last executing test programs: 6.54916176s ago: executing program 2 (id=13): mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='pstore\x00', 0x10005, &(0x7f00000000c0)=',\xb3(,{\\)\x00') (async) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) (async) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x38, 0x0, 0x1, 0x70bd29, 0x2, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x4}]}]}, 0x38}}, 0x24000040) (async) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x8) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000200)={[{0x70eaa093, 0x8, 0x55, 0x81, 0xf9, 0x2, 0x6, 0x65, 0xe9, 0x3, 0x2, 0x34, 0x4}, {0x869, 0x7, 0x7, 0x2, 0x0, 0x16, 0x76, 0x9, 0x1, 0x9, 0xa, 0x1, 0x7fff}, {0x1000, 0x7, 0x8, 0x2, 0x5, 0x8, 0xa, 0x3, 0xf1, 0x90, 0x8, 0xee, 0x8000000000000001}], 0x7f}) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) sendfile(r0, r1, 0x0, 0x1) 6.427241532s ago: executing program 2 (id=14): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x28, 0x13, 0x1, 0x2, 0x25dfdbf6, "", [@typed={0x7, 0x0, 0x0, 0x0, @str='\x13\x00\x00'}, @typed={0x8, 0x3fff, 0x0, 0x0, @fd}, @nested={0x8, 0x1a, 0x0, 0x1, [@nested={0x4}]}]}, 0x28}], 0x1}, 0x0) (async) mkdir(&(0x7f0000000280)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000001280)={&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f00000012c0)=0x40) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f00000001c0)={0x1c, 0x0, &(0x7f0000000200)=[@enter_looper, @increfs, @request_freeze={0x400c6313, 0x0, 0x1}], 0x100, 0x0, &(0x7f0000001300)}) (async) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000001400)={0x2c, 0x0, &(0x7f0000001440)=[@clear_freeze={0x400c6314, 0x0, 0x1}, @request_freeze={0x400c6313, 0x0, 0x1}, @freeze_done={0x40086315, 0x1}], 0x100, 0x0, &(0x7f0000001480)}) (async) sendmsg$sock(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000240)="2e00000013000500000000000000000008010000100002007664706173696d5f6e6574000a00040076647079300019", 0x2f}], 0x1}, 0x0) 6.107136285s ago: executing program 1 (id=16): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x20, 0x1, 0x70bd25, 0x0, {0xa}, [@typed={0x8, 0x116, 0x0, 0x0, @pid}, @nested={0x18, 0x17, 0x0, 0x1, [@typed={0x14, 0x2a, 0x0, 0x0, @ipv6=@empty}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x40940}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x1, 0x3}, 0x4) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) close_range(r2, r1, 0x2) r3 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r3, 0x4008af12, &(0x7f00000000c0)={0x3, 0x6}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000080)={0x5, 0x2}, 0x4) 6.106601295s ago: executing program 1 (id=17): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040c41090ea80"], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x21e0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x800, 0xfffffffd, 0x230, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x0, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 5.600259827s ago: executing program 0 (id=20): r0 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4c04, 0x6, @dev={0xfe, 0x80, '\x00', 0x38}, 0x23}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, 0x0, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000140), 0x4) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) write(r2, &(0x7f0000000000)="240000005800410f9c00f4f90085b3a85c91fddf080001000501009f0800028001000000", 0x24) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, 0x16, 0x1, 0x10000000, 0x0, {0xa}, [@typed={0x4, 0x12e}, @typed={0x8, 0xa, 0x0, 0x0, @ipv4}]}, 0x20}}, 0x4048000) syz_open_dev$evdev(&(0x7f00000001c0), 0x200000000000, 0x0) 5.597504028s ago: executing program 0 (id=21): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./trace\x00', 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtaction={0x18, 0x31, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000040)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000100)="8269b66f2471b18a9dadb59528c570873123dec798a2a26e42ebfc89", 0x1c, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000019580)='./trace\x00', &(0x7f00000195c0)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000019600)='trace/events/sched/sched_switch/filter\x00', 0x1, 0xb2) write(r2, &(0x7f0000019640)='prev_state.function ==', 0x16) 5.596871548s ago: executing program 0 (id=22): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000140)="2e9b3d0007e03dd651930100c575963f886411", 0x13}, {&(0x7f0000000180)="0000044100000d", 0x7}], 0x2) mount$tmpfs(0x0, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080), 0x10, &(0x7f00000001c0)={[{@nr_inodes={'nr_inodes', 0x3d, [0x50]}}]}) 5.589013548s ago: executing program 0 (id=23): r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff}, 0x0) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io(r2, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x40, 0x0, 0x8, 0x7f, 0xb, 0x8001, 0x7ff}}}, 0x0) syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000003c0)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x48, 0x1b1c, 0x1d00, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x40, 0x110, 0x1, "", [{{0x9, 0x4, 0x0, 0x6, 0x2, 0x3, 0x1, 0x0, 0xff, {0x9, 0x21, 0x8, 0x2, 0x1, {0x22, 0x6f4}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x7, 0x8, 0x4}}, [{{0x9, 0x5, 0x2, 0x3, 0x0, 0xc, 0x6d, 0x9}}]}}}]}}]}}, &(0x7f0000000500)={0xa, &(0x7f0000000400)={0xa, 0x6, 0x300, 0xd, 0x3, 0x7f, 0x20, 0x1}, 0x11, &(0x7f0000000440)={0x5, 0xf, 0x11, 0x1, [@ssp_cap={0xc, 0x10, 0xa, 0xff, 0x0, 0x5, 0xf00}]}, 0x2, [{0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0x11}}, {0x4, &(0x7f00000004c0)=@lang_id={0x4, 0x3, 0x402}}]}) splice(r1, 0x0, r0, 0x0, 0x10000000000016, 0x0) ioctl$VHOST_VDPA_GET_VRING_NUM(r0, 0x8002af76, &(0x7f0000000540)) syz_usb_connect(0x0, 0x72c, &(0x7f0000000b00)={{0x12, 0x1, 0x250, 0xb2, 0x10, 0xd7, 0x8, 0xc45, 0x8008, 0xe962, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x71a, 0x3, 0x4, 0xf, 0x10, 0x2, "", [{{0x9, 0x4, 0xe1, 0x8, 0xb, 0xff, 0xf7, 0x48, 0x6, [], [{{0x9, 0x5, 0xf, 0x0, 0x8, 0x36, 0x9, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0xc}, @generic={0x88, 0x1, "12035332097f9087981a188fc3ae9344f433a6a1a1a234b5a615efe24e8cbb06c8ba2c3734b599dedce82f3f8a49894f110c23435730ddf97fcedeba5445ab3e5fb71c95f3596199364e28546f028861ee014ad35e4091cc076b7d591781c658c51b0543e1481c895812a09806e8f1305e34828aef4f4eae9c4cb26a9f60c546bb6f8edc66e2"}]}}, {{0x9, 0x5, 0xd, 0x10, 0x200, 0x5, 0xd, 0x8, [@generic={0xd3, 0x24, "081eba97a6dedc749b8725ad1d91ba2fb0740c33314aebe3ab1ba2fbf5d8b1e9a167d3d22f94ff8364d8c2083c672a08b9790d3e7e015e4848e3758b94bf93f720e2598f9a366fbba1848428a8afd732eb087ce332594f845f4afa0fc2cdf1ce82bbd0d6475cfa95f620f3e2a0196808ef6401f98fd35d648e60d38338eb4738df1aa4b0f9993e64847263323e770093f0eb200f6a9faf3f6aa3d2eae2b6ef75a5ff26a016b0d37a51afae84f4cc902fc9d290790e475ffb8daf0b4dbe92d864f47018709e71d87f930ea03438e4f856c8"}]}}, {{0x9, 0x5, 0x1, 0x3, 0x40, 0x80, 0xfe, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x10, 0x4, 0x4, 0x2, [@generic={0xb7, 0xc, "d524f903f659b920d5efe2bf60cd957d11af1ca7f0d351aba5706e9734449d772e89798968ef60ae4d11cf48d48a457fe059d3e897e1f29e48082673b450d611a905bd0886d6de511035f886efc0c1c4ac36522272be8b26937b45fb3a673441d8b5e9a4748f93785731b953f2440a909a5134c3c2500ccd994de9164214d381db11248dd65d10e1cb1bfe558b012a4692bdd4d8f979bbb4dd3a1561b15fe01120b5bf4751fd7728c3d7cd84b82d157c64ab485995"}]}}, {{0x9, 0x5, 0x7, 0x4, 0x200, 0x8, 0x3, 0x7, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x54, 0x8}, @uac_iso={0x7, 0x25, 0x1, 0xc, 0x9, 0x1}]}}, {{0x9, 0x5, 0x3, 0x1, 0x10, 0x9, 0x0, 0xc1, [@generic={0x33, 0x7, "920ade4aea7f0a726dafaf1c431a5d6287465099986714fe4bfd16c3dd2884cb7221758df00104fdbad42670470d8012e0"}, @uac_iso={0x7, 0x25, 0x1, 0x4, 0x29, 0x9}]}}, {{0x9, 0x5, 0x2, 0x0, 0x40, 0x6, 0xfa, 0x3}}, {{0x9, 0x5, 0x2, 0x0, 0x3ff, 0xd7, 0x8, 0x1, [@generic={0xcb, 0xb, "1d71947f9d6d9f827d33b002787ec651bc2bd20a393d841070742dd1e0a371901d985971bdb9f7c16659477d84540f4a5224126ab7cbf375b38999c9ac1809f787b83e6a09be050ffe80cdceaab1cda617c43eed3d7c67d87a31dee455b4a5695a90aab9efd3d0b8fadba29b998638b09f79550b9394cb35eed862a9081b15c699ce6725b394f5ba17f0d643f957b81946b8e002cbcb026985953ef3a7188216c17c73038447087cf4cc9cdbd4f97fd595598ca7cfcfbf8cfaab47aa77db9a8666c813bec36592bed0"}, @generic={0x65, 0x31, "584c8baaa86b1debc98b622b10049a33a64faee778d6cb2b94a86e6ea30385abd75271a4cb04de06a0af8b8e6c3b6223f4e09a733c55e5af79e87c6c35037a54fbc2a4b595f38f423ff85c38caa03810475266867f38bf77a4b50587c948e51fb110b0"}]}}, {{0x9, 0x5, 0x80, 0x3, 0x40, 0x7f, 0x8, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x0, 0x3}]}}, {{0x9, 0x5, 0x9, 0x10, 0x200, 0xc, 0x80, 0x80, [@uac_iso={0x7, 0x25, 0x1, 0x8, 0x2, 0xfff8}]}}, {{0x9, 0x5, 0xc, 0x1, 0x400, 0x5, 0x8, 0x81}}]}}, {{0x9, 0x4, 0x2f, 0xbe, 0x1, 0xee, 0xa0, 0xc, 0x7, [], [{{0x9, 0x5, 0xd, 0x0, 0x3ff, 0x4, 0x0, 0x80, [@generic={0x65, 0xd, "42cc951d151bcd070ca5c08d984aebcc3eb6c2e5c3d3e1ef71d0f2391625fa39c85376a285d80577e8bc0ca04c293a16a3a75588de9cfc7c02a82d91aca3a70ab6875072b3289d94bbecb9e229f5dc18be5ca51d672ff0b789e07fa485c08944430c6c"}, @generic={0xb2, 0x6, "9afa1a14ecc9088ce900840d5ced8370cf4ec250e9173776258a91c5c02a3fde52d046f2f2ddb359ac644e8c652d23a30ca5198ec0437627887ebde22c8ddc5c562b32f10217845c92aa76a67d39f8b3a1547a8ca9307d5fbe6e5db8deb2b149f22576d6f670f56e2ca9d484705fc9013e532c8cba61e0c7f646b8cbf59bcfe079a4be64384c85278e2f60b2bf75588a64ec9e99e5d9b0a89c985f3b855dfc34438c9177d91c0e9798869bb00cfbb3be"}]}}]}}, {{0x9, 