last executing test programs: 28.756356876s ago: executing program 1 (id=2): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_hcd.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) close(r3) 28.751225056s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402010b10000000000010902200001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 28.671665729s ago: executing program 2 (id=5): symlink(&(0x7f0000000000)='new_device\x00', &(0x7f0000000100)='my_netdevsim\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='my_netdevsim\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='10 1\x00', 0x5) 28.671535829s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sysfs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sysfs\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sysfs/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x8) 28.671312469s ago: executing program 2 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'\x00', 0x1001}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), r1) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1001001}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1f4}]}]}, 0x28}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x28, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'syz_tun\x00'}}]}]}, 0x28}}, 0x0) r3 = socket$packet(0x11, 0x3, 0x88ca) sendto$packet(r3, &(0x7f0000000400)="00112233445566778899aabb88ca5000004c2d000001123456780000000200000001000000000000000000000001aabbccddeeff000000000000000000000000000000000000000001020304", 0x4c, 0x0, &(0x7f0000000500)={0x11, 0x88ca, 0x1, 0x1, 0x0, 0x6, @broadcast}, 0x14) 28.62585993s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./debug\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./debug\x00', &(0x7f0000000140)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/tracing/events/x86_fpu/x86_fpu_xstate_check_failed/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='1\x00', 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./debug/tracing/tracing_on\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='1\x00', 0x1) rt_sigreturn() 28.59209602s ago: executing program 1 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff) write(r0, &(0x7f0000000100)='1234567890\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000200)='1234567890\x00', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./\x00', 0x3) close(r2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000880)='freeze\x00', 0x7) close(r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 28.543385732s ago: executing program 2 (id=9): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='devtmpfs\x00', &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/mapper/control\x00', 0x2, 0x0) ioctl(r0, 0xc138fd03, &(0x7f0000000200)="04000000320000000000000038010000380100"/312) ioctl(r0, 0xc138fd09, &(0x7f0000000600)="04000000320000000000000080010000380100000100"/384) ioctl(r0, 0xc138fd06, &(0x7f0000000b00)="04000000320000000000000038010000380100"/312) 28.531215341s ago: executing program 2 (id=10): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='proc\x00', &(0x7f0000000100)='proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) fchdir(0xffffffffffffffff) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') mkdir(&(0x7f0000000200)='g1\x00', 0x1ff) chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r0, &(0x7f0000000440)='640\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000480)='functions/uvc.0/streaming/uncompressed/u/360p/wHeight\x00', 0x1, 0x0) write(r1, &(0x7f00000004c0)='360\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r2, &(0x7f0000000540)='333333\n\x00', 0x7) r3 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='460800\n\x00', 0x7) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(0xffffffffffffffff) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00') symlink(&(0x7f0000000740)='header/h\x00', &(0x7f0000000780)='class/fs/h\x00') symlink(&(0x7f00000007c0)='header/h\x00', &(0x7f0000000800)='class/hs/h\x00') symlink(&(0x7f0000000840)='header/h\x00', &(0x7f0000000880)='class/ss/h\x00') fchdir(0xffffffffffffffff) mkdir(&(0x7f0000000900)='header/h\x00', 0x1ff) symlink(&(0x7f0000000940)='header/h\x00', &(0x7f0000000980)='class/fs/h\x00') symlink(&(0x7f00000009c0)='header/h\x00', &(0x7f0000000a00)='class/ss/h\x00') fchdir(0xffffffffffffffff) chdir(&(0x7f0000000a40)='sys/kernel/config/usb_gadget/g1\x00') symlink(&(0x7f0000000a80)='functions/uvc.0\x00', &(0x7f0000000ac0)='configs/c.1/uvc.0\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000000b40)='dummy_udc.0\x00', 0xb) 28.513048412s ago: executing program 2 (id=11): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/event_source/devices/cpu/type\x00', 0x0, 0x0) 28.443601654s ago: executing program 2 (id=12): r0 = syz_usb_connect(0x2, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004010070100010001020301090258000101008032090400000aff00000007058102400000070582024000000705830240000007058402400000070585024000000705010240000007050202400000070503024000000705040240000007050502400000"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000100)="0b0200010102030400"/20) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./ttyUSB0\x00', 0x81b6, 0xbc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000280)=0x6) 8.011014605s ago: executing program 32 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sysfs\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sysfs\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sysfs/power/state\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='mem\n', 0x8) 7.986279046s ago: executing program 33 (id=8): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./ath9k_htc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x41, 0x1ff) write(r0, &(0x7f0000000100)='1234567890\x00', 0xa) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./htc_9271.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000200)='1234567890\x00', 0xa) close(r1) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000002c0)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='./\x00', 0x3) close(r2) syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000480)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) (async) clock_nanosleep(0x0, 0x0, &(0x7f0000000600)={0x1}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/power/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000880)='freeze\x00', 0x7) close(r3) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700), 0x0, 0x0) 7.954971257s ago: executing program 34 (id=12): r0 = syz_usb_connect(0x2, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004010070100010001020301090258000101008032090400000aff00000007058102400000070582024000000705830240000007058402400000070585024000000705010240000007050202400000070503024000000705040240000007050502400000"], 0x0) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) syz_usb_ep_write(r0, 0x81, 0x14, &(0x7f0000000100)="0b0200010102030400"/20) nanosleep(&(0x7f0000000200)={0x0, 0x2faf080}, 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000180)='./ttyUSB0\x00', 0x81b6, 0xbc00) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000280)=0x6) 7.925750097s ago: executing program 35 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040402010b10000000000010902200001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 6.003771954s ago: executing program 6 (id=15): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_hcd.