last executing test programs: 12.708660884s ago: executing program 1 (id=2): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x1fa, 0x1, 0x0, 0x2000, &(0x7f0000fe5000/0x2000)=nil}) syz_clone(0x64048000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ptrace$getsig(0x4202, 0x0, 0x3, &(0x7f00000000c0)) ioprio_set$pid(0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x1, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) add_key$fscrypt_v1(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffff9) r5 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$PTP_SYS_OFFSET(r5, 0x43403d05, &(0x7f0000000780)={0xa}) r6 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x80, 0x2, 0x65b, 0x0, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x0, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000640)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x3, 0x0, 0x2b, @empty, @empty, 0x0, 0x10, 0x200, 0xa}}) r7 = dup(r4) r8 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000406c256d0000000200000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000ac0)=ANY=[@ANYBLOB="002205"], 0x0}, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000004500)={0x14, 0x0, &(0x7f0000004400)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r9 = syz_open_dev$usbfs(&(0x7f0000000040), 0x20000007d, 0x0) sendmsg$IPSET_CMD_RENAME(r6, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000004}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x5, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20}, 0x4000841) preadv(r9, &(0x7f0000000000)=[{&(0x7f0000000100)=""/24, 0x18}, {0x0, 0x63}], 0x2, 0x0, 0x20) syz_usb_control_io$hid(r8, 0x0, 0x0) syz_usb_control_io$hid(r8, &(0x7f0000000300)={0x24, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0003"], 0x0, 0x0}, 0x0) syz_ublk_setup_queues(r7, r0, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0xf, 0x0, 0x33d}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffe, 0x20, 0x0, 0x144}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x37f3, 0x6449, 0x0, 0x242, 0x0, r7}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x200004, 0x40, 0x4, 0xffffffff}}], 0x1, 0x0, 0x0) 11.309708508s ago: executing program 1 (id=17): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40801, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x19bb8901b7441440) r1 = socket$can_raw(0x1d, 0x3, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)=@getsa={0x12c, 0x12, 0x1, 0x70bd26, 0x25dfdbfc, {@in=@broadcast, 0x4d4, 0xa, 0xff}, [@algo_crypt={0x104, 0x2, {{'ecb(blowfish)\x00'}, 0x5e0, "a1cb72a35efa6a4a34e5bc96af430357d34fcdb5304963b46452562146495056597823eb5207d87b4837444e1844d48fac40fc4b90e09c3d2a30640e1304eb666c873ee762533eacfe93e03744f852dbabedb6cf518063468ab13a1fc94f257055fe1dee719fb74b91d4d19943234ef33171134f970add98c8adea39edfa16aafc959080a554cdf0b57951da3d90e60cce4eb51d45a0e41fe4d0dc94ba71443678a07bc1040a126001b15ddfd5ff32a4ee4e18e4aac2f001e70d6dbd"}}]}, 0x12c}, 0x1, 0x0, 0x0, 0x54800}, 0x0) syz_pidfd_open(0x0, 0x0) close(r1) 11.23545897s ago: executing program 1 (id=20): mkdirat(0xffffffffffffff9c, &(0x7f0000000800)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000800)='./sys\x00', &(0x7f0000000840)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000880)='./sys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f00000008c0)='dummy_hcd.0', 0xb) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/bus/platform/drivers/dummy_hcd/bind\x00', 0x1, 0x0) write(r1, &(0x7f00000008c0)='dummy_hcd.0', 0xb) r2 = socket(0x6, 0x3, 0x0) landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x5}, 0x30, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0x4018aee2, &(0x7f0000000040)) clock_adjtime(0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x1d7) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1/file0\x00', 0x2) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x40, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@default_permissions}, {@uuid_on}]}) setsockopt$inet_int(r2, 0x0, 0xb, &(0x7f00000000c0)=0x1002, 0x4) sendto$inet(r2, 0x0, 0xfffd, 0x80, &(0x7f0000000000)={0x2, 0x4e20}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB="6c010000280001002dbd7000ffdbdf2515000000fcf8ce9fd8535cd680b70baa2ac931f15bffbff339e5149ff081c11ef993e8ee90ce55cc60a6d5de7339ecbf09ca7f229937e70bf7d4fb0c2fef9a9fa5561fbc541c86070b348f6ca17eb4c37795cff80a88b92484111f1a1f822f850c932d088e8cfc28af20430f7051dda568276aa4dd6f0ae1e8971513ee8f13e2770dbcd34b4cadfe2c973aba582272b7e50eb70962cd902bd313f39681f4314b48fe7380daa1f853f2a7ac3b0a9a004278f40e45a9c97d212a19f79a7d2e78e10fb0909f456b6d0e3808d0e59bc79f4da4c4050000001aa8f45dffe3bc47baaf124f9694bf6ab76ea04858b700080000005d17712a518bcc0f63f5accc7ff2d7d68730442130e617fc836419aa09896d5cbbeb0d3b6ea728bebdf0a79ecc70ff2bf0b8dee3b5d168e41a68d4f0549a3a3df83a98252cd38bf280c0d292274d2bc863b453131671c198ecb90e37027892c98a331195040039000800450081213c039655813b8a1dcc03e756e1", @ANYRES32, @ANYBLOB='\x00\x00\x00'], 0x16c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004004) 10.992597985s ago: executing program 1 (id=21): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0xb, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001240)={[0xc45, 0x9, 0x0, 0x10000000, 0x10000, 0x7, 0x4002004c2, 0x7ff, 0x9, 0xffffffff9685dc40, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x181}) timer_create(0x3, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='A', 0x1}], 0x1, 0x1, 0xc40) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r7, 0x29, 0x49, 0x0, &(0x7f00000000c0)) sendmsg$DEVLINK_CMD_TRAP_GET(r5, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="04c489018dad23b19026b4010000aa953dc8ad7b6ef999dc1fbde4174a86649e2adce22a9e6319415a52ec4520fe2adb493976abab60a02a7bd1f0889cbe8cc353dc369c685af49617cf9623586eff783062fe662b1c62d21a5505d3173df550077be8d7500b395dfc72bffc80f0caf1c5c781d147c9dc159ddd675937a1035a5a5faa73102fdea6155b30ef8107047b78b56f6c8d6d9be5e57f2a2f37b5876b7475c2a97e6a303d", @ANYRES16=r6, @ANYBLOB="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"], 0x104}, 0x1, 0x0, 0x0, 0x4080}, 0x4) ioctl$KVM_RUN(r4, 0xae80, 0x0) 10.982908165s ago: executing program 1 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)={0x200}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/130, 0x82}, 0xdb36}], 0x1, 0x40002042, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="240025800a001300776c616e3100000014001c00200100000000000000000000000000012ae8ba18d0ce6242759958cb9fe2fc9a4c9c47f9c95ccb3b81955dc8360b32c4030dcfc14b2a19a4a1ca569af39aa04ddbf62a6fca45660707c4d7442c196f9d9c67e748a932ff77e91a5f592538bfb9f71a0ddc861c353676228cb6beb170a447bdb7b5d822ca0a344654db7d9bc7c1f87e5aad7657406589e5b0fd823ca1cf80d30c6cab7542"], 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) 10.932941077s ago: executing program 32 (id=23): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000e40), 0x40001, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = dup(r3) ioctl$PTP_EXTTS_REQUEST2(r4, 0xc0603d06, &(0x7f0000000040)={0x200}) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f0000000340)=0x63ba, 0x4) setsockopt$inet6_int(r2, 0x29, 0x19, &(0x7f0000000000)=0x4, 0x4) sendmmsg$inet6(r2, &(0x7f0000000580)=[{{&(0x7f0000000080)={0xa, 0x4e20, 0x6, @local, 0x7}, 0x1c, 0x0}}], 0x1, 0x24000000) recvmmsg(r2, &(0x7f0000000dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/130, 0x82}, 0xdb36}], 0x1, 0x40002042, 0x0) sendmsg$netlink(r1, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000130001002bbd7000f8dbdf2504004f8008003300", @ANYRES32=0x0, @ANYBLOB="240025800a001300776c616e3100000014001c00200100000000000000000000000000012ae8ba18d0ce6242759958cb9fe2fc9a4c9c47f9c95ccb3b81955dc8360b32c4030dcfc14b2a19a4a1ca569af39aa04ddbf62a6fca45660707c4d7442c196f9d9c67e748a932ff77e91a5f592538bfb9f71a0ddc861c353676228cb6beb170a447bdb7b5d822ca0a344654db7d9bc7c1f87e5aad7657406589e5b0fd823ca1cf80d30c6cab7542"], 0x40}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) setsockopt$inet_tcp_int(r0, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000900)=[{{&(0x7f0000000300)={0x2, 0x4e23, @remote}, 0x10, &(0x7f0000000240)=[{&(0x7f0000000080)='o', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c040) 4.069412062s ago: executing program 0 (id=78): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x9d2, 0x9, 0x1, 0x45, 0x7, 0x15, 0x8, 0x3, 0x0, 0xfe, 0x6, 0x82, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r5 = dup(r4) mount$9p_fd(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000001040), 0x4, &(0x7f0000001080)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@cache_readahead}]}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.977097274s ago: executing program 0 (id=81): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000180)={0x18, 0x76, 0x31f, 0x70bd27, 0x25dfdbfb, "", [@typed={0x8, 