last executing test programs: 7.687086867s ago: executing program 2 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd01683afffe80000000000000000000000000000fff020000000000000000000000000001860090780104ff010500000254000000191f8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db0788"], 0x1a2) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a31000000004400040020000100"], 0x6c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="c4e1916c3f0f08642e660f73fdd50fc71a66baf80cb84bdcd185ef66bafc0cb000eeb912020000b81f320000ba000000000f30b805000000b9920000000f01d9650fc72e66b8dd008ee0640f0f9e000000809a", 0x53}], 0x1, 0x5c, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1}, 0x0) lseek(r0, 0x6636b276, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYRES8=r7], 0x1a) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r8, 0xca3, 0x4) sendfile(r8, r8, 0x0, 0x1200000000000) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000020803000000000000000000070000040900010073797a31000000000900010073797a3000000000050003000e0000002c0004800800014000000003080001405000000008000140000000020800014000000fff08000140000000020900010073797a300000000034000480080007400000000008000940222fa39708000340000000020800074000000003080005400000000308000740000060006dade2a7c9ac697237fa3068516384fc8f40a2e48433d415de642ada10436d"], 0xa0}, 0x1, 0x0, 0x0, 0x240000d1}, 0xc0) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'veth0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008080) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7.619526699s ago: executing program 2 (id=233): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) (async) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000001680), 0x2, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) (async) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, &(0x7f0000000200)={0x1, 0x0, [{0xc0010140, 0x0, 0x3ba}]}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r1, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @random="2d255977719b", @val={@val={0x88a8, 0x2, 0x1, 0x1}}, {@llc={0x4, {@llc={0xaa, 0xf0, '>', "c2"}}}}}}, 0x1a) memfd_create(&(0x7f0000000300)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02u\x9b\xafa\xac\x06\x9c&\xf5\xe3j\xfa\tcqM\xb8R\x86\xd9\xd2.\x9f\x12\xed\x10\f\xbd\x1a|\x8a\xbb\xda\xcfY\x98gU@\xf2M\xc0\xb5\xdf\x9a\x8d\xdb,n\xae\x0eT\x80\x8c\xfd\xd7\xb0\x94\x82t\x96\rKx\xc5\x9b\x8c\x87\x96\x8bc\xbc\xee\xcc\x9f\xe3F\x99V4\x8e;M\xa9\x823\xe3\xb3mG\x8f\xdb\xed\x1b\x05\xec\xfc\xd1\xb5\xfd\xec@\xdeU\xdd\xa4\xc1\xe4L)\x8e\xe5\x91\x8e\xd4\x89\xef\x95T\x05G\xac\xb8\xc1: )mh\xc7\xf1?\xbb\x13;\xad\x95\xd70\xb6\x0e\x7f\x84r\x0e\xbf\xc5\xf6\xd4\xdd\t\x14\x18\xf7\xefi\x93\x03\xd2\xf2\bK\"\xd2\xb5\xaa\xb8\xc8\xe0\xac\x99\xe8su\xcd\xc3E\x12\xd7\xdd\x96!\x16Tu\xe3\xf0\x84#R\xd9\xe3~Wj\xb0r\x87\'\xea\a\xcfOeK\x9daW\xf4\x87@\x9c\xf3\xf1K\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x91\xe6\xdb\xc2\xa5h\'\xdfIn\x97\x0263~\xeb\xbe(i\n\xc2k4\x7f\x12\xa9e`SOs\x8c\xb4\xe7FeQ\xc6$\x92j_U\xfa\b\xea\xb0bYkW\xc0\x05\aC{\xcc\x03T\x17\xa5Sk\x87P\xc2\x97D\xb2\xfa\x1b\x9fe\xf4\x10\x1a\xad\x92\xce\x88\x1b\xbc\xe14\x19\xaa\xd3\r\xf4\xa2\xc3\x9e=\xa0 \xe6j\xe5\x85\xf8\x97\x03\x15\xaa\x920\xdcrI\xd8\b\xfb\xc7\xe7xX\x00>d\xbb\xa71\xad\x9a\xfb\xe6\x13\x87\x93\\\xe5W-\xfc\xfd\xb8O\xb9j\xb8\xf2\x9dx\xb2\x86\xad\x92', 0x3) (async) syz_usb_connect$midi(0x0, 0x31, &(0x7f0000000200)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x644, 0x800f, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0x6, 0xa0, 0x7f, "", {{{0x9, 0x4, 0x0, 0x0, 0x1, 0x1, 0x3, 0x0, 0xd, [], [{{0x9, 0x5, 0xe, 0x2, 0x10, 0x5, 0x9, 0xca, {0x4}}}]}}}}}]}}, 0x0) memfd_create(&(0x7f0000000740)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\x1aX\x87\xf5\x1aP\x06\x9a\xa9\xa0\x98 )\xe3\xa1\xa2\xb1D\xe0\x15S\x89/m\xb71%\x80\x04Q\x1dN\xb0\x19\x81\x16@\xc0\xc4\"g\xd7Z\xb3\x17\xd1\xe7\x1b\xbd\xdck\x95\x16\x17\x95\xce\xa6\x92_\xe4\x9a\xaeA-\x02\x161\x8c\xe7\xa6.)\xadpM\x19\x1c\xcd\xf6S\x9a(:\x90\xb1\x8ft\xeb#\x82\x17\x8d\x00\xcaY\xe9\xf7\xee\x91\bx\x80\xa4\xa0\x16\b\x8b,\xdb\x88\x1e\xc1m\x91\xf0S\xc4\xc9\xefEBT\x8e\xff6\xff\xbb\xd4\xbe&\xf5St\v\xe1\x98;q\\\x1c\xe9\xcc\xfeV\xc3M5\xa9\xec\xc9\x8a\xee7\xbb\xa4\x1f\xc8\xfb\xaar15\xdf\\\xf4d\xc0\xc7\xf3\x88\x13\x94^01\xfc_\x91B\xacp\x8f\xfdx\xa5\xa9_t\x86\xe3%\xf1q\x00\x89c\x05H\x92\xa6\x93je\xfa\xd148\xd0N7', 0x2) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') (async) syz_usb_connect$uac2(0x3, 0x7b, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004044064780400001020301090269000301053009fb0b00010107208c0904000000010120000924010000090401010101022000090501090002400b0408250100cce27e13c28c3d004004000904020000010220000904020101010220000905820908004006030800"/123], 0x0) (async) setgroups(0x400000000000026f, &(0x7f0000000080)=[0x0, 0xee00]) socket(0x2, 0x6, 0x4000000) (async) read$FUSE(r7, &(0x7f0000001180)={0x2020}, 0x2020) (async) setsockopt$IP_VS_SO_SET_ADD(0xffffffffffffffff, 0x0, 0x482, &(0x7f0000000000)={0xff, @remote, 0x4e23, 0x3, 'dh\x00', 0x24, 0x2, 0x76}, 0x2c) (async) getgroups(0x6, &(0x7f0000000040)=[0xffffffffffffffff, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00]) (async) fchown(r0, 0xee00, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000006c0)=ANY=[], 0x28}], 0x1}, 0x0) (async) write$UHID_CREATE(r0, &(0x7f00000032c0)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f00000016c0)=""/223, 0xdf, 0x8001, 0x80, 0x6, 0x8, 0x12}}, 0x120) r9 = open_tree(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x89901) move_mount(r9, &(0x7f0000000000)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x200) (async) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, &(0x7f0000000340)=ANY=[@ANYBLOB='nr_inodes=5,size=4']) (async) recvmsg$inet_nvme(r9, &(0x7f0000001440)={&(0x7f00000031c0)=@l2tp={0x2, 0x0, @dev}, 0x80, &(0x7f0000001380)=[{&(0x7f0000000380)=""/4081, 0xff1}], 0x1, &(0x7f0000003240)=""/69, 0x45}, 0x41) 6.815551948s ago: executing program 2 (id=242): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001200010026bd7002fedbdf25feffffff0b00ce00000000000000000014002e800df30682"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x4000800) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, 0x0, &(0x7f0000000040)) 6.783159169s ago: executing program 2 (id=243): syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x862b01) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000180)='y\x105\xfb\xf7u\x83%:Ml\x9a\x9a\xb8\xe0>(\x13A-\x9a=\xb4r\xf1\x12y\xec;\x90\x06\x7f@\xf4\xe0\xc2\xb9x\xa4\x98S7\x06\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00Q\xcdO\xe3i\xbd\x01\x85\x0e\x19\xce\x82\xd52\x9e\x95\xa7xbh\xf6\xa4c\x8a\xa5,\xdd\x81Z\x04\xf5\xf9\xa1\xe1\xad\xc2`\xf15\xf2$\xf2\x1c\xb0\x87pI\xab.}W\xd3o\xd3n\x9d\xb3>r\x1c<\x1b\xa5\xe27\x9f\x10\xe5\\\x1d\xcd\x91i\xc4\xad\xeb\xe5h[\xf6_\xbeW\b1\x06V\x89\r\x19:S\xf4\x7f8\xcf\xe6\xe1Tl\x00{Z\xb1\x92?\xb2\xd8\xc0\xaf\x96\xff\xe4v\xe8\x04<\xa2\x91Y\xee\xd8Rr\xe1\xdb!Z\xda\x06\xd6\x02\xb4\xfb4\xbb;7\x94\xb6_\xda\x108\x86\xfa\x97\xc2,\x8c\xf4\xaf\xb9\xfd\x8d\xff(\xd3\xbc\xdf}:4\xb9\xa00?\xac\x86@\x87\xb9\x81\xeak\x8d\x8b>\x89I\x0e\xfa\xa7\x1c\xe9\xf1U\xfc=pm6\x10vk90\x99\x15\x96\xa3\xb8_\n\xd1K\xf7m\x1as\xbd\xc4\x19Q\xc2Ge\x0e$\xdd\xec\f:\\g\xc3RnC\xe4\xc1!\xae\xd9h\xa5\xe4K\xcf\xf3\xf7\xe5o\xae\xfa\xa8\xd90Kj\x12\xcd@W\xe5\xfat`\x83\xac\xc8\xc8\xf0\xf1)\xf6A\t\xdc\xbfQ\xa9\xaer\x1d\xa5fY\x9d{\xa6\xeb\xc0\v\\\xb5cv i\b\xfc\xb9\xaf\x1aA~2\xe7\xedj\x89\x1a\x9d\xef5n\x80\xbfu\xdbi\xc7\x9c\x17\xa7`\xf5\x01\xe1v\xb4\xd9\rn\xe1\x86A\x9b \'u\x05\xa6a3\x84z\x8e\xf1\xcd\xce\r\xf8Y3h\xd9\xed\xe8\xb5\x00\x8eCH\xf1\x00\xcfLo\x92y\xafg\xdf\xa8\x9e\xbb\xf0I5\xfb\x03\x18\xf0:\xff\xed\x02\x17\x84WSgi\xecJ\x82\xc9\xf3k\x8d\xf8\xfcE\xa9\xca\xafq\xe9\x9d^\xf2', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000000)={r1, 0x0, 0x0, 0x1000}) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086203, &(0x7f0000000080)=0x1) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/rcu_expedited', 0x169a82, 0x109) fsconfig$FSCONFIG_SET_PATH(r4, 0x3, &(0x7f00000023c0)='fscrypt:', &(0x7f0000002400)='./file0\x00', r4) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r5}, 0x10) r6 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r6, &(0x7f00000001c0)={0x1d, r7}, 0x10) setsockopt$CAN_RAW_ERR_FILTER(r6, 0x65, 0x2, &(0x7f0000000140)=0x7, 0x4) r8 = socket(0x10, 0x3, 0x0) socket(0x80000000000000a, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000380)={'syztnl0\x00', r5, 0x2f, 0x1, 0x7, 0x6, 0x30, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x40, 0x7, 0x0, 0xa7a}}) write(r8, &(0x7f0000000000)="2400000011005f046389e1f10009041f81fe00000e000000000000000800b9520f000100", 0x24) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='sys_mnt\x00', 0x1ff) r9 = openat(0xffffffffffffff9c, &(0x7f0000000240)='sys_mnt/block/zram0/algorithm_params\x00', 0x1, 0x0) write(r9, &(0x7f0000000140)='\x00\x00', 0x2) r10 = socket(0x10, 0x4, 0x0) sendmsg$nl_generic(r10, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x20004014) r11 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r11, 0x402, 0x91ea6c1af182532) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) recvmsg(r12, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x40740}], 0x318, 0x0, 0xdb0, 0xf5ffffff}, 0x3f01) 6.639485262s ago: executing program 2 (id=244): mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='myproc\x00', &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='myproc/bus/pci/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000600)=""/1024, 0xfdef) r1 = socket(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./mydev\x00', 0x1ff) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r2) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r3, r3, 0x0) quotactl_fd$Q_GETNEXTQUOTA(r1, 0xffffffff80000900, r3, &(0x7f0000000140)) ptrace$getregset(0x4204, r2, 0x204, 0x0) mount(0x0, &(0x7f0000000200)='./mydev\x00', &(0x7f0000000300)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./mydev/ttyS0\x00', 0x2, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(r5, 0x0, 0x0) close(r5) r6 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./mydev/ttyS0\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000600)=0x1) r8 = syz_clone(0x10f00, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setaffinity(r8, 0x0, 0x0) write(r6, 0x0, 0x0) write(r6, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) read(r7, &(0x7f0000000b00), 0x64) write(r4, &(0x7f00000001c0)="f0a9dba8b1cf92a79c58b495545416fb8a31ccd789805dca73540a50e10a910885d03467254fd2c767f07186660f083676efdb09", 0x34) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'veth0_vlan\x00', &(0x7f0000000040)=@ethtool_cmd={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x404, 0x1, 0x0, 0x0, 0x0, 0x3fffffc, [0x0, 0x10001]}}) 6.593455143s ago: executing program 2 (id=245): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x0) ioctl(r0, 0x40104d05, &(0x7f0000000240)="00000101000000090000010001") 4.783593326s ago: executing program 3 (id=257): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) close_range(r1, 0xffffffffffffffff, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000000)=0x3d) syz_usb_connect$uac2(0x3, 0xa8, &(0x7f0000000280)=ANY=[@ANYBLOB="120110030000004082054c00400001020301090296000301053009080b00010107208c0904000000010120000924010040041d000708240b0001ff23000c240302070300040007008109040100000102f700090401010101022000090501090002030b04082501000040040009040200000102200009040201010102200009240201000f0e07011024010201000400000008b8000000030905820908"], &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0}) 4.056974894s ago: executing program 0 (id=261): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'tunl0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x8000, 0x8000, 0x1, 0x1, {{0xc, 0x4, 0x0, 0x37, 0x30, 0x67, 0x0, 0x5, 0x29, 0x0, @multicast1, @multicast1, {[@timestamp_addr={0x44, 0x1c, 0xf6, 0x1, 0x1, [{@multicast1, 0x6d6}, {@private=0xa010100, 0xfffffe12}, {@multicast1, 0x6}]}]}}}}}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000100)={@initdev, @loopback, 0x0}, &(0x7f0000000140)=0xc) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000280)={'gre0\x00', &(0x7f00000001c0)={'gre0\x00', r1, 0x40, 0x10, 0x3, 0x0, {{0x1a, 0x4, 0x3, 0x17, 0x68, 0x64, 0x0, 0x2, 0x4, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0x95, 0x3, 0x5, [{@loopback, 0x9}, {@rand_addr=0x64010100, 0xfffffffc}, {@rand_addr=0x64010100, 0x100}]}, @timestamp={0x44, 0x10, 0x91, 0x0, 0x9, [0x5, 0x9, 0x2]}, @rr={0x7, 0x17, 0x5f, [@multicast2, @empty, @loopback, @rand_addr=0x64010101, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0xc5, 0x3, 0x6, [{@private=0xa010102, 0x6}]}, @ra={0x94, 0x4}, @end]}}}}}) ioctl$NILFS_IOCTL_GET_SUINFO(r0, 0x80186e84, &(0x7f0000000740)={&(0x7f0000000700)=[{0x2, 0x4, 0x2}, {0x7, 0xffffffff, 0x2}, {0x1000, 0xa, 0x1}, {0x3, 0xfffffffe, 0x1}], 0x4, 0x10, 0x8000, 0x2}) r2 = inotify_init() ioctl$int_in(r2, 0x5452, &(0x7f0000000000)=0x7fffffffffffffff) syz_usb_connect$uac3(0x3, 0x98, &(0x7f0000000080)=ANY=[@ANYBLOB="1201100100000008410e494240000102030109028600030109200c080b0001010130080904000000010130000a24010122000010000013240303000001060004dc0002050004000a001f240a06"], 0x0) vmsplice(r0, &(0x7f0000000640)=[{&(0x7f00000002c0)="b864d0833e6dc1f1f1e587f488278d156eb64693e3337fdac03c957f97f97c715a5ce46dc43f0c4a01c59c94b1643a0c985e09cafbe9b4215d7289758772ecdbea666d759b0091b4ca6e97bb1ef200306bcbb024ba87b030d018a71f30ccf0d310a075206e355538b59efcc4ed8b002adeecf5b1f5aad6b1cba9466467631af7ae17c9a2963eb503775ec81c1d10c597184f118b41abe9c9fe122d1725bce17527e7f998eb2813c47c22e898564434b88169a80b", 0xb4}, {&(0x7f0000000380)="1ac78fd3d9e1ce56e050fb0cdcb7d8da9a580b47e9c8f47a9c6baccc8cc04ab18cce4dbc429fbeacb962e68dbafb9c1c7cedbc1f686dd65d8e7bae4756b11e5f1c66c9a4f223b77f32ccffb5408616ffd452dde5245c150a5eecb7fef1a112001dadc08e8eb6b928b0beacfda7bf778693565cc9040ffe267bc25c4215e0b3c749e5a652d309e688b50c184532fc573de5fe40faaf3bc32b8071e003e41f8dcfae286d1e7fe85cfd2fc270be1e153088083f5f67375f1b93ce46aa3c7ebfd90f5ac450ebb19f42fc4e4cadcd73ffc07023415abfd04c662ab12da59363e8d8041b560cb12e2dfdd2a2399812c431", 0xee}, {&(0x7f0000000480)="085a54f132b1702c5c5c51cd3813066e961769525d4980155bdcac3240740e1b66e030cdd10152b56b228372e79e27bef7726c94a7608082786022609a5568ce48fe5c53c12cfbc33ab41455c993c5f6ab7ad376dbf3a7913dc147de62b4f97122bc24773fca7deb90795de0a3339e3f115e4f40b258f566dd0d6aedaf53d96add04fd4d0ad95ea52fafb05912d32c6927f75bfee72bcd96ba8003ac5e4042cb96d0f2e0805e7aadb5e0755f93c9a739b24bf59e166178e3e542634152e07fc193af61a6a676726ce50903a151940a4945d5dffe31dc8ded2b2a", 0xda}, {&(0x7f0000000580)="cc23101f61e59c16da4f94ad5577c85cb3e1cd95cad04642384214189a1a2e637a8dcf8aedc8cf212d2e3e6ee9bdcd4be299eff3b07a85bd238580cdd27cc0028d4bbc0c93db56dd5e735f01508da2dd1626d9c4ad459730ebf801cd34c41ab09da19f1cc08f8aa56df899d28aec630c831f66e07516810fa2a122ab344d007ddc57421993122aba10ab28fae5cdc9fc51cec100f696064595abcde69c5614b87dcef74b594817342df56012aa9a2b3761e0a8b89a479c0bb793c18bbd", 0xbd}], 0x4, 0xd) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000780)={'filter\x00', 0xa8, "6db02c1f5cf0ae2c07d2fed4ebd94e5ae7daa151f2cb2a09503c9911e8100cf8457b99d9adbf0dcec48c624d3a6734847e91fe5a9c25a66097adf2b5b8f8acceefbc8777103131e54e1ecc2a5e28c1356649337fcefd7ffd018513844bed5983e570733b250604a7180d3e0a6d35a230c36707984b16f06a0e3eb3e03bc66ab8edef78b5b06ec0340a34819f3028a614ed08c8077bcd75a012333fbb25fb93fabd3bbb7bd5f70a8c"}, &(0x7f0000000880)=0xcc) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000680)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) 3.534662536s ago: executing program 3 (id=262): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="014b00004000000000f70100000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x40}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000280)={0xa, 0x4e20, 0x1, @mcast1}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) ioctl$KDSKBENT(r3, 0x4b47, 0x0) r4 = socket$can_bcm(0x1d, 0x2, 0x2) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) mount(0x0, &(0x7f0000000000)='.