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) close(r3) 5.983329085s ago: executing program 7 (id=16): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040840508000201010200010902200001010080fa09040000020806f4000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000140)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000200)={0x84, &(0x7f0000000240)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000340)={0x40, 0x9a}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000400)={0x84, &(0x7f0000000440)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000500)={0x84, &(0x7f0000000540)={0xc0, 0x96, 0x4, '\x00s\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_ep_read(r0, 0x81, 0x200, &(0x7f0000000800)=""/512) syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, &(0x7f0000000640)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000700)={0x84, &(0x7f0000000740)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000900)={0x84, &(0x7f0000000940)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, &(0x7f0000000a40)={0xc0, 0x98, 0x2, "1401"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 5.865929948s ago: executing program 6 (id=18): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x711, 0x550, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x1, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_ep_write(r0, 0x81, 0x40, &(0x7f0000000100)='00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000') r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x85) lseek(r1, 0x10000000, 0x0) read$char_usb(r1, &(0x7f0000001000), 0x4) 4.647378318s ago: executing program 6 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040341278560001010203010902200001010080320904000002fe0301000705810200020007050202000200"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000300)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/drivers/usbtmc/1-1:1.0/usb488_device_capabilities\x00', 0x0, 0x0) read(r1, &(0x7f0000000600), 0x100) 2.841964061s ago: executing program 5 (id=25): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:01.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/bus/pci/devices/0000:00:02.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/vendor\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/pci/devices/0000:01:00.0/vendor\x00', 0x0, 0x0) 2.779439983s ago: executing program 5 (id=26): mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_hcd.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) close(r3) 2.701594885s ago: executing program 5 (id=27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x1) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(&(0x7f0000000100)={0x0, 0x5f5e100}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.564161528s ago: executing program 7 (id=28): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000050cb5340450c10108e492940a80909021b00090000000009040002010035040009058dff86"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) syz_usb_disconnect(r0) 1.758793208s ago: executing program 5 (id=29): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') mkdir(&(0x7f0000000200)='g1\x00', 0x1ff) chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='functions/uvc.0/streaming/uncompressed/u/360p/wHeight\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='360\n\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='333333\n\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='460800\n\x00', 0x7) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00') symlink(&(0x7f0000000740)='header/h\x00', &(0x7f0000000780)='class/fs/h\x00') symlink(&(0x7f00000007c0)='header/h\x00', &(0x7f0000000800)='class/hs/h\x00') symlink(&(0x7f0000000840)='header/h\x00', &(0x7f0000000880)='class/ss/h\x00') fchdir(r0) mkdir(&(0x7f0000000900)='header/h\x00', 0x1ff) symlink(&(0x7f0000000940)='header/h\x00', &(0x7f0000000980)='class/fs/h\x00') symlink(&(0x7f00000009c0)='header/h\x00', &(0x7f0000000a00)='class/ss/h\x00') fchdir(r0) chdir(&(0x7f0000000a40)='sys/kernel/config/usb_gadget/g1\x00') symlink(&(0x7f0000000a80)='functions/uvc.0\x00', &(0x7f0000000ac0)='configs/c.1/uvc.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000b40)='dummy_udc.0\x00', 0xb) 1.758355088s ago: executing program 5 (id=30): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000150)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8}]}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x11}]}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0xf0}}, 0x0) r1 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'bridge_slave_0\x00', 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r3, &(0x7f0000000400)="00112233445566778899aabb0800450000280001000040067cc27f0000017f000001005000500000000000000000500220005b860000", 0x36) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000500)={'veth0_to_bridge\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) bind$packet(r5, &(0x7f0000000600)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) write(r5, &(0x7f0000000700)="00112233445566778899aabb0800450000280001000040067cc27f0000017f000001005000500000000000000000500220005b860000", 0x36) 1.712026578s ago: executing program 5 (id=31): r0 = syz_usb_connect$cdc_ncm(0x0, 0x6e, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x200}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}}}}}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000340)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10, 0x10}}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000180), 0x11, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000200)) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./sys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/net/usb0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r2, &(0x7f0000000300)='10\n\x00', 0x3) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/class/net/wwan0/cdc_ncm/min_tx_pkt\x00', 0x2, 0x0) write(r3, &(0x7f0000000300)='10\n\x00', 0x3) 1.66762374s ago: executing program 6 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='0', 0x1) write(r0, &(0x7f0000000100)='1', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/module/kvm/parameters/force_emulation_prefix\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='1', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/module/kvm_intel/parameters/emulate_invalid_guest_state\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='0', 0x1) close(r2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000240)={0x0, &(0x7f0000000280)=[@code={0xa, 0x0, {"0f0b6b766ddbe3"}}]}) r7 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r3, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r7, 0x3, 0x11, r6, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.469223624s ago: executing program 6 (id=33): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x15, 0x5, 0x57e, 0x2007, 0x0, 0x0, "05010905a1011500250135004501750195018102c0"}}, 0x12d) nanosleep(&(0x7f0000000400)={0x0, 0x989680}, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000300)={0xc, {0x16a, "21000000000000000000000000800200000200"/468}}, 0x1da) 1.019860175s ago: executing program 4 (id=34): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000100)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x1d, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10105091901290a150025017501950a8102950175068103c0"}}, 0xef) nanosleep(&(0x7f0000000200)={0x1}, 0x0) r1 = syz_open_dev$hidraw(&(0x7f0000000300), 0x0, 0x2) write$hidraw(r1, &(0x7f0000000400)='12345678', 0x8) 933.969057ms ago: executing program 7 (id=35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='0\x00', 0x1) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r2, &(0x7f0000000140)='1\x00', 0x1) close(r2) 802.985421ms ago: executing program 7 (id=36): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='0x1234\n\x00', 0x7) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0x5678\n\x00', 0x7) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000380)='./config/usb_gadget/g1/functions/printer.