last executing test programs: 8.288114626s ago: executing program 3 (id=23): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r1 = memfd_create(&(0x7f0000000080)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea\x7f\x8cZ7`_4t\xcda\x9b\x11\x11\x0e\xa1\xcf\x00'/51, 0x2) fcntl$addseals(r1, 0x409, 0x7) ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x1000000}) syz_usb_connect(0x3, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d81"], 0x0) 7.134820062s ago: executing program 3 (id=26): r0 = syz_usb_connect$cdc_ecm(0x0, 0x56, &(0x7f0000000380)=ANY=[@ANYBLOB="12010002020000402505a1a4400000000101090244000101000000090400001202060000052406000005240004000d240f0100000000000000000009058103ff03050663090582024000000000090503020002"], 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='ns\x00') exit(0xf) getdents64(r1, 0x0, 0x0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53048fc) write$binfmt_script(r1, &(0x7f00000002c0)={'#! ', '', [{0x20, '\xfe\xff\xff\xff%\xb9\xbe\x12\xd0_|\x80Z\xb4\xf01H\xdf\x90\xac~Zqrt\xe6\x00\x00\x00\x00\xc9u\x8c\xb36\xb4u\xec\x17-\x16\xd6\x13\xef\x15\xc0I2+@\x90L!\x8a>\\\x8d\xc6\xcb\xe5\xf8%\x13\xbc\x92\x9b\xda\xe9k\xa9&\xd5\xfdd,\xee\xb6=\xf9\xb4+\xce\xfd\x8c\xda\"\x1d\xd6s\xe0\xb7\x89\xc2\x8a\x9f\xf3\x104'}], 0xa, "315b251aebb8ad9f678c74407e068667e959409507abc60800000017e3"}, 0x84) cachestat(r2, &(0x7f0000000100)={0x4, 0x5296}, &(0x7f0000000180), 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000b00), 0x0, 0x0) ioctl$TIOCSIG(r3, 0x40045436, 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./debug\x00', &(0x7f0000000040)='debugfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./debug/lru_gen\x00', 0x2, 0x0) r5 = socket$inet6(0xa, 0x1, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r6, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) close_range(r5, 0xffffffffffffffff, 0x0) socket(0xf, 0x0, 0x0) write(r4, &(0x7f0000000200)='+ 1 0 0', 0x7) 6.719543623s ago: executing program 2 (id=32): add_key$fscrypt_v1(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r0 = socket$inet_tcp(0x2, 0x1, 0x0) remap_file_pages(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x100000000, 0x20000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f0000000000)=""/45, &(0x7f0000000040)=0x2d) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_RECV_OWN_MSGS(r1, 0x65, 0x4, &(0x7f0000000040)=0x1, 0x4) sendmsg$can_raw(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@can={{0x3}, 0x3, 0x2, 0x0, 0x0, "ee0d702fac00008a"}, 0x10}}, 0xd209f6d83486bb56) recvmmsg(r1, &(0x7f0000000a00)=[{{0x0, 0x0, 0x0}, 0x2fa}, {{0x0, 0x0, 0x0}, 0xac}], 0x2, 0x42, 0x0) mount$overlay(0x0, &(0x7f0000000180)='./cgroup\x00', &(0x7f0000000440), 0x8, &(0x7f0000000000)={[{@upperdir={'upperdir', 0x3d, './cgroup'}}, {@metacopy_on}, {@nfs_export_on}]}) ioctl$AUTOFS_IOC_SETTIMEOUT(r0, 0x80049367, &(0x7f0000000080)=0x520) r3 = syz_usb_connect$uac3(0x5, 0xa0, &(0x7f0000002440)=ANY=[@ANYBLOB="12011003000000403512100040000102030109028e000301002040080b0201012130c60904000000010130000a2401042a00ff0f0000132403050001020602028000000700100002000f24090202000000", @ANYRES16], &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_usb_connect(0x0, 0x36, &(0x7f0000000540)=ANY=[@ANYBLOB="120141014813442024040075ee69010203010902240001000010000904b8070259d1ca000905060200020d0006090582020002"], 0x0) syz_usb_control_io$uac1(r4, 0x0, 0x0) syz_usb_control_io(r4, 0x0, &(0x7f0000000480)={0x84, &(0x7f0000000340)=ANY=[@ANYBLOB="402004000000a0"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$sierra_net(r4, 0x0, &(0x7f0000000b40)={0x1c, &(0x7f0000000080)={0x0, 0x17, 0x4, "b0f4ecab"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r4, 0x0, &(0x7f0000000280)={0x1c, &(0x7f0000000140)=ANY=[], 0x0, 0x0}) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) 5.464062862s ago: executing program 2 (id=38): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7f, 0x8, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0xb, 0x0, 0x10000000000d}, {0xf, 0xa6f2, 0x6, 0xf, 0x9, 0x4, 0x0, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x79, 0xff, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff86ffffffffffffff00000000"], 0xffe) 5.331609415s ago: executing program 2 (id=39): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) setresuid(0x0, 0xee00, 0x0) (async) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @multicast1}, 0xffffffff}, 0x20) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x7f, @ipv4={'\x00', '\xff\xff', @remote}, 0xffffffff}, 0x1c) (async) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f00000012c0)=[{&(0x7f0000000080)=""/152, 0x98}], 0x1, &(0x7f00000015c0)=[{&(0x7f0000001340)=""/189, 0xbd}], 0x1, 0x0) 5.301464746s ago: executing program 2 (id=40): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1ed43001000000000109022400010000000009040000010300000009210000000122070009058103"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@local, @main=@item_012={0x0, 0x0, 0xa}, @global=@item_012={0x2, 