last executing test programs:

40.892832961s ago: executing program 0 (id=409):
read$FUSE(0xffffffffffffffff, 0x0, 0x3)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x4000000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x0)
r0 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r0, 0x107, 0xc, &(0x7f0000000000)=0x9, 0x4)
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x2, 0x400000000000003, 0x20, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @rand_addr=0x64010104}}, @sadb_lifetime={0x4, 0x4, 0x1, 0xfffffffffffffffe}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x62, 0xfd, 0x80000001}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}]}, 0x70}}, 0x0)
r2 = socket$inet(0x2, 0x2, 0x1)
sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000040)={0x2, 0xffff, @multicast2}, 0x10, &(0x7f0000000000)=[{&(0x7f00000002c0)="2a00a0df167e6d22", 0xffdf}], 0x1, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000830b040a0101027f000001010e0000001c000000000000000000000008"], 0x40}, 0xee00)
r3 = socket$inet_udplite(0x2, 0x2, 0x88)
accept4$inet(r3, 0x0, &(0x7f0000001000), 0x800)

40.876328431s ago: executing program 0 (id=410):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10)
sendto$inet(r0, 0x0, 0x0, 0x804, 0x0, 0x0)

40.816744164s ago: executing program 0 (id=411):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x18000000, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x1, 0xe}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})

40.816049914s ago: executing program 0 (id=412):
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000002280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b00500000000000029"], 0x5b0}, 0x20008841)
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0)
r1 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt(r1, 0x0, 0x23, 0x0, 0x0)
write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0)
preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x3a, [0xfffffff8, 0x0, 0x5, 0x10009, 0x8, 0x155f, 0x6, 0x2, 0x25cd, 0x401, 0x40000b4, 0xa, 0xb2b9, 0x24, 0x81, 0xe4, 0x6, 0xfc000000, 0x10003, 0xbbf, 0x1000, 0x1, 0x48, 0x100d, 0x3, 0x12a0, 0x8000, 0x1, 0x7, 0x6, 0x7, 0x81, 0x40008a, 0x79, 0x2, 0x10001, 0x4, 0x91, 0x4, 0xe769, 0x16, 0x2, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x84, 0x9, 0xf9a2, 0x80000001, 0xff, 0x2, 0x2, 0x2, 0x2, 0x7, 0x8, 0x7, 0x5, 0x4007f, 0xffffffff, 0x6], [0x3, 0x172, 0x6, 0xf6ca, 0x4, 0xda, 0xb8a9, 0x20000070, 0x8e, 0xd50, 0x7, 0x5, 0xfffffffe, 0x80d, 0x5, 0xa7, 0x1000, 0x0, 0x200b395, 0x400000, 0x80000000, 0x4, 0x19, 0x7, 0x400001, 0x3, 0x3, 0x8, 0xffffff7f, 0x401, 0x6, 0x200, 0x96, 0x0, 0xfffffff6, 0x401, 0x6, 0xf1, 0x6, 0xab00060, 0x5, 0x6, 0x2, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x0, 0x1ce, 0x1, 0x80000004, 0x80000001, 0x2, 0x2, 0x9, 0x95, 0x80000000, 0x4, 0xfffffff9, 0x40000003, 0x1000, 0xfffff804, 0x5], [0x2, 0xfffffffe, 0xfffc, 0x6, 0x2, 0x2e6bf783, 0xfffff100, 0x5, 0x400005, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x5, 0x400, 0x41, 0x5, 0xee4b, 0x2008004, 0x1, 0x691, 0x5, 0x89, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xffe, 0x10000a, 0x8000, 0x401, 0x3e55, 0x9, 0xd3, 0x8, 0x3437, 0x2, 0xd, 0x7, 0x601, 0x101, 0x200dd80, 0x60a0, 0x1, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0x0, 0x3, 0xd500, 0x8, 0x77, 0x9, 0xa, 0x10000, 0x3, 0x8, 0x1], [0xa772, 0x6, 0x7, 0x1afa, 0xbfc, 0x8, 0x3, 0x7f, 0x55, 0x40, 0xc, 0x1005, 0x1, 0x8000007, 0x1e, 0x9, 0x81, 0x3, 0x9d86, 0xfffffeff, 0xffbffff7, 0x8, 0x7, 0x5396, 0x939, 0x6, 0xdb, 0x7777, 0x7fffffff, 0x2, 0x100, 0xffffffff, 0x7fffffff, 0x4009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x6, 0x10000, 0x0, 0x8004, 0x6fff, 0x2, 0x3, 0xf, 0xe, 0x10, 0x26c, 0x6, 0xfffffff9, 0x4, 0xfffffff8, 0x9, 0xf, 0x463f, 0x4, 0xdad, 0x8003, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x40040, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x40000000000180, 0x8, 0x80000000, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x0, 0x5, 0x4, 0x8], 0x25000, 0x204344})
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
r7 = dup(r6)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x9}], 0x1, 0x1d, 0x0, 0x0)
r9 = syz_open_dev$loop(&(0x7f0000000100), 0x6, 0x600000)
r10 = syz_open_dev$loop(&(0x7f0000000280), 0xffffffffffffffff, 0x220000)
ioctl$LOOP_CONFIGURE(r9, 0x4c0a, &(0x7f00000002c0)={r10, 0x3, {0x0, 0x0, 0x0, 0x5, 0x1, 0x0, 0x7, 0xf, 0x4, "5cc6b72b092fbeba552b3dacb0346a3013c26d69fd3677817da561b78a3f8a6e60e16e2d41400bb2dd471d7b916b24dd457bbed045facc031706e6a6cb3d0225", "eac6015372808bd8253773cea69183a5baf9736c7d83d70957f43dfa28df48856ee6bdd91d813747316dcd069831fa54dc465b206b814dd4a4e6c7d88bf795e3", "79c000d7f978ac6f137b523b9bb3933f2755674687c2d7d755abe1cf71f8c976", [0xa]}})
timer_create(0x1, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$BTRFS_IOC_SYNC(0xffffffffffffffff, 0x9408, 0x0)
syz_open_procfs(0x0, 0x0)
r11 = epoll_create1(0x0)
epoll_pwait2(r11, &(0x7f0000000140)=[{}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0)

40.662578789s ago: executing program 0 (id=413):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x40, 0xc, 0x6, "f5a039c8fc8c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, &(0x7f0000000540)={0x14, &(0x7f0000000400)={0x40, 0x24, 0xf4, {0xf4, 0xe, "25d642c79b2a37851518a7d2865ba5fa45ce9e95912f32ade2ffcec9705941f111a25de744d2b769cd50178fd0c159a6d0e62010aa14f3f32d964de62665fa5e885927b0747f355ec6b6321b7d2a608d124ec2df7c6a4c11ccfb50614d34d58adcb07556d2ee39b011149cf553f843ca176e6e4a8b908ca7c2689282a91e4f5498716461fd8d1776180a989e17e33a3e3a1d6580c6585be8bc50f9cd5a2816247ccb4413a86c108d1d365dd9a2ce557d82bc0f726905cded36e880bcc6703cdc5fbde43e7830066730be912b87ef6fa057010a1d7f8d094b677dec0e6684400931aa361a518c95133ffe864be5ace836a73c"}}, &(0x7f0000000500)={0x0, 0x3, 0x38, @string={0x38, 0x3, "8ab121b979e0388ec960bdb4e9918055031ed4b17f3fcb92caf70ee2484016a4df508e688649d45d7f89dd53ed077bcd863d0a56224a"}}}, &(0x7f0000000780)={0x34, &(0x7f0000000580)={0x20, 0xd, 0x6e, "5ffa764bead56aaf71cab20a5ef9f9e51e9d1acfe1a63043c0c75a272ebf0eedf342d345da044cd91ff0a00eecda8f281b6edad2baebd431bd8bdc130022ffc6916f3bbfdcc7ad067b9f8058b663cfea2826456c06ab09c708d6ef75483c63450b6937d6614827027993bbcc993f"}, &(0x7f0000000600)={0x0, 0xa, 0x1, 0xf}, &(0x7f0000000640)={0x0, 0x8, 0x1, 0x7}, &(0x7f00000006c0)={0xc0, 0xa1, 0x4, 0xfffffffd}, &(0x7f0000000700)={0x40, 0xa0, 0x4, 0xfffffff8}, &(0x7f0000000740)={0xc0, 0xa2, 0x2f, "9976d6a0c67d3705496209732a7ba120fe4e2c01a51c46c09857fe676009663751c7920d51062d527b016b54bc4865"}})
syz_usb_control_io$rtl8150(r0, &(0x7f0000000100)={0x14, &(0x7f0000000080)={0x40, 0x30, 0x8, {0x8, 0x21, "4a550d168640"}}, &(0x7f00000000c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x500a}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x60, 0xf, 0x9a, "718e77bb25ec2d01d098be7e0de8c85c2d3a0641e4551f93d0c0ac81dbcbf2f2524c8d5c4859e0a43779aafa13caeac3d8270cd0d3d8464f848c9c99374e1be43bbfd5fcfb3eec872f6dcf0ef7c0b1642c33470404069eb0656c9be713b316bbb96474c1a8a9360266aff0e5032e19475351177b0890b774c3074a67599a3790604f189ebdcdb96aaa1f8a44a099e7a229f1ba59eb2c68d669a3"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x40}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000340)={0xc0, 0x5, 0x1, "9f"}, &(0x7f0000000380)={0x40, 0x5, 0x4, "12ad7c49"}})
syz_usb_connect(0x3, 0xdaa, &(0x7f0000000b40)={{0x12, 0x1, 0x310, 0x4e, 0x22, 0xb1, 0x8, 0x1410, 0x2410, 0x28a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xd98, 0x4, 0x2, 0x40, 0x80, 0x8, "", [{{0x9, 0x4, 0x93, 0x7, 0x3, 0x42, 0x90, 0x7e, 0x1, [@generic={0xf7, 0x2, "3fe9c4a6ca9518e193945811d055421b4085ee557618fdb9aa8be0f8778e83600e46de077d720b5cf291ac43d8b6c0799d783f1fd3ea6fb11fd3bbceda5df18bc71cc3cb8e3219015d947dcd72175662319466adadcd1726b3744be3fa1dd04f8c3fca8e0431787c5524d30ff29560899397637496eae2f6fd07dd653b8d3c31fe639186a264c5908599e6d96d83f32e8d9518e0d7b6b70c78261d980959ffe12398b7a2e58fdc9fad15c4440c3ebb5da4d2963885c68a2c8facaf4f5e4ad3877a9126e820015b0e5c8f546b741b4fa3bb505414a87433ed1a6aaccbbc9b265cedbd07ffa548d6c5453f114fd16103c74b0e6a6734"}], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x9, 0x9, 0x66, [@generic={0xd, 0x22, "8ace2354cf4e4f132a018f"}]}}, {{0x9, 0x5, 0xc, 0x4, 0x400, 0x8, 0xff, 0x80, [@generic={0x3, 0x8, "04"}]}}, {{0x9, 0x5, 0x7, 0x2, 0x10, 0x4, 0x9, 0x8, [@generic={0x100, 0x1, "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"}]}}]}}, {{0x9, 0x4, 0x63, 0x0, 0x9, 0x65, 0xd8, 0xa3, 0x1, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "fe7563"}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x3, 0x5, 0x6, 0x3}, {0x6, 0x24, 0x1a, 0xfff8, 0xa}, [@mbim_extended={0x8, 0x24, 0x1c, 0x4, 0x2, 0x40}, @mdlm={0x15, 0x24, 0x12, 0xfff7}, @network_terminal={0x7, 0x24, 0xa, 0x2, 0x54, 0x1, 0xc}, @mdlm={0x15, 0x24, 0x12, 0xf}, @mdlm_detail={0xf3, 0x24, 0x13, 0x2, "7a1d6f1d552afe57bf5e7d3d37086591523934d5f3818914cc48d5c308759915c157e616ead8b64df62774c76fb581fb91fac735faa87bafe2b0c2c4d4f2a9e0eda372c8f6c71f26c888892fed71bbbbf95f54bce7295df0d69a24f40d55f35dfbbd26847a4ba9e3c2dcd4d0bcf6a308e1b1f905398db833747e0167d3611b4dba7e05672b4370b7e0f482b0e6453425cdcaa89d3d17f14378e28d4121a0ec840beae91342e511d90fe00ea46a41d48cc32a2a9481d44e99fdd5c6ad71a4d78b95733393e7b0ba92ee4bbbe760aa1b559ee235f04d54df7b000dc30f402e2374282bc9aa1c1af4da9dc43fa0796b14"}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x38}]}, @cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, 'C'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x9f, 0x4, 0x8, 0x41}, [@mdlm_detail={0xa8, 0x24, 0x13, 0x1, "ed4c3603032723fb0c3d0040659e1aa8cd8a73bcfaea40c05ee794a5f1f71251e9580801be855fb6ede0028a75792a7ab4a70e3ce3552cb8aef29ca6e3770ae3eb3e876ea564933af6bb0315fbe578f31a32c114a287fff2328a25956dbec0ce28934e62b126e5781bddf1a99d5391a057f9ca618d6f47262f7152650c8032db35d954d3e54a25236d5445e9e6948d9be03eb588542f1f7176a75005d00f3cf7c9c0e26e"}, @dmm={0x7, 0x24, 0x14, 0x0, 0x93}, @ncm={0x6, 0x24, 0x1a, 0x4, 0x22}, @mbim={0xc, 0x24, 0x1b, 0x0, 0x1088, 0x3, 0x10, 0x9, 0x87}]}], [{{0x9, 0x5, 0xa, 0x0, 0x3ff, 0x5, 0x9, 0x4, [@generic={0x67, 0x24, "a59429e56de214e31182bd2b06daa53f463c1cdaef418d96ed0f0f0d640ad772957e831e2da2b4e0ec37c2e8f3b661821a396176182b203a380768eeb83a1259855449c68b7b7e12ad09f93d6face7a89c2d520f69bcfa9aad3a0846308395c1d1733c0624"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x6a}]}}, {{0x9, 0x5, 0x5, 0x0, 0x400, 0xf8, 0xf8, 0xff, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x5, 0x6}, @generic={0xc0, 0x6, "72eaff503af126e4c8b9cfe7dffd45c9a1bcd6742f81b698371af7b714b104cd0110a735baf8b2737b92ac93c456ecaea18f37863a7d6f56c52c56b86466a7748cdb5957499b5c58a690006ad7054a1373401a59c7187fe333c58d1509ce393cf1a03c9f68d17e4f30a3139a7c22e9ad13ae52497685cb870ea59f7be982bdda0a8e868cdad6ecf8f904eedd4046c6f08b8e75755e5ef550671e09e7b02f9ea8454db47ddb285e90885770e98787bb13ee6e98581879721b59283d4f291a"}]}}, {{0x9, 0x5, 0xc, 0x0, 0x200, 0x81, 0x10, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0x0, 0x2a, 0xb}]}}, {{0x9, 0x5, 0x6, 0x3, 0x8, 0x5, 0x9, 0x0, [@generic={0xf0, 0x4d, "b7e8a435d09b3667fccfc1cc053afd3db3719f747d033d51c4a9c2813fa620b17f5a656438f83e485de5d1c098af638e07592e7a6e74ca8eef01c6fb34c6f63a0318b6c91007c14cd299d3e9b2db2a7b0fd33a5e14f5be626992751e72a37caae9a7f0c23e1727de172feba6d4743e06fc21464dc71d1d92b1b47dbb06f946a11fa6150c8f16cef3b96ec553fd6b993ed0197573fd57c0af3733177eddc008f13e60900b30f4036b4df0606419bbc9f404ae6de9bd23515f81c6b0440dd513285521feda1d6ee6d3015d6730a25974646c6aa39925561caaa6a753da34d9151e2d0b7807d8637017e34de4b3ada2"}]}}, {{0x9, 0x5, 0xc, 0x1d, 0x8, 0x5, 0x81, 0x81, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x1b}]}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0x40, 0x3, 0x8d, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xc3, 0x3}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x7, 0x7}]}}, {{0x9, 0x5, 0xd, 0x8, 0x3ff, 0x6, 0x8, 0x4, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x1, 0x2}]}}, {{0x9, 0x5, 0x7, 0x10, 0x20, 0x8, 0x4, 0x53, [@generic={0x3, 0x21, 'u'}, @generic={0x16, 0x23, "4a2e64fa75c62d434aa5b3bf916ae41ab2a9ead6"}]}}, {{0x9, 0x5, 0x6, 0x0, 0x400, 0x8, 0x5, 0x10, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x2af}]}}]}}, {{0x9, 0x4, 0xaa, 0x80, 0xa, 0x55, 0xf8, 0xc3, 0x5, [@cdc_ecm={{0xa, 0x24, 0x6, 0x0, 0x0, '1AN\"]'}, {0x5, 0x24, 0x0, 0xd}, {0xd, 0x24, 0xf, 0x1, 0x6, 0x2, 0x6, 0x3}, [@call_mgmt={0x5, 0x24, 0x1, 0x7, 0x7}, @ncm={0x6, 0x24, 0x1a, 0x6, 0x2e}, @dmm={0x7, 0x24, 0x14, 0x80, 0x61}, @country_functional={0xa, 0x24, 0x7, 0x2, 0x7fff, [0xfff8, 0xd]}]}], [{{0x9, 0x5, 0x8, 0x10, 0x8, 0x3, 0x4, 0x5, [@generic={0xc, 0xa, "3d7c4878c013d247aaa9"}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x6, 0x5}]}}, {{0x9, 0x5, 0x9, 0x0, 0x40, 0x0, 0xa5, 0x40, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x1}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x35, 0x4}]}}, {{0x9, 0x5, 0x7, 0x0, 0x200, 0x5, 0x4, 0x80, [@generic={0xd9, 0x2, "f2d3c783fa60802b7529ad2a9871363c16de7482c03eae6065c5c1c0121893da3765160d8afe960fa4e5fb7ff29611eb15f76dd9d58c0e8f327fd80bf8e737e078c5e69d69e71800dc39b6c401f559a76b6e6ed99d5dfb2d3aba08aca3793abc85cbc8b9aae6c6f2d66b1bc61f8ec29d9a2ebff2d82c32eab59c643881d1f591f28ff84409f33c56cf0685e4313a2c73fd8a61df347089f2a19c8257ea636fda10870db5461bb2db75a2b7034bb5ad27b1e163eceadb5a6e0214316a4985ad259c06a98eee3fd36166c7adc9c5f72237d1502df3d1e979"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x0, 0x9, 0x7, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x2, 0x1f87}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xff, 0x1}]}}, {{0x9, 0x5, 0x9, 0x2, 0x210, 0x6f, 0x5, 0xd, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xb8, 0x9}]}}, {{0x9, 0x5, 0xd, 0x8, 0x8, 0x8, 0x4, 0x8, [@generic={0x75, 0x24, "c189acf3f9929e6f2da5a450dc5b5d08db06b99f37ce5270cb42871e9a8e93978e67703b9f4eda8f9a7db2e2571527b53b026678788fe0b45fcbf895e0c824aedfa1fe99a6619e94cf28aa2ad7d4409e94700f781fa440fbc29a91bebddf10421943b7720e1f48bf754d98a5b4e4bbc1c5c562"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x8, 0x73, [@uac_iso={0x7, 0x25, 0x1, 0x4abcb701128e3582, 0x10, 0x2}]}}, {{0x9, 0x5, 0x5, 0x10, 0x400, 0x4, 0xa6, 0x2b, [@generic={0x7a, 0xe, "754d1b6695d6b2d846479220e7599890c8940cc0c1695cb58696ebcbc77c9bce9d7f498d8df3dcb0273ca0566c251372742c104913592bd9675f76dc96ff271e62c9fe56696bf6426e87ec278ebc099e8a0b7db4669a7e79dceaea9087b412b2876fafcb35b1dff006b38f6fd1452c7131f8f646fe095750"}, @generic={0xbc, 0xe, "f1b24b66802785a27ba6bbfb19fa681d2868fe39c28f1b83570abff53bf8a891491435328abade9ab2fa35e0489e28e8ad3a92464ad62dcd163ed75c5d471c4c079a4ffb4a955a94dae75ef1eea9a07fc5ab5304dbc8ffff543218dd0198f24a66c9369186cba716153b4ca85dc1c2f1d07ebb7da7f1df4cd0dd97477bd699cd2a7ffe48173c4465f65c260430933f14d710c9655c7b06626a9c095e39b6750142b81835d35a7ae3ff816f62216013550b761a03f29e76b03584"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x20, 0x6, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x1, 0x4}, @generic={0xfd, 0x7, "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"}]}}, {{0x9, 0x5, 0x0, 0x0, 0x10, 0xec, 0x5b, 0x8e, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0xb9, 0x7}]}}]}}, {{0x9, 0x4, 0xd3, 0x0, 0x4, 0x9f, 0x7, 0x3d, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, "fe"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x8, 0x1ff, 0x7}, [@mdlm={0x15, 0x24, 0x12, 0x9}, @mdlm={0x15, 0x24, 0x12, 0x6}, @network_terminal={0x7, 0x24, 0xa, 0x4, 0x7, 0x3, 0x4}]}], [{{0x9, 0x5, 0x1, 0x1, 0x10, 0x9, 0xff, 0x1, [@generic={0x75, 0x23, "2b06c60414fde10ca35f8806f80dacd207e9fba4292a815f92118b1c49fad560466396c242e469e9942fe5f77770481124228c09d984fe5a48cabe06f612451e1aea75451e3e0aec953574cfceb957b7c5a802de5e971b86581faa8164b760e76aeea6ac55c6c6c9f48c48336d46eb74efef07"}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0x5, 0x6270}]}}, {{0x9, 0x5, 0xa, 0x2, 0x10, 0x4, 0x0, 0xe, [@generic={0x1a, 0x21, "bc97c99ce478b56b89507e35f2b6c5023cf922b5d4f27b0a"}]}}, {{0x9, 0x5, 0xa, 0x10, 0x8, 0xd, 0x2, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0xf3, 0x7f}]}}, {{0x9, 0x5, 0xf, 0x0, 0x40, 0x4, 0x5, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x5, 0x2}, @generic={0xf0, 0x7, "efeac61a48c064bf0668af41d8ce478457d4f683f6820589c5cd29b85c6bea4e44dce2d0709d1aeb73a61f40f6d6915b086b9b80d68a7aef4f232ac500b46662e9e35622b5df5923da31c8de0d107cdd9fd28f83900b519306f1d42304b9274b5230ff60d641a37ed5aab64be2dde1d78bdb0f00bbfa8bf0ada6712a4210db20df31ac534f390676615e3f20f1812209f32adf0cfa93b87cf8cb638a237b4a74ca0983bf0112aef9eb14d358b6d2bc2be1f006fb2aa5930df1fcf22fba8b42cdc86e0384eb7b2d0de6c51e2e3edbd2038a9044b6255979d6a02a2920d2e18276c2d0ca11ce0cdb9ecbe5b0c5d1da"}]}}]}}]}}]}}, &(0x7f0000001a80)={0xa, &(0x7f0000001900)={0xa, 0x6, 0x310, 0xd7, 0x4, 0x2, 0x28, 0x6}, 0xb1, &(0x7f0000001940)={0x5, 0xf, 0xb1, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x8, 0x7, 0x2, 0x8, 0x3}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x0, 0xd, 0x8}, @generic={0x9a, 0x10, 0x1, "d91d747552d8ef26f5a5c58545da3895dd42dbe6fa10c932d8a4daaf32aed021fdb97ee9a1563883f05e1985b950597e46ec57abbe90c235e9b9f98acaefd62077fca8b408ab8f55235d50b24cad7981b13d4f9585003c13f313f873995b84b5b8c3964ee6bc8b126c7d742680e8261e4d71e7c1e96fc5fb2b2e5a1b9003fe9264cd22a9e787ae3bc92d6d69415d54559f9efee60c0594"}]}, 0x2, [{0x4, &(0x7f0000001a00)=@lang_id={0x4, 0x3, 0x430}}, {0x8, &(0x7f0000001a40)=@string={0x8, 0x3, "896af8817061"}}]})
r1 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="200906"], 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r1, &(0x7f0000000680)={0x24, 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r1, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a80)={0x84, &(0x7f0000000680)={0x0, 0x10, 0x1, "df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

