last executing test programs: 43.369437222s ago: executing program 1 (id=2): r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl(r1, 0xae41, 0x0) 43.299418563s ago: executing program 2 (id=3): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c032090400000102020100052400100105240100010424020605240600010705810308001009040100020a0000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 43.262137904s ago: executing program 1 (id=6): r0 = socket$nl_route(0x10, 0x3, 0x0) write(r0, &(0x7f0000000000)="50000000100005060100000000000000000000000000000001000000010000000c00030076786c616e300000240012000a00010076786c616e00000014000200080001002a0000000600050012b50000", 0x50) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r1, &(0x7f0000000100)="0800000000002a0011223344", 0xc, 0x0, &(0x7f0000000200)={0x2, 0x12b5, @local}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff00000000000008004500002c000000004011fa95ac141402ac14140112b512b5001800000800000000002a001122334455667788"], 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000400)=ANY=[@ANYBLOB="ffffffffffff000000000000080045000040000000004001fa91ac141402ac1414010303a5820000000045000024000000004011fa9dac141401ac14140212b512b5001000000800000000002a00"], 0x0) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) 43.183261306s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/midi2.usb0\x00', 0x1ff) symlink(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/midi2.usb0\x00', &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1/midi2.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000280)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000002c0)='\n', 0x1) write(r0, &(0x7f0000000300)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000340)='\n', 0x1) write(r0, &(0x7f0000000380)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000003c0)='\n', 0x1) write(r0, &(0x7f0000000400)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000440)='\n', 0x1) write(r0, &(0x7f0000000480)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000004c0)='\n', 0x1) write(r0, &(0x7f0000000500)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000540)='\n', 0x1) write(r0, &(0x7f0000000580)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000005c0)='\n', 0x1) write(r0, &(0x7f0000000600)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000640)='\n', 0x1) write(r0, &(0x7f0000000680)='dummy_udc.0\n', 0xc) write(r0, &(0x7f00000006c0)='\n', 0x1) write(r0, &(0x7f0000000700)='dummy_udc.0\n', 0xc) write(r0, &(0x7f0000000740)='\n', 0x1) 43.144566037s ago: executing program 4 (id=5): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040030431c60001000000010902120001010080320904000000ff000000"], 0x0) 43.076162559s ago: executing program 1 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='\n\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0x1d6b', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='0x0104', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1/bmAttributes\x00', 0x1, 0x0) write(r3, &(0x7f0000000440)='0x80', 0x4) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/MaxPower\x00', 0x1, 0x0) write(r4, &(0x7f00000004c0)='500', 0x3) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000540)='dummy_udc.0', 0xb) close(r5) nanosleep(&(0x7f0000000200)={0x0, 0x1dcd6500}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000580)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f00000005c0)='./sys\x00', &(0x7f0000000600)='sysfs\x00', 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./sys/bus/usb/devices/5-1\x00', 0x0, 0x0) close(r6) 42.980515262s ago: executing program 3 (id=10): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/usb/devices/5-1/power/autosuspend_delay_ms\x00', 0x2, 0x0) write(r1, &(0x7f0000000380)='0\n', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r2, &(0x7f0000000400)='auto\n', 0x5) close(r2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/5-1/power/control\x00', 0x2, 0x0) write(r3, &(0x7f0000000480)='on\n', 0x3) close(r3) 42.915791273s ago: executing program 0 (id=12): mkdir(&(0x7f0000000040)='./config\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='none\x00', &(0x7f00000000c0)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000140)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000180)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f00000001c0)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) symlink(&(0x7f0000000200)='./config/usb_gadget/g1/functions/rndis.usb0\x00', &(0x7f0000000240)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/os_desc/use\x00', 0x1, 0x0) write(r0, &(0x7f00000002c0)='1\n\x00', 0x3) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/os_desc/b_vendor_code\x00', 0x1, 0x0) write(r1, &(0x7f0000000340)='0xcd\n\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/os_desc/qw_sign\x00', 0x1, 0x0) write(r2, &(0x7f00000003c0)='MSFT100\n\x00', 0x9) close(r2) symlink(&(0x7f0000000400)='./config/usb_gadget/g1/configs/c.1\x00', &(0x7f0000000440)='./config/usb_gadget/g1/os_desc/c.1\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f00000004c0)='dummy_udc.0\n', 0xc) close(r3) nanosleep(&(0x7f0000000500)={0x0, 0x5f5e100}, 0x0) r4 = syz_open_dev$usbfs(&(0x7f0000000540), 0xb, 0x2) close(r4) 42.812374716s ago: executing program 0 (id=13): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='free', 0x4) 42.540050722s ago: executing program 1 (id=14): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) mkdir(&(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000600)='0x1d6b\x00', 0x6) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000800)='0x0104\x00', 0x6) close(r1) mkdir(&(0x7f0000000900)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000a00)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlink(&(0x7f0000000d00)='./config/usb_gadget/g1/functions/acm.usb0\x00', &(0x7f0000000e00)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r2, &(0x7f0000001400)='dummy_udc.0\x00', 0xb) close(r2) 42.285446489s ago: executing program 0 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='stusb1600 0x48\x00', 0xf) 42.23143639s ago: executing program 0 (id=16): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:00.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='xhci_hcd\x00', 0x8) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='0000:00:0a.0\x00', 0xd) close(r1) 42.23130096s ago: executing program 0 (id=17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@wrmsr={0x65, 0x0, {0x80b}}]}) ioctl$KVM_GET_LAPIC(r3, 0x8040ae8e, &(0x7f0000000300)) ioctl$KVM_SET_LAPIC(r3, 0x4040ae8f, &(0x7f0000000300)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 42.199280661s ago: executing program 0 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400010102030109022000010100c0320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='0525 a4a0\x00', 0xa) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000200)="1100000001000000000400"/28}) 41.722019773s ago: executing program 4 (id=19): syz_usb_connect(0x0, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc72, 0xc, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'vcan0\x00', 0x1}) bind$can_raw(r0, &(0x7f0000000200), 0x10) sendmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, '12345678'}, 0x10}}, 0x0) 41.196535016s ago: executing program 3 (id=20): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040bf0a70330000010200010902200001010080320904000002000000000705010240000007058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='ccgx-ucsi 0x08\n\x00', 0xf) 41.055711969s ago: executing program 1 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='platform\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='mem\n\x00', 0x4) close(r1) 19.975478654s ago: executing program 32 (id=18): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000402505a0a400010102030109022000010100c0320904000002ff0000000705010200020007058202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/usb/drivers/usbtest/new_id\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='0525 a4a0\x00', 0xa) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000000), 0x16, 0x2) ioctl$USBDEVFS_IOCTL(r1, 0xc0105512, &(0x7f0000000100)=@usbdevfs_driver={0x0, 0xc01c5564, &(0x7f0000000200)="1100000001000000000400"/28}) 19.952705604s ago: executing program 33 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='platform\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/state\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='mem\n\x00', 0x4) close(r1) 19.935507344s ago: executing program 34 (id=3): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c032090400000102020100052400100105240100010424020605240600010705810308001009040100020a0000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 19.872157996s ago: executing program 35 (id=20): syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040bf0a70330000010200010902200001010080320904000002000000000705010240000007058202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000140)=@filename='sysfs\x00', &(0x7f0000000180)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/i2c/devices/i2c-2/new_device\x00', 0x1, 0x0) write(r0, &(0x7f0000000240)='ccgx-ucsi 0x08\n\x00', 0xf) 19.846566407s ago: executing program 36 (id=19): syz_usb_connect(0x0, 0x40, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0xc72, 0xc, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2e, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x4, 0xff, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x1, 0x2, 0x40}}, {{0x9, 0x5, 0x81, 0x2, 0x40}}, {{0x9, 0x5, 0x2, 0x2, 0x40}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000100)={'vcan0\x00', 0x1}) bind$can_raw(r0, &(0x7f0000000200), 0x10) sendmsg$can_raw(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@can={{0x1}, 0x8, 0x0, 0x0, 0x0, '12345678'}, 0x10}}, 0x0) 18.645293427s ago: executing program 5 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='core\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000700)='mem\n', 0x4) (async) 18.483911201s ago: executing program 9 (id=27): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='.', 0x1) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./af9005.