last executing test programs:

4m0.716461397s ago: executing program 0 (id=3599):
r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$NL80211_CMD_GET_COALESCE(r0, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r1, 0x200, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0x8}, @val={0xc, 0x99, {0x2, 0x5f}}}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40001)
r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000000000020ef17a46000000000000109022400010000600009040080020300010009210604002c012205000905810308000c080776424840f99c94197a5eb8d55ec02babd55424c9e848b296a1b73e88cc15f8c57983ef2d099fd4bc3fbd4276d23af5b86202d6b2a45d9a7d8cb0d9fd64f078b2842410cb4378f165f92bbe9e560cc0ca19034a56a4933b0197db1b30bf10ae4f420f2b19cbd006b80616ac226b2722730f97b7f960d8f9c95d4829ffe9337a53017504c14f947d476e7dab4c7d4f9f7a15c675a23d48676c539563297274e967c3a042f41348122bfe6aff89ebf42cea0334cab01e56128097163e14aaec882dfd76"], 0x0)
syz_usb_control_io(r2, 0x0, 0x0)
syz_usb_control_io(r2, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="0100086d4929b029470800cfac4867c90000010000000000b0b6dfd3e118475ef6"], 0x0, 0x0, 0x0, 0x0}, 0x0)

3m57.684528626s ago: executing program 0 (id=3622):
socket$xdp(0x2c, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0)
openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = socket$packet(0x11, 0x3, 0x300)
socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14)
sendmmsg(r0, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x289, r2}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x1}], 0x1, 0x0, 0x60}}], 0x1, 0x20040010)

3m57.684140236s ago: executing program 0 (id=3623):
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @host}, 0x10, 0x80000)
r1 = socket$nl_audit(0x10, 0x3, 0x9)
sendmmsg(r0, &(0x7f0000002d00)=[{{&(0x7f0000000040)=@nfc={0x27, 0x0, 0x1, 0x7}, 0x80, &(0x7f0000001700)=[{&(0x7f00000000c0)="525bf22e073513ee5d88fe0b7e7f1eff50babae86301c658ffdd20aa44b4a06939720ffae81c125c484a584706f268d0576913028e63250375b88cf0ce61f0bbc86349b4ee5a41f0a984a73d9eb13b1f3787e08ef47155db0fd9ea0d0a142761392e2d2c3344ee303600685489aa8400e1bcfb71a191aceffec205a397db24a4fcbad8fdae8ab6e420395feadeae84acea0783492cd4e54421675fe590134957192093ae30e9540d7b9ec70bf5b751e6ce3c36", 0xb3}, {&(0x7f0000000180)="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", 0x1000}, {&(0x7f0000001180)="a3b17af54fc079520feef01cbd537654dc5d0a8e8ffb8b983c5bc539275c7d94e75474e00297241d204174eb0c49217a3dcc338e1b8bbfb65ca3b7ca6b47feb78b6defd709194a9075b3cdc4e5ac7930e30d819962cae824ed82dcbba5d1230f83abe8bec5e14cf328f2fc65a86efb5130f0b55ffc7786c4cfa699d1e9e23c49137eb676db67acae310989f51b529bc872851def3b0834b44c144e712ff8b24057702f6c9a240db5a65937c687854e73473e4a7848611bd3715d5d992096e56c6b8d6f3b13ff83789e557a6984c0c041b11dc66d0d9b5a0cec9eb6f9327754ed506156b6a3a5a75bc733f9a5ce8e11e421d25261ea9d41", 0xf7}, {&(0x7f0000001280)="822c7e6e8c9956bb44341bf2fd71a5984cf505c91b43ae99d555348bae0f5132c9d913c727de3dab284d6dc730623b0070bc6e0652bb0ee34ee24a6041cd", 0x3e}, {&(0x7f00000012c0)="105a2e88d0558fe3833a7d1a8832d5be74f49adaf5bb4a75e31d592f01beffdf359bc5fa7fed15b30444b1bc82a1ec382ea3103970126cafd9e380bd4671cda38ad820a33dd40e4aa484824211e8e1c4594a85256320042e9a8e578130b7087b9dfd710808e200caa2389fc19fcbedeaa8a5f8a8d699ff1a3c955c2a88e290f2161761257cb6e09269bbd0d71a1349b3b73a8d9091d4eb6078f89d7bef0c0a9ad915e6ef72512ba016804939895389f09874b56b841fb6", 0xb7}, {&(0x7f0000001380)="ab7927fde91c131d3c34ced9b4d7f17652366f59e74457b8c39d3e33b058385b70858b0be0e49b4a1c2822dedc3c27d9064c924911f22460952120e79a6c171bb1245914ea62b9fe6c1d0b58ef01c544ec400d29678deff3b35c2ccd228e9a3e331ec4c29ca4412238927da73540c4a496ab3fefaf1b9c881119d6dcf7a34300cf49f8de66255f8a20", 0x89}, {&(0x7f0000001440)="864cb171079ddd88e6b9afd3f99be10a089c652f43399fb4a0ab30a1493db0d110db38b4d8e8f7e484cd614a77a1eb15639a2d6c20c4af22a7a88f7ac8072b8282bddf1de14f527bdef69a8512b2556c6b3f8fe14195a6c1ad1a9c9a76d6a4108b613ce0a44cadf99500b62bb0ae61f86e1adc1fb5fe859ea1fa209126f5c3f54f23ed9197601f8134b0a4986baf7c0c232c20529226a7ccb68165ed9e2f09cba3ec6c38dee923e08649685c0b5eda40a4494ac234123931ff0b259cb48272813e510fbdc2", 0xc5}, {&(0x7f0000001540)="0d9030470f503fddab50ec6285442e4bab930b5e804db3e71156aa8d3ba5c35d0e92a90a3e7b40177d8b745052a6fd72b9882f64b0f057820445100b303284f94e239466dcdcb30414699711b2d4a83d40f614de5cc9f071ed8cd7e349cc6c7472149fca7c3ff8fa47f3f891e3daa6f6c4b9682744f68f01c968dede28a3659c5bd54ba0b4391997315ba05f", 0x8c}, {&(0x7f0000001600)="201e68cebb284f8764b60fc41123537d8786066522bfdaf7a83f25ef9361d503b57433fd2734b89062c210537ce154c973894aa01839fc8fc20f8bb849bc1f43b0744bc705bee8655d9e8de7f02aac39f1806ebcf27e3004f42c1be40ab4cef52d7b5f5e4e4b7eaf06e0bbca94fcbe66c222987fda0839a229d5abdabb36ea0ad4a820ad6c7cdd29f3b59cc73e98f49d1690034ccefcbe8164404ab21a12c6b0a441aaddc633605a1c54a5657b9de5f00f65dde8c485d1d8f2ef1c60c22f8946", 0xc0}, {&(0x7f00000016c0)="210183e735a305d9", 0x8}], 0xa}}, {{&(0x7f00000017c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, r1, 0x3, 0x3, 0x2, 0x4, {0xa, 0x4e21, 0x8, @local, 0x98dc}}}, 0x80, &(0x7f0000001900)=[{&(0x7f0000001840)="a7dace3cc8570a5a90011c3e074bc2071e33b6a8af5f6fac078477dac87c58ba8783d67d74c920cdf4fcf07c74409077711c19c5681f657f1180eea89a990e9b21a60fd0dab81354d19d2d6e2985d06de60c1d0933c822408f5568fc895661c78b2d318a0ffdad761d20bdda7f92825c08bd422aa5cfcc2ef24cc33d711c566c3f844cb9191cf8ea4d1fd5ef596440c15498f5f1eafe058a2450ad83900435a736eda906e9240ea0fe669e68998ed616f0", 0xb1}], 0x1, &(0x7f0000001940)=[{0x28, 0x11, 0x1f, "53fe8b4f3051c3c5e0f3f23b32c8800baaa3d58e6a15"}, {0x80, 0x1, 0x5, "9d9bc2be75549d1165b9af5cea363b9583de40c4f36b989ed7ccb51799e0ac1ad0ef56213d49f9d912097cf47f7ca5f5f19eeead9891477c471cd8ff88d4b7367a32d28124ee586af3fb7d09bda2234f7e41ecfdc16b5921975cdbcfa518a62cd24767b979a139fdb06d20"}, {0x90, 0xea, 0x7, "0358f3ed723fc80dc0cb7fb545fc5e5f59173cbe2b59bec78d0f392d7339bbd45cf5e6525d5a63a25e8f3e7d040df9915f06e08a4c527701825688da07c519059e3241c354e76f1a02f9b64034b7385ef96322954cf85267d31481b931326457f5993988996482d7ea2128c21eba0f0dd9eebe74acf8cc0d7bb67a7dba"}, {0xa0, 0xff, 0x4, "299652b1f41bc527cd6169ac477989f2d5aeba650a1e2bf9cf264afa61c7054ac4438a8df32c774623271b76d91057a5257e9cdfecb600463e7bb4bf2288b6e821295a7bcfe7e4019662c04f2e69abdd1fd586a5ff930c47e16c7960df83673edd3ee0c5a3c58af7c79a72ee8da8d4ff4da0d9e2933ac84b3c73010988c73c210384d178281f688a5484"}, {0x60, 0x103, 0x8, "f78f0d78b71ae19b123ca022df95820c29aae87a4c4cce11ff17c579c921700f2d269ea6082c81acef5a260b8b5653f3b649314bea73853e5ecc87b0925b924f1f3cbe0e9926859154205bf5ffddf1"}, {0x50, 0x0, 0x7fffffff, "334f05dc6decff8fd7667a18730b2ec514c5f8c8d6506c149515e8bb2f909fdaa28fb3bba25e78acc95d749757564e62ad0176ac210472b7bad0e6166584"}, {0x60, 0xff, 0x1, "4761397b19012941a968ea5e90d127e9c9c64a265795b0f3cbd791d2c326e4ed95c602ff5b12eddeff7a303a3f555b7d428376ef58a1a377d2d67b15ad7bbb5e6ba3e26b6245aee51df927b2e25e87"}, {0x1010, 0x117, 0x7, "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"}, {0xb0, 0x11, 0x3a, "802ab954832460997cdcf67716bbc2b464d96109347abcc28cf54073f1e88749ee4ed36035788be4e22f2854c409c19c87c624f1711fc048cd6a2ebbb28afe99ccd1b51a63ec2a624962795c1a238ea93384c2248ac69d66e84b3cd10492514f7888f3eb9904047d553b0f88ce1167dcd6124e9a501a695a2be354794610e3e0286763b7cc30c128600fc8799f6006fd9334d50bc6cfbc271e654aa7488e"}], 0x13a8}}], 0x2, 0x4008000) (async)
r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1)
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000002d80)={[0x3, 0x7, 0x4, 0x1ff, 0x1ff, 0xc, 0x2, 0x4, 0x900000000000, 0x40, 0x9, 0x2, 0x1ff, 0x6c13, 0x5, 0x9], 0xf000, 0x82011}) (async)
r3 = syz_open_dev$mouse(&(0x7f0000002e40), 0x8, 0x100)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x34) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000002e80)={0x0, <r5=>0x0})
sched_setscheduler(r5, 0x1, &(0x7f0000002f00)=0x40) (async)
getsockopt$inet6_tcp_buf(r3, 0x6, 0xb, &(0x7f0000002f40)=""/54, &(0x7f0000002f80)=0x36)
r6 = socket$netlink(0x10, 0x3, 0x15)
poll(&(0x7f0000002fc0)=[{r4, 0x1000}, {r1, 0xc8}, {r2, 0xc780}, {r1, 0x2448}, {r1, 0xa48a}, {r3, 0x24}, {r4, 0x4638}, {r6, 0x200}, {r2, 0x310}, {r3, 0x2}], 0xa, 0x1)
sendmsg$AUDIT_SET(r6, &(0x7f0000003100)={&(0x7f0000003040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000030c0)={&(0x7f0000003080)={0x3c, 0x3e9, 0x2, 0x70bd29, 0x25dfdbfd, {0x1, 0x1, 0x1, r5, 0x80000001, 0x1000, 0x3, 0x6, 0x0, 0x5, 0x7fff}, ["", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x10) (async)
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000003140)={{<r7=>0x0, 0x1, 0xfff, 0x9, 0x3ff, 0x7436, 0x9, 0x40, 0x6, 0x7, 0x100, 0xfffffffffffffffa, 0x9, 0x86, 0x8}, 0x28, [0x0, 0x0, 0x0, 0x0, 0x0]})
ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000003200)={{r7, 0xb38, 0x7fffffffffffffff, 0x2da9, 0xfffffffffffffff4, 0x1, 0x5, 0x8, 0x5, 0xffff, 0xffffffff, 0x5, 0x2, 0x4, 0x8}}) (async)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r4, 0x81f8943c, &(0x7f0000004200))
ioctl$TIOCSWINSZ(r2, 0x5414, &(0x7f0000004400)={0xfffe, 0xf, 0x9})
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$XFS_IOC_FSBULKSTAT(r8, 0xc0205865, &(0x7f0000004a00)={&(0x7f0000004440)=0xfffffffffffffffc, 0x6, &(0x7f0000004480)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000049c0)}) (async)
r9 = socket$igmp6(0xa, 0x3, 0x2)
setsockopt$MRT6_ADD_MFC(r9, 0x29, 0xcc, &(0x7f0000004a40)={{0xa, 0x4e24, 0xfffe0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffff6}, {0xa, 0x4e21, 0xb, @private2, 0x7}, 0xffffffffffffffff, {[0x2, 0x3, 0x9, 0x3, 0xfffe000, 0x0, 0x2, 0x8ea1]}}, 0x5c)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004b00), r3)
sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000004d00)={&(0x7f0000004ac0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000004cc0)={&(0x7f0000004b40)={0x170, r10, 0x800, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x4a}}}}, [@mon_options, @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MNTR_FLAGS={0x14, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "6511487e1a0b7297e1d6ec83918527c6bf161bdb1c9fc2e9"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "5559708bc4eec5aba548f43cb244507656c3b8ad38bbffa3"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "7846348e9209d4f39aef74e8461812b583b73a1f6a9e332e"}], @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "3c1b8a8d536b78b6a6dfa7b4e3782e3f76f7c66abbc9c5ee"}], @NL80211_ATTR_IFTYPE={0x8}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "1b3797ad5b66dc738617cd9c91cdc373f0c689d8ad4dc652"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "f9e4869f1d8de1e72f18aaedd3b8a7ca478affefbf413ed6"}, @NL80211_ATTR_MNTR_FLAGS={0x1c, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_ACTIVE={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}, @NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_COOK_FRAMES={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}]]}, 0x170}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
r11 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000004d40), 0x2)
ioctl$INCFS_IOC_FILL_BLOCKS(r11, 0x80106720, &(0x7f00000050c0)={0x4, &(0x7f0000005040)=[{0x80, 0x0, &(0x7f0000004d80)}, {0x3, 0xca, &(0x7f0000004dc0)="8cbe3101b1f1c242b6c88575867952f8d679a858f3932b0e52f49ebb74fdb75b9587835907cc43b104efcb20aa369727cd0534935868d5f19bfb3be9d3d6ccb062fe4f2cf43e8889816211b03821874ce63f37c6500da82a9f23219f4ebb54562626954eda5c3a0c36cf0eced8a768ddcb9d6a606f61b261e594e6fd88d82a0ee2907a183008ce94b0823b667a2580f7ad57947501a94c8140b79d1c238f953962cfc70bf111ee7a2e3fbedf560d1c5b91198db3e7c38543ed9de72b6df1ba328eb69d8cfedf2b386084", 0x1, 0x1}, {0x400, 0xcc, &(0x7f0000004ec0)="8dd26b606afe58dbd62cf818f72b61341c09bc32851afef5c525eed411488beace1b24be7407182991aa795f7fa1f11551970a6d8049a7c9a39893c8aec5484dac3b458f6ed4f3196b4266747b917b5c940ef4d8c03c2b25897543219c228fb4b9e555dcdf1b09b778e4cfbe98a94833f7e877dd8b64f8b47bc22a01d46113049ed615aa2ff6219d289d398585d806d51273c60289e5b82f6941754caef57de721835c5fa3fd353b9e8ee6c9da851754edca751545986fe4e591e6aeae3c6465b394b99b77bd18125e3beffc", 0x0, 0x1}, {0x1, 0x76, &(0x7f0000004fc0)="e10ab2c6ec1a453380a2725eb61e81aa3776097775947834447b6c10de040597114e90d2f128eb55d6d46812cdbce9e8fe37c3eab8767aa623073445e2dbc5ec3a57cec6334add8f5dee4eaa69bd4e252efed1915e7742881c0179a1608e7085364e317ec1fdc6af8cc71deb468369235e0850103cb2"}]}) (async)
fcntl$dupfd(r2, 0x0, r3) (async)
write$P9_RGETLOCK(0xffffffffffffffff, &(0x7f0000005100)={0x1f, 0x37, 0x1, {0x1, 0x6, 0x5, r5, 0x1, ']'}}, 0x1f) (async)
ioctl$KVM_CAP_DISABLE_QUIRKS2(r3, 0x4068aea3, &(0x7f0000005140)={0xd5, 0x0, 0x3c}) (async)
ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f00000051c0)) (async)
sendmsg$NL80211_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000052c0)={&(0x7f0000005200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000005280)={&(0x7f0000005240)={0x34, r10, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1b}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x38}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3c}]}, 0x34}, 0x1, 0x0, 0x0, 0xc045800}, 0x20040000)

3m57.681636186s ago: executing program 0 (id=3624):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000280), 0x80, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x36b8c0, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0)
renameat2(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', r0, &(0x7f00000004c0)='./file1\x00', 0x0)
unlinkat(r2, &(0x7f00000011c0)='./file0\x00', 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x80000, 0x0)
getdents64(r3, &(0x7f0000000080)=""/4096, 0x1000)
openat$incfs(r0, &(0x7f0000001080)='.log\x00', 0x0, 0x1a5)
r4 = socket$inet_icmp(0x2, 0x2, 0x1)
ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x23, &(0x7f0000000c80)=0x25c52612, 0x4)
r5 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_int(r5, 0x29, 0x12, 0x0, 0x0)
ioctl$BLKTRACESETUP(r1, 0xc0481273, &(0x7f00000032c0)={'\x00', 0x6, 0x0, 0x1, 0x0, 0x7})
fstat(r0, &(0x7f00000010c0))
getgroups(0x4, &(0x7f00000033c0)=[0xee00, 0x0, 0xee00, 0xee00])
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
r7 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1802, 0x0)
socket(0xa, 0x3, 0x3a)
close_range(r7, 0xffffffffffffffff, 0x0)
ptrace(0x10, r6)
ptrace$ARCH_SET_GS(0x1e, r6, 0x0, 0x1001)
r8 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x7f, 0x0, 0x7fff8001}]})
close_range(r8, 0xffffffffffffffff, 0x0)
r9 = fsopen(&(0x7f0000000080)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r9, 0x6, 0x0, 0x0, 0x0)
fsmount(r9, 0x0, 0x8)