38.115425757s ago: executing program 0 (id=422):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x1010, r5, 0x3a17e000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="cfc850defd27f31e2d20223673feacf3b5421387e6f3", 0x16, 0x3b00, 0x0, 0x0)

23.020600666s ago: executing program 32 (id=422):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async)
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000180)=ANY=[], 0x8)
connect$inet6(r0, &(0x7f00000004c0)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r1=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}}) (async)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_9p2000}]}})
write$P9_RVERSION(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r2, @ANYRESHEX=r3], 0x15)
syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), 0xffffffffffffffff)
sendmmsg$inet6(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000500)="82", 0x1}, {&(0x7f0000000180)='K', 0x1}], 0x2}}], 0x1, 0x4400c800)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0) (async)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.stat\x00', 0x275a, 0x0)
write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x10448)
syz_open_dev$tty1(0xc, 0x4, 0x2) (async)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x2)
mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000003, 0x1010, r5, 0x3a17e000)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) (async)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0)
sendto$inet6(r0, &(0x7f00000000c0)="cfc850defd27f31e2d20223673feacf3b5421387e6f3", 0x16, 0x3b00, 0x0, 0x0)

4.503891291s ago: executing program 3 (id=574):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
request_key(&(0x7f0000000040)='user\x00', &(0x7f0000001ffb)={'syz', 0x3}, &(0x7f0000001fee)='R\x10g\x91\xdeeH\xe5+\xf0\x05\x00\x00\x00\x00\x00\x00\x00', 0xffffffffffffffff)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = dup(r1)
ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
tee(r0, r0, 0x1, 0x4)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080))
write$tun(r0, &(0x7f0000000400)={@val={0x0, 0x809b}, @void, @eth={@broadcast, @remote, @void, {@ipv4={0x800, @gre={{0x13, 0x4, 0x2, 0x12, 0x2ae, 0x68, 0x0, 0x37, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@generic={0x7, 0xc, "0e2b4951ad7a4656ca0b"}, @timestamp={0x44, 0x14, 0xea, 0x0, 0x5, [0xd5, 0x663, 0x7, 0xd5ab428e]}, @lsrr={0x83, 0x17, 0xcd, [@initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @dev={0xac, 0x14, 0x14, 0x43}, @multicast2, @dev={0xac, 0x14, 0x14, 0x3b}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0xab, 0x0, [0x9], "f207ccdf9f0bf0a79a386a3fb160c7e6cc88a308ec9783e28b439d68ba497bbfe839fa7d96369b6d786af6acedd49b70064ebb2bb1d5e74f14d195277fc8305eb40e061f46febaf0349b9bd10e0c01335f7f96a91701c5bb97720032f23e44165abb84822a491e15b35939337526e6d89a85522b55e7bccb10b26264dcb50fd7de16e08126661160f40af07b23afa9167c8bdb7d707b9bb8c610d3576e52b9f8760250e0419d80e5d99aa1"}, {0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [0xfff8, 0x7], "3bf569ee076a5720912a95c3562d7bec830e85929250f7465a62b934a4d107061dbe93a4d08f5fd798960a44a268ecbcdd42320f55491d026714a6355914ad7de4961cf064fda76d8d492587ed79ec81d3fb0d8bd0d933da8501cfef266903c4a443b49e0f5a6050206ed46499f57a1e8bf730b339c904f4a758c738741e608a24b1ce2c71bddb61c6429399966fcb5f10e459f5df4a63c5c0b5d1d3e9e0eea8ca625a96b0ed4d1bca67cfcee2e63b421143712220053d1af154aab466b5f354a63e6105b18ac5fc7f816a9e768b6e007efdd8f971014bf50740aea15182ba11195b39e139b35e9a6c3397408222d40a3964e7ad4748"}, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x86dd, [0x51d, 0xf377], "0a5c336ff296bb9c1c9168b99efc2cc45aa3168471a427d716316710401f16e52ae251dd17e59b8b5a107357c570de816c06ea746b4da5c7d4b13b0dc73710b557053a22f27d7b38b99a65988d247e60416fc01054bbf99ade0dad812f8a5c8670d7d19dd86ab5be88965f30b0"}, {0x8, 0x88be, 0x4, {{0xe, 0x1, 0x40, 0x3, 0x1, 0x3, 0x6, 0xe}, 0x1, {0x5}}}, {0x8, 0x22eb, 0x0, {{0xe, 0x2, 0x5, 0x0, 0x0, 0x3, 0x3, 0x2}, 0x2, {0x6, 0x5, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x1}}}, {0x8, 0x6558, 0x1, "f917d6cb4547"}}}}}}}, 0x2c0)

4.373742195s ago: executing program 3 (id=575):
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, <r1=>0x0}, 0x4000)
setresuid(r1, r1, 0x0) (async)
setresgid(0xee00, 0xee01, 0x0) (async)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b00), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000000)={0x40, r2, 0x1, 0x70bd26, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x14, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}]}]}, 0x40}}, 0x40)

4.372389824s ago: executing program 3 (id=576):
getpgrp(0xffffffffffffffff) (async)
r0 = socket$netlink(0x10, 0x3, 0x0)
writev(r0, &(0x7f0000000740)=[{&(0x7f0000000480)="3900000013000318680907070000000f0000ff3f04000000170a001700000000040037000f003f0041010000aa11f6bbf44d00000000008984", 0x39}], 0x1)

4.344034636s ago: executing program 3 (id=577):
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000100)={[0xd4c, 0x1000008, 0xffffeffffffffffb, 0x5, 0x10000, 0x8, 0x4002004c1, 0xa, 0x200005, 0x0, 0x3, 0x0, 0x401, 0x0, 0x9, 0x10000008d], 0xddcd0000, 0x100000})
r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
wait4(r0, 0x0, 0x40000000, 0x0)
readv(0xffffffffffffffff, &(0x7f0000000200)=[{&(0x7f0000000100)=""/35, 0x23}], 0x1)
ptrace$setregs(0xd, r0, 0x2, &(0x7f0000000180))
ptrace$cont(0x21, r0, 0x80000001, 0x4)
syz_usb_connect$midi(0x3, 0x32, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0xfc08, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x20, 0x1, 0x1, 0x8, 0xa0, 0x9, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0x6, [], [{{0x9, 0x5, 0xe, 0x3, 0x20, 0x7, 0x2, 0xff, {0x5, 0x25, 0x1, 0x1, "12"}}}]}}}}}]}}, 0x0)

3.674636036s ago: executing program 2 (id=583):
r0 = fsopen(&(0x7f0000002200)='ramfs\x00', 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000140)='7', 0x0) (async)
getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000280), &(0x7f00000002c0)=0x4) (async, rerun: 64)
r2 = socket$can_raw(0x1d, 0x3, 0x1) (rerun: 64)
ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, 0x0)
bind$can_raw(r2, &(0x7f00000001c0), 0x10) (async)
setsockopt$CAN_RAW_ERR_FILTER(r2, 0x65, 0x2, &(0x7f0000000500), 0x4)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', <r4=>0x0, 0x7800, 0x80, 0x5, 0x2, {{0x14, 0x4, 0x1, 0x6, 0x50, 0x64, 0x0, 0xad, 0x2f, 0x0, @multicast1, @remote, {[@timestamp_addr={0x44, 0x3c, 0x40, 0x1, 0x5, [{@multicast2, 0x5}, {@multicast2, 0x8}, {@multicast1, 0xb2}, {@remote}, {@broadcast, 0x1}, {@local, 0x4}, {@local, 0xe}]}]}}}}})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0xc0, 0x0, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x48, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x18, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x27}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0xc0}}, 0x80) (async)
syz_usb_connect(0x0, 0x34, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082403"], 0x0)

3.132586143s ago: executing program 2 (id=586):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x800, @dev, 0x7}, 0x1c)
write$binfmt_script(r1, &(0x7f00000003c0)={'#! ', '', [], 0xa, "bdd93a0efe80000000000000b320655800b2b184ef1b05713031e573a3d16b0a00387ee7"}, 0x28)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='syz_tun\x00', 0x10)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10)
r2 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCDARP(r2, 0x8953, &(0x7f0000000300)={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @local}, 0x0, {0x2, 0x4e22, @multicast1}, 'syz_tun\x00'})

3.105498394s ago: executing program 2 (id=587):
unlinkat(0xffffffffffffff9c, &(0x7f0000000080)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x161140, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket(0xa, 0x3, 0xff)
bind$inet6(r2, &(0x7f0000000040)={0xa, 0x4c26, 0x7, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c)
connect$inet6(r2, &(0x7f0000000340)={0xa, 0x4e27, 0x1, @ipv4={'\x00', '\xff\xff', @broadcast}, 0xf}, 0x1c)
r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, 0x0)
syz_usb_connect(0x2, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009980708b5192100c7980000000109021b00012000ac00090400000107000009090585"], 0x0)
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f00000000c0)=0x3)
syz_usb_connect(0x0, 0x1ed, &(0x7f0000000100)={{0x12, 0x1, 0x110, 0x5b, 0x6d, 0xf7, 0x20, 0x4f1, 0x1001, 0x38ab, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1db, 0x2, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0x1, 0x3, 0x8, 0x52, 0xc, 0xe0, 0x4, [], [{{0x9, 0x5, 0xe, 0x0, 0x3ff, 0xf8, 0x40, 0x0, [@generic={0x34, 0xf, "98335ba8208f1adeb7a7a9fc712d4ad1f55d6773bca075d81ea11bff4082df07b08f0e30b8b32153a9cb1ce203c3f3bd5bc2"}, @generic={0x1f, 0x0, "2ca29f9eb8a808eb98188eb7e9ce7a50c2cf770e6a326f6ed9dff52014"}]}}, {{0x9, 0x5, 0x5, 0x2, 0x440, 0x7f, 0x8, 0xc6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0xf7, 0x9}]}}, {{0x9, 0x5, 0x10, 0x0, 0x3ff, 0xf, 0x10, 0x8}}, {{0x9, 0x5, 0x8, 0x1, 0x400, 0x2, 0x81, 0x9}}, {{0x9, 0x5, 0x8, 0x8, 0x200, 0xa0, 0x1, 0x9}}, {{0x9, 0x5, 0xa, 0xc, 0x40, 0xfc, 0x6, 0xb}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0xa5, 0x3, 0xa5}}, {{0x9, 0x5, 0x9, 0xc, 0x20, 0x7f, 0x2, 0x8, [@generic={0x8a, 0x9, "3b0d10e157e14a18efcf50c570f142cc7f07e206759cc949bb04b2265fb28060c5db8748859c16f674e59ba9a865d9d0cbc4e6bbd65f27518fd3e257d06fcde7ce9861320c004d291b846f9b74ec133cc78b6f8132b13bda47b01e6e0c1f9ff6a5909c2f7afc69046e8906e1574ab9394e5e6292120726126924bf3866b93be9c314d9ba5e23ceff"}, @generic={0x94, 0x5, "c0a9cb4c64640b9863940367b56e5e995ccd42229652b3f2b093d8ead8ae2eaae62b5c0f61c7428ac33625739aaaae6f6214928f306ff78392de3edd8b95544608932d369de9586eb938fd1987f561fd58e9a2b17a285e20ea3b54e41bec9f095b524b3d8e75a1310c8998b39f0e10e4ebe6fc0c684a6efe01d935cb7b00c557612d84ac5235a0c2f23a4002effb382e3e39"}]}}]}}, {{0x9, 0x4, 0x6, 0x8, 0x0, 0x22, 0x91, 0x66, 0x40}}]}}]}}, 0x0)
r4 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x2, 0x158}, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000280)=<r6=>0x0, &(0x7f0000000140)=<r7=>0x0)
syz_ublk_add_dev(r4, r5, r6, r7, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0xffffffffffffff0f, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r8=>0x0)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
syz_ublk_setup_queues(r10, r8, &(0x7f0000000180)={0x0, 0x0, 0x400, 0x1, 0x257, 0x0, r10}, &(0x7f0000000700)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xddfb, 0x8, 0x1000000, 0x10000004}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffc, 0x2, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x80, 0x1, 0x37b, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x8000, 0x5, 0x49}}], 0x1, &(0x7f0000000340)={0x2e, 0x7, 0x0, r4, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0xfff9, 0x5, 0x0, 0x0}}, 0x0)
openat$cgroup_procs(r10, &(0x7f0000000000)='cgroup.threads\x00', 0x2, 0x0)

2.91642563s ago: executing program 3 (id=588):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000001018610f4205ae06d6c011703010902240001010000000904690202ff5aa30009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r1 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r1, &(0x7f0000000140)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e22d991000005000000a80013007b00090080007f000001e809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee000000deff0000000200000000", 0x58}], 0x1)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000140)={0x84, &(0x7f0000000000)={0x40, 0xc, 0x6, "f5a039c8fc8c"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_int(r2, 0x6, 0x13, 0x0, &(0x7f0000000040))
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, &(0x7f0000000440)={0x14, &(0x7f00000007c0)={0x20, 0xa, 0xc6, {0xc6, 0x48, "f9ba86ac08cce842c7585e084f49e5b8af524eba9a1b91ce5475b775f1f0e41ed8303cb4ca4f2a8a3297417b951a84423c65fd1eb00cdee3783a06a0f790d4b4728c7463537de04bad15317b6e2eed8099cf004244623681f62821080ff93fbb666f42564706ae21097037fc98aca16be9f2bea9af149bef97af64558dbaaa9fbd77f6837d807a116692d186a8280ebdd639891d66dfe4d068b5476f0f1498eb181c28fe7f32febe25653299ba67efacbee43f04c775826ccaa959cbc62c424e093452bc"}}, &(0x7f0000000400)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000740)={0x44, &(0x7f0000000480)={0x20, 0xc, 0x8c, "a19b1de0f86478f5828ee288d1a263521ff903ea899028d29b6067fe94a5464f0bd5d6ab356fba24867d59d9f6be627fbf3d776bcec8eece90cbf98c8d4747c26114b15831781e27544c9c348297c886eff7a9fb9c54ef6e01278d3daeb234e0eb19fd37ab958a8ae853803450be51afb68b3b70e07491be0b9f75e825206c08a2bb02b42f4ff511f24f51a9"}, &(0x7f0000000540)={0x0, 0xa, 0x1}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0xff}, &(0x7f00000005c0)={0x20, 0x80, 0x1c, {0x5, 0x4, 0x5, 0x417a, 0xdb, 0xfffb, 0x3, 0xc111, 0x9, 0xb, 0x8, 0x7}}, &(0x7f0000000600)={0x20, 0x85, 0x4, 0x9}, &(0x7f0000000640)={0x20, 0x83, 0x2, 0x1}, &(0x7f00000006c0)={0x20, 0x87, 0x2, 0x1}, &(0x7f0000000700)={0x20, 0x89, 0x2}})
syz_usb_control_io(r0, 0x0, &(0x7f0000000240)={0x84, &(0x7f0000000680)={0x40, 0xb, 0x1, "df"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.604503501s ago: executing program 2 (id=592):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff)
sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000017000000400006803c00040067636d28616573290000000000000000002214000000e3de3d7b4cd07ec3ee777de774fc7987cca4198900"/78], 0x54}, 0x1, 0x0, 0x0, 0x4}, 0x4000004)

1.536474233s ago: executing program 2 (id=593):
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0)
r1 = dup3(r0, r0, 0x80000)
r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
preadv2(r2, &(0x7f0000001780)=[{&(0x7f0000000380)=""/54, 0x36}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/246, 0xf6}, {&(0x7f0000000540)=""/155, 0x9b}, {&(0x7f0000000600)=""/66, 0x42}, {&(0x7f0000000680)=""/4096, 0x1000}, {&(0x7f0000001680)=""/233, 0xe9}], 0x7, 0x8, 0x7, 0x1)
mount$tmpfs(0x0, 0x0, 0x0, 0x0, 0x0)
syz_usb_connect$uac1(0x3, 0x87, &(0x7f0000000180)=ANY=[@ANYBLOB="120100020000002082050c004000010203010902750003010600950904000000010100000a2401d4000a00020102090401000001020000090401010101020000072401f5f900000e2402010604b1020c47148017f309058109100007010c07250104070400090402000001"], 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x0)
move_mount(0xffffffffffffffff, &(0x7f0000000140)='.\x00', 0xffffffffffffffff, 0x0, 0x41)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000640)={0xfffffd88, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0})

1.203383403s ago: executing program 1 (id=594):
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, &(0x7f0000000080)="360f7883b81e2626660fc7350ff4650666b95c0300000f32f4656df30f09650f01cfc6f8000f0d35", 0x28}], 0x1, 0x2, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(r4, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x20, 0x0, 0x0)
signalfd(r3, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)=@vmx={0x0, 0x0, 0x2080, {0x9000, 0x0, {}, 0x1}, {"00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005bcc00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000cf3734f10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e5bd16380000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", "00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008bc584c800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001f6f38740000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001a4900"}})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8d32})
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$tun(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="0b0088a80180c2000002cd1008a2dc5886dd694f92060008320000000000000000000000ffffe0000002ff020000000000000000000000000001"], 0x42)
r7 = socket$inet6_udp(0xa, 0x2, 0x0)
connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x4}, 0x1c)
mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0)
r8 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000120021030000000000bc61682a00968008001d001d"], 0x1c}], 0x1}, 0x0)
recvmmsg(r8, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000000440)=""/167, 0xa7}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/4096, 0x1000}], 0x4}, 0xffffffff}], 0x1, 0x2100, 0x0)
connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r7, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32)
writev(r0, &(0x7f0000000180)=[{&(0x7f0000000280)='v', 0xfdef}], 0x1)

