last executing test programs: 9.789740347s ago: executing program 0 (id=25): r0 = syz_usb_connect$midi(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010002000000108c0d0201400001020301090212000101000001090400000001033002"], 0x0) syz_usb_control_io$rtl8150(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000080)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, &(0x7f00000002c0)={0x14, &(0x7f0000000180)={0x0, 0x23, 0xd7, {0xd7, 0xc, "b68c6fe4002645aaf5dee7c42debc96e9319ad529fab11185fe35a49478a6df44ef78d76663025111adbb5343dc00e8c71309dc73e76c89229c185bd03e3d0afec8df8d5c1f429e731110baf4b86a70c338f04614d6cc5a0c3e71f655711f41fef70bea2b92990d047544a9060f557e62ae8028f986fc62e993ad55608637236599f32e04c81126dc128adaefef4a0a510b8f1eae5441af4e4e7ef67871198b9653f981f55f5e1dddb2b3c79b998c84e63b774f21d8b7056209a352f7c11b4b84444375cb4f0f3b7aca6aaefd0d6a20e0b4f4c206f"}}, &(0x7f0000000280)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x843}}}, &(0x7f0000000580)={0x44, &(0x7f0000000300)={0x40, 0x0, 0x7c, "b0b72c3cac9f47960f38b5727b577c5f265264f6799efd34aca4c4d19d0cbd133344c5a49f46d0990adc95da94090da7a571ec2964be5a422aa42cb46cd4798665457e7bbe615d8d0447c0e5fb46da5bc79f56ebb71fa169f6cf835e3a3f0f50348663d3812bd917dbfd08114536ba15c4cb7acef0eb2576d8b4bbb7"}, &(0x7f00000003c0)={0x0, 0xa, 0x1, 0x3}, &(0x7f0000000400)={0x0, 0x8, 0x1, 0x5}, &(0x7f0000000440)={0x20, 0x81, 0x2, "2517"}, &(0x7f0000000480)={0x20, 0x82, 0x2, "a6c0"}, &(0x7f00000004c0)={0x20, 0x83, 0x2, "75cf"}, &(0x7f0000000500)={0x20, 0x84, 0x4, "5f3d6a0f"}, &(0x7f0000000540)={0x20, 0x85, 0x3, "789b7e"}}) 8.075051063s ago: executing program 0 (id=36): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r0) (async) r1 = dup(r0) getrlimit(0xa, &(0x7f0000000480)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) mkdirat(r1, &(0x7f0000000280)='./file0\x00', 0x1ff) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000004c0)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) (async) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) getdents64(r3, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) (async) syz_usb_control_io$hid(r2, 0x0, 0x0) open(0x0, 0x181240, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) socket$inet_udp(0x2, 0x2, 0x0) syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, &(0x7f0000000540)=ANY=[@ANYBLOB="40302e0000002e0993358c470cab061447f99cf0e06a0c1ccd411a42905e1ad3496744"], 0x0, 0x0, 0x0, 0x0}, 0x0) mount(0x0, &(0x7f0000001500)='./dev\x00', &(0x7f0000001600)='devtmpfs\x00', 0x0, 0x0) clock_adjtime(0x0, &(0x7f0000000180)={0x7, 0x6b, 0x4100, 0x1000, 0x1, 0x9, 0x7, 0x6, 0x9, 0x0, 0x0, 0x7fff, 0x81, 0xfffffffffffffff9, 0xffffffffffffffff, 0x6, 0x8000000000000001, 0x7, 0x58fd, 0x3, 0xd, 0x2, 0x6, 0x6, 0xab, 0xa}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000400)) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) (async) mount(&(0x7f00000000c0)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x8410, 0x0) getrandom(&(0x7f00000005c0)=""/165, 0xa5, 0x1) (async) getrandom(&(0x7f00000005c0)=""/165, 0xa5, 0x1) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f00000002c0)={'veth1_macvtap\x00', @link_local}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$BTRFS_IOC_DEFAULT_SUBVOL(r0, 0x40089413, &(0x7f0000000440)=0x10ec) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r4 = signalfd(r1, &(0x7f0000000300)={[0x8000000000000001]}, 0x8) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000340)={'ipvlan0\x00'}) (async) ioctl$SIOCGIFHWADDR(r4, 0x8927, &(0x7f0000000340)={'ipvlan0\x00'}) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') (async) chdir(&(0x7f0000000140)='./file0\x00') r5 = open(&(0x7f0000000040)='./bus\x00', 0x1c527e, 0x10) ioctl$FS_IOC_FSSETXATTR(r5, 0x401c5820, &(0x7f00000003c0)={0xa, 0x6, 0x8, 0xfc, 0x80085}) 7.230197199s ago: executing program 2 (id=43): getrandom(&(0x7f0000000580)=""/238, 0x115, 0x2) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x2006}, 0x1c) (async) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x6, @ipv4={'\x00', '\xff\xff', @empty}, 0x4c}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000100)='vlan0\x00', 0x10) (async) sendmmsg$inet(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000280)="01aa41800d654d3e2d77596f928c2fbfa375ca8be52e19d1917e5c8696a2a54c", 0x20}], 0x1}}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)='=', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)='M', 0x1}], 0x1}}], 0x4, 0x119e75c40277adee) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async) r1 = syz_usb_connect$lan78xx(0x0, 0x3f, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io(r1, &(0x7f0000000800)={0x2c, &(0x7f0000000480)={0x0, 0x3, 0x53, {0x53, 0x22, "ba2aba37d0f983859d00c983815de12083b293a5a8907e638ceb5823a6571c2715451c115dc0aa039f970b1b9db51c8d6d2406b4f1820cf747940e4d10066c44f58bf59e67621c62807b07e322ea0967d9"}}, &(0x7f0000000680)={0x0, 0x3, 0x86, @string={0x86, 0x3, "42f3717cd12083f3820772bc1672f4b7687c0e30d12094e89190dbae30694e21c354687113db85b3203d59c1cfc67a89fca3846573d95d6fbfa438c535853d270a3998d3c32600399e29c415df0a5a3c895a1dab00e69d4b1c604cc2bac644a61b9ae1c708c85bad83c450ce1f4754e9c32568b36aee024b81f360f0ebab31eb9dffaa6c"}}, &(0x7f0000000740)={0x0, 0xf, 0x19, {0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0x6, "304dd595b706e3eb000549aa22525b1e"}]}}, &(0x7f0000000780)={0x20, 0x29, 0xf, {0xf, 0x29, 0x6, 0x0, 0x7, 0x7f, "2fefb53a", "ba4bb271"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x1, 0x1b, 0x51, 0xfe, 0x5, 0x6ac2, 0xa251}}}, &(0x7f0000000c40)={0x84, &(0x7f0000000840)={0x20, 0x0, 0x1b, "1fbdbcae010c40e0bf6a69b88ffe8c6262104f4202c7f25cce9b7a"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x6}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x7}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x0, 0x4}}, &(0x7f0000000980)={0x40, 0x7, 0x2, 0x6}, &(0x7f00000009c0)={0x40, 0x9, 0x1, 0x5}, &(0x7f0000000a00)={0x40, 0xb, 0x2, "ce68"}, &(0x7f0000000a40)={0x40, 0xf, 0x2}, &(0x7f0000000a80)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x17, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x19, 0x2, "71f7"}, &(0x7f0000000b40)={0x40, 0x1a, 0x2, 0x1}, &(0x7f0000000b80)={0x40, 0x1c, 0x1, 0x1}, &(0x7f0000000bc0)={0x40, 0x1e, 0x1, 0x7}, &(0x7f0000000c00)={0x40, 0x21, 0x1}}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000c00000/0x400000)=nil) (async) syz_usb_connect$lan78xx(0x5, 0x3f, &(0x7f0000000dc0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0x424, 0x7850, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f0000000540)={0x0, &(0x7f0000000d00)=[@nested_amd_set_intercept={0x181, 0x30, {0x2, 0x2, 0x9}}, @cpuid={0x64, 0x18, {0xb, 0x407}}], 0x48}) ioctl$KVM_SET_CPUID2(r6, 0x4008ae90, &(0x7f0000000d80)={0x1, 0x0, [{0xb, 0x4, 0x7, 0x4, 0x6aa, 0x0, 0xfffffffe}]}) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000e00)='syscall\x00') pread64(r7, &(0x7f0000000e40)=""/15, 0xf, 0x4) (async) ioctl$KVM_RUN(r6, 0xae80, 0x0) symlink(&(0x7f0000000e80)='.\x00', &(0x7f0000000ec0)='./file0\x00') capset(&(0x7f0000000f00)={0x20080522}, &(0x7f0000000f40)={0x200000, 0x200000, 0x7}) (async) ioctl$XFS_IOC_FSINUMBERS(r2, 0xc0205867, &(0x7f0000001680)={&(0x7f00000010c0), 0x1000, &(0x7f0000001100)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f0000001640)}) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000f80)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000fc0)='./bus\x00', 0x0) (async) mount$overlay(0x0, &(0x7f0000001000)='./bus\x00', &(0x7f0000001040), 0x0, &(0x7f0000001080)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@index_on}]}) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x3ff, 0x2}, 0xe) (async) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 6.680039216s ago: executing program 0 (id=46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1740, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=[@wrmsr={0x65, 0x20, {0x40000000, 0x3}}, @wrmsr={0x65, 0x20, {0x40000001, 0x3f}}], 0x40}) syz_usb_connect(0x3, 0x38, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x91, 0x8, 0x31, 0x20, 0x5ac, 0x1402, 0xe9d2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x26, 0x2, 0x6, 0xa4, 0x20, 0x1, "", [{{0x9, 0x4, 0xfb, 0x3, 0x1, 0x23, 0x58, 0xd7, 0x4, [@generic={0x2, 0x3b}], [{{0x9, 0x5, 0x9, 0x10, 0x10, 0x3, 0x7, 0x8}}]}}, {{0x9, 0x4, 0x9, 0x8, 0x0, 0x52, 0xef, 0x77, 0x40}}]}}]}}, 0x0) (async, rerun: 32) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) (rerun: 32) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2200, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="d8df7e23b3b9ce000000b807000000ba000000000f301b8154fea900b9b60a000080321100c4e28ddc8dcd000000c182fd3f0000c850220000b801000000b9a6080000b9800000c035000800000f30ba000000000f300f300fc79d53bf0000c4b9e16dc301012202", 0x68}], 0x1, 0x5c, 0x0, 0x0) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000002c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000300)={[0x4331, 0x1, 0xe3, 0x101, 0x5, 0x6, 0x37, 0x101, 0x8, 0x6, 0x100000001, 0x2, 0x8, 0x5, 0x5, 0x20000000400eee0], 0xeeef0000, 0x80}) (async, rerun: 32) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async, rerun: 32) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async, rerun: 64) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7fffeffffffffffc, 0x16, 0x6, 0x9, 0x9, 0xcf, 0x0, 0x4, 0x7ffffffffffffffc, 0x1, 0x0, 0x3, 0x8, 0xfffffffffffffffe], 0x0, 0x1019c4}) (async, rerun: 64) ioctl$KVM_RUN(r3, 0xae80, 0x0) 4.065607503s ago: executing program 2 (id=52): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r0, 0x0) r1 = socket(0x28, 0x5, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$tipc(0x1e, 0x5, 0x0) listen(r3, 0x3) ioctl$int_in(r3, 0x5421, &(0x7f0000000740)=0x521f) accept4(r3, 0x0, 0x0, 0x400000000080800) r4 = syz_io_uring_setup(0x7e77, &(0x7f00000002c0)={0x0, 0x37b9, 0x1000, 0x10000000, 0x2a3}, &(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000400)={0x1, &(0x7f0000000440)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r5, 0xc0502100, &(0x7f0000000480)) syz_ublk_setup_io_uring(0x5139, &(0x7f0000000500)={0x0, 0xdede, 0x100, 0x1, 0x38d}, &(0x7f0000000580)=0x0, &(0x7f00000005c0), &(0x7f0000000600)) r7 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x316a, &(0x7f0000000640)={0x0, 0x6656, 0x10000, 0x0, 0x1de}, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000240)=0x0) syz_ublk_add_dev(r4, r6, r7, r8, &(0x7f0000000780)={0x2e, 0xd, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000800)=@new_dev={0x2, 0xbd, 0x0, 0x0, 0x1000, 0xffffffff, 0xffffffffffffffff, 0x0, 0x9b}}}, &(0x7f0000000840)) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r10 = dup(r9) ioctl$KVM_GET_STATS_FD_cpu(r0, 0xaece) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) prlimit64(0x0, 0x7, &(0x7f0000000280)={0x1, 0x8}, 0x0) write$tun(r2, &(0x7f0000000240)=ANY=[], 0xd6) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x1) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x16, 0x5}, 0x8) r11 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r11, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="640100004a0005181b01ccae12fb00000acc"], 0x164}}, 0x0) 3.580455493s ago: executing program 0 (id=53): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b969080000b80b000000ba000000000f3036410f7945000f01c4460f08b8010000000f01c166b821010f00d00f0966b88f000f00d80f01d1660f3a0d5226ac", 0x3f}], 0x1, 0xa1, 0x0, 0x0) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x3}) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x82c82, 0x0) ioctl$RTC_SET_TIME(r3, 0x40187014, 0x0) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x20241, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b969080000b80b000000ba000000000f3036410f7945000f01c4460f08b8010000000f01c166b821010f00d00f0966b88f000f00d80f01d1660f3a0d5226ac", 0x3f}], 0x1, 0xa1, 0x0, 0x0) (async) ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r2, 