0x1, 0xa, "19cc"}]}}, 0x0}, 0x0) 4.079974614s ago: executing program 3 (id=41): timer_create(0x2, &(0x7f0000000380)={0x0, 0xd, 0x1}, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000400000000000000000000000000000000000000000000006401010100000000000000000000000000000000000000000200000032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xb8}}, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x8a, 0x7, 0x3, 0xe0, 0x1b}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf3}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x24000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) 3.749010212s ago: executing program 2 (id=42): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='devices.list\x00', 0x275a, 0x0) fsmount(r0, 0x0, 0x20) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000005640)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x8, 0x16c0, 0x5e1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x5, 0x40, 0xc, "", [{{0x9, 0x4, 0x0, 0x81, 0x1, 0x3, 0x1, 0x3, 0x0, {0x9, 0x21, 0xff, 0xe, 0x1, {0x22, 0x9b2}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x6e, 0x6, 0x40}}}}}]}}]}}, &(0x7f0000005980)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) timer_create(0x5, &(0x7f0000000000)={0x0, 0x38}, &(0x7f0000000040)=0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newtaction={0x44, 0x32, 0x1, 0x70bd29, 0x25dfdbfa, {}, [{0x30, 0x1, [@m_ipt={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0x3fad7e17a27f2d2d, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8080}, 0x9080) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) pselect6(0x40, &(0x7f0000000140)={0x8, 0xd40, 0x8, 0x5, 0x3, 0x9, 0xffffffffffff0e19, 0x100}, &(0x7f0000000180)={0x2, 0x5, 0x1, 0x5, 0xc, 0xfffffffffffffffc, 0x5, 0x7}, &(0x7f00000001c0)={0x9, 0x9, 0x1b0, 0x1, 0x1, 0x3, 0x8c5, 0x894}, &(0x7f0000000200), &(0x7f0000000280)={&(0x7f0000000240)={[0x7fffffffffffffff]}, 0x8}) timer_settime(r1, 0x1, &(0x7f00000000c0)={{r3, r4+10000000}, {0x0, 0x989680}}, &(0x7f0000000100)) 3.194845625s ago: executing program 1 (id=43): syz_usb_connect(0x3, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010002e80c1e10e80401a148040102031109021200011c0780fe0904"], 0xfffffffffffffffe) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x181602, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000240)="67400f07c40249af4b8bb9800000c00f3235010000000f300f20a366450f769e00000100440f20c03588001d00440f22c0460f01c9c4827d24c366bafc0cf0ff07ef87f345a57a43e16806a4", 0x4c}], 0x1, 0x7c, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000480)={{0x9, 0xfffffffb}, 0x100, './file0\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect$uac3(0x5, 0xe1, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYRESOCT=r0, @ANYRES16=r1, @ANYRESDEC=r2, @ANYBLOB="b7a1012262510462602d2f1183531a531f011e561fe5cfbad8bc346e9e5fd9e85f96043b474102abc269c50d03af0fe95d56059a6814d6dcee87186374ef9fbd5108298125e96df27975c160567119fa5b0dd7a91492"], &(0x7f0000000340)={0xa, &(0x7f0000000200)={0xa, 0x6, 0x110, 0x80, 0x5, 0x4, 0x8, 0x2}, 0x51, &(0x7f0000000100)={0x5, 0xf, 0x51, 0x6, [@ssp_cap={0x10, 0x10, 0xa, 0xb, 0x1, 0x2, 0xf000, 0x1, [0x0]}, @ss_container_id={0x14, 0x10, 0x4, 0x7, "b5507a21b6c83b93560dc9bfb5afdce3"}, @ext_cap={0x7, 0x10, 0x2, 0x8, 0x8, 0x8, 0x1ff}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xc, 0x0, 0x1, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x20, "83a4a7a4b5559e829cbae9e6177b197f"}, @ptm_cap={0x3}]}, 0x1, [{0x4, &(0x7f00000002c0)=@lang_id={0x4, 0x3, 0xf4ff}}]}) 2.836008583s ago: executing program 3 (id=44): ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_connect$uac1(0x3, 0x81, &(0x7f0000000040)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6f, 0x3, 0x1, 0x3, 0x80, 0xa5, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xb64f, 0xa}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x1, 0xe0, 0x2}, @as_header={0x7, 0x24, 0x1, 0x2, 0x7, 0x1}]}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x8, 0x8, 0x0, {0x7, 0x25, 0x1, 0xc, 0x5, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x4, 0x6, 0x31, {0x7, 0x25, 0x1, 0x0, 0xc, 0x2}}}}}}}}]}}, &(0x7f0000000300)={0xa, &(0x7f0000000100)={0xa, 0x6, 0xb3c45778e3f778c9, 0x4, 0x2, 0xad, 0x8, 0xf9}, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="05080f00010a1008536fe9816fc5424624de4e7e20542f9e9d8d3cd2dc594033e58705d5b7353661bf7300c32c65c9f11872e54e0272784eab561655509acff63d36a0df7d616cec34d3859679c2dc3a244416937bf517a25a71cfa6293ed806da897a6db414a83924aaddb951d8939be5b62e8f373c7473c003f118e5b930aa4af19ca79ca123cfcb4f4d8025c2d8037bb3fa01c7b08c3351a8db59633fd8ab40ae85deec6fd803b8a9e31c6315b7a3c468cbe2f974a7"], 0x1, [{0x4, &(0x7f0000000580)=@lang_id={0x4, 0x3, 0x81a}}]}) syz_usb_control_io$hid(r0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x41e000, 0x0) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, 0x0, 0x0, &(0x7f0000000540)={0x0, 0x22, 0x50, {[@main=@item_012={0x1, 0x0, 0xa, '3'}]}}, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f00000002c0), 