0xe1, 0x0, 0x0, @fd}]}, 0x18}], 0x1, 0x0, 0x0, 0x2400c814}, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x600000)=nil, 0x60005f, 0x3) bind$802154_dgram(r1, &(0x7f0000000080)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x10) r4 = socket$key(0xf, 0x3, 0x2) mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x1, 0x0) write(r5, &(0x7f0000000140)='fff', 0x3) r6 = syz_open_dev$usbfs(&(0x7f0000000380), 0x10, 0x2) ioctl$USBDEVFS_CONTROL(r6, 0xc0185500, &(0x7f0000000480)={0x20, 0x1, 0x8, 0x1, 0x0, 0x3e8, 0x0}) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x4a, 0x0, {0x7, 0x1f, 0x9, 0x73110f4f, 0x9a64, 0x8002, 0x801ff, 0xbfeffffd, 0x0, 0x0, 0x10, 0x103}}, 0x50) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000000c0)={0x10004, 0x2, 0x10000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r8, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) write(r4, &(0x7f0000000140)="54a0b736bfd19e3e41d855d982fd23779cb0b238050dd73d4b4e0fb52b439facdab5cc42a3c0d4362c42a034c523f381f329ec544c0b56a97cdf6c7b0cf6994257193aa93ded1e98498a92a3ff86d162435cc8ed555ea99ca7bb2343b0aa6bccd9b49399680417a084a2c8a870fce934ea5c08aa6800eb7638ce0ed25456e339b7dcbb94f360e8945f8604806a30", 0x8e) getsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$netlink(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="1f043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) 3.916704885s ago: executing program 0 (id=82): socket$nl_audit(0x10, 0x3, 0x9) (async) socket$nl_audit(0x10, 0x3, 0x9) syz_usb_connect$uac1(0x1, 0xa6, &(0x7f0000000080)=ANY=[], &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) 2.595074347s ago: executing program 2 (id=87): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fde000/0x18000)=nil, &(0x7f0000000640)=[@text64={0x40, 0x0}], 0x1, 0x52, &(0x7f0000000000)=[@efer={0x2, 0xc00}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.427831351s ago: executing program 2 (id=89): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000002100), 0x10480, &(0x7f00000002c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000080)={0x50, 0x0, r2, {0x7, 0x29, 0x5, 0xffffffff9080edc4, 0x7, 0x0, 0x0, 0x4, 0x0, 0x0, 0x2, 0x4}}, 0x50) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f00000000c0)=0xc) read$FUSE(0xffffffffffffffff, &(0x7f0000000100)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000002140)={0x78, 0xfffffffffffffffe, r2, {0x80000000, 0x10001, 0x0, {0x3, 0x8, 0x7, 0x8000000000000001, 0x6, 0x7f, 0x9, 0xffff2a72, 0x74b1, 0xc000, 0x0, r3, r4, 0x4, 0x3}}}, 0x78) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r5, 0x0, 0x300, &(0x7f0000000040), 0x1) 2.368646342s ago: executing program 2 (id=90): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x88082, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000100)={[{0x5, 0x4000, 0x4, 0x5, 0x0, 0x8, 0x3, 0xa, 0x7e, 0x4, 0x15, 0x5, 0x80204}, {0x9d2, 0x9, 0x1, 0x45, 0x7, 0x15, 0x8, 0x3, 0x0, 0xfe, 0x6, 0x82, 0x20c}, {0x1, 0x3, 0x24, 0x5, 0x6, 0x7, 0x2, 0x50, 0xfd, 0x70, 0x4, 0x2}], 0xffbfffff}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) dup(r3) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, &(0x7f0000000000)="0f20e06635400000000f22e00f237e3e660f124bfab853058ec80f01ca0f20d86635080000000f22d80f01cad838ddeff20f58f3", 0xfffffffffffffe3c}], 0x1, 0x2, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.296860114s ago: executing program 2 (id=92): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000340), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r0, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x60, r1, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_SECCTX={0x1f, 0x7, 'system_u:object_r:var_t:s0\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast2}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}]}, 0x60}, 0x1, 0x0, 0x0, 0xc090}, 0x4040) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r2, 0x14, 0x70bd2d, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x1}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0xc}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_MAX_FRAME_RETRIES={0x5, 0xf, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x7ff734b942596e7a}, 0x44012) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x8040, 0x0) ioctl$TCSETS(r5, 0x40045431, &(0x7f0000000100)={0x0, 0xffffffff, 0x400001, 0x0, 0x90, "ff00050000000000000000e100e300"}) r6 = syz_open_pts(r5, 0x141601) write(r6, &(0x7f0000000000)="d5", 0xfffffedf) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSW2(r6, 0x402c542c, &(0x7f0000000040)={0x1, 0x9, 0x5, 0xae, 0x36, "668787fe4150caf251a42dcbffe468fb06bc47", 0x7f, 0x2}) 1.448401814s ago: executing program 3 (id=94): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mlock2(&(0x7f000000e000/0x1000)=nil, 0x1000, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000078c000/0x18000)=nil, &(0x7f0000000040)=[@textreal={0x8, &(0x7f0000000000)="0f01c30fc73bba400066edbaf80c66b803d1838866efbafc0cec660f38816e706564660f3acf435dfcf4f30f09302a0f01cf", 0x32}], 0x1, 0x22, &(0x7f00000000c0)=[@cr0={0x0, 0x10030}, @cr0={0x0, 0x40050032}], 0x2) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 1.409518345s ago: executing program 2 (id=96): r0 = fsopen(&(0x7f0000000040)='devpts\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x0, &(0x7f00000001c0)='posixacl\x00', 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) (async) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) setsockopt$inet_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, &(0x7f0000000080)=0x7947, 0x4) close_range(r1, 0xffffffffffffffff, 0x0) (async) close_range(r1, 0xffffffffffffffff, 0x0) ioctl$NILFS_IOCTL_CLEAN_SEGMENTS(r0, 0x40786e88, &(0x7f0000000500)={{&(0x7f0000000200)=[{0xffffffff80000001, 0x6000000000000, 0xffff, {0x4f5f, 0x2}, 0x2, 0x2, 0x3}, {0x9, 0xfeb, 0x2, {0x8, 0x1}, 0x1, 0x4}, {0xffffffff, 0x5, 0x6, {0x3, 0x7}, 0x2, 0x400, 0xfffffff9}, {0x7fffffff, 0x1, 0x0, {0x4, 0x2000000000000}, 0x5, 0xb, 0x8001}, {0x0, 0x5, 0x1, {0x9, 0x2}, 0x40, 0x0, 0x3}], 0x5, 0x40, 0x53, 0x7ff}, {&(0x7f0000000340)=[{0x100000001, 0x8000000000000000}, {0x1ffc0000, 0x8}], 0x2, 0x10, 0x3, 0x8000000000000001}, {&(0x7f0000000380)=[0x6], 0x1, 0x8, 0x3, 0x7fffffff}, {&(0x7f00000003c0)=[{0xfdb, 0x2, 0xaf, 0x5, 0xfffffffa}, {0x73ab, 0x100000000, 0x7fffffff, 0x7, 0x3}, {0x2, 0x7, 0x7fff, 0x3}, {0x4, 0x1, 0x6, 0x5, 0x1}, {0x0, 0x4, 0x9, 0x1ff, 0x7}], 0x5, 0x28, 0x7, 0x4}, {&(0x7f00000004c0)=[0x1, 0xf, 0x8], 0x3, 0x8, 0x9, 0x4d331671}}) 1.364597496s ago: executing program 4 (id=98): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54800}, 0x0) 1.353816447s ago: executing program 2 (id=99): pipe2(&(0x7f0000001cc0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) syz_usb_connect$uac1(0x3, 0xaa, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="0abb4e7f0000000000000000070000c4334123f59613afc3a15e4ac25cf40ef487b85fabaf881aeb14d388f2ff15e9a240ff6f"], 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x4b564d03, 0x0, 0x800000001}]}) ioctl$KVM_REINJECT_CONTROL(r1, 0xae71, &(0x7f0000001080)={0x8}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f000014f000/0x18000)=nil, 0x0, 0x0, 0x50, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r6, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) listen(r7, 0x0) accept4(r7, 0x0, 0x0, 0x0) r8 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000200)={0x0, 0x1, 0x1000, 0x1000, &(0x7f0000001000/0x1000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r9, 0x4008ae89, &(0x7f0000000300)={0x1, 0x0, [{0x11, 0x0, 0x1000}]}) ioctl$KVM_GET_NESTED_STATE(0xffffffffffffffff, 0xc080aebe, &(0x7f0000000000)=@svm={0x102, 0x1, 0x1080, {0xb000}, {"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"}}) syz_usb_connect(0x2, 0xb3, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100012700006cdc020101112402010102000000000000000002000009240302010100010009040100000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b711001000000001e240501008002e00100000000000000000060090015160500011516050009040101010e0200000705"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) ioctl$KVM_RUN(r4, 0xae80, 0x0) r10 = syz_open_dev$loop(&(0x7f0000000240), 0x7, 0x10c062) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000340)='/sys/power/sync_on_suspend', 0x80c02, 0xef) ioctl$LOOP_CONFIGURE(r10, 0x4c0a, &(0x7f0000000080)={r11, 0x0, {0x0, 0x0, 0x0, 0x2, 0x6010000000000ffd, 0x0, 0x5, 0x19, 0xc, "faf98317e5a1149989fc8dbe43ee6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60b534464c516bdd8a0f3500", "42d8cc26f7061a74df2cfc1fc89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd0c7f3f800b2f7b6aa54cc50c1fcaed1e831fa79a00", "141802c4daf4162e43ac61b7ad3300", [0xbffffffffffffce8, 0x100]}}) sendfile(r10, r10, 0x0, 0x2000000000409) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYRESDEC=r10, @ANYRESDEC]) 1.344994127s