last executing test programs: 5.699248907s ago: executing program 2 (id=3): r0 = syz_open_dev$usbfs(&(0x7f00000000c0), 0x5, 0x12bb01) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000101"], 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0xbc) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_IOEVENTFD(r2, 0x4040ae79, &(0x7f0000000100)={0x4, 0x2000, 0x0, 0xffffffffffffffff, 0xc}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r3, &(0x7f0000000040)={0x50, 0x0, r4, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) syz_fuse_handle_req(r3, &(0x7f000000a340)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d838aae8c05dd22d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f0000006e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x9, 0x0, 0x1, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x20c01, 0x0) ioctl$TUNSETLINK(r5, 0x400454cd, 0x120) mlockall(0x5) r6 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00') r7 = syz_usb_connect$cdc_ncm(0x0, 0xfe, &(0x7f0000000200)={{0x12, 0x1, 0x201, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xec, 0x2, 0x1, 0x1, 0x20, 0x5, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x8, 0x24, 0x6, 0x0, 0x1, "50f18d"}, {0x5, 0x24, 0x0, 0xad6}, {0xd, 0x24, 0xf, 0x1, 0x2, 0xb89, 0x4, 0xbd}, {0x6, 0x24, 0x1a, 0x9, 0x2}, [@mdlm={0x15, 0x24, 0x12, 0x6}, @mdlm_detail={0x73, 0x24, 0x13, 0x1f, "b7f2570fa8fc04d9febd392740cd5b39b7f94d0e77000d8857f502ac5dea5c95f83f073511bba3b39a3c430e3b06ffe02835e42e04691153af987cf26ffd5f29e76b30beb4fd541b7e6860a50a167f6d9007fc2d241e9152648e92b3ff304189822e9b325d245e0cb92284b10f0501"}, @obex={0x5, 0x24, 0x15, 0x9}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x5, 0x7, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x400, 0xdd, 0x4, 0x4}}, {{0x9, 0x5, 0x3, 0x2, 0x20, 0x5, 0xc, 0xff}}}}}}}]}}, &(0x7f0000004580)={0xa, &(0x7f0000000300)={0xa, 0x6, 0x250, 0x2, 0x0, 0x6, 0x8, 0x9}, 0x39, &(0x7f0000000340)={0x5, 0xf, 0x39, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x1, "3b6d7eaba4f0b873cb0932d3c6dddd50"}, @ssp_cap={0x20, 0x10, 0xa, 0x3, 0x5, 0x5, 0xf000, 0xf, [0x0, 0x3f0f, 0x30, 0xc000, 0x0]}]}, 0xa, [{0x4, &(0x7f0000000380)=@lang_id={0x4, 0x3, 0x415}}, {0xb9, &(0x7f00000003c0)=@string={0xb9, 0x3, "e571a1af686253c23429d0af7f0433a73f8d09779f63ffd6ae90a5a671f96bea8abed0745a7af5d4318f5212dbad8cc6fdac336da87517d9a44095734a172db8c46ff36ebb44afb7cb7e009bf5e5e8ef58b9ccb7394d7839176880cb56a46f4fcda06c1c7560c6ca42d110b385697a99aadc87596b2a4a0c24598786e1a61a930bf03fe66d1c9eb7ab2cf322a1ac49bb3351d6afee74be3265df85cd49ab81a2421ba99b462c0b9d7a518f790fc46e4d8e60cc57ba65f2"}}, {0xd5, &(0x7f0000000480)=@string={0xd5, 0x3, "b88f99bd5ee57f8d845ceef1acf646a29461f0086436fa0763e555a77a581d778639cd2c6783aeccc02a80923c843e28d14ed133b36d8f98e6ef04bfa006a2ff790e62fa4a610f77866887b8a7cf35b756c2f5ba83af6c46551534ffefa1fed7464d926c3f744095c06af772a8d3b269a364aa21acb8e5f8886da8896cd43e17a907dd59e9b059412bacafab299447f32faf8e2668bec3501ba39f72b320ddd2af3372d757edb7e2b3236a0b2c366c83fe34b74a79664c0dfd24728deae8d3247541171c7ac9ec650a88075da831826541a865"}}, {0x4, &(0x7f0000004200)=@lang_id={0x4, 0x3, 0x448}}, {0x4, &(0x7f0000004240)=@lang_id={0x4, 0x3, 0x40c}}, {0x4, &(0x7f0000004280)=@lang_id={0x4, 0x3, 0x403}}, {0xb4, &(0x7f00000042c0)=@string={0xb4, 0x3, "03a165fa4c87bcc45572429a8a711981621a765f23dd714874b599b900473fc0b3f7f49d711625aa0294ef5dbbd74a1827442642d9a4a777f2269aabff37a40deaee7b680963a802243b0f111074f2b9c71091c24661c2fd075658f8e70aef599b9ad3546eaf6490bf15ca824036c0273f606faac9d9e2035335a816de895e317e5eb3d26bb60c2453798b2b72b4f64f69222aabb6fd7181b373b57045a352bc09c2f017ba34a565d2b1b9a307daae83441b"}}, {0x4, &(0x7f0000004380)=@lang_id={0x4, 0x3, 0x500a}}, {0x8f, &(0x7f00000043c0)=@string={0x8f, 0x3, "500fc00cda5f73b97ef661a6dcf08d52b4661916e4f62f81172340babcdc12f4f8a0a1d43836c168781947bf7a3be6ff22cede1a26fc590e80a0e001e8c7f5b058d61e1c998c7a848ce38c3616f327819427a3d15d2bbadbb372869f244521c8e60ad93eb9ee7f90d625ee1f4259273a033499f11b480d631ee77e3a7f32887695784ee23a570db142e19150d4"}}, {0xd3, &(0x7f0000004480)=@string={0xd3, 0x3, "f4ba6bf6e49addef273bc88787f184ba92b2b70e636256bdcde3db138d80661c6734984f26f35439467f4b9df077a5643f9f1b3fb5c4bd5e9b75d028a6e796981e42c05938e2440879e60f299cdab35858d938a51b2a4daa3df381afaa84c186a3f911e254f0b2f5d75a3a47654bbf1c9e513cbdfbca83dce394f7f1e3198f020a926f7821b588ed7de603a5b337dae421a58e5779b79a788acc146c267f779f194c5aba31be2f1002851cfe92e4eedd7cb78f73682806bd2bca7549dcf7a53f7f3fdce0e9a81d24ff96ac13e8a35bf36c"}}]}) syz_usb_control_io(r7, &(0x7f0000004840)={0x2c, &(0x7f0000004640)={0x20, 0x31, 0x98, {0x98, 0xd, "8ac7eca302640fd6f366ce695220ae63dd8152966a7b8fafbce57331dceea1e7ef03a04286ac7883dd601b547cbf981a6e984a942977e4001ef9c98c0e2cac341929d9c17a9a3e2c4fc9263a6663a6f54c471a90c54f6c2a4d32dfd5603b89b74384db06960242edc34f419295cfc350ab48b44b4d6b22e83364abebc3cc4a92ffb5adec940b00f08906037ca8909253ac7c274420a5"}}, &(0x7f0000004700)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x407}}, &(0x7f0000004740)={0x0, 0xf, 0x53, {0x5, 0xf, 0x53, 0x4, [@ssp_cap={0x24, 0x10, 0xa, 0x8, 0x6, 0x7fffffc, 0x78f, 0x8, [0x3f00, 0xc000, 0x3f00, 0xff00, 0x3ff0, 0xff0000]}, @ssp_cap={0x20, 0x10, 0xa, 0x5, 0x5, 0x0, 0xf, 0x2, [0x7e30, 0x0, 0xc0, 0xf, 0xc0c0]}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x6}, @ptm_cap={0x3}]}}, &(0x7f00000047c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x7, 0x0, 0x5, 0x9, "80857703", "55c23d5a"}}, &(0x7f0000004800)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x5, 0x8, 0x52, 0x0, 0x9, 0x30, 0xa}}}, &(0x7f0000006d40)={0x84, &(0x7f0000004880)={0x20, 0xa, 0x1f, "147e0a6c1fe3dd29e179a0d1618ba0f0d9db7202930da06e9e2e40dbc80fc3"}, &(0x7f00000048c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000004900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000004940)={0x20, 0x0, 0x4, {0x0, 0x1}}, &(0x7f0000004980)={0x20, 0x0, 0x4, {0x10, 0x40}}, &(0x7f00000049c0)={0x40, 0x7, 0x2, 0x1}, &(0x7f0000004a00)={0x40, 0x9, 0x1, 0xcc}, &(0x7f0000004a40)={0x40, 0xb, 0x2, ' y'}, &(0x7f0000004a80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000004ac0)={0x40, 0x13, 0x6, @remote}, &(0x7f0000004b00)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}}, &(0x7f0000004b40)={0x40, 0x19, 0x2, 'gA'}, &(0x7f0000004b80)={0x40, 0x1a, 0x2, 0x7}, &(0x7f0000004bc0)={0x40, 0x1c, 0x1, 0x3}, &(0x7f0000004c00)={0x40, 0x1e, 0x1, 0x4}, &(0x7f0000004c40)={0x40, 0x21, 0x1, 0xc}}) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000002280)='devtmpfs\x00', 0xa145cf, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='mountinfo\x00') read$FUSE(r8, &(0x7f0000004d00)={0x2020}, 0x2020) read$FUSE(r6, &(0x7f0000000580)={0x2020}, 0x2020) ioctl$USBDEVFS_FREE_STREAMS(r0, 0xc0105500, &(0x7f0000000140)=ANY=[@ANYBLOB="a1"]) 5.698417747s ago: executing program 3 (id=5): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f000001ab40)={'ip6gre0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xffffffff, 0x18, @empty, @loopback, 0x700, 0x40, 0x65, 0xaa}}) syz_usb_connect(0x3, 0x24, &(0x7f0000000fc0)=ANY=[@ANYRES32=r0], 0x0) 4.663896672s ago: executing program 1 (id=10): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.kill\x00', 0x275a, 0x0) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x15) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f0000000340)={0x400000100002f}) write$uinput_user_dev(r1, &(0x7f0000000800)={'syz0\x00', {0x2, 0x10, 0x2, 0x4}, 0x48, [0x0, 0x0, 0x0, 0x40000, 0x1, 0x2, 0x4, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4000, 0x20, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x296, 0x1, 0x0, 0x0, 0x0, 0x2000, 0xfa, 0xfffffffc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, 0x5f1, 0x6], [0x0, 0x0, 0x8, 0x0, 0x0, 0x5, 0x0, 0x80, 0x8000, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x200, 0x7, 0xfffffffc, 0x0, 0x0, 0x7, 0x0, 0xfffffffc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x9, 0x0, 0x200, 0x0, 0x2, 0x0, 0x3, 0x5, 0xfffffffd, 0x4000000, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x80000, 0x0, 0xfffffffd, 0x0, 0x8, 0x0, 0x0, 0x2aa6, 0x0, 0x0, 0x0, 0xffff], [0x4, 0xfc, 0x0, 0x4, 0xfffffffe, 0x0, 0x0, 0x0, 0xb, 0x1, 0x4000000, 0x0, 0x1, 0x4, 0x1000, 0x80, 0x0, 0x200, 0x0, 0xffffffff, 0x0, 0xfffffffc, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x4, 0x0, 0x6, 0x1, 0x0, 0xbda6, 0xe, 0x0, 0x0, 0xfffffffd, 0xffffffff, 0x0, 0x20, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff, 0x6, 0x0, 0x0, 0x0, 0x0, 0x8], [0x40000000, 0x0, 0x74e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x6, 0x40, 0x0, 0x0, 0xbd, 0x0, 0xff, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x8, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x101, 0x80000020, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5cb9, 0xcaa, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4]}, 0x45c) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x3) ioctl$UI_DEV_CREATE(r1, 0x5501) io_setup(0xe4, &(0x7f0000000000)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)={0x24, 0x10, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x02\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x4, 