0x100000, 0x4001) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r1, 0x8040942d, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/netstat\x00') close_range(r2, 0xffffffffffffffff, 0x0) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000040)) timer_create(0xfffffffffffffffd, 0x0, &(0x7f0000000440)=0x0) timer_settime(r3, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x6, 0x4, 0x7, 0x50000}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f00000000c0)=@x86={0x6, 0xd, 0x80, 0x0, 0x7, 0x7, 0x2, 0x8, 0xfc, 0x40, 0x0, 0x6, 0x0, 0xed, 0x1, 0x92, 0x81, 0x18, 0x1, '\x00', 0x6, 0x1a00000000000}) ioctl$KVM_GET_VCPU_EVENTS(r6, 0x8040ae9f, &(0x7f0000000000)) syz_clone(0xb44040, 0x0, 0x0, 0x0, 0x0, 0x0) timer_settime(0x0, 0x42a28f29afc7695a, &(0x7f000006b000)={{0x77359400}, {0x0, 0x3938700}}, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0xc) ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000400)={'\x00', 0x8, 0x9, 0x9, 0x7, 0x3, r7}) 2.662814448s ago: executing program 0 (id=45): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040)=0x7f, 0x4) listen(r1, 0xfd3) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000000)=0x7fff, 0x4) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB="1c002026", @ANYRES16=r2, @ANYBLOB="410027bd7000fcdbdf25070000000800010001000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) 2.638519988s ago: executing program 0 (id=46): fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) flock(r0, 0x2) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x1c6) r1 = open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) flock(r1, 0x2) r2 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) flock(r2, 0x1) r3 = open(&(0x7f0000000080)='.\x00', 0x80800, 0x112) flock(r3, 0x3) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00') fsopen(&(0x7f0000000000)='sockfs\x00', 0x0) (async) open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) (async) flock(r0, 0x2) (async) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x100, 0x1c6) (async) open(&(0x7f0000000180)='.\x00', 0x0, 0xd0) (async) flock(r1, 0x2) (async) open(&(0x7f0000000180)='.\x00', 0x0, 0x0) (async) flock(r2, 0x1) (async) open(&(0x7f0000000080)='.\x00', 0x80800, 0x112) (async) flock(r3, 0x3) (async) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=@known='user.incfs.size\x00') (async) 2.524012031s ago: executing program 2 (id=47): r0 = syz_usb_connect$uac2(0x2, 0xffffffffffffffb9, &(0x7f0000004080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3f9, 0x4, 0x9, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xa, 0x3, {0x8, 0x25, 0x1, 0x80, 0x3c, 0xc, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x9}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x17, 0x5, 0x2}) syz_usb_control_io$uac2(r0, &(0x7f0000004780)={0x14, 0x0, &(0x7f00000046c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f00000002c0)=@chain) syz_usb_control_io(r0, &(0x7f0000005500)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$uac2(0x2, 0xffffffffffffffb9, &(0x7f0000004080)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x8, 0x499, 0x1010, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x69, 0x3, 0x1, 0x7, 0x0, 0x10, {0x8, 0xb, 0x0, 0x0, 0x1, 0x7, 0x20, 0x6}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x3f9, 0x4, 0x9, 0x32}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x20, 0x1, 0xa, 0x3, {0x8, 0x25, 0x1, 0x80, 0x3c, 0xc, 0xfff7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x0, 0x5, 0x0, {0x8, 0x25, 0x1, 0x1, 0x30, 0x9, 0x9}}}}}}}}]}}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0}) (async) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) (async) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) (async) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000100)={0x17, 0x5, 0x2}) (async) syz_usb_control_io$uac2(r0, &(0x7f0000004780)={0x14, 0x0, &(0x7f00000046c0)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) (async) add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) (async) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, 0x0, &(0x7f00000002c0)=@chain) (async) syz_usb_control_io(r0, &(0x7f0000005500)={0x2c, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x0, 0x3, 0x80a}}, 0x0, 0x0, 0x0}, 0x0) (async) 2.523827551s ago: executing program 0 (id=48): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7f, 0x8, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0xb, 0x0, 0x10000000000d}, {0xf, 0xa6f2, 0x6, 0xf, 0x9, 0x4, 0x0, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x79, 0xff, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff87ffffffffffffff00000000"], 0xffe) 2.370533824s ago: executing program 0 (id=49): r0 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) write(r0, &(0x7f0000000040)="a11ea0b9e755b82bdd5b94dfa2b0ef0d", 0x10) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) write$cgroup_freezer_state(r0, &(0x7f0000000080)='FROZEN\x00', 0x7) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2000, 