknown main item tag 0x0 [ 100.132828][ T366] hid-generic 0003:0000:FFFF.000C: item fetching failed at offset 37/39 [ 100.141579][ T366] hid-generic: probe of 0003:0000:FFFF.000C failed with error -22 [ 100.159793][ T301] ums-karma 3-1:1.0: USB Mass Storage device detected [ 100.175427][ T20] usb 4-1: USB disconnect, device number 23 [ 100.188996][ T301] ums-karma 3-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 100.188996][ T301] Please send a copy of this message to and [ 100.256084][ T24] audit: type=1400 audit(1786952597.293:209): avc: denied { bind } for pid=2102 comm="syz.3.466" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 100.335327][ T2106] udc-core: couldn't find an available UDC or it's busy [ 100.392239][ T312] usb 1-1: USB disconnect, device number 14 [ 100.569894][ T366] usb 5-1: USB disconnect, device number 24 [ 100.794980][ T312] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 100.985022][ T53] usb 2-1: device descriptor read/64, error -110 [ 100.985776][ T366] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 101.315070][ T53] usb 2-1: device descriptor read/64, error -32 [ 101.355240][ T366] usb 5-1: New USB device found, idVendor=054c, idProduct=087d, bcdDevice= 1.00 [ 101.364432][ T366] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.405963][ T366] usb-storage 5-1:1.0: USB Mass Storage device detected [ 101.414566][ T366] usb-storage 5-1:1.0: Quirks match for vid 054c pid 087d: 4000000 [ 101.423001][ T366] scsi host2: usb-storage 5-1:1.0 [ 101.585064][ T53] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 101.795190][ T53] usb 2-1: device descriptor read/64, error -32 [ 102.124995][ T53] usb 2-1: device descriptor read/64, error -32 [ 102.175024][ T312] usb 1-1: device descriptor read/64, error -71 [ 102.245091][ T53] usb usb2-port1: attempt power cycle [ 102.271422][ T2136] udc-core: couldn't find an available UDC or it's busy [ 102.294100][ T301] ums-karma: probe of 3-1:1.0 failed with error -5 [ 102.304648][ T301] usb 3-1: USB disconnect, device number 30 [ 102.535037][ T312] usb 1-1: Using ep0 maxpacket: 8 [ 102.655039][ T53] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 102.655066][ T312] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 102.663571][ T301] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 102.671683][ T312] usb 1-1: config 0 has no interface number 0 [ 102.684745][ T312] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 102.693848][ T312] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 102.703792][ T312] usb 1-1: config 0 descriptor?? [ 102.778691][ T312] usb 1-1: USB disconnect, device number 15 [ 102.805059][ T53] usb 2-1: device descriptor read/8, error -32 [ 103.025029][ T53] usb 2-1: device descriptor read/8, error -32 [ 103.035137][ T301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 103.045350][ T301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 103.050627][ T366] usb 5-1: USB disconnect, device number 25 [ 103.056223][ T301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 103.074985][ T1451] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 103.085712][ T301] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 103.255089][ T301] usb 3-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 0.01 [ 103.264799][ T301] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.273000][ T301] usb 3-1: Product: syz [ 103.277216][ T301] usb 3-1: Manufacturer: syz [ 103.281826][ T301] usb 3-1: SerialNumber: syz [ 103.295041][ T53] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 103.305122][ T2138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 103.312129][ T2138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 103.319808][ T1451] usb 4-1: Using ep0 maxpacket: 8 [ 103.320458][ T2138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 103.332176][ T2138] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 103.415068][ T53] usb 2-1: device descriptor read/8, error -32 [ 103.445066][ T1451] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 103.453258][ T1451] usb 4-1: config 0 has no interface number 0 [ 103.459595][ T1451] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 103.473463][ T1451] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.489187][ T1451] usb 4-1: config 0 descriptor?? [ 103.500516][ T2156] ohci-platform pcspkr: IRQ index 0 not found [ 103.535059][ T366] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 103.625164][ T53] usb 2-1: device descriptor read/8, error -32 [ 103.728926][ T2145] udc-core: couldn't find an available UDC or it's busy [ 103.736134][ T2145] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 103.755075][ T53] usb usb2-port1: unable to enumerate USB device [ 103.804238][ T312] usb 3-1: USB disconnect, device number 31 [ 103.885012][ T1451] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 103.945169][ T311] usb 4-1: USB disconnect, device number 24 [ 104.055099][ T366] usb 5-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 104.064324][ T366] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 104.072435][ T366] usb 5-1: Product: syz [ 104.076698][ T366] usb 5-1: Manufacturer: syz [ 104.081333][ T366] usb 5-1: SerialNumber: syz [ 104.165380][ T53] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 104.245121][ T1451] usb 1-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 1.04 [ 104.254202][ T1451] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.379179][ T2165] PM: suspend entry (s2idle) [ 104.456739][ T2167] udc-core: couldn't find an available UDC or it's busy [ 104.478462][ T2165] Filesystems sync: 0.094 seconds [ 104.483690][ T2165] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 104.493275][ T2165] OOM killer disabled. [ 104.497687][ T2165] Freezing remaining freezable tasks ... [ 109.485022][ T53] usb 2-1: unable to read config index 0 descriptor/start: -110 [ 109.498686][ T53] usb 2-1: can't read configurations, error -110 [ 109.655034][ T53] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 114.835012][ T53] usb 2-1: device descriptor read/64, error -110 [ 115.165003][ T53] usb 2-1: device descriptor read/64, error -32 [ 115.285376][ T53] usb usb2-port1: attempt power cycle [ 115.695049][ T53] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 115.805080][ T53] usb 2-1: device descriptor read/8, error -32 [ 116.015030][ T53] usb 2-1: device descriptor read/8, error -32 [ 116.284961][ T53] usb 2-1: new high-speed USB device number 35 using dummy_hcd [ 116.395031][ T53] usb 2-1: device descriptor read/8, error -32 [ 116.605007][ T53] usb 2-1: device descriptor read/8, error -32 [ 116.725105][ T53] usb usb2-port1: unable to enumerate USB device [ 116.739773][ T2165] (elapsed 12.242 seconds) done. [ 116.744751][ T2165] printk: Suspending console(s) (use no_console_suspend to debug) [ 116.805065][ T9] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 116.978993][ T2165] PM: suspend debug: Waiting for 5 second(s). [ 122.017568][ T2171] hwrng: no data available [ 122.325085][ T376] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 122.335062][ T300] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 127.545100][ T300] usb 5-1: device descriptor read/64, error -110 [ 127.555088][ T376] usb 1-1: device descriptor read/64, error -110 [ 127.875049][ T300] usb 5-1: device descriptor read/64, error -32 [ 127.885060][ T376] usb 1-1: device descriptor read/64, error -32 [ 128.145030][ T300] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 128.155044][ T376] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 128.355020][ T300] usb 5-1: device descriptor read/64, error -32 [ 128.365025][ T376] usb 1-1: device descriptor read/64, error -32 [ 128.685062][ T300] usb 5-1: device descriptor read/64, error -32 [ 128.695068][ T376] usb 1-1: device descriptor read/64, error -32 [ 128.955044][ T300] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 128.965002][ T376] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 129.065120][ T300] usb 5-1: device descriptor read/8, error -32 [ 129.075040][ T376] usb 1-1: device descriptor read/8, error -32 [ 129.275021][ T300] usb 5-1: device descriptor read/8, error -32 [ 129.285033][ T376] usb 1-1: device descriptor read/8, error -32 [ 129.545206][ T300] usb 5-1: reset high-speed USB device number 26 using dummy_hcd [ 129.555058][ T376] usb 1-1: reset high-speed USB device number 16 using dummy_hcd [ 129.655061][ T300] usb 5-1: device descriptor read/8, error -32 [ 129.665042][ T376] usb 1-1: device descriptor read/8, error -32 [ 129.864997][ T300] usb 5-1: device descriptor read/8, error -32 [ 129.874977][ T376] usb 1-1: device descriptor read/8, error -32 [ 130.066409][ T2165] OOM killer enabled. [ 130.067654][ T2165] Restarting tasks ... [ 130.081904][ T366] usb 5-1: USB disconnect, device number 26 [ 130.086287][ T284] usb 1-1: USB disconnect, device number 16 [ 130.089371][ T2165] done. [ 130.090387][ T2165] Resume cause unknown [ 130.092162][ T2165] PM: suspend exit [ 130.476105][ T24] audit: type=1400 audit(1786952627.513:210): avc: denied { read } for pid=2183 comm="syz-executor" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.504952][ T24] audit: type=1400 audit(1786952627.533:211): avc: denied { open } for pid=2183 comm="syz-executor" path="net:[4026531999]" dev="nsfs" ino=4026531999 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 130.514571][ T24] audit: type=1400 