last executing test programs:
5.991895672s ago: executing program 4 (id=16):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0)
write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb)
nanosleep(&(0x7f0000000800)={0x0, 0x23c34600}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='0\x00', 0x2)
5.742880238s ago: executing program 2 (id=19):
r0 = openat$kvm(0x0, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, &(0x7f0000000200)=[@enable_nested={0x12c, 0x18}, @uexit={0x0, 0x18, 0xface}], 0x10})
ioctl$KVM_SET_CPUID2(r3, 0x4008ae8a, &(0x7f0000000300)={0x1, 0x0, [{0x0, 0x0, 0x0, 0x1, 0x756e6547, 0x6c65746e, 0x49656e69}]})
r4 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r4, 0x3, 0x11, r3, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
5.654383471s ago: executing program 2 (id=20):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_CAP_HYPERV_SYNIC(r2, 0x4068ae63, &(0x7f0000000400))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x40000090, 0x0, 0x20}]})
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x40a8ae88, &(0x7f0000000500)=@x86={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20})
ioctl$KVM_GET_LAPIC(r2, 0x8400ae86, &(0x7f0000000540))
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x40000070}]})
5.609882772s ago: executing program 2 (id=21):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys_mnt\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys_mnt/module/firmware_class/parameters/path\x00', 0x1, 0x0)
write(r0, &(0x7f0000000300)='.\x00', 0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./ath9k_htc\x00', 0x1ff)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./ath9k_htc/htc_9271-1.4.0.fw\x00', 0x42, 0x1b6)
write(r1, &(0x7f0000000600)="1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef", 0x40)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./ath9k_htc/htc_9271.fw\x00', 0x42, 0x1b6)
write(r2, &(0x7f0000000600)="1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef", 0x40)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./htc_9271-1.4.0.fw\x00', 0x42, 0x1b6)
write(r3, &(0x7f0000000600)="1234567890abcdef1234567890abcdef1234567890abcdef1234567890abcdef", 0x40)
r4 = syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000080), 0x0)
syz_usb_ep_write$ath9k_ep2(r4, 0x83, 0x10, &(0x7f0000000000)=@ready={0x0, 0x0, 0x8, 'BBBB'})
nanosleep(&(0x7f0000000900)={0x0, 0x1dcd6500}, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
write(r5, &(0x7f0000000a00)="ffffffffffff00112233445508004500001c000000004011000001010101010101020001000100080000", 0x2a)
5.27267936s ago: executing program 4 (id=26):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000100)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/class/misc/device-mapper/dev\x00', 0x0, 0x0)
read(r0, &(0x7f0000000300)=""/100, 0x64)
5.214757352s ago: executing program 4 (id=27):
syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000014da2108ab1204000000000000010902240001b30000040904410c17ff5d810009050f1f050440000009058303"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0xb, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r0, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0xc, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r1, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r2 = syz_open_dev$usbfs(&(0x7f0000000100), 0x16, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r2, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0xd, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r3, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0xe, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r4, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x18, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0xf, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r6, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r7 = syz_open_dev$usbfs(&(0x7f0000000100), 0x12, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r7, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x13, 0x8041)
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000200))
ioctl$USBDEVFS_SETINTERFACE(r8, 0x80085504, &(0x7f0000000200)={0x41, 0xc})
5.151255323s ago: executing program 0 (id=29):
r0 = syz_usb_connect(0x2, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408680630b0000000000010902200001010080fa0904000002ffffff000705810240000007050202400000"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000600))
syz_usb_ep_write(r0, 0x81, 0x8, &(0x7f0000000100)="0102010400000000")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000600))
syz_usb_ep_write(r0, 0x81, 0xc, &(0x7f0000000200)="0104010808010008ffffffff")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000600))
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000300)="0105010100")
syz_usb_ep_read(r0, 0x2, 0x40, &(0x7f0000000600))
syz_usb_ep_write(r0, 0x81, 0x5, &(0x7f0000000400)="0108010100")
nanosleep(&(0x7f0000000500)={0x1}, 0x0)
3.001213396s ago: executing program 0 (id=32):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="f4", 0x1}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000000)={0x2, 0x0, [{0x830, 0x0, 0x40000}, {0x6e0, 0x0, 0x1}]})
ioctl$KVM_RUN(r2, 0xae80, 0x0)
2.592156107s ago: executing program 2 (id=33):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='0\x00', &(0x7f0000000200)='./sys_mnt\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./sys_mnt/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000500)='md0\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys_mnt/block/md0/md/level\x00', 0x1, 0x0)
write(r1, &(0x7f0000000700)='raid1\x00', 0x6)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./sys_mnt/block/md0/md/raid_disks\x00', 0x1, 0x0)
write(r2, &(0x7f0000000900)='2\x00', 0x2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./sys_mnt/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r3, &(0x7f0000000b00)='7:0\x00', 0x4)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./sys_mnt/block/md0/md/array_state\x00', 0x1, 0x0)
write(r4, &(0x7f0000000d00)='active\x00', 0x7)
nanosleep(&(0x7f0000000e00)={0x1}, 0x0)
2.195277466s ago: executing program 1 (id=37):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0)
write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb)
nanosleep(&(0x7f0000000800)={0x0, 0x23c34600}, 0x0)
r10 = openat(0xffffffffffffff9c, &(0x7f0000000840)='./sys/bus/usb/devices/5-1/bConfigurationValue\x00', 0x2, 0x0)
write(r10, &(0x7f0000000900)='0\x00', 0x2)
2.011215111s ago: executing program 0 (id=38):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev_mnt\x00', 0x3ff)
mount(&(0x7f00000002c0)=@filename='none\x00', &(0x7f0000000040)='./dev_mnt\x00', &(0x7f0000000080)='devtmpfs\x00', 0x0, &(0x7f00000000a0)='\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev_mnt/mapper/control\x00', 0x2, 0x0)
ioctl(r0, 0xc138fd03, &(0x7f0000000100)="040000003200000000000000380100003801000000000000000000000000000000000000000000000000000000000000746573742d696e7465677269747900"/407)
2.010765061s ago: executing program 0 (id=39):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0x1234\n', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='0x5678\n', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r3, &(0x7f0000000900)='0\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000b00)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r5, &(0x7f0000000d00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r6, &(0x7f0000000f00)='0\n', 0x2)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