0x82) statx(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000280)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) fchownat(r2, &(0x7f0000000100)='./file0\x00', r3, r4, 0x100) unlinkat(r1, &(0x7f00000022c0)='./file0\x00', 0x0) r5 = socket$unix(0x1, 0x4, 0x0) recvmsg$unix(r5, &(0x7f0000002500)={&(0x7f0000002300), 0x6e, &(0x7f0000002480)=[{&(0x7f0000002380)=""/227, 0xe3}], 0x1, &(0x7f00000024c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}, 0x2) newfstatat(0xffffffffffffff9c, &(0x7f0000002540)='./file0\x00', &(0x7f0000002580), 0x400) ioctl$BTRFS_IOC_SET_FEATURES(r2, 0x40309439, &(0x7f0000002600)={0x1, 0x1, 0x11}) write$P9_RVERSION(r6, &(0x7f0000002640)={0x15, 0x65, 0xffff, 0x7, 0x8, '9P2000.u'}, 0x15) fsetxattr$security_evm(r5, &(0x7f0000002680), &(0x7f00000026c0)=@md5={0x1, "744766f81c2039946d45d22643dedeb3"}, 0x11, 0x0) ioctl$sock_inet_SIOCDARP(r6, 0x8953, &(0x7f0000002700)={{0x2, 0x4e20, @broadcast}, {0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 'veth1_to_team\x00'}) r7 = fsmount(r6, 0x0, 0x8) mprotect(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x3000007) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r8, 0x400448c9, &(0x7f0000002780)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x9}) cachestat(r7, &(0x7f00000027c0)={0xd, 0x5}, &(0x7f0000002800), 0x0) getsockopt$inet_buf(r7, 0x0, 0x17, &(0x7f0000002840)=""/237, &(0x7f0000002940)=0xed) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000002a00)={'gre0\x00', &(0x7f0000002980)={'syztnl0\x00', 0x0, 0x7, 0x8000, 0x4, 0x1ff, {{0x17, 0x4, 0x1, 0x18, 0x5c, 0x67, 0x0, 0x6, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x36}, @empty, {[@cipso={0x86, 0x2a, 0x3, [{0x0, 0x2}, {0x0, 0xe, "cfad170f1ee263f057602c09"}, {0x5, 0x4, "8076"}, {0x6, 0x4, "9bb4"}, {0x7, 0x9, "3d17c6b58e6aec"}, {0x2, 0x3, "f6"}]}, @timestamp={0x44, 0x1c, 0x71, 0x0, 0x9, [0x2a, 0x7, 0x7fff, 0xfff, 0x400, 0xbcbc]}, @end]}}}}}) ioctl$sock_inet6_SIOCDELRT(r6, 0x890c, &(0x7f0000002a40)={@local, @private1={0xfc, 0x1, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x1000, 0x8, 0x9f08, 0x100, 0x2, 0xc0400000, r9}) openat$ptp0(0xffffffffffffff9c, &(0x7f0000002ac0), 0x327040, 0x0) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept(r10, &(0x7f0000002b00)=@l2tp6={0xa, 0x0, 0x0, @loopback}, &(0x7f0000002b80)=0x80) ioctl$SIOCGETVIFCNT(r7, 0x89e0, &(0x7f0000002bc0)) setxattr$incfs_id(&(0x7f0000002c00)='./file0\x00', &(0x7f0000002c40), &(0x7f0000002c80)={'0000000000000000000000000000000', 0x32}, 0x20, 0x3) setsockopt$IP_VS_SO_SET_EDIT(r6, 0x0, 0x483, &(0x7f0000002cc0)={0x6, @rand_addr=0x64010100, 0x4e22, 0x2, 'lblcr\x00', 0x6, 0x231201ae, 0x4d}, 0x2c) 2.341414455s ago: executing program 0 (id=50): r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) r1 = syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1, 0x7, 0x5) r2 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = dup(r4) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd200010000000140bb80060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) openat$uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0) (async) write$UHID_CREATE2(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0b00000073797a31000000dfff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a30000037b35f0a000089b4c45a10000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073797a3100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001"], 0x119) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x8031, r0, 0x1000) (async) syz_open_dev$hidraw(&(0x7f00000004c0), 0x0, 0xbb42) (async) preadv(r1, &(0x7f0000000100)=[{&(0x7f0000000000)=""/43, 0x2b}], 0x1, 0x7, 0x5) (async) socket$inet6(0xa, 0x3, 0x8000000003c) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x3, 0xc, @dev={0xfe, 0x80, '\x00', 0xd}, 0x9}, 0x1c) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40e41, 0x0) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller1\x00', 0xc201}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) dup(r4) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) (async) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd200010000000140bb80060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) 2.15347063s ago: executing program 1 (id=51): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fd, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000100)="48b8b1000000000000000f23d80f21f835000000300f23f8f3410f01bd020000004b0fc799d130000048b8cf72e0be8d9dbb700f23c80f21f8350000a0000f23f82ef2ab400f1ab5f8889ff266470f38805b00c744240088cb0000c744240272800000c7442406000000000f011c2445807d070066b80e000f00d0", 0x7b}], 0x1, 0x1, 0x0, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2.15307334s ago: executing program 0 (id=52): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000240)={0x58, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}]}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x80810) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_disconnect(r0) r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="120110010000004058040350"], 