0x4068aea3, &(0x7f0000000080)={0xbe, 0x0, 0x3}) (async) openat$rtc(0xffffffffffffff9c, &(0x7f0000000100), 0x82c82, 0x0) (async) ioctl$RTC_SET_TIME(r3, 0x40187014, 0x0) (async) mlock(&(0x7f0000ffb000/0x1000)=nil, 0xffffffffdf004fff) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) 3.465293814s ago: executing program 1 (id=54): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}], 0x58}, 0x80) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000400)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000500)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, &(0x7f0000000540)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f00000005c0)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x6a}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe7d, 0x2, 0x1, 0x26d}}], 0x1, 0x0, 0x0) r5 = open(0x0, 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000000c0)) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000008c40)={0x78, 0x0, 0x0, {0x2000000007, 0x0, 0x0, {0x4, 0xffffffffffffffff, 0x55, 0x51d4, 0x0, 0x3, 0x2, 0x0, 0x1000000, 0x4000, 0xa0000000, 0x0, 0x0, 0x0, 0x0, 0x1000000}}}, 0x78) r6 = getegid() getsockopt$inet_IP_IPSEC_POLICY(r5, 0x0, 0x10, &(0x7f0000000840)={{{@in6, @in=@multicast1}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={""/10, ""/2, @loopback}}}, &(0x7f0000000140)=0xa5) write$FUSE_DIRENTPLUS(r5, &(0x7f0000008e00)={0x1e0, 0x0, 0x0, [{{0x4, 0x0, 0x8001, 0x8, 0x10001, 0x6, {0x3, 0x3e5, 0x1, 0xe223, 0x5, 0x3, 0x1, 0xfffffffd, 0x2, 0x0, 0xffff, 0xffffffffffffffff, 0x0, 0xa, 0x1}}, {0x4, 0x6, 0x0, 0x6}}, {{0x2, 0x1, 0x3, 0x7, 0x8, 0x9, {0x2, 0x2f1e, 0x8, 0x401, 0x8000, 0x7ff, 0xfffffff2, 0x3, 0x2, 0x4000, 0x5, 0x0, 0x0, 0x9, 0x6}}, {0x1, 0x63b6a8eb, 0x1, 0x200, '/'}}, {{0x0, 0x0, 0xffffffffffffffff, 0x7, 0x7, 0x5, {0x6, 0x6, 0x9, 0x4, 0x0, 0x8000, 0xe148, 0x6, 0xba67, 0x2000, 0x4, 0xee00, r6, 0x9, 0x4}}, {0x6, 0x6, 0x0, 0xffd}}]}, 0x1e0) quotactl_fd$Q_QUOTAOFF(0xffffffffffffffff, 0xffffffff80000302, 0x0, 0x0) unlinkat(r5, 0x0, 0x200) mkdirat(r5, 0x0, 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config\x00', 0x1ff) 3.333484978s ago: executing program 0 (id=55): mkdir(&(0x7f0000000000)='./bus\x00', 0x1c0) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f00000000c0)={0x1, 0x0, [{0x0, 0x2, 0x1, 0x0, @irqchip={0x1, 0x400203}}]}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) getrandom(0xfffffffffffffffd, 0x0, 0x3) r3 = syz_clone(0x20100000, 0x0, 0xffffffffffffffcc, 0x0, 0x0, 0x0) r4 = syz_open_procfs(r3, &(0x7f0000000380)='status\x00') pread64(r4, &(0x7f0000000600)=""/59, 0x3b, 0x40000000009) getsockopt$inet_tcp_int(r4, 0x6, 0x2d, &(0x7f0000000640), &(0x7f0000000680)=0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_usb_connect(0x3, 0x3f, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000954c53400d051b01a46f0000000109022d00010000000009040000000202ff00052406100005240000000d2402"], 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000700)={{0x58000, 0x5000, 0xf, 0x0, 0x8, 0x4, 0x0, 0x2, 0x0, 0x8, 0x4, 0x40}, {0x25000, 0x10000, 0x4, 0xff, 0x1, 0x9, 0x0, 0x5, 0x7, 0xff, 0x4}, {0xa03a19760224864a, 0xdddd1000, 0xc, 0x5, 0x4, 0xc4, 0x0, 0xf0, 0x6a, 0x3, 0x98, 0xfd}, {0x1, 0xd000, 0x6, 0x0, 0x81, 0x0, 0x9, 0x81, 0x8, 0x2, 0x5}, {0x6000, 0xffff1000, 0xf, 0x1, 0x0, 0x4, 0x7, 0x0, 0x1, 0x3c}, {0x70000, 0x50000, 0x0, 0x78, 0x5, 0x40, 0x2, 0x0, 0x3c, 0xfe, 0x5, 0x4}, {0xdddd0000, 0xddde1000, 0x11, 0x3, 0x4, 0x0, 0xa0, 0x5, 0x0, 0x3}, {0xeeee0000, 0x41000, 0xc, 0x0, 0x3, 0x7, 0xb, 0x40, 0x26, 0x0, 0x0, 0x2}, {0xdddd0000}, {0x30000, 0x2}, 0x80010031, 0x0, 0x0, 0x23c, 0x1, 0x0, 0xd000, [0xffffffffffffffff, 0x0, 0x40000000001]}) openat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x143142, 0x120) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1d0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f00000006c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@uuid_off}]}) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) r5 = timerfd_create(0x0, 0x0) timerfd_settime(r5, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}}, 0x0) pipe(&(0x7f0000000880)) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, &(0x7f00000008c0)={0x40000, {{0xa, 0xfffd, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffffffff}}, {{0xa, 0x0, 0xffffffff, @private0, 0x8000}}}, 0x108) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000a00)={0x0, {{0xa, 0x0, 0x6, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x3, @local}}}, 0x108) close(r7) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000b40)={'syz_tun\x00', 0x101}) read(r5, &(0x7f0000000440)=""/169, 0xa9) mmap$IORING_OFF_SQ_RING(0x0, 0x10001, 0x1000000, 0x20010, r4, 0x0) 3.212784671s ago: executing program 2 (id=56): r0 = socket$nl_route(0x10, 0x3, 0x0) sendto(r0, &(0x7f0000000000)="3000000024000504000000000000000000000000010000000000fffff1ffffff000000000b000100636c736163740000", 0x30, 0x0, 0x0, 0x0) r1 = openat$kvm(0xffffff9c, &(0x7f0000000040), 0x41, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x10a}]}) lsm_set_self_attr(0x69, 0x0, 0x66ee0bd6, 0x0) sendto(r0, &(0x7f0000000100)="6c0000002c0005040000ea0000000000000000000100000000000000f2ffffff78476f4f0d6ed37ff28ec959e6030000000a000100626173690000003c0002003800020008000100010000002c000200280001000000050000006b6d7000"/107, 0x6c, 0x0, 0x0, 0x3e) 3.11696861s ago: executing program 2 (id=57): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0xc, 0x3ff}}) r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x8, "7f28"}, @local=@item_4={0x3, 0x2, 0x0, "36a30100"}]}}, 0x0}, 0x0) socket(0x10, 0x803, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_team\x00', &(0x7f0000000100)=@ethtool_sset_info={0x37, 0xc, 0x3ff}}) (async) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x16, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x20, "", [{{0x9, 0x4, 0x0, 0xd, 0x2, 0x3, 0x0, 0x5, 0x0, {0x9, 0x21, 0x1001, 0x6, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x7d, 0x5, 0xa}}}}}]}}]}}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, &(0x7f0000000080)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x8, "7f28"}, @local=@item_4={0x3, 0x2, 0x0, "36a30100"}]}}, 0x0}, 0x0) (async) 2.561677997s ago: executing program 1 (id=58): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_setup_io_uring(0x7bba, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./mnt\x00', 0x1ff) mount(&(0x7f0000000500)=@filename='./dev/sda1\x00', &(0x7f0000000540)='./mnt\x00', &(0x7f0000000580)='tmpfs\x00', 0x8410, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mkdir(&(0x7f0000000100)='./file0\x00', 0x60) mount$incfs(&(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400), 0x80, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x8c) r3 = openat$incfs(r2, &(0x7f0000000480)='.pending_reads\x00', 0x22000, 0x1b4) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x40046721, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(0x0, r4) sendmsg$ETHTOOL_MSG_STRSET_GET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x20, r5, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x200080c0}, 0x20000000) socket$can_bcm(0x1d, 0x2, 0x2) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f00000005c0)={0x14c, r6, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x4bc}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6a00}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x2c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x10001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fffffff}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xc5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x324}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xd8cf}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x748f}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4798}]}]}, @TIPC_NLA_PUBL={0x34, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x1000}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xca4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x4040}, 0x2400cc05) write(r0, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24) 1.499908796s ago: executing program 1 (id=63): fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=@md5={0x1, "bec3bfd2bdfc963db628900469c6df37"}, 0x11, 0x2) r0 = openat$userfaultfd(0xffffffffffffff9c, &(0x7f0000000080), 0x80000, 0x0) ioctl$XFS_IOC_COMMIT_RANGE(r0, 0x40585883, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x6ec, 0x1, 0x8, 0x1, [0xb, 0x10000, 0x5, 0x4, 0x4a]}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140), 0x20800d9ef4c90a45, 0x0) write$UHID_CREATE(r1, &(0x7f0000000280)={0x0, {'syz1\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000180)=""/229, 0xe5, 0xfffd, 0x6, 0x61, 0x80}}, 0x120) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x4000, 0x0) statx(r2, &(0x7f0000000400)='./file0\x00', 0x400, 0x400, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r5, 0xc0096616, &(0x7f0000000540)={0x3, [0x0, 0x0, 0x0]}) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000580)="07f176d70e19c70eaa9e6e110f57e48386add8612a700fc0a968128becc0a7d1b15464ce39bea57ea96d20de2d024fc3c91669d9641a9cac6529e6acbf670836da80356267f1916412d209b93474d00d2739d32779f060c2b8b0030b749572aa95f15bc7e088a2539e488e1222274e049fb3c1c02b9cb330a29999448e9c9f7bd071dc0a592fd435918ad05759727ff3429d0de3155e752fde144c936807c2bfae66e11261d3d481fc25e77a63334349096aeed6ec35a05fee3ad783e1a23ff39e45bc9bd5ab972bad17778befd7bb292854848746b67b1a5b") syz_open_dev$hidraw(&(0x7f0000000680), 0x6, 0x62940) ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r2, 0xf505, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r6, 0x0, &(0x7f00000006c0)="2f33c5cba76c632e2fb9b504d15d721e9f7d0af811546a585fb11b07a45135d062026876ff7fea10d235ad014ab66a60f894c5bc96e12b95db59775896241bc28ca57ac20fe4594e995e5c19c40fff29916405a6d39727346ecd64adf0afcc7225f9f0c0e1730c577622b48c05083d7be16f005b77f0745795dacc53c80cd4daa2e990d103d05c23f16f8e0595ad6c248254") r7 = syz_open_dev$mouse(&(0x7f0000000780), 0x6, 0x404042) write$UHID_CREATE2(r7, &(0x7f00000007c0)={0xb, {'syz0\x00', 'syz1\x00', 'syz0\x00', 0x20, 0xdc, 0x0, 0xeca, 0x1, 0x42, "8f1337998181d30ff7e086a2626b1ee90bdad32928df52d07a920245162da298"}}, 0x138) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r5, 0x4058587a, &(0x7f0000000a40)={{r5, &(0x7f0000000900)='/dev/input/mouse#\x00', 0x20000, &(0x7f0000000940)={@_ha_fsid={[0x5, 0xfa]}, {0x3, 0x2, 0x7c88}}, 0x8, &(0x7f0000000980)={@_ha_fsid}, &(0x7f00000009c0)=0x400}, {[0x60, 0x0, 0x80, 0xb7a]}, 0x9, 0x20, &(0x7f0000000a00)=""/32}) r9 = getpgid(0x0) fstat(r1, &(0x7f0000002dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000002ec0)={0x0, 0x0, 0x0}, &(0x7f0000002f00)=0xc) read$FUSE(r7, &(0x7f0000003100)={0x2020, 0x0, 0x0, 0x0}, 0x2020) ioctl$NS_GET_OWNER_UID(r7, 