last executing test programs: 1.510990902s ago: executing program 1 (id=2): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) socket$inet_tcp(0x2, 0x1, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002ec0), 0x28a80, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = socket$key(0xf, 0x3, 0x2) getsockopt$sock_buf(r2, 0x1, 0x1c, 0x0, &(0x7f0000001ec0)) ioctl$USBDEVFS_RELEASE_PORT(r0, 0x80045519, &(0x7f00000002c0)=0xd24e) 1.496869492s ago: executing program 0 (id=1): socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.443582974s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_X86_DISABLE_EXITS(r1, 0x4068aea3, &(0x7f00000000c0)={0x8f, 0x0, 0x1e}) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r2 = socket$inet(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @empty}, 0x10) socket$inet6_icmp(0xa, 0x2, 0x3a) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/icmp\x00') preadv(r3, &(0x7f0000000380)=[{&(0x7f0000000640)=""/152, 0x98}, {&(0x7f0000000040)=""/32, 0x20}, {&(0x7f0000000100)=""/89, 0x59}, {&(0x7f0000000180)=""/144, 0x90}, {&(0x7f0000000240)=""/45, 0x2d}, {&(0x7f0000000280)=""/160, 0xa0}], 0x6, 0x4018, 0x7) 1.417155984s ago: executing program 3 (id=4): r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x8, 0x28bd, 0x935, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0xb, "", [{{0x9, 0x4, 0x0, 0x1f, 0x3, 0x3, 0x0, 0x4, 0x0, {0x9, 0x21, 0x163, 0x3, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x8, 0x8, 0xfe}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r3, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r3, 0x3) ppoll(&(0x7f0000000080)=[{r3, 0x210}], 0x1, &(0x7f0000000100), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x32, 0x0, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x2c, r4, 0x401, 0x70bd25, 0x25dfdbff, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000080) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x8) close_range(r1, 0xffffffffffffffff, 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000180)={0x40, 0x9, 0x28, {0x28, 0x23, "679bcf7f933a52a46f25896d07cce6006b1f4577455192fa53cd94ccbd5a5a0f9ad0c08abc63"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 1.322849277s ago: executing program 1 (id=5): r0 = syz_open_dev$loop(&(0x7f00000005c0), 0xffff, 0x109041) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000000400)={r1, 0x1000, {0x2a00, 0x80010000, 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d09000000000000008dd4992861ac1000", "90be6c09306003d8006000", [0x0, 0x2]}}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r2) r3 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_connect$uac1(0x1, 0x72, &(0x7f0000000240)={{0x12, 0x1, 0x10, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x62, 0x20, 0x2, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0x2d, 0x2, 0x3, {0x7, 0x25, 0x1, 0xc, 0xa1, 0x9}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x7, 0x6, 0x2, {0x7, 0x25, 0x1, 0x8, 0x5, 0xe}}}}}}}}]}}, 0x0) syz_usb_ep_write(r2, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 1.310992757s ago: executing program 2 (id=6): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000240)={0x73622a85, 0x0, 0x8000000000002}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) mount(&(0x7f0000000000)=@rnullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200000, 0x0) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x802, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x10000000000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x8, 0x0, &(0x7f00000005c0)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x1058, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000002200)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1}, @flat=@binder={0x73622a85, 0xa, 0x1}, @ptr={0x70742a85, 0x5, 0x0, 0x0, 0x1, 0x3a}}, &(0x7f0000000600)={0x0, 0x28, 0x40}}, 0x1000}], 0x0, 0x0, 0x0}) 1.258909808s ago: executing program 2 (id=7): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x188) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x48a801, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$incfs(&(0x7f0000000440)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0) r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$tcp_congestion(r0, &(0x7f00000002c0)='htcp\x00', 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) ftruncate(r2, 0x4) r3 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/rcu_normal', 0x22202, 0x0) write$cgroup_int(r3, &(0x7f0000000200)=0x1000009ee8, 0x12) sendfile(r1, r2, 0x0, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000480)="bf976995"}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xc2c02e4d8eb3a414, 0x4) syz_usb_connect(0x2, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002fbaa6f1003040cfc7a00010203010902000001c00680050904300002ff01620409050c02000a080c0409050d10ff07080aab"], &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0}) openat$incfs(r4, &(0x7f0000000280)='.log\x00', 0x200000, 0x134) 1.242137828s ago: executing program 0 (id=8): socket$can_raw(0x1d, 0x3, 0x1) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240)="235913100000004a3525c373b8be3e8d2672540e4fff5fe7", 