804.921355ms ago: executing program 1 (id=595):
statfs(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/107)
r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x1, 0x41)
r1 = inotify_init1(0x80000)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000100)='./binderfs2/binder0\x00', 0x800, 0x0)
mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x4, 0x30, r2, 0x3c2dd000)
setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x4, 0x4)
fcntl$addseals(r0, 0x409, 0x2)
ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r0, 0x4048587b, &(0x7f00000006c0)={{<r3=>r0, &(0x7f0000000180)='./binderfs2/binder0\x00', 0x80000, &(0x7f00000001c0)={@_ha_fsid={[0xffff4569, 0xe]}, {0x7, 0xf2, 0x3, 0x6}}, 0x9, &(0x7f0000000200), &(0x7f0000000240)=0x4}, 0x4, &(0x7f0000000640)=[{0x0, 0x4c, &(0x7f0000000280)='+@^B%/(\'-(%\xe5\x00', &(0x7f00000002c0)="298643fdf13750b6ecafabd49ced9881c58af90a742fa4a463d8acbc4c4b9e51381911a8465f4a172849f1a7dea3b25f5ae418fdd7acf06877406b5bf3b7ced193c464fa2c20eed65b1c7155aeb4eec6f51ceca59a6d4fe7d4b37dbfeeaee2f3b3aebbdac62b0f24b9f31ad56ad15c03d5b5373e1e1bc7e5afd277c89ca169f50ec4ba446fb7feb70c6ef25301279df1ef78e465a83212045d30b2937fc4004b28cc5abcaddc7765994a7a812996c379165b33d3e2cae221ca249e6b2033b7b0f89b", 0xc2}, {0x2, 0xb, &(0x7f00000003c0)='./binderfs2/binder0\x00', &(0x7f0000000400)="2c3230ff0d6a73f7567c0b6c1fe0d8979de87237ac8232b6ce1d8d33076f65aefd8bccb803143ce3d3c33e27de6dd98556f71e744dec636eae364b33adc1308528375c5c13908992299e9cb7c93b0662698c6e695af33f7c62add00a0d8fd1925c4b25a6940974684df22eecf5b3481617c0761847de30d180eb6e023267bea7aef8e0cd5aac4dd7e8071a4e9476721f863a71fe60a8f17c2fd3e0d6196f7e6b2fb6135bb36a69271a14c0", 0xab, 0x10}, {0x3, 0x4, &(0x7f00000004c0)='@)@%\x00', &(0x7f0000000500)="94fee2f5beb50c7b4b5f3b876be6", 0xe, 0x12}, {0x3, 0x7ff, &(0x7f0000000540)='}-&$:%/[\\{}#\'*}\'+', &(0x7f0000000580)="6c17a7697439fc88092bfddad6de521afd5b29c8cf056235d9af414e7ad1c585f90eae1359d22b7bd1c9e629864e54bf62c07cf669a1de42e955e5fbd47ba2cfe703b7fa3783f49f8a471ba31305365080f3c8bfb7443b55c45cee01a4a02f3184475bf9ab84f4b3d05a006c29fb6a15a2c4819d397b1f7f285189901376165e72dcb45bcff8b8722c6f3aa63c59ed9afcf3a07704be1971b21064a7c78558ed5aa14120ee19c282c5d712ab5ba6e89a46", 0xb1}]})
r4 = pidfd_getfd(0xffffffffffffffff, r0, 0x0)
ioctl$KVM_CAP_VM_COPY_ENC_CONTEXT_FROM(r3, 0x4068aea3, &(0x7f0000000740)={0xc5, 0x0, r4})
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f00000007c0)={<r5=>0x0})
ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f0000000840)={r5, 0xf, 0x71c8bf0c})
ioctl$ASHMEM_GET_NAME(r4, 0x81007702, &(0x7f0000000880)=""/4096)
r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000001880)='./file0/file0\x00', 0x40000, 0x20)
ioctl$BTRFS_IOC_BALANCE_CTL(r6, 0x40049421, 0x1)
getsockopt$bt_BT_SECURITY(r4, 0x112, 0x4, &(0x7f00000018c0), 0x2)
ioctl$BTRFS_IOC_SET_FEATURES(r6, 0x40309439, &(0x7f0000001900)={0x1, 0x1, 0x1a})
fchdir(r4)
ioctl$RTC_PLL_GET(r4, 0x80207011, &(0x7f0000001940))
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(r3, 0x40082102, &(0x7f0000001980)=r5)
ioctl$UBLK_U_CMD_GET_PARAMS(r3, 0x80207509, &(0x7f0000001a40)={0x0, 0xffff, 0x70, &(0x7f00000019c0)={0x70}})
mount$binder(0x0, &(0x7f0000001ac0)='./file1\x00', &(0x7f0000001b00), 0x0, &(0x7f0000001b40)={[{@stats}], [{@smackfstransmute={'smackfstransmute', 0x3d, ':$!&'}}, {@euid_gt={'euid>', 0xffffffffffffffff}}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@uid_lt={'uid<', 0xee00}}]})
ioctl$AUTOFS_IOC_SETTIMEOUT(r3, 0x80049367, &(0x7f0000001bc0)=0x100)
setsockopt$inet6_udp_int(r3, 0x11, 0xa, &(0x7f0000001c00)=0x2, 0x4)
fcntl$getflags(r3, 0x408)
read$FUSE(r4, &(0x7f0000001c40)={0x2020}, 0x2020)
getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x1, &(0x7f0000003c80)=""/192, &(0x7f0000003d40)=0xc0)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000003d80)={<r7=>0x0}, &(0x7f0000003dc0)=0xc)
capset(&(0x7f0000003e00)={0x20080522, r7}, &(0x7f0000003e40)={0x4, 0x8, 0x80000001, 0x10001, 0x6, 0xa})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000003ec0))

703.551539ms ago: executing program 1 (id=596):
prlimit64(0x0, 0xb, &(0x7f0000000140)={0x8, 0x7}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x7c, 0x0, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000380)={0x1, 0x0, [{0x3b, 0x0, 0x7}]})
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'wg0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f0000000180)="0b03feff4f00141202004788aa96a13bb1000011000088ca1a00", 0x1fffc, 0x0, &(0x7f0000000140)={0x11, 0x0, r4}, 0x14)

700.035909ms ago: executing program 3 (id=597):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x10018, &(0x7f0000000380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]})
chdir(&(0x7f00000003c0)='./bus\x00')
mkdir(&(0x7f00000020c0)='./file0\x00', 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
r1 = socket$key(0xf, 0x3, 0x2)
sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f00000000c0)={0x2, 0x5, 0x0, 0x9, 0xa, 0x0, 0x100000, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @multicast1=0xe0000009}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x3, 0x5, 0x6c, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x50}}, 0x0)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = dup(r2)
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
write$tun(r0, &(0x7f0000000200)={@val={0x0, 0x18}, @void, @eth={@multicast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x9, 0x6, "4fd2cd", 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x29}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0xff, 0x7, 0xa5aa, 0x0, 0xbd}}}}}}}, 0x4a)
mkdir(&(0x7f00000003c0)='./file0\x00', 0x21)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000000), 0x82, 0x0)
mount$bind(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.\x00', 0x0, 0x100e002, 0x0)
r4 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000000)={'sit0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x10, 0x3, 0x20040001, 0x3ff, 0x6, 0x0, 0x0, 0x0, 0x4}})
syz_usb_connect(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e00000001090224bd09000000000000410017ff5d812e8b399edb4c60bd000209058303", @ANYRES32=0x0], 0x0)

598.636421ms ago: executing program 1 (id=598):
r0 = socket(0x28, 0x5, 0x0)
bind$vsock_stream(r0, &(0x7f0000000040), 0x10) (async)
listen(r0, 0x0)
r1 = socket(0x28, 0x5, 0x0)
connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10)
write$binfmt_elf64(r1, &(0x7f00000000c0)=ANY=[], 0x254fe)
r2 = accept4$unix(r0, 0x0, 0x0, 0x0)
recvfrom$unix(r2, &(0x7f00000001c0)=""/244, 0xf4, 0x20, 0x0, 0x0) (async)
r3 = socket$inet6(0x10, 0x3, 0x0)
r4 = signalfd4(r3, &(0x7f0000000000)={[0x1]}, 0x8, 0x0)
setsockopt$bt_hci_HCI_DATA_DIR(r4, 0x0, 0x1, &(0x7f0000000180)=0x50000000, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64)
r5 = socket$inet(0x2, 0x1, 0x0) (rerun: 64)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x400c0) (async)
bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @multicast2}, 0x10) (async, rerun: 64)
r6 = socket$inet(0x2, 0x1, 0x0) (rerun: 64)
setsockopt$sock_int(r6, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4)
bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @multicast2}, 0x10)
listen(r5, 0x207) (async)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={<r7=>0xffffffffffffffff})
pipe2$9p(&(0x7f00000001c0)={<r8=>0xffffffffffffffff, <r9=>0xffffffffffffffff}, 0x0)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@version_9p2000}]}}) (async)
write$P9_RVERSION(r9, &(0x7f0000000080)=ANY=[@ANYBLOB="150000006bffff", @ANYRES16=r8, @ANYRESHEX=r9], 0x15)

516.063244ms ago: executing program 1 (id=599):
r0 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10)
sendto$inet(r0, 0x0, 0xfd00, 0x804, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10)

512.748554ms ago: executing program 1 (id=600):
r0 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x20000805) (async)
recvmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000002c0)=""/251, 0xfb}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000001500)=""/198, 0xc6}], 0x8}, 0x1012}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) (async)
r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_GET_SUPPORTED_HV_CPUID_cpu(r1, 0xc008aec1, &(0x7f0000001440)={0x4, 0x0, [{0x17, 0x4, 0x2, 0xfffff327, 0x47, 0x7}, {0x80000001, 0x0, 0x0, 0x5, 0x9, 0x9, 0x3}, {0xc0000000, 0x3, 0x5, 0x2, 0x2, 0x80000000, 0x23}, {0x80000007, 0xc0000, 0x2, 0x8, 0x4, 0x2, 0x3}]})

378.316788ms ago: executing program 4 (id=602):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100))
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0})
r2 = dup3(r1, r0, 0x0)
r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x300000000000000, 0x0, 0x1, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000880)={@ptr={0x73622a85, 0x0, 0x0, 0x0, 0x1, 0xe}, @flat=@weak_binder={0x77622a85, 0x1001, 0x3}, @flat=@binder={0x73622a85, 0x1100}}, &(0x7f0000000200)={0x0, 0x28, 0x40}}}], 0x0, 0x0, 0x0})

316.655721ms ago: executing program 2 (id=603):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
pipe2(&(0x7f0000000140)={0xffffffffffffffff, <r1=>0xffffffffffffffff}, 0x4000)
getpeername$inet6(r1, 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', <r2=>0x0})
connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x1}}, 0x80001}, 0x1c)
creat(&(0x7f0000000040)='./file0\x00', 0x46)
ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x80489439, &(0x7f00000000c0))
r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x8400, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
write$FUSE_NOTIFY_INVAL_ENTRY(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="2300000003"], 0x23)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201100100000008ac052502000000000001090224000100000000090400120903000000092104000c01222800090581030004c4f3fe"], 0x0)
ioctl$sock_inet6_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @dev={0xfe, 0x80, '\x00', 0x30}, @private0, 0x0, 0x6, 0x0, 0x400, 0x6, 0x180107, r2})

313.784941ms ago: executing program 4 (id=604):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x48040, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) (async)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="660f388173ab0fc76fb4360fc9bb25cc00007666ba6b41b000f303c70fae6e2fc0c00f0f2367260f01ca660f38817700c4c2459d78ad", 0x36}], 0x1, 0x51, 0x0, 0x0) (async)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fdd000/0x18000)=nil, &(0x7f0000000000)=[@text16={0x10, 0x0}], 0x1, 0x74, 0x0, 0x0) (async)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)

264.192232ms ago: executing program 4 (id=605):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0x4b564d01, 0x0, 0x1}]})
r3 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$KVM_SET_CPUID(r3, 0x4008ae8a, &(0x7f0000000080)={0x6, 0x0, [{0x4, 0xa6, 0x6, 0x7, 0x3}, {0x4, 0x4, 0xc9, 0xc3, 0x7f}, {0x2, 0x5, 0x80000001, 0xfff, 0x3}, {0x1, 0xffffffff, 0x4, 0x4}, {0xa, 0x7fffffff, 0x800, 0x84f5, 0xc62}, {0x8000001e, 0x0, 0x8001, 0x6, 0x5b}]})
close_range(r0, 0xffffffffffffffff, 0x0)

191.056045ms ago: executing program 4 (id=606):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000001040)=ANY=[@ANYBLOB="94010000100013070000000000000000ffffffff000000000000de4b5aa8d4d779d10000000000000000000000800001000017004e230080000000001d000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x4008000}, 0x2400c800)

93.240788ms ago: executing program 4 (id=607):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x40440, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000b28000/0x400000)=nil)
ioctl$KVM_CAP_HYPERV_TLBFLUSH(r1, 0x4068aea3, &(0x7f0000000040))
r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3)
r4 = socket(0x80000000000000a, 0x2, 0x0)
sendmsg$inet6(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000140)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x7c}, 0x1c, 0x0, 0x0, &(0x7f00000004c0)=[@rthdr_2292={{0x28, 0x29, 0x39, {0x1, 0x2, 0x2, 0x1, 0x0, [@private1]}}}, @rthdr={{0x18, 0x29, 0x39, {0x4, 0x0, 0x0, 0x4}}}], 0x40}, 0x4000010)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108)
setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast2, 0xfffff09d}}, {{0xa, 0x0, 0x80000, @loopback}}}, 0x108)
close(r4)
r5 = socket(0x80000000000000a, 0x2, 0x0)
setsockopt$inet6_group_source_req(r5, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x4e20, 0x0, @mcast1={0xff, 0x7}, 0x8a4}}, {{0xa, 0x4e20, 0xfe, @remote, 0x40000}}}, 0x108)
r6 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101})
getsockopt$IP_VS_SO_GET_DESTS(r3, 0x0, 0x484, 0x0, 0x0)
syz_kvm_add_vcpu$x86(r2, &(0x7f0000000100)={0x0, 0x0})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)

0s ago: executing program 4 (id=608):
openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r0 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r1 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
r5 = syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r6=>0x0, '\x00', {0xffffffff, 0xffff, 0x48, &(0x7f0000000500)=@new_dev={0x1, 0x4}}}, &(0x7f0000000300)=<r7=>0x0)
r8 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r5, 0x2)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xc22f, 0x10, 0x1, 0x16f, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x0, 0x364, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff73, 0x4, 0x2, 0x43, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x4, 0x1, 0x123, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xb44, 0x0, &(0x7f0000000dc0)=@buf_512="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"}}, &(0x7f0000001e40)) (async)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000180)={0x0, 0xc22f, 0x10, 0x1, 0x16f, 0x0, r1}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xbd35, 0x4, 0x0, 0x364, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xff73, 0x4, 0x2, 0x43, 0x0, r1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9360, 0x2, 0x1, 0x42}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc264, 0x4, 0x1, 0x123, 0x0, r1}}], 0x4, &(0x7f0000001dc0)={0x2e, 0x2, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0x9}, 0x0, r6, '\x00', {0x3, 0xb44, 0x0, &(0x7f0000000dc0)=@buf_512="15be415139cd546e123a1ff3207c4a972a5e4fb6be030b045ad05a2568dcab2faa087474d9ab7603c8dcff087b1637792d9e771ac82b670c20bae669f6472ea3a941111aaab4d62f2c1a3457881a8a6dbba30523b570be7d5ce764e7116d2e0446cba7abc6b47bae64dc87a49073bdde4ad7fa696ee7c498b75fc46f9831ca82b8f8e94e7729f7cd0d0c3fc3faaa365e21fdd3abd2842351bf781ee452b0d3571e2002402053e5c2933063d01b5c8249f63765a08301c5be4a469f7960c8d644b1c1efccac2d566f1dd90793e6105bb73de9b3805f845d8fd7b68a5ac206c0df2fbfd5a010d6b4ac8bf2132d7b6e0624d1710019de33e7fc6be912e5356777de72a3d666d0b43b20b4126ec009b21ad6a00dedaf41d3bc95e555315f5745e651a81685c7ed07c15c2121e1a5fdba0b93da9fadb344d1f420de9301ca16f4cb4fa69002540d643d80b2c304b903bbedc2d16c41cfab97b421deef25d291ccb8f16dac2642e00107a9f463ffe9a4f79e7cc508d12d6b416e94c892b39b0e6cec132b6ee63adb0dbfbdbf34bb9040243bd167f532de88bc3fc746b08c26670ec5d671f34e502f9f89291402d31ab191ba37cb8cd1b20f9b4f32ea2eccd97820e288f9c850d1f9e600941b6c223651848ed3d9042e51a1feb2e7e8377a45ef5d2781fd9a496514309bcf6d56b8b2fdbc9d1b2a2bab8b04abba72dbc671b06508cd62"}}, &(0x7f0000001e40))
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0) (async)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r9 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0)
fcntl$setstatus(r9, 0x4, 0x42000)
r10 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x4)
fcntl$setstatus(r10, 0x4, 0x42000)
r11 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0)
fcntl$setstatus(r11, 0x4, 0x2400)
close(0x3) (async)
close(0x3)
syz_ublk_setup_queues(r8, r7, &(0x7f0000000700), &(0x7f0000000800), 0x1, &(0x7f0000000900)={0x2e, 0x0, 0x0, r8, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, '\x00', {0x4, 0x0, 0x0, 0x0}}, &(0x7f0000000b00))

kernel console output (not intermixed with test programs):