0xb704, &(0x7f0000005300)=0x0) syz_fuse_handle_req(r8, &(0x7f0000000ac0)="149babe49e6e694e93ea85787178551b7217dffb0cacc1a1d62017fde3022e48423742947bf5e3d6d91658663f9b2ccf80939d72b49897b5a3ff2273f380ed6c085e4b8d393768ab8e46e7461c26b60359faced825e9e744295bf948b2ff3d7d281fa7a22d00cbcab37cc68004f55ccd81165008ece9f529a242d4e1d7a28e6001a1740b6d027df8f77144bae5ac7589d7e1c609ca87cd8ca7fe73a48409cce855623a06727db405f40cbc926bb647ce4c1ecc8e23dba6a90e478d81fb833d326ebde6bb2f2b1f1a74aa5151de258bafd7a6024ebd80cfbc1597e58a0ed6fd595c11d4be04c53eed21848c8c4d80a5051aca26967113f5d0dc822413f5143e118f88de5ef9841abb9409643c3519869415769e135a9dee545f661f327abc2ec07c6aaba5b8a28dec37b17a8e557926490bcfdcbc578ada3d247374b57f04ab2cf811f7a2198830bfea11cd8621e32fb9de2e583b4e1aaa750204689cd2212ef47e3b6acf349cd95c9cbf35c59c7a0b1258cb09377331d128eda5eb548699a3c8f2036b27e7f189ead781c3aa39514e25ca063858d5cf02b2bd163f65d13544af2d13537e4e7518e4f85311f6119056e135c7bb0540b260d9720290beac9b297a09f69586a538315516e85c7160f5a4cd45a556673c023b16fbfb4cb4bdfd0e968aaacf2a2d0f504a4f18dcfbb8b06fc4beb6ec25c6f341bfb9dc3418acc7473d8cf372e7e16994f2ce593e19384ceae65e68a77305c3c0a5fb58afb7f8cbfeb55a8700f0d53c9ceaab51156a200064116a38a06b4ca898563987a572e0b501c13cdc754845c4372da88263b7951e75938c4d126b686ac3d9710b4041bc802843558912f7aab8693e60877dda14283da10b5e37767cf63eb07db3bc18c8cac34e499a60842d5707aa3f460b2bf0b269235c8f7620c07fa62ceafaf5b72a27bd57841694718f3d7a90f9a55c5c8c88389ea9fcec786735ba413ff29cc3f54f0e7f00dc6ae9050c7d1456388395b40969aa915afe816f9a61d498ebca3313ef55a56fb9b1c369bafb32883fb632603286e57750b399b2fb9cf848c2bc61058498c426f8bc5fa37af836cc766f9fcef495935b588195c38813a33a5cda3a9d767e59a34523d69e24de34504ca98ddc837bd65b5dd5bd71a5f9b18190dc23401d5ac1223ff6a5308b95badac614f2f286ba1c8b6272e65c3b9413afcd9659cbd330051c6aab0cef822557e3d647765a43143dbaf39c6d94980cc9a580baf79743e8ba0cb704ef180ae37561f7421292ee14ce1e2557b70e07952b1eb4fb8a309bde613553328fa8f03e903eb781169a5ae19b85dc51e28b3ab37d9562422e7ebb7db7d914cb21154191560175b8393e0161674a0914dd1ad7356bb9428d092f57d15baefc81e572f98439555b960385621520aba71286936c6cb849c8a58767a4e2b3f9cace010ecae0954c59b9cef15c65ce8ce1fdfd1203546b385d341b3af86f9f8af1df27cdf4dd2a8c96cd3b2f4143c4fefaac60d9da3bd9309d00668aeb1905802a8703cdc2ef48ca5e8c94d3b0e118770e65bd98724b4f960fdec1ba39c3460ffd495450f02d636ceee7cea6b6ba8f6ec4ddb0d0af2820b0928d404259f86fc4bbe472a93183b81abaeadaf8fb5453f2ac235097b1601dfd066922c794b050aa936e9d7c45353dae826b91a9a62f6baf48bf9bf96ccab09c7ef83d96c29e362598d4fc9af4791305133d5656bc5c8815118a471753f10e09be8e80030150aa01ab8e4235218274b1c46d7dbc987b2eeb241d416519266e334b13c02b42b99a364018a2c30efc665ea52532109f438cafe5433637c80c2087e91daf1d00db65abf6cb030a8f17aaa3bcf2e925a4a301f988724fc12fc9751556cae12b85e6b37db0bd161ad40dc419e6cf619911d0915534c439fe6abb380b86bf92186c750811346e083791a917c505aeacb64fcd1f9f91930cdc649468bf47298445240f5ed4919b7cd5aee4786c5a1f6ac3bd2f53cc9a785518a3e30549f6dd2bf853bd7792e95254dc2d6b3be311f95ba882b03bb31d7acad81059e40b44db3764d9ab4cd65a55ae1e1fc4ad86e3f55380aa00582ac1056995a7bd1e94bf0bd4993f7668401900a251fbc953064bd0206f17d06ed059639c4aca4da028ac4f9e199bfab0821eb4c532a3a96526b461ad1b0cde3f778822a3dc778b92c8a0d4a4ed8d561da07b065978c91f0e953f225bb17f67266fc0d4e5da40fad0ec31c52140f7ff51fd7b6ee54846681fd1ac5a4f4340a5925a90365082878d568cbf6e37067cc5ca5c2436d204deff0791c554b1ee7e3a02ea0e32800b8bfde174fa21e9a525ef57107eb96101ba8e20fe8d8259c589e80e5880f27457118815166dc1aa55ddc3af7e539d461707ecad63d68bb1dbda6b3586f7a6ebc6277c014ac1d3b4956cc8c039fd72cabb0673c6d3f21381ed1f691a10b40b255e463f743f142337ac7919c5130e34af9a185fd8d87f9a04d0ee926915636a9753b218c65a6f6e98b51f687b013ef6dfe27f08fb22943df9444906a9f841b9ae32fc5446e31ef1f770b94203d74b84bd98568b91a505f62b6049166c2e2ac21eac69d729cc23c0255d012a69d1fd020a065cb5ab955aaf81babc25eb761bbdd3fe6fb59b6ae46d8592fddadcd37232f95e7feeebfbb2f17fd6490874af9f5b6d9b11fe86f0af7472b2cae4e6f9b5123d0f2336a19d66e4468d4826e8e083ce7a91cb2fa477c96faddeac3c66be16970c4964d5a2fce6ce5bbb266e19e4428d9bb0d23ff7332368a41e51e27c69f4ffde7d6f3e4207f96e8904638b6852cd0a4f2f4f6e330dfc7758a6fd7d3dabab31e0d443bfaccf5f7ee7f5dbcce55f8c634c527d1ea8cfb6aa92578d66255268b747c5bfeefbd853ca171a655b1c997b08cfef3b631340fdcba2d3ef96dd044eefd8cdf6a9da29d97172a271116cc5dcb41a6456741f51b0da906ad7b256862ecd141a75bcde749d442f3d2e6ffbc2359a4cd454fddd58e5f8c91db56ca70a2ae0ef76a8d4db50cc928891713d5264f5160f71ea11b68bcf56df0d2d66a8f0b6f8d336bb1f94c6130b25f219f053a6cd9aed7d09f323d26388253e8c9924644e6817c1f9eb0150d119b2ee843f96f7f4671a94d6ba61616a1dd5d780f0ca3e1a15927aafdad1bd88d457225853cc8b9c740b6a7a51b23d29e213aff3bb9ce70b2e0c09be706dc190553ce18f0bd6be9e2088f15c58d61a9009d4c4b88b4a39fcd27b543f2a827e5a68866cc3c2ec1cf8547e6e41c139bdab086083e326951a0b46c3d563023706537fb9c13c0aa6910f734e1e0d6be9ee4d101eebbc36257bf98c4e32c32e4d9eebb4aa7ffd40c8b9f1c621c7323c164de336f94fa5a97139b9147ccbdc4f1f7295de3c13245e65e8c4d812eccbeeb8fa41c40342d475149de9b3ae65fc7bb6bc82fbb729239a94d3b2d5a53c0ee4ecb7863869271c83c151a8d8a14a32b5897d81e543e163780f3f22226786769556e5bd56abb0c96012092aeec59982c1b61453eaf41edff5a06a9a87b1a37836cb8131fb8621063f4c829ed9842ea01bef1921706f5bd6dc9b1fb586c0d73962e736303e34e91ef5caec55aa69ecc6fe54bce9ecc5fa33d26f8cc698834d93365ea5e7ff86d74f402ce11cd6d1eeac84c8322b350cc30f4b7962245a751343970f337dab25b63f79b652c2ef4791deba3a486d3505fab8a295b1de45decc516bfe03497d0b38e522933171388be0b52d146a18fa505faac242ec428804b82ff08f1c3d38b12ca90162b3d89ca60996a518916bb4667454413af151031704da1bcd669613658edb7921c3a0c7ef1bf9ec5989fcb57697971845f7ebf5acf547100d6e764b02f84d0b823a2012990f5b52e5227746e81ded1bc5081f3a5fb0ab394d866a32f7228588e556636dbe6cc30dfcde8c57eea01159e51a1c8c578e22c3ed52a147aefcf5fb40ea88cc48b9c33ab3b950e32cb829b4edbf53703f40a72860bfdabec346ebfe108aa15912322765f4e77a3e21df2b1bccc85627404b405fc2f1153fe5ff7eac32859131643383b158a089ba8db4c2153754734ae1a4eab4d4cb5241f9be8502db9284599a1df7d3ea596bd0eacefad23f8b85efa6cda1efebbf72787e34863fdc4e33065d68ba66f7e39bf6faee364f92712726bbb4747f9466a28aa023aa79bc347da036db3327bab81b419363cfa4331289c18e21570f3a3cbff6041c410851ff0b67c089456682a34db25e2656b3f4461333fe64fe144c27e67a88bc9202b9aebbcd9f5c2c62f5d081215b1abc1a5b982c08aacc50afc48317f67f0b23d3ab8ef2bed68a43ab416f37e4281175043b620cf053be4e1920710ffc94f6193cbd17ae190ac2025d3cb3a9cedda33b8b68aa1153fc8b69f2e726e30160271e779e6aa2da56e1672f78e462859bbbdc19cce80c51099e966be889debda4abaa8d028dffdd37a8a33e71beb7183b2d90f58fa22a07a72d545678d158f2a8390e27b35c6256de53516a2217f57f3c8e8000a101a9a819a1ffca9a748ec1ac3967eca255616fb89a6eaec8019ba88458c5402a9b7a5c6c8747312b04362679788662d5a54b15a2444f6b7952371056afde83f49487101ff07ad583c0dcffdf0727b967cde3b93c940916a5b8db4deedcfeccf40bb2d3d17a77f9c98ce3e6b03794ddddfc5f1b23a3b9a939c1388d8d162369cb96839fb41e9b511ab7ba3add761df73f5c74a5ffaf10333b97b7f7198212de44dd510dc9b5fc4fe3a7e6a0f0622c21e2cb18cfbfc09866d1737dd1a172810391baf6fa6878a455821a2b108190b71c0354b5540accd94a24386c0b76cd60974c55fd3e1dded003fe4b7c7b5e262ba17f31fb3c3acf93493df31079d1d355daef0984a3a21eb2145c3756da7fba3ab28533320ddc9d52586a232f1c756f4f9f40159f4313a24f437a1a4395660a5ba1d2aff4147a635b318a96d420f5734bc5ee5a95f2e243333a2beccbb645dceebad1289ae578da5671b81fb6d6ed1557ba2b8ef39e6db0149e7d48427c709956ba0072abe8ae04a132b1e4cd774a7fdbc8f067bdee3d7bb3f3e6f9b73da9ce1e7468d6fd4429f9841df5686919603329113e528f7309fec35d5b221240b4ab84cb8d00aaf169f517f11f64c841bbad7c88b90ed4c39c0f705de9e86afddcc5462c928479cd84ac24e6c4b9fe5322f695f27f1044081259e5f9bc34340002900a1eaffa6f07011f3b0db7a71a591e99b2934c9184f8c7a3c27a6f21f471a1ef4af34592e4da84094e2bf8bebcf2965bd4069b91843bac73093be249e1d3c81ffc522c3ff2d6ebb7e1c00131327fc2f700eb44fcb69c42cfbad403e3897d5a049bfe2250b1734534ad5552206b0845c5dc90bc7ad0b48778a4f0e647e063105402f90f8dfdac38dc5fdca018f0c7d536d980557bce1870f536cc37e80a47f0d0e2b16d3b7c5f328de72c461e0a0eed88521309f0e71d34a3cf08ded167492088ed90de210bcc0813156915376f011db27879d63fd37c6be1efe07e034b79784f8b5a84192af86756b9a91e2175f713002e11c315232deb1ffe3f9d7ff4dcc93feed44ef4b544b7238d2191742c4d82146f4efb000839bdfd6e1eb49d480abc4bba945f646144b85f0993eeedf395e423f3dcae3c8c4d53295ed04523ce3e834d77d85b50e58f0785be2d734e5558a128b748a72a7e0fb5bbbadf0c7dad91a6ed98801c4038f16bd518f7c7135d5a50b0df8a08a6f45392f8480a8da9fbeac2807862c4ee88ad51dad10f14166355d360f4420fafd0114f871fd9f7e3ae57d130d7ab304a8f497ccb26c1630b0800bb3b96d00b022d5fa366c8121812d44feadb43243ba3d65ff88b15882794a8555e7743181fd2c0797d1cb192b158b3e09b736d79eb822881810d14a0c44c7a95f954187cc1420767731a4aa0a3d65f1fc6327497e8c1594c27703df3a70798540ff3512d26de67bf427a80e843a3b4e0f907dffc4ea6f2722ed4ef8e837dde04b839d374a23327fe5429bdf37b58eacf5a2a4f8560270a10fa7710238a4477f0341840f7e8a059f8e9ed7e7a62a84f57e8ab47664317327f2ff0c9718726d7cc2a5881e411a13800952d508719bb85fe4a9aa3241dec81795de02341c8499b9145978613f3482934215a15b359f5e92b75cfb221820286bbc83048200b2a63704ed21c1ba8e7e7d118369f2aa4ec896304563ab821bc76739351bc1a33831a1914c76cff9f0c575dd89c7cfccf08f8b8aa607153a51c7ff955ddf952aba11f881674f4c3f4b99b9876b7d94b89cf936b65db0585b73ea23af45a4790beade44ca719457e88cfde8ef0f6791bc50f50b9ddfd84304f32aa70d258e3961fb3a5d1937180b63c22235e541eb56d92cef657544393578dcc2c8f540dd2db14f150fdcf893c129b8354f530f8b7ada37e20413023ed8feb9ee5101c770e0fee8ef6d26b57fa43674b50ef7d9e0f7d0ed0309317e5ece04973e5f1609fc03f740c5169213d775261a939d4a3bbb0696497881edfbd6fe263d9d830b9df888901ae4e8b542d185a4b01123b778310549eb9bb095ee752395be0d852a7312e673d0247d913e3e0425f1610086cdc5b49c32f6edd9a8c2930ed28baa937a9ac9112335ecb189ea38102762ece8075b7f03559f9f1b9ee20240e830218649d793d5791cf4ea6fcac1188e59d45a0bd6d5fa392fccf28ea3d81215e2fd71a067ea1b06d64ae312016a3020fac288c84ea95eed394404400ea6b3964a3a46b68bf7aba0d64efab6cc0559994349fa99ead76b27411172f442124d3f5d07c666dec5eb43bd330348150146d535d288b9d5f52b3a26fefd94b5449e95abd7fc46c2c92faedd4e9ccea598f147171391a1d923c985edcac9371c3d7796bba334cb3df3baddc87bd371fb45882bcd1c11e3859ea31510536369b945b717e80412c40f5977a7585e661dfcc63da94e16d7ff8b84722c2009174b708fe2fe08f6de98f1d24935fc0b374219f1d79165cdb034c5c0586fc5ed49acabf26838831f7fec995c21a98ca47c3d60ac80bf5551b4e03c71e29e0f5d4a4e0b5cdcdfe5931975dd7a1e3bdac119695e9dd8d79bb087396034da9a9250f0fa373bcbf8208010585d796360d5cabb539c3de25d4fd1a5c45b448494e78cacab0f177933cce29faf02f6c2397c1b83075c3a9f4b283c172e089b16e04f4b12db8b2a04618c330806f337f06597402615a01916b0cb8119d79dabf61f144282d5f42e65b4000c647edf9a72ee85cac35d0845e5bce61ea2c036082b9cd1db8e024afa0f668cded382c4747792823718e30dffca7c16dfedf3bbd0468ab089ccb4ec016d7c086410c40372d54742b22cfeb0969a769b5322999f982bb1b7da070e30303f6524716bb8cd65eb3d587b301b3240b2795c4a87b0e1d337cd6a2282f150f66a9e347fc4c7d6a052070ba08b7852314e3de07c50ef2a69bd0519a479dc0c6d7054822f3b12027158107743eadb3247632ee508976bc760def30ff1599d55dd16228ec61b8d5820bda199c1ec677c27a5d31816fe66750d2ff2067eaa36ef6e40724899dc7f1813a1fd3b326d2435bb5aff24050b56a0421539a99b9034bc63af50fb1247a5cf395ccc5e0f094edb5db7b8fe0aa64f563ac1b3f008cf156f558542b4ac758186215bd8dfe523a31381cf35490598b987ffbeae817fdbce379c8566440326a0cceb8f13c94d58725ddd58748faa15e9e7dd08b3020bf9492c283d4619c01e608d5a65f43d8b4c0243b86c0c814654e147707b0b90cbd4f960e968aa8d7f0e870a697a901bc0408fc79e9fa8a51c7f505c58dc821022ec0bf8352f5734bf0552c173afa91040f683ddd3fee612326400e25ae11e0db0f096ddaa8ff63e64e520c7f91a6b977c2eba39e69c7b7433b6480f3aceccfed41ff7b448f78b66318ccbe083490ac32fd7f8c4b845dc32cfd34ca3f2ae345e2c3c946ff1b37b8f446d68c003b2faf464ef2c72aeb0ff2290d692ea43de34590aba0866548184ab8da9a93618743ddf83002b400e90bd7ecbda8e2cad019b23e2b0becd17f35b78410c9be1885545feb7858be74e4d50f76deac45cb2fa93565c135c90c3916880e418f5845acb9e8dc569018f11d52354cc904478a8f747cfbb9d96fc532ee8eb64c92965cf02fd32b9aee2e92b557f7a6b62ca6740e43b29e8852c81250aa81cc5e082c321902f444d119ca292bbbaaa6758a4eafd255783175f26b41d3913678dfb2166dd9839993ddc22e79013dc30c615d7040fb6748e2a7d8fb09484d0eb490b9cf85141da6d8a5c72290286e807c720b7359d8852af3d0bd456450cc80b7dd1d5be0c03158839077edbc310a87426b024c9af06b2ec5df2450998d14fb54e2e3ec3a7f577f6456226301c27a99ba9f41eb6660a8aac79b9ef998070d9475b4ae291ce9a4cdd9106f66a1817176083a7acee06b20ee18eec41ef86af38733f13ba0da98f58a25faafeaa587c9f6327337f30461ecb975cead857145499dfda4e1675c481c72cf36ea118cb9867ee841e5119247d947d1e77e67f7e91a982a11c2fa5e654bd78726ad309e9999a4232bfd85fcbe4a22b4d864dc4dfd8d58ac8c7d5ff40e162e2cf19a2ef2029ba59cc6f42a1e1d938f57e273d1c403aa15b4f4d10408e9fc244ceaa351e404d29ed6a9957e5d4e351fd498654b75859bba70d19e23ad536a8a395b0d9a8552b2f0a6f7ec430af2a00d678dfd5195bb95f0d6957781dd40aae3f1b183c3b960455837b962d798264e44c163d267f37a79ddb2875d4a1ff60cdaa84728e97df6cb3a92a97fed53002e8790a2566e82d93a66bcdec77b0a0f1a663d0bb6ef0a075c1d949d1fdfddbddd8635c6811433bdd282d1cc07987a483fe4e97782ad6e7c1d365ba587ac3876fb5b9eda23bc91c1700b8eb1fffe97e6a6c4c02aa5f24ccdf99177d6568e29089bb199bdefb96ab421a7e6b2834332b6a6277944f156faa033d921b1d308ee698b12e706605f60e09151f22e5d501a4ef1be2a451105871cfb50cbe09b46134b9b9bac9fb3b5a28f869ffcded6c7985f427af1ee638e763130412ffa1f4ef503cb9b002cc64f6e17882acf590d591d8e8b33ea2abb7653d37fa1513405b87d45888c8bc9ac8c0b066efae8f089e8ebb6cd26ea8886628f61faf64