write(r7, &(0x7f0000001100)='0\n', 0x2)
close(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f0000001300)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g_uac2/configs/c.1/uac2.usb0\x00')
2.010286521s ago: executing program 0 (id=40):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff)
mount(0x0, &(0x7f0000000140)='./mysys\x00', &(0x7f0000000180)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mysys/bus/pci/devices/0000:00:01.0/resource0\x00', 0x2, 0x0)
pwrite64(r0, &(0x7f0000000300)="20000001", 0x4, 0x0)
pwrite64(r0, &(0x7f0000000310)="01000001", 0x4, 0x4)
pwrite64(r0, &(0x7f0000000320)="01000001", 0x4, 0x10)
pwrite64(r0, &(0x7f0000000330)='\x00\b\x00\x00', 0x4, 0x14)
pwrite64(r0, &(0x7f0000000340)="00060000", 0x4, 0x18)
pwrite64(r0, &(0x7f0000000350)='\x00\x00\x00\x00', 0x4, 0x20)
pwrite64(r0, &(0x7f0000000360)="01000000", 0x4, 0x24)
pwrite64(r0, &(0x7f0000000370)="01000000", 0x4, 0x28)
pwrite64(r0, &(0x7f0000000380)="02100003", 0x4, 0x400)
pwrite64(r0, &(0x7f0000000390)='USB ', 0x4, 0x404)
pwrite64(r0, &(0x7f00000003a0)="01000000", 0x4, 0x408)
pwrite64(r0, &(0x7f00000003b0)='\n\x00\x00\x00', 0x4, 0x440)
pwrite64(r0, &(0x7f00000003c0)='\x00\x00\x00\x00', 0x4, 0x620)
pwrite64(r0, &(0x7f00000003d0)='\x00\x00\x00\x00', 0x4, 0x624)
pwrite64(r0, &(0x7f00000003e0)='\x00\x00\x00\x00', 0x4, 0x628)
pwrite64(r0, &(0x7f00000003f0)='\x00\x00\x00\x00', 0x4, 0x630)
pwrite64(r0, &(0x7f0000000400)='\x00\x00\x00\x00', 0x4, 0x634)
pwrite64(r0, &(0x7f0000000410)='\x00\x00\x00\x00', 0x4, 0x638)
pwrite64(r0, &(0x7f0000000420)='\x00\x00\x00\x00', 0x4, 0x63c)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./mysys/bus/pci/drivers/virtio-pci/unbind\x00', 0x1, 0x0)
write(r1, &(0x7f0000000440)='0000:00:01.0\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mysys/bus/pci/drivers/xhci_hcd/new_id\x00', 0x1, 0x0)
write(r2, &(0x7f0000000540)='1af4 1050\x00', 0xa)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
pwrite64(r0, &(0x7f0000000600)='\x00\x00\x00\x00', 0x4, 0x20)
pwrite64(r0, &(0x7f0000000610)='\x00\x00\x00\x00', 0x4, 0x24)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./mysys/bus/pci/drivers/xhci_hcd/bind\x00', 0x1, 0x0)
write(r3, &(0x7f0000000740)='0000:00:01.0\x00', 0xd)
pwrite64(r0, &(0x7f0000000600)='\x00\x00\x00\x00', 0x4, 0x20)
pwrite64(r0, &(0x7f0000000610)='\x00\x00\x00\x00', 0x4, 0x24)
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./mysys/bus/pci/devices/0000:00:01.0/dbc_bInterfaceProtocol\x00', 0x0, 0x0)
read(r4, &(0x7f0000000a00)=""/100, 0x64)
1.838646554s ago: executing program 4 (id=41):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_mnt\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='sysfs\x00', &(0x7f0000000080)='./sys_mnt\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys_mnt/bus/pci/devices\x00', 0x0, 0x0)
getdents64(r0, &(0x7f0000000200), 0x1000)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys_mnt/bus/pci/drivers\x00', 0x0, 0x0)
getdents64(r1, &(0x7f0000000400), 0x1000)
1.838376365s ago: executing program 4 (id=42):
syz_usb_connect(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x409, 0x63, 0x100, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x0, 0x80, 0xfa, "", [{{0x9, 0x4, 0x0, 0x0, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0x81, 0x2, 0x200}}, {{0x9, 0x5, 0x2, 0x2, 0x200}}]}}]}}]}}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0})
nanosleep(&(0x7f0000000100)={0x0, 0x1dcd6500}, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
1.744707937s ago: executing program 2 (id=43):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x3, 0x32, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x8000000, &(0x7f0000000000/0x1000000)=nil})
madvise(&(0x7f0000000000/0x1000000)=nil, 0x8000000, 0x17)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
mmap(&(0x7f0000000000/0x1000000)=nil, 0x2000000, 0x3, 0x8032, 0xffffffffffffffff, 0x0)
1.507162853s ago: executing program 1 (id=44):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/platform/devices/PNP0501:00/driver_override\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='acpi-battery\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/bus/platform/devices/PNP0B00:00/driver_override\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='acpi-battery\x00', 0xd)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./sys/bus/platform/devices/LNXPWRBN:00/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000400)='acpi-battery\x00', 0xd)
1.418970895s ago: executing program 1 (id=45):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/class/i2c-adapter\x00', 0x0, 0x0)
1.418693035s ago: executing program 1 (id=46):
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000001c0)={0x0, &(0x7f0000000200)=[@code={0xa, 0x18, {"0f0b6b766ddbe3"}}], 0x18})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
1.356824267s ago: executing program 1 (id=47):
syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xc, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xd, 0x0)
syz_open_dev$usbfs(&(0x7f0000000000), 0xe, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./config\x00', &(0x7f0000000140)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff)
symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/rndis.usb0\x00')
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r0, &(0x7f0000000340)='dummy_udc.0\n', 0xc)
pipe2(&(0x7f0000000400)={0x0, 0x0}, 0x0)
read(r0, &(0x7f0000000500), 0x1)
1.21810655s ago: executing program 1 (id=48):
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./sys\x00', &(0x7f0000000140)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/usb/drivers_probe\x00', 0x1, 0x0)
write(r0, &(0x7f00000001c0)='0\x00', 0x2)
close(r0)
r1 = syz_usb_connect(0x3, 0x39, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ffff0040da0b538100200102030109022700010100a0320904000003ffff0000070581020002000705020200020007058303400008"], 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/usb/drivers/r8152-cfgselector/bind\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='5-1:1.0\x00', 0x8) (async)
syz_usb_control_io(r1, 0x0, &(0x7f0000000280)={0x84, &(0x7f0000000340)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000380)={0x84, &(0x7f0000000440)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000540)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000640)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r1, 0x0, &(0x7f0000000680)={0x84, &(0x7f0000000740)={0x40, 0x5, 0x6, '\x00\x00 L\x00\x00'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000780)={'syzkaller0\x00', 0x1})
ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f00000007c0)={'syzkaller1\x00', 0x1})
nanosleep(&(0x7f0000000800)={0x1}, 0x0)
1.110803693s ago: executing program 0 (id=49):
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040720c0c0000000000000109022000010100803209040000040000000007050102400000070581024000000705020240000007058202400000"], 0x0)
nanosleep(&(0x7f0000000300)={0x1}, 0x0)
r0 = socket$inet(0x2, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000100)={'vcan0\x00', &(0x7f0000000200)=@ethtool_ts_info})
873.529458ms ago: executing program 3 (id=51):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(&(0x7f0000000100)=@filename='configfs\x00', &(0x7f0000000000)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./sys\x00', 0x1ff)
mount(&(0x7f0000000400)=@filename='sysfs\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000500)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config/usb_gadget/g_uac2\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g_uac2/idVendor\x00', 0x1, 0x0)