0x0) syz_usb_connect$uac2(0x5, 0xa8, &(0x7f00000002c0)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x20, 0x41e, 0x4068, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x96, 0x3, 0x1, 0xa3, 0x80, 0x2, {0x8, 0xb, 0x0, 0x0, 0x1, 0x2, 0x20, 0x2}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x20, 0x0, {{0x9, 0x24, 0x1, 0x1, 0x5, 0x9, 0x86}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {[@format_type_ii_discrete={0x9, 0x24, 0x2, 0x2, 0x80, 0x9, 0xfa}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x5, 0x100, 0x6, 0x1}, @as_header={0x10, 0x24, 0x1, 0x1, 0xae, 0x0, 0x1002, 0x1, 0x3, 0xc}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0x0, 0x4, 0x81, 0x0, "", '(['}]}, {{0x9, 0x5, 0x1, 0x9, 0x3ff, 0xe, 0x0, 0x0, {0x8, 0x25, 0x1, 0x1, 0xf, 0xf, 0x1}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x20, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0xc, 0xff, 0x1, {0x8, 0x25, 0x1, 0x81, 0xc, 0x1, 0x7}}}}}}}}]}}, &(0x7f0000000780)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x201, 0x2, 0x60, 0x58, 0x20}, 0x5, &(0x7f0000000400)={0x5, 0xf, 0x5}, 0x1, [{0x0, 0x0}]}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x81, 0xffffffffffffff6d, &(0x7f0000000100)="019a18370cfb661ba08c228ce6ca19b6a99a071ca34c72c891f8a260fa00000080977dae8d64a30e92cd51117c4a71e26518e804c00058e6c7c0c363027251668bb650d90000000000") 2.077148282s ago: executing program 1 (id=53): timer_create(0x2, &(0x7f0000000380)={0x0, 0xd, 0x1}, &(0x7f00000003c0)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x77359400}, {0x0, 0x9}}, 0x0) timer_gettime(0x0, &(0x7f0000000240)) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000180)=ANY=[@ANYBLOB="b8000000190001000400000000000000000000000000000000000000000000006401010100000000000000000000000000000000000000000200000032000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0xb8}}, 0x0) ioctl$TCSETAW(r0, 0x5407, &(0x7f0000000100)={0x8a, 0x7, 0x3, 0xe0, 0x1b}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x1, 0x0, 0x0, 0x0, 0x20, 0x172f, 0x501, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x20, "", [{{0x9, 0x4, 0x0, 0x0, 0x3, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x6}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x1, 0xf3}}}}}]}}]}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) syz_usb_connect$uac3(0x3, 0xa0, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000408205740040000102030109028e0003017f3311080b0003010130010904000000010130000a03000000007e0700001324030200010405060500000004000a000d000d24070606"], 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x5, 0x0, 0x0, {0x0, 0x2710}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x24000004) r2 = openat(0xffffffffffffff9c, &(0x7f0000000900)='./sys/module/kvm/parameters/nx_huge_pages_recovery_ratio\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa07, 0x0) write(r2, &(0x7f0000000a00)='1', 0x1) 1.682650041s ago: executing program 3 (id=54): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$HIDIOCGFIELDINFO(0xffffffffffffffff, 0xc038480a, &(0x7f0000000f80)={0x1, 0x3, 0x4, 0x8, 0x7f, 0xf15b, 0x7fffffff, 0x6e9168d4, 0xb1, 0x7, 0x9, 0x10ee86af, 0x3, 0x7}) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d40)=ANY=[@ANYBLOB="800100001000010000000000000000007f0000010000000000000000000000007f00000100000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x180}}, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000000080)=0x2, 0x4) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) (async) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@newpolicy={0xfc, 0x13, 0x1, 0x0, 0x0, {{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x14, [{{@in=@loopback, 0x1234, 0x32}, 0x2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0xffffffff}]}]}, 0xfc}}, 0x0) (async, rerun: 32) r3 = socket$inet_udp(0x2, 0x2, 0x11) (rerun: 32) sendto$inet(r3, &(0x7f0000000200)='hello', 0x5, 0x0, &(0x7f0000000300)={0x2, 0x1234, @loopback}, 0x10) (async) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7fd, 0x2}, 0xe) (async) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(r5, 0x0, 0x83, &(0x7f0000000c80)={'nat\x00', 0x0, 0x3, 0x6e, [0x2, 0x6, 0x2, 0xf188, 0x6, 0x8], 0x5, &(0x7f0000000b80)=[{}, {}, {}, {}, {}], &(0x7f0000000c00)=""/110}, &(0x7f0000000d00)=0x78) setsockopt$inet_tcp_int(r5, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) (async) ioctl$XFS_IOC_ATTRMULTI_BY_HANDLE(r5, 0x4048587b, &(0x7f0000000b00)={{r5, &(0x7f0000000040)='9p\x00', 0x200, &(0x7f00000000c0)={@_ha_fsid={[0x5, 0x81]}, {0x8, 0x28b6, 0x9, 0x6}}, 0x800, &(0x7f0000000140)={@_ha_fsid}, &(0x7f0000000180)=0x2}, 0x7, &(0x7f0000000980)=[{0x3, 0xfffff800, &(0x7f00000001c0)='127.0.0.1\x00', &(0x7f0000000200)="63e8a0b64abb6b2be6f32f36d24db2dd205e864aa37841b95d2865328e9f12129ac416669f7136fa0a3c9a67778de44cbbc24b856298ca17f72a6e361e29fce3ba0759cfde417cdab00fb498994e270404c933869d6c934f6f63ba4dd6db520e38cdc52096e1aa9110cf523a1a0f5bb518c8a7d7047c8320cd9066fa6f4128e2a8f0cb2ff23aa41bc2", 