audit(1786952627.533:212): avc: denied { mounton } for pid=2183 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 130.690531][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.693815][ T2183] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.697609][ T2183] device bridge_slave_0 entered promiscuous mode [ 130.701861][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.704624][ T2183] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.708385][ T2183] device bridge_slave_1 entered promiscuous mode [ 130.782501][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.785577][ T2184] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.788498][ T2184] device bridge_slave_0 entered promiscuous mode [ 130.808328][ T2184] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.811219][ T2184] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.814702][ T2184] device bridge_slave_1 entered promiscuous mode [ 130.819676][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.822439][ T2186] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.825611][ T2186] device bridge_slave_0 entered promiscuous mode [ 130.841305][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.844360][ T2185] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.847708][ T2185] device bridge_slave_0 entered promiscuous mode [ 130.856815][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.859778][ T2186] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.863041][ T2186] device bridge_slave_1 entered promiscuous mode [ 130.869531][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.872467][ T2185] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.876108][ T2185] device bridge_slave_1 entered promiscuous mode [ 130.980731][ T2187] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.983762][ T2187] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.987122][ T2187] device bridge_slave_0 entered promiscuous mode [ 130.990085][ T2187] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.992953][ T2187] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.996412][ T2187] device bridge_slave_1 entered promiscuous mode [ 131.069477][ T376] device bridge_slave_1 left promiscuous mode [ 131.072225][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.076218][ T376] device bridge_slave_0 left promiscuous mode [ 131.078195][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.081791][ T376] device veth1_macvtap left promiscuous mode [ 131.083865][ T376] device veth0_vlan left promiscuous mode [ 131.216533][ T2185] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.219534][ T2185] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.222726][ T2185] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.225630][ T2185] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.229564][ T2183] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.232528][ T2183] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.235490][ T2183] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.238166][ T2183] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.251954][ T2184] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.254934][ T2184] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.257910][ T2184] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.260644][ T2184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.298604][ T2186] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.301427][ T2186] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.304371][ T2186] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.307182][ T2186] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.339499][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.343010][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.348207][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.350639][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.353378][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.356298][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.358911][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.361479][ T300] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.364154][ T300] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.371925][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.377486][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.380881][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.383533][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.390486][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.440027][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.445584][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.448431][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.451437][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.455432][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.458095][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.461642][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.464359][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.467762][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.470552][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.472774][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.476510][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.479751][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.482682][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.485426][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.488113][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.507004][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.510634][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.522751][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.526612][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.529264][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.532048][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.535747][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.539540][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.542442][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.544781][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.555635][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.559416][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.562465][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.566110][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.569102][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.571520][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.607858][ T2184] device veth0_vlan entered promiscuous mode [ 131.613896][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.619308][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.622670][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.627955][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.630783][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.633552][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.637913][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 131.640923][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.643662][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 131.646971][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.649732][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.652548][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.656143][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.659363][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.661857][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.664503][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.680216][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.688986][ T2183] device veth0_vlan entered promiscuous mode [ 131.697423][ T2184] device veth1_macvtap entered promiscuous mode [ 131.702243][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.706592][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.710315][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.713725][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.727978][ T2185] device veth0_vlan entered promiscuous mode [ 131.734063][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 131.737866][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 131.762598][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.765954][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.768885][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 131.771891][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 131.775723][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 131.778862][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 131.781671][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.783931][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.787353][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 131.790737][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 131.793472][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.796115][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.817747][ T2186] device veth0_vlan entered promiscuous mode [ 131.825954][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 131.829102][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.832067][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.835066][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 131.838585][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 131.842048][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 