3m57.669461857s ago: executing program 0 (id=3625):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c)
mount$tmpfs(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='huge=always'])
chdir(&(0x7f0000000140)='./file0\x00')
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0)
write$binfmt_script(r0, &(0x7f0000000200), 0x4) (fail_nth: 3)

3m57.559035337s ago: executing program 0 (id=3630):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f29375d55a48238de0e", 0xd, 0x20000001, 0x0, 0x0)

3m57.530807509s ago: executing program 32 (id=3630):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x800004, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
sendto$inet6(r0, &(0x7f0000000000)="826bb66f29375d55a48238de0e", 0xd, 0x20000001, 0x0, 0x0)

2m5.041547783s ago: executing program 3 (id=4724):
socket$inet_icmp(0x2, 0x2, 0x1)
r0 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udp\x00')
read$FUSE(r0, 0x0, 0x0)

2m5.033990604s ago: executing program 3 (id=4725):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000205804115000000000000109022400010000000009040000050300000009210400000122940309058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x40000)
ioctl$HIDIOCGUSAGE(r1, 0xc018480b, 0x0)

2m3.664143126s ago: executing program 3 (id=4734):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xe, 0x0, &(0x7f00000002c0)="4834de731964a692378981cf8b7f"})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0)) (fail_nth: 12)

2m3.338089884s ago: executing program 3 (id=4735):
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder1\x00', 0x0, 0x0)
r1 = epoll_create1(0x0)
r2 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x61ae2)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
r4 = dup(r3)
fsetxattr$security_selinux(r4, &(0x7f0000000000), &(0x7f0000000040)='system_u:object_r:mouse_device_t:s0\x00', 0x20, 0x0)
r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r2, 0x4c0a, &(0x7f0000000080)={r5, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb501004c516bdd090f350000000000008000002000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
ioctl$LOOP_CLR_FD(r2, 0x4c01)
epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, 0x0)
ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

2m3.178021809s ago: executing program 3 (id=4737):
madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe)
r0 = userfaultfd(0x801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x4b0f, &(0x7f0000000000)={0x0, 0xfffffffc, 0x2000, 0x0, 0x355}, &(0x7f00000002c0), 0x0)

2m3.169963999s ago: executing program 3 (id=4738):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x61ae2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xc2802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb501004c516bdd090f350000000000008000002000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
close_range(r0, 0xffffffffffffffff, 0x0)

1m47.550713493s ago: executing program 33 (id=4738):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x61ae2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/wakeup_count', 0xc2802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb501004c516bdd090f350000000000008000002000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
close_range(r0, 0xffffffffffffffff, 0x0)

44.603945129s ago: executing program 2 (id=5661):
r0 = syz_usb_connect$cdc_ncm(0x0, 0x8f, &(0x7f0000000580)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x20, 0x80, 0x1c, {0xd750, 0x3, 0x20007, 0x0, 0xd, 0xcf0, 0x3ff, 0xdf, 0x401, 0xffff, 0xc335, 0x5}}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000900)={0x14, 0x0, &(0x7f00000008c0)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)

44.063418127s ago: executing program 2 (id=5679):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x48241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="70000000ffffffffffff00000000000008004500002c002c4000002f"], 0x3e)

44.006875312s ago: executing program 2 (id=5680):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', <r2=>0x0})
r3 = socket(0x11, 0x800000003, 0x0)
bind$packet(r3, &(0x7f0000000080)={0x11, 0x19, r2, 0x1, 0x7, 0x6, @remote}, 0x14)
writev(r0, &(0x7f00000003c0), 0x0)
writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000081040000000000f93132", 0x39}], 0x1)

43.944343637s ago: executing program 2 (id=5681):
r0 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0x0, 0x7f, 0x2, 0x17, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, {0x6, 0x2b, 0x1, 0x80, 0x0, 0x1, 0x0, @in=@local, @in=@rand_addr=0x64010102}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e24, @remote}, @in={0x2, 0x4e24, @local}}, @sadb_x_filter={0x5, 0x1a, @in=@multicast2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x11, 0x14, 0x10}, @sadb_key={0x3, 0x8, 0x78, 0x0, "9725cc405a98fc48d3a5c035eb8422"}]}, 0xb8}}, 0x8080)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff)
syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000000030020f003040040000000000109022472510000000009040000120701030009050102cb0a00000009058202"], 0x0)
r2 = signalfd(r0, &(0x7f00000001c0)={[0x3]}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg1\x00', <r3=>0x0})
r4 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'xfrm0\x00', <r5=>0x0})
sendto$packet(r4, &(0x7f0000000080)="4d01000000000000000100e50414090b0092000000000000005ee4cc040c1e5fcc2eae7fc0dacea9ed192143db2c8381a3e349d8", 0x34, 0x4004085, &(0x7f00000000c0)={0x11, 0x0, r5, 0x1, 0xe, 0x6, @multicast}, 0x14)
sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x4c, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3f}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x48050)

43.45870367s ago: executing program 2 (id=5682):
mknodat$loop(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1004, 0x1)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000e2793f10d10501200028000000010902120001000000000904"], 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x10a)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='fd=', @ANYRESOCT=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
lsetxattr$security_ima(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000380)=ANY=[], 0x5, 0x2)
syz_fuse_handle_req(r0, &(0x7f000000a400)="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", 0x2000, 0x0)

40.396412131s ago: executing program 2 (id=5700):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "be99f6b126de783537bd59c595f5f341059a0ad0a83cd5f52a4413a53a282243", "083a971d2f6328c3c2bb1a9d434bb2eb1348f48c032325f918337266ef1cb1a5", "671dc83723dd7306015ca6de4fb821d9d01ffa21463cb7d056af99d1fcac7a60", "c4fea13807a2a5a75266b40ee715b2f9af7e6270e12ff22bf6a8c941b295b93a", "90a9b0114a0d596468316b0e3931ebe68e023f00000000000800", "8e010e386235bf0390edcb59", 0x4, 0x5, 0x4, 0x16d, 0x9}})
ioprio_set$pid(0x2, 0x0, 0x0)
sync()
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="021601070a00000026bd7000fbdbdf250800120001000000bc6b6e000400000006003c000d26000008000000000000867fd1972109fe0020010000000000000000000000000002fe8000000000000000"], 0x50}}, 0x24008980)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x130)
ppoll(&(0x7f0000000300)=[{r3, 0x110}, {r4, 0x5200}], 0x2, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x14, 0x14, 0x1, 0x70bd25, 0x0, {0xa}}, 0x14}}, 0x24004084)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000000c0))

25.317959377s ago: executing program 34 (id=5700):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0)
ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'team_slave_0\x00', &(0x7f0000000380)=@ethtool_drvinfo={0x3, "be99f6b126de783537bd59c595f5f341059a0ad0a83cd5f52a4413a53a282243", "083a971d2f6328c3c2bb1a9d434bb2eb1348f48c032325f918337266ef1cb1a5", "671dc83723dd7306015ca6de4fb821d9d01ffa21463cb7d056af99d1fcac7a60", "c4fea13807a2a5a75266b40ee715b2f9af7e6270e12ff22bf6a8c941b295b93a", "90a9b0114a0d596468316b0e3931ebe68e023f00000000000800", "8e010e386235bf0390edcb59", 0x4, 0x5, 0x4, 0x16d, 0x9}})
ioprio_set$pid(0x2, 0x0, 0x0)
sync()
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'ip6_vti0\x00', 0x0})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r2 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r2, &(0x7f0000000fc0)={0x0, 0x0, &(0x7f0000000f80)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="021601070a00000026bd7000fbdbdf250800120001000000bc6b6e000400000006003c000d26000008000000000000867fd1972109fe0020010000000000000000000000000002fe8000000000000000"], 0x50}}, 0x24008980)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r4 = openat$incfs(r3, &(0x7f0000000000)='.pending_reads\x00', 0x0, 0x130)
ppoll(&(0x7f0000000300)=[{r3, 0x110}, {r4, 0x5200}], 0x2, 0x0, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000000)='personality\x00')
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)={0x14, 0x14, 0x1, 0x70bd25, 0x0, {0xa}}, 0x14}}, 0x24004084)
readv(r5, &(0x7f0000000340)=[{&(0x7f0000000140)=""/95, 0x5f}], 0x1)
ioctl$USBDEVFS_RELEASEINTERFACE(r5, 0x80045510, &(0x7f00000000c0))

4.312177468s ago: executing program 6 (id=6013):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000001b00), r0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket$pppl2tp(0x18, 0x1, 0x1)
socket$inet6_udp(0xa, 0x2, 0x0) (async)
r4 = socket$inet6_udp(0xa, 0x2, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000003c0), 0x123e00, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x806982, 0x0)
connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e)
connect$pppl2tp(r3, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast2}, 0x4}}, 0x2e)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil) (async)
mremap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x1000, 0x3, &(0x7f0000ffd000/0x1000)=nil)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000009001f0070687932000200b6050020000100150b09001f007068793300000000"], 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x10) (async)
sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000001b40)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fcdbdf252100000009001f0070687932000200b6050020000100150b09001f007068793300000000"], 0x34}, 0x1, 0x0, 0x0, 0x40060}, 0x10)

4.311655578s ago: executing program 6 (id=6014):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x40, 0x21, 0x54, {0x54, 0x1, "0adbe12d7b50145d5b3bb670ee99add0570a153c26d572f9e72c4b17553b01629035f7988423ced6c60100ff757ae78f3242a8dafcbaf434316fd4d9b0d5342eda22231609fd7225a4a3a8953d1b3d3aa65c"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000980)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x5, 0xff00, 0x0, [0xffc0cf, 0x3f07, 0xff0000, 0x30, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "2143fff3ac116e52aa2ae0b24a48330c"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x0, 0xf8, "62cf7ed3", "2633b296"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x10, 0x0, 0x4e, 0x0, 0x6, 0x6}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x30, 0xc6, "9245b6692b90c5f92964b98b2f37b742c5f49997e6b617ca80de068d9f54ed7999a9d5bbe2a323c6ffdba1b35905ad9d13e844a25192935313ca6bb27988db29347683dca91cfb0f6310e48e66634fb408907109bbf4701d13769e2066ad91a6c2a667df471ebf5a62ddc30025178d3ba6ac3ab5c1d8bfe248772fc5a3cf8d4a5114b96b17b32e7d4f1f43b306a44175ff0643ad4e83496193ec811e5a962841008a265874f8379bcc76f48383499e70e4d9522b2212c7a0225176ab4d5fd792dddbeeb16880"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x120, 0x20, [0x7700]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0xb, 0x2, 'dG'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, 'S_'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0xecd}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x22, 0x32, {0x32, 0xc, "d72b9778dbcc9130f317ef621488aa7ee75b2d751fd65f7c9461811afa916d53fbb16a9a9fc18e7f7b7658a8bb6956cb"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, &(0x7f0000000280)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x5a, 0x6, 0xa, 0xcd9, 0x6}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x5, 0x4, "ed7ce952", "707048d9"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x7, 0x0, 0x9, 0x2, 0x10}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x1, 0x4, "41ecc074"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7e}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x80, 0xc0, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, ' 6'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="b14c3b07e502"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9735"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x9}})
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0)
pwrite64(r3, &(0x7f0000001040)="3bd6489c34dc885ef7f5d3ad496e37a4897c686dc3a66754c1054e8da5859efcdf0cc26c16811465960cedbc6a9b46cfa041b3eef4bc4fa933f06924ab7cbe13a885a3876f16d9572e7d68ba325229a3cf463af66df1732a5271c2fee88d9ba07616579a393f7fb8af2f1faed0b4f9db2147acc42a5c9f014aa801877e70d4e3ad75dcce02423f8e8a3d0850d5be230d3b0d1b8f4f88979456d56720a7e34a7f6684e242c5b04c5fd38415036755e371c25d5f61", 0xb4, 0x3)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000100)={0x4})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x280002, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="e412000021004f7325bd7000fcdbdf2503"], 0x12e4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

3.749098898s ago: executing program 1 (id=6020):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000e000000200000004000000000000000000000000000000060000000000000001000000000008000a0a", @ANYRES32=0x0, @ANYRES32=0x0], 0xb8}}, 0x0)

3.738086779s ago: executing program 1 (id=6021):
socket$inet_tcp(0x2, 0x1, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf)
ioctl$TCFLSH(r0, 0x400455c8, 0x4)
r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
ioctl$sock_bt_hci(r1, 0x400448e1, &(0x7f0000000080))
socket$key(0xf, 0x3, 0x2)
close(0xffffffffffffffff)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$netlink(0x10, 0x3, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x3, 0xff)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b1)
eventfd2(0x4001, 0x800)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0)
r3 = socket$inet6(0xa, 0x80003, 0x80)
setsockopt$inet6_int(r3, 0x29, 0x16, &(0x7f0000000000), 0x4)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0)

1.332262892s ago: executing program 6 (id=6043):
keyctl$reject(0x13, 0x0, 0x9, 0x204, 0xfffffffffffffff9)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)})
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x0, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000)
signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
ioctl$TIOCL_GETKMSGREDIRECT(r1, 0xc058671e, &(0x7f00000000c0))

1.319996853s ago: executing program 6 (id=6044):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000003000500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)

1.292977215s ago: executing program 6 (id=6045):
r0 = socket$netlink(0x10, 0x3, 0xf)
r1 = socket$netlink(0x10, 0x3, 0xf)
setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4)
bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @broadcast})
setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
sendmsg$NFT_BATCH(r0, &(0x7f00000074c0)={0x0, 0x0, &(0x7f0000007480)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000080a010300000000000000000200000a14000000000a010200000000000000000a00001714000000110001"], 0x50}, 0x1, 0x0, 0x0, 0x20040000}, 0x0)

1.289759455s ago: executing program 6 (id=6047):
socket$inet_tcp(0x2, 0x1, 0x0)
socket$netlink(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x4882, 0x0)
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket(0x2, 0x3, 0xff)
prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0xfffffffffffffe90, &(0x7f0000000340)='aI\xfe>\x9cKT\x87<\x18\x1a\x8e\x9aG\x87Q\x80\x10\xd9\xafb\xa0;5w\xac\xe9\x9e \x01.X\x88F\xa7\xb2\xc1\xd5\x8f\xcf\x81x\x87kw~\v\xcc\xb7,R\xd9\x10\xa6\x8c\x99);\xd6\x04\x9aEH\xcb\n\xb9\xc38\xd5\x8c\x1d=\xca\xcf\xc9\x99\xbeWf8\xf5\xf8p\xac\xdc\xed\x11:\xb3\v(gG\xda\xce\xa2\xff\x93\xf3]\x93\xabB\xba\xa6\x96\xa1\xfe\x83oh\x0f\xe4l\xe5\xd7 E\"\xafGHA\x1b\xc8@\xf8\xf8K\xea\x94\xa5\xe3\x88\x1bB\x9b')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x8042, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000200)={0x4, 0x0, [{0x2e5, 0x0, 0xb30}, {0xa1d, 0x0, 0x8}, {0xb99, 0x0, 0xfffffffffffffffc}, {0x404, 0x0, 0x2}]})
socket$nl_route(0x10, 0x3, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
socket$unix(0x1, 0x5, 0x0)
open(&(0x7f00000000c0)='.\x00', 0x0, 0x1b0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

1.12039814s ago: executing program 1 (id=6048):
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000001100)=@req={0x1, 0x1, 0x4dac60bf, 0xb}, 0x10)
setsockopt$packet_int(r0, 0x107, 0x13, &(0x7f0000000140)=0x277, 0x4)

1.11985354s ago: executing program 1 (id=6049):
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000140)={<r1=>0x0}, &(0x7f00000002c0)=0xc)
syz_open_procfs(r1, &(0x7f0000000240)='net/if_inet6\x00')
setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000380)=0x6, 0x4)
bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10)
sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10)
sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x8c0)
recvmmsg(r0, &(0x7f00000005c0), 0x40000000000026c, 0x0, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0)
write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, r2, 0x0)
sendmsg$nl_generic(r2, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="94040000110000022cbd7000fbdbdf25040000009943ff830f9ec0c04b94fcff6e4b7673e0db0c205ca60ad83b639551076097aacdb12bd08389662414181680e3e187b52a44652bed361f808c0555dfcd2e6b252960425e1ebca654e2e25d07fb24996cc1103bd233a7762c64a1b007b31d7e91362da2e3686c09264fdf51cd377b24ab4960487d45cfe3da402dadc70cee3b033f80426dd03e0a32dcefedd957282e683f0f973504a6cb0e77ef9ec3b20687ee394ac59e4939062d3d55698fa441f2b4d95349d7aaf26ddb39fc9adbfa37b9e4d31298ca8e74cad16866caa0faf24a0679795a8da148c0d29bbcdf3a62bf3b3ee2396676ba69c9b3110851adca44d558aa18e427d70099061e141232f16aa6c3ad7491171c3feade974f237c8c2a0f04b8512e8855b0fa4a6c4b2839c504002c8026f2ac6fa933ae6ee002b850f80aeae4006626742f6ade3795790c35d410701d611ef62e046f2f130600548ef5ea8d8798bd980b60e56b3748b4f5da0a9bf526551ae159dde176ad553ab4094a2050046e6f5f5f57c6e760c8845bbf832a8416920fd3c283a68a4e8e304edd90e92a9524e39a37d455a064fd1284f286321a16134e9ddb8997d446fd562e8439ab8907effd0c9f40aed8408d90a551b9a0feb8ba7265a9e88c0be98aabd6f0df40abe7586bc1a04b94290471d3f2fa11f4fe1fa3385a75f4c6bef568f816347cefbf19605ee541827d619638adcde75ee1873350fef804c729525b50681884d673b5af1c39059a449d90340ee94aab67fabb6fa56e9ef8199569e24918ee19650bad703c693dfce65107b0cf0531f72e3e0d0170062c316eba9c14d39153a9b41de44d95eec4bac410056ea00569ca6993b91a3f163821cfcd99bb5671b469a651269e6ac001f68fc3d61e9591ff4b946a9a5d957ed752ecb5a8518a2aa954e559f02d9068d7886cab952c7277fdaa3bd1f61741ad00b9421505c6a171186848b9f7b709e5b0e7b397ca8ea9a8e5f5ea506d42db831aef05ed559c94073d21810cd181527f25284d575be9e122bb3099c1af93ef098ba3c0397579be0989e39de3553ee2642d108394b2311d61b94529a9059fd8f55bd10400b2800400ab80776da8f923b37ef4d13fd8f4e085068aa25d7aaae451d85f904fd3abfd2af66b13d5f245941455e00d290849d6244609612f77a733b4a1c286d6dcffb228a2cc31a90e5c99a716e94c65b569eb72b4095ada06a659bbf1f359bca79a8f98fd95479e6e70d6917c2616a07be34bfb900f8c005d0ee766c1dd259a9bc7b5234f1f31ff98eb8e6c0024225c048442f969027727193802f60bdfd03d663ebe639a5195eb5b5d3ced4bd30400c680001400070000000000000000000000000000000000ae006b00efa0d3be68fff0239ff7ec8031c87a39740ddac2366bc9ebc13426b5a4e087cd9c5f3b133459dbc151989575f41f3ef384c6a5b77da666cdb8d8ba380ef38d4cb7f0c7c339e9e9dfa4a9c2fdd36f71a2464057a6834f9bbc4357c9f91674c3f6aa8d8eda10662a5d57970859333fd195cb9f14e126441836ff1582e0c5486234ebb37980739fb396daafad11ff77f8d2203bc39d3b0c47d50da63d0839ff849a54c2de414b2c4897aa2100000000"], 0x494}, 0x1, 0x0, 0x0, 0x4}, 0x4800)
r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000300)='/sys/power/wake_unlock', 0x42002, 0x1e3)
write$cgroup_netprio_ifpriomap(r3, &(0x7f0000001000)=ANY=[], 0xd)
recvmmsg(r3, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000003c0)=""/170, 0xaa}, {&(0x7f0000000980)=""/119, 0x77}], 0x2}, 0x100}, {{&(0x7f0000000a00)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000a80)=""/89, 0x59}, {&(0x7f0000000b00)=""/239, 0xef}], 0x2, &(0x7f0000000c00)=""/120, 0x78}, 0x4}, {{&(0x7f0000000c80)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000d00)=""/105, 0x69}], 0x1, &(0x7f0000000dc0)=""/118, 0x76}, 0x200}], 0x3, 0x10000, &(0x7f0000000f00))