\x00', 0x0, 0x303402e, 0x0) r7 = syz_clone(0xb2b60000, 0x0, 0xfffffffffffffcd1, 0x0, 0x0, 0x0) r8 = syz_pidfd_open(r7, 0x0) setns(r8, 0x24020000) mount$bind(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0x1021, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x4e21, 0x659, @empty, 0xff}, 0x1c) setsockopt$inet6_udp_int(r10, 0x11, 0x67, &(0x7f0000000100)=0x17ff, 0x4) r11 = fcntl$dupfd(r10, 0x406, r10) write$cgroup_pid(r11, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8924, &(0x7f0000000200)={'macvlan0\x00', @broadcast}) connect$can_bcm(r4, &(0x7f00000000c0)={0x1d, r9}, 0x10) socket(0x10, 0x3, 0x0) r12 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_int(r12, 0x29, 0x1000000000021, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 3.485022788s ago: executing program 3 (id=263): socket$inet(0x2, 0x2, 0x0) r0 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x7, 0x12, r0, 0xe84e000) r1 = syz_ublk_setup_io_uring(0x43f0, 0x0, 0x0, 0x0, &(0x7f0000000340)=0x0) write(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./config/usb_gadget/g1/idProduct\x00', 0x1, 0x0) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/uac2.usb0\x00', 0xffffffffffffff9c, 0x0) write(0xffffffffffffffff, 0x0, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0xfff, 0x4, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x8, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x4, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x43b, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0x8, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x7, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa771, 0x6, 0xffffffff, 0x1afa, 0xbf8, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x3, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x71c, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000100001000000000000000000bd00000a1c000000000a0103000000000000000001000000080002"], 0xac}}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x224000, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) r7 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r8 = dup(r7) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r9 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r9, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r7, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r9, 0xae80, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r10, 0x28, 0x1, 0x0, 0x0) syz_ublk_add_dev(r1, 0x0, 0x0, r2, 0x0, &(0x7f0000000280)=0x0) syz_ublk_setup_queues(r1, r11, 0x0, 0x0, 0x4, 0x0, 0x0) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) 3.295325272s ago: executing program 1 (id=265): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.104691836s ago: executing program 1 (id=266): r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/notes', 0x0, 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000380), 0x48f82, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x12, r1, 0xe851000) madvise(&(0x7f00000b3000/0x2000)=nil, 0x2000, 0xe) ioctl$BLKFLSBUF(r1, 0x1261, &(0x7f0000000000)=0x1aff) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) read$FUSE(r0, 0x0, 0x3) listxattr(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0x0) 2.899821261s ago: executing program 1 (id=267): r0 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') (async) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0}, &(0x7f00000013c0)=0xc) sendmmsg$unix(r4, &(0x7f00000001c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000580)='[', 0x1}], 0x1, &(0x7f0000001480)=[@cred={{0x1c, 0x1, 0x2, {r5, r6}}}], 0x20, 0x40044}}], 0x1, 0x4) setsockopt$sock_int(r3, 0x1, 0x10, &(0x7f00000002c0)=0x8001, 0x4) write$binfmt_elf64(r4, &(0x7f0000000600)=ANY=[], 0x78) recvmmsg(r3, &(0x7f00000010c0), 0x1, 0x382, 0x0) write$binfmt_script(r2, &(0x7f0000000080)={'#! ', './file1', [{}]}, 0xc) r7 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) (async) setsockopt$inet6_group_source_req(r7, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) (async) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r8, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="20000000110001000000000000000000100000e60b"], 0x20}], 0x1}, 0x0) (async) close(r2) syz_clone(0x102200, 0x0, 0xffffffffffffff88, 0x0, 0x0, 0x0) (async) r9 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) write$selinux_attr(r9, &(0x7f0000000100)='system_u:object_r:hugetlbfs_t:s0\x00', 0x1d) prlimit64(r5, 0x7, &(0x7f0000000040)={0x6, 0x3}, &(0x7f0000000340)) (async) r10 = memfd_create(&(0x7f00000008c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x8e\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfczb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\x1d\xb5\x81\xce\xb7\xc0t\x83\\\xf7J\x12\xab\x8d\xf2\bc2\xe9]\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95fE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xdcdP\xb1\xf2a\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5-\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\x9f\xdf!\x9bF\xad\fjD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xbe\x00\x00\x00\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00x0}) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f0000000680)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000540)={0xcc, r6, 0xb02, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x2, 0x2d}}}}, [@NL80211_ATTR_TX_RATES={0x70, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x6c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x10, 0x2, [{0x1, 0x4}, {0x0, 0x2}, {0x2, 0x9}, {0x7, 0x7}, {0x6, 0x5}, {0x1, 0x7}, {0x6, 0xa}, {0x7, 0x8}, {0x0, 0x5}, {0x7, 0x8}, {0x3, 0x1}, {0x0, 0x6}]}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x2, 0xa}, {0x7}]}, @NL80211_TXRATE_HT={0x2c, 0x2, [{0x2, 0x9}, {0x1, 0x8}, {0x6, 0x2}, {0x2, 0x3}, {0x3, 0x4}, {0x0, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x4, 0x7}, {0x7, 0xa}, {0x2, 0x8}, {0x1, 0x3}, {0x1, 0x3}, {0x5, 0x8}, {0x3, 0x4}, {0x3, 0x9}, {0x1}, {0x4, 0x5}, {0x3, 0x2}, {0x6, 0x9}, {0x0, 0x6}, {0x7, 0x8}, {0x4, 0x3}, {0x1, 0x5}, {0x2, 0x7}, {0x0, 0x2}, {0x7, 0x2}, {0x3, 0x4}, {0x6, 0x3}, {0x1}, {0x2, 0x8}, {0x0, 0x6}, {0x5, 0xa}, {0x1, 0x4}, {0x4, 0x8}, {0x5, 0x2}, {0x0, 0x8}, {0x6}, {0x4, 0xa}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0xe611, 0x5, 0x6, 0x3, 0x5, 0x0, 0x7ff]}}]}]}, @NL80211_ATTR_HE_BSS_COLOR={0x34, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x27}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x7}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x15}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x4}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x20000050}, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000880)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000840)={&(0x7f00000006c0)={0x148, r6, 0x300, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x8, 0x2f}}}}, [@NL80211_ATTR_FRAME_MATCH={0xaf, 0x5b, "6ecdefa2d63d5dcfe20c4cd586e60f9a96812dd1301e67e6ffcaf0dceb42e6a78f92b18b5f3c7c62624dcaf3cff1ec5ec52075adf585b2a4860515f7ed14d0fbf15fe1225a4f14074d5b23c57f3e5096637e24799562be71a69fd679f77c8bceaf4b13a2888d11f4414f815528eb77f19382dcbaba1744b26480969d2ae57074378f0ce77dfb756378bbd5040605857b28a2a9d49f978d8677778421edda0bb268a469b1660c15851d2530"}, @NL80211_ATTR_FRAME_MATCH={0x10, 0x5b, "5329f3cb0e3cc95ebb721f7e"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x9}, @NL80211_ATTR_FRAME_MATCH={0x5f, 0x5b, "c3421f3e897e7792b9799c8f4f9c5221133f0f4bfd35f145af726d043c15b5a5a7a10ad19cc029ab99809ba26d947e2eca845a85765cd50b6d9bdf11e50c34f4a35556050fd39beafa682e2091cda98bec8a15082aee09923f080d"}]}, 0x148}, 0x1, 0x0, 0x0, 0x40810}, 0x20004040) 2.673645847s ago: executing program 1 (id=269): r0 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x40d01, 0xd4, 0x39}, 0x18) write$binfmt_elf64(r0, &(0x7f0000000080)={{0x7f, 0x45, 0x4c, 0x46, 0x5, 0x76, 0x40, 0x5, 0xa15, 0x3, 0x6, 0x8, 0x344, 0x40, 0x37f, 0x5eb82ebf, 0x7, 0x38, 0x2, 0x6, 0x7, 0x7fff}, [{0x4, 0x8000, 0x758, 0x3, 0x6, 0x4, 0xfffffffffffffff9, 0x1}, {0x0, 0x0, 0x9b2, 0x88, 0x7, 0x5, 0x200, 0x11e0}], "c6b5b88dd8abce1566825bc4bc8ac429277e0829a0eb775c4d9e19dcdb59c7a72e3d3655ef53f9643038de5e21f3312944feca4cd7382b6b41751e652c8e87ba5eb754ef6eb30c574108343c4bbf9b89b2c51adb3141a10e77", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x609) readv(r0, &(0x7f0000000a00)=[{&(0x7f00000006c0)=""/53, 0x35}, {&(0x7f0000000700)=""/116, 0x74}, {&(0x7f0000000780)=""/3, 0x3}, {&(0x7f00000007c0)=""/88, 0x58}, {&(0x7f0000000840)=""/43, 0x2b}, {&(0x7f0000000880)=""/109, 0x6d}, {&(0x7f0000000900)=""/210, 0xd2}], 0x7) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000a80)) ioctl$BLKDISCARDZEROES(r0, 0x127c, &(0x7f0000000ac0)) syz_open_dev$loop(&(0x7f0000000b00), 0x200, 0x0) (async) r1 = syz_open_dev$loop(&(0x7f0000000b00), 0x200, 0x0) ioctl$BLKCRYPTOPREPAREKEY(r1, 0xc040128b, &(0x7f0000000c00)={&(0x7f0000000b40)="18e0d5110c", 0x5, &(0x7f0000000b80)=""/77, 0x4d}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000c80)={0x4, &(0x7f0000000c40)=[{0x0, 0x6, 0x8, 0x2}, {0x8, 0x0, 0x8, 0x7}, {0x1000, 0xf, 0x8, 0x800}, {0x8, 0xff, 0x4, 0x1}]}) write$input_event(r0, &(0x7f0000000cc0)={{}, 0x1f, 0x1}, 0x18) (async) write$input_event(r0, &(0x7f0000000cc0)={{}, 0x1f, 0x1}, 0x18) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r2) r3 = fsmount(r0, 0x1, 0x71) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) fstat(r1, &(0x7f0000000d00)) (async) fstat(r1, &(0x7f0000000d00)={0x0, 0x0, 0x0, 0x0, 0x0}) quotactl_fd$Q_QUOTAON(r3, 0xffffffff80000202, r4, &(0x7f0000000d80)='./file0\x00') ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8982, &(0x7f0000000dc0)={0x8, 'veth0_to_batadv\x00', {'pim6reg1\x00'}, 0x81}) bind$netlink(r0, &(0x7f0000000e00)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) (async) bind$netlink(r0, &(0x7f0000000e00)={0x10, 0x0, 0x25dfdbfd, 0x8000}, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(0xfffffffffffffffe, r5) openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e40), 0x40) (async) r6 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000e40), 0x40) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000e80)) (async) ioctl$SNDRV_TIMER_IOCTL_STATUS32(r6, 0x80585414, &(0x7f0000000e80)) openat$cgroup_ro(r3, &(0x7f0000000f00)='cpuacct.stat\x00', 0x0, 0x0) (async) r7 = openat$cgroup_ro(r3, &(0x7f0000000f00)='cpuacct.stat\x00', 0x0, 0x0) ioctl$KVM_CAP_XEN_HVM(r7, 0x4068aea3, &(0x7f0000000f40)={0x26, 0x0, 0xc9}) ioctl$BLKROGET(r0, 0x125e, &(0x7f0000000fc0)) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001040), r7) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000001080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000001140)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x28, r8, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x5dfc, 0x6b}}}}, ["", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8004}, 0xc000) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r7, 0xc0502100, &(0x7f0000001180)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000001200)={r10, 0x9, 0x80000001}) (async) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r0, 0xc0182101, &(0x7f0000001200)={r10, 0x9, 0x80000001}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001280), r7) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf4, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x40001) (async) sendmsg$DEVLINK_CMD_PORT_GET(r7, &(0x7f0000001400)={&(0x7f0000001240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000013c0)={&(0x7f00000012c0)={0xf4, r11, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}]}, 0xf4}, 0x1, 0x0, 0x0, 0x800}, 0x40001) 2.53426073s ago: executing program 1 (id=270): timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) (async) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) (async) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x20000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x2f) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fda000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000200)="b805000000b9fa0000000f01d9660f78c4020a3ef32e650f09b805000000b90000c0fe0fae41d901000000b87f8b7f26ba000000000f30660fc775022e0fba600c980f320f3566b857000f20c035000000800f22c0", 0x55}], 0xaaaaaaaaaaaaaf6, 0x10, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fd6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) (async) ioctl$KVM_RUN(r2, 0xae80, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000240)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) 2.266891606s ago: executing program 3 (id=271): setns(0xc9, 0x0) r0 = socket(0xa, 0x3, 0xff) r1 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r1, &(0x7f0000000140)={&(0x7f0000000100)={0xa, 0xa, 0x7, @loopback}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000040)="c6e73700000000e06d2ff7794f9a512ab227507413806b5455fa146f183dcf58a8cc9290000000d12fccc2d62437a14dd9", 0x31}], 0x1}, 0x44) r2 = fsopen(&(0x7f0000000000)='debugfs\x00', 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x382, 0x0) r4 = syz_open_dev$loop(&(0x7f0000000000), 0xb4, 0x2) ioctl$IOC_PR_PREEMPT_ABORT(r4, 0x401870cc, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xf) ioctl$TCFLSH(r3, 0x400455c8, 0x1000000000) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$SIOCSIFMTU(r6, 0x8922, &(0x7f0000000000)={'ip6gre0\x00', 0x800005}) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_bt_hci(r5, 0x400448e2, &(0x7f0000000140)) getsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000180)=""/222, &(0x7f0000000280)=0xde) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x8, 0x0, 0x0, 0x0) 1.423637976s ago: executing program 0 (id=272): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000002f40), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0x0, &(0x7f00000000c0), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(r1, 0xc0385868, &(0x7f00000002c0)={r0, &(0x7f0000000000)='/dev/kvm\x00', 0x4960c1, &(0x7f0000000040)={@align=0x10, {0xff, 0xffff, 0x4, 0x86ce}}, 0x9, &(0x7f0000000240)={@_ha_fsid}, &(0x7f0000000280)=0x8}) getuid() fstat(0xffffffffffffffff, &(0x7f0000002d80)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000180)=0xc) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x100000000005, 