last executing test programs: 26.095407137s ago: executing program 0 (id=1): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./dev\x00', &(0x7f0000000040)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/msr/parameters/allow_writes\x00', 0x2, 0x0) write(r0, &(0x7f0000000340)='on\x00', 0x2) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./dev/cpu/0/msr\x00', 0x2, 0x0) pwrite64(r1, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) r2 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./dev/cpu/1/msr\x00', 0x2, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/cpu/cpu1/online\x00', 0x2, 0x0) write(r3, &(0x7f0000000180)='0\x00', 0x1) pwrite64(r2, &(0x7f0000000200)='\x00\x00\x00\x00\x00\x00\x00\x00', 0x8, 0x1a0) write(r3, &(0x7f0000000180)='1\x00', 0x1) 25.99234004s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068aea3, &(0x7f0000000080)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000082, 0x0, 0x1}]}) 25.962981241s ago: executing program 0 (id=5): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='WINNCM\n\x00', 0x8) 25.878796813s ago: executing program 0 (id=6): r0 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3, 0x32, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = userfaultfd(0x1) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f0000000000/0x2000)=nil, 0x2000}, 0x1}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000140)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000180)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]}) (async) mprotect(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000001c0)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]}) (async) ioctl$UFFDIO_UNREGISTER(r3, 0x4010aa01, &(0x7f0000000200)={&(0x7f0000000000/0x2000)=nil, 0x2000}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000240)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]}) (async) madvise(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x4) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1001}]}) (async) mremap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000, 0x3, &(0x7f0000002000/0x2000)=nil) 25.878506943s ago: executing program 3 (id=4): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='core', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='mem', 0x3) 25.832555024s ago: executing program 2 (id=7): syz_usb_connect(0x0, 0x35, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ff000040f00a11670000010203010902230001010080fa0904000002ff0000000330000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r0 = socket(0x11, 0x3, 0x300) ioctl(r0, 0x8914, &(0x7f0000000100)="68736f300000000000000000000000000100"/32) sendto$packet(r0, &(0x7f0000000200)="00112233445566778899aabb08004500001c00000000401176c301010101010101020001000100080000", 0x2a, 0x0, &(0x7f0000000300)={0x11, 0x300, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 13.168569111s ago: executing program 2 (id=9): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040040402020001010203010902270001010080fa0904000003ffffff00070581034000020705820240000007050202400000"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mknod(&(0x7f0000000400)='ttyUSB0\x00', 0x81b6, 0xbc00) openat(0xffffffffffffff9c, &(0x7f0000000500)='ttyUSB0\x00', 0x2, 0x0) 13.090285973s ago: executing program 1 (id=11): mkdir(&(0x7f0000000000)='mysys\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='mysys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='mysys/bus/pci/devices/0000:00:02.0/config\x00', 0x0, 0x0) read(r0, &(0x7f0000000600), 0x40) 13.090105483s ago: executing program 1 (id=12): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ed) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0x1ed) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 13.089741823s ago: executing program 1 (id=13): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) r1 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x47f, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) 13.073864623s ago: executing program 0 (id=14): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/power/state\x00', 0x1, 0x0) write(r0, &(0x7f0000000000)='freeze\n', 0x7) write(r0, &(0x7f0000000000)='mem\n', 0x4) 13.034536684s ago: executing program 3 (id=15): r0 = syz_open_procfs(0x0, &(0x7f0000000040)='status\x00') openat(r0, &(0x7f0000000080)='root/sys/kernel/debug/ref_tracker/netns-7-4009754617-refcnt\x00', 0x0, 0x0) 12.974741946s ago: executing program 3 (id=16): syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000200000040ac05a8120000000000010902240001010000000904000001fff00000090581024000000000090502024000000000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/usb/devices/1-1:1.0/driver\x00', 0x0, 0x0) 102.808048ms ago: executing program 