last executing test programs: 13.606338411s ago: executing program 2 (id=8): mkdir(&(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config/usb_gadget/g1\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r0, &(0x7f0000000700)='0x1234', 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r1, &(0x7f0000000900)='0x5678', 0x6) mkdir(&(0x7f0000000a00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000b00)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/rndis.usb0/ifname\x00', 0x1, 0x0) write(r2, &(0x7f0000000d00)='syzkaller0', 0xa) symlinkat(&(0x7f0000000e00)='config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00') r3 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000001100)='dummy_udc.0', 0xb) nanosleep(&(0x7f0000000040)={0x1}, &(0x7f0000000080)) r4 = syz_open_dev$usbfs(&(0x7f0000001200), 0x15, 0x2) r5 = syz_open_dev$usbfs(&(0x7f0000001300), 0x16, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000001400), 0x1f, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000001500), 0x20, 0x2) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001600)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000001700)) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000001800)) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000001900)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000001a00)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000001b00)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_IOCTL(r6, 0xc0105512, &(0x7f0000001c00)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_IOCTL(r7, 0xc0105512, &(0x7f0000001d00)=@usbdevfs_disconnect={0x1}) ioctl$USBDEVFS_CLAIMINTERFACE(r4, 0x8004550f, &(0x7f0000001e00)) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000001f00)) ioctl$USBDEVFS_CLAIMINTERFACE(r6, 0x8004550f, &(0x7f0000002000)) ioctl$USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000002100)) ioctl$USBDEVFS_CONTROL(r4, 0xc0185500, &(0x7f0000002200)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000002300)="040000001c000000010000000301020100"/28}) ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000002400)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000002500)="040000001c000000010000000301020100"/28}) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000002600)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000002700)="040000001c000000010000000301020100"/28}) ioctl$USBDEVFS_CONTROL(r7, 0xc0185500, &(0x7f0000002800)={0x21, 0x0, 0x0, 0x0, 0x1c, 0x3e8, &(0x7f0000002900)="040000001c000000010000000301020100"/28}) 5.65441747s ago: executing program 2 (id=13): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='0fc5:1227:b\n', 0xc) close(r0) syz_usb_connect(0x0, 0x24, &(0x7f0000000200)=ANY=[@ANYBLOB="1201000200000040c50f2712000101020301090212000101008032090400000000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) 4.390806121s ago: executing program 2 (id=24): r0 = openat$kvm(0x0, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000140)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_syzos={0x136, 0x38, {0x0, 0x10, [@uexit={0x0, 0x18, 0x1234}]}}, @nested_vmlaunch={0x12f, 0x18}], 0x80}) r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0x10a, 0x0, 0x1234}]}) 4.268181794s ago: executing program 2 (id=25): r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = syz_usb_connect(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000030020f003176c400000000001090224725100000000090400001207010300090501020000000000090582020002"], 0x0) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r0, 0x8108551b, &(0x7f0000000200)={0x0, 0x0, 'usbfs\x00'}) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000300)) ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000300)={0x0, 0x1}) syz_usb_disconnect(r1) 3.011825315s ago: executing program 1 (id=48): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1009}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, 0x0) 2.869399699s ago: executing program 1 (id=52): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='auto\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mysys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='auto\x00', 0x5) close(r2) write(0xffffffffffffffff, &(0x7f0000000b00)='on\x00', 0x3) 2.869177249s ago: executing program 2 (id=53): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000900)='\x00\x00TO', 0x4, 0x40) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='ehci-pci\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0000:00:03.0\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0000:00:05.0\x00', 0xd) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys_link/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='0000:00:05.0\x00', 0xd) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys_link/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001300)='\x00\x00TO', 0x4, 0x40) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys_link/bus/pci/devices/0000:00:05.0/driver_override\x00', 0x1, 0x0) write(r8, &(0x7f0000001500)='ehci-pci\x00', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000001700)='0000:00:05.0\x00', 0xd) close(r9) 2.752979442s ago: executing program 1 (id=56): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/devices/system/cpu/cpu1/online\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='0\n\x00', 0x2) write(r0, &(0x7f0000000200)='1\n\x00', 0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) r1 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_kvm_setup_syzos_vm$x86(r2, &(0x7f0000c00000/0x400000)=nil) r4 = syz_kvm_add_vcpu$x86(r3, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x25, {"4831ff48c7c6000004004881c60001000048893e"}}, @uexit={0x0, 0x18, 0xaaaa}], 0x3d}) r5 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r5, 0x3, 0x11, r4, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0x4) close(r4) close(r2) close(r1) 2.611241825s ago: executing program 2 (id=57): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0xf11, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xbf, 0x57, 0x5a, 0x0, [], [{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) syz_usb_control_io(r0, &(0x7f0000000100), &(0x7f0000000200)) 2.528264217s ago: executing program 1 (id=58): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='Conf', 0x4) 2.528077597s ago: executing program 1 (id=59): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) r2 = syz_kvm_add_vcpu$x86(r1, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x34, {"0f20e0480d000004000f22e0b80700000031c931d20f01d148c7c000010400c5f82800"}}], 0x34}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.507208068s ago: executing program 1 (id=60): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da07000000000001090224000100000000090400000903000000092100000001222200090581030800000000"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @global=@item_012={0x2, 0x1, 0x0, "e53f"}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @global=@item_4={0x3, 0x1, 0x0, "0900be00"}, @main=@item_4={0x3, 0x0, 