0x20, 0x3, 0x2, 0x80000000106c, 0x100, 0x8000000000000, 0x80000004000080, 0x1c00000, 0x8, 0x0, 0x4, 0x6, 0x8000], 0x1, 0x3c4210}) r6 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x860b01) write$char_usb(r6, &(0x7f0000000040)="e2", 0x2250) ioctl$USBDEVFS_CLEAR_HALT(r5, 0x80045515, &(0x7f0000000300)={0x1, 0x1}) quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f0000000080)=@rnullb, r4, &(0x7f00000001c0)={0x9, 0x9, 0x1ff, 0xfffffffffffffffe, 0x4, 0x10000000000000, 0x9, 0x100000000, 0x8}) ioctl$KVM_CREATE_GUEST_MEMFD(r2, 0xc040aed4, &(0x7f0000002e00)={0x9, 0x24}) syz_open_pts(0xffffffffffffffff, 0x410000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000280)=0xffffffff, 0x5) sendmsg$netlink(r3, &(0x7f0000002f00)={&(0x7f0000000300)=@kern={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002d00)=[{0x0, 0x2d8}, {0x0}, {&(0x7f0000002c80)=ANY=[@ANYBLOB="00000100000001000027f6000000000000000000", @ANYRES32, @ANYBLOB="3c00820073b4af5ecbf44b8cfff3eb79564c672b36dfbf6498c60d8c30ac45a241c06bec702576f8e61017ed2c54e953a9df4d9f98ec9a5b7a878b68"], 0x54}], 0x3, 0x0, 0x0, 0x4044010}, 0x10) r7 = syz_kvm_add_vcpu$x86(0x0, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x22, &(0x7f0000000080)=0x1, 0x4) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet6(r8, &(0x7f0000004f00)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x6, @local, 0x6}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000002bc0)='\b', 0x1}], 0x1}}], 0x1, 0x240c80c0) ioctl$KVM_SET_CPUID2(r7, 0x4008ae90, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.238672641s ago: executing program 1 (id=273): ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000000340)={0x0, 0x0, "70b2cfd5b1bb7d4ceda2aa510e495862e06333cfc134705105e00d6b1ceb687f63af95aaca5748ee45c684f2e4a8ddf5d5c03699f464030693824e88bc9c836ae761d33d7e375110b1ce96d4f8e8b8d5286bcc5fd2cfd41f2e31334dc6221533e3ce0fd31f0718836fb9c5b92d25f553dad0359fb76163778449d88efebb412ad7ecfa6572851d87e147eeeddc2665bdb7d0762d1db481cf5eac5c1fb3b491586ddd468ede55215f1b8db9574ff3434bd7115baa211a53978e1ecc30e062d23ce9d932c1d7a560dbfead00ea33475058064d7b25c8d224f36b62c8a4cdf7ff8ae44ea37e66799c3641e8dfd090e77880deb044f116308e7e07e8236ae63f285a", "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"}) ioctl$BTRFS_IOC_INO_LOOKUP(0xffffffffffffffff, 0xd0009412, &(0x7f0000001340)={r0}) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_clone(0x1480, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = getpid() process_vm_readv(r1, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/101, 0x65}], 0x1, 0x0) r2 = socket$netlink(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000180)={'pimreg0\x00', &(0x7f0000000140)=@ethtool_test={0x1a, 0x13, 0xcf3c, 0x2, [0x1, 0x1]}}) syz_usb_connect$midi(0x5, 0x3e, &(0x7f0000002440)=ANY=[@ANYBLOB="1201100300000140e80962004000010203011d022c00010118980409040000020103000609058e0b00020fd702042501000905050220000cf780c7a56cd2d559b404250100"], &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x1, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x3, 0x5b2, 0x0, 0x0, 0x1000, 0xffffffff, r1, 0x0, 0x80}}}, &(0x7f0000000280)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00003, 0x8) r3 = socket$can_raw(0x1d, 0x3, 0x1) r4 = socket$tipc(0x1e, 0x5, 0x0) connect$tipc(r4, &(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x3, {0x0, 0x2, 0x2}}, 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000040)=[{{0x2, 0x0, 0x1, 0x1}, {0x1, 0x0, 0x0, 0x1}}], 0x8) ioctl$BTRFS_IOC_ENCODED_WRITE(r2, 0x40809440, &(0x7f0000003840)={&(0x7f00000037c0)=[{&(0x7f00000035c0)="9570d3ca64809dbc281cf7790c8565bf2523ceddebf557be4beaab6b1bbef1f4a7711e54b485200f66f6ca04045597e6b93c4acc1be02f4e3b07434b1402717552445e002f732908013874dafb096d0094097afe3e72abd7f45f8ed998b4813cde51efaf1a8f0549f4", 0x69}, {&(0x7f0000003640)="1ae51bb2f73dd1f92be8e05d2153f18b2ca7980baaf2e00cc869276e56aba543b9f295f965d140080a", 0x29}, {&(0x7f0000003680)="b6c50ca0a1b8bafbdf0947be6e2621", 0xf}, {&(0x7f00000036c0)="abb0fbbb4f4cbfe9122a455d56", 0xd}, {&(0x7f0000003700)}, {&(0x7f0000003740)="7e2e0eaf8353e34e1770a23eacea84f0153b", 0x12}, {&(0x7f0000003780)="9e46251acd7c1da9d3678c264b719a2fe6ff554e", 0x14}], 0x7, 0x3, 0x0, 0x30c, 0x10, 0x3, 0x2, 0x2}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) getpid() r7 = syz_pidfd_open(0x0, 0x0) setns(r7, 0x24020000) move_mount(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x267) keyctl$update(0x2, 0x0, 0x0, 0x46) symlink(&(0x7f0000001780)='./file0/../file0\x00', &(0x7f00000017c0)='./file0\x00') lremovexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)=@known='security.selinux\x00') 1.074466575s ago: executing program 0 (id=274): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f00000003c0)=[{0x0}], 0x1) setsockopt$inet_mreqsrc(r2, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 557.641217ms ago: executing program 0 (id=275): r0 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000340)={0x0, 0x0, 0x1000, 0x40002, 0x1e5}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r4, &(0x7f0000000480)={0x2, 0x4e22, @empty}, 0x10) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="540000001200010306bd700000000000014000004e214e2400000000000000000000000000000000000000000100"/56, @ANYRES32=0x0, @ANYBLOB="0100ffe6dfffffff80fffff0000000000800030011"], 0x54}, 0x1, 0x0, 0x0, 0x40086}, 0x20000000) syz_ublk_add_dev(0xffffffffffffffff, r1, r2, r3, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000000c0)=@new_dev={0x3, 0xf14, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x124}}}, &(0x7f0000000280)=0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="37031c00", 0x4, 0x4000800, 0x0, 0x47) syz_ublk_setup_queues(r0, r7, &(0x7f0000000200)={0x0, 0x1463, 0x10700, 0x2, 0xb2}, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4485, 0x10002, 0x401, 0x9, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7682, 0x8000, 0x0, 0x200000a, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1, 0x10, 0x3, 0x902c4, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xdf2c, 0x20, 0x2, 0x40021a, 0x0, r0}}], 0x4, &(0x7f0000001540)={0x2e, 0x6, 0x1f, 0xffffffffffffffff, 0xc0107520, 0x0, 0x0, 0x0, 0x72ccfb459c83c565, {0x6}, 0x0, r6, '\x00', {0x3, 0x48b, 0x0, 0x0}}, 0x0) 267.553474ms ago: executing program 0 (id=276): r0 = landlock_create_ruleset(&(0x7f0000000140)={0x0, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000001b40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000780)=""/227, 0xe3}, {&(0x7f0000001a40)=""/217, 0xd9}, {&(0x7f0000003500)=""/4096, 0x9ec}, {&(0x7f0000001d80)=""/161, 0xa1}, {&(0x7f0000000680)=""/134, 0x86}, {&(0x7f0000002c40)=""/146, 0x92}, {&(0x7f0000002d00)=""/128, 0x4}, {&(0x7f0000000000)=""/260, 0x104}, {&(0x7f0000000140)=""/88, 0x58}], 0x9}, 0xe}, {{0x0, 0x0, 0x0}, 0xa}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0xffffffff}, {{0x0, 0x0, 0x0}, 0xfffffffe}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}}], 0x7, 0x40000100, 0x0) landlock_restrict_self(r0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214048, 0x0) (async) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214048, 0x0) umount2(&(0x7f0000000140)='./file0\x00', 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = add_key$fscrypt_v1(&(0x7f00000002c0), &(0x7f0000000300)={'fscrypt:', @auto=[0x63, 0x62, 0x32, 0x30, 0x65, 0x32, 0x31, 0x35, 0x37, 0x37, 0x30, 0x61, 0x61, 0x38, 0x39, 0x36]}, &(0x7f0000000440)={0x0, "8527d2100090af54bfbca283be11c0de7af30e94937920fcba13ce0af61beaa44d66a6535daf1bc35fb3af1e9197d71d26589d077c88184095fb00", 0x14}, 0x48, 0xffffffffffffffff) keyctl$unlink(0x9, r2, 0xffffffffffffffff) socket$inet6(0xa, 0x3, 0xd) (async) socket$inet6(0xa, 0x3, 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x30}, 0x2080) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast1, 0x0, 0x1, 0x0, 0xfc9e284051333e58}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000140)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x3, 0xc41, 0x0, 0x0, 0x1000, 0x7, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) dup(r7) (async) r8 = dup(r7) r9 = syz_io_uring_setup(0x5b17, &(0x7f0000000000)={0x0, 0xc995, 0x40000, 0x0, 0x2de, 0x0, r8}, &(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000340)) syz_ublk_setup_queues(r8, r6, &(0x7f0000000380)={0x0, 0x2, 0x1000, 0xfffffffe, 0x338, 0x0, r9}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x704, 0x100, 0x1000000, 0x2033f, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffffff, 0x4000, 0x1, 0xdd}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x9b55, 0x400}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2, 0x4000, 0x1, 0xdfffffff, 0x0, r9}}], 0x1, 0x0, 0x0) 141.461497ms ago: executing program 3 (id=277): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0006}]}) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) io_submit(0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r3, 0x0) preadv(r3, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r3, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xb9, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 0s ago: executing program 3 (id=278): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[@ANYBLOB="0a00b3f00180c2000000aaaaaaaaaaaa86dd694fd2cd01683afffe80000000000000000000000000000fff020000000000000000000000000001860090780104ff010500000254000000191f8666000005dc13128e21be0ca3631c139c476e64ddd58715f9515609f30f02dcc39e129ed698ffa44d6548a012f7004e0ab9dcb95580c0b6d48fc1a50000c8896cf496271da94eb0b9f1499f1bcb2cfe350875803587770312bd1d83e9a99408855797b33e14534c04acafd2d7eb6380b19eff8edf4e40f9661c77a5fba9af8147db0788"], 0x1a2) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000003000000580001800d0001007564703a73797a31000000004400040020000100"], 0x6c}}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000134000/0x18000)=nil, &(0x7f0000000000)=[@text32={0x20, &(0x7f0000000440)="c4e1916c3f0f08642e660f73fdd50fc71a66baf80cb84bdcd185ef66bafc0cb000eeb912020000b81f320000ba000000000f30b805000000b9920000000f01d9650fc72e66b8dd008ee0640f0f9e000000809a", 0x53}], 0x1, 0x5c, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000380)=ANY=[@ANYRES64=r4, @ANYBLOB="01000000000000000000030000005800018044000400200001"], 0x6c}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="a40000005400010000000000000080000700"], 0xa4}], 0x1}, 0x0) lseek(r0, 0x6636b276, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r5, &(0x7f0000000300)=ANY=[@ANYRES8=r7], 0x1a) r8 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) lseek(r8, 0xca3, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="a0000000020803000000000000000000070000040900010073797a31000000000900010073797a3000000000050003000e0000002c0004800800014000000003080001405000000008000140000000020800014000000fff08000140000000020900010073797a300000000034000480080007400000000008000940222fa39708000340000000020800074000000003080005400000000308000740000060006dade2a7c9ac697237fa3068516384fc8f40a2e48433d415de642ada10436d"], 0xa0}, 0x1, 0x0, 0x0, 0x240000d1}, 0xc0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'veth0\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r8, @ANYRES16, @ANYRESDEC=r7, @ANYRESHEX], 0x20}, 0x1, 0x0, 0x0, 0xd4}, 0x24008080) ioctl$KVM_RUN(r2, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.110' (ED25519) to the list of known hosts. [ 23.010898][ T36] audit: type=1400 audit(1785423587.030:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.014635][ T286] cgroup: Unknown subsys name 'net' [ 23.033591][ T36] audit: type=1400 audit(1785423587.030:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.060943][ T36] audit: type=1400 audit(1785423587.060:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.061442][ T286] cgroup: Unknown subsys name 'devices' [ 23.181373][ T286] cgroup: Unknown subsys name 'hugetlb' [ 23.187043][ T286] cgroup: Unknown subsys name 'rlimit' [ 23.303183][ T36] audit: type=1400 audit(1785423587.320:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 23.326399][ T36] audit: type=1400 audit(1785423587.320:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 23.351233][ T36] audit: type=1400 audit(1785423587.320:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 23.443525][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 23.452521][ T36] audit: type=1400 audit(1785423587.480:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" Setting up swapspace version 1, size = 127995904 bytes [ 23.478046][ T36] audit: type=1400 audit(1785423587.480:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.510826][ T36] audit: type=1400 audit(1785423587.530:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.512221][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.537483][ T36] audit: type=1400 audit(1785423587.530:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.399034][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.406283][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.413626][ T294] bridge_slave_0: entered allmulticast mode [ 24.420253][ T294] bridge_slave_0: entered promiscuous mode [ 24.434391][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.441542][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.448729][ T294] bridge_slave_1: entered allmulticast mode [ 24.455090][ T294] bridge_slave_1: entered promiscuous mode [ 24.499667][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.506759][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.514087][ T293] bridge_slave_0: entered allmulticast mode [ 24.520627][ T293] bridge_slave_0: entered promiscuous mode [ 24.540179][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.547271][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.554528][ T293] bridge_slave_1: entered allmulticast mode [ 24.560894][ T293] bridge_slave_1: entered promiscuous mode [ 24.570379][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.577476][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.584631][ T296] bridge_slave_0: entered allmulticast mode [ 24.591100][ T296] bridge_slave_0: entered promiscuous mode [ 24.606177][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.614001][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.621211][ T296] bridge_slave_1: entered allmulticast mode [ 24.627514][ T296] bridge_slave_1: entered promiscuous mode [ 24.670359][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.677447][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.684649][ T295] bridge_slave_0: entered allmulticast mode [ 24.691044][ T295] bridge_slave_0: entered promiscuous mode [ 24.697576][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.704839][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.712070][ T295] bridge_slave_1: entered allmulticast mode [ 24.718398][ T295] bridge_slave_1: entered promiscuous mode [ 