last executing test programs: 31.877122119s ago: executing program 1 (id=2): r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3f0, 0x6c17, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x7, 0x1, 0x3, 0x0, "", {{}, [{}]}}}]}}]}}, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000200)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000400)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0x20, 0x0, 0x1}}) nanosleep(&(0x7f00000001c0)={0x1}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) write$char_usb(r1, &(0x7f0000000300)="0123456789abcdef", 0x10) read$char_usb(r1, &(0x7f0000000400), 0x10) syz_usb_disconnect(r0) 28.65650272s ago: executing program 1 (id=22): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400a1150120000010200010902200001010080320904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1.2/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='auto\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-1.2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0\x00', 0x1) nanosleep(&(0x7f0000000300)={0x1}, 0x0) write(r0, &(0x7f0000000300)='on\x00', 0x2) 26.33798826s ago: executing program 3 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000200)='0x0104\x00', 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11) r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7) r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff) r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0) write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0) symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00') r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb) nanosleep(&(0x7f0000000800)={0x0, 0x17d78400}, 0x0) r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/devices/platform/dummy_hcd.0/usb5/5-1/bConfigurationValue\x00', 0x2, 0x0) write(r10, &(0x7f00000008c0)='2\x00', 0x2) 26.231966762s ago: executing program 1 (id=36): syz_usb_connect(0x0, 0x27, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000400304016000000102030109022000010100c0000904000002000000000705810240000007050202400000"], 0x0) nanosleep(&(0x7f0000000100)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000240)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='auto\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0\x00', 0x2) close(r1) nanosleep(&(0x7f0000000100)={0x1}, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/2-1/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000400)='on\x00', 0x3) close(r2) 25.671033506s ago: executing program 3 (id=40): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='Product\x00', 0x8) close(r4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r5) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='/proc/self/cwd/file0\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') 25.660066937s ago: executing program 3 (id=41): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) 25.623269788s ago: executing program 3 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) 25.621946298s ago: executing program 3 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) 24.73901173s ago: executing program 3 (id=46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) symlink(&(0x7f0000000100)='file0\x00', &(0x7f0000000140)='state_link\x00') 24.7388656s ago: executing program 32 (id=46): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)="01010101", 0x4) read(r0, &(0x7f00000000c0)=""/4, 0x4) close(r0) symlink(&(0x7f0000000100)='file0\x00', &(0x7f0000000140)='state_link\x00') 23.438587544s ago: executing program 1 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) 23.426063093s ago: executing program 1 (id=55): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408f0587630001010203010902200001010080320904000002080650000705810200020007050202000200"], 0x0) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000200)="000002021f00000041544120202020205649525455414c204449534b20202020312e3020") (async) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000300)="55534253010000000000000000") (async) nanosleep(&(0x7f0000000100)={0x5}, 0x0) 23.380455385s ago: executing program 1 (id=57): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0x1d6b', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0x0104', 0x6) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210', 0x10) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation', 0x10) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='Loopback Gadget', 0xf) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000001200)='Conf 1', 0x6) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) close(r6) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)) r7 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000001b00)='3', 0x1) write(r7, &(0x7f0000001c00)='4', 0x1) write(r7, &(0x7f0000001d00)='5', 0x1) write(r7, &(0x7f0000001e00)='6', 0x1) close(r7) nanosleep(&(0x7f0000001f00)={0x1}, 0x0) 23.316078247s ago: executing program 33 (id=57): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='0x1d6b', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0) write(r1, &(0x7f0000000700)='0x0104', 0x6) close(r1) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='fedcba9876543210', 0x10) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0) write(r3, &(0x7f0000000c00)='Linux Foundation', 0x10) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0) write(r4, &(0x7f0000000e00)='Loopback Gadget', 0xf) close(r4) mkdir(&(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000001100)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r5, &(0x7f0000001200)='Conf 1', 0x6) close(r5) mkdir(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000001300)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000001400)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r6, &(0x7f0000001600)='usbip-vudc.0', 0xc) close(r6) mkdir(&(0x7f0000001700)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000001700)='./sys\x00', &(0x7f0000001800)='sysfs\x00', 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001900)) r7 = openat(0xffffffffffffff9c, &(0x7f0000001a00)='./sys/devices/platform/usbip-vudc.0/usbip_sockfd\x00', 0x1, 0x0) write(r7, &(0x7f0000001b00)='3', 0x1) write(r7, &(0x7f0000001c00)='4', 0x1) write(r7, &(0x7f0000001d00)='5', 0x1) write(r7, &(0x7f0000001e00)='6', 0x1) close(r7) nanosleep(&(0x7f0000001f00)={0x1}, 0x0) 14.510624731s ago: executing program 2 (id=98): exit_group(0x0) execve(&(0x7f0000000040)='./script.py\x00', &(0x7f0000000080)={[&(0x7f00000000c0)='./script.py\x00']}, 0x0) 14.510362881s ago: executing program 2 (id=99): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000003c0)='1234567890\x00', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='Product\x00', 0x8) close(r4) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r5, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r5) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='/proc/self/cwd/file0\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') 14.50961342s ago: executing program 2 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) write(0xffffffffffffffff, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) 14.493091141s ago: executing program 2 (id=101): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000500)={&(0x7f0000040000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000002020000000000000000027f000000002b00"/380, 0xd8}) ptrace$cont(0x7, r3, 0x0, 0x0) 14.491833271s ago: executing program 2 (id=102): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, &(0x7f0000000100)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/nd/devices/pfn0.0/namespace\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='namespace0.0\x00', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/nd/devices/pfn0.0/mode\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='pmem\x00', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/nd/devices/pfn0.0/align\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='2097152\x00', 0x8) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='pfn0.0\x00', 0x7) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='pfn0.0\x00', 0x7) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/nd/drivers/nd_pmem/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='namespace0.0\x00', 0xd) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./sys/bus/nd/drivers/nd_pmem/unbind\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='namespace0.0\x00', 0xd) 14.400868694s ago: executing program 2 (id=105): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991117000000010203010902270001010080fa0904000003ffff0000070581031000010705020240000007058302400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000400)) 14.373099274s ago: executing program 34 (id=105): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040991117000000010203010902270001010080fa0904000003ffff0000070581031000010705020240000007058302400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$TIOCMSET(r1, 0x5418, &(0x7f0000000400)) 9.706381673s ago: executing program 0 (id=127): syz_usb_connect(0x3, 0x42, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000406d07060000010000000109023000020100c0320904000001020200000705830308001009040100020a0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 8.233074691s ago: executing program 5 (id=136): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)='Conf 1\x00', 0x7) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='/proc/self/cwd/file0\x00', 0x14) 8.181092082s ago: executing program 5 (id=137): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000040)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/36, 0x24, 0x5, 0x57e, 0x306}}, 0x120) nanosleep(&(0x7f0000000200)={0x0, 0x5f5e100}, 0x0) write$UHID_INPUT(r0, &(0x7f0000001000)={0x8, {"2000000200006400", 0x7}}, 0x1006) 8.078719974s ago: executing program 6 (id=140): nanosleep(&(0x7f0000000040)={0x0, 0x5f5e100}, &(0x7f0000000080)) 7.926979818s ago: executing program 6 (id=141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='xhci-hcd\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='serial8250\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/alarmtimer/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000340)='xhci-hcd\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/platform/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='alarmtimer\x00', 0xb) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x1dcd6500}, 0x0) 7.517014409s ago: executing program 0 (id=142): syz_usb_connect(0x1, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040a41515900002010203010902200001010080320904000002ff0000000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 7.45695081s ago: executing program 6 (id=143): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tmp\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc/fs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/fs/nfsd\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./rpc_pipefs\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) socket$inet_tcp(0x2, 0x1, 0x0) mount(&(0x7f00000001c0)=@filename='sunrpc\x00', &(0x7f0000000200)='./rpc_pipefs\x00', &(0x7f0000000240)='rpc_pipefs\x00', 0x0, 0x0) mount(&(0x7f0000000280)=@filename='none\x00', &(0x7f00000002c0)='./proc/fs/nfsd\x00', &(0x7f0000000300)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./proc/fs/nfsd/versions\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='-2 -3\n', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/fs/nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./proc/fs/nfsd/threads\x00', 0x1, 0x0) write(r2, &(0x7f0000000480)='1\n', 0x2) openat(0xffffffffffffff9c, &(0x7f00000004c0)='./rpc_pipefs/cld\x00', 0x0, 0x0) 7.406704992s ago: executing program 6 (id=144): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000404765320200010102030109022700010100c0000904000003ff000000070581024000000705020240000007058303400001"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r1, &(0x7f0000000400), 0x100) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000300)="12345678") nanosleep(&(0x7f0000000200)={0x1}, 0x0) read$char_usb(r1, &(0x7f0000000400), 0x100) 5.866709441s ago: executing program 4 (id=145): r0 = syz_usb_connect(0x2, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001000000400605014600010000000109022700010100a0320904000003ffffff00070581024000000705020240000007058303080001"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, &(0x7f0000001000)={0x84, &(0x7f0000001100)={0x0, 0x0, 0x6, '@@@@@@'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_netdev_private(r1, 0x89f0, &(0x7f0000002000)='eth0\x00'/39) 4.453566257s ago: executing program 0 (id=150): r0 = syz_open_dev$usbmon(&(0x7f0000002000), 0x0, 0x802) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) ioctl$MON_IOCX_MFETCH(r0, 0xc0109207, &(0x7f0000000ff8)) 3.069580872s ago: executing program 0 (id=151): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000100)={0xc0, 0x0, 0x1000}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 3.028473643s ago: executing program 0 (id=152): r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x525, 0xa4a5, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0xc0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x8, 0x6, 0x50, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000400)={0x1}, 0x0) syz_usb_ep_read(r0, 0x2, 0x1f, &(0x7f0000000100)) syz_usb_ep_write(r0, 0x81, 0x24, &(0x7f0000000200)='6\x00'/36) syz_usb_ep_write(r0, 0x81, 0xd, &(0x7f0000000300)="55534253010000000000000000") 2.971064794s ago: executing program 6 (id=153): r0 = syz_usb_connect(0x3, 