1.089451193s ago: executing program 1 (id=6050):
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1, 0x0, 0x2})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xf9fdffffffffffff, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

1.063624416s ago: executing program 1 (id=6051):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000000000040ac054382408b0b00000109022400010000002009040000fd0301000009210000000122010009058103"], 0x0)
syz_usb_control_io(r0, &(0x7f0000000a40)={0x2c, &(0x7f00000008c0)={0x40, 0x21, 0x54, {0x54, 0x1, "0adbe12d7b50145d5b3bb670ee99add0570a153c26d572f9e72c4b17553b01629035f7988423ced6c60100ff757ae78f3242a8dafcbaf434316fd4d9b0d5342eda22231609fd7225a4a3a8953d1b3d3aa65c"}}, &(0x7f0000000940)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x340a}}, &(0x7f0000000980)={0x0, 0xf, 0x39, {0x5, 0xf, 0x39, 0x2, [@ssp_cap={0x20, 0x10, 0xa, 0x0, 0x5, 0x5, 0xff00, 0x0, [0xffc0cf, 0x3f07, 0xff0000, 0x30, 0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0xe, "2143fff3ac116e52aa2ae0b24a48330c"}]}}, &(0x7f00000009c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x0, 0x0, 0xf8, "62cf7ed3", "2633b296"}}, &(0x7f0000000a00)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0xe, 0x10, 0x0, 0x4e, 0x0, 0x6, 0x6}}}, &(0x7f0000000f80)={0x84, &(0x7f0000000ac0)={0x0, 0x30, 0xc6, "9245b6692b90c5f92964b98b2f37b742c5f49997e6b617ca80de068d9f54ed7999a9d5bbe2a323c6ffdba1b35905ad9d13e844a25192935313ca6bb27988db29347683dca91cfb0f6310e48e66634fb408907109bbf4701d13769e2066ad91a6c2a667df471ebf5a62ddc30025178d3ba6ac3ab5c1d8bfe248772fc5a3cf8d4a5114b96b17b32e7d4f1f43b306a44175ff0643ad4e83496193ec811e5a962841008a265874f8379bcc76f48383499e70e4d9522b2212c7a0225176ab4d5fd792dddbeeb16880"}, &(0x7f0000000bc0)={0x0, 0xa, 0x1, 0x7}, &(0x7f0000000c00)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000c40)={0x20, 0x0, 0x4, {0x1, 0x3}}, &(0x7f0000000c80)={0x20, 0x0, 0x8, {0x120, 0x20, [0x7700]}}, &(0x7f0000000cc0)={0x40, 0x7, 0x2, 0x8001}, &(0x7f0000000d00)={0x40, 0x9, 0x1, 0x9}, &(0x7f0000000d40)={0x40, 0xb, 0x2, 'dG'}, &(0x7f0000000d80)={0x40, 0xf, 0x2, 0x2}, &(0x7f0000000dc0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, &(0x7f0000000e00)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, &(0x7f0000000e40)={0x40, 0x19, 0x2, 'S_'}, &(0x7f0000000e80)={0x40, 0x1a, 0x2, 0xecd}, &(0x7f0000000ec0)={0x40, 0x1c, 0x1, 0xfe}, &(0x7f0000000f00)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000f40)={0x40, 0x21, 0x1, 0x7f}})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000003c0)={0x24, 0x0, 0x0, &(0x7f0000000a80)=ANY=[@ANYBLOB="002281"], 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0)
timer_create(0x3, 0x0, &(0x7f0000000080))
timer_settime(0x0, 0x236bd4336e4642df, &(0x7f0000000300)={{0x0, 0x1}, {0x0, 0xe4c}}, 0x0)
ioctl$HIDIOCSREPORT(r1, 0x81044804, &(0x7f0000000400)={0x1, 0x2})
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x0, 0x22, 0x32, {0x32, 0xc, "d72b9778dbcc9130f317ef621488aa7ee75b2d751fd65f7c9461811afa916d53fbb16a9a9fc18e7f7b7658a8bb6956cb"}}, &(0x7f0000000240)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x449}}, &(0x7f0000000280)={0x0, 0xf, 0x10, {0x5, 0xf, 0x10, 0x1, [@wireless={0xb, 0x10, 0x1, 0x2, 0x5a, 0x6, 0xa, 0xcd9, 0x6}]}}, &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x80, 0x5, 0x4, "ed7ce952", "707048d9"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x9, 0x3, 0x7, 0x0, 0x9, 0x2, 0x10}}}, &(0x7f0000000800)={0x84, &(0x7f0000000380)={0x40, 0x1, 0x4, "41ecc074"}, &(0x7f0000000440)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000480)={0x0, 0x8, 0x1, 0x7e}, &(0x7f00000004c0)={0x20, 0x0, 0x4, {0x2, 0x3}}, &(0x7f0000000500)={0x20, 0x0, 0x8, {0x80, 0xc0, [0x0]}}, &(0x7f0000000540)={0x40, 0x7, 0x2, 0x6}, &(0x7f0000000580)={0x40, 0x9, 0x1, 0x4}, &(0x7f00000005c0)={0x40, 0xb, 0x2, ' 6'}, &(0x7f0000000600)={0x40, 0xf, 0x2, 0xc}, &(0x7f0000000640)={0x40, 0x13, 0x6, @random="b14c3b07e502"}, &(0x7f0000000680)={0x40, 0x17, 0x6, @multicast}, &(0x7f00000006c0)={0x40, 0x19, 0x2, "9735"}, &(0x7f0000000700)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000740)={0x40, 0x1c, 0x1, 0xd1}, &(0x7f0000000780)={0x40, 0x1e, 0x1, 0x6f}, &(0x7f00000007c0)={0x40, 0x21, 0x1, 0x9}})
r2 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0xe8f, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x80, 0x0, 0x1, {0x22, 0x29}}}}]}}]}}, 0x0)
syz_usb_control_io$hid(r2, 0x0, 0x0)
socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3)
setsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, 0x0, 0x0)
pwrite64(r3, &(0x7f0000001040)="3bd6489c34dc885ef7f5d3ad496e37a4897c686dc3a66754c1054e8da5859efcdf0cc26c16811465960cedbc6a9b46cfa041b3eef4bc4fa933f06924ab7cbe13a885a3876f16d9572e7d68ba325229a3cf463af66df1732a5271c2fee88d9ba07616579a393f7fb8af2f1faed0b4f9db2147acc42a5c9f014aa801877e70d4e3ad75dcce02423f8e8a3d0850d5be230d3b0d1b8f4f88979456d56720a7e34a7f6684e242c5b04c5fd38415036755e371c25d5f61", 0xb4, 0x3)
ioctl$SIOCGETNODEID(r3, 0x89e1, &(0x7f0000000100)={0x4})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x280002, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$TIPC_GROUP_LEAVE(r3, 0x10f, 0x88)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001440)=ANY=[@ANYBLOB="e412000021004f7325bd7000fcdbdf2503"], 0x12e4}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)

979.810893ms ago: executing program 4 (id=6054):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, 0x0)
r3 = syz_kvm_add_vcpu$x86(0x0, &(0x7f0000000080)={0x0, &(0x7f0000000240)=[@enable_nested={0x12c, 0x18}, @nested_amd_inject_event={0x180, 0x38, {0x0, 0xc1, 0x7, 0x0, 0x1}}, @nested_vmresume={0x130, 0x18}, @nested_amd_clgi={0x17f, 0x10}, @nested_amd_stgi={0x17e, 0x10}, @nested_load_syzos={0x136, 0xa8, {0x2, 0x8000, [@set_irq_handler={0xc8, 0x20, {0xd3, 0x2}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0xe0, 0x7, 0x8000000000000001, 0x2}}, @nested_amd_set_intercept={0x181, 0x30, {0x3, 0xfffffffffffffffb, 0x6, 0x1}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x1, @save_area=0x5c2, 0x100000000, 0x5, 0x1}}, @out_dx={0x6a, 0x28, {0x35b9, 0x6}}, @nested_amd_stgi={0x17e, 0x10}, @wrmsr={0x65, 0x20, {0xb62, 0x9}}], 0x1c0})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x10002, 0x0)
ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000040)={'ip6gre0\x00', 0x200})
ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x3, 0x0, 0x8, 0x6, 0x40}, {0x2000, 0x10000, 0xa, 0x3, 0x2, 0x0, 0x0, 0x0, 0x7, 0xff}, {0x2000, 0x1000, 0xc, 0x0, 0x7, 0xc4, 0x0, 0x0, 0x48, 0x3, 0x0, 0xfc}, {0xeeef0000, 0x33331000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x4}, {0x6000, 0xffff1000, 0xd, 0x0, 0x0, 0x2, 0x0, 0xfc, 0x0, 0x3c}, {0x4, 0x0, 0x0, 0x7a, 0x5, 0x80, 0x0, 0x0, 0x3, 0xff, 0x1}, {0x0, 0xeeee0000, 0xa, 0x4, 0x0, 0x0, 0xa1, 0x20, 0x0, 0x0, 0x8}, {0xd36a1ce04943fa57, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x2}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf8ffdb, 0x0, 0x0, 0x20317, 0x0, 0xf801, 0x0, [0x80000001, 0x0, 0x1]})

876.491702ms ago: executing program 4 (id=6055):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f00000005c0), 0x2010800, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x8c)
r1 = openat$incfs(r0, 0x0, 0x0, 0x130)
ppoll(&(0x7f0000000300)=[{r1, 0x5200}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f0000000380)={[0x9]}, 0x8)

649.892892ms ago: executing program 5 (id=6062):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0)
r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010025bd7000fcdbdf2503000000180001801400020073797a5f74756e00000000000000000005000200000000030500050000000000050003"], 0x44}, 0x1, 0x0, 0x0, 0x20009085}, 0x40040c4)

639.556683ms ago: executing program 5 (id=6063):
r0 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000459bb2405804035000000000000109021b000111000000090400000195699b0009058b", @ANYRES8], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
prlimit64(0x0, 0x7, &(0x7f0000000180)={0x1, 0x8}, 0x0)
timerfd_create(0x8, 0x80800)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x1, 0x3, '<Ii'}, 0x0})

71.555454ms ago: executing program 5 (id=6064):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}, 0xdf01}], 0x400000000000172, 0x0)

71.185443ms ago: executing program 5 (id=6065):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='mountinfo\x00')
read$FUSE(r1, &(0x7f0000003480)={0x2020}, 0x2020) (async, rerun: 32)
recvfrom$inet6(r1, &(0x7f0000000080)=""/158, 0x9e, 0x2001, 0x0, 0x0) (async, rerun: 32)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0xb7, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000040), 0x1e)
setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f00000004c0)=@ccm_128={{0x303}, "d579f7bf7a8547e5", "d38800000000d9e119e8021a6cf000", "7eb09414", "976f2a244e5025c9"}, 0x28)
sendto$inet6(r0, &(0x7f0000000300)='S', 0xfffffffffffffe94, 0xc000, 0x0, 0x0)
close(r0)

70.903284ms ago: executing program 4 (id=6066):
capset(&(0x7f00000000c0)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000, 0x1, 0x0, 0x2})
mkdir(&(0x7f0000000000)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./file1\x00', 0x13b)
mkdir(&(0x7f0000000000)='./bus\x00', 0x0)
mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0xfeffffffffffffff, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]})

70.707493ms ago: executing program 5 (id=6067):
r0 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x6}, 0x1c)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x1000, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x20000000000000)

12.536009ms ago: executing program 4 (id=6068):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100"], 0x64}}, 0x8080)
lseek(r0, 0x8, 0x2)

12.273999ms ago: executing program 5 (id=6069):
r0 = epoll_create1(0x0)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100))
shutdown(0xffffffffffffffff, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
gettid()
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x0, 0x0})
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4)
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x1c, r5, 0x9c3fa077fa966179, 0x0, 0x40000000, {{0x7e}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000054)
r6 = openat$binfmt_format(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x4, 0x9, 0x3, 0x3, 0x6, <r7=>0xffffffffffffffff})
r8 = syz_open_procfs(r7, &(0x7f0000000180)='status\x00')
fchdir(r8)
r9 = openat(r8, &(0x7f0000000140)='./file0\x00', 0x2, 0x2)
fcntl$dupfd(r6, 0x406, r9)

9.720059ms ago: executing program 4 (id=6070):
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$loop(&(0x7f0000000240), 0x9, 0x61ae2)
r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000080)={r2, 0x0, {0x12000000, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb501004c516bdd090f350000000000008000002000", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
ioctl$LOOP_CLR_FD(r1, 0x4c01)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 4 (id=6071):
timerfd_create(0x8, 0x80800)
r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x40001, 0x0)
ioctl$KVM_GET_MSRS_sys(r0, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0x48c, 0x0, 0xffff}]})
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x51, 0x0, &(0x7f0000000040)="a561fd2f71b501dd6f486ad2854a08fb7926c808f4bc3ad37b26dd8ea4fdd9d7c2c4401e8aed34c1e55848a6589c7c1df82cf2cabb28302d73580e6c40f57d91fb319cbe505474850155ed9c023330e1bb"})
socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00)
sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0)
sendmsg$sock(r4, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000600)=']\vg', 0x5dc}], 0x1}, 0x4004890)
ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0)
r5 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)={0x28, 0x1e, 0x21, 0x0, 0x0, {0xa}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0xa, 0x2, 0x0, 0x0, @str='w\xa9\xe2\x00\x00\x00'}]}, 0x28}}, 0x0)
read$eventfd(r1, &(0x7f0000000080), 0x8)

kernel console output (not intermixed with test programs):

