last executing test programs: 41.892850902s ago: executing program 3 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107020900010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8e, 0x20, &(0x7f0000000220)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"') 41.891288422s ago: executing program 4 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='core\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='disk\n', 0x5) 41.884044782s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CAP_HYPERV_SYNIC2(r2, 0x4068aea3, &(0x7f0000000140)) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000280)={0x1, 0x0, [{0x40000071, 0x0, 0x40020}]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070}]}) 41.882972852s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000500)={&(0x7f0000040000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000002020000000000000000027f000000002b00"/380, 0xd8}) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) 41.748331266s ago: executing program 0 (id=1): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b00666f6f00"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000620afcff00000000bfa200000000000007020000fcffffff8500000001000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000002500)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 41.678978657s ago: executing program 2 (id=6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000040)={0xc0, 0x0, 0x10000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x1, 0x0, 0x10000, 0xfffffffffffffffd}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) mmap(0x0, 0x10000, 0x3, 0x11, r2, 0x40000) r3 = eventfd2(0x2, 0x0) read$eventfd(r3, &(0x7f0000000100), 0x8) ioctl$KVM_RESET_DIRTY_RINGS(r1, 0xaec7) 41.650098828s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) close(r0) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000040020402560001010203010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000440)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.657439046s ago: executing program 32 (id=1): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c0000001c000000000000000000000104000000200000000500000001000004040000000100000001000000000000001800000002000004080000001300000002000000000000000100000001000000200000000076616c006270665f7370696e5f6c6f636b006c6f636b00666f6f00"], 0x0, 0x80}, 0x28) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0x0, 0x0, '\x00', 0x0, r0, 0x1, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="18010000", @ANYRES32=r1, @ANYBLOB="0000000000000000620afcff00000000bfa200000000000007020000fcffffff8500000001000000b7000000000000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x2, 0x1000, &(0x7f0000002500)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 15.599967457s ago: executing program 33 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./tracing\x00', &(0x7f0000000080)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000100)="e800000000c3", 0x6) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x1, 0x0) write(r1, &(0x7f0000000180)='p:p1 ./file0:0x0', 0x10) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing/events/uprobes/p1/enable\x00', 0x1, 0x0) write(r2, &(0x7f0000000240)='1\x00', 0x2) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x5, 0x12, r0, 0x0) mmap(&(0x7f0000020000/0x1000)=nil, 0x1000, 0x3, 0x132, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x11, &(0x7f0000030000), 0x1000, 0x0, 0x0, 0x0) ptrace(0x10, r3) wait4(r3, 0x0, 0x0, 0x0) ptrace$setregset(0x4205, r3, 0x1, &(0x7f0000000500)={&(0x7f0000040000)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000330000000000000002020000000000000000027f000000002b00"/380, 0xd8}) ptrace$cont(0x7, r3, 0x0, 0x0) wait4(r3, 0x0, 0x0, 0x0) 15.565054028s ago: executing program 34 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/gspca_m5602/parameters/force_sensor\x00', 0x1, 0x0) write(r0, &(0x7f0000000400)='4', 0x1) close(r0) r1 = syz_usb_connect(0x0, 0x2b, &(0x7f0000000700)=ANY=[@ANYBLOB="1201000200000040020402560001010203010902190001010080320904000001ffffff0007058102000200"], 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000240)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000340)={0x84, &(0x7f0000000440)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, 0x0, &(0x7f0000000740)={0x84, &(0x7f0000000800)={0x40, 0x4, 0x2, "3a14"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 15.542033429s ago: executing program 35 (id=4): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = syz_usb_connect(0x3, 0x4e, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000401107020900010000000109023c0001010080fa0904000006ff00000007058e0200020007050e02000200070501020002000705030200020007058d0200020007050d02000200"], 0x0) syz_usb_ep_write(r0, 0x8e, 0x20, &(0x7f0000000220)='\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"\"') 15.522374939s ago: executing program 36 (id=5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000040)='core\n', 0x5) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000080)='disk\n', 0x5) 14.201583812s ago: executing program 5 (id=8): r0 = syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810200020007050202000200"], 0x0) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000100)=""/64) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000200)=""/64) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000300)=""/64) (async) syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000400)=""/64) (async) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000500)="0102010400000000") (async) syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000600)="0104020808010008ffffffff") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000700)="0105030100") (async) syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000800)="0108040100") (async) nanosleep(&(0x7f0000000900)={0x1}, 0x0) 14.149438563s ago: executing program 7 (id=10): r0 = syz_usb_connect(0x0, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002e00101408780250001000000000109022700010100c0320904000003e0010100070581034000010705820240000007050202400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="ff06878003010100") 14.070144775s ago: executing program 9 (id=12): syz_usb_connect$midi(0x3, 0x31, &(0x7f0000000740)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x2a39, 0x3fd4, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x7, 0x80, 0x1, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x30, 0xa, [], [{{0x9, 0x5, 0x828f68345dc74cce, 0x8, 0x3e7, 0x3, 0x85, 0x3, {0x4}}}]}}}}}]}}, 0x0) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040990434120001000000010902240001010080320904000001ff0000000b2403010102010102010007050102400000"], 0x0) 14.023819926s ago: executing program 6 (id=9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/power/pm_test\x00', 0x2, 0x0) write(r1, &(0x7f0000000600)='freezer\n', 0x8) r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./sys/power/state\x00', 0x2, 0x0) write(r2, &(0x7f0000000800)='disk\n', 0x5) 13.942951028s ago: executing program 8 (id=13): delete_module(&(0x7f0000000000)='dwc3\x00', 0x0) delete_module(&(0x7f0000000100)='dwc3_pci\x00', 0x0) 13.942805348s ago: executing program 8 (id=14): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x1234, 0x5678, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x19, 0x2) r2 = syz_open_dev$usbfs(&(0x7f0000000200), 0x19, 0x2) ioctl$USBDEVFS_SETCONFIGURATION(r1, 0x80045505, &(0x7f0000000400)=0x1) ioctl$USBDEVFS_SETCONFIGURATION(r2, 0x80045505, &(0x7f0000000400)=0x1) syz_usb_disconnect(r0) 1.003132526s ago: executing program 9 (id=15): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./dev\x00', &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000200000040c30b01000100000000010902200001010080320904000002ffffff000705810200020007050202000200"], 0x0) nanosleep(&(0x7f0000000140)={0x1}, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./dev/ttyUSB0\x00', 0x802, 0x0) 988.619736ms ago: executing program 7 (id=16): syz_usb_connect(0x0, 0x55, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002020000402505a7a400010000000109024300020100c032090400000102020000052400100104240202052406000105240100010705810308000a09040100020a0000000705820240000007050302400000"], 0x0) nanosleep(&(0x7f0000000300)={0x1, 0xa}, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x15, 0x2) ioctl$USBDEVFS_RESET(r0, 0x5514) 940.259637ms ago: executing program 6 (id=17): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/uhci_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000140)='0000:00:1d.0', 0xc) write(r0, &(0x7f0000000180)='0000:00:1d.1', 