0x8}, @local=@item_4={0x3, 0x2, 0x0, "09007a15"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') syz_usb_ep_write(r0, 0x81, 0x7, &(0x7f0000000000)='BBBBBBB') mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000140)='dummy_hcd.0\x00', 0xc) write(r1, &(0x7f0000000180)='dummy_hcd\x00', 0xa) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys/bus/usb/drivers/usb/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000200)='1-1\x00', 0x4) write(r2, &(0x7f0000000240)='2-1\x00', 0x4) r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/usb/drivers/usbhid/unbind\x00', 0x1, 0x0) write(r3, &(0x7f00000002c0)='1-1:1.0\x00', 0x8) write(r3, &(0x7f0000000300)='2-1:1.0\x00', 0x8) 1.760066346s ago: executing program 3 (id=67): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r0, &(0x7f0000000080)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000100)=""/20, 0x13, 0x3}}, 0x120) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 1.132439272s ago: executing program 0 (id=70): r0 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_disconnect(r0) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) r1 = syz_usb_connect(0x3, 0x51, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000407e04011000010000000109023f0001010080320904000000ff0000000904000100ff0000000904000203ff000000090501020002000000090582020002000000090583034000010000"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000100)={0x84, &(0x7f0000000200)={0xc0, 0x1, 0x1, '\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) nanosleep(&(0x7f0000000300)={0x0, 0x8f0d180}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./sys\x00', &(0x7f00000001c0)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./sys/bus/usb/drivers/uss720/unbind\x00', 0x1, 0x0) write(r2, &(0x7f0000000280)='5-1:1.0', 0x1) 907.992497ms ago: executing program 3 (id=71): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1009}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)) 805.42966ms ago: executing program 3 (id=72): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='auto\x00', 0x5) 738.634682ms ago: executing program 3 (id=73): mkdir(&(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/devices/0000:00:01.0/power/control\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='auto\x00', 0x5) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./mysys/bus/pci/devices/0000:00:02.0/power/control\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='auto\x00', 0x5) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./mysys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0) write(r2, &(0x7f0000000900)='auto\x00', 0x5) close(r2) write(0xffffffffffffffff, &(0x7f0000000b00)='on\x00', 0x3) 738.402412ms ago: executing program 3 (id=74): r0 = syz_open_dev$usbfs(&(0x7f0000000200), 0x15, 0x2) r1 = syz_open_dev$usbfs(&(0x7f0000000240), 0x1f, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000280), 0x16, 0x2) r3 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x20, 0x2) ioctl$USBDEVFS_CLAIMINTERFACE(r0, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r1, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r2, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_CLAIMINTERFACE(r3, 0x8004550f, &(0x7f0000000600)) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f0000000300)=@urb_type_bulk={0x3, {0x1}, 0x0, 0x0, &(0x7f0000000400)="00112233445566778899aabbccddeeff", 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_SUBMITURB(r2, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_SUBMITURB(r3, 0x8038550a, &(0x7f0000000300)) ioctl$USBDEVFS_DISCARDURB(r0, 0x550b, &(0x7f0000000500)=0x7f0000000300) ioctl$USBDEVFS_DISCARDURB(r1, 0x550b, &(0x7f0000000500)) ioctl$USBDEVFS_DISCARDURB(r2, 0x550b, &(0x7f0000000500)) ioctl$USBDEVFS_DISCARDURB(r3, 0x550b, &(0x7f0000000500)) 734.320682ms ago: executing program 3 (id=75): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) nanosleep(&(0x7f0000000200)={0x2}, 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r1, 0x5514) r2 = syz_open_dev$usbfs(&(0x7f0000000140), 0x1f, 0x2) ioctl$USBDEVFS_RESET(r2, 0x5514) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x29, 0x2) ioctl$USBDEVFS_RESET(r3, 0x5514) r4 = syz_open_dev$usbfs(&(0x7f00000001c0), 0x33, 0x2) ioctl$USBDEVFS_RESET(r4, 0x5514) r5 = syz_open_dev$usbfs(&(0x7f0000000240), 0x16, 0x2) ioctl$USBDEVFS_RESET(r5, 0x5514) r6 = syz_open_dev$usbfs(&(0x7f0000000280), 0x20, 0x2) ioctl$USBDEVFS_RESET(r6, 0x5514) r7 = syz_open_dev$usbfs(&(0x7f00000002c0), 0x2a, 0x2) ioctl$USBDEVFS_RESET(r7, 0x5514) r8 = syz_open_dev$usbfs(&(0x7f0000000300), 0x34, 0x2) ioctl$USBDEVFS_RESET(r8, 0x5514) fcntl$setstatus(r0, 0x4, 0x800) read$char_usb(r0, &(0x7f0000000400), 0x64) 199.502105ms ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_link\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./sys_link\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_link/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000500)='0000:00:03.0\x00', 0xd) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_link/bus/pci/devices/0000:00:03.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='0000:00:03.0\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_link/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0) pwrite64(r2, &(0x7f0000000900)='\x00\x00TO', 0x4, 0x40) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_link/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0) write(r3, &(0x7f0000000b00)='ehci-pci\x00', 0x9) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r4, &(0x7f0000000d00)='0000:00:03.0\x00', 0xd) close(r4) r5 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./sys_link/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0) write(r5, &(0x7f0000000f00)='0000:00:05.0\x00', 0xd) close(r5) r6 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys_link/bus/pci/devices/0000:00:05.0/driver/unbind\x00', 0x1, 0x0) write(r6, &(0x7f0000001100)='0000:00:05.0\x00', 0xd) close(r6) r7 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./sys_link/bus/pci/devices/0000:00:05.0/resource0\x00', 0x2, 0x0) pwrite64(r7, &(0x7f0000001300)='\x00\x00TO', 0x4, 0x40) close(r7) r8 = openat(0xffffffffffffff9c, &(0x7f0000001400)='./sys_link/bus/pci/devices/0000:00:05.0/driver_override\x00', 0x1, 0x0) write(r8, &(0x7f0000001500)='ehci-pci\x00', 0x9) r9 = openat(0xffffffffffffff9c, &(0x7f0000001600)='./sys_link/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r9, &(0x7f0000001700)='0000:00:05.0\x00', 0xd) close(r9) 64.585549ms ago: executing program 0 (id=77): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0) write(r0, &(0x7f0000000500)='Conf 1', 0x6) 258.58µs ago: executing program 0 (id=78): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0x2, 0x0) write(r0, &(0x7f0000000100)='u1_u2\x00', 0x5) r1 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/wakeup_count', 0x2, 0x0) write(r1, &(0x7f0000000100)='u1_u2\x00', 0x5) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/wakeup_count', 0x2, 0x0) write(r2, &(0x7f0000000100)='u1_u2\x00', 