of length 0, skipping remainder of the config
[   93.302407][    T9] usb 4-1: Manufacturer: syz
[   93.312933][   T31] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[   93.317096][    T9] usb 4-1: SerialNumber: syz
[   93.328712][   T31] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[   93.343912][   T31] usb 1-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[   93.353256][  T793] usb 2-1: Using ep0 maxpacket: 8
[   93.358540][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   93.367212][   T31] usb 1-1: Product: syz
[   93.371745][   T31] usb 1-1: Manufacturer: syz
[   93.376882][   T31] usb 1-1: SerialNumber: syz
[   93.381971][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.392523][  T793] usb 2-1: unable to read config index 0 descriptor/start: -61
[   93.400417][  T793] usb 2-1: can't read configurations, error -61
[   93.491415][ T1440] netlink: 4 bytes leftover after parsing attributes in process `syz.2.346'.
[   93.522406][ T1440] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1440 comm=syz.2.346
[   93.534883][  T793] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[   93.544410][ T1433] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=none,decodes=none:owns=io+mem
[   93.556807][    T9] usb 4-1: Audio class v2/v3 interfaces need an interface association
[   93.565335][    T9] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22
[   93.596271][ T1442] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.606055][ T1442] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.655626][   T36] audit: type=1400 audit(7122858290.387:328): avc:  denied  { create } for  pid=1445 comm="syz.2.347" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   93.685513][   T36] audit: type=1400 audit(7122858290.407:329): avc:  denied  { sys_admin } for  pid=1445 comm="syz.2.347" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   93.706575][  T793] usb 2-1: Using ep0 maxpacket: 8
[   93.715228][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[   93.731414][  T793] usb 2-1: unable to read config index 0 descriptor/start: -61
[   93.742665][  T793] usb 2-1: can't read configurations, error -61
[   93.750961][  T793] usb usb2-port1: attempt power cycle
[   93.757751][    T9] usb 4-1: 2:1 : can't get High Capability descriptor
[   93.773360][   T31] usb 1-1: USB disconnect, device number 43
[   93.794100][  T381] udevd[381]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory
[   93.845417][ T1454] input input12: cannot allocate more than FF_MAX_EFFECTS effects
[   93.961472][    T9] usb 4-1: USB disconnect, device number 38
[   94.095057][  T793] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[   94.104979][   T31] usb 1-1: new low-speed USB device number 44 using dummy_hcd
[   94.115225][  T793] usb 2-1: Using ep0 maxpacket: 8
[   94.121799][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.131043][  T793] usb 2-1: unable to read config index 0 descriptor/start: -61
[   94.138874][  T793] usb 2-1: can't read configurations, error -61
[   94.145427][  T421] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[   94.256037][   T31] usb 1-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   94.267167][   T31] usb 1-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   94.280231][  T793] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[   94.287964][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[   94.294577][   T31] usb 1-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[   94.303759][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.312561][   T31] usb 1-1: config 0 descriptor??
[   94.317999][ T1451] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[   94.325291][  T421] usb 3-1: Using ep0 maxpacket: 32
[   94.330853][  T793] usb 2-1: Using ep0 maxpacket: 8
[   94.337810][  T421] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[   94.346331][  T421] usb 3-1: config 0 has no interface number 0
[   94.353388][  T793] usb 2-1: unable to get BOS descriptor or descriptor too short
[   94.362055][  T421] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   94.371277][  T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   94.379578][  T421] usb 3-1: Product: syz
[   94.383971][  T793] usb 2-1: unable to read config index 0 descriptor/start: -61
[   94.391623][  T421] usb 3-1: Manufacturer: syz
[   94.396329][  T793] usb 2-1: can't read configurations, error -61
[   94.402661][  T421] usb 3-1: SerialNumber: syz
[   94.408032][  T793] usb usb2-port1: unable to enumerate USB device
[   94.415708][  T421] usb 3-1: config 0 descriptor??
[   94.421843][  T421] smsc95xx v2.0.0
[   94.533718][   T31] usbhid 1-1:0.0: can't add hid device: -71
[   94.539814][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   94.548862][   T31] usb 1-1: USB disconnect, device number 44
[   94.734866][    T9] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[   94.823133][  T421] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   94.833969][  T421] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   94.884831][    T9] usb 4-1: Using ep0 maxpacket: 16
[   94.891364][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7
[   94.902306][    T9] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 9
[   94.915549][    T9] usb 4-1: New USB device found, idVendor=0dfc, idProduct=0102, bcdDevice= 0.00
[   94.924872][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   94.933792][    T9] usb 4-1: config 0 descriptor??
[   95.059551][ T1462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   95.069891][ T1462] netlink: 8 bytes leftover after parsing attributes in process `syz.0.353'.
[   95.324854][   T31] usb 1-1: new full-speed USB device number 45 using dummy_hcd
[   95.341759][    T9] hid-generic 0003:0DFC:0102.0010: unknown main item tag 0x7
[   95.349336][    T9] hid-generic 0003:0DFC:0102.0010: unknown main item tag 0x0
[   95.356814][    T9] hid-generic 0003:0DFC:0102.0010: unknown main item tag 0x1
[   95.364500][    T9] hid-generic 0003:0DFC:0102.0010: unknown main item tag 0xd
[   95.372909][    T9] hid-generic 0003:0DFC:0102.0010: hidraw0: USB HID v0.77 Device [HID 0dfc:0102] on usb-dummy_hcd.3-1/input0
[   95.476248][   T31] usb 1-1: too many endpoints for config 0 interface 0 altsetting 254: 223, using maximum allowed: 30
[   95.487440][   T31] usb 1-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 223
[   95.500995][   T31] usb 1-1: config 0 interface 0 has no altsetting 0
[   95.507791][   T31] usb 1-1: New USB device found, idVendor=17ef, idProduct=60ee, bcdDevice= 0.00
[   95.516938][   T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   95.525806][   T31] usb 1-1: config 0 descriptor??
[   95.542977][    T9] usb 4-1: USB disconnect, device number 39
[   95.845632][  T421] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   95.856637][  T421] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -71
[   95.866173][  T421] usb 3-1: USB disconnect, device number 47
[   95.933142][   T31] usbhid 1-1:0.0: can't add hid device: -32
[   95.939182][   T31] usbhid 1-1:0.0: probe with driver usbhid failed with error -32
[   95.951119][   T31] usb 1-1: USB disconnect, device number 45
[   95.996559][   T36] audit: type=1400 audit(7122858292.727:330): avc:  denied  { cmd } for  pid=1469 comm="iou-wrk-1471" path="/dev/ublk-control" dev="devtmpfs" ino=82 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=io_uring permissive=1
[   96.334904][  T430] usb 4-1: new low-speed USB device number 40 using dummy_hcd
[   96.444877][   T31] usb 2-1: new full-speed USB device number 46 using dummy_hcd
[   96.485867][  T430] usb 4-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   96.496735][  T430] usb 4-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   96.509921][  T430] usb 4-1: config 0 interface 0 has no altsetting 0
[   96.520056][  T430] usb 4-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[   96.529560][  T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   96.541749][  T430] usb 4-1: config 0 descriptor??
[   96.547289][ T1491] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[   96.574815][   T31] usb 2-1: device descriptor read/64, error -71
[   96.634954][    T9] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[   96.763287][  T430] usbhid 4-1:0.0: can't add hid device: -71
[   96.769438][  T430] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   96.774892][    T9] usb 3-1: device descriptor read/64, error -71
[   96.781406][  T430] usb 4-1: USB disconnect, device number 40
[   96.814850][   T31] usb 2-1: device descriptor read/64, error -71
[   96.834907][  T421] usb 1-1: new high-speed USB device number 46 using dummy_hcd
[   96.984821][  T421] usb 1-1: device descriptor read/64, error -71
[   97.024833][    T9] usb 3-1: device descriptor read/64, error -71
[   97.054835][   T31] usb 2-1: new full-speed USB device number 47 using dummy_hcd
[   97.184839][   T31] usb 2-1: device descriptor read/64, error -71
[   97.224932][  T421] usb 1-1: device descriptor read/64, error -71
[   97.264831][    T9] usb 3-1: new high-speed USB device number 49 using dummy_hcd
[   97.282508][ T1509] syzkaller1: entered promiscuous mode
[   97.288109][ T1509] syzkaller1: entered allmulticast mode
[   97.394902][    T9] usb 3-1: device descriptor read/64, error -71
[   97.424903][   T31] usb 2-1: device descriptor read/64, error -71
[   97.464861][  T421] usb 1-1: new high-speed USB device number 47 using dummy_hcd
[   97.535061][   T31] usb usb2-port1: attempt power cycle
[   97.574890][  T430] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[   97.594878][  T421] usb 1-1: device descriptor read/64, error -71
[   97.644966][    T9] usb 3-1: device descriptor read/64, error -71
[   97.724885][  T430] usb 4-1: Using ep0 maxpacket: 32
[   97.731311][  T430] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[   97.739497][  T430] usb 4-1: config 0 has no interface number 0
[   97.747351][  T430] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   97.755383][    T9] usb usb3-port1: attempt power cycle
[   97.756615][  T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   97.770089][  T430] usb 4-1: Product: syz
[   97.774259][  T430] usb 4-1: Manufacturer: syz
[   97.779191][  T430] usb 4-1: SerialNumber: syz
[   97.784614][  T430] usb 4-1: config 0 descriptor??
[   97.790529][  T430] smsc95xx v2.0.0
[   97.834858][  T421] usb 1-1: device descriptor read/64, error -71
[   97.874832][   T31] usb 2-1: new full-speed USB device number 48 using dummy_hcd
[   97.895990][   T31] usb 2-1: device descriptor read/8, error -71
[   97.945108][  T421] usb usb1-port1: attempt power cycle
[   98.025991][   T31] usb 2-1: device descriptor read/8, error -71
[   98.114922][    T9] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[   98.135984][    T9] usb 3-1: device descriptor read/8, error -71
[   98.191920][  T430] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   98.202954][  T430] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   98.266060][    T9] usb 3-1: device descriptor read/8, error -71
[   98.274829][   T31] usb 2-1: new full-speed USB device number 49 using dummy_hcd
[   98.284834][  T421] usb 1-1: new high-speed USB device number 48 using dummy_hcd
[   98.295910][   T31] usb 2-1: device descriptor read/8, error -71
[   98.305972][  T421] usb 1-1: device descriptor read/8, error -71
[   98.426149][   T31] usb 2-1: device descriptor read/8, error -71
[   98.436040][  T421] usb 1-1: device descriptor read/8, error -71
[   98.504875][    T9] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[   98.526011][    T9] usb 3-1: device descriptor read/8, error -71
[   98.545189][   T31] usb usb2-port1: unable to enumerate USB device
[   98.655953][    T9] usb 3-1: device descriptor read/8, error -71
[   98.674833][  T421] usb 1-1: new high-speed USB device number 49 using dummy_hcd
[   98.696201][  T421] usb 1-1: device descriptor read/8, error -71
[   98.764980][    T9] usb usb3-port1: unable to enumerate USB device
[   98.826060][  T421] usb 1-1: device descriptor read/8, error -71
[   98.934973][  T421] usb usb1-port1: unable to enumerate USB device
[   99.216716][  T430] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[   99.228064][  T430] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71
[   99.242983][  T430] usb 4-1: USB disconnect, device number 41
[   99.644830][    T9] usb 2-1: new low-speed USB device number 50 using dummy_hcd
[   99.796067][    T9] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[   99.807278][    T9] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   99.820465][    T9] usb 2-1: config 0 interface 0 has no altsetting 0
[   99.828677][    T9] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[   99.834939][  T421] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[   99.839488][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   99.855823][    T9] usb 2-1: config 0 descriptor??
[   99.861635][ T1529] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  100.004812][  T421] usb 3-1: Using ep0 maxpacket: 16
[  100.015632][  T421] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  100.028849][  T421] usb 3-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00
[  100.038132][  T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  100.055087][  T421] usb 3-1: config 0 descriptor??
[  100.073796][    T9] usbhid 2-1:0.0: can't add hid device: -71
[  100.079979][    T9] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  100.091840][    T9] usb 2-1: USB disconnect, device number 50
[  100.184841][  T430] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[  100.337394][  T430] usb 4-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00
[  100.346673][  T430] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  100.354850][  T430] usb 4-1: Product: syz
[  100.359770][  T430] usb 4-1: Manufacturer: syz
[  100.364440][  T430] usb 4-1: SerialNumber: syz
[  100.459133][ T1549] rust_binder: 280: no such ref 0
[  100.465587][ T1549] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  100.467489][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.473424][ T1549] rust_binder: Write failure EINVAL in pid:280
[  100.482556][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.488790][ T1549] netlink: 484 bytes leftover after parsing attributes in process `syz.0.387'.
[  100.495902][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.511959][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.519122][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.526701][  T421] hid-led 0003:0FC5:B080.0011: unknown main item tag 0x0
[  100.572225][  T420] usb 4-1: USB disconnect, device number 42
[  100.596092][ T1554] overlayfs: cannot append lower layer
[  100.665092][  T421] hid-led 0003:0FC5:B080.0011: probe with driver hid-led failed with error -71
[  100.675700][  T421] usb 3-1: USB disconnect, device number 52
[  100.894862][  T430] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[  101.044818][  T430] usb 2-1: Using ep0 maxpacket: 16
[  101.051643][  T430] usb 2-1: unable to get BOS descriptor or descriptor too short
[  101.060348][  T430] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 1023
[  101.072187][  T430] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  101.081322][  T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.089472][  T430] usb 2-1: Product: syz
[  101.093729][  T430] usb 2-1: Manufacturer: syz
[  101.098385][  T430] usb 2-1: SerialNumber: syz
[  101.104603][ T1557] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  101.150280][ T1563] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1542 sclass=netlink_route_socket pid=1563 comm=syz.3.393
[  101.238915][ T1574] syzkaller1: entered promiscuous mode
[  101.244453][ T1574] syzkaller1: entered allmulticast mode
[  101.314935][  T430] usb 2-1: bad CDC descriptors
[  101.321859][  T430] usb 2-1: USB disconnect, device number 51
[  101.414843][  T420] usb 4-1: new low-speed USB device number 43 using dummy_hcd
[  101.448669][   T36] audit: type=1400 audit(7122858298.177:331): avc:  denied  { setattr } for  pid=1582 comm="syz.2.401" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[  101.564882][  T420] usb 4-1: Invalid ep0 maxpacket: 64
[  101.634866][   T31] usb 1-1: new high-speed USB device number 50 using dummy_hcd
[  101.694885][  T420] usb 4-1: new low-speed USB device number 44 using dummy_hcd
[  101.734868][  T421] usb 3-1: new full-speed USB device number 53 using dummy_hcd
[  101.785870][   T31] usb 1-1: Using ep0 maxpacket: 32
[  101.792546][   T31] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[  101.800775][   T31] usb 1-1: config 0 has no interface number 0
[  101.808550][   T31] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  101.822955][   T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  101.831061][   T31] usb 1-1: Product: syz
[  101.835317][   T31] usb 1-1: Manufacturer: syz
[  101.841215][   T31] usb 1-1: SerialNumber: syz
[  101.847278][   T31] usb 1-1: config 0 descriptor??
[  101.853471][   T31] smsc95xx v2.0.0
[  101.864994][  T420] usb 4-1: Invalid ep0 maxpacket: 64
[  101.870631][  T420] usb usb4-port1: attempt power cycle
[  101.879608][   T36] audit: type=1400 audit(7122858298.607:332): avc:  denied  { lock } for  pid=1592 comm="syz.1.405" path="socket:[11578]" dev="sockfs" ino=11578 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_stream_socket permissive=1
[  101.904564][  T421] usb 3-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[  101.915761][  T421] usb 3-1: config 0 interface 0 has no altsetting 0
[  101.922445][  T421] usb 3-1: New USB device found, idVendor=046d, idProduct=c713, bcdDevice= 0.00
[  101.931585][  T421] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  101.941495][  T421] usb 3-1: config 0 descriptor??
[  101.946859][ T1589] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  102.155824][   T36] audit: type=1400 audit(7122858298.887:333): avc:  denied  { mounton } for  pid=1588 comm="syz.2.403" path="/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1
[  102.185173][    T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[  102.244853][  T420] usb 4-1: new low-speed USB device number 45 using dummy_hcd
[  102.254671][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  102.265432][  T420] usb 4-1: Invalid ep0 maxpacket: 64
[  102.270824][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  102.334864][    T9] usb 2-1: Using ep0 maxpacket: 8
[  102.341828][    T9] usb 2-1: unable to get BOS descriptor or descriptor too short
[  102.350501][    T9] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  102.360693][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[  102.371467][    T9] usb 2-1: New USB device found, idVendor=2466, idProduct=8010, bcdDevice= 0.40
[  102.380604][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  102.388759][    T9] usb 2-1: Product: syz
[  102.393029][  T421] logitech-djreceiver 0003:046D:C713.0012: unknown main item tag 0x2
[  102.394923][    T9] usb 2-1: Manufacturer: syz
[  102.402158][  T421] logitech-djreceiver 0003:046D:C713.0012: unknown main item tag 0x6
[  102.405870][  T420] usb 4-1: new low-speed USB device number 46 using dummy_hcd
[  102.414963][  T421] logitech-djreceiver 0003:046D:C713.0012: ignoring exceeding usage max
[  102.426147][    T9] usb 2-1: SerialNumber: syz
[  102.442257][  T421] logitech-djreceiver 0003:046D:C713.0012: hidraw0: USB HID v0.c1 Device [HID 046d:c713] on usb-dummy_hcd.2-1/input0
[  102.455148][  T420] usb 4-1: Invalid ep0 maxpacket: 64
[  102.460641][  T420] usb usb4-port1: unable to enumerate USB device
[  102.581913][  T421] usb 3-1: USB disconnect, device number 53
[  102.841620][    T9] usb 2-1: skipping empty audio interface (v1)
[  102.852938][    T9] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  102.863140][    T9] usb 2-1: USB disconnect, device number 52
[  102.863552][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  103.286378][   T31] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[  103.297360][   T31] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[  103.306685][   T31] usb 1-1: USB disconnect, device number 50
[  103.334868][    T9] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[  103.486235][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  103.497538][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  103.507462][    T9] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  103.516615][    T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  103.525450][    T9] usb 3-1: config 0 descriptor??
[  103.594881][  T420] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[  103.744838][  T420] usb 2-1: Using ep0 maxpacket: 16
[  103.751503][  T420] usb 2-1: unable to get BOS descriptor or descriptor too short
[  103.760084][  T420] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 186, changing to 7
[  103.773435][  T420] usb 2-1: string descriptor 0 read error: -22
[  103.779713][  T420] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40
[  103.788827][  T420] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.003055][  T420] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71
[  104.014424][  T420] usb 2-1: USB disconnect, device number 53
[  104.135216][ T1599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  104.144199][ T1599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  104.152540][    T9] usb 3-1: string descriptor 0 read error: -22
[  104.304853][   T31] usb 1-1: new high-speed USB device number 51 using dummy_hcd
[  104.356743][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0013/input/input16
[  104.370796][    T9] input: HID 256c:006d as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0013/input/input17
[  104.391718][    T9] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0013/input/input18
[  104.410927][    T9] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:256C:006D.0013/input/input19
[  104.436249][    T9] uclogic 0003:256C:006D.0013: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.2-1/input0
[  104.474875][   T31] usb 1-1: Using ep0 maxpacket: 16
[  104.481427][   T31] usb 1-1: config 1 has an invalid interface number: 105 but max is 0
[  104.489993][   T31] usb 1-1: config 1 has no interface number 0
[  104.501138][   T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  104.511192][   T31] usb 1-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  104.521368][   T31] usb 1-1: config 1 interface 105 has no altsetting 0
[  104.530012][   T31] usb 1-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  104.539222][   T31] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  104.547449][   T31] usb 1-1: Product: syz
[  104.551655][   T31] usb 1-1: Manufacturer: syz
[  104.556384][   T31] usb 1-1: SerialNumber: syz
[  104.564955][ T1613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.572206][ T1613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.574957][  T476] usb 4-1: new full-speed USB device number 47 using dummy_hcd
[  104.737554][  T476] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  104.746748][  T476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  104.754833][  T476] usb 4-1: Product: syz
[  104.759098][  T476] usb 4-1: Manufacturer: syz
[  104.763751][  T476] usb 4-1: SerialNumber: syz
[  104.844814][    T9] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[  104.983272][ T1613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.990602][ T1613] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  104.997893][    T9] usb 2-1: Using ep0 maxpacket: 32
[  105.004234][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  105.012423][    T9] usb 2-1: config 0 has no interface number 0
[  105.020187][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  105.029422][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  105.037494][    T9] usb 2-1: Product: syz
[  105.041695][    T9] usb 2-1: Manufacturer: syz
[  105.046375][    T9] usb 2-1: SerialNumber: syz
[  105.052121][    T9] usb 2-1: config 0 descriptor??
[  105.058830][    T9] smsc95xx v2.0.0
[  105.172568][  T476] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 47 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  105.459870][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  105.470836][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  105.680696][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  105.691589][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  105.775995][ T1628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.784699][ T1628] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.800259][ T1613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.809039][ T1613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.817674][ T1613] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  105.826919][ T1613] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  105.837651][   T31] aqc111 1-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 5a:ca:4d:a7:6c:46