0xc) write(r0, &(0x7f00000001c0)='0000:00:1d.2', 0xc) write(r0, &(0x7f0000000200)='0000:00:1a.0', 0xc) write(r0, &(0x7f0000000240)='0000:00:1a.1', 0xc) write(r0, &(0x7f0000000280)='0000:00:1a.2', 0xc) r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/bus/pci/drivers/uhci_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f0000000300)='0000:00:1d.0', 0xc) write(r1, &(0x7f0000000340)='0000:00:1d.1', 0xc) write(r1, &(0x7f0000000380)='0000:00:1d.2', 0xc) write(r1, &(0x7f00000003c0)='0000:00:1a.0', 0xc) write(r1, &(0x7f0000000400)='0000:00:1a.1', 0xc) write(r1, &(0x7f0000000440)='0000:00:1a.2', 0xc) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/bus/pci/drivers/ehci-pci/unbind\x00', 0x1, 0x0) write(r2, &(0x7f00000004c0)='0000:00:1d.7', 0xc) write(r2, &(0x7f0000000500)='0000:00:1a.7', 0xc) r3 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/drivers/ehci-pci/bind\x00', 0x1, 0x0) write(r3, &(0x7f0000000580)='0000:00:1d.7', 0xc) write(r3, &(0x7f00000005c0)='0000:00:1a.7', 0xc) r4 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/pci/drivers/xhci-hcd/unbind\x00', 0x1, 0x0) write(r4, &(0x7f0000000640)='0000:00:14.0', 0xc) r5 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./sys/bus/pci/drivers/xhci-hcd/bind\x00', 0x1, 0x0) write(r5, &(0x7f00000006c0)='0000:00:14.0', 0xc) 940.029857ms ago: executing program 5 (id=18): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) r0 = openat(0xffffff9c, &(0x7f0000000040)='file0\x00', 0x42, 0x1ff) write(r0, &(0x7f0000000080)='/dev/raw-gadget\x00', 0x10) close(r0) r1 = openat(0xffffff9c, &(0x7f00000000c0)='file0\x00', 0x0, 0x0) read(r1, &(0x7f0000000000)=""/16, 0x10) r2 = syz_open_dev$hidraw(0xfffffffffffffffc, 0x0, 0x2) ioctl(r2, 0x41015500, &(0x7f0000000100)='cdnsp-gadget\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00P') 939.890377ms ago: executing program 8 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000240)='./config/usb_gadget/g1/functions/ecm.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/ecm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000380)='dummy_udc.0\n\x00', 0xc) nanosleep(&(0x7f0000000300)={0x1}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x1, 0x0) write(r1, &(0x7f0000000500)='1\n\x00', 0x2) nanosleep(&(0x7f0000000300)={0x0, 0x5f5e100}, 0x0) write(r1, &(0x7f0000000500)='0\n\x00', 0x2) 862.963669ms ago: executing program 6 (id=20): syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x97, 0xff, 0x82, 0x8, 0x2058, 0x1005, 0xc19b, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, "", [{{0x9, 0x4, 0x8f, 0x0, 0x0, 0xbf, 0x57, 0x5a}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x10c4, 0xea60, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x40}}]}}]}}]}}, 0x0) 115.592508ms ago: executing program 8 (id=21): mkdir(&(0x7f0000000100)='./config_test\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./config_test\x00', &(0x7f0000000400)='configfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000500)='./config_test/usb_gadget/g3\x00', 0x1ff) rmdir(&(0x7f0000000600)='./config_test/usb_gadget/g3\x00') getuid() 58.832979ms ago: executing program 8 (id=22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000480)="f00fb196000001000fc7ad094800000f07b8003000000f23c80f21f835000040000f23f82666d99e00d0ffff8fc860ece7d80f01c3c4c279ad210f0d020f20d835080000000f22d8", 0x48}], 0x1, 0x4, 0x0, 0x0) mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, 0x1000, 0x3, 0x11, r2, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_PRE_FAULT_MEMORY(r2, 0xc040aed5, &(0x7f0000000180)={0x0, 0x2000}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x1, 0x0, 0x0, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x100) 0s ago: executing program 8 (id=23): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./gadget\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./gadget\x00', &(0x7f0000000100)='gadgetfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./gadget/dummy_udc\x00', 0x2, 0x0) write(r0, &(0x7f0000000180)="000000000902200001010080320904000002ff00000007058102400000070502024000000902200001010080320904000002ff0000000705810200020007050202000200120100020000004099999999000100000001", 0x56) nanosleep(&(0x7f0000000300)={0x0, 0x1ad27480}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./gadget/ep1in-bulk\x00', 0x2, 0x0) write(r1, &(0x7f0000000240)="010000000705810240000007058102000200", 0x12) write(r1, &(0x7f0000000280)='hello', 0x5) nanosleep(&(0x7f0000000400)={0x0, 0x1dcd6500}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.198' (ED25519) to the list of known hosts. [ 29.367299][ T30] audit: type=1400 audit(1786959867.152:64): avc: denied { mounton } for pid=277 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 29.370923][ T277] cgroup: Unknown subsys name 'net' [ 29.389977][ T30] audit: type=1400 audit(1786959867.152:65): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.417425][ T30] audit: type=1400 audit(1786959867.182:66): avc: denied { unmount } for pid=277 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 29.417961][ T277] cgroup: Unknown subsys name 'devices' [ 29.565125][ T277] cgroup: Unknown subsys name 'hugetlb' [ 29.570822][ T277] cgroup: Unknown subsys name 'rlimit' [ 29.680893][ T30] audit: type=1400 audit(1786959867.462:67): avc: denied { setattr } for pid=277 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 29.704223][ T30] audit: type=1400 audit(1786959867.462:68): avc: denied { mounton } for pid=277 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 29.729191][ T30] audit: type=1400 audit(1786959867.462:69): avc: denied { mount } for pid=277 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 29.743873][ T280] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 29.761480][ T30] audit: type=1400 audit(1786959867.552:70): avc: denied { relabelto } for pid=280 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.786969][ T30] audit: type=1400 audit(1786959867.552:71): avc: denied { write } for pid=280 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.815364][ T30] audit: type=1400 audit(1786959867.602:72): avc: denied { read } for pid=277 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 29.816791][ T277] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 29.840908][ T30] audit: type=1400 audit(1786959867.602:73): avc: denied { open } for pid=277 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 30.483694][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.490791][ T286] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.498458][ T286] device bridge_slave_0 entered promiscuous mode [ 30.507060][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.514373][ T286] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.521797][ T286] device bridge_slave_1 entered promiscuous mode [ 30.591569][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.598713][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.606247][ T288] device bridge_slave_0 entered promiscuous mode [ 30.616391][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.623679][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.631108][ T288] device bridge_slave_1 entered promiscuous mode [ 30.652796][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.659953][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.667495][ T290] device bridge_slave_0 entered promiscuous mode [ 30.703086][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.710171][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.717849][ T290] device bridge_slave_1 entered promiscuous mode [ 30.734628][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.741710][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.749474][ T287] device bridge_slave_0 entered promiscuous mode [ 30.760317][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.767522][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.775116][ T287] device bridge_slave_1 entered promiscuous mode [ 30.873683][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.880774][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.888363][ T289] device bridge_slave_0 entered promiscuous mode [ 30.898467][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.905659][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.913220][ T289] device bridge_slave_1 entered promiscuous mode [ 31.009490][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.016598][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.023945][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.030990][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.051585][ T286] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.058688][ T286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.066046][ T286] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.073104][ T286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.084909][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.091984][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.099522][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.106588][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.121851][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.129957][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.137292][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.144346][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.157112][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.164318][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.171807][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.178898][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.228425][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.236182][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.244019][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.251950][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.259479][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.266670][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.274551][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.281744][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.289078][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.296348][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.304471][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.311740][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.333833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.341428][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.349869][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.356969][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.364749][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.373241][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.380315][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.387752][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.395977][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.403042][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.410444][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.418679][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.425748][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.453979][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.466592][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.474934][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.482345][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.490815][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.497926][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.505474][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.514979][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.522299][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.529919][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.538556][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.545796][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.553277][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.561600][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.568717][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.576588][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.585063][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.592549][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.600035][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.608238][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.615308][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.622714][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.630773][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.638758][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.646900][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.669835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.678624][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.687020][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.695228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.703623][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.711683][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.720112][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.728180][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.736374][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.755253][ T290] device veth0_vlan entered promiscuous mode [ 31.763764][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.772511][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.780257][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.788527][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.797148][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.816933][ T289] device veth0_vlan entered promiscuous mode [ 31.824354][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.832460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.840212][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.848499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.857054][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.865422][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.873515][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.881872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.897790][ T287] device veth0_vlan entered promiscuous mode [ 31.907981][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.916276][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.924952][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.933778][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.941265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.954305][ T288] device veth0_vlan entered promiscuous mode [ 31.964522][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.972537][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.980865][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.989688][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.998277][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.005893][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.018342][ T289] device veth1_macvtap entered promiscuous mode [ 32.026393][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.034988][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.044769][ T287] device veth1_macvtap entered promiscuous mode [ 32.057417][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.069235][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.077760][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.088480][ T290] device veth1_macvtap entered promiscuous mode [ 32.099692][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.108113][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.116735][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 32.124872][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.133912][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.141437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.149482][ T286] device veth0_vlan entered promiscuous mode [ 32.158706][ T288] device veth1_macvtap entered promiscuous mode [ 32.167218][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.175176][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.183866][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.192224][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.200825][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.209427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.217877][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.227997][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.236585][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.258914][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.267254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.275717][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.284165][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.292545][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.301347][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.315213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.323831][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.346429][ T290] request_module fs-gadgetfs succeeded, but still no fs? [ 32.364635][ T286] device veth1_macvtap entered promiscuous mode [ 