24.855970][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.863084][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.870473][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.877568][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.894844][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.901977][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.909318][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.916385][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.929950][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.937056][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.944398][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.951464][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.962538][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.969670][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.976976][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.984065][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.039801][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.047553][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.055065][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.063114][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.071669][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.079573][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.108267][ T294] veth0_vlan: entered promiscuous mode [ 25.130849][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.137944][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.146278][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.153432][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.161498][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.168581][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.176253][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.183348][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.191045][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.198118][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.207409][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.214601][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.232218][ T294] veth1_macvtap: entered promiscuous mode [ 25.283879][ T295] veth0_vlan: entered promiscuous mode [ 25.295193][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 25.322575][ T293] veth0_vlan: entered promiscuous mode [ 25.338076][ T295] veth1_macvtap: entered promiscuous mode [ 25.354249][ T296] veth0_vlan: entered promiscuous mode [ 25.357051][ T312] SELinux: unknown common relabelfrom [ 25.366079][ T312] SELinux: failed to load policy [ 25.384143][ T293] veth1_macvtap: entered promiscuous mode [ 25.423526][ T296] veth1_macvtap: entered promiscuous mode [ 25.459790][ T317] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 25.648568][ T338] SELinux: policydb table sizes (0,0) do not match mine (5,6) [ 25.670222][ T338] SELinux: failed to load policy [ 25.694548][ T346] Bluetooth: hci0: sending frame failed (-49) [ 25.701098][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 25.722406][ T350] ======================================================= [ 25.722406][ T350] WARNING: The mand mount option has been deprecated and [ 25.722406][ T350] and is ignored by this kernel. Remove the mand [ 25.722406][ T350] option from the mount to silence this warning. [ 25.722406][ T350] ======================================================= [ 25.759396][ T350] tmpfs: Bad value for 'size' [ 25.949845][ T370] netlink: 'syz.1.24': attribute type 4 has an invalid length. [ 26.112592][ T377] Zero length message leads to an empty skb [ 26.179675][ T310] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 26.213077][ T383] type: 2101177857 invalid [ 26.311469][ T388] syzkaller1: entered promiscuous mode [ 26.369157][ T310] usb 4-1: Using ep0 maxpacket: 16 [ 26.377620][ T310] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fa0, bcdDevice= 0.40 [ 26.397353][ T310] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 26.419158][ T310] usb 4-1: Product: syz [ 26.424060][ T310] usb 4-1: Manufacturer: syz [ 26.428697][ T310] usb 4-1: SerialNumber: syz [ 26.672593][ T310] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 26.689503][ T310] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 26.706694][ T310] usb 4-1: USB disconnect, device number 2 [ 26.712634][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.756318][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 26.849413][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.006474][ T412] netlink: 'syz.2.31': attribute type 4 has an invalid length. [ 27.053014][ T310] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 27.061920][ T310] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 27.099208][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.168640][ T421] SELinux: policydb string does not match my string SE Linux [ 27.177823][ T421] SELinux: failed to load policy [ 27.203042][ T423] base or size exceeds the MTRR width [ 27.296386][ T432] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 27.305246][ T9] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.315457][ T433] netlink: 4 bytes leftover after parsing attributes in process `syz.3.39'. [ 27.339200][ T10] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 27.387489][ T435] netlink: 'syz.1.40': attribute type 4 has an invalid length. [ 27.426484][ T440] x_tables: duplicate entry at hook 1 [ 27.462747][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 27.471353][ T9] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 1112, setting to 1024 [ 27.482697][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.489686][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 27.501278][ T9] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 32 [ 27.514008][ T9] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 27.523632][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.531870][ T9] usb 3-1: Product: syz [ 27.536187][ T9] usb 3-1: Manufacturer: syz [ 27.540991][ T9] usb 3-1: SerialNumber: syz [ 27.571566][ T450] base or size exceeds the MTRR width [ 27.605949][ T453] x_tables: duplicate underflow at hook 2 [ 27.613406][ T454] x_tables: duplicate underflow at hook 2 [ 27.738854][ T10] usb 1-1: device descriptor read/64, error -71 [ 27.775406][ T9] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found [ 27.782496][ T464] netlink: 'syz.3.51': attribute type 4 has an invalid length. [ 27.791760][ T9] cdc_ncm 3-1:1.0: bind() failure [ 27.798053][ T9] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 27.819186][ T9] cdc_ncm 3-1:1.1: bind() failure [ 27.825710][ T466] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51529 sclass=netlink_route_socket pid=466 comm=syz.2.52 [ 27.838548][ T9] usb 3-1: USB disconnect, device number 2 [ 27.849866][ T10] usb usb1-port1: attempt power cycle [ 27.929636][ T474] Mass Storage Function, version: 2009/09/11 [ 27.935753][ T474] LUN: removable file: (no medium) [ 27.974669][ T478] base or size exceeds the MTRR width [ 28.039496][ T36] kauditd_printk_skb: 100 callbacks suppressed [ 28.039513][ T36] audit: type=1400 audit(1785423592.060:174): avc: denied { mounton } for pid=482 comm="syz.2.58" path="/proc/44/task" dev="proc" ino=4576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 28.168300][ T491] usb usb8: usbfs: process 491 (syz.1.60) did not claim interface 0 before use [ 28.199147][ T10] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 28.205084][ T492] netlink: 'syz.3.61': attribute type 4 has an invalid length. [ 28.230069][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.255609][ T36] audit: type=1400 audit(1785423592.270:175): avc: denied { block_suspend } for pid=493 comm="syz.3.62" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 28.276928][ T36] audit: type=1400 audit(1785423592.270:176): avc: denied { create } for pid=493 comm="syz.3.62" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 28.329210][ T66] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 28.360392][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.480635][ T66] usb 3-1: config 32 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 28.490584][ T66] usb 3-1: New USB device found, idVendor=19b5, idProduct=0021, bcdDevice=98.c7 [ 28.499688][ T66] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.569183][ T310] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.576764][ T389] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.599210][ T10] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 28.620273][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.709889][ T66] usb 3-1: string descriptor 0 read error: -71 [ 28.716431][ T66] hub 3-1:32.0: bad descriptor, ignoring hub [ 28.722767][ T66] hub 3-1:32.0: probe with driver hub failed with error -5 [ 28.740541][ T389] usb 4-1: unable to get BOS descriptor or descriptor too short [ 28.748354][ T310] usb 2-1: unable to get BOS descriptor or descriptor too short [ 28.754598][ T66] usb 3-1: USB disconnect, device number 3 [ 28.757834][ T389] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 28.773094][ T389] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 64, changing to 7 [ 28.784376][ T310] usb 2-1: config 63 has an invalid interface number: 66 but max is 0 [ 28.792963][ T310] usb 2-1: config 63 has an invalid descriptor of length 0, skipping remainder of the config [ 28.803376][ T310] usb 2-1: config 63 has no interface number 0 [ 28.809738][ T310] usb 2-1: config 63 interface 66 has no altsetting 0 [ 28.816640][ T10] usb 1-1: device descriptor read/8, error -71 [ 28.824739][ T389] usb 4-1: New USB device found, idVendor=0bda, idProduct=4014, bcdDevice= 0.40 [ 28.833886][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.842068][ T389] usb 4-1: Product: syz [ 28.846311][ T389] usb 4-1: Manufacturer: syz [ 28.851031][ T310] usb 2-1: New USB device found, idVendor=174f, idProduct=8acf, bcdDevice=39.f4 [ 28.860220][ T389] usb 4-1: SerialNumber: syz [ 28.865195][ T310] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.873680][ T310] usb 2-1: Product: syz [ 28.877955][ T310] usb 2-1: Manufacturer: syz [ 28.883034][ T310] usb 2-1: SerialNumber: syz [ 28.929251][ T10] usb usb1-port1: unable to enumerate USB device [ 29.084140][ T501] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=501 comm=syz.3.64 [ 29.098427][ T389] usb 4-1: unit 9 not found! [ 29.111309][ T389] usb 4-1: USB disconnect, device number 3 [ 29.143198][ T36] audit: type=1400 audit(1785423593.160:177): avc: denied { create } for pid=498 comm="syz.1.63" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 29.237572][ T506] type: 2101177857 invalid [ 29.259476][ T36] audit: type=1400 audit(1785423593.280:178): avc: denied { append } for pid=507 comm="syz.2.66" name="usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.283186][ T36] audit: type=1400 audit(1785423593.280:179): avc: denied { open } for pid=507 comm="syz.2.66" path="/dev/usbmon9" dev="devtmpfs" ino=118 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 29.309148][ T36] audit: type=1400 audit(1785423593.310:180): avc: denied { create } for pid=507 comm="syz.2.66" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 29.333347][ T36] audit: type=1400 audit(1785423593.310:181): avc: denied { sys_admin } for pid=507 comm="syz.2.66" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 29.360927][ T36] audit: type=1400 audit(1785423593.380:182): avc: denied { watch watch_reads } for pid=510 comm="syz.2.67" path="/15" dev="tmpfs" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 29.362459][ T511] overlayfs: option "uuid=on" requires an upper fs, falling back to uuid=null. [ 29.392850][ T511] overlayfs: missing 'lowerdir' [ 29.659666][ T66] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 29.691579][ T310] usb 2-1: USB disconnect, device number 2 [ 29.715695][ T521] netlink: 'syz.3.70': attribute type 4 has an invalid length. [ 29.762742][ T523] usb usb8: usbfs: process 523 (syz.1.71) did not claim interface 0 before use [ 29.794888][ T525] : renamed from bond_slave_0 [ 29.799200][ T36] audit: type=1400 audit(1785423593.810:183): avc: denied { read append } for pid=524 comm="syz.0.72" name="ptp0" dev="devtmpfs" ino=196 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.851509][ T66] usb 3-1: No LPM exit latency info found, disabling LPM. [ 29.871717][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 29.905271][ T66] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 29.924278][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 is Bulk; changing to Interrupt [ 29.934492][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 29.944430][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 is Bulk; changing to Interrupt [ 29.954489][ T66] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 29.985756][ T534] capability: warning: `syz.3.76' uses 32-bit capabilities (legacy support in use) [ 29.990478][ T66] usb 3-1: string descriptor 0 read error: -22 [ 30.001504][ T66] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 30.018963][ T66] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.139124][ T502] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 30.244115][ T66] cdc_ncm 3-1:1.0: bind() failure [ 30.253754][ T66] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found [ 30.261118][ T66] cdc_ncm 3-1:1.1: bind() failure [ 30.270507][ T66] usb 3-1: USB disconnect, device number 4 [ 30.289114][ T502] usb 1-1: device descriptor read/64, error -71 [ 30.297147][ T556] netlink: 'syz.1.83': attribute type 4 has an invalid length. [ 30.406638][ T558] usb usb8: usbfs: process 558 (syz.3.84) did not claim interface 0 before use [ 30.539192][ T502] usb 1-1: device descriptor read/64, error -71 [ 30.779129][ T310] usb 2-1: new low-speed USB device number 3 using dummy_hcd [ 30.779134][ T502] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 30.887572][ T579] netlink: 'syz.2.90': attribute type 27 has an invalid length. [ 30.919262][ T310] usb 2-1: device descriptor read/64, error -71 [ 30.919556][ T502] usb 1-1: device descriptor read/64, error -71 [ 30.931971][ T66] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 31.090937][ T66] usb 4-1: unable to get BOS descriptor or descriptor too short [ 31.099128][ T66] usb 4-1: not running at top speed; connect to a high speed hub [ 31.107576][ T66] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 31.117748][ T66] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 31.126892][ T66] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 4 [ 31.137916][ T516] usb 3-1: new full-speed USB device number 5 using dummy_hcd [ 31.147060][ T66] usb 4-1: New USB device found, idVendor=041e, idProduct=3020, bcdDevice= 0.40 [ 31.156238][ T66] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.164285][ T66] usb 4-1: Product: syz [ 31.168495][ T66] usb 4-1: Manufacturer: syz [ 31.169241][ T310] usb 2-1: device descriptor read/64, error -71 [ 31.173202][ T66] usb 4-1: SerialNumber: syz [ 31.199524][ T502] usb 1-1: device descriptor read/64, error -71 [ 31.289837][ T516] usb 3-1: not running at top speed; connect to a high speed hub [ 31.298416][ T516] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1616, setting to 1023 [ 31.309730][ T502] usb usb1-port1: attempt power cycle [ 31.316547][ T516] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0201, bcdDevice= 0.40 [ 31.325699][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.333763][ T516] usb 3-1: Product: syz [ 31.337945][ T516] usb 3-1: Manufacturer: syz [ 31.342590][ T516] usb 3-1: SerialNumber: syz [ 31.419178][ T310] usb 2-1: new low-speed USB device number 4 using dummy_hcd [ 31.549184][ T310] usb 2-1: device descriptor read/64, error -71 [ 31.555744][ T579] netlink: 'syz.2.90': attribute type 3 has an invalid length. [ 31.564719][ T579] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 31.573889][ T579] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 31.581805][ T66] usb 4-1: 1:1 : invalid UAC_AS_GENERAL desc [ 31.588901][ T66] usb 4-1: unit 250 not found! [ 31.594026][ T66] usb 4-1: unit 245 not found! [ 31.603621][ T516] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 31.611364][ T66] usb 4-1: USB disconnect, device number 4 [ 31.617746][ T516] usb 3-1: unit 4 not found! [ 31.622861][ T516] usb 3-1: unit 14 not found! [ 31.643779][ T516] usb 3-1: USB disconnect, device number 5 [ 31.650238][ T502] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 31.670756][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 31.688391][ T502] usb 1-1: device descriptor read/8, error -71 [ 31.789168][ T310] usb 2-1: device descriptor read/64, error -71 [ 31.820322][ T502] usb 1-1: device descriptor read/8, error -71 [ 31.899315][ T310] usb usb2-port1: attempt power cycle [ 32.059164][ T502] usb 1-1: new full-speed USB device number 9 using dummy_hcd [ 32.080253][ T502] usb 1-1: device descriptor read/8, error -71 [ 32.130843][ T585] netlink: 'syz.3.91': attribute type 3 has an invalid length. [ 32.210381][ T502] usb 1-1: device descriptor read/8, error -71 [ 32.249154][ T310] usb 2-1: new low-speed USB device number 5 using dummy_hcd [ 32.258937][ T593] netlink: 'syz.3.93': attribute type 4 has an invalid length. [ 32.270206][ T310] usb 2-1: device descriptor read/8, error -71 [ 32.306387][ T595] usb usb8: usbfs: process 595 (syz.3.94) did not claim interface 0 before use [ 32.323380][ T502] usb usb1-port1: unable to enumerate USB device [ 32.404450][ T310] usb 2-1: device descriptor read/8, error -71 [ 32.548131][ T598] netlink: 'syz.2.95': attribute type 1 has an invalid length. [ 32.649190][ T310] usb 2-1: new low-speed USB device number 6 using dummy_hcd [ 32.669141][ T502] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 32.670585][ T310] usb 2-1: device descriptor read/8, error -71 [ 32.810465][ T310] usb 2-1: device descriptor read/8, error -71 [ 32.822110][ T502] usb 4-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 32.831319][ T502] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.839385][ T502] usb 4-1: Product: syz [ 32.843613][ T502] usb 4-1: Manufacturer: syz [ 32.848262][ T502] usb 4-1: SerialNumber: syz [ 32.919257][ T310] usb usb2-port1: unable to enumerate USB device [ 33.269204][ T10] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 33.420352][ T10] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 33.431393][ T10] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 33.450784][ T10] usb 1-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 33.461262][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.470291][ T10] usb 1-1: Product: syz [ 33.474508][ T10] usb 1-1: Manufacturer: syz [ 33.479169][ T10] usb 1-1: SerialNumber: syz [ 33.493010][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 33.493029][ T36] audit: type=1400 audit(1785423597.510:199): avc: denied { create } for pid=607 comm="syz.1.98" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 33.519256][ T36] audit: type=1400 audit(1785423597.520:200): avc: denied { ioctl } for pid=607 comm="syz.1.98" path="socket:[6259]" dev="sockfs" ino=6259 ioctlcmd=0x5880 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.545972][ T36] audit: type=1400 audit(1785423597.520:201): avc: denied { setopt } for pid=607 comm="syz.1.98" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.567063][ T36] audit: type=1400 audit(1785423597.520:202): avc: denied { connect } for pid=607 comm="syz.1.98" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.578206][ T610] 9pnet_fd: Insufficient options for proto=fd [ 33.587722][ T36] audit: type=1400 audit(1785423597.520:203): avc: denied { write } for pid=607 comm="syz.1.98" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 33.686869][ T36] audit: type=1400 audit(1785423597.700:204): avc: denied { setopt } for pid=603 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.706737][ T36] audit: type=1400 audit(1785423597.700:205): avc: denied { shutdown } for pid=603 comm="syz.0.97" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 33.737380][ T36] audit: type=1400 audit(1785423597.750:206): avc: denied { create } for pid=616 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.740769][ T618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.762277][ T36] audit: type=1400 audit(1785423597.780:207): avc: denied { bind } for pid=616 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.771509][ T618] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.789541][ T36] audit: type=1400 audit(1785423597.790:208): avc: denied { listen } for pid=616 comm="syz.1.101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 33.925834][ T621] netlink: 'syz.1.102': attribute type 4 has an invalid length. [ 34.100184][ T502] rtl8150 4-1:1.0: couldn't reset the device [ 34.106319][ T502] rtl8150 4-1:1.0: probe with driver rtl8150 failed with error -5 [ 34.211977][ T634] netlink: 32 bytes leftover after parsing attributes in process `syz.1.106'. [ 34.221087][ T634] tipc: Invalid UDP bearer configuration [ 34.221108][ T634] tipc: Enabling of bearer rejected, failed to enable media [ 35.283434][ T652] netlink: 'syz.1.111': attribute type 4 has an invalid length. [ 35.329445][ T656] fuse: Bad value for 'fd' [ 35.444237][ T389] usb 4-1: USB disconnect, device number 5 [ 35.565181][ T678] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 35.640444][ T683] netlink: 'syz.2.120': attribute type 4 has an invalid length. [ 35.686557][ T687] overlayfs: conflicting options: metacopy=off,verity=on [ 35.869212][ T389] usb 4-1: new full-speed USB device number 6 using dummy_hcd [ 35.899787][ T10] usb 1-1: BAAD MICROPHONE c_chmask mismatch [ 35.915606][ T10] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 35.930962][ T10] usb 1-1: USB disconnect, device number 10 [ 35.951802][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.020630][ T389] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.046472][ T702] bridge0: entered allmulticast mode [ 36.053719][ T389] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.073434][ T389] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.083122][ T389] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.091865][ T389] usb 4-1: Product: syz [ 36.096461][ T389] usb 4-1: Manufacturer: syz [ 36.101481][ T389] usb 4-1: SerialNumber: syz [ 36.185586][ T709] netlink: 'syz.0.129': attribute type 4 has an invalid length. [ 36.219356][ T504] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 36.253405][ T713] tipc: Enabling of bearer rejected, failed to enable media [ 36.311710][ T389] usb 4-1: 0:2 : does not exist [ 36.325447][ T389] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 36.343967][ T389] usb 4-1: USB disconnect, device number 6 [ 36.348997][ T716] overlayfs: failed to resolve './file0/file0': -2 [ 36.362336][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.410404][ T717] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 36.410433][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.430636][ T504] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.441703][ T504] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 36.454991][ T504] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 36.464126][ T504] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.473184][ T504] usb 3-1: config 0 descriptor?? [ 36.883195][ T504] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 36.912590][ T504] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 37.139290][ T46] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 37.279249][ T504] usb 2-1: new low-speed USB device number 7 using dummy_hcd [ 37.290782][ T46] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 7 [ 37.301843][ T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 37.315158][ T46] usb 4-1: New USB device found, idVendor=194f, idProduct=010c, bcdDevice= 0.40 [ 37.324311][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.332619][ T46] usb 4-1: Product: syz [ 37.336850][ T46] usb 4-1: Manufacturer: syz [ 37.341510][ T46] usb 4-1: SerialNumber: syz [ 37.429300][ T389] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 37.439013][ T504] usb 2-1: config 24 has an invalid descriptor of length 0, skipping remainder of the config [ 37.450263][ T504] usb 2-1: config 24 has 0 interfaces, different from the descriptor's value: 1 [ 37.461821][ T504] usb 2-1: string descriptor 0 read error: -22 [ 37.468097][ T504] usb 2-1: New USB device found, idVendor=10c4, idProduct=818b, bcdDevice= 8.17 [ 37.477346][ T504] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.552407][ T46] usb 4-1: BAAD MICROPHONE c_chmask mismatch [ 37.560646][ T46] snd-usb-audio 4-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 37.572244][ T46] usb 4-1: USB disconnect, device number 7 [ 37.579148][ T389] usb 1-1: Using ep0 maxpacket: 8 [ 37.589542][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 37.605495][ T389] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 37.615887][ T389] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 37.628652][ T389] usb 1-1: New USB device found, idVendor=1235, idProduct=8012, bcdDevice= 0.40 [ 37.637930][ T389] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 37.645997][ T389] usb 1-1: Product: syz [ 37.650322][ T389] usb 1-1: Manufacturer: syz [ 37.654951][ T389] usb 1-1: SerialNumber: syz [ 37.688629][ T729] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 37.697380][ T729] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.706429][ T502] usb 2-1: USB disconnect, device number 7 [ 37.864782][ T389] usb 1-1: 0:1 : does not exist [ 37.901746][ T389] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 37.912132][ T389] usb 1-1: USB disconnect, device number 11 [ 37.927271][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 38.091403][ T734] netlink: 'syz.3.138': attribute type 4 has an invalid length. [ 38.132384][ T736] type: 2101177857 invalid [ 38.248241][ T745] netlink: 64 bytes leftover after parsing attributes in process `syz.3.143'. [ 38.258044][ T745] tipc: Started in network mode [ 38.263299][ T745] tipc: Node identity ac14140f, cluster identity 4711 [ 38.270818][ T745] tipc: Enabled bearer , priority 10 [ 38.278870][ T746] netlink: 64 bytes leftover after parsing attributes in process `syz.3.143'. [ 38.303187][ T750] capability: warning: `syz.3.144' uses deprecated v2 capabilities in a way that may be insecure [ 38.398798][ T757] netlink: 'syz.3.147': attribute type 4 has an invalid length. [ 38.415653][ T755] usb usb8: usbfs: process 755 (syz.0.146) did not claim interface 0 before use [ 38.436338][ T759] type: 2101177857 invalid [ 38.509209][ T389] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 38.679171][ T389] usb 2-1: Using ep0 maxpacket: 16 [ 38.685659][ T389] usb 2-1: config 5 has an invalid interface number: 48 but max is 0 [ 38.694345][ T389] usb 2-1: config 5 has no interface number 0 [ 38.699833][ T46] usb 4-1: new full-speed USB device number 8 using dummy_hcd [ 38.701706][ T389] usb 2-1: config 5 interface 48 has no altsetting 0 [ 38.716024][ T389] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=bb.44 [ 38.726781][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 38.735130][ T389] usb 2-1: Product: syz [ 38.739446][ T389] usb 2-1: Manufacturer: syz [ 38.745171][ T389] usb 2-1: SerialNumber: syz [ 38.829192][ T504] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 38.850356][ T46] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 38.861487][ T46] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 38.872802][ T46] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 38.882128][ T46] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 38.890629][ T46] usb 4-1: Product: syz [ 38.894873][ T46] usb 4-1: Manufacturer: syz [ 38.901672][ T46] hub 4-1:4.0: USB hub found [ 38.956305][ T389] usb 2-1: USB disconnect, device number 8 [ 38.991709][ T504] usb 1-1: unable to get BOS descriptor or descriptor too short [ 39.000712][ T504] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 39.011127][ T504] usb 1-1: config 1 interface 0 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 39.025690][ T504] usb 1-1: New USB device found, idVendor=2b53, idProduct=0031, bcdDevice= 0.40 [ 39.035102][ T504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 39.043275][ T504] usb 1-1: Product: syz [ 39.047576][ T504] usb 1-1: Manufacturer: syz [ 39.052405][ T504] usb 1-1: SerialNumber: syz [ 39.078175][ T36] kauditd_printk_skb: 29 callbacks suppressed [ 39.078210][ T36] audit: type=1400 audit(1785423603.090:238): avc: denied { getopt } for pid=770 comm="syz.2.154" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.127449][ T36] audit: type=1400 audit(1785423603.140:239): avc: denied { create } for pid=772 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 39.169262][ T36] audit: type=1400 audit(1785423603.140:240): avc: denied { write } for pid=772 comm="syz.2.155" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 39.191433][ T761] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 39.202819][ T761] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 39.263459][ T504] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 39.274346][ T504] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 39.287013][ T46] hub 4-1:4.0: config failed, can't read hub descriptor (err -22) [ 39.295744][ T504] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 39.305939][ T504] usb 1-1: USB disconnect, device number 12 [ 39.319487][ T46] usb 4-1: USB disconnect, device number 8 [ 39.325720][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 39.350256][ T516] usb 3-1: USB disconnect, device number 7 [ 39.389224][ T502] tipc: Node number set to 2886997007 [ 39.489450][ T785] usb usb8: usbfs: process 785 (syz.1.159) did not claim interface 0 before use [ 39.655493][ T36] audit: type=1400 audit(1785423603.670:241): avc: denied { read } for pid=791 comm="syz.1.161" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 39.664383][ T792] netlink: 140 bytes leftover after parsing attributes in process `syz.1.161'. [ 39.738439][ T796] usb usb8: usbfs: process 796 (syz.1.162) did not claim interface 0 before use [ 39.747710][ T516] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 39.747721][ T796] FAULT_INJECTION: forcing a failure. [ 39.747721][ T796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 39.747781][ T796] CPU: 0 UID: 0 PID: 796 Comm: syz.1.162 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 39.747875][ T796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.747903][ T796] Call Trace: [ 39.747956][ T796] [ 