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000700)='dummy', 0x5) close(r1) 18.423532442s ago: executing program 9 (id=28): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000180)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x21, 0x5, 0x57e, 0x306, 0x0, 0x0, "05010905a10185200901150025ff75089510810285300901150025ff750895028102c0"}}, 0x139) 4.880164859s ago: executing program 9 (id=29): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r0, &(0x7f0000000240)='\x00', 0x1) 4.84541045s ago: executing program 9 (id=32): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) write(r1, &(0x7f0000000500)='0\n\x00', 0x2) 4.800203551s ago: executing program 5 (id=35): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='nodev\x00', &(0x7f0000000080)='./tracing\x00', &(0x7f00000000c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./tracing/events/enable\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='1\x00', 0x2) 4.680259544s ago: executing program 8 (id=38): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/devices/0000:00:03.0/resource\x00', 0x0, 0x0) read(r0, &(0x7f0000000500), 0x64) syz_open_dev$char_usb(0xc, 0xb4, 0x1) 1.822525905s ago: executing program 5 (id=39): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0xaea2, 0x1e8480) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="31c90f33c3", 0x5}], 0x1, 0x43, 0x0, 0x0) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.822302825s ago: executing program 6 (id=40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r2, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x0, 0x0, 0x0, 0xa, 0x756e6547, 0x6c65746e, 0x49656e69}, {0xa, 0x0, 0x0, 0x7300402, 0x0, 0x0, 0x603}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0xc1, 0x0, 0x1234}]}) 1.821754125s ago: executing program 7 (id=41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000000c0)=[@wrmsr={0x65, 0x20, {0x40000082, 0x1}}], 0x20}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r3, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r3, 0x4068aea3, &(0x7f0000000180)) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000100)={0x2, 0x0, [{0x40000001, 0x0, 0x0, 0x31237648}, {0x40000003, 0x0, 0x0, 0x40}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.821422025s ago: executing program 8 (id=42): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='auto\x00', 0x5) close(r5) write(0xffffffffffffffff, &(0x7f0000000780)='0\x00', 0x2) 1.821311495s ago: executing program 9 (id=43): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='dwc3-pci\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='0000:00:02.0\x00', 0xd) close(r1) 1.801785966s ago: executing program 9 (id=44): r0 = syz_usb_connect(0x0, 0x50, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405205105500000102000109023e0001010080320904000004080662000705010200020004240100070582020002000424020007058302000200042404000705040200020004240300"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x2}, 0x0) 1.780719266s ago: executing program 8 (id=45): unlink(&(0x7f0000000200)='./testdev\x00') mknod(&(0x7f0000000200)='./testdev\x00', 0x81b6, 0xfa00) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./testdev\x00', 0x2, 0x0) ioctl(r0, 0x541e, &(0x7f0000000500)="000000000000000000000000000000001000"/72) 1.715949778s ago: executing program 8 (id=46): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./security\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./security/apparmor/.load\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./security/apparmor/.replace\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)="04080076657273696f6e00020500000004080070726f66696c650007050400666f6f00040600666c616773000702000000000200000000020000000008020000000002000000000200000000020000000008", 0x52) close(r1) 1.715429518s ago: executing program 6 (id=47): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./my_sys\x00', &(0x7f0000000700)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc) 1.661254539s ago: executing program 8 (id=48): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x8}, @nested_create_vm={0x12d, 0x8}, @nested_load_code={0x12e, 0x18, {0x0, "0fc730f4"}}, @nested_vmlaunch={0x12f, 0x8}, @nested_intel_vmwrite_mask={0x154, 0x28, {0x0, @control32=0x4002, 0x0, 0x80}}, @nested_vmresume={0x130, 0x8}]}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) r5 = mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) syz_kvm_assert_syzos_uexit$x86(r3, r5, 0xe2e20001) ioctl$KVM_RUN(r3, 0x0, 0x0) 1.660844839s ago: executing program 6 (id=49): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='ehci-platform\x00', 0xe) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='pcspkr\x00', 0x7) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/platform/devices/serial8250/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='ehci-platform\x00', 0xe) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/platform/drivers/ehci-platform/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='serial8250\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/devices/0000:00:01.0/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='ehci-pci\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0000:00:01.0\x00', 0xd) close(r5) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 1.655383839s ago: executing program 7 (id=50): mkdir(&(0x7f0000000040)='./sysfs_dir\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sysfs_dir\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./sysfs_dir/class/spi_master\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000000100), 0x400) 1.655199139s ago: executing program 8 (id=51): r0 = syz_usb_connect$cdc_ecm(0x0, 0x4d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x0, 0x0, 0xffffffffffff8001, 0x1, [{{0x9, 0x2, 0x3b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x12, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200}}, {{0x9, 0x5, 0x3, 0x2, 0x200}}}}}]}}]}}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write(r0, 0x82, 0x5, &(0x7f0000002340)='hello') openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/fscaps', 0x0, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x0, 0x0) 1.61846784s ago: executing program 7 (id=52): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/xhci_hcd/0000:00:02.0/dbc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/pci/drivers/xhci_hcd/0000:00:03.0/dbc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/xhci_hcd/0000:00:04.0/dbc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/pci/drivers/xhci_hcd/0000:00:05.0/dbc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys/bus/pci/drivers/xhci_hcd/0000:00:1f.0/dbc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/usb_host/usb_host1/device/dbc\x00', 0x0, 0x0) 1.547886052s ago: executing program 7 (id=53): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ_cpu(r2, 0x0, 0x100000) r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0x0, 0x0) 1.547646022s ago: executing program 7 (id=54): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/module/firmware_class/parameters/path\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='.\x00', 0x2) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./emi26\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./emi26/loader.fw\x00', 0x41, 0x1ff) write(r1, &(0x7f0000000600)='\x00\x00\x00\x00\x00\x00', 0x6) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./emi26/bitstream.fw\x00', 0x41, 0x1ff) write(r2, &(0x7f0000000800)='\x00\x00\x00\x00\x00\x00', 0x6) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./emi26/firmware.fw\x00', 0x41, 0x1ff) write(r3, &(0x7f0000000a00)='\x00\x00\x00\x00\x00\x00', 0x6) close(r3) syz_usb_connect(0x0, 0x24, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010002000000406a0800010100000000010902120001010080320904000000ff000000"], 0x0) nanosleep(&(0x7f0000000c00)={0x0, 0x5f5e100}, 0x0) symlinkat(&(0x7f0000001100)='./sys/bus/usb/drivers/emi26 - firmware loader\x00', 0xffffffffffffff9c, &(0x7f0000001200)='./driver_link\x00') r4 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./driver_link/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000e00)='5-1:1.0', 0x7) close(r4) 1.538843233s ago: executing program 6 (id=55): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/usb/devices/1-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r0, &(0x7f0000000180)='0\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/devices/1-0:1.