[  106.037354][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -71
[  106.037721][  T421] usb 1-1: USB disconnect, device number 51
[  106.045826][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19
[  106.060222][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  106.066135][  T421] aqc111 1-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.0-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  106.069133][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  106.087848][  T150] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19
[  106.095988][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19
[  106.104253][  T150] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[  106.112629][  T150] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19
[  106.121305][  T150] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19
[  106.130234][  T150] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19
[  106.134205][    T9] usb 3-1: USB disconnect, device number 54
[  106.138942][  T150] aqc111 1-1:1.105 eth1: Error submitting the control message: status=-19
[  106.155306][  T421] aqc111 1-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19
[  106.166523][  T421] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[  106.176876][  T421] aqc111 1-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19
[  106.204169][  T421] aqc111 1-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19
[  106.268861][  T421] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  106.278443][  T421] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  106.287955][  T421] aqc111 1-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  106.564825][    T9] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[  106.726035][    T9] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping
[  106.734984][    T9] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  106.745296][    T9] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 3
[  106.755896][    T9] usb 3-1: New USB device found, idVendor=0763, idProduct=201a, bcdDevice= 0.40
[  106.765131][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  106.773182][    T9] usb 3-1: Product: syz
[  106.777506][    T9] usb 3-1: Manufacturer: syz
[  106.782134][    T9] usb 3-1: SerialNumber: syz
[  106.989886][    T9] usb 3-1: USB disconnect, device number 55
[  107.065630][    C1] usblp0: nonzero write bulk status received: -71
[  107.072632][  T421] usb 4-1: USB disconnect, device number 47
[  107.079571][  T421] usblp0: removed
[  107.570926][ T1673] x_tables: unsorted entry at hook 1
[  107.616607][  T430] usb 2-1: USB disconnect, device number 54
[  107.689867][   T36] audit: type=1326 audit(7122858304.417:334): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1687 comm="syz.3.430" exe="/root/ci2-android-6-12-rust/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd256f9ce59 code=0x0
[  107.844935][  T421] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[  107.994948][  T421] usb 3-1: Using ep0 maxpacket: 32
[  108.001577][  T421] usb 3-1: unable to get BOS descriptor or descriptor too short
[  108.010029][  T421] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.020328][  T421] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  108.034870][    T9] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[  108.036082][  T421] usb 3-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40
[  108.051824][  T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.060140][  T421] usb 3-1: Product: syz
[  108.064501][  T421] usb 3-1: Manufacturer: syz
[  108.069159][  T421] usb 3-1: SerialNumber: syz
[  108.168759][   T36] audit: type=1400 audit(7122858304.897:335): avc:  denied  { read } for  pid=1690 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  108.190946][    T9] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  108.200126][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.208188][    T9] usb 4-1: Product: syz
[  108.212413][    T9] usb 4-1: Manufacturer: syz
[  108.217060][    T9] usb 4-1: SerialNumber: syz
[  108.225536][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  108.231856][    T9] r8152-cfgselector 4-1: config 0 descriptor??
[  108.276502][ T1677] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  108.285461][ T1677] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  108.297742][  T421] usb 3-1: MIDIStreaming interface descriptor not found
[  108.307931][  T421] usb 3-1: USB disconnect, device number 56
[  108.319608][  T638] udevd[638]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  108.414846][  T430] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[  108.576150][  T430] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  108.586742][  T430] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  108.598046][  T430] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64
[  108.610560][  T430] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  108.619888][  T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  108.628296][  T430] usb 2-1: Product: syz
[  108.632508][  T430] usb 2-1: Manufacturer: syz
[  108.637187][  T430] usb 2-1: SerialNumber: syz
[  108.643078][ T1691] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  108.652158][  T430] cdc_ncm 2-1:1.1: skipping garbage
[  108.657477][  T430] cdc_ncm 2-1:1.1: CDC Union missing and no IAD found
[  108.664338][  T430] cdc_ncm 2-1:1.1: bind() failure
[  108.852920][  T421] usb 2-1: USB disconnect, device number 55
[  109.066002][  T430] usb 3-1: new full-speed USB device number 57 using dummy_hcd
[  109.217604][  T430] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  109.226741][  T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  109.234813][  T430] usb 3-1: Product: syz
[  109.239032][  T430] usb 3-1: Manufacturer: syz
[  109.243654][  T430] usb 3-1: SerialNumber: syz
[  109.456615][  T430] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  109.468602][  T430] usb 3-1: USB disconnect, device number 57
[  109.476580][  T430] usblp0: removed
[  109.724836][   T31] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[  109.876020][   T31] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=f0.ee
[  109.885229][   T31] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  109.894176][   T31] usb 2-1: config 0 descriptor??
[  109.899458][  T430] usb 3-1: new high-speed USB device number 58 using dummy_hcd
[  109.908312][   T31] usb 2-1: selecting invalid altsetting 1
[  109.916547][   T31] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  109.929167][  T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  110.066074][  T430] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 32
[  110.077931][  T430] usb 3-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  110.087084][  T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  110.095134][  T430] usb 3-1: Product: syz
[  110.099391][  T430] usb 3-1: Manufacturer: syz
[  110.104121][  T430] usb 3-1: SerialNumber: syz
[  110.111194][ T1697] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[  110.323025][  T430] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 58 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  110.336673][  T430] usb 3-1: USB disconnect, device number 58
[  110.344698][  T430] usblp0: removed
[  110.682964][    T9] r8152-cfgselector 4-1: Unknown version 0x0000
[  110.689785][    T9] r8152-cfgselector 4-1: bad CDC descriptors
[  110.699356][    T9] r8152-cfgselector 4-1: USB disconnect, device number 48
[  110.837693][   T36] audit: type=1400 audit(7122858307.567:336): avc:  denied  { read write } for  pid=1703 comm="syz.2.436" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  110.861017][   T36] audit: type=1400 audit(7122858307.567:337): avc:  denied  { open } for  pid=1703 comm="syz.2.436" path="/dev/uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  110.884706][   T36] audit: type=1400 audit(7122858307.567:338): avc:  denied  { ioctl } for  pid=1703 comm="syz.2.436" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  110.994920][    T9] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[  111.006368][   T36] audit: type=1400 audit(7122858307.737:339): avc:  denied  { mounton } for  pid=1707 comm="syz.2.437" path="/file0" dev="ramfs" ino=11751 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1
[  111.140054][ T1714] cgroup: fork rejected by pids controller in /syz2
[  111.147012][    T9] usb 4-1: Using ep0 maxpacket: 32
[  111.154391][    T9] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  111.162847][    T9] usb 4-1: config 0 has no interface number 0
[  111.174609][    T9] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  111.184112][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.192407][    T9] usb 4-1: Product: syz
[  111.197432][    T9] usb 4-1: Manufacturer: syz
[  111.203688][    T9] usb 4-1: SerialNumber: syz
[  111.209551][    T9] usb 4-1: config 0 descriptor??
[  111.215993][    T9] smsc95xx v2.0.0
[  111.357415][   T36] audit: type=1400 audit(7122858308.087:340): avc:  denied  { create } for  pid=1747 comm="syz.2.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  111.369524][ T1748] overlayfs: failed to resolve './bus': -2
[  111.617925][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  111.628936][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  111.644846][  T430] usb 3-1: new full-speed USB device number 59 using dummy_hcd
[  111.796081][  T430] usb 3-1: config 0 has an invalid interface number: 48 but max is 0
[  111.804245][  T430] usb 3-1: config 0 has no interface number 0
[  111.810427][  T430] usb 3-1: too many endpoints for config 0 interface 48 altsetting 48: 48, using maximum allowed: 30
[  111.821747][  T430] usb 3-1: config 0 interface 48 altsetting 48 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  111.835049][  T430] usb 3-1: config 0 interface 48 has no altsetting 0
[  111.842076][    T9] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  111.843870][  T430] usb 3-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  111.853629][    T9] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  111.862157][  T430] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  111.878285][  T430] usb 3-1: Product: syz
[  111.882513][  T430] usb 3-1: Manufacturer: syz
[  111.887190][  T430] usb 3-1: SerialNumber: syz
[  111.892871][  T430] usb 3-1: config 0 descriptor??
[  112.100149][ T1748] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  112.108858][ T1748] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  112.119264][  T430] ums-onetouch 3-1:0.48: USB Mass Storage device detected
[  112.150275][  T430] usb 3-1: USB disconnect, device number 59
[  112.444693][  T430] usb 2-1: USB disconnect, device number 56
[  112.894846][    T9] usb 3-1: new high-speed USB device number 60 using dummy_hcd
[  112.914859][  T430] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[  113.058150][    T9] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  113.065291][  T430] usb 2-1: Using ep0 maxpacket: 16
[  113.067927][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.074511][  T430] usb 2-1: config 254 has an invalid interface number: 52 but max is 0
[  113.081802][    T9] usb 3-1: Product: syz
[  113.090196][  T430] usb 2-1: config 254 has no interface number 0
[  113.094713][    T9] usb 3-1: Manufacturer: syz
[  113.100850][  T430] usb 2-1: config 254 interface 52 has no altsetting 0
[  113.105456][    T9] usb 3-1: SerialNumber: syz
[  113.114678][  T430] usb 2-1: New USB device found, idVendor=04e6, idProduct=000a, bcdDevice= 2.00
[  113.126272][  T430] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  113.127005][    T9] r8152-cfgselector 3-1: Unknown version 0x0000
[  113.134729][  T430] usb 2-1: Product: syz
[  113.141726][    T9] r8152-cfgselector 3-1: config 0 descriptor??
[  113.145242][  T430] usb 2-1: Manufacturer: syz
[  113.156036][  T430] usb 2-1: SerialNumber: syz
[  113.363421][  T430] usb-storage 2-1:254.52: USB Mass Storage device detected
[  113.387911][  T430] usb 2-1: USB disconnect, device number 57
[  113.711004][  T476] usb 4-1: USB disconnect, device number 49
[  113.724375][ T1771] FAULT_INJECTION: forcing a failure.
[  113.724375][ T1771] name failslab, interval 1, probability 0, space 0, times 0
[  113.737133][ T1771] CPU: 1 UID: 0 PID: 1771 Comm: syz.3.448 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  113.737174][ T1771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  113.737190][ T1771] Call Trace:
[  113.737200][ T1771]  <TASK>
[  113.737209][ T1771]  __dump_stack+0x21/0x30
[  113.737246][ T1771]  dump_stack_lvl+0x140/0x1c0
[  113.737277][ T1771]  ? __cfi_dump_stack_lvl+0x10/0x10
[  113.737300][ T1771]  ? __asan_memset+0x39/0x50
[  113.737338][ T1771]  dump_stack+0x19/0x20
[  113.737369][ T1771]  should_fail_ex+0x3d7/0x530
[  113.737390][ T1771]  should_failslab+0xac/0x100
[  113.737420][ T1771]  kmem_cache_alloc_noprof+0x42/0x410
[  113.737437][ T1771]  ? skb_clone+0x229/0x460
[  113.737461][ T1771]  skb_clone+0x229/0x460
[  113.737508][ T1771]  ip_mc_output+0x1ae/0x840
[  113.737539][ T1771]  ? nf_nat_ipv4_local_fn+0x1c9/0x520
[  113.737569][ T1771]  ? __cfi_ipt_do_table+0x10/0x10
[  113.737587][ T1771]  ? __cfi_ip_mc_output+0x10/0x10
[  113.737609][ T1771]  ? nf_hook_slow+0x196/0x240
[  113.737642][ T1771]  ? __ip_local_out+0x406/0x410
[  113.737673][ T1771]  ? __cfi___ip_local_out+0x10/0x10
[  113.737705][ T1771]  ? __cfi_dst_output+0x10/0x10
[  113.737738][ T1771]  ? __cfi_ip_mc_output+0x10/0x10
[  113.737761][ T1771]  ip_push_pending_frames+0x1e8/0x1f0
[  113.737794][ T1771]  raw_sendmsg+0xfbb/0x1510
[  113.737825][ T1771]  ? __cfi_raw_sendmsg+0x10/0x10
[  113.737859][ T1771]  ? check_stack_object+0x106/0x150
[  113.737881][ T1771]  ? __check_object_size+0xe0/0x830
[  113.737906][ T1771]  ? __fget_files+0x2c5/0x340
[  113.737925][ T1771]  ? inet_send_prepare+0x64/0x4e0
[  113.737965][ T1771]  ? __cfi_raw_sendmsg+0x10/0x10
[  113.737992][ T1771]  inet_sendmsg+0x113/0x120
[  113.738022][ T1771]  ? __cfi_inet_sendmsg+0x10/0x10
[  113.738040][ T1771]  __sys_sendto+0x5ea/0x700
[  113.738063][ T1771]  ? __cfi___sys_sendto+0x10/0x10
[  113.738106][ T1771]  ? __kasan_check_write+0x18/0x20
[  113.738131][ T1771]  ? __cfi_ksys_write+0x10/0x10
[  113.738154][ T1771]  __x64_sys_sendto+0xe9/0x100
[  113.738187][ T1771]  x64_sys_call+0x2c2c/0x2ee0
[  113.738202][ T1771]  do_syscall_64+0x57/0xf0
[  113.738219][ T1771]  ? clear_bhb_loop+0x50/0xa0
[  113.738260][ T1771]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  113.738286][ T1771] RIP: 0033:0x7fd256f9ce59
[  113.738304][ T1771] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  113.738328][ T1771] RSP: 002b:00007fd257db1028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  113.738346][ T1771] RAX: ffffffffffffffda RBX: 00007fd257215fa0 RCX: 00007fd256f9ce59
[  113.738359][ T1771] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  113.738368][ T1771] RBP: 00007fd257db1090 R08: 0000200000000080 R09: 0000000000000010
[  113.738393][ T1771] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001
[  113.738409][ T1771] R13: 00007fd257216038 R14: 00007fd257215fa0 R15: 00007ffe104a5248
[  113.738428][ T1771]  </TASK>
[  114.048559][ T1773] netlink: 92 bytes leftover after parsing attributes in process `syz.3.449'.
[  114.058644][ T1773] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=1547 sclass=netlink_tcpdiag_socket pid=1773 comm=syz.3.449
[  114.304817][  T476] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[  114.338264][    T9] r8152-cfgselector 3-1: Unknown version 0x0000
[  114.347274][    T9] r8152-cfgselector 3-1: bad CDC descriptors
[  114.354831][    T9] r8152-cfgselector 3-1: USB disconnect, device number 60
[  114.384885][  T425] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[  114.406306][ T1777] netlink: 776 bytes leftover after parsing attributes in process `syz.2.451'.
[  114.455064][  T476] usb 4-1: Using ep0 maxpacket: 16
[  114.461581][  T476] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  114.474596][  T476] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0196, bcdDevice= 0.04
[  114.484003][  T476] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  114.494226][  T476] usb 4-1: SerialNumber: syz
[  114.494423][ T1781] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3482940618 (6965881236 ns) > initial count (504378442 ns). Using initial count to start timer.
[  114.519138][  T476] usb 4-1: config 0 descriptor??
[  114.525495][  T476] hub 4-1:0.0: bad descriptor, ignoring hub
[  114.531459][  T476] hub 4-1:0.0: probe with driver hub failed with error -5
[  114.539445][  T476] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected
[  114.547091][  T425] usb 2-1: no configurations
[  114.551712][  T425] usb 2-1: can't read configurations, error -22
[  114.558833][  T476] usb 4-1: Detected SIO
[  114.563665][  T476] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  114.623097][   T36] audit: type=1400 audit(7122858311.347:341): avc:  denied  { getopt } for  pid=1785 comm="syz.2.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  114.694867][  T425] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[  114.727139][ T1773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  114.735976][ T1773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  114.845251][  T425] usb 2-1: no configurations
[  114.849959][  T425] usb 2-1: can't read configurations, error -22
[  114.856597][  T425] usb usb2-port1: attempt power cycle
[  114.864900][  T421] usb 4-1: USB disconnect, device number 50
[  114.871790][  T421] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  114.881451][  T421] ftdi_sio 4-1:0.0: device disconnected
[  114.887081][  T430] usb 3-1: new high-speed USB device number 61 using dummy_hcd
[  115.044832][  T430] usb 3-1: Using ep0 maxpacket: 8
[  115.051284][  T430] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  115.062590][  T430] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 13
[  115.075681][  T430] usb 3-1: config 0 interface 0 has no altsetting 0
[  115.082295][  T430] usb 3-1: New USB device found, idVendor=056a, idProduct=009a, bcdDevice= 0.00
[  115.092325][  T430] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  115.101444][  T430] usb 3-1: config 0 descriptor??
[  115.194860][  T425] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[  115.215696][  T425] usb 2-1: no configurations
[  115.220347][  T425] usb 2-1: can't read configurations, error -22
[  115.354849][  T425] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[  115.375601][  T425] usb 2-1: no configurations
[  115.380262][  T425] usb 2-1: can't read configurations, error -22
[  115.386888][  T425] usb usb2-port1: unable to enumerate USB device
[  115.508877][ T1791] netlink: 'syz.2.455': attribute type 4 has an invalid length.
[  115.517030][ T1791] netlink: 'syz.2.455': attribute type 5 has an invalid length.
[  115.524784][ T1791] netlink: 3657 bytes leftover after parsing attributes in process `syz.2.455'.
[  115.536201][  T430] wacom 0003:056A:009A.0014: unknown main item tag 0x7
[  115.544397][  T430] wacom 0003:056A:009A.0014: hidraw0: USB HID v0.04 Device [HID 056a:009a] on usb-dummy_hcd.2-1/input0
[  115.556090][  T793] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[  115.714863][  T793] usb 4-1: Using ep0 maxpacket: 32
[  115.721809][  T793] usb 4-1: config 0 has an invalid interface number: 67 but max is 0
[  115.730069][  T793] usb 4-1: config 0 has no interface number 0
[  115.742557][  T793] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  115.751968][   T31] usb 3-1: USB disconnect, device number 61
[  115.758601][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  115.768059][  T793] usb 4-1: Product: syz
[  115.772341][  T793] usb 4-1: Manufacturer: syz
[  115.778915][  T793] usb 4-1: SerialNumber: syz
[  115.786044][  T793] usb 4-1: config 0 descriptor??
[  115.792048][ T1799] FAULT_INJECTION: forcing a failure.
[  115.792048][ T1799] name failslab, interval 1, probability 0, space 0, times 0
[  115.805239][  T793] smsc95xx v2.0.0
[  115.805961][ T1799] CPU: 0 UID: 0 PID: 1799 Comm: syz.2.457 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  115.806055][ T1799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  115.806096][ T1799] Call Trace:
[  115.806117][ T1799]  <TASK>
[  115.806138][ T1799]  __dump_stack+0x21/0x30
[  115.806257][ T1799]  dump_stack_lvl+0x140/0x1c0
[  115.806336][ T1799]  ? __cfi_dump_stack_lvl+0x10/0x10
[  115.806435][ T1799]  ? __cfi_selinux_ip_postroute+0x10/0x10
[  115.806499][ T1799]  dump_stack+0x19/0x20
[  115.806576][ T1799]  should_fail_ex+0x3d7/0x530
[  115.806637][ T1799]  should_failslab+0xac/0x100
[  115.806712][ T1799]  kmem_cache_alloc_noprof+0x42/0x410
[  115.806789][ T1799]  ? dst_alloc+0x13c/0x250
[  115.806869][ T1799]  dst_alloc+0x13c/0x250
[  115.806925][ T1799]  ? iptable_mangle_hook+0x1a8/0x500
[  115.806998][ T1799]  rt_dst_clone+0x56/0x660
[  115.807053][ T1799]  ip_mc_finish_output+0x9a/0x540
[  115.807147][ T1799]  ? nf_hook_slow+0x196/0x240
[  115.807209][ T1799]  ip_mc_output+0x1f8/0x840
[  115.807285][ T1799]  ? nf_nat_ipv4_local_fn+0x1c9/0x520
[  115.807368][ T1799]  ? __cfi_ip_mc_output+0x10/0x10
[  115.807453][ T1799]  ? nf_hook_slow+0x196/0x240
[  115.807515][ T1799]  ? __ip_local_out+0x406/0x410
[  115.807599][ T1799]  ? __cfi___ip_local_out+0x10/0x10
[  115.807683][ T1799]  ? __cfi_ip_mc_finish_output+0x10/0x10
[  115.807778][ T1799]  ? __cfi_ip_mc_output+0x10/0x10
[  115.807863][ T1799]  ip_push_pending_frames+0x1e8/0x1f0
[  115.807912][ T1799]  raw_sendmsg+0xfbb/0x1510
[  115.807999][ T1799]  ? __cfi_raw_sendmsg+0x10/0x10
[  115.808087][ T1799]  ? check_stack_object+0x106/0x150
[  115.808157][ T1799]  ? __check_object_size+0xe0/0x830
[  115.808244][ T1799]  ? __fget_files+0x2c5/0x340
[  115.808316][ T1799]  ? inet_send_prepare+0x64/0x4e0
[  115.808379][ T1799]  ? __cfi_raw_sendmsg+0x10/0x10
[  115.808454][ T1799]  inet_sendmsg+0x113/0x120
[  115.808529][ T1799]  ? __cfi_inet_sendmsg+0x10/0x10
[  115.808592][ T1799]  __sys_sendto+0x5ea/0x700
[  115.808676][ T1799]  ? __cfi___sys_sendto+0x10/0x10
[  115.808767][ T1799]  ? __kasan_check_write+0x18/0x20
[  115.808837][ T1799]  ? __cfi_ksys_write+0x10/0x10
[  115.808898][ T1799]  __x64_sys_sendto+0xe9/0x100
[  115.808972][ T1799]  x64_sys_call+0x2c2c/0x2ee0
[  115.809047][ T1799]  do_syscall_64+0x57/0xf0
[  115.809096][ T1799]  ? clear_bhb_loop+0x50/0xa0
[  115.809176][ T1799]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  115.809242][ T1799] RIP: 0033:0x7f583019ce59
[  115.809295][ T1799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  115.809348][ T1799] RSP: 002b:00007f583106b028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  115.809413][ T1799] RAX: ffffffffffffffda RBX: 00007f5830415fa0 RCX: 00007f583019ce59
[  115.809457][ T1799] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[  115.809498][ T1799] RBP: 00007f583106b090 R08: 0000200000000080 R09: 0000000000000010
[  115.809540][ T1799] R10: 0000000000000804 R11: 0000000000000246 R12: 0000000000000001
[  115.809574][ T1799] R13: 00007f5830416038 R14: 00007f5830415fa0 R15: 00007ffc6e9dbc78
[  115.809635][ T1799]  </TASK>
[  116.319151][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  116.330043][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  116.404876][   T31] usb 3-1: new high-speed USB device number 62 using dummy_hcd
[  116.540747][  T793] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  116.552098][  T793] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -32
[  116.562879][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  116.571577][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  116.581814][   T31] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 50, changing to 7
[  116.592898][   T31] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  116.607530][   T31] usb 3-1: New USB device found, idVendor=2b53, idProduct=0024, bcdDevice= 0.40
[  116.616904][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  116.625085][   T31] usb 3-1: Product: syz
[  116.629327][   T31] usb 3-1: Manufacturer: syz
[  116.633953][   T31] usb 3-1: SerialNumber: syz
[  116.843458][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22
[  116.853967][   T31] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -22
[  116.867393][   T31] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[  116.877457][   T31] usb 3-1: USB disconnect, device number 62