39.747987][ T796] __dump_stack+0x21/0x30 [ 39.748095][ T796] dump_stack_lvl+0x140/0x1c0 [ 39.748174][ T796] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.748253][ T796] ? vsnprintf+0x7b4/0x1ad0 [ 39.748310][ T796] ? check_stack_object+0x10f/0x150 [ 39.748377][ T796] dump_stack+0x19/0x20 [ 39.748448][ T796] should_fail_ex+0x3c2/0x510 [ 39.748514][ T796] should_fail+0xf/0x20 [ 39.748579][ T796] should_fail_usercopy+0x1e/0x30 [ 39.748646][ T796] _copy_from_user+0x20/0xa0 [ 39.748724][ T796] kstrtouint_from_user+0xde/0x170 [ 39.748784][ T796] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 39.748848][ T796] ? selinux_file_permission+0x318/0xb60 [ 39.748906][ T796] ? __cfi_selinux_file_permission+0x10/0x10 [ 39.748963][ T796] proc_fail_nth_write+0x8f/0x220 [ 39.749064][ T796] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 39.749151][ T796] ? bpf_lsm_file_permission+0xd/0x20 [ 39.749231][ T796] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 39.749341][ T796] vfs_write+0x3c1/0xfd0 [ 39.749413][ T796] ? __cfi_vfs_write+0x10/0x10 [ 39.749470][ T796] ? __kasan_check_write+0x18/0x20 [ 39.749534][ T796] ? mutex_lock+0x97/0x1d0 [ 39.749598][ T796] ? __cfi_mutex_lock+0x10/0x10 [ 39.749677][ T796] ksys_write+0x145/0x260 [ 39.749734][ T796] ? xfd_validate_state+0x68/0x140 [ 39.749813][ T796] ? __cfi_ksys_write+0x10/0x10 [ 39.749870][ T796] ? __kasan_check_read+0x15/0x20 [ 39.749926][ T796] __x64_sys_write+0x7f/0x90 [ 39.749984][ T796] x64_sys_call+0x271c/0x2ee0 [ 39.750039][ T796] do_syscall_64+0x57/0xf0 [ 39.750116][ T796] ? clear_bhb_loop+0x50/0xa0 [ 39.750188][ T796] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.750264][ T796] RIP: 0033:0x7f692075e7ce [ 39.750318][ T796] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 39.750365][ T796] RSP: 002b:00007f6921668fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.750439][ T796] RAX: ffffffffffffffda RBX: 00007f69216696c0 RCX: 00007f692075e7ce [ 39.750484][ T796] RDX: 0000000000000001 RSI: 00007f69216690a0 RDI: 0000000000000008 [ 39.750540][ T796] RBP: 00007f6921669090 R08: 0000000000000000 R09: 0000000000000000 [ 39.750568][ T796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.750610][ T796] R13: 00007f6920a26038 R14: 00007f6920a25fa0 R15: 00007fffe4b56768 [ 39.750670][ T796] [ 39.920461][ T799] GUP no longer grows the stack in syz.0.163 (799): 200000005000-200000008000 (200000004000) [ 39.920495][ T799] CPU: 0 UID: 0 PID: 799 Comm: syz.0.163 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 39.920523][ T799] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 39.920536][ T799] Call Trace: [ 39.920543][ T799] [ 39.920570][ T799] __dump_stack+0x21/0x30 [ 39.920756][ T799] dump_stack_lvl+0x140/0x1c0 [ 39.920843][ T799] ? __cfi_dump_stack_lvl+0x10/0x10 [ 39.920921][ T799] ? find_vma+0xd3/0x120 [ 39.920990][ T799] dump_stack+0x19/0x20 [ 39.921067][ T799] fixup_user_fault+0x616/0x6a0 [ 39.921146][ T799] fault_in_user_writeable+0x75/0xe0 [ 39.921223][ T799] futex_lock_pi+0x2ed/0xa70 [ 39.921294][ T799] ? futex_unqueue+0x136/0x160 [ 39.921385][ T799] ? __cfi_futex_lock_pi+0x10/0x10 [ 39.921467][ T799] ? __cfi_futex_wake_mark+0x10/0x10 [ 39.921564][ T799] ? futex_setup_timer+0xb4/0xd0 [ 39.921640][ T799] ? __cfi_futex_wake_mark+0x10/0x10 [ 39.921731][ T799] do_futex+0x270/0x510 [ 39.921815][ T799] ? __cfi_do_futex+0x10/0x10 [ 39.921885][ T799] ? __vm_munmap+0x30d/0x3d0 [ 39.921952][ T799] __se_sys_futex+0x13c/0x320 [ 39.922055][ T799] ? __x64_sys_futex+0x110/0x110 [ 39.922163][ T799] ? __kasan_check_write+0x18/0x20 [ 39.922219][ T799] __x64_sys_futex+0xe9/0x110 [ 39.922297][ T799] x64_sys_call+0x227f/0x2ee0 [ 39.922351][ T799] do_syscall_64+0x57/0xf0 [ 39.922417][ T799] ? clear_bhb_loop+0x50/0xa0 [ 39.922504][ T799] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 39.922580][ T799] RIP: 0033:0x7fa5ef79df99 [ 39.922629][ T799] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 39.922677][ T799] RSP: 002b:00007fa5f05d1028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 39.922744][ T799] RAX: ffffffffffffffda RBX: 00007fa5efa26090 RCX: 00007fa5ef79df99 [ 39.922788][ T799] RDX: 0000000000000001 RSI: 000000000000008d RDI: 0000200000004000 [ 39.922823][ T799] RBP: 00007fa5ef834ec4 R08: 0000000000000000 R09: 0000000000000001 [ 39.922867][ T799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 39.922900][ T799] R13: 00007fa5efa26128 R14: 00007fa5efa26090 R15: 00007ffeb14d7028 [ 39.922948][ T799] [ 40.311399][ T10] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 40.328193][ T809] netlink: 104 bytes leftover after parsing attributes in process `syz.0.167'. [ 40.379809][ T818] usb usb8: usbfs: process 818 (syz.1.169) did not claim interface 0 before use [ 40.409241][ T516] usb 3-1: Using ep0 maxpacket: 8 [ 40.417653][ T516] usb 3-1: unable to get BOS descriptor or descriptor too short [ 40.426379][ T516] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 22, changing to 7 [ 40.439832][ T516] usb 3-1: New USB device found, idVendor=0d8c, idProduct=0014, bcdDevice= 0.40 [ 40.448909][ T516] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.463033][ T36] audit: type=1400 audit(1785423604.480:242): avc: denied { sqpoll } for pid=820 comm="syz.0.170" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 40.469206][ T516] usb 3-1: Product: syz [ 40.482825][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 40.492650][ T10] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 40.492672][ T516] usb 3-1: Manufacturer: syz [ 40.492692][ T516] usb 3-1: SerialNumber: syz [ 40.515459][ T10] usb 4-1: New USB device found, idVendor=0763, idProduct=2003, bcdDevice= 0.40 [ 40.537322][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 40.549017][ T10] usb 4-1: Product: syz [ 40.554412][ T10] usb 4-1: Manufacturer: syz [ 40.559587][ T10] usb 4-1: SerialNumber: syz [ 40.729812][ T516] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 40.736831][ T516] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.747671][ T516] usb 3-1: USB disconnect, device number 8 [ 40.763886][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.779270][ T502] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 40.799379][ T46] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 40.863203][ T10] usb 4-1: 1:1 : format type 0 is detected, processed as PCM [ 40.870683][ T10] usb 4-1: 1:1 : sample bitwidth 177 in over sample bytes 2 [ 40.878774][ T10] usb 4-1: 1:1: cannot set freq 137 to ep 0x1 [ 40.885450][ T10] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 40.896426][ T10] usb 4-1: USB disconnect, device number 9 [ 40.914482][ T697] udevd[697]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 40.929222][ T502] usb 2-1: Using ep0 maxpacket: 16 [ 40.937916][ T502] usb 2-1: unable to get BOS descriptor or descriptor too short [ 40.947007][ T502] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.957313][ T502] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 40.967430][ T46] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 40.977734][ T46] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 40.987425][ T502] usb 2-1: New USB device found, idVendor=2b73, idProduct=0034, bcdDevice= 0.40 [ 40.996733][ T502] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.004898][ T502] usb 2-1: Product: Н [ 41.009164][ T502] usb 2-1: Manufacturer: 얕䰘䩏☩闩젋ঽ㕿ᆙ␗崪ꅎ象牬┓ꠛ狗暉씠曆৫Ȇ묍苻空姱앒䶂輖愧凌ᇄ毻 [ 41.023208][ T502] usb 2-1: SerialNumber: syz [ 41.028078][ T46] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 41.037548][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.046142][ T46] usb 1-1: Product: syz [ 41.050438][ T46] usb 1-1: Manufacturer: syz [ 41.056057][ T46] usb 1-1: SerialNumber: syz [ 41.257394][ T502] usb 2-1: 1:1 : no or invalid class specific endpoint descriptor [ 41.267165][ T502] usb 2-1: 1:1 : format type 0 is detected, processed as PCM [ 41.269038][ T36] audit: type=1400 audit(1785423605.280:243): avc: denied { mounton } for pid=824 comm="syz.0.171" path="/30/file0" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=file permissive=1 [ 41.274807][ T502] usb 2-1: 1:1 : sample bitwidth 249 in over sample bytes 4 [ 41.306751][ T502] usb 2-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 41.317946][ T502] usb 2-1: unit 3 not found! [ 41.325953][ T46] usb 1-1: 0:2 : does not exist [ 41.332484][ T502] usb 2-1: USB disconnect, device number 9 [ 41.339911][ T46] usb 1-1: unit 9 not found! [ 41.352890][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 41.370073][ T46] usb 1-1: USB disconnect, device number 13 [ 41.384034][ T583] udevd[583]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 41.425295][ T36] audit: type=1400 audit(1785423605.440:244): avc: denied { accept } for pid=831 comm="syz.3.174" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 41.426198][ T832] usb usb8: usbfs: process 832 (syz.3.174) did not claim interface 0 before use [ 41.509212][ T10] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 41.539768][ T834] netlink: 32 bytes leftover after parsing attributes in process `syz.3.175'. [ 41.548712][ T834] tipc: Invalid UDP bearer configuration [ 41.548740][ T834] tipc: Enabling of bearer rejected, failed to enable media [ 41.659121][ T10] usb 3-1: Using ep0 maxpacket: 32 [ 41.665850][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 41.674719][ T10] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 191, changing to 7 [ 41.687731][ T10] usb 3-1: New USB device found, idVendor=041e, idProduct=3263, bcdDevice= 0.40 [ 41.697959][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 41.706272][ T10] usb 3-1: Product: syz [ 41.710808][ T10] usb 3-1: Manufacturer: syz [ 41.715458][ T10] usb 3-1: SerialNumber: syz [ 41.721544][ T839] netlink: 44 bytes leftover after parsing attributes in process `syz.3.177'. [ 41.906330][ T856] usb usb8: usbfs: process 856 (syz.0.183) did not claim interface 0 before use [ 41.935812][ T10] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 41.944134][ T10] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 41.958449][ T10] usb 3-1: USB disconnect, device number 9 [ 42.000652][ T858] netlink: 32 bytes leftover after parsing attributes in process `syz.0.184'. [ 42.009648][ T858] tipc: Invalid UDP bearer configuration [ 42.009674][ T858] tipc: Enabling of bearer rejected, failed to enable media [ 42.029136][ T46] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 42.049277][ T389] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 42.103672][ T861] base or size exceeds the MTRR width [ 42.177167][ T864] can0: slcan on ptm0. [ 42.181485][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 42.183568][ T36] audit: type=1400 audit(1785423606.210:245): avc: denied { read } for pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1 [ 42.189879][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 42.213998][ T389] usb 4-1: device descriptor read/64, error -71 [ 42.221155][ T46] usb 2-1: can't read configurations, error -61 [ 42.227960][ T36] audit: type=1400 audit(1785423606.240:246): avc: denied { search } for pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 42.249536][ T36] audit: type=1400 audit(1785423606.240:247): avc: denied { read } for pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=1536 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 42.357832][ T46] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 42.469189][ T389] usb 4-1: device descriptor read/64, error -71 [ 42.519195][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 42.525919][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 42.533750][ T46] usb 2-1: can't read configurations, error -61 [ 42.540473][ T46] usb usb2-port1: attempt power cycle [ 42.660294][ T862] can0 (unregistered): slcan off ptm0. [ 42.729160][ T389] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 42.799148][ T582] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 42.858780][ T919] netlink: 92 bytes leftover after parsing attributes in process `syz.0.191'. [ 42.867984][ T389] usb 4-1: device descriptor read/64, error -71 [ 42.879118][ T46] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 42.909514][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 42.917068][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 42.924922][ T46] usb 2-1: can't read configurations, error -61 [ 42.951376][ T582] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x81 has invalid maxpacket 64 [ 42.963316][ T582] usb 3-1: config 1 interface 0 altsetting 127 bulk endpoint 0x2 has invalid maxpacket 32 [ 42.973425][ T582] usb 3-1: config 1 interface 0 has no altsetting 0 [ 42.981686][ T582] usb 3-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.40 [ 42.990932][ T582] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 42.998982][ T582] usb 3-1: Product: syz [ 43.003615][ T582] usb 3-1: Manufacturer: syz [ 43.008263][ T582] usb 3-1: SerialNumber: syz [ 43.019553][ T880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.028807][ T880] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 43.046908][ T924] netlink: 32 bytes leftover after parsing attributes in process `syz.0.193'. [ 43.055926][ T924] tipc: Invalid UDP bearer configuration [ 43.055948][ T924] tipc: Enabling of bearer rejected, failed to enable media [ 43.069924][ T46] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 43.089469][ T46] usb 2-1: Using ep0 maxpacket: 8 [ 43.096242][ T46] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 43.104074][ T46] usb 2-1: can't read configurations, error -61 [ 43.110609][ T46] usb usb2-port1: unable to enumerate USB device [ 43.139748][ T389] usb 4-1: device descriptor read/64, error -71 [ 43.174268][ T927] base or size exceeds the MTRR width [ 43.249256][ T389] usb usb4-port1: attempt power cycle [ 43.589147][ T389] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 43.610644][ T389] usb 4-1: device descriptor read/8, error -71 [ 43.740517][ T389] usb 4-1: device descriptor read/8, error -71 [ 43.890596][ T582] rtl8150 3-1:1.0: couldn't reset the device [ 43.897073][ T582] rtl8150 3-1:1.0: probe with driver rtl8150 failed with error -5 [ 43.906687][ T582] usb 3-1: USB disconnect, device number 10 [ 43.979209][ T389] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 44.000671][ T389] usb 4-1: device descriptor read/8, error -71 [ 44.140320][ T389] usb 4-1: device descriptor read/8, error -71 [ 44.249359][ T389] usb usb4-port1: unable to enumerate USB device [ 44.329261][ T504] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 44.412414][ T36] kauditd_printk_skb: 15 callbacks suppressed [ 44.412434][ T36] audit: type=1400 audit(1785423608.430:263): avc: denied { execute } for pid=938 comm="syz.2.198" path="/selinux/policy" dev="selinuxfs" ino=20 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=file permissive=1 [ 44.466887][ T36] audit: type=1400 audit(1785423608.480:264): avc: denied { read write } for pid=945 comm="syz.2.200" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.497419][ T36] audit: type=1400 audit(1785423608.490:265): avc: denied { append } for pid=945 comm="syz.2.200" name="001" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 