ago: executing program 4 (id=100): ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x80000002, 0x31237648, 0x6, 0x2, 0x31b6}]}) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed}]}) r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0xb, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x4008004) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000001240)={[0xc45, 0x9, 0x0, 0x10000000, 0x10000, 0x7, 0x4002004c2, 0x7ff, 0x9, 0xffffffff9685dc40, 0x400, 0x80, 0x89, 0xfffffffffffffffd, 0x8, 0x8d], 0x100000, 0x181}) timer_create(0x3, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080), 0x1, 0x0) pwritev(r5, &(0x7f0000000100)=[{&(0x7f00000000c0)='A', 0x1}], 0x1, 0x1, 0xc40) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r6, 0x29, 0x49, 0x0, &(0x7f00000000c0)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 1.265171319s ago: executing program 4 (id=101): mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r0, &(0x7f000000a340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000004200)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x80002, 0x0, 0x0, 0x0, 0x8002}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000042c0)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000970700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000eeffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0xd) 1.176657951s ago: executing program 3 (id=102): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x700000b, 0x12, r1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000240)='./binderfs2/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0), 0x0, 0x1000000, 0x0}) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x3000) (async) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) (async) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae01, 0x13) (async) ioctl$BTRFS_IOC_INO_PATHS(r2, 0xc0389423, &(0x7f0000000000)={0x9ad, 0x20, [0x7, 0x8001, 0x9, 0x1200000000000010], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0]}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000008, 0x10, r3, 0x2926e000) ioctl$VHOST_VSOCK_SET_RUNNING(r2, 0x4008af25, 0x0) 1.175546831s ago: executing program 3 (id=103): r0 = socket$netlink(0x10, 0x3, 0xa) setsockopt$sock_int(r0, 0x1, 0x28, &(0x7f0000000000)=0x8, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) listxattr(&(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=""/46, 0x2e) 1.174824151s ago: executing program 3 (id=104): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000001c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/41, 0x29, 0x0, &(0x7f00000000c0)=""/93, 0x5d}, &(0x7f0000000180)=0x40) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x5, 0x2, 0x70ff}, {0x6, 0xfe, 0x0, 0xa1a}]}, 0x10) (async, rerun: 32) sendmmsg(r3, &(0x7f0000002900)=[{{0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000b40)="97a797c5", 0xa797}], 0x1}}], 0x1, 0x0) (rerun: 32) write$binfmt_aout(r2, &(0x7f0000000300)=ANY=[], 0xff2e) (async, rerun: 32) ioctl$TCSETS(r2, 0x40045431, &(0x7f0000000100)={0x0, 0x0, 0x7, 0x1, 0xe, "a6ff40000000000000005917f73400"}) (async, rerun: 32) r5 = syz_open_pts(r2, 0x200) ioctl$TIOCSTI(r5, 0x5412, &(0x7f0000000300)=0xaf) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) (async) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x1e7}}}, &(0x7f0000000480)=0x0) (async, rerun: 32) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000005c0)={0x3, 0x0, [{0x4, 0x96, &(0x7f00000003c0)=""/150}, {0xfbfa1000, 0x3b, &(0x7f0000000500)=""/59}, {0x6000, 0x7b, &(0x7f0000000540)=""/123}]}) (rerun: 32) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB="02052006080000000000000000000000030006000000000002004e20640101040000000000000000030005000000000002004e21ac1e01010000000008000000"], 0x40}}, 0x200400c0) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = dup(r10) syz_ublk_setup_queues(r11, r8, 0x0, 0x0, 0x1, &(0x7f0000000340)={0x2e, 0x44, 0x0, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {}, 0x1f, r7, '\x00', {0xfff5, 0x4, 0x0, 0x0}}, 0x0) (async, rerun: 64) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000002c0)={{0x2, 0x3, 0xf3b, 0x1, 0x13fffffc}}) (rerun: 64) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) r12 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$TIOCSETD(r12, 0x80045440, &(0x7f0000000040)=0x15) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r14 = socket(0x25, 0x4, 0x10000) dup3(r6, r14, 0x80000) (async, rerun: 32) getsockopt$inet6_int(r13, 0x29, 0x10, 0x0, &(0x7f0000002740)) (rerun: 32) 1.000822705s ago: executing program 3 (id=105): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001640)=ANY=[@ANYBLOB='D\n\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="240003"], 0xa44}, 0x1, 0x0, 0x0, 0x4000}, 0x40) 979.522505ms ago: executing program 3 (id=106): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000107e05192000000000000109022d0001000000000904000005030015000921050000012205000905810320000000070905020310"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="00000800000008048236db37cff60c9511fc0bbda16ec966fa9ba10e6ebfb5671e6bb9"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_ep_write(r0, 0x81, 0x2, &(0x7f0000000100)="8102") r1 = syz_usb_connect$cdc_ncm(0x4, 0xd1, &(0x7f0000000040)=ANY=[@ANYBLOB="12011003020000182505a1a44000010203010902bf0002010650000900000000020d00000524060001082400a9b30d240f010a0000000300ff000606241a05001407240a050905580c240c00000000a90c0900030424020204240200042406024424"], 0x0) syz_usb_connect$cdc_ecm(0x6, 0x4d, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201100102000008250c0114fe000102030109023b00010102b040090400ff030206000802"], 0x0) syz_usb_connect(0x0, 0xf5, &(0x7f0000000180)=ANY=[@ANYRES8=r1], 0x0) 895.166798ms ago: executing program 0 (id=107): socketpair$unix(0x1, 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040), 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x3000002, 0x204031, 0xffffffffffffffff, 0xe60d3000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = syz_ublk_setup_io_uring(0xd, &(0x7f00000003c0)={0x0, 0xb0b5, 0x0, 0x2, 0x2eb}, &(0x7f0000000180)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000300)=0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0xff, 0x7, 0x7fc00002}]}) membarrier(0x10, 0x0) close_range(r7, r7, 0x0) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r7, 0x40182103, 0x0) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r9, 0x0, 0x39000, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) splice(r8, 0x0, r10, 0x0, 0x408cd, 0x4) write$binfmt_elf64(r2, &(0x7f0000000100)=ANY=[], 0xfffffe3e) r11 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r11, 0x65, 0x7, &(0x7f00000001c0), 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='./file0/../file0\x00', 0x0, 0x18d883, 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r12, 0x8914, &(0x7f0000000040)={'macsec0\x00', 0x300}) 408.735559ms ago: executing program 4 (id=108): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x54800}, 0x0) 365.461861ms ago: executing program 4 (id=109): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000007, 0x31, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r0, 0x8991, &(0x7f0000000000)={'veth0_vlan\x00', @random="010000201000"}) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000480)=[{0x6, 0x0, 0x0, 0x7ffffffb}]}) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x10, 0x80003, 0x7) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000280)={0x4000}, 0x10) r3 = socket$inet_tcp(0x2, 0x1, 0x0) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000380), 0x1, 0x0) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) setsockopt(r4, 0x107, 0x2, &(0x7f00000001c0)="110000000200010001001a00002b4000", 0x10) r5 = socket$inet6(0xa, 0x802, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001600010a00000000000000000c0000000c0000800800", @ANYRES16=r5], 0x20}}, 0x40816) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x1e1080, 0x0) ioctl$KVM_CREATE_VM(r6, 0xae03, 0xe7) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r3, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000500)={&(0x7f00000005c0)={0x4c, r7, 0x100, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0x4}, @NL80211_ATTR_OPER_CLASS={0x5, 0xd6, 0xd}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x1a}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xd}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x1}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x1}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x8090}, 0x14) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) ioctl$UFFDIO_COPY(0xffffffffffffffff, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x4000}) r10 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r10, &(0x7f00000065c0)=[{{&(0x7f0000000440)={0xa, 0x4e23, 0x0, @local, 0xfffffffc}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="120000000000000011000000"], 0x22}}], 0x1, 0x880) getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x19) 272.547843ms ago: executing program 4 (id=110): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_xen(0x0, &(0x7f0000004580)='.