t.2 gadget.5: failed to queue resume event
[  573.459527][  T330] usb 6-1: new high-speed USB device number 11 using dummy_hcd
[  573.467416][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.475322][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.481022][T13871] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  573.485577][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.493855][T13871] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  573.498094][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  573.581811][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  573.599327][ T6556] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  573.620245][ T6556] usb 2-1: device descriptor read/8, error -71
[  573.639532][  T330] usb 6-1: device descriptor read/64, error -32
[  573.749529][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.757058][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.764397][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  573.771527][ T6556] usb 2-1: device descriptor read/8, error -71
[  573.777723][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  573.829329][ T8177] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  573.849341][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  573.879489][ T6556] usb usb2-port1: unable to enumerate USB device
[  573.909313][  T330] usb 6-1: device descriptor read/64, error -32
[  573.979314][ T8177] usb 5-1: Using ep0 maxpacket: 16
[  573.985489][ T8177] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  573.994395][ T8177] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  574.004638][ T8177] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  574.015125][ T8177] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  574.019355][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  574.024276][ T8177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  574.031463][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  574.039133][ T8177] usb 5-1: Product: syz
[  574.050003][ T8177] usb 5-1: Manufacturer: syz
[  574.054602][ T8177] usb 5-1: SerialNumber: syz
[  574.109333][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  574.169335][  T330] usb 6-1: new high-speed USB device number 12 using dummy_hcd
[  574.177173][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.184449][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.191822][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.198968][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  574.270684][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  574.330022][  T330] usb 6-1: device descriptor read/64, error -32
[  574.439655][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.447083][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.454455][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  574.461722][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  574.462963][ T8177] usb 5-1: 0:2 : does not exist
[  574.529392][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  574.589378][  T330] usb 6-1: device descriptor read/64, error -32
[  574.645867][T13896] rust_binder: Write failure EFAULT in pid:366
[  574.699321][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  574.717156][  T330] usb usb6-port1: attempt power cycle
[  574.722701][  T330] raw-gadget.2 gadget.5: failed to queue disconnect event
[  574.730435][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  574.799364][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  574.806417][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  574.970870][T13931] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  574.979523][T13931] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  574.989318][   T45] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  575.019341][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  575.079350][  T330] usb 6-1: new high-speed USB device number 13 using dummy_hcd
[  575.099495][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.106754][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.114075][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.121232][  T330] usb 6-1: device descriptor read/8, error -32
[  575.140367][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  575.150519][   T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  575.160170][   T45] usb 2-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00
[  575.169221][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  575.177436][   T45] usb 2-1: SerialNumber: syz
[  575.249500][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.256806][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.264107][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.272039][  T330] usb 6-1: device descriptor read/8, error -32
[  575.379350][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  575.388477][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  575.459357][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  575.472440][   T45] usb 2-1: 0:2 : does not exist
[  575.474231][ T8177] usb 5-1: USB disconnect, device number 79
[  575.484700][   T45] usb 2-1: unit 5 not found!
[  575.493182][   T45] usb 2-1: USB disconnect, device number 97
[  575.505854][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  575.521985][  T330] usb 6-1: new high-speed USB device number 14 using dummy_hcd
[  575.549582][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.557020][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.564859][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.572101][  T330] usb 6-1: device descriptor read/8, error -32
[  575.699545][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.706814][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.714079][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  575.721241][  T330] usb 6-1: device descriptor read/8, error -32
[  575.819315][   T45] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  575.829357][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  575.836318][  T330] usb usb6-port1: unable to enumerate USB device
[  575.969303][   T45] usb 2-1: Using ep0 maxpacket: 8
[  575.978834][   T45] usb 2-1: config index 0 descriptor too short (expected 58495, got 36)
[  575.992235][   T45] usb 2-1: config 212 has too many interfaces: 220, using maximum allowed: 32
[  576.001191][   T45] usb 2-1: config 212 has an invalid descriptor of length 1, skipping remainder of the config
[  576.011504][   T45] usb 2-1: config 212 has 0 interfaces, different from the descriptor's value: 220
[  576.020871][   T45] usb 2-1: New USB device found, idVendor=05ac, idProduct=0241, bcdDevice= 0.00
[  576.029955][   T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.251398][T13941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.251426][  T110] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.251492][  T110] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.272986][T13941] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.275630][  T110]  loop7: unable to read partition table
[  576.297534][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.298696][T13952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5216'.
[  576.310954][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.323852][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.329466][   T36] audit: type=1400 audit(576.302:991): avc:  denied  { view } for  pid=13951 comm="syz.4.5216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1
[  576.336804][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.351142][   T36] audit: type=1326 audit(576.332:992): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13942 comm="syz.2.5213" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a0ef9c629 code=0x7fc00000
[  576.358091][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.389160][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.397774][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.406093][  T368] Buffer I/O error on dev loop7, logical block 0, async page read
[  576.526680][T13941] bpf: Bad value for 'mode'
[  576.679310][ T1060] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  576.729082][T13988] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  576.738717][T13988] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  576.762146][T13988] netlink: 8 bytes leftover after parsing attributes in process `syz.5.5230'.
[  576.773756][T13988] netlink: 4 bytes leftover after parsing attributes in process `syz.5.5230'.
[  576.849303][ T1060] usb 5-1: Using ep0 maxpacket: 32
[  576.856161][ T1060] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  576.866686][ T1060] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  576.876077][ T1060] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  576.885493][ T1060] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  576.894330][ T1060] usb 5-1: config 0 descriptor??
[  577.042669][   T45] usb 2-1: string descriptor 0 read error: -71
[  577.049901][   T45] usb 2-1: USB disconnect, device number 98
[  577.059133][T13993] cgroup: release_agent respecified
[  577.172941][   T36] audit: type=1400 audit(577.152:993): avc:  denied  { name_bind } for  pid=13998 comm="syz.1.5233" src=128 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=udp_socket permissive=1
[  577.320803][T14002] fuse: Bad value for 'fd'
[  577.375220][T14008] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.384065][T14008] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  577.393253][   T36] audit: type=1401 audit(577.372:994): op=setxattr invalid_context=000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002C0000000001000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000082000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081000000FBFFFFFF030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000626C6B696F2E6266712E696F5F73657276696365640000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
[  577.963719][T14023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  577.975037][T14025] netlink: 'syz.1.5243': attribute type 63 has an invalid length.
[  578.055628][T14023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.063993][T14025] netlink: 5 bytes leftover after parsing attributes in process `syz.1.5243'.
[  578.314818][T14032] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.323457][T14032] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.331265][  T421] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  578.489370][  T421] usb 2-1: Using ep0 maxpacket: 16
[  578.497044][  T421] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 9.00
[  578.506155][  T421] usb 2-1: New USB device strings: Mfr=3, Product=2, SerialNumber=3
[  578.514357][  T421] usb 2-1: Product: syz
[  578.518530][  T421] usb 2-1: Manufacturer: syz
[  578.523151][  T421] usb 2-1: SerialNumber: syz
[  578.528252][  T421] usb 2-1: config 0 descriptor??
[  578.603142][T14036] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  578.611781][T14036] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  578.633122][T14036] kvm: kvm [14035]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0x0
[  579.239407][  T421] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected
[  579.247271][  T421] usb 2-1: Detected FT232H
[  579.253276][  T421] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  579.266608][  T421] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  579.273915][  T421] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71
[  579.280956][  T421] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  579.291568][  T421] usb 2-1: USB disconnect, device number 99
[  579.299298][  T421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  579.308813][  T421] ftdi_sio 2-1:0.0: device disconnected
[  579.454488][    T9] usb 5-1: USB disconnect, device number 80
[  579.599350][  T421] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  579.607580][   T36] audit: type=1400 audit(579.582:995): avc:  denied  { getattr } for  pid=14070 comm="syz.5.5264" path="user:[4026531837]" dev="nsfs" ino=4026531837 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1
[  579.632626][T14073] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.641326][T14073] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.659283][T14078] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.667960][T14078] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.780356][  T421] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  579.790106][  T421] usb 2-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  579.799832][    T9] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  579.808931][  T421] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  579.818012][  T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  579.826118][  T421] usb 2-1: Product: syz
[  579.830313][  T421] usb 2-1: Manufacturer: syz
[  579.834897][  T421] usb 2-1: SerialNumber: syz
[  579.929317][    T9] usb 5-1: device descriptor read/64, error -71
[  580.169313][    T9] usb 5-1: device descriptor read/64, error -71
[  580.411384][    T9] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[  580.430887][T14094] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  580.439669][T14094] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  580.549302][    T9] usb 5-1: device descriptor read/64, error -71
[  580.613170][T14096] fuse: Unknown parameter '0x0000000000000003'
[  580.789324][    T9] usb 5-1: device descriptor read/64, error -71
[  580.899429][    T9] usb usb5-port1: attempt power cycle
[  581.048863][  T421] cdc_ncm 2-1:1.0: bind() failure
[  581.055116][  T421] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  581.062104][  T421] cdc_ncm 2-1:1.1: bind() failure
[  581.239352][    T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  581.251213][ T1060] usb 2-1: USB disconnect, device number 100
[  581.260479][    T9] usb 5-1: device descriptor read/8, error -71
[  581.390449][    T9] usb 5-1: device descriptor read/8, error -71
[  581.508378][T14115] fuse: Unknown parameter '0x0000000000000003'
[  581.545001][T14123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  581.553741][T14123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  581.629431][    T9] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  581.650415][    T9] usb 5-1: device descriptor read/8, error -71
[  581.780418][    T9] usb 5-1: device descriptor read/8, error -71
[  581.841616][T14138] fuse: Unknown parameter '0x0000000000000003'
[  581.889423][    T9] usb usb5-port1: unable to enumerate USB device
[  582.249312][    T9] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  582.400362][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  582.410651][    T9] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  582.420625][    T9] usb 2-1: config 1 interface 1 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  582.442039][    T9] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  582.451167][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  582.459307][    T9] usb 2-1: Product: syz
[  582.463608][    T9] usb 2-1: Manufacturer: syz
[  582.468188][    T9] usb 2-1: SerialNumber: syz
[  582.511785][T14155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  582.520458][T14155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  582.879346][   T45] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  582.926843][T14160] fuse: Unknown parameter 'fd0x0000000000000003'
[  583.030398][   T45] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  583.045607][   T45] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  583.058182][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  583.067826][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  583.076070][   T45] usb 5-1: Product: syz
[  583.080581][   T45] usb 5-1: Manufacturer: syz
[  583.085229][   T45] usb 5-1: SerialNumber: syz
[  583.208405][T14183] fuse: Unknown parameter 'fd0x0000000000000003'
[  583.301626][T14190] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  583.310259][T14190] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  583.678814][    T9] cdc_ncm 2-1:1.0: bind() failure
[  583.684907][    T9] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71
[  583.693162][    T9] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71
[  583.702389][    T9] usb 2-1: USB disconnect, device number 101
[  584.011841][T14206] fuse: Unknown parameter 'fd0x0000000000000003'
[  584.067041][T14212] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.075626][T14212] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.300590][   T45] cdc_ncm 5-1:1.0: bind() failure
[  584.306325][   T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  584.313215][   T45] cdc_ncm 5-1:1.1: bind() failure
[  584.506230][   T45] usb 5-1: USB disconnect, device number 85
[  584.539340][  T421] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  584.647383][T14234] overlayfs: failed to resolve './bus': -2
[  584.679358][  T421] usb 2-1: device descriptor read/64, error -71
[  584.690769][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.699366][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.910070][T14240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.918660][T14240] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.927663][  T421] usb 2-1: device descriptor read/64, error -71
[  584.963599][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  584.972416][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  584.981912][   T36] audit: type=1400 audit(584.962:996): avc:  denied  { create } for  pid=14248 comm="syz.2.5339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=iucv_socket permissive=1
[  584.983713][T14249] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.011416][T14249] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.025315][   T36] audit: type=1400 audit(585.002:997): avc:  denied  { map } for  pid=14248 comm="syz.2.5339" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  585.169315][  T421] usb 2-1: new high-speed USB device number 103 using dummy_hcd
[  585.289317][    T9] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  585.299413][  T421] usb 2-1: device descriptor read/64, error -71
[  585.439324][    T9] usb 5-1: Using ep0 maxpacket: 32
[  585.445556][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 142, changing to 11
[  585.456729][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  585.466518][    T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  585.479542][    T9] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  585.488568][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  585.497087][    T9] usb 5-1: config 0 descriptor??
[  585.503035][    T9] usbhid 5-1:0.0: can't add hid device: -22
[  585.508980][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -22
[  585.529530][T14255] overlayfs: failed to resolve './bus': -2
[  585.539300][  T421] usb 2-1: device descriptor read/64, error -71
[  585.649454][  T421] usb usb2-port1: attempt power cycle
[  585.729785][T14271] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  585.738349][T14271] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  585.989348][  T421] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  586.010484][  T421] usb 2-1: device descriptor read/8, error -71
[  586.140298][  T421] usb 2-1: device descriptor read/8, error -71
[  586.282317][   T36] audit: type=1400 audit(586.262:998): avc:  denied  { setattr } for  pid=14273 comm="syz.5.5350" name="RAW" dev="sockfs" ino=117685 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  586.319934][T14278] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  586.379342][  T421] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  586.400443][  T421] usb 2-1: device descriptor read/8, error -71
[  586.408777][T14284] random: crng reseeded on system resumption
[  586.457727][T14290] overlayfs: failed to resolve './bus': -2
[  586.530835][  T421] usb 2-1: device descriptor read/8, error -71
[  586.615689][T14298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.624283][T14298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  586.639380][  T421] usb usb2-port1: unable to enumerate USB device
[  586.670635][T14300] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  586.679156][T14300] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  587.422034][T14321] netlink: 132 bytes leftover after parsing attributes in process `syz.5.5367'.
[  587.949318][  T421] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  588.028234][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.037666][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.046537][T14346] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.055138][T14346] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.070082][ T1060] usb 5-1: USB disconnect, device number 86
[  588.122932][  T421] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  588.149010][  T421] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  588.163928][  T421] usb 2-1: Product: syz
[  588.168127][  T421] usb 2-1: Manufacturer: syz
[  588.173362][  T421] usb 2-1: SerialNumber: syz
[  588.657700][T14365] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  588.667646][T14365] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  588.680267][   T36] audit: type=1400 audit(588.662:999): avc:  denied  { bind } for  pid=14364 comm="syz.5.5385" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  589.192621][T14372] overlayfs: failed to resolve './file1': -2
[  589.199409][T14372] overlayfs: failed to resolve './file1': -2
[  589.384640][  T421] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  589.391159][  T421] cdc_ncm 2-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  589.398530][  T421] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  589.602565][T14387] netlink: 'syz.2.5393': attribute type 4 has an invalid length.
[  589.641047][T14397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  589.649617][T14397] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  589.733474][   T36] audit: type=1400 audit(589.712:1000): avc:  denied  { create } for  pid=14402 comm="syz.4.5400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1
[  589.798270][  T421] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  589.813148][  T421] usb 2-1: USB disconnect, device number 106
[  589.819898][  T421] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  590.245731][T14417] SELinux: security_context_str_to_sid (syste_u�Gй�:) failed with errno=-22
[  590.256955][   T36] audit: type=1400 audit(590.232:1001): avc:  denied  { setopt } for  pid=14415 comm="syz.2.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  590.277250][   T36] audit: type=1400 audit(590.232:1002): avc:  denied  { getopt } for  pid=14415 comm="syz.2.5405" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1
[  590.511508][T14424] netlink: 'syz.1.5408': attribute type 4 has an invalid length.
[  590.537320][   T36] audit: type=1400 audit(590.512:1003): avc:  denied  { setattr } for  pid=14425 comm="syz.5.5409" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  590.595646][T14438] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  590.604645][T14438] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  590.621217][T14436] netlink: 57 bytes leftover after parsing attributes in process `syz.1.5413'.
[  590.713546][T14445] netlink: 14936 bytes leftover after parsing attributes in process `syz.4.5417'.
[  590.929311][ T8177] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  591.068393][T14458] netlink: 'syz.2.5421': attribute type 4 has an invalid length.
[  591.081819][ T8177] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  591.090958][ T8177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  591.099112][ T8177] usb 2-1: Product: syz
[  591.103324][ T8177] usb 2-1: Manufacturer: syz
[  591.107929][ T8177] usb 2-1: SerialNumber: syz
[  591.149999][T14471] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.158577][T14471] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.173623][T14475] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.182921][T14475] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  591.654993][T14483] netlink: 'syz.4.5432': attribute type 4 has an invalid length.
[  591.768993][T14502] FAULT_INJECTION: forcing a failure.
[  591.768993][T14502] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  591.791646][T14502] CPU: 1 UID: 0 PID: 14502 Comm: syz.2.5441 Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3