write(r0, &(0x7f0000000200)='0x1234\n', 0x7)
close(r0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g_uac2/idProduct\x00', 0x1, 0x0)
write(r1, &(0x7f0000000400)='0x5678\n', 0x7)
close(r1)
mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g_uac2/functions/uac2.usb0\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_chmask\x00', 0x1, 0x0)
write(r2, &(0x7f0000000700)='0\n', 0x2)
close(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_chmask\x00', 0x1, 0x0)
write(r3, &(0x7f0000000900)='0\n', 0x2)
close(r3)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_mute_present\x00', 0x1, 0x0)
write(r4, &(0x7f0000000b00)='0\n', 0x2)
close(r4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/c_volume_present\x00', 0x1, 0x0)
write(r5, &(0x7f0000000d00)='0\n', 0x2)
close(r5)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_mute_present\x00', 0x1, 0x0)
write(r6, &(0x7f0000000f00)='0\n', 0x2)
close(r6)
r7 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./config/usb_gadget/g_uac2/functions/uac2.usb0/p_volume_present\x00', 0x1, 0x0)
write(r7, &(0x7f0000001100)='0\n', 0x2)
close(r7)
mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g_uac2/configs/c.1\x00', 0x1ff)
openat(0xffffffffffffff9c, &(0x7f0000001500)='./config/usb_gadget/g_uac2/UDC\x00', 0x1, 0x0)
798.8452ms ago: executing program 3 (id=52):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000000)=@filename='sysfs\x00', &(0x7f0000000100)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='md0\n\x00', 0x4)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/block/md0/md/metadata_version\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='1.0\n\x00', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./file0\x00', 0x42, 0x1ff)
ftruncate(r2, 0x200000)
pwrite64(r2, &(0x7f0000001000)="fc4e2ba90100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006400000000000000010000000000000000080000000000004000000002000000000000000000000000000000000000000000000000000000000000000008000000000000f00f0000f00f0000000000000000000000000000000000000000000000000000000000000000640000000000000001000000000000000000000000000000eb7f2ca902000000000200000000000000000000000000000000000000000000000000000100", 0x104, 0x1fe000)
r3 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x2)
ioctl$LOOP_SET_FD(r3, 0x4c00, r2)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0)
write(r4, &(0x7f0000000a00)='7:0\n\x00', 0x4)
730.854582ms ago: executing program 3 (id=53):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="6c6e6fc3", 0x4}], 0x1, 0x0, &(0x7f0000000000), 0x0)
r3 = ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04)
mmap$KVM_VCPU(&(0x7f0000009000/0x1000)=nil, r3, 0x3, 0x11, r2, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
672.133314ms ago: executing program 3 (id=54):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000020)={&(0x7f0000000040)=@ipv4_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0)
640.162525ms ago: executing program 3 (id=55):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/idVendor\x00', 0x2, 0x0)
write(r0, &(0x7f0000000180)='0x1d6b\x00', 0x6)
r1 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x2, 0x0)
write(r1, &(0x7f0000000200)='0x0104\x00', 0x6)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/strings/0x409\x00', 0x1ff)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/strings/0x409/serialnumber\x00', 0x2, 0x0)
write(r2, &(0x7f00000002c0)='1234567890\x00', 0xb)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/strings/0x409/manufacturer\x00', 0x2, 0x0)
write(r3, &(0x7f0000000340)='Linux Foundation\x00', 0x11)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./config/usb_gadget/g1/strings/0x409/product\x00', 0x2, 0x0)
write(r4, &(0x7f00000003c0)='Test Gadget\x00', 0xc)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000480)='./config/usb_gadget/g1/configs/c.1/strings/0x409\x00', 0x1ff)
r5 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./config/usb_gadget/g1/configs/c.1/strings/0x409/configuration\x00', 0x2, 0x0)
write(r5, &(0x7f0000000500)='Conf 1\x00', 0x7)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./config/usb_gadget/g1/configs/c.1\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r6, &(0x7f00000005c0)='midi.usb0\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/configs/c.2\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000640)='./config/usb_gadget/g1/configs/c.2/strings/0x409\x00', 0x1ff)
r7 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.2/strings/0x409/configuration\x00', 0x2, 0x0)
write(r7, &(0x7f00000006c0)='Conf 2\x00', 0x7)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/configs/c.2\x00', 0x0, 0x0)
symlinkat(&(0x7f0000000580)='./config/usb_gadget/g1/functions/midi.usb0\x00', r8, &(0x7f0000000740)='midi.usb0\x00')
r9 = openat(0xffffffffffffff9c, &(0x7f0000000780)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0)
write(r9, &(0x7f00000007c0)='dummy_udc.0\x00', 0xb)
nanosleep(&(0x7f0000000800)={0x0, 0x23c34600}, 0x0)
write(0xffffffffffffffff, &(0x7f0000000900)='0\x00', 0x2)
414.93804ms ago: executing program 2 (id=56):
clock_nanosleep(0x0, 0x0, &(0x7f0000000c00)={0x1}, 0x0)
10.36293ms ago: executing program 4 (id=57):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil)
r3 = syz_kvm_add_vcpu$x86(r2, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
0s ago: executing program 3 (id=58):
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff)
mount(&(0x7f0000000040)=@filename='none\x00', &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/pci/drivers/e1000e/unbind\x00', 0x1, 0x0)
write(r0, &(0x7f0000000140)='0000:00:03.0\x00', 0xd)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/bus/pci/devices/0000:00:03.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000800000/0x10000)=nil, 0x10000, 0x3, 0x11, r1, 0x0)
write(r1, &(0x7f00000001c0)='\n03U', 0x4)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./sys/bus/pci/devices/0000:00:03.0/driver_override\x00', 0x1, 0x0)
write(r2, &(0x7f0000000240)='dwc3-pci\x00', 0x9)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./sys/bus/pci/drivers/dwc3-pci/bind\x00', 0x1, 0x0)
write(r3, &(0x7f00000002c0)='0000:00:03.0\x00', 0xd)
r4 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./sys/bus/pci/devices/0000:00:02.0/resource0\x00', 0x2, 0x0)
mmap(&(0x7f0000810000/0x10000)=nil, 0x10000, 0x3, 0x11, r4, 0x0)
write(r4, &(0x7f0000000320)='\n03U', 0x4)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./sys/bus/pci/devices/0000:00:02.0/driver_override\x00', 0x1, 0x0)
write(r5, &(0x7f0000000380)='dwc3-pci\x00', 0x9)
write(r3, &(0x7f00000003c0)='0000:00:02.0\x00', 0xd)
nanosleep(&(0x7f0000000400)={0x0, 0x5f5e100}, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./sys/bus/platform/devices/dwc3.0.auto/power/control\x00', 0x1, 0x0)
write(r6, &(0x7f0000000480)='auto\x00', 0x5)
r7 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/bus/platform/devices/dwc3.1.auto/power/control\x00', 0x1, 0x0)
write(r7, &(0x7f0000000500)='auto\x00', 0x5)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000540)='./sys/bus/pci/devices/0000:00:03.0/power/control\x00', 0x1, 0x0)
write(r8, &(0x7f0000000580)='auto\x00', 0x5)
nanosleep(&(0x7f0000000600)={0x0, 0x5f5e100}, 0x0)
write(r6, &(0x7f0000000640)='on\x00', 0x3)
write(r7, &(0x7f0000000680)='on\x00', 0x3)
write(r8, &(0x7f00000006c0)='on\x00', 0x3)
kernel console output (not intermixed with test programs):
Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts.