fbefab623a521ffaa668d8c3a4a778217b0055fad8558b117089013a08c607cd1bf2a616c763edf45625b4f7d1e03b10078895a5e353d41dd582982d7ae578c2112b76df923f3068088701bb57c1192ea09cfa395dc43d46b0d40c53d02377945097fdf69b7d4bfb385489e5c40542d82b27630261f92c1ab48a7954133ab531b1da688a41e6f1bf526c9629c433e317e03182f510adb5a48d218ed18e65f7992d840ef98f496c2a6a8ad08efa1b525618edafaac5f2223c15acf514f3b33a9caf964d385e282f65256cab08c0389ddcead59145c0c32f88d9a5ab85109bd24f1c3842c76b01de2165dfc7f79fde8339623380da1796ad5772e1b9191dea444a37d6ee63721d6a2bf4fd3fce82b1b6ac7eee1a80a8d2f5b5ab80012dfec3a1e7904f310524d92c03e145925cf357c3712494108a116593091c92514b0c2763a6a624f2281ad7afea5afbf1cfc518b0a137e5dd66406fd9b4ea971ed1281b6a33c6af722a3c463d477c27bc39e7768f4570d858aef841d12ca6a7553a6b95ee9caa29154ed03a5c8882c5cdb5313b57c2022b621d0e302589377d438dfb97a99d705b050a64d6579346b8ea9ae89f1ee2a92d6d7d63eb956ed4b9bfad5e8332cfbb71c04024710bce0b113390670e31a5c4e3d96892c09fc3a44acc451c0dcab8ea1b6477de81e1afeeef9bb99e35baf534e149f7a676f48282763839c744db413316a4c593d1516742ae4be20177da1237a440746799cc79022dd4a2d196d4a64e63cd7acd628308821076f2967160a78875d109edd817deafa8bacf94ed7ce6b1701be4e2aa3e4f93d56301a1fbc5f2af34b3bd94ed464872b124f7ef647dbc80e35807b8505a801db35ab388903ce5342c9a5a8fc767bdc07d61c50fff43ab3826ff1002e64637425b9f272a96a5e6154fcf0892a458220b1ae3489aa9fd78fd88faf44c3ea83e0039389b5f04c64a3a6a9452de922d1867530ccace60237f7aa72408fabfe6cdc35eaf83b2a15b5de71e843239409bb048846546db1c4fe3702d6e1b4f848ff2204a748088ff15bafa7d10752584266ec16db11a1f85cee88933eac93112a15f1d5305225519aaf42ee2b16ab7b60d670447c33f954c1479b874dcae9c970ef1d5bd3694db7f63bf7bdfb99e3decfb5cae2da5978e68b08cdfcb4d4c1bcc097dae67a05a9e2826df2a425a338b8ff1a1315cee70ebf6460dc99d9825daff094b35b28fb7b99600ecaaab6400dabe1606002ed159872a87dd347521cf23bbcb490362da552cd360683f48b1108595ef52c993a6ab4e9e4d5c1b1777d9e0329ea32e0ceaa8515b4b256ecaff4b5425e382c52f1a50a6c9389ce9ac94d0991bd99940239ce4415db59457d3462c5adbdc8d6518990b29913df5770c5d546c95d91e761639967222de521ee23a6c5b751db77f63c86018229c9605ff87855b7d277d27bc0899a93e687815f6b14eb4c6717618ccf063a587d95675ff22d5ebb384087847e82a4dd6e1d95d81ed7f6f3c5ab33ca2025292a6285ddad05788102f8cea3c39d733cd496de57e29b2f3c3004e8bf3d6a1679f796969f5cf07ee04dcf7445f7d3eeff8b6087da21a020fcf97781b791a55514e8e3c5f50682631736db69826871177caf7c20053057f0f974b8a7af1be226f42a9ba21e85b3da3bab3e583283ca548971480ec80dec50cc7267b01544304ca1ccf17dc08b6c2a79bbea601362fe292f0e3ae7cb983f72497f0c9aa06a1f89ce394f8edcb46f3590291131ee9043fb391cf8743454614f008b4c7d439695ec4407fabdbdb19d676ab03a32df0a80f2764ee7cc7009a52661788959ed03486c709dcbde32f39ffabfe9b9434d4b850a304f0e5b074fa216c267763cc8ced8eb3368dca61f6cbad3cf3ef2e8afdb1228b51b85122dafb557d1c468e5e57fd53f6c99c31f72958f2f406646f5beef8f8f6814a6d984ca729bfa40243fb8c12acc43c0d3fc0f27ec8aea6ce895dc8afbf30c0a24db82f0a06642e6eba64c5cc2eafe08b74a1cb90519acba0c938d29208c0976978d464428eb923bc6526d016ad813edd125a8a2904a00bc061b0c3d40abe502dbbb2877cc7ad65a1c4b630177979cd78c0e2e1db432ad05349dd0ce0f7156043fd38367c5778eef1e3ecb28faf8e51ef1b926abd1ff522a767e5d11411b02f8ba50a96ca553aac9e96685d1b08b5e0ad7b6663956afb71f111d5c26d18d814bf6105c675564a87cb29094d7dc37a4432f66cccd25e9e01ff85e9e2b67400e614efd944313808a211a6adfec6114abdee4e67225270b0fa43c3b61a50870d25220447edda97a7ba77ea7828df5cae8e5a90d3977f8d0563281abc33743cfaab1de", 0x2000, &(0x7f0000005480)={&(0x7f0000002ac0)={0x50, 0x0, 0x7, {0x7, 0x2d, 0x1, 0x0, 0x7, 0x9, 0x40, 0x1, 0x0, 0x0, 0x20, 0x325d}}, &(0x7f0000002b40)={0x18, 0x0, 0x9}, &(0x7f0000002b80)={0x18, 0x0, 0x9, {0x1b4e980f}}, &(0x7f0000002bc0)={0x18, 0xffffffffffffffda, 0x1ff, {0x1}}, &(0x7f0000002c00)={0x18, 0x0, 0x3, {0x8}}, &(0x7f0000002c40)={0x28, 0xb2e2562a1275efc8, 0x5, {{0x7fffffffffffffff, 0x4931, 0x1, r9}}}, &(0x7f0000002c80)={0x60, 0x0, 0x4, {{0x5, 0xfffffffffffffffc, 0x0, 0x101, 0x1, 0xc87, 0x8, 0xd2}}}, &(0x7f0000002d00)={0x18, 0x0, 0x7, {0x5}}, &(0x7f0000002d40)={0x18, 0xfffffffffffffffe, 0x9, {':%/+.-%\x00'}}, &(0x7f0000002d80)={0x20, 0xfffffffffffffffe, 0x0, {0x0, 0x8}}, &(0x7f0000002e40)={0x78, 0x0, 0x1, {0x7, 0xd74c, 0x0, {0x6, 0x7ff, 0x7, 0xc25a, 0x7f, 0x7f, 0x4, 0x7, 0x2, 0x6000, 0x1, r3, r10, 0x5, 0x4}}}, &(0x7f0000002f40)={0x90, 0x0, 0x8, {0x6, 0x3, 0x4, 0x0, 0x7d6, 0x8000, {0x5, 0xffffffffffffffff, 0x6, 0xf2, 0xfc, 0xde, 0x6, 0x400, 0xb, 0x4000, 0xffffe3a9, r3, r11, 0x9, 0x3}}}, &(0x7f0000003000)={0xe8, 0x0, 0x4, [{0x2, 0x3, 0x2, 0x10000, ')#'}, {0x4, 0x2, 0x0, 0x9}, {0x1, 0x2, 0x0, 0x8}, {0x5, 0x0, 0xd, 0xc8, 'security.ima\x00'}, {0x4, 0x401, 0x12, 0x5, '/dev/input/mouse#\x00'}, {0x1, 0xf, 0x0, 0x9}, {0x6, 0x4, 0x0, 0x7}]}, &(0x7f0000005140)={0xb0, 0x0, 0x6, [{{0x4, 0x2, 0xb3ed, 0x6, 0x7fff, 0x0, {0x6, 0x9, 0xa, 0x7af, 0x0, 0xfffffffeffffffff, 0x8, 0x4, 0x3, 0x0, 0x7, r12, r4, 0x800, 0x1}}, {0x3, 0x9, 0x8, 0x1, 'y}\x0f:/\'-('}}]}, &(0x7f0000005200)={0xa0, 0xfffffffffffffff5, 0x10001, {{0x0, 0x1, 0xb79, 0x5, 0x1, 0x8a, {0x6, 0x6, 0x6, 0x40, 0x6, 0x5, 0x1ffc0000, 0x9, 0x3, 0xa000, 0x7, r3, r4, 0x3, 0x4}}}}, &(0x7f00000052c0)={0x20, 0xffffffffffffffda, 0x3, {0x5, 0x0, 0x8001, 0x9}}, &(0x7f0000005340)={0x130, 0x0, 0x100000001, {0xcc5, 0xd, 0x0, '\x00', {0x800, 0x9, 0x8000000000000000, 0x7, r13, r4, 0x1000, '\x00', 0x0, 0x1, 0x3, 0x3ff, {0xf, 0xb}, {0x6, 0xd0}, {0x151e, 0x8}, {0x1, 0x7}, 0x1, 0x7fff, 0x4, 0x1}}}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r8, 0x8982, &(0x7f0000005540)={0x0, 'veth0_to_team\x00', {}, 0x7}) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f00000055c0), r8) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r8, &(0x7f00000056c0)={&(0x7f0000005580)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000005680)={&(0x7f0000005600)={0x44, r14, 0x2, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "48ba43a6cafa6daa7c0c9e0b5f49f497"}, @NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000090}, 0x4008010) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r7, 0x28, 0x2, &(0x7f0000005700)=0x10, 0x8) ioctl$AUTOFS_IOC_ASKUMOUNT(r5, 0x80049370, &(0x7f0000005740)) ioctl$USBDEVFS_GET_SPEED(0xffffffffffffffff, 0x551f) 1.480975178s ago: executing program 1 (id=64): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, &(0x7f0000000040)="b8010000000f01c126470f3266460f388144b8d666b8ac008ec8c4c1f95c9500600000c7442400a6000000c744240222ab0000c7442406000000000f011424440f7856c00fc79b030000000f06460f20c7", 0x51}], 0xaaaae3e, 0x14, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) setsockopt(r3, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) connect$inet6(r3, &(0x7f0000000140)={0xa, 0xfffc, 0x1, @empty, 0x200}, 0x1c) lsetxattr$system_posix_acl(0x0, &(0x7f00000001c0)='system.posix_acl_default\x00', 0x0, 0x0, 0x1) setsockopt(r3, 0x1, 0x9, &(0x7f0000000200), 0x29) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.341798752s ago: executing program 1 (id=65): r0 = socket(0x1e, 0x1, 0x0) connect$tipc(r0, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r0, &(0x7f0000000040), 0x2000011a) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)=""/4096, 0x1000}], 0x1}}], 0x1, 0x121, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = syz_usb_connect(0x5, 0xc7, &(0x7f0000000140)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d24010001340000000000010112240201010200000000000000000300003d7924030201010003"], &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r1, 0x0, 0x0) 316.420157ms ago: executing program 0 (id=66): r0 = creat(&(0x7f0000000080)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x2c) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000000c0), 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB='huge=always']) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000001c0), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000006, 0x12, r1, 0x1000) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB], &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000993000/0x400000)=nil) r2 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000840)='./file0\x00', &(0x7f0000000080), 0x18) utimensat(r2, 0x0, &(0x7f0000000240)={{0x0, 0xea60}, {0x0, 0x3ffffffe}}, 0x0) 186.23491ms ago: executing program 3 (id=67): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000840)={'syzkaller0\x00', 0x7101}) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) landlock_restrict_self(r1, 0x0) r2 = landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000000c0)={0x0, 0x3}, 0x10, 0x0) r4 = landlock_create_ruleset(&(0x7f0000000100)={0x3172, 0x0, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r3, 0x0) landlock_restrict_self(r3, 0x0) r5 = landlock_create_ruleset(&(0x7f0000000140)={0x2001}, 0x18, 0x0) landlock_restrict_self(r5, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = landlock_create_ruleset(&(0x7f0000000180)={0x19a1, 0x2, 0x3}, 0x18, 0x0) landlock_restrict_self(r8, 0x0) bind$unix(r7, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) listen(r7, 0x0) connect$unix(r6, &(0x7f0000000240)=@file={0x1}, 0x6e) ioctl$TUNSETOFFLOAD(r0, 0x400454ce, 0xa) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000000)={'syzkaller0\x00', 0x1000}) 86.750751ms ago: executing program 3 (id=68): r0 = socket(0x10, 0x803, 0x0) bind$bt_hci(r0, &(0x7f0000000000), 0x6) setsockopt$sock_int(r0, 0x1, 0x22, &(0x7f0000000380)=0xc, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) 86.425471ms ago: executing program 1 (id=69): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f0fa6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x4, "f6ffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0) (async) syz_usb_control_io$uac1(r0, 0x0, 0x0) (async) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000001200)={0x44, &(0x7f0000000fc0)=ANY=[@ANYBLOB="0f0fa6"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000000)={0x44, &(0x7f00000001c0)={0x40, 0x16, 0x4, "f6ffffff"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) 85.898621ms ago: executing program 3 (id=70): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) write$FUSE_DIRENTPLUS(r0, &(0x7f0000000280)=ANY=[@ANYBLOB="10000000", @ANYRES64=r0], 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') 85.484651ms ago: executing program 2 (id=71): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x20008891, &(0x7f0000000040)={0xa, 0x2, 0x10001, @loopback, 0x9}, 0x1c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket(0xa, 0x3, 0x87) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x18, r4}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000140)={@private1={0xfc, 0x1, '\x00', 0x81}, 0x18, r4}) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x8936, &(0x7f0000000240)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x0, 0x5, 0xeeee0000, 0x2000, &(0x7f000001e000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000016000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x0, &(0x7f0000000180)=[@cr4={0x1, 0x40002}], 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f00000003c0)="0f0d51f40f01d10fc75800f30fc73600102ed5c01dc0000000008ec0640f017400aa66b9e408000066b81f6269e766ba000000000f309c0c0cb8d09bbc8966efbafc0cedba4300ba210066ed3626f00fc70d", 0x52}], 0x1, 0x41, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 81.692531ms ago: executing program 3 (id=72): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20014054}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}], 0x18, 0xc010}}], 0x2, 0x4040040) syz_clone3(&(0x7f00000002c0)={0x60020000, 0x0, 0x0, 0x0, {0xb}, 0x0, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1}, 0x58) 717.179µs ago: executing program 3 (id=73): socket$inet(0x2, 0x3, 0x7f) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="2400000010d145a4dc238a8233dbdf2504004f80040071800800bc800400c38004003c80"], 0x24}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) mount(0x0, &(0x7f0000000140)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x128002, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/events/sched/sched_switch/trigger\x00', 