3 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./sys\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config\x00', 0x1c0) mount(0x0, &(0x7f0000000180)='./config\x00', &(0x7f00000001c0)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/functions/ncm.usb0/os_desc/interface.ncm/compatible_id\x00', 0x1, 0x0) write(r0, &(0x7f00000006c0)='WINNCM\n\x00', 0x8) 102.590728ms ago: executing program 0 (id=18): r0 = syz_open_dev$usbmon(&(0x7f0000001100), 0x0, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, 0x0) 102.047828ms ago: executing program 1 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff) mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/bus/pci/slots/1/attention\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/bus/pci/slots/0/attention\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/bus/pci/slots/0000:00:01.0/attention\x00', 0x0, 0x0) 98.627498ms ago: executing program 2 (id=20): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000001000)='.\x00', 0x0, 0x0) getdents64(r0, &(0x7f0000001040)=""/4096, 0x1000) 14.90681ms ago: executing program 1 (id=21): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) write$binfmt_elf64(r1, &(0x7f0000000100)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x1, 0x1, 0x3, 0x0, 0x2, 0x3e, 0x1, 0x10078, 0x40, 0x0, 0x0, 0x40, 0x38, 0x1, 0x40}, [{0x1, 0x7, 0x0, 0x10000, 0x10000, 0x1000, 0x1000, 0x1000}], "0f0104180f010c180f012418b83c0000000f0500"/4096}, 0x10b8) close(r1) execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000200), &(0x7f0000000300), 0x0) 14.6787ms ago: executing program 2 (id=22): mkdir(0x0, 0x1ff) mount(&(0x7f0000000200)=@filename='configfs\x00', &(0x7f0000000300)='./config\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000800)='./config/usb_gadget/g1\x00', 0x1ff) mkdir(&(0x7f0000000d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0) write(r0, &(0x7f0000000800)='1\x00', 0x2) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./config/usb_gadget/g1/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0) write(r1, &(0x7f0000000a00)='1\x00', 0x2) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/uac2.usb0/c_srate\x00', 0x1, 0x0) close(r2) r3 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./config/usb_gadget/g1/functions/uac2.usb0/p_srate\x00', 0x1, 0x0) write(r3, &(0x7f0000000e00)='48000\x00', 0x6) close(r3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0/c_ssize\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='2\x00', 0x2) close(r4) write(0xffffffffffffffff, &(0x7f0000001200)='2\x00', 0x2) close(0xffffffffffffffff) symlink(&(0x7f0000000f00)='./config/usb_gadget/g1/functions/uac2.usb0\x00', &(0x7f0000001000)='./config/usb_gadget/g1/configs/c.1/uac2.usb0\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000001300)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000001400)='dummy_udc.0\x00', 0xc) 14.49313ms ago: executing program 3 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ed) mount(&(0x7f00000000c0)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u\x00', 0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/u\x00') symlinkat(&(0x7f00000004c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000000540)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000580)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f00000005c0)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000000680)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f00000006c0)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') 14.39773ms ago: executing program 0 (id=24): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/power/pm_test\x00', 0x1, 0x0) write(r0, &(0x7f00000000c0)='core', 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/power/state\x00', 0x1, 0x0) write(r2, &(0x7f0000000180)='mem', 0x3) 12.50918ms ago: executing program 2 (id=25): r0 = socket$inet_icmp(0x2, 0x2, 0x1) close(r0) mkdir(&(0x7f0000000000)='config\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='config/usb_gadget/g1\x00', 0x1ff) r1 = openat(0xffffff9c, &(0x7f0000000400)='config/usb_gadget/g1/idVendor\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='0x1d6b\x00', 0x6) close(r1) r2 = openat(0xffffff9c, &(0x7f0000000600)='config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) write(r2, &(0x7f0000000700)='0x0104\x00', 0x6) close(r2) mkdir(&(0x7f0000000800)='config/usb_gadget/g1/strings/0x409\x00', 0x1ff) r3 = openat(0xffffff9c, &(0x7f0000000900)='config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x1, 0x0) write(r3, &(0x7f0000000a00)='fedcba9876543210\x00', 0x10) close(r3) mkdir(&(0x7f0000000b00)='config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdir(&(0x7f0000000c00)='config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) r4 = openat(0xffffff9c, &(0x7f0000000f00)='config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r4, &(0x7f0000001000)='dummy_udc\x00', 0x9) close(r4) nanosleep(&(0x7f0000001100)={0x1}, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000001200), 0x15, 0x2) r6 = syz_open_dev$usbfs(&(0x7f0000001300), 0x1f, 0x2) r7 = syz_open_dev$usbfs(&(0x7f0000001400), 0x16, 0x2) r8 = syz_open_dev$usbfs(&(0x7f0000001500), 0x20, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r5, 0x80045505, &(0x7f0000001600)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r6, 0x80045505, &(0x7f0000001700)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r7, 0x80045505, &(0x7f0000001800)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r8, 0x80045505, &(0x7f0000001900)=0x1) ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000001a00)) ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000001b00)) ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000001c00)) ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000001d00)) 6.706701ms ago: executing program 1 (id=26): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_test', 0x1, 0x0) write(r0, &(0x7f0000000100)='core\n\x00', 0x5) 0s ago: executing program 3 (id=27): r0 = syz_usb_connect$hid(0x2, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002090000402404345500010000000109021900010100e000090400000109000000070581030200ff"], &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000200)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) 0s ago: executing program 1 (id=28): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(&(0x7f0000000080)=@filename='sysfs\x00', &(0x7f00000000c0)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, &(0x7f0000000140)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:06.0/driver_override\x00', 0x1, 0x0) write(r0, &(0x7f00000001c0)='dwc3-pci\n\x00', 0x9) close(r0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:06.0/driver/unbind\x00', 0x1, 0x0) write(r1, &(0x7f0000000240)='0000:00:06.0\n\x00', 0xd) close(r1) r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0) write(r2, &(0x7f00000002c0)='0000:00:06.0\n\x00', 0xd) close(r2) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.20' (ED25519) to the list of known hosts. [ 21.522813][ T36] audit: type=1400 audit(1786957943.740:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.524026][ T286] cgroup: Unknown subsys name 'net' [ 21.545481][ T36] audit: type=1400 audit(1786957943.740:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.573552][ T36] audit: type=1400 audit(1786957943.780:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.573756][ T286] cgroup: Unknown subsys name 'devices' [ 21.688095][ T286] cgroup: Unknown subsys name 'hugetlb' [ 21.693732][ T286] cgroup: Unknown subsys name 'rlimit' [ 21.787275][ T36] audit: type=1400 audit(1786957944.010:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 21.813029][ T36] audit: type=1400 audit(1786957944.010:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 21.821568][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 21.840517][ T36] audit: type=1400 audit(1786957944.010:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 21.877205][ T36] audit: type=1400 audit(1786957944.080:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.903184][ T36] audit: type=1400 audit(1786957944.080:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.919370][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.929317][ T36] audit: type=1400 audit(1786957944.140:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 21.965610][ T36] audit: type=1400 audit(1786957944.140:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.302446][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.309637][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.317064][ T295] bridge_slave_0: entered allmulticast mode [ 23.323476][ T295] bridge_slave_0: entered promiscuous mode [ 23.332971][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.340056][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.347204][ T295] bridge_slave_1: entered allmulticast mode [ 23.353554][ T295] bridge_slave_1: entered promiscuous mode [ 23.363895][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.371006][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.378343][ T296] bridge_slave_0: entered allmulticast mode [ 23.385170][ T296] bridge_slave_0: entered promiscuous mode [ 23.395322][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.402671][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.409926][ T296] bridge_slave_1: entered allmulticast mode [ 23.416288][ T296] bridge_slave_1: entered promiscuous mode [ 