0x0, 0x18}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = fsopen(&(0x7f0000000000)='tracefs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000240)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?o9\x85\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f\x00'/316, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000003c0)={[0x60000000004, 0x1000000000, 0x5, 0x41, 0x2000000, 0x0, 0x2004cc, 0x0, 0xa1b, 0x8, 0x5, 0x0, 0x3, 0x2], 0x10000, 0x202}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 1.123297991s ago: executing program 0 (id=9): getsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000380), &(0x7f00000003c0)=0x6) 1.058709203s ago: executing program 0 (id=10): r0 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac3(r0, 0x0, &(0x7f00000005c0)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="200604000000e971ec7b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) statx(0xffffffffffffffff, 0x0, 0x6000, 0x100, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000002240)={0x84, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x101901, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = socket$netlink(0x10, 0x3, 0x2) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000001700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000016c0)={&(0x7f0000000340)={0x14, 0x0, 0x100, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x40) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000100)={0x1, 0x0, [{0xc0011029, 0x0, 0x7d}]}) syz_usb_control_io$uac3(r0, &(0x7f0000000080)={0x14, &(0x7f0000000000)={0x0, 0x31, 0x5, {0x5, 0x2, "bdbe45"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}}, &(0x7f0000000380)={0x44, &(0x7f00000000c0)={0x0, 0x3, 0x56, "ab848ed7a13f5525beb674b160adab7e9d20d8b4ae7472c17942d0619c3a04e882d25a5f3ae634368799279f39d76a1d4ec338f8914d4921ee9eace908843bc427e587d14b193136496681e55a6c7029acbeda5524e0"}, &(0x7f0000000140)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000180)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000001c0)={0x20, 0x81, 0x3, "dd7143"}, &(0x7f0000000240)={0x20, 0x82, 0x3, "44549f"}, &(0x7f00000002c0)={0x20, 0x83, 0x1, "c9"}, &(0x7f0000000300)={0x20, 0x84, 0x2, "f8ff"}, &(0x7f0000000340)={0x20, 0x85, 0x3, "18d267"}}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) 0s ago: executing program 2 (id=11): mount(0x0, &(0x7f0000000140)='.\x00', 0x0, 0x189, 0x0) (async) syz_open_procfs(0x0, &(0x7f0000000100)='map_files\x00') (async) r0 = socket$unix(0x1, 0x2, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f000000c940)={0x0, 0x0, &(0x7f000000c900)={&(0x7f000000c880)={0x18, 0x1, 0x1, 0x5, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8000}, 0x20008040) (async) bind$unix(r0, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e20}, 0x6e) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) bind$unix(r2, &(0x7f0000003000)=@abs={0x1, 0x0, 0x4e21}, 0x1c) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@abs={0x1, 0x0, 0x4e20}, 0x6e) syz_usb_connect(0x2, 0x68, &(0x7f0000000600)=ANY=[@ANYBLOB="12010000a1121710950b2a17f4f7010203010902240001000000000904"], 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.35' (ED25519) to the list of known hosts. [ 22.312932][ T36] audit: type=1400 audit(1786226434.400:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.316668][ T286] cgroup: Unknown subsys name 'net' [ 22.335734][ T36] audit: type=1400 audit(1786226434.400:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.362972][ T36] audit: type=1400 audit(1786226434.430:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.363539][ T286] cgroup: Unknown subsys name 'devices' [ 22.506576][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.512265][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.608045][ T36] audit: type=1400 audit(1786226434.700:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.631260][ T36] audit: type=1400 audit(1786226434.700:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.656064][ T36] audit: type=1400 audit(1786226434.700:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.687120][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.696034][ T36] audit: type=1400 audit(1786226434.790:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.721514][ T36] audit: type=1400 audit(1786226434.790:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 22.799544][ T36] audit: type=1400 audit(1786226434.890:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.800959][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.825145][ T36] audit: type=1400 audit(1786226434.890:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.065815][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.073011][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.080220][ T293] bridge_slave_0: entered allmulticast mode [ 24.086586][ T293] bridge_slave_0: entered promiscuous mode [ 24.093182][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.100324][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.107478][ T293] bridge_slave_1: entered allmulticast mode [ 24.113855][ T293] bridge_slave_1: entered promiscuous