[  591.791685][T14502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  591.791698][T14502] Call Trace:
[  591.791706][T14502]  <TASK>
[  591.791714][T14502]  __dump_stack+0x21/0x30
[  591.791741][T14502]  dump_stack_lvl+0x140/0x1c0
[  591.791761][T14502]  ? __cfi_dump_stack_lvl+0x10/0x10
[  591.791783][T14502]  dump_stack+0x19/0x20
[  591.791802][T14502]  should_fail_ex+0x3d7/0x530
[  591.791822][T14502]  should_fail+0xf/0x20
[  591.791838][T14502]  should_fail_usercopy+0x1e/0x30
[  591.791877][T14502]  strncpy_from_user+0x29/0x270
[  591.791903][T14502]  getname_flags+0x101/0x700
[  591.791924][T14502]  ? __cfi_mutex_unlock+0x10/0x10
[  591.791946][T14502]  getname+0x1b/0x30
[  591.791965][T14502]  do_sys_openat2+0xda/0x1d0
[  591.791983][T14502]  ? fput+0x1a4/0x240
[  591.791999][T14502]  ? do_sys_open+0x100/0x100
[  591.792014][T14502]  ? ksys_write+0x1f3/0x260
[  591.792034][T14502]  ? __cfi_ksys_write+0x10/0x10
[  591.792054][T14502]  __x64_sys_openat+0x13a/0x170
[  591.792072][T14502]  x64_sys_call+0xe69/0x2ee0
[  591.792095][T14502]  do_syscall_64+0x57/0xf0
[  591.792110][T14502]  ? clear_bhb_loop+0x50/0xa0
[  591.792127][T14502]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  591.792151][T14502] RIP: 0033:0x7f3a0ef9c629
[  591.792167][T14502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  591.792181][T14502] RSP: 002b:00007f3a0fd70028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  591.792202][T14502] RAX: ffffffffffffffda RBX: 00007f3a0f215fa0 RCX: 00007f3a0ef9c629
[  591.792216][T14502] RDX: 0000000000115280 RSI: 00002000000001c0 RDI: 0000000000000005
[  591.792230][T14502] RBP: 00007f3a0fd70090 R08: 0000000000000000 R09: 0000000000000000
[  591.792242][T14502] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  591.792254][T14502] R13: 00007f3a0f216038 R14: 00007f3a0f215fa0 R15: 00007ffd954c3608
[  591.792269][T14502]  </TASK>
[  591.909341][  T421] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  591.927560][T14510] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  591.943873][T14513] netlink: 'syz.2.5446': attribute type 4 has an invalid length.
[  591.948974][T14510] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.071165][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  592.090236][  T421] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  592.100436][  T421] usb 5-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  592.114623][  T421] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  592.123746][  T421] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.131875][  T421] usb 5-1: Product: syz
[  592.136169][  T421] usb 5-1: Manufacturer: syz
[  592.140819][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  592.147616][  T421] usb 5-1: SerialNumber: syz
[  592.209430][  T603] usb 6-1: new high-speed USB device number 15 using dummy_hcd
[  592.217274][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.224587][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.231885][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.239098][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  592.309824][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  592.332345][ T8177] cdc_ncm 2-1:1.0: MAC-Address: 42:42:42:42:42:42
[  592.338912][ T8177] cdc_ncm 2-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  592.346322][ T8177] cdc_ncm 2-1:1.0: setting rx_max = 2048
[  592.369292][  T603] usb 6-1: device descriptor read/64, error -32
[  592.479442][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.486728][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.493984][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.501112][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  592.569359][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  592.629305][  T603] usb 6-1: device descriptor read/64, error -32
[  592.715426][   T36] audit: type=1400 audit(592.692:1004): avc:  denied  { mounton } for  pid=14540 comm="syz.5.5458" path="/186/file0" dev="tmpfs" ino=1096 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  592.743903][ T8177] cdc_ncm 2-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.1-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  592.754936][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  592.762080][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  592.770102][  T421] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  592.776296][  T421] cdc_ncm 5-1:1.0: bind() failure
[  592.787384][ T8177] usb 2-1: USB disconnect, device number 107
[  592.794381][ T8177] cdc_ncm 2-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.1-1, CDC NCM (NO ZLP)
[  592.805504][  T421] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  592.810496][T14543] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  592.812743][  T421] cdc_ncm 5-1:1.1: bind() failure
[  592.821806][T14543] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  592.849337][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  592.909325][  T603] usb 6-1: new high-speed USB device number 16 using dummy_hcd
[  592.917265][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.924747][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.932219][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  592.939521][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  593.009347][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  593.069320][  T603] usb 6-1: device descriptor read/64, error -32
[  593.179499][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.186901][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.194321][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.201474][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  593.269351][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  593.329354][  T603] usb 6-1: device descriptor read/64, error -32
[  593.382218][T14579] netlink: 104 bytes leftover after parsing attributes in process `syz.5.5461'.
[  593.401124][T14581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5464'.
[  593.439326][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  593.449051][  T603] usb usb6-port1: attempt power cycle
[  593.454837][  T603] raw-gadget.2 gadget.5: failed to queue disconnect event
[  593.462625][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  593.539334][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  593.546665][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  593.553050][T14592] IPv6: NLM_F_CREATE should be specified when creating new route
[  593.759324][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  593.809348][  T421] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  593.819430][  T603] usb 6-1: new high-speed USB device number 17 using dummy_hcd
[  593.839465][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.846724][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.854055][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  593.861143][  T603] usb 6-1: device descriptor read/8, error -32
[  593.959349][  T421] usb 2-1: Using ep0 maxpacket: 32
[  593.965605][  T421] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  593.975429][  T421] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  593.984555][  T421] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  593.993237][  T421] usb 2-1: config 0 descriptor??
[  593.999113][  T421] hub 2-1:0.0: bad descriptor, ignoring hub
[  594.005161][  T421] hub 2-1:0.0: probe with driver hub failed with error -5
[  594.012326][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.019587][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.026787][  T421] usbhid 2-1:0.0: couldn't find an input interrupt endpoint
[  594.026811][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.041147][  T603] usb 6-1: device descriptor read/8, error -32
[  594.149328][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  594.156371][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  594.229368][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  594.281234][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.289336][  T603] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[  594.289903][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.309452][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.316697][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.324005][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.331166][  T603] usb 6-1: device descriptor read/8, error -32
[  594.459492][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.466921][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.474193][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  594.481286][  T603] usb 6-1: device descriptor read/8, error -32
[  594.509133][T14601] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.517746][T14601] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  594.589318][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  594.596253][  T603] usb usb6-port1: unable to enumerate USB device
[  594.677320][  T603] usb 5-1: USB disconnect, device number 87
[  594.688338][T14616] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  594.738719][T14623] overlayfs: failed to resolve './bus': -2
[  594.808888][T14632] x_tables: duplicate underflow at hook 2
[  594.822979][T14634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  594.831873][T14634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.349723][T14640] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  595.358390][T14640] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  595.929307][ T8177] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  596.081151][ T8177] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 17, changing to 8
[  596.092225][ T8177] usb 5-1: New USB device found, idVendor=056a, idProduct=0027, bcdDevice= 0.00
[  596.101284][ T8177] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  596.110068][ T8177] usb 5-1: config 0 descriptor??
[  596.518270][ T8177] wacom 0003:056A:0027.005C: Unknown device_type for 'HID 056a:0027'. Assuming pen.
[  596.528757][ T8177] wacom 0003:056A:0027.005C: hidraw0: USB HID v0.02 Device [HID 056a:0027] on usb-dummy_hcd.4-1/input0
[  596.540776][ T8177] input: Wacom Intuos5 touch M Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:0027.005C/input/input104
[  596.724610][  T603] usb 5-1: USB disconnect, device number 88
[  596.754512][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.763803][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.772314][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.780901][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.789189][T14668] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  596.798499][T14668] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  596.829479][ T8177] usb 2-1: reset high-speed USB device number 108 using dummy_hcd
[  596.837780][ T8177] usb 2-1: device reset changed ep0 maxpacket size!
[  596.844814][ T8177] usb 2-1: USB disconnect, device number 108
[  597.139409][ T8177] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  597.290334][ T8177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  597.300518][ T8177] usb 2-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[  597.315166][ T8177] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  597.324735][ T8177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  597.332998][ T8177] usb 2-1: Product: syz
[  597.337224][ T8177] usb 2-1: Manufacturer: syz
[  597.342711][T14677] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  597.344057][ T8177] usb 2-1: SerialNumber: syz
[  597.365615][T14679] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.374211][T14679] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.469301][  T603] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  597.619292][  T603] usb 5-1: Using ep0 maxpacket: 32
[  597.625543][  T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  597.636505][  T603] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  597.646272][  T603] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  597.659077][  T603] usb 5-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  597.668147][  T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  597.676746][  T603] usb 5-1: config 0 descriptor??
[  597.888336][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.897552][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.906348][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.916246][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.958137][T14687] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  597.967669][T14687] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  597.967879][ T8177] cdc_ncm 2-1:1.0: failed GET_NTB_PARAMETERS
[  597.981588][ T8177] cdc_ncm 2-1:1.0: bind() failure
[  597.987965][ T8177] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  597.994864][ T8177] cdc_ncm 2-1:1.1: bind() failure
[  598.107465][T14689] netlink: 'syz.5.5508': attribute type 4 has an invalid length.
[  598.125281][T14691] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.133921][T14691] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.134425][T14671] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.150301][T14671] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  598.160967][   T36] audit: type=1400 audit(598.142:1005): avc:  denied  { validate_trans } for  pid=14670 comm="syz.4.5499" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1
[  598.611387][  T603] usbhid 5-1:0.0: can't add hid device: -71
[  598.617373][  T603] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  598.626116][  T603] usb 5-1: USB disconnect, device number 89
[  598.708033][T14701] Unsupported ieee802154 address type: 0
[  598.724618][T14705] incfs: Backing dir is not set, filesystem can't be mounted.
[  598.732617][T14705] incfs: mount failed -2
[  598.837578][T14712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  598.846592][T14712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.125811][   T36] audit: type=1400 audit(599.102:1006): avc:  denied  { setattr } for  pid=14713 comm="syz.4.5518" name="ip6_tables_names" dev="proc" ino=4026532785 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[  599.359325][ T8177] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  599.368009][T14717] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  599.432875][T14721] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.441490][T14721] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.509405][ T8177] usb 5-1: Using ep0 maxpacket: 16
[  599.521223][ T8177] usb 5-1: config 0 has an invalid interface number: 105 but max is 0
[  599.529658][ T8177] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  599.539874][ T8177] usb 5-1: config 0 has no interface number 0
[  599.547389][ T8177] usb 5-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  599.556585][ T8177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  599.564622][ T8177] usb 5-1: Product: syz
[  599.568836][ T8177] usb 5-1: Manufacturer: syz
[  599.573459][ T8177] usb 5-1: SerialNumber: syz
[  599.578566][ T8177] usb 5-1: config 0 descriptor??
[  599.584616][ T8177] uvcvideo 5-1:0.105: Found Unit with invalid ID 0
[  599.591193][ T8177] usb 5-1: Found UVC 0.00 device syz (046d:08f3)
[  599.597763][ T8177] usb 5-1: No valid video chain found.
[  599.604579][   T45] usb 2-1: USB disconnect, device number 109
[  599.644348][T14732] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.652958][T14732] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.676676][T14733] netlink: 9 bytes leftover after parsing attributes in process `syz.1.5524'.
[  599.685709][T14733] z00�X��: renamed from gretap0 (while UP)
[  599.692229][T14733] z00�X��: entered allmulticast mode
[  599.784578][ T8177] usb 5-1: USB disconnect, device number 90
[  599.976122][T14737] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  599.984699][T14737] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  599.994298][T14737] netlink: 180 bytes leftover after parsing attributes in process `syz.2.5528'.
[  600.204911][T14745] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  600.213561][T14745] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  600.464965][T14753] loop2: detected capacity change from 0 to 8388607
[  600.474073][  T368] buffer_io_error: 2 callbacks suppressed
[  600.474090][  T368] Buffer I/O error on dev loop2, logical block 1048575, async page read
[  600.527226][T14759] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  600.589506][   T45] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[  600.719320][ T6556] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  600.751779][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  600.766602][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  600.785244][   T45] usb 5-1: Product: syz
[  600.789921][   T45] usb 5-1: Manufacturer: syz
[  600.794747][T14772] netlink: 1143 bytes leftover after parsing attributes in process `syz.5.5544'.
[  600.794752][   T45] usb 5-1: SerialNumber: syz
[  600.899321][ T6556] usb 2-1: Using ep0 maxpacket: 32
[  600.906286][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  600.917894][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  600.928206][ T6556] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  600.948958][ T6556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  600.962031][ T6556] usb 2-1: config 0 descriptor??
[  600.971906][ T6556] hub 2-1:0.0: USB hub found
[  601.068355][T14777] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.078246][T14777] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.180147][ T6556] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  601.400091][ T6556] usbhid 2-1:0.0: can't add hid device: -71
[  601.406228][ T6556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  601.414289][   T45] cdc_ncm 5-1:1.0: failed GET_NTB_PARAMETERS
[  601.421312][   T45] cdc_ncm 5-1:1.0: bind() failure
[  601.427437][   T45] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  601.434505][   T45] cdc_ncm 5-1:1.1: bind() failure
[  601.440269][ T6556] usb 2-1: USB disconnect, device number 110
[  601.599163][T14787] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  601.607759][T14787] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  601.695024][T14793] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  601.750444][T14798] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5556'.
[  602.159825][T14808] FAULT_INJECTION: forcing a failure.
[  602.159825][T14808] name failslab, interval 1, probability 0, space 0, times 0
[  602.172629][T14808] CPU: 0 UID: 0 PID: 14808 Comm: syz.5.5559 Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3
[  602.172651][T14808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  602.172659][T14808] Call Trace:
[  602.172663][T14808]  <TASK>
[  602.172668][T14808]  __dump_stack+0x21/0x30
[  602.172687][T14808]  dump_stack_lvl+0x140/0x1c0
[  602.172699][T14808]  ? __cfi_dump_stack_lvl+0x10/0x10
[  602.172720][T14808]  dump_stack+0x19/0x20
[  602.172731][T14808]  should_fail_ex+0x3d7/0x530
[  602.172743][T14808]  should_failslab+0xac/0x100
[  602.172758][T14808]  kmem_cache_alloc_node_noprof+0x45/0x420
[  602.172772][T14808]  ? dup_task_struct+0xc1/0xd50
[  602.172783][T14808]  ? kasan_save_alloc_info+0x40/0x50
[  602.172794][T14808]  ? __kasan_kmalloc+0x96/0xb0
[  602.172809][T14808]  ? __kmalloc_cache_noprof+0x23c/0x470
[  602.172823][T14808]  dup_task_struct+0xc1/0xd50
[  602.172834][T14808]  ? copy_process+0x3220/0x3220
[  602.172845][T14808]  ? __kasan_check_write+0x18/0x20
[  602.172857][T14808]  copy_process+0x55a/0x3220
[  602.172869][T14808]  ? __cfi_copy_process+0x10/0x10
[  602.172879][T14808]  ? __kmalloc_cache_noprof+0x23c/0x470
[  602.172892][T14808]  ? __kasan_check_write+0x18/0x20
[  602.172903][T14808]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  602.172920][T14808]  vhost_task_create+0x1f7/0x400
[  602.172935][T14808]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  602.172950][T14808]  ? __cfi_vhost_task_create+0x10/0x10
[  602.172965][T14808]  ? __cfi_vhost_task_fn+0x10/0x10
[  602.172979][T14808]  ? __kasan_check_write+0x18/0x20
[  602.172990][T14808]  ? mutex_lock+0x97/0x1d0
[  602.173003][T14808]  ? __cfi_mutex_lock+0x10/0x10
[  602.173014][T14808]  ? kernel_text_address+0xa9/0xe0
[  602.173027][T14808]  kvm_mmu_post_init_vm+0x161/0x300
[  602.173040][T14808]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bd0
[  602.173054][T14808]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  602.173094][T14808]  ? kstrtoull+0x13b/0x1e0
[  602.173108][T14808]  ? kstrtouint+0x78/0xf0
[  602.173123][T14808]  ? ioctl_has_perm+0x1bc/0x500
[  602.173140][T14808]  ? __asan_memcpy+0x5a/0x80
[  602.173159][T14808]  ? ioctl_has_perm+0x408/0x500
[  602.173171][T14808]  ? has_cap_mac_admin+0xd0/0xd0
[  602.173181][T14808]  ? __kasan_check_write+0x18/0x20
[  602.173192][T14808]  ? mutex_lock_killable+0x97/0x1d0
[  602.173205][T14808]  ? __cfi_mutex_lock_killable+0x10/0x10
[  602.173217][T14808]  ? proc_fail_nth_write+0x184/0x220
[  602.173228][T14808]  kvm_vcpu_ioctl+0xa48/0x1000
[  602.173243][T14808]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  602.173257][T14808]  ? __cfi_vfs_write+0x10/0x10
[  602.173269][T14808]  ? __kasan_check_write+0x18/0x20
[  602.173281][T14808]  ? mutex_unlock+0x90/0x240
[  602.173292][T14808]  ? __cfi_mutex_unlock+0x10/0x10
[  602.173304][T14808]  ? __fget_files+0x2c5/0x340
[  602.173318][T14808]  ? __fget_files+0x2c5/0x340
[  602.173331][T14808]  ? bpf_lsm_file_ioctl+0xd/0x20
[  602.173341][T14808]  ? security_file_ioctl+0x3e/0x110
[  602.173351][T14808]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  602.173365][T14808]  __se_sys_ioctl+0x135/0x1b0
[  602.173379][T14808]  __x64_sys_ioctl+0x7f/0xa0
[  602.173392][T14808]  x64_sys_call+0x1878/0x2ee0
[  602.173406][T14808]  do_syscall_64+0x57/0xf0
[  602.173415][T14808]  ? clear_bhb_loop+0x50/0xa0
[  602.173425][T14808]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  602.173440][T14808] RIP: 0033:0x7fd386b9c629
[  602.173451][T14808] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  602.173460][T14808] RSP: 002b:00007fd387b19028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  602.173473][T14808] RAX: ffffffffffffffda RBX: 00007fd386e15fa0 RCX: 00007fd386b9c629
[  602.173481][T14808] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[  602.173488][T14808] RBP: 00007fd387b19090 R08: 0000000000000000 R09: 0000000000000000
[  602.173496][T14808] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  602.173502][T14808] R13: 00007fd386e16038 R14: 00007fd386e15fa0 R15: 00007ffe07bcda18
[  602.173512][T14808]  </TASK>
[  602.725800][T14819] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  602.781013][T14822] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  602.790481][T14822] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  603.069319][ T6556] usb 2-1: new full-speed USB device number 111 using dummy_hcd
[  603.229719][ T6556] usb 2-1: too many configurations: 25, using maximum allowed: 8
[  603.238490][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.249692][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.257168][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.268417][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.275885][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.287210][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.294717][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.305925][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.328057][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.344490][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.353351][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.356829][  T603] usb 5-1: USB disconnect, device number 91
[  603.364536][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.394456][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.407262][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.420445][ T6556] usb 2-1: config 1 interface 0 altsetting 127 endpoint 0x83 has invalid maxpacket 576, setting to 64
[  603.433288][ T6556] usb 2-1: config 1 interface 0 has no altsetting 0
[  603.441422][ T6556] usb 2-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40
[  603.492334][ T6556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.563424][ T6556] usb 2-1: Product: syz
[  603.567640][ T6556] usb 2-1: Manufacturer: syz
[  603.572279][ T6556] usb 2-1: SerialNumber: syz