23.444779][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.451944][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.459125][ T293] bridge_slave_0: entered allmulticast mode [ 23.465300][ T293] bridge_slave_0: entered promiscuous mode [ 23.475498][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.482861][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.490348][ T293] bridge_slave_1: entered allmulticast mode [ 23.496939][ T293] bridge_slave_1: entered promiscuous mode [ 23.528973][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.536092][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.543456][ T294] bridge_slave_0: entered allmulticast mode [ 23.550123][ T294] bridge_slave_0: entered promiscuous mode [ 23.559353][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.567274][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.574437][ T294] bridge_slave_1: entered allmulticast mode [ 23.581981][ T294] bridge_slave_1: entered promiscuous mode [ 23.715633][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.722960][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.731205][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.738628][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.771912][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.779107][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.786504][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.793529][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.801951][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.809258][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.816723][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.823964][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.858086][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.865466][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.873540][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.881166][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.889865][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.897424][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.904910][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.913732][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.921917][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.929784][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.937590][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.945252][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.963584][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.972967][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.983123][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.992301][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.036718][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.044378][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.054149][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.061752][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.070869][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.079407][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.091812][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100598][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.131966][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.139083][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.154506][ T296] veth0_vlan: entered promiscuous mode [ 24.164383][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.172029][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.200375][ T296] veth1_macvtap: entered promiscuous mode [ 24.234896][ T293] veth0_vlan: entered promiscuous mode [ 24.255354][ T295] veth0_vlan: entered promiscuous mode [ 24.268858][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.273832][ T295] veth1_macvtap: entered promiscuous mode [ 24.298217][ T294] veth0_vlan: entered promiscuous mode [ 24.305024][ T293] veth1_macvtap: entered promiscuous mode [ 24.355768][ T294] veth1_macvtap: entered promiscuous mode [ 24.379088][ T10] smpboot: CPU 1 is now offline [ 24.388309][ T312] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 24.432935][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.510682][ T322] Config c/1 of g1 needs at least one function. [ 24.519835][ T322] udc dummy_udc.0: failed to start g1: -22 [ 24.537143][ T322] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 24.548430][ T326] PM: suspend entry (deep) [ 24.550333][ T322] UDC core: g1: couldn't find an available UDC or it's busy [ 24.770796][ T309] Filesystems sync: 0.216 seconds [ 24.836186][ T62] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.843946][ T326] Freezing user space processes [ 24.849982][ T326] Freezing user space processes completed (elapsed 0.001 seconds) [ 24.858213][ T326] OOM killer disabled. [ 24.862301][ T326] Freezing remaining freezable tasks [ 30.016585][ T62] usb 3-1: device descriptor read/all, error -110 [ 30.146062][ T62] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 30.276073][ T62] usb 3-1: device descriptor read/64, error -32 [ 30.526051][ T62] usb 3-1: device descriptor read/64, error -32 [ 30.636185][ T62] usb usb3-port1: attempt power cycle [ 30.976072][ T62] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.996556][ T62] usb 3-1: device descriptor read/8, error -32 [ 31.126783][ T62] usb 3-1: device descriptor read/8, error -32 [ 31.236187][ T62] raw-gadget.0 gadget.2: failed to queue reset event [ 31.306152][ T62] raw-gadget.0 gadget.2: failed to queue resume event [ 31.366067][ T62] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.386207][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.393465][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.401003][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.408460][ T62] usb 3-1: device descriptor read/8, error -32 [ 31.546394][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.554840][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.562332][ C0] raw-gadget.0 gadget.2: ignoring, device is not running [ 31.569454][ T62] usb 3-1: device descriptor read/8, error -32 [ 31.686129][ T62] raw-gadget.0 gadget.2: failed to queue suspend event [ 31.693065][ T62] usb usb3-port1: unable to enumerate USB device [ 31.704254][ T326] Freezing remaining freezable tasks completed (elapsed 6.836 seconds) [ 31.712706][ T326] printk: Suspending console(s) (use no_console_suspend to debug) [ 31.746245][ T309] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 31.886399][ T326] ACPI: PM: Preparing to enter system sleep state S3 [ 31.886549][ T326] ACPI: PM: Saving platform NVS memory [ 31.886579][ T326] Disabling non-boot CPUs ... [ 31.889453][ T326] smpboot: CPU 1 is now offline [ 31.891448][ T326] PM: suspend debug: Waiting for 5 second(s). [ 36.941519][ T326] Enabling non-boot CPUs ... [ 36.941680][ T326] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 36.943905][ T326] CPU1 is up [ 36.944115][ T326] ACPI: PM: Waking up from system sleep state S3 [ 36.968401][ T335] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 37.219269][ T326] OOM killer enabled. [ 37.219910][ T326] Restarting tasks ... [ 37.220136][ T349] raw-gadget.0 gadget.2: failed to queue reset event [ 37.227405][ T326] done. [ 37.228041][ T326] random: crng reseeded on system resumption [ 37.233385][ T326] Resume cause unknown [ 37.234155][ T326] PM: suspend exit [ 37.238470][ T328] raw-gadget.0 gadget.2: failed to queue disconnect event [ 37.348465][ T367] PM: suspend entry (s2idle) [ 37.350294][ T367] PM: Unsupported test mode for suspend to idle, please choose none/freezer/devices/platform. [ 37.353332][ T367] PM: suspend exit [ 37.354168][ T367] PM: suspend entry (deep) [ 37.490646][ T335] Filesystems sync: 0.135 seconds [ 37.528692][ T367] Freezing user space processes [ 37.531168][ T367] Freezing user space processes completed (elapsed 0.001 seconds) [ 37.532764][ T367] OOM killer disabled. [ 37.533571][ T367] Freezing remaining freezable tasks [ 37.557372][ T349] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 37.567482][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 37.637632][ T10] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 42.717459][ T349] usb 3-1: device descriptor read/64, error -110 [ 42.718475][ T45] usb 2-1: device descriptor read/64, error -110 [ 42.797393][ T10] usb 4-1: device descriptor read/64, error -110 [ 42.957448][ T349] usb 3-1: device descriptor read/64, error -32 [ 42.958439][ T45] usb 2-1: device descriptor read/64, error -32 [ 43.037387][ T10] usb 4-1: device descriptor read/64, error -32 [ 43.197404][ T349] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 43.198660][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 43.277398][ T10] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.327457][ T349] usb 3-1: device descriptor read/64, error -32 [ 43.329314][ T45] usb 2-1: device descriptor read/64, error -32 [ 43.407405][ T10] usb 4-1: device descriptor read/64, error -32 [ 43.567462][ T45] usb 2-1: device descriptor read/64, error -32 [ 43.568816][ T349] usb 3-1: device descriptor read/64, error -32 [ 43.647401][ T10] usb 4-1: device descriptor read/64, error -32 [ 43.677475][ T45] usb usb2-port1: attempt power cycle [ 43.678470][ T349] usb usb3-port1: attempt power cycle [ 43.747556][ T349] raw-gadget.0 gadget.2: failed to queue reset event [ 43.748752][ T45] raw-gadget.1 gadget.1: failed to queue reset event [ 43.757538][ T10] usb usb4-port1: attempt power cycle [ 43.827400][ T10] raw-gadget.2 gadget.3: failed to queue resume event [ 43.828757][ T10] raw-gadget.2 gadget.3: failed to queue reset event [ 43.957417][ T45] raw-gadget.1 gadget.1: failed to queue resume event [ 43.958495][ T349] raw-gadget.0 gadget.2: failed to queue resume event [ 44.017441][ T349] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 44.018666][ T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 44.037415][ T10] raw-gadget.2 gadget.3: failed to queue resume event [ 44.037563][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.039956][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.041274][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.043366][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.045908][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.048747][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.050312][ T349] usb 3-1: device descriptor read/8, error -32 [ 44.057556][ T45] usb 2-1: device descriptor read/8, error -32 [ 44.097580][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.117749][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.119039][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.120310][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.126266][ T10] usb 4-1: device descriptor read/8, error -32 [ 44.187568][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.188644][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.190561][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.191541][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.192926][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.194303][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.195371][ T349] usb 3-1: device descriptor read/8, error -32 [ 44.196325][ T45] usb 2-1: device descriptor read/8, error -32 [ 44.257619][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.259089][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.260343][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.261532][ T10] usb 4-1: device descriptor read/8, error -32 [ 44.297425][ T45] raw-gadget.1 gadget.1: failed to queue suspend event [ 44.298666][ T349] raw-gadget.0 gadget.2: failed to queue suspend event [ 44.299706][ T349] raw-gadget.0 gadget.2: failed to queue reset event [ 44.300807][ T45] raw-gadget.1 gadget.1: failed to queue reset event [ 44.367409][ T10] raw-gadget.2 gadget.3: failed to queue suspend event [ 44.367520][ T349] raw-gadget.0 gadget.2: failed to queue resume event [ 44.368602][ T10] raw-gadget.2 gadget.3: failed to queue reset event [ 44.369496][ T45] raw-gadget.1 gadget.1: failed to queue resume event [ 44.427395][ T349] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 44.428714][ T45] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 44.437414][ T10] raw-gadget.2 gadget.3: failed to queue resume event [ 44.447600][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.449026][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.450372][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.451414][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.452646][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.453655][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.454747][ T349] usb 3-1: device descriptor read/8, error -32 [ 44.455659][ T45] usb 2-1: device descriptor read/8, error -32 [ 44.497367][ T10] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 44.517711][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.519025][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.520195][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.521244][ T10] usb 4-1: device descriptor read/8, error -32 [ 44.577679][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.578934][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.580237][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.581313][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.582502][ C1] raw-gadget.1 gadget.1: ignoring, device is not running [ 44.583466][ C1] raw-gadget.0 gadget.2: ignoring, device is not running [ 44.584500][ T45] usb 2-1: device descriptor read/8, error -32 [ 44.585373][ T349] usb 3-1: device descriptor read/8, error -32 [ 44.647569][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.649080][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.650385][ C0] raw-gadget.2 gadget.3: ignoring, device is not running [ 44.651490][ T10] usb 4-1: device descriptor read/8, error -32 [ 44.687491][ T349] raw-gadget.0 gadget.2: failed to queue suspend event [ 44.688593][ T45] raw-gadget.1 gadget.1: failed to queue suspend event [ 44.689605][ T45] usb usb2-port1: unable to enumerate USB device [ 44.690522][ T349] usb usb3-port1: unable to enumerate USB device [ 44.757417][ T10] raw-gadget.2 gadget.3: failed