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000280)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/usb/devices/usb1/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r2, &(0x7f0000000380)='0\x00', 0x2) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/usb/devices/usb1/power/control\x00', 0x1, 0x0) write(r3, &(0x7f0000000480)='auto\x00', 0x5) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/usb/devices/2-0:1.0/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r4, &(0x7f0000000580)='0\x00', 0x2) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/usb/devices/2-0:1.0/power/control\x00', 0x1, 0x0) write(r5, &(0x7f0000000680)='auto\x00', 0x5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/usb/devices/usb2/power/autosuspend_delay_ms\x00', 0x1, 0x0) write(r6, &(0x7f0000000780)='0\x00', 0x2) 1.516789713s ago: executing program 6 (id=56): unshare(0x20000) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000140)='./dev\x00', &(0x7f0000000180)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x0, 0x39, &(0x7f0000000200)=ANY=[@ANYBLOB="12010002000000404b0c00010001000000010902270001010080320904000003ff0000000705830308000a0705810220000007050202200000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./dev/ttyUSB0\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='\x00a\x00'/100, 0x64) nanosleep(&(0x7f0000000300)={0x0, 0x2faf080}, 0x0) 957.502647ms ago: executing program 5 (id=57): r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x0, &(0x7f0000000100)) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000200)={0x0, &(0x7f0000000300)=[@out_dx={0x0, 0x0, {0x43, 0x1, 0x36}}, @out_dx={0x0, 0x0, {0x40, 0x1, 0x12}}, @out_dx={0x0, 0x0, {0x40, 0x1}}], 0x78}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0x0, 0x0) nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0) 795.660181ms ago: executing program 5 (id=58): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='sysfs\x00', &(0x7f0000000200)='./sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:1d.7\x00', 0xd) close(r0) nanosleep(&(0x7f0000000600)={0x1, 0x1dcd6500}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000700), 0xc, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000800), 0xd, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000900), 0xe, 0x2) r4 = syz_open_dev$usbfs(&(0x7f0000000a00), 0xf, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000000b00), 0x10, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000001100), 0x16, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000001200), 0x17, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001300), 0x18, 0x2) r9 = syz_open_dev$usbfs(&(0x7f0000001400), 0x20, 0x2) r10 = syz_open_dev$usbfs(&(0x7f0000001500), 0x21, 0x2) r11 = syz_open_dev$usbfs(&(0x7f0000001600), 0x22, 0x2) ioctl$USBDEVFS_CONTROL(r1, 0xc0185500, &(0x7f0000000c00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000d00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000e00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000000f00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000001000)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000001700)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000001800)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r8, 0xc0185500, &(0x7f0000001900)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r9, 0xc0185500, &(0x7f0000001a00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r10, 0xc0185500, &(0x7f0000001b00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) ioctl$USBDEVFS_CONTROL(r11, 0xc0185500, &(0x7f0000001c00)={0x80, 0x6, 0x100, 0x0, 0x0, 0x3e8, 0x0}) 77.792789ms ago: executing program 7 (id=59): mkdir(&(0x7f0000000400)='./tracefs\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./tracefs\x00', &(0x7f0000000480)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./tracefs/trace_options\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='raw\n\x00', 0x4) r1 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./tracefs/events/xhci-hcd/xhci_portsc_writel/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000580)='1\n\x00', 0x2) syz_usb_connect(0x0, 0x24, &(0x7f00000005c0)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r2 = syz_open_dev$usbfs(&(0x7f0000000600), 0xb, 0x2) r3 = syz_open_dev$usbfs(&(0x7f0000000640), 0xc, 0x2) ioctl$USBDEVFS_CONTROL(r2, 0xc0185500, &(0x7f0000000680)={0x23, 0x3, 0x4, 0x1, 0x0, 0x3e8, &(0x7f00000006c0)}) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, &(0x7f0000000700)={0x23, 0x3, 0x4, 0x1, 0x0, 0x3e8, &(0x7f0000000740)}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./tracefs/trace\x00', 0x0, 0x0) read(r4, &(0x7f00000007c0)=""/1024, 0x400) 0s ago: executing program 6 (id=60): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='./my_config\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./my_config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000400)='./my_sys\x00', 0x1ff) r1 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./my_sys/bus/platform/drivers/dummy_udc/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000e00)='dummy_udc.0\x00', 0xc) 0s ago: executing program 6 (id=62): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/platform/devices/PNP0C0C:00/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000400)='PNP0C0C:00\x00', 0xb) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/PNP0100:00/driver_override\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000600)='PNP0100:00\x00', 0xb) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) write(r4, &(0x7f0000000200)='acpi-fan\x00', 0x9) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/drivers/acpi-fan/bind\x00', 0x1, 0x0) write(r5, &(0x7f0000000800)='pcspkr\x00', 0x7) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/class/thermal/cooling_device0/cur_state\x00', 0x0, 0x0) read(r6, &(0x7f0000000a00), 0x64) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./sys/class/thermal/cooling_device1/cur_state\x00', 0x0, 0x0) read(r7, &(0x7f0000000c00), 0x64) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./sys/class/thermal/cooling_device2/cur_state\x00', 0x0, 0x0) read(r8, &(0x7f0000000e00), 0x64) close(r8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 22.957416][ T24] audit: type=1400 audit(1786951410.710:64): avc: denied { mounton } for pid=271 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.960719][ T271] cgroup: Unknown subsys name 'net' [ 22.980296][ T24] audit: type=1400 audit(1786951410.710:65): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.007403][ T24] audit: type=1400 audit(1786951410.740:66): avc: denied { unmount } for pid=271 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.007968][ T271] cgroup: Unknown subsys name 'devices' [ 23.150883][ T271] cgroup: Unknown subsys name 'hugetlb' [ 23.156499][ T271] cgroup: Unknown subsys name 'rlimit' [ 23.297206][ T24] audit: type=1400 audit(1786951411.050:67): avc: denied { setattr } for pid=271 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.320502][ T24] audit: type=1400 audit(1786951411.050:68): avc: denied { mounton } for pid=271 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.337111][ T273] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.346002][ T24] audit: type=1400 audit(1786951411.050:69): avc: denied { mount } for pid=271 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 23.377012][ T24] audit: type=1400 audit(1786951411.120:70): avc: denied { relabelto } for pid=273 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.402577][ T24] audit: type=1400 audit(1786951411.120:71): avc: denied { write } for pid=273 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.435629][ T24] audit: type=1400 audit(1786951411.190:72): avc: denied { read } for pid=271 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.461192][ T24] audit: type=1400 audit(1786951411.190:73): avc: denied { open } for pid=271 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.487364][ T271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.034486][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.041599][ T280] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.049256][ T280] device bridge_slave_0 entered promiscuous mode [ 24.057076][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.064262][ T280] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.071748][ T280] device bridge_slave_1 entered promiscuous mode [ 24.207389][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.214516][ T283] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.222023][ T283] device