[  603.585291][T14824] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  603.595645][T14841] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  603.661796][   T36] audit: type=1326 audit(603.642:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14843 comm="syz.5.5574" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x0
[  603.821887][ T6556] rtl8150 2-1:1.0: couldn't reset the device
[  603.828065][ T6556] rtl8150 2-1:1.0: probe with driver rtl8150 failed with error -5
[  603.837918][ T6556] usb 2-1: USB disconnect, device number 111
[  604.129355][ T6556] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  604.279327][ T6556] usb 2-1: Using ep0 maxpacket: 32
[  604.285572][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  604.296687][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  604.306510][ T6556] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  604.315592][ T6556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.324577][ T6556] usb 2-1: config 0 descriptor??
[  604.336939][ T6556] hub 2-1:0.0: USB hub found
[  604.489364][  T603] usb 5-1: new full-speed USB device number 92 using dummy_hcd
[  604.547728][ T6556] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  604.640382][  T603] usb 5-1: config 0 interface 0 altsetting 69 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  604.651463][  T603] usb 5-1: config 0 interface 0 altsetting 69 has 1 endpoint descriptor, different from the interface descriptor's value: 4
[  604.664388][  T603] usb 5-1: config 0 interface 0 has no altsetting 0
[  604.671049][  T603] usb 5-1: New USB device found, idVendor=0079, idProduct=0006, bcdDevice= 0.00
[  604.680117][  T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  604.688708][  T603] usb 5-1: config 0 descriptor??
[  604.693974][T14854] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[  604.757187][ T6556] usbhid 2-1:0.0: can't add hid device: -71
[  604.763498][ T6556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  604.789816][ T6556] usb 2-1: USB disconnect, device number 112
[  605.108374][  T603] dragonrise 0003:0079:0006.005D: hidraw0: USB HID v0.04 Device [HID 0079:0006] on usb-dummy_hcd.4-1/input0
[  605.120089][  T603] dragonrise 0003:0079:0006.005D: no inputs found
[  605.126568][  T603] dragonrise 0003:0079:0006.005D: force feedback init failed
[  605.309631][T14854] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=14854 comm=syz.4.5577
[  605.356781][T14878] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=14878 comm=syz.2.5588
[  605.371262][T14878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5588'.
[  606.127889][T14884] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  606.151637][T14887] futex_wake_op: syz.2.5591 tries to shift op by -1; fix this program
[  606.172765][T14890] overlayfs: missing 'lowerdir'
[  606.253095][T14895] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  606.264411][T14895] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  606.749290][ T6556] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  606.940325][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  606.951286][ T6556] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  606.961614][ T6556] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  606.974537][ T6556] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  606.983597][ T6556] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  606.992181][ T6556] usb 2-1: config 0 descriptor??
[  607.280829][  T603] usb 5-1: USB disconnect, device number 92
[  607.301102][T14920] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  607.323194][   T36] audit: type=1400 audit(607.302:1008): avc:  denied  { mounton } for  pid=14921 comm="syz.4.5605" path="/392/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  607.323427][T14922] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  607.369377][T14922] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  607.378444][T14922] incfs: mount failed -22
[  607.383627][   T36] audit: type=1400 audit(607.362:1009): avc:  denied  { read } for  pid=14921 comm="syz.4.5605" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  607.404930][   T36] audit: type=1400 audit(607.362:1010): avc:  denied  { open } for  pid=14921 comm="syz.4.5605" path="/392/file0" dev="overlay" ino=2305843009213693954 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1
[  607.429040][ T6556] usbhid 2-1:0.0: can't add hid device: -71
[  607.435222][   T36] audit: type=1400 audit(607.412:1011): avc:  denied  { unmount } for  pid=9939 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1
[  607.436130][ T6556] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  607.465264][ T6556] usb 2-1: USB disconnect, device number 113
[  607.565347][T14937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  607.573974][T14937] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  607.789337][   T45] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  607.939395][   T45] usb 5-1: Using ep0 maxpacket: 16
[  607.946376][   T45] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  607.956704][   T45] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  607.967154][   T45] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  607.976256][   T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.984270][   T45] usb 5-1: Product: syz
[  607.988433][   T45] usb 5-1: Manufacturer: syz
[  607.993049][   T45] usb 5-1: SerialNumber: syz
[  608.105223][T14951] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only
[  608.189311][  T603] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  608.202916][   T45] usb 5-1: 0:2 : does not exist
[  608.207946][   T45] usb 5-1: unit 19 not found!
[  608.219378][   T45] usb 5-1: USB disconnect, device number 93
[  608.339314][  T603] usb 2-1: Using ep0 maxpacket: 32
[  608.345453][  T603] usb 2-1: config 0 has an invalid interface number: 191 but max is 0
[  608.353675][  T603] usb 2-1: config 0 has no interface number 0
[  608.359833][  T603] usb 2-1: config 0 interface 191 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 24
[  608.371866][  T603] usb 2-1: New USB device found, idVendor=0789, idProduct=0160, bcdDevice=2c.d1
[  608.381147][  T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  608.389176][  T603] usb 2-1: Product: syz
[  608.393354][  T603] usb 2-1: Manufacturer: syz
[  608.397946][  T603] usb 2-1: SerialNumber: syz
[  608.403120][  T603] usb 2-1: config 0 descriptor??
[  608.408377][T14947] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  608.577195][T14967] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  608.585809][T14967] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  608.616840][T14947] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  608.825057][  T603] asix 2-1:0.191 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  608.835335][  T603] asix 2-1:0.191: probe with driver asix failed with error -71
[  608.844242][  T603] usb 2-1: USB disconnect, device number 114
[  608.959416][ T6556] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[  609.109304][ T6556] usb 5-1: Using ep0 maxpacket: 32
[  609.120478][ T6556] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  609.134193][ T6556] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x81 has invalid wMaxPacketSize 0
[  609.144144][ T6556] usb 5-1: config 0 interface 0 has no altsetting 0
[  609.150881][ T6556] usb 5-1: New USB device found, idVendor=057e, idProduct=2009, bcdDevice= 0.00
[  609.159972][ T6556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  609.168719][ T6556] usb 5-1: config 0 descriptor??
[  609.659317][  T603] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  609.776677][ T6556] usbhid 5-1:0.0: can't add hid device: -71
[  609.782702][ T6556] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  609.792321][ T6556] usb 5-1: USB disconnect, device number 94
[  609.819350][  T603] usb 2-1: Using ep0 maxpacket: 32
[  609.825723][  T603] usb 2-1: config 0 has an invalid interface number: 188 but max is 0
[  609.834006][  T603] usb 2-1: config 0 has no interface number 0
[  609.840203][  T603] usb 2-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32
[  609.851574][  T603] usb 2-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36
[  609.860660][  T603] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  609.868674][  T603] usb 2-1: Product: syz
[  609.872894][  T603] usb 2-1: Manufacturer: syz
[  609.877498][  T603] usb 2-1: SerialNumber: syz
[  609.882704][  T603] usb 2-1: config 0 descriptor??
[  609.887922][T14981] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  610.003011][T14985] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  610.011529][T14985] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  610.019871][T14985] incfs: mount failed -22
[  610.040389][T14987] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.049028][T14987] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.095704][T14981] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  610.106716][  T603] asix 2-1:0.188: probe with driver asix failed with error -71
[  610.117740][  T603] usb 2-1: USB disconnect, device number 115
[  610.442574][T15009] syzkaller1: entered promiscuous mode
[  610.448130][T15009] syzkaller1: entered allmulticast mode
[  610.692269][T15027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.700818][T15027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.854586][T15033] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  610.863221][T15033] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  610.980620][T15040] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  610.988879][T15040] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  610.997201][T15040] incfs: mount failed -22
[  611.012912][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  611.089370][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  611.149366][  T330] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[  611.157141][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.164446][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.171718][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.181634][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  611.236463][T15052] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.249250][T15052] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.274419][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  611.279456][T15054] netlink: 104 bytes leftover after parsing attributes in process `syz.1.5662'.
[  611.305297][T15056] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  611.340267][  T330] usb 6-1: device descriptor read/64, error -32
[  611.342553][T15059] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  611.355716][T15059] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  611.363991][T15059] incfs: mount failed -22
[  611.463304][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.471178][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.478467][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.485711][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  611.559315][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  611.562007][T15120] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  611.576299][T15120] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  611.584520][T15120] incfs: mount failed -22
[  611.619309][  T330] usb 6-1: device descriptor read/64, error -32
[  611.621419][T15128] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=26575 sclass=netlink_route_socket pid=15128 comm=syz.5.5677
[  611.649052][T15130] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.657683][T15130] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.729385][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  611.736388][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  611.809377][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  611.816207][ T6556] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  611.836689][T15136] netlink: 'syz.2.5680': attribute type 4 has an invalid length.
[  611.855254][T15138] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.863822][T15138] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.879369][  T330] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[  611.887161][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.894770][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.902000][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  611.909187][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  611.970446][ T6556] usb 2-1: config 220 has an invalid interface number: 76 but max is 2
[  611.978754][ T6556] usb 2-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config
[  611.989077][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  611.995891][ T6556] usb 2-1: config 220 has no interface number 2
[  612.002188][ T6556] usb 2-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[  612.015433][ T6556] usb 2-1: config 220 interface 0 has no altsetting 0
[  612.022313][ T6556] usb 2-1: config 220 interface 76 has no altsetting 0
[  612.029166][ T6556] usb 2-1: config 220 interface 1 has no altsetting 0
[  612.037283][ T6556] usb 2-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9
[  612.046407][ T6556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  612.054435][ T6556] usb 2-1: Product: syz
[  612.058594][ T6556] usb 2-1: Manufacturer: syz
[  612.063204][ T6556] usb 2-1: SerialNumber: syz
[  612.069361][  T330] usb 6-1: device descriptor read/64, error -32
[  612.179449][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.186745][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.194022][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.201161][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  612.269325][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  612.277580][ T6556] usb 2-1: Found UVC 7.01 device syz (8086:0b07)
[  612.284071][ T6556] usb 2-1: No valid video chain found.
[  612.289605][ T6556] usb 2-1: selecting invalid altsetting 0
[  612.297908][ T6556] usb 2-1: USB disconnect, device number 116
[  612.329311][  T330] usb 6-1: device descriptor read/64, error -32
[  612.384537][T15140] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  612.393064][T15140] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.439319][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  612.446284][  T330] usb usb6-port1: attempt power cycle
[  612.451833][  T330] raw-gadget.2 gadget.5: failed to queue disconnect event
[  612.459077][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  612.529319][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  612.536261][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  612.749720][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  612.788213][T15143] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  612.796498][T15143] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  612.804709][T15143] incfs: mount failed -22
[  612.809419][  T330] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[  612.823450][   T36] audit: type=1326 audit(612.802:1012): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15144 comm="syz.1.5684" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2b9f9c629 code=0x0
[  612.845962][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.853233][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.860484][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  612.867597][  T330] usb 6-1: device descriptor read/8, error -32
[  612.875429][T15146] binder: Bad value for 'stats'
[  612.999500][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.006816][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.014061][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.021154][  T330] usb 6-1: device descriptor read/8, error -32
[  613.129347][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  613.136399][  T330] raw-gadget.2 gadget.5: failed to queue reset event
[  613.209326][  T330] raw-gadget.2 gadget.5: failed to queue resume event
[  613.269337][  T330] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[  613.289467][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.296767][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.304148][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.311252][  T330] usb 6-1: device descriptor read/8, error -32
[  613.439478][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.446776][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.454033][    C1] raw-gadget.2 gadget.5: ignoring, device is not running
[  613.461127][  T330] usb 6-1: device descriptor read/8, error -32
[  613.569313][  T330] raw-gadget.2 gadget.5: failed to queue suspend event
[  613.576270][  T330] usb usb6-port1: unable to enumerate USB device
[  613.849320][  T330] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[  613.979326][  T330] usb 5-1: device descriptor read/64, error -71
[  614.219312][  T330] usb 5-1: device descriptor read/64, error -71
[  614.459311][  T330] usb 5-1: new high-speed USB device number 96 using dummy_hcd
[  614.599364][  T330] usb 5-1: device descriptor read/64, error -71
[  614.646628][T15163] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  614.657910][T15163] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  614.664255][T15165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  614.674351][T15165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  614.839371][  T330] usb 5-1: device descriptor read/64, error -71
[  614.884685][   T36] audit: type=1400 audit(614.862:1013): avc:  denied  { setopt } for  pid=15164 comm="syz.5.5693" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  614.903807][   T36] audit: type=1326 audit(614.862:1014): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15164 comm="syz.5.5693" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd386b9c629 code=0x0
[  614.949436][  T330] usb usb5-port1: attempt power cycle
[  615.019325][    T9] usb 2-1: new full-speed USB device number 117 using dummy_hcd
[  615.170395][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  615.181575][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  615.191346][    T9] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  615.200415][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  615.208963][    T9] usb 2-1: config 0 descriptor??
[  615.289357][  T330] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[  615.310300][  T330] usb 5-1: device descriptor read/8, error -71
[  615.440347][  T330] usb 5-1: device descriptor read/8, error -71
[  615.616991][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  615.623066][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  615.631792][    T9] usb 2-1: USB disconnect, device number 117
[  615.679333][  T330] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[  615.700388][  T330] usb 5-1: device descriptor read/8, error -71
[  615.830375][  T330] usb 5-1: device descriptor read/8, error -71
[  615.939438][  T330] usb usb5-port1: unable to enumerate USB device
[  616.138025][T15185] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  616.146548][T15185] overlayfs: "xino" feature enabled using 3 upper inode bits.
[  616.399309][    T9] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  616.549302][    T9] usb 2-1: Using ep0 maxpacket: 16
[  616.555639][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  616.565765][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  616.576006][    T9] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  616.585100][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  616.593282][    T9] usb 2-1: Product: syz
[  616.597438][    T9] usb 2-1: Manufacturer: syz
[  616.602067][    T9] usb 2-1: SerialNumber: syz
[  617.010722][    T9] usb 2-1: cannot find UAC_HEADER
[  617.017380][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  617.029322][ T8177] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[  617.032173][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  617.181726][ T8177] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  617.190875][ T8177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  617.198914][ T8177] usb 5-1: Product: syz
[  617.203125][ T8177] usb 5-1: Manufacturer: syz
[  617.207721][ T8177] usb 5-1: SerialNumber: syz
[  617.219398][  T330] usb 2-1: USB disconnect, device number 118
[  618.039335][   T45] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  618.189312][   T45] usb 2-1: Using ep0 maxpacket: 16
[  618.195694][   T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  618.206233][   T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  618.216846][   T45] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  618.226481][   T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  618.234763][   T45] usb 2-1: Product: syz
[  618.239102][   T45] usb 2-1: Manufacturer: syz
[  618.243968][   T45] usb 2-1: SerialNumber: syz
[  618.435046][ T8177] cdc_ncm 5-1:1.0: MAC-Address: 42:42:42:42:42:42
[  618.441607][ T8177] cdc_ncm 5-1:1.0: dwNtbInMaxSize=7 is too small. Using 2048
[  618.449004][ T8177] cdc_ncm 5-1:1.0: setting rx_max = 2048
[  618.456096][   T45] usb 2-1: 0:2 : does not exist
[  618.461787][   T45] usb 2-1: unit 6 not found!
[  618.475289][   T45] usb 2-1: USB disconnect, device number 119
[  618.802772][T15215] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  618.811320][T15215] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  618.839490][ T8177] cdc_ncm 5-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.4-1, CDC NCM (NO ZLP), 42:42:42:42:42:42
[  618.852124][ T8177] usb 5-1: USB disconnect, device number 99
[  618.858503][ T8177] cdc_ncm 5-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.4-1, CDC NCM (NO ZLP)
[  619.259386][  T603] usb 2-1: new high-speed USB device number 120 using dummy_hcd
[  619.330917][T15221] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  619.339496][T15221] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  619.419314][  T603] usb 2-1: Using ep0 maxpacket: 32
[  619.425478][  T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.437348][  T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.447378][  T603] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  619.456500][  T603] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  619.465101][  T603] usb 2-1: config 0 descriptor??
[  619.471575][  T603] hub 2-1:0.0: USB hub found
[  619.639570][   T45] usb 5-1: new high-speed USB device number 100 using dummy_hcd
[  619.671981][  T603] hub 2-1:0.0: config failed, hub doesn't have any ports! (err -19)
[  619.790534][   T45] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  619.801455][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  619.812371][   T45] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  619.822229][   T45] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  619.836083][   T45] usb 5-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  619.845270][   T45] usb 5-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  619.853402][   T45] usb 5-1: Manufacturer: syz
[  619.858653][   T45] usb 5-1: config 0 descriptor??
[  620.081447][  T603] usbhid 2-1:0.0: can't add hid device: -71
[  620.087502][  T603] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  620.109704][  T603] usb 2-1: USB disconnect, device number 120
[  620.266518][   T45] appleir 0003:05AC:8243.005E: unknown main item tag 0x0
[  620.273787][   T45] appleir 0003:05AC:8243.005E: No inputs registered, leaving
[  620.282300][   T45] appleir 0003:05AC:8243.005E: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.4-1/input0
[  620.889688][T15258] fuse: Bad value for 'fd'
[  621.095570][T15266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.104138][T15266] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.122092][T15227] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  621.131171][T15227] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  621.171725][   T45] usb 5-1: USB disconnect, device number 100
[  621.179482][    T9] usb 2-1: new high-speed USB device number 121 using dummy_hcd
[  621.349299][    T9] usb 2-1: Using ep0 maxpacket: 8
[  621.355500][    T9] usb 2-1: device descriptor read/all, error -61
[  621.489314][    T9] usb 2-1: new high-speed USB device number 122 using dummy_hcd
[  621.619311][    T9] usb 2-1: device descriptor read/64, error -71
[  621.859346][    T9] usb 2-1: device descriptor read/64, error -71
[  621.919308][  T330] usb 5-1: new high-speed USB device number 101 using dummy_hcd
[  621.969423][    T9] usb usb2-port1: attempt power cycle
[  622.069313][  T330] usb 5-1: Using ep0 maxpacket: 8