to queue suspend event [ 44.758742][ T10] usb usb4-port1: unable to enumerate USB device [ 44.763915][ T367] Freezing remaining freezable tasks completed (elapsed 7.229 seconds) [ 44.765222][ T367] printk: Suspending console(s) (use no_console_suspend to debug) [ 44.807586][ T343] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 44.966560][ T367] ACPI: PM: Preparing to enter system sleep state S3 [ 44.966721][ T367] ACPI: PM: Saving platform NVS memory [ 44.966786][ T367] Disabling non-boot CPUs ... [ 44.970159][ T367] smpboot: CPU 1 is now offline [ 44.972140][ T367] PM: suspend debug: Waiting for 5 second(s). [ 49.996410][ T367] Enabling non-boot CPUs ... [ 49.996558][ T367] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 49.998841][ T367] CPU1 is up [ 49.999009][ T367] ACPI: PM: Waking up from system sleep state S3 [ 50.025691][ T330] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 50.274180][ T367] OOM killer enabled. [ 50.274760][ T367] Restarting tasks ... done. [ 50.281550][ T367] random: crng reseeded on system resumption [ 50.282442][ T367] Resume cause unknown [ 50.293036][ T367] PM: suspend exit [ 50.300526][ T371] raw-gadget.2 gadget.3: failed to queue disconnect event [ 50.302064][ T365] raw-gadget.1 gadget.1: failed to queue disconnect event [ 50.311188][ T399] raw-gadget.0 gadget.2: failed to queue disconnect event [ 50.330431][ T36] kauditd_printk_skb: 45 callbacks suppressed [ 50.330448][ T36] audit: type=1400 audit(1786957972.426:119): avc: denied { read } for pid=403 comm="syz.0.18" name="usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.342938][ T36] audit: type=1400 audit(1786957972.436:120): avc: denied { open } for pid=403 comm="syz.0.18" path="/dev/usbmon0" dev="devtmpfs" ino=90 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.360692][ T36] audit: type=1400 audit(1786957972.446:121): avc: denied { ioctl } for pid=403 comm="syz.0.18" path="/dev/usbmon0" dev="devtmpfs" ino=90 ioctlcmd=0x9206 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 50.373802][ T413] process 'syz.1.21' launched './file0' with NULL argv: empty string added [ 50.378742][ T36] audit: type=1400 audit(1786957972.476:122): avc: denied { execute } for pid=411 comm="syz.1.21" name="file0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.391824][ T36] audit: type=1400 audit(1786957972.486:123): avc: denied { execute_no_trans } for pid=411 comm="syz.1.21" path="/7/file0" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 50.412461][ T418] PM: suspend entry (deep) [ 50.425723][ T36] audit: type=1400 audit(1786957972.526:124): avc: denied { create } for pid=419 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 50.431706][ T423] UDC core: g1: couldn't find an available UDC or it's busy [ 50.557383][ T345] Filesystems sync: 0.143 seconds [ 50.605440][ T418] Freezing user space processes [ 50.607746][ T418] Freezing user space processes completed (elapsed 0.001 seconds) [ 50.609013][ T418] OOM killer disabled. [ 50.609636][ T418] Freezing remaining freezable tasks [ 50.612748][ T418] Freezing remaining freezable tasks completed (elapsed 0.001 seconds) [ 50.614402][ T418] printk: Suspending console(s) (use no_console_suspend to debug) [ 50.693190][ T309] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 50.844441][ T418] ACPI: PM: Preparing to enter system sleep state S3 [ 50.844561][ T418] ACPI: PM: Saving platform NVS memory [ 50.844627][ T418] Disabling non-boot CPUs ... [ 50.847405][ T418] smpboot: CPU 1 is now offline [ 50.849216][ T418] PM: suspend debug: Waiting for 5 second(s). [ 55.884569][ T418] Enabling non-boot CPUs ... [ 55.884747][ T418] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 55.887164][ T418] CPU1 is up [ 55.887334][ T418] ACPI: PM: Waking up from system sleep state S3 [ 55.921674][ T46] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 56.079033][ T418] OOM killer enabled. [ 56.079778][ T418] Restarting tasks ... done. [ 56.082261][ T418] random: crng reseeded on system resumption [ 56.083219][ T418] Resume cause unknown [ 56.083929][ T418] PM: suspend exit [ 56.202893][ T432] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN PTI [ 56.206329][ T432] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 56.211217][ T432] CPU: 0 UID: 0 PID: 432 Comm: syz.1.28 Tainted: G S syzkaller #0 119f1c0cd44458c2ddc7f806e6d4d2dd11ae7dae [ 56.213662][ T432] Tainted: [S]=CPU_OUT_OF_SPEC [ 56.214383][ T432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.216069][ T432] RIP: 0010:software_node_register+0x3a/0x200 [ 56.217855][ T432] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 31 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 a8 f5 99 fe 4d 8b 34 24 4d 85 f6 4c [ 56.220863][ T432] RSP: 