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/printer.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='dummy_hcd.0\n\x00', 0xc) close(r2) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./dev/g_printer0\x00', 0x2, 0x0) close(r3) 727.061523ms ago: executing program 7 (id=37): mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/netconsole/target1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/netconsole/target1/enabled\x00', 0x2, 0x0) write(r0, &(0x7f0000000600)='1\x00', 0x2) write(r0, &(0x7f0000000700)='0\x00', 0x2) 710.875533ms ago: executing program 7 (id=38): r0 = syz_usb_connect(0x0, 0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000004032151d0100010102000109022200010100a032090400000103000000092111010001222f000705810340000a"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x30, &(0x7f0000000120)={0x0, 0x22, 0x2f, {0x2f, 0x22, "05010902a101050919012903150025017501950381027505950181010501093009311581257f750895028106c0"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) nanosleep(&(0x7f0000000180)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x0) ioctl$USBDEVFS_RESET(r1, 0x5514) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000300)='./sys\x00', &(0x7f0000000340)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./sys/bus/usb/devices/1-1/bConfigurationValue\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='1\n', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/1-1/authorized\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='1\n', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/hid/drivers/hid-rmi/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='0003:1532:011d.0001\n', 0x14) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/hid/drivers/hid-rmi/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='0003:1532:011d.0001\n', 0x14) 136.052337ms ago: executing program 4 (id=39): mkdir(&(0x7f0000000080)='proc\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='proc/self/root\x00', 0x10000, 0x0) fchdir(r0) chdir(&(0x7f00000001c0)='sys/kernel/config/usb_gadget\x00') mkdir(&(0x7f0000000200)='g1\x00', 0x1ff) chdir(&(0x7f0000000240)='g1\x00') mkdir(&(0x7f0000000280)='strings/0x409\x00', 0x1ff) mkdir(&(0x7f00000002c0)='configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000300)='configs/c.1/strings/0x409\x00', 0x1ff) mkdir(&(0x7f0000000340)='functions/uvc.0\x00', 0x1ff) mkdir(&(0x7f0000000380)='functions/uvc.0/streaming/uncompressed/u\x00', 0x1ff) mkdir(&(0x7f00000003c0)='functions/uvc.0/streaming/uncompressed/u/360p\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='functions/uvc.0/streaming/uncompressed/u/360p/wWidth\x00', 0x1, 0x0) write(r1, &(0x7f0000000440)='640\n\x00', 0x4) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='functions/uvc.0/streaming/uncompressed/u/360p/wHeight\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='360\n\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000500)='functions/uvc.0/streaming/uncompressed/u/360p/dwFrameInterval\x00', 0x1, 0x0) write(r3, &(0x7f0000000540)='333333\n\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='functions/uvc.0/streaming/uncompressed/u/360p/dwMaxVideoFrameBufferSize\x00', 0x1, 0x0) write(r4, &(0x7f0000000600)='460800\n\x00', 0x7) mkdir(&(0x7f0000000640)='functions/uvc.0/streaming/header/h\x00', 0x1ff) fchdir(r0) chdir(&(0x7f0000000680)='sys/kernel/config/usb_gadget/g1/functions/uvc.0/streaming\x00') symlink(&(0x7f00000006c0)='uncompressed/u\x00', &(0x7f0000000700)='header/h/u\x00') symlink(&(0x7f0000000740)='header/h\x00', &(0x7f0000000780)='class/fs/h\x00') symlink(&(0x7f00000007c0)='header/h\x00', &(0x7f0000000800)='class/hs/h\x00') symlink(&(0x7f0000000840)='header/h\x00', &(0x7f0000000880)='class/ss/h\x00') fchdir(r0) mkdir(&(0x7f0000000900)='header/h\x00', 0x1ff) symlink(&(0x7f0000000940)='header/h\x00', &(0x7f0000000980)='class/fs/h\x00') symlink(&(0x7f00000009c0)='header/h\x00', &(0x7f0000000a00)='class/ss/h\x00') fchdir(r0) chdir(&(0x7f0000000a40)='sys/kernel/config/usb_gadget/g1\x00') symlink(&(0x7f0000000a80)='functions/uvc.0\x00', &(0x7f0000000ac0)='configs/c.1/uvc.0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000b40)='dummy_udc.0\x00', 0xb) 135.694287ms ago: executing program 4 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./nfsd\x00', &(0x7f0000000200)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./nfsd/threads\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='1\n\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000600)='2049\n\x00', 0x5) close(r1) 135.321707ms ago: executing program 4 (id=41): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/cluster/mycluster\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/cluster/mycluster/node/node0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/cluster/mycluster/node/node0/ipv4_address\x00', 0x1, 0x0) write(r0, &(0x7f0000000b00)='127.0.0.1\n\x00', 0xa) r1 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/cluster/mycluster/node/node0/ipv4_port\x00', 0x1, 0x0) write(r1, &(0x7f0000000d00)='7777\n\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/cluster/mycluster/node/node0/num\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='0\n\x00', 0x2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/cluster/mycluster/node/node0/local\x00', 0x1, 0x0) write(r3, &(0x7f0000000f00)='1\n\x00', 0x2) r4 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./hbfile\x00', 0x42, 0x1ff) ftruncate(r4, 0x100000) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r6 = syz_open_dev$loop(&(0x7f0000001200), 0x0, 0x2) ioctl$LOOP_SET_FD(r6, 0x4c00, r4) mkdirat(0xffffffffffffff9c, &(0x7f0000001300)='./config/cluster/mycluster/heartbeat/reg1\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./config/cluster/mycluster/heartbeat/reg1/block_bytes\x00', 0x1, 0x0) write(r7, &(0x7f0000001500)='512\n\x00', 0x4) r8 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./config/cluster/mycluster/heartbeat/reg1/start_block\x00', 0x1, 0x0) write(r8, &(0x7f0000001700)='1\n\x00', 0x2) r9 = openat(0xffffffffffffff9c, &(0x7f0000001800)='./config/cluster/mycluster/heartbeat/reg1/blocks\x00', 0x1, 0x0) write(r9, &(0x7f0000001900)='10\n\x00', 0x3) r10 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./config/cluster/mycluster/heartbeat/reg1/dev\x00', 0x1, 0x0) write(r10, &(0x7f0000001b00)='5\n\x00', 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000002100)='./dlmfs_mnt\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000002100)='./dlmfs_mnt\x00', &(0x7f0000000300)='ocfs2_dlmfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002200)='./dlmfs_mnt/domain1\x00', 0x1ff) r11 = openat(0xffffffffffffff9c, &(0x7f0000002300)='./dlmfs_mnt/domain1/lock1\x00', 0x42, 0x1ff) write(r11, &(0x7f0000002400)='EX\n\x00', 0x3) close(r11) unlinkat(0xffffffffffffff9c, &(0x7f0000002300)='./dlmfs_mnt/domain1/lock1\x00', 0x0) unlinkat(0xffffffffffffff9c, &(0x7f0000002200)='./dlmfs_mnt/domain1\x00', 0x200) 25.83428ms ago: executing program 4 (id=42): openat(0xffffffffffffff9c, &(0x7f0000000100)='proc/self/root/sys/bus/platform/drivers/cdns-usb3\x00', 0x0, 0x0) 0s ago: executing program 4 (id=43): mkdir(&(0x7f0000000040)='sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='sys/bus/pci/devices/0000:00:04.0/config\x00', 0x2, 0x0) pwrite64(r0, &(0x7f0000000180)='\x00\x00', 0x2, 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='sys/bus/pci/devices/0000:00:04.0/remove\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='1', 0x1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.199' (ED25519) to the list of known hosts. [ 29.257468][ T36] audit: type=1400 