0x89}, {0x3, 0x10000, &(0x7f00000002c0)='\x00', &(0x7f0000000300)="6e012d4506ef4096a39e8fd78eb725356093d7323bb7853c04717b4afd804b5201e2531bf575ea9fdc76ae2640fdd5aa61", 0x31, 0x8}, {0x3, 0x10200000, &(0x7f0000000340)=',%\\,-\x00', &(0x7f00000003c0)="05eda2087c878b0bd270f7b797930668de0624eca8926fdeb77a4a3f4c1e2d03e7f65bac28874f095a456ff218802f501f2e97d78bb338e5df37c750445014f79b66aba2fc16d18235118bdc31757a6d08187912c7d3f09b0c883a1a1274836b1d8957b1ed4bbf4d134458a1bcd053fd18d97efcfece97f87d0d47ac02a08207ba84f4314d740fc1f6c1598b6d2b8af2e1c914", 0x93, 0x10}, {0x2, 0xfff, &(0x7f0000000480)='9p\x00', &(0x7f0000000540)="579f784a46df3c34445951a122bc373293865a1198a37f6f5d742f81a57d29633f17b600e733782e4db95a9be8761098d9c318612eec21fd35c2799db4cd8f991a6a8b24d22b7288f1a9f3a45d9f18bb604e9c8d819c10dd749ac919f478a7f781bd490fbaaa2a17f80e5c4b204447925b0df479244b2a83312eb4982a04cc7dce4717c4b5d4ccb909763d257fcaabb8500363ed9a7f99864d207e6394bb9d5d955a", 0xa2, 0x10}, {0x2, 0x1, &(0x7f0000000600)='{\x00', &(0x7f0000000700)="30ee96047c87e8c098712a33a2dfec5f4994b77601e42e8d6daa0a18d15e13a112b902c5c08f99c402f30db284a410cfc35409d9f382d059579e474a057225c9d91fa39e2c5ebaa7b0339f9ed7b8fe970febefe7ae012c130f97688a", 0x5c, 0x10}, {0x3, 0x5, &(0x7f0000000800)='127.0.0.1\x00', &(0x7f0000000840)="2de870769b028cb4a602d27ddfda0ba99cdfb0a98cd31a0c22f86b9bd8b7f3697aa3f7f2d739ab4ce0af5efedd731b39c1463d0872fc54acfee4fbf239940c3bf67d19db627741952ee66ed2bb1b", 0x4e}, {0x3, 0x4, &(0x7f00000008c0)='127.0.0.1\x00', &(0x7f0000000900)="66c75be06c57f09a47e4f39c30088654df404ca6666e04792db11862e97274e36b6fafbef9fe6017e4f1b1a40e37c9f3b69926ba5f1caf68c24e4d8c9867724de1d169", 0x43}]}) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) (async, rerun: 64) listen(r6, 0x2400000) (async, rerun: 64) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$sock_SIOCGSKNS(r7, 0x894c, &(0x7f0000000640)=0xfffffffa) (async, rerun: 64) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp,port=0x0000000000404e22']) (rerun: 64) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r8, 0x65, 0x4, &(0x7f0000000a80), 0x4) accept4$inet(r6, &(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x0, 0x80800) sendmmsg$inet(r5, &(0x7f0000001800)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000500)="391adf0e0ffc9d2b4e6681c97cb814e1d683fd7065b082e42549b6aac265d8f06fc74d6d", 0x24}, {&(0x7f0000000780)="2fd4cf47433cc832f7b9287f69f290312b728f0301db30fe42e0111c154e4f1cc54bdb7ebc984a090c727b33abe6f725c536d2399324bd7638461683b158b64c52908231fcb154449b4b", 0x4a}], 0x2}}], 0x1, 0x4c000) 780.080172ms ago: executing program 3 (id=55): socket$xdp(0x2c, 0x3, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, 0x0, 0x0) syz_usb_connect$uac1(0x5, 0xdc, &(0x7f0000000400)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB='\a'], 0x0) 772.528562ms ago: executing program 1 (id=56): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000380), 0x2001000400, 0x40c00) ioctl$EVIOCSMASK(r2, 0x40104593, &(0x7f0000000080)={0x0, 0x0, 0x0}) ioctl$EVIOCSKEYCODE_V2(r2, 0x80104592, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x6a03, "0f9d0000002020000000b82100"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x2, &(0x7f0000000000)=0xa000002, 0x4) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) ioctl$TUNGETVNETHDRSZ(r6, 0x800454d7, &(0x7f0000000000)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) r9 = dup(r8) syz_ublk_setup_queues(r9, r7, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'bridge_slave_1\x00', 0x200}) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f00000000c0)={0x1d, r10}, 0x10) syz_usb_connect$uac1(0x2, 0xa5, &(0x7f0000000140)=ANY=[@ANYBLOB="120110000000002082050c004000010203010902930003010050810904000000010100000a2401000013000201020924030305030306620904010000010200000904010101010200000824020108020402072401800900000000010000000c077707250100080300090402000001020000090402010101020f00092402014004028b6c09240201030204050a092402020000fdff020905820920000602fd07250104027b68"], 0x0) 193.085145ms ago: executing program 1 (id=57): ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f0000000000)={[{0x80000000, 0x7f, 0x8, 0x4f, 0x0, 0x2, 0x80, 0x1, 0x3, 0x44, 0xb, 0x0, 0x10000000000d}, {0xf, 0xa6f2, 0x6, 0xf, 0x9, 0x4, 0x0, 0x6, 0xa, 0x13, 0x7, 0x6, 0x1}, {0x1ff, 0x7, 0xd, 0x10, 0x25, 0x79, 0xff, 0xfb, 0x4, 0x15, 0x0, 0x2, 0x4}], 0x9}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303, 0x3a}, "0f6b01fa00a30c00", "9e8ecc7bb535247672a2eff75b24866882519a85ef828f711330ff2bb17b5508", "0002d900", "a1014200000102a0"}, 0x38) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = dup(r2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000002800000060ec97000fc83a00fe8000000000000000000000000000aaff8bffffffffffffff00000000"], 0xffe) 0s ago: executing program 1 (id=58): openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x182, 0x0) r1 = openat$kvm(0x0, &(0x7f0000000400), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_GET_IRQCHIP(r2, 