44.522947][ T36] audit: type=1400 audit(1785423608.510:266): avc: denied { ioctl } for pid=945 comm="syz.2.200" path="/dev/usbmon0" dev="devtmpfs" ino=87 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 44.549141][ T504] usb 1-1: Using ep0 maxpacket: 32 [ 44.557733][ T36] audit: type=1400 audit(1785423608.570:267): avc: denied { mount } for pid=936 comm="syz.0.197" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 44.619103][ T36] audit: type=1400 audit(1785423608.630:268): avc: denied { watch } for pid=936 comm="syz.0.197" path="/45/debug/kvm" dev="debugfs" ino=38 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 44.645007][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.657705][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.669264][ T937] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 44.679938][ T937] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 44.759926][ T46] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 44.789808][ T504] usb 1-1: unable to get BOS descriptor or descriptor too short [ 44.807535][ T504] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 44.829128][ T504] usb 1-1: can't read configurations, error -71 [ 44.873825][ T952] kvm_intel: kvm [951]: vcpu0, guest rIP: 0xfff0 Unhandled WRMSR(0x1d9) = 0xfe7 [ 44.899149][ T46] usb 3-1: device descriptor read/64, error -71 [ 45.012307][ T954] base or size exceeds the MTRR width [ 45.040784][ T36] audit: type=1400 audit(1785423609.060:269): avc: denied { execmod } for pid=955 comm="syz.3.204" path="/53/cpuacct.usage_sys" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.071904][ T36] audit: type=1400 audit(1785423609.060:270): avc: denied { execute } for pid=955 comm="syz.3.204" path="/53/cpuacct.usage_sys" dev="tmpfs" ino=299 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 45.089555][ T962] ip6gre0: mtu less than device minimum [ 45.102221][ T36] audit: type=1400 audit(1785423609.130:271): avc: denied { connect } for pid=960 comm="syz.3.205" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.129321][ T36] audit: type=1400 audit(1785423609.130:272): avc: denied { write } for pid=960 comm="syz.3.205" path="socket:[9191]" dev="sockfs" ino=9191 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 45.139391][ T46] usb 3-1: device descriptor read/64, error -71 [ 45.219240][ T582] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 45.369190][ T582] usb 2-1: Using ep0 maxpacket: 32 [ 45.374712][ T975] 9pnet_fd: p9_fd_create_tcp (975): problem connecting socket to 127.0.0.1 [ 45.384980][ T582] usb 2-1: config 0 has an invalid interface number: 67 but max is 0 [ 45.393807][ T582] usb 2-1: config 0 has no interface number 0 [ 45.400279][ T46] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 45.410237][ T582] usb 2-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 45.419408][ T582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.427604][ T582] usb 2-1: Product: syz [ 45.432448][ T582] usb 2-1: Manufacturer: syz [ 45.437337][ T582] usb 2-1: SerialNumber: syz [ 45.444354][ T582] usb 2-1: config 0 descriptor?? [ 45.451098][ T582] smsc95xx v2.0.0 [ 45.529259][ T516] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 45.539324][ T46] usb 3-1: device descriptor read/64, error -71 [ 45.681070][ T516] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 45.699112][ T516] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 45.708280][ T516] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 45.730736][ T516] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 45.747947][ T516] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 45.756369][ T516] usb 4-1: Product: 䩣鄜Ᾰ캗蔖밹儐ⲟ⇢攆昻똛⹌ꞅ鐦벂鴘䈜◐Ǔꃗ﫦刃◲ᵮ奺㘻秋睬ܗ㋪ở婪랾溾皞쭶ꨲ붗긞㹴厃➫伯暞蝮罸ꌆ訸敾G戏嫹卨ሩ뾉ହ鋤矂꿃쬊ꌋ皋捲횩휃ل씍鱧烐╿趟ᑅ [ 45.780895][ T46] usb 3-1: device descriptor read/64, error -71 [ 45.787560][ T516] usb 4-1: Manufacturer: ᥢ꺠瘿䓻蠏泍ㆍ䅹쒆鼙犅ꀏ뻟鴚䙧ⅼ촣偈㙁呓읗ଌ䍇䀴苾綷䤍朁鱧뗉쮘鿈￫Ⓩ蟸맏᯻쌲钧욢 [ 45.804057][ T516] usb 4-1: SerialNumber: syz [ 45.858303][ T582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 45.869368][ T582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 45.889353][ T46] usb usb3-port1: attempt power cycle [ 45.940436][ T988] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 45.949549][ T988] tipc: Invalid UDP bearer configuration [ 45.949573][ T988] tipc: Enabling of bearer rejected, failed to enable media [ 46.021236][ T516] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 46.028318][ T516] cdc_ncm 4-1:1.0: bind() failure [ 46.034987][ T516] usb 4-1: USB disconnect, device number 14 [ 46.073725][ T991] usb usb8: usbfs: process 991 (syz.0.213) did not claim interface 0 before use [ 46.084056][ T991] process 'syz.0.213' launched './file0' with NULL argv: empty string added [ 46.229266][ T46] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 46.250269][ T46] usb 3-1: device descriptor read/8, error -71 [ 46.380315][ T46] usb 3-1: device descriptor read/8, error -71 [ 46.619245][ T46] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 46.640227][ T46] usb 3-1: device descriptor read/8, error -71 [ 46.770407][ T46] usb 3-1: device descriptor read/8, error -71 [ 46.809144][ T10] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 46.879421][ T46] usb usb3-port1: unable to enumerate USB device [ 46.959133][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 46.965734][ T10] usb 4-1: unable to get BOS descriptor set [ 46.972827][ T10] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 46.984761][ T10] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 46.993997][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 47.002783][ T10] usb 4-1: Product: syz [ 47.007090][ T10] usb 4-1: Manufacturer: syz [ 47.012003][ T10] usb 4-1: SerialNumber: syz [ 47.036814][ T1005] base or size exceeds the MTRR width [ 47.227664][ T10] usb 4-1: bad CDC descriptors [ 47.240283][ T10] usb 4-1: USB disconnect, device number 15 [ 47.353199][ T1019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.222'. [ 47.362294][ T1019] tipc: Invalid UDP bearer configuration [ 47.362330][ T1019] tipc: Enabling of bearer rejected, failed to enable media [ 47.494356][ T1022] usb usb8: usbfs: process 1022 (syz.0.223) did not claim interface 0 before use [ 47.749130][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 47.776508][ T1030] netlink: 20 bytes leftover after parsing attributes in process `syz.3.226'. [ 47.803807][ T1032] base or size exceeds the MTRR width [ 47.889150][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.129148][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.152140][ T582] smsc95xx 2-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 48.166313][ T582] smsc95xx 2-1:0.67: probe with driver smsc95xx failed with error -71 [ 48.176501][ T582] usb 2-1: USB disconnect, device number 14 [ 48.225202][ T1043] tipc: Enabling of bearer rejected, already enabled [ 48.369251][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 48.469231][ T46] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 48.510587][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.524384][ T1045] netlink: 32 bytes leftover after parsing attributes in process `syz.2.232'. [ 48.533656][ T1045] tipc: Invalid UDP bearer configuration [ 48.533679][ T1045] tipc: Enabling of bearer rejected, failed to enable media [ 48.599223][ T46] usb 4-1: device descriptor read/64, error -71 [ 48.681526][ T1051] netlink: 'syz.1.234': attribute type 5 has an invalid length. [ 48.690849][ T1051] netlink: 'syz.1.234': attribute type 32 has an invalid length. [ 48.733788][ T1055] base or size exceeds the MTRR width [ 48.749211][ T10] usb 1-1: device descriptor read/64, error -71 [ 48.839167][ T46] usb 4-1: device descriptor read/64, error -71 [ 48.859129][ T31] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 48.860004][ T10] usb usb1-port1: attempt power cycle [ 49.019187][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 49.025531][ T31] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0xE has invalid maxpacket 16 [ 49.039196][ T31] usb 3-1: New USB device found, idVendor=0644, idProduct=800f, bcdDevice= 0.40 [ 49.048288][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 49.056683][ T31] usb 3-1: Product: syz [ 49.060939][ T31] usb 3-1: Manufacturer: syz [ 49.065705][ T31] usb 3-1: SerialNumber: syz [ 49.074003][ T1049] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 49.081316][ T46] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 49.209222][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 49.229205][ T46] usb 4-1: device descriptor read/64, error -71 [ 49.231010][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.291873][ T1049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 49.301202][ T1049] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 49.321976][ T31] usb 3-1: MIDIStreaming interface descriptor not found [ 49.333974][ T31] usb 3-1: USB disconnect, device number 15 [ 49.347090][ T583] udevd[583]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 49.392386][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.412375][ T1070] netlink: 32 bytes leftover after parsing attributes in process `syz.1.241'. [ 49.421973][ T1070] tipc: Invalid UDP bearer configuration [ 49.422002][ T1070] tipc: Enabling of bearer rejected, failed to enable media [ 49.436119][ T1072] netlink: 'syz.2.242': attribute type 46 has an invalid length. [ 49.463337][ T36] kauditd_printk_skb: 10 callbacks suppressed [ 49.463358][ T36] audit: type=1400 audit(1785423613.480:283): avc: denied { setopt } for pid=1074 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.469318][ T46] usb 4-1: device descriptor read/64, error -71 [ 49.470619][ T36] audit: type=1400 audit(1785423613.480:284): avc: denied { ioctl } for pid=1074 comm="syz.2.243" path="socket:[11583]" dev="sockfs" ino=11583 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.490113][ T1075] netlink: 4 bytes leftover after parsing attributes in process `syz.2.243'. [ 49.500590][ T36] audit: type=1400 audit(1785423613.480:285): avc: denied { bind } for pid=1074 comm="syz.2.243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 49.629341][ T46] usb usb4-port1: attempt power cycle [ 49.669128][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 49.690139][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.820301][ T10] usb 1-1: device descriptor read/8, error -71 [ 49.939197][ T10] usb usb1-port1: unable to enumerate USB device [ 49.979251][ T46] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 50.000482][ T46] usb 4-1: device descriptor read/8, error -71 [ 50.019145][ T389] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 50.139952][ T46] usb 4-1: device descriptor read/8, error -71 [ 50.169168][ T389] usb 2-1: Using ep0 maxpacket: 16 [ 50.175572][ T389] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 50.186592][ T389] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 96 [ 50.196478][ T389] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 8 [ 50.206214][ T389] usb 2-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 50.220114][ T389] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 50.229282][ T389] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 50.237323][ T389] usb 2-1: SerialNumber: syz [ 50.249648][ T1085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.256897][ T1085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.281551][ T389] hub 2-1:1.0: bad descriptor, ignoring hub [ 50.287534][ T389] hub 2-1:1.0: probe with driver hub failed with error -5 [ 50.379206][ T46] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 50.400252][ T46] usb 4-1: device descriptor read/8, error -71 [ 50.496104][ T1085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.503641][ T1085] raw-gadget.2 gadget.1: fail, usb_ep_enable returned -22 [ 50.530133][ T46] usb 4-1: device descriptor read/8, error -71 [ 50.568073][ T1087] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 50.598757][ T36] audit: type=1400 audit(1785423614.610:286): avc: denied { getopt } for pid=1086 comm="syz.0.249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 50.639320][ T46] usb usb4-port1: unable to enumerate USB device [ 50.717718][ T389] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -71 [ 50.733113][ T36] audit: type=1400 audit(1785423614.750:287): avc: denied { create } for pid=1098 comm="syz.0.252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 50.759508][ T389] usb 2-1: USB disconnect, device number 15 [ 51.019306][ T504] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 51.179181][ T504] usb 1-1: Using ep0 maxpacket: 32 [ 51.186135][ T504] usb 1-1: unable to get BOS descriptor or descriptor too short [ 51.194829][ T504] usb 1-1: config 1 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 51.205905][ T504] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 8 [ 51.218305][ T504] usb 1-1: string descriptor 0 read error: -22 [ 51.224674][ T504] usb 1-1: New USB device found, idVendor=1430, idProduct=474b, bcdDevice= 0.40 [ 51.247956][ T504] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.278137][ T1103] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 51.287606][ T504] usb 1-1: MIDIStreaming interface descriptor not found [ 51.304684][ T1105] netlink: 32 bytes leftover after parsing attributes in process `syz.1.255'. [ 51.339224][ T1105] tipc: Invalid UDP bearer configuration [ 51.339253][ T1105] tipc: Enabling of bearer rejected, failed to enable media [ 51.462761][ T36] audit: type=1400 audit(1785423615.480:288): avc: denied { getopt } for pid=1113 comm="syz.3.257" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 51.498834][ T389] usb 1-1: USB disconnect, device number 20 [ 51.524700][ T1116] usb usb8: usbfs: process 1116 (syz.1.258) did not claim interface 0 before use [ 51.699157][ T46] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 51.769146][ T582] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 51.860690][ T46] usb 4-1: unable to get BOS descriptor or descriptor too short [ 51.870069][ T46] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 51.880511][ T46] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 51.893616][ T46] usb 4-1: New USB device found, idVendor=0582, idProduct=004c, bcdDevice= 0.40 [ 51.903129][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.912269][ T46] usb 4-1: Product: syz [ 51.916670][ T46] usb 4-1: Manufacturer: syz [ 51.922060][ T46] usb 4-1: SerialNumber: syz [ 51.941931][ T582] usb 2-1: New USB device found, idVendor=2b73, idProduct=0013, bcdDevice= 0.40 [ 51.951403][ T582] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 51.960326][ T582] usb 2-1: Product: syz [ 51.964716][ T582] usb 2-1: Manufacturer: syz [ 51.969720][ T582] usb 2-1: SerialNumber: syz [ 52.049125][ T36] audit: type=1400 audit(1785423616.060:289): avc: denied { cmd } for pid=1117 comm="iou-wrk-1118" path="socket:[10874]" dev="sockfs" ino=10874 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 52.131446][ T46] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 52.149361][ T46] usb 4-1: 2:1 : no or invalid class specific endpoint descriptor [ 52.153658][ T36] audit: type=1400 audit(1785423616.160:290): avc: denied { read } for pid=1123 comm="syz.0.260" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 52.193678][ T46] usb 4-1: parse_audio_format_rates_v2v3(): unable to find clock source (clock -22) [ 52.220326][ T582] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 52.235473][ T46] usb 4-1: USB disconnect, device number 20 [ 52.261945][ T582] usb 2-1: USB disconnect, device number 16 [ 52.273518][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 52.301951][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card1/controlC1/../uevent} for writing: No such file or directory [ 52.449191][ T31] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 52.585604][ T36] audit: type=1400 audit(1785423616.600:291): avc: denied { read } for pid=1128 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 52.607838][ T31] usb 1-1: Using ep0 maxpacket: 8 [ 52.614245][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 52.624811][ T31] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 52.640714][ T31] usb 1-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 52.650403][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 52.665657][ T31] usb 1-1: Product: syz [ 52.670618][ T31] usb 1-1: Manufacturer: syz [ 52.676850][ T31] usb 1-1: SerialNumber: syz [ 52.702621][ T36] audit: type=1400 audit(1785423616.730:292): avc: denied { remount } for pid=1129 comm="syz.3.262" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 52.901562][ T31] usb 1-1: unit 0 not found! [ 52.929244][ T31] usb 1-1: USB disconnect, device number 21 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) Stopping network: [ 53.742271][ T582] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 53.778614][ T1182] kvm: kvm [1180]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 OK [ 53.859250][ T1182] kvm: kvm [1180]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 Stopping iptables: [ 53.925039][ T582] usb 1-1: config 1 has an invalid descriptor of length 120, skipping remainder of the config [ 53.935554][ T582] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 53.955055][ T1182] kvm: kvm [1180]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 53.957978][ T582] usb 1-1: New USB device found, idVendor=2a39, idProduct=3fd2, bcdDevice= 0.40 OK [ 53.982899][ T582] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 53.998408][ T45] Bluetooth: hci0: Frame reassembly failed (-84) [ 54.011372][ T582] usb 1-1: Product: syz [ 54.015621][ T582] usb 1-1: Manufacturer: syz Stopping system message bus: [ 54.032639][ T1182] kvm: kvm [1180]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 54.045880][ T1182] kvm: kvm [1180]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 54.048169][ T582] usb 1-1: SerialNumber: syz done [ 54.297167][ T582] usb 1-1: 0:1 : does not exist [ 54.303262][ T582] usb 1-1: unit 1 not found! [ 54.307921][ T582] usb 1-1: unit 127 not found! [ 54.332862][ T582] usb 1-1: USB disconnect, device number 22 [ 54.356966][ T325] udevd[325]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory killall: can't kill pid 397: No such process killall: can't kill pid 696: No such process Stopping klogd: OK Stopping acpid: [ 54.762373][ T36] kauditd_printk_skb: 17 callbacks suppressed [ 54.762395][ T36] audit: type=1400 audit(1785423618.780:310): avc: denied { write } for pid=95 comm="acpid" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.829960][ T36] audit: type=1400 audit(1785423618.780:311): avc: denied { remove_name } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 54.869142][ T36] audit: type=1400 audit(1785423618.780:312): avc: denied { unlink } for pid=95 comm="acpid" name="acpid.pid" dev="tmpfs" ino=7 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 54.896935][ T1205] usb usb8: usbfs: process 1205 (syz.0.272) did not claim interface 0 before use [ 55.063253][ T36] audit: type=1400 audit(1785423619.080:313): avc: denied { create } for pid=1206 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.122767][ T36] audit: type=1400 audit(1785423619.120:314): avc: denied { ioctl } for pid=1206 comm="syz.1.273" path="socket:[11187]" dev="sockfs" ino=11187 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 55.339122][ T389] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 55.501019][ T389] usb 2-1: unable to get BOS descriptor or descriptor too short [ 55.519567][ T389] usb 2-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 55.549120][ T389] usb 2-1: config 1 has 0 interfaces, different from the descriptor's value: 1 [ 55.580694][ T389] usb 2-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 55.599102][ T389] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 55.617543][ T389] usb 2-1: Product: syz [ 55.621886][ T389] usb 2-1: Manufacturer: syz [ 55.626904][ T389] usb 2-1: SerialNumber: syz [ 55.857626][ T389] usb 2-1: USB disconnect, device number 17 OK [ 55.869119][ T36] audit: type=1400 audit(1785423619.870:315): avc: denied { execmem } for pid=1206 comm="syz.1.273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Stopping syslogd: stopped /sbin/syslogd (pid 92) OK [ 55.984464][ T36] audit: type=1400 audit(1785423620.000:316): avc: denied { mount } for pid=1227 comm="syz.0.276" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.024512][ T36] audit: type=1400 audit(1785423620.030:317): avc: denied { mounton } for pid=1227 comm="syz.0.276" path="/71/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 56.026159][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 56.048224][ T36] audit: type=1400 audit(1785423620.030:318): avc: denied { unmount } for pid=1227 comm="syz.0.276" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 56.054046][ T346] Bluetooth: hci0: command 0x1003 tx timeout umount: can't remount debugfs read-only [ 56.272226][ T1250] netlink: 32 bytes leftover after parsing attributes in process `syz.3.278'. [ 56.288259][ T1250] tipc: Invalid UDP bearer configuration [ 56.288288][ T1250] tipc: Enabling of bearer rejected, failed to enable media umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Connection to 10.128.0.110 closed by remote host. [ 56.409127][ T36] audit: type=1400 audit(1785423620.400:319): avc: denied { write } for pid=286 comm="syz-executor" path="pipe:[1570]" dev="pipefs" ino=1570 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 Sent SIGTERM to all processes [ 56.608268][ T1244] bridge_slave_1: left allmulticast mode [ 56.616677][ T1244] bridge_slave_1: left promiscuous mode [ 56.629228][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.642699][ T1244] bridge_slave_0: left allmulticast mode [ 56.648549][ T1244] bridge_slave_0: left promiscuous mode [ 56.669886][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.735257][ T1244] bridge0 (unregistering): left allmulticast mode [ 56.842344][ T1244] veth1_macvtap: left promiscuous mode [ 56.847918][ T1244] veth0_vlan: left promiscuous mode [ 57.110389][ T1244] bridge_slave_1: left allmulticast mode [ 57.116070][ T1244] bridge_slave_1: left promiscuous mode [ 57.121800][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.129517][ T1244] bridge_slave_0: left allmulticast mode [ 57.135182][ T1244] bridge_slave_0: left promiscuous mode [ 57.140848][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.148680][ T1244] bridge_slave_1: left allmulticast mode [ 57.154503][ T1244] bridge_slave_1: left promiscuous mode [ 57.160235][ T1244] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.167785][ T1244] bridge_slave_0: left allmulticast mode [ 57.173547][ T1244] bridge_slave_0: left promiscuous mode [ 57.179332][ T1244] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.343127][ T1244] veth1_macvtap: left promiscuous mode [ 57.348680][ T1244] veth0_vlan: left promiscuous mode [ 57.354267][ T1244] veth1_macvtap: left promiscuous mode [ 57.359926][ T1244] veth0_vlan: left promiscuous mode [ 57.640496][ T1244] ------------[ cut here ]------------ [ 57.646025][ T1244] WARNING: CPU: 0 PID: 1244 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140 [ 57.656153][ T1244] Modules linked in: [ 57.660149][ T1244] CPU: 0 UID: 0 PID: 1244 Comm: kworker/u8:28 Not tainted syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 57.672047][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.682339][ T1244] Workqueue: netns cleanup_net [ 57.687146][ T1244] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140 [ 57.693224][ T1244] Code: e8 e1 e7 d6 fc 4b 83 3c 3e 00 75 19 e8 e5 24 7e fc 49 81 ff f8 07 00 00 74 1b e8 d7 24 7e fc 49 83 c7 08 eb c9 e8 cc 24 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a [ 57.712937][ T1244] RSP: 0018:ffffc900103dfb90 EFLAGS: 00010293 [ 57.719044][ T1244] RAX: ffffffff85094cf4 RBX: ffff88812fffa380 RCX: ffff8881148f8000 [ 57.727109][ T1244] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f90580 [ 57.735163][ T1244] RBP: ffffc900103dfbb0 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 57.743287][ T1244] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: dffffc0000000000 [ 57.751487][ T1244] R13: dffffc0000000000 R14: ffff888103f90000 R15: 0000000000000580 [ 57.759567][ T1244] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.768682][ T1244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 Sent SIGKILL to[ 57.775466][ T1244] CR2: 00007ffca4ac4d24 CR3: 00000000074aa000 CR4: 00000000003526b0 all processes[ 57.784998][ T1244] Call Trace: [ 57.789525][ T1244] [ 57.792660][ T1244] cleanup_net+0x6bd/0xc90 [ 57.797180][ T1244] ? __cfi_cleanup_net+0x10/0x10 [ 57.802248][ T1244] ? kick_pool+0xb9/0x540 [ 57.806631][ T1244] process_scheduled_works+0x7f7/0x1060 [ 57.812376][ T1244] worker_thread+0xc99/0x13f0 [ 57.817131][ T1244] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 Requesting syst[ 57.823023][ T1244] ? __kasan_check_read+0x15/0x20 em poweroff [ 57.829476][ T1244] kthread+0x2c7/0x360 [ 57.834566][ T1244] ? __cfi_worker_thread+0x10/0x10 [ 57.839785][ T1244] ? __cfi_kthread+0x10/0x10 [ 57.844435][ T1244] ret_from_fork+0x67/0xa0 [ 57.848893][ T1244] ? __cfi_kthread+0x10/0x10 [ 57.853585][ T1244] ret_from_fork_asm+0x1a/0x30 [ 57.858384][ T1244] [ 57.861473][ T1244] ---[ end trace 0000000000000000 ]--- [ 57.867250][ T1244] ------------[ cut here ]------------ [ 57.872798][ T1244] WARNING: CPU: 1 PID: 1244 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140 [ 57.883018][ T1244] Modules linked in: [ 57.886923][ T1244] CPU: 1 UID: 0 PID: 1244 Comm: kworker/u8:28 Tainted: G W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 57.900242][ T1244] Tainted: [W]=WARN [ 57.904047][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.914171][ T1244] Workqueue: netns cleanup_net [ 57.918979][ T1244] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140 [ 57.925262][ T1244] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 90 24 7e fc 49 81 ff f8 07 00 00 74 1b e8 82 24 7e fc 49 83 c7 08 eb c5 e8 77 24 7e fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 67 24 7e fc 5b 41 5c 41 5e 41 [ 57.945092][ T1244] RSP: 0018:ffffc900103dfb90 EFLAGS: 00010293 [ 57.951267][ T1244] RAX: ffffffff85094d49 RBX: ffff888103f90800 RCX: ffff8881148f8000 [ 57.959373][ T1244] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103f90808 [ 57.967465][ T1244] RBP: ffffc900103dfbb0 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 57.975528][ T1244] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: dffffc0000000000 [ 57.983652][ T1244] R13: dffffc0000000000 R14: ffff888103f90000 R15: 0000000000000008 [ 57.991799][ T1244] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 58.000910][ T1244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.007537][ T1244] CR2: 0000001b2f421ff8 CR3: 000000010b32e000 CR4: 00000000003526b0 [ 58.015592][ T1244] Call Trace: [ 58.018918][ T1244] [ 58.021951][ T1244] cleanup_net+0x6bd/0xc90 [ 58.026408][ T1244] ? __cfi_cleanup_net+0x10/0x10 [ 58.031426][ T1244] ? kick_pool+0xb9/0x540 [ 58.035806][ T1244] process_scheduled_works+0x7f7/0x1060 [ 58.041430][ T1244] worker_thread+0xc99/0x13f0 [ 58.046142][ T1244] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 58.051994][ T1244] ? __kasan_check_read+0x15/0x20 [ 58.057058][ T1244] kthread+0x2c7/0x360 [ 58.061214][ T1244] ? __cfi_worker_thread+0x10/0x10 [ 58.066354][ T1244] ? __cfi_kthread+0x10/0x10 [ 58.071031][ T1244] ret_from_fork+0x67/0xa0 [ 58.075483][ T1244] ? __cfi_kthread+0x10/0x10 [ 58.080128][ T1244] ret_from_fork_asm+0x1a/0x30 [ 58.084927][ T1244] [ 58.087957][ T1244] ---[ end trace 0000000000000000 ]--- [ 58.097275][ T1244] ------------[ cut here ]------------ [ 58.102802][ T1244] WARNING: CPU: 0 PID: 1244 at net/xfrm/xfrm_state.c:3217 xfrm_state_fini+0x2be/0x310 [ 58.112402][ T1244] Modules linked in: [ 58.116306][ T1244] CPU: 0 UID: 0 PID: 1244 Comm: kworker/u8:28 Tainted: G W syzkaller #0 0b31bef96cff8e44f9e14c4f768eb06c85e3b290 [ 58.129628][ T1244] Tainted: [W]=WARN [ 58.133443][ T1244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 58.143694][ T1244] Workqueue: netns cleanup_net [ 58.148532][ T1244] RIP: 0010:xfrm_state_fini+0x2be/0x310 [ 58.154120][ T1244] Code: 3c 20 00 74 08 48 89 df e8 1f a6 f1 fc 48 8b 3b e8 37 99 dc fc 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc cc e8 12 e3 98 fc <0f> 0b e9 b0 fd ff ff e8 06 e3 98 fc 0f 0b e9 18 fe ff ff e8 fa e2 [ 58.173767][ T1244] RSP: 0018:ffffc900103dfb70 EFLAGS: 00010293 [ 58.179870][ T1244] RAX: ffffffff84ee8eae RBX: ffff88812fffa380 RCX: ffff8881148f8000 [ 58.187859][ T1244] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff8881148f8000 [ 58.195876][ T1244] RBP: ffffc900103dfb98 R08: ffffffff87d420e7 R09: 1ffffffff0fa841c [ 58.203878][ T1244] R10: dffffc0000000000 R11: fffffbfff0fa841d R12: 1ffffffff0fa8170 [ 58.212058][ T1244] R13: dffffc0000000000 R14: ffff88812fffaf80 R15: dffffc0000000000 [ 58.220057][ T1244] FS: 0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 58.229024][ T1244] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.235771][ T1244] CR2: 00007ffca4ac4d24 CR3: 00000000074aa000 CR4: 00000000003526b0 [ 58.243832][ T1244] Call Trace: [ 58.247139][ T1244] [ 58.250159][ T1244] xfrm_net_exit+0x31/0x80 [ 58.254633][ T1244] cleanup_net+0x6bd/0xc90 [ 58.259149][ T1244] ? __cfi_cleanup_net+0x10/0x10 [ 58.264129][ T1244] ? kick_pool+0xb9/0x540 [ 58.268507][ T1244] process_scheduled_works+0x7f7/0x1060 [ 58.274116][ T1244] worker_thread+0xc99/0x13f0 [ 58.278846][ T1244] ? __cfi_set_cpus_allowed_ptr+0x10/0x10 [ 58.284652][ T1244] ? __kasan_check_read+0x15/0x20 [ 58.289732][ T1244] kthread+0x2c7/0x360 [ 58.293859][ T1244] ? __cfi_worker_thread+0x10/0x10 [ 58.299011][ T1244] ? __cfi_kthread+0x10/0x10 [ 58.303674][ T1244] ret_from_fork+0x67/0xa0 [ 58.308127][ T1244] ? __cfi_kthread+0x10/0x10 [ 58.313301][ T1244] ret_from_fork_asm+0x1a/0x30 [ 58.318104][ T1244] [ 58.321195][ T1244] ---[ end trace 0000000000000000 ]--- [ 58.824761][ T1252] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 58.831617][ T1252] ACPI: PM: Preparing to enter system sleep state S5 [ 58.839267][ T1252] kvm: exiting hardware virtualization [ 58.844802][ T1252] reboot: Power down serialport: VM disconnected.