0x2b, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000209000040c605089000010102030109021900010100e000090400000109000000070581030800ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x32, 0x64}}, 0x0}, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000300)={0x20, 0x0, 0x4}, &(0x7f0000000400)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000600)={0x1}, 0x0) syz_usb_disconnect(r0) 2.849409957s ago: executing program 4 (id=154): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='debugfs\x00', &(0x7f0000000080)='./debug\x00', &(0x7f00000000c0)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./debug/sched/preempt\x00', 0x2, 0x0) read(r0, &(0x7f0000000300)=""/100, 0x64) 2.841123528s ago: executing program 4 (id=155): r0 = socket$inet(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x3039, @loopback}, 0x10) listen(r0, 0x5) rt_sigprocmask(0x0, &(0x7f0000000900)={[0xffffffffffffffff]}, 0x0, 0x8) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = fsopen(&(0x7f0000000200)='cifs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000300)='source\x00', &(0x7f0000000400)='//127.0.0.1/share\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000500)='ip\x00', &(0x7f0000000600)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000700)='port\x00', &(0x7f0000000800)='12345\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000900)='echo_interval\x00', &(0x7f0000000a00)='1\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) (async) nanosleep(&(0x7f0000000b00)={0x0, 0x5f5e100}, 0x0) 2.659037472s ago: executing program 4 (id=156): mkdirat(0x9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0x9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) nanosleep(&(0x7f0000000700)={0x1}, 0x0) 2.146435185s ago: executing program 7 (id=160): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) 2.134207306s ago: executing program 7 (id=161): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}, @nested_amd_invlpga={0x17d, 0x20, {0x400000, 0x1}}, @nested_vmresume={0x130, 0x18}], 0x99}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x400000, &(0x7f0000c00000/0x400000)=nil}) 2.003032459s ago: executing program 7 (id=162): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./nfsd\x00', &(0x7f00000000c0)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1\n', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./nfsd/portlist\x00', 0x2, 0x0) write(r1, &(0x7f00000001c0)='tcp 2049\n', 0x9) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./nfsd/versions\x00', 0x2, 0x0) write(r2, &(0x7f0000000240)='+4 +4.1 +4.2\n', 0xd) 2.002885679s ago: executing program 7 (id=163): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000000000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000000)={0x0, &(0x7f0000000100)=[@uexit={0x0, 0x18, 0x1}], 0x18}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.96753097s ago: executing program 7 (id=164): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x409, 0x63, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0x0, 0x0, 0x0, [], [{{0x7, 0x5, 0x81, 0x2, 0x200}}, {{0x7, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, 0x0) symlink(&(0x7f0000000100)='dev/ttyUSB0\x00', &(0x7f0000000140)='./mytty0\x00') openat(0xffffffffffffff9c, &(0x7f0000000140)='./mytty0\x00', 0x2, 0x0) symlink(&(0x7f0000000180)='dev/ttyUSB1\x00', &(0x7f00000001c0)='./mytty1\x00') openat(0xffffffffffffff9c, &(0x7f00000001c0)='./mytty1\x00', 0x2, 0x0) symlink(&(0x7f0000000200)='dev/ttyUSB2\x00', &(0x7f0000000240)='./mytty2\x00') openat(0xffffffffffffff9c, &(0x7f0000000240)='./mytty2\x00', 0x2, 0x0) 1.860007533s ago: executing program 4 (id=165): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000000)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='i915\x00', 0x5) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/drivers/i915/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='0000:00:00.0\x00', 0xd) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000100)='i915\x00', 0x5) write(r1, &(0x7f0000000200)='0000:00:01.0\x00', 0xd) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000100)='i915\x00', 0x5) write(r1, &(0x7f0000000200)='0000:00:02.0\x00', 0xd) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000100)='i915\x00', 0x5) write(r1, &(0x7f0000000200)='0000:00:03.0\x00', 0xd) 1.803001784s ago: executing program 4 (id=166): r0 = syz_usb_connect(0x0, 0x6a, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401007018000010000000109025800010100a032090400000aff00000007050102400000070581024000000705020240000007058202400000070503024000000705830240000007050402400000070584024000000705050240000007058502400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_ep_write(r0, 0x5, 0x14, &(0x7f0000000200)="0b000100"/20) syz_usb_ep_write(r0, 0x5, 0x1, &(0x7f0000000400)="10") r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='proc/self/root/dev/ttyUSB0\x00', 0x2, 0x0) ioctl$TIOCMSET(r1, 0x5415, &(0x7f0000000500)=0x6) 742.133161ms ago: executing program 7 (id=167): syz_usb_connect$uac2(0x5, 0x9f, &(0x7f00000000c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x20, 0x499, 0x1054, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8d, 0x3, 0x1, 0x4, 0x100, 0x7f, {0x8, 0xb, 0x1, 0x1, 0x1, 0xa, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x7, 0x6, 0x15, 0xb2}, [@output_terminal={0xc, 0x24, 0x3, 0x5, 0x400, 0xa, 0x25, 0x0, 0x7f, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_i_continuous={0x8, 0x24, 0x2, 0x1, 0xe6, 0x3, 0x4, 0x6}, @as_header={0x10, 0x24, 0x1, 0x5, 0x5, 0x0, 0x4, 0x5, 0x5, 0x44}]}, {{0x9, 0x5, 0x1, 0x9, 0x200, 0x6, 0x99, 0x80, {0x8, 0x25, 0x1, 0x1, 0x18, 0x1e}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x200, 0xe, 0x4, 0x52, {0x8, 0x25, 0x1, 0x4, 0xf, 0x43, 0x3ce}}}}}}}}]}}, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffff9c, &(0x7f0000000080)='./my_config\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='none\x00', &(0x7f00000001c0)='./my_config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffff9c, &(0x7f0000000240)='./my_config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffff9c, &(0x7f0000000280)='./my_config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='0x1d6b\x00', 0x6) close(r0) r1 = openat(0xffffff9c, &(0x7f0000000300)='./my_config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x0104\x00', 0x6) close(r1) mkdirat(0xffffff9c, &(0x7f0000000380)='./my_config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffff9c, &(0x7f00000003c0)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r2 = openat(0xffffff9c, &(0x7f0000000400)='./my_config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) write(r2, &(0x7f0000000440)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000,1411200,1536000\x00', 0x53) close(r2) r3 = openat(0xffffff9c, &(0x7f00000004c0)='./my_config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='44100,48000,88200,96000,176400,192000,352800,384000,705600,768000,1411200,1536000\x00', 0x53) close(r3) symlinkat(&(0x7f0000000600)='./my_config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffff9c, &(0x7f0000000640)='./my_config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r4 = openat(0xffffff9c, &(0x7f0000000680)='./my_config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f00000006c0)='dummy_udc.1\x00', 0xb) close(r4) 506.329237ms ago: executing program 5 (id=168): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) close(r0) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000200)='./config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) mkdir(&(0x7f0000000340)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) write(r5, &(0x7f00000004c0)='Product\x00', 0x8) close(r5) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff) r6 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x1, 0x0) write(r6, &(0x7f00000005c0)='Conf 1\x00', 0x7) close(r6) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f0000000680)='/proc/self/cwd/file0\x00', 0x14) symlink(&(0x7f00000006c0)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.1/mass_storage.usb0\x00') 494.926017ms ago: executing program 5 (id=169): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='A\x00', 0x2) lseek(r0, 0xffffe, 0x0) write(r0, &(0x7f00000000c0)='B\x00', 0x2) mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='none\x00', &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0x1d6b\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000300)='0x0104\x00', 0x7) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f00000003c0)='1234567890\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x1, 0x0) write(r4, &(0x7f0000000440)='Manufacturer\x00', 0xd) close(r4) openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x1, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) write(0xffffffffffffffff, &(0x7f00000005c0)='Conf 1\x00', 0x7) mkdir(&(0x7f0000000600)='./config/usb_gadget/g1/functions/mass_storage.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/mass_storage.usb0/lun.0/file\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='/proc/self/cwd/file0\x00', 0x14) 481.044397ms ago: executing program 6 (id=170): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100020000402505a1a440000102030109023b00010100000000090400001202060000052406000000052400000d240f0100000000090582020002000000090503020002000000"], &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_disconnect(r0) 479.850808ms ago: executing program 5 (id=171): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) 418.979709ms ago: executing program 5 (id=172): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./dev_mnt\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e5a2d000000000001090224000100000000090400000103010200092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev_mnt/roccatsavu0\x00', 0x2, 0x0) ioctl(r1, 0x800448f1, &(0x7f0000000200)='\x00\x00\x00\x00') 0s ago: executing program 0 (id=173): r0 = syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000003c0)={0x34, &(0x7f0000000140)={0x20, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000780)={0x34, &(0x7f0000000600)={0x40, 0x11}, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000500)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000600)='./sys\x00', &(0x7f0000000800)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000b00)='freeze\x00', 0x7) syz_usb_disconnect(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.96' (ED25519) to the list of known hosts. [ 21.014376][ T28] audit: type=1400 audit(1786952800.213:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.015448][ T279] cgroup: Unknown subsys name 'net' [ 21.037031][ T28] audit: type=1400 audit(1786952800.213:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.064353][ T28] audit: type=1400 audit(1786952800.243:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.064498][ T279] cgroup: Unknown subsys name 'devices' [ 21.208678][ T279] cgroup: Unknown subsys name 'hugetlb' [ 21.214355][ T279] cgroup: Unknown subsys name 'rlimit' [ 21.316539][ T28] audit: type=1400 audit(1786952800.513:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.339828][ T28] audit: type=1400 audit(1786952800.513:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.364584][ T28] audit: type=1400 audit(1786952800.513:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 21.392913][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 21.402014][ T28] audit: type=1400 audit(1786952800.603:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.427437][ T28] audit: type=1400 audit(1786952800.603:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.476392][ T28] audit: type=1400 audit(1786952800.673:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.502042][ T28] audit: type=1400 audit(1786952800.673:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.502097][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.346385][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.353538][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.360999][ T288] device bridge_slave_0 entered promiscuous mode [ 22.368838][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.375872][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.383269][ T288] device bridge_slave_1 entered promiscuous mode [ 22.476374][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.483485][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.491006][ T287] device bridge_slave_0 entered promiscuous mode [ 22.517386][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.524434][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.531941][ T287] device bridge_slave_1 entered promiscuous mode [ 22.567466][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.574526][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.581966][ T289] device bridge_slave_0 entered promiscuous mode [ 22.590595][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.597778][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.605229][ T289] device bridge_slave_1 entered promiscuous mode [ 22.624997][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.632093][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.639561][ T290] device bridge_slave_0 entered promiscuous mode [ 22.660985][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.668118][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.675524][ T290] device bridge_slave_1 entered promiscuous mode [ 22.705547][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.712859][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.720353][ T294] device bridge_slave_0 entered promiscuous mode [ 22.730198][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.737290][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.744596][ T294] device bridge_slave_1 entered promiscuous mode [ 22.794429][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.801522][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.906201][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.913303][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.920615][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.927655][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.943669][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.951514][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.958901][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.965933][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.980917][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.988607][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.996245][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.003684][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.011125][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.018948][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.026366][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.044732][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.057542][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.065933][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.074535][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.081697][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.093019][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.101342][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.108410][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.131014][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.138675][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.147287][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.154348][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.161973][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.170616][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.198801][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.206602][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.215164][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.223544][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.230719][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.238551][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.246715][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.253768][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.261252][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.269595][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.276617][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.284060][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.292123][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.300408][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.307461][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.315057][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.330733][ T288] device veth0_vlan entered promiscuous mode [ 23.345192][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.354055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.362146][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.369722][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.379647][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.387982][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.395014][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.402552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.434725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 23.442333][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.449905][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 23.459369][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 23.467894][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.474938][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.482484][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.490717][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.498757][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 23.507218][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 23.515403][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.522480][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.530212][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.538458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.546372][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.554493][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.562630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.570835][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.578980][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.587346][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.595570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.603981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.613424][ T288] device veth1_macvtap entered promiscuous mode [ 23.626047][ T290] device veth0_vlan entered promiscuous mode [ 23.633197][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 23.641295][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.649182][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.657958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.665992][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.674591][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.683065][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.691270][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.699374][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.707149][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.725645][ T289] device veth0_vlan entered promiscuous mode [ 23.732316][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.740792][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.749472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.757958][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.766246][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.774420][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.782653][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.790265][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.803555][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.812056][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.820540][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.828548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.840502][ T290] device veth1_macvtap entered promiscuous mode [ 23.850476][ T294] device veth0_vlan entered promiscuous mode [ 23.857708][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.866585][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.874230][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.884049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.901247][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.901395][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.909903][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.925643][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.934568][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.943134][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.951768][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.964434][ T287] device veth0_vlan entered promiscuous mode [ 23.972229][ T289] device veth1_macvtap entered promiscuous mode [ 23.984239][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.998071][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.006552][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.015703][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.023910][ T312] clocksource: Switched to clocksource kvm-clock [ 24.024376][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.038632][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.039197][ T312] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.069316][ T294] device veth1_macvtap entered promiscuous mode [ 24.085357][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.095808][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.104282][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.132565][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.145120][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.154109][ T315] input: syz0 as /devices/virtual/input/input4 [ 24.162927][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.177437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.209884][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.218235][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.233264][ T287] device veth1_macvtap entered promiscuous mode [ 24.270116][ T39] sony 0003:054C:05C4.0001: No inputs registered, leaving [ 24.278138][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.286258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.294795][ T39] sony 0003:054C:05C4.0001: hidraw0: USB HID v80.01 Gamepad [syz1] on syz1 [ 24.300089][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.304650][ T39] sony 0003:054C:05C4.0001: failed to claim input [ 24.317345][ T331] PCI_CLASS=30000 [ 24.317345][ T331] PCI_ID=1AE0:A002 [ 24.317345][ T331] PCI_SUBSYS_ID=1AE0:0001 [ 24.317345][ T331] PCI_SLOT_NAME=0000:00:05.0 [ 24.317345][ T331] MODALIAS=pci:v00001AE0d0000A002sv00001AE0sd00000001bc03sc00i00 [ 24.319440][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.382621][ T332] fido_id[332]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 24.384280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.515633][ T351] xhci_hcd 0000:00:01.0: init 0000:00:01.0 fail, -16 [ 24.522595][ T351] xhci_hcd: probe of 0000:00:01.0 failed with error -16 [ 24.656970][ T309] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 24.706971][ T39] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.717051][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.736936][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.838209][ T309] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 24.848245][ T19] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.855755][ T309] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 24.869298][ T309] usb 5-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 6.00 [ 24.878553][ T309] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.886541][ T309] usb 5-1: Product: syz [ 24.886970][ T39] usb 2-1: Using ep0 maxpacket: 32 [ 24.891050][ T309] usb 5-1: Manufacturer: syz [ 24.897477][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 24.900629][ T309] usb 5-1: SerialNumber: syz [ 24.910347][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 24.918732][ T335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 24.924739][ T39] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 24.931978][ T335] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 24.941677][ T24] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 1.00 [ 24.948806][ T6] usb 3-1: Using ep0 maxpacket: 32 [ 24.959260][ T39] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 24.965626][ T309] ftdi_sio 5-1:1.0: FTDI USB Serial Device converter detected [ 24.974442][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 24.984638][ T309] usb 5-1: Detected FT232R [ 24.990077][ T39] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 24.996234][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 25.016967][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 25.026715][ T39] usb 2-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 25.027095][ T6] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 25.036071][ T39] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.045816][ T6] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 25.054827][ T39] usb 2-1: config 0 descriptor?? [ 25.068749][ T6] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 25.081822][ T6] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 25.090935][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.100649][ T19] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.111879][ T6] usb 3-1: config 0 descriptor?? [ 25.120829][ T19] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 25.129976][ T19] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.138078][ T19] usb 4-1: Product: syz [ 25.142284][ T19] usb 4-1: Manufacturer: syz [ 25.146923][ T19] usb 4-1: SerialNumber: syz [ 25.273916][ T39] usblp 2-1:0.0: usblp0: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 25.319201][ T6] usblp 3-1:0.0: usblp1: USB Bidirectional printer dev 2 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 26.157384][ T19] cdc_ncm 4-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 26.163960][ T19] cdc_ncm 4-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 26.172402][ T19] cdc_ncm 4-1:1.0: setting rx_max = 2048 [ 26.408143][ T309] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 26.415361][ T309] ftdi_sio 5-1:1.0: GPIO initialisation failed: -71 [ 26.422513][ T309] usb 5-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 26.434826][ T309] usb 5-1: USB disconnect, device number 2 [ 26.441884][ T309] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 26.451708][ T309] ftdi_sio 5-1:1.0: device disconnected [ 26.995459][ T28] kauditd_printk_skb: 61 callbacks suppressed [ 26.995486][ T28] audit: type=1400 audit(1786952806.194:135): avc: denied { write } for pid=370 comm="syz.4.18" name="idVendor" dev="configfs" ino=15888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 26.998705][ T371] Mass Storage Function, version: 2009/09/11 [ 27.002242][ T28] audit: type=1400 audit(1786952806.194:136): avc: denied { open } for pid=370 comm="syz.4.18" path="/3/config/usb_gadget/g1/idVendor" dev="configfs" ino=15888 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 27.024709][ T371] LUN: removable file: (no medium) [ 27.059483][ T19] cdc_ncm 4-1:1.0: setting tx_max = 88 [ 27.070214][ T19] cdc_ncm 4-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.3-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 27.091238][ T19] usb 4-1: USB disconnect, device number 2 [ 27.097390][ T19] cdc_ncm 4-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.3-1, CDC NCM (NO ZLP) [ 27.317648][ T28] audit: type=1400 audit(1786952806.524:137): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 27.641152][ T344] usb 2-1: USB disconnect, device number 2 [ 27.649171][ T344] usblp0: removed [ 27.784676][ T389] user requested TSC rate below hardware speed [ 27.872432][ T28] audit: type=1400 audit(1786952807.074:138): avc: denied { create } for pid=393 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.892907][ T28] audit: type=1400 audit(1786952807.074:139): avc: denied { write } for pid=393 comm="syz.4.