0x4, 0x1c, 0x1, 0x8, 0x62, 0xa3, 0x83, 0x7f, [], [{{0x9, 0x5, 0x1, 0x0, 0x3ff, 0xc0, 0x4, 0x6, [@generic={0x31, 0x24, "bc909ef128f7e6fdbd7c5c9b2bc7a5d57ce893c39825f88382293198dbb5e8d7708af909ca3c34ed70fd1e0ff4873c"}]}}, {{0x9, 0x5, 0x2, 0x0, 0x10, 0xb3, 0x7, 0x2}}, {{0x9, 0x5, 0xd, 0x0, 0x10, 0x9, 0xe8, 0x81}}, {{0x9, 0x5, 0x9, 0x8, 0x7666fb33a48ed1cc, 0x5, 0x2, 0x7, [@generic={0x18, 0x24, "494f1298494c45e12fc76ffadefd34b9fe4528f29d1f"}]}}, {{0x9, 0x5, 0xe, 0x8, 0x0, 0x6, 0x4, 0xb, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x4f, 0x687a}, @generic={0xdb, 0x21, "59949d9040b301b853f550bbbab4b8d6d80b3ae95df2ec701ba491950f8c4bd4ba71869d71a466ee627b445532f5c9ff27aa23ada1a5983ec02b7e45d85da5fecdb77495086729d9e1898b9850ca82356817329aa8246a612f2c8a5d499071f18649d43a993834b29bddc5227ecb2c009e06eb6617f1ac749ade3f7f9352618daad745337366f94ca2fd8199c15c927d21ea5872ac7a090eabdd93e09c8e35d64d42f7908e3db35aeb3bb925c2d690eb3462e4181cd292295d29dc0f05153eb0be1d900219ac3726036b44ad9bd1475ceb13068316c37a42bb"}]}}, {{0x9, 0x5, 0xd, 0x2, 0x10, 0x9, 0xfa, 0x1, [@generic={0x53, 0x0, "8d87f7f46674a1092c3a86243b0f89c66f8875ee5bd2f1bdcc6e62981aec967385aa53a5b884dea7c12b39f54232c0f5c24cc12d45d6733b0a893f9e0b17dcb56d7b27fb5bedb03f197fb54d57c405e088"}]}}, {{0x9, 0x5, 0x1, 0x0, 0x3bf, 0x81, 0x80, 0x7f, [@uac_iso={0x7, 0x25, 0x1, 0xc, 0x3, 0x8ebf}, @uac_iso={0x7, 0x25, 0x1, 0x8, 0xc}]}}, {{0x9, 0x5, 0x7, 0xc, 0x0, 0x6, 0x1, 0x6}}]}}]}}]}}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x5, [{0xfffffdf8, &(0x7f0000000000)=@lang_id={0x0, 0x3, 0x812}}, {0x4, &(0x7f0000000080)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000200)=@string={0x0, 0x3, "3cf5d4ad8b3d7b52a56d5510732dc3824710e83d9d29b9e8734a7d10ca34afba5dcfa84014a60ea685eb82e096ae4c97dfbbdf764b2ce350cd185c539b5402c0696f3155ee1f684f80fe36aa28e33e637f3258fc0f81ddf4948d0bcfbe0c1b0b359c6949ac7251ef0ec8bc89227cd5e27da8aa255c9f57dd08800b00261c284b36e404d98403453349dd271d5fb6399dcbe4c72753da1f797fb8621a2325b252220b765070cb25fecee7cf5217cf1a92a7006e336b030a94a71aa114912d64"}}, {0x4, &(0x7f00000001c0)=@string={0x0, 0x3, "29a29706d7bc61a05379e984"}}, {0xfffffff7, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x1c0a}}]}) 5.564724091s ago: executing program 2 (id=24): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x8, 0x56a, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x4, "", [{{0x9, 0x4, 0x0, 0x8, 0x82, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x7bf, 0x2, 0xe0, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x4, [{0x11}, {0x0, 0x100000000000000}]}, 0x68) syz_usb_control_io$hid(r0, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0022f00000000501158091a60916a101200182008c0508951329309102c0"], 0x0}, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x400400, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r4, 0x4010ae67, &(0x7f0000000100)={0x70000, 0x111000, 0x1}) close_range(r2, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1) 4.352259905s ago: executing program 2 (id=31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) (async) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0x4, 0x4, '\x00', 0x1}) (async) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000040)=@arm64={0x0, 0x4, 0x4, '\x00', 0x1}) ioctl$KVM_SMI(r2, 0xaeb7) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_open_dev$loop(0x0, 0x4, 0x901) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$KVM_CREATE_VM(r3, 0xae03, 0x1f) socket(0x1e, 0x4, 0x0) (async) r4 = socket(0x1e, 0x4, 0x0) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) (async) getsockopt$TIPC_IMPORTANCE(r4, 0x10f, 0x7f, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 4.271931983s ago: executing program 3 (id=32): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x18c, r1, 0x0, 0x70bd26, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8}, {0x6, 0x11, 0xed}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x9}, {0x8, 0x15, 0x3}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1fae}, {0x6, 0x11, 0xe}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x2}, {0x8, 0x15, 0xf}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0xffffffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x1}, {0x6}, {0x8, 0x15, 0x7f}}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r0) sendmsg$NL80211_CMD_GET_MPP(r0, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x80, r2, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x80}}, 0x1) r3 = socket$inet6(0xa, 0x5, 0x7) r4 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) connect$unix(r4, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e21}, 0x6e) write(r0, &(0x7f0000000580)="e5cb54db370ac1a69ba3ee023a078318e3bec192aebfd84a407afa1b3ccc77157c6235b67c2d57e11844dfe29cad0f266f3228bf2172f5885a9bbb7f33b5e626df51ae91f359558ba17c197ff0faf031ec8bc2fa2f2a3879b22f48be3eadf1fe20d779ce93cc29d22e7266cd120eb3b0cd52ffe657c77258fc2cab0c9c", 0x7d) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r0) r6 = openat(0xffffffffffffffff, &(0x7f0000000640)='./file0\x00', 0x2ac80, 0x1) syz_clone3(&(0x7f0000000880)={0x8d2100, &(0x7f0000000680)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f0000000700)=0x0, {0x34}, &(0x7f0000000740)=""/89, 0x59, &(0x7f00000007c0)=""/87, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, {r6}}, 0x58) sched_setscheduler(r8, 0x5, &(0x7f0000000900)=0xa93) sendmsg$inet(r0, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000940)="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", 0x1000}, {&(0x7f0000001940)="c72c40362a78983d754f13afa45c803bf0fa02fcb98e1a27d036e162f6883ee3f4d46ee0cd754b63e388197ce536b62c8f7c90de6b1c48ec7084600703f6aff0f29c0500721c74b74eee4df28d50776df70c301a1eb6f9052104f7b7ece0707e82b13a2def7a7f35691c91b48206040728c58ee690bbae4d7f30ac2fa58adf97111cade1c2b83f0407ae8b97051ac13ed79131c4ae3160a068778ff67e07c94b40f12fa8cfcd711585e05561db2ed9744fb4faf1edd3204c760e815e8a30a31fcbec52ce59", 0xc5}, {&(0x7f0000001a40)="8d9952", 0x3}, {&(0x7f0000001a80)="33143ba226d02e4cb564f2dc329a87afa99dce0c5d100d7f14", 0x19}], 0x4, &(0x7f0000001b00)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}, 0x8840) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000001b80)={0x0, 0x0, 0x0}, &(0x7f0000001bc0)=0xc) ioprio_set$uid(0x0, r9, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r11, &(0x7f0000001d00)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x80, r5, 0x4, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x64}}}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x13, 0x13, [{0x24}, {0x48, 0x1}, {0x4}, {0x3, 0x1}, {0x48, 0x1}, {0x2}, {0x18}, {0x18, 0x1}, {0x1, 0x1}, {0x36}, {0x3, 0x1}, {0x3, 0x1}, {0x9, 0x1}, {0x4}, {0x30, 0x1}]}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf5}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x2}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5, 0x113, 0x1}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x1}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000050}, 0x20004040) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000001d40)={'vlan0\x00', {0x2, 0x4e23, @broadcast}}) r12 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000001d80)={'veth0_to_bond\x00'}) ioctl$TIOCGSID(r6, 0x5429, &(0x7f0000001dc0)=0x0) ptrace$peeksig(0x4209, r13, &(0x7f0000001e00)={0x6, 0x0, 0x8}, &(0x7f0000001e40)=[{}, {}, {}, {}, {}, {}, {}, {}]) r14 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r14, &(0x7f0000002340)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x74, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x6c}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x1d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x44}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7b}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x71}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4}]}, 0x74}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r15 = accept4$unix(r6, &(0x7f0000002380)=@abs, &(0x7f0000002400)=0x6e, 0x80000) r16 = socket$key(0xf, 0x3, 0x2) r17 = openat$nsim_port_pp_hold(0xffffffffffffff9c, &(0x7f0000003a00)={'/sys/kernel/debug/netdevsim/netdevsim', 0x0, '/ports/', 0x33}, 0x24000, 0x0) r18 = getpid() sendmsg$unix(r15, &(0x7f0000003b00)={&(0x7f0000002440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003980)=[{&(0x7f00000024c0)="a6726369223ed6edb5d104dccf6bb6262f4651a13578308cd9a8d62031a7b85b7c06c6f66c27bce975449db6caa03e558e459e7c1730be2bbd08d0021d777a626aa781076d9509905fc8082206a50f9be3cb0c46f34639a4530f6a96dafeb9517ac2583826940b53613efcddb51a4afc63e0904e37b8843395e7524ba24e9857e3270b91abbfada73d35eaf2f083d5dfa1c5fa6f88eaa0053460b72a8705613ff5018500a04e7cd5ac2d1c7f7db9ff14b5be4dff4717171faa639abad4bff96eb6d09d9e50b07b48bf7e874d2150e9", 0xcf}, {&(0x7f00000025c0)="79b8d0d758c9944507a0d1abca849532f320a171a2cbe4d57694e3e1522d23e697fe44e5b99df21c3a966a6c9251eb090124bd8e9963bdf7d23fd7d38857e327730b53bebbd06112be3b760faef1f7704375d29835e76de64cc204b08188c402eb2984f0e37ac1cb2b0fd19a97b5d32f86e74aa42c86799968aa3af53b8328eb5f5d1dfd667226c06fda1f56b1dab1a03d4dcbad8dd71d08c91384d164095002e96d62f27931ab", 0xa7}, {&(0x7f0000002680)="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", 