0x302, 0x0) write(r1, &(0x7f0000000240)="686973743a6b6579733d635da709a8b7b562dc7f657374616d702e753bd2301ad6bb3ab30c05d9f58ad0c59701d592da90f73d3e0dac14923b8bd0f272539e2bb663592e34436d58ac2c9251", 0x4c) setns(0xc9, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./dev\x00', 0x15e) mount(0x0, &(0x7f0000000500)='./dev\x00', &(0x7f0000000540)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./dev/cpu_dma_latency\x00', 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r3, 0x0) write(r2, &(0x7f0000000600)="ffa75c15", 0x4) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000340)='net/ptype\x00') preadv(r4, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/177, 0xb1}], 0x1, 0x1, 0xd2) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x23, &(0x7f0000000000)=0x6, 0x26) getsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, 0x0, &(0x7f0000000040)) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000640)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x3f, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0xfff, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1fc, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x100, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x800c, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000ac0), 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x1, &(0x7f0000000b00)=[@cstype3={0x5, 0x8}], 0x1) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000b40), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x0) ioctl$KVM_SET_REGS(r8, 0x4090ae82, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000b80), 0x0, 0x0) ioctl$KVM_RUN(r8, 0xae80, 0x0) r9 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) dup(r9) 369.199µs ago: executing program 2 (id=74): r0 = openat$dm_control(0xffffff9c, &(0x7f0000000080), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000024c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f00000025c0)='./proc\x00', &(0x7f0000002600)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000002640)='./proc/thread-self/fail-nth\x00', 0x2, 0x40) write(r1, &(0x7f0000002680)='27', 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000012, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x78e6, &(0x7f00000026c0)={0x0, 0x6bd2, 0x40, 0x0, 0x2d3, 0x0, r1}, &(0x7f0000002740), &(0x7f0000002780), &(0x7f00000027c0)) ioctl$DM_DEV_CREATE(r0, 0xc138fd03, &(0x7f00000000c0)={0x4, 0x0, 0x0, 0x138, 0x138, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, {'syz', 0x0, '1\x00'}}}) r3 = socket$inet6(0xa, 0x400000000001, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) io_setup(0xb, &(0x7f0000002800)=0x0) io_submit(r5, 0x1, &(0x7f0000002840)=[&(0x7f0000002880)={0x25, 0xe7030003, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffda4, 0x3, 0x0, 0x2}]) sendmsg$netlink(r4, &(0x7f0000002500)={0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002580)=ANY=[@ANYBLOB="18000000690015"], 0x18}], 0x1}, 0x8000) sendto$inet6(r3, 0x0, 0x0, 0x20004048, &(0x7f0000000000)={0xa, 0x4a20, 0x7ffff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x16}}, 0x4}, 0x1c) getsockopt$inet6_int(r3, 0x29, 0x10, 0x0, &(0x7f0000000040)) ioctl$DM_TABLE_LOAD(r0, 0xc138fd09, &(0x7f0000000280)={0x4, 0x0, 0x0, 0x1c0, 0x138, 0x1, 0x0, 0x0, 0x0, 0x0, @by_dev={r2}, [@snapshot={0x0, 0x2018, 0x0, 0x88, 'snapshot\x00', {@ram_num={'1:', 0x0}, 0x20, @ram_num={'1:', 0x0}, 0x20, 'P', 0x20, '7', ' 2 discard_zeroes_cow discard_passdown_origin'}}]}) r6 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mtu(r6, 0x29, 0x17, 0x0, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000002480)={{}, 0x1f, 0xff, 0xe38}, 0x18) read$FUSE(0xffffffffffffffff, &(0x7f0000000440)={0x2020}, 0x2020) 0s ago: executing program 3 (id=75): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2803, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) r4 = syz_open_dev$mouse(&(0x7f00000002c0), 0x7, 0x400400) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000340)={'batadv_slave_0\x00', &(0x7f0000000300)=@ethtool_wolinfo={0x5, 0x3e, 0x9, "f0262a3fb7df"}}) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @rand_addr, 0xfffffe7d}, 0x1c) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4e24, 0x81, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3ff}, 0x1c) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001200010000000000000000000a0304004e234e2202000100ffff00"/56, @ANYRES32=0x0, @ANYBLOB="050000001306000008000001000000000800030011"], 0x54}}, 0x20004010) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="f00fc7494d36f08266060266b9800000c00f326635000400000f30eade780066b9aa0200000fb266b9ab0900000f30f2b031b3e759dc2c", 0x37}], 0x1, 0x9f6a364b3fac2a47, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 21.930143][ T36] audit: type=1400 audit(1793153843.930:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.933430][ T287] cgroup: Unknown subsys name 'net' [ 21.952822][ T36] audit: type=1400 audit(1793153843.930:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.980184][ T36] audit: type=1400 audit(1793153843.970:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.980813][ T287] cgroup: Unknown subsys name 'devices' [ 22.106753][ T287] cgroup: Unknown subsys name 'hugetlb' [ 22.112384][ T287] cgroup: Unknown subsys name 'rlimit' [ 22.227623][ T36] audit: type=1400 audit(1793153844.230:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.250895][ T36] audit: type=1400 audit(1793153844.230:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 22.275799][ T36] audit: type=1400 audit(1793153844.230:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.280693][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 22.307835][ T36] audit: type=1400 audit(1793153844.310:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.333373][ T36] audit: type=1400 audit(1793153844.310:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.374308][ T36] audit: type=1400 audit(1793153844.370:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.375311][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.399828][ T36] audit: type=1400 audit(1793153844.370:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.298118][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.305477][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.312589][ T295] bridge_slave_0: entered allmulticast mode [ 23.319068][ T295] bridge_slave_0: entered promiscuous mode [ 23.331035][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.338190][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.345455][ T295] bridge_slave_1: entered allmulticast mode [ 23.351732][ T295] bridge_slave_1: entered promiscuous mode [ 23.374632][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.381711][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.388958][ T297] bridge_slave_0: entered allmulticast mode [ 23.395352][ T297] bridge_slave_0: entered promiscuous mode [ 23.402987][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.410106][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.417247][ T297] bridge_slave_1: entered allmulticast mode [ 23.423524][ T297] bridge_slave_1: entered promiscuous mode [ 23.458476][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.465565][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.472638][ T294] bridge_slave_0: entered allmulticast mode [ 23.479107][ T294] bridge_slave_0: entered promiscuous mode [ 23.498292][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.505400][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.512499][ T294] bridge_slave_1: entered allmulticast mode [ 23.518885][ T294] bridge_slave_1: entered promiscuous mode [ 23.562633][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.569730][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.577151][ T296] bridge_slave_0: entered allmulticast mode [ 23.583395][ T296] bridge_slave_0: entered promiscuous mode [ 23.593029][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.600134][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.607282][ T296] bridge_slave_1: entered allmulticast mode [ 23.613640][ T296] bridge_slave_1: entered promiscuous mode [ 23.693342][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.700441][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.707777][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.714884][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.749972][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.757058][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.764341][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.771406][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.818680][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.825800][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.833110][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.840222][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.850180][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.858731][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.865994][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.873190][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.881879][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.889129][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.903370][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.910431][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.922913][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.930007][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.937685][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.944744][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.957338][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.964390][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.019697][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.026806][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.035777][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.042834][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.051008][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.058059][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.082019][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.089102][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.102617][ T295] veth0_vlan: entered promiscuous mode [ 24.130786][ T297] veth0_vlan: entered promiscuous mode [ 24.144065][ T295] veth1_macvtap: entered promiscuous mode [ 24.162581][ T294] veth0_vlan: entered promiscuous mode [ 24.170627][ T296] veth0_vlan: entered promiscuous mode [ 24.193155][ T296] veth1_macvtap: entered promiscuous mode [ 24.201478][ T297] veth1_macvtap: entered promiscuous mode [ 24.217329][ T294] veth1_macvtap: entered promiscuous mode [ 24.230973][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.318432][ T319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3'. [ 24.331479][ T322] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.342608][ T324] syz.0.1: vmalloc error: size 32768, failed to allocate pages, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0 [ 24.365686][ T324] CPU: 1 UID: 0 PID: 324 Comm: syz.0.1 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 24.365719][ T324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 24.365743][ T324] Call Trace: [ 24.365751][ T324] [ 24.365760][ T324] __dump_stack+0x21/0x30 [ 24.365799][ T324] dump_stack_lvl+0x140/0x1c0 [ 24.365831][ T324] ? __cfi_dump_stack_lvl+0x10/0x10 [ 24.365863][ T324] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 24.365888][ T324] dump_stack+0x19/0x20 [ 24.365920][ T324] warn_alloc+0x1e7/0x2c0 [ 24.365947][ T324] ? __cfi_warn_alloc+0x10/0x10 [ 24.365983][ T324] ? __kmalloc_node_noprof+0x252/0x500 [ 24.366021][ T324] ? __vmalloc_node_range_noprof+0x529/0x1300 [ 24.366052][ T324] __vmalloc_node_range_noprof+0x100b/0x1300 [ 24.366084][ T324] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 24.366111][ T324] ? vsnprintf+0x19ef/0x1ad0 [ 24.366134][ T324] ? kvm_dev_ioctl+0x12a/0x14c0 [ 24.366157][ T324] __vmalloc_noprof+0x104/0x1d0 [ 24.366184][ T324] ? kvm_dev_ioctl+0x12a/0x14c0 [ 24.366204][ T324] ? alloc_fd+0x4c1/0x570 [ 24.366236][ T324] ? __cfi___vmalloc_noprof+0x10/0x10 [ 24.366264][ T324] kvm_dev_ioctl+0x12a/0x14c0 [ 24.366286][ T324] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 24.366306][ T324] ? bpf_lsm_file_ioctl+0xd/0x20 [ 24.366328][ T324] ? security_file_ioctl+0x3e/0x110 [ 24.366358][ T324] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 24.366378][ T324] __se_sys_ioctl+0x123/0x1b0 [ 24.366401][ T324] __x64_sys_ioctl+0x7f/0xa0 [ 24.366422][ T324] x64_sys_call+0x1878/0x2ee0 [ 24.366444][ T324] do_syscall_64+0x57/0xf0 [ 24.366466][ T324] ? clear_bhb_loop+0x50/0xa0 [ 24.366498][ T324] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 24.366528][ T324] RIP: 0033:0x7f2db0f9f559 [ 24.366556][ T324] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 24.366574][ T324] RSP: 002b:00007f2daf9e3028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 24.366599][ T324] RAX: ffffffffffffffda RBX: 00007f2db1225fa0 RCX: 00007f2db0f9f559 [ 24.366617][ T324] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000005 [ 24.366631][ T324] RBP: 00007f2db1036b20 R08: 0000000000000000 R09: 0000000000000000 [ 24.366645][ T324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 24.366658][ T324] R13: 00007f2db1226038 R14: 00007f2db1225fa0 R15: 00007ffc6f5078f8 [ 24.366677][ T324] [ 24.366692][ T324] Mem-Info: [ 24.623085][ T324] active_anon:5084 inactive_anon:0 isolated_anon:0 [ 24.623085][ T324] active_file:5432 inactive_file:2288 isolated_file:0 [ 24.623085][ T324] unevictable:0 dirty:290 writeback:0 [ 24.623085][ T324] slab_reclaimable:3691 slab_unreclaimable:71313 [ 24.623085][ T324] mapped:23718 shmem:163 pagetables:713 [ 24.623085][ T324] sec_pagetables:0 bounce:0 [ 24.623085][ T324] kernel_misc_reclaimable:0 [ 24.623085][ T324] free:1545696 free_pcp:2791 free_cma:0 [ 24.668241][ T9] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.676228][ T324] Node 0 active_anon:20396kB inactive_anon:0kB active_file:21752kB inactive_file:9156kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:94936kB dirty:1224kB writeback:0kB shmem:652kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4308kB pagetables:2872kB sec_pagetables:0kB all_unreclaimable? no [ 24.708181][ T324] DMA32 free:2949972kB boost:0kB min:19052kB low:23812kB high:28572kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2955020kB mlocked:0kB bounce:0kB free_pcp:5048kB local_pcp:0kB free_cma:0kB [ 24.738188][ T324] lowmem_reserve[]: 0 3920 3920 [ 24.743094][ T324] Normal free:3224928kB boost:0kB min:26000kB low:32500kB high:39000kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20396kB inactive_anon:0kB active_file:21752kB inactive_file:9156kB unevictable:0kB writepending:1224kB present:5242880kB managed:4014840kB mlocked:0kB bounce:0kB free_pcp:4636kB local_pcp:2968kB free_cma:0kB [ 24.744809][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.774357][ T324] lowmem_reserve[]: 0 0 0 [ 24.786953][ T324] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 716*4096kB (M) = 2949972kB [ 24.803134][ T324] Normal: 3*4kB (UME) 3*8kB (UME) 3*16kB (UME) 7*32kB (E) 6*64kB (UE) 41*128kB (ME) 34*256kB (ME) 12*512kB (UM) 9*1024kB (UME) 4*2048kB (ME) 778*4096kB (M) = 3224884kB [ 24.804735][ T45] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 24.821499][ T324] 7904 total pagecache pages [ 24.832545][ T324] 0 pages in swap cache [ 24.836932][ T324] Free swap = 124996kB [ 24.841146][ T324] Total swap = 124996kB [ 24.845353][ T324] 2097051 pages RAM [ 24.849236][ T324] 0 pages HighMem/MovableOnly [ 24.854014][ T324] 354586 pages reserved [ 24.858445][ T324] 0 pages cma reserved [ 24.863822][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 24.869283][ T324] Memory allocations: [ 24.874203][ T9] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 248, changing to 7 [ 24.875980][ T324] 0 B 0 init/main.c:1477 func:do_initcalls [ 24.893899][ T324] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 24.896203][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=3048, bcdDevice= 0.40 [ 24.902252][ T324] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 24.911784][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 24.919549][ T324] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 24.927840][ T9] usb 4-1: Product: syz [ 24.935529][ T324] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 24.939299][ T9] usb 4-1: Manufacturer: syz [ 24.947187][ T324] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 24.951800][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 24.960181][ T324] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 24.960202][ T324] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 24.972748][ T9] usb 4-1: SerialNumber: syz [ 24.973511][ T324] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 24.983133][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 53397, setting to 64 [ 24.986478][ T324] 0 B 0 init/initramfs.c:101 func:find_link [ 24.996694][ T10] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=33.f9 [ 25.014804][ T45] usb 2-1: Using ep0 maxpacket: 16 [ 25.028254][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.037635][ T45] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 25.038813][ T10] usb 1-1: Product: syz [ 25.049039][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.052808][ T10] usb 1-1: Manufacturer: syz [ 25.064038][ T10] usb 1-1: SerialNumber: syz [ 25.066293][ T45] usb 2-1: Product: syz [ 25.072909][ T45] usb 2-1: Manufacturer: syz [ 25.077884][ T45] usb 2-1: SerialNumber: syz [ 25.083278][ T330] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5'. [ 25.092124][ T10] usb 1-1: config 0 descriptor?? [ 25.226720][ T322] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.237812][ T322] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.261413][ T338] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.273911][ T338] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.282161][ T337] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.302727][ T337] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.363041][ T10] usb 1-1: USB disconnect, device number 2 [ 25.372328][ T9] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 25.381949][ T9] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 25.398795][ T9] usb 4-1: USB disconnect, device number 2 [ 25.425275][ T333] udevd[333]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.674710][ T328] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.825722][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.836895][ T328] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.846821][ T328] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.859935][ T328] usb 3-1: New USB device found, idVendor=5543, idProduct=0047, bcdDevice= 0.00 [ 25.869077][ T328] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.878250][ T328] usb 3-1: config 0 descriptor?? [ 25.888262][ T328] usbhid 3-1:0.0: can't add hid device: -22 [ 25.894240][ T328] usbhid 3-1:0.0: probe with driver usbhid failed with error -22 [ 26.100221][ T45] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 26.110238][ T45] usb 2-1: USB disconnect, device number 2 [ 26.913970][ T384] SELinux: policydb magic number 0xf97c1e8c does not match expected magic number 0xf97cff8c [ 26.924355][ T384] SELinux: failed to load policy [ 26.944634][ T36] kauditd_printk_skb: 63 callbacks suppressed [ 26.944649][ T36] audit: type=1400 audit(1793153848.940:137): avc: denied { read write } for pid=386 comm="syz.0.20" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 26.996027][ T36] audit: type=1400 audit(1793153848.950:138): avc: denied { open } for pid=386 comm="syz.0.20" path="/dev/fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 27.024717][ T36] audit: type=1400 audit(1793153848.980:139): avc: denied { create } for pid=386 comm="syz.0.20" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 27.067754][ T36] audit: type=1400 audit(1793153849.070:140): avc: denied { ioctl } for pid=392 comm="syz.0.21" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=4428 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 27.294998][ T36] audit: type=1400 audit(1793153849.300:141): avc: denied { read write } for pid=401 comm="syz.1.24" name="control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.320574][ T402] fuse: Unknown parameter 'rootmo00000000000ÙÚý@0÷ùÇ^Ûu×®ÀÊ¡ÊNÅ0000' [ 27.320637][ T36] audit: type=1400 audit(1793153849.300:142): avc: denied { open } for pid=401 comm="syz.1.24" path="/dev/mapper/control" dev="devtmpfs" ino=198 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 27.330210][ T36] audit: type=1400 audit(1793153849.300:143): avc: denied { write } for pid=401 comm="syz.1.24" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 27.373690][ T36] audit: type=1400 audit(1793153849.330:144): avc: denied { mounton } for pid=401 comm="syz.1.24" path="/4/file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.397678][ T36] audit: type=1400 audit(1793153849.400:145): avc: denied { execute } for pid=401 comm="syz.1.24" name="file0" dev="tmpfs" ino=47 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 27.420169][ T36] audit: type=1400 audit(1793153849.400:146): avc: denied { mount } for pid=401 comm="syz.1.24" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 27.604573][ T315] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.764567][ T315] usb 1-1: Using ep0 maxpacket: 16 [ 27.772389][ T315] usb 1-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 27.781818][ T315] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.784617][ T9] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 27.790507][ T315] usb 1-1: Product: syz [ 27.801669][ T315] usb 1-1: Manufacturer: syz [ 27.806485][ T315] usb 1-1: SerialNumber: syz [ 27.955653][ T9] usb 4-1: config 0 interface 0 altsetting 15 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 27.968631][ T9] usb 4-1: config 0 interface 0 has no altsetting 0 [ 27.975314][ T9] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 27.984551][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.995117][ T9] usb 4-1: config 0 descriptor?? [ 28.174592][ T45] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 28.335649][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 28.346677][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 28.356486][ T45] usb 2-1: New USB device found, idVendor=04d8, idProduct=c002, bcdDevice= 0.00 [ 28.365610][ T45] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.471198][ T349] usb 3-1: USB disconnect, device number 2 [ 28.614968][ T444] netlink: 20 bytes leftover after parsing attributes in process `syz.2.35'. [ 28.624758][ T315] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 28.639737][ T315] usb 1-1: USB disconnect, device number 3 [ 28.777958][ T437] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.786628][ T437] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.795424][ T45] usbhid 2-1:1.0: can't add hid device: -71 [ 28.801442][ T45] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 28.810193][ T45] usb 2-1: USB disconnect, device number 3 [ 28.884676][ T349] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 29.045699][ T349] usb 3-1: config 1 has an invalid descriptor of length 32, skipping remainder of the config [ 29.056029][ T349] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 29.065802][ T349] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 29.074999][ T349] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 29.083040][ T349] usb 3-1: SerialNumber: syz [ 29.291864][ T349] usb 3-1: 0:2 : does not exist [ 29.296912][ T349] usb 3-1: unit 5 not found! [ 29.305523][ T349] usb 3-1: USB disconnect, device number 3 [ 