0x1a}]}, 0x24}], 0x1}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="240000001e0021002bbd7000000000000700000005002a000000000008000f00"], 0x24}, 0x1, 0x0, 0x0, 0x2008800}, 0x0) io_setup(0x7, &(0x7f0000000140)) lseek(r0, 0x2, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) 4.552343406s ago: executing program 1 (id=11): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) recvmsg$inet_nvme(0xffffffffffffffff, 0x0, 0x494f3513d8250d4e) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80140, 0x0) fcntl$setlease(r2, 0x400, 0x1) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@metacopy_on}]}) munlockall() madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) munlockall() close(r0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x8) 4.532426487s ago: executing program 1 (id=12): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) fcntl$dupfd(r2, 0x0, r1) syz_usb_control_io$uac1(r0, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f00000001c0)="d3070faeb823c7660f880f0000003ff20f060f22d666b8000000000f23c00f21f86635020007000f23f80f01c8bad104b00cee66b9800000c00f326635001000000f30", 0x43}], 0x1, 0x10, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f0000000200)={[0x2, 0x9, 0xfffffffffffffffd, 0x2, 0x2, 0x0, 0x4002004c4, 0x1004, 0x8000000000000000, 0xc595, 0x0, 0x1, 0xffffffffffffffff, 0x2000000000000000, 0xb3, 0x8d], 0xeeee8000, 0x2010d3}) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x3, 0x7a, &(0x7f00000015c0)=ANY=[@ANYBLOB="1201500202000010250ca1a440000102030109b70ee977cedd1df3927a026800022fff44252501d480040904000001020d765b052406000105e5b6c30cdcc10d2b09000000010002000206241a950e000c241b03000f00cc09050000091f0103ff030380fe0900020d00000000000102020d0000090582000000"], &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) 2.64837605s ago: executing program 3 (id=16): memfd_secret(0x0) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9a, 0x60, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x40a, 0x8, 0xfe}, {0x6, 0x24, 0x1a, 0x9, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x5f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0xf3, 0xc3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x0, 0x9}}}}}}}]}}, 0xfffffffffffffffd) (async) syz_usb_connect$cdc_ncm(0x5, 0x6e, &(0x7f0000000100)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x9a, 0x60, 0xa, "", {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5, 0x24, 0x0, 0x9}, {0xd, 0x24, 0xf, 0x1, 0x80000001, 0x40a, 0x8, 0xfe}, {0x6, 0x24, 0x1a, 0x9, 0x20}}, {{0x9, 0x5, 0x81, 0x3, 0x400, 0x5, 0x5f, 0x6}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x3ff, 0xff, 0xf3, 0xc3}}, {{0x9, 0x5, 0x3, 0x2, 0x40, 0x81, 0x0, 0x9}}}}}}}]}}, 0xfffffffffffffffd) 2.529840684s ago: executing program 2 (id=17): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89101) r1 = openat$binfmt_register(0xffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$binfmt_register(r1, &(0x7f0000000480)={0x3a, 'syz0', 0x3a, 'M', 0x3a, 0x7, 0x3a, '#%\\h*@#Lw\x9e5\x9f6k\x886\xafm\xa0\b\x81\xdc\xd1\x8f\x93r2\x0eeu}\xf7\"\xbd&-~\xeahJ\xee\'X\x9a\xd4\xfeI6\xd9\x1b\xc8\x14.\xfa\xb8\x03\x16\x96\x11\xa8\x90{\xc5\xe2\xf1u\xd1\xca\x8a>\xc3\x84\xd3\xcf\xa7\x1f\xc1\xb5\x12\xd0\x1e\x98\xce+\x12\xaex{\x91\xc7bw\xcaC\xe1/\x19\xfei\xf0\xa2\x9c3\xee/\xcf\xdew \x1c\xc7=\xfb\xb8\x88\x132\xf9\xbf7K\x8d\x16\xa6\xbf4\v\xces\xa4\x13\xb1\x14\x89\xa0\x14P\x97\x81%)\xa1\x0e)2a2\xa2\xef\f\xef\x8a\x95\xdd\xac\xab\xff#T}`\x88r\xb3\xd8\x19\x06\xde\xb7\xf0GR.?i|\xafhs\x1d\xdc\x12\x85!\xaaqg\x10\xec\x1b\xcb\xfc6\xba\xde\x13\xdf\xc6Z+\r\xb4\x9a\xe8V1\x82\xce\xdd\xddx\xe7H\xa3N\x92\xdb\xaa\xdbe\xc1\x05P\b<\x1e\xd6\x92\x89\xaa\xbe\xda\\|\xcf\xaf$.\x10\x8d\x9aie\xd3W\x1e\xd2L\xfa\xcc\xfb\xc2\x90\x99\xa9\x9f\xcd\xfasX\x9d\xbb\x8f\x1a', 0x3a, '', 0x3a, './file0'}, 0x12f) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000001100)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d2407000005000000000000000c240000e9fffff5ffffffff092403f3ff000005024524", @ANYRES8=r0, @ANYBLOB="05"], 0x0) 2.484061976s ago: executing program 0 (id=18): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r0, 0x0, 0x0) (async) r1 = fsopen(&(0x7f0000000140)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\x00ul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_io_uring_complete(0x0, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x4, 0x1}, 0x6) (async) socket$vsock_stream(0x28, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) (async) r4 = socket$inet6(0xa, 0x6, 0xcd3) ioctl$sock_SIOCOUTQ(r4, 0x5411, 0x0) (async) r5 = syz_open_dev$loop(&(0x7f00000001c0), 0x1d, 0x480) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) (async) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB=',version=9']) (async) ioctl$BLKRRPART(r5, 0x125f, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8923, &(0x7f00000000c0)={'bond_slave_0\x00', @random="013105b310fe"}) 2.442981037s ago: executing program 0 (id=19): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x140) syz_usb_connect$hid(0x0, 0x3f, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8001, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x2000000b, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0x1002, 0x6, 0x7, 0xfffffffc, 0x5, 0x4, 0x0, 0x7, 0x3c1b, 0x2, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0x8000, 0x7, 0x7, 0x3, 0x1000008, 0x4c74, 0x80000000, 0x242, 0x6, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x40000004, 0x3, 0xa8000000, 0x80, 0x0, 0x5, 0x80, 0x8, 0x4, 0x1, 0x43], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2bf, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x5, 0x2e, 0x4, 0x4, 0x78, 0xea4, 0xfff, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x3, 0x9, 0x4, 0xd, 0xe1, 0x47, 0x7ffc, 0xffffffff, 0xfe000000, 0xfffe, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0xfffffff8, 0x3], [0x5, 0x9, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x8, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xe, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x3, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x2000005, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x8, 0x1, 0xa, 0x0, 0x9, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x8000009, 0xbb33, 0x7, 0x9, 0x5, 0x938, 0x6, 0x6, 0x12, 0xb9, 0xce7, 0x1ff, 0x2, 0xfffffffb, 0x5, 0x3, 0x101, 0xfffc, 0xa, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x5, 0x8000003, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x227, 0x5, 0x5, 0x8, 0x101, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0x1ff, 0xfffffffb]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000580)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c8008"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f00000002c0)={[{@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f00000000c0)='.\x02\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000640)='.\x00', 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000400)=0xe8) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f0000000140), 0x4820, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@cache_loose}, {@directio}], [{@permit_directio}, {@mask={'mask', 0x3d, '^MAY_READ'}}, {@obj_user={'obj_user', 0x3d, 'upperdir'}}, {@rootcontext={'rootcontext', 0x3d, 'user_u'}}, {@euid_lt={'euid<', r2}}]}}) mkdirat(r1, &(0x7f0000000280)='.\x02\x00', 0x102) 1.861837257s ago: executing program 0 (id=20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000240)=ANY=[], 0x310) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setresuid(0xee00, 0xee00, 0x0) faccessat2(0xffffffffffffff9c, 0x0, 0x0, 0x1000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r4, 0x0, 0x41, 0x0, &(0x7f0000000200)) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, &(0x7f0000000300)=@vmx={0x0, 0x0, 0x2080, {0x70000, 0x100000, {0x2}, 0x0, 