bridge_slave_0 entered promiscuous mode [ 24.228667][ T282] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.235829][ T282] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.243299][ T282] device bridge_slave_0 entered promiscuous mode [ 24.251440][ T282] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.258501][ T282] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.265949][ T282] device bridge_slave_1 entered promiscuous mode [ 24.272547][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.279843][ T279] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.287203][ T279] device bridge_slave_0 entered promiscuous mode [ 24.296150][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.303300][ T279] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.310739][ T279] device bridge_slave_1 entered promiscuous mode [ 24.317342][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.324433][ T283] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.331955][ T283] device bridge_slave_1 entered promiscuous mode [ 24.424606][ T281] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.431781][ T281] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.439340][ T281] device bridge_slave_0 entered promiscuous mode [ 24.447633][ T281] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.454732][ T281] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.462198][ T281] device bridge_slave_1 entered promiscuous mode [ 24.515428][ T280] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.522528][ T280] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.530278][ T280] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.537316][ T280] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.559332][ T283] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.566410][ T283] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.573719][ T283] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.580863][ T283] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.615618][ T279] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.622710][ T279] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.630025][ T279] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.637055][ T279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.665281][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.672578][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.680817][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.688065][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.695625][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.703006][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.711065][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.718473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.737455][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.772952][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.781541][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.790093][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.797120][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.804526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.813111][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.820188][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.827568][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.835573][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.843609][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.851961][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.859028][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.866565][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.874726][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.881790][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.889203][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.897112][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.926037][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.934257][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.942169][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.951127][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.958164][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.965665][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.973926][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.980999][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.988461][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.996744][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.003788][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.011183][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.019389][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.026435][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.034145][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.042372][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 25.069712][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.078150][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.086671][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.096182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.104646][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.113221][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.122752][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.131142][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.139509][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 25.147786][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.156152][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.163246][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.170800][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 25.179181][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.187331][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.194413][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.202054][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.210186][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.218089][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.226226][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.236152][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.244182][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.255526][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.263098][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.270592][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 25.278596][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.292456][ T283] device veth0_vlan entered promiscuous mode [ 25.301726][ T280] device veth0_vlan entered promiscuous mode [ 25.309707][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.318110][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.329473][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.337043][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.344876][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 25.353109][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.362322][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.370840][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.384155][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.392579][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.402294][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.410911][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.420786][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.429027][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.439757][ T280] device veth1_macvtap entered promiscuous mode [ 25.450838][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.458536][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.467570][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.477110][ T283] device veth1_macvtap entered promiscuous mode [ 25.490105][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.497829][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.505892][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.514196][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.522456][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.530623][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.538773][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.547259][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.555027][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.562930][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.570549][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.579265][ T282] device veth0_vlan entered promiscuous mode [ 25.588645][ T281] device veth0_vlan entered promiscuous mode [ 25.596516][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.604997][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.618413][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.627576][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.636397][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 25.644780][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.658733][ T282] device veth1_macvtap entered promiscuous mode [ 