0x5) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/wakeup_count', 0x2, 0x0) write(r3, &(0x7f0000000100)='u1_u2\x00', 0x5) 139.82µs ago: executing program 0 (id=79): r0 = openat$kvm(0x0, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000040)={0x0, &(0x7f0000000080)=[@code={0xa, 0x34, {"0f20e0480d000004000f22e0b80700000031c931d20f01d148c7c000010400c5f82800"}}], 0x34}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=80): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x4b564d02, 0x0, 0x1009}]}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000380)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts. [ 29.996335][ T36] audit: type=1400 audit(1786951834.400:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.997398][ T286] cgroup: Unknown subsys name 'net' [ 30.019555][ T36] audit: type=1400 audit(1786951834.400:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.047412][ T36] audit: type=1400 audit(1786951834.430:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.047560][ T286] cgroup: Unknown subsys name 'devices' [ 30.170519][ T286] cgroup: Unknown subsys name 'hugetlb' [ 30.176246][ T286] cgroup: Unknown subsys name 'rlimit' [ 30.268738][ T36] audit: type=1400 audit(1786951834.680:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.291700][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 30.292118][ T36] audit: type=1400 audit(1786951834.680:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 30.315992][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 30.325728][ T36] audit: type=1400 audit(1786951834.680:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 30.358058][ T36] audit: type=1400 audit(1786951834.720:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.383651][ T36] audit: type=1400 audit(1786951834.720:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.409351][ T36] audit: type=1400 audit(1786951834.720:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.435152][ T36] audit: type=1400 audit(1786951834.720:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 31.375487][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.382610][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.389720][ T294] bridge_slave_0: entered allmulticast mode [ 31.396045][ T294] bridge_slave_0: entered promiscuous mode [ 31.402586][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.410286][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.417552][ T294] bridge_slave_1: entered allmulticast mode [ 31.423943][ T294] bridge_slave_1: entered promiscuous mode [ 31.449470][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.456602][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.464148][ T296] bridge_slave_0: entered allmulticast mode [ 31.470443][ T296] bridge_slave_0: entered promiscuous mode [ 31.485510][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.493426][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.500731][ T296] bridge_slave_1: entered allmulticast mode [ 31.507048][ T296] bridge_slave_1: entered promiscuous mode [ 31.541704][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.548886][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.555941][ T293] bridge_slave_0: entered allmulticast mode [ 31.562282][ T293] bridge_slave_0: entered promiscuous mode [ 31.568852][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.576004][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.583200][ T293] bridge_slave_1: entered allmulticast mode [ 31.590011][ T293] bridge_slave_1: entered promiscuous mode [ 31.659964][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.667035][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.674147][ T295] bridge_slave_0: entered allmulticast mode [ 31.680351][ T295] bridge_slave_0: entered promiscuous mode [ 31.686790][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.693883][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.701005][ T295] bridge_slave_1: entered allmulticast mode [ 31.707178][ T295] bridge_slave_1: entered promiscuous mode [ 31.789495][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.796582][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.804056][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.811142][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.827687][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.834784][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.842183][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.849318][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.863645][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.870742][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.878028][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.885169][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.947616][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.954884][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.962228][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.969646][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.987547][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.995133][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.002793][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.010200][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.017541][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.025165][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.032895][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.040156][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.064511][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.071598][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.079292][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.086422][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.094005][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.101236][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.108981][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.116051][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.123767][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.130907][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.155794][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.162888][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.190948][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.198016][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.206161][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.213242][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.236666][ T294] veth0_vlan: entered promiscuous mode [ 32.256568][ T296] veth0_vlan: entered promiscuous mode [ 32.280158][ T295] veth0_vlan: entered promiscuous mode [ 32.293230][ T296] veth1_macvtap: entered promiscuous mode [ 32.300407][ T293] veth0_vlan: entered promiscuous mode [ 32.306797][ T294] veth1_macvtap: entered promiscuous mode [ 32.321001][ T295] veth1_macvtap: entered promiscuous mode [ 32.344176][ T293] veth1_macvtap: entered promiscuous mode [ 