0x9}, {"c03274ac57b7322edacc2ec9d2ef14f1fad842cf9250df5940a343dc81344bd124b68b7aeff9200ce0896a9f36fd231be081837aab804ad9405f8b9e475905a471c6d59e09963933c99900915f7b6ce890b4aa75be7f5ec23a5bf4966f688bb1957cdaf11fbc8ee3ea50bcfdc571b89cfe94ddcb861157a47784a090e638c6f9209c15e097df8a5ea611c892cdd442fe82c0391d0b51ef8497bc1b17fea437b14e5258690df4752a3c270556a7ba0ccf45023c578b7bfce31c95d184087cc0ad17f776839554d35c96b53c01efac601edd57d95cdc9eb2e291fd188c514731038efbd9277609ad7372b1dcb4301126a99329aa26663634c17a43dcdc17b40a8c7cf7f80a579ac86752a08db06936cc08e285f1e36706640f124cdbef36cfe1a61ec16bb130d0a91a53e61c795915b7b59f4f3fbf70b9f7c397bb3c3f36d7f5e7b9c15c79ca3fbff8a10b9e4067fdbf5589a430b70003ce4bcfe6a611e83e7abc18df424116922baa212024f222e2befdad10ec3ea2a4c35fbf86be236bd11b636dfee48b75054a9cd3920b687df7b00aec77d562c8123d81238f1c1b2ce2c2224bbc49c1f6ae1e1b63e8848a50234230ae0eeb46af438d70319f8bf158fe12f5f4ac5ba499d082e36ae0706029bf2f37ab55b6d5b76dedff1f6fd228705320fb01ce788f53b5931f447a260f06ea43db2cf874a5aba7ed540c16dbf9b37a44ed197522cca8b4fdc02d558a3c44417ff4c512f9469a5193240f9c266a4546ec247e1fbb2fca898650c160b2e2f41dff9137f4691f4dc5114f4d7ec75c727017a6e8cfa567f064daffd9bce73986903ce53e04b073cf054c3aaa557bf532fce37f87fe50886f3231a917feaf7901fc2f74955bafd592f6eb6b4e65fda5266db3e3b3398bdb38c3b0a4e82926f5218eecfce4f179900cc0df8afc5e3153c2839b21d0c116dff80146061b24217c9799ca52d6f631074154715977587ef3f2dbd5d8ad88000a033e2777c0ee9d5062119a118ad177e1b6f175fa680b705799f0b84fd4c1354eb441cb9410e802a0fcb351a2bc3beb84e043392bdb5f9225b43e9b922e8462819a20d22a7c126d82b3c04989ef56cdae47a5981956ffd993b904ee96ec3c958f9a6eae29da4c9e1617a564ca7b577b98ce7c6c184edaec042a26218e8d111be028fa3883002932f76e991aaad092f60b9d24255442b599feee901cb9dc360e070d976c9fdb3705e52bfe04c50579e2b88ed44243f5f3ede549e3a34e35000ce0a63b103f516bdf56bbde225333f3f8fc952f87486025695ccd1776a6be416b43cfcbb880969a9f995182d825c5017916e2c74d15edc23609ba1156e232193847996cff927a9c4aa0d6b1d882e999c7a3afc69de7fe7e1208217e7408106f5dede7008d488d7373ed4e49faa5c7a923fe60f2c3ef232d032f82bed59d5e05fde133ff5e9d135feae248f66f4aa119cb12c5279004c90703c580c6b53d354bfa667eca8802fac65f0352e83c9aeba3114dfc886dcd99ac740e6937a06698f4e7cf4e619cb09274e9f3ee6d024d8601b6c688164f449adc22e671b2863320f35e9fbf9ae553a9cdf2dd406d84e2cbd67da959a0bc7b3b01a24a2b172383e4c1a8ac42152404a4a8d6e2034874da429e1f59a5b78b5dbd19c751c6d2850a23d85ae9606f2e6005475fefec09fcb5aa6eb43a481c0662d6118fd195340160241689e849147164149c3c3706ea85eb3de1eeca3d85d74ef87741710d89958cbb7475ff66606b8610247434970e7a59fa89ff69adc68a8aa7bec63670ea6bcb66dd881c00a7f9de1344a99ac84c11ab938f0c3e36a458d6f69153dcbe1ece1cd2a224ce50ec9e51f2675765d61bd7400ead2db057f4c4f00e6a1df8f30b38105b21f1c68ec81c7eb59b4d71c1bbd95ca18378c812878d771024999e328a0030d2e98250e75a41cb57075fd6a6bb3b7689eda1a54458b43b528360abe22e04711f6166181807ca96c7d918b9f090e19fda60597629ae2d72de91ac000924d601eb5e7f4854dd3b8c86f01035eae07d559c19e3f70d86c371169e464d7f09c3d9ecb976c2d2b5bbe19adbf6bbd09afa07d906cf18bc8b5867570182851ba939baeb4ac195064ec429b9d7cefd5030ddc880b4700a2feea9cbab7a80414b0eb4389a65cdcf3566472024475817b8490f31cce0f46be34dbce6a1494d64ab1f2f44c4ccd7a6aa3537d2724132298e97a1b7b69a45d495eed39ccf057079e44b24e8af6c9b15b1e53c526482586b42edb1ffba7f2052b852b73facb9cacf30965937619e65abc77025a0d7fb07e294a1d4a14a9dfb4777785e0ad35acde09d5cf971c284542070cc5baf01b286b3941ec9f01531ae63a086d563433ce881f091f67993c12fa8d8c65fbfe7c8849b6d0b725d03a225075ea322d568a9d682e771149d48fbb8a392f3da6d3e087c86bb04ec8eaf6963cf628e30f7e33c2622d2f41edfc882b3112ee18ffc0f2ee486cd8f837c590ba4674c91ab8142802894d0d53a00a0da9dd17a5d4eaf120b696d4b48c35fa74fa016eb3bc91d32b419ee4cbaa9344856c93d8054b2d083dd81544f310a6d26b396152b82832f4ab4b23fb323245c2c2c99ac350074e4c0443907885fa41e71aed548dc3c6fe3112ab8c956aeb817dd439b20f9b131cb845653931c4142edc76edd9c4f20471b322ad7c50063bda7436e6c4c3415c951722bc0a3fc759c081fef35ab1435bd69191fab79bfcc2f251207f73d2bbd048aff90ada93dcaed98fd0b8a422f653d70e48066b6256d3c444685f20d619f6f7addc8807d3e23e89e8beaa0fdfb472e2cf09fb45eb5c0760bef15827bd72d25f8d1fbf517b2b493f83f22f8ddc05b546e8dbc2eedaaa3916fdad853f845881d327153b613754e2ad71983d2ab583dcf654d5959e9760e21af181d1172cba71d63f9296fe98846c1823a176f86c9d8bb0ad206629dfd88ebf6b8e7489c63efac3d0618b1026f90eba4119d37c89adecb205e418684153d973f843e7e0aaf235d932a6942711266df85f8d1ae7e6eb698d215d2baffb24c8606b99e1487d187f3b95c6454665da11b74418843013b08b29957e2a4a4ee205d4b74ba04e691508721ec718bee6670cce9a43259b08fe3fdb143c960dd4096024f3762b751b35506156beb62fb58fa0f86e242cd6a85c0aa42d4aaa81dd93794aa22df0a11c957f630df7753487c7eb08b3c9d782301ac906834b97de6a8a92d26ba6fcad1a3201b3b3611579bf91c01941200dfb29c685d86db48d69e858aeb73d2d226659e32ab0e6dcadf15ed629dd1197bec7401fb9f01a0204c41dea6258a04ed299d6759d4cb38b78c302d810445015c4f952e0f70eebe2fad82d8aa908b7faf6fb126e98ede2bc8aed1cdd99c3e8e24546a4678418f4743578e2bbb9a27dbc10f2fd320871bb097260a30bcbaacb950b43f0a55b63d6d0fa4078981fe47a0da347802afed73dd90ea2d03923ecefa4a03e0220034984ca53be19c1f88a92c3f535361c0ae8107975c7d1f8383cabe14ff0771fa71384043b0635e16a152f54e8f02804e121d6d944da492763fb49a578b1f4687c010508bf01315aca3c29233dba4e006378ff9e263bab196422b3244b1fa37e191ffbb9dc87d093561471a040d41520ce23b4e5cc514c16d28775e73cf22adcd5f9bae222895d5636e8ce69bf7c3a127f470fc9637fff5719f65acfdcaeaf8bcc7628866a437d4bef0df1d5455941d4b41e242744323d00282aa0f515ac7eef64edc3885b125e0ee88b45ca0971f1264dc3bb9b62de0d5ed3ed43f4b47d8078f2b5a21123423921cb3729402ec172eb693bc561f12149875250fe5d7a3cf57ced04cb56315006a9bd1c30d7954b2047f945e028f164d477ca4817bdbbdc20afa93c353c1970fc9a5893c69d39cd08e64b3cd9d94a90d047a8ae2db3850ca0b32e8690012393cc4f0c1b36e9e3d1c70cea9ad82db7a5784e19547f5ece36a87ddb87a595ac0a451b3e57a8ee996644f3ef6fcea1e98207719bb438ae86e9302fd4fb6e5f6799f4c56184a5668859979a4fd3f13026ba51386efaa2a5fbff96f3290292a7a7ddfa923975ad477cf6e0b13f7fe74df029e54d55302dffd07f2fc7bd11d2b1813c8adbc76557d36b7f9f99a04bca6179a9f887dbfa1304814981bb1657c5b06f80b86fa7743c269e8af31dc5a6311ae4261a49762b4cee3971b269fa551ec03a1eabe2900a4be5489cab8e5adfc156335e2d906da60e761e39b2b460fdca2591e4109e1a380428a0a91e39215435a79ccc7cc8452438c1d12a62644a220dd419b338f02c12bbd10b15379f9a6c6f9ea3f3dcf03bfbcfd727f5f1da467f552bdbc16770d8bc2874940452b355fbf12b6d7e027d47da48f8df0085fc076363f9b81f737186cb09219ebefe2141abd4b339b0c158b0ab2a2e288cb213ab44dca03158051b74981de05039f00a7c2890b8d342e75eb4ec99f8671064f9c13b39b3d5d0cd3b51c6e07ed3f59fedfb61f7af12dd436d633d4c94d5964c65836b2deceac6f03f60aa63d280cb6bf0f2262139305ee7c266024408d53e06bf83fe2cab6e51720957680092478b5666882e8c62f2671ed41d310f6191b78c006c1e581c68916d061bb36007e81f5000781c893cf39f32e48b6e3cb8a6212200eec37568f9c5ee47ff6e6457934415dba01f83fef5534a8b512a60360df092249455b290feaaad8a1c6cc35522484dfb2036985680b04921b8e069d450b4a3fbef9b281a9c5a186b111e6772c5e7e6c128e14cae9a98571c1fa48e9e2e3f621ca7d1acf847060fdd73f7951dffef89acae73729445b9962e6ff3e6ec1708b7db8221ce4cc3285e25b66ddb235ebc1454598fdd1345ed4258ef9a656768041564d969c16f490792b4e218a3d4ee7d208c49849b44973c0f5f2a03506fc217ce94f384cdc9072ae121481359b10fb5ef462f6b3c2cd5439ec7498567d101675303886ad01d9f8d42e64965146ad121512c4c268fd1b6612939003ec7f15179ca66584ddcf8cdac0eea68b784cb33a94ef7a72fde599f041f54633c5c9dd945be0030bedfce1d9145da95ad1fa8c2b97eecf465bbf5ff1c3b0b301ae2e19ee4fcaee8fa5c2a3aa14e5369bd191a8d6eedc5502542b4d719125d8f49d038ad384c20f336b55661c388833edb8589a365defc89077040fc13f64bc943debd03f1c9d01c03af5e55bd2a6eea88687ae079bc1dc7734d2bbac595a60fff56aa33d4a82bb7bd898532c95ec923f8bc041656255700be1d0b100a6053601c36cc51a080dbd12624ccacac4773e747e3b0a9c2223abd943da11bfe89a61dd20bb0c174afb071692f01fd927ef09e2a043bd691554e757009e2eae2fab61385f9f9f12d96e4877a036aa8b69089e3741148bcbd6abc8c79770d47a57e74ecacb05a094a58c2e5d3cb3cbb010d76cc73dea4292fbc463ebd21d2353c75531b950eb1604eb9eb0b5c7214875c2256cea022caf0eee574bb72275fc97d85c9c19665bf4bbf6fcc88c58e3c8ac56101cbe3a1738cb303fc407725bab9ac5ed9bdaf01838a358a63523ba86eeba9ae12b88ca9010551ecea16b45a200eaeeee35f546cb93f84759ba8ff9dd985d320b6b477721c821aa5c10cf46c241d99e56e7da296da338872cd38bda664012fe7e44b052a36bbeb4d3f5f53ba7a8642dab777de240ab951ada45c7bd100c97a143003e9055a6ce5c8f9405e8c74ef3ffb6e8b03917c3febf63ea836ef42fa8da7eccec76", "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"}}) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000040)={0x4, 0x2, 0x0, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r8, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000040)="66b843008ee066bad004ec0f01c966ba4100b0a5eec42130c6a816eb71e235b8010000000f01d9660f38822042394a04b8010000000f01d9410f01df", 0x3c}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) sendmsg$NFQNL_MSG_VERDICT(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000844}, 0x800) 1.672000114s ago: executing program 0 (id=21): setresuid(0xee01, 0x0, 0x0) setfsuid(0x0) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000080), 0x6) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000000)={0x0, 0x22, 0x22, {[@global=@item_012={0x2, 0x1, 0x9, "2313"}, @main=@item_012={0x2, 0x0, 0x9, '{|'}, @global=@item_4={0x3, 0x1, 0x0, '\f\x00'}, @local=@item_012={0x2, 0x2, 0x2, "9000"}, @local=@item_4={0x3, 0x2, 0x9, "eb212189"}, @main=@item_4={0x3, 0x0, 0x8, "bf0700"}, @main=@item_4={0x3, 0x0, 0x9, "cdd2f361"}, @local=@item_4={0x3, 0x2, 0x0, "5d8c3dda"}]}}, 0x0}, 0x0) 1.583269606s ago: executing program 3 (id=22): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) iopl(0xff) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000000)=@ethtool_test={0x1a, 0x100007, 0x9, 0x5, [0x1, 0x7, 0x0, 0x8a, 0x7]}}) r1 = getpgid(0x0) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r1, 0x10, &(0x7f0000000040)={0xfff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) writev(r0, &(0x7f00000007c0)=[{&(0x7f00000000c0)="b89560dad3834b1ba6f808687783dd1e0871f2d3cf70c5436f7395e144dede67d1f378075c32345d5e66a567edc23ce724dcc761e3cee80e449d521fef756f02f6d85618b47cfb8b1c22ece141c6", 0x4e}, {&(0x7f0000000140)="97850f694c6afe0ed36e42f6a5a38bb51ae465fe3bd1d86469b9f6b531287b2baf99217f24f49b0fda83a097f058f627a52df85dec47fc8fc17f918373c43bc6f3cfb96d6b9e585868246af6ca3969954f70f3768591f3a18cbe2595d1e9af8ec2ba07d3ace09004ec49a3c72947c945197d2d48f2938b165d4e785b81d78db1e2fd5159e1029493d0ea743d347cffed869b83ab610729eacf1cc402483bc2d0997b41d92bec1f72d0eb430f6e30f7978e6d8dd849698df8138ddce0a11773d7ee3ea53a82b747b3e38338118d9d6965ce", 