0000:ffffc9000b84f810 EFLAGS: 00010202 [ 56.221741][ T432] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 [ 56.223002][ T432] RDX: ffffc90002e87000 RSI: 0000000000009085 RDI: 0000000000009086 [ 56.224122][ T432] RBP: ffffc9000b84f850 R08: 0000000000000000 R09: 0000000000000000 [ 56.225496][ T432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 56.226928][ T432] R13: ffff8881317de810 R14: 0000000000000000 R15: 0000000000000000 [ 56.228057][ T432] FS: 00007f28eeade6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 56.229381][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.230423][ T432] CR2: 00007f28eeaddff8 CR3: 00000001027e2000 CR4: 00000000003526b0 [ 56.231815][ T432] Call Trace: [ 56.232279][ T432] [ 56.232715][ T432] device_add_software_node+0x1a7/0x310 [ 56.233535][ T432] ? dwc3_pci_probe+0x456/0xab0 [ 56.234452][ T432] dwc3_pci_probe+0x5a4/0xab0 [ 56.235166][ T432] ? __cfi_dwc3_pci_probe+0x10/0x10 [ 56.236130][ T432] ? __cfi_mutex_unlock+0x10/0x10 [ 56.236876][ T432] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 56.237726][ T432] pci_device_probe+0x282/0x440 [ 56.238488][ T432] ? __cfi_pci_device_probe+0x10/0x10 [ 56.239305][ T432] really_probe+0x2e1/0x8b0 [ 56.239948][ T432] __driver_probe_device+0x193/0x280 [ 56.240982][ T432] device_driver_attach+0xdb/0x1f0 [ 56.241807][ T432] bind_store+0x1dc/0x230 [ 56.242454][ T432] ? __cfi_bind_store+0x10/0x10 [ 56.243479][ T432] drv_attr_store+0x91/0xb0 [ 56.244165][ T432] ? __cfi_drv_attr_store+0x10/0x10 [ 56.245021][ T432] sysfs_kf_write+0x13e/0x160 [ 56.245766][ T432] ? __cfi_sysfs_kf_write+0x10/0x10 [ 56.246505][ T432] kernfs_fop_write_iter+0x319/0x510 [ 56.247257][ T432] vfs_write+0x75f/0xfd0 [ 56.247928][ T432] ? __cfi_vfs_write+0x10/0x10 [ 56.248621][ T432] ? __cfi_mutex_lock+0x10/0x10 [ 56.249378][ T432] ksys_write+0x145/0x260 [ 56.250281][ T432] ? xfd_validate_state+0x68/0x140 [ 56.251059][ T432] ? __cfi_ksys_write+0x10/0x10 [ 56.251891][ T432] ? __kasan_check_write+0x18/0x20 [ 56.252619][ T432] ? fpregs_restore_userregs+0x11c/0x260 [ 56.253547][ T432] __x64_sys_write+0x7f/0x90 [ 56.254200][ T432] x64_sys_call+0x271c/0x2ee0 [ 56.254973][ T432] do_syscall_64+0x57/0xf0 [ 56.255730][ T432] ? clear_bhb_loop+0x50/0xa0 [ 56.256396][ T432] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.257212][ T432] RIP: 0033:0x7f28edb9e0d9 [ 56.257851][ T432] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.260784][ T432] RSP: 002b:00007f28eeade028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 56.261994][ T432] RAX: ffffffffffffffda RBX: 00007f28ede26090 RCX: 00007f28edb9e0d9 [ 56.263379][ T432] RDX: 000000000000000d RSI: 00002000000002c0 RDI: 0000000000000003 [ 56.264540][ T432] RBP: 00007f28edc35024 R08: 0000000000000000 R09: 0000000000000000 [ 56.266169][ T432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.267563][ T432] R13: 00007f28ede26128 R14: 00007f28ede26090 R15: 00007ffcbd114e88 [ 56.268985][ T432] [ 56.269806][ T432] Modules linked in: [ 56.270865][ T432] ---[ end trace 0000000000000000 ]--- [ 56.272274][ T36] audit: type=1400 audit(1786957978.374:125): avc: denied { read } for pid=92 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 56.275940][ T36] audit: type=1400 audit(1786957978.374:126): avc: denied { search } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.277216][ T432] RIP: 0010:software_node_register+0x3a/0x200 [ 56.283988][ T36] audit: type=1400 audit(1786957978.374:127): avc: denied { write } for pid=92 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.286000][ T432] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 59 31 41 fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 a8 f5 99 fe 4d 8b 34 24 4d 85 f6 4c [ 56.288554][ T36] audit: type=1400 audit(1786957978.374:128): avc: denied { add_name } for pid=92 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 56.291558][ T432] RSP: 0000:ffffc9000b84f810 EFLAGS: 00010202 [ 56.295782][ T432] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000 [ 56.297205][ T432] RDX: ffffc90002e87000 RSI: 0000000000009085 RDI: 0000000000009086 [ 56.298908][ T432] RBP: ffffc9000b84f850 R08: 0000000000000000 R09: 0000000000000000 [ 56.300488][ T432] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000008 [ 56.301931][ T432] R13: ffff8881317de810 R14: 0000000000000000 R15: 0000000000000000 [ 56.309294][ T432] FS: 00007f28eeade6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 56.310967][ T432] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.312089][ T432] CR2: 00007f28edbeb7c0 CR3: 00000001027e2000 CR4: 00000000003526b0 [ 56.313547][ T432] Kernel panic - not syncing: Fatal exception [ 56.315232][ T432] Kernel Offset: disabled [ 56.316006][ T432] Rebooting in 86400 seconds..