32.394516][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 32.472438][ T325] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.495564][ T325] PM: suspend entry (deep) [ 32.662903][ T13] Filesystems sync: 0.162 seconds [ 32.678290][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 32.698394][ T9] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.708570][ T311] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.719332][ T325] Freezing user space processes [ 32.725766][ T325] Freezing user space processes completed (elapsed 0.001 seconds) [ 32.733966][ T325] OOM killer disabled. [ 32.738067][ T325] Freezing remaining freezable tasks [ 32.848518][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 37.888625][ T311] usb 3-1: device descriptor read/all, error -110 [ 37.888745][ T310] usb 2-1: device descriptor read/all, error -110 [ 37.902078][ T9] usb 1-1: device descriptor read/all, error -110 [ 38.018347][ T311] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 38.038375][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 38.046160][ T310] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 38.148382][ T311] usb 3-1: device descriptor read/64, error -32 [ 38.178334][ T9] usb 1-1: device descriptor read/64, error -32 [ 38.184864][ T310] usb 2-1: device descriptor read/64, error -32 [ 38.388341][ T311] usb 3-1: device descriptor read/64, error -32 [ 38.418302][ T9] usb 1-1: device descriptor read/64, error -32 [ 38.438320][ T310] usb 2-1: device descriptor read/64, error -32 [ 38.498455][ T311] usb usb3-port1: attempt power cycle [ 38.528438][ T9] usb usb1-port1: attempt power cycle [ 38.548467][ T310] usb usb2-port1: attempt power cycle [ 38.838317][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 38.858851][ T311] usb 3-1: device descriptor read/8, error -32 [ 38.868355][ T9] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 38.888387][ T310] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 38.896292][ T9] usb 1-1: device descriptor read/8, error -32 [ 38.908825][ T310] usb 2-1: device descriptor read/8, error -32 [ 38.989040][ T311] usb 3-1: device descriptor read/8, error -32 [ 39.028964][ T9] usb 1-1: device descriptor read/8, error -32 [ 39.048959][ T310] usb 2-1: device descriptor read/8, error -32 [ 39.098434][ T311] raw-gadget.2 gadget.2: failed to queue reset event [ 39.138427][ T9] raw-gadget.1 gadget.0: failed to queue reset event [ 39.158485][ T310] raw-gadget.0 gadget.1: failed to queue reset event [ 39.178352][ T311] raw-gadget.2 gadget.2: failed to queue resume event [ 39.208335][ T9] raw-gadget.1 gadget.0: failed to queue resume event [ 39.228350][ T310] raw-gadget.0 gadget.1: failed to queue resume event [ 39.238333][ T311] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 39.268330][ T9] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 39.268500][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.283459][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.288382][ T310] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 39.290527][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.290753][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.298561][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.305512][ T311] usb 3-1: device descriptor read/8, error -32 [ 39.312859][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.333172][ T9] usb 1-1: device descriptor read/8, error -32 [ 39.339383][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.346609][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.353916][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.361050][ T310] usb 2-1: device descriptor read/8, error -32 [ 39.438497][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.445816][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.453085][ C1] raw-gadget.2 gadget.2: ignoring, device is not running [ 39.460147][ T311] usb 3-1: device descriptor read/8, error -32 [ 39.468449][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.475787][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.483029][ C0] raw-gadget.1 gadget.0: ignoring, device is not running [ 39.490192][ T9] usb 1-1: device descriptor read/8, error -32 [ 39.496377][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.503699][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.511002][ C0] raw-gadget.0 gadget.1: ignoring, device is not running [ 39.518259][ T310] usb 2-1: device descriptor read/8, error -32 [ 39.568365][ T311] raw-gadget.2 gadget.2: failed to queue suspend event [ 39.575384][ T311] usb usb3-port1: unable to enumerate USB device [ 39.608338][ T9] raw-gadget.1 gadget.0: failed to queue suspend event [ 39.615602][ T9] usb usb1-port1: unable to enumerate USB device [ 39.628311][ T310] raw-gadget.0 gadget.1: failed to queue suspend event [ 39.635309][ T310] usb usb2-port1: unable to enumerate USB device [ 39.644665][ T325] Freezing remaining freezable tasks completed (elapsed 6.901 seconds) [ 39.653026][ T325] printk: Suspending console(s) (use no_console_suspend to debug) [ 39.688521][ T46] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 39.865708][ T325] ACPI: PM: Preparing to enter system sleep state S3 [ 39.865897][ T325] ACPI: PM: Saving platform NVS memory [ 39.865982][ T325] Disabling non-boot CPUs ... [ 39.871008][ T325] smpboot: CPU 1 is now offline [ 39.873448][ T325] PM: suspend debug: Waiting for 5 second(s). [ 44.889489][ T325] Enabling non-boot CPUs ... [ 44.889661][ T325] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 44.892463][ T325] CPU1 is up [ 44.892713][ T325] ACPI: PM: Waking up from system sleep state S3 [ 44.912196][ T309] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 45.066999][ T325] OOM killer enabled. [ 45.067636][ T325] Restarting tasks ... done. [ 45.078862][ T325] random: crng reseeded on system resumption [ 45.082434][ T320] raw-gadget.1 gadget.0: failed to queue disconnect event [ 45.086789][ T319] raw-gadget.0 gadget.1: failed to queue disconnect event [ 45.089382][ T325] Resume cause unknown [ 45.099377][ T325] PM: suspend exit [ 45.111733][ T315] raw-gadget.2 gadget.2: failed to queue disconnect event [ 45.116301][ T36] kauditd_printk_skb: 31 callbacks suppressed [ 45.116318][ T36] audit: type=1400 audit(1786951849.322:105): avc: denied { unmount } for pid=296 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 45.131812][ T36] audit: type=1400 audit(1786951849.332:106): avc: denied { mount } for pid=354 comm="syz.1.6" name="/" dev="configfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.141032][ T36] audit: type=1400 audit(1786951849.332:107): avc: denied { search } for pid=354 comm="syz.1.6" name="/" dev="configfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.145398][ T36] audit: type=1400 audit(1786951849.332:108): avc: denied { write } for pid=354 comm="syz.1.6" name="/" dev="configfs" ino=1993 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.150728][ T357] UDC core: g1: couldn't find an available UDC or it's busy [ 45.153063][ T36] audit: type=1400 audit(1786951849.342:109): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 45.160505][ T36] audit: type=1400 audit(1786951849.342:110): avc: denied { add_name } for pid=353 comm="syz.2.8" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 45.163825][ T36] audit: type=1400 audit(1786951849.342:111): avc: denied { create } for pid=353 comm="syz.2.8" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 45.166825][ T36] audit: type=1400 audit(1786951849.352:112): avc: denied { write } for pid=353 comm="syz.2.8" name="idVendor" dev="configfs" ino=2966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 45.170304][ T36] audit: type=1400 audit(1786951849.352:113): avc: denied { open } for pid=353 comm="syz.2.8" path="/1/config/usb_gadget/g1/idVendor" dev="configfs" ino=2966 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 45.173961][ T36] audit: type=1400 audit(1786951849.352:114): avc: denied { create } for pid=353 comm="syz.2.8" name="rndis.