\x00', &(0x7f00000045c0), 0x1000000, &(0x7f0000004940)=ANY=[@ANYBLOB='trans=xen,version=9p2000.L,func=BPRM_CHECK,uid>', @ANYRESDEC=0x0, @ANYBLOB=',func=PATM_CHEC\x00\x00pcr=00000p00000000000035,fsname=/dev/md0\x00,uid=', @ANYRESDEC=0x0, @ANYBLOB=',obj_role=&&,fowner<', @ANYRESDEC=0x0, @ANYBLOB="2c6f626a5f757365723d7207696d699b2c6d61736b3d5e4d41595f455845432c00"]) ptrace(0x10, r0) ptrace$getregset(0x4205, r0, 0x1, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x4024854}, 0x4) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) sched_setaffinity(r0, 0x8, &(0x7f00000002c0)=0x3) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x13, &(0x7f0000000040)=0xf, 0x4) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r3, 0x8983, 0x0) recvmmsg(r2, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000080)=""/251, 0xfb}, {&(0x7f0000000180)=""/14, 0xe}, {&(0x7f00000003c0)=""/263, 0x107}, {&(0x7f0000000200)=""/14, 0xe}, {&(0x7f0000001680)=""/4096, 0x1000}, {&(0x7f00000013c0)=""/87, 0x57}, {&(0x7f0000000500)=""/198, 0xc6}], 0x8}, 0x1012}, {{0x0, 0x0, 0x0}, 0x2be9}], 0x2, 0x2, 0x0) accept4(r1, &(0x7f0000000080)=@isdn, &(0x7f0000000100)=0x80, 0x0) syz_usb_connect(0x0, 0x5d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040dd04058000000102030109024b00010100c0320904000003020a0000152412000174f03dbd1ec14470a3677134c9f5543708241301000100090583030800080000090581024000000000090502024000000000"], 0x0) rt_sigtimedwait(&(0x7f00000001c0)={[0x7f]}, &(0x7f0000000340), &(0x7f0000000600)={0x77359400}, 0x8) nanosleep(&(0x7f0000000300)={0x1}, 0x0) 84.155318ms ago: executing program 0 (id=111): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6_vti0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_DEBUG_GET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x20, r0, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004001}, 0x24000880) 51.113248ms ago: executing program 0 (id=112): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000440)={0x14, {{0x29, 0x0, 0x8, @private1, 0x7fff}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x33) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xfc4e) setreuid(0xffffffffffffffff, r5) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x28, 0x3, 0x0, {0x10, @ether_spec={@local, @remote, 0x1ff}, {0x0, @random="cc80348623a4", 0x2, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x4e22, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030305000000000000000000010000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ac}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) 0s ago: executing program 33 (id=112): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000000c0), 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x6, &(0x7f0000000440)={0x14, {{0x29, 0x0, 0x8, @private1, 0x7fff}}}, 0x88) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000300)={{0x0, 0x3, 0xf56, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x40980, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x4) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000080)=0x33) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xfc4e) setreuid(0xffffffffffffffff, r5) socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000000c0)=@ethtool_rxnfc={0x28, 0x3, 0x0, {0x10, @ether_spec={@local, @remote, 0x1ff}, {0x0, @random="cc80348623a4", 0x2, 0x8000, [0x2, 0x2]}, @udp_ip6_spec={@dev={0xfe, 0x80, '\x00', 0x28}, @mcast1, 0x4e22, 0x4e22, 0x9c}, {0x0, @broadcast, 0x3, 0x0, [0x3, 0x5]}, 0xfffffffffffffffe, 0x1}}}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000020303000000000000000000000100000800010001"], 0x1c}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="20000000030305000000000000000000010000000c0002"], 0x20}, 0x1, 0x0, 0x0, 0x94f7cfd7d57de2ac}, 0x0) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000000000)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.155' (ED25519) to the list of known hosts. [ 27.614465][ T36] audit: type=1400 audit(1787091893.310:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 27.615532][ T286] cgroup: Unknown subsys name 'net' [ 27.637239][ T36] audit: type=1400 audit(1787091893.310:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.665206][ T36] audit: type=1400 audit(1787091893.340:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 27.665414][ T286] cgroup: Unknown subsys name 'devices' [ 27.774348][ T286] cgroup: Unknown subsys name 'hugetlb' [ 27.780006][ T286] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 27.893113][ T36] audit: type=1400 audit(1787091893.590:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 27.915504][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 27.916649][ T36] audit: type=1400 audit(1787091893.590:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 27.941482][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 27.950073][ T36] audit: type=1400 audit(1787091893.590:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 27.982024][ T36] audit: type=1400 audit(1787091893.620:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.007818][ T36] audit: type=1400 audit(1787091893.620:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.033696][ T36] audit: type=1400 audit(1787091893.630:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.059918][ T36] audit: type=1400 audit(1787091893.630:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 28.920959][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.928406][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.935524][ T293] bridge_slave_0: entered allmulticast mode [ 28.941741][ T293] bridge_slave_0: entered promiscuous mode [ 28.948339][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.955512][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.962821][ T293] bridge_slave_1: entered allmulticast mode [ 28.969345][ T293] bridge_slave_1: entered promiscuous mode [ 29.090488][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.097765][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.104881][ T294] bridge_slave_0: entered allmulticast mode [ 29.111586][ T294] bridge_slave_0: entered promiscuous mode [ 29.118161][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.125358][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.132471][ T294] bridge_slave_1: entered allmulticast mode [ 29.138652][ T294] bridge_slave_1: entered promiscuous mode [ 29.180355][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.187500][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.194638][ T295] bridge_slave_0: entered allmulticast mode [ 29.200858][ T295] bridge_slave_0: entered promiscuous mode [ 29.209136][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.216210][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.223299][ T295] bridge_slave_1: entered allmulticast mode [ 29.229628][ T295] bridge_slave_1: entered promiscuous mode [ 29.283672][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.290771][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.298304][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.305360][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.317285][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.324497][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.331676][ T296] bridge_slave_0: entered allmulticast mode [ 29.338106][ T296] bridge_slave_0: entered promiscuous mode [ 29.344936][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.351982][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.359239][ T296] bridge_slave_1: entered allmulticast mode [ 29.365537][ T296] bridge_slave_1: entered promiscuous mode [ 