131.846059][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.849418][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 131.852740][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 131.856570][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 131.859688][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 131.867808][ T2185] device veth1_macvtap entered promiscuous mode [ 131.873614][ T2183] device veth1_macvtap entered promiscuous mode [ 131.876855][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 131.880654][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 131.889054][ T24] audit: type=1400 audit(1786952628.923:213): avc: denied { mounton } for pid=2184 comm="syz-executor" path="/root/syzkaller.xtQaV7/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 131.951357][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.960642][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 131.969597][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 131.979863][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 131.988868][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 131.997959][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.006939][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.015864][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.028568][ T2186] device veth1_macvtap entered promiscuous mode [ 132.059118][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 132.068920][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.120425][ T2187] device veth0_vlan entered promiscuous mode [ 132.127254][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 132.137307][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 132.144780][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 132.152750][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 132.161315][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.169934][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 132.178476][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.223295][ T2209] PM: suspend entry (s2idle) [ 132.234606][ T2187] device veth1_macvtap entered promiscuous mode [ 132.234628][ T2211] ohci-platform pcspkr: IRQ index 0 not found [ 132.252300][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 132.295522][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 132.326847][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 132.367059][ T284] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 132.399484][ T24] audit: type=1400 audit(1786952629.433:214): avc: denied { create } for pid=2222 comm="syz.6.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.421700][ T24] audit: type=1400 audit(1786952629.433:215): avc: denied { bind } for pid=2222 comm="syz.6.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.458545][ T2209] Filesystems sync: 0.229 seconds [ 132.462921][ T2225] Config c/1 of g7 needs at least one function. [ 132.467970][ T2209] Freezing user space processes ... [ 132.470651][ T24] audit: type=1400 audit(1786952629.433:216): avc: denied { write } for pid=2222 comm="syz.6.495" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 132.472535][ T2225] udc dummy_udc.0: failed to start g7: -22 [ 132.509620][ T2209] (elapsed 0.039 seconds) done. [ 132.514587][ T2209] OOM killer disabled. [ 132.519016][ T2209] Freezing remaining freezable tasks ... [ 132.565939][ T376] device bridge_slave_1 left promiscuous mode [ 132.578108][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.586451][ T376] device bridge_slave_0 left promiscuous mode [ 132.592673][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.600902][ T376] device bridge_slave_1 left promiscuous mode [ 132.607170][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.614814][ T376] device bridge_slave_0 left promiscuous mode [ 132.621440][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.629654][ T376] device bridge_slave_1 left promiscuous mode [ 132.636004][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.643579][ T376] device bridge_slave_0 left promiscuous mode [ 132.650021][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.655163][ T284] usb 9-1: Using ep0 maxpacket: 8 [ 132.658041][ T20] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 132.670941][ T376] device bridge_slave_1 left promiscuous mode [ 132.677465][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.685331][ T376] device bridge_slave_0 left promiscuous mode [ 132.691482][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.701619][ T376] device veth1_macvtap left promiscuous mode [ 132.707750][ T376] device veth0_vlan left promiscuous mode [ 132.713712][ T376] device veth1_macvtap left promiscuous mode [ 132.719908][ T376] device veth0_vlan left promiscuous mode [ 132.726048][ T376] device veth1_macvtap left promiscuous mode [ 132.732379][ T376] device veth0_vlan left promiscuous mode [ 132.738617][ T376] device veth1_macvtap left promiscuous mode [ 132.744632][ T376] device veth0_vlan left promiscuous mode [ 137.725046][ T284] usb 9-1: device descriptor read/all, error -110 [ 137.875019][ T20] usb 10-1: device descriptor read/64, error -110 [ 137.875029][ T284] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 138.085009][ T284] usb 9-1: device descriptor read/64, error -32 [ 138.224986][ T20] usb 10-1: device descriptor read/64, error -32 [ 138.414954][ T284] usb 9-1: device descriptor read/64, error -32 [ 138.495090][ T20] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 138.535143][ T284] usb usb9-port1: attempt power cycle [ 138.705061][ T20] usb 10-1: device descriptor read/64, error -32 [ 138.945036][ T284] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 139.035114][ T20] usb 10-1: device descriptor read/64, error -32 [ 139.055039][ T284] usb 9-1: device descriptor read/8, error -32 [ 139.155212][ T20] usb usb10-port1: attempt power cycle [ 139.264982][ T284] usb 9-1: device descriptor read/8, error -32 [ 139.534962][ T284] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 139.564990][ T20] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 139.645000][ T284] usb 9-1: device descriptor read/8, error -32 [ 139.674988][ T20] usb 10-1: device descriptor read/8, error -32 [ 139.855029][ T284] usb 9-1: device descriptor read/8, error -32 [ 139.895013][ T20] usb 10-1: device descriptor read/8, error -32 [ 139.975210][ T284] usb usb9-port1: unable to enumerate USB device [ 140.165016][ T20] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 140.275047][ T20] usb 10-1: device descriptor read/8, error -32 [ 140.485045][ T20] usb 10-1: device descriptor read/8, error -32 [ 140.605128][ T20] usb usb10-port1: unable to enumerate USB device [ 140.613239][ T2209] (elapsed 8.094 seconds) done. [ 140.618163][ T2209] printk: Suspending console(s) (use no_console_suspend to debug) [ 140.745278][ T377] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 140.910985][ T2209] PM: suspend debug: Waiting for 3 second(s). [ 144.087302][ T2209] OOM killer enabled. [ 144.088675][ T2209] Restarting tasks ... [ 144.172961][ T95] synth uevent: /devices/virtual/block/loop7: failed to send uevent [ 144.179383][ T2209] done. [ 144.180774][ T2209] Resume cause unknown [ 144.189529][ T2209] PM: suspend exit [ 144.224544][ T24] audit: type=1400 audit(1786952641.253:217): avc: denied { search } for pid=2247 comm="syz.8.509" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 144.233309][ T95] block loop7: uevent: failed to send synthetic uevent [ 144.236414][ T2248] event trace: Could not enable event myevent [ 144.535156][ T20] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 144.545114][ T2229] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 144.554995][ T2227] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 144.575663][ T284] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 144.805160][ T2227] usb 7-1: Using ep0 maxpacket: 8 [ 144.870067][ T24] audit: type=1400 audit(1786952641.903:218): avc: denied { append } for pid=2268 comm="syz.8.516" name="kvm" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 144.925265][ T2227] usb 7-1: config index 0 descriptor too short (expected 32, got 31) [ 144.928349][ T2227] usb 7-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 144.932193][ T2227] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 144.937359][ T2229] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 144.941199][ T2229] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 144.946012][ T2227] usb 7-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice= 1.00 [ 144.949713][ T2227] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 145.045233][ T20] usb 10-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 145.048994][ T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 145.052275][ T20] usb 10-1: Product: syz [ 145.053841][ T20] usb 10-1: Manufacturer: syz [ 145.095735][ T20] ums-alauda 10-1:1.0: USB Mass Storage device detected [ 145.105294][ T2229] usb 6-1: New USB device found, idVendor=03f0, idProduct=0207, bcdDevice= 0.01 [ 145.105553][ T20] ums-alauda 10-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 145.105553][ T20] Please send a copy of this message to and [ 145.115741][ T2229] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.124467][ T20] scsi host1: usb-storage 10-1:1.0 [ 145.126070][ T284] usb 8-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice= 1.00 [ 145.130439][ T284] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.134163][ T284] usb 8-1: Product: syz [ 145.135972][ T284] usb 8-1: Manufacturer: syz [ 145.137929][ T284] usb 8-1: SerialNumber: syz [ 145.140698][ T2229] usb 6-1: Product: syz [ 145.142402][ T2229] usb 6-1: Manufacturer: syz [ 145.148044][ T2229] usb 6-1: SerialNumber: syz [ 145.174205][ T2272] syz.8.517 (2272): drop_caches: 3 [ 145.177376][ T2253] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.180113][ T2253] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 145.195998][ T2229] ums-usbat 6-1:1.0: USB Mass Storage device detected [ 145.215774][ T2229] ums-usbat 6-1:1.0: This device (03f0,0207,0001 S 05 P 80) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 145.215774][ T2229] Please send a copy of this message to and [ 145.292577][ T2273] syz.8.517 (2273): drop_caches: 3 [ 145.342292][ T2274] syz.8.517 (2274): drop_caches: 3 [ 145.436025][ T2229] ums-usbat: probe of 6-1:1.0 failed with error 3 [ 145.441074][ T2229] usb 6-1: USB disconnect, device number 2 [ 145.541184][ T2290] Config c/1 of g7 needs at least one function. [ 145.543781][ T2290] udc dummy_udc.0: failed to start g7: -22 [ 145.978104][ T24] audit: type=1400 audit(1786952643.013:219): avc: denied { unmount } for pid=2183 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 145.987971][ T1991] usb 9-1: new high-speed USB device number 6 using dummy_hcd [ 146.186543][ T53] scsi 1:0:0:0: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 146.225829][ T53] scsi 1:0:0:1: Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 146.365380][ T372] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 146.392048][ T53] usb 8-1: USB disconnect, device number 2 [ 146.455121][ T20] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 146.515189][ T1991] usb 9-1: New USB device found, idVendor=03e8, idProduct=0008, bcdDevice= 0.00 [ 146.518878][ T1991] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 146.522347][ T1991] usb 9-1: Product: syz [ 146.523973][ T1991] usb 9-1: Manufacturer: syz [ 146.525939][ T1991] usb 9-1: SerialNumber: syz [ 146.825227][ T20] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 146.828767][ T20] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 146.833111][ T20] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 146.836605][ T20] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 146.922338][ T2322] Config c/1 of g7 needs at least one function. [ 146.925410][ T2322] udc dummy_udc.0: failed to start g7: -22 [ 146.955364][ T20] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 146.959121][ T20] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 146.962205][ T20] usb 6-1: Product: syz [ 146.963948][ T20] usb 6-1: Manufacturer: syz [ 147.005966][ T20] cdc_wdm 6-1:1.0: skipping garbage [ 147.008037][ T20] cdc_wdm 6-1:1.0: skipping garbage [ 147.011060][ T20] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 147.019166][ T300] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 147.210265][ T284] usb 7-1: USB disconnect, device number 2 [ 147.225137][ T2229] usb 8-1: new full-speed USB device number 3 using dummy_hcd [ 147.657333][ T20] usb 10-1: USB disconnect, device number 6 [ 147.665744][ T37] scsi 1:0:0:0: rejecting I/O to dead device [ 147.669019][ T2319] udevd[2319]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 147.709918][ T1991] usb 6-1: USB disconnect, device number 3 [ 147.715181][ T2229] usb 8-1: New USB device found, idVendor=0d46, idProduct=2011, bcdDevice= 1.00 [ 147.725491][ T2229] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 147.729352][ T2229] usb 8-1: Product: syz [ 147.731442][ T2229] usb 8-1: Manufacturer: syz [ 148.015033][ T2228] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 148.245071][ T2337] smpboot: CPU 1 is now offline [ 148.282104][ T2337] x86: Booting SMP configuration: [ 148.284187][ T2337] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 148.287026][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 148.288787][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 148.360013][ T2319] udevd[2319]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 148.366203][ T2326] udevd[2326]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 148.465081][ T20] usb 10-1: new high-speed USB device number 7 using dummy_hcd [ 148.695029][ T284] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 148.728830][ T2229] usb 9-1: USB disconnect, device number 6 [ 148.845167][ T20] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 7 [ 148.945099][ T2228] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 148.948453][ T2228] usb 7-1: can't read configurations, error -71 [ 148.965143][ T20] usb 10-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 0.00 [ 148.968802][ T20] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 148.972096][ T20] usb 10-1: Product: syz [ 148.974516][ T20] usb 10-1: Manufacturer: syz [ 149.016753][ T20] usb-storage 10-1:1.0: USB Mass Storage device detected [ 149.021917][ T20] scsi host1: usb-storage 10-1:1.0 [ 149.048554][ T2319] udevd[2319]: inotify_add_watch(7, /dev/sdc, 10) failed: No such file or directory [ 149.085359][ T284] usb 6-1: New USB device found, idVendor=065a, idProduct=0009, bcdDevice= 1.00 [ 149.089243][ T284] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 149.155080][ T2229] usb 9-1: new high-speed USB device number 7 using dummy_hcd [ 149.334811][ T284] usb 6-1: USB disconnect, device number 4 [ 149.515348][ T2229] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 149.519141][ T2229] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 64 [ 149.675240][ T2229] usb 9-1: New USB device found, idVendor=1286, idProduct=1fa4, bcdDevice= 1.00 [ 149.678889][ T2229] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.682051][ T2229] usb 9-1: Product: syz [ 149.683653][ T2229] usb 9-1: Manufacturer: syz [ 149.685597][ T2229] usb 9-1: SerialNumber: syz [ 149.705486][ T2344] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.708616][ T2344] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 149.835088][ T2228] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 149.954200][ T2175] usb 8-1: USB disconnect, device number 3 [ 149.982779][ T2360] Config c/1 of g7 needs at least one function. [ 149.985683][ T2360] udc dummy_udc.0: failed to start g7: -22 [ 150.215348][ T2228] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 150.219427][ T2228] usb 7-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 150.345197][ T2228] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 150.349099][ T2228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 150.352604][ T2228] usb 7-1: Product: syz [ 150.354381][ T2228] usb 7-1: Manufacturer: syz [ 150.398754][ T2229] wiimote 0005:057E:0306.000D: hidraw0: BLUETOOTH HID v0.00 Gamepad [syz0] on syz0 [ 150.402751][ T2229] wiimote 0005:057E:0306.000D: New device registered [ 150.407905][ T2382] wiimote 0005:057E:0306.000D: Device removed [ 150.439745][ T2384] fido_id[2384]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 150.742923][ T2389] Config c/1 of g7 needs at least one function. [ 150.745777][ T2389] udc dummy_udc.0: failed to start g7: -22 [ 151.035058][ T284] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 151.211003][ T2175] usb 10-1: USB disconnect, device number 7 [ 151.465106][ T2229] wiimote 0005:057E:0306.000D: detected device: Nintendo Wii Remote (Gen 1) [ 151.479125][ T2229] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input17 [ 151.488594][ T2229] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input18 [ 151.495849][ T2229] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.000D/input/input16 [ 151.565428][ T284] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.00 [ 151.569425][ T284] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 151.573290][ T284] usb 6-1: Product: syz [ 151.575950][ T284] usb 6-1: Manufacturer: syz [ 151.577683][ T284] usb 6-1: SerialNumber: syz [ 151.606126][ T2228] cdc_acm 7-1:1.0: ttyACM0: USB ACM device [ 151.612580][ T2228] usb 7-1: USB disconnect, device number 4 [ 151.798970][ T2175] usb 9-1: USB disconnect, device number 7 [ 151.822191][ T2391] usb usb2: usbfs: interface 0 claimed by hub while 'syz.5.556' sets config #1 [ 151.831443][ T2391] usb usb2: selecting invalid altsetting 1 [ 151.839517][ T20] usb 6-1: USB disconnect, device number 5 [ 151.998863][ T2408] xhci-hcd pcspkr: IRQ index 0 not found [ 152.019610][ T2410] netlink: 40 bytes leftover after parsing attributes in process `syz.8.565'. [ 152.023412][ T2410] netlink: 40 bytes leftover after parsing attributes in process `syz.8.565'. [ 152.115029][ T2228] usb 10-1: new high-speed USB device number 8 using dummy_hcd [ 152.335043][ T284] usb 9-1: new high-speed USB device number 8 using dummy_hcd [ 152.355063][ T2228] usb 10-1: Using ep0 maxpacket: 8 [ 152.395520][ T1991] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 152.475320][ T2228] usb 10-1: config 0 has an invalid interface number: 143 but max is 0 [ 152.478792][ T2228] usb 10-1: config 0 has no interface number 0 [ 152.481733][ T2228] usb 10-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 152.485617][ T2228] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.490435][ T2228] usb 10-1: config 0 descriptor?? [ 152.695146][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 152.699047][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 