[  622.075392][  T330] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  622.088463][  T330] usb 5-1: config 0 interface 0 has no altsetting 0
[  622.095102][  T330] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  622.104176][  T330] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  622.112745][  T330] usb 5-1: config 0 descriptor??
[  622.309321][    T9] usb 2-1: new high-speed USB device number 123 using dummy_hcd
[  622.330408][    T9] usb 2-1: device descriptor read/8, error -71
[  622.460488][    T9] usb 2-1: device descriptor read/8, error -71
[  622.524663][  T330] logitech-hidpp-device 0003:046D:C086.005F: hidraw0: USB HID v0.09 Device [HID 046d:c086] on usb-dummy_hcd.4-1/input0
[  622.555156][T15281] netlink: 'syz.5.5743': attribute type 16 has an invalid length.
[  622.566670][T15281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  622.575262][T15281] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  622.699355][    T9] usb 2-1: new high-speed USB device number 124 using dummy_hcd
[  622.720325][    T9] usb 2-1: device descriptor read/8, error -71
[  622.728864][ T8177] usb 5-1: USB disconnect, device number 101
[  622.850432][    T9] usb 2-1: device descriptor read/8, error -71
[  622.959539][    T9] usb usb2-port1: unable to enumerate USB device
[  623.250599][T15290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  623.259381][T15290] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  623.561714][T15066] vlan0: left allmulticast mode
[  623.566768][T15066] veth0_vlan: left allmulticast mode
[  623.572354][T15066] vlan0: left promiscuous mode
[  623.577406][T15066] bridge0: port 3(vlan0) entered disabled state
[  623.584459][T15066] bridge_slave_1: left allmulticast mode
[  623.590338][T15066] bridge_slave_1: left promiscuous mode
[  623.596022][T15066] bridge0: port 2(bridge_slave_1) entered disabled state
[  623.604025][T15066] bridge_slave_0: left allmulticast mode
[  623.609760][T15066] bridge_slave_0: left promiscuous mode
[  623.615529][T15066] bridge0: port 1(bridge_slave_0) entered disabled state
[  623.743580][T15066] veth1_macvtap: left promiscuous mode
[  623.749474][T15066] veth0_vlan: left promiscuous mode
[  624.098863][   T36] audit: type=1326 audit(624.072:1015): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15298 comm="syz.1.5750" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fc2b9f9c629 code=0x0
[  625.249330][ T8177] usb 2-1: new full-speed USB device number 125 using dummy_hcd
[  625.359313][   T45] usb 5-1: new high-speed USB device number 102 using dummy_hcd
[  625.379323][ T8177] usb 2-1: device descriptor read/64, error -71
[  625.509295][   T45] usb 5-1: Using ep0 maxpacket: 8
[  625.515600][   T45] usb 5-1: config index 0 descriptor too short (expected 5924, got 36)
[  625.523997][   T45] usb 5-1: config 250 has an invalid interface number: 228 but max is -1
[  625.532500][   T45] usb 5-1: config 250 has 1 interface, different from the descriptor's value: 0
[  625.541667][   T45] usb 5-1: config 250 has no interface number 0
[  625.547993][   T45] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  625.559978][   T45] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  625.570623][   T45] usb 5-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  625.581072][   T45] usb 5-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  625.591437][   T45] usb 5-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  625.605046][   T45] usb 5-1: config 250 interface 228 has no altsetting 0
[  625.613225][   T45] usb 5-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  625.619329][ T8177] usb 2-1: device descriptor read/64, error -71
[  625.622416][   T45] usb 5-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  625.636958][   T45] usb 5-1: Product: syz
[  625.641215][   T45] usb 5-1: SerialNumber: syz
[  625.648755][   T45] hub 5-1:250.228: bad descriptor, ignoring hub
[  625.655975][   T45] hub 5-1:250.228: probe with driver hub failed with error -5
[  625.859315][ T8177] usb 2-1: new full-speed USB device number 126 using dummy_hcd
[  625.859475][   T45] usblp 5-1:250.228: usblp0: USB Bidirectional printer dev 102 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  626.009301][ T8177] usb 2-1: device descriptor read/64, error -71
[  626.220509][T15324] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  626.229116][T15324] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  626.259431][ T8177] usb 2-1: device descriptor read/64, error -71
[  626.369482][ T8177] usb usb2-port1: attempt power cycle
[  626.709385][ T8177] usb 2-1: new full-speed USB device number 127 using dummy_hcd
[  626.730406][ T8177] usb 2-1: device descriptor read/8, error -71
[  626.752226][   T36] audit: type=1400 audit(626.732:1016): avc:  denied  { read } for  pid=15325 comm="syz.5.5761" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  626.760627][T15321] usb 5-1: reset high-speed USB device number 102 using dummy_hcd
[  626.808620][   T36] audit: type=1326 audit(626.782:1017): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.831608][   T36] audit: type=1326 audit(626.782:1018): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.854878][   T36] audit: type=1326 audit(626.782:1019): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.878041][   T36] audit: type=1326 audit(626.782:1020): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.879104][ T8177] usb 2-1: device descriptor read/8, error -71
[  626.901161][   T36] audit: type=1326 audit(626.782:1021): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.930039][   T36] audit: type=1326 audit(626.782:1022): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.953109][   T36] audit: type=1326 audit(626.782:1023): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  626.976025][   T36] audit: type=1326 audit(626.782:1024): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15331 comm="syz.5.5764" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd386b9c629 code=0x7ffc0000
[  627.139311][ T8177] usb 2-1: new full-speed USB device number 2 using dummy_hcd
[  627.160396][ T8177] usb 2-1: device descriptor read/8, error -71
[  627.290289][ T8177] usb 2-1: device descriptor read/8, error -71
[  627.399457][ T8177] usb usb2-port1: unable to enumerate USB device
[  627.519368][ T8177] usb 5-1: USB disconnect, device number 102
[  627.526015][ T8177] usblp0: removed
[  627.932755][T15344] netlink: 'syz.4.5768': attribute type 4 has an invalid length.
[  628.189308][   T45] usb 5-1: new high-speed USB device number 103 using dummy_hcd
[  628.339298][   T45] usb 5-1: Using ep0 maxpacket: 8
[  628.345656][   T45] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  628.358941][   T45] usb 5-1: config 0 interface 0 has no altsetting 0
[  628.365805][   T45] usb 5-1: New USB device found, idVendor=046d, idProduct=c086, bcdDevice= 0.00
[  628.375172][   T45] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  628.384566][   T45] usb 5-1: config 0 descriptor??
[  628.540523][T15353] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  628.550049][T15353] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  628.792060][T15346] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=31 sclass=netlink_route_socket pid=15346 comm=syz.4.5769
[  628.805704][   T45] usbhid 5-1:0.0: can't add hid device: -71
[  628.811933][   T45] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  628.820847][   T45] usb 5-1: USB disconnect, device number 103
[  629.129557][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.138004][    T9] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[  629.138823][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.289313][    T9] usb 2-1: Using ep0 maxpacket: 32
[  629.295477][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  629.306535][    T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  629.316478][    T9] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  629.329928][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  629.339398][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  629.348264][    T9] usb 2-1: config 0 descriptor??
[  629.359418][T15361] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  629.367977][T15361] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  629.756486][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  629.762610][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  629.771314][    T9] usb 2-1: USB disconnect, device number 3
[  630.071031][T15375] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  630.079560][T15375] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  630.228765][T15379] fuse: Unknown parameter './file0'
[  630.539367][   T45] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  630.544619][    T9] usb 3-1: USB disconnect, device number 88
[  630.657837][T15400] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.664954][T15400] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.672196][T15400] bridge_slave_0: entered allmulticast mode
[  630.679169][T15400] bridge_slave_0: entered promiscuous mode
[  630.686220][T15400] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.694069][T15400] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.701776][T15400] bridge_slave_1: entered allmulticast mode
[  630.708208][T15400] bridge_slave_1: entered promiscuous mode
[  630.784253][T15400] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.791386][T15400] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.798687][T15400] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.805762][T15400] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.828152][  T685] bridge0: port 1(bridge_slave_0) entered disabled state
[  630.835348][   T45] usb 2-1: Using ep0 maxpacket: 8
[  630.840714][  T685] bridge0: port 2(bridge_slave_1) entered disabled state
[  630.849307][   T45] usb 2-1: config index 0 descriptor too short (expected 5924, got 36)
[  630.858066][   T45] usb 2-1: config 250 has an invalid interface number: 228 but max is -1
[  630.866880][   T45] usb 2-1: config 250 has 1 interface, different from the descriptor's value: 0
[  630.876291][   T45] usb 2-1: config 250 has no interface number 0
[  630.882651][   T45] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x1 has invalid maxpacket 65280, setting to 1024
[  630.894295][   T45] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 1024
[  630.904808][   T45] usb 2-1: config 250 interface 228 altsetting 255 endpoint 0x82 has invalid wMaxPacketSize 0
[  630.915216][   T45] usb 2-1: config 250 interface 228 altsetting 255 bulk endpoint 0x82 has invalid maxpacket 0
[  630.916172][T15066] bridge0: port 1(bridge_slave_0) entered blocking state
[  630.925521][   T45] usb 2-1: config 250 interface 228 altsetting 255 has 2 endpoint descriptors, different from the interface descriptor's value: 17
[  630.932571][T15066] bridge0: port 1(bridge_slave_0) entered forwarding state
[  630.946198][   T45] usb 2-1: config 250 interface 228 has no altsetting 0
[  630.954156][T15066] bridge0: port 2(bridge_slave_1) entered blocking state
[  630.961386][   T45] usb 2-1: New USB device found, idVendor=0525, idProduct=d292, bcdDevice= 0.07
[  630.967360][T15066] bridge0: port 2(bridge_slave_1) entered forwarding state
[  630.976662][   T45] usb 2-1: New USB device strings: Mfr=0, Product=106, SerialNumber=59
[  630.991964][   T45] usb 2-1: Product: syz
[  630.993654][T15400] veth0_vlan: entered promiscuous mode
[  630.996150][   T45] usb 2-1: SerialNumber: syz
[  631.000691][   T45] hub 2-1:250.228: bad descriptor, ignoring hub
[  631.011243][T15400] veth1_macvtap: entered promiscuous mode
[  631.013272][   T45] hub 2-1:250.228: probe with driver hub failed with error -5
[  631.201251][   T45] usblp 2-1:250.228: usblp0: USB Bidirectional printer dev 4 if 228 alt 255 proto 3 vid 0x0525 pid 0xD292
[  631.514361][T15434] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  631.523016][T15434] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  632.089632][T15387] usb 2-1: reset high-speed USB device number 4 using dummy_hcd
[  632.809465][ T8177] usb 2-1: USB disconnect, device number 4
[  632.816402][ T8177] usblp0: removed
[  633.216262][T15471] netlink: 1 bytes leftover after parsing attributes in process `syz.1.5817'.
[  633.258304][T15479] syzkaller1: entered promiscuous mode
[  633.263930][T15479] syzkaller1: entered allmulticast mode
[  633.308100][T15483] incfs: Backing dir is not set, filesystem can't be mounted.
[  633.315708][T15483] incfs: mount failed -2
[  633.669139][T15493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.677789][T15493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.849360][   T45] usb 5-1: new low-speed USB device number 104 using dummy_hcd
[  633.886972][T15493] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  633.895563][T15493] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  633.999300][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  634.129325][   T45] usb 5-1: new low-speed USB device number 105 using dummy_hcd
[  634.159486][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  634.229384][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  634.251741][T15498] 9pnet_fd: Insufficient options for proto=fd
[  634.279308][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  634.284819][   T45] usb usb5-port1: attempt power cycle
[  634.299371][  T603] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[  634.307248][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.314524][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.321826][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.328951][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  634.399356][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  634.459310][  T603] usb 6-1: device descriptor read/64, error -32
[  634.497929][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.506490][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.516278][T15502] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  634.524883][T15502] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  634.569495][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.576769][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.584053][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.591239][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  634.629322][   T45] usb 5-1: new low-speed USB device number 106 using dummy_hcd
[  634.649713][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  634.669351][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  634.729311][  T603] usb 6-1: device descriptor read/64, error -32
[  634.779318][   T45] usb 5-1: new low-speed USB device number 107 using dummy_hcd
[  634.799702][   T45] usb 5-1: Invalid ep0 maxpacket: 64
[  634.805139][   T45] usb usb5-port1: unable to enumerate USB device
[  634.839368][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  634.846424][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  634.919722][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  634.979333][  T603] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[  634.987098][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  634.994374][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.001733][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.008821][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  635.079466][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  635.139404][  T603] usb 6-1: device descriptor read/64, error -32
[  635.249536][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.256805][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.266823][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.274165][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  635.285939][T15507] overlay: ./file0 is not a directory
[  635.349315][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  635.409379][  T603] usb 6-1: device descriptor read/64, error -32
[  635.519327][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  635.526256][  T603] usb usb6-port1: attempt power cycle
[  635.531801][  T603] raw-gadget.2 gadget.5: failed to queue disconnect event
[  635.539052][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  635.609365][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  635.616297][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  635.829338][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  635.863381][T15513] incfs: Backing dir is not set, filesystem can't be mounted.
[  635.870906][T15513] incfs: mount failed -2
[  635.889318][  T603] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[  635.916458][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.923854][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.931150][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  635.938412][  T603] usb 6-1: device descriptor read/8, error -32
[  636.069481][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.077014][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.084504][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.091717][  T603] usb 6-1: device descriptor read/8, error -32
[  636.199349][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  636.206522][  T603] raw-gadget.2 gadget.5: failed to queue reset event
[  636.279976][  T603] raw-gadget.2 gadget.5: failed to queue resume event
[  636.339323][  T603] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[  636.360149][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.367463][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.374857][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.382048][  T603] usb 6-1: device descriptor read/8, error -32
[  636.509465][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.516832][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.524095][    C0] raw-gadget.2 gadget.5: ignoring, device is not running
[  636.531222][  T603] usb 6-1: device descriptor read/8, error -32
[  636.639331][  T603] raw-gadget.2 gadget.5: failed to queue suspend event
[  636.646484][  T603] usb usb6-port1: unable to enumerate USB device
[  636.711936][T15530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  636.722010][T15530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  636.856987][   T36] kauditd_printk_skb: 690 callbacks suppressed
[  636.857009][   T36] audit: type=1326 audit(636.832:1715): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15540 comm="syz.6.5848" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f863979c629 code=0x0
[  636.858181][  T603] hid-generic 0000:0000:0000.0060: unknown main item tag 0x0
[  636.894962][  T603] hid-generic 0000:0000:0000.0060: hidraw0: <UNKNOWN> HID v0.00 Device [syz1] on syz0
[  636.912589][T15543] fido_id[15543]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory
[  636.991475][T15549] incfs: Backing dir is not set, filesystem can't be mounted.
[  636.999052][T15549] incfs: mount failed -2
[  637.003372][ T6556] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  637.160736][ T6556] usb 2-1: config 6 has an invalid interface number: 57 but max is 0
[  637.168940][ T6556] usb 2-1: config 6 has no interface number 0
[  637.175112][ T6556] usb 2-1: config 6 interface 57 has no altsetting 0
[  637.183215][ T6556] usb 2-1: New USB device found, idVendor=07b4, idProduct=010a, bcdDevice= 0.00
[  637.192406][ T6556] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  637.200449][ T6556] usb 2-1: Product: syz
[  637.204646][ T6556] usb 2-1: Manufacturer: syz
[  637.209357][ T6556] usb 2-1: SerialNumber: syz
[  637.311145][T15555] rust_binder: Write failure EINVAL in pid:730
[  637.396354][T15563] netlink: 'syz.5.5856': attribute type 15 has an invalid length.
[  637.411293][T15563] fuse: Bad value for 'user_id'
[  637.416320][T15563] fuse: Bad value for 'user_id'
[  637.417914][T15534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.429690][T15563] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.429857][T15534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.439891][T15563] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.454554][T15534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  637.463102][T15534] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  637.492096][ T6556] usb-storage 2-1:6.57: USB Mass Storage device detected
[  637.541138][ T6556] usb 2-1: USB disconnect, device number 5
[  638.010927][   T36] audit: type=1400 audit(637.992:1716): avc:  denied  { ioctl } for  pid=15576 comm="syz.1.5862" path="socket:[133194]" dev="sockfs" ino=133194 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  638.099355][ T6556] usb 5-1: new full-speed USB device number 108 using dummy_hcd
[  638.102814][   T36] audit: type=1400 audit(638.082:1717): avc:  denied  { watch_reads } for  pid=15582 comm="syz.1.5865" path="/288" dev="tmpfs" ino=1687 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[  638.115611][T15583] netlink: 84 bytes leftover after parsing attributes in process `syz.1.5865'.
[  638.141393][T15583] netlink: 72 bytes leftover after parsing attributes in process `syz.1.5865'.
[  638.250364][ T6556] usb 5-1: config 1 interface 0 altsetting 2 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  638.261356][ T6556] usb 5-1: config 1 interface 0 altsetting 2 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  638.274425][ T6556] usb 5-1: config 1 interface 0 has no altsetting 0
[  638.282505][ T6556] usb 5-1: New USB device found, idVendor=0eef, idProduct=480d, bcdDevice= 0.40
[  638.291713][ T6556] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  638.299734][ T6556] usb 5-1: Product: syz
[  638.303890][ T6556] usb 5-1: Manufacturer: ◸ﵩ绖⻚䯹쉾
[  638.309812][ T6556] usb 5-1: SerialNumber: syz
[  638.315331][T15575] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  638.724261][T15575] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT }
[  638.724301][T15575] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:1113
[  638.736855][ T6556] usbhid 5-1:1.0: can't add hid device: -71
[  638.752062][ T6556] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[  638.760836][ T6556] usb 5-1: USB disconnect, device number 108
[  639.021766][   T36] audit: type=1400 audit(639.002:1718): avc:  denied  { getopt } for  pid=15588 comm="syz.1.5868" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  639.041032][   T36] audit: type=1326 audit(639.012:1719): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15588 comm="syz.1.5868" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fc2b9f9c629 code=0x0
[  639.489319][ T6556] usb 5-1: new high-speed USB device number 109 using dummy_hcd
[  639.619320][ T6556] usb 5-1: device descriptor read/64, error -71
[  639.860919][ T6556] usb 5-1: device descriptor read/64, error -71
[  639.893952][T15600] netlink: 'syz.1.5873': attribute type 4 has an invalid length.
[  640.099334][ T6556] usb 5-1: new high-speed USB device number 110 using dummy_hcd
[  640.149352][  T330] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  640.229315][ T6556] usb 5-1: device descriptor read/64, error -71
[  640.300420][  T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  640.310611][  T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  640.319636][  T330] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  640.333861][  T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  640.343085][  T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  640.351330][  T330] usb 2-1: Product: syz
[  640.355543][  T330] usb 2-1: Manufacturer: syz
[  640.356808][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.360537][  T330] usb 2-1: SerialNumber: syz
[  640.369624][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.380221][  T330] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  640.387705][  T330] cdc_ncm 2-1:1.0: bind() failure
[  640.499358][ T6556] usb 5-1: device descriptor read/64, error -71
[  640.585311][T15604] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  640.593882][T15604] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  640.609379][ T6556] usb usb5-port1: attempt power cycle
[  640.949386][ T6556] usb 5-1: new high-speed USB device number 111 using dummy_hcd
[  640.970400][ T6556] usb 5-1: device descriptor read/8, error -71
[  641.100525][ T6556] usb 5-1: device descriptor read/8, error -71
[  641.339356][ T6556] usb 5-1: new high-speed USB device number 112 using dummy_hcd
[  641.360406][ T6556] usb 5-1: device descriptor read/8, error -71
[  641.476442][T15632] netlink: 'syz.5.5886': attribute type 4 has an invalid length.