0xd1}, {&(0x7f0000000240)="d9ad9023759127e2f0440b770c43d1316255b4cc6fb42af5de1a064773231aaa54258ae18a9c2a1f1cea7ea33156f03d9bce17315ba8f35ee25bd9b66cdc731b4bd04373d69821ba6b9de112217fcc4b9e8c89601a6c2b8dc13cf54471761d05491f21bec11ff9649bcff02f8923413c5ed8d46c803f5b876e2191d5143b6dfa14392acda33513f31976b4759766b7ee36ddd01380778b00fd9ce3407e48b44ab38a", 0xa2}, {&(0x7f0000000380)="98cca3cd7e0f6136984f0134c9c9104e7be7e982508c405430", 0x19}, {&(0x7f00000003c0)="c764cb9af5c6c962520e2b9dc4364e6397c6493dfe5cd30f416369f5e182af4356371adb5a2d9035a0ab04ee0ccc0ea87a5519c6d89618753ff67127a772fea2a2868e62c0b239c1d7b2e0da226c6b4908582f07073fa80d40738e8f08f3e6669e3c25e5ca450d3923f0d814320c4c410fa5986b7c89a7b36aa313030b2a7489b7751039c320763b01634ba940abe3e18f40b609b7dd0099d26fd58b28dcff7ffbebef058159edcaa861d20bd359ecee5764be11e10e6ed39dc6c885a2d8be38eaf5f758618021cb22", 0xc9}, {&(0x7f00000004c0)="24a5b9641347fd3be62bb896a42bcf59fd64f2bf0e423acd762cbc2979c792d99fc8d83f4e99bce9ba2fbcfbc3a5b48e2ef63b4831588a8fe0ff5aadbd167f0f0d9d69242120ccf005ec9003cce75e9b903bbbdf573952076293", 0x5a}, {&(0x7f0000000540)="cf2524fcb52e8fd35b24647e2256d8fee6c5821c54bfa13391b2683e3318ef03f1d86f7901540136365679d7fde7b6c1c5387c5dcdcd7372f3274ccc0988e4cf110d0ad1e11ed285100d1129dab33e31bb7e46a10b55b6ce07b825485d2bbe26429152a946ad2bd16a599472d5ad14a46632362de3849171b2b548309acd45a54a7b185c5a3f5433c85aa330773808d0efd4f5257dae127838ef5b3b002a595141f71f76e0748d4f1b509f4bc0637ca4d95f05ce3ff08aa8871d955da19656", 0xbf}, {&(0x7f0000000600)="4e2648037e496e5ca6f803eef91ebd3809f7a511f8600c5adbe21fcb8cecf22fd8d06b54131d9dd9c9eb686d7c3f932abb7d08b2a24eeec30104f80507b7417ec4537f7199b06ab9ca926390ca", 0x4d}, {&(0x7f0000000680)="6ed84768b8703974bd3122efd5e75f1d5dd11d89896b44e02e4f28b5697c4445096dffca1b6502d04b40a15f3ac4ed62fdb2ab316539bb3025a89f19c9473906ee8c8025750aa0eb673fba0f54ea", 0x4e}, {&(0x7f0000000700)="12b0b3d00be8ce90bc61d36ab4986939c4a7e850b15fcd1947ac9685c6854054a3982c8de9a1babc88d8a70eb833d9830b42c1dd9159ae24e93eb15bf8a904060272bebeb711a46ce4e2b495fc6544034aea692b02605514c0c2fc64e0ef82a0b0b1217fca5e91d5735d3a69c54d42762b26c8ff6a3974de00e5cd975af0c90b62e493695c1f1e3ce951f3", 0x8b}], 0xa) ioctl$FICLONERANGE(r3, 0x4020940d, &(0x7f0000000300)={{r2}}) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x7, 0x400, 0x78f80bac, 0x4}) iopl(0x6d) 1.570717317s ago: executing program 3 (id=23): r0 = memfd_secret(0x80000) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x0, 0xfffffffffffffffe}) (async) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) (async) r3 = socket$inet6(0xa, 0x803, 0xa7) setsockopt$inet6_int(r3, 0x29, 0x7, &(0x7f0000000040)=0xeffe, 0x4) (async) connect$inet6(r3, &(0x7f0000000280)={0xa, 0xce1e, 0x8, @loopback, 0xb}, 0x1c) (async) writev(r3, &(0x7f00000000c0)=[{&(0x7f00000002c0)=',', 0x1}], 0x1) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x44, 0x0, &(0x7f0000000700)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x9, 0x2, 0x6, 0xfffa}, 0x80001d, [0x1, 0xc95a, 0xfffffff3, 0x9, 0x80, 0x2, 0x3, 0x7f, 0x6, 0x4d, 0x39cc191a, 0x2, 0x9, 0x5, 0x2, 0x0, 0x6, 0x3, 0x0, 0x2ab, 0x4, 0x7, 0x4, 0x3c5b, 0x1, 0xb, 0x9, 0x1, 0x1f461e2c, 0x7, 0x3, 0x8001, 0xb, 0x3, 0x7fff, 0x4c74, 0x80000000, 0x800242, 0xffffffff, 0xe, 0x0, 0x71, 0x2, 0x6, 0x3, 0x50, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x3, 0x80092a3, 0x4, 0x1, 0x20000000, 0x82, 0x0, 0x7, 0x4, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x401, 0x12f, 0x6, 0x10, 0xfffffff3, 0x129432e6, 0xcb, 0xf9, 0xd, 0x2bf, 0x5, 0xffe, 0xfffffffc, 0x334000, 0x0, 0x7, 0x5, 0x2f, 0xe, 0x312, 0x400001, 0x0, 0xfffffffe, 0x6, 0x4, 0x8000, 0x9, 0x3fe, 0x401, 0x6, 0x4, 0xfb, 0x5, 0x8000, 0x5f31, 0xbcf5, 0x1, 0x2, 0x2, 0x9, 0x4, 0x9, 0x8, 0x9, 0x6, 0xb, 0x200000a, 0x1, 0x9, 0x9, 0x2, 0x7f, 0x9, 0x1, 0x3, 0x9, 0xffffffff, 0x7, 0x3, 0x9, 0x48c93690, 0x42, 0x400004], [0x5, 0x6, 0x80000001, 0x2, 0xff, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x1, 0xb, 0x4, 0xe0000000, 0x1005, 0x0, 0xd9b, 0xfffffffd, 0x2, 0x86, 0x1, 0x9, 0x3e7, 0x7, 0x5, 0x2, 0x2, 0x800, 0x8, 0x5, 0x8001, 0x7, 0x38, 0x800003, 0x200, 0x80, 0x2, 0xcc52, 0x950bfaf, 0x1000, 0xfffffff6, 0x7, 0x53cf697b, 0xfbfffff9, 0x6, 0xb8d, 0xbf, 0x10002, 0x403, 0x7ff, 0x3, 0x0, 0x1, 0xffff, 0x5, 0x6, 0x1c, 0x120000, 0x3, 0x6, 0xaaed, 0x4, 0xff], [0x9, 0xbb31, 0x3, 0xb, 0x5, 0x4, 0x6, 0x5, 0x0, 0x3, 0x80ce7, 0x1ff, 0x3, 0x7, 0x5, 0x1003, 0x101, 0x10000, 0x6, 0x7fff, 0xffff, 0xe620, 0x2, 0x2, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x4, 0xffffffff, 0x5, 0x7, 0x8, 0xc8, 0xee1, 0x0, 0xffff, 0x3, 0x7f, 0x100, 0x9602, 0x5, 0x2, 0xfffffffd, 0x6, 0x1, 0x10080, 0xfffffffe, 0x8, 0x30b1d693, 0x5a2b, 0x2000, 0x7, 0x50000000, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0x3, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) getsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x13, r0, 0x0) ftruncate(r0, 0x3) (async) r4 = syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) write$char_usb(r4, &(0x7f0000000040)="e2", 0x2250) (async) r5 = open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x2) fcntl$setlease(r5, 0x400, 0x0) ioctl$VHOST_SET_VRING_BASE(r5, 0x4008af12, &(0x7f0000000000)={0x0, 0xffff}) 1.515998819s ago: executing program 3 (id=24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x33) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000018c0)='/sys/kernel/fscaps', 0x40, 0x40) mmap$binder(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x11, r2, 0x0) io_setup(0xffffffff, &(0x7f0000000000)) ioctl$KVM_CAP_DIRTY_LOG_RING_ACQ_REL(r1, 0x4068aea3, &(0x7f0000000380)) syz_clone3(&(0x7f00000006c0)={0x42000000, 0x0, 0x0, 0x0, {0x3c}, 0x0, 0x0, 0x0, &(0x7f0000000680)=[0x0], 0x1}, 0xffffffde) 1.513154539s ago: executing program 3 (id=25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x100002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x29) keyctl$session_to_parent(0x12) r2 = socket$igmp(0x2, 0x3, 0x2) add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xfffffffffffffffd) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000100)={0x0, 0x642, &(0x7f0000000240), 0x0}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) keyctl$session_to_parent(0x12) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r5 = socket$inet(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) r6 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r6, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @local}, 0xe, &(0x7f0000000080)=[{&(0x7f0000000040)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT], 0x30}, 0x0) sendto$inet(r5, 0x0, 0x1, 0x2004cfe9, &(0x7f0000000180)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r2, &(0x7f00000004c0)="c19dac4c2ae9d414ee01a1244cd1c4e4bfb33d545dc65b1529e3d03803e5ddb32a04603aaaccf291ecfbcbe91492ad4912773923e49a1e37071f4456351e8eb9976ed6275c63d53dca4773740e5fb467c0cd277a19d73ae5da53efdec17dc9227b13e9fb58c8d88274efa0f6806e4b7909977abd7f2ae4438291f397cbbcfebac00945fde47967532470796f42aa3aa2d390e1e0470cee9c819f52b81bef0b113c9bdf5af7e82205c533de770c427562e6293dab1c0000000000000083000000000000", 0xc3, 0x90c0, 0x0, 0x0) pipe2(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) splice(r5, 0x0, r7, 0x0, 0x9, 0x8) r8 = socket$inet(0x2, 0x2, 0x1) write$tcp_congestion(r7, &(0x7f0000000240)='nv\x00', 0x3) sendmsg$inet(r8, &(0x7f0000000200)={&(0x7f0000000000)={0x2, 0x3, @local}, 0xe, &(0x7f0000000080)=[{&(0x7f0000000040)="0800a9fc0da6b30a", 0x8}], 0x1, &(0x7f00000000c0)=ANY=[@ANYRES64, @ANYRESOCT], 0x30}, 0x0) clock_adjtime(0x3, &(0x7f0000000140)={0xf, 0xa, 0x0, 0x101, 0x0, 0x4, 0x7, 0x100000001, 0xfff, 0x6, 0xd, 0x6, 0x9, 0xdf, 0x2, 0x3fd, 0x10000, 0x134bae97, 0x9, 0x100000001, 0xe, 0x6, 0xd0e6, 0x909, 0x8487, 0x4}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000036000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f00000000c0)="4425bfc400006736470f01d1c481d958fcb9800000c00f3235000400000f3083b20c000000000fc735840000000f011b430f08440f20c0350a000000440f22c0b94e0900000f32", 0x47}], 0x1, 0x49, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.496951189s ago: executing program 1 (id=26): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000019c0)={0x34, 0x10, 0x1, 0x0, 0x25dfdbfe, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x10, 0x1a, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x3}]}, @nested={0x4, 0x37}]}, 0x34}], 0x1, 0x0, 0x0, 0x20011}, 0x0) dup(r0) 1.449631311s ago: executing program 1 (id=27): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r4, 0x0, r5) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x4e20, 0x5, @empty, 0x9}, 0x1c) vmsplice(r3, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) splice(r2, 0x0, r4, 0x0, 0x15944, 0xc) (async) splice(r2, 0x0, r4, 0x0, 0x15944, 0xc) ioctl$FS_IOC_RESVSP(r1, 0x4030582b, &(0x7f0000000300)={0x1100, 0x2, 0x0, 0x6}) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0x1bc, 0x19, 0x1, 0x0, 0x1, {{@in=@empty, @in=@dev={0xac, 0x14, 0x14, 0x38}, 0xfffc, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2b}, {0x0, 0x9, 0x0, 0x0, 0x4, 0x10000000000000}, {0x80000000000000, 0x4}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1}, [@tmpl={0x104, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d5, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x40}, {{@in=@multicast1, 