25.672195][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.680904][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.689225][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 25.697198][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.705503][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.713060][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.721488][ T279] device veth0_vlan entered promiscuous mode [ 25.733936][ T281] device veth1_macvtap entered promiscuous mode [ 25.743116][ T280] request_module fs-gadgetfs succeeded, but still no fs? [ 25.757936][ T279] device veth1_macvtap entered promiscuous mode [ 25.765506][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.765733][ T280] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.783023][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.800120][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 25.806642][ T304] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.817997][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 25.832660][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 25.840551][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.848766][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.893770][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.911646][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.920466][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 25.929177][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.937655][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.946300][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 25.955141][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 25.963615][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.010692][ T318] Config c/1 of g1 needs at least one function. [ 26.024759][ T320] dummy_hcd dummy_hcd.0: remove, state 4 [ 26.033275][ T318] udc dummy_udc.0: failed to start g1: -22 [ 26.036918][ T320] usb usb1: USB disconnect, device number 1 [ 26.043372][ T318] Config c/1 of g1 needs at least one function. [ 26.052078][ T318] udc dummy_udc.0: failed to start g1: -22 [ 26.058893][ T318] Config c/1 of g1 needs at least one function. [ 26.065404][ T320] dummy_hcd dummy_hcd.0: stopped [ 26.065417][ T320] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 26.079565][ T318] udc dummy_udc.0: failed to start g1: -22 [ 26.099522][ T324] udc-core: couldn't find an available UDC or it's busy [ 26.107472][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.118482][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.126134][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.133847][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.141285][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.148644][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.156228][ T318] udc-core: couldn't find an available UDC or it's busy [ 26.189835][ T53] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.223081][ T335] using random self ethernet address [ 26.228437][ T335] using random host ethernet address [ 26.236399][ T335] udc-core: couldn't find an available UDC or it's busy [ 26.319067][ T316] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 26.356056][ T338] udc-core: couldn't find an available UDC or it's busy [ 26.363336][ T338] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 26.439068][ T53] usb 3-1: Using ep0 maxpacket: 8 [ 26.479077][ T289] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.559112][ T53] usb 3-1: config 0 has an invalid interface number: 143 but max is 0 [ 26.567402][ T53] usb 3-1: config 0 has no interface number 0 [ 26.573765][ T53] usb 3-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 26.583107][ T53] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.591860][ T53] usb 3-1: config 0 descriptor?? [ 26.679099][ T316] usb 5-1: New USB device found, idVendor=0403, idProduct=c631, bcdDevice= 1.00 [ 26.688166][ T316] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.833688][ T309] udc-core: couldn't find an available UDC or it's busy [ 26.840790][ T309] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 26.899061][ T15] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 26.931566][ T312] usb 5-1: USB disconnect, device number 2 [ 26.971620][ T350] udc-core: couldn't find an available UDC or it's busy [ 26.978623][ T350] misc raw-gadget: fail, usb_gadget_probe_driver returned -19 [ 27.019134][ T289] usb 4-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 27.028246][ T289] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.036580][ T289] usb 4-1: Product: syz [ 27.041018][ T289] usb 4-1: Manufacturer: syz [ 27.045610][ T289] usb 4-1: SerialNumber: syz [ 27.149298][ T15] usb 2-1: Using ep0 maxpacket: 8 [ 27.279227][ T15] usb 2-1: config 0 has an invalid interface number: 143 but max is 0 [ 27.287497][ T15] usb 2-1: config 0 has no interface number 0 [ 27.293647][ T15] usb 2-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 27.302766][ T15] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.311826][ T15] usb 2-1: config 0 descriptor?? [ 27.453772][ T312] usb 4-1: USB disconnect, device number 2 [ 27.552327][ T340] udc-core: couldn't find an available UDC or it's busy [ 27.560236][ T53] usb 2-1: USB disconnect, device number 2 [ 27.709252][ T15] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 28.069100][ T15] usb 5-1: config 1 descriptor has 1 excess byte, ignoring [ 28.076412][ T15] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 64 [ 28.077367][ T359] PM: suspend entry (deep) [ 28.086755][ T15] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64 [ 28.100800][ T53] usb 3-1: USB disconnect, device number 2 [ 28.101111][ T15] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64 [ 28.116623][ T15] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 28.279069][ T312] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.289127][ T15] usb 5-1: New USB device found, idVendor=0c72, idProduct=000c, bcdDevice= 1.00 [ 28.298276][ T15] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.306384][ T15] usb 5-1: Product: syz [ 28.310616][ T15] usb 5-1: Manufacturer: syz [ 28.315212][ T15] usb 5-1: SerialNumber: syz [ 28.339114][ T355] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 28.346217][ T355] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 28.353513][ T355] raw-gadget.5 gadget: fail, usb_ep_enable returned -22 [ 28.353717][ T359] Filesystems sync: 0.262 seconds [ 28.365765][ T359] Freezing user space processes ... [ 33.409130][ T15] usb 5-1: can't set config #1, error -110 [ 33.427416][ T359] (elapsed 5.061 seconds) done. [ 33.432324][ T359] OOM killer disabled. [ 33.436381][ T359] Freezing remaining freezable tasks ... [ 33.569122][ T312] usb 4-1: device descriptor read/all, error -110 [ 33.729107][ T312] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 33.939093][ T312] usb 4-1: device descriptor read/64, error -32 [ 34.269138][ T312] usb 4-1: device descriptor read/64, error -32 [ 34.389156][ T312] usb usb4-port1: attempt power cycle [ 34.799116][ T312] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 34.909144][ T312] usb 4-1: device descriptor read/8, error -32 [ 35.119110][ T312] usb 4-1: device descriptor read/8, error -32 [ 35.389125][ T312] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.499093][ T312] usb 4-1: device descriptor read/8, error -32 [ 35.709107][ T312] usb 4-1: device descriptor read/8, error -32 [ 35.829353][ T312] usb usb4-port1: unable to enumerate USB device [ 35.843684][ T359] (elapsed 2.407 seconds) done. [ 35.848674][ T359] printk: Suspending console(s) (use no_console_suspend to debug) [ 35.899137][ T307] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 36.090225][ T359] ACPI: Preparing to enter system sleep state S3 [ 36.090411][ T359] PM: Saving platform NVS memory [ 36.090416][ T359] PM: suspend debug: Waiting for 5 second(s). [ 41.099376][ T359] ACPI: Waking up from system sleep state S3 [ 41.489114][ T364] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 46.679079][ T364] usb 5-1: device descriptor read/64, error -110 [ 47.009070][ T364] usb 5-1: device descriptor read/64, error -32 [ 47.279090][ T364] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 47.489100][ T364] usb 5-1: device descriptor read/64, error -32 [ 47.819077][ T364] usb 5-1: device descriptor read/64, error -32 [ 48.089083][ T364] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 48.199105][ T364] usb 5-1: device descriptor read/8, error -32 [ 48.409104][ T364] usb 5-1: device descriptor read/8, error -32 [ 48.679084][ T364] usb 5-1: reset high-speed USB device number 3 using dummy_hcd [ 48.789108][ T364] usb 5-1: device descriptor read/8, error -32 [ 48.999100][ T364] usb 5-1: device descriptor read/8, error -32 [ 49.157842][ T359] OOM killer enabled. [ 49.159234][ T359] Restarting tasks ... [ 49.161599][ T53] usb 5-1: USB disconnect, device number 3 [ 49.175707][ T359] done. [ 49.176832][ T359] Resume cause unknown [ 49.178436][ T359] PM: suspend exit [ 