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.913826][ T28] audit: type=1400 audit(1786952807.074:140): avc: denied { mount } for pid=395 comm="syz.4.28" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.941114][ T28] audit: type=1400 audit(1786952807.074:141): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 27.966958][ T307] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.056872][ T344] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.148089][ T307] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 28.158302][ T307] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 28.168645][ T307] usb 4-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 28.177874][ T307] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.185866][ T307] usb 4-1: Product: syz [ 28.190063][ T307] usb 4-1: Manufacturer: syz [ 28.194653][ T307] usb 4-1: SerialNumber: syz [ 28.246873][ T19] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.247914][ T344] usb 2-1: config index 0 descriptor too short (expected 32, got 18) [ 28.262568][ T344] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 28.276513][ T344] usb 2-1: New USB device found, idVendor=110a, idProduct=1250, bcdDevice= 0.00 [ 28.285591][ T344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 28.293611][ T344] usb 2-1: Product: syz [ 28.297787][ T344] usb 2-1: Manufacturer: syz [ 28.426850][ T19] usb 5-1: Using ep0 maxpacket: 32 [ 28.433166][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 28.442876][ T19] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 28.452637][ T19] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 28.462500][ T19] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 28.472890][ T19] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 28.487075][ T19] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 28.496116][ T19] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.504855][ T19] usb 5-1: config 0 descriptor?? [ 28.713735][ T19] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 29.404076][ T307] usb 4-1: 0:1 : does not exist [ 29.409249][ T307] usb 4-1: BAAD SPEAKER p_chmask mismatch [ 29.416260][ T307] snd-usb-audio: probe of 4-1:1.0 failed with error -22 [ 29.424874][ T307] usb 4-1: USB disconnect, device number 3 [ 29.433856][ T316] udevd[316]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.562915][ T344] usb 2-1: USB disconnect, device number 3 [ 29.968464][ T28] audit: type=1400 audit(1786952809.174:142): avc: denied { read } for pid=416 comm="syz.3.35" name="idVendor" dev="configfs" ino=17006 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 29.980228][ T417] UDC core: g1: couldn't find an available UDC or it's busy [ 29.991927][ T28] audit: type=1400 audit(1786952809.174:143): avc: denied { read } for pid=416 comm="syz.3.35" name="c.1" dev="configfs" ino=15752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 30.020263][ T28] audit: type=1400 audit(1786952809.174:144): avc: denied { open } for pid=416 comm="syz.3.35" path="/11/config/usb_gadget/g1/configs/c.1" dev="configfs" ino=15752 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 30.160098][ T363] scsi host1: error handler thread failed to spawn, error = -4 [ 30.207877][ T363] uas: probe of 1-1:1.0 failed with error -12 [ 30.221339][ T24] usb 1-1: USB disconnect, device number 2 [ 30.376550][ T428] FAULT_INJECTION: forcing a failure. [ 30.376550][ T428] name fail_futex, interval 1, probability 0, space 0, times 1 [ 30.389476][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 30.396620][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.406670][ T428] Call Trace: [ 30.409937][ T428] [ 30.412848][ T428] __dump_stack+0x21/0x24 [ 30.417172][ T428] dump_stack_lvl+0x110/0x170 [ 30.421831][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.426837][ T428] dump_stack+0x15/0x24 [ 30.430974][ T428] should_fail_ex+0x3bf/0x510 [ 30.435645][ T428] should_fail+0xb/0x10 [ 30.437003][ T307] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.439794][ T428] get_futex_key+0x143/0xb10 [ 30.451823][ T428] ? hrtimer_try_to_cancel+0x30f/0x330 [ 30.457281][ T428] ? __cfi_get_futex_key+0x10/0x10 [ 30.462402][ T428] ? hrtimer_cancel+0x2d/0x60 [ 30.467066][ T428] futex_wake+0x150/0x8e0 [ 30.471420][ T428] ? __cfi_futex_wait+0x10/0x10 [ 30.476253][ T428] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 30.481433][ T428] ? __cfi_futex_wake+0x10/0x10 [ 30.486290][ T428] ? handle_mm_fault+0x18d8/0x26b0 [ 30.491380][ T428] do_futex+0x2bf/0x430 [ 30.495517][ T428] ? __cfi_do_futex+0x10/0x10 [ 30.500183][ T428] __se_sys_futex+0x136/0x310 [ 30.504876][ T428] ? __x64_sys_futex+0x100/0x100 [ 30.509799][ T428] ? xfd_validate_state+0x70/0x150 [ 30.514906][ T428] ? __kasan_check_write+0x14/0x20 [ 30.520004][ T428] __x64_sys_futex+0xe5/0x100 [ 30.524663][ T428] x64_sys_call+0x7ec/0x9a0 [ 30.529150][ T428] do_syscall_64+0x4c/0xa0 [ 30.533566][ T428] ? clear_bhb_loop+0x30/0x80 [ 30.538220][ T428] ? clear_bhb_loop+0x30/0x80 [ 30.542877][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.548749][ T428] RIP: 0033:0x7fd27519e0d9 [ 30.553156][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.572758][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.581178][ T428] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fd27519e0d9 [ 30.589131][ T428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd275425fa8 [ 30.597094][ T428] RBP: 0000000000001ecc R08: 000000000000001a R09: 0000000000000000 [ 30.605058][ T428] R10: 00007fd275425fa0 R11: 0000000000000246 R12: 0000000000000000 [ 30.613037][ T428] R13: 00007fd275425fac R14: 00007fd275425fa8 R15: 00007fd275425fa0 [ 30.620998][ T428] [ 30.657907][ T307] usb 2-1: config index 0 descriptor too short (expected 32, got 21) [ 30.666132][ T307] usb 2-1: config 1 has an invalid descriptor of length 7, skipping remainder of the config [ 30.682110][ T428] FAULT_INJECTION: forcing a failure. [ 30.682110][ T428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 30.687676][ T307] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 30.695212][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 30.709495][ T307] usb 2-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 0.00 [ 30.714883][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.714897][ T428] Call Trace: [ 30.714902][ T428] [ 30.714908][ T428] __dump_stack+0x21/0x24 [ 30.714931][ T428] dump_stack_lvl+0x110/0x170 [ 30.714946][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.714960][ T428] ? do_futex+0x2bf/0x430 [ 30.714974][ T428] dump_stack+0x15/0x24 [ 30.724060][ T307] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.734233][ T428] should_fail_ex+0x3bf/0x510 [ 30.734260][ T428] should_fail+0xb/0x10 [ 30.734273][ T428] should_fail_futex+0x38/0x40 [ 30.737599][ T307] usb 2-1: Product: syz [ 30.740501][ T428] __se_sys_futex+0x1a0/0x310 [ 30.744810][ T307] usb 2-1: Manufacturer: syz [ 30.749458][ T428] ? __x64_sys_futex+0x100/0x100 [ 30.749475][ T428] ? up_read+0x56/0x1d0 [ 30.754488][ T307] usb 2-1: SerialNumber: syz [ 30.758788][ T428] ? do_user_addr_fault+0x9a5/0x1030 [ 30.758810][ T428] __x64_sys_futex+0xe5/0x100 [ 30.758824][ T428] x64_sys_call+0x7ec/0x9a0 [ 30.758841][ T428] do_syscall_64+0x4c/0xa0 [ 30.758856][ T428] ? clear_bhb_loop+0x30/0x80 [ 30.758869][ T428] ? clear_bhb_loop+0x30/0x80 [ 30.758882][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 30.758900][ T428] RIP: 0033:0x7fd27519e0d9 [ 30.758912][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 30.764846][ T307] ftdi_sio 2-1:1.0: FTDI USB Serial Device converter detected [ 30.771087][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 30.771107][ T428] RAX: ffffffffffffffda RBX: 00000000000077c9 RCX: 00007fd27519e0d9 [ 30.771119][ T428] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd27542609c [ 30.776047][ T307] usb 2-1: Detected SIO [ 30.779914][ T428] RBP: 0000000000000032 R08: 001395394b734a66 R09: 0000000000000000 [ 30.779926][ T428] R10: 00007fff54945ec0 R11: 0000000000000246 R12: 00007fff54945ee0 [ 30.779937][ T428] R13: 00007fd27542609c R14: 00000000000077fb R15: 00007fff54945ec0 [ 30.785096][ T307] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 30.788821][ T428] [ 30.797001][ T428] FAULT_INJECTION: forcing a failure. [ 30.797001][ T428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 30.837015][ T307] usb 3-1: USB disconnect, device number 2 [ 30.846724][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 30.966643][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 30.976687][ T428] Call Trace: [ 30.979952][ T428] [ 30.982870][ T428] __dump_stack+0x21/0x24 [ 30.987193][ T428] dump_stack_lvl+0x110/0x170 [ 30.991927][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 30.996956][ T428] dump_stack+0x15/0x24 [ 31.001105][ T428] should_fail_ex+0x3bf/0x510 [ 31.005769][ T428] should_fail+0xb/0x10 [ 31.009940][ T428] get_futex_key+0x143/0xb10 [ 31.014528][ T428] ? preempt_schedule_common+0xbe/0xf0 [ 31.019974][ T428] ? __cfi_get_futex_key+0x10/0x10 [ 31.025076][ T428] ? preempt_schedule+0xbc/0xd0 [ 31.029913][ T428] ? __cfi_preempt_schedule+0x10/0x10 [ 31.035274][ T428] ? ttwu_do_wakeup+0x468/0x490 [ 31.040113][ T428] futex_wait_setup+0xb8/0x260 [ 31.044864][ T428] ? __cfi_futex_wait_setup+0x10/0x10 [ 31.050218][ T428] ? hrtimer_init_sleeper+0x10c/0x370 [ 31.055579][ T428] ? ktime_add_safe+0x38/0x70 [ 31.060241][ T428] ? futex_setup_timer+0x89/0xc0 [ 31.065170][ T428] futex_wait+0x1ce/0x900 [ 31.069486][ T428] ? __cfi_futex_wait+0x10/0x10 [ 31.074321][ T428] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 31.079512][ T428] ? __cfi_futex_wake+0x10/0x10 [ 31.084352][ T428] do_futex+0x2e2/0x430 [ 31.088492][ T428] ? __cfi_do_futex+0x10/0x10 [ 31.093151][ T428] ? should_fail_ex+0x29d/0x510 [ 31.097989][ T428] ? kvm_clock_get_cycles+0x18/0x30 [ 31.103174][ T428] __se_sys_futex+0x136/0x310 [ 31.107836][ T428] ? __x64_sys_futex+0x100/0x100 [ 31.112761][ T428] ? xfd_validate_state+0x70/0x150 [ 31.117860][ T428] ? __kasan_check_write+0x14/0x20 [ 31.122959][ T428] __x64_sys_futex+0xe5/0x100 [ 31.128294][ T428] x64_sys_call+0x7ec/0x9a0 [ 31.132801][ T428] do_syscall_64+0x4c/0xa0 [ 31.137224][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.141900][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.146563][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.152458][ T428] RIP: 0033:0x7fd27519e0d9 [ 31.156858][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.176446][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 31.184845][ T428] RAX: ffffffffffffffda RBX: 000000000000783c RCX: 00007fd27519e0d9 [ 31.192804][ T428] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd27542609c [ 31.200757][ T428] RBP: 0000000000000032 R08: 001728c04b734a66 R09: 0000000000000000 [ 31.208710][ T428] R10: 00007fff54945ec0 R11: 0000000000000246 R12: 00007fff54945ee0 [ 31.216665][ T428] R13: 00007fd27542609c R14: 000000000000786e R15: 00007fff54945ec0 [ 31.224626][ T428] [ 31.237239][ T24] usb 5-1: USB disconnect, device number 3 [ 31.248356][ T24] usblp0: removed [ 31.252036][ T307] usblp1: removed [ 31.257331][ T428] FAULT_INJECTION: forcing a failure. [ 31.257331][ T428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 31.271192][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 31.278329][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.288380][ T428] Call Trace: [ 31.291646][ T428] [ 31.294655][ T428] __dump_stack+0x21/0x24 [ 31.298984][ T428] dump_stack_lvl+0x110/0x170 [ 31.303675][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.308703][ T428] ? _raw_spin_lock+0x94/0xf0 [ 31.313366][ T428] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.318574][ T428] dump_stack+0x15/0x24 [ 31.322713][ T428] should_fail_ex+0x3bf/0x510 [ 31.327405][ T428] should_fail+0xb/0x10 [ 31.332248][ T428] get_futex_key+0x143/0xb10 [ 31.336841][ T428] ? hrtimer_try_to_cancel+0x1ef/0x330 [ 31.342300][ T428] ? __cfi_get_futex_key+0x10/0x10 [ 31.347488][ T428] ? hrtimer_cancel+0x2d/0x60 [ 31.352173][ T428] futex_wake+0x150/0x8e0 [ 31.356499][ T428] ? __cfi_futex_wait+0x10/0x10 [ 31.361332][ T428] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 31.366598][ T428] ? __cfi_futex_wake+0x10/0x10 [ 31.371431][ T428] do_futex+0x2bf/0x430 [ 31.375571][ T428] ? __cfi_do_futex+0x10/0x10 [ 31.380229][ T428] ? should_fail_ex+0x29d/0x510 [ 31.385157][ T428] __se_sys_futex+0x136/0x310 [ 31.389846][ T428] ? __x64_sys_futex+0x100/0x100 [ 31.394767][ T428] ? xfd_validate_state+0x70/0x150 [ 31.399870][ T428] __x64_sys_futex+0xe5/0x100 [ 31.404534][ T428] x64_sys_call+0x7ec/0x9a0 [ 31.409016][ T428] do_syscall_64+0x4c/0xa0 [ 31.413410][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.418061][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.422716][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.428596][ T428] RIP: 0033:0x7fd27519e0d9 [ 31.433012][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.452603][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 31.461003][ T428] RAX: ffffffffffffffda RBX: 00000000000000f0 RCX: 00007fd27519e0d9 [ 31.468960][ T428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd275426098 [ 31.476930][ T428] RBP: 0000000000001ecc R08: 000000000000001a R09: 0000000000000000 [ 31.484915][ T428] R10: 00007fd275425fa0 R11: 0000000000000246 R12: 0000000000000001 [ 31.492874][ T428] R13: 00007fd27542609c R14: 00007fd275426098 R15: 00007fd275426090 [ 31.500859][ T428] [ 31.504919][ T294] syz-executor (294) used greatest stack depth: 22568 bytes left [ 31.555285][ T428] FAULT_INJECTION: forcing a failure. [ 31.555285][ T428] name fail_futex, interval 1, probability 0, space 0, times 0 [ 31.568314][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 31.575450][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.585513][ T428] Call Trace: [ 31.588794][ T428] [ 31.591720][ T428] __dump_stack+0x21/0x24 [ 31.596068][ T428] dump_stack_lvl+0x110/0x170 [ 31.600755][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.605795][ T428] dump_stack+0x15/0x24 [ 31.609957][ T428] should_fail_ex+0x3bf/0x510 [ 31.614645][ T428] should_fail+0xb/0x10 [ 31.618798][ T428] get_futex_key+0x143/0xb10 [ 31.623392][ T428] ? hrtimer_try_to_cancel+0x30f/0x330 [ 31.628857][ T428] ? __cfi_get_futex_key+0x10/0x10 [ 31.633979][ T428] ? hrtimer_cancel+0x2d/0x60 [ 31.638673][ T428] futex_wake+0x150/0x8e0 [ 31.643009][ T428] ? __cfi_futex_wait+0x10/0x10 [ 31.647864][ T428] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 31.653066][ T428] ? __cfi_futex_wake+0x10/0x10 [ 31.657921][ T428] ? __kasan_check_write+0x14/0x20 [ 31.663044][ T428] ? __cfi_kernel_clone+0x10/0x10 [ 31.668094][ T428] do_futex+0x2bf/0x430 [ 31.671253][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.672260][ T428] ? __cfi_do_futex+0x10/0x10 [ 31.672283][ T428] __se_sys_futex+0x136/0x310 [ 31.679467][ T307] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.683950][ T428] ? __x64_sys_futex+0x100/0x100 [ 31.683980][ T428] ? xfd_validate_state+0x70/0x150 [ 31.689874][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.696080][ T428] ? __kasan_check_write+0x14/0x20 [ 31.696104][ T428] __x64_sys_futex+0xe5/0x100 [ 31.702021][ T447] device bridge_slave_0 entered promiscuous mode [ 31.706111][ T428] x64_sys_call+0x7ec/0x9a0 [ 31.706137][ T428] do_syscall_64+0x4c/0xa0 [ 31.714271][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.718253][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.718273][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.718288][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 31.722992][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.729286][ T428] RIP: 0033:0x7fd27519e0d9 [ 31.729302][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.729314][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 31.729331][ T428] RAX: ffffffffffffffda RBX: 00000000000001e0 RCX: 00007fd27519e0d9 [ 31.729343][ T428] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fd275426188 [ 31.735170][ T447] device bridge_slave_1 entered promiscuous mode [ 31.738940][ T428] RBP: 0000000000001ecc R08: 0000000000000002 R09: 0000000000000000 [ 31.738954][ T428] R10: 00007fd275425fa0 R11: 0000000000000246 R12: 0000000000000002 [ 31.738962][ T428] R13: 00007fd27542618c R14: 00007fd275426188 R15: 00007fd275426180 [ 31.738975][ T428] [ 31.742213][ T428] FAULT_INJECTION: forcing a failure. [ 31.742213][ T428] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 31.796423][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.802148][ T428] CPU: 1 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 31.809595][ T447] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.817520][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 31.817530][ T428] Call Trace: [ 31.817535][ T428] [ 31.817540][ T428] __dump_stack+0x21/0x24 [ 31.823950][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.831813][ T428] dump_stack_lvl+0x110/0x170 [ 31.831833][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 31.839808][ T447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.847751][ T428] ? __kasan_check_write+0x14/0x20 [ 31.847774][ T428] dump_stack+0x15/0x24 [ 31.938780][ T428] should_fail_ex+0x3bf/0x510 [ 31.943450][ T428] should_fail+0xb/0x10 [ 31.947590][ T428] should_fail_usercopy+0x1a/0x20 [ 31.952600][ T428] _copy_from_user+0x1e/0xc0 [ 31.957267][ T428] get_timespec64+0x93/0x1b0 [ 31.961850][ T428] ? __cfi_get_timespec64+0x10/0x10 [ 31.967033][ T428] __se_sys_futex+0x1b8/0x310 [ 31.971694][ T428] ? __x64_sys_futex+0x100/0x100 [ 31.976615][ T428] ? xfd_validate_state+0x70/0x150 [ 31.981716][ T428] __x64_sys_futex+0xe5/0x100 [ 31.986394][ T428] x64_sys_call+0x7ec/0x9a0 [ 31.990905][ T428] do_syscall_64+0x4c/0xa0 [ 31.995314][ T428] ? clear_bhb_loop+0x30/0x80 [ 31.999975][ T428] ? clear_bhb_loop+0x30/0x80 [ 32.004637][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.010640][ T428] RIP: 0033:0x7fd27519e0d9 [ 32.015142][ T428] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 32.034742][ T428] RSP: 002b:00007fff54945db8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 32.043144][ T428] RAX: ffffffffffffffda RBX: 0000000000007bed RCX: 00007fd27519e0d9 [ 32.051110][ T428] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fd27542618c [ 32.059065][ T428] RBP: 0000000000000032 R08: 00155efccb734a66 R09: 0000000000000000 [ 32.067020][ T428] R10: 00007fff54945ec0 R11: 0000000000000246 R12: 00007fff54945ee0 [ 32.074976][ T428] R13: 00007fd27542618c R14: 0000000000007c1f R15: 00007fff54945ec0 [ 32.082938][ T428] [ 32.087710][ T428] FAULT_INJECTION: forcing a failure. [ 32.087710][ T428] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 32.100859][ T428] CPU: 0 PID: 428 Comm: syz.0.39 Not tainted syzkaller #0 [ 32.107981][ T428] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 32.118040][ T428] Call Trace: [ 32.121327][ T428] [ 32.124239][ T428] __dump_stack+0x21/0x24 [ 32.128555][ T428] dump_stack_lvl+0x110/0x170 [ 32.133312][ T428] ? __cfi_dump_stack_lvl+0x8/0x8 [ 32.138347][ T428] ? handle_mm_fault+0x18d8/0x26b0 [ 32.143464][ T428] dump_stack+0x15/0x24 [ 32.146887][ T24] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 32.147603][ T428] should_fail_ex+0x3bf/0x510 [ 32.159823][ T428] should_fail+0xb/0x10 [ 32.163974][ T428] should_fail_usercopy+0x1a/0x20 [ 32.168977][ T428] _copy_from_user+0x1e/0xc0 [ 32.173552][ T428] get_timespec64+0x93/0x1b0 [ 32.178119][ T428] ? __cfi_get_timespec64+0x10/0x10 [ 32.183296][ T428] __se_sys_clock_nanosleep+0x1c3/0x3b0 [ 32.188822][ T428] ? __x64_sys_clock_nanosleep+0xb0/0xb0 [ 32.194538][ T428] ? do_user_addr_fault+0x9a5/0x1030 [ 32.199805][ T428] __x64_sys_clock_nanosleep+0x9b/0xb0 [ 32.205265][ T428] x64_sys_call+0x186/0x9a0 [ 32.209755][ T428] do_syscall_64+0x4c/0xa0 [ 32.214154][ T428] ? clear_bhb_loop+0x30/0x80 [ 32.218804][ T428] ? clear_bhb_loop+0x30/0x80 [ 32.223460][ T428] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 32.229362][ T428] RIP: 0033:0x7fd27515e90e [ 32.233760][ T428] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 32.253351][ T428] RSP: 002b:00007fff54945d38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e6 [ 32.261774][ T428] RAX: ffffffffffffffda RBX: 000055557252e500 RCX: 00007fd27515e90e [ 32.269748][ T428] RDX: 00007fff54945d90 RSI: 0000000000000000 RDI: 0000000000000000 [ 32.277718][ T428] RBP: 00007fd275427da0 R08: 0000000000000000 R09: 0000000000000000 [ 32.285669][ T428] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000007daa [ 32.294406][ T428] R13: 00007fd27542618c R14: 0000000000007d78 R15: 00007fd275426180 [ 32.302379][ T428] [ 32.308324][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.312582][ T28] kauditd_printk_skb: 11 callbacks suppressed [ 32.312594][ T28] audit: type=1400 audit(1786952811.514:156): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 32.329648][ T19] usb 2-1: USB disconnect, device number 4 [ 32.342487][ T24] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 32.348534][ T19] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 32.357130][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.366561][ T19] ftdi_sio 2-1:1.0: device disconnected [ 32.380078][ T24] usb 5-1: config 1 interface 1 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 32.391004][ T307] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 32.394433][ T24] usb 5-1: New USB device found, idVendor=0e8d, idProduct=0003, bcdDevice= 0.00 [ 32.401472][ T307] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 32.410381][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 32.433534][ T24] usb 5-1: Product: syz [ 32.437756][ T24] usb 5-1: Manufacturer: syz [ 32.450508][ T307] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.00 [ 32.459767][ T307] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.467965][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 32.475279][ T307] usb 3-1: Product: syz [ 32.475539][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.479785][ T307] usb 3-1: Manufacturer: syz [ 32.488232][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 32.499586][ T307] usb 3-1: SerialNumber: syz [ 32.500774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.512686][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.519745][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.527599][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 32.536081][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.544370][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.551423][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.572955][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 32.581787][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.590054][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 32.599109][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.611619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 32.620055][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.632803][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.641389][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.649932][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.658661][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.669024][ T447] device veth0_vlan entered promiscuous mode [ 32.680176][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.688546][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.698919][ T447] device veth1_macvtap entered promiscuous mode [ 32.709078][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.717177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.725488][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.735233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.743822][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.846861][ T309] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.888775][ T8] device bridge_slave_1 left promiscuous mode [ 32.894994][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.902645][ T8] device bridge_slave_0 left promiscuous mode [ 32.909609][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.927232][ T8] device veth1_macvtap left promiscuous mode [ 32.933391][ T8] device veth0_vlan left promiscuous mode [ 33.031708][ T309] usb 1-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 0.00 [ 33.040858][ T309] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.049105][ T309] usb 1-1: Product: syz [ 33.053353][ T309] usb 1-1: Manufacturer: syz [ 33.058201][ T309] usb 1-1: SerialNumber: syz [ 33.096875][ T6] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 33.112441][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.119639][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.127257][ T475] device bridge_slave_0 entered promiscuous mode [ 33.134420][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.141686][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.149384][ T475] device bridge_slave_1 entered promiscuous mode [ 33.207534][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.214593][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.221261][ T307] usb 3-1: 0:1 : does not exist [ 33.221879][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.226940][ T307] usb 3-1: 0:2 : does not exist [ 33.233650][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.253726][ T307] usb 3-1: USB disconnect, device number 3 [ 33.265590][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.274919][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.282405][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.289067][ T6] usb 6-1: New USB device found, idVendor=0545, idProduct=8080, bcdDevice= 3.01 [ 33.298604][ T6] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 33.307556][ T6] usb 6-1: Product: syz [ 33.311879][ T6] usb 6-1: Manufacturer: syz [ 33.327426][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.336154][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.344605][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.351664][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.359799][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.368870][ T6] usb 1-1: USB disconnect, device number 3 [ 