0x1000}, {&(0x7f0000003680)="64a4f609dbc092f97eefaf0c6f9744e0a321cd67b83f2888ed8e56f714a17236400d634cd7aa1b0677f41a084b93909b307a6c3e9f69d07c8292428671a99ee0c9feafa01e5b8af5300428bdaf0de381759cb026f1b85a56aa1ea299b04d686ae7fe32143aad7c2d8e52502bbcdee46df12d6dc331116ecc664e337adc0bdbb357656b26f087c2416b46bed65984958a299fe246ad984c19828368b12b9d4e52b13ee6bbcf6e7cec96c095d6da48547d2e5e8ba225c9cdc7ea2058a4b86669c16731bd178206a7826773b989fc", 0xcd}, {&(0x7f0000003780)="bc8aa07ecfc54712b6be2e43a166c25c", 0x10}, {&(0x7f00000037c0)="194d2c30402e82f39b4b02929e36f47755ee7072fe2192e856fed82e02a7e231c95f833350a076d7c5ccd0e5ceeeed566fcb1987f74330b4cd427c08b7a75bd4fed90b3211f8d7a933bb18a16a6346acc162b22d4c6fb1858d2b2c90b49d9856a423a2e68cd4383851b6d544597452f03c25b6f21d64d9528fa5c2962e4703a605ce36a893e15601532e9f6ce9ae44dbc09d1aa57c4218f47f9900543e3e619a57", 0xa1}, {&(0x7f0000003880)}, {&(0x7f00000038c0)="bf86ee3579b938a883d860518d5e4bb35b3599b963b5ad77e6d9b0b9c2f37be0bb67395847321e6f6861e96076e018b6c1cc0bbd60ba7009fd675e311000581c654ec736f1452b218ef65d6cf3d5c6a9c79850e133e4c7d2889330e44dfec89b46057d417efdf966e64f092c82a1ce9210494fdaa4c69ec45de8c0f052ff2e7ac236612e0db5d6045a6b6875345f7840a1aede0c763c60ee690d8cc857d1a692c27feb", 0xa3}], 0x8, &(0x7f0000003a40)=[@rights={{0x2c, 0x1, 0x1, [r4, r3, r6, r3, r16, r12, r11]}}, @rights={{0x34, 0x1, 0x1, [r3, r14, r6, r7, r4, r7, r17, r3, r12]}}, @cred={{0x1c, 0x1, 0x2, {r18, r9, r10}}}], 0x88, 0x44000}, 0x20048014) 4.271210483s ago: executing program 3 (id=33): r0 = open(0x0, 0x20000, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) (async) r1 = mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x800, 0x1, 0x40010, r0, 0x20000000) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000840)={0x1, &(0x7f0000000880)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f00000008c0), 0x10) (async) bind$can_raw(r3, &(0x7f00000008c0), 0x10) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000900)=[{{0x3}, {0x0, 0x0, 0x1, 0x1}}], 0x8) close_range(r2, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000240)) (async) syz_ublk_add_dev(0xffffffffffffffff, 0x0, r1, 0x0, &(0x7f0000000180)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000240)) syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)) (async) r5 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x2}, &(0x7f0000000300)=0x0, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_ublk_add_dev(r5, r6, r7, r8, 0x0, 0x0) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x82, 0x0) ioctl$BLKOPENZONE(r9, 0x40101286, &(0x7f0000000040)={0x6, 0x9}) r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0) r11 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/power/wake_lock', 0x2202, 0x130) copy_file_range(r11, 0x0, r11, &(0x7f0000000700)=0xf160, 0x4, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x1ffe, 0x2000, &(0x7f0000002000/0x2000)=nil}) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000000)={0x1fe, 0x2, 0x1ffe, 0x2000, &(0x7f0000002000/0x2000)=nil}) dup(r10) (async) r12 = dup(r10) ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0) syz_ublk_setup_io_uring(0x3b99, &(0x7f0000000440)={0x0, 0x6b6f, 0x0, 0x1, 0x219}, &(0x7f0000000140), &(0x7f0000000500), &(0x7f0000000100)) (async) syz_ublk_setup_io_uring(0x3b99, &(0x7f0000000440)={0x0, 0x6b6f, 0x0, 0x1, 0x219}, &(0x7f0000000140)=0x0, &(0x7f0000000500), &(0x7f0000000100)) syz_usb_connect$uac2(0x2, 0x87, &(0x7f0000000b40)=ANY=[@ANYBLOB="120100030000000835120c80400001020301090275000301da208f080b00020152043b03026f1b01207f0904000f000101200009240100000315e803a6e339390207f60400070000090401000001022000090401010101022000090501092000f003060825010233030b00090402000001066ee66870e050a5f50220000904020109010220000905820904d7ea22"], &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0}) syz_ublk_add_dev(r12, r13, r7, r8, &(0x7f00000005c0)={0x2e, 0x38, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xe02, 0x0, 0x0, 0x1000, 0x400, 0x0, 0x0, 0x158}}}, &(0x7f0000000640)) (async) syz_ublk_add_dev(r12, r13, r7, r8, &(0x7f00000005c0)={0x2e, 0x38, 0x0, r0, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, r4, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000580)=@any_dev={0x4, 0xe02, 0x0, 0x0, 0x1000, 0x400, 0x0, 0x0, 0x158}}}, &(0x7f0000000640)) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2f, 0x1, @thr={0x0, 0x0}}, &(0x7f00000003c0)) (async) timer_create(0x1, &(0x7f00000000c0)={0x0, 0x2f, 0x1, @thr={0x0, 0x0}}, &(0x7f00000003c0)=0x0) timer_gettime(r14, &(0x7f0000000400)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffffff, &(0x7f0000000980)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) r16 = syz_open_procfs(0x0, &(0x7f0000000a00)='map_files\x00') fchdir(r16) sendmmsg$unix(r15, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000ac0)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) (async) sendmmsg$unix(r15, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x408d4}}, {{&(0x7f0000000ac0)=@abs={0x1, 0x30, 0x30}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x4004}}], 0x2, 0x40000004) 4.223713548s ago: executing program 2 (id=34): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040c41090ea800000000001090224"], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) fsopen(&(0x7f0000000180)='binfmt_misc\x00', 0x1) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xb0}, 0x21e0) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) r8 = dup(r7) syz_ublk_setup_queues(r8, r6, &(0x7f0000000040)={0x0, 0xc1, 0x800, 0xfffffffd, 0x230, 0x0, r8}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x0, 0x8091, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x0, 0x299, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 4.20365727s ago: executing program 0 (id=35): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000200)={0x0, 0x0, 0x8000, 0x3ff}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mkdirat(0xffffffffffffff9c, 0x0, 0xa) r0 = openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', 0x0, 0x404, 0x0) read$FUSE(r0, 0x0, 0x0) open(0x0, 0x80000, 0x2) write$FUSE_INIT(r0, &(0x7f00000036c0)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) lstat(0x0, 0x0) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001500)='./dev\x00', 0x1ff) r1 = userfaultfd(0x801) munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500) ioctl$UFFDIO_API(r1, 0xc018aa3f, 0x0) r2 = syz_usb_connect$uac2(0x2, 0xa8, &(0x7f0000000300)=ANY=[@ANYBLOB="12011003000000408205b9dc1cc85b372790bd66371f4c00400001020301090296000301053009080b000101072009240100400d1d000708240a0001ff23000c240302070300040007008109040100000102200009040102030b040825010000400400090402000001022000090402010101022000092402020400cc1c051024010201000400000008b8000000030905820908004006030825018203f30600"/168], &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect$uac1(0x5, 0x72, &(0x7f0000000400)={{0x12, 0x1, 0x2d8, 0x0, 0x0, 0x0, 0x8, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x60, 0x3, 0x1, 0x4, 0x80, 0xbd, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0x7fff, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x10, 0x0, 0xb0, 0x5, {0x7, 0x25, 0x1, 0xc, 0x0, 0x66f}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x10, 0x31, 0x8, 0x8, {0x7, 0x25, 0x1, 0x8, 0x7f, 0x1000}}}}}}}}]}}, &(0x7f0000000480)={0x0, 0x0, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="6752030057000000"]}) syz_usb_control_io(r2, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io$uac2(r2, 0x0, 0x0) syz_usb_control_io$uac2(r2, 0x0, &(0x7f0000000580)={0x44, &(0x7f0000000600)=ANY=[@ANYBLOB="000c0100000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r2, 0x0, &(0x7f0000000640)={0x84, &(0x7f0000000700)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./mnt\x00', 0x1ff) mount(&(0x7f0000000180)=@filename='./dev/sda1\x00', &(0x7f0000000140)='./mnt\x00', &(0x7f0000000100)='ext4\x00', 0x1008c10, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) chdir(&(0x7f0000000140)='./file0\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbee9, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x19) mremap(&(0x7f0000064000/0x3000)=nil, 0x3000, 0x600000, 0x3, &(0x7f0000a00000/0x600000)=nil) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file2\x00', 0x18d042, 0x15) pwrite64(r3, &(0x7f0000000000)="ff", 0x58200, 0xfb2200) 3.060020597s ago: executing program 1 (id=36): r0 = socket$can_raw(0x1d, 0x3, 0x1) r1 = syz_create_resource$binfmt(&(0x7f0000000000)='./file1\x00') r2 = openat$binfmt(0xffffffffffffff9c, r1, 0x42, 0x1ff) close(r2) execveat$binfmt(0xffffffffffffff9c, r1, &(0x7f00000000c0)={[&(0x7f0000000100)='M\xd9+\xa6\xee\x9a\xa5\xb1e\xe0F\xb5\x02*vMD\x06\x7fk@\xe8\xfd\x9e\x16\x9e\xda\xc1\f\xcc\xb4]\xd5\x1a\xe0\xf1\x0fK@\xfb\xaa!e\x90\xacJ\xdc\xbb\x04\xf3\x85\x13\x80\n\x9d\xe1\x172\xe7w\xef\xd9\x19\xda\xd0EK\xec\xd2\v\xb4\\g\x05\xbc<\vJ\xebU'], 0xffffffffffffff8c}, 0x0, 0x0) sendmsg$can_raw(r0, &(0x7f0000000200)={&(0x7f0000000240), 0x10, &(0x7f0000000280)={&(0x7f00000002c0)=@can={{0x0, 0x0, 0x0, 0x1}, 0x89, 0x1, 0x4}, 0x10}, 0x1, 0x0, 0x0, 0x240c408c}, 0xc008004) 3.059450037s ago: executing program 1 (id=37): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xa8}, 0x21e0) pipe2(0x0, 0x0) syz_ublk_add_dev(r4, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000040)={0x0, 0xc1, 0x800, 0xfffffffd, 0x230, 0x0, r7}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x0, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x0, 0x299, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 3.058152047s ago: executing program 1 (id=38): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r0, 