152.702939][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 152.706861][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 152.710920][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 152.714618][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 152.718571][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 152.722808][ T284] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 152.730145][ T2226] usb 10-1: USB disconnect, device number 8 [ 152.795373][ T1991] usb 7-1: New USB device found, idVendor=0a46, idProduct=9601, bcdDevice= 1.00 [ 152.799064][ T1991] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 152.885180][ T284] usb 9-1: New USB device found, idVendor=05c5, idProduct=0002, bcdDevice= 1.00 [ 152.888713][ T284] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 152.891743][ T284] usb 9-1: Product: syz [ 152.893104][ T284] usb 9-1: Manufacturer: syz [ 152.894710][ T284] usb 9-1: SerialNumber: syz [ 152.915187][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.917451][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.919811][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.922640][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.925781][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.928573][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.931312][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 152.934338][ T2414] raw-gadget.1 gadget: fail, usb_ep_enable returned -22 [ 153.125108][ T1991] Error reading MAC address [ 153.129424][ T1991] usb 7-1: USB disconnect, device number 5 [ 153.210499][ T20] usb 9-1: USB disconnect, device number 8 [ 153.354626][ T2477] event trace: Could not enable event myevent [ 153.409638][ T2481] PM: suspend entry (deep) [ 153.607777][ T2481] Filesystems sync: 0.196 seconds [ 153.610071][ T2481] Freezing user space processes ... [ 153.805072][ T20] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 156.695111][ T2481] (elapsed 3.085 seconds) done. [ 156.696823][ T2481] OOM killer disabled. [ 156.698221][ T2481] Freezing remaining freezable tasks ... [ 158.995036][ T20] usb 7-1: device descriptor read/64, error -110 [ 159.335033][ T20] usb 7-1: device descriptor read/64, error -32 [ 159.605049][ T20] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 159.815074][ T20] usb 7-1: device descriptor read/64, error -32 [ 160.145033][ T20] usb 7-1: device descriptor read/64, error -32 [ 160.265185][ T20] usb usb7-port1: attempt power cycle [ 160.675023][ T20] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 160.785078][ T20] usb 7-1: device descriptor read/8, error -32 [ 160.995059][ T20] usb 7-1: device descriptor read/8, error -32 [ 161.265047][ T20] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 161.375058][ T20] usb 7-1: device descriptor read/8, error -32 [ 161.585004][ T20] usb 7-1: device descriptor read/8, error -32 [ 161.705232][ T20] usb usb7-port1: unable to enumerate USB device [ 161.720036][ T2481] (elapsed 5.021 seconds) done. [ 161.725104][ T2481] printk: Suspending console(s) (use no_console_suspend to debug) [ 161.795226][ T300] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 161.987460][ T2481] ACPI: Preparing to enter system sleep state S3 [ 161.987720][ T2481] PM: Saving platform NVS memory [ 161.987724][ T2481] Disabling non-boot CPUs ... [ 161.992531][ T2481] smpboot: CPU 1 is now offline [ 161.997374][ T2481] PM: suspend debug: Waiting for 3 second(s). [ 164.998089][ T2481] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 165.014955][ T2481] Enabling non-boot CPUs ... [ 165.015256][ T2481] x86: Booting SMP configuration: [ 165.015264][ T2481] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 165.015617][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 165.017150][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 165.020543][ T2481] CPU1 is up [ 165.021254][ T2481] ACPI: Waking up from system sleep state S3 [ 165.301246][ T2481] OOM killer enabled. [ 165.302748][ T2481] Restarting tasks ... done. [ 165.326638][ T2481] Resume cause unknown [ 165.328376][ T2481] PM: suspend exit [ 165.366554][ T2493] PM: suspend entry (s2idle) [ 165.368433][ T2493] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 165.372485][ T2493] PM: suspend exit [ 165.414537][ T2493] PM: suspend entry (deep) [ 165.489956][ T2493] Filesystems sync: 0.073 seconds [ 165.491918][ T2493] Freezing user space processes ... [ 185.502820][ T2493] Freezing of tasks failed after 20.008 seconds (1 tasks refusing to freeze, wq_busy=0): [ 185.506552][ T2493] [ 185.507520][ T2493] OOM killer enabled. [ 185.509039][ T2493] Restarting tasks ... [ 185.511257][ T95] synth uevent: /devices/virtual/block/loop7: failed to send uevent [ 185.533979][ T95] block loop7: uevent: failed to send synthetic uevent [ 185.538144][ T2493] done. [ 185.558846][ T2493] Abort: One or more tasks refusing to freeze [ 185.575866][ T2493] PM: suspend exit [ 186.438736][ T2520] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.445941][ T2520] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.453642][ T2520] device bridge_slave_0 entered promiscuous mode [ 186.473635][ T2520] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.480911][ T2520] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.488791][ T2520] device bridge_slave_1 entered promiscuous mode [ 186.530887][ T2522] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.538162][ T2522] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.546035][ T2522] device bridge_slave_0 entered promiscuous mode [ 186.561763][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.569021][ T2521] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.576962][ T2521] device bridge_slave_0 entered promiscuous mode [ 186.584491][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.591545][ T2521] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.599274][ T2521] device bridge_slave_1 entered promiscuous mode [ 186.606066][ T2522] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.613123][ T2522] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.621153][ T2522] device bridge_slave_1 entered promiscuous mode [ 186.658018][ T376] device bridge_slave_1 left promiscuous mode [ 186.664346][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.672259][ T376] device bridge_slave_0 left promiscuous mode [ 186.678588][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.687735][ T376] device veth1_macvtap left promiscuous mode [ 186.693749][ T376] device veth0_vlan left promiscuous mode [ 186.867364][ T2519] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.874694][ T2519] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.882343][ T2519] device bridge_slave_0 entered promiscuous mode [ 186.890348][ T2519] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.897926][ T2519] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.905643][ T2519] device bridge_slave_1 entered promiscuous mode [ 187.014484][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.021581][ T2523] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.029385][ T2523] device bridge_slave_0 entered promiscuous mode [ 187.064922][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.072045][ T2523] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.079896][ T2523] device bridge_slave_1 entered promiscuous mode [ 187.346843][ T2523] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.353927][ T2523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.361399][ T2523] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.368520][ T2523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.467164][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.474941][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.485610][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.493363][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.501406][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.510213][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.518698][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.525845][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.533541][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.542176][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.550537][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.557681][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.565316][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.599818][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.610804][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.636814][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.644727][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.652369][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.662532][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.671059][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.678190][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.686902][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.694901][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.703521][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.712171][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.719454][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.749157][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.757336][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.765533][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.773082][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 