33.369068][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.383069][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.390110][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.397641][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 33.405691][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.418692][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 33.426777][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.443437][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.451806][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.462988][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.471132][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.479233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.486773][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.497665][ T475] device veth0_vlan entered promiscuous mode [ 33.508113][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.516326][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.525724][ T475] device veth1_macvtap entered promiscuous mode [ 33.537277][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.545035][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.553669][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.563334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.571779][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.750801][ T486] file system registered [ 33.756203][ T28] audit: type=1400 audit(1786952812.954:157): avc: denied { mount } for pid=485 comm="syz.2.60" name="/" dev="functionfs" ino=17280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 33.757109][ T486] read descriptors [ 33.790835][ T28] audit: type=1400 audit(1786952812.994:158): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 33.790905][ T289] ffs_data_put(): freeing [ 33.938231][ T8] device bridge_slave_1 left promiscuous mode [ 33.944401][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.952392][ T8] device bridge_slave_0 left promiscuous mode [ 33.958714][ T307] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 33.960855][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.974076][ T8] device veth1_macvtap left promiscuous mode [ 33.980150][ T8] device veth0_vlan left promiscuous mode [ 34.106929][ T6] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 34.137991][ T307] usb 7-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 0.00 [ 34.147155][ T307] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.156728][ T307] usb-storage 7-1:1.0: USB Mass Storage device detected [ 34.165241][ T307] scsi host1: usb-storage 7-1:1.0 [ 34.196879][ T344] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.260692][ T24] cdc_acm 5-1:1.0: ttyACM0: USB ACM device [ 34.282429][ T24] usb 5-1: USB disconnect, device number 4 [ 34.309185][ T6] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 34.318638][ T6] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.326644][ T6] usb 3-1: Product: syz [ 34.330847][ T6] usb 3-1: Manufacturer: syz [ 34.335433][ T6] usb 3-1: SerialNumber: syz [ 34.379391][ T344] usb 1-1: New USB device found, idVendor=04e2, idProduct=1410, bcdDevice= 0.00 [ 34.388624][ T344] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.396768][ T344] usb 1-1: Product: syz [ 34.400994][ T344] usb 1-1: Manufacturer: syz [ 34.405602][ T344] usb 1-1: SerialNumber: syz [ 34.613239][ T344] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 34.646913][ T24] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 34.826906][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 34.833054][ T24] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 34.841507][ T24] usb 5-1: config 0 has no interface number 0 [ 34.847627][ T24] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 34.856658][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.865285][ T24] usb 5-1: config 0 descriptor?? [ 35.080581][ T24] usb 5-1: USB disconnect, device number 5 [ 35.145855][ T358] usb 3-1: USB disconnect, device number 4 [ 35.568868][ T28] audit: type=1400 audit(1786952814.774:159): avc: denied { mount } for pid=501 comm="syz.0.67" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.602582][ T28] audit: type=1400 audit(1786952814.804:160): avc: denied { read write } for pid=516 comm="syz.4.70" name="control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.607188][ T517] device-mapper: table: 252:0: zero-length target [ 35.626272][ T28] audit: type=1400 audit(1786952814.804:161): avc: denied { open } for pid=516 comm="syz.4.70" path="/17/dev/mapper/control" dev="devtmpfs" ino=266 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.632695][ T517] device-mapper: ioctl: error adding target to table [ 35.663517][ T28] audit: type=1400 audit(1786952814.804:162): avc: denied { ioctl } for pid=516 comm="syz.4.70" path="/17/dev/mapper/control" dev="devtmpfs" ino=266 ioctlcmd=0xfd03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 35.706779][ T28] audit: type=1400 audit(1786952814.904:163): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 35.721254][ T309] nintendo 0005:057E:2007.0002: hidraw0: BLUETOOTH HID v80.00 Gamepad [syz0] on syz0 [ 35.831868][ T358] usb 6-1: USB disconnect, device number 2 [ 35.966885][ T24] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 36.148169][ T24] usb 3-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 1.00 [ 36.157450][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.246916][ T358] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 36.368232][ T24] usb 3-1: USB disconnect, device number 5 [ 36.429376][ T358] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 36.438526][ T358] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.446609][ T358] usb 6-1: Product: syz [ 36.450814][ T358] usb 6-1: Manufacturer: syz [ 36.455408][ T358] usb 6-1: SerialNumber: syz [ 36.461349][ T358] usb-storage 6-1:1.0: USB Mass Storage device detected [ 36.470290][ T358] usb-storage 6-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 36.478468][ T358] scsi host2: usb-storage 6-1:1.0 [ 36.695240][ T24] usb 7-1: USB disconnect, device number 2 [ 36.886913][ T459] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.077917][ T459] usb 3-1: New USB device found, idVendor=047e, idProduct=1001, bcdDevice= 1.00 [ 37.087076][ T459] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 37.247002][ T24] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 37.439689][ T24] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= 1.00 [ 37.448904][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.457044][ T24] usb 7-1: Product: syz [ 37.461213][ T24] usb 7-1: Manufacturer: syz [ 37.465804][ T24] usb 7-1: SerialNumber: syz [ 37.532884][ T358] usb 1-1: USB disconnect, device number 4 [ 37.826922][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 37.834884][ T309] nintendo 0005:057E:2007.0002: using factory cal for left stick [ 37.936908][ T358] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 38.119409][ T358] usb 1-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 38.128551][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.136540][ T358] usb 1-1: Product: syz [ 38.140760][ T358] usb 1-1: Manufacturer: syz [ 38.145391][ T358] usb 1-1: SerialNumber: syz [ 38.174743][ T6] usb 7-1: USB disconnect, device number 3 [ 38.703861][ T6] usb 3-1: USB disconnect, device number 6 [ 38.719407][ T563] 9pnet_virtio: no channels available for device syz [ 38.946875][ T358] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 39.127942][ T358] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 39.137939][ T358] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 39.148766][ T358] usb 7-1: New USB device found, idVendor=0404, idProduct=0202, bcdDevice= 0.00 [ 39.157933][ T358] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 39.166032][ T358] usb 7-1: Product: syz [ 39.166862][ T6] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.170238][ T358] usb 7-1: Manufacturer: syz [ 39.183250][ T559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 39.190852][ T559] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 39.356871][ T6] usb 3-1: Using ep0 maxpacket: 8 [ 39.363211][ T6] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 39.371440][ T6] usb 3-1: config 0 has no interface number 0 [ 39.377581][ T6] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 39.386623][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 39.395195][ T6] usb 3-1: config 0 descriptor?? [ 39.604151][ T6] usb 3-1: USB disconnect, device number 7 [ 39.630399][ T19] usb 6-1: USB disconnect, device number 3 [ 39.906906][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 39.914923][ T309] nintendo 0005:057E:2007.0002: using factory cal for right stick [ 40.066931][ T19] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 40.247973][ T19] usb 6-1: config index 0 descriptor too short (expected 46, got 44) [ 40.256158][ T19] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.267819][ T19] usb 6-1: New USB device found, idVendor=0bda, idProduct=8152, bcdDevice= 0.00 [ 40.276956][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.284948][ T19] usb 6-1: Product: syz [ 40.289164][ T19] usb 6-1: Manufacturer: syz [ 40.293823][ T19] usb 6-1: SerialNumber: syz [ 40.554654][ T358] usb 1-1: USB disconnect, device number 5 [ 41.056861][ T358] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 41.236881][ T358] usb 1-1: Using ep0 maxpacket: 32 [ 41.243193][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 41.252962][ T358] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 41.262638][ T358] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 41.272447][ T358] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 41.282574][ T358] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 41.295566][ T358] usb 1-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 41.304741][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 41.313425][ T358] usb 1-1: config 0 descriptor?? [ 41.501091][ T19] r8152-cfgselector 6-1: Unknown version 0x0000 [ 41.508447][ T19] r8152-cfgselector 6-1: Unknown version 0x0000 [ 41.515396][ T19] r8152-cfgselector 6-1: USB disconnect, device number 4 [ 41.520669][ T358] usblp 1-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 41.688673][ T459] usb 7-1: USB disconnect, device number 4 [ 41.752162][ T591] kvm [590]: vcpu0, guest rIP: 0x54060 Unhandled WRMSR(0xc1) = 0x1000 [ 41.822037][ T28] audit: type=1400 audit(1786952821.024:164): avc: denied { sys_module } for pid=603 comm="syz.6.103" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 41.822375][ T604] Invalid ELF header type: 0 != 1 [ 41.842951][ T28] audit: type=1400 audit(1786952821.024:165): avc: denied { module_load } for pid=603 comm="syz.6.103" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 41.986953][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 41.995506][ T309] nintendo 0005:057E:2007.0002: Failed to read left stick cal, using defaults; e=-110 [ 42.013885][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.021460][ T608] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.029223][ T608] device bridge_slave_0 entered promiscuous mode [ 42.036497][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.043802][ T608] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.051496][ T608] device bridge_slave_1 entered promiscuous mode [ 42.111840][ T608] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.118934][ T608] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.126226][ T608] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.133277][ T608] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.160824][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.169592][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.179432][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.200886][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.209378][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.216605][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.224552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.233545][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.240624][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.249681][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.257857][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.266878][ T459] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 42.280580][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.292081][ T608] device veth0_vlan entered promiscuous mode [ 42.299249][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.308466][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.316017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.332705][ T608] device veth1_macvtap entered promiscuous mode [ 42.340458][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.355449][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.369565][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.387235][ T28] audit: type=1400 audit(1786952821.594:166): avc: denied { unmount } for pid=608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 42.446872][ T459] usb 7-1: Using ep0 maxpacket: 8 [ 42.457735][ T459] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 42.465913][ T459] usb 7-1: config 0 has no interface number 0 [ 42.486897][ T459] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 42.495941][ T459] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.517553][ T8] device bridge_slave_1 left promiscuous mode [ 42.517564][ T459] usb 7-1: config 0 descriptor?? [ 42.523951][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.537246][ T8] device bridge_slave_0 left promiscuous mode [ 42.543554][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.552163][ T8] device veth1_macvtap left promiscuous mode [ 42.558259][ T8] device veth0_vlan left promiscuous mode [ 42.697791][ T24] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 42.723250][ T344] usb 1-1: USB disconnect, device number 6 [ 42.730499][ T344] usblp0: removed [ 42.749172][ T39] usb 7-1: USB disconnect, device number 5 [ 42.899353][ T24] usb 8-1: New USB device found, idVendor=17ef, idProduct=304f, bcdDevice= 0.00 [ 42.908523][ T24] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.916496][ T24] usb 8-1: Product: syz [ 42.920731][ T24] usb 8-1: Manufacturer: syz [ 42.925502][ T24] usb 8-1: SerialNumber: syz [ 43.132228][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 43.139305][ T24] r8152-cfgselector 8-1: Unknown version 0x0000 [ 43.216879][ T344] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 43.366906][ T344] usb 6-1: device descriptor read/64, error -71 [ 43.496900][ T459] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 43.556905][ T6] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 43.646915][ T344] usb 6-1: device descriptor read/64, error -71 [ 43.689860][ T459] usb 1-1: New USB device found, idVendor=0547, idProduct=2235, bcdDevice= 0.00 [ 43.699300][ T459] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 43.707337][ T6] usb 7-1: device descriptor read/64, error -71 [ 43.714128][ T459] usb 1-1: Product: syz [ 43.718322][ T459] usb 1-1: Manufacturer: syz [ 43.722911][ T459] usb 1-1: SerialNumber: syz [ 43.927018][ T344] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 43.976911][ T6] usb 7-1: device descriptor read/64, error -71 [ 44.066946][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 44.074980][ T309] nintendo 0005:057E:2007.0002: Failed to read right stick cal, using defaults; e=-110 [ 44.086899][ T344] usb 6-1: device descriptor read/64, error -71 [ 44.246993][ T6] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 44.356869][ T344] usb 6-1: device descriptor read/64, error -71 [ 44.406854][ T6] usb 7-1: device descriptor read/64, error -71 [ 44.476981][ T344] usb usb6-port1: attempt power cycle [ 44.686873][ T6] usb 7-1: device descriptor read/64, error -71 [ 44.806924][ T6] usb usb7-port1: attempt power cycle [ 44.886887][ T344] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 44.917844][ T344] usb 6-1: device descriptor read/8, error -71 [ 45.068012][ T344] usb 6-1: device descriptor read/8, error -71 [ 45.216868][ T6] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 45.247948][ T6] usb 7-1: device descriptor read/8, error -71 [ 45.336885][ T344] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 45.367967][ T344] usb 6-1: device descriptor read/8, error -71 [ 45.397871][ T6] usb 7-1: device descriptor read/8, error -71 [ 45.421002][ T39] r8152-cfgselector 8-1: USB disconnect, device number 2 [ 45.517950][ T344] usb 6-1: device descriptor read/8, error -71 [ 45.636936][ T344] usb usb6-port1: unable to enumerate USB device [ 45.667019][ T6] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 45.697988][ T6] usb 7-1: device descriptor read/8, error -71 [ 45.826900][ T39] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 45.847936][ T6] usb 7-1: device descriptor read/8, error -71 [ 45.938073][ T459] usb 1-1: USB disconnect, device number 7 [ 45.966970][ T6] usb usb7-port1: unable to enumerate USB device [ 46.008006][ T39] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 46.017946][ T39] usb 8-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 46.029070][ T39] usb 8-1: New USB device found, idVendor=0403, idProduct=6001, bcdDevice= 4.00 [ 46.038214][ T39] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.046216][ T39] usb 8-1: Product: syz [ 46.050442][ T39] usb 8-1: Manufacturer: syz [ 46.055046][ T39] usb 8-1: SerialNumber: syz [ 46.060331][ T641] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 46.068165][ T641] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 46.075726][ T39] ftdi_sio 8-1:1.0: FTDI USB Serial Device converter detected [ 46.083475][ T39] usb 8-1: Detected FT232B [ 46.146861][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 46.155036][ T309] nintendo 0005:057E:2007.0002: using factory cal for IMU [ 46.329401][ T357] logitech-hidpp-device 0003:046D:C082.0003: hidraw1: USB HID v0.00 Device [syz0] on syz0 [ 46.416900][ T19] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 46.598251][ T19] usb 6-1: unable to get BOS descriptor or descriptor too short [ 46.608177][ T19] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice= 1.00 [ 46.617390][ T19] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 46.625381][ T19] usb 6-1: Product: syz [ 46.629671][ T19] usb 6-1: Manufacturer: syz [ 46.634260][ T19] usb 6-1: SerialNumber: syz [ 46.856882][ T344] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 47.037847][ T344] usb 1-1: New USB device found, idVendor=076d, idProduct=0006, bcdDevice= 1.00 [ 47.046986][ T344] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 47.171184][ T671] using random self ethernet address [ 47.176514][ T671] using random host ethernet address [ 47.183581][ T671] UDC core: g1: couldn't find an available UDC or it's busy [ 47.342872][ T357] usb 6-1: USB disconnect, device number 9 [ 47.478356][ T39] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 47.486022][ T39] usb 8-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 47.495338][ T39] usb 8-1: USB disconnect, device number 3 [ 47.501813][ T39] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 47.511468][ T39] ftdi_sio 8-1:1.0: device disconnected [ 47.852699][ T675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.129'. [ 48.079761][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.088249][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.095345][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.102513][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.109602][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x7 [ 48.116644][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.123736][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.130813][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.137939][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.145024][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.152257][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.159390][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.166436][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.173512][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.180593][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.187700][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.194754][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.202129][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.209231][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.216401][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.223507][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.230701][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.236930][ T309] nintendo 0005:057E:2007.0002: failed reading SPI flash; ret=-110 [ 48.237775][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.245899][ T309] nintendo 0005:057E:2007.0002: Failed to read IMU cal, using defaults; ret=-110 [ 48.252720][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.261916][ T357] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 48.269989][ T344] cdc_acm 1-1:1.0: ttyACM0: USB ACM device [ 48.277279][ T309] nintendo 0005:057E:2007.0002: Unable to read IMU calibration data [ 48.283213][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.298459][ T344] usb 1-1: USB disconnect, device number 8 [ 48.304569][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.312569][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.320037][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.327155][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.334200][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.341283][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.348417][ T39] wiimote 0005:057E:0306.0004: unknown main item tag 0x0 [ 48.355933][ T39] wiimote 0005:057E:0306.0004: hidraw1: BLUETOOTH HID v0.00 Device [syz0] on syz0 [ 48.365556][ T39] wiimote 0005:057E:0306.0004: New device registered [ 48.374298][ T693] wiimote 0005:057E:0306.0004: Device removed [ 48.469122][ T357] usb 8-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice= 1.08 [ 48.478369][ T357] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 48.486348][ T357] usb 8-1: Product: syz [ 48.490753][ T357] usb 8-1: Manufacturer: syz [ 48.495355][ T357] usb 8-1: SerialNumber: syz [ 49.046896][ T357] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 49.116892][ T24] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 49.226872][ T357] usb 1-1: Invalid ep0 maxpacket: 64 [ 49.298033][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 49.307943][ T24] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 49.319076][ T24] usb 7-1: New USB device found, idVendor=6547, idProduct=0232, bcdDevice= 1.00 [ 49.328177][ T24] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.336348][ T24] usb 7-1: Product: syz [ 49.340563][ T24] usb 7-1: Manufacturer: syz [ 49.345157][ T24] usb 7-1: SerialNumber: syz [ 49.350578][ T709] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 49.357847][ T709] raw-gadget.2 gadget.6: fail, usb_ep_enable returned -22 [ 49.376910][ T357] usb 1-1: new low-speed USB device number 10 using dummy_hcd [ 49.426980][ T39] wiimote 0005:057E:0306.0004: detected device: Nintendo Wii Remote (Gen 1) [ 49.436913][ T39] input: Nintendo Wii Remote Accelerometer as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input6 [ 49.448981][ T28] audit: type=1400 audit(1786952828.654:167): avc: denied { read } for pid=88 comm="acpid" name="event3" dev="devtmpfs" ino=678 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.471487][ T28] audit: type=1400 audit(1786952828.654:168): avc: denied { open } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=678 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.472386][ T39] input: Nintendo Wii Remote IR as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input7 [ 49.495099][ T28] audit: type=1400 audit(1786952828.654:169): avc: denied { ioctl } for pid=88 comm="acpid" path="/dev/input/event3" dev="devtmpfs" ino=678 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 49.506139][ T39] input: Nintendo Wii Remote as /devices/virtual/misc/uhid/0005:057E:0306.0004/input/input5 [ 49.586906][ T357] usb 1-1: Invalid ep0 maxpacket: 64 [ 49.592334][ T357] usb usb1-port1: attempt power cycle [ 50.006940][ T357] usb 1-1: new low-speed USB device number 11 using dummy_hcd [ 50.037307][ T357] usb 1-1: Invalid ep0 maxpacket: 64 [ 50.186946][ T357] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 50.217304][ T357] usb 1-1: Invalid ep0 maxpacket: 64 [ 50.222744][ T357] usb usb1-port1: unable to enumerate USB device [ 50.386886][ T309] nintendo 0005:057E:2007.0002: Failed to set report mode; ret=-110 [ 50.394965][ T309] nintendo 0005:057E:2007.0002: Failed to initialize controller; ret=-110 [ 50.403984][ T309] nintendo 0005:057E:2007.0002: probe - fail = -110 [ 50.410665][ T309] nintendo: probe of 0005:057E:2007.0002 failed with error -110 [ 50.457668][ T716] fido_id[716]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.565292][ T722] fido_id[722]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.618422][ T723] fido_id[723]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 50.706949][ T358] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 50.888162][ T358] usb 5-1: New USB device found, idVendor=0506, idProduct=4601, bcdDevice= 1.00 [ 50.897417][ T358] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.001570][ T19] usb 8-1: USB disconnect, device number 4 [ 51.416912][ T19] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 51.598016][ T19] usb 8-1: New USB device found, idVendor=8086, idProduct=0b63, bcdDevice= 0.00 [ 51.607181][ T19] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 51.798659][ T28] audit: type=1400 audit(1786952831.004:170): avc: denied { read write } for pid=734 comm="syz.0.150" name="usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 51.822333][ T28] audit: type=1400 audit(1786952831.004:171): avc: denied { open } for pid=734 comm="syz.0.150" path="/dev/usbmon0" dev="devtmpfs" ino=159 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.266910][ T358] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 52.446885][ T358] usb 1-1: Using ep0 maxpacket: 8 [ 52.453273][ T358] usb 1-1: config 0 has an invalid interface number: 143 but max is 0 [ 52.461672][ T358] usb 1-1: config 0 has no interface number 0 [ 52.469310][ T358] usb 1-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 52.478416][ T358] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 52.486998][ T358] usb 1-1: config 0 descriptor?? [ 52.693791][ T28] audit: type=1400 audit(1786952831.894:172): avc: denied { ioctl } for pid=734 comm="syz.0.150" path="/dev/usbmon0" dev="devtmpfs" ino=159 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 52.694098][ T358] usb 1-1: USB disconnect, device number 13 [ 53.280905][ T344] usb 7-1: USB disconnect, device number 10 [ 53.443370][ T60] usb 5-1: USB disconnect, device number 6 [ 53.463300][ T28] audit: type=1400 audit(1786952832.664:173): avc: denied { name_bind } for pid=756 comm="syz.4.155" src=12345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=tcp_socket permissive=1 [ 53.484880][ T28] audit: type=1400 audit(1786952832.664:174): avc: denied { node_bind } for pid=756 comm="syz.4.155" saddr=127.0.0.1 src=12345 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 53.546924][ T358] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 53.686919][ T344] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 53.728065][ T358] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 53.738261][ T358] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 53.752944][ T358] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 1.00 [ 53.762134][ T358] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.771638][ T358] usb 1-1: Product: syz [ 53.775808][ T358] usb 1-1: Manufacturer: syz [ 53.780466][ T358] usb 1-1: SerialNumber: syz [ 53.786340][ T358] usb-storage 1-1:1.0: USB Mass Storage device detected [ 53.794071][ T358] usb-storage 1-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 53.868057][ T344] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 53.880721][ T344] usb 7-1: New USB device found, idVendor=05c6, idProduct=9008, bcdDevice= 1.00 [ 53.889802][ T344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.897850][ T344] usb 7-1: Product: syz [ 53.901998][ T344] usb 7-1: Manufacturer: syz [ 53.906585][ T344] usb 7-1: SerialNumber: syz [ 53.912732][ T344] hub 7-1:1.0: USB hub found [ 54.057260][ T309] usb 8-1: USB disconnect, device number 5 [ 54.115624][ T344] hub 7-1:1.0: 4 ports detected [ 54.364281][ T344] hub 7-1:1.0: hub_hub_status failed (err = -71) [ 54.371926][ T344] hub 7-1:1.0: config failed, can't get hub status (err -71) [ 54.407418][ T344] usb 7-1: USB disconnect, device number 11 [ 54.606901][ T60] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 54.716905][ T753] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 54.786907][ T60] usb 8-1: Using ep0 maxpacket: 8 [ 54.793135][ T60] usb 8-1: config index 0 descriptor too short (expected 36, got 18) [ 54.801448][ T60] usb 8-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 54.814479][ T60] usb 8-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 0.00 [ 54.823554][ T60] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.832671][ T60] usb 8-1: config 0 descriptor?? [ 54.897866][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 54.907657][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 54.917622][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 54.927394][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 54.937310][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 54.947259][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 64 [ 54.957099][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 64 [ 54.966925][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x84 has invalid maxpacket 64 [ 54.976719][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 64 [ 54.986496][ T753] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 64 [ 54.996360][ T753] usb 5-1: New USB device found, idVendor=0710, idProduct=8001, bcdDevice= 1.00 [ 55.005427][ T753] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 55.014399][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.021630][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.029239][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.036488][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.041118][ T19] usb 8-1: USB disconnect, device number 6 [ 55.043848][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.056629][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.063818][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.071101][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.078285][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.085418][ T788] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 55.826865][ T19] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 56.016886][ T19] usb 8-1: Using ep0 maxpacket: 32 [ 56.023488][ T19] usb 8-1: unable to get BOS descriptor or descriptor too short [ 56.033913][ T19] usb 8-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40 [ 56.043123][ T19] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 56.051477][ T19] usb 8-1: Product: syz [ 56.055625][ T19] usb 8-1: Manufacturer: syz [ 56.060230][ T19] usb 8-1: SerialNumber: syz [ 56.116876][ T309] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 56.124510][ T357] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 56.268369][ T791] ================================================================================ [ 56.277933][ T357] usb 7-1: device descriptor read/64, error -71 [ 56.279527][ T60] usb 1-1: USB disconnect, device number 14 [ 56.284264][ T791] UBSAN: array-index-out-of-bounds in drivers/usb/gadget/function/f_uac2.c:2082:1 [ 56.300334][ T6] usb 5-1: USB disconnect, device number 7 [ 56.307853][ T791] index 10 is out of range for type 'int[10]' [ 56.315900][ T791] CPU: 0 PID: 791 Comm: syz.7.167 Not tainted syzkaller #0 [ 56.323224][ T791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.333283][ T791] Call Trace: [ 56.336563][ T791] [ 56.339498][ T791] __dump_stack+0x21/0x24 [ 56.343857][ T791] dump_stack_lvl+0x110/0x170 [ 56.348523][ T791] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.353542][ T791] dump_stack+0x15/0x24 [ 56.357698][ T791] ubsan_epilogue+0xe/0x40 [ 56.362111][ T791] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 56.367833][ T791] f_uac2_opts_c_srate_store+0x1d7/0x2a0 [ 56.373482][ T791] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 56.379642][ T791] ? down_read+0xa6/0xf0 [ 56.383875][ T791] ? __cfi_down_read+0x10/0x10 [ 56.388633][ T791] ? avc_policy_seqno+0x1b/0x70 [ 56.393473][ T791] ? selinux_file_permission+0x2a5/0x510 [ 56.399109][ T791] configfs_write_iter+0x323/0x410 [ 56.404231][ T791] ? __cfi_f_uac2_opts_c_srate_store+0x10/0x10 [ 56.410386][ T791] vfs_write+0x5ef/0xd00 [ 56.414627][ T791] ? __cfi_vfs_write+0x10/0x10 [ 56.419377][ T791] ? __cfi_mutex_lock+0x10/0x10 [ 56.424227][ T791] ? __fdget_pos+0x2cd/0x380 [ 56.428804][ T791] ? ksys_write+0x70/0x260 [ 56.433211][ T791] ksys_write+0x14a/0x260 [ 56.437524][ T791] ? __cfi_ksys_write+0x10/0x10 [ 56.442357][ T791] ? fpregs_restore_userregs+0x128/0x260 [ 56.447979][ T791] __x64_sys_write+0x7b/0x90 [ 56.452558][ T791] x64_sys_call+0x27b/0x9a0 [ 56.457056][ T791] do_syscall_64+0x4c/0xa0 [ 56.461473][ T791] ? clear_bhb_loop+0x30/0x80 [ 56.466142][ T791] ? clear_bhb_loop+0x30/0x80 [ 56.470807][ T791] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.476690][ T791] RIP: 0033:0x7f92c719e0d9 [ 56.481103][ T791] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.500792][ T791] RSP: 002b:00007f92c7fd9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.509204][ T791] RAX: ffffffffffffffda RBX: 00007f92c7425fa0 RCX: 00007f92c719e0d9 [ 56.517160][ T791] RDX: 0000000000000053 RSI: 0000200000000440 RDI: 0000000000000004 [ 56.525149][ T791] RBP: 00007f92c7235024 R08: 0000000000000000 R09: 0000000000000000 [ 56.533132][ T791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.541085][ T791] R13: 00007f92c7426038 R14: 00007f92c7425fa0 R15: 00007ffc83539f38 [ 56.549047][ T791] [ 56.555818][ T791] ================================================================================ [ 56.556034][ T309] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.565588][ T805] ================================================================================ [ 56.576610][ T309] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 56.586637][ T805] UBSAN: array-index-out-of-bounds in drivers/usb/gadget/function/f_uac2.c:2078:1 [ 56.594964][ T309] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.610339][ T805] index 10 is out of range for type 'int[10]' [ 56.612781][ T309] usb 6-1: config 0 descriptor?? [ 56.622948][ T805] CPU: 1 PID: 805 Comm: syz.7.167 Not tainted syzkaller #0 [ 56.630154][ T805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.640202][ T805] Call Trace: [ 56.643474][ T805] [ 56.646837][ T805] __dump_stack+0x21/0x24 [ 56.651349][ T805] dump_stack_lvl+0x110/0x170 [ 56.656087][ T805] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.661215][ T805] dump_stack+0x15/0x24 [ 56.665384][ T805] ubsan_epilogue+0xe/0x40 [ 56.669809][ T805] __ubsan_handle_out_of_bounds+0xdf/0xf0 [ 56.675525][ T805] f_uac2_opts_p_srate_store+0x1d7/0x2a0 [ 56.681168][ T805] ? __cfi_f_uac2_opts_p_srate_store+0x10/0x10 [ 56.687453][ T805] ? down_read+0xa6/0xf0 [ 56.691699][ T805] ? __cfi_down_read+0x10/0x10 [ 56.696545][ T805] ? avc_policy_seqno+0x1b/0x70 [ 56.701391][ T805] ? selinux_file_permission+0x2a5/0x510 [ 56.707016][ T805] configfs_write_iter+0x323/0x410 [ 56.712144][ T805] ? __cfi_f_uac2_opts_p_srate_store+0x10/0x10 [ 56.716863][ T357] usb 7-1: device descriptor read/64, error -71 [ 56.718302][ T805] vfs_write+0x5ef/0xd00 [ 56.718325][ T805] ? __cfi_vfs_write+0x10/0x10 [ 56.733603][ T805] ? __cfi_mutex_lock+0x10/0x10 [ 56.739069][ T805] ? __fdget_pos+0x2cd/0x380 [ 56.743659][ T805] ? ksys_write+0x70/0x260 [ 56.748087][ T805] ksys_write+0x14a/0x260 [ 56.752406][ T805] ? __cfi_ksys_write+0x10/0x10 [ 56.757249][ T805] ? fpregs_restore_userregs+0x128/0x260 [ 56.763046][ T805] __x64_sys_write+0x7b/0x90 [ 56.767659][ T805] x64_sys_call+0x27b/0x9a0 [ 56.772171][ T805] do_syscall_64+0x4c/0xa0 [ 56.776593][ T805] ? clear_bhb_loop+0x30/0x80 [ 56.781267][ T805] ? clear_bhb_loop+0x30/0x80 [ 56.785935][ T805] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.791833][ T805] RIP: 0033:0x7f92c719e0d9 [ 56.796242][ T805] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.815855][ T805] RSP: 002b:00007f92c7fb8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.824268][ T805] RAX: ffffffffffffffda RBX: 00007f92c7426090 RCX: 00007f92c719e0d9 [ 56.832332][ T805] RDX: 0000000000000053 RSI: 0000200000000580 RDI: 0000000000000004 [ 56.840296][ T805] RBP: 00007f92c7235024 R08: 0000000000000000 R09: 0000000000000000 [ 56.848263][ T805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.856227][ T805] R13: 00007f92c7426128 R14: 00007f92c7426090 R15: 00007ffc83539f38 [ 56.864287][ T805] [ 56.868349][ T805] ================================================================================ [ 56.886780][ T806] usb0: HOST MAC 2e:8d:72:78:73:fb [ 56.890041][ T28] audit: type=1400 audit(1786952836.094:175): avc: denied { read } for pid=142 comm="dhcpcd" name="n16" dev="tmpfs" ino=1273 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.892414][ T806] usb0: MAC 22:86:7a:e7:5e:8a [ 56.913707][ T28] audit: type=1400 audit(1786952836.094:176): avc: denied { open } for pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1273 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.919093][ T806] configfs-gadget.g1 gadget.1: Error: incorrect playback sample size [ 56.948573][ T28] audit: type=1400 audit(1786952836.094:177): avc: denied { getattr } for pid=142 comm="dhcpcd" path="/run/udev/data/n16" dev="tmpfs" ino=1273 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 56.952029][ T806] udc dummy_udc.1: failed to start g1: -22 [ 56.986261][ T806] configfs-gadget.g1: probe of gadget.1 failed with error -22 [ 56.996696][ T357] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 57.008969][ T806] UDC core: g1: couldn't find an available UDC or it's busy [ 57.028542][ T309] savu 0003:1E7D:2D5A.0005: hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.5-1/input0 [ 57.041045][ T19] usb 8-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 57.057118][ T19] usb 8-1: unit 37 not found! [ 57.064246][ T19] usb 8-1: unit 0 not found! [ 57.074255][ T19] usb 8-1: USB disconnect, device number 7 [ 57.078773][ T28] audit: type=1400 audit(1786952836.274:178): avc: denied { create } for pid=809 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.105460][ T28] audit: type=1400 audit(1786952836.274:179): avc: denied { write } for pid=809 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf.usb0.link" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.133665][ T28] audit: type=1400 audit(1786952836.274:180): avc: denied { append } for pid=809 comm="dhcpcd-run-hook" name="resolv.conf.usb0.link" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.157878][ T357] usb 7-1: device descriptor read/64, error -71 [ 57.157998][ T28] audit: type=1400 audit(1786952836.304:181): avc: denied { unlink } for pid=821 comm="rm" name="resolv.conf.usb0.link" dev="tmpfs" ino=1282 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 57.188567][ T60] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 57.307321][ T718] udevd[718]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 57.382059][ T60] usb 1-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 57.391223][ T60] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 57.399279][ T60] usb 1-1: Product: syz [ 57.403485][ T60] usb 1-1: Manufacturer: syz [ 57.408112][ T60] usb 1-1: SerialNumber: syz [ 57.426899][ T357] usb 7-1: device descriptor read/64, error -71 [ 57.536999][ T28] audit: type=1400 audit(1786952836.744:182): avc: denied { unmount } for pid=608 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 57.547135][ T357] usb usb7-port1: attempt power cycle [ 57.966919][ T357] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 57.997894][ T357] usb 7-1: device descriptor read/8, error -71 [ 58.148001][ T357] usb 7-1: device descriptor read/8, error -71 [ 58.232708][ T60] usb 6-1: USB disconnect, device number 10 [ 58.426882][ T357] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 58.457884][ T357] usb 7-1: device descriptor read/8, error -71 [ 58.608008][ T357] usb 7-1: device descriptor read/8, error -71 [ 58.727007][ T357] usb usb7-port1: unable to enumerate USB device [ 60.334790][ T60] usb 1-1: USB disconnect, device number 15