audit(1786960100.210:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.260972][ T286] cgroup: Unknown subsys name 'net' [ 29.280194][ T36] audit: type=1400 audit(1786960100.210:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.307546][ T36] audit: type=1400 audit(1786960100.240:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.308151][ T286] cgroup: Unknown subsys name 'devices' [ 29.428658][ T286] cgroup: Unknown subsys name 'hugetlb' [ 29.434357][ T286] cgroup: Unknown subsys name 'rlimit' [ 29.549830][ T36] audit: type=1400 audit(1786960100.500:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.573078][ T36] audit: type=1400 audit(1786960100.500:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.597897][ T36] audit: type=1400 audit(1786960100.500:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.661465][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 29.670438][ T36] audit: type=1400 audit(1786960100.630:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 29.695989][ T36] audit: type=1400 audit(1786960100.630:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.770835][ T36] audit: type=1400 audit(1786960100.720:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.796543][ T36] audit: type=1400 audit(1786960100.720:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.797250][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.227109][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.234222][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.241432][ T293] bridge_slave_0: entered allmulticast mode [ 31.247767][ T293] bridge_slave_0: entered promiscuous mode [ 31.255417][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.262663][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.269905][ T293] bridge_slave_1: entered allmulticast mode [ 31.276349][ T293] bridge_slave_1: entered promiscuous mode [ 31.350202][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.357465][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.364544][ T294] bridge_slave_0: entered allmulticast mode [ 31.371208][ T294] bridge_slave_0: entered promiscuous mode [ 31.381425][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.388613][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.395717][ T294] bridge_slave_1: entered allmulticast mode [ 31.402116][ T294] bridge_slave_1: entered promiscuous mode [ 31.470058][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.477266][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.484352][ T295] bridge_slave_0: entered allmulticast mode [ 31.490759][ T295] bridge_slave_0: entered promiscuous mode [ 31.506577][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.513658][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.520820][ T295] bridge_slave_1: entered allmulticast mode [ 31.527196][ T295] bridge_slave_1: entered promiscuous mode [ 31.578444][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.585542][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.592923][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.599997][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.622339][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.629626][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.637107][ T296] bridge_slave_0: entered allmulticast mode [ 31.643436][ T296] bridge_slave_0: entered promiscuous mode [ 31.656545][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.663630][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.671021][ T296] bridge_slave_1: entered allmulticast mode [ 31.677467][ T296] bridge_slave_1: entered promiscuous mode [ 31.686318][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.693577][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.700896][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.707963][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.782863][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.790010][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.797375][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.804452][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.819218][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.826847][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.834840][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.842281][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.850164][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.857525][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.869880][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.876970][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.898584][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.905658][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.922385][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.929493][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.949048][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.956178][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.967694][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.974770][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.985095][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.992207][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.043848][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.050952][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.058807][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.065878][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.092823][ T294] veth0_vlan: entered promiscuous mode [ 32.110265][ T295] veth0_vlan: entered promiscuous mode [ 32.120344][ T293] veth0_vlan: entered promiscuous mode [ 32.134695][ T295] veth1_macvtap: entered promiscuous mode [ 32.147013][ T294] veth1_macvtap: entered promiscuous mode [ 32.160648][ T293] veth1_macvtap: entered promiscuous mode [ 32.207574][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.227103][ T296] veth0_vlan: entered promiscuous mode [ 32.243983][ T296] veth1_macvtap: entered promiscuous mode [ 32.328717][ T325] PM: suspend entry (deep) [ 32.348063][ T327] tipc: Started in network mode [ 32.353068][ T327] tipc: Node identity 1001001, cluster identity 500 [ 32.360413][ T327] tipc: Node number set to 16781313 [ 32.366792][ T327] tipc: Enabled bearer , priority 10 [ 32.445275][ T336] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(3) [ 32.455547][ T336] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(9) [ 32.466622][ T336] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(4.50.0), cmd(6) [ 32.517451][ T65] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.581067][ T46] Filesystems sync: 0.246 seconds [ 32.627032][ T325] Freezing user space processes [ 32.676267][ T320] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.676527][ T65] usb 4-1: device descriptor read/all, error -110 [ 37.806259][ T65] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 37.906259][ T320] usb 2-1: device descriptor read/64, error -110 [ 37.936245][ T65] usb 4-1: device descriptor read/64, error -32 [ 38.146244][ T320] usb 2-1: device descriptor read/64, error -32 [ 38.176239][ T65] usb 4-1: device descriptor read/64, error -32 [ 38.286370][ T65] usb usb4-port1: attempt power cycle [ 38.386255][ T320] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.516239][ T320] usb 2-1: device descriptor read/64, error -32 [ 38.626278][ T65] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 38.646776][ T65] usb 4-1: device descriptor read/8, error -32 [ 38.756255][ T320] usb 2-1: device descriptor read/64, error -32 [ 38.776804][ T65] usb 4-1: device descriptor read/8, error -32 [ 38.876325][ T320] usb usb2-port1: attempt power cycle [ 38.946431][ T320] raw-gadget.1 gadget.1: failed to queue