187.781200][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 187.790025][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.798672][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.805918][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.813683][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 187.822625][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 187.831476][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.839990][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.847230][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.877565][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 187.886759][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 187.895990][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.903043][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.911581][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 187.941499][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 187.951957][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.960785][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.967942][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.976267][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 187.983971][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 188.005158][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 188.013770][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 188.022541][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.029679][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.038207][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 188.047823][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 188.056284][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.063315][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.081026][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 188.089090][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.097444][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.106149][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.113762][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.123509][ T2522] device veth0_vlan entered promiscuous mode [ 188.155567][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.164658][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.173009][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.182247][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.190943][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.200288][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.209159][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.217566][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.225794][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 188.233955][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 188.242798][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.251417][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.259965][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 188.268539][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 188.293173][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.301462][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.327038][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.334946][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.355830][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.365204][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.373789][ T2520] device veth0_vlan entered promiscuous mode [ 188.395625][ T2522] device veth1_macvtap entered promiscuous mode [ 188.408365][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.417481][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.427231][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.435522][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.443974][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.453105][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 188.461915][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 188.476949][ T2523] device veth0_vlan entered promiscuous mode [ 188.492232][ T2519] device veth0_vlan entered promiscuous mode [ 188.500824][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.509410][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.518520][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.526730][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.535859][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.544419][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.554033][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.562019][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.570424][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.578379][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.599318][ T2521] device veth0_vlan entered promiscuous mode [ 188.623562][ T2520] device veth1_macvtap entered promiscuous mode [ 188.630889][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.640861][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.650957][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 188.660389][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 188.668845][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.677745][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.686406][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.694981][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.703241][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.720098][ T2523] device veth1_macvtap entered promiscuous mode [ 188.732535][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.740778][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 188.749013][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 188.760327][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.814450][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.830481][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 188.839350][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 188.866349][ T2521] device veth1_macvtap entered promiscuous mode [ 188.877979][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.887771][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.897354][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.917760][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 188.931224][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 188.941479][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.950346][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 188.960817][ T2519] device veth1_macvtap entered promiscuous mode [ 188.982645][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 188.990712][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 188.999628][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.018659][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.027334][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.093036][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.104077][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 189.131265][ T376] device bridge_slave_1 left promiscuous mode [ 189.140513][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.158255][ T376] device bridge_slave_0 left promiscuous mode [ 189.164858][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.173398][ T376] device bridge_slave_1 left promiscuous mode [ 189.180817][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.193486][ T376] device bridge_slave_0 left promiscuous mode [ 189.203829][ T2491] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 189.213062][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.231209][ T376] device bridge_slave_1 left promiscuous mode [ 189.238831][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.248059][ T376] device bridge_slave_0 left promiscuous mode [ 189.254728][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.265123][ T376] device bridge_slave_1 left promiscuous mode [ 189.271308][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.283678][ T376] device bridge_slave_0 left promiscuous mode [ 189.290668][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.299359][ T2550] dummy_hcd dummy_hcd.0: remove, state 1 [ 189.305667][ T2550] usb usb1: USB disconnect, device number 1 [ 189.314858][ T376] device veth1_macvtap left promiscuous mode [ 189.321159][ T376] device veth0_vlan left promiscuous mode [ 189.328603][ T2550] dummy_hcd dummy_hcd.0: stopped [ 189.333778][ T2550] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 189.340880][ T376] device veth1_macvtap left promiscuous mode [ 189.347344][ T376] device veth0_vlan left promiscuous mode [ 189.354650][ T376] device veth1_macvtap left promiscuous mode [ 189.359560][ T2550] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 189.361202][ T376] device veth0_vlan left promiscuous mode [ 189.374034][ T2550] dummy_hcd dummy_hcd.0: Dummy host controller [ 189.381846][ T376] device veth1_macvtap left promiscuous mode [ 189.382713][ T2550] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 189.390381][ T376] device veth0_vlan left promiscuous mode [ 189.405605][ T2550] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 5.10 [ 189.420228][ T2550] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 189.429668][ T2550] usb usb1: Product: Dummy host controller [ 189.435969][ T2550] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 189.442779][ T2550] usb usb1: SerialNumber: dummy_hcd.0 [ 189.460901][ T2550] hub 1-0:1.0: USB hub found [ 189.466263][ T2550] hub 1-0:1.0: 1 port detected [ 189.494329][ T2235] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 189.574526][ T2491] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 189.589949][ T2491] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 189.794555][ T2491] usb 5-1: New USB device found, idVendor=9710, idProduct=7720, bcdDevice= 1.00 [ 189.806232][ T2491] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.815181][ T2491] usb 5-1: Product: syz [ 189.819391][ T2491] usb 5-1: Manufacturer: syz [ 189.824015][ T2491] usb 5-1: SerialNumber: syz [ 189.844678][ T2034] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 189.854517][ T2540] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.861559][ T2540] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 189.922376][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 189.931942][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 189.940510][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 189.949072][ T374] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.024400][ T2235] usb 4-1: New USB device found, idVendor=0b95, idProduct=7720, bcdDevice= 1.00 [ 190.043088][ T2235] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.061874][ T2235] usb 4-1: Product: syz [ 190.066791][ T2235] usb 4-1: Manufacturer: syz [ 190.071428][ T2235] usb 4-1: SerialNumber: syz [ 190.414474][ T2034] usb 1-1: New USB device found, idVendor=17ef, idProduct=6161, bcdDevice= 0.00 [ 190.423817][ T2034] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.435153][ T2034] usb 1-1: Product: syz [ 190.439335][ T2034] usb 1-1: Manufacturer: syz [ 190.444001][ T2034] usb 1-1: SerialNumber: syz [ 190.990989][ T2579] udc-core: couldn't find an available UDC or it's busy [ 191.095605][ T2588] FAULT_INJECTION: forcing a failure. [ 191.095605][ T2588] name failslab, interval 1, probability 100, space 0, times 1 [ 191.108775][ T2588] CPU: 0 PID: 2588 Comm: syz.1.613 Tainted: G W syzkaller #0 [ 191.117474][ T2588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.124485][ C1] FAULT_INJECTION: forcing a failure. [ 191.124485][ C1] name failslab, interval 1, probability 100, space 0, times 1 [ 191.127571][ T2588] Call Trace: [ 191.143681][ T2588] __dump_stack+0x21/0x24 [ 191.148034][ T2588] dump_stack_lvl+0x1a7/0x208 [ 191.152738][ T2588] ? show_regs_print_info+0x18/0x18 [ 191.157951][ T2588] dump_stack+0x15/0x1c [ 191.162117][ T2588] should_fail+0x3ab/0x500 [ 191.166546][ T2588] ? getname_flags+0xba/0x510 [ 191.171231][ T2588] __should_failslab+0xa4/0xe0 [ 191.176033][ T2588] should_failslab+0x9/0x20 [ 191.180552][ T2588] kmem_cache_alloc+0x3d/0x2d0 [ 191.185337][ T2588] getname_flags+0xba/0x510 [ 191.189856][ T2588] do_mkdirat+0x4b/0x340 [ 191.194115][ T2588] ? __traceiter_sys_enter+0x2e/0x50 [ 191.199422][ T2588] __x64_sys_mkdirat+0x7b/0x90 [ 191.204196][ T2588] do_syscall_64+0x31/0x40 [ 191.208654][ T2588] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 191.214564][ T2588] RIP: 0033:0x7f80c32340d9 [ 191.219020][ T2588] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 191.238641][ T2588] RSP: 002b:00007f80c1c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 191.247077][ T2588] RAX: ffffffffffffffda RBX: 00007f80c34bbfa0 RCX: 00007f80c32340d9 [ 191.255060][ T2588] RDX: 00000000000001c0 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 191.263051][ T2588] RBP: 00007f80c32cb024 R08: 0000000000000000 R09: 0000000000000000 [ 191.271035][ T2588] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 191.279024][ T2588] R13: 00007f80c34bc038 R14: 00007f80c34bbfa0 R15: 00007ffdaa8dec78 [ 191.287022][ C1] CPU: 1 PID: 0 Comm: swapper/1 Tainted: G W syzkaller #0 [ 191.287836][ C0] FAULT_INJECTION: forcing a failure. [ 191.287836][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 191.295454][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.295459][ C1] Call Trace: [ 191.295464][ C1] [ 191.295482][ C1] __dump_stack+0x21/0x24 [ 191.295495][ C1] dump_stack_lvl+0x1a7/0x208 [ 191.295508][ C1] ? show_regs_print_info+0x18/0x18 [ 191.295540][ C1] dump_stack+0x15/0x1c [ 191.342872][ C1] should_fail+0x3ab/0x500 [ 191.347309][ C1] ? __alloc_skb+0x9e/0x520 [ 191.351822][ C1] __should_failslab+0xa4/0xe0 [ 191.356606][ C1] should_failslab+0x9/0x20 [ 191.361125][ C1] kmem_cache_alloc+0x3d/0x2d0 [ 191.365902][ C1] __alloc_skb+0x9e/0x520 [ 191.370244][ C1] alloc_skb_with_frags+0xa3/0x560 [ 191.375367][ C1] ? __kasan_check_read+0x11/0x20 [ 191.380408][ C1] ? __rb_reserve_next+0x738/0xdf0 [ 191.385531][ C1] sock_alloc_send_pskb+0x87f/0x9a0 [ 191.390740][ C1] ? sock_kzfree_s+0x60/0x60 [ 191.395348][ C1] ? ring_buffer_lock_reserve+0xb59/0xdf0 [ 191.401080][ C1] ? __kasan_check_read+0x11/0x20 [ 191.406118][ C1] sock_alloc_send_skb+0x32/0x40 [ 191.411073][ C1] mld_newpack+0x1a3/0x9c0 [ 191.415526][ C1] ? mld_sendpack+0xb00/0xb00 [ 191.420218][ C1] ? trace_event_buffer_commit+0x206/0x840 [ 191.426038][ C1] add_grec+0xedf/0x1330 [ 191.430297][ C1] ? mld_ifc_timer_expire+0xc60/0xc60 [ 191.435681][ C1] ? __kasan_check_write+0x14/0x20 [ 191.440810][ C1] ? _raw_spin_lock_bh+0x94/0xf0 [ 191.445763][ C1] mld_send_initial_cr+0x1f1/0x2b0 [ 191.450893][ C1] mld_dad_timer_expire+0x2b/0x410 [ 191.456019][ C1] ? mld_ifc_timer_expire+0xc60/0xc60 [ 191.461404][ C1] call_timer_fn+0x38/0x290 [ 191.465924][ C1] ? mld_ifc_timer_expire+0xc60/0xc60 [ 191.471313][ C1] __run_timers+0x637/0x9a0 [ 191.476122][ C1] ? calc_index+0x200/0x200 [ 191.480635][ C1] run_timer_softirq+0x6a/0xf0 [ 191.485406][ C1] __do_softirq+0x255/0x563 [ 191.489936][ C1] ? __this_cpu_preempt_check+0x13/0x20 [ 191.495495][ C1] asm_call_irq_on_stack+0xf/0x20 [ 191.500527][ C1] [ 191.503478][ C1] do_softirq_own_stack+0x60/0x80 [ 191.508529][ C1] __irq_exit_rcu+0x128/0x150 [ 191.513217][ C1] irq_exit_rcu+0x9/0x10 [ 191.517477][ C1] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 191.523118][ C1] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 191.529119][ C1] RIP: 0010:default_idle+0x12/0x20 [ 191.534242][ C1] Code: 49 bd 00 00 00 00 00 fc ff df e9 68 ff ff ff e8 64 f8 fa ff 00 00 cc cc 55 48 89 e5 0f 1f 44 00 00 0f 00 2d b0 1c 63 00 fb f4 <5d> c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 55 48 89 e5 41 57 41 56 [ 191.553862][ C1] RSP: 0018:ffffc90000107db8 EFLAGS: 00000246 [ 191.559947][ C1] RAX: ffff8881f7100000 RBX: 0000000000000001 RCX: 000000000005d412 [ 191.567935][ C1] RDX: 0000000000000001 RSI: ffffffff85406640 RDI: ffffffff85406600 [ 191.575920][ C1] RBP: ffffc90000107db8 R08: ffff8881f71573d3 R09: 1ffff1103ee2ae7a [ 191.583912][ C1] R10: dffffc0000000000 R11: ffffed103ee2ae7b R12: 0000000000000000 [ 191.591904][ C1] R13: 1ffff110200529e0 R14: ffff88812e9a7c18 R15: dffffc0000000000 [ 191.599907][ C1] arch_cpu_idle+0xa/0x10 [ 191.604262][ C1] default_idle_call+0x71/0x1d0 [ 191.609126][ C1] do_idle+0x368/0x620 [ 191.613202][ C1] ? idle_inject_timer_fn+0x60/0x60 [ 191.618440][ C1] ? _raw_spin_lock_bh+0xc0/0xf0 [ 191.623394][ C1] ? complete+0x69/0xb0 [ 191.627571][ C1] cpu_startup_entry+0x18/0x20 [ 191.632363][ C1] start_secondary+0x2cb/0x380 [ 191.637146][ C1] secondary_startup_64_no_verify+0xad/0xbb [ 191.643058][ C0] CPU: 0 PID: 2588 Comm: syz.1.613 Tainted: G W syzkaller #0 [ 191.651762][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 191.662138][ C0] Call Trace: [ 191.665886][ C0] [ 191.668792][ C0] __dump_stack+0x21/0x24 [ 191.673163][ C0] dump_stack_lvl+0x1a7/0x208 [ 191.677907][ C0] ? thaw_kernel_threads+0x220/0x220 [ 191.683250][ C0] ? show_regs_print_info+0x18/0x18 [ 191.688483][ C0] ? prandom_u32+0x24d/0x290 [ 191.693116][ C0] dump_stack+0x15/0x1c [ 191.697318][ C0] should_fail+0x3ab/0x500 [ 191.701877][ C0] ? __alloc_skb+0x9e/0x520 [ 191.706416][ C0] __should_failslab+0xa4/0xe0 [ 191.711217][ C0] should_failslab+0x9/0x20 [ 191.715849][ C0] kmem_cache_alloc+0x3d/0x2d0 [ 191.720763][ C0] __alloc_skb+0x9e/0x520 [ 191.725124][ C0] ndisc_send_rs+0x310/0x960 [ 191.729926][ C0] addrconf_rs_timer+0x35a/0x600 [ 191.734897][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 191.740999][ C0] ? perf_trace_timer_start+0x3c0/0x3c0 [ 191.746583][ C0] ? __traceiter_timer_expire_entry+0xa8/0xc0 [ 191.752800][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 191.758907][ C0] call_timer_fn+0x38/0x290 [ 191.763448][ C0] ? addrconf_disable_policy_idev+0x360/0x360 [ 191.769558][ C0] __run_timers+0x637/0x9a0 [ 191.774291][ C0] ? calc_index+0x200/0x200 [ 191.778849][ C0] run_timer_softirq+0x6a/0xf0 [ 191.783654][ C0] __do_softirq+0x255/0x563 [ 191.788199][ C0] ? __this_cpu_preempt_check+0x13/0x20 [ 191.793778][ C0] asm_call_irq_on_stack+0xf/0x20 [ 191.798833][ C0] [ 191.801802][ C0] do_softirq_own_stack+0x60/0x80 [ 191.806886][ C0] __irq_exit_rcu+0x128/0x150 [ 191.811606][ C0] irq_exit_rcu+0x9/0x10 [ 191.815266][ T2574] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 191.815893][ C0] sysvec_apic_timer_interrupt+0xbf/0xe0 [ 191.815910][ C0] asm_sysvec_apic_timer_interrupt+0x12/0x20 [ 191.815924][ C0] RIP: 0010:preempt_schedule_irq+0xa5/0x120 [ 191.815946][ C0] Code: 44 24 20 00 02 00 00 43 c6 44 37 04 f8 74 0b 0f 0b 48 f7 03 08 00 00 00 74 4d bf 01 00 00 00 e8 61 d8 c3 fc fb bf 01 00 00 00 26 e6 ff ff fa bf 01 00 00 00 e8 fb d9 c3 fc 65 48 8b 