0x29, 0x1e, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@private0={0xfc, 0x0, '\x00', 0xb}, 0x800, 0x2, 0x1, 0x7, 0x7fc, 0xfffe}, 0x20) setns(0xc9, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e76f00341658a585107b462e", 0x12, 0x20000010, 0x0, 0x0) recvmmsg(r2, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000200)=""/4048, 0xfd0}, {&(0x7f0000001200)=""/217, 0xd9}, {&(0x7f0000001300)=""/128, 0x80}, {&(0x7f0000001380)=""/250, 0xfa}, {&(0x7f0000001480)=""/293, 0x125}, {&(0x7f00000015c0)=""/73, 0x49}, {&(0x7f0000001640)=""/231, 0xe7}, {&(0x7f0000001740)=""/158, 0x9e}], 0x8}, 0x7ff}, {{0x0, 0x0, 0x0}, 0x800}], 0x2, 0x0, 0x0) syz_usb_connect$uac2(0x5, 0x8d, &(0x7f0000000040)=ANY=[], 0x0) 2.968153956s ago: executing program 3 (id=39): ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000000)={0x0, 0x0}) ptrace$getregset(0x4204, r0, 0x6, &(0x7f00000001c0)={&(0x7f0000000140)=""/116, 0x74}) syz_usb_connect(0x2, 0xb3, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002ef0201406d0425080001000000010902a1000201008032080b00020e03000009040000000e0100000d240100010000006cdc020101112402010102000000000000000002000009240302010100010009040101000e0200000e240101470081000200000001001b240401015955593200001000800000aa00389b71"], &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0}) 2.967327686s ago: executing program 2 (id=40): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./mnt\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000240)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./tracing/uprobe_events\x00', 0x401, 0x0) write(r0, &(0x7f00000002c0)='p:-est/event1 ./file0:0x0 @', 0x1b) mount(&(0x7f0000000300)=@filename='./dev/sda1\x00', &(0x7f0000000340)='./mnt\x00', &(0x7f0000000380)='ext4\x00', 0x8410, 0x0) write$evdev(0xffffffffffffffff, &(0x7f00000003c0)=[{{0x0, 0xea60}, 0x12, 0x2002}], 0x18) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x59fc02, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000440)={0x0, 0x1, 0x6, 0xfffffffffffffffe}) write(r1, &(0x7f0000000480)="8b", 0xffe4) syz_usb_connect$uac3(0x5, 0x96, &(0x7f00000004c0)=ANY=[@ANYBLOB="1201000200000008ba0d001040000102030109028400030104c000080b0400012330030904000000010130000a240102200006524cc3ed12a5d33b0000000b240d08240600000081000b240d0804ffffffff0001090401000001023000090401010101023000090511090002020a252505000000841180090402000001023000090402010101023000090582091000bf06090a252503000000090a00b955799b77a558ab647a0f6e089041488076fee6042d0476bc451c20dcc0cadf8732cdca76e68be159140691baa761fe7fab1f6efca5c0d9"], 0x0) 1.792377706s ago: executing program 3 (id=41): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.numa_stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) futimesat(0xffffffffffffffff, 0x0, &(0x7f0000000080)={{0x77359400}, {0x0, 0xea60}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000002f40)=ANY=[@ANYBLOB="240600001a0001002abd7000000000000a00fc003a2a5e247b00000008061b800106dc"], 0x624}], 0x1, 0x0, 0x0, 0x20400}, 0x0) 1.791982306s ago: executing program 3 (id=42): ptrace(0x10, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000080)=[{0x6, 0x4, 0x0, 0x7fff0000}]}) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x2, 0xb, 0x5, 0x9, 0x2, 0x0, 0x70bd2d, 0x25dfdbfc}, 0x10}}, 0x20000000) close_range(r0, 0xffffffffffffffff, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f0000000100), 0x10) sendmsg$can_bcm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="0500000008000000ed00000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="03"], 0x48}, 0x1, 0x0, 0x0, 0x2000c014}, 0x20000080) sendmsg$can_bcm(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05"], 0x48}, 0x1, 0x0, 0x0, 0x48850}, 0x200008c1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000400)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000480)={&(0x7f00000004c0)={0x1d, r3}, 0x10, &(0x7f0000000780)={&(0x7f0000000840)=ANY=[@ANYRES64=r2], 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x8001) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r4, 0x6, 0x9, &(0x7f0000000880)={{0x11, @private=0xa010101, 0x4e20, 0x0, 'lblc\x00', 0x1a, 0x2, 0x2000000}, {@private=0xa010101, 0x0, 0x0, 0x0, 0x7}}, 0x44) getsockopt$inet_tcp_int(r4, 0x6, 0x9, 0x0, &(0x7f0000000900)) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x40080, 0x0) ioctl$TCSETS(r5, 0x5402, 0x0) syz_ublk_setup_io_uring(0x20, &(0x7f00000007c0)={0x0, 0xd40c, 0x1, 0x40002, 0x1e5}, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)=0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, r6, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x104, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@any_dev={0x2, 0xc25, 0x0, 0x0, 0x1000, 0x6, 0x0, 0x0, 0x4}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, 0x0, &(0x7f0000000500)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x864f, 0x100, 0x2, 0x18d, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7395, 0x4000, 0x0, 0x142}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8bac, 0x4, 0x2, 0x1dd, 0x0, r9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2000003, 0x4000, 0x2, 0xffffffff}}], 0x1, 0x0, 0x0) 1.776229988s ago: executing program 3 (id=43): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) syz_usb_disconnect(r0) (async) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_usb_connect$cdc_ecm(0x5, 0xa0, &(0x7f00000001c0)={{0x12, 0x1, 0x110, 0x2, 0x0, 0x0, 0x40, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x8e, 0x1, 0x1, 0x1, 0x60, 0xea, "", [{{0x9, 0x4, 0x0, 0x1, 0x3, 0x2, 0x6, 0x0, 0x6, {{0x5}, {0x5, 0x24, 0x0, 0x7}, {0xd, 0x24, 0xf, 0x1, 0xec, 0x4, 0x6, 0x9}, [@country_functional={0xe, 0x24, 0x7, 0x1, 0x5, [0x5, 0x1, 0x0, 0x0]}, @call_mgmt={0x5, 0x24, 0x1, 0x1, 0x1}, @dmm={0x7, 0x24, 0x14, 0x0, 0x3}, @mdlm_detail={0x2b, 0x24, 0x13, 0x4, "5ffa1bc6776c360736ca44e96ca70d41a10fed446358ed49f58afd232454c956a7441b0aa41a80"}, @obex={0x5, 0x24, 0x15, 0xfff8}]}, {[{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x2f, 0x6, 0xa}}], {{0x9, 0x5, 0x82, 0x2, 0x8, 0x7, 0x4, 0x8}}, {{0x9, 0x5, 0x3, 0x2, 0x200, 0xb, 0x9, 0x5}}}}}]}}]}}, &(0x7f0000000480)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x200, 0x81, 0x1, 0x8, 0x8}, 0x2b, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x4, [{0x4, &(0x7f0000000300)=@lang_id={0x4, 0x3, 0x82e}}, {0x9c, &(0x7f0000000340)=@string={0x9c, 0x3, "a1892df0f9139cb5214deab79161a66b3f1d2105ab90f7422d9688722cb87fe3f6dfbac365a8e099803007d2094e2a822ee183159a684da867187ca6ced07f1a2f759e4a9fb1fa875a4610d77bdf68b615915418a9f679c41e196f8bfcb092c0eb439049be5e1f05725a4def36489d3b07b51d253dcc02f3d80675fe87341365b29de96ebd45cc75b3c13528ccab11e51f89fb059acb8f95af25"}}, {0x4, &(0x7f0000000400)=@lang_id={0x4, 0x3, 0x4010}}, {0x4, &(0x7f0000000440)=@lang_id={0x4, 0x3, 0x100a}}]}) sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="280000002100010000000000000000000a00000000000001016200000900178002c9a3"], 0x28}], 0x1}, 0x0) (async) syz_usb_control_io$hid(r1, 0x0, 0x0) (async) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") (async) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000500)={'rose0\x00', &(0x7f0000000040)=@ethtool_link_settings={0x4d, 0x5, 0x7, 0x7f, 0x9, 0x6, 0xe5, 0x34, 0xf, 0x7f, [0x200, 0x8, 0x200, 0x7, 0x1000, 0xe, 0x8000, 0x8a7], [0x2, 0xfff, 0xfffffff9]}}) 1.188121178s ago: executing program 0 (id=44): openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="1201000000000040c41090ea80"], 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c) getsockopt$inet6_buf(r0, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}, 0x21e0) pipe2(0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@any_dev={0x4, 0x3f7, 0x0, 0x0, 0x1000, 0xe}}}, &(0x7f0000000300)=0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) syz_ublk_setup_queues(r5, r3, &(0x7f0000000040)={0x0, 0xc1, 0x800, 0xfffffffd, 0x230, 0x0, r5}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x403, 0x10, 0x0, 0x8091}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xc81d, 0x2, 0x0, 0x3ac}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x1, 0x0, 0x299}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x626d, 0x1000, 0x1, 0x26d}}], 0x1, 0x0, 0x0) 0s ago: executing program 1 (id=45): lseek(0xffffffffffffffff, 0xfffffffffffff800, 0x0) r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) prctl$PR_SET_MM_EXE_FILE(0x39, 0xd, 0xffffffffffffffff) setns(r1, 0x24020000) r2 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_pidfd_open(r2, 0x0) setns(r3, 0x24020000) mount(0x0, &(0x7f0000000840)='.