[ 29.108268][ T28] audit: type=1400 audit(1786961935.145:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 29.111707][ T279] cgroup: Unknown subsys name 'net'
[ 29.130973][ T28] audit: type=1400 audit(1786961935.145:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 29.158312][ T28] audit: type=1400 audit(1786961935.185:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 29.158744][ T279] cgroup: Unknown subsys name 'devices'
[ 29.304718][ T279] cgroup: Unknown subsys name 'hugetlb'
[ 29.310407][ T279] cgroup: Unknown subsys name 'rlimit'
[ 29.415928][ T28] audit: type=1400 audit(1786961935.455:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 29.439171][ T28] audit: type=1400 audit(1786961935.455:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 29.464145][ T28] audit: type=1400 audit(1786961935.455:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1
[ 29.472019][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
Setting up swapspace version 1, size = 127995904 bytes
[ 29.496378][ T28] audit: type=1400 audit(1786961935.535:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 29.521825][ T28] audit: type=1400 audit(1786961935.535:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 29.572370][ T28] audit: type=1400 audit(1786961935.605:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 29.573584][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 29.598079][ T28] audit: type=1400 audit(1786961935.615:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 30.960999][ T287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.968311][ T287] bridge0: port 1(bridge_slave_0) entered disabled state
[ 30.975879][ T287] device bridge_slave_0 entered promiscuous mode
[ 30.984465][ T287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.991543][ T287] bridge0: port 2(bridge_slave_1) entered disabled state
[ 30.999179][ T287] device bridge_slave_1 entered promiscuous mode
[ 31.029605][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.036750][ T288] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.044333][ T288] device bridge_slave_0 entered promiscuous mode
[ 31.051434][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.058638][ T288] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.066172][ T288] device bridge_slave_1 entered promiscuous mode
[ 31.107148][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.114316][ T290] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.121929][ T290] device bridge_slave_0 entered promiscuous mode
[ 31.131506][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.138659][ T290] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.146214][ T290] device bridge_slave_1 entered promiscuous mode
[ 31.190449][ T289] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.197555][ T289] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.205073][ T289] device bridge_slave_0 entered promiscuous mode
[ 31.230204][ T289] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.237326][ T289] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.244914][ T289] device bridge_slave_1 entered promiscuous mode
[ 31.321895][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.329042][ T291] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.336618][ T291] device bridge_slave_0 entered promiscuous mode
[ 31.346666][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.353774][ T291] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.361336][ T291] device bridge_slave_1 entered promiscuous mode
[ 31.457028][ T287] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.464140][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.471466][ T287] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.478547][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.495408][ T288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.502501][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.509793][ T288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.516874][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.532987][ T290] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.540051][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.547423][ T290] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.554489][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.598140][ T291] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.605239][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.612558][ T291] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.619623][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.659130][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.666551][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.674311][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.681556][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.689496][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 31.697474][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 31.705955][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.713594][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 31.721157][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 31.753179][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 31.761550][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 31.769555][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 31.777923][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.785009][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.792635][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 31.800847][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.807948][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.815396][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 31.823660][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.830689][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 31.838124][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 31.846323][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.853484][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.872839][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 31.880951][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 31.892735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 31.901026][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 31.908228][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 31.915756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 31.923403][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 31.933142][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 31.954119][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 31.963265][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 31.971700][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 31.980475][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 31.987594][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 32.007558][ T288] device veth0_vlan entered promiscuous mode
[ 32.014534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 32.023114][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 32.031602][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 32.040010][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 32.048258][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.056446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.064649][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 32.072803][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 32.080818][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 32.089424][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 32.097855][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 32.104982][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 32.112561][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 32.120061][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 32.127842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.135472][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.152814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 32.161024][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 32.169194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 32.177521][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 32.198760][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 32.207311][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 32.216618][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 32.225178][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 32.233449][ T8] bridge0: port 1(bridge_slave_0) entered blocking state
[ 32.240481][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 32.248035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 32.256625][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 32.265161][ T8] bridge0: port 2(bridge_slave_1) entered blocking state
[ 32.272202][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 32.288022][ T288] device veth1_macvtap entered promiscuous mode
[ 32.297246][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 32.305683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 32.313938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 32.322035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 32.330443][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.338926][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 32.346857][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 32.355041][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 32.363059][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 32.371355][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 32.386871][ T291] device veth0_vlan entered promiscuous mode
[ 32.404917][ T290] device veth0_vlan entered promiscuous mode
[ 32.414272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.422834][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.430947][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 32.439412][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 32.448084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 32.456735][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 32.465335][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 32.473801][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 32.482161][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.490359][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.498697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 32.506961][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.515304][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.523066][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.530567][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.538368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.546075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.553736][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.562550][ T287] device veth0_vlan entered promiscuous mode
[ 32.580009][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.590583][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 32.598965][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.613475][ T291] device veth1_macvtap entered promiscuous mode
[ 32.621747][ T288] request_module fs-gadgetfs succeeded, but still no fs?
[ 32.632600][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 32.641018][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 32.650288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.659986][ T287] device veth1_macvtap entered promiscuous mode
[ 32.667238][ T290] device veth1_macvtap entered promiscuous mode
[ 32.688039][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 32.697172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 32.706305][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 32.714929][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 32.723851][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 32.732548][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 32.757791][ T289] device veth0_vlan entered promiscuous mode
[ 32.766904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 32.775651][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 32.785683][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 32.794570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 32.805595][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 32.814049][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 32.821697][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 32.844685][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 32.853215][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 32.861521][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 32.874750][ T289] device veth1_macvtap entered promiscuous mode
[ 32.894798][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 32.916324][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 32.943904][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 32.954169][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 32.964867][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 32.974288][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 33.052192][ T338] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details.
[ 33.072226][ T337] FAULT_INJECTION: forcing a failure.