0x0, 0x33}, 0x2, @in6=@dev={0xfe, 0x80, '\x00', 0xff}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb}, {{@in6=@empty, 0x0, 0x2b}, 0x0, @in6=@local, 0xfffffffe}, {{@in=@remote, 0x100000, 0x6c}, 0x0, @in=@rand_addr=0x64010100, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5, 0x8}]}]}, 0x1bc}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.17599611s ago: executing program 2 (id=28): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x1430, 0x474c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x30, 0x0, "", [{{0x9, 0x4, 0x0, 0x81, 0x9, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x81, 0x0, 0x1, {0x22, 0x27}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x0, 0xb, 0xff}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r1, &(0x7f0000000040), 0x10) listen(r1, 0x0) r2 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r2, &(0x7f0000000080), 0x10) ioctl$sock_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000080)) setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000140)={0x1, 0x9}, 0x8) close(r2) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0}) 605.3257ms ago: executing program 1 (id=29): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000400)={0x34, &(0x7f0000000340)=ANY=[@ANYBLOB="0014af"], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x20, 0x0, &(0x7f0000000300)) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000640)={0x14, &(0x7f00000004c0)={0x0, 0xb, 0x100, {0x100, 0x10, "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"}}, &(0x7f0000000600)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000780)={0x1c, &(0x7f0000000680)={0x0, 0x13, 0x58, "47d993f2c0fcf212443db352c595c23437ee0719203f841e8634adab57a18497d58b97be2d865696126970ba9705c774cab017500891aff412f2deca1d412c758234ba0ca77787dedbb399a09b99306672c201adb4bfd6fe"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x2}}) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000000)={0x40, 0x5, 0x46, {0x46, 0x22, "a020152069ba160d8a0f97d96500768ff2c20358469e2314084acff67851ff207785d8b573e178bb4b641b9fda8894a9a483814b3a550508c7f5dd90aaaec3494cbf54e7"}}, &(0x7f0000000080)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000440)={0x44, &(0x7f0000000100)={0x20, 0x5, 0x57, "bf0547731cc3eb8d428a5719c8706c35b02312bbc745065f5a5821746057354fba4aaa980cd57fbb94828aba740e71b7682f6cb8509c26dfce09b1f8c7d141180716e74bbd68eabd127ade4a1c1eb429c9e114d2f8f0e3"}, &(0x7f0000000180)={0x0, 0xa, 0x1, 0x6a}, &(0x7f00000001c0)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000200)={0x20, 0x80, 0x1c, {0x2, 0x2, 0x48000, 0x2, 0x5d84, 0x7fff, 0x7, 0x0, 0x8000, 0x3, 0x8, 0x50e7}}, &(0x7f0000000280)={0x20, 0x85, 0x4, 0xea4}, &(0x7f00000002c0)={0x20, 0x83, 0x2, 0x4}, &(0x7f0000000300)={0x20, 0x87, 0x2, 0x9}, &(0x7f0000000380)={0x20, 0x89, 0x2}}) 109.840297ms ago: executing program 0 (id=30): madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) mlock(&(0x7f0000c00000/0x400000)=nil, 0x400000) mremap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4000, 0x3, &(0x7f0000c40000/0x4000)=nil) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mincore(&(0x7f0000ffb000/0x4000)=nil, 0x4000, &(0x7f0000000000)=""/152) 0s ago: executing program 0 (id=31): timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) syz_usb_connect$uac1(0x2, 0x81, &(0x7f0000000840)=ANY=[@ANYBLOB="12010102000000208205160040000102030109026f00030109403f0904000000010100000a2401d2000a000201020904fcffff000200000904010101"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) (async) getsockopt$inet_buf(r0, 0x0, 0x4, &(0x7f0000000140)=""/90, &(0x7f00000001c0)=0x5a) r1 = getpgrp(0x0) ioctl$BLKZEROOUT(0xffffffffffffffff, 0x127f, &(0x7f00000000c0)={0x2, 0x5134}) (async) capset(&(0x7f0000000100)={0x20080522, r1}, &(0x7f0000000000)={0xb5, 0x10ffff, 0xfffffffd, 0xfffffffc, 0x0, 0x3}) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) chdir(&(0x7f00000003c0)='./bus\x00') r2 = socket$unix(0x1, 0x5, 0x0) bind$unix(r2, &(0x7f0000000040)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.70' (ED25519) to the list of known hosts. [ 24.563350][ T36] audit: type=1400 audit(1775241695.319:64): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.564743][ T283] cgroup: Unknown subsys name 'net' [ 24.586650][ T36] audit: type=1400 audit(1775241695.319:65): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.615608][ T36] audit: type=1400 audit(1775241695.349:66): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.615877][ T283] cgroup: Unknown subsys name 'devices' [ 24.783332][ T283] cgroup: Unknown subsys name 'hugetlb' [ 24.789213][ T283] cgroup: Unknown subsys name 'rlimit' [ 24.961942][ T36] audit: type=1400 audit(1775241695.719:67): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.985915][ T36] audit: type=1400 audit(1775241695.719:68): avc: denied { mounton } for pid=283 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.011535][ T36] audit: type=1400 audit(1775241695.719:69): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 25.022423][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 25.045861][ T36] audit: type=1400 audit(1775241695.799:70): avc: denied { relabelto } for pid=285 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.073290][ T36] audit: type=1400 audit(1775241695.799:71): avc: denied { write } for pid=285 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.125277][ T36] audit: type=1400 audit(1775241695.879:72): avc: denied { read } for pid=283 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.151611][ T36] audit: type=1400 audit(1775241695.879:73): avc: denied { open } for pid=283 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.151889][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 26.538037][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.545803][ T292] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.553474][ T292] bridge_slave_0: entered allmulticast mode [ 26.559748][ T292] bridge_slave_0: entered promiscuous mode [ 26.568283][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.575990][ T292] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.583291][ T292] bridge_slave_1: entered allmulticast mode [ 26.589945][ T292] bridge_slave_1: entered promiscuous mode [ 26.611397][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.618840][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.626949][ T293] bridge_slave_0: entered allmulticast mode [ 26.633211][ T293] bridge_slave_0: entered promiscuous mode [ 26.640525][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.647661][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.655040][ T293] bridge_slave_1: entered allmulticast mode [ 26.661751][ T293] bridge_slave_1: entered promiscuous mode [ 26.695204][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.703220][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.710500][ T291] bridge_slave_0: entered allmulticast mode [ 26.717040][ T291] bridge_slave_0: entered promiscuous mode [ 26.727043][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.734402][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.741718][ T291] bridge_slave_1: entered allmulticast mode [ 26.748023][ T291] bridge_slave_1: entered promiscuous mode [ 26.782465][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.789644][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.797336][ T290] bridge_slave_0: entered allmulticast mode [ 26.803756][ T290] bridge_slave_0: entered promiscuous mode [ 26.810569][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.817856][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.825001][ T290] bridge_slave_1: entered allmulticast mode [ 26.831874][ T290] bridge_slave_1: entered promiscuous mode [ 26.977470][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.984659][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.992069][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.999091][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.009411][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.016586][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.023968][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.031369][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.048477][ T292] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.055861][ T292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.063325][ T292] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.070353][ T292] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.093744][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.100916][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.108209][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.115600][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.144698][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.152285][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.160177][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.167494][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.174872][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.182396][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.189753][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.197107][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.213917][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.221080][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.235849][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.243107][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.250833][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.257881][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.265651][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.272734][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.299810][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.307279][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.315032][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.322189][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.332408][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.339459][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.348719][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.355879][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.393740][ T293] veth0_vlan: entered promiscuous mode [ 27.423585][ T290] veth0_vlan: entered promiscuous mode [ 27.432533][ T291] veth0_vlan: entered promiscuous mode [ 27.444931][ T293] veth1_macvtap: entered promiscuous mode [ 27.455550][ T292] veth0_vlan: entered promiscuous mode [ 27.487800][ T292] veth1_macvtap: entered promiscuous mode [ 27.495412][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.511684][ T290] veth1_macvtap: entered promiscuous mode [ 27.524037][ T291] veth1_macvtap: entered promiscuous mode [ 27.558472][ T294] tipc: Subscription rejected, illegal request [ 27.609366][ T312] overlayfs: conflicting options: nfs_export=on,index=off [ 27.619420][ T314] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.678507][ T323] ======================================================= [ 27.678507][ T323] WARNING: The mand mount option has been deprecated and [ 27.678507][ T323] and is ignored by this kernel. Remove the mand [ 27.678507][ T323] option from the mount to silence this warning. [ 27.678507][ T323] ======================================================= [ 27.901132][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 28.611704][ T229] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 28.618084][ T340] input: syz0 as /devices/virtual/input/input4 [ 28.620530][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.792880][ T229] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 28.803129][ T332] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 28.810631][ T229] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 28.822579][ T229] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 28.831895][ T229] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.839998][ T229] usb 3-1: Product: 辸붙赿岄ꉆ憔ࣰ㙤ߺꝕ塺眝㦆ⳍ荧첮⫀銀萼⠾仑㏑涳颏뼄ڠﾢ๹謁慊眏梆뢇쾧뜵쉖뫵꾃䙬ᕕＴꇯ퟾䵆沒琿镀櫀狷펨榲撣↪뢬消覨푬᜾ީ姝냩䅙갫ꮯ鐩꼯⚎빨僃ꌛ犟₳틝㎯흲⎳୪㘬荬㓾䪷晹ൌ⓽赲ⓓ䅵ᰗ쥺旬蠊崇ㆨ斂ꡁ [ 28.871480][ T229] usb 3-1: Manufacturer: 燥꾡扨쉓⤴꿐ѿꜳ贿眉掟훿邮ꚥ辰뺊瓐穚퓵輱ቒ귛욌곽洳疨䂤玕ᝊ렭濄滳䒻랯绋鬀류럌䴹㥸栗쮀ꑖ佯ꃍᱬ恵쫆텂댐榅饺妇⩫ొ夤蚇ꛡ錚ᱭ랞ⲫ⋳겡뭉儳꿖瓮㊾춅ꭉꊁᭂ鮩ⱆ鴋兺福쐏䵮悎埌斺 [ 28.899424][ T9] usb 4-1: device descriptor read/64, error -71 [ 28.905813][ T229] usb 3-1: SerialNumber: ш [ 28.990954][ T332] usb 1-1: Using ep0 maxpacket: 32 [ 28.999584][ T332] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 29.008981][ T332] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.017270][ T332] usb 1-1: Product: syz [ 29.022367][ T332] usb 1-1: Manufacturer: syz [ 29.027065][ T332] usb 1-1: SerialNumber: syz [ 29.040950][ T65] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 29.150878][ T9] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 29.200970][ T65] usb 2-1: Using ep0 maxpacket: 32 [ 29.207513][ T65] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 29.215979][ T65] usb 2-1: config 0 has no interface number 0 [ 29.223924][ T65] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 29.233489][ T65] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.241761][ T65] usb 2-1: Product: syz [ 29.244395][ T335] 9pnet_fd: p9_fd_create_tcp (335): problem connecting socket to 127.0.0.1 [ 29.245937][ T65] usb 2-1: Manufacturer: syz [ 29.245957][ T65] usb 2-1: SerialNumber: syz [ 29.265476][ T65] usb 2-1: config 0 descriptor?? [ 29.273611][ T65] smsc95xx v2.0.0 [ 29.274343][ T332] usb 1-1: MIDIStreaming interface descriptor not found [ 29.284957][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.295688][ T332] usb 1-1: USB disconnect, device number 2 [ 29.361756][ T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.530937][ T9] usb 4-1: device descriptor read/64, error -71 [ 29.641678][ T9] usb usb4-port1: attempt power cycle [ 29.684559][ T344] kvm: MONITOR instruction emulated as NOP! [ 29.691250][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 29.691759][ T344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.702768][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 29.713567][ T344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.822763][ T36] kauditd_printk_skb: 66 callbacks suppressed [ 29.822789][ T36] audit: type=1400 audit(1775241700.579:140): avc: denied { create } for pid=349 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.849964][ T36] audit: type=1400 audit(1775241700.609:141): avc: denied { ioctl } for pid=349 comm="syz.0.14" path="socket:[3627]" dev="sockfs" ino=3627 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.876042][ T36] audit: type=1400 audit(1775241700.609:142): avc: denied { setopt } for pid=349 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.896458][ T36] audit: type=1400 audit(1775241700.609:143): avc: denied { write } for pid=349 comm="syz.0.14" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 29.927611][ T36] audit: type=1400 audit(1775241700.679:144): avc: denied { name_bind } for pid=353 comm="syz.0.15" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 29.950328][ T65] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 29.961375][ T65] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -61 [ 29.980883][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 30.002019][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.003082][ T309] udevd[309]: setting mode of /dev/bus/usb/002/002 to 020664 failed: Read-only file system [ 30.019043][ T309] udevd[309]: setting owner of /dev/bus/usb/002/002 to uid=0, gid=0 failed: Read-only file system [ 30.036587][ T318] udevd[318]: symlink '../bus/usb/002/002' '/dev/char/189:129.tmp-c189:129' failed: Read-only file system [ 30.112290][ T36] audit: type=1400 audit(1775241700.869:145): avc: denied { create } for pid=353 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.131865][ T36] audit: type=1400 audit(1775241700.889:146): avc: denied { setopt } for pid=353 comm="syz.0.15" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 30.156965][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.400831][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 30.421968][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.551987][ T9] usb 4-1: device descriptor read/8, error -71 [ 30.660978][ T9] usb usb4-port1: unable to enumerate USB device [ 30.672682][ T360] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.682390][ T360] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.748407][ T229] cdc_ncm 3-1:1.0: bind() failure [ 30.759499][ T229] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 30.766857][ T229] cdc_ncm 3-1:1.1: bind() failure [ 30.776229][ T36] audit: type=1400 audit(1775241701.529:147): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 30.797045][ T321] udevd[321]: setting mode of /dev/bus/usb/003/002 to 020664 failed: Read-only file system [ 30.807644][ T229] usb 3-1: USB disconnect, device number 2 [ 30.808506][ T362] fscrypt: Error allocating hmac(sha512): -2 [ 30.815709][ T321] udevd[321]: setting owner of /dev/bus/usb/003/002 to uid=0, gid=0 failed: Read-only file system [ 30.832310][ T36] audit: type=1400 audit(1775241701.529:148): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.854172][ T36] audit: type=1400 audit(1775241701.549:149): avc: denied { create } for pid=361 comm="syz.0.18" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.876919][ T321] udevd[321]: symlink '../bus/usb/003/002' '/dev/char/189:257.tmp-c189:257' failed: Read-only file system [ 30.877793][ T370] netlink: 'syz.0.19': attribute type 32 has an invalid length. [ 30.898451][ T321] udevd[321]: symlink '../bus/usb/003/002' '/dev/char/189:257.tmp-c189:257' failed: Read-only file system [ 30.899928][ T370] netlink: 'syz.0.19': attribute type 32 has an invalid length. [ 30.913010][ T321] udevd[321]: symlink '../bus/usb/003/002' '/dev/char/189:257.tmp-c189:257' failed: Read-only file system [ 30.926903][ T370] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 31.040891][ T9] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 31.180890][ T229] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.190981][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 31.197647][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 31.208294][ T9] usb 