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 45.216505][ T366] PM: suspend entry (s2idle) [ 45.318583][ T309] Filesystems sync: 0.101 seconds [ 45.367042][ T366] Freezing user space processes [ 45.369031][ T366] Freezing user space processes completed (elapsed 0.001 seconds) [ 45.370252][ T366] OOM killer disabled. [ 45.370928][ T366] Freezing remaining freezable tasks [ 45.435961][ T347] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 45.475912][ T10] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 50.635968][ T10] usb 2-1: device descriptor read/64, error -110 [ 50.637131][ T347] usb 1-1: device descriptor read/64, error -110 [ 50.875946][ T10] usb 2-1: device descriptor read/64, error -32 [ 50.876999][ T347] usb 1-1: device descriptor read/64, error -32 [ 51.115948][ T347] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 51.117229][ T10] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 51.255944][ T10] usb 2-1: device descriptor read/64, error -32 [ 51.257132][ T347] usb 1-1: device descriptor read/64, error -32 [ 51.495975][ T347] usb 1-1: device descriptor read/64, error -32 [ 51.497018][ T10] usb 2-1: device descriptor read/64, error -32 [ 51.606084][ T347] usb usb1-port1: attempt power cycle [ 51.607035][ T10] usb usb2-port1: attempt power cycle [ 51.675958][ T347] raw-gadget.0 gadget.0: failed to queue resume event [ 51.677129][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 51.678404][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 51.679346][ T347] raw-gadget.0 gadget.0: failed to queue reset event [ 51.886016][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 51.887185][ T347] raw-gadget.0 gadget.0: failed to queue resume event [ 51.945999][ T347] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 51.947502][ T10] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 51.966134][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 51.967348][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 51.969101][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 51.970350][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 51.971809][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 51.973094][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 51.974146][ T347] usb 1-1: device descriptor read/8, error -32 [ 51.975093][ T10] usb 2-1: device descriptor read/8, error -32 [ 52.096104][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.097421][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.098600][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.099681][ T347] usb 1-1: device descriptor read/8, error -32 [ 52.106556][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.107915][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.109240][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.110468][ T10] usb 2-1: device descriptor read/8, error -32 [ 52.205967][ T347] raw-gadget.0 gadget.0: failed to queue suspend event [ 52.207274][ T347] raw-gadget.0 gadget.0: failed to queue reset event [ 52.215984][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 52.217172][ T10] raw-gadget.1 gadget.1: failed to queue reset event [ 52.275994][ T347] raw-gadget.0 gadget.0: failed to queue resume event [ 52.285958][ T10] raw-gadget.1 gadget.1: failed to queue resume event [ 52.335948][ T347] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 52.345941][ T10] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 52.356135][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.357497][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.358751][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.360084][ T347] usb 1-1: device descriptor read/8, error -32 [ 52.366104][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.367491][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.368790][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.369868][ T10] usb 2-1: device descriptor read/8, error -32 [ 52.486151][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.487572][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.488847][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 52.489929][ T347] usb 1-1: device descriptor read/8, error -32 [ 52.496105][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.497436][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.498701][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 52.499796][ T10] usb 2-1: device descriptor read/8, error -32 [ 52.595970][ T347] raw-gadget.0 gadget.0: failed to queue suspend event [ 52.597733][ T347] usb usb1-port1: unable to enumerate USB device [ 52.605956][ T10] raw-gadget.1 gadget.1: failed to queue suspend event [ 52.607210][ T10] usb usb2-port1: unable to enumerate USB device [ 52.610539][ T366] Freezing remaining freezable tasks completed (elapsed 7.238 seconds) [ 52.611787][ T366] printk: Suspending console(s) (use no_console_suspend to debug) [ 52.636121][ T13] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 52.777656][ T366] PM: suspend debug: Waiting for 0 second(s). [ 52.831449][ T12] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 53.040656][ T366] OOM killer enabled. [ 53.041281][ T366] Restarting tasks ... done. [ 53.044421][ T366] random: crng reseeded on system resumption [ 53.045355][ T366] Resume cause unknown [ 53.046215][ T366] PM: suspend exit [ 53.069011][ T352] raw-gadget.0 gadget.0: failed to queue disconnect event [ 53.074255][ T359] raw-gadget.1 gadget.1: failed to queue disconnect event [ 53.124844][ T36] audit: type=1400 audit(1786951857.322:115): avc: denied { write } for pid=401 comm="syz.1.15" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 53.143706][ T61] device offline error, dev sda, sector 1138998 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.145252][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2032 starting block 142374) [ 53.147535][ T61] Buffer I/O error on device sda1, logical block 142336 [ 53.148890][ T61] device offline error, dev sda, sector 1143094 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.150896][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 