32.401048][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.413441][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.436722][ T313] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 32.453844][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.467583][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.478474][ T308] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.512049][ T313] PM: hibernation: hibernation entry [ 32.732995][ T26] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 32.748274][ T313] Filesystems sync: 0.208 seconds [ 32.753614][ T313] Freezing user space processes ... (elapsed 0.067 seconds) done. [ 32.829387][ T313] OOM killer disabled. [ 32.842685][ T313] PM: hibernation: Preallocating image memory [ 33.093078][ T306] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 35.952040][ T313] PM: hibernation: Allocated 523693 pages for snapshot [ 35.958979][ T313] PM: hibernation: Allocated 2094772 kbytes in 3.10 seconds (675.73 MB/s) [ 35.967682][ T313] Freezing remaining freezable tasks ... [ 37.913126][ T26] usb 4-1: device descriptor read/64, error -110 [ 38.323017][ T306] usb 3-1: device descriptor read/64, error -110 [ 38.663002][ T306] usb 3-1: device descriptor read/64, error -32 [ 38.933005][ T306] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 39.143015][ T306] usb 3-1: device descriptor read/64, error -32 [ 39.473102][ T306] usb 3-1: device descriptor read/64, error -32 [ 39.593046][ T306] usb usb3-port1: attempt power cycle [ 40.003006][ T306] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 40.113072][ T306] usb 3-1: device descriptor read/8, error -32 [ 40.323009][ T306] usb 3-1: device descriptor read/8, error -32 [ 40.593044][ T306] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 40.713031][ T306] usb 3-1: device descriptor read/8, error -32 [ 40.923034][ T306] usb 3-1: device descriptor read/8, error -32 [ 41.043297][ T306] usb usb3-port1: unable to enumerate USB device [ 43.323013][ T26] usb 4-1: device descriptor read/64, error -32 [ 43.593403][ T26] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 43.803010][ T26] usb 4-1: device descriptor read/64, error -32 [ 44.132993][ T26] usb 4-1: device descriptor read/64, error -32 [ 44.253059][ T26] usb usb4-port1: attempt power cycle [ 44.663001][ T26] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 44.773011][ T26] usb 4-1: device descriptor read/8, error -32 [ 44.983032][ T26] usb 4-1: device descriptor read/8, error -32 [ 45.252985][ T26] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 45.363024][ T26] usb 4-1: device descriptor read/8, error -32 [ 45.583008][ T26] usb 4-1: device descriptor read/8, error -32 [ 45.703261][ T26] usb usb4-port1: unable to enumerate USB device [ 45.711303][ T313] (elapsed 9.743 seconds) done. [ 45.717154][ T313] printk: Suspending console(s) (use no_console_suspend to debug) [ 45.949715][ T313] ACPI: PM: Preparing to enter system sleep state S4 [ 45.949912][ T313] ACPI: PM: Saving platform NVS memory [ 45.949921][ T313] Disabling non-boot CPUs ... [ 45.958643][ T313] smpboot: CPU 1 is now offline [ 45.961668][ T313] PM: hibernation: Creating image: [ 46.848705][ T313] PM: hibernation: Need to copy 504502 pages [ 48.341999][ T313] PM: hibernation: Image created (504502 pages copied) [ 48.342054][ T313] kvm-clock: cpu 0, msr 70c5001, primary cpu clock, resume [ 48.342179][ T313] ACPI: PM: Restoring platform NVS memory [ 48.342193][ T313] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 48.357239][ T313] Enabling non-boot CPUs ... [ 48.357402][ T313] x86: Booting SMP configuration: [ 48.357407][ T313] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 48.357723][ T0] kvm-clock: cpu 1, msr 70c5041, secondary cpu clock [ 48.358647][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 48.360690][ T313] CPU1 is up [ 48.361935][ T313] ACPI: PM: Waking up from system sleep state S4 [ 48.628669][ T313] PM: Using 1 thread(s) for compression [ 48.631018][ T313] PM: Compressing and saving image data (505488 pages)... [ 48.633912][ T313] PM: Image saving progress: 0% [ 51.211903][ T313] PM: Image saving progress: 10% [ 52.751414][ T313] PM: Image saving progress: 20% [ 54.107861][ T313] PM: Image saving progress: 30% [ 55.276680][ T313] PM: Image saving progress: 40% [ 56.300785][ T313] PM: Image saving progress: 50% [ 56.976041][ T313] PM: hibernation: Wrote 2021952 kbytes in 8.34 seconds (242.44 MB/s) [ 58.572874][ T313] OOM killer enabled. [ 58.574478][ T313] Restarting tasks ... done. [ 58.594357][ T313] PM: hibernation: hibernation exit [ 58.598552][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 58.598585][ T30] audit: type=1400 audit(1786959896.419:114): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 58.629368][ T30] audit: type=1400 audit(1786959896.449:115): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 58.740834][ T286] syz-executor (286) used greatest stack depth: 21440 bytes left [ 58.896761][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.899237][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.909835][ T350] device bridge_slave_0 entered promiscuous mode [ 58.913331][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.915864][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.918857][ T350] device bridge_slave_1 entered promiscuous mode [ 59.033455][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.036069][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.039332][ T352] device bridge_slave_0 entered promiscuous mode [ 59.043989][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.046707][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.049393][ T352] device bridge_slave_1 entered promiscuous mode [ 59.073048][ T30] audit: type=1400 audit(1786959896.899:116): avc: denied { create } for pid=350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.088138][ T30] audit: type=1400 audit(1786959896.909:117): avc: denied { write } for pid=350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.096221][ T30] audit: type=1400 audit(1786959896.909:118): avc: denied { read } for pid=350 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 59.111403][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.114340][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.117469][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.120578][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.154783][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.157644][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.160931][ T357] device bridge_slave_0 entered promiscuous mode [ 59.166890][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.169607][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.172926][ T357] device bridge_slave_1 entered promiscuous mode [ 59.196595][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.199230][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.202340][ T356] device bridge_slave_0 entered promiscuous mode [ 59.207938][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.210182][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.213444][ T356] device bridge_slave_1 entered promiscuous mode [ 59.261791][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.264157][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.266697][ T358] device bridge_slave_0 entered promiscuous mode [ 59.282874][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.285203][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.287899][ T358] device bridge_slave_1 entered promiscuous mode [ 59.304394][ T339] device bridge_slave_1 left promiscuous mode [ 59.306587][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.309755][ T339] device bridge_slave_0 left promiscuous mode [ 59.312242][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.315840][ T339] device veth1_macvtap left promiscuous mode [ 59.318263][ T339] device veth0_vlan left promiscuous mode [ 59.489872][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.493209][ T338] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.495896][ T338] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.506447][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.509465][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.512035][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.524653][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.528729][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.531511][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.547246][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.553632][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.584376][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.597460][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.600866][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.603470][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.606286][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.628213][ T350] device veth0_vlan entered promiscuous mode [ 59.631507][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.634991][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.638161][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.641050][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.643952][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.646885][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.649915][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.652886][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.655773][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.674966][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.679523][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.682844][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.685394][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.688206][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.692319][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.695149][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.697930][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.701707][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.704375][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.707085][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.710536][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.713715][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.716390][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.719181][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.722522][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.725706][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.740877][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 59.744026][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 59.746929][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 59.750219][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 59.753779][ T338] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.756410][ T338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.759411][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 59.762943][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 59.766075][ T338] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.773611][ T338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.783450][ T350] device veth1_macvtap entered promiscuous mode [ 59.788655][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 59.791844][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.795010][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.798076][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.801491][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.804584][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.824965][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.828313][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.831544][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 59.834482][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 59.837634][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.841303][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.844079][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 59.847003][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 59.862349][ T358] device veth0_vlan entered promiscuous mode [ 59.871157][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.874525][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.877746][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.880930][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.884202][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.887284][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.891589][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.895032][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.897859][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 59.901030][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 59.903922][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 59.907017][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 59.910750][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 59.914092][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 59.917270][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 59.920805][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 59.924007][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.927066][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.929785][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.933298][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.936272][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 59.938935][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 59.942493][ T352] device veth0_vlan entered promiscuous mode [ 59.966809][ T356] device veth0_vlan entered promiscuous mode [ 59.975381][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.979029][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 59.989082][ T352] device veth1_macvtap entered promiscuous mode [ 59.992395][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 59.995300][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 59.998402][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.001636][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.004931][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.009906][ T358] device veth1_macvtap entered promiscuous mode [ 60.032027][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.034881][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.038024][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.041383][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.044672][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.055871][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.059339][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.062848][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.065887][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.068988][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.073425][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.082409][ T357] device veth0_vlan entered promiscuous mode [ 60.087581][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.090553][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.109523][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.112854][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.115860][ T356] device veth1_macvtap entered promiscuous mode [ 60.140106][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.143403][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.146637][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.150099][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.153763][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.158411][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.161370][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.184747][ T357] device veth1_macvtap entered promiscuous mode [ 60.191679][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.195246][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.199078][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.215649][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.219699][ T338] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.259915][ T380] netlink: 8 bytes leftover after parsing attributes in process `syz.8.11'. [ 60.263949][ T30] audit: type=1400 audit(1786959898.089:119): avc: denied { ioctl } for pid=377 comm="syz.8.11" path="socket:[16911]" dev="sockfs" ino=16911 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.279298][ T379] PM: hibernation: hibernation entry [ 60.294454][ T30] audit: type=1400 audit(1786959898.119:120): avc: denied { sys_module } for pid=382 comm="syz.8.13" capability=16 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 60.350403][ T58] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 60.400364][ T324] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 60.411728][ T339] device bridge_slave_1 left promiscuous mode [ 60.413937][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.416996][ T339] device bridge_slave_0 left promiscuous mode [ 60.419260][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.423226][ T339] device bridge_slave_1 