\x00', 0x0, 0x1056fbf, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000020303000000000000080000000000000800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000020303000000000000000000000000100800010001"], 0x1c}}, 0x0) r4 = socket(0x28, 0x3, 0x2) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000700), r4) sendmsg$MPTCP_PM_CMD_GET_ADDR(r4, &(0x7f00000007c0)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x24, r5, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40843}, 0x20000081) write(r4, &(0x7f00000002c0)="2400000011005f0414f9f40700090400810000000d0000000000000008000f0001000000", 0x24) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) ptrace$getregset(0x4204, r6, 0x204, &(0x7f0000000800)={0x0}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201500285d5c208600404003196015403010902f64201000310030d0458080116ad00000000000000000000022cc0bd72573e46f5ed15fe768e90d1754862cf3519287ef6b66f53c3172e23ea7071bc30bf287e7694"], &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x8, [{0x52, &(0x7f0000000080)=@string={0x52, 0x3, "1fad3bc7ea7228963c5f6c6b02ff1f172d1204c7aae4102f86ca23e758d99082d922fd19ed50d2e3cd0b6b74238eb718062fd18aa9b93d97f16b8e9764cc689d37b6192c28ae3b9254d4efe38728dc24"}}, {0x38, &(0x7f0000000100)=@lang_id={0x4, 0x3, 0x2c01}}, {0x4d, &(0x7f0000000540)=@string={0x4d, 0x3, "2f9a442cba4f1f2c742e08e0fd0d2ab73e25f7f60b6d4724922afd1565bec8ba358aff6157e281128900ed0130253069e9596eb123ab98ad893e0dc1f3d56f963655f7f02a02733f58417a"}}, {0xe4, &(0x7f00000005c0)=@string={0xe4, 0x3, "54758b18a80e1e8e8fe9538942e219d2d6b3a58a96d31408eb286bcc06a310a02f608d25b427e421e4d38bbde879c679d3654075f5b1ebb86043fe9eb4c05c5c2ea3ef85fb1cb7e251f4e6261a8326bd88a30d82d690600f7cb2f7e7219c92ff30dbfe9c5b4ada3f338d4634d4e83c50103b90de2d2e810e129f7ab7f72886c9ae4b5d49a6d0862cfa543e973423e6de7406840d5c37b2aeb7d69c8e1ba8cf8075eee85c2f2c519770017ae0b89493e3f5f46f2cb25b67338525212b372e6e1a7fa3e0a8b4eeb9438c410679bb9b46223d98e00700c6317fa741bf3df5f5e12c3a0b"}}, {0x3f, &(0x7f0000000300)=@lang_id={0x0, 0x3, 0xc0a}}, {0x4, &(0x7f0000000340)=@lang_id={0x4, 0x3, 0x2809}}, {0xfa, &(0x7f0000000380)=@string={0xfa, 0x3, "da25218fcdd179df526b64511724cae4872350890fac2a351eca2a903c598e5e1acf86e1357be831b658e084b79b62e6f5f2a1cb8c798d001d3f3bdb755db5c2d888ffd908937db4cd3790266261b8d860d4afa978472d9205c642f23dcf254c31392091b65d6bcfc74420d105622b836295f699117bdbe2c725891aa3b097b44a8765887f7cdd681982e32a111d1801ffe6f513875ac45f2ede693651b20152557259336282d7ebd331dc13e947c607bb45cb50f80d2f97bb28607f572e608379910673c8128582e63348da9546bbe95b8ed5c57d5997367897b0c65dcf589e09c4c67c9e4c7381d3624910917b25956b2139a3bccee76e"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xd0c1}}]}) kernel console output (not intermixed with test programs): [ 16.724931][ T36] audit: type=1400 audit(1793844753.810:62): avc: denied { rlimitinh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 16.727888][ T36] audit: type=1400 audit(1793844753.810:63): avc: denied { siginh } for pid=233 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.221' (ED25519) to the list of known hosts. [ 24.364428][ T36] audit: type=1400 audit(1793844761.460:64): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.387525][ T36] audit: type=1400 audit(1793844761.480:65): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.390205][ T287] cgroup: Unknown subsys name 'net' [ 24.415600][ T36] audit: type=1400 audit(1793844761.510:66): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.416106][ T287] cgroup: Unknown subsys name 'devices' [ 24.515558][ T287] cgroup: Unknown subsys name 'hugetlb' [ 24.521270][ T287] cgroup: Unknown subsys name 'rlimit' [ 24.676702][ T36] audit: type=1400 audit(1793844761.770:67): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.699952][ T36] audit: type=1400 audit(1793844761.770:68): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.724850][ T36] audit: type=1400 audit(1793844761.770:69): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.747628][ T289] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.756772][ T36] audit: type=1400 audit(1793844761.850:70): avc: denied { relabelto } for pid=289 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.782236][ T36] audit: type=1400 audit(1793844761.850:71): avc: denied { write } for pid=289 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.813480][ T36] audit: type=1400 audit(1793844761.910:72): avc: denied { read } for pid=287 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.814665][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.839058][ T36] audit: type=1400 audit(1793844761.910:73): avc: denied { open } for pid=287 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 26.178625][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.185777][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.193050][ T295] bridge_slave_0: entered allmulticast mode [ 26.199412][ T295] bridge_slave_0: entered promiscuous mode [ 26.206188][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.213271][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.220363][ T295] bridge_slave_1: entered allmulticast mode [ 26.226820][ T295] bridge_slave_1: entered promiscuous mode [ 26.287188][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.294475][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.301572][ T296] bridge_slave_0: entered allmulticast mode [ 26.307942][ T296] bridge_slave_0: entered promiscuous mode [ 26.315704][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.322914][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.329976][ T296] bridge_slave_1: entered allmulticast mode [ 26.336245][ T296] bridge_slave_1: entered promiscuous mode [ 26.346801][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.353935][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.361003][ T294] bridge_slave_0: entered allmulticast mode [ 26.367402][ T294] bridge_slave_0: entered promiscuous mode [ 26.373963][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.381011][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.388140][ T294] bridge_slave_1: entered allmulticast mode [ 26.394444][ T294] bridge_slave_1: entered promiscuous mode [ 26.435794][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.442991][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.450066][ T297] bridge_slave_0: entered allmulticast mode [ 26.456566][ T297] bridge_slave_0: entered promiscuous mode [ 26.463095][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.470146][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.477365][ T297] bridge_slave_1: entered allmulticast mode [ 26.483688][ T297] bridge_slave_1: entered promiscuous mode [ 26.587497][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.594589][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.601916][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.608983][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.627458][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.634540][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.641821][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.648893][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.695679][ T297] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.702785][ T297] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.710064][ T297] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.717173][ T297] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.745495][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.752568][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.759883][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.766937][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.784168][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.791540][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.798854][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.806857][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.814180][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.821365][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.828972][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.836238][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.858320][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.865456][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.895177][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.902224][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.910342][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.917430][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.925374][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.932438][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.940493][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.947553][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.955370][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.962406][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.974720][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.981798][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.016573][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.023643][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.042905][ T295] veth0_vlan: entered promiscuous mode [ 27.053391][ T296] veth0_vlan: entered promiscuous mode [ 27.076299][ T297] veth0_vlan: entered promiscuous mode [ 27.082384][ T295] veth1_macvtap: entered promiscuous mode [ 27.098375][ T296] veth1_macvtap: entered promiscuous mode [ 27.119210][ T297] veth1_macvtap: entered promiscuous mode [ 27.148483][ T295] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 27.163030][ T294] veth0_vlan: entered promiscuous mode [ 27.187768][ T294] veth1_macvtap: entered promiscuous mode [ 27.204406][ T312] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 27.254768][ T318] netlink: 144 bytes leftover after parsing attributes in process `syz.0.1'. [ 27.362959][ T325] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2182154216 (4364308432 ns) > initial count (507749598 ns). Using initial count to start timer. [ 27.522886][ T9] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 27.693903][ T9] usb 4-1: config 1 has an invalid interface number: 105 but max is 0 [ 27.702104][ T9] usb 4-1: config 1 has no interface number 0 [ 27.708556][ T9] usb 4-1: config 1 interface 105 