142886) [ 53.152612][ T61] Buffer I/O error on device sda1, logical block 142848 [ 53.153731][ T61] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.155326][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145446) [ 53.156944][ T61] Buffer I/O error on device sda1, logical block 145408 [ 53.158278][ T61] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.159861][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 147494) [ 53.162131][ T61] Buffer I/O error on device sda1, logical block 147456 [ 53.163243][ T61] device offline error, dev sda, sector 1192086 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.164689][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 149010) [ 53.166426][ T61] Buffer I/O error on device sda1, logical block 148972 [ 53.167563][ T61] device offline error, dev sda, sector 1192214 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.169353][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2033 starting block 149026) [ 53.171321][ T61] Buffer I/O error on device sda1, logical block 148988 [ 53.172464][ T61] Buffer I/O error on device sda1, logical block 148989 [ 53.173830][ T61] Buffer I/O error on device sda1, logical block 148990 [ 53.175132][ T61] Buffer I/O error on device sda1, logical block 148991 [ 53.176560][ T61] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.178107][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 149542) [ 53.179841][ T61] Buffer I/O error on device sda1, logical block 149504 [ 53.180942][ T61] device offline error, dev sda, sector 1208574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.182708][ T61] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2036 starting block 151071) [ 53.185051][ T334] device offline error, dev sda, sector 1171758 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.187050][ T334] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146469) [ 53.189406][ T334] device offline error, dev sda, sector 1175854 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 53.191973][ T334] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146981) [ 53.194107][ T335] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 53.199489][ T36] audit: type=1400 audit(1786951857.402:116): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 53.202186][ T73] Aborting journal on device sda1-8. [ 53.204051][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 53.205037][ T36] audit: type=1400 audit(1786951857.402:117): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.205499][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 53.214069][ T36] audit: type=1400 audit(1786951857.402:118): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.223016][ T36] audit: type=1400 audit(1786951857.402:119): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.224685][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 53.228502][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 53.229925][ T286] EXT4-fs (sda1): I/O error while writing superblock [ 53.231333][ T286] EXT4-fs (sda1): Remounting filesystem read-only [ 53.232925][ T36] audit: type=1400 audit(1786951857.402:120): avc: denied { create } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.237641][ T36] audit: type=1400 audit(1786951857.402:121): avc: denied { append open } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.248089][ T36] audit: type=1400 audit(1786951857.402:122): avc: denied { getattr } for pid=92 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.260179][ T36] audit: type=1400 audit(1786951857.462:123): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 53.263708][ T417] configfs-gadget.g1 gadget.0: HOST MAC ce:84:58:14:f3:4c [ 53.263735][ T417] configfs-gadget.g1 gadget.0: MAC 5a:98:85:f4:8f:b3 [ 53.278989][ T410] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 53.331619][ T396] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 53.359754][ T347] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 53.401861][ T423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 53.403451][ T423] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 53.479635][ T36] audit: type=1400 audit(1786951857.682:124): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 53.508967][ T347] usb 3-1: New USB device found, idVendor=0fc5, idProduct=1227, bcdDevice= 1.00 [ 53.510531][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.511814][ T347] usb 3-1: Product: syz [ 53.512525][ T347] usb 3-1: Manufacturer: syz [ 53.513321][ T347] usb 3-1: SerialNumber: syz [ 53.515888][ T396] usb 4-1: Using ep0 maxpacket: 8 [ 53.517505][ T31] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 53.520049][ T396] usb 4-1: config 0 has an invalid interface number: 143 but max is 0 [ 53.521414][ T396] usb 4-1: config 0 has no interface number 0 [ 53.523042][ T396] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 53.524692][ T396] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.526082][ T110] udevd[110]: worker [322] terminated by signal 7 (Bus error) [ 53.527239][ T396] usb 4-1: config 0 descriptor?? [ 53.527528][ T110] udevd[110]: worker [322] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.535697][ T110] udevd[110]: worker [406] terminated by signal 7 (Bus error) [ 53.539018][ T110] udevd[110]: worker [406] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0' [ 53.541447][ T110] udevd[110]: worker [323] terminated by signal 7 (Bus error) [ 53.542527][ T110] udevd[110]: worker [323] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 53.549105][ T110] udevd[110]: worker [326] terminated by signal 7 (Bus error) [ 53.550637][ T110] udevd[110]: worker [326] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.143' [ 53.553013][ T110] udevd[110]: worker [314] terminated by signal 7 (Bus error) [ 53.554084][ T110] udevd[110]: worker [314] failed while handling '/devices/platform/dummy_hcd.2/usb3/3-1' [ 53.666595][ T31] usb 1-1: Dual-Role OTG device on HNP port [ 53.668351][ T31] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.12 [ 53.670030][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 53.678348][ T31] rndis_host 1-1:1.0 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, ce:84:58:14:f3:4c [ 53.687692][ T31] cdc_acm 1-1:1.2: ttyACM0: USB ACM device [ 53.726370][ T311] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 53.826947][ T347] usb 3-1: USB disconnect, device number 6 [ 53.887087][ T311] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 53.890103][ T311] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 53.891594][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 53.892851][ T311] usb 2-1: SerialNumber: syz [ 54.498586][ T311] cdc_ether 2-1:1.0 usb2: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 54.705943][ T347] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 54.855934][ T347] usb 3-1: Using ep0 maxpacket: 32 [ 54.857976][ T347] usb 3-1: config index 0 descriptor too short (expected 29220, got 36) [ 54.859191][ T347] usb 3-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 54.860429][ T347] usb 3-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 54.861799][ T347] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 54.863262][ T347] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 54.864687][ T347] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 54.866555][ T347] usb 3-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 54.867945][ T347] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 54.869799][ T347] usb 3-1: config 0 descriptor?? [ 54.898655][ T311] usb 2-1: USB disconnect, device number 10 [ 54.900226][ T311] cdc_ether 2-1:1.0 usb2: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device [ 55.114160][ T466] ehci-pci 0000:00:03.0: init 0000:00:03.0 fail, -16 [ 55.115482][ T466] ehci-pci 0000:00:03.0: probe with driver ehci-pci failed with error -16 [ 55.130657][ T467] usb usb8: selecting invalid altsetting 1 [ 55.133911][ T347] usblp 3-1:0.0: usblp0: USB Bidirectional printer dev 7 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 55.146922][ T347] usb 3-1: USB disconnect, device number 7 [ 55.150074][ T31] usb 4-1: USB disconnect, device number 2 [ 55.163648][ T347] usblp0: removed [ 55.413889][ T482] process 'syz.1.37' launched './mnt/file0' with NULL argv: empty string added [ 55.477540][ T489] ehci-pci 0000:00:03.0: init 0000:00:03.0 fail, -16 [ 55.484831][ T489] ehci-pci 0000:00:03.0: probe with driver ehci-pci failed with error -16 [ 55.498059][ T492] PM: suspend entry (s2idle) [ 55.503272][ T335] Filesystems sync: 0.000 seconds [ 55.546363][ T492] Freezing user space processes [ 55.552824][ T492] Freezing user space processes completed (elapsed 0.001 seconds) [ 55.560677][ T492] OOM killer disabled. [ 55.564740][ T492] Freezing remaining freezable tasks [ 55.571456][ T492] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 55.579731][ T492] PM: suspend debug: Waiting for 0 second(s). [ 55.586186][ T492] OOM killer enabled. [ 55.590180][ T492] Restarting tasks ... done. [ 55.595991][ T492] random: crng reseeded on system resumption [ 55.602325][ T492] Resume cause unknown [ 55.606498][ T492] PM: suspend exit [ 55.764885][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 55.781604][ C0] Scheduler tracepoints stat_sleep, stat_iowait, stat_blocked and stat_runtime require the kernel parameter schedstats=enable or kernel.sched_schedstats=1 [ 55.931745][ T516] ehci-pci 0000:00:03.0: init 0000:00:03.0 fail, -16 [ 55.939195][ T516] ehci-pci 0000:00:03.0: probe with driver ehci-pci failed with error -16 [ 55.984737][ T520] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 56.007348][ T521] ACPI: \_SB_.LNKA: Enabled at IRQ 11 [ 56.018503][ T521] ehci-pci 0000:00:05.0: EHCI Host Controller [ 56.028828][ T521] ehci-pci 0000:00:05.0: new USB bus registered, assigned bus number 33 [ 56.043728][ T521] ehci-pci 0000:00:05.0: can't setup: -110 [ 56.050013][ T521] ehci-pci 0000:00:05.0: USB bus 33 deregistered [ 56.069934][ T521] ehci-pci 0000:00:05.0: init 0000:00:05.0 fail, -110 [ 56.076996][ T521] ehci-pci 0000:00:05.0: probe with driver ehci-pci failed with error -110 [ 56.375961][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 56.495988][ T347] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 56.535981][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 56.542878][ T31] usb 3-1: New USB device found, idVendor=0f11, idProduct=1000, bcdDevice= 0.00 [ 56.564378][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.648155][ T347] usb 2-1: Using ep0 maxpacket: 16 [ 56.654843][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 56.666042][ T347] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 56.679485][ T347] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 56.689913][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 56.717843][ T347] usb 2-1: config 0 descriptor?? [ 56.868659][ T555] ehci-pci 0000:00:03.0: init 0000:00:03.0 fail, -16 [ 56.876508][ T555] ehci-pci 0000:00:03.0: probe with driver ehci-pci failed with error -16 [ 56.901442][ T555] ehci-pci 0000:00:05.0: EHCI Host Controller [ 56.908643][ T555] ehci-pci 0000:00:05.0: new USB bus registered, assigned bus number 33 [ 56.920125][ T555] ehci-pci 0000:00:05.0: can't setup: -110 [ 56.926165][ T555] ehci-pci 0000:00:05.0: USB bus 33 deregistered [ 56.940853][ T555] ehci-pci 0000:00:05.0: init 0000:00:05.0 fail, -110 [ 56.947852][ T555] ehci-pci 0000:00:05.0: probe with driver ehci-pci failed with error -110 [ 56.980925][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 56.988714][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 56.996188][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.003727][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.011288][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x7 [ 57.019019][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.026510][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.033912][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.041544][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.049014][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.056465][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.063883][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.071434][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.078876][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.086330][ T311] hid-generic 0003:0000:0000.0001: unknown main item tag 0x0 [ 57.094596][ T311] hid-generic 0003:0000:0000.0001: hidraw0: USB HID v0.00 Device [syz0] on syz0 [ 57.131292][ T347] HID 045e:07da: Invalid code 65791 type 1 [ 57.139450][ T347] input: HID 045e:07da as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/0003:045E:07DA.0002/input/input6 [ 57.152630][ T347] microsoft 0003:045E:07DA.0002: input,hidraw1: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0 [ 57.577555][ T570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.586369][ T570] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.850876][ T575] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 57.859943][ T575] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 57.956764][ T538] dummy_hcd dummy_hcd.0: remove, state 1 [ 57.962775][ T538] usb usb1: USB disconnect, device number 1 [ 57.969895][ T538] usb 1-1: USB disconnect, device number 10 [ 57.978614][ T538] rndis_host 1-1:1.0 usb1: unregister 'rndis_host' usb-dummy_hcd.0-1, RNDIS device [ 58.070881][ T538] dummy_hcd dummy_hcd.0: stopped [ 58.075983][ T538] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 58.245993][ T347] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 58.397406][ T347] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 58.406376][ T347] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 58.416856][ T347] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 58.426202][ T347] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 58.438704][ T347] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 58.448039][ T347] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 58.456236][ T347] usb 4-1: Product: syz [ 58.460456][ T347] usb 4-1: Manufacturer: syz [ 58.469370][ T347] cdc_wdm 4-1:1.0: skipping garbage [ 58.474625][ T347] cdc_wdm 4-1:1.0: skipping garbage [ 58.480786][ T347] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 58.486812][ T347] cdc_wdm 4-1:1.0: Unknown control protocol [ 58.563097][ T589] ehci-pci 0000:00:03.0: init 0000:00:03.0 fail, -16 [ 58.570288][ T589] ehci-pci 0000:00:03.0: probe with driver ehci-pci failed with error -16 [ 58.595572][ T589] ehci-pci 0000:00:05.0: EHCI Host Controller [ 58.603015][ T589] ehci-pci 0000:00:05.0: new USB bus registered, assigned bus number 1 [ 58.614250][ T589] ehci-pci 0000:00:05.0: can't setup: -110 [ 58.620304][ T589] ehci-pci 0000:00:05.0: USB bus 1 deregistered [ 58.635250][ T589] ehci-pci 0000:00:05.0: init 0000:00:05.0 fail, -110 [ 58.642313][ T589] ehci-pci 0000:00:05.0: probe with driver ehci-pci failed with error -110 [ 58.771545][ T480] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000a: 0000 [#1] PREEMPT SMP KASAN PTI [ 58.784199][ T480] KASAN: null-ptr-deref in range [0x0000000000000050-0x0000000000000057] [ 58.792783][ T480] CPU: 1 UID: 101 PID: 480 Comm: dhcpcd Not tainted syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 58.804158][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.814398][ T480] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 58.819641][ T480] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 29 82 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 58.839343][ T480] RSP: 0018:ffffc9000dcf7028 EFLAGS: 00010206 [ 58.845408][ T480] RAX: 000000000000000a RBX: ffff888119cadd10 RCX: dffffc0000000000 [ 58.853399][ T480] RDX: ffff888116958000 RSI: 0000000000000003 RDI: 0000000000000005 [ 58.861467][ T480] RBP: ffffc9000dcf70a0 R08: 000000005698aeea R09: 000000006e9452b8 [ 58.869442][ T480] R10: 0000000000000000 R11: ffffffff83b9b260 R12: 0000000000000050 [ 58.877435][ T480] R13: ffff888119cadd00 R14: 1ffff11023395ba0 R15: ffff888104b38c90 [ 58.885425][ T480] FS: 00007f33feb15740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.895311][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.901894][ T480] CR2: 00007ffe9ac74ff0 CR3: 00000001236ee000 CR4: 00000000003526b0 [ 58.909888][ T480] Call Trace: [ 58.913196][ T480] [ 58.916139][ T480] usb_ep_queue+0xe3/0x230 [ 58.920577][ T480] eth_start_xmit+0x9c1/0xf90 [ 58.925616][ T480] dev_hard_start_xmit+0x233/0x730 [ 58.930837][ T480] sch_direct_xmit+0x27d/0x9c0 [ 58.935606][ T480] ? __kasan_check_write+0x18/0x20 [ 58.940721][ T480] ? _raw_spin_trylock+0xb5/0x140 [ 58.945747][ T480] ? __cfi_sch_direct_xmit+0x10/0x10 [ 58.951031][ T480] ? __dev_queue_xmit+0x26c/0x3780 [ 58.956208][ T480] __dev_queue_xmit+0x1611/0x3780 [ 58.961243][ T480] ? __dev_queue_xmit+0x26c/0x3780 [ 58.966381][ T480] ? __cfi___dev_queue_xmit+0x10/0x10 [ 58.971760][ T480] ? __kasan_check_write+0x18/0x20 [ 58.976880][ T480] ? _copy_from_iter+0x6b5/0x1520 [ 58.981928][ T480] ? packet_parse_headers+0x7f0/0xb10 [ 58.987389][ T480] ? packet_parse_headers+0x801/0xb10 [ 58.992765][ T480] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 58.998657][ T480] ? skb_setup_tx_timestamp+0x210/0x210 [ 59.004208][ T480] packet_xmit+0x76/0x360 [ 59.008548][ T480] packet_sendmsg+0x435e/0x56b0 [ 59.013399][ T480] ? avc_has_perm_noaudit+0x26b/0x360 [ 59.018795][ T480] ? __kasan_check_read+0x15/0x20 [ 59.023823][ T480] ? rb_commit+0x753/0x7b0 [ 59.028243][ T480] ? selinux_socket_sendmsg+0x281/0x380 [ 59.033795][ T480] ? __cfi_selinux_socket_sendmsg+0x10/0x10 [ 59.039717][ T480] ? __cfi_packet_sendmsg+0x10/0x10 [ 59.045028][ T480] ? avc_has_perm_noaudit+0x26b/0x360 [ 59.050409][ T480] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 59.055704][ T480] ? security_socket_sendmsg+0x3d/0x100 [ 59.061256][ T480] ? __cfi_packet_sendmsg+0x10/0x10 [ 59.066453][ T480] sock_write_iter+0x445/0x490 [ 59.071224][ T480] ? __cfi_sock_write_iter+0x10/0x10 [ 59.076603][ T480] ? selinux_file_permission+0x8a4/0xb60 [ 59.082238][ T480] do_iter_readv_writev+0x62c/0x820 [ 59.087441][ T480] ? vfs_iter_read+0x5e0/0x5e0 [ 59.092305][ T480] ? bpf_lsm_file_permission+0xd/0x20 [ 59.097775][ T480] vfs_writev+0x4a5/0xe90 [ 59.102113][ T480] ? do_writev+0x2e0/0x2e0 [ 59.106538][ T480] ? __kasan_check_read+0x15/0x20 [ 59.111657][ T480] ? __kasan_check_read+0x15/0x20 [ 59.116682][ T480] ? ring_buffer_unlock_commit+0x473/0x5e0 [ 59.122592][ T480] ? __kasan_check_read+0x15/0x20 [ 59.127618][ T480] do_writev+0x151/0x2e0 [ 59.131875][ T480] ? vfs_readv+0xa00/0xa00 [ 59.136298][ T480] ? trace_event_raw_event_sys_enter+0xf5/0x130 [ 59.142554][ T480] __x64_sys_writev+0x81/0x90 [ 59.147235][ T480] x64_sys_call+0x1fbb/0x2ee0 [ 59.151911][ T480] do_syscall_64+0x57/0xf0 [ 59.156334][ T480] ? clear_bhb_loop+0x50/0xa0 [ 59.161063][ T480] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 59.166964][ T480] RIP: 0033:0x7f33feb9f407 [ 59.171383][ T480] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 59.191027][ T480] RSP: 002b:00007fff39484230 EFLAGS: 00000202 ORIG_RAX: 0000000000000014 [ 59.199555][ T480] RAX: ffffffffffffffda RBX: 00007f33feb15740 RCX: 00007f33feb9f407 [ 59.207620][ T480] RDX: 0000000000000002 RSI: 00007fff39484290 RDI: 0000000000000003 [ 59.215678][ T480] RBP: 0000000000000196 R08: 0000000000000000 R09: 0000000000000000 [ 59.223740][ T480] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fff394842d0 [ 59.231797][ T480] R13: 000055ea8ee33770 R14: 00007fff39484320 R15: 00007fff394944f0 [ 59.239773][ T480] [ 59.242791][ T480] Modules linked in: [ 59.246787][ T480] ---[ end trace 0000000000000000 ]--- [ 59.252262][ T480] RIP: 0010:dummy_queue+0x1c0/0x8e0 [ 59.257517][ T480] Code: fc ff df 80 3c 08 00 74 08 4c 89 e7 e8 29 82 26 fe 4d 8b 24 24 49 83 c4 50 4c 89 e0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <0f> b6 04 08 84 c0 0f 85 f5 05 00 00 45 8b 24 24 44 89 e6 83 e6 02 [ 59.266403][ T347] usb 3-1: USB disconnect, device number 8 [ 59.277182][ T480] RSP: 0018:ffffc9000dcf7028 EFLAGS: 00010206 [ 59.277214][ T480] RAX: 000000000000000a RBX: ffff888119cadd10 RCX: dffffc0000000000 [ 59.277232][ T480] RDX: ffff888116958000 RSI: 0000000000000003 RDI: 0000000000000005 [ 59.305366][ T480] RBP: ffffc9000dcf70a0 R08: 000000005698aeea R09: 000000006e9452b8 [ 59.313400][ T480] R10: 0000000000000000 R11: ffffffff83b9b260 R12: 0000000000000050 Aug 17 07:31:03 [ 59.321454][ T480] R13: ffff888119cadd00 R14: 1ffff11023395ba0 R15: ffff888104b38c90 syzkaller kern.a[ 59.331075][ T480] FS: 00007f33feb15740(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 lert kernel: [ [ 59.341505][ T480] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 58.784199][ T4[ 59.349517][ T480] CR2: 00007ffe9ac74ff0 CR3: 00000001236ee000 CR4: 00000000003526b0 80] KASAN: null-[ 59.358882][ T480] Kernel panic - not syncing: Fatal exception in interrupt [ 59.367464][ T480] Kernel Offset: disabled [ 59.371962][ T480] Rebooting in 86400 seconds..