left promiscuous mode [ 60.425796][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.428893][ T339] device bridge_slave_0 left promiscuous mode [ 60.431716][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.435897][ T339] device bridge_slave_1 left promiscuous mode [ 60.438468][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.442239][ T339] device bridge_slave_0 left promiscuous mode [ 60.444662][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.448902][ T339] device bridge_slave_1 left promiscuous mode [ 60.451720][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.454966][ T339] device bridge_slave_0 left promiscuous mode [ 60.457253][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.463101][ T339] device veth1_macvtap left promiscuous mode [ 60.465243][ T339] device veth0_vlan left promiscuous mode [ 60.467573][ T339] device veth1_macvtap left promiscuous mode [ 60.470085][ T339] device veth0_vlan left promiscuous mode [ 60.473106][ T339] device veth1_macvtap left promiscuous mode [ 60.475112][ T339] device veth0_vlan left promiscuous mode [ 60.477329][ T339] device veth1_macvtap left promiscuous mode [ 60.479519][ T339] device veth0_vlan left promiscuous mode [ 60.481540][ T20] usb 10-1: new high-speed USB device number 2 using dummy_hcd [ 60.489392][ T379] Filesystems sync: 0.208 seconds [ 60.492631][ T379] Freezing user space processes ... (elapsed 0.001 seconds) done. [ 60.497065][ T379] OOM killer disabled. [ 60.511109][ T379] PM: hibernation: Preallocating image memory [ 60.610405][ T306] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 63.516314][ T379] PM: hibernation: Allocated 528338 pages for snapshot [ 63.518723][ T379] PM: hibernation: Allocated 2113352 kbytes in 3.00 seconds (704.45 MB/s) [ 63.522502][ T379] Freezing remaining freezable tasks ... [ 65.670751][ T20] usb 10-1: device descriptor read/64, error -110 [ 65.690411][ T58] usb 6-1: device descriptor read/all, error -110 [ 65.840438][ T306] usb 9-1: device descriptor read/64, error -110 [ 65.846907][ T58] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 65.920417][ T324] usb 8-1: device descriptor read/all, error -110 [ 66.010388][ T20] usb 10-1: device descriptor read/64, error -32 [ 66.060414][ T58] usb 6-1: device descriptor read/64, error -32 [ 66.070580][ T324] usb 8-1: new high-speed USB device number 3 using dummy_hcd [ 66.170381][ T306] usb 9-1: device descriptor read/64, error -32 [ 66.280385][ T20] usb 10-1: new high-speed USB device number 3 using dummy_hcd [ 66.300443][ T324] usb 8-1: device descriptor read/64, error -32 [ 66.391496][ T58] usb 6-1: device descriptor read/64, error -32 [ 66.440400][ T306] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 66.490473][ T20] usb 10-1: device descriptor read/64, error -32 [ 66.510508][ T58] usb usb6-port1: attempt power cycle [ 66.640352][ T324] usb 8-1: device descriptor read/64, error -32 [ 66.650415][ T306] usb 9-1: device descriptor read/64, error -32 [ 66.760539][ T324] usb usb8-port1: attempt power cycle [ 66.820373][ T20] usb 10-1: device descriptor read/64, error -32 [ 66.920400][ T58] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 66.940473][ T20] usb usb10-port1: attempt power cycle [ 66.980378][ T306] usb 9-1: device descriptor read/64, error -32 [ 67.030615][ T58] usb 6-1: device descriptor read/8, error -32 [ 67.100445][ T306] usb usb9-port1: attempt power cycle [ 67.170382][ T324] usb 8-1: new high-speed USB device number 4 using dummy_hcd [ 67.240454][ T58] usb 6-1: device descriptor read/8, error -32 [ 67.280399][ T324] usb 8-1: device descriptor read/8, error -32 [ 67.350582][ T20] usb 10-1: new high-speed USB device number 4 using dummy_hcd [ 67.460419][ T20] usb 10-1: device descriptor read/8, error -32 [ 67.490379][ T324] usb 8-1: device descriptor read/8, error -32 [ 67.510403][ T58] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 67.518024][ T306] usb 9-1: new high-speed USB device number 4 using dummy_hcd [ 67.620379][ T58] usb 6-1: device descriptor read/8, error -32 [ 67.630387][ T306] usb 9-1: device descriptor read/8, error -32 [ 67.670385][ T20] usb 10-1: device descriptor read/8, error -32 [ 67.760466][ T324] usb 8-1: new high-speed USB device number 5 using dummy_hcd [ 67.830405][ T58] usb 6-1: device descriptor read/8, error -32 [ 67.850438][ T306] usb 9-1: device descriptor read/8, error -32 [ 67.870725][ T324] usb 8-1: device descriptor read/8, error -32 [ 67.940380][ T20] usb 10-1: new high-speed USB device number 5 using dummy_hcd [ 67.950468][ T58] usb usb6-port1: unable to enumerate USB device [ 68.050494][ T20] usb 10-1: device descriptor read/8, error -32 [ 68.080387][ T324] usb 8-1: device descriptor read/8, error -32 [ 68.120362][ T306] usb 9-1: new high-speed USB device number 5 using dummy_hcd [ 68.200532][ T324] usb usb8-port1: unable to enumerate USB device [ 68.230376][ T306] usb 9-1: device descriptor read/8, error -32 [ 68.260400][ T20] usb 10-1: device descriptor read/8, error -32 [ 68.380591][ T20] usb usb10-port1: unable to enumerate USB device [ 68.440372][ T306] usb 9-1: device descriptor read/8, error -32 [ 68.561363][ T306] usb usb9-port1: unable to enumerate USB device [ 68.568607][ T379] (elapsed 5.046 seconds) done. [ 68.574352][ T379] printk: Suspending console(s) (use no_console_suspend to debug) [ 68.803936][ T379] ACPI: PM: Preparing to enter system sleep state S4 [ 68.804144][ T379] ACPI: PM: Saving platform NVS memory [ 68.804150][ T379] Disabling non-boot CPUs ... [ 68.807190][ T379] smpboot: CPU 1 is now offline [ 68.813791][ T379] PM: hibernation: Creating image: [ 69.696046][ T379] PM: hibernation: Need to copy 509466 pages [ 71.179070][ T379] PM: hibernation: Image created (509466 pages copied) [ 71.179125][ T379] kvm-clock: cpu 0, msr 70c5001, primary cpu clock, resume [ 71.179250][ T379] ACPI: PM: Restoring platform NVS memory [ 71.179265][ T379] kvm-guest: stealtime: cpu 0, msr 1f7027040 [ 71.188940][ T379] ------------[ cut here ]------------ [ 71.188950][ T379] WARNING: CPU: 0 PID: 379 at kernel/time/timekeeping.c:989 ktime_get_seconds+0x31/0x40 [ 71.188978][ T379] Modules linked in: [ 71.188987][ T379] CPU: 0 PID: 379 Comm: syz.6.9 Not tainted syzkaller #0 [ 71.189001][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 71.189011][ T379] RIP: 0010:ktime_get_seconds+0x31/0x40 [ 71.189026][ T379] Code: 74 0e 00 8b 1d 8c 10 8e 05 31 ff 89 de e8 37 78 0e 00 85 db 75 0f e8 7e 74 0e 00 48 8b 05 97 da b3 05 5b 5d c3 e8 6f 74 0e 00 <0f> 0b eb ed 66 2e 0f 1f 84 00 00 00 00 00 90 55 48 89 e5 e8 57 74 [ 71.189039][ T379] RSP: 0018:ffffc9000446ef48 EFLAGS: 00010046 [ 71.189051][ T379] RAX: ffffffff815b4271 RBX: 0000000000000001 RCX: 0000000000080000 [ 71.189061][ T379] RDX: ffffc9000aa2f000 RSI: 000000000007ffff RDI: 0000000000080000 [ 71.189072][ T379] RBP: ffffc9000446ef50 R08: ffffc9000446f11f R09: ffffc9000446f0e0 [ 71.189083][ T379] R10: dffffc0000000000 R11: fffff5200088de24 R12: dffffc0000000000 [ 71.189094][ T379] R13: 1ffff9200088ddf4 R14: ffff8881f70356d0 R15: ffffc9000446f0e0 [ 71.189105][ T379] FS: 00007f44178256c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 71.189121][ T379] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 71.189132][ T379] CR2: 00007f4418e197c0 CR3: 000000011bec7000 CR4: 00000000003506b0 [ 71.189145][ T379] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 71.189153][ T379] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 71.189162][ T379] Call Trace: [ 71.189166][ T379] [ 71.189172][ T379] crng_make_state+0x3cd/0x580 [ 71.189190][ T379] ? del_random_ready_callback+0x170/0x170 [ 71.189208][ T379] ? stack_trace_save+0xa6/0xf0 [ 71.189224][ T379] get_random_u32+0x22f/0x5d0 [ 71.189240][ T379] ? get_random_u64+0x580/0x580 [ 71.189254][ T379] ? acpi_ns_evaluate+0x650/0xa20 [ 71.189270][ T379] ? __alloc_pages+0x1a2/0x460 [ 71.189285][ T379] ? sysfs_kf_write+0x129/0x150 [ 71.189302][ T379] ? kernfs_fop_write_iter+0x2bd/0x400 [ 71.189318][ T379] ? prep_new_page+0x110/0x110 [ 71.189332][ T379] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.189351][ T379] new_slab+0x19d/0x4d0 [ 71.189364][ T379] ___slab_alloc+0x3ac/0x840 [ 71.189382][ T379] ? acpi_ds_create_walk_state+0xe2/0x270 [ 71.189399][ T379] ? acpi_ds_create_walk_state+0xe2/0x270 [ 71.189414][ T379] __slab_alloc+0x49/0x90 [ 71.189429][ T379] kmem_cache_alloc_trace+0x146/0x270 [ 71.189445][ T379] ? acpi_ds_create_walk_state+0xe2/0x270 [ 71.189460][ T379] acpi_ds_create_walk_state+0xe2/0x270 [ 71.189475][ T379] ? acpi_ds_pop_walk_state+0x90/0x90 [ 71.189489][ T379] ? acpi_ds_begin_method_execution+0x7ce/0xa10 [ 71.189504][ T379] ? acpi_tb_check_dsdt_header+0x10e/0x3f0 [ 71.189519][ T379] acpi_ps_execute_method+0x22f/0x7b0 [ 71.189536][ T379] acpi_ns_evaluate+0x650/0xa20 [ 71.189552][ T379] acpi_ut_evaluate_object+0x12f/0x480 [ 71.189568][ T379] ? acpi_ut_method_error+0x160/0x160 [ 71.189583][ T379] ? kasan_quarantine_put+0x34/0x190 [ 71.189599][ T379] acpi_rs_get_method_data+0x9a/0x120 [ 71.189615][ T379] ? acpi_rs_get_aei_method_data+0x110/0x110 [ 71.189632][ T379] ? slab_free_freelist_hook+0xc2/0x190 [ 71.189647][ T379] acpi_walk_resources+0x150/0x4d0 [ 71.189663][ T379] ? acpi_pci_link_get_current+0x3b0/0x3b0 [ 71.189680][ T379] ? acpi_os_allocate_zeroed+0xe0/0xe0 [ 71.189695][ T379] ? acpi_get_vendor_resource+0x150/0x150 [ 71.189713][ T379] ? acpi_os_allocate_zeroed+0xe0/0xe0 [ 71.189729][ T379] ? acpi_rs_get_method_data+0x120/0x120 [ 71.189747][ T379] acpi_pci_link_get_current+0x1fa/0x3b0 [ 71.189777][ T379] ? acpi_pci_link_set+0xa80/0xa80 [ 71.189794][ T379] acpi_pci_link_set+0x630/0xa80 [ 71.189810][ T379] ? acpi_penalize_sci_irq+0x60/0x60 [ 71.189825][ T379] ? acpi_restore_bm_rld+0x9e/0xf0 [ 71.189840][ T379] ? acpi_save_bm_rld+0x20/0x20 [ 71.189854][ T379] ? _printk+0xda/0x130 [ 71.189876][ T379] irqrouter_resume+0xd6/0x170 [ 71.189890][ T379] syscore_resume+0x119/0x430 [ 71.189906][ T379] ? acpi_hw_legacy_sleep+0x640/0x640 [ 71.189920][ T379] ? syscore_suspend+0x5a0/0x5a0 [ 71.189934][ T379] ? memory_bm_next_pfn+0xe9/0x100 [ 71.189952][ T379] ? acpi_ec_unblock_transactions+0x71/0x90 [ 71.189968][ T379] create_image+0x20f/0x5a0 [ 71.189984][ T379] hibernation_snapshot+0x1d4/0x2f0 [ 71.190000][ T379] ? state_show+0x180/0x180 [ 71.190015][ T379] hibernate+0x124/0x2c0 [ 71.190030][ T379] state_store+0x23d/0x2a0 [ 71.190044][ T379] ? state_show+0x180/0x180 [ 71.190058][ T379] kobj_attr_store+0x5e/0x80 [ 71.190074][ T379] ? kobj_attr_show+0x70/0x70 [ 71.190088][ T379] sysfs_kf_write+0x129/0x150 [ 71.190104][ T379] ? sysfs_kf_read+0x1d0/0x1d0 [ 71.190120][ T379] kernfs_fop_write_iter+0x2bd/0x400 [ 71.190136][ T379] vfs_write+0x831/0xfd0 [ 71.190151][ T379] ? file_end_write+0x1b0/0x1b0 [ 71.190164][ T379] ? wait_for_completion_killable_timeout+0x10/0x10 [ 71.190182][ T379] ? __fget_files+0x2e1/0x340 [ 71.190196][ T379] ? __fdget_pos+0x2d2/0x380 [ 71.190208][ T379] ? ksys_write+0x70/0x260 [ 71.190221][ T379] ksys_write+0x14a/0x260 [ 71.190234][ T379] ? __ia32_sys_read+0x90/0x90 [ 71.190247][ T379] ? __kasan_check_write+0x14/0x20 [ 71.190262][ T379] ? switch_fpu_return+0x15d/0x2c0 [ 71.190279][ T379] __x64_sys_write+0x7b/0x90 [ 71.190293][ T379] x64_sys_call+0x8ef/0x9a0 [ 71.190307][ T379] do_syscall_64+0x4c/0xa0 [ 71.190319][ T379] ? clear_bhb_loop+0x50/0xa0 [ 71.190333][ T379] ? clear_bhb_loop+0x50/0xa0 [ 71.190346][ T379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 71.190362][ T379] RIP: 0033:0x7f4418dcc0d9 [ 71.190375][ T379] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 71.190387][ T379] RSP: 002b:00007f4417825028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 71.190401][ T379] RAX: ffffffffffffffda RBX: 00007f4419053fa0 RCX: 00007f4418dcc0d9 [ 71.190412][ T379] RDX: 0000000000000005 RSI: 0000200000000800 RDI: 0000000000000005 [ 71.190421][ T379] RBP: 00007f4418e63024 R08: 0000000000000000 R09: 0000000000000000 [ 71.190430][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 71.190438][ T379] R13: 00007f4419054038 R14: 00007f4419053fa0 R15: 00007ffc44035e08 [ 71.190451][ T379] [ 71.190456][ T379] ---[ end trace 635430eb12605fbe ]--- [ 71.199084][ T379] Enabling non-boot CPUs ... [ 71.199232][ T379] x86: Booting SMP configuration: [ 71.199237][ T379] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 71.199572][ T0] kvm-clock: cpu 1, msr 70c5041, secondary cpu clock [ 71.200573][ T22] kvm-guest: stealtime: cpu 1, msr 1f7127040 [ 71.202087][ T379] CPU1 is up [ 71.202282][ T379] ACPI: PM: Waking up from system sleep state S4 [ 71.680584][ T379] PM: Cannot find swap device, try swapon -a [ 71.682564][ T379] PM: Cannot get swap writer [ 73.237598][ T379] OOM killer enabled. [ 73.239015][ T379] Restarting tasks ... done. [ 73.260158][ T379] PM: hibernation: hibernation exit [ 73.287139][ T30] audit: type=1400 audit(1786959911.103:121): avc: denied { mount } for pid=411 comm="syz.9.15" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 73.320415][ T421] using random self ethernet address [ 73.320440][ T30] audit: type=1400 audit(1786959911.143:122): avc: denied { mount } for pid=420 comm="syz.8.19" name="/" dev="configfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 73.322740][ T421] using random host ethernet address [ 73.338710][ T421] usb0: HOST MAC 0e:97:b5:e8:2d:d3 [ 73.340801][ T421] usb0: MAC 56:8b:bd:b3:0f:69 [ 73.343504][ T30] audit: type=1400 audit(1786959911.143:123): avc: denied { search } for pid=420 comm="syz.8.19" name="/" dev="configfs" ino=1820 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.352372][ T30] audit: type=1400 audit(1786959911.143:124): avc: denied { write } for pid=420 comm="syz.8.19" name="usb_gadget" dev="configfs" ino=1821 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.361960][ T30] audit: type=1400 audit(1786959911.143:125): avc: denied { add_name } for pid=420 comm="syz.8.19" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 73.371351][ T30] audit: type=1400 audit(1786959911.143:126): avc: denied { create } for pid=420 comm="syz.8.19" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1 [ 73.379556][ T30] audit: type=1400 audit(1786959911.163:127): avc: denied { create } for pid=420 comm="syz.8.19" name="ecm.usb0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 73.388401][ T30] audit: type=1400 audit(1786959911.163:128): avc: denied { write } for pid=420 comm="syz.8.19" name="UDC" dev="configfs" ino=17871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 73.397928][ T30] audit: type=1400 audit(1786959911.163:129): avc: denied { open } for pid=420 comm="syz.8.19" path="/3/config/usb_gadget/g1/UDC" dev="configfs" ino=17871 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1 [ 73.415757][ T30] audit: type=1400 audit(1786959911.193:130): avc: denied { read } for pid=140 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 73.607094][ T6] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 73.607094][ T279] usb 8-1: new high-speed USB device number 6 using dummy_hcd [ 73.607285][ T309] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 73.627247][ T20] android_work: sent uevent USB_STATE=CONNECTED [ 73.677118][ T410] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 73.697098][ T39] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 73.887223][ T6] usb 1-1: Dual-Role OTG device on HNP port [ 73.917221][ T410] usb 7-1: Using ep0 maxpacket: 8 [ 73.919050][ T6] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 5.15 [ 73.922096][ T6] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.937362][ T20] android_work: sent uevent USB_STATE=CONFIGURED [ 73.947276][ T39] usb 6-1: Using ep0 maxpacket: 8 [ 73.967289][ T279] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 73.970800][ T279] usb 8-1: config 1 interface 1 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 64 [ 73.974534][ T279] usb 8-1: New USB device found, idVendor=0525, idProduct=a4a7, bcdDevice= 1.00 [ 73.978179][ T309] usb 10-1: New USB device found, idVendor=0bc3, idProduct=0001, bcdDevice= 0.01 [ 73.982196][ T309] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 73.985332][ T279] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.007443][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready [ 74.059870][ T410] usb 7-1: config 0 has an invalid interface number: 143 but max is 0 [ 74.062669][ T410] usb 7-1: config 0 has no interface number 0 [ 74.064783][ T410] usb 7-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 74.067363][ T39] usb 6-1: config 0 has an invalid interface number: 143 but max is 0 [ 74.071202][ T39] usb 6-1: config 0 has no interface number 0 [ 74.074029][ T39] usb 6-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 74.074440][ T6] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 0e:97:b5:e8:2d:d3 [ 74.078570][ T39] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.082926][ T410] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 74.090634][ T39] usb 6-1: config 0 descriptor?? [ 74.091817][ T410] usb 7-1: config 0 descriptor?? [ 74.279689][ T460] cdc_ether 1-1:1.0 usb1: unregister 'cdc_ether' usb-dummy_hcd.0-1, CDC Ethernet Device [ 74.330142][ T410] usb 6-1: USB disconnect, device number 6 [ 74.339919][ T425] UDC