29.443859][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.451027][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.458357][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.465414][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.488526][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.495707][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.503018][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.510139][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.544815][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.552990][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.560543][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.568611][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.576077][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.583693][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.599369][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.606805][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.616376][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.623532][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.663367][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.670697][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.678637][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.685726][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.695513][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.702585][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.716416][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.723500][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.761373][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.768476][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.784713][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.791784][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.810842][ T295] veth0_vlan: entered promiscuous mode [ 29.817327][ T293] veth0_vlan: entered promiscuous mode [ 29.843657][ T294] veth0_vlan: entered promiscuous mode [ 29.850233][ T293] veth1_macvtap: entered promiscuous mode [ 29.872536][ T295] veth1_macvtap: entered promiscuous mode [ 29.887342][ T294] veth1_macvtap: entered promiscuous mode [ 29.906176][ T296] veth0_vlan: entered promiscuous mode [ 29.924987][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 29.957848][ T296] veth1_macvtap: entered promiscuous mode [ 29.960975][ T313] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 30.077476][ T323] cgroup: subsys name conflicts with all [ 30.086729][ T323] process 'syz.0.1' launched '/dev/fd/6' with NULL argv: empty string added [ 30.262725][ T335] PM: suspend entry (deep) [ 30.352494][ T63] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 30.426041][ T345] SELinux: security_context_str_to_sid (sysadm_u) failed with errno=-22 [ 30.440355][ T345] overlayfs: workdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 30.456879][ T345] netlink: 'syz.0.10': attribute type 12 has an invalid length. [ 30.487705][ T347] capability: warning: `syz.0.11' uses 32-bit capabilities (legacy support in use) [ 30.495667][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.498223][ T347] 9pnet_fd: Insufficient options for proto=fd [ 30.506504][ T13] Filesystems sync: 0.233 seconds [ 30.519893][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.537175][ T63] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.547553][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.556964][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.567276][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.567389][ T63] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 30.572412][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 30.576710][ T63] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 30.601560][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.611284][ T63] usb 2-1: Manufacturer: syz [ 30.616619][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.616647][ T335] Freezing user space processes [ 30.625759][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.640307][ T63] usb 2-1: config 0 descriptor?? [ 30.640344][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.645487][ T335] Freezing user space processes failed after 0.012 seconds (1 tasks refusing to freeze, wq_busy=0): [ 30.665753][ T335] OOM killer enabled. [ 30.669804][ T335] Restarting tasks ... [ 30.672623][ T63] usb 2-1: can't set config #0, error -71 [ 30.674124][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.679609][ T63] usb 2-1: USB disconnect, device number 2 [ 30.692970][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.701907][ T335] done. [ 30.721916][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.727658][ T335] random: crng reseeded on system resumption [ 30.741384][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.741575][ T335] Abort: One or more tasks refusing to freeze [ 30.754345][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.757077][ T335] PM: suspend exit [ 30.768052][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.781914][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.800929][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.810581][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.820308][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.829639][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.829835][ T31] usb 4-1: device descriptor read/all, error -71 [ 30.839489][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.854697][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.864073][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.873227][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.882731][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.891796][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.901329][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.910466][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.920064][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.929388][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.939906][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.948969][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.959073][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.968344][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.977688][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 30.986854][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 30.996292][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.005629][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.014905][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.024120][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.033579][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.043062][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.052502][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.061658][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.071010][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.080051][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.089679][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.098781][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.108032][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.117163][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.126765][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.135755][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.144988][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.154085][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.163429][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.172973][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.182300][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.191415][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.201109][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.210107][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.219527][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.228562][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.238149][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.247144][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.256404][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.265401][ T349] usb usb7: check_ctrlrecip: process 349 (syz.2.12) requesting ep 01 but needs 81 [ 31.274837][ T349] usb usb7: usbfs: process 349 (syz.2.12) did not claim interface 0 before use [ 31.303720][ T357] cgroup: subsys name conflicts with all [ 31.432956][ T371] dummy_hcd dummy_hcd.0: remove, state 4 [ 31.438950][ T371] usb usb1: USB disconnect, device number 1 [ 31.455629][ T371] dummy_hcd dummy_hcd.0: stopped [ 31.460891][ T371] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 31.476933][ T371] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 31.485369][ T371] dummy_hcd dummy_hcd.0: Dummy host controller [ 31.495579][ T371] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 31.504582][ T371] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 6.12 [ 31.514250][ T371] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 31.522401][ T371] usb usb1: Product: Dummy host controller [ 31.530061][ T373] ======================================================= [ 31.530061][ T373] WARNING: The mand mount option has been deprecated and [ 31.530061][ T373] and is ignored by this kernel. Remove the mand [ 31.530061][ T373] option from the mount to silence this warning. [ 31.530061][ T373] ======================================================= [ 31.567115][ T371] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 31.576508][ T371] usb usb1: SerialNumber: dummy_hcd.0 [ 31.588640][ T371] hub 1-0:1.0: USB hub found [ 31.593889][ T371] hub 1-0:1.0: 