mode [ 24.172640][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.179813][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.187262][ T296] bridge_slave_0: entered allmulticast mode [ 24.193537][ T296] bridge_slave_0: entered promiscuous mode [ 24.203067][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.210200][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.217441][ T296] bridge_slave_1: entered allmulticast mode [ 24.223738][ T296] bridge_slave_1: entered promiscuous mode [ 24.240794][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.248148][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.255293][ T295] bridge_slave_0: entered allmulticast mode [ 24.261570][ T295] bridge_slave_0: entered promiscuous mode [ 24.271234][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.278342][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.285553][ T295] bridge_slave_1: entered allmulticast mode [ 24.292107][ T295] bridge_slave_1: entered promiscuous mode [ 24.325007][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.332112][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.339456][ T294] bridge_slave_0: entered allmulticast mode [ 24.345954][ T294] bridge_slave_0: entered promiscuous mode [ 24.355364][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.362441][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.370121][ T294] bridge_slave_1: entered allmulticast mode [ 24.376605][ T294] bridge_slave_1: entered promiscuous mode [ 24.520380][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.527490][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.534851][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.541899][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.551780][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.558903][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.566228][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.573269][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.583107][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.590200][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.597530][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.604604][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.614529][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.621603][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.628931][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.636004][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.689478][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.696944][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.705260][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.712503][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.719820][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.727458][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.734928][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.742173][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.756686][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.763765][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.773243][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.780376][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.800655][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.807738][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.815633][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.822718][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.851565][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.858687][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.867928][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.875012][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.901448][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.908649][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.916997][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.924109][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.936885][ T296] veth0_vlan: entered promiscuous mode [ 24.958907][ T295] veth0_vlan: entered promiscuous mode [ 24.969706][ T293] veth0_vlan: entered promiscuous mode [ 24.993609][ T295] veth1_macvtap: entered promiscuous mode [ 25.003759][ T296] veth1_macvtap: entered promiscuous mode [ 25.011781][ T294] veth0_vlan: entered promiscuous mode [ 25.055614][ T296] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.069905][ T293] veth1_macvtap: entered promiscuous mode [ 25.079414][ T294] veth1_macvtap: entered promiscuous mode [ 25.126449][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.300236][ T329] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 25.308821][ T329] rust_binder: 328:329 got transaction to invalid handle 1 [ 25.316393][ T329] rust_binder: 328:329 transaction call to 0:0 failed ENOENT, code 0 size 104-24 [ 25.334260][ T10] rust_binder: 328: undelivered TRANSACTION_ERROR: 29201 [ 25.383986][ T331] incfs: ino conflict with backing FS 3 [ 25.487178][ T9] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 25.513087][ T312] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 25.644050][ T45] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 