[  641.490657][ T6556] usb 5-1: device descriptor read/8, error -71
[  641.507748][T15634] netlink: 60 bytes leftover after parsing attributes in process `syz.5.5887'.
[  641.520640][T15634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  641.529229][T15634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  641.599500][ T6556] usb usb5-port1: unable to enumerate USB device
[  642.110486][T15653] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.119156][T15653] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.128913][T15653] netlink: 68 bytes leftover after parsing attributes in process `syz.5.5895'.
[  642.771174][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.779819][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.788102][T15669] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.796719][T15670] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  642.796808][T15669] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.806463][T15670] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  642.916705][ T8177] usb 2-1: USB disconnect, device number 6
[  643.379392][ T8177] usb 5-1: new high-speed USB device number 113 using dummy_hcd
[  643.401282][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.409866][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.418063][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.428086][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.436269][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.444920][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.453086][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.461720][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.469813][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.478267][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.486365][T15703] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.494892][T15703] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.529332][ T8177] usb 5-1: Using ep0 maxpacket: 16
[  643.536315][ T8177] usb 5-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  643.545051][ T8177] usb 5-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config
[  643.555936][ T8177] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  643.566735][ T8177] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  643.575963][ T8177] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  643.584041][ T8177] usb 5-1: Product: syz
[  643.588201][ T8177] usb 5-1: Manufacturer: 隕鲲匷큶ꚽ퐙뾴伝ꁴᅈ穔숶镼螋ꝫᢤ╱ﱉ㸻ှ狎黳悡煷옸냖菨
[  643.600377][ T8177] usb 5-1: SerialNumber: syz
[  643.807060][T15685] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  643.815701][T15685] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  643.826040][ T8177] usb 5-1: 0:2 : does not exist
[  643.832775][ T8177] usb 5-1: USB disconnect, device number 113
[  644.019791][T15714] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.028382][T15714] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.053875][T15721] netlink: 'syz.5.5920': attribute type 4 has an invalid length.
[  644.071641][T15723] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  644.080240][T15723] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  644.091064][  T685] Bluetooth: hci0: Frame reassembly failed (-84)
[  644.097651][T15090] Bluetooth: hci0: Frame reassembly failed (-84)
[  644.969303][ T6556] usb 5-1: new high-speed USB device number 114 using dummy_hcd
[  645.130425][ T6556] usb 5-1: config 0 interface 0 has no altsetting 0
[  645.137280][ T6556] usb 5-1: New USB device found, idVendor=04e7, idProduct=0009, bcdDevice= 0.00
[  645.146894][ T6556] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  645.157280][ T6556] usb 5-1: config 0 descriptor??
[  645.567196][ T6556] elo 0003:04E7:0009.0061: unknown main item tag 0x2
[  645.579483][ T6556] elo 0003:04E7:0009.0061: hidraw0: USB HID v0.01 Device [HID 04e7:0009] on usb-dummy_hcd.4-1/input0
[  645.954276][   T36] audit: type=1400 audit(645.932:1720): avc:  denied  { create } for  pid=15807 comm="syz.1.5946" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1
[  646.120572][ T7683] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  647.305087][   T36] audit: type=1400 audit(647.282:1721): avc:  denied  { getopt } for  pid=15837 comm="syz.1.5959" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  647.325933][T15838] overlayfs: failed to clone lowerpath
[  647.589307][ T8177] usb 2-1: new full-speed USB device number 7 using dummy_hcd
[  647.622661][T15845] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.631813][  T421] usb 5-1: USB disconnect, device number 114
[  647.632823][T15845] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.652857][T15846] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  647.663089][T15846] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  647.760344][ T8177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  647.771547][ T8177] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  647.781741][ T8177] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2c2e, bcdDevice= 0.00
[  647.791023][ T8177] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  647.802681][ T8177] usb 2-1: config 0 descriptor??
[  648.182625][   T36] audit: type=1400 audit(648.162:1722): avc:  denied  { lock } for  pid=15853 comm="syz.5.5965" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 trawcon="system_u:object_r:mail_spool_t:s0"
[  648.210911][ T8177] lua 0003:1E7D:2C2E.0062: item fetching failed at offset 2/5
[  648.220309][ T8177] lua 0003:1E7D:2C2E.0062: parse failed
[  648.225969][ T8177] lua 0003:1E7D:2C2E.0062: probe with driver lua failed with error -22
[  648.282035][T15860] netlink: 'syz.6.5968': attribute type 4 has an invalid length.
[  648.317171][T15867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=169 sclass=netlink_route_socket pid=15867 comm=syz.5.5971
[  648.330759][T15867] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=43 sclass=netlink_route_socket pid=15867 comm=syz.5.5971
[  648.369695][T15874] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.378224][T15874] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.411173][  T330] usb 2-1: USB disconnect, device number 7
[  648.819356][ T8177] usb 5-1: new high-speed USB device number 115 using dummy_hcd
[  648.923308][T15888] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  648.931913][T15888] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  648.949356][ T8177] usb 5-1: device descriptor read/64, error -71
[  649.019273][T15892] netlink: 'syz.1.5981': attribute type 4 has an invalid length.
[  649.189325][ T8177] usb 5-1: device descriptor read/64, error -71
[  649.212840][T15912] netlink: 'syz.6.5990': attribute type 5 has an invalid length.
[  649.220666][T15912] netlink: 45 bytes leftover after parsing attributes in process `syz.6.5990'.
[  649.299319][  T330] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  649.449319][ T8177] usb 5-1: new high-speed USB device number 116 using dummy_hcd
[  649.451005][  T330] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  649.467161][  T330] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[  649.477450][  T330] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  649.486539][  T330] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  649.494589][  T330] usb 2-1: Product: syz
[  649.498764][  T330] usb 2-1: Manufacturer: syz
[  649.503406][  T330] usb 2-1: SerialNumber: syz
[  649.509859][  T330] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[  649.516665][  T330] cdc_ncm 2-1:1.0: bind() failure
[  649.531849][T15924] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  649.540447][T15924] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  649.589362][ T8177] usb 5-1: device descriptor read/64, error -71
[  649.829329][ T8177] usb 5-1: device descriptor read/64, error -71
[  649.939451][ T8177] usb usb5-port1: attempt power cycle
[  650.193182][T15929] netlink: 8 bytes leftover after parsing attributes in process `syz.6.5998'.
[  650.224001][T15933] IPv4: Oversized IP packet from 127.202.26.0
[  650.279360][ T8177] usb 5-1: new high-speed USB device number 117 using dummy_hcd
[  650.300393][ T8177] usb 5-1: device descriptor read/8, error -71
[  650.321302][   T36] audit: type=1400 audit(650.302:1723): avc:  denied  { accept } for  pid=15934 comm="syz.6.6001" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  650.430357][ T8177] usb 5-1: device descriptor read/8, error -71
[  650.453774][   T36] audit: type=1326 audit(650.432:1724): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15939 comm="syz.6.6003" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f863979c629 code=0x0
[  650.625890][T15945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  650.634537][T15945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  650.669469][ T8177] usb 5-1: new high-speed USB device number 118 using dummy_hcd
[  650.690897][ T8177] usb 5-1: device descriptor read/8, error -71
[  650.820333][ T8177] usb 5-1: device descriptor read/8, error -71
[  650.929444][ T8177] usb usb5-port1: unable to enumerate USB device
[  651.296382][T15953] netlink: 64 bytes leftover after parsing attributes in process `syz.6.6008'.
[  651.305376][T15953] tipc: Invalid UDP bearer configuration
[  651.305400][T15953] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[  651.969304][  T603] usb 5-1: new high-speed USB device number 119 using dummy_hcd
[  652.077054][ T8177] usb 2-1: USB disconnect, device number 8
[  652.101770][T15740] Bluetooth: hci0: Frame reassembly failed (-84)
[  652.119404][  T603] usb 5-1: Using ep0 maxpacket: 8
[  652.125659][  T603] usb 5-1: config 0 interface 0 altsetting 41 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  652.139107][  T603] usb 5-1: config 0 interface 0 has no altsetting 0
[  652.145952][  T603] usb 5-1: New USB device found, idVendor=ffff, idProduct=ffff, bcdDevice= 0.00
[  652.155170][  T603] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  652.164373][  T603] usb 5-1: config 0 descriptor??
[  652.449291][ T8177] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  652.572662][  T603] usbhid 5-1:0.0: can't add hid device: -71
[  652.578696][  T603] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  652.587462][  T603] usb 5-1: USB disconnect, device number 119
[  652.599362][ T8177] usb 2-1: Using ep0 maxpacket: 16
[  652.605685][ T8177] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  652.615847][ T8177] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  652.626182][ T8177] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  652.635372][ T8177] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  652.643412][ T8177] usb 2-1: Product: syz
[  652.647582][ T8177] usb 2-1: Manufacturer: syz
[  652.652185][ T8177] usb 2-1: SerialNumber: syz
[  653.030936][T15997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.039519][T15997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.087265][T16000] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  653.095912][T16000] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  653.319327][  T505] usb 5-1: new high-speed USB device number 120 using dummy_hcd
[  653.470353][  T505] usb 5-1: config 0 has an invalid descriptor of length 8, skipping remainder of the config
[  653.480821][  T505] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 108, using maximum allowed: 30
[  653.491815][  T505] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 108
[  653.504997][  T505] usb 5-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00
[  653.514078][  T505] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  653.522749][  T505] usb 5-1: config 0 descriptor??
[  653.785691][  T505] usb 5-1: string descriptor 0 read error: -71
[  653.793226][  T505] usb 5-1: USB disconnect, device number 120
[  654.119303][ T7682] Bluetooth: hci0: command 0x1003 tx timeout
[  654.125624][ T7683] Bluetooth: hci0: Opcode 0x1003 failed: -110
[  654.132232][T15984] Bluetooth: hci0: Opcode 0x080f failed: -22
[  654.140555][ T8177] usb 2-1: 0:2 : does not exist
[  654.151483][ T8177] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[  654.166792][ T8177] usb 2-1: USB disconnect, device number 9
[  654.174212][  T368] udevd[368]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  654.534292][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.546508][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  654.555933][T16045] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  654.564625][T16045] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.009392][  T603] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  655.135864][T16073] netlink: 'syz.5.6059': attribute type 4 has an invalid length.
[  655.160340][  T603] usb 2-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[  655.171531][  T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  655.183142][  T603] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  655.193399][  T603] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[  655.196724][T16081] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  655.208141][  T603] usb 2-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[  655.215595][T16081] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  655.224196][  T603] usb 2-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[  655.239727][  T603] usb 2-1: Manufacturer: syz
[  655.244808][  T603] usb 2-1: config 0 descriptor??
[  655.652804][  T603] appleir 0003:05AC:8243.0063: unknown main item tag 0x0
[  655.660079][  T603] appleir 0003:05AC:8243.0063: No inputs registered, leaving
[  655.668362][  T603] appleir 0003:05AC:8243.0063: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0
[  655.788395][T16094] netlink: 44 bytes leftover after parsing attributes in process `syz.4.6068'.
[  655.798229][T16094] netlink: 12 bytes leftover after parsing attributes in process `syz.4.6068'.
[  655.807291][T16094] netlink: 8 bytes leftover after parsing attributes in process `syz.4.6068'.
[  656.199842][   T37] INFO: task syz.3.4738:12782 blocked for more than 122 seconds.
[  656.207690][   T37]       Not tainted syzkaller #0
[  656.212686][   T37] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message.
[  656.221430][   T37] task:syz.3.4738      state:D stack:0     pid:12782 tgid:12781 ppid:9482   flags:0x00004004
[  656.231760][   T37] Call Trace:
[  656.235038][   T37]  <TASK>
[  656.238012][   T37]  __schedule+0x134f/0x1ea0
[  656.242593][   T37]  ? __sched_text_start+0x10/0x10
[  656.247621][   T37]  ? __schedule+0x1357/0x1ea0
[  656.252318][   T37]  ? __kasan_check_write+0x18/0x20
[  656.257460][   T37]  ? __mutex_add_waiter+0x184/0x2a0
[  656.262834][   T37]  ? __kasan_check_write+0x18/0x20
[  656.268062][   T37]  ? trace_contention_begin+0xc0/0xc0
[  656.273506][   T37]  schedule+0xc5/0x240
[  656.277593][   T37]  schedule_preempt_disabled+0x14/0x30
[  656.283109][   T37]  __mutex_lock+0x960/0x1bb0
[  656.287727][   T37]  ? __ww_mutex_lock_interruptible_slowpath+0x30/0x30
[  656.294523][   T37]  ? __kasan_check_write+0x18/0x20
[  656.299672][   T37]  ? _raw_spin_lock+0x92/0x120
[  656.304723][   T37]  ? wake_up_q+0x10f/0x1c0
[  656.309139][   T37]  ? __mutex_unlock_slowpath+0x539/0x780
[  656.314833][   T37]  ? __kasan_slab_free+0x6a/0x80
[  656.319877][   T37]  __mutex_lock_slowpath+0xe/0x20
[  656.324914][   T37]  mutex_lock+0x113/0x1d0
[  656.329320][   T37]  ? __cfi_mutex_lock+0x10/0x10
[  656.334242][   T37]  ? mutex_unlock+0xe7/0x240
[  656.338843][   T37]  ? __cfi_mutex_unlock+0x10/0x10
[  656.343920][   T37]  loop_reread_partitions+0x4a/0x110
[  656.349216][   T37]  loop_configure+0x1068/0x13a0
[  656.354122][   T37]  ? __cfi_loop_configure+0x10/0x10
[  656.359372][   T37]  ? __cfi_cgroup_rstat_updated+0x10/0x10
[  656.365108][   T37]  ? __kasan_check_write+0x18/0x20
[  656.370372][   T37]  lo_ioctl+0xa8b/0x2070
[  656.374642][   T37]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  656.380726][   T37]  ? update_curr+0x50c/0x9e0
[  656.385365][   T37]  ? __cfi_lo_ioctl+0x10/0x10
[  656.390200][   T37]  ? update_load_avg+0x506/0x1990
[  656.395230][   T37]  ? __calc_delta+0x280/0x280
[  656.399928][   T37]  ? stack_trace_save+0xaa/0x100
[  656.404866][   T37]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  656.410968][   T37]  ? kasan_save_track+0x4f/0x80
[  656.415823][   T37]  ? update_load_avg+0x506/0x1990
[  656.420866][   T37]  ? detach_entity_load_avg+0x7b0/0x7b0
[  656.426446][   T37]  ? __kasan_check_read+0x15/0x20
[  656.431515][   T37]  ? __cfi___update_load_avg_cfs_rq+0x10/0x10
[  656.437586][   T37]  ? xfd_validate_state+0x68/0x140
[  656.442718][   T37]  ? __kasan_check_read+0x15/0x20
[  656.447747][   T37]  ? __perf_event_task_sched_in+0x1190/0x1370
[  656.453889][   T37]  ? __kasan_check_write+0x18/0x20
[  656.459011][   T37]  ? __switch_to+0xc4f/0x1300
[  656.463729][   T37]  ? __perf_event_task_sched_out+0x1d9/0xb90
[  656.469769][   T37]  ? __cfi___perf_event_task_sched_in+0x10/0x10
[  656.476022][   T37]  ? __cfi___switch_to+0x10/0x10
[  656.480998][   T37]  ? __cfi___perf_event_task_sched_out+0x10/0x10
[  656.487336][   T37]  ? psi_task_switch+0x59e/0xa10
[  656.492323][   T37]  ? _raw_spin_unlock+0x45/0x60
[  656.497188][   T37]  ? finish_task_switch+0x139/0x760
[  656.502437][   T37]  ? __switch_to_asm+0x3d/0x70
[  656.507209][   T37]  ? __schedule+0x1357/0x1ea0
[  656.511938][   T37]  ? avc_has_extended_perms+0x80b/0xe70
[  656.517498][   T37]  ? __asan_memcpy+0x5a/0x80
[  656.521357][T16055] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  656.522157][   T37]  ? avc_has_extended_perms+0x969/0xe70
[  656.531822][T16055] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  656.536013][   T37]  ? __asan_set_shadow_00+0x12/0x20
[  656.548984][   T37]  ? do_vfs_ioctl+0x182d/0x2010
[  656.553926][   T37]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  656.559603][   T37]  ? schedule+0xc5/0x240
[  656.563871][   T37]  ? futex_unqueue+0x136/0x160
[  656.568647][   T37]  ? __asan_set_shadow_00+0x12/0x20
[  656.573929][   T37]  ? blkdev_common_ioctl+0x11d8/0x2730
[  656.579439][   T37]  ? blkdev_bszset+0x230/0x230
[  656.584257][   T37]  ? __kasan_check_read+0x15/0x20
[  656.589535][   T37]  ? has_cap_mac_admin+0xd0/0xd0
[  656.594515][   T37]  ? futex_wait+0x2ac/0x7b0
[  656.599025][   T37]  ? __cfi_do_futex+0x10/0x10
[  656.603977][   T37]  ? __cfi_lo_ioctl+0x10/0x10
[  656.608769][   T37]  blkdev_ioctl+0x54b/0x690
[  656.613339][   T37]  ? __cfi_blkdev_ioctl+0x10/0x10
[  656.618368][   T37]  ? bpf_lsm_file_ioctl+0xd/0x20
[  656.623321][   T37]  ? security_file_ioctl+0x3e/0x110
[  656.628523][   T37]  ? __cfi_blkdev_ioctl+0x10/0x10
[  656.633594][   T37]  __se_sys_ioctl+0x135/0x1b0
[  656.638278][   T37]  __x64_sys_ioctl+0x7f/0xa0
[  656.643111][   T37]  x64_sys_call+0x1878/0x2ee0
[  656.647910][   T37]  do_syscall_64+0x57/0xf0
[  656.652747][   T37]  ? clear_bhb_loop+0x50/0xa0
[  656.657499][   T37]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  656.663515][   T37] RIP: 0033:0x7f815cb9c629
[  656.667930][   T37] RSP: 002b:00007f815da92028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  656.676484][   T37] RAX: ffffffffffffffda RBX: 00007f815ce15fa0 RCX: 00007f815cb9c629
[  656.684486][   T37] RDX: 0000200000000080 RSI: 0000000000004c0a RDI: 0000000000000005
[  656.692506][   T37] RBP: 00007f815cc32b39 R08: 0000000000000000 R09: 0000000000000000
[  656.700502][   T37] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  656.708562][   T37] R13: 00007f815ce16038 R14: 00007f815ce15fa0 R15: 00007fff133f7198
[  656.716548][   T37]  </TASK>
[  656.719758][   T37] NMI backtrace for cpu 0
[  656.719773][   T37] CPU: 0 UID: 0 PID: 37 Comm: khungtaskd Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3
[  656.719799][   T37] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  656.719810][   T37] Call Trace:
[  656.719816][   T37]  <TASK>
[  656.719823][   T37]  __dump_stack+0x21/0x30
[  656.719848][   T37]  dump_stack_lvl+0x140/0x1c0
[  656.719868][   T37]  ? __cfi_dump_stack_lvl+0x10/0x10
[  656.719891][   T37]  dump_stack+0x19/0x20
[  656.719912][   T37]  nmi_cpu_backtrace+0x2ba/0x2d0
[  656.719937][   T37]  ? rcu_read_unlock_special+0xb7/0x420
[  656.719959][   T37]  ? __cfi_nmi_cpu_backtrace+0x10/0x10
[  656.719984][   T37]  ? sched_show_task+0x371/0x530
[  656.720005][   T37]  ? __rcu_read_unlock+0xc0/0xc0
[  656.720025][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  656.720046][   T37]  ? __cfi_nmi_raise_cpu_backtrace+0x10/0x10
[  656.720066][   T37]  nmi_trigger_cpumask_backtrace+0x142/0x2c0
[  656.720092][   T37]  arch_trigger_cpumask_backtrace+0x14/0x20
[  656.720114][   T37]  watchdog+0xdad/0xf00
[  656.720138][   T37]  ? __kasan_check_write+0x18/0x20
[  656.720161][   T37]  ? __cfi_watchdog+0x10/0x10
[  656.720184][   T37]  ? __kasan_check_read+0x15/0x20
[  656.720204][   T37]  ? __kthread_parkme+0x137/0x180
[  656.720228][   T37]  ? schedule+0xc5/0x240
[  656.720247][   T37]  kthread+0x2c9/0x370
[  656.720264][   T37]  ? __cfi_watchdog+0x10/0x10
[  656.720288][   T37]  ? __cfi_kthread+0x10/0x10
[  656.720306][   T37]  ret_from_fork+0x67/0xa0
[  656.720328][   T37]  ? __cfi_kthread+0x10/0x10
[  656.720345][   T37]  ret_from_fork_asm+0x1a/0x30
[  656.720370][   T37]  </TASK>
[  656.720377][   T37] Sending NMI from CPU 0 to CPUs 1:
[  656.884315][    C1] NMI backtrace for cpu 1
[  656.884331][    C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 d51130501c30ee86aaec4f48ba6958e62aa015e3
[  656.884351][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[  656.884361][    C1] RIP: 0010:handle_softirqs+0x7e/0x630
[  656.884388][    C1] Code: 28 2d b4 7e 49 8d 5f 2c 48 89 d8 48 c1 e8 03 48 89 45 a0 0f b6 04 08 84 c0 0f 85 40 05 00 00 48 89 5d 98 41 8b 47 2c 89 45 bc <25> ff f7 ff ff 41 89 47 2c 65 66 8b 05 19 2d b4 7e 44 0f b7 f0 49
[  656.884401][    C1] RSP: 0018:ffffc90000230f38 EFLAGS: 00000046
[  656.884415][    C1] RAX: 0000000004200042 RBX: ffff88810366df2c RCX: dffffc0000000000
[  656.884427][    C1] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000000
[  656.884437][    C1] RBP: ffffc90000230fc0 R08: ffff8881f6f4fa07 R09: 1ffff1103ede9f40
[  656.884449][    C1] R10: dffffc0000000000 R11: ffffed103ede9f41 R12: 0000000000000000
[  656.884459][    C1] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88810366df00
[  656.884470][    C1] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  656.884483][    C1] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  656.884494][    C1] CR2: 00007f5ba7be82f8 CR3: 0000000109264000 CR4: 00000000003526b0
[  656.884508][    C1] DR0: ffffffffffffffff DR1: 00000000000001f8 DR2: 0000000000000083
[  656.884523][    C1] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[  656.884534][    C1] Call Trace:
[  656.884541][    C1]  <IRQ>
[  656.884549][    C1]  ? irqtime_account_irq+0x51/0x1c0
[  656.884567][    C1]  __irq_exit_rcu+0x47/0xb0
[  656.884585][    C1]  irq_exit_rcu+0xd/0x30
[  656.884603][    C1]  sysvec_call_function_single+0x7f/0x90
[  656.884627][    C1]  </IRQ>
[  656.884632][    C1]  <TASK>
[  656.884638][    C1]  asm_sysvec_call_function_single+0x1f/0x30
[  656.884652][    C1] RIP: 0010:pv_native_safe_halt+0x13/0x20
[  656.884670][    C1] Code: cc cc cc cc cc cc cc b8 d5 ec dd ec 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 7c 48 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90
[  656.884682][    C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2
[  656.884694][    C1] RAX: ffff8881f6f00000 RBX: ffff88810366df00 RCX: ffffffff859eda4d
[  656.884706][    C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000001111ac4
[  656.884716][    C1] RBP: ffffc900001a7e00 R08: ffff8881f6f39733 R09: 1ffff1103ede72e6
[  656.884727][    C1] R10: dffffc0000000000 R11: ffffed103ede72e7 R12: 1ffff110206cdbe0
[  656.884738][    C1] R13: 0000000000000001 R14: 0000000000000000 R15: ffffffff87ebd068
[  656.884749][    C1]  ? ct_kernel_exit+0x7d/0xb0
[  656.884767][    C1]  default_idle+0x17/0x30
[  656.884784][    C1]  arch_cpu_idle+0xd/0x20
[  656.884801][    C1]  default_idle_call+0x3e/0x80
[  656.884823][    C1]  do_idle+0x19f/0x4b0
[  656.884835][    C1]  ? idle_inject_timer_fn+0x80/0x80
[  656.884850][    C1]  cpu_startup_entry+0x47/0x60
[  656.884862][    C1]  start_secondary+0x12e/0x140
[  656.884880][    C1]  common_startup_64+0x13b/0x157
[  656.884898][    C1]  </TASK>
[  657.174855][  T603] usb 2-1: USB disconnect, device number 10
[  660.689127][  T110] udevd[110]: worker [390] /devices/virtual/block/loop9 is taking a long time