reset event [ 38.956262][ T65] raw-gadget.0 gadget.3: failed to queue resume event [ 39.016280][ T65] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 39.036439][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.043732][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.051219][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.058367][ T65] usb 4-1: device descriptor read/8, error -32 [ 39.156339][ T320] raw-gadget.1 gadget.1: failed to queue resume event [ 39.186472][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.193780][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.201251][ C1] raw-gadget.0 gadget.3: ignoring, device is not running [ 39.208469][ T65] usb 4-1: device descriptor read/8, error -32 [ 39.216256][ T320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 39.236450][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.243734][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.251095][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.258277][ T320] usb 2-1: device descriptor read/8, error -32 [ 39.316296][ T65] raw-gadget.0 gadget.3: failed to queue suspend event [ 39.323282][ T65] usb usb4-port1: unable to enumerate USB device [ 39.386455][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.393766][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.401144][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.408248][ T320] usb 2-1: device descriptor read/8, error -32 [ 39.516310][ T320] raw-gadget.1 gadget.1: failed to queue suspend event [ 39.523561][ T320] raw-gadget.1 gadget.1: failed to queue reset event [ 39.596322][ T320] raw-gadget.1 gadget.1: failed to queue resume event [ 39.656334][ T320] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.676440][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.683716][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.691032][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.698230][ T320] usb 2-1: device descriptor read/8, error -32 [ 39.826423][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.833739][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.841117][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 39.848268][ T320] usb 2-1: device descriptor read/8, error -32 [ 39.956322][ T320] raw-gadget.1 gadget.1: failed to queue suspend event [ 39.963279][ T320] usb usb2-port1: unable to enumerate USB device [ 52.636384][ T325] Freezing user space processes failed after 20.004 seconds (1 tasks refusing to freeze, wq_busy=0): [ 52.647386][ T325] task:syz.2.12 state:D stack:0 pid:343 tgid:342 ppid:295 flags:0x00000004 [ 52.657667][ T325] Call Trace: [ 52.661061][ T325] [ 52.663997][ T325] __schedule+0x1496/0x20b0 [ 52.668555][ T325] ? __sched_text_start+0x10/0x10 [ 52.673593][ T325] ? __kasan_check_write+0x18/0x20 [ 52.678753][ T325] ? _raw_spin_lock+0x92/0x120 [ 52.683537][ T325] ? __cfi__raw_spin_lock+0x10/0x10 [ 52.688797][ T325] schedule+0xc5/0x240 [ 52.692887][ T325] schedule_preempt_disabled+0x14/0x30 [ 52.698422][ T325] __mutex_lock+0x902/0x1b90 [ 52.703020][ T325] ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30 [ 52.709873][ T325] ? stack_depot_save_flags+0x38/0x800 [ 52.715375][ T325] ? __asan_memcpy+0x5a/0x80 [ 52.720099][ T325] __mutex_lock_slowpath+0xe/0x20 [ 52.725143][ T325] mutex_lock+0x113/0x1d0 [ 52.729504][ T325] ? __cfi_mutex_lock+0x10/0x10 [ 52.734383][ T325] ? __kasan_check_write+0x18/0x20 [ 52.739551][ T325] ? kobject_get_unless_zero+0x163/0x1f0 [ 52.745222][ T325] ? __cfi_kobject_get_unless_zero+0x10/0x10 [ 52.751272][ T325] misc_open+0x5a/0x370 [ 52.755439][ T325] chrdev_open+0x4e8/0x610 [ 52.759903][ T325] ? __cfi_chrdev_open+0x10/0x10 [ 52.764849][ T325] ? bpf_lsm_file_open+0xd/0x20 [ 52.769738][ T325] ? __cfi_chrdev_open+0x10/0x10 [ 52.774691][ T325] do_dentry_open+0x97f/0x1510 [ 52.779505][ T325] vfs_open+0x86/0x240 [ 52.783588][ T325] ? __cfi_vfs_open+0x10/0x10 [ 52.788290][ T325] ? may_open+0x352/0x430 [ 52.792632][ T325] path_openat+0x2c49/0x35a0 [ 52.797420][ T325] ? schedule+0xc5/0x240 [ 52.801693][ T325] ? kasan_save_alloc_info+0x3a/0x50 [ 52.807134][ T325] ? getname+0x1b/0x30 [ 52.811228][ T325] ? x64_sys_call+0xe69/0x2ee0 [ 52.815995][ T325] ? do_syscall_64+0x57/0xf0 [ 52.820674][ T325] ? do_filp_open+0x440/0x440 [ 52.825401][ T325] do_filp_open+0x1f2/0x440 [ 52.829967][ T325] ? __cfi_do_filp_open+0x10/0x10 [ 52.835033][ T325] ? alloc_fd+0x4c1/0x570 [ 52.839427][ T325] do_sys_openat2+0x134/0x1d0 [ 52.844133][ T325] ? do_sys_open+0x100/0x100 [ 52.848784][ T325] ? __kasan_check_write+0x18/0x20 [ 52.853917][ T325] ? do_user_addr_fault+0xbf5/0x1230 [ 52.859280][ T325] ? __kasan_check_write+0x18/0x20 [ 52.864415][ T325] __x64_sys_openat+0x13a/0x170 [ 52.869390][ T325] x64_sys_call+0xe69/0x2ee0 [ 52.874084][ T325] do_syscall_64+0x57/0xf0 [ 52.878612][ T325] ? clear_bhb_loop+0x50/0xa0 [ 52.883318][ T325] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 52.889287][ T325] RIP: 0033:0x7f2620d5e90e [ 52.893725][ T325] RSP: 002b:00007f2621ce4ea8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 52.902208][ T325] RAX: ffffffffffffffda RBX: 00007f2621ce76c0 RCX: 00007f2620d5e90e [ 52.910257][ T325] RDX: 0000000000000002 RSI: 00007f2620e343aa RDI: ffffffffffffff9c [ 52.918296][ T325] RBP: 00007f2620e35024 R08: 0000000000000000 R09: 0000000000000000 [ 52.926338][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000000006a [ 52.934336][ T325] R13: 0000200000000000 R14: 0000000000000002 R15: 00007ffc6384bc28 [ 52.942456][ T325] [ 52.945956][ T325] OOM killer enabled. [ 52.950148][ T325] Restarting tasks ... done. [ 52.961064][ T325] random: crng reseeded on system resumption [ 52.963287][ T316] raw-gadget.0 gadget.3: failed to queue disconnect event [ 52.967103][ T325] Abort: One or more tasks refusing to freeze [ 52.974297][ T325] PM: suspend exit [ 53.042266][ T338] raw-gadget.1 gadget.1: failed to queue disconnect event [ 53.229767][ T309] bridge_slave_1: left allmulticast mode [ 53.235485][ T309] bridge_slave_1: left promiscuous mode [ 53.276255][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.306754][ T309] bridge_slave_0: left allmulticast mode [ 53.312465][ T309] bridge_slave_0: left promiscuous mode [ 53.326240][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.411688][ T295] tipc: Resetting bearer [ 53.418501][ T295] tipc: Disabling bearer [ 53.470974][ T309] veth1_macvtap: left promiscuous mode [ 53.476745][ T309] veth0_vlan: left promiscuous mode [ 53.600539][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.608693][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.615899][ T351] bridge_slave_0: entered allmulticast mode [ 53.622467][ T351] bridge_slave_0: entered promiscuous mode [ 53.630424][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.637606][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.644704][ T351] bridge_slave_1: entered allmulticast mode [ 53.651083][ T351] bridge_slave_1: entered promiscuous mode [ 53.672790][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.679922][ T349] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.687089][ T349] bridge_slave_0: entered allmulticast mode [ 53.693665][ T349] bridge_slave_0: entered promiscuous mode [ 53.703036][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.710219][ T349] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.717369][ T349] bridge_slave_1: entered allmulticast mode [ 53.723679][ T349] bridge_slave_1: entered promiscuous mode [ 53.766457][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.773570][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.780733][ T352] bridge_slave_0: entered allmulticast mode [ 53.787256][ T352] bridge_slave_0: entered promiscuous mode [ 