1 port detected [ 31.667595][ T12] bridge_slave_1: left allmulticast mode [ 31.672926][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 31.674882][ T12] bridge_slave_1: left promiscuous mode [ 31.704053][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.723214][ T12] bridge_slave_0: left allmulticast mode [ 31.736799][ T12] bridge_slave_0: left promiscuous mode [ 31.749395][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.845029][ T31] usb 4-1: Using ep0 maxpacket: 32 [ 31.856319][ T31] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 127, changing to 10 [ 31.883069][ T31] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 31.898048][ T31] usb 4-1: config 0 interface 0 has no altsetting 0 [ 31.904928][ T31] usb 4-1: New USB device found, idVendor=0c45, idProduct=760b, bcdDevice= 0.00 [ 31.914413][ T12] veth1_macvtap: left promiscuous mode [ 31.914634][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.926269][ T12] veth0_vlan: left promiscuous mode [ 31.931464][ T31] usb 4-1: config 0 descriptor?? [ 32.039342][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.046647][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.054230][ T377] bridge_slave_0: entered allmulticast mode [ 32.061256][ T377] bridge_slave_0: entered promiscuous mode [ 32.067977][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.078430][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.085689][ T377] bridge_slave_1: entered allmulticast mode [ 32.092111][ T377] bridge_slave_1: entered promiscuous mode [ 32.142297][ T366] SELinux: failed to load policy [ 32.157799][ T31] usbhid 4-1:0.0: can't add hid device: -71 [ 32.166513][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.173083][ T31] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 32.173612][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.188681][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.195743][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.196927][ T31] usb 4-1: USB disconnect, device number 3 [ 32.239004][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.246591][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.256133][ T309] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.263334][ T309] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.273112][ T309] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.280167][ T309] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.305169][ T377] veth0_vlan: entered promiscuous mode [ 32.316971][ T377] veth1_macvtap: entered promiscuous mode [ 32.371587][ T390] cgroup: subsys name conflicts with all [ 32.452451][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 32.602599][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 32.610504][ T45] usb 3-1: New USB device found, idVendor=154e, idProduct=500e, bcdDevice= 0.40 [ 32.619857][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.628182][ T310] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 32.635938][ T45] usb 3-1: Product: syz [ 32.640234][ T45] usb 3-1: Manufacturer: syz [ 32.645021][ T45] usb 3-1: SerialNumber: syz [ 32.682459][ T31] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.772448][ T310] usb 1-1: device descriptor read/64, error -71 [ 32.843511][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 32.854634][ T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 32.855044][ T36] kauditd_printk_skb: 75 callbacks suppressed [ 32.855059][ T36] audit: type=1400 audit(1787091898.550:149): avc: denied { nlmsg_write } for pid=381 comm="syz.2.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 32.866249][ T31] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 32.901013][ T31] usb 5-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 32.910032][ T31] usb 5-1: Manufacturer: syz [ 32.918874][ T45] usb 3-1: USB disconnect, device number 2 [ 32.925207][ T31] usb 5-1: config 0 descriptor?? [ 32.947931][ T395] udevd[395]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 33.052484][ T310] usb 1-1: device descriptor read/64, error -71 [ 33.292442][ T310] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 33.394615][ T400] PM: suspend entry (deep) [ 33.432485][ T310] usb 1-1: device descriptor read/64, error -71 [ 33.460152][ T36] audit: type=1400 audit(1787091899.150:150): avc: denied { ioctl } for pid=408 comm="syz.3.31" path="socket:[3957]" dev="sockfs" ino=3957 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.484842][ T36] audit: type=1400 audit(1787091899.150:151): avc: denied { connect } for pid=408 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.505219][ T36] audit: type=1400 audit(1787091899.150:152): avc: denied { write } for pid=408 comm="syz.3.31" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 33.556494][ T12] Filesystems sync: 0.157 seconds [ 33.593412][ T400] Freezing user space processes [ 33.599948][ T400] Freezing user space processes completed (elapsed 0.001 seconds) [ 33.607965][ T400] OOM killer disabled. [ 33.612062][ T400] Freezing remaining freezable tasks [ 33.622447][ T400] Freezing remaining freezable tasks failed after 0.004 seconds (0 tasks refusing to freeze, wq_busy=1): [ 33.634180][ T400] Showing freezable workqueues that are still busy: [ 33.640806][ T400] workqueue usb_hub_wq: flags=0x4 [ 33.645881][ T400] pwq 6: cpus=1 node=0 flags=0x0 nice=0 active=5 refcnt=7 [ 33.645934][ T400] in-flight: 45:hub_event ,31:hub_event hub_event ,310:hub_event hub_event [ 33.646039][ T400] inactive: hub_event [ 33.646127][ T400] Restarting kernel threads ... done. [ 33.673013][ T400] OOM killer enabled. [ 33.677125][ T400] Restarting tasks ... done. [ 33.689141][ T400] random: crng reseeded on system resumption [ 33.695448][ T400] Abort: One or more tasks refusing to freeze [ 33.701594][ T400] PM: suspend exit [ 33.705392][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 33.713323][ T310] usb 1-1: device descriptor read/64, error -71 [ 33.736337][ T31] uclogic 0003:256C:006D.0001: interface is invalid, ignoring [ 33.832519][ T310] usb usb1-port1: attempt power cycle [ 33.946710][ T31] usb 5-1: USB disconnect, device number 2 [ 34.172434][ T310] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 34.245786][ T36] audit: type=1400 audit(1787091899.940:153): avc: denied { write } for pid=417 comm="syz.2.36" name="anycast6" dev="proc" ino=4026532532 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 34.269280][ T36] audit: type=1400 audit(1787091899.940:154): avc: denied { create } for pid=417 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.287054][ T422] 9pnet: Could not find request transport: 0000000000004e24 [ 34.289794][ T36] audit: type=1400 audit(1787091899.940:155): avc: denied { shutdown } for pid=417 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.316662][ T36] audit: type=1400 audit(1787091899.940:156): avc: denied { connect } for pid=417 comm="syz.2.36" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 34.340788][ T36] audit: type=1400 audit(1787091900.020:157): avc: denied { map } for pid=423 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.368197][ T36] audit: type=1400 audit(1787091900.020:158): avc: denied { read write } for pid=423 comm="syz.0.38" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 34.582454][ T45] usb 3-1: device descriptor read/64, error -71 [ 34.615626][ T310] usb 1-1: device not accepting address 4, error -71 [ 34.667769][ T440] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3070988179 (3070988179 ns) > initial count (1876204212 ns). Using initial count to start timer. [ 34.842428][ T45] usb 3-1: Using ep0 maxpacket: 16 [ 34.848683][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.859630][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.869454][ T45] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 34.882279][ T45] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 34.891356][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.900370][ T45] usb 3-1: config 0 descriptor?? [ 34.952495][ T63] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 34.972471][ T310] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 35.009910][ T310] usb 1-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01 [ 35.019100][ T310] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 35.027311][ T310] usb 1-1: Product: syz [ 35.031958][ T310] usb 1-1: Manufacturer: syz [ 35.036896][ T310] usb 1-1: SerialNumber: syz [ 35.043793][ T310] ums-karma 1-1:1.0: USB Mass Storage device detected [ 35.051536][ T310] ums-karma 1-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller) [ 35.051536][ T310] Please send a copy of this message to and [ 35.103686][ T63] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 35.114638][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.126183][ T63] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 