[ 33.072226][ T337] name fail_futex, interval 1, probability 0, space 0, times 1
[ 33.072347][ T19] usb 2-1: new high-speed USB device number 2 using dummy_hcd
[ 33.093714][ T337] CPU: 0 PID: 337 Comm: syz.4.12 Not tainted syzkaller #0
[ 33.100875][ T337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 33.110961][ T337] Call Trace:
[ 33.114275][ T337]
[ 33.117212][ T337] __dump_stack+0x21/0x24
[ 33.121568][ T337] dump_stack_lvl+0x110/0x170
[ 33.126247][ T337] ? __cfi_dump_stack_lvl+0x8/0x8
[ 33.131276][ T337] dump_stack+0x15/0x24
[ 33.135447][ T337] should_fail_ex+0x3bf/0x510
[ 33.140147][ T337] should_fail+0xb/0x10
[ 33.144421][ T337] get_futex_key+0x143/0xb10
[ 33.149101][ T337] ? hrtimer_try_to_cancel+0x30f/0x330
[ 33.154634][ T337] ? __cfi_get_futex_key+0x10/0x10
[ 33.159799][ T337] ? hrtimer_cancel+0x2d/0x60
[ 33.164770][ T337] futex_wake+0x150/0x8e0
[ 33.169135][ T337] ? __cfi_futex_wait+0x10/0x10
[ 33.174016][ T337] ? __cfi_hrtimer_wakeup+0x10/0x10
[ 33.179589][ T337] ? __cfi_futex_wake+0x10/0x10
[ 33.184490][ T337] ? handle_mm_fault+0x18d8/0x26b0
[ 33.189623][ T337] do_futex+0x2bf/0x430
[ 33.193822][ T337] ? _copy_from_user+0x8f/0xc0
[ 33.198629][ T337] ? __cfi_do_futex+0x10/0x10
[ 33.203311][ T337] __se_sys_futex+0x136/0x310
[ 33.208013][ T337] ? __x64_sys_futex+0x100/0x100
[ 33.212953][ T337] ? xfd_validate_state+0x70/0x150
[ 33.218075][ T337] ? __kasan_check_write+0x14/0x20
[ 33.223303][ T337] __x64_sys_futex+0xe5/0x100
[ 33.227984][ T337] x64_sys_call+0x7ec/0x9a0
[ 33.232495][ T337] do_syscall_64+0x4c/0xa0
[ 33.236944][ T337] ? clear_bhb_loop+0x30/0x80
[ 33.241643][ T337] ? clear_bhb_loop+0x30/0x80
[ 33.246325][ T337] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 33.252292][ T337] RIP: 0033:0x7f3c6079e0d9
[ 33.256751][ T337] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 33.276357][ T337] RSP: 002b:00007ffec26bc0c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[ 33.284805][ T337] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3c6079e0d9
[ 33.292809][ T337] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3c60a25fa8
[ 33.300900][ T337] RBP: 000000000000085d R08: 0000000000000009 R09: 0000000000000000
[ 33.308914][ T337] R10: 00007f3c60a25fa0 R11: 0000000000000246 R12: 0000000000000000
[ 33.316892][ T337] R13: 00007f3c60a25fac R14: 00007f3c60a25fa8 R15: 00007f3c60a25fa0
[ 33.324890][ T337]
[ 33.336447][ T24] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 33.402403][ T19] usb 2-1: device descriptor read/64, error -71
[ 33.492429][ T6] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[ 33.502732][ T318] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 33.523585][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 64
[ 33.533665][ T24] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 33.545228][ T24] usb 1-1: New USB device found, idVendor=10b8, idProduct=1ebc, bcdDevice= 0.00
[ 33.554463][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 33.562639][ T24] usb 1-1: Product: syz
[ 33.566820][ T24] usb 1-1: Manufacturer: syz
[ 33.571433][ T24] usb 1-1: SerialNumber: syz
[ 33.578064][ T331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 33.585669][ T331] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 33.672503][ T19] usb 2-1: device descriptor read/64, error -71
[ 33.680440][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64
[ 33.690513][ T318] usb 4-1: Using ep0 maxpacket: 8
[ 33.695884][ T6] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 64
[ 33.705747][ T6] usb 3-1: New USB device found, idVendor=8087, idProduct=0025, bcdDevice= 0.01
[ 33.714974][ T6] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 33.723658][ T318] usb 4-1: config 0 has an invalid interface number: 143 but max is 0
[ 33.731963][ T318] usb 4-1: config 0 has no interface number 0
[ 33.738939][ T333] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 33.739161][ T318] usb 4-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b
[ 33.749586][ T333] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 33.755487][ T318] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 33.776647][ T318] usb 4-1: config 0 descriptor??
[ 33.944130][ T19] usb 2-1: new high-speed USB device number 3 using dummy_hcd
[ 34.043368][ T358] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 34.052220][ T358] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 34.102479][ T19] usb 2-1: device descriptor read/64, error -71
[ 34.176708][ T308] usb 3-1: USB disconnect, device number 2
[ 34.376315][ T19] usb 2-1: device descriptor read/64, error -71
[ 34.502416][ T19] usb usb2-port1: attempt power cycle
[ 34.698353][ T310] device offline error, dev sda, sector 274742 op 0x1:(WRITE) flags 0x4000 phys_seg 51 prio class 2
[ 34.709352][ T310] device offline error, dev sda, sector 275248 op 0x1:(WRITE) flags 0x4000 phys_seg 49 prio class 2
[ 34.720435][ T310] device offline error, dev sda, sector 275760 op 0x1:(WRITE) flags 0x4000 phys_seg 30 prio class 2
[ 34.731675][ T310] device offline error, dev sda, sector 276272 op 0x1:(WRITE) flags 0x4000 phys_seg 32 prio class 2
[ 34.743112][ T310] device offline error, dev sda, sector 276784 op 0x1:(WRITE) flags 0x4000 phys_seg 56 prio class 2
[ 34.760423][ T310] device offline error, dev sda, sector 277296 op 0x1:(WRITE) flags 0x0 phys_seg 43 prio class 2
[ 34.771187][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 34662)
[ 34.783181][ T310] device offline error, dev sda, sector 277694 op 0x1:(WRITE) flags 0x4000 phys_seg 57 prio class 2
[ 34.788501][ T364] UDC core: g1: couldn't find an available UDC or it's busy
[ 34.801682][ T310] device offline error, dev sda, sector 278200 op 0x1:(WRITE) flags 0x4000 phys_seg 62 prio class 2
[ 34.812748][ T310] device offline error, dev sda, sector 278712 op 0x1:(WRITE) flags 0x4000 phys_seg 52 prio class 2
[ 34.823848][ T310] device offline error, dev sda, sector 279224 op 0x1:(WRITE) flags 0x4000 phys_seg 56 prio class 2
[ 34.836040][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 34967)
[ 34.848341][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35331)
[ 34.861273][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2021 starting block 35432)
[ 34.873137][ T43] Buffer I/O error on device sda1, logical block 35330
[ 34.880092][ T43] Buffer I/O error on device sda1, logical block 35331
[ 34.880083][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139302)
[ 34.880200][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139306)
[ 34.887835][ T43] Buffer I/O error on device sda1, logical block 35332
[ 34.901280][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139362)
[ 34.911006][ T43] Buffer I/O error on device sda1, logical block 35333
[ 34.923591][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139404)
[ 34.929589][ T19] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[ 34.935851][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139430)
[ 34.948045][ T43] Buffer I/O error on device sda1, logical block 35334
[ 34.957173][ T310] EXT4-fs warning (device sda1): ext4_end_bio:347: I/O error 17 writing to inode 2022 starting block 139480)
[ 34.974885][ T43] Buffer I/O error on device sda1, logical block 35335
[ 34.992224][ T43] Buffer I/O error on device sda1, logical block 35336
[ 34.999383][ T43] Buffer I/O error on device sda1, logical block 35337
[ 35.006395][ T43] Buffer I/O error on device sda1, logical block 35338
[ 35.008314][ T19] usb 2-1: device descriptor read/8, error -71
[ 35.014313][ T43] Buffer I/O error on device sda1, logical block 35339
[ 35.031403][ T361] Buffer I/O error on dev sda1, logical block 132, lost async page write
[ 35.039996][ T361] Buffer I/O error on dev sda1, logical block 138, lost async page write
[ 35.048698][ T361] Buffer I/O error on dev sda1, logical block 145, lost async page write
[ 35.057390][ T361] Buffer I/O error on dev sda1, logical block 150, lost async page write
[ 35.066004][ T361] Buffer I/O error on dev sda1, logical block 157, lost async page write
[ 35.074553][ T361] Buffer I/O error on dev sda1, logical block 158, lost async page write
[ 35.083145][ T361] Buffer I/O error on dev sda1, logical block 159, lost async page write
[ 35.091612][ T361] Buffer I/O error on dev sda1, logical block 226, lost async page write
[ 35.100223][ T361] Buffer I/O error on dev sda1, logical block 243, lost async page write
[ 35.108822][ T361] Buffer I/O error on dev sda1, logical block 261, lost async page write
[ 35.117756][ T66] Aborting journal on device sda1-8.