53.808851][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.815977][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.823515][ T350] bridge_slave_0: entered allmulticast mode [ 53.829845][ T350] bridge_slave_0: entered promiscuous mode [ 53.836183][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.843295][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.850465][ T352] bridge_slave_1: entered allmulticast mode [ 53.856796][ T352] bridge_slave_1: entered promiscuous mode [ 53.867239][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.874325][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.881506][ T350] bridge_slave_1: entered allmulticast mode [ 53.888190][ T350] bridge_slave_1: entered promiscuous mode [ 53.954982][ T36] kauditd_printk_skb: 42 callbacks suppressed [ 53.955002][ T36] audit: type=1400 audit(1786960124.900:116): avc: denied { create } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 53.988356][ T36] audit: type=1400 audit(1786960124.930:117): avc: denied { write } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.008742][ T349] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.008767][ T349] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.008861][ T349] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.030192][ T349] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.036341][ T36] audit: type=1400 audit(1786960124.930:118): avc: denied { read } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 54.092107][ T309] bridge_slave_1: left allmulticast mode [ 54.097928][ T309] bridge_slave_1: left promiscuous mode [ 54.103570][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.111395][ T309] bridge_slave_0: left allmulticast mode [ 54.117181][ T309] bridge_slave_0: left promiscuous mode [ 54.122964][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.130969][ T309] bridge_slave_1: left allmulticast mode [ 54.136954][ T309] bridge_slave_1: left promiscuous mode [ 54.142603][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.150304][ T309] bridge_slave_0: left allmulticast mode [ 54.155970][ T309] bridge_slave_0: left promiscuous mode [ 54.161976][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.169869][ T309] bridge_slave_1: left allmulticast mode [ 54.175531][ T309] bridge_slave_1: left promiscuous mode [ 54.181438][ T309] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.189022][ T309] bridge_slave_0: left allmulticast mode [ 54.194680][ T309] bridge_slave_0: left promiscuous mode [ 54.200368][ T309] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.394862][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.402366][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.444552][ T309] tipc: Left network mode [ 54.458643][ T309] veth1_macvtap: left promiscuous mode [ 54.464184][ T309] veth0_vlan: left promiscuous mode [ 54.470104][ T309] veth1_macvtap: left promiscuous mode [ 54.475644][ T309] veth0_vlan: left promiscuous mode [ 54.481776][ T309] veth1_macvtap: left promiscuous mode [ 54.487368][ T309] veth0_vlan: left promiscuous mode [ 54.649139][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.656362][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.664752][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.671865][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.698352][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.705452][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.727018][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.734125][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.742123][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.749228][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.757272][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.764353][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.781855][ T349] veth0_vlan: entered promiscuous mode [ 54.800957][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.808076][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.815824][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.822980][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.847674][ T349] veth1_macvtap: entered promiscuous mode [ 54.858898][ T351] veth0_vlan: entered promiscuous mode [ 54.893419][ T350] veth0_vlan: entered promiscuous mode [ 54.918146][ T352] veth0_vlan: entered promiscuous mode [ 54.927227][ T351] veth1_macvtap: entered promiscuous mode [ 54.940964][ T352] veth1_macvtap: entered promiscuous mode [ 54.955758][ T350] veth1_macvtap: entered promiscuous mode [ 55.236760][ T319] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 55.266450][ T45] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 55.306260][ T344] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 55.386238][ T10] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 55.396020][ T319] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 55.405280][ T319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.413330][ T319] usb 5-1: Product: syz [ 55.417564][ T319] usb 5-1: Manufacturer: syz [ 55.420118][ T45] usb 8-1: New USB device found, idVendor=0584, idProduct=0008, bcdDevice= 1.02 [ 55.431891][ T45] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.440585][ T45] usb 8-1: Product: syz [ 55.445056][ T45] usb 8-1: Manufacturer: syz [ 55.457371][ T45] ums-alauda 8-1:1.0: USB Mass Storage device detected [ 55.464938][ T344] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 55.469902][ T45] ums-alauda 8-1:1.0: This device (0584,0008,0102 S 06 P f4) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 55.469902][ T45] Please send a copy of this message to and [ 55.478235][ T344] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 55.504572][ T45] scsi host1: usb-storage 8-1:1.0 [ 55.513425][ T344] usb 6-1: New USB device found, idVendor=0404, idProduct=0202, bcdDevice= 0.00 [ 55.527349][ T344] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 55.535566][ T344] usb 6-1: Product: syz [ 55.540320][ T344] usb 6-1: Manufacturer: syz [ 55.547573][ T10] usb 7-1: config index 0 descriptor too short (expected 36, got 18) [ 55.555727][ T10] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 55.569467][ T374] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 55.576739][ T374] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 55.576738][ T10] usb 7-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 55.595642][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.809456][ T45] usb 7-1: USB disconnect, device number 2 [ 56.133920][ T10] usb 5-1: USB disconnect, device number 2 [ 56.566238][ T10] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.571411][ T309] Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 56.582353][ T309] Direct-Access Fujifilm DPC-R1 (Alauda) 0102 PQ: 0 ANSI: 0 CCS [ 56.593915][ T12] sd 1:0:0:0: [sdb] Media removed, stopped polling [ 56.601585][ T46] sd 1:0:0:1: [sdc] Media removed, stopped polling [ 56.615283][ T12] sd 1:0:0:0: [sdb] Attached SCSI removable disk [ 56.634084][ T46] sd 1:0:0:1: [sdc] Attached SCSI removable disk [ 56.671902][ T36] audit: type=1400 audit(1786960127.620:119): avc: denied { read write } for pid=393 comm="syz.4.21" name="uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.696240][ T36] audit: type=1400 audit(1786960127.640:120): avc: denied { open } for pid=393 comm="syz.4.21" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.699525][ T394] input: syz0 as /devices/virtual/input/input4 [ 56.732853][ T36] audit: type=1400 audit(1786960127.650:121): avc: denied { ioctl } for pid=393 comm="syz.4.21" path="/dev/uinput" dev="devtmpfs" ino=194 ioctlcmd=0x5564 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 56.760657][ T10] usb 