49.467391][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.470597][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.473953][ T376] device bridge_slave_0 entered promiscuous mode [ 49.498495][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.501480][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.504990][ T376] device bridge_slave_1 entered promiscuous mode [ 49.542960][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.545844][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.549329][ T377] device bridge_slave_0 entered promiscuous mode [ 49.553078][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.555788][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.558809][ T377] device bridge_slave_1 entered promiscuous mode [ 49.643191][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.646176][ T380] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.649533][ T380] device bridge_slave_0 entered promiscuous mode [ 49.664605][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.667677][ T380] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.670802][ T380] device bridge_slave_1 entered promiscuous mode [ 49.673418][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.676349][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.679636][ T379] device bridge_slave_0 entered promiscuous mode [ 49.685631][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.688382][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.691796][ T379] device bridge_slave_1 entered promiscuous mode [ 49.696295][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.699143][ T378] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.702359][ T378] device bridge_slave_0 entered promiscuous mode [ 49.712467][ T24] kauditd_printk_skb: 40 callbacks suppressed [ 49.712479][ T24] audit: type=1400 audit(1786951437.470:114): avc: denied { create } for pid=376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.733912][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.736942][ T378] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.739157][ T24] audit: type=1400 audit(1786951437.470:115): avc: denied { write } for pid=376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.744467][ T378] device bridge_slave_1 entered promiscuous mode [ 49.748493][ T24] audit: type=1400 audit(1786951437.470:116): avc: denied { read } for pid=376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 49.834003][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.836966][ T376] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.839942][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.842703][ T376] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.885660][ T380] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.888043][ T380] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.890592][ T380] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.893314][ T380] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.908805][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.911469][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.914359][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.916992][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.941257][ T364] device bridge_slave_1 left promiscuous mode [ 49.943762][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.947028][ T364] device bridge_slave_0 left promiscuous mode [ 49.949214][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.952786][ T364] device veth1_macvtap left promiscuous mode [ 49.955223][ T364] device veth0_vlan left promiscuous mode [ 50.035153][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.038024][ T379] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.041047][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.044027][ T379] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.061137][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.063957][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.066772][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.069661][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.077606][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.080940][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.083813][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.087039][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.090043][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.092802][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.095386][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.098152][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.101943][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.104527][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.107043][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.110533][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.132103][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.135869][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.138954][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.141832][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.144261][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.147222][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.150458][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.153416][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.155683][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.158343][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.161688][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.164131][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.183843][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.187613][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.190760][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.193536][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.196214][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.198368][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.202046][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.204673][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.222168][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.226218][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.229588][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.232143][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.234422][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.236746][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.240798][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.243098][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.245722][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.248376][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.250822][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.256641][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.269157][ T377] device veth0_vlan entered promiscuous mode [ 50.275076][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.277764][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.281108][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.283729][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.286326][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.301690][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.305758][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.310836][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.323513][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.327143][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.330927][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.334412][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.337447][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.342772][ T380] device veth0_vlan entered promiscuous mode [ 50.348881][ T379] device veth0_vlan entered promiscuous mode [ 50.353605][ T377] device veth1_macvtap entered promiscuous mode [ 50.360396][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.364300][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.367027][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.370091][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.372677][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.376045][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.379626][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.382573][ T376] device veth0_vlan entered promiscuous mode [ 50.393542][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.397149][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.400307][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.403121][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.415199][ T380] device veth1_macvtap entered promiscuous mode [ 50.418677][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.422268][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.425301][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.428516][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.432048][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.441266][ T376] device veth1_macvtap entered promiscuous mode [ 50.457658][ T378] device