35.136050][ T63] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 35.149825][ T63] usb 4-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 35.158974][ T63] usb 4-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 35.172372][ T63] usb 4-1: Manufacturer: syz [ 35.181638][ T63] usb 4-1: config 0 descriptor?? [ 35.283828][ T310] ums-karma 1-1:1.0: probe with driver ums-karma failed with error -5 [ 35.296259][ T310] usb 1-1: USB disconnect, device number 5 [ 35.312423][ T447] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 35.463559][ T447] usb 5-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.474648][ T447] usb 5-1: config 0 interface 0 has no altsetting 0 [ 35.481311][ T447] usb 5-1: New USB device found, idVendor=046d, idProduct=c532, bcdDevice= 0.00 [ 35.490725][ T447] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.499811][ T447] usb 5-1: config 0 descriptor?? [ 35.517060][ T45] usbhid 3-1:0.0: can't add hid device: -71 [ 35.523193][ T45] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 35.532012][ T45] usb 3-1: USB disconnect, device number 3 [ 35.589280][ T63] appleir 0003:05AC:8243.0002: unknown main item tag 0x0 [ 35.597054][ T63] appleir 0003:05AC:8243.0002: No inputs registered, leaving [ 35.605956][ T63] appleir 0003:05AC:8243.0002: hiddev96,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.3-1/input0 [ 35.907688][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.916167][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.924425][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.932665][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.941155][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.949856][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 35.958843][ T447] logitech-djreceiver 0003:046D:C532.0003: unknown main item tag 0x0 [ 36.903325][ T482] ôÛWgÚq: renamed from bridge_slave_0 (while UP) [ 36.913957][ T482] Zero length message leads to an empty skb [ 36.921901][ T482] TCP: TCP_TX_DELAY enabled [ 36.977700][ T375] usb 4-1: reset high-speed USB device number 4 using dummy_hcd [ 37.162428][ T310] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 37.240925][ T494] capability: warning: `syz.0.61' uses deprecated v2 capabilities in a way that may be insecure [ 37.273196][ T496] veth1: entered allmulticast mode [ 37.279517][ T496] veth1: left allmulticast mode [ 37.302409][ T310] usb 3-1: device descriptor read/64, error -71 [ 37.582382][ T310] usb 3-1: device descriptor read/64, error -71 [ 37.863138][ T310] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 37.992390][ T310] usb 3-1: device descriptor read/64, error -71 [ 38.012215][ T10] usb 5-1: USB disconnect, device number 3 [ 38.075223][ T36] kauditd_printk_skb: 9 callbacks suppressed [ 38.075242][ T36] audit: type=1400 audit(1787091903.770:168): avc: denied { ioctl } for pid=522 comm="syz.3.71" path="socket:[5746]" dev="sockfs" ino=5746 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.108225][ T36] audit: type=1400 audit(1787091903.810:169): avc: denied { write } for pid=522 comm="syz.3.71" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.170490][ T527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 38.197628][ T529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 38.206951][ T529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 38.218161][ T36] audit: type=1400 audit(1787091903.910:170): avc: denied { read } for pid=531 comm="syz.0.75" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.219899][ T532] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2817 sclass=netlink_route_socket pid=532 comm=syz.0.75 [ 38.241481][ T36] audit: type=1400 audit(1787091903.910:171): avc: denied { open } for pid=531 comm="syz.0.75" path="/dev/binderfs/binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.279016][ T310] usb 3-1: device descriptor read/64, error -71 [ 38.285825][ T36] audit: type=1400 audit(1787091903.910:172): avc: denied { read } for pid=531 comm="syz.0.75" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.306703][ T36] audit: type=1400 audit(1787091903.910:173): avc: denied { open } for pid=531 comm="syz.0.75" path="net:[4026532408]" dev="nsfs" ino=4026532408 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 38.329851][ T36] audit: type=1400 audit(1787091903.950:174): avc: denied { read write } for pid=531 comm="syz.0.75" name="mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.353285][ T36] audit: type=1400 audit(1787091903.950:175): avc: denied { open } for pid=531 comm="syz.0.75" path="/30/proc/mtrr" dev="proc" ino=4026532004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 38.377142][ T36] audit: type=1400 audit(1787091903.970:176): avc: denied { ioctl } for pid=531 comm="syz.0.75" path="/dev/binderfs/binder0" dev="binder" ino=13 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 38.402362][ T310] usb usb3-port1: attempt power cycle [ 38.408229][ T36] audit: type=1400 audit(1787091903.970:177): avc: denied { set_context_mgr } for pid=531 comm="syz.0.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 38.432425][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 38.562897][ T45] usb 4-1: USB disconnect, device number 4 [ 38.592383][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 38.602751][ T10] usb 5-1: too many configurations: 76, using maximum allowed: 8 [ 38.613661][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 38.621266][ T10] usb 5-1: can't read configurations, error -61 [ 38.742439][ T310] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 38.752428][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 38.763605][ T310] usb 3-1: device descriptor read/8, error -71 [ 38.893637][ T310] usb 3-1: device descriptor read/8, error -71 [ 38.912421][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 38.918040][ T10] usb 5-1: too many configurations: 76, using maximum allowed: 8 [ 38.927114][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 38.932387][ T375] usb 1-1: new low-speed USB device number 6 using dummy_hcd [ 38.934811][ T10] usb 5-1: can't read configurations, error -61 [ 38.948978][ T10] usb usb5-port1: attempt power cycle [ 39.072489][ T375] usb 1-1: device descriptor read/64, error -71 [ 39.132424][ T310] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 39.153754][ T310] usb 3-1: device descriptor read/8, error -71 [ 39.283646][ T310] usb 3-1: device descriptor read/8, error -71 [ 39.302430][ T10] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 39.322403][ T375] usb 1-1: device descriptor read/64, error -71 [ 39.322796][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 39.334562][ T10] usb 5-1: too many configurations: 76, using maximum allowed: 8 [ 39.343414][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 39.351006][ T10] usb 5-1: can't read configurations, error -61 [ 39.392528][ T310] usb usb3-port1: unable to enumerate USB device [ 39.482408][ T10] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 39.502771][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 39.508328][ T10] usb 5-1: too many configurations: 76, using maximum allowed: 8 [ 39.517653][ T10] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 39.519672][ T67] device offline error, dev sda, sector 1163574 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.525505][ T10] usb 5-1: can't read configurations, error -61 [ 39.536596][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145446) [ 39.543308][ T10] usb usb5-port1: unable to enumerate USB device [ 39.555092][ T67] Buffer I/O error on device sda1, logical block 145408 [ 39.568440][ T67] device offline error, dev sda, sector 1164078 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.579018][ T375] usb 1-1: new low-speed USB device number 7 using dummy_hcd [ 39.586664][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 145509) [ 39.598504][ T67] device offline error, dev sda, sector 1171734 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 39.598868][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 39.609428][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146466) [ 39.623443][ T13] Buffer I/O error on device sda1, logical block 145471 [ 39.633798][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146469) [ 39.641086][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 39.652430][ T67] device offline error, dev sda, sector 1196342 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.665368][ T13] Buffer I/O error on device sda1, logical block 146428 [ 39.675572][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 149542) [ 39.684052][ T13] Buffer I/O error on device sda1, logical block 146429 [ 39.694080][ T67] Buffer I/O error on device sda1, logical block 149504 [ 39.701215][ T13] Buffer I/O error on device sda1, logical