7-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 56.769866][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.778228][ T10] usb 7-1: Product: syz [ 56.782421][ T10] usb 7-1: Manufacturer: syz [ 56.787470][ T10] usb 7-1: SerialNumber: syz [ 56.852504][ T36] audit: type=1400 audit(1786960127.800:122): avc: denied { mount } for pid=398 comm="syz.4.22" name="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.875113][ T36] audit: type=1400 audit(1786960127.800:123): avc: denied { search } for pid=398 comm="syz.4.22" name="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.897847][ T36] audit: type=1400 audit(1786960127.800:124): avc: denied { write } for pid=398 comm="syz.4.22" name="/" dev="configfs" ino=2462 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 56.925055][ T401] VENDOR: [ 56.925160][ T401] [ 56.928418][ T401] DEVICE: [ 56.930150][ T36] audit: type=1400 audit(1786960127.830:125): avc: denied { unmount } for pid=349 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 56.931559][ T401] [ 57.206208][ T10] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 57.367279][ T10] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x81 has invalid maxpacket 64 [ 57.377345][ T10] usb 5-1: config 1 interface 0 altsetting 1 bulk endpoint 0x1 has invalid maxpacket 64 [ 57.387180][ T10] usb 5-1: New USB device found, idVendor=17cc, idProduct=0815, bcdDevice= 1.00 [ 57.396409][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 57.936444][ T31] usb 8-1: USB disconnect, device number 2 [ 57.984654][ T311] udevd[311]: inotify_add_watch(7, /dev/sdb, 10) failed: No such file or directory [ 58.162716][ T10] usb 6-1: USB disconnect, device number 2 [ 58.319170][ T416] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 58.686213][ T31] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 58.836637][ T31] usb 8-1: too many configurations: 9, using maximum allowed: 8 [ 58.845259][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.854244][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.865192][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.872624][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.881954][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.892941][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.900540][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.909507][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.920548][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.928077][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.937063][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.948036][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.955515][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.964649][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 58.975579][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 58.982993][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 58.991974][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.002984][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.010427][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.019428][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.030360][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.038315][ T31] usb 8-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 59.047454][ T31] usb 8-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 59.058457][ T31] usb 8-1: config 0 interface 0 has no altsetting 0 [ 59.066596][ T31] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 59.075737][ T31] usb 8-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 59.084169][ T31] usb 8-1: Product: syz [ 59.088521][ T31] usb 8-1: Manufacturer: syz [ 59.093160][ T31] usb 8-1: SerialNumber: syz [ 59.098468][ T31] usb 8-1: config 0 descriptor?? [ 59.226492][ T36] kauditd_printk_skb: 4 callbacks suppressed [ 59.226512][ T36] audit: type=1400 audit(1786960130.180:130): avc: denied { create } for pid=424 comm="syz.5.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.253397][ T36] audit: type=1400 audit(1786960130.180:131): avc: denied { write } for pid=424 comm="syz.5.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 59.274178][ T36] audit: type=1400 audit(1786960130.180:132): avc: denied { bind } for pid=424 comm="syz.5.30" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 59.340674][ T344] usb 7-1: USB disconnect, device number 3 [ 59.360451][ T31] usb 8-1: USB disconnect, device number 3 [ 59.386468][ T10] smpboot: CPU 1 is now offline [ 59.394707][ T429] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 59.423208][ T36] audit: type=1400 audit(1786960130.370:133): avc: denied { write } for pid=428 comm="syz.6.32" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 59.506748][ T36] audit: type=1400 audit(1786960130.460:134): avc: denied { read write } for pid=431 comm="syz.6.33" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.527994][ T344] nintendo 0005:057E:2007.0001: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 59.530321][ T36] audit: type=1400 audit(1786960130.460:135): avc: denied { open } for pid=431 comm="syz.6.33" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 59.562768][ T409] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 59.717514][ T409] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 59.730017][ T409] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 59.739174][ T409] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 59.747218][ T409] usb 6-1: Product: syz [ 59.751404][ T409] usb 6-1: Manufacturer: syz [ 59.756042][ T409] usb 6-1: SerialNumber: syz [ 59.982337][ T10] usb 5-1: USB disconnect, device number 3 [ 60.049954][ T36] audit: type=1400 audit(1786960131.000:136): avc: denied { write } for pid=435 comm="syz.4.34" name="hidraw0" dev="devtmpfs" ino=473 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 60.098377][ T319] smpboot: CPU 1 is now offline [ 60.105958][ T439] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 60.546192][ T10] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 60.698609][ T10] usb 8-1: New USB device found, idVendor=1532, idProduct=011d, bcdDevice= 1.00 [ 60.707917][ T10] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 60.716012][ T10] usb 8-1: Product: syz [ 60.720968][ T10] usb 8-1: Manufacturer: syz [ 60.764963][ T409] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 60.771527][ T409] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 60.779083][ T409] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 60.887350][ T452] loop0: detected capacity change from 0 to 2048 [ 60.894203][ T36] audit: type=1400 audit(1786960131.840:137): avc: denied { read write } for pid=451 comm="syz.4.41" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.932657][ T36] audit: type=1400 audit(1786960131.840:138): avc: denied { open } for pid=451 comm="syz.4.41" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.960192][ T36] audit: type=1400 audit(1786960131.840:139): avc: denied { ioctl } for pid=451 comm="syz.4.41" path="/dev/loop-control" dev="devtmpfs" ino=48 ioctlcmd=0x4c82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 60.988502][ T409] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 60.996332][ T409] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 61.010638][ T409] usb 6-1: USB disconnect, device number 3 [ 61.018546][ T409] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 61.361604][ T456] ------------[ cut here ]------------ [ 61.367205][ T456] WARNING: CPU: 0 PID: 456 at drivers/virtio/virtio.c:372 virtio_dev_remove+0x1b6/0x1f0 [ 61.377074][ T456] Modules linked in: [ 61.381042][ T456] CPU: 0 UID: 0 PID: 456 Comm: syz.4.43 Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 