[ 35.123213][ T66] JBD2: I/O error when updating journal superblock for sda1-8.
[ 35.147611][ T330] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.10: Detected aborted journal
[ 35.158732][ T330] EXT4-fs (sda1): I/O error while writing superblock
[ 35.165858][ T330] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.173966][ T330] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.10: Detected aborted journal
[ 35.185876][ T330] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.192555][ T19] usb 2-1: device descriptor read/8, error -71
[ 35.195008][ T361] sd 0:0:1:0: [sda] Synchronizing SCSI cache
[ 35.313467][ T363] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.15: Detected aborted journal
[ 35.325772][ T363] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.332540][ T360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.14: Detected aborted journal
[ 35.333714][ T363] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.15: Detected aborted journal
[ 35.344322][ T360] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.355087][ T363] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.361223][ T360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.14: Detected aborted journal
[ 35.378268][ T360] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.384730][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 35.384761][ T279] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.385171][ T279] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz-executor: Detected aborted journal
[ 35.397120][ T360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.14: Detected aborted journal
[ 35.404128][ T279] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.413947][ T360] EXT4-fs (sda1): Remounting filesystem read-only
[ 35.438179][ T360] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.2.14: Detected aborted journal
[ 35.457536][ T28] kauditd_printk_skb: 40 callbacks suppressed
[ 35.457552][ T28] audit: type=1400 audit(1786961941.495:114): avc: denied { read } for pid=366 comm="syz.4.16" name="idVendor" dev="configfs" ino=17545 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=file permissive=1
[ 35.486396][ T19] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[ 35.499366][ T367] UDC core: g1: couldn't find an available UDC or it's busy
[ 35.508233][ T28] audit: type=1400 audit(1786961941.535:115): avc: denied { read } for pid=366 comm="syz.4.16" name="c.1" dev="configfs" ino=16857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 35.531475][ T28] audit: type=1400 audit(1786961941.535:116): avc: denied { open } for pid=366 comm="syz.4.16" path="/5/config/usb_gadget/g1/configs/c.1" dev="configfs" ino=16857 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 35.564320][ T19] usb 2-1: device descriptor read/8, error -71
[ 35.585074][ T28] audit: type=1400 audit(1786961941.625:117): avc: denied { mount } for pid=371 comm="syz.2.18" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 35.607813][ T28] audit: type=1400 audit(1786961941.655:118): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 35.646401][ T28] audit: type=1400 audit(1786961941.685:119): avc: denied { write } for pid=373 comm="syz.2.19" name="kvm" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[ 35.713520][ T19] usb 2-1: device descriptor read/8, error -71
[ 35.804343][ T382] using random self ethernet address
[ 35.809714][ T382] using random host ethernet address
[ 35.816443][ T382] UDC core: g1: couldn't find an available UDC or it's busy
[ 35.832407][ T19] usb usb2-port1: unable to enumerate USB device
[ 35.875927][ T28] audit: type=1400 audit(1786961941.915:120): avc: denied { write } for pid=381 comm="syz.1.22" name="002" dev="devtmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[ 36.053778][ T308] usb 4-1: USB disconnect, device number 2
[ 36.062367][ T318] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[ 36.216683][ T336] usb 1-1: USB disconnect, device number 2
[ 36.252752][ T318] usb 3-1: no configurations
[ 36.257470][ T318] usb 3-1: can't read configurations, error -22
[ 36.342365][ T24] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[ 36.412372][ T318] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[ 36.422339][ T59] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[ 36.462365][ T308] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 36.522324][ T24] usb 2-1: Using ep0 maxpacket: 32
[ 36.528992][ T24] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 36.537570][ T24] usb 2-1: config index 0 descriptor too short (expected 160, got 141)
[ 36.546142][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 36.557166][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 36.567475][ T24] usb 2-1: New USB device found, idVendor=0499, idProduct=1054, bcdDevice= 0.40
[ 36.576672][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 36.584789][ T24] usb 2-1: Product: syz
[ 36.588980][ T24] usb 2-1: Manufacturer: syz
[ 36.593621][ T24] usb 2-1: SerialNumber: syz
[ 36.602807][ T318] usb 3-1: no configurations
[ 36.607582][ T318] usb 3-1: can't read configurations, error -22
[ 36.613062][ T59] usb 5-1: Using ep0 maxpacket: 8
[ 36.615103][ T318] usb usb3-port1: attempt power cycle
[ 36.621226][ T59] usb 5-1: config 179 has an invalid interface number: 65 but max is 0
[ 36.632844][ T59] usb 5-1: config 179 has no interface number 0
[ 36.639232][ T59] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 64, changing to 10
[ 36.642536][ T336] usb 1-1: new full-speed USB device number 3 using dummy_hcd
[ 36.650886][ T308] usb 4-1: Using ep0 maxpacket: 16
[ 36.663345][ T59] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 1029, setting to 1024
[ 36.674821][ T59] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 36.686145][ T59] usb 5-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[ 36.696783][ T59] usb 5-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 36.710209][ T59] usb 5-1: config 179 interface 65 has no altsetting 0
[ 36.717225][ T59] usb 5-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 36.726375][ T59] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 36.734536][ T308] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 36.745802][ T308] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 36.759355][ T393] raw-gadget.4 gadget.4: fail, usb_ep_enable returned -22
[ 36.766707][ T308] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 36.768413][ T59] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65/input/input4
[ 36.788706][ T308] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 36.797592][ T308] usb 4-1: config 0 descriptor??