has no altsetting 0 [ 27.717346][ T9] usb 4-1: New USB device found, idVendor=20f4, idProduct=e05a, bcdDevice=6c.6d [ 27.726893][ T9] usb 4-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 27.735268][ T9] usb 4-1: Product: syz [ 27.739527][ T9] usb 4-1: Manufacturer: syz [ 27.744597][ T9] usb 4-1: SerialNumber: syz [ 27.812848][ T45] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 27.984075][ T45] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.996903][ T45] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 28.006421][ T45] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 28.014724][ T45] usb 3-1: Product: syz [ 28.019101][ T45] usb 3-1: Manufacturer: syz [ 28.024037][ T45] usb 3-1: SerialNumber: syz [ 28.033254][ T45] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 28.040917][ T45] cdc_wdm 3-1:1.0: Unknown control protocol [ 28.231681][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.242019][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.252092][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.261806][ T333] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.271825][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.280054][ T333] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.352958][ T9] aqc111 4-1:1.105 (unnamed net_device) (uninitialized): Failed to read(0x20) reg index 0x0000: 0 [ 28.373125][ T9] aqc111 4-1:1.105: probe with driver aqc111 failed with error -61 [ 30.243297][ T31] usb 4-1: USB disconnect, device number 2 [ 30.312826][ T36] kauditd_printk_skb: 57 callbacks suppressed [ 30.312842][ T36] audit: type=1400 audit(1793844767.410:131): avc: denied { create } for pid=343 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 30.338201][ T36] audit: type=1400 audit(1793844767.410:132): avc: denied { create } for pid=343 comm="syz.3.9" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 30.396013][ T36] audit: type=1400 audit(1793844767.490:133): avc: denied { unmount } for pid=297 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 30.416898][ T36] audit: type=1400 audit(1793844767.510:134): avc: denied { ioctl } for pid=346 comm="syz.0.10" path="socket:[3771]" dev="sockfs" ino=3771 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.420305][ T347] netlink: 8 bytes leftover after parsing attributes in process `syz.0.10'. [ 30.443978][ T36] audit: type=1400 audit(1793844767.510:135): avc: denied { read } for pid=346 comm="syz.0.10" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.471792][ T36] audit: type=1400 audit(1793844767.510:136): avc: denied { open } for pid=346 comm="syz.0.10" path="net:[4026532554]" dev="nsfs" ino=4026532554 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 30.494886][ T36] audit: type=1400 audit(1793844767.510:137): avc: denied { nlmsg_read } for pid=346 comm="syz.0.10" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 30.515189][ T36] audit: type=1400 audit(1793844767.590:138): avc: denied { search } for pid=350 comm="syz.0.11" name="/" dev="configfs" ino=2479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 30.549269][ T9] usb 3-1: USB disconnect, device number 2 [ 30.566375][ T36] audit: type=1400 audit(1793844767.660:139): avc: denied { mount } for pid=354 comm="syz.2.13" name="/" dev="pstore" ino=2701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 30.589085][ T36] audit: type=1400 audit(1793844767.680:140): avc: denied { create } for pid=354 comm="syz.2.13" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 30.627782][ T358] ======================================================= [ 30.627782][ T358] WARNING: The mand mount option has been deprecated and [ 30.627782][ T358] and is ignored by this kernel. Remove the mand [ 30.627782][ T358] option from the mount to silence this warning. [ 30.627782][ T358] ======================================================= [ 30.662795][ T31] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 30.670510][ T358] 9pnet_fd: Insufficient options for proto=fd [ 30.689046][ T362] netlink: 'syz.2.14': attribute type 2 has an invalid length. [ 30.824145][ T31] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.834361][ T31] usb 4-1: config 0 has no interfaces? [ 30.839864][ T31] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 30.848977][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.857985][ T31] usb 4-1: config 0 descriptor?? [ 31.083164][ T9] usb 4-1: USB disconnect, device number 3 [ 31.232762][ T363] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 31.384251][ T363] usb 2-1: no configurations [ 31.389110][ T363] usb 2-1: can't read configurations, error -22 [ 31.427171][ T376] fuse: Bad value for 'group_id' [ 31.432147][ T376] fuse: Bad value for 'group_id' [ 31.437669][ T376] veth1_macvtap: left promiscuous mode [ 31.443251][ T376] macsec0: entered promiscuous mode [ 31.448635][ T376] macsec0: entered allmulticast mode [ 31.520820][ T9] rust_binder: 359: undelivered freeze notification, 0000000000000001 [ 31.535419][ T363] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 31.543198][ T9] rust_binder: 359: undelivered freeze notification, 0000000000000001 [ 31.703143][ T363] usb 2-1: no configurations [ 31.708178][ T363] usb 2-1: can't read configurations, error -22 [ 31.714615][ T363] usb usb2-port1: attempt power cycle [ 31.762779][ T67] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 31.802771][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 31.802884][ T407] rust_binder: 406:407 no such ref 0 [ 31.815698][ T407] rust_binder: Failure when writing BR_NOOP at beginning of buffer. [ 31.823755][ T407] rust_binder: Read failure Err(EFAULT) in pid:24 [ 31.912788][ T67] usb 1-1: Using ep0 maxpacket: 32 [ 31.919119][ T67] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.930204][ T67] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.941171][ T67] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 31.950242][ T67] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0 [ 31.958673][ T31] usb 3-1: Using ep0 maxpacket: 8 [ 31.963766][ T67] usb 1-1: Product: syz [ 31.967938][ T67] usb 1-1: Manufacturer: syz [ 31.974928][ T67] hub 1-1:4.0: USB hub found [ 31.979692][ T31] usb 3-1: too many endpoints for config 0 interface 0 altsetting 8: 130, using maximum allowed: 30 [ 31.992789][ T31] usb 3-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 32.003949][ T31] usb 3-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 130 [ 32.016995][ T31] usb 3-1: config 0 interface 0 has no altsetting 0 [ 32.023698][ T31] usb 3-1: New USB device found, idVendor=056a, idProduct=00b4, bcdDevice= 0.00 [ 32.032798][ T31] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.041500][ T31] usb 3-1: config 0 descriptor?? [ 32.047485][ T389] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 32.063240][ T363] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 32.083500][ T363] usb 2-1: no configurations [ 32.088141][ T363] usb 2-1: can't read configurations, error -22 [ 32.175414][ T67] hub 1-1:4.0: config failed, hub has too many ports! (err -19) [ 32.222776][ T363] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.243547][ T363] usb 2-1: no configurations [ 32.248214][ T363] usb 2-1: can't read configurations, error -22 [ 32.254824][ T363] usb usb2-port1: unable to enumerate USB device [ 32.378275][ T387] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.386884][ T387] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.464531][ T31] wacom 0003:056A:00B4.0001: unknown main item tag 0x2 [ 32.471481][ T31] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 32.478550][ T31] wacom 0003:056A:00B4.0001: unknown main item tag 0x0 [ 32.485754][ T31] wacom 0003:056A:00B4.0001: Unknown device_type for 'HID 056a:00b4'. Assuming pen. [ 32.495896][ T31] wacom 0003:056A:00B4.0001: hidraw0: USB HID v0.01 Device [HID 056a:00b4] on usb-dummy_hcd.2-1/input0 [ 32.507891][ T31] input: Wacom Intuos3 12x19 Pen as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:056A:00B4.0001/input/input4 [ 32.513005][ T363] usb 1-1: USB disconnect, device number 2 [ 32.748245][ T363] usb 3-1: USB disconnect, device number 3 [ 32.802590][ T421] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 33.072789][ T313] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 33.142784][ T371] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 33.182768][ T363] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 33.224396][ T313] usb 4-1: unable to get BOS descriptor or descriptor too short [ 33.232467][ T313] usb 4-1: not running at top speed; connect to a high speed hub [ 33.241055][ T313] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 33.249815][ T313] usb 4-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 33.258688][ T313] usb 4-1: config 1 has an invalid descriptor of length 104, skipping remainder of the config [ 33.269291][ T313] usb 4-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 33.278424][ T313] usb 4-1: config 1 has no interface number 0 [ 33.284698][ T313] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 240, changing to 4 [ 33.297183][ T313] usb 4-1: New USB device found, idVendor=1235, idProduct=800c, bcdDevice= 0.40 [ 33.306282][ T313] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.314322][ T313] usb 4-1: Product: syz [ 33.318703][ T313] usb 4-1: Manufacturer: syz [ 33.323458][ T313] usb 4-1: SerialNumber: syz [ 