29.320335][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 29.374599][ T328] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 29.524573][ T328] usb 1-1: Using ep0 maxpacket: 16 [ 29.531157][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 29.542232][ T328] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.552065][ T328] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 29.564956][ T328] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 29.574034][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.582881][ T328] usb 1-1: config 0 descriptor?? [ 29.791976][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.799359][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.806718][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.814028][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.821305][ T328] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 29.828971][ T328] microsoft 0003:045E:07DA.0002: No inputs registered, leaving [ 29.837530][ T328] microsoft 0003:045E:07DA.0002: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 29.848991][ T328] microsoft 0003:045E:07DA.0002: no inputs found [ 29.855398][ T328] microsoft 0003:045E:07DA.0002: could not initialize ff, continuing anyway [ 29.999990][ T447] ./dev/sda1: Can't lookup blockdev [ 30.005425][ T448] ./dev/sda1: Can't lookup blockdev [ 30.012528][ T314] usb 1-1: USB disconnect, device number 4 [ 30.234734][ T328] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.387418][ T328] usb 3-1: New USB device found, idVendor=0424, idProduct=7850, bcdDevice= 0.00 [ 30.396610][ T328] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.404650][ T328] usb 3-1: Product: syz [ 30.408912][ T328] usb 3-1: Manufacturer: syz [ 30.413532][ T328] usb 3-1: SerialNumber: syz [ 30.515279][ T349] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.552759][ T9] hid-led 0003:1D34:000A.0001: probe with driver hid-led failed with error -71 [ 30.563904][ T9] usb 4-1: USB disconnect, device number 3 [ 30.616971][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.633636][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.649536][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.666533][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.677922][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.685578][ T349] usb 2-1: Using ep0 maxpacket: 16 [ 30.687432][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.699902][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.700934][ T349] usb 2-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 30.708544][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.725278][ T349] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.726643][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.741613][ T522] futex_wake_op: syz.3.47 tries to shift op by 144; fix this program [ 30.744694][ T349] usb 2-1: Product: syz [ 30.753902][ T349] usb 2-1: Manufacturer: syz [ 30.758791][ T349] usb 2-1: SerialNumber: syz [ 30.814573][ T328] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 30.890843][ T528] overlay: Unknown parameter 'obj_user' [ 30.964598][ T328] usb 1-1: Using ep0 maxpacket: 32 [ 30.992475][ T534] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.001215][ T534] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.004041][ T328] usb 1-1: config 6 has an invalid interface number: 251 but max is 1 [ 31.029225][ T328] usb 1-1: config 6 has an invalid interface number: 9 but max is 1 [ 31.041623][ T328] usb 1-1: config 6 has no interface number 0 [ 31.054551][ T328] usb 1-1: config 6 has no interface number 1 [ 31.060725][ T328] usb 1-1: config 6 interface 251 has no altsetting 0 [ 31.074332][ T328] usb 1-1: config 6 interface 9 has no altsetting 0 [ 31.096175][ T328] usb 1-1: New USB device found, idVendor=05ac, idProduct=1402, bcdDevice=e9.d2 [ 31.105428][ T328] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.113607][ T328] usb 1-1: Product: syz [ 31.118031][ T328] usb 1-1: Manufacturer: syz [ 31.122863][ T328] usb 1-1: SerialNumber: syz [ 31.331342][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.341684][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.351329][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.361135][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.370984][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.381067][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.390837][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.399891][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.410468][ T508] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.420284][ T508] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.580153][ T349] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 31.598150][ T349] usb 2-1: USB disconnect, device number 4 [ 31.800453][ T544] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.819924][ T544] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.974554][ T45] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 32.114571][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.364558][ T45] usb 4-1: device descriptor read/64, error -71 [ 32.364558][ T349] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.534591][ T349] usb 2-1: Using ep0 maxpacket: 8 [ 32.545326][ T349] usb 2-1: too many endpoints for config 0 interface 0 altsetting 1: 141, using maximum allowed: 30 [ 32.564666][ T349] usb 2-1: config 0 interface 0 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 141 [ 32.577813][ T349] usb 2-1: config 0 interface 0 has no altsetting 0 [ 32.584528][ T349] usb 2-1: New USB device found, idVendor=056a, idProduct=00b3, bcdDevice= 0.00 [ 32.593627][ T349] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.602780][ T349] usb 2-1: config 0 descriptor?? [ 32.614559][ T45] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.754593][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.004579][ T45] usb 4-1: device descriptor read/64, error -71 [ 33.087357][ T314] usb 3-1: USB disconnect, device number 4 [ 33.116738][ T36] kauditd_printk_skb: 41 callbacks suppressed [ 33.116760][ T36] audit: type=1400 audit(1793153855.122:188): avc: denied { listen } for pid=547 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.147232][ T45] usb usb4-port1: attempt power cycle [ 33.153354][ T36] audit: type=1400 audit(1793153855.142:189): avc: denied { accept } for pid=547 comm="syz.2.52" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 33.218737][ T349] usbhid 2-1:0.0: can't add hid device: -71 [ 33.225984][ T349] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 33.238482][ T349] usb 2-1: USB disconnect, device number 5 [ 33.484557][ T45] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 33.515743][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.578422][ T328] asix 1-1:6.251: probe with driver asix failed with error -22 [ 33.590209][ T328] asix 1-1:6.9: probe with driver asix failed with error -22 [ 33.600380][ T328] usb 1-1: USB disconnect, device number 5 [ 33.645693][ T45] usb 4-1: device descriptor read/8, error -71 [ 33.657093][ T36] audit: type=1400 audit(1793153855.662:190): avc: denied { read append } for pid=550 comm="syz.0.53" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.680536][ T36] audit: type=1400 audit(1793153855.662:191): avc: denied { open } for pid=550 comm="syz.0.53" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.711515][ T36] audit: type=1400 audit(1793153855.662:192): avc: denied { ioctl } for pid=550 comm="syz.0.53" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7014 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 33.749369][ T36] audit: type=1400 audit(1793153855.752:193): avc: denied { create } for pid=557 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 33.768769][ T36] audit: type=1400 audit(1793153855.752:194): avc: denied { create } for pid=557 comm="syz.1.54" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 33.904542][ T45] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 33.925655][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.017760][ T564] netlink: 72 bytes leftover after parsing attributes in process `syz.2.56'. [ 34.065544][ T45] usb 4-1: device descriptor read/8, error -71 [ 34.124554][ T328] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 34.174689][ T45] usb usb4-port1: unable to enumerate USB device [ 34.275891][ T328] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 34.286118][ T328] usb 1-1: New USB device found, idVendor=050d, idProduct=011b, bcdDevice=6f.a4 [ 34.295194][ T328] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.303976][ T328] usb 1-1: config 0 descriptor?? [ 34.310323][ T328] usb 1-1: bad CDC descriptors [ 34.354542][ T31] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 34.505775][ T31] usb 3-1: config 0 interface 0 altsetting 13 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 34.517739][ T36] audit: type=1400 audit(1793153856.512:195): avc: denied { mount } for pid=560 comm="syz.0.55" name="/" dev="overlay" ino=105 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 34.518987][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 34.547391][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=0016, bcdDevice= 0.00 [ 34.549921][ T36] audit: type=1400 audit(1793153856.552:196): avc: denied { ioctl } for pid=560 comm="syz.0.55" path="socket:[6044]" dev="sockfs" ino=6044 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 34.557042][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.593346][ T31] usb 3-1: config 0 descriptor?? [ 34.671626][ T571] netlink: 4 bytes leftover after parsing attributes in process `syz.1.58'. [ 34.674579][ T36] audit: type=1400 audit(1793153856.672:197): avc: denied { read } for pid=569 comm="syz.1.58" name=".pending_reads" dev="incremental-fs" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 34.767120][ T573] ======================================================= [ 34.767120][ T573] WARNING: The mand mount option has been deprecated and [ 34.767120][ T573] and is ignored by this kernel. Remove the mand [ 34.767120][ T573] option from the mount to silence this warning. [ 34.767120][ T573] ======================================================= [ 34.802804][ T573] No source specified [ 35.008022][ T31] hid (null): report_id 10367 is invalid [ 35.016131][ T31] wacom 0003:056A:0016.0003: report_id 10367 is invalid [ 35.023210][ T31] wacom 0003:056A:0016.0003: item 0 2 1 8 parsing failed [ 35.030892][ T31] wacom 0003:056A:0016.0003: parse failed [ 35.037034][ T31] wacom 0003:056A:0016.0003: probe with driver wacom failed with error -22 [ 35.214967][ T45] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 35.223793][ T582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.234812][ T582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.375674][ T45] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 35.383953][ T45] usb 4-1: config 1 has no interface number 0 [ 35.390368][ T45] usb 4-1: config 1 interface 105 has no altsetting 0 [ 35.399101][ T45] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 35.408525][ T45] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 35.416820][ T45] usb 4-1: Product: syz [ 35.421160][ T45] usb 4-1: Manufacturer: syz [ 35.426039][ T45] usb 4-1: SerialNumber: syz [ 36.114551][ T328] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 36.239569][ T581] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.248205][ T581] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 36.256657][ T45] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 36.266504][ T328] usb 2-1: unable to get BOS descriptor or descriptor too short [ 36.268123][ T45] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x1) reg index 0x0001: -32 [ 36.277072][ T328] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.296129][ T328] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 36.297420][ T45] aqc111 4-1:1.105 eth1: register 'aqc111' at usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter, 3e:6f:96:df:10:fd [ 36.306053][ T328] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 36.332597][ T328] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 36.342035][ T328] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 36.350333][ T328] usb 2-1: Product: syz [ 36.354789][ T328] usb 2-1: Manufacturer: syz [ 36.361856][ T328] usb 2-1: Found UVC 1.00 device syz (8086:0ad2) [ 36.492262][ T9] usb 4-1: USB disconnect, device number 8 [ 36.498787][ T9] aqc111 4-1:1.105 eth1: unregister 'aqc111' usb-dummy_hcd.3-1, USB-C 3.1 to 5GBASE-T Ethernet Adapter [ 36.510910][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 36.519057][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0006: -19 [ 36.527281][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 36.535353][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 36.543388][ T150] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0001: -19 [ 36.551345][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0001: -19 [ 36.559497][ T150] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 36.568361][ T328] usb 2-1: Failed to query (GET_INFO) UVC control 17 on unit 1: -71 (exp. 1). [ 36.574735][ T150] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 36.578220][ T328] usb 2-1: Failed to query (GET_INFO) UVC control 20 on unit 1: -71 (exp. 1). [ 36.585848][ T150] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 36.594905][ T328] usb 2-1: No streaming interface found for terminal 2. [ 36.604951][ T150] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 36.618742][ T150] aqc111 4-1:1.105 eth1: Error submitting the control message: status=-19 [ 36.620198][ T328] usb 2-1: USB disconnect, device number 6 [ 36.633480][ T9] aqc111 4-1:1.105 eth1: Failed to read(0x1) reg index 0x0002: -19 [ 36.641717][ T9] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 36.652657][ T9] aqc111 4-1:1.105 eth1: Failed to write(0x1) reg index 0x0002: -19 [ 36.660832][ T9] aqc111 4-1:1.105 eth1: Failed to write(0x61) reg index 0x0000: -19 [ 36.695617][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.705092][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x1) reg index 0x0002: -19 [ 36.716612][ T9] aqc111 4-1:1.105 eth1 (unregistered): Failed to write(0x61) reg index 0x0000: -19 [ 36.851223][ T314] usb 1-1: USB disconnect, device number 6 [ 37.108940][ T9] usb 3-1: USB disconnect, device number 5 [ 37.181304][ T634] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=53520 sclass=netlink_route_socket pid=634 comm=syz.3.73 [ 37.218685][ T636] ================================================================== [ 37.226795][ T636] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x586/0x1350 [ 37.234371][ T636] Read of size 8 at addr ffff88810ff0cb98 by task syz.2.74/636 [ 37.241929][ T636] [ 37.244267][ T636] CPU: 0 UID: 0 PID: 636 Comm: syz.2.74 Not tainted syzkaller #0 7512b07cb8b2b81a08448db7682669b21f09f733 [ 37.244291][ T636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.244303][ T636] Call Trace: [ 37.244310][ T636] [ 37.244317][ T636] __dump_stack+0x21/0x30 [ 37.244349][ T636] dump_stack_lvl+0x140/0x1c0 [ 37.244377][ T636] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.244405][ T636] ? __cfi__printk+0x10/0x10 [ 37.244431][ T636] print_address_description+0x71/0x210 [ 37.244461][ T636] print_report+0x4a/0x70 [ 37.244489][ T636] kasan_report+0x162/0x1a0 [ 37.244508][ T636] ? snapshot_ctr+0x586/0x1350 [ 37.244530][ T636] ? snapshot_ctr+0x586/0x1350 [ 37.244551][ T636] __asan_report_load8_noabort+0x18/0x20 [ 37.244575][ T636] snapshot_ctr+0x586/0x1350 [ 37.244596][ T636] ? dm_split_args+0xa1/0x740 [ 37.244616][ T636] ? __cfi_snapshot_ctr+0x10/0x10 [ 37.244637][ T636] ? dm_split_args+0x5d0/0x740 [ 37.244656][ T636] dm_table_add_target+0x59f/0xcb0 [ 37.244676][ T636] table_load+0x2eb/0x7d0 [ 37.244700][ T636] ? __check_object_size+0x99/0x870 [ 37.244731][ T636] ? __cfi_table_load+0x10/0x10 [ 37.244759][ T636] ? __kasan_check_write+0x18/0x20 [ 37.244782][ T636] ? __cfi_table_load+0x10/0x10 [ 37.244808][ T636] dm_ctl_ioctl+0x8f0/0xde0 [ 37.244834][ T636] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 37.244863][ T636] ? __fget_files+0x2bc/0x330 [ 37.244880][ T636] ? bpf_lsm_file_ioctl+0xd/0x20 [ 37.244898][ T636] ? security_file_ioctl+0x3e/0x110 [ 37.244922][ T636] ? __cfi_dm_ctl_ioctl+0x10/0x10 [ 37.244947][ T636] __se_sys_ioctl+0x123/0x1b0 [ 37.244964][ T636] __x64_sys_ioctl+0x7f/0xa0 [ 37.244980][ T636] x64_sys_call+0x1878/0x2ee0 [ 37.244998][ T636] do_syscall_64+0x57/0xf0 [ 37.245016][ T636] ? clear_bhb_loop+0x50/0xa0 [ 37.245042][ T636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.245066][ T636] RIP: 0033:0x7fd04859f559 [ 37.245081][ T636] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 37.245095][ T636] RSP: 002b:00007fd0493e9028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 37.245121][ T636] RAX: ffffffffffffffda RBX: 00007fd048825fa0 RCX: 00007fd04859f559 [ 37.245136][ T636] RDX: 0000200000000280 RSI: 00000000c138fd09 RDI: 0000000000000003 [ 37.245148][ T636] RBP: 00007fd048636b20 R08: 0000000000000000 R09: 0000000000000000 [ 37.245159][ T636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 37.245170][ T636] R13: 00007fd048826038 R14: 00007fd048825fa0 R15: 00007ffec87620e8 [ 37.245186][ T636] [ 37.245193][ T636] [ 37.324569][ T314] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 37.325594][ T636] Allocated by task 636: [ 37.474675][ T314] usb 2-1: Using ep0 maxpacket: 32 [ 37.476131][ T636] kasan_save_track+0x3e/0x80 [ 37.496342][ T314] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 37.500087][ T636] kasan_save_alloc_info+0x3a/0x50 [ 37.503489][ T314] usb 2-1: config 0 has no interface number 0 [ 37.505483][ T636] __kasan_kmalloc+0x96/0xb0 [ 37.505516][ T636] __kmalloc_cache_node_noprof+0x225/0x430 [ 37.505563][ T636] dm_get_table_device+0x1e3/0x6c0 [ 37.538833][ T314] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 37.540322][ T636] dm_get_device+0x32b/0x7f0 [ 37.548937][ T314] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.551047][ T636] snapshot_ctr+0x292/0x1350 [ 37.574553][ T314] usb 2-1: Product: syz [ 37.575610][ T636] dm_table_add_target+0x59f/0xcb0 [ 37.597480][ T636] table_load+0x2eb/0x7d0 [ 37.598522][ T314] usb 2-1: Manufacturer: syz [ 37.601854][ T636] dm_ctl_ioctl+0x8f0/0xde0 [ 37.610975][ T636] __se_sys_ioctl+0x123/0x1b0 [ 37.615326][ T314] usb 2-1: SerialNumber: syz [ 37.615678][ T636] __x64_sys_ioctl+0x7f/0xa0 [ 37.624873][ T636] x64_sys_call+0x1878/0x2ee0 [ 37.629580][ T636] do_syscall_64+0x57/0xf0 [ 37.634018][ T636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.639941][ T636] [ 37.642283][ T636] Freed by task 636: [ 37.645781][ T314] usb 2-1: config 0 descriptor?? [ 37.646202][ T636] kasan_save_track+0x3e/0x80 [ 37.654874][ T314] smsc95xx v2.0.0 [ 37.655842][ T636] kasan_save_free_info+0x44/0x50 [ 37.664529][ T636] __kasan_slab_free+0x5f/0x80 [ 37.669348][ T636] kfree+0x158/0x440 [ 37.673287][ T636] dm_put_table_device+0x298/0x2e0 [ 37.678431][ T636] dm_get_device+0x571/0x7f0 [ 37.683056][ T636] snapshot_ctr+0x435/0x1350 [ 37.687693][ T636] dm_table_add_target+0x59f/0xcb0 [ 37.692826][ T636] table_load+0x2eb/0x7d0 [ 37.697190][ T636] dm_ctl_ioctl+0x8f0/0xde0 [ 37.701734][ T636] __se_sys_ioctl+0x123/0x1b0 [ 37.706441][ T636] __x64_sys_ioctl+0x7f/0xa0 [ 37.711085][ T636] x64_sys_call+0x1878/0x2ee0 [ 37.715793][ T636] do_syscall_64+0x57/0xf0 [ 37.720244][ T636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.726173][ T636] [ 37.728546][ T636] The buggy address belongs to the object at ffff88810ff0cb80 [ 37.728546][ T636] which belongs to the cache kmalloc-96 of size 96 [ 37.742451][ T636] The buggy address is located 24 bytes inside of [ 37.742451][ T636] freed 96-byte region [ffff88810ff0cb80, ffff88810ff0cbe0) [ 37.756097][ T636] [ 37.758442][ T636] The buggy address belongs to the physical page: [ 37.764867][ T636] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ff0c [ 37.773745][ T636] anon flags: 0x4000000000000000(zone=1) [ 37.779403][ T636] page_type: f5(slab) [ 37.783420][ T636] raw: 4000000000000000 ffff888100041280 ffffea00043ef540 dead000000000005 [ 37.792058][ T636] raw: 0000000000000000 0000000080200020 00000001f5000000 0000000000000000 [ 37.800653][ T636] page dumped because: kasan: bad access detected [ 37.807117][ T636] page_owner tracks the page as allocated [ 37.812842][ T636] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 118, tgid 118 (udevd), ts 6571982202, free_ts 0 [ 37.830405][ T636] post_alloc_hook+0x37d/0x3b0 [ 37.835209][ T636] prep_new_page+0x2d/0x180 [ 37.839746][ T636] get_page_from_freelist+0x4aea/0x4ba0 [ 37.845330][ T636] __alloc_pages_noprof+0x35a/0x7e0 [ 37.850563][ T636] alloc_slab_page+0x6b/0x1e0 [ 37.855288][ T636] allocate_slab+0x69/0x430 [ 37.859835][ T636] ___slab_alloc+0x591/0x8c0 [ 37.864464][ T636] __kmalloc_cache_noprof+0x2cd/0x470 [ 37.869871][ T636] kernfs_fop_open+0x716/0xd50 [ 37.874708][ T636] do_dentry_open+0x97c/0x1510 [ 37.879519][ T636] vfs_open+0x86/0x240 [ 37.883611][ T636] path_openat+0x2c49/0x35a0 [ 37.888230][ T636] do_filp_open+0x1f2/0x440 [ 37.892753][ T636] do_sys_openat2+0x134/0x1d0 [ 37.897458][ T636] __x64_sys_openat+0x13a/0x170 [ 37.902329][ T636] x64_sys_call+0xe69/0x2ee0 [ 37.906941][ T636] page_owner free stack trace missing [ 37.912331][ T636] [ 37.914693][ T636] Memory state around the buggy address: [ 37.920362][ T636] ffff88810ff0ca80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.928476][ T636] ffff88810ff0cb00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.936586][ T636] >ffff88810ff0cb80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.944698][ T636] ^ [ 37.949591][ T636] ffff88810ff0cc00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.957681][ T636] ffff88810ff0cc80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 37.965763][ T636] ================================================================== [ 37.981221][ T636] Disabling lock debugging due to kernel taint [ 37.987515][ T636] device-mapper: table: 252:0: device 1:4 not in table devices list [ 37.998178][ T636] device-mapper: table: 252:0: snapshot: COW device cannot be the same as origin device (-EINVAL) [ 38.010648][ T636] device-mapper: ioctl: error adding target to table [ 38.018704][ T636] device-mapper: table: 252:0: dm_table_destroy: dm_put_device call missing for 1:4 [ 38.064541][ T45] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 38.214522][ T45] usb 1-1: Using ep0 maxpacket: 16 [ 38.220800][ T45] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 38.231240][ T45] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 6.00 [ 38.240354][ T45] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.248384][ T45] usb 1-1: Product: syz [ 38.252620][ T45] usb 1-1: Manufacturer: syz [ 38.257303][ T45] usb 1-1: SerialNumber: syz [ 38.262946][ T45] usb 1-1: config 0 descriptor?? [ 38.269143][ T45] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 38.277004][ T45] usb 1-1: Detected FT232R [ 38.462740][ T625] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.464547][ T314] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 38.482086][ T45] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 38.489071][ T314] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 38.500139][ T625] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.509061][ T45] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 38.718211][ T314] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 38.729240][ T314] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 38.738880][ T314] usb 2-1: USB disconnect, device number 7 [ 38.755161][ T45] usb 1-1: USB disconnect, device number 7 [ 38.763849][ T45] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 38.773801][ T45] ftdi_sio 1-1:0.0: device disconnected