[ 36.812552][ T103] udevd[103]: worker [317] terminated by signal 7 (Bus error)
[ 36.820133][ T103] udevd[103]: worker [317] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1'
[ 37.052336][ T318] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[ 37.083070][ T318] usb 3-1: no configurations
[ 37.087974][ T318] usb 3-1: can't read configurations, error -22
[ 37.207745][ T308] HID 045e:07da: Invalid code 65791 type 1
[ 37.219499][ T308] input: HID 045e:07da as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:045E:07DA.0001/input/input5
[ 37.234426][ T405] usb usb5: usbfs: process 405 (syz.4.27) did not claim interface 0 before use
[ 37.238655][ T308] microsoft 0003:045E:07DA.0001: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0
[ 37.244382][ T103] udevd[103]: worker [403] terminated by signal 7 (Bus error)
[ 37.263523][ T318] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[ 37.272137][ T402] usb usb8: usbfs: process 402 (syz.4.27) did not claim interface 0 before use
[ 37.281281][ T103] udevd[103]: worker [403] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65'
[ 37.293155][ T318] usb 3-1: no configurations
[ 37.295420][ T402] usb usb9: usbfs: process 402 (syz.4.27) did not claim interface 0 before use
[ 37.297860][ T318] usb 3-1: can't read configurations, error -22
[ 37.312202][ T103] udevd[103]: worker [309] terminated by signal 7 (Bus error)
[ 37.314434][ T318] usb usb3-port1: unable to enumerate USB device
[ 37.321796][ T103] udevd[103]: worker [309] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1'
[ 37.349214][ T103] udevd[103]: worker [406] terminated by signal 7 (Bus error)
[ 37.356999][ T103] udevd[103]: worker [406] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0'
[ 37.388930][ T103] udevd[103]: worker [404] terminated by signal 7 (Bus error)
[ 37.396616][ T103] udevd[103]: worker [404] failed while handling '/devices/platform/dummy_hcd.4/usb5/5-1/5-1:179.65'
[ 37.492654][ T318] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[ 37.672767][ T318] usb 3-1: no configurations
[ 37.677578][ T318] usb 3-1: can't read configurations, error -22
[ 37.813234][ T24] usb 2-1: Audio class v2/v3 interfaces need an interface association
[ 37.829505][ T24] snd-usb-audio: probe of 2-1:1.0 failed with error -22
[ 37.832438][ T318] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[ 37.846105][ T24] usb 2-1: USB disconnect, device number 6
[ 37.853825][ T336] usb 1-1: unable to read config index 0 descriptor/start: -71
[ 37.863685][ T336] usb 1-1: can't read configurations, error -71
[ 38.042727][ T318] usb 3-1: no configurations
[ 38.047493][ T318] usb 3-1: can't read configurations, error -22
[ 38.054469][ T318] usb usb3-port1: attempt power cycle
[ 38.340509][ T28] audit: type=1400 audit(1786961944.375:121): avc: denied { create } for pid=417 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 38.361620][ T28] audit: type=1400 audit(1786961944.395:122): avc: denied { write } for pid=417 comm="syz.1.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[ 38.416654][ T340] usb 4-1: USB disconnect, device number 3
[ 38.472341][ T318] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[ 38.503104][ T318] usb 3-1: no configurations
[ 38.507834][ T318] usb 3-1: can't read configurations, error -22
[ 38.672328][ T318] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[ 38.703151][ T318] usb 3-1: no configurations
[ 38.707817][ T318] usb 3-1: can't read configurations, error -22
[ 38.714248][ T318] usb usb3-port1: unable to enumerate USB device
[ 38.993733][ T318] usb 5-1: USB disconnect, device number 2
[ 38.993911][ C1] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 39.007985][ T318] xpad 5-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 39.212365][ T336] usb 4-1: new full-speed USB device number 4 using dummy_hcd
[ 39.226870][ T28] audit: type=1400 audit(1786961945.265:123): avc: denied { read } for pid=142 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[ 39.239775][ T433] usb0: HOST MAC 56:63:a8:2e:ae:bd
[ 39.265501][ T433] usb0: MAC 7e:ca:c9:91:21:e9
[ 39.346442][ T440] device-mapper: ioctl: ioctl interface mismatch: kernel(4.47.0), user(4.50.0), cmd(3)
[ 39.404901][ T336] usb 4-1: New USB device found, idVendor=06cd, idProduct=0104, bcdDevice= 1.00
[ 39.414218][ T336] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 39.422349][ T336] usb 4-1: Product: syz
[ 39.426602][ T336] usb 4-1: Manufacturer: syz
[ 39.431239][ T336] usb 4-1: SerialNumber: syz
[ 39.552392][ T24] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[ 39.560639][ T308] android_work: sent uevent USB_STATE=CONNECTED
[ 39.744022][ T24] usb 1-1: Dual-Role OTG device on HNP port
[ 39.750208][ T24] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0104, bcdDevice= 6.01
[ 39.759342][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 39.767405][ T24] usb 1-1: Product: Test Gadget
[ 39.772330][ T24] usb 1-1: Manufacturer: Linux Foundation
[ 39.778123][ T24] usb 1-1: SerialNumber: 1234567890
[ 39.792338][ T336] usb 5-1: new full-speed USB device number 3 using dummy_hcd
[ 39.804053][ T308] android_work: sent uevent USB_STATE=CONFIGURED
[ 39.810509][ T310] IPv6: ADDRCONF(NETDEV_CHANGE): usb0: link becomes ready
[ 39.822193][ T24] cdc_acm 1-1:1.0: ttyACM0: USB ACM device
[ 39.859418][ T24] rndis_host 1-1:1.4 usb1: register 'rndis_host' at usb-dummy_hcd.0-1, RNDIS device, 56:63:a8:2e:ae:bd
[ 39.940180][ T24] usb 4-1: USB disconnect, device number 4
[ 39.983433][ T336] usb 5-1: not running at top speed; connect to a high speed hub
[ 40.000822][ T336] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[ 40.047099][ T336] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid maxpacket 512, setting to 64
[ 40.084327][ T336] usb 5-1: New USB device found, idVendor=0409, idProduct=0063, bcdDevice= 1.00
[ 40.094154][ T336] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.102555][ T336] usb 5-1: Product: syz
[ 40.106824][ T336] usb 5-1: Manufacturer: syz
[ 40.111518][ T336] usb 5-1: SerialNumber: syz
[ 40.118976][ T450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 40.126410][ T450] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[ 40.189365][ T483] EXT4-fs error: 90 callbacks suppressed
[ 40.189382][ T483] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.48: Detected aborted journal
[ 40.206137][ T483] EXT4-fs: 62 callbacks suppressed
[ 40.206153][ T483] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.241870][ T483] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.1.48: Detected aborted journal
[ 40.253524][ T142] EXT4-fs error (device sda1): __ext4_find_entry:1685: inode #2001: comm dhcpcd: reading directory lblock 0
[ 40.266586][ T485] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.49: Detected aborted journal
[ 40.279606][ T483] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.293892][ T485] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.303165][ T489] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 40.313780][ T489] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 40.322785][ T485] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.0.49: Detected aborted journal