veth0_vlan entered promiscuous mode [ 50.463297][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.466708][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.472182][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.475797][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.479653][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.483026][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.485883][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.488932][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.491893][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.494699][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.497570][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.504359][ T379] device veth1_macvtap entered promiscuous mode [ 50.510443][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.513666][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.517635][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.521372][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.526485][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.536427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.541054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.544411][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.547642][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.555988][ T378] device veth1_macvtap entered promiscuous mode [ 50.561706][ T400] PM: suspend entry (deep) [ 50.564840][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.568283][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.572339][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.596584][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.600658][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.614971][ T404] udc-core: couldn't find an available UDC or it's busy [ 50.619830][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.623446][ T48] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.652452][ T405] virtio-fs: tag not found [ 50.655399][ T405] virtio-fs: tag not found [ 50.657940][ T405] virtiofs: Unexpected value for 'dax' [ 50.702460][ T24] audit: type=1400 audit(1786951438.460:117): avc: denied { read write } for pid=411 comm="syz.9.28" name="uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.713818][ T5] wiimote 0005:057E:0306.0001: item fetching failed at offset 32/33 [ 50.713830][ T24] audit: type=1400 audit(1786951438.460:118): avc: denied { open } for pid=411 comm="syz.9.28" path="/dev/uhid" dev="devtmpfs" ino=261 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 50.717689][ T400] Filesystems sync: 0.154 seconds [ 50.728486][ T400] Freezing user space processes ... [ 50.729093][ T5] wiimote 0005:057E:0306.0001: HID parse failed [ 50.733305][ T5] wiimote: probe of 0005:057E:0306.0001 failed with error -22 [ 50.737874][ T400] (elapsed 0.009 seconds) done. [ 50.739745][ T400] OOM killer disabled. [ 50.741381][ T400] Freezing remaining freezable tasks ... [ 50.809082][ T310] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 51.151705][ T364] device bridge_slave_1 left promiscuous mode [ 51.154209][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.157404][ T364] device bridge_slave_0 left promiscuous mode [ 51.159754][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.162681][ T364] device bridge_slave_1 left promiscuous mode [ 51.164743][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.167470][ T364] device bridge_slave_0 left promiscuous mode [ 51.169659][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.172569][ T364] device bridge_slave_1 left promiscuous mode [ 51.178810][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.186417][ T364] device bridge_slave_0 left promiscuous mode [ 51.192739][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.200593][ T364] device bridge_slave_1 left promiscuous mode [ 51.206737][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.214230][ T364] device bridge_slave_0 left promiscuous mode [ 51.220647][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.229657][ T364] device veth1_macvtap left promiscuous mode [ 51.235670][ T364] device veth0_vlan left promiscuous mode [ 51.241680][ T364] device veth1_macvtap left promiscuous mode [ 51.247696][ T364] device veth0_vlan left promiscuous mode [ 51.253738][ T364] device veth1_macvtap left promiscuous mode [ 51.259787][ T364] device veth0_vlan left promiscuous mode [ 51.265620][ T364] device veth1_macvtap left promiscuous mode [ 51.271852][ T364] device veth0_vlan left promiscuous mode [ 56.029365][ T310] usb 7-1: device descriptor read/64, error -110 [ 56.359049][ T310] usb 7-1: device descriptor read/64, error -32 [ 56.629045][ T310] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 56.839084][ T310] usb 7-1: device descriptor read/64, error -32 [ 57.169079][ T310] usb 7-1: device descriptor read/64, error -32 [ 57.289125][ T310] usb usb7-port1: attempt power cycle [ 57.699103][ T310] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 57.809094][ T310] usb 7-1: device descriptor read/8, error -32 [ 58.019077][ T310] usb 7-1: device descriptor read/8, error -32 [ 58.289081][ T310] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 58.399086][ T310] usb 7-1: device descriptor read/8, error -32 [ 58.609092][ T310] usb 7-1: device descriptor read/8, error -32 [ 58.729128][ T310] usb usb7-port1: unable to enumerate USB device [ 58.743823][ T400] (elapsed 8.002 seconds) done. [ 58.748748][ T400] printk: Suspending console(s) (use no_console_suspend to debug) [ 58.799147][ T48] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 58.984926][ T400] ACPI: Preparing to enter system sleep state S3 [ 58.985082][ T400] PM: Saving platform NVS memory [ 58.985089][ T400] Disabling non-boot CPUs ... [ 58.993511][ T400] smpboot: CPU 1 is now offline [ 59.001461][ T400] PM: suspend debug: Waiting for 5 second(s). [ 64.003122][ T400] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 64.019484][ T400] Enabling non-boot CPUs ... [ 64.019653][ T400] x86: Booting SMP configuration: [ 64.019661][ T400] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 64.019992][ T0] kvm-clock: cpu 1, msr 6e7a041, secondary cpu clock [ 64.020942][ T17] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 64.022372][ T400] CPU1 is up [ 64.022807][ T400] ACPI: Waking up from system sleep state S3 [ 64.261449][ T400] OOM killer enabled. [ 64.262975][ T400] Restarting tasks ... done. [ 64.291080][ T400] Resume cause unknown [ 64.296745][ T24] audit: type=1400 audit(1786951451.890:119): avc: denied { read } for pid=432 comm="syz.9.29" name="UDC" dev="configfs" ino=16766 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 64.313745][ T400] PM: suspend exit [ 64.343073][ T438] using random self ethernet address [ 64.345132][ T438] using random host ethernet address [ 64.352445][ T438] udc-core: couldn't find an available UDC or it's busy [ 64.356863][ T442] file system registered [ 64.361042][ T24] audit: type=1400 audit(1786951451.960:120): avc: denied { mount } for pid=441 comm="syz.8.34" name="/" dev="functionfs" ino=17622 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 64.363869][ T442] read descriptors [ 64.375972][ T442] udc-core: couldn't find an available UDC or it's busy [ 64.385336][ T24] audit: type=1400 audit(1786951451.980:121): avc: denied { mount } for pid=443 comm="syz.5.35" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.394144][ T379] ffs_data_put(): freeing [ 64.394607][ T24] audit: type=1400 audit(1786951451.980:122): avc: denied { search } for pid=443 comm="syz.5.35" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 64.404146][ T24] audit: type=1400 audit(1786951451.980:123): avc: denied { write } for pid=443 comm="syz.5.35" name="enable" dev="tracefs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.416260][ T24] audit: type=1400 audit(1786951451.980:124): avc: denied { open } for pid=443 comm="syz.5.35" path="/1/tracing/events/enable" dev="tracefs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 64.424878][ T24] audit: type=1400 audit(1786951451.990:125): avc: denied { unmount } for pid=379 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbfs_t tclass=filesystem permissive=1 [ 64.438736][ T24] audit: type=1400 audit(1786951452.030:126): avc: denied { create } for pid=446 comm="syz.8.