25.646307][ T9] usb 4-1: config 0 interface 0 altsetting 31 endpoint 0x81 has invalid maxpacket 512, setting to 8 [ 25.663115][ T9] usb 4-1: config 0 interface 0 altsetting 31 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 25.676089][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 25.682765][ T9] usb 4-1: New USB device found, idVendor=28bd, idProduct=0935, bcdDevice= 0.00 [ 25.686446][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.692698][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.703989][ T312] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 25.715794][ T9] usb 4-1: config 0 descriptor?? [ 25.721347][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.732672][ T323] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 25.741472][ T312] usb 2-1: config 0 descriptor?? [ 25.763991][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 25.794679][ T45] usb 3-1: not running at top speed; connect to a high speed hub [ 25.803439][ T45] usb 3-1: config 192 has 0 interfaces, different from the descriptor's value: 1 [ 25.816930][ T45] usb 3-1: New USB device found, idVendor=0403, idProduct=fc0c, bcdDevice= 0.7a [ 25.826140][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.834299][ T45] usb 3-1: Product: syz [ 25.838657][ T45] usb 3-1: Manufacturer: syz [ 25.843315][ T45] usb 3-1: SerialNumber: syz [ 25.849349][ T331] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 25.915567][ T10] usb 1-1: unable to get BOS descriptor or descriptor too short [ 25.924138][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 25.934594][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 25.946928][ T10] usb 1-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 25.951232][ T312] usbhid 2-1:0.0: can't add hid device: -71 [ 25.962419][ T312] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 25.963623][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.976020][ T312] usb 2-1: USB disconnect, device number 2 [ 25.988381][ T10] usb 1-1: Product: syz [ 25.992764][ T10] usb 1-1: Manufacturer: syz [ 25.997635][ T10] usb 1-1: SerialNumber: syz [ 26.005274][ T10] usb 1-1: selecting invalid altsetting 1 [ 26.011403][ T10] usb 1-1: unit 6 not found! [ 26.059799][ T45] usb 3-1: USB disconnect, device number 2 [ 26.150437][ T9] hid (null): unknown global tag 0xe [ 26.158943][ T9] input: HID 28bd:0935 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:28BD:0935.0001/input/input4 [ 26.177436][ T9] uclogic 0003:28BD:0935.0001: input,hidraw0: USB HID v1.63 Mouse [HID 28bd:0935] on usb-dummy_hcd.3-1/input0 [ 26.352942][ T9] usb 4-1: USB disconnect, device number 2 [ 26.423999][ T312] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 26.575240][ T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.586252][ T312] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 26.595687][ T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.605000][ T312] usb 2-1: config 0 descriptor?? [ 26.623036][ T294] ------------[ cut here ]------------ [ 26.628639][ T294] WARNING: CPU: 0 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 26.638072][ T294] Modules linked in: [ 26.642044][ T294] CPU: 0 UID: 0 PID: 294 Comm: syz-executor Not tainted syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 26.653783][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.663951][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 26.669725][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 26.689488][ T294] RSP: 0000:ffffc9000b6dfb88 EFLAGS: 00010293 [ 26.695717][ T294] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff8881027fcc00 [ 26.703727][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 26.711820][ T294] RBP: ffffc9000b6dfbb0 R08: ffff888110d9289f R09: 1ffff110221b2513 [ 26.719874][ T294] R10: dffffc0000000000 R11: ffffed10221b2514 R12: 0000000000000000 [ 26.727953][ T294] R13: dffffc0000000000 R14: ffff888110d92800 R15: ffff888111f9e220 [ 26.736000][ T294] FS: 0000555594049500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 26.745009][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.751631][ T294] CR2: 00007fd794f82f58 CR3: 0000000114bae000 CR4: 00000000003526b0 [ 26.759691][ T294] Call Trace: [ 26.763001][ T294] [ 26.766026][ T294] ovl_do_remove+0x824/0xd10 [ 26.770676][ T294] ? ovl_set_redirect+0x780/0x780 [ 26.775819][ T294] ? __cfi_down_write+0x10/0x10 [ 26.780711][ T294] ovl_rmdir+0x1e/0x30 [ 26.784866][ T294] vfs_rmdir+0x3de/0x560 [ 26.789159][ T294] incfs_kill_sb+0x102/0x220 [ 26.793791][ T294] deactivate_locked_super+0xd5/0x270 [ 26.799260][ T294] deactivate_super+0xb8/0xe0 [ 26.804009][ T294] cleanup_mnt+0x438/0x4d0 [ 26.808470][ T294] __cleanup_mnt+0x1d/0x40 [ 26.812926][ T294] task_work_run+0x1e8/0x260 [ 26.817600][ T294] ? __cfi_task_work_run+0x10/0x10 [ 26.822761][ T294] ? __x64_sys_umount+0x12e/0x180 [ 26.827858][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 26.833261][ T294] ? __kasan_check_read+0x15/0x20 [ 26.838356][ T294] resume_user_mode_work+0x35/0x50 [ 26.843534][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 26.849095][ T294] do_syscall_64+0x63/0xf0 [ 26.853552][ T294] ? clear_bhb_loop+0x50/0xa0 [ 26.858341][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.864310][ T294] RIP: 0033:0x7fb11859f317 [ 26.868763][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 26.888447][ T294] RSP: 002b:00007ffeb1dc1018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 26.896941][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb11859f317 [ 26.905011][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1dc10d0 [ 26.913037][ T294] RBP: 00007ffeb1dc10d0 R08: 00007ffeb1dc20d0 R09: 00000000ffffffff [ 26.921105][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1dc21c0 [ 26.929186][ T294] R13: 00007fb118634474 R14: 0000000000006690 R15: 00007ffeb1dc3290 [ 26.937270][ T294] [ 26.940324][ T294] ---[ end trace 0000000000000000 ]--- [ 26.947223][ T294] ------------[ cut here ]------------ [ 26.952739][ T294] WARNING: CPU: 1 PID: 294 at fs/overlayfs/util.c:605 ovl_dir_modified+0x15a/0x190 [ 26.962128][ T294] Modules linked in: [ 26.966093][ T294] CPU: 1 UID: 0 PID: 294 Comm: syz-executor Tainted: G W syzkaller #0 c4896d72d1fb51cdc6291d08376a37fd8080d7bb [ 26.979279][ T294] Tainted: [W]=WARN [ 26.983115][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.993308][ T294] RIP: 0010:ovl_dir_modified+0x15a/0x190 [ 26.999178][ T294] Code: c1 e8 03 42 80 3c 28 00 74 08 4c 89 f7 e8 ae 82 97 ff 49 ff 06 5b 41 5c 41 5d 41 5e 41 5f 5d e9 4c eb 5d 03 cc e8 26 be 3e ff <0f> 0b e9 3e ff ff ff e8 1a be 3e ff 0f 0b e9 6e ff ff ff 44 89 f9 [ 27.018888][ T294] RSP: 0000:ffffc9000b6dfb88 EFLAGS: 00010293 [ 27.025098][ T294] RAX: ffffffff8248b39a RBX: 0000000000000000 RCX: ffff8881027fcc00 [ 27.033120][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 27.041160][ T294] RBP: ffffc9000b6dfbb0 R08: ffff888110d9289f R09: 1ffff110221b2513 [ 27.049246][ T294] R10: dffffc0000000000 R11: ffffed10221b2514 R12: 0000000000000000 [ 27.057312][ T294] R13: dffffc0000000000 R14: ffff888110d92800 R15: ffff888111f9e220 [ 27.065360][ T294] FS: 0000555594049500(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 27.074375][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 27.081025][ T294] CR2: 000055a0fe78b7a8 CR3: 0000000114bae000 CR4: 00000000003526b0 [ 27.089100][ T294] Call Trace: [ 27.092415][ T294] [ 27.095462][ T294] ovl_do_remove+0x824/0xd10 [ 27.100106][ T294] ? ovl_set_redirect+0x780/0x780 [ 27.105228][ T294] ? __cfi_down_write+0x10/0x10 [ 27.110121][ T294] ovl_rmdir+0x1e/0x30 [ 27.114280][ T294] vfs_rmdir+0x3de/0x560 [ 27.118570][ T294] incfs_kill_sb+0x197/0x220 [ 27.123190][ T294] deactivate_locked_super+0xd5/0x270 [ 27.128658][ T294] deactivate_super+0xb8/0xe0 [ 27.133384][ T294] cleanup_mnt+0x438/0x4d0 [ 27.137903][ T294] __cleanup_mnt+0x1d/0x40 [ 27.142363][ T294] task_work_run+0x1e8/0x260 [ 27.147042][ T294] ? __cfi_task_work_run+0x10/0x10 [ 27.152191][ T294] ? __x64_sys_umount+0x12e/0x180 [ 27.157323][ T294] ? __cfi___x64_sys_umount+0x10/0x10 [ 27.162739][ T294] ? __kasan_check_read+0x15/0x20 [ 27.167862][ T294] resume_user_mode_work+0x35/0x50 [ 27.173021][ T294] syscall_exit_to_user_mode+0x63/0xb0 [ 27.178681][ T294] do_syscall_64+0x63/0xf0 [ 27.183147][ T294] ? clear_bhb_loop+0x50/0xa0 [ 27.187903][ T294] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.193851][ T294] RIP: 0033:0x7fb11859f317 [ 27.198323][ T294] Code: a2 c7 05 dc 43 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 27.218025][ T294] RSP: 002b:00007ffeb1dc1018 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 27.226501][ T294] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 00007fb11859f317 [ 27.230542][ T326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.234550][ T294] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffeb1dc10d0 [ 27.247448][ T326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.251054][ T294] RBP: 00007ffeb1dc10d0 R08: 00007ffeb1dc20d0 R09: 00000000ffffffff [ 27.266714][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffeb1dc21c0 [ 27.274767][ T294] R13: 00007fb118634474 R14: 0000000000006690 R15: 00007ffeb1dc3290 [ 27.282773][ T294] [ 27.285908][ T294] ---[ end trace 0000000000000000 ]--- [ 27.327469][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.337799][ T10] usb 1-1: USB disconnect, device number 2 [ 27.364383][ T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.543956][ T9] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 27.695040][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 27.706581][ T9] usb 3-1: New USB device found, idVendor=0b95, idProduct=172a, bcdDevice=f7.f4 [ 27.715817][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.723845][ T9] usb 3-1: Product: syz [ 27.728101][ T9] usb 3-1: Manufacturer: syz [ 27.732719][ T9] usb 3-1: SerialNumber: syz [ 27.738566][ T9] usb 3-1: config 0 descriptor?? [ 27.744624][ T9] asix 3-1:0.0: probe with driver asix failed with error -22 [ 27.954393][ T343] usb 3-1: USB disconnect, device number 3 [ 28.280491][ T312] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 28.291140][ T312] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input5 [ 28.303999][ T312] usb 2-1: USB disconnect, device number 3