[ 40.336452][ T449] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.4.42: Detected aborted journal
[ 40.354877][ T449] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.362327][ T485] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.467862][ T494] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.50: Detected aborted journal
[ 40.480194][ T494] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.488658][ T494] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.50: Detected aborted journal
[ 40.499946][ T494] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.521270][ T496] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.51: Detected aborted journal
[ 40.532302][ T496] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.540511][ T496] EXT4-fs error (device sda1): ext4_journal_check_start:83: comm syz.3.51: Detected aborted journal
[ 40.551538][ T496] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.562363][ T394] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[ 40.580580][ T499] EXT4-fs (sda1): Remounting filesystem read-only
[ 40.590680][ T500] loop0: detected capacity change from 0 to 4096
[ 40.726349][ T505] Zero length message leads to an empty skb
[ 40.748662][ T394] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=20.00
[ 40.761150][ T394] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 40.782308][ T394] usb 2-1: Product: syz
[ 40.786531][ T394] usb 2-1: Manufacturer: syz
[ 40.791149][ T394] usb 2-1: SerialNumber: syz
[ 40.874427][ T336] usb 5-1: USB disconnect, device number 3
[ 41.004924][ T394] r8152-cfgselector 2-1: Unknown version 0x4c20
[ 41.205727][ T394] r8152-cfgselector 2-1: Unknown version 0x4c20
[ 41.416961][ T517] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN
[ 41.428778][ T517] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f]
[ 41.437238][ T517] CPU: 0 PID: 517 Comm: syz.3.58 Not tainted syzkaller #0
[ 41.444358][ T517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 41.454423][ T517] RIP: 0010:software_node_register+0x36/0x1f0
[ 41.460534][ T517] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 cd 95 8a fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 5c 20 d0 fe 4d 8b 34 24 4d 85 f6 4c
[ 41.480173][ T517] RSP: 0018:ffffc90010807790 EFLAGS: 00010202
[ 41.486254][ T517] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000
[ 41.494236][ T517] RDX: ffffc9000227d000 RSI: 00000000000089f9 RDI: 00000000000089fa
[ 41.502221][ T517] RBP: ffffc900108077d0 R08: ffff88811a064abf R09: 1ffff1102340c957
[ 41.510275][ T517] R10: dffffc0000000000 R11: ffffed102340c958 R12: 0000000000000008
[ 41.518277][ T517] R13: ffff88811ab13810 R14: 0000000000000000 R15: 0000000000000000
[ 41.526435][ T517] FS: 00007fc24871f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 41.535434][ T517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.542047][ T517] CR2: 000055f968687808 CR3: 000000010c7fd000 CR4: 00000000003526b0
[ 41.550033][ T517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.558013][ T517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.566010][ T517] Call Trace:
[ 41.569296][ T517]
[ 41.572334][ T517] device_add_software_node+0x1a3/0x300
[ 41.577928][ T517] ? dwc3_pci_probe+0x41e/0xa80
[ 41.582790][ T517] dwc3_pci_probe+0x55d/0xa80
[ 41.587474][ T517] ? __cfi_dwc3_pci_probe+0x10/0x10
[ 41.592694][ T517] ? __cfi_mutex_unlock+0x10/0x10
[ 41.597735][ T517] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 41.603572][ T517] pci_device_probe+0x278/0x440
[ 41.608438][ T517] ? __cfi_pci_device_probe+0x10/0x10
[ 41.613819][ T517] really_probe+0x2d7/0x9a0
[ 41.618347][ T517] ? __kasan_check_write+0x14/0x20
[ 41.623486][ T517] __driver_probe_device+0x193/0x270
[ 41.628961][ T517] device_driver_attach+0xd7/0x1d0
[ 41.634103][ T517] bind_store+0x349/0x380
[ 41.638508][ T517] ? __cfi_bind_store+0x10/0x10
[ 41.643394][ T517] ? __kasan_check_write+0x14/0x20
[ 41.648521][ T517] ? mutex_lock+0x93/0x1b0
[ 41.652953][ T517] ? __cfi_bind_store+0x10/0x10
[ 41.657818][ T517] drv_attr_store+0x88/0xb0
[ 41.662339][ T517] ? __cfi_drv_attr_store+0x10/0x10
[ 41.667547][ T517] sysfs_kf_write+0x137/0x150
[ 41.672232][ T517] ? __cfi_sysfs_kf_write+0x10/0x10
[ 41.677495][ T517] kernfs_fop_write_iter+0x307/0x470
[ 41.682802][ T517] vfs_write+0x5ef/0xd00
[ 41.687050][ T517] ? __cfi_vfs_write+0x10/0x10
[ 41.691823][ T517] ? __cfi_mutex_lock+0x10/0x10
[ 41.696689][ T517] ? __fdget_pos+0x2cd/0x380
[ 41.701304][ T517] ? ksys_write+0x70/0x260
[ 41.705725][ T517] ksys_write+0x14a/0x260
[ 41.710067][ T517] ? __cfi_ksys_write+0x10/0x10
[ 41.714954][ T517] ? fpregs_restore_userregs+0x128/0x260
[ 41.720604][ T517] __x64_sys_write+0x7b/0x90
[ 41.725198][ T517] x64_sys_call+0x27b/0x9a0
[ 41.729739][ T517] do_syscall_64+0x4c/0xa0
[ 41.734169][ T517] ? clear_bhb_loop+0x30/0x80
[ 41.738872][ T517] ? clear_bhb_loop+0x30/0x80
[ 41.743580][ T517] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 41.749491][ T517] RIP: 0033:0x7fc24779e0d9
[ 41.753908][ T517] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 41.773517][ T517] RSP: 002b:00007fc24871f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[ 41.781945][ T517] RAX: ffffffffffffffda RBX: 00007fc247a25fa0 RCX: 00007fc24779e0d9
[ 41.789939][ T517] RDX: 000000000000000d RSI: 00002000000002c0 RDI: 0000000000000005
[ 41.797941][ T517] RBP: 00007fc247835024 R08: 0000000000000000 R09: 0000000000000000
[ 41.805925][ T517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 41.813901][ T517] R13: 00007fc247a26038 R14: 00007fc247a25fa0 R15: 00007fff0f742d98
[ 41.822005][ T517]
[ 41.825049][ T517] Modules linked in:
[ 41.830019][ T517] ---[ end trace 0000000000000000 ]---
[ 41.836693][ T517] RIP: 0010:software_node_register+0x36/0x1f0
Aug 17 10:19:07 [ 41.844263][ T517] Code: 53 48 83 ec 18 49 89 fe 48 bb 00 00 00 00 00 fc ff df e8 cd 95 8a fe 4c 89 75 c8 4d 8d 66 08 4c 89 e0 48 c1 e8 03 48 89 45 c0 <80> 3c 18 00 74 08 4c 89 e7 e8 5c 20 d0 fe 4d 8b 34 24 4d 85 f6 4c
syzkaller kern.a[ 41.865148][ T517] RSP: 0018:ffffc90010807790 EFLAGS: 00010202
lert kernel: [ [ 41.871860][ T517] RAX: 0000000000000001 RBX: dffffc0000000000 RCX: 0000000000080000
41.428778][ T5[ 41.881647][ T517] RDX: ffffc9000227d000 RSI: 00000000000089f9 RDI: 00000000000089fa
17] KASAN: null-[ 41.890820][ T517] RBP: ffffc900108077d0 R08: ffff88811a064abf R09: 1ffff1102340c957
ptr-deref in ran[ 41.900642][ T517] R10: dffffc0000000000 R11: ffffed102340c958 R12: 0000000000000008
ge [0x0000000000[ 41.909984][ T517] R13: ffff88811ab13810 R14: 0000000000000000 R15: 0000000000000000
000008-0x0000000[ 41.919291][ T517] FS: 00007fc24871f6c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
00000000f]
[ 41.929472][ T517] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 41.938157][ T517] CR2: 00007fc2486dcff8 CR3: 000000010c7fd000 CR4: 00000000003506b0
[ 41.946314][ T517] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 41.954354][ T517] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 41.962538][ T517] Kernel panic - not syncing: Fatal exception
[ 41.968776][ T517] Kernel Offset: disabled
[ 41.973108][ T517] Rebooting in 86400 seconds..