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 64.455622][ T379] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 64.608851][ T429] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 64.718803][ T419] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 64.730934][ T24] audit: type=1400 audit(1786951452.330:127): avc: denied { unmount } for pid=376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 64.848811][ T429] usb 8-1: Using ep0 maxpacket: 16 [ 64.969241][ T429] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 64.973539][ T429] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 64.977876][ T429] usb 8-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 64.981333][ T429] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 64.985169][ T429] usb 8-1: config 0 descriptor?? [ 65.238937][ T419] usb 7-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 65.242418][ T419] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 65.245559][ T419] usb 7-1: Product: syz [ 65.247159][ T419] usb 7-1: Manufacturer: syz [ 65.249174][ T419] usb 7-1: SerialNumber: syz [ 65.450361][ T429] HID 045e:07da: Invalid code 65791 type 1 [ 65.455696][ T429] input: HID 045e:07da as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:0.0/0003:045E:07DA.0002/input/input6 [ 65.461764][ T429] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.7-1/input0 [ 65.643124][ T289] usb 7-1: USB disconnect, device number 6 [ 65.710994][ T24] audit: type=1400 audit(1786951453.310:128): avc: denied { read } for pid=439 comm="syz.7.33" name="event3" dev="devtmpfs" ino=540 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 66.418009][ T429] usb 8-1: USB disconnect, device number 2 [ 67.419497][ T462] user requested TSC rate below hardware speed [ 67.537860][ T482] ehci-platform pcspkr: IRQ index 0 not found [ 67.543007][ T482] ehci-platform serial8250: IRQ index 0 not found [ 67.556589][ T482] ehci-pci 0000:00:01.0: Found HC with no IRQ. Check BIOS/PCI 0000:00:01.0 setup! [ 67.561151][ T482] ehci-pci 0000:00:01.0: init 0000:00:01.0 fail, -19 [ 67.638863][ T430] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 67.808784][ T289] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 67.868804][ T15] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 67.929653][ T312] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 68.118892][ T430] usb 10-1: New USB device found, idVendor=0552, idProduct=5510, bcdDevice= 0.00 [ 68.122380][ T430] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 68.125765][ T430] usb 10-1: Product: syz [ 68.127530][ T430] usb 10-1: Manufacturer: syz [ 68.169245][ T289] usb 9-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 68.229142][ T15] usb 8-1: New USB device found, idVendor=086a, idProduct=0100, bcdDevice= 0.01 [ 68.233179][ T15] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.249573][ T289] usb 9-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 68.253195][ T289] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 68.256373][ T289] usb 9-1: SerialNumber: syz [ 68.289015][ T312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 68.293043][ T312] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 32 [ 68.297200][ T312] usb 7-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice= 1.00 [ 68.302141][ T312] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 68.329106][ T495] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 68.331873][ T495] raw-gadget.3 gadget: fail, usb_ep_enable returned -22 [ 68.390794][ T430] scsi host1: uas [ 68.571599][ T15] usb 8-1: USB disconnect, device number 3 [ 68.651929][ T316] usb 7-1: USB disconnect, device number 7 [ 68.960827][ T289] cdc_ether 9-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.8-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 69.210463][ T527] general protection fault, probably for non-canonical address 0xdffffc0000000051: 0000 [#1] PREEMPT SMP KASAN [ 69.214860][ T527] KASAN: null-ptr-deref in range [0x0000000000000288-0x000000000000028f] [ 69.218023][ T527] CPU: 0 PID: 527 Comm: syz.6.62 Not tainted syzkaller #0 [ 69.220550][ T527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 69.224192][ T527] RIP: 0010:acpi_fan_probe+0x10e/0x1030 [ 69.226367][ T527] Code: 84 fc 04 00 00 49 89 c6 4c 89 64 24 30 4c 89 7c 24 48 4c 8d bb 88 02 00 00 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 33 d2 20 ff 4c 89 7c 24 20 4d 89 [ 69.233612][ T527] RSP: 0018:ffffc90002667820 EFLAGS: 00010202 [ 69.235814][ T527] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.238883][ T527] RDX: ffffc90009c9b000 RSI: 0000000000000a02 RDI: 00000000ffffffff [ 69.241667][ T527] RBP: ffffc900026679e0 R08: 0000000000000003 R09: 0000000000000004 [ 69.244587][ T527] R10: dffffc0000000000 R11: fffff520004ccee4 R12: 0000000000000051 [ 69.248013][ T527] R13: 1ffff920004ccf14 R14: ffff88811ad8a298 R15: 0000000000000288 [ 69.250933][ T527] FS: 00007fb0c69646c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 69.254290][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.256532][ T527] CR2: 00007fff51597020 CR3: 000000011cfc3000 CR4: 00000000003526b0 [ 69.259464][ T527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.262400][ T527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.265336][ T527] Call Trace: [ 69.266498][ T527] ? clk_gpio_gate_is_enabled+0x40/0x40 [ 69.268452][ T527] ? kernfs_activate+0x35e/0x370 [ 69.270342][ T527] ? acpi_button_resume+0x3a0/0x3a0 [ 69.272307][ T527] ? __kasan_check_write+0x14/0x20 [ 69.273766][ T527] ? kernfs_put+0x44f/0x480 [ 69.275385][ T527] ? kernfs_create_link+0x186/0x200 [ 69.277339][ T527] ? is_acpi_device_node+0x26/0x60 [ 69.279032][ T527] platform_drv_probe+0x11b/0x1a0 [ 69.280811][ T527] really_probe+0x3bf/0xa60 [ 69.282392][ T527] driver_probe_device+0xe1/0x190 [ 69.284208][ T527] device_driver_attach+0x17a/0x280 [ 69.286143][ T527] bind_store+0x369/0x3c0 [ 69.287729][ T527] ? unbind_store+0x300/0x300 [ 69.289425][ T527] ? __kasan_check_write+0x14/0x20 [ 69.291346][ T527] ? mutex_lock+0x92/0xf0 [ 69.292924][ T527] ? unbind_store+0x300/0x300 [ 69.294534][ T527] drv_attr_store+0x79/0xa0 [ 69.296267][ T527] ? drv_attr_show+0x90/0x90 [ 69.298127][ T527] sysfs_kf_write+0x129/0x150 [ 69.299907][ T527] ? sysfs_kf_read+0x270/0x270 [ 69.301445][ T527] kernfs_fop_write_iter+0x2bd/0x400 [ 69.303316][ T527] vfs_write+0x770/0xd70 [ 69.304836][ T527] ? __kasan_check_read+0x11/0x20 [ 69.306608][ T527] ? kernel_write+0x3c0/0x3c0 [ 69.308227][ T527] ? mutex_trylock+0xb0/0xb0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 69.309827][ T527] ? __fget_files+0x2e1/0x340 [ 69.311526][ T527] ? __fdget_pos+0x2d2/0x380 [ 69.313019][ T527] ? ksys_write+0x70/0x260 [ 69.314415][ T527] ksys_write+0x14a/0x260 [ 69.315779][ T527] ? __ia32_sys_read+0x90/0x90 [ 69.317369][ T527] ? trace_event_raw_event_sys_enter+0x12d/0x140 [ 69.319399][ T527] __x64_sys_write+0x7b/0x90 [ 69.320840][ T527] do_syscall_64+0x31/0x40 [ 69.322203][ T527] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 69.324095][ T527] RIP: 0033:0x7fb0c7f0b0d9 [ 69.325443][ T527] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 69.332211][ T527] RSP: 002b:00007fb0c6964028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 69.335236][ T527] RAX: ffffffffffffffda RBX: 00007fb0c8192fa0 RCX: 00007fb0c7f0b0d9 [ 69.339064][ T527] RDX: 0000000000000007 RSI: 0000200000000800 RDI: 0000000000000003 [ 69.342056][ T527] RBP: 00007fb0c7fa2024 R08: 0000000000000000 R09: 0000000000000000 [ 69.345016][ T527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 69.347903][ T527] R13: 00007fb0c8193038 R14: 00007fb0c8192fa0 R15: 00007fff51596c28 [ 69.350868][ T527] Modules linked in: [ 69.359695][ T527] ---[ end trace 906ec7a8fcfb3db8 ]--- [ 69.362087][ T527] RIP: 0010:acpi_fan_probe+0x10e/0x1030 [ 69.362757][ T24] kauditd_printk_skb: 15 callbacks suppressed [ 69.362788][ T24] audit: type=1400 audit(1786951456.960:144): avc: denied { write } for pid=271 comm="syz-executor" path="pipe:[1749]" dev="pipefs" ino=1749 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 69.365568][ T527] Code: 84 fc 04 00 00 49 89 c6 4c 89 64 24 30 4c 89 7c 24 48 4c 8d bb 88 02 00 00 4d 89 fc 49 c1 ec 03 48 b8 00 00 00 00 00 fc ff df <41> 80 3c 04 00 74 08 4c 89 ff e8 33 d2 20 ff 4c 89 7c 24 20 4d 89 [ 69.366776][ T24] audit: type=1400 audit(1786951456.960:145): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 69.366808][ T24] audit: type=1400 audit(1786951456.960:146): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 69.401899][ T419] usb 9-1: USB disconnect, device number 2 [ 69.405607][ T527] RSP: 0018:ffffc90002667820 EFLAGS: 00010202 [ 69.408216][ T527] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 69.413058][ T527] RDX: ffffc90009c9b000 RSI: 0000000000000a02 RDI: 00000000ffffffff [ 69.416094][ T527] RBP: ffffc900026679e0 R08: 0000000000000003 R09: 0000000000000004 [ 69.420693][ T419] cdc_ether 9-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.8-1, CDC Ethernet Device [ 69.425061][ T527] R10: dffffc0000000000 R11: fffff520004ccee4 R12: 0000000000000051 [ 69.442518][ T527] R13: 1ffff920004ccf14 R14: ffff88811ad8a298 R15: 0000000000000288 [ 69.455674][ T527] FS: 00007fb0c69646c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 69.461072][ T527] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 69.463546][ T527] CR2: 000055865d726300 CR3: 000000011cfc3000 CR4: 00000000003506a0 [ 69.468850][ T20] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 69.488302][ T527] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 69.491678][ T527] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 69.494798][ T527] Kernel panic - not syncing: Fatal exception [ 69.497291][ T527] Kernel Offset: disabled [ 69.498770][ T527] Rebooting in 86400 seconds..