4-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 64 [ 31.220485][ T9] usb 4-1: string descriptor 0 read error: -71 [ 31.227630][ T9] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 31.237298][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.247011][ T9] usb 4-1: can't set config #1, error -71 [ 31.253744][ T9] usb 4-1: USB disconnect, device number 6 [ 31.332089][ T229] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.343078][ T229] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 31.353204][ T229] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 31.362490][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 31.371308][ T229] usb 3-1: SerialNumber: syz [ 31.581632][ T229] usb 3-1: 0:2 : does not exist [ 31.589806][ T229] usb 3-1: USB disconnect, device number 3 [ 31.603257][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.804355][ T45] usb 2-1: USB disconnect, device number 2 [ 31.813330][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 31.824344][ T389] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 31.833875][ T389] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 31.849532][ T371] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 32.000842][ T371] usb 1-1: Using ep0 maxpacket: 16 [ 32.007481][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.019398][ T371] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.029756][ T371] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.043718][ T371] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 32.053258][ T371] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.062590][ T371] usb 1-1: config 0 descriptor?? [ 32.330830][ T229] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 32.471448][ T371] microsoft 0003:045E:07DA.0001: No inputs registered, leaving [ 32.480825][ T229] usb 3-1: Using ep0 maxpacket: 32 [ 32.501525][ T229] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.521276][ T229] usb 3-1: config 0 interface 0 altsetting 129 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 32.550847][ T229] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.557654][ T229] usb 3-1: New USB device found, idVendor=1430, idProduct=474c, bcdDevice= 0.00 [ 32.581274][ T229] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.601493][ T229] usb 3-1: config 0 descriptor?? [ 32.611668][ T371] microsoft 0003:045E:07DA.0001: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 32.623551][ T371] microsoft 0003:045E:07DA.0001: no inputs found [ 32.630336][ T371] microsoft 0003:045E:07DA.0001: could not initialize ff, continuing anyway [ 32.679284][ T45] usb 1-1: USB disconnect, device number 3 [ 32.940873][ T31] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 33.011235][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.018040][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.025163][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.032391][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.039530][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.046443][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.053326][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.060288][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.067492][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.074343][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.081698][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.088845][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.096114][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.100863][ T31] usb 2-1: Using ep0 maxpacket: 32 [ 33.103015][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.110280][ T31] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 33.115688][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.124180][ T31] usb 2-1: config 0 has no interface number 0 [ 33.131290][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.139736][ T31] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 33.144954][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.154146][ T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.161225][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.169769][ T31] usb 2-1: Product: syz [ 33.176417][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.180583][ T31] usb 2-1: Manufacturer: syz [ 33.192419][ T31] usb 2-1: SerialNumber: syz [ 33.199913][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.200343][ T31] usb 2-1: config 0 descriptor?? [ 33.206907][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.213459][ T31] smsc95xx v2.0.0 [ 33.223889][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.231362][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.238843][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.248308][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.255766][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.263413][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.274611][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.281547][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.288788][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.296090][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.303578][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.310692][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.317905][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.325157][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.332295][ T229] sony 0003:1430:474C.0002: unknown main item tag 0x0 [ 33.340304][ T229] sony 0003:1430:474C.0002: hidraw0: USB HID v0.81 Device [HID 1430:474c] on usb-dummy_hcd.2-1/input0 [ 33.352036][ T229] sony 0003:1430:474C.0002: failed to claim input [ 33.359632][ T406] ================================================================== [ 33.363829][ T229] usb 3-1: USB disconnect, device number 4 [ 33.368619][ T406] BUG: KASAN: slab-use-after-free in read_report_descriptor+0xbf/0x100 [ 33.383731][ T406] Read of size 39 at addr ffff88811389b800 by task fido_id/406 [ 33.391533][ T406] [ 33.394342][ T406] CPU: 1 UID: 0 PID: 406 Comm: fido_id Not tainted syzkaller #0 90b12aa1a603b2eff3e7fbc29ad65555fd578c6a [ 33.394360][ T406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 33.394368][ T406] Call Trace: [ 33.394373][ T406] [ 33.394380][ T406] __dump_stack+0x21/0x30 [ 33.394402][ T406] dump_stack_lvl+0x140/0x1c0 [ 33.394416][ T406] ? __cfi_dump_stack_lvl+0x10/0x10 [ 33.394430][ T406] print_address_description+0x71/0x210 [ 33.394445][ T406] print_report+0x4a/0x70 [ 33.394457][ T406] kasan_report+0x162/0x1a0 [ 33.394470][ T406] ? read_report_descriptor+0xbf/0x100 [ 33.394484][ T406] ? read_report_descriptor+0xbf/0x100 [ 33.394495][ T406] kasan_check_range+0x25a/0x2b0 [ 33.394506][ T406] ? read_report_descriptor+0xbf/0x100 [ 33.394517][ T406] __asan_memcpy+0x31/0x80 [ 33.394531][ T406] read_report_descriptor+0xbf/0x100 [ 33.394542][ T406] ? __cfi_read_report_descriptor+0x10/0x10 [ 33.394554][ T406] sysfs_kf_bin_read+0x1c6/0x200 [ 33.394570][ T406] ? __cfi_sysfs_kf_bin_read+0x10/0x10 [ 33.394583][ T406] kernfs_fop_read_iter+0x30e/0x580 [ 33.394596][ T406] vfs_read+0x654/0xcb0 [ 33.394611][ T406] ? __cfi_vfs_read+0x10/0x10 [ 33.394625][ T406] ? __kasan_slab_free+0x6a/0x80 [ 33.394635][ T406] ? putname+0x113/0x150 [ 33.394650][ T406] ? putname+0x113/0x150 [ 33.394664][ T406] ? __kasan_check_read+0x15/0x20 [ 33.394678][ T406] ksys_read+0x145/0x260 [ 33.394691][ T406] ? xfd_validate_state+0x68/0x140 [ 33.394706][ T406] ? __cfi_ksys_read+0x10/0x10 [ 33.394720][ T406] ? __kasan_check_write+0x18/0x20 [ 33.394733][ T406] ? fpregs_restore_userregs+0x11c/0x260 [ 33.394745][ T406] __x64_sys_read+0x7f/0x90 [ 33.394768][ T406] x64_sys_call+0x2638/0x2ee0 [ 33.394784][ T406] do_syscall_64+0x57/0xf0 [ 33.394800][ T406] ? clear_bhb_loop+0x50/0xa0 [ 33.394811][ T406] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 33.394828][ T406] RIP: 0033:0x7fe1beaa7407 [ 33.394845][ T406] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 33.394855][ T406] RSP: 002b:00007ffc6740b760 EFLAGS: 00000202 ORIG_RAX: 0000000000000000 [ 33.394871][ T406] RAX: ffffffffffffffda RBX: 00007fe1bf1da880 RCX: 00007fe1beaa7407 [ 33.394880][ T406] RDX: 0000000000001000 RSI: 00007ffc6740b7b0 RDI: 0000000000000004 [ 33.394887][ T406] RBP: 0000555cecabc2c0 R08: 0000000000000000 R09: 0000000000000000 [ 33.394895][ T406] R10: 0000000000000000 R11: 0000000000000202 R12: 0000555cecabb4c0 [ 33.394902][ T406] R13: 00007ffc6740b7b0 R14: 0000000000000004 R15: 0000555cc49d54d8 [ 33.394911][ T406] [ 33.394915][ T406] [ 33.666875][ T406] Allocated by task 229: [ 33.671107][ T406] kasan_save_track+0x3e/0x80 [ 33.675892][ T406] kasan_save_alloc_info+0x40/0x50 [ 33.681427][ T406] __kasan_kmalloc+0x96/0xb0 [ 33.686006][ T406] __kmalloc_node_track_caller_noprof+0x251/0x4f0 [ 33.692585][ T406] kmemdup_noprof+0x31/0x80 [ 33.697456][ T406] hid_open_report+0x200/0x1110 [ 33.702322][ T406] sony_probe+0x18c/0x600 [ 33.706689][ T406] hid_device_probe+0x2c1/0x5d0 [ 33.711740][ T406] really_probe+0x2d8/0x890 [ 33.716257][ T406] __driver_probe_device+0x198/0x280 [ 33.721793][ T406] driver_probe_device+0x54/0x3f0 [ 33.726809][ T406] __device_attach_driver+0x2f1/0x4b0 [ 33.732256][ T406] bus_for_each_drv+0x267/0x300 [ 33.737202][ T406] __device_attach+0x2c9/0x3c0 [ 33.742141][ T406] device_initial_probe+0x1e/0x30 [ 33.747379][ T406] bus_probe_device+0x18b/0x270 [ 33.752250][ T406] device_add+0x80c/0xbf0 [ 33.756580][ T406] hid_add_device+0x39b/0x560 [ 33.761243][ T406] usbhid_probe+0xde3/0x12b0 [ 33.765927][ T406] usb_probe_interface+0x6a9/0xc00 [ 33.771042][ T406] really_probe+0x2d8/0x890 [ 33.775558][ T406] __driver_probe_device+0x198/0x280 [ 33.780831][ T406] driver_probe_device+0x54/0x3f0 [ 33.785923][ T406] __device_attach_driver+0x2f1/0x4b0 [ 33.791394][ T406] bus_for_each_drv+0x267/0x300 [ 33.796583][ T406] __device_attach+0x2c9/0x3c0 [ 33.801340][ T406] device_initial_probe+0x1e/0x30 [ 33.806352][ T406] bus_probe_device+0x18b/0x270 [ 33.811230][ T406] device_add+0x80c/0xbf0 [ 33.815636][ T406] usb_set_configuration+0x1acf/0x20b0 [ 33.821099][ T406] usb_generic_driver_probe+0x95/0x160 [ 33.826632][ T406] usb_probe_device+0x1d1/0x380 [ 33.832076][ T406] really_probe+0x2d8/0x890 [ 33.836839][ T406] __driver_probe_device+0x198/0x280 [ 33.842140][ T406] driver_probe_device+0x54/0x3f0 [ 33.847259][ T406] __device_attach_driver+0x2f1/0x4b0 [ 33.852889][ T406] bus_for_each_drv+0x267/0x300 [ 33.858120][ T406] __device_attach+0x2c9/0x3c0 [ 33.863029][ T406] device_initial_probe+0x1e/0x30 [ 33.868168][ T406] bus_probe_device+0x18b/0x270 [ 33.873156][ T406] device_add+0x80c/0xbf0 [ 33.877581][ T406] usb_new_device+0x9f8/0x15b0 [ 33.882722][ T406] hub_event+0x30c6/0x4700 [ 33.887317][ T406] process_scheduled_works+0x7d1/0x1020 [ 33.893412][ T406] worker_thread+0xc70/0x10b0 [ 33.898362][ T406] kthread+0x2c6/0x370 [ 33.902543][ T406] ret_from_fork+0x67/0xa0 [ 33.906943][ T406] ret_from_fork_asm+0x1a/0x30 [ 33.911959][ T406] [ 33.914300][ T406] Freed by task 229: [ 33.918446][ T406] kasan_save_track+0x3e/0x80 [ 33.923240][ T406] kasan_save_free_info+0x4a/0x60 [ 33.928528][ T406] __kasan_slab_free+0x5f/0x80 [ 33.933670][ T406] kfree+0x158/0x440 [ 33.937718][ T406] hid_close_report+0x628/0x6f0 [ 33.942596][ T406] hid_device_probe+0x523/0x5d0 [ 33.948247][ T406] really_probe+0x2d8/0x890 [ 33.952751][ T406] __driver_probe_device+0x198/0x280 [ 33.958181][ T406] driver_probe_device+0x54/0x3f0 [ 33.963472][ T406] __device_attach_driver+0x2f1/0x4b0 [ 33.969032][ T406] bus_for_each_drv+0x267/0x300 [ 33.974008][ T406] __device_attach+0x2c9/0x3c0 [ 33.978854][ T406] device_initial_probe+0x1e/0x30 [ 33.983953][ T406] bus_probe_device+0x18b/0x270 [ 33.988886][ T406] device_add+0x80c/0xbf0 [ 33.993487][ T406] hid_add_device+0x39b/0x560 [ 33.998441][ T406] usbhid_probe+0xde3/0x12b0 [ 34.003395][ T406] usb_probe_interface+0x6a9/0xc00 [ 34.008864][ T406] really_probe+0x2d8/0x890 [ 34.013453][ T406] __driver_probe_device+0x198/0x280 [ 34.018741][ T406] driver_probe_device+0x54/0x3f0 [ 34.023816][ T406] __device_attach_driver+0x2f1/0x4b0 [ 34.029394][ T406] bus_for_each_drv+0x267/0x300 [ 34.034346][ T406] __device_attach+0x2c9/0x3c0 [ 34.039324][ T406] device_initial_probe+0x1e/0x30 [ 34.044805][ T406] bus_probe_device+0x18b/0x270 [ 34.049867][ T406] device_add+0x80c/0xbf0 [ 34.054201][ T406] usb_set_configuration+0x1acf/0x20b0 [ 34.059720][ T406] usb_generic_driver_probe+0x95/0x160 [ 34.065620][ T406] usb_probe_device+0x1d1/0x380 [ 34.070573][ T406] really_probe+0x2d8/0x890 [ 34.075080][ T406] __driver_probe_device+0x198/0x280 [ 34.080694][ T406] driver_probe_device+0x54/0x3f0 [ 34.085720][ T406] __device_attach_driver+0x2f1/0x4b0 [ 34.091178][ T406] bus_for_each_drv+0x267/0x300 [ 34.096111][ T406] __device_attach+0x2c9/0x3c0 [ 34.100950][ T406] device_initial_probe+0x1e/0x30 [ 34.105957][ T406] bus_probe_device+0x18b/0x270 [ 34.110795][ T406] device_add+0x80c/0xbf0 [ 34.115109][ T406] usb_new_device+0x9f8/0x15b0 [ 34.119858][ T406] hub_event+0x30c6/0x4700 [ 34.124451][ T406] process_scheduled_works+0x7d1/0x1020 [ 34.130085][ T406] worker_thread+0xc70/0x10b0 [ 34.134844][ T406] kthread+0x2c6/0x370 [ 34.139011][ T406] ret_from_fork+0x67/0xa0 [ 34.143686][ T406] ret_from_fork_asm+0x1a/0x30 [ 34.148815][ T406] [ 34.151133][ T406] The buggy address belongs to the object at ffff88811389b800 [ 34.151133][ T406] which belongs to the cache kmalloc-64 of size 64 [ 34.165023][ T406] The buggy address is located 0 bytes inside of [ 34.165023][ T406] freed 64-byte region [ffff88811389b800, ffff88811389b840) [ 34.178636][ T406] [ 34.181144][ T406] The buggy address belongs to the physical page: [ 34.187649][ T406] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11389b [ 34.196660][ T406] flags: 0x4000000000000000(zone=1) [ 34.201854][ T406] page_type: f5(slab) [ 34.206001][ T406] raw: 4000000000000000 ffff8881000418c0 dead000000000122 0000000000000000 [ 34.215003][ T406] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 34.223669][ T406] page dumped because: kasan: bad access detected [ 34.230088][ T406] page_owner tracks the page as allocated [ 34.236159][ T406] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 396, tgid 395 (syz.2.28), ts 32094721114, free_ts 31790476773 [ 34.255003][ T406] post_alloc_hook+0x3b8/0x3f0 [ 34.259846][ T406] prep_new_page+0x20/0x120 [ 34.264340][ T406] get_page_from_freelist+0x496e/0x4a20 [ 34.270063][ T406] __alloc_pages_noprof+0x35f/0x7e0 [ 34.275341][ T406] alloc_slab_page+0x6b/0x1e0 [ 34.280004][ T406] allocate_slab+0x69/0x420 [ 34.284594][ T406] ___slab_alloc+0x5a2/0x8d0 [ 34.289188][ T406] __kmalloc_noprof+0x2fc/0x500 [ 34.294173][ T406] kobject_get_path+0xc3/0x2d0 [ 34.298926][ T406] kobject_uevent_env+0x2bc/0x7e0 [ 34.303929][ T406] kobject_uevent+0x21/0x40 [ 34.308436][ T406] driver_register+0x373/0x3c0 [ 34.313197][ T406] usb_gadget_register_driver_owner+0xfc/0x270 [ 34.319615][ T406] raw_ioctl+0x141f/0x37e0 [ 34.324113][ T406] __se_sys_ioctl+0x135/0x1b0 [ 34.329397][ T406] __x64_sys_ioctl+0x7f/0xa0 [ 34.333983][ T406] page last free pid 343 tgid 343 stack trace: [ 34.340118][ T406] free_unref_page+0xbcf/0xf80 [ 34.344930][ T406] __free_pages+0x6b/0x3b0 [ 34.349449][ T406] free_pages+0x86/0x90 [ 34.353602][ T406] kvm_arch_vcpu_destroy+0x18c/0x1e0 [ 34.358880][ T406] kvm_destroy_vcpus+0xe1/0x250 [ 34.363835][ T406] kvm_arch_destroy_vm+0x229/0x420 [ 34.369296][ T406] kvm_put_kvm+0xb04/0x12c0 [ 34.373873][ T406] kvm_vm_release+0x47/0x70 [ 34.378630][ T406] __fput+0x1fe/0xa00 [ 34.383049][ T406] ____fput+0x20/0x30 [ 34.387041][ T406] task_work_run+0x1e8/0x260 [ 34.391722][ T406] do_exit+0x9ad/0x2720 [ 34.395892][ T406] do_group_exit+0x229/0x2f0 [ 34.400662][ T406] get_signal+0x1398/0x14e0 [ 34.405599][ T406] arch_do_signal_or_restart+0xbc/0x760 [ 34.411232][ T406] syscall_exit_to_user_mode+0x57/0xb0 [ 34.416771][ T406] [ 34.419188][ T406] Memory state around the buggy address: [ 34.425071][ T406] ffff88811389b700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.433217][ T406] ffff88811389b780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.441284][ T406] >ffff88811389b800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.449423][ T406] ^ [ 34.453682][ T406] ffff88811389b880: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.462354][ T406] ffff88811389b900: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 34.470398][ T406] ================================================================== [ 34.489592][ T406] Disabling lock debugging due to kernel taint [ 34.610822][ T45] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 34.693563][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 34.704664][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 34.762305][ T45] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.772747][ T45] usb 1-1: not running at top speed; connect to a high speed hub [ 34.781177][ T45] usb 1-1: config 1 has an invalid interface number: 252 but max is 2 [ 34.789466][ T45] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.800019][ T45] usb 1-1: config 1 has no interface number 2 [ 34.806363][ T45] usb 1-1: too many endpoints for config 1 interface 252 altsetting 255: 255, using maximum allowed: 30 [ 34.817726][ T45] usb 1-1: config 1 interface 252 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 34.831158][ T45] usb 1-1: config 1 interface 1 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 34.844403][ T45] usb 1-1: config 1 interface 252 has no altsetting 0 [ 34.851433][ T45] usb 1-1: config 1 interface 1 has no altsetting 0 [ 34.861171][ T45] usb 1-1: New USB device found, idVendor=0582, idProduct=0016, bcdDevice= 0.40 [ 34.871047][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 34.879680][ T45] usb 1-1: Product: syz [ 34.884084][ T45] usb 1-1: Manufacturer: syz [ 34.888794][ T45] usb 1-1: SerialNumber: syz [ 35.097975][ T45] usb 1-1: selecting invalid altsetting 0 [ 35.107280][ T45] usb 1-1: USB disconnect, device number 4 [ 35.119568][ T321] udevd[321]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 35.717440][ T31] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 35.728726][ T31] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 35.740636][ T31] usb 2-1: USB disconnect, device number 3