[  116.890075][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  117.555214][   T31] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[  117.614896][  T421] usb 3-1: new high-speed USB device number 63 using dummy_hcd
[  117.704867][   T31] usb 2-1: Using ep0 maxpacket: 16
[  117.711956][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  117.720454][   T31] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7
[  117.733102][   T31] usb 2-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40
[  117.742240][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.750450][   T31] usb 2-1: Product: syz
[  117.754684][   T31] usb 2-1: Manufacturer: syz
[  117.759372][   T31] usb 2-1: SerialNumber: syz
[  117.769007][  T421] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  117.778246][  T421] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  117.786425][  T421] usb 3-1: Product: syz
[  117.790908][  T421] usb 3-1: Manufacturer: syz
[  117.795578][  T421] usb 3-1: SerialNumber: syz
[  117.803422][  T421] r8152-cfgselector 3-1: Unknown version 0x0000
[  117.809908][  T421] r8152-cfgselector 3-1: config 0 descriptor??
[  117.968006][   T31] usb 2-1: Audio class v2/v3 interfaces need an interface association
[  117.976518][   T31] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22
[  118.310879][  T421] usb 4-1: USB disconnect, device number 51
[  118.371768][   T31] usb 2-1: USB disconnect, device number 62
[  118.383635][  T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  118.644866][  T421] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[  118.720823][  T425] r8152-cfgselector 3-1: USB disconnect, device number 63
[  118.769105][   T36] audit: type=1400 audit(7122858315.497:342): avc:  denied  { unmount } for  pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  118.798892][  T421] usb 4-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  118.808828][  T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  118.818580][  T421] usb 4-1: Product: syz
[  118.823010][  T421] usb 4-1: Manufacturer: syz
[  118.827693][  T421] usb 4-1: SerialNumber: syz
[  118.840700][  T421] r8152-cfgselector 4-1: Unknown version 0x0000
[  118.847158][  T421] r8152-cfgselector 4-1: config 0 descriptor??
[  118.893105][ T1826] netlink: 36 bytes leftover after parsing attributes in process `syz.1.468'.
[  119.154910][    T9] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[  119.274855][  T425] usb 3-1: new high-speed USB device number 64 using dummy_hcd
[  119.304848][    T9] usb 2-1: Using ep0 maxpacket: 32
[  119.311099][    T9] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  119.319738][    T9] usb 2-1: config 0 has no interface number 0
[  119.328396][    T9] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  119.337853][    T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.346152][    T9] usb 2-1: Product: syz
[  119.350362][    T9] usb 2-1: Manufacturer: syz
[  119.355169][    T9] usb 2-1: SerialNumber: syz
[  119.360479][    T9] usb 2-1: config 0 descriptor??
[  119.366334][    T9] smsc95xx v2.0.0
[  119.434843][  T425] usb 3-1: Using ep0 maxpacket: 16
[  119.442032][  T425] usb 3-1: config 0 has an invalid interface number: 52 but max is 1
[  119.450232][  T425] usb 3-1: config 0 has an invalid interface number: 11 but max is 1
[  119.458596][  T425] usb 3-1: config 0 contains an unexpected descriptor of type 0x1, skipping
[  119.467843][  T425] usb 3-1: config 0 has no interface number 0
[  119.474063][  T425] usb 3-1: config 0 has no interface number 1
[  119.480312][  T425] usb 3-1: config 0 interface 11 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  119.491350][  T425] usb 3-1: config 0 interface 11 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  119.502313][  T425] usb 3-1: config 0 interface 11 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  119.513143][  T425] usb 3-1: config 0 interface 11 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  119.523967][  T425] usb 3-1: config 0 interface 11 altsetting 1 endpoint 0x1 has invalid maxpacket 2047, setting to 64
[  119.534885][  T425] usb 3-1: config 0 interface 11 altsetting 1 has a duplicate endpoint with address 0xA, skipping
[  119.545571][  T425] usb 3-1: config 0 interface 11 altsetting 1 bulk endpoint 0x5 has invalid maxpacket 8
[  119.555349][  T425] usb 3-1: config 0 interface 11 altsetting 1 has a duplicate endpoint with address 0x3, skipping
[  119.566008][  T425] usb 3-1: config 0 interface 52 has no altsetting 0
[  119.574199][  T425] usb 3-1: config 0 interface 11 has no altsetting 0
[  119.582580][  T425] usb 3-1: New USB device found, idVendor=19d2, idProduct=fffe, bcdDevice= 3.e2
[  119.592249][  T425] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  119.600313][  T425] usb 3-1: Product: ⹃붃⡭尤➴㑼༰䚣⩭嚔碌仒ᔵ霛꿱陯边濄绚溙�桼〦⽠〟譯ࢶ귻攘䜢狴脡嶚ᔗ橡᧠嶸��臾夃녰
[  119.615791][  T425] usb 3-1: Manufacturer: ╕Ὗ姇诤闖��옻蒼웎堖ﻯ橖婰㥀诬甿樘䵱㺄敄赯ザ��类��䯥멇䪔
[  119.629386][  T425] usb 3-1: SerialNumber: Ї
[  119.635041][  T425] usb 3-1: config 0 descriptor??
[  119.758711][  T476] r8152-cfgselector 4-1: USB disconnect, device number 52
[  119.774920][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  119.787895][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  119.849425][  T425] usb 3-1: USB disconnect, device number 64
[  119.998162][    T9] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  120.009304][    T9] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  120.333052][   T36] audit: type=1400 audit(7122858317.057:343): avc:  denied  { listen } for  pid=1837 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.352672][   T36] audit: type=1400 audit(7122858317.057:344): avc:  denied  { accept } for  pid=1837 comm="syz.3.472" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  120.464063][   T36] audit: type=1400 audit(7122858317.187:345): avc:  denied  { create } for  pid=1848 comm="syz.3.476" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  120.484887][   T36] audit: type=1400 audit(7122858317.197:346): avc:  denied  { mounton } for  pid=1848 comm="syz.3.476" path="/118/file0" dev="tmpfs" ino=647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  120.734845][    T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[  120.864858][    T9] usb 4-1: device descriptor read/64, error -71
[  121.114866][    T9] usb 4-1: device descriptor read/64, error -71
[  121.154853][   T31] usb 3-1: new high-speed USB device number 65 using dummy_hcd
[  121.306298][   T31] usb 3-1: unable to get BOS descriptor or descriptor too short
[  121.314891][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  121.327232][   T31] usb 3-1: string descriptor 0 read error: -22
[  121.333553][   T31] usb 3-1: New USB device found, idVendor=200c, idProduct=100b, bcdDevice= 0.40
[  121.342665][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  121.364838][    T9] usb 4-1: new high-speed USB device number 54 using dummy_hcd
[  121.494834][    T9] usb 4-1: device descriptor read/64, error -71
[  121.734807][    T9] usb 4-1: device descriptor read/64, error -71
[  121.762123][   T36] audit: type=1400 audit(7122858318.487:347): avc:  denied  { mounton } for  pid=1854 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1
[  121.823804][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.831025][ T1854] bridge0: port 1(bridge_slave_0) entered disabled state
[  121.838650][ T1854] bridge_slave_0: entered allmulticast mode
[  121.844956][    T9] usb usb4-port1: attempt power cycle
[  121.846092][ T1854] bridge_slave_0: entered promiscuous mode
[  121.857176][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.864453][ T1854] bridge0: port 2(bridge_slave_1) entered disabled state
[  121.871640][ T1854] bridge_slave_1: entered allmulticast mode
[  121.878089][ T1854] bridge_slave_1: entered promiscuous mode
[  121.933696][ T1854] bridge0: port 2(bridge_slave_1) entered blocking state
[  121.940851][ T1854] bridge0: port 2(bridge_slave_1) entered forwarding state
[  121.942118][  T476] usb 2-1: USB disconnect, device number 63
[  121.948496][ T1854] bridge0: port 1(bridge_slave_0) entered blocking state
[  121.961145][ T1854] bridge0: port 1(bridge_slave_0) entered forwarding state
[  121.996980][  T592] bridge0: port 1(bridge_slave_0) entered disabled state
[  122.005473][  T592] bridge0: port 2(bridge_slave_1) entered disabled state
[  122.018142][  T870] bridge0: port 1(bridge_slave_0) entered blocking state
[  122.025274][  T870] bridge0: port 1(bridge_slave_0) entered forwarding state
[  122.039677][  T592] bridge0: port 2(bridge_slave_1) entered blocking state
[  122.046950][  T592] bridge0: port 2(bridge_slave_1) entered forwarding state
[  122.083806][ T1854] veth0_vlan: entered promiscuous mode
[  122.095856][ T1854] veth1_macvtap: entered promiscuous mode
[  122.172970][ T1852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  122.181816][ T1852] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  122.189781][    T9] usb 4-1: new high-speed USB device number 55 using dummy_hcd
[  122.192673][   T31] usb 3-1: USB disconnect, device number 65
[  122.216064][    T9] usb 4-1: device descriptor read/8, error -71
[  122.346005][    T9] usb 4-1: device descriptor read/8, error -71
[  122.384829][  T476] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[  122.537688][  T476] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  122.546863][  T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  122.555135][  T476] usb 2-1: Product: syz
[  122.559334][  T476] usb 2-1: Manufacturer: syz
[  122.563934][  T476] usb 2-1: SerialNumber: syz
[  122.572143][  T476] r8152-cfgselector 2-1: Unknown version 0x0000
[  122.578577][  T476] r8152-cfgselector 2-1: config 0 descriptor??
[  122.585006][    T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd
[  122.605870][    T9] usb 4-1: device descriptor read/8, error -71
[  122.745869][    T9] usb 4-1: device descriptor read/8, error -71
[  122.803651][  T476] r8152-cfgselector 2-1: Unknown version 0x0000
[  122.810308][  T476] r8152-cfgselector 2-1: bad CDC descriptors
[  122.813065][ T1871] incfs: Options parsing error. -22
[  122.821849][ T1871] incfs: mount failed -22
[  122.827151][  T476] r8152-cfgselector 2-1: USB disconnect, device number 64
[  122.854906][    T9] usb usb4-port1: unable to enumerate USB device
[  123.084959][   T31] usb 3-1: new high-speed USB device number 66 using dummy_hcd
[  123.214937][  T421] usb 5-1: new high-speed USB device number 2 using dummy_hcd
[  123.237697][   T31] usb 3-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  123.247233][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.255429][   T31] usb 3-1: Product: syz
[  123.259622][   T31] usb 3-1: Manufacturer: syz
[  123.264224][   T31] usb 3-1: SerialNumber: syz
[  123.271876][   T31] r8152-cfgselector 3-1: Unknown version 0x0000
[  123.278240][   T31] r8152-cfgselector 3-1: config 0 descriptor??
[  123.322730][ T1875] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1875 comm=syz.1.483
[  123.364836][  T421] usb 5-1: Using ep0 maxpacket: 16
[  123.371255][  T421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  123.382312][  T421] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  123.392203][  T421] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  123.405735][  T421] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  123.414990][  T421] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  123.425299][  T421] usb 5-1: config 0 descriptor??
[  123.734882][  T476] usb 2-1: new high-speed USB device number 65 using dummy_hcd
[  123.833281][  T421] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max
[  123.842721][  T421] microsoft 0003:045E:07DA.0015: ignoring exceeding usage max
[  123.851685][  T421] microsoft 0003:045E:07DA.0015: item fetching failed at offset 30/34
[  123.854950][    T9] usb 4-1: new full-speed USB device number 57 using dummy_hcd
[  123.860862][  T421] microsoft 0003:045E:07DA.0015: parse failed
[  123.874015][  T421] microsoft 0003:045E:07DA.0015: probe with driver microsoft failed with error -22
[  123.895011][  T476] usb 2-1: Using ep0 maxpacket: 32
[  123.901526][  T476] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  123.909774][  T476] usb 2-1: config 0 has no interface number 0
[  123.917393][  T476] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  123.926577][  T476] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  123.935107][  T476] usb 2-1: Product: syz
[  123.939287][  T476] usb 2-1: Manufacturer: syz
[  123.943878][  T476] usb 2-1: SerialNumber: syz
[  123.949408][  T476] usb 2-1: config 0 descriptor??
[  123.955646][  T476] smsc95xx v2.0.0
[  124.027426][    T9] usb 4-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  124.036581][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  124.037962][ T1873] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  124.044616][    T9] usb 4-1: Product: syz
[  124.044639][    T9] usb 4-1: Manufacturer: syz
[  124.059266][ T1873] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  124.063045][    T9] usb 4-1: SerialNumber: syz
[  124.194680][  T310] r8152-cfgselector 3-1: USB disconnect, device number 66
[  124.364897][  T476] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  124.376178][  T476] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  124.586027][  T476] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  124.597478][  T476] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  124.734902][  T310] usb 3-1: new high-speed USB device number 67 using dummy_hcd
[  124.894805][  T310] usb 3-1: Using ep0 maxpacket: 16
[  124.901290][  T310] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 129, using maximum allowed: 30
[  124.912587][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  124.923825][  T310] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  124.933752][  T310] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 129
[  124.946887][  T310] usb 3-1: New USB device found, idVendor=0458, idProduct=5013, bcdDevice= 0.00
[  124.956030][  T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  124.964966][  T310] usb 3-1: config 0 descriptor??
[  125.381388][  T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0016/input/input24
[  125.398215][  T310] input: HID 0458:5013 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:0458:5013.0016/input/input25
[  125.420180][  T310] kye 0003:0458:5013.0016: input,hiddev96,hidraw0: USB HID vff.fa Device [HID 0458:5013] on usb-dummy_hcd.2-1/input0
[  125.626238][  T421] usb 3-1: USB disconnect, device number 67
[  125.984947][  T310] usb 5-1: USB disconnect, device number 2
[  126.011551][   T36] audit: type=1400 audit(7122858322.737:348): avc:  denied  { ioctl } for  pid=1898 comm="syz.4.490" path="socket:[13201]" dev="sockfs" ino=13201 ioctlcmd=0x891c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  126.464969][  T310] usb 5-1: new high-speed USB device number 3 using dummy_hcd
[  126.494837][  T476] usb 3-1: new high-speed USB device number 68 using dummy_hcd
[  126.511584][   T31] usb 2-1: USB disconnect, device number 65
[  126.624878][  T476] usb 3-1: device descriptor read/64, error -71
[  126.632921][  T310] usb 5-1: unable to get BOS descriptor or descriptor too short
[  126.642664][  T310] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7
[  126.656643][  T310] usb 5-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 119, changing to 7
[  126.673179][  T310] usb 5-1: New USB device found, idVendor=2a39, idProduct=3fd3, bcdDevice= 0.40
[  126.682422][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  126.692160][  T310] usb 5-1: Product: syz
[  126.696476][  T310] usb 5-1: Manufacturer: syz
[  126.701169][  T310] usb 5-1: SerialNumber: syz
[  126.714420][    T9] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 57 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  126.739013][    T9] usb 4-1: USB disconnect, device number 57
[  126.750229][    T9] usblp0: removed
[  126.823471][ T1925] netlink: 'syz.3.498': attribute type 13 has an invalid length.
[  126.874953][  T476] usb 3-1: device descriptor read/64, error -71
[  126.884531][ T1925] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000
[  126.929839][  T310] usb 5-1: Can't get UAC3 power state for id 10
[  126.939859][  T310] usb 5-1: 2:0: failed to get current value for ch 0 (-71)
[  126.954118][  T310] usb 5-1: 2:0: cannot get min/max values for control 2 (id 2)
[  126.982289][  T310] usb 5-1: USB disconnect, device number 3
[  127.001402][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  127.124795][  T476] usb 3-1: new high-speed USB device number 69 using dummy_hcd
[  127.235055][  T421] usb 4-1: new full-speed USB device number 58 using dummy_hcd
[  127.264880][  T476] usb 3-1: device descriptor read/64, error -71
[  127.364856][   T31] usb 2-1: new high-speed USB device number 66 using dummy_hcd
[  127.386145][  T421] usb 4-1: config 1 has an invalid descriptor of length 255, skipping remainder of the config
[  127.396601][  T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  127.407196][  T421] usb 4-1: New USB device found, idVendor=17cc, idProduct=2305, bcdDevice= 0.40
[  127.416421][  T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.424558][  T421] usb 4-1: Product: syz
[  127.428837][  T421] usb 4-1: Manufacturer: syz
[  127.433474][  T421] usb 4-1: SerialNumber: syz
[  127.470051][   T36] audit: type=1400 audit(7122858324.197:349): avc:  denied  { read } for  pid=1940 comm="syz.4.504" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  127.504808][  T476] usb 3-1: device descriptor read/64, error -71
[  127.515167][   T31] usb 2-1: Using ep0 maxpacket: 32
[  127.522314][   T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0
[  127.530663][   T31] usb 2-1: config 0 has no interface number 0
[  127.538537][   T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  127.548222][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.556664][   T31] usb 2-1: Product: syz
[  127.560930][   T31] usb 2-1: Manufacturer: syz
[  127.565614][   T31] usb 2-1: SerialNumber: syz
[  127.571187][   T31] usb 2-1: config 0 descriptor??
[  127.577397][   T31] smsc95xx v2.0.0
[  127.615536][  T476] usb usb3-port1: attempt power cycle
[  127.643092][  T421] usb 4-1: 0:1 : does not exist
[  127.648264][  T421] usb 4-1: unit 5 not found!
[  127.655436][  T421] usb 4-1: USB disconnect, device number 58
[  127.665894][  T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  127.744809][  T310] usb 5-1: new full-speed USB device number 4 using dummy_hcd
[  127.897510][  T310] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  127.906657][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  127.914679][  T310] usb 5-1: Product: syz
[  127.918904][  T310] usb 5-1: Manufacturer: syz
[  127.923542][  T310] usb 5-1: SerialNumber: syz
[  127.954869][  T476] usb 3-1: new high-speed USB device number 70 using dummy_hcd
[  127.975980][  T476] usb 3-1: device descriptor read/8, error -71
[  127.982527][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  127.993605][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  128.105982][  T476] usb 3-1: device descriptor read/8, error -71
[  128.181746][ T1948] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=548 sclass=netlink_route_socket pid=1948 comm=syz.3.507
[  128.183631][ T1950] rust_binder: Failure when writing BR_NOOP at beginning of buffer.
[  128.194441][ T1950] rust_binder: Read failure Err(EFAULT) in pid:362
[  128.206397][   T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  128.224096][   T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -32
[  128.344878][  T476] usb 3-1: new high-speed USB device number 71 using dummy_hcd
[  128.353608][  T310] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 4 if 0 alt 0 proto 1 vid 0x04B8 pid 0x0202
[  128.366012][  T476] usb 3-1: device descriptor read/8, error -71
[  128.496197][  T476] usb 3-1: device descriptor read/8, error -71
[  128.604943][  T476] usb usb3-port1: unable to enumerate USB device
[  128.705505][   T36] audit: type=1400 audit(7122858325.437:350): avc:  denied  { create } for  pid=1943 comm="syz.4.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1
[  128.957961][ T1959] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  128.966668][ T1959] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  129.240315][   T36] audit: type=1400 audit(7122858325.967:351): avc:  denied  { bind } for  pid=1974 comm="syz.2.512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  129.624886][  T310] usb 3-1: new high-speed USB device number 72 using dummy_hcd
[  129.684811][  T476] usb 4-1: new high-speed USB device number 59 using dummy_hcd
[  129.754868][  T310] usb 3-1: device descriptor read/64, error -71
[  129.835947][  T476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  129.846999][  T476] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  129.857579][  T476] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  129.866740][  T476] usb 4-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0
[  129.874992][  T476] usb 4-1: Manufacturer: syz
[  129.880973][  T476] usb 4-1: config 0 descriptor??
[  130.004823][  T310] usb 3-1: device descriptor read/64, error -71
[  130.139635][   T31] usb 2-1: USB disconnect, device number 66
[  130.171611][   T36] audit: type=1400 audit(7122858326.897:352): avc:  denied  { read } for  pid=1987 comm="syz.1.516" name="msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  130.194244][   T36] audit: type=1400 audit(7122858326.897:353): avc:  denied  { open } for  pid=1987 comm="syz.1.516" path="/dev/cpu/0/msr" dev="devtmpfs" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1
[  130.244817][  T310] usb 3-1: new high-speed USB device number 73 using dummy_hcd
[  130.265118][    C0] usblp0: nonzero write bulk status received: -71
[  130.271998][    T9] usb 5-1: USB disconnect, device number 4
[  130.280012][ T1943] usblp0: removed
[  130.303344][   T36] audit: type=1400 audit(7122858327.027:354): avc:  denied  { create } for  pid=1996 comm="syz.1.519" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  130.325164][ T1997] syz.1.519 uses obsolete (PF_INET,SOCK_PACKET)
[  130.374901][  T310] usb 3-1: device descriptor read/64, error -71
[  130.446423][   T36] audit: type=1400 audit(7122858327.177:355): avc:  denied  { unlink } for  pid=296 comm="syz-executor" name="file0" dev="tmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1
[  130.524558][ T1999] netlink: 520 bytes leftover after parsing attributes in process `syz.1.520'.
[  130.624869][  T310] usb 3-1: device descriptor read/64, error -71
[  130.734954][  T310] usb usb3-port1: attempt power cycle
[  130.794825][  T793] usb 2-1: new full-speed USB device number 67 using dummy_hcd
[  130.956136][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  130.967264][  T793] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  130.977069][  T793] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  130.989932][  T793] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  130.999028][  T793] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  131.008081][  T793] usb 2-1: config 0 descriptor??
[  131.064806][   T31] usb 5-1: new high-speed USB device number 5 using dummy_hcd
[  131.094318][  T476] uclogic 0003:256C:006D.0017: v1 frame probing failed: -71
[  131.101880][  T310] usb 3-1: new high-speed USB device number 74 using dummy_hcd
[  131.109564][  T476] uclogic 0003:256C:006D.0017: failed probing parameters: -71
[  131.117199][  T476] uclogic 0003:256C:006D.0017: probe with driver uclogic failed with error -71
[  131.127482][  T476] usb 4-1: USB disconnect, device number 59
[  131.146133][  T310] usb 3-1: device descriptor read/8, error -71
[  131.214912][   T31] usb 5-1: Using ep0 maxpacket: 32
[  131.221072][   T31] usb 5-1: config 0 has an invalid interface number: 67 but max is 0
[  131.229308][   T31] usb 5-1: config 0 has no interface number 0
[  131.237088][   T31] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[  131.246280][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  131.254397][   T31] usb 5-1: Product: syz
[  131.258669][   T31] usb 5-1: Manufacturer: syz
[  131.263410][   T31] usb 5-1: SerialNumber: syz
[  131.268899][   T31] usb 5-1: config 0 descriptor??
[  131.274937][   T31] smsc95xx v2.0.0
[  131.276920][  T310] usb 3-1: device descriptor read/8, error -71
[  131.416247][  T793] microsoft 0003:045E:07DA.0018: ignoring exceeding usage max