33.328852][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.337530][ T371] usb 1-1: not running at top speed; connect to a high speed hub [ 33.346686][ T371] usb 1-1: too many configurations: 144, using maximum allowed: 8 [ 33.355575][ T363] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 33.365856][ T363] usb 3-1: config 0 has no interfaces? [ 33.371469][ T363] usb 3-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 33.380603][ T371] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 33.388225][ T363] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.396286][ T371] usb 1-1: can't read configurations, error -61 [ 33.403642][ T363] usb 3-1: config 0 descriptor?? [ 33.532779][ T371] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.547411][ T313] usb 4-1: USB disconnect, device number 4 [ 33.626887][ T363] usb 3-1: USB disconnect, device number 4 [ 33.684106][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 33.692259][ T371] usb 1-1: not running at top speed; connect to a high speed hub [ 33.700088][ T371] usb 1-1: too many configurations: 144, using maximum allowed: 8 [ 33.708894][ T371] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 33.716775][ T371] usb 1-1: can't read configurations, error -61 [ 33.723196][ T371] usb usb1-port1: attempt power cycle [ 34.062825][ T371] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 34.084692][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.097592][ T371] usb 1-1: not running at top speed; connect to a high speed hub [ 34.105423][ T371] usb 1-1: too many configurations: 144, using maximum allowed: 8 [ 34.117731][ T371] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 34.125473][ T371] usb 1-1: can't read configurations, error -61 [ 34.252808][ T371] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 34.274603][ T371] usb 1-1: unable to get BOS descriptor or descriptor too short [ 34.283169][ T371] usb 1-1: not running at top speed; connect to a high speed hub [ 34.290920][ T371] usb 1-1: too many configurations: 144, using maximum allowed: 8 [ 34.300080][ T371] usb 1-1: unable to read config index 0 descriptor/start: -61 [ 34.307718][ T371] usb 1-1: can't read configurations, error -61 [ 34.314142][ T371] usb usb1-port1: unable to enumerate USB device [ 34.352879][ T67] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 34.392861][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 34.402764][ T363] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 34.503452][ T67] usb 4-1: not running at top speed; connect to a high speed hub [ 34.511835][ T67] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 34.522028][ T67] usb 4-1: config 1 interface 1 has no altsetting 0 [ 34.528681][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.535040][ T67] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 34.542820][ T363] usb 2-1: device descriptor read/64, error -71 [ 34.544469][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.560576][ T67] usb 4-1: Found UVC 1.00 device (046d:0825) [ 34.567580][ T67] usb 4-1: selecting invalid altsetting 0 [ 34.760533][ T67] usb 4-1: UVC non compliance - GET_DEF(PROBE) not supported. Enabling workaround. [ 34.770175][ T67] uvcvideo 4-1:1.1: Failed to query (129) UVC probe control : -71 (exp. 26). [ 34.779051][ T67] uvcvideo 4-1:1.1: Failed to initialize the device (-71). [ 34.782836][ T363] usb 2-1: device descriptor read/64, error -71 [ 34.786309][ T31] usb 3-1: device descriptor read/64, error -71 [ 34.798851][ T67] usb 4-1: selecting invalid altsetting 0 [ 34.806058][ T67] usb 4-1: USB disconnect, device number 5 [ 35.032768][ T363] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 35.052778][ T31] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 35.162784][ T363] usb 2-1: device descriptor read/64, error -71 [ 35.182791][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.402795][ T363] usb 2-1: device descriptor read/64, error -71 [ 35.422885][ T31] usb 3-1: device descriptor read/64, error -71 [ 35.512879][ T363] usb usb2-port1: attempt power cycle [ 35.532861][ T31] usb usb3-port1: attempt power cycle [ 35.572823][ T67] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 35.723938][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.734926][ T67] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 35.744020][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.752647][ T67] usb 4-1: config 0 descriptor?? [ 35.852781][ T363] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 35.872804][ T31] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 35.874291][ T363] usb 2-1: device descriptor read/8, error -71 [ 35.893774][ T31] usb 3-1: device descriptor read/8, error -71 [ 35.960281][ T67] usbhid 4-1:0.0: can't add hid device: -71 [ 35.966725][ T67] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 35.975562][ T67] usb 4-1: USB disconnect, device number 6 [ 36.024087][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.024371][ T363] usb 2-1: device descriptor read/8, error -71 [ 36.262772][ T67] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.270330][ T31] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 36.272828][ T363] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 36.293852][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.303944][ T363] usb 2-1: device descriptor read/8, error -71 [ 36.312914][ T371] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 36.423893][ T31] usb 3-1: device descriptor read/8, error -71 [ 36.434027][ T363] usb 2-1: device descriptor read/8, error -71 [ 36.440931][ T67] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 36.451920][ T67] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 36.461242][ T67] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 36.463438][ T371] usb 1-1: no configurations [ 36.473089][ T67] usb 4-1: config 0 descriptor?? [ 36.474589][ T371] usb 1-1: can't read configurations, error -22 [ 36.533203][ T31] usb usb3-port1: unable to enumerate USB device [ 36.542920][ T363] usb usb2-port1: unable to enumerate USB device [ 36.612770][ T371] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 36.763141][ T371] usb 1-1: no configurations [ 36.767757][ T371] usb 1-1: can't read configurations, error -22 [ 36.774228][ T371] usb usb1-port1: attempt power cycle [ 36.886743][ T450] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 36.895344][ T450] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 37.069147][ T36] kauditd_printk_skb: 47 callbacks suppressed [ 37.069164][ T36] audit: type=1400 audit(1793844774.160:188): avc: denied { create } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 37.094163][ T67] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 37.099371][ T36] audit: type=1400 audit(1793844774.170:189): avc: denied { sys_admin } for pid=453 comm="syz.1.45" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 37.115265][ T67] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input7 [ 37.122558][ T371] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 37.143682][ T36] audit: type=1400 audit(1793844774.200:190): avc: denied { remount } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 37.170957][ T36] audit: type=1400 audit(1793844774.230:191): avc: denied { create } for pid=453 comm="syz.1.45" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 37.173187][ C1] ------------[ cut here ]------------ [ 37.195764][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 37.204435][ C1] index 2303 is out of range for type 'const int[34]' [ 37.211273][ C1] CPU: 1 UID: 0 PID: 320 Comm: udevd Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.211322][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.211348][ C1] Call Trace: [ 37.211357][ C1] [ 37.211367][ C1] __dump_stack+0x21/0x30 [ 37.211396][ C1] dump_stack_lvl+0x140/0x1c0 [ 37.211419][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.211444][ C1] ? kmem_cache_free+0x49e/0x4f0 [ 37.211483][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.211517][ C1] ? do_syscall_64+0x57/0xf0 [ 37.211546][ C1] dump_stack+0x19/0x20 [ 37.211568][ C1] ubsan_epilogue+0xe/0x40 [ 37.211596][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 37.211628][ C1] aiptek_irq+0x208d/0x2a00 [ 37.211659][ C1] ? _raw_spin_unlock+0x45/0x60 [ 37.211684][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 37.211722][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 37.211758][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 37.211790][ C1] dummy_timer+0xa3f/0x4900 [ 37.211831][ C1] ? __kasan_check_write+0x18/0x20 [ 37.211871][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.211905][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 37.211931][ C1] ? timerqueue_del+0xd7/0x130 [ 37.211969][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 37.212000][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.212034][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 37.212067][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 37.212097][ C1] ? read_tsc+0xd/0x20 [ 37.212119][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 37.212159][ C1] hrtimer_run_softirq+0x159/0x560 [ 37.212191][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.212216][ C1] handle_softirqs+0x1b0/0x5b0 [ 37.212248][ C1] __irq_exit_rcu+0x47/0xb0 [ 37.212276][ C1] irq_exit_rcu+0xd/0x30 [ 37.212312][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 37.212349][ C1] [ 37.212357][ C1] [ 