block 146430 [ 39.707932][ T67] device offline error, dev sda, sector 1196846 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.725395][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 149605) [ 39.736971][ T67] Buffer I/O error on device sda1, logical block 149567 [ 39.744000][ T67] device offline error, dev sda, sector 1204518 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 39.744100][ T309] device offline error, dev sda, sector 1175590 op 0x1:(WRITE) flags 0x0 phys_seg 3 prio class 2 [ 39.754539][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 150564) [ 39.754583][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 150565) [ 39.765172][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2035, error -5) [ 39.776633][ T67] Buffer I/O error on device sda1, logical block 150527 [ 39.776685][ T67] device offline error, dev sda, sector 1208494 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.788785][ T309] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2030 starting block 146948) [ 39.800896][ T67] EXT4-fs warning (device sda1): ext4_end_bio:357: I/O error 16 writing to inode 2035 starting block 151061) [ 39.808190][ T13] Buffer I/O error on device sda1, logical block 150526 [ 39.818390][ T67] Buffer I/O error on device sda1, logical block 151023 [ 39.830559][ T309] device offline error, dev sda, sector 1179958 op 0x1:(WRITE) flags 0x0 phys_seg 1 prio class 2 [ 39.841652][ T67] device offline error, dev sda, sector 1208542 op 0x1:(WRITE) flags 0x0 phys_seg 2 prio class 2 [ 39.848828][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2030, error -5) [ 39.889442][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2034, error -5) [ 39.902222][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2028, error -5) [ 39.915182][ T13] EXT4-fs (sda1): failed to convert unwritten extents to written extents -- potential data loss! (inode 2027, error -5) [ 39.928647][ T556] Buffer I/O error on dev sda1, logical block 221, lost async page write [ 39.930282][ T73] Aborting journal on device sda1-8. [ 39.942550][ T73] Buffer I/O error on dev sda1, logical block 131072, lost sync page write [ 39.945422][ T286] EXT4-fs error (device sda1): ext4_journal_check_start:84: comm syz-executor: Detected aborted journal [ 39.952020][ T73] JBD2: I/O error when updating journal superblock for sda1-8. [ 39.972828][ T286] Buffer I/O error on dev sda1, logical block 0, lost sync page write [ 39.981068][ T286] EXT4-fs (sda1): I/O error while writing superblock [ 39.987964][ T286] EXT4-fs (sda1): Remounting filesystem read-only [ 40.002542][ T375] usb 1-1: device descriptor read/64, error -71 [ 40.020583][ T556] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 40.232782][ T573] netlink: 104 bytes leftover after parsing attributes in process `syz.3.88'. [ 40.252397][ T375] usb 1-1: device descriptor read/64, error -71 [ 40.364984][ T375] usb usb1-port1: attempt power cycle [ 40.702386][ T375] usb 1-1: new low-speed USB device number 8 using dummy_hcd [ 40.733332][ T375] usb 1-1: device descriptor read/8, error -71 [ 40.863361][ T375] usb 1-1: device descriptor read/8, error -71 [ 41.102394][ T375] usb 1-1: new low-speed USB device number 9 using dummy_hcd [ 41.143367][ T375] usb 1-1: device descriptor read/8, error -71 [ 41.273866][ T375] usb 1-1: device descriptor read/8, error -71 [ 41.384253][ T375] usb usb1-port1: unable to enumerate USB device [ 41.445208][ T610] SELinux: failed to load policy [ 41.572401][ T63] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 41.722367][ T63] usb 3-1: Using ep0 maxpacket: 16 [ 41.728923][ T63] usb 3-1: config 1 has an invalid descriptor of length 150, skipping remainder of the config [ 41.740271][ T63] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 41.751723][ T63] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.767622][ T63] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.775948][ T63] usb 3-1: Product: syz [ 41.780133][ T63] usb 3-1: Manufacturer: syz [ 41.790913][ T63] usb 3-1: SerialNumber: syz [ 41.932373][ T375] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 42.092411][ T375] usb 4-1: Using ep0 maxpacket: 16 [ 42.099821][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 42.111380][ T631] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 42.122598][ T631] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 42.137297][ T375] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 42.152380][ T375] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 42.189375][ T375] usb 4-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 42.201535][ T375] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 42.221925][ T375] usb 4-1: config 0 descriptor?? [ 42.228146][ T110] udevd[110]: worker [395] terminated by signal 7 (Bus error) [ 42.236794][ T110] udevd[110]: worker [395] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1' [ 42.261918][ T110] udevd[110]: worker [314] terminated by signal 7 (Bus error) [ 42.269626][ T110] udevd[110]: worker [314] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 42.297479][ T627] veth1_macvtap: left promiscuous mode [ 42.303102][ T627] macsec0: entered promiscuous mode [ 42.308566][ T627] macsec0: entered allmulticast mode [ 42.317274][ T636] veth1: entered allmulticast mode [ 42.324097][ T636] veth1: left allmulticast mode [ 42.350793][ T638] 9pnet: Could not find request transport: xen SYZFAIL: posix_spawnp failed (errno 5: Input/output error) [ 42.610296][ T343] bridge_slave_1: left allmulticast mode [ 42.616153][ T343] bridge_slave_1: left promiscuous mode [ 42.621954][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.630183][ T343] bridge_slave_0: left allmulticast mode [ 42.636018][ T343] bridge_slave_0: left promiscuous mode [ 42.641772][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.649431][ T310] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 42.661265][ T375] nintendo 0003:057E:2019.0004: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.3-1/input0 [ 42.688470][ T643] udevd[643]: failed to execute '/lib/udev/fido_id' 'fido_id': Input/output error [ 42.802386][ T310] usb 5-1: device descriptor read/64, error -71 [ 42.835501][ T343] veth0_vlan: left promiscuous mode [ 42.895256][ T375] nintendo 0003:057E:2019.0004: Failed to get joycon info; ret=-71 [ 42.905609][ T375] nintendo 0003:057E:2019.0004: Failed to retrieve controller info; ret=-71 [ 42.914470][ T375] nintendo 0003:057E:2019.0004: Failed to initialize controller; ret=-71 [ 42.925872][ T375] nintendo 0003:057E:2019.0004: probe - fail = -71 [ 42.932969][ T375] nintendo 0003:057E:2019.0004: probe with driver nintendo failed with error -71 [ 42.949859][ T110] udevd[110]: worker [342] terminated by signal 7 (Bus error) [ 42.958397][ T375] usb 4-1: USB disconnect, device number 5 [ 42.960431][ T110] udevd[110]: worker [342] failed while handling '/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0' [ 42.994712][ T63] usb 3-1: 0:2 : does not exist [ 42.999650][ T63] usb 3-1: unit 9 not found! [ 43.007566][ T63] usb 3-1: 4:0: cannot get min/max values for control 7 (id 4) [ 43.018032][ T63] usb 3-1: 4:0: cannot get min/max values for control 8 (id 4) [ 43.027817][ T63] usb 3-1: 4:0: cannot get min/max values for control 9 (id 4) [ 43.037830][ T63] usb 3-1: 4:0: cannot get min/max values for control 10 (id 4) [ 43.062508][ T63] usb 3-1: USB disconnect, device number 8 [ 43.145337][ T343] bridge_slave_1: left allmulticast mode [ 43.151187][ T343] bridge_slave_1: left promiscuous mode [ 43.157353][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.165007][ T343] ôÛWgÚq: left allmulticast mode [ 43.170039][ T343] ôÛWgÚq: left promiscuous mode [ 43.175030][ T343] bridge0: port 1(ôÛWgÚq) entered disabled state [ 43.183031][ T343] bridge_slave_1: left allmulticast mode [ 43.188702][ T343] bridge_slave_1: left promiscuous mode [ 43.194631][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.202072][ T343] bridge_slave_0: left allmulticast mode [ 43.207763][ T343] bridge_slave_0: left promiscuous mode [ 43.213459][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.221095][ T343] bridge_slave_1: left allmulticast mode [ 43.226823][ T343] bridge_slave_1: left promiscuous mode [ 43.232572][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.240126][ T343] bridge_slave_0: left allmulticast mode [ 43.246006][ T343] bridge_slave_0: left promiscuous mode [ 43.251722][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.446625][ T343] veth1_macvtap: left promiscuous mode [ 43.452180][ T343] veth0_vlan: left promiscuous mode [ 43.457894][ T343] veth1_macvtap: left promiscuous mode [ 43.463472][ T343] veth0_vlan: left promiscuous mode [ 43.468981][ T343] veth1_macvtap: left promiscuous mode [ 43.474820][ T343] veth0_vlan: left promiscuous mode