[  131.425946][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.433216][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.440526][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.447843][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.455144][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.462588][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.469983][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.477424][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.485523][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.493102][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.500481][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.507796][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.515075][  T793] microsoft 0003:045E:07DA.0018: unknown main item tag 0x0
[  131.534847][  T310] usb 3-1: new high-speed USB device number 75 using dummy_hcd
[  131.555893][  T310] usb 3-1: device descriptor read/8, error -71
[  131.616162][ T2014] netlink: 104 bytes leftover after parsing attributes in process `syz.3.525'.
[  131.627300][  T793] microsoft 0003:045E:07DA.0018: No inputs registered, leaving
[  131.640037][  T793] microsoft 0003:045E:07DA.0018: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.1-1/input0
[  131.651907][  T793] microsoft 0003:045E:07DA.0018: no inputs found
[  131.658714][  T793] microsoft 0003:045E:07DA.0018: could not initialize ff, continuing anyway
[  131.686143][  T310] usb 3-1: device descriptor read/8, error -71
[  131.686236][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[  131.703213][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[  131.807011][  T310] usb usb3-port1: unable to enumerate USB device
[  131.830537][  T421] usb 2-1: USB disconnect, device number 67
[  131.913266][   T31] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[  131.924187][   T31] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -32
[  131.932447][  T793] usb 4-1: new full-speed USB device number 60 using dummy_hcd
[  132.085929][  T793] usb 4-1: config 16 has an invalid interface number: 19 but max is 0
[  132.094232][  T793] usb 4-1: config 16 has no interface number 0
[  132.100595][  T793] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10
[  132.111843][  T793] usb 4-1: config 16 interface 19 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  132.123416][  T793] usb 4-1: New USB device found, idVendor=0499, idProduct=cdf4, bcdDevice=78.ee
[  132.132705][  T793] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  132.140950][  T793] usb 4-1: Product: syz
[  132.145503][  T793] usb 4-1: Manufacturer: syz
[  132.150502][  T793] usb 4-1: SerialNumber: syz
[  132.362338][  T793] usb 4-1: USB disconnect, device number 60
[  132.371726][  T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:16.19/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  132.684843][   T31] usb 3-1: new high-speed USB device number 76 using dummy_hcd
[  132.834823][   T31] usb 3-1: Using ep0 maxpacket: 8
[  132.841152][   T31] usb 3-1: config 179 has an invalid interface number: 65 but max is 0
[  132.849536][   T31] usb 3-1: config 179 has no interface number 0
[  132.855859][   T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7
[  132.867066][   T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024
[  132.878360][   T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  132.890562][   T31] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024
[  132.902154][   T31] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[  132.916406][   T31] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  132.925767][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  132.935213][ T2021] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22
[  133.148717][  T793] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:179.65/input/input26
[  133.184914][    T9] usb 2-1: new high-speed USB device number 68 using dummy_hcd
[  133.324934][   T31] usb 4-1: new high-speed USB device number 61 using dummy_hcd
[  133.336214][    T9] usb 2-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  133.347968][    T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  133.359343][    T9] usb 2-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  133.371119][    T9] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[  133.380454][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  133.390163][ T2029] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22
[  133.474813][   T31] usb 4-1: Using ep0 maxpacket: 16
[  133.481265][   T31] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  133.490546][   T31] usb 4-1: config 1 has no interface number 1
[  133.496792][   T31] usb 4-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  133.507601][   T31] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0
[  133.520725][   T31] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  133.533241][   T31] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  133.542421][   T31] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  133.550784][   T31] usb 4-1: Product: syz
[  133.555123][   T31] usb 4-1: Manufacturer: syz
[  133.559819][   T31] usb 4-1: SerialNumber: syz
[  133.565812][  T310] usb 3-1: USB disconnect, device number 76
[  133.565834][    C1] xpad 3-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19
[  133.580195][    C1] xpad 3-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[  133.588606][  T310] xpad 3-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[  133.838398][  T421] usb 5-1: USB disconnect, device number 5
[  133.858778][ T2041] loop2: detected capacity change from 0 to 7
[  133.865312][ T2041] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.873396][ T2041] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.881747][ T2041]  loop2: unable to read partition table
[  133.887795][ T2041] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  133.895990][  T380] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.902098][   T31] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor
[  133.910806][  T380] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.920690][   T31] usb 4-1: 2:1 : format type 0 is detected, processed as PCM
[  133.931755][   T31] usb 4-1: USB disconnect, device number 61
[  133.947758][ T2041] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.955884][  T380] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.964311][ T2041] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.972844][  T380] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.980892][ T2041]  loop2: unable to read partition table
[  133.981354][  T380] Buffer I/O error on dev loop2, logical block 0, async page read
[  133.987068][ T2041] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[  134.004975][  T359] Buffer I/O error on dev loop2, logical block 0, async page read
[  134.111644][ T2046] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem
[  134.132454][   T36] audit: type=1400 audit(7122858330.857:356): avc:  denied  { write } for  pid=2047 comm="syz.2.536" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1
[  134.274830][  T793] usb 5-1: new high-speed USB device number 6 using dummy_hcd
[  134.374842][   T31] usb 3-1: new high-speed USB device number 77 using dummy_hcd
[  134.424800][  T793] usb 5-1: Using ep0 maxpacket: 16
[  134.431445][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  134.442733][  T793] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.452882][  T793] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  134.465739][  T793] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[  134.475011][  T793] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.483802][  T793] usb 5-1: config 0 descriptor??
[  134.504826][   T31] usb 3-1: device descriptor read/64, error -71
[  134.644876][  T421] usb 4-1: new full-speed USB device number 62 using dummy_hcd
[  134.690635][ T2044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  134.699330][ T2044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  134.744864][   T31] usb 3-1: device descriptor read/64, error -71
[  134.805947][  T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10
[  134.817108][  T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  134.827089][  T421] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[  134.836361][  T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  134.845462][  T421] usb 4-1: config 0 descriptor??
[  134.909931][   T36] audit: type=1400 audit(7122858331.637:357): avc:  denied  { ioctl } for  pid=2043 comm="syz.4.534" path="socket:[14539]" dev="sockfs" ino=14539 ioctlcmd=0x7202 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  134.936408][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.943803][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.951211][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.958513][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.965997][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.973243][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.980533][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.987812][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  134.995102][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.002362][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.009674][   T31] usb 3-1: new high-speed USB device number 78 using dummy_hcd
[  135.017497][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.024850][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.032229][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.039641][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.047725][  T793] microsoft 0003:045E:07DA.0019: unknown main item tag 0x0
[  135.057610][  T793] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0019/input/input28
[  135.074888][  T793] microsoft 0003:045E:07DA.0019: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0
[  135.150177][  T310] usb 5-1: USB disconnect, device number 6
[  135.184823][   T31] usb 3-1: device descriptor read/64, error -71
[  135.257125][  T421] hid-generic 0003:04F3:0755.001A: unknown main item tag 0x0
[  135.264814][  T421] hid-generic 0003:04F3:0755.001A: unknown main item tag 0x0
[  135.272674][  T421] hid-generic 0003:04F3:0755.001A: failed to start in urb: -90
[  135.281050][  T421] hid-generic 0003:04F3:0755.001A: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[  135.424854][   T31] usb 3-1: device descriptor read/64, error -71
[  135.460669][  T421] usb 4-1: USB disconnect, device number 62
[  135.535001][   T31] usb usb3-port1: attempt power cycle
[  135.874860][   T31] usb 3-1: new high-speed USB device number 79 using dummy_hcd
[  135.895934][   T31] usb 3-1: device descriptor read/8, error -71
[  135.975173][  T310] usb 5-1: new full-speed USB device number 7 using dummy_hcd
[  135.982760][   T36] audit: type=1400 audit(7122858332.707:358): avc:  denied  { ioctl } for  pid=2058 comm="syz.3.540" path="socket:[14586]" dev="sockfs" ino=14586 ioctlcmd=0x5867 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.035995][   T31] usb 3-1: device descriptor read/8, error -71
[  136.156067][  T310] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  136.168055][  T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10
[  136.179408][  T310] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64
[  136.193355][  T310] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9
[  136.202515][  T310] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  136.210818][  T310] usb 5-1: Product: syz
[  136.215057][  T310] usb 5-1: Manufacturer: syz
[  136.219683][  T310] usb 5-1: SerialNumber: syz
[  136.224821][  T421] usb 4-1: new high-speed USB device number 63 using dummy_hcd
[  136.226210][  T310] usb 5-1: config 0 descriptor??
[  136.237793][ T2057] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  136.246589][  T310] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input29
[  136.284913][   T31] usb 3-1: new high-speed USB device number 80 using dummy_hcd
[  136.306052][   T31] usb 3-1: device descriptor read/8, error -71
[  136.384878][  T421] usb 4-1: Using ep0 maxpacket: 32
[  136.391537][  T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  136.402607][  T421] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  136.412694][  T421] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  136.425669][  T421] usb 4-1: New USB device found, idVendor=0458, idProduct=5011, bcdDevice= 0.00
[  136.434816][  T421] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  136.443620][  T421] usb 4-1: config 0 descriptor??
[  136.451496][   T36] audit: type=1400 audit(7122858333.177:359): avc:  denied  { write } for  pid=2056 comm="syz.4.539" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  136.452388][   T31] usb 3-1: device descriptor read/8, error -71
[  136.474535][  T310] usb 5-1: USB disconnect, device number 7
[  136.559375][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.568264][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.583796][ T2049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  136.588758][   T31] usb usb3-port1: unable to enumerate USB device
[  136.594736][ T2049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  136.739328][    T9] aiptek 2-1:17.0: Aiptek using 400 ms programming speed
[  136.747872][    T9] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:17.0/input/input27
[  136.761037][    T9] usb 2-1: USB disconnect, device number 68
[  136.767071][    C0] aiptek 2-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[  136.882056][ T2059] sit0: entered promiscuous mode
[  136.888830][ T2059] netlink: 'syz.3.540': attribute type 1 has an invalid length.
[  136.896705][ T2059] netlink: 9 bytes leftover after parsing attributes in process `syz.3.540'.
[  136.907514][  T421] usbhid 4-1:0.0: can't add hid device: -71
[  136.913600][  T421] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  136.922485][  T421] usb 4-1: USB disconnect, device number 63
[  137.225323][    T9] usb 5-1: new low-speed USB device number 8 using dummy_hcd
[  137.376014][    T9] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  137.387013][    T9] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  137.400216][    T9] usb 5-1: config 0 interface 0 has no altsetting 0
[  137.407485][    T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  137.422140][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  137.432159][    T9] usb 5-1: config 0 descriptor??
[  137.439552][   T36] audit: type=1400 audit(7122858334.167:360): avc:  denied  { setopt } for  pid=2080 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[  137.442874][ T2063] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  137.523151][   T36] audit: type=1400 audit(7122858334.247:361): avc:  denied  { read } for  pid=2091 comm="syz.2.552" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  137.544919][  T421] usb 2-1: new high-speed USB device number 69 using dummy_hcd
[  137.669487][    T9] usbhid 5-1:0.0: can't add hid device: -71
[  137.675672][    T9] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  137.684371][    T9] usb 5-1: USB disconnect, device number 8
[  137.697032][ T2083] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  137.706190][ T2083] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  137.718424][  T421] usb 2-1: unable to get BOS descriptor or descriptor too short
[  137.725185][  T310] usb 4-1: new high-speed USB device number 64 using dummy_hcd
[  137.734478][  T421] usb 2-1: unable to read config index 0 descriptor/start: -71
[  137.742168][  T421] usb 2-1: can't read configurations, error -71
[  137.864872][  T425] usb 3-1: new high-speed USB device number 81 using dummy_hcd
[  137.874963][  T310] usb 4-1: Using ep0 maxpacket: 16
[  137.881429][  T310] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  137.891807][  T310] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  137.902139][  T310] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  137.911252][  T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  137.919307][  T310] usb 4-1: Product: syz
[  137.923513][  T310] usb 4-1: Manufacturer: syz
[  137.928175][  T310] usb 4-1: SerialNumber: syz
[  138.014829][  T425] usb 3-1: Using ep0 maxpacket: 16
[  138.021244][  T425] usb 3-1: config 1 has an invalid interface number: 105 but max is 0
[  138.029529][  T425] usb 3-1: config 1 has no interface number 0
[  138.035726][  T425] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  138.045705][  T425] usb 3-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  138.055751][  T425] usb 3-1: config 1 interface 105 has no altsetting 0
[  138.064087][  T425] usb 3-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  138.073230][  T425] usb 3-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  138.081415][  T425] usb 3-1: Product: syz
[  138.085652][  T425] usb 3-1: Manufacturer: syz
[  138.090321][  T425] usb 3-1: SerialNumber: syz
[  138.096141][ T2095] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  138.103570][ T2095] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  138.136724][  T310] usb 4-1: 0:2 : does not exist
[  138.143894][  T310] usb 4-1: 5:0: failed to get current value for ch 0 (-22)
[  138.155415][  T310] usb 4-1: USB disconnect, device number 64
[  138.167750][  T359] udevd[359]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  138.264754][   T36] audit: type=1400 audit(7122858334.987:362): avc:  denied  { bind } for  pid=2104 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  138.284113][   T36] audit: type=1400 audit(7122858334.987:363): avc:  denied  { listen } for  pid=2104 comm="syz.1.557" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  138.332607][   T36] audit: type=1400 audit(7122858335.057:364): avc:  denied  { map } for  pid=2111 comm="syz.4.560" path="socket:[14707]" dev="sockfs" ino=14707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  138.359372][   T36] audit: type=1400 audit(7122858335.057:365): avc:  denied  { read accept } for  pid=2111 comm="syz.4.560" path="socket:[14707]" dev="sockfs" ino=14707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[  138.559643][ T2095] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  138.566904][ T2095] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  138.624830][  T476] usb 5-1: new low-speed USB device number 9 using dummy_hcd
[  138.700637][ T2127] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  138.775988][  T476] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  138.786940][  T476] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  138.799945][  T476] usb 5-1: config 0 interface 0 has no altsetting 0
[  138.806654][  T476] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  138.815812][  T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  138.825955][  T476] usb 5-1: config 0 descriptor??
[  138.831282][ T2115] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  139.042205][  T476] usbhid 5-1:0.0: can't add hid device: -71
[  139.048388][  T476] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  139.057365][  T476] usb 5-1: USB disconnect, device number 9
[  139.074807][  T421] usb 4-1: new high-speed USB device number 65 using dummy_hcd
[  139.226173][  T421] usb 4-1: Using ep0 maxpacket: 8
[  139.232818][  T421] usb 4-1: unable to get BOS descriptor or descriptor too short
[  139.241729][  T421] usb 4-1: config index 0 descriptor too short (expected 111, got 35)
[  139.250204][  T421] usb 4-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config
[  139.260369][  T421] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  139.270921][  T421] usb 4-1: New USB device found, idVendor=041e, idProduct=3040, bcdDevice= 0.40
[  139.280034][  T421] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  139.288085][  T421] usb 4-1: Product: syz
[  139.292278][  T421] usb 4-1: Manufacturer: syz
[  139.296934][  T421] usb 4-1: SerialNumber: syz
[  139.347228][ T2134] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  139.354518][ T2134] rust_binder: Write failure EINVAL in pid:376
[  139.372412][ T2136] rust_binder: BC_CLEAR_FREEZE_NOTIFICATION invalid ref 0
[  139.385912][ T2136] rust_binder: Write failure EINVAL in pid:378
[  139.403400][ T2138] FAULT_INJECTION: forcing a failure.
[  139.403400][ T2138] name failslab, interval 1, probability 0, space 0, times 0
[  139.422367][ T2138] CPU: 0 UID: 0 PID: 2138 Comm: syz.1.570 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  139.422406][ T2138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  139.422422][ T2138] Call Trace:
[  139.422435][ T2138]  <TASK>
[  139.422442][ T2138]  __dump_stack+0x21/0x30
[  139.422497][ T2138]  dump_stack_lvl+0x140/0x1c0
[  139.422530][ T2138]  ? __cfi_dump_stack_lvl+0x10/0x10
[  139.422564][ T2138]  dump_stack+0x19/0x20
[  139.422593][ T2138]  should_fail_ex+0x3d7/0x530
[  139.422610][ T2138]  should_failslab+0xac/0x100
[  139.422652][ T2138]  __kmalloc_node_track_caller_noprof+0x68/0x4f0
[  139.422677][ T2138]  ? __kasan_check_write+0x18/0x20
[  139.422699][ T2138]  ? _raw_spin_lock+0x92/0x120
[  139.422722][ T2138]  ? _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x4a8/0x1c70
[  139.422749][ T2138]  ? __cfi__raw_spin_lock+0x10/0x10
[  139.422780][ T2138]  krealloc_noprof+0x8d/0x130
[  139.422808][ T2138]  _RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x4a8/0x1c70
[  139.422845][ T2138]  ? __cfi__RNvMs4_NtCs2tVsXcF29le_11rust_binder7processNtB5_7Process18get_current_thread+0x10/0x10
[  139.422894][ T2138]  _RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x3e3/0x5c20
[  139.422934][ T2138]  ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10
[  139.422981][ T2138]  ? is_bpf_text_address+0x17b/0x1a0
[  139.423017][ T2138]  ? kernel_text_address+0xa9/0xe0
[  139.423041][ T2138]  ? __kernel_text_address+0x11/0x40
[  139.423063][ T2138]  ? unwind_get_return_address+0x51/0x90
[  139.423108][ T2138]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  139.423135][ T2138]  ? arch_stack_walk+0x10a/0x170
[  139.423166][ T2138]  ? is_bpf_text_address+0x17b/0x1a0
[  139.423190][ T2138]  ? kernel_text_address+0xa9/0xe0
[  139.423212][ T2138]  ? __kernel_text_address+0x11/0x40
[  139.423267][ T2138]  ? unwind_get_return_address+0x51/0x90
[  139.423296][ T2138]  ? __cfi_stack_trace_consume_entry+0x10/0x10
[  139.423326][ T2138]  ? arch_stack_walk+0x10a/0x170
[  139.423344][ T2138]  ? stack_depot_save_flags+0x38/0x800
[  139.423361][ T2138]  ? stack_trace_save+0xaa/0x100
[  139.423398][ T2138]  ? kasan_save_track+0x4f/0x80
[  139.423425][ T2138]  ? kasan_save_track+0x3e/0x80
[  139.423448][ T2138]  ? kasan_save_alloc_info+0x40/0x50
[  139.423482][ T2138]  ? __kasan_slab_alloc+0x73/0x90
[  139.423502][ T2138]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  139.423519][ T2138]  ? security_inode_alloc+0x51/0x230
[  139.423557][ T2138]  ? inode_init_always_gfp+0x756/0x9e0
[  139.423586][ T2138]  ? alloc_inode+0xc5/0x270
[  139.423612][ T2138]  ? new_inode+0x25/0x1e0
[  139.423638][ T2138]  ? proc_pid_make_inode+0x25/0x140
[  139.423663][ T2138]  ? proc_pident_instantiate+0x6d/0x2c0
[  139.423682][ T2138]  ? proc_pident_lookup+0x1c7/0x270
[  139.423723][ T2138]  ? proc_tid_base_lookup+0x2f/0x40
[  139.423755][ T2138]  ? path_openat+0x1315/0x34f0
[  139.423786][ T2138]  ? do_filp_open+0x1f5/0x440
[  139.423807][ T2138]  ? do_sys_openat2+0x134/0x1d0
[  139.423829][ T2138]  ? __x64_sys_openat+0x13a/0x170
[  139.423873][ T2138]  ? x64_sys_call+0xe69/0x2ee0
[  139.423894][ T2138]  ? do_syscall_64+0x57/0xf0
[  139.423922][ T2138]  ? entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  139.423951][ T2138]  ? avc_has_perm_noaudit+0x26c/0x360
[  139.423970][ T2138]  ? __asan_memcpy+0x5a/0x80
[  139.423987][ T2138]  ? avc_has_perm_noaudit+0x28a/0x360
[  139.424029][ T2138]  ? avc_has_perm+0x155/0x240
[  139.424054][ T2138]  ? __cfi_avc_has_perm+0x10/0x10
[  139.424077][ T2138]  ? kasan_save_alloc_info+0x40/0x50
[  139.424137][ T2138]  ? selinux_file_open+0x46c/0x630
[  139.424175][ T2138]  ? __cfi_selinux_file_open+0x10/0x10
[  139.424200][ T2138]  ? avc_has_extended_perms+0x80b/0xe70
[  139.424225][ T2138]  ? __asan_memcpy+0x5a/0x80
[  139.424249][ T2138]  ? avc_has_extended_perms+0x969/0xe70
[  139.424269][ T2138]  ? __asan_set_shadow_00+0x12/0x20
[  139.424306][ T2138]  ? do_vfs_ioctl+0x182d/0x2010
[  139.424334][ T2138]  ? arch_stack_walk+0x10a/0x170
[  139.424357][ T2138]  ? __ia32_compat_sys_ioctl+0x920/0x920
[  139.424401][ T2138]  ? _parse_integer+0x2e/0x40
[  139.424430][ T2138]  ? ioctl_has_perm+0x39a/0x500
[  139.424474][ T2138]  ? has_cap_mac_admin+0xd0/0xd0
[  139.424498][ T2138]  ? proc_fail_nth_write+0x184/0x220
[  139.424528][ T2138]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  139.424562][ T2138]  ? selinux_file_ioctl+0x732/0x1480
[  139.424587][ T2138]  ? vfs_write+0x9a4/0xf90
[  139.424627][ T2138]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  139.424675][ T2138]  ? __cfi_vfs_write+0x10/0x10
[  139.424705][ T2138]  ? __kasan_check_write+0x18/0x20
[  139.424727][ T2138]  ? mutex_unlock+0x90/0x240
[  139.424755][ T2138]  ? __cfi_mutex_unlock+0x10/0x10