1d b3 77 [ 191.860963][ C0] RSP: 0018:ffffc900017a7b40 EFLAGS: 00000246 [ 191.867071][ C0] RAX: 1ffff11022c67b26 RBX: ffffc900017a7bf8 RCX: ffffffff86e81800 [ 191.875079][ C0] RDX: 0000000000010001 RSI: 0000000000000000 RDI: 0000000000000001 [ 191.883088][ C0] RBP: ffffc900017a7bb8 R08: ffff88810ec794b7 R09: 1ffff11021d8f296 [ 191.891114][ C0] R10: dffffc0000000000 R11: ffffed1021d8f297 R12: 0000000000000000 [ 191.899117][ C0] R13: 0000000000000000 R14: dffffc0000000000 R15: 1ffff920002f4f68 [ 191.907133][ C0] ? preempt_schedule_notrace+0x120/0x120 [ 191.912886][ C0] ? __traceiter_vector_free_moved+0xc0/0xc0 [ 191.919084][ C0] ? __traceiter_reschedule_exit+0x6e/0xa0 [ 191.924936][ C0] irqentry_exit+0x56/0x60 [ 191.929515][ C0] sysvec_reschedule_ipi+0x69/0x70 [ 191.934707][ C0] asm_sysvec_reschedule_ipi+0x12/0x20 [ 191.940206][ C0] RIP: 0010:dump_stack_lvl+0x1cc/0x208 [ 191.945702][ C0] Code: e8 61 00 00 00 48 c7 c7 40 f7 76 86 be 04 00 00 00 e8 a0 84 25 fd c7 05 86 52 fd 01 ff ff ff ff 48 89 5c 24 10 ff 74 24 10 9d <48> c7 44 24 20 0e 36 e0 45 4b c7 04 2c 00 00 00 00 65 48 8b 04 25 [ 191.965353][ C0] RSP: 0018:ffffc900017a7ca0 EFLAGS: 00000283 [ 191.971470][ C0] RAX: 5390540cb2997501 RBX: 0000000000000283 RCX: ffffffff8479a4b0 [ 191.979514][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8676f740 [ 191.987529][ C0] RBP: ffffc900017a7d58 R08: 0000000000000003 R09: 0000000000000004 [ 191.995552][ C0] R10: dffffc0000000000 R11: fffffbfff0cedee8 R12: 1ffff920002f4f98 [ 192.003572][ C0] R13: dffffc0000000000 R14: 0000000000000000 R15: 00000000ffffffff [ 192.011696][ C0] ? dump_stack_lvl+0x1b8/0x208 [ 192.016596][ C0] ? show_regs_print_info+0x18/0x18 [ 192.021831][ C0] dump_stack+0x15/0x1c [ 192.026024][ C0] should_fail+0x3ab/0x500 [ 192.030476][ C0] ? getname_flags+0xba/0x510 [ 192.035202][ C0] __should_failslab+0xa4/0xe0 [ 192.040004][ C0] should_failslab+0x9/0x20 [ 192.040141][ T2491] usb 5-1: USB disconnect, device number 28 [ 192.044534][ C0] kmem_cache_alloc+0x3d/0x2d0 [ 192.044548][ C0] getname_flags+0xba/0x510 [ 192.044560][ C0] do_mkdirat+0x4b/0x340 [ 192.044572][ C0] ? __traceiter_sys_enter+0x2e/0x50 [ 192.044585][ C0] __x64_sys_mkdirat+0x7b/0x90 [ 192.044598][ C0] do_syscall_64+0x31/0x40 [ 192.044610][ C0] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 192.044620][ C0] RIP: 0033:0x7f80c32340d9 [ 192.044635][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.044643][ C0] RSP: 002b:00007f80c1c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 192.044659][ C0] RAX: ffffffffffffffda RBX: 00007f80c34bbfa0 RCX: 00007f80c32340d9 [ 192.044668][ C0] RDX: 00000000000001c0 RSI: 0000200000000380 RDI: ffffffffffffff9c [ 192.044675][ C0] RBP: 00007f80c32cb024 R08: 0000000000000000 R09: 0000000000000000 [ 192.044683][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.044690][ C0] R13: 00007f80c34bc038 R14: 00007f80c34bbfa0 R15: 00007ffdaa8dec78 [ 192.062381][ T2235] asix: probe of 4-1:1.0 failed with error -71 [ 192.136588][ T2034] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 192.149883][ T2235] usb 4-1: USB disconnect, device number 25 [ 192.221489][ T2034] usb 1-1: USB disconnect, device number 2 [ 192.278454][ T24] audit: type=1400 audit(1786952689.323:220): avc: denied { execute } for pid=2596 comm="syz.4.617" path="/3/file0" dev="tmpfs" ino=36 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 192.339728][ T2601] Mass Storage Function, version: 2009/09/11 [ 192.370577][ T2601] LUN: removable file: (no medium) [ 192.384658][ T2574] usb 3-1: New USB device found, idVendor=0572, idProduct=0041, bcdDevice= 1.00 [ 192.405164][ T2574] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 192.429618][ T2601] ------------[ cut here ]------------ [ 192.435945][ T2601] kernel BUG at net/core/dev.c:9976! [ 192.441334][ T2601] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 192.447443][ T2601] CPU: 0 PID: 2601 Comm: syz.1.615 Tainted: G W syzkaller #0 [ 192.447752][ T2574] usb 3-1: Product: syz [ 192.456145][ T2601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 192.456170][ T2601] RIP: 0010:register_netdevice+0x138c/0x13a0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 192.456183][ T2601] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 45 fd ff ff 4c 89 f7 e8 45 77 ff fd e9 38 fd ff ff e8 eb 01 c5 fd 0f 0b e8 e4 01 c5 fd <0f> 0b e8 dd 01 c5 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 [ 192.456192][ T2601] RSP: 0018:ffffc90000bd7880 EFLAGS: 00010287 [ 192.456206][ T2601] RAX: ffffffff839fafdc RBX: ffff88812ddd6000 RCX: 0000000000080000 [ 192.456214][ T2601] RDX: ffffc90005519000 RSI: 0000000000007504 RDI: 0000000000007505 [ 192.456223][ T2601] RBP: ffffc90000bd7978 R08: ffffffff86ad34a7 R09: 1ffffffff0d5a694 [ 192.456233][ T2601] R10: dffffc0000000000 R11: fffffbfff0d5a695 R12: 1ffff11025bbac9f [ 192.456241][ T2601] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffffff86aca4c0 [ 192.456264][ T2601] FS: 00007f80c1c8d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 192.456273][ T2601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 192.456281][ T2601] CR2: 00007efe0957e060 CR3: 000000011cec3000 CR4: 00000000003506b0 [ 192.456293][ T2601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 192.456302][ T2601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 192.456306][ T2601] Call Trace: [ 192.456324][ T2601] ? __kasan_check_write+0x14/0x20 [ 192.456383][ T2601] ? mutex_lock_killable+0x92/0xf0 [ 192.503781][ T24] audit: type=1400 audit(1786952689.543:221): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[1468]" dev="pipefs" ino=1468 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 192.510644][ T2601] ? netif_stacked_transfer_operstate+0x220/0x220 [ 192.510659][ T2601] ? __kasan_check_write+0x14/0x20 [ 192.510673][ T2601] register_netdev+0x3e/0x50 [ 192.510688][ T2601] gether_register_netdev+0x7f/0x120 [ 192.510700][ T2601] ecm_bind+0x18c/0x8c0 [ 192.510714][ T2601] usb_add_function+0x2c1/0x820 [ 192.510729][ T2601] configfs_composite_bind+0xa9c/0x13a0 [ 192.510744][ T2601] ? os_desc_qw_sign_store+0x140/0x140 [ 192.510755][ T2601] udc_bind_to_driver+0x24e/0x6d0 [ 192.510766][ T2601] ? mutex_lock+0x92/0xf0 [ 192.510787][ T2601] usb_gadget_probe_driver+0x1fc/0x380 [ 192.590018][ T2574] usb 3-1: Manufacturer: syz [ 192.591073][ T2601] gadget_dev_desc_UDC_store+0x217/0x330 [ 192.591087][ T2601] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 192.591134][ T2601] configfs_write_file+0x320/0x3d0 [ 192.646365][ T2574] usb 3-1: SerialNumber: syz [ 192.649775][ T2601] ? configfs_read_file+0x400/0x400 [ 192.649790][ T2601] vfs_write+0x344/0xd70 [ 192.649804][ T2601] ? kernel_write+0x3c0/0x3c0 [ 192.649819][ T2601] ? __kasan_check_write+0x14/0x20 [ 192.649830][ T2601] ? mutex_lock+0x92/0xf0 [ 192.649873][ T2601] ? mutex_trylock+0xb0/0xb0 [ 192.729884][ T2601] ? __fget_files+0x2e1/0x340 [ 192.734598][ T2601] ? __fdget_pos+0x2d2/0x380 [ 192.739318][ T2601] ? ksys_write+0x70/0x260 [ 192.743768][ T2601] ksys_write+0x14a/0x260 [ 192.748127][ T2601] ? __ia32_sys_read+0x90/0x90 [ 192.752922][ T2601] ? __traceiter_sys_enter+0x2e/0x50 [ 192.758235][ T2601] __x64_sys_write+0x7b/0x90 [ 192.762847][ T2601] do_syscall_64+0x31/0x40 [ 192.767289][ T2601] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 192.773210][ T2601] RIP: 0033:0x7f80c32340d9 [ 192.777774][ T2601] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 192.797417][ T2601] RSP: 002b:00007f80c1c8d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 192.805858][ T2601] RAX: ffffffffffffffda RBX: 00007f80c34bbfa0 RCX: 00007f80c32340d9 [ 192.813863][ T2601] RDX: 000000000000000b RSI: 0000200000000480 RDI: 0000000000000003 [ 192.821858][ T2601] RBP: 00007f80c32cb024 R08: 0000000000000000 R09: 0000000000000000 [ 192.829869][ T2601] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.837855][ T2601] R13: 00007f80c34bc038 R14: 00007f80c34bbfa0 R15: 00007ffdaa8dec78 [ 192.845845][ T2601] Modules linked in: [ 192.911424][ T2601] ---[ end trace fe6a8970a4bc65e5 ]--- [ 192.917110][ T2601] RIP: 0010:register_netdevice+0x138c/0x13a0 [ 192.923117][ T2601] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 45 fd ff ff 4c 89 f7 e8 45 77 ff fd e9 38 fd ff ff e8 eb 01 c5 fd 0f 0b e8 e4 01 c5 fd <0f> 0b e8 dd 01 c5 fd 0f 0b 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 [ 192.943294][ T2601] RSP: 0018:ffffc90000bd7880 EFLAGS: 00010287 [ 192.950308][ T2601] RAX: ffffffff839fafdc RBX: ffff88812ddd6000 RCX: 0000000000080000 [ 192.974405][ T2601] RDX: ffffc90005519000 RSI: 0000000000007504 RDI: 0000000000007505 [ 192.982447][ T2601] RBP: ffffc90000bd7978 R08: ffffffff86ad34a7 R09: 1ffffffff0d5a694 [ 193.014228][ T2601] R10: dffffc0000000000 R11: fffffbfff0d5a695 R12: 1ffff11025bbac9f [ 193.022271][ T2601] R13: dffffc0000000000 R14: 0000000000000003 R15: ffffffff86aca4c0 [ 193.045116][ T2601] FS: 00007f80c1c8d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 193.054444][ T2601] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 193.061064][ T2601] CR2: 00007f9a00075fda CR3: 000000011cec3000 CR4: 00000000003506a0 [ 193.080779][ T2601] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 193.088939][ T2601] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 193.097061][ T2601] Kernel panic - not syncing: Fatal exception [ 193.103284][ T2601] Kernel Offset: disabled [ 193.107618][ T2601] Rebooting in 86400 seconds..