0xc208ae62, &(0x7f0000000000)={0x2, 0x0, @pic={0x1, 0x3, 0x1, 0xff, 0x6, 0x9, 0xa, 0x4, 0x5, 0x9, 0x2, 0x6, 0xff, 0x7, 0x7, 0x7}}) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r5, 0x0) preadv(r5, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_SET_FPU(r5, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x14, 0xa, 0xbc, 0x0, 0x7, 0x10000, 0x2, '\x00', 0xc94}) ioctl$KVM_RUN(r6, 0xae80, 0x0) fallocate(r0, 0x0, 0x2000006, 0x10003) lsetxattr$trusted_overlay_redirect(0x0, 0x0, &(0x7f00000001c0)='./file1\x00', 0x8, 0x2) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.90' (ED25519) to the list of known hosts. [ 24.305508][ T286] cgroup: Unknown subsys name 'net' [ 24.310777][ T36] audit: type=1400 audit(1785928232.759:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.333440][ T36] audit: type=1400 audit(1785928232.759:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.334439][ T286] cgroup: Unknown subsys name 'devices' [ 24.355583][ T36] audit: type=1400 audit(1785928232.769:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.482759][ T286] cgroup: Unknown subsys name 'hugetlb' [ 24.488406][ T286] cgroup: Unknown subsys name 'rlimit' [ 24.581672][ T36] audit: type=1400 audit(1785928233.039:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.604846][ T36] audit: type=1400 audit(1785928233.039:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 24.609838][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.629722][ T36] audit: type=1400 audit(1785928233.039:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 24.661240][ T36] audit: type=1400 audit(1785928233.099:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.683170][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.686731][ T36] audit: type=1400 audit(1785928233.099:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.720869][ T36] audit: type=1400 audit(1785928233.139:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 24.746431][ T36] audit: type=1400 audit(1785928233.139:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 25.476998][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.484153][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.491445][ T293] bridge_slave_0: entered allmulticast mode [ 25.498009][ T293] bridge_slave_0: entered promiscuous mode [ 25.518883][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.526101][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.533218][ T293] bridge_slave_1: entered allmulticast mode [ 25.539405][ T293] bridge_slave_1: entered promiscuous mode [ 25.587806][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.595095][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.602378][ T294] bridge_slave_0: entered allmulticast mode [ 25.608501][ T294] bridge_slave_0: entered promiscuous mode [ 25.616491][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.623594][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.630659][ T294] bridge_slave_1: entered allmulticast mode [ 25.636838][ T294] bridge_slave_1: entered promiscuous mode [ 25.678914][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.686011][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.693138][ T296] bridge_slave_0: entered allmulticast mode [ 25.699283][ T296] bridge_slave_0: entered promiscuous mode [ 25.708357][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.715540][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.722655][ T296] bridge_slave_1: entered allmulticast mode [ 25.728820][ T296] bridge_slave_1: entered promiscuous mode [ 25.740237][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.747324][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.754660][ T295] bridge_slave_0: entered allmulticast mode [ 25.760954][ T295] bridge_slave_0: entered promiscuous mode [ 25.769851][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.776953][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.784112][ T295] bridge_slave_1: entered allmulticast mode [ 25.790363][ T295] bridge_slave_1: entered promiscuous mode [ 25.905320][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.912394][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.919655][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.926694][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.939112][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.946203][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.953478][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.960491][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.979411][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.986486][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.993787][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.000814][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.018858][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.025928][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.033223][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.040254][