61.392460][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 61.402663][ T456] RIP: 0010:virtio_dev_remove+0x1b6/0x1f0 [ 61.408492][ T456] Code: db 41 ba be d4 28 66 45 03 53 f1 74 02 0f 0b 2e e8 0b 27 eb 1c 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 4a d7 71 fe <0f> 0b 43 80 3c 2c 00 0f 85 65 ff ff ff e9 68 ff ff ff 44 89 e1 80 [ 61.428260][ T456] RSP: 0018:ffffc900007ff7a0 EFLAGS: 00010246 [ 61.434377][ T456] RAX: ffffffff83159a76 RBX: ffff8881072c9390 RCX: 0000000000080000 [ 61.442489][ T456] RDX: ffffc9000cbaa000 RSI: 000000000007ffff RDI: 0000000000080000 [ 61.450530][ T456] RBP: ffffc900007ff7c8 R08: ffffffff81dbe738 R09: ffffffff81e0041f [ 61.458589][ T456] R10: 0000000000000000 R11: ffffffff831751f0 R12: 1ffff11020e59272 [ 61.466629][ T456] R13: dffffc0000000000 R14: ffff8881072c9000 R15: 00000000000000ff [ 61.474643][ T456] FS: 00007f69e73bc6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 61.483661][ T456] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 61.490414][ T456] CR2: 00007f257eed7ff8 CR3: 000000011afd4000 CR4: 00000000003526b0 [ 61.498591][ T456] Call Trace: [ 61.501924][ T456] [ 61.504876][ T456] ? __cfi_virtio_dev_remove+0x10/0x10 [ 61.510465][ T456] device_release_driver_internal+0x4ad/0x830 [ 61.516669][ T456] device_release_driver+0x1d/0x30 [ 61.521820][ T456] bus_remove_device+0x34f/0x370 [ 61.526829][ T456] device_del+0x583/0xcf0 [ 61.531232][ T456] ? __cfi_device_del+0x10/0x10 [ 61.536200][ T456] ? pci_device_is_present+0x175/0x240 [ 61.541736][ T456] ? __cfi_pci_device_is_present+0x10/0x10 [ 61.547620][ T456] ? _raw_spin_lock_irq+0x93/0x120 [ 61.552959][ T456] device_unregister+0x19/0x40 [ 61.557849][ T456] unregister_virtio_device+0x38/0x70 [ 61.563276][ T456] virtio_pci_remove+0x80/0xf0 [ 61.568118][ T456] pci_device_remove+0xab/0x260 [ 61.573018][ T456] ? __cfi_pci_device_remove+0x10/0x10 [ 61.578581][ T456] device_release_driver_internal+0x4ad/0x830 [ 61.584711][ T456] device_release_driver+0x1d/0x30 [ 61.589927][ T456] pci_stop_bus_device+0x10c/0x160 [ 61.595108][ T456] pci_stop_and_remove_bus_device_locked+0x1e/0x40 [ 61.601726][ T456] remove_store+0xe6/0x150 [ 61.606226][ T456] ? __cfi_remove_store+0x10/0x10 [ 61.611303][ T456] ? asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 61.617622][ T456] ? __cfi_dev_attr_store+0x10/0x10 [ 61.622883][ T456] ? __cfi_dev_attr_store+0x10/0x10 [ 61.628166][ T456] ? __cfi_remove_store+0x10/0x10 [ 61.633232][ T456] dev_attr_store+0x76/0xa0 [ 61.637817][ T456] ? __cfi_dev_attr_store+0x10/0x10 [ 61.643089][ T456] sysfs_kf_write+0x13e/0x160 [ 61.647833][ T456] ? __cfi_sysfs_kf_write+0x10/0x10 [ 61.653108][ T456] kernfs_fop_write_iter+0x319/0x510 [ 61.658484][ T456] vfs_write+0x75f/0xfd0 [ 61.662775][ T456] ? __cfi_vfs_write+0x10/0x10 [ 61.667608][ T456] ? __cfi_mutex_lock+0x10/0x10 [ 61.672551][ T456] ksys_write+0x145/0x260 [ 61.676982][ T456] ? xfd_validate_state+0x68/0x140 [ 61.682149][ T456] ? __cfi_ksys_write+0x10/0x10 [ 61.687071][ T456] ? __kasan_check_write+0x18/0x20 [ 61.692255][ T456] ? fpregs_restore_userregs+0x11c/0x260 [ 61.697963][ T456] __x64_sys_write+0x7f/0x90 [ 61.702613][ T456] x64_sys_call+0x271c/0x2ee0 [ 61.707362][ T456] do_syscall_64+0x57/0xf0 [ 61.711839][ T456] ? clear_bhb_loop+0x50/0xa0 [ 61.716608][ T456] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 61.722556][ T456] RIP: 0033:0x7f69e659e0d9 [ 61.727065][ T456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 61.746746][ T456] RSP: 002b:00007f69e73bc028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 61.755186][ T456] RAX: ffffffffffffffda RBX: 00007f69e6825fa0 RCX: 00007f69e659e0d9 [ 61.763412][ T456] RDX: 0000000000000001 RSI: 0000200000000200 RDI: 0000000000000004 [ 61.771444][ T456] RBP: 00007f69e6635024 R08: 0000000000000000 R09: 0000000000000000 [ 61.779496][ T456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 61.787525][ T456] R13: 00007f69e6826038 R14: 00007f69e6825fa0 R15: 00007ffcc7c75ec8 [ 61.795520][ T456] [ 61.798607][ T456] ---[ end trace 0000000000000000 ]--- [ 61.858811][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.867324][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.874825][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.882637][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.890223][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.897917][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.918293][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.929322][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.936905][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.944463][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.951997][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.959588][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.967116][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.974646][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.982737][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.990609][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 61.998158][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 62.005707][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 62.013257][ T379] hid-generic 0003:0000:0000.0002: unknown main item tag 0x0 [ 62.021495][ T379] hid-generic 0003:0000:0000.0002: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 62.116159][ T319] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 62.129801][ T10] usbhid 8-1:1.0: can't add hid device: -71 [ 62.136004][ T10] usbhid 8-1:1.0: probe with driver usbhid failed with error -71 [ 62.144890][ T10] usb 8-1: USB disconnect, device number 4 [ 62.267443][ T319] usb 5-1: config 0 has no interfaces? [ 62.273102][ T319] usb 5-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 62.282272][ T319] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 62.291057][ T319] usb 5-1: config 0 descriptor?? [ 62.296685][ T379] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 62.446313][ T379] usb 6-1: Invalid ep0 maxpacket: 64 [ 62.576192][ T379] usb 6-1: new low-speed USB device number 5 using dummy_hcd [ 62.726187][ T379] usb 6-1: Invalid ep0 maxpacket: 64 [ 62.731910][ T379] usb usb6-port1: attempt power cycle [ 62.886248][ T10] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 63.036186][ T10] usb 8-1: Using ep0 maxpacket: 8 [ 63.042464][ T10] usb 8-1: config 0 has an invalid interface number: 143 but max is 0 [ 63.050920][ T10] usb 8-1: config 0 has no interface number 0 [ 63.057150][ T10] usb 8-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 63.066457][ T10] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 63.075129][ T10] usb 8-1: config 0 descriptor?? [ 63.080293][ T379] usb 6-1: new low-speed USB device number 6 using dummy_hcd [ 63.106659][ T379] usb 6-1: Invalid ep0 maxpacket: 64 [ 63.236254][ T379] usb 6-1: new low-speed USB device number 7 using dummy_hcd [ 63.256673][ T379] usb 6-1: Invalid ep0 maxpacket: 64 [ 63.262170][ T379] usb usb6-port1: unable to enumerate USB device [ 63.292372][ T498] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 63.301182][ T498] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 63.836175][ T344] nintendo 0005:057E:2007.0001: Failed to get joycon info; ret=-110 [ 63.844333][ T344] nintendo 0005:057E:2007.0001: Failed to retrieve controller info; ret=-110 [ 63.853325][ T344] nintendo 0005:057E:2007.0001: Failed to initialize controller; ret=-110 [ 63.862660][ T344] nintendo 0005:057E:2007.0001: probe - fail = -110 [ 63.869478][ T344] nintendo 0005:057E:2007.0001: probe with driver nintendo failed with error -110 [ 65.310277][ T344] usb 8-1: USB disconnect, device number 5 [ 65.574291][ T344] usb 5-1: USB disconnect, device number 4