[  139.424784][ T2138]  ? __fget_files+0x2c5/0x340
[  139.424812][ T2138]  ? __fget_files+0x2c5/0x340
[  139.424839][ T2138]  ? bpf_lsm_file_ioctl+0xd/0x20
[  139.424872][ T2138]  ? security_file_ioctl+0x3e/0x110
[  139.424910][ T2138]  ? __cfi__RNvCs2tVsXcF29le_11rust_binder17rust_binder_ioctl+0x10/0x10
[  139.424962][ T2138]  __se_sys_ioctl+0x132/0x1b0
[  139.424990][ T2138]  __x64_sys_ioctl+0x7f/0xa0
[  139.425020][ T2138]  x64_sys_call+0x1878/0x2ee0
[  139.425036][ T2138]  do_syscall_64+0x57/0xf0
[  139.425053][ T2138]  ? clear_bhb_loop+0x50/0xa0
[  139.425087][ T2138]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  139.425115][ T2138] RIP: 0033:0x7f327919ce59
[  139.425135][ T2138] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  139.425155][ T2138] RSP: 002b:00007f327a0bd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  139.425180][ T2138] RAX: ffffffffffffffda RBX: 00007f3279415fa0 RCX: 00007f327919ce59
[  139.425193][ T2138] RDX: 0000200000000640 RSI: 00000000c0306201 RDI: 0000000000000003
[  139.425205][ T2138] RBP: 00007f327a0bd090 R08: 0000000000000000 R09: 0000000000000000
[  139.425216][ T2138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  139.425241][ T2138] R13: 00007f3279416038 R14: 00007f3279415fa0 R15: 00007ffd187d7aa8
[  139.425262][ T2138]  </TASK>
[  139.521492][  T421] usb 4-1: 0:1 : does not exist
[  140.004864][  T310] usb 2-1: new high-speed USB device number 71 using dummy_hcd
[  140.007164][  T421] usb 4-1: 0:2 : does not exist
[  140.030483][  T421] usb 4-1: USB disconnect, device number 65
[  140.044417][  T638] udevd[638]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  140.114828][    T9] usb 5-1: new high-speed USB device number 10 using dummy_hcd
[  140.157055][  T310] usb 2-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d
[  140.166232][  T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  140.174378][  T310] usb 2-1: Product: syz
[  140.178914][  T310] usb 2-1: Manufacturer: syz
[  140.183577][  T310] usb 2-1: SerialNumber: syz
[  140.195722][  T310] r8152-cfgselector 2-1: Unknown version 0x0000
[  140.202106][  T310] r8152-cfgselector 2-1: config 0 descriptor??
[  140.244864][    T9] usb 5-1: device descriptor read/64, error -71
[  140.281075][ T2153] netlink: 'syz.3.576': attribute type 63 has an invalid length.
[  140.289012][ T2153] netlink: 5 bytes leftover after parsing attributes in process `syz.3.576'.
[  140.297943][ T2153] gretap0: entered allmulticast mode
[  140.303509][ T2153] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[  140.415857][  T310] r8152-cfgselector 2-1: Unknown version 0x0000
[  140.426047][  T310] r8152-cfgselector 2-1: bad CDC descriptors
[  140.442792][  T310] r8152-cfgselector 2-1: USB disconnect, device number 71
[  140.522538][  T425] aqc111 3-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: -71
[  140.535102][    T9] usb 5-1: device descriptor read/64, error -71
[  140.542370][  T425] aqc111 3-1:1.105: probe with driver aqc111 failed with error -71
[  140.558025][  T425] usb 3-1: USB disconnect, device number 81
[  140.594802][  T476] usb 4-1: new high-speed USB device number 66 using dummy_hcd
[  140.646804][ T2163] FAULT_INJECTION: forcing a failure.
[  140.646804][ T2163] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  140.660320][ T2163] CPU: 0 UID: 0 PID: 2163 Comm: syz.2.580 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  140.660357][ T2163] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  140.660373][ T2163] Call Trace:
[  140.660381][ T2163]  <TASK>
[  140.660390][ T2163]  __dump_stack+0x21/0x30
[  140.660429][ T2163]  dump_stack_lvl+0x140/0x1c0
[  140.660463][ T2163]  ? __cfi_dump_stack_lvl+0x10/0x10
[  140.660497][ T2163]  ? vsnprintf+0x7b4/0x1ad0
[  140.660520][ T2163]  ? check_stack_object+0x106/0x150
[  140.660547][ T2163]  dump_stack+0x19/0x20
[  140.660579][ T2163]  should_fail_ex+0x3d7/0x530
[  140.660603][ T2163]  should_fail+0xf/0x20
[  140.660624][ T2163]  should_fail_usercopy+0x1e/0x30
[  140.660648][ T2163]  _copy_from_user+0x20/0xa0
[  140.660677][ T2163]  kstrtouint_from_user+0xde/0x170
[  140.660700][ T2163]  ? __cfi_kstrtouint_from_user+0x10/0x10
[  140.660722][ T2163]  ? selinux_file_permission+0x318/0xb60
[  140.660761][ T2163]  ? __cfi_selinux_file_permission+0x10/0x10
[  140.660799][ T2163]  proc_fail_nth_write+0x8f/0x220
[  140.660833][ T2163]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  140.660866][ T2163]  ? bpf_lsm_file_permission+0xd/0x20
[  140.660898][ T2163]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  140.660932][ T2163]  vfs_write+0x3c8/0xf90
[  140.660957][ T2163]  ? __cfi_vfs_write+0x10/0x10
[  140.660980][ T2163]  ? __kasan_check_write+0x18/0x20
[  140.661003][ T2163]  ? mutex_lock+0x97/0x1d0
[  140.661033][ T2163]  ? __cfi_mutex_lock+0x10/0x10
[  140.661063][ T2163]  ? __fget_files+0x2c5/0x340
[  140.661093][ T2163]  ksys_write+0x145/0x260
[  140.661117][ T2163]  ? __cfi_ksys_write+0x10/0x10
[  140.661141][ T2163]  ? fdget+0x188/0x1e0
[  140.661169][ T2163]  ? __kasan_check_read+0x15/0x20
[  140.661193][ T2163]  __x64_sys_write+0x7f/0x90
[  140.661217][ T2163]  x64_sys_call+0x271c/0x2ee0
[  140.661240][ T2163]  do_syscall_64+0x57/0xf0
[  140.661265][ T2163]  ? clear_bhb_loop+0x50/0xa0
[  140.661294][ T2163]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  140.661333][ T2163] RIP: 0033:0x7f583015d68e
[  140.661353][ T2163] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  140.661373][ T2163] RSP: 002b:00007f583106afe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  140.661399][ T2163] RAX: ffffffffffffffda RBX: 00007f583106b6c0 RCX: 00007f583015d68e
[  140.661417][ T2163] RDX: 0000000000000001 RSI: 00007f583106b0a0 RDI: 0000000000000003
[  140.661433][ T2163] RBP: 00007f583106b090 R08: 0000000000000000 R09: 0000000000000000
[  140.661448][ T2163] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  140.661463][ T2163] R13: 00007f5830416038 R14: 00007f5830415fa0 R15: 00007ffc6e9dbc78
[  140.661483][ T2163]  </TASK>
[  140.994861][    T9] usb 5-1: new high-speed USB device number 11 using dummy_hcd
[  141.014812][  T476] usb 4-1: Using ep0 maxpacket: 8
[  141.031392][  T476] usb 4-1: New USB device found, idVendor=fc08, idProduct=0101, bcdDevice= 0.40
[  141.040906][  T476] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  141.049110][  T476] usb 4-1: Product: syz
[  141.053714][  T476] usb 4-1: Manufacturer: syz
[  141.058402][  T476] usb 4-1: SerialNumber: syz
[  141.134805][    T9] usb 5-1: device descriptor read/64, error -71
[  141.267823][  T476] usb 4-1: MIDIStreaming interface descriptor not found
[  141.280031][  T476] usb 4-1: USB disconnect, device number 66
[  141.298674][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  141.373335][ T2175] netlink: 72 bytes leftover after parsing attributes in process `syz.1.585'.
[  141.382344][    T9] usb 5-1: device descriptor read/64, error -71
[  141.390024][ T2175] netlink: 580 bytes leftover after parsing attributes in process `syz.1.585'.
[  141.494949][    T9] usb usb5-port1: attempt power cycle
[  141.834814][  T476] usb 3-1: new full-speed USB device number 82 using dummy_hcd
[  141.842498][    T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd
[  141.865905][    T9] usb 5-1: device descriptor read/8, error -71
[  141.996107][  T476] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0
[  142.006304][    T9] usb 5-1: device descriptor read/8, error -71
[  142.012519][  T476] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7
[  142.022173][  T476] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.134845][  T793] usb 4-1: new high-speed USB device number 67 using dummy_hcd
[  142.222813][ T2185] 9pnet_fd: Insufficient options for proto=fd
[  142.235672][ T2181] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  142.245485][ T2181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  142.261819][    T9] usb 5-1: new high-speed USB device number 13 using dummy_hcd
[  142.284793][  T793] usb 4-1: Using ep0 maxpacket: 16
[  142.293145][  T793] usb 4-1: config 1 has an invalid interface number: 105 but max is 0
[  142.296429][    T9] usb 5-1: device descriptor read/8, error -71
[  142.305621][  T793] usb 4-1: config 1 has no interface number 0
[  142.314349][  T793] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[  142.326809][  T793] usb 4-1: config 1 interface 105 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  142.345062][  T793] usb 4-1: config 1 interface 105 has no altsetting 0
[  142.354689][  T793] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d
[  142.363919][  T793] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3
[  142.372186][  T793] usb 4-1: Product: syz
[  142.376478][  T793] usb 4-1: Manufacturer: syz
[  142.381119][  T793] usb 4-1: SerialNumber: syz
[  142.396620][ T2183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  142.405584][ T2183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  142.435817][    T9] usb 5-1: device descriptor read/8, error -71
[  142.487235][  T476] usb 3-1: string descriptor 0 read error: -71
[  142.497438][  T476] hub 3-1:32.0: bad descriptor, ignoring hub
[  142.503690][  T476] hub 3-1:32.0: probe with driver hub failed with error -5
[  142.514786][   T46] usb 2-1: new low-speed USB device number 72 using dummy_hcd
[  142.545196][  T476] usb 3-1: USB disconnect, device number 82
[  142.551986][    T9] usb usb5-port1: unable to enumerate USB device
[  142.685840][   T46] usb 2-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  142.696862][   T46] usb 2-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  142.710054][   T46] usb 2-1: config 0 interface 0 has no altsetting 0
[  142.716863][   T46] usb 2-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  142.726373][   T46] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  142.735816][   T46] usb 2-1: config 0 descriptor??
[  142.741236][ T2188] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22
[  142.816385][ T2183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  142.823868][ T2183] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[  142.950542][   T46] usbhid 2-1:0.0: can't add hid device: -71
[  142.957527][   T46] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  142.966576][   T46] usb 2-1: USB disconnect, device number 72
[  143.232171][  T793] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32
[  143.244796][  T476] usb 5-1: new low-speed USB device number 14 using dummy_hcd
[  143.354815][   T31] usb 3-1: new high-speed USB device number 83 using dummy_hcd
[  143.396095][  T476] usb 5-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  143.407164][  T476] usb 5-1: config 0 interface 0 altsetting 6 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  143.420042][  T476] usb 5-1: config 0 interface 0 has no altsetting 0
[  143.426739][  T476] usb 5-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  143.435929][  T476] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  143.444383][  T793] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -71
[  143.445368][  T476] usb 5-1: config 0 descriptor??
[  143.461875][  T793] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 36:2a:fa:eb:38:81
[  143.481731][ T2198] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[  143.490254][  T793] usb 4-1: USB disconnect, device number 67
[  143.509271][  T793] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter
[  143.520495][   T31] usb 3-1: Using ep0 maxpacket: 32
[  143.527445][   T31] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  143.543520][   T31] usb 3-1: New USB device found, idVendor=0582, idProduct=000c, bcdDevice= 0.40
[  143.554766][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  143.569855][   T31] usb 3-1: Product: syz
[  143.579767][   T31] usb 3-1: Manufacturer: syz
[  143.589879][   T31] usb 3-1: SerialNumber: syz
[  143.595141][  T793] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  143.604572][  T793] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19
[  143.629936][  T793] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19
[  143.698320][   T36] kauditd_printk_skb: 5 callbacks suppressed
[  143.698358][   T36] audit: type=1400 audit(7122858340.427:371): avc:  denied  { write } for  pid=2203 comm="syz.1.594" path="socket:[14307]" dev="sockfs" ino=14307 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  143.702529][  T476] usbhid 5-1:0.0: can't add hid device: -71
[  143.735726][  T476] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  143.748265][  T476] usb 5-1: USB disconnect, device number 14
[  143.821872][   T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM
[  143.839545][   T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4
[  143.848241][   T31] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -2
[  143.864424][   T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM
[  143.875653][   T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4
[  143.894309][   T31] snd-usb-audio 3-1:1.1: probe with driver snd-usb-audio failed with error -2
[  143.910992][   T31] usb 3-1: 1:1 : format type 0 is detected, processed as PCM
[  143.921979][   T31] usb 3-1: 1:1 : sample bitwidth 177 in over sample bytes 4
[  143.945247][   T31] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -2
[  143.961981][   T31] usb 3-1: USB disconnect, device number 83
[  143.998526][  T380] udevd[380]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  144.056529][ T2235] syzkaller1: entered promiscuous mode
[  144.062092][ T2235] syzkaller1: entered allmulticast mode
[  144.071029][ T2235] incfs: ino conflict with backing FS 3
[  144.314906][  T430] usb 4-1: new high-speed USB device number 68 using dummy_hcd
[  144.474837][  T430] usb 4-1: Using ep0 maxpacket: 8
[  144.481789][  T430] usb 4-1: config index 0 descriptor too short (expected 48420, got 36)
[  144.490804][  T430] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  144.501492][  T430] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 9
[  144.511080][  T430] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb
[  144.520488][  T430] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  144.532332][  T430] usb 4-1: config 0 descriptor??
[  144.574290][   T36] audit: type=1400 audit(7122858341.297:372): avc:  denied  { ioctl } for  pid=2264 comm="syz.4.607" path="socket:[15175]" dev="sockfs" ino=15175 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  144.604951][   T31] usb 3-1: new low-speed USB device number 84 using dummy_hcd
[  144.710055][  T870] ------------[ cut here ]------------
[  144.715778][  T870] WARNING: CPU: 1 PID: 870 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x34f/0x410
[  144.726432][  T870] Modules linked in:
[  144.730378][  T870] CPU: 1 UID: 0 PID: 870 Comm: kworker/u8:53 Not tainted syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  144.742275][  T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  144.752614][  T870] Workqueue: iou_exit io_ring_exit_work
[  144.758266][  T870] RIP: 0010:ublk_uring_cmd_cancel_fn+0x34f/0x410
[  144.759260][  T425] usb 4-1: USB disconnect, device number 68
[  144.764658][  T870] Code: 5d e9 85 1f 55 02 cc e8 8f 43 32 fe 0f 0b eb e3 e8 86 43 32 fe 0f 0b eb da e8 7d 43 32 fe 0f 0b e9 4d fe ff ff e8 71 43 32 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0c fd ff ff 4c 89
[  144.764684][  T870] RSP: 0018:ffffc9000ec3f990 EFLAGS: 00010293
[  144.764711][  T870] RAX: ffffffff835584bf RBX: 1ffff110215ebb1d RCX: ffff8881153b9300
[  144.764774][  T870] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000004
[  144.764791][  T870] RBP: ffffc9000ec3f9e0 R08: 0000000000000003 R09: 0000000000000004
[  144.821538][  T870] R10: 0000000000000000 R11: ffffffff835574a0 R12: ffff888116244c00
[  144.829976][  T870] R13: ffff88810af5d8c0 R14: ffff88810dbcbb00 R15: ffff88810dbcbb10
[  144.838169][  T870] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  144.847190][  T870] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  144.853951][  T870] CR2: 00007f28e29bcff8 CR3: 00000000074aa000 CR4: 00000000003526b0
[  144.862011][  T870] Call Trace:
[  144.865380][  T870]  <TASK>
[  144.868338][  T870]  ? _raw_spin_unlock+0x45/0x60
[  144.873222][  T870]  ublk_ch_uring_cmd+0x6f/0xa0
[  144.878062][  T870]  io_uring_try_cancel_uring_cmd+0x19e/0x280
[  144.884098][  T870]  io_uring_try_cancel_requests+0x4ce/0x5a5
[  144.890177][  T870]  ? io_uring_cancel_generic+0x6eb/0x6eb
[  144.895956][  T870]  io_ring_exit_work+0x23c/0x83b
[  144.900912][  T870]  ? __cfi_io_ring_exit_work+0x10/0x10
[  144.906509][  T870]  ? wake_up_process+0x14/0x20
[  144.911312][  T870]  process_scheduled_works+0x7d4/0x1020
[  144.917112][  T870]  worker_thread+0xc51/0x1370
[  144.921837][  T870]  kthread+0x2c9/0x370
[  144.926257][  T870]  ? __cfi_worker_thread+0x10/0x10
[  144.931478][  T870]  ? __cfi_kthread+0x10/0x10
[  144.936136][  T870]  ret_from_fork+0x67/0xa0
[  144.940582][  T870]  ? __cfi_kthread+0x10/0x10
[  144.945345][  T870]  ret_from_fork_asm+0x1a/0x30
[  144.950144][  T870]  </TASK>
[  144.953199][  T870] ---[ end trace 0000000000000000 ]---
[  144.976569][   T31] usb 3-1: config 0 interface 0 altsetting 18 endpoint 0x81 has invalid maxpacket 1024, setting to 8
[  144.987772][   T31] usb 3-1: config 0 interface 0 altsetting 18 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  145.002296][   T31] usb 3-1: config 0 interface 0 has no altsetting 0
[  145.009143][   T31] usb 3-1: New USB device found, idVendor=05ac, idProduct=0225, bcdDevice= 0.00
[  145.019083][   T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  145.034901][   T31] usb 3-1: config 0 descriptor??
[  145.040316][ T2256] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  145.513771][  T295] ------------[ cut here ]------------
[  145.519357][  T295] WARNING: CPU: 1 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190
[  145.528842][  T295] Modules linked in:
[  145.532802][  T295] CPU: 1 UID: 0 PID: 295 Comm: syz-executor Tainted: G        W          syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  145.546024][  T295] Tainted: [W]=WARN
[  145.549929][  T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  145.560064][  T295] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  145.565778][  T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 4a 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 a4 3e ff <0f> 0b e9 3e ff ff ff e8 ea a4 3e ff 0f 0b e9 6e ff ff ff 44 89 f9
[  145.585471][  T295] RSP: 0018:ffffc9000b65fb48 EFLAGS: 00010293
[  145.591624][  T295] RAX: ffffffff8249233a RBX: 0000000000000000 RCX: ffff88811fa75f00
[  145.599800][  T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  145.607893][  T295] RBP: ffffc9000b65fb70 R08: ffff88812f055dbf R09: 1ffff11025e0abb7
[  145.615958][  T295] R10: dffffc0000000000 R11: ffffed1025e0abb8 R12: 0000000000000000
[  145.624069][  T295] R13: dffffc0000000000 R14: ffff88812f055d20 R15: ffff88812f174000
[  145.632150][  T295] FS:  00005555744c0500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  145.641170][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  145.647970][  T295] CR2: 00007ffe104a3e60 CR3: 0000000124c10000 CR4: 00000000003526b0
[  145.656019][  T295] Call Trace:
[  145.659357][  T295]  <TASK>
[  145.662338][  T295]  ovl_do_remove+0x81b/0xda0
[  145.667111][  T295]  ? ovl_set_redirect+0x780/0x780
[  145.672238][  T295]  ? down_write+0xee/0x2b0
[  145.676787][  T295]  ? __cfi_down_write+0x10/0x10
[  145.681905][  T295]  ovl_rmdir+0x1e/0x30
[  145.686341][  T295]  vfs_rmdir+0x3e0/0x560
[  145.690688][  T295]  incfs_kill_sb+0x109/0x230
[  145.695460][  T295]  deactivate_locked_super+0xd8/0x2a0
[  145.700958][  T295]  deactivate_super+0xb8/0xe0
[  145.705758][  T295]  cleanup_mnt+0x406/0x4a0
[  145.710252][  T295]  __cleanup_mnt+0x1d/0x40
[  145.714787][  T295]  task_work_run+0x1e5/0x260
[  145.719481][  T295]  ? __cfi_task_work_run+0x10/0x10
[  145.724662][  T295]  ? __x64_sys_umount+0x12e/0x180
[  145.729777][  T295]  ? __cfi___x64_sys_umount+0x10/0x10
[  145.735261][  T295]  ? __kasan_check_read+0x15/0x20
[  145.740442][  T295]  resume_user_mode_work+0x35/0x50
[  145.745736][  T295]  syscall_exit_to_user_mode+0x63/0xb0
[  145.751268][  T295]  do_syscall_64+0x63/0xf0
[  145.756080][  T295]  ? clear_bhb_loop+0x50/0xa0
[  145.760895][  T295]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  145.767013][  T295] RIP: 0033:0x7fd256f9e097
[  145.771771][  T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  145.792128][  T295] RSP: 002b:00007ffe104a44b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  145.800646][  T295] RAX: 0000000000000000 RBX: 00007fd2570321ca RCX: 00007fd256f9e097
[  145.808803][  T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe104a4570
[  145.816958][  T295] RBP: 00007ffe104a4570 R08: 00007ffe104a5570 R09: 00000000ffffffff
[  145.825533][  T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe104a5600
[  145.833675][  T295] R13: 00007fd2570321ca R14: 0000000000023657 R15: 00007ffe104a5640
[  145.841756][  T295]  </TASK>
[  145.844872][  T295] ---[ end trace 0000000000000000 ]---
[  145.855882][  T295] ------------[ cut here ]------------
[  145.861439][  T295] WARNING: CPU: 0 PID: 295 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190
[  145.865831][   T31] usbhid 3-1:0.0: can't add hid device: -71
[  145.871496][  T295] Modules linked in:
[  145.877974][   T31] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[  145.881571][  T295] CPU: 0 UID: 0 PID: 295 Comm: syz-executor Tainted: G        W          syzkaller #0 455e6e6e4058e005312aabb3f62c8d3b97c06770
[  145.902572][  T295] Tainted: [W]=WARN
[  145.906435][  T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[  145.915334][   T31] usb 3-1: USB disconnect, device number 84
[  145.916597][  T295] RIP: 0010:ovl_dir_modified+0x15a/0x190
[  145.928130][  T295] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ee 4a 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 f6 a4 3e ff <0f> 0b e9 3e ff ff ff e8 ea a4 3e ff 0f 0b e9 6e ff ff ff 44 89 f9
[  145.947822][  T295] RSP: 0018:ffffc9000b65fb48 EFLAGS: 00010293
[  145.953924][  T295] RAX: ffffffff8249233a RBX: 0000000000000000 RCX: ffff88811fa75f00
[  145.962046][  T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[  145.970094][  T295] RBP: ffffc9000b65fb70 R08: ffff88812f055dbf R09: 1ffff11025e0abb7
[  145.978300][  T295] R10: dffffc0000000000 R11: ffffed1025e0abb8 R12: 0000000000000000
[  145.986331][  T295] R13: dffffc0000000000 R14: ffff88812f055d20 R15: ffff88812f174000
[  145.994891][  T295] FS:  00005555744c0500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[  146.003859][  T295] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  146.010550][  T295] CR2: 00007f58303ea2f8 CR3: 0000000124c10000 CR4: 00000000003526b0
[  146.018605][  T295] Call Trace:
[  146.021925][  T295]  <TASK>
[  146.024912][  T295]  ovl_do_remove+0x81b/0xda0
[  146.029560][  T295]  ? ovl_set_redirect+0x780/0x780
[  146.034638][  T295]  ? down_write+0xee/0x2b0
[  146.039156][  T295]  ? __cfi_down_write+0x10/0x10
[  146.044077][  T295]  ovl_rmdir+0x1e/0x30
[  146.048247][  T295]  vfs_rmdir+0x3e0/0x560
[  146.052549][  T295]  incfs_kill_sb+0x1a0/0x230
[  146.057356][  T295]  deactivate_locked_super+0xd8/0x2a0
[  146.062905][  T295]  deactivate_super+0xb8/0xe0
[  146.067743][  T295]  cleanup_mnt+0x406/0x4a0
[  146.072500][  T295]  __cleanup_mnt+0x1d/0x40
[  146.077015][  T295]  task_work_run+0x1e5/0x260
[  146.081832][  T295]  ? __cfi_task_work_run+0x10/0x10
[  146.087087][  T295]  ? __x64_sys_umount+0x12e/0x180
[  146.092161][  T295]  ? __cfi___x64_sys_umount+0x10/0x10
[  146.097729][  T295]  ? __kasan_check_read+0x15/0x20
[  146.102810][  T295]  resume_user_mode_work+0x35/0x50
[  146.108107][  T295]  syscall_exit_to_user_mode+0x63/0xb0
[  146.113731][  T295]  do_syscall_64+0x63/0xf0
[  146.118252][  T295]  ? clear_bhb_loop+0x50/0xa0
[  146.122992][  T295]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  146.129081][  T295] RIP: 0033:0x7fd256f9e097
[  146.133555][  T295] Code: a2 c7 05 5c 06 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[  146.153950][  T295] RSP: 002b:00007ffe104a44b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[  146.162498][  T295] RAX: 0000000000000000 RBX: 00007fd2570321ca RCX: 00007fd256f9e097
[  146.170555][  T295] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe104a4570
[  146.178731][  T295] RBP: 00007ffe104a4570 R08: 00007ffe104a5570 R09: 00000000ffffffff
[  146.186931][  T295] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe104a5600
[  146.195336][  T295] R13: 00007fd2570321ca R14: 0000000000023657 R15: 00007ffe104a5640
[  146.204182][  T295]  </TASK>
[  146.207298][  T295] ---[ end trace 0000000000000000 ]---