37.212366][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 37.212402][ C1] RIP: 0010:update_stack_state+0x37f/0x4d0 [ 37.212441][ C1] Code: c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 74 08 4c 89 f7 e8 4f 7d 9e 00 48 8b 45 98 49 89 06 49 89 c6 48 8b 45 a0 <42> 80 3c 38 00 48 8b 45 d0 4c 8d 60 58 74 08 4c 89 e7 e8 2a 7d 9e [ 37.212462][ C1] RSP: 0018:ffffc9000b8478e8 EFLAGS: 00000246 [ 37.212494][ C1] RAX: 1ffff92001708f4c RBX: ffffc9000b847a10 RCX: ffffc9000b847f01 [ 37.212514][ C1] RDX: ffffc9000b847f10 RSI: 1ffff92001708f42 RDI: 0000000000000000 [ 37.212533][ C1] RBP: ffffc9000b847998 R08: ffffc9000b847ad0 R09: ffffc9000b847ac8 [ 37.212553][ C1] R10: 0000000000000007 R11: ffffffff81778d20 R12: ffffc9000b848000 [ 37.212571][ C1] R13: 1ffff92001708f49 R14: ffffc9000b847f10 R15: dffffc0000000000 [ 37.212592][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.212624][ C1] unwind_next_frame+0x39e/0x6b0 [ 37.212661][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.212685][ C1] arch_stack_walk+0x138/0x170 [ 37.212712][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.212745][ C1] stack_trace_save+0xaa/0x100 [ 37.212783][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 37.212820][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 37.212854][ C1] ? __fput+0x71e/0xa30 [ 37.212882][ C1] ? __fput_sync+0x4a/0x70 [ 37.212910][ C1] ? __se_sys_close+0x172/0x1f0 [ 37.212942][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.212974][ C1] ? x64_sys_call+0x2560/0x2ee0 [ 37.213001][ C1] ? do_syscall_64+0x57/0xf0 [ 37.213026][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.213061][ C1] kasan_save_stack+0x3e/0x60 [ 37.213084][ C1] ? kasan_save_stack+0x3e/0x60 [ 37.213107][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 37.213140][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 37.213175][ C1] ? kmem_cache_free+0x49e/0x4f0 [ 37.213212][ C1] ? __fput+0x71e/0xa30 [ 37.213239][ C1] ? __fput_sync+0x4a/0x70 [ 37.213266][ C1] ? __se_sys_close+0x172/0x1f0 [ 37.213297][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.213348][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 37.213382][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 37.213416][ C1] kmem_cache_free+0x49e/0x4f0 [ 37.213454][ C1] ? percpu_counter_add_batch+0x105/0x1a0 [ 37.213493][ C1] ? __fput+0x71e/0xa30 [ 37.213523][ C1] __fput+0x71e/0xa30 [ 37.213553][ C1] __fput_sync+0x4a/0x70 [ 37.213582][ C1] __se_sys_close+0x172/0x1f0 [ 37.213615][ C1] __x64_sys_close+0x3c/0x60 [ 37.213646][ C1] x64_sys_call+0x2560/0x2ee0 [ 37.213672][ C1] do_syscall_64+0x57/0xf0 [ 37.213696][ C1] ? clear_bhb_loop+0x50/0xa0 [ 37.213731][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.213764][ C1] RIP: 0033:0x7fb32a8a7407 [ 37.213795][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 37.213817][ C1] RSP: 002b:00007ffe75a13e80 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 37.213842][ C1] RAX: ffffffffffffffda RBX: 00007fb32afe8880 RCX: 00007fb32a8a7407 [ 37.213862][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 37.213877][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 37.213892][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b055504500 [ 37.213910][ C1] R13: 0000000000000019 R14: 00007ffe75a14360 R15: 00007ffe75a15bf0 [ 37.213931][ C1] [ 37.213940][ C1] ---[ end trace ]--- [ 37.246583][ T371] usb 1-1: no configurations [ 37.250292][ C1] ------------[ cut here ]------------ [ 37.250310][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 37.258690][ T371] usb 1-1: can't read configurations, error -22 [ 37.260461][ C1] index 2304 is out of range for type 'const int[34]' [ 37.260480][ C1] CPU: 1 UID: 0 PID: 320 Comm: udevd Not tainted syzkaller #0 6d6f333215c564de92c741644a4b57c848379815 [ 37.260579][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026 [ 37.260651][ C1] Call Trace: [ 37.260679][ C1] [ 37.260706][ C1] __dump_stack+0x21/0x30 [ 37.260769][ C1] dump_stack_lvl+0x140/0x1c0 [ 37.260809][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 37.260867][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 37.260958][ C1] dump_stack+0x19/0x20 [ 37.261009][ C1] ubsan_epilogue+0xe/0x40 [ 37.261069][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 37.261148][ C1] aiptek_irq+0x1f3c/0x2a00 [ 37.261218][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 37.261318][ C1] __usb_hcd_giveback_urb+0x371/0x530 [ 37.261402][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 37.261481][ C1] dummy_timer+0xa3f/0x4900 [ 37.261576][ C1] ? __kasan_check_write+0x18/0x20 [ 37.261674][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.261748][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 37.261820][ C1] ? timerqueue_del+0xd7/0x130 [ 37.261898][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 37.261977][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 37.262077][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 37.262145][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 37.262204][ C1] ? read_tsc+0xd/0x20 [ 37.262251][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 37.262355][ C1] hrtimer_run_softirq+0x159/0x560 [ 37.262423][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 37.262473][ C1] handle_softirqs+0x1b0/0x5b0 [ 37.262541][ C1] __irq_exit_rcu+0x47/0xb0 [ 37.262605][ C1] irq_exit_rcu+0xd/0x30 [ 37.262655][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 37.262719][ C1] [ 37.262737][ C1] [ 37.262756][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 37.262835][ C1] RIP: 0010:update_stack_state+0x37f/0x4d0 [ 37.262919][ C1] Code: c1 e8 03 49 bf 00 00 00 00 00 fc ff df 42 80 3c 38 00 74 08 4c 89 f7 e8 4f 7d 9e 00 48 8b 45 98 49 89 06 49 89 c6 48 8b 45 a0 <42> 80 3c 38 00 48 8b 45 d0 4c 8d 60 58 74 08 4c 89 e7 e8 2a 7d 9e [ 37.262965][ C1] RSP: 0018:ffffc9000b8478e8 EFLAGS: 00000246 [ 37.263012][ C1] RAX: 1ffff92001708f4c RBX: ffffc9000b847a10 RCX: ffffc9000b847f01 [ 37.263051][ C1] RDX: ffffc9000b847f10 RSI: 1ffff92001708f42 RDI: 0000000000000000 [ 37.263089][ C1] RBP: ffffc9000b847998 R08: ffffc9000b847ad0 R09: ffffc9000b847ac8 [ 37.263127][ C1] R10: 0000000000000007 R11: ffffffff81778d20 R12: ffffc9000b848000 [ 37.263164][ C1] R13: 1ffff92001708f49 R14: ffffc9000b847f10 R15: dffffc0000000000 [ 37.263211][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.263277][ C1] unwind_next_frame+0x39e/0x6b0 [ 37.263368][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 37.263443][ C1] arch_stack_walk+0x138/0x170 [ 37.263507][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.263575][ C1] stack_trace_save+0xaa/0x100 [ 37.263659][ C1] ? __cfi_stack_trace_save+0x10/0x10 [ 37.263724][ C1] ? kasan_save_alloc_info+0x3a/0x50 [ 37.263797][ C1] ? __fput+0x71e/0xa30 [ 37.263849][ C1] ? __fput_sync+0x4a/0x70 [ 37.263908][ C1] ? __se_sys_close+0x172/0x1f0 [ 37.263974][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.264042][ C1] ? x64_sys_call+0x2560/0x2ee0 [ 37.264099][ C1] ? do_syscall_64+0x57/0xf0 [ 37.264154][ C1] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.264219][ C1] kasan_save_stack+0x3e/0x60 [ 37.264267][ C1] ? kasan_save_stack+0x3e/0x60 [ 37.264323][ C1] ? __kasan_record_aux_stack+0xb2/0xd0 [ 37.264392][ C1] ? kasan_record_aux_stack_noalloc+0xf/0x20 [ 37.264461][ C1] ? kmem_cache_free+0x49e/0x4f0 [ 37.264537][ C1] ? __fput+0x71e/0xa30 [ 37.264595][ C1] ? __fput_sync+0x4a/0x70 [ 37.264658][ C1] ? __se_sys_close+0x172/0x1f0 [ 37.264726][ C1] ? __x64_sys_close+0x3c/0x60 [ 37.264815][ C1] __kasan_record_aux_stack+0xb2/0xd0 [ 37.264881][ C1] kasan_record_aux_stack_noalloc+0xf/0x20 [ 37.264949][ C1] kmem_cache_free+0x49e/0x4f0 [ 37.265032][ C1] ? percpu_counter_add_batch+0x105/0x1a0 [ 37.265114][ C1] ? __fput+0x71e/0xa30 [ 37.265173][ C1] __fput+0x71e/0xa30 [ 37.265289][ C1] __fput_sync+0x4a/0x70 [ 37.265329][ C1] __se_sys_close+0x172/0x1f0 [ 37.265409][ C1] __x64_sys_close+0x3c/0x60 [ 37.265499][ C1] x64_sys_call+0x2560/0x2ee0 [ 37.265568][ C1] do_syscall_64+0x57/0xf0 [ 37.265642][ C1] ? clear_bhb_loop+0x50/0xa0 [ 37.265735][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 37.265811][ C1] RIP: 0033:0x7fb32a8a7407 [ 37.265857][ C1] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 37.265907][ C1] RSP: 002b:00007ffe75a13e80 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 37.265968][ C1] RAX: ffffffffffffffda RBX: 00007fb32afe8880 RCX: 00007fb32a8a7407 [ 37.266010][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 37.266043][ C1] RBP: 0000000000000008 R08: 0000000000000000 R09: 0000000000000000 [ 37.266083][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 000055b055504500 [ 37.266123][ C1] R13: 0000000000000019 R14: 00007ffe75a14360 R15: 00007ffe75a15bf0 [ 37.266167][ C1] [ 37.266189][ C1] ---[ end trace ]--- [ 37.482952][ T371] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 38.105756][ T67] usb 4-1: USB disconnect, device number 7 [ 38.110265][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 38.133960][ T371] usb 1-1: no configurations [ 38.316835][ T371] usb 1-1: can't read configurations, error -22 [ 38.323182][ T36] audit: type=1400 audit(1793844775.410:192): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 38.342809][ T371] usb usb1-port1: unable to enumerate USB device [ 38.350570][ T36] audit: type=1400 audit(1793844775.420:193): avc: denied { unmount } for pid=295 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1