core: couldn't find an available UDC or it's busy: -16 [ 74.342897][ T425] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 74.348448][ T6] usb 7-1: USB disconnect, device number 2 [ 74.487344][ T460] usb 1-1: reset high-speed USB device number 2 using dummy_hcd [ 74.767195][ T39] ================================================================== [ 74.770437][ T39] BUG: KASAN: use-after-free in kobject_uevent_env+0xc2/0x700 [ 74.773179][ T39] Read of size 8 at addr ffff88815b724020 by task kworker/1:1/39 [ 74.776070][ T39] [ 74.776816][ T39] CPU: 1 PID: 39 Comm: kworker/1:1 Tainted: G W syzkaller #0 [ 74.779889][ T39] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 74.783688][ T39] Workqueue: events android_work [ 74.785694][ T39] Call Trace: [ 74.786919][ T39] [ 74.787914][ T39] __dump_stack+0x21/0x30 [ 74.789387][ T39] dump_stack_lvl+0x110/0x170 [ 74.790984][ T39] ? show_regs_print_info+0x20/0x20 [ 74.792834][ T39] ? load_image+0x3f0/0x3f0 [ 74.794430][ T39] print_address_description+0x7f/0x2c0 [ 74.796339][ T39] ? kobject_uevent_env+0xc2/0x700 [ 74.797903][ T39] kasan_report+0x10f/0x150 [ 74.799274][ T39] ? kobject_uevent_env+0xc2/0x700 [ 74.800971][ T39] __asan_report_load8_noabort+0x14/0x20 [ 74.802976][ T39] kobject_uevent_env+0xc2/0x700 [ 74.804676][ T39] android_work+0x2fa/0x4c0 [ 74.806466][ T39] ? ftdi_NDI_device_setup+0xd0/0xd0 [ 74.808309][ T39] ? _raw_spin_lock_irq+0x95/0xf0 [ 74.810100][ T39] ? _raw_spin_lock_irqsave+0x130/0x130 [ 74.812067][ T39] ? kernfs_notify+0x184/0x1c0 [ 74.814191][ T39] process_one_work+0x6c8/0xbb0 [ 74.816083][ T39] worker_thread+0xaa0/0x1250 [ 74.817774][ T39] kthread+0x3f5/0x4f0 [ 74.819182][ T39] ? worker_clr_flags+0x190/0x190 [ 74.821096][ T39] ? kthread_blkcg+0xd0/0xd0 [ 74.822772][ T39] ret_from_fork+0x1f/0x30 [ 74.824400][ T39] [ 74.825429][ T39] [ 74.826265][ T39] Allocated by task 421: [ 74.827770][ T39] __kasan_kmalloc+0xd4/0x100 [ 74.829643][ T39] kmem_cache_alloc_trace+0x119/0x270 [ 74.831701][ T39] device_create+0x13a/0x300 [ 74.833456][ T39] gadgets_make+0x816/0xa70 [ 74.835327][ T39] configfs_mkdir+0x50a/0x9c0 [ 74.837307][ T39] vfs_mkdir+0x38b/0x590 [ 74.839186][ T39] do_mkdirat+0x174/0x4d0 [ 74.840856][ T39] __x64_sys_mkdirat+0x89/0xa0 [ 74.842752][ T39] x64_sys_call+0x37e/0x9a0 [ 74.844467][ T39] do_syscall_64+0x4c/0xa0 [ 74.846248][ T39] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.848727][ T39] [ 74.849634][ T39] Freed by task 444: [ 74.851135][ T39] kasan_set_track+0x4a/0x70 [ 74.852958][ T39] kasan_set_free_info+0x23/0x40 [ 74.855400][ T39] ____kasan_slab_free+0x125/0x160 [ 74.857389][ T39] __kasan_slab_free+0x11/0x20 [ 74.859357][ T39] slab_free_freelist_hook+0xc2/0x190 [ 74.861573][ T39] kfree+0xc4/0x270 [ 74.863042][ T39] device_create_release+0x15/0x20 [ 74.864751][ T39] device_release+0x96/0x1c0 [ 74.866582][ T39] kobject_put+0x18a/0x270 [ 74.868207][ T39] device_destroy+0xb4/0xf0 [ 74.870037][ T39] gadgets_drop+0xa0/0xd0 [ 74.871981][ T39] configfs_rmdir+0x871/0x960 [ 74.874117][ T39] vfs_rmdir+0x1ae/0x450 [ 74.875936][ T39] do_rmdir+0x261/0x6b0 [ 74.877581][ T39] __x64_sys_rmdir+0x49/0x50 [ 74.879222][ T39] x64_sys_call+0x25f/0x9a0 [ 74.880931][ T39] do_syscall_64+0x4c/0xa0 [ 74.882618][ T39] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.884665][ T39] [ 74.885495][ T39] The buggy address belongs to the object at ffff88815b724000 [ 74.885495][ T39] which belongs to the cache kmalloc-1k of size 1024 [ 74.891137][ T39] The buggy address is located 32 bytes inside of [ 74.891137][ T39] 1024-byte region [ffff88815b724000, ffff88815b724400) [ 74.896673][ T39] The buggy address belongs to the page: [ 74.899060][ T39] page:ffffea00056dc800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x15b720 [ 74.903941][ T39] head:ffffea00056dc800 order:3 compound_mapcount:0 compound_pincount:0 [ 74.907117][ T39] flags: 0x4000000000010200(slab|head|zone=1) [ 74.909594][ T39] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080 [ 74.913082][ T39] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 74.916536][ T39] page dumped because: kasan: bad access detected [ 74.919138][ T39] page_owner tracks the page as allocated [ 74.921330][ T39] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 90, ts 73297160949, free_ts 72288346187 [ 74.929322][ T39] post_alloc_hook+0x192/0x1b0 [ 74.931229][ T39] prep_new_page+0x1c/0x110 [ 74.933324][ T39] get_page_from_freelist+0x2c3a/0x2cd0 [ 74.935927][ T39] __alloc_pages+0x1a2/0x460 [ 74.937736][ T39] new_slab+0xa0/0x4d0 [ 74.939407][ T39] ___slab_alloc+0x3ac/0x840 [ 74.941370][ T39] __slab_alloc+0x49/0x90 [ 74.943089][ T39] kmem_cache_alloc_trace+0x146/0x270 [ 74.945024][ T39] syslog_print+0x12e/0x8d0 [ 74.945427][ T460] cdc_ether 1-1:1.0 usb1: register 'cdc_ether' at usb-dummy_hcd.0-1, CDC Ethernet Device, 0e:97:b5:e8:2d:d3 [ 74.946907][ T39] do_syslog+0x71a/0x7e0 [ 74.953686][ T39] __x64_sys_syslog+0x7c/0x90 [ 74.955653][ T39] x64_sys_call+0x728/0x9a0 [ 74.957343][ T39] do_syscall_64+0x4c/0xa0 [ 74.958990][ T39] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.961163][ T39] page last free stack trace: [ 74.963032][ T39] free_unref_page_prepare+0x5fa/0x600 [ 74.965266][ T39] free_unref_page+0xae/0x540 [ 74.967291][ T39] __free_pages+0x6c/0x100 [ 74.969116][ T39] swsusp_free+0xb3/0x2f0 [ 74.970809][ T39] hibernate+0x241/0x2c0 [ 74.972476][ T39] state_store+0x23d/0x2a0 [ 74.974361][ T39] kobj_attr_store+0x5e/0x80 [ 74.976333][ T39] sysfs_kf_write+0x129/0x150 [ 74.978793][ T39] kernfs_fop_write_iter+0x2bd/0x400 [ 74.980922][ T39] vfs_write+0x831/0xfd0 [ 74.982474][ T39] ksys_write+0x14a/0x260 [ 74.984128][ T39] __x64_sys_write+0x7b/0x90 [ 74.985833][ T39] x64_sys_call+0x8ef/0x9a0 [ 74.987675][ T39] do_syscall_64+0x4c/0xa0 [ 74.989472][ T39] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 74.992006][ T39] [ 74.992960][ T39] Memory state around the buggy address: [ 74.995236][ T39] ffff88815b723f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 74.998881][ T39] ffff88815b723f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 75.002032][ T39] >ffff88815b724000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.005532][ T39] ^ [ 75.007776][ T39] ffff88815b724080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 75.011330][ T39] ffff88815b724100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 75.014687][ T39] ================================================================== [ 75.017806][ T39] Disabling lock debugging due to kernel taint [ 75.027881][ T39] android_work: sent uevent USB_STATE=CONFIGURED [ 75.287303][ T410] usb 10-1: USB disconnect, device number 6 [ 75.297878][ T279] cdc_acm 8-1:1.0: ttyACM0: USB ACM device [ 75.307870][ T279] usb 8-1: USB disconnect, device number 6 [ 75.857825][ T45] device bridge_slave_1 left promiscuous mode [ 75.860037][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.862964][ T45] device bridge_slave_0 left promiscuous mode [ 75.865059][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.868503][ T45] device veth1_macvtap left promiscuous mode [ 75.870409][ T45] device veth0_vlan left promiscuous mode [ 76.879595][ T45] device bridge_slave_1 left promiscuous mode [ 76.882797][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.885895][ T45] device bridge_slave_0 left promiscuous mode [ 76.888462][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.892538][ T45] device bridge_slave_1 left promiscuous mode [ 76.894837][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.898123][ T45] device bridge_slave_0 left promiscuous mode [ 76.900512][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.904155][ T45] device bridge_slave_1 left promiscuous mode [ 76.906628][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.910136][ T45] device bridge_slave_0 left promiscuous mode [ 76.912487][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.915935][ T45] device bridge_slave_1 left promiscuous mode [ 76.918419][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.921539][ T45] device bridge_slave_0 left promiscuous mode [ 76.923965][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.928193][ T45] device veth1_macvtap left promiscuous mode [ 76.930434][ T45] device veth0_vlan left promiscuous mode [ 76.932716][ T45] device veth1_macvtap left promiscuous mode [ 76.934984][ T45] device veth0_vlan left promiscuous mode [ 76.937744][ T45] device veth1_macvtap left promiscuous mode [ 76.940074][ T45] device veth0_vlan left promiscuous mode [ 76.942487][ T45] device veth1_macvtap left promiscuous mode [ 76.944625][ T45] device veth0_vlan left promiscuous mode