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.076597][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.084731][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.092251][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.099434][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.107495][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.114779][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.122162][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.129306][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.155566][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.162644][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.170450][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.177509][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.185595][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.192639][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.200063][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.207111][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.225536][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.232606][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.240130][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.247177][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.255494][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.262570][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.270074][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.277135][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.314941][ T293] veth0_vlan: entered promiscuous mode [ 26.326102][ T294] veth0_vlan: entered promiscuous mode [ 26.346025][ T294] veth1_macvtap: entered promiscuous mode [ 26.354211][ T293] veth1_macvtap: entered promiscuous mode [ 26.373937][ T295] veth0_vlan: entered promiscuous mode [ 26.381284][ T296] veth0_vlan: entered promiscuous mode [ 26.409822][ T295] veth1_macvtap: entered promiscuous mode [ 26.422351][ T296] veth1_macvtap: entered promiscuous mode [ 26.436540][ T293] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 26.520127][ T319] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 26.770944][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 26.870765][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 26.922005][ T65] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 26.939074][ T65] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 26.949901][ T10] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 26.957916][ T65] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 26.967518][ T65] usb 3-1: config 0 descriptor?? [ 27.022415][ T31] usb 1-1: unable to get BOS descriptor or descriptor too short [ 27.030833][ T31] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.040981][ T31] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 27.051542][ T31] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 27.060631][ T31] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 27.068812][ T31] usb 1-1: Product: syz [ 27.073143][ T31] usb 1-1: Manufacturer: syz [ 27.077745][ T31] usb 1-1: SerialNumber: syz [ 27.112922][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 27.123917][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 27.137921][ T10] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 27.147092][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.156028][ T10] usb 4-1: config 0 descriptor?? [ 27.161324][ T332] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22 [ 27.175999][ T65] usbhid 3-1:0.0: can't add hid device: -71 [ 27.184604][ T65] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 27.193718][ T65] usb 3-1: USB disconnect, device number 2 [ 27.291035][ T31] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 27.301472][ T31] usb 1-1: USB disconnect, device number 2 [ 27.315232][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 27.370218][ T332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 27.378841][ T332] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 27.394679][ T10] usbhid 4-1:0.0: can't add hid device: -71 [ 27.401107][ T10] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 27.409786][ T10] usb 4-1: USB disconnect, device number 2 [ 27.610748][ T45] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 27.761681][ T45] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 27.772656][ T45] usb 3-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 27.781965][ T45] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.790551][ T45] usb 3-1: config 0 descriptor?? [ 28.193179][ T377] Zero length message leads to an empty skb [ 28.320775][ T10] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 28.461074][ T346] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 28.471832][ T10] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 28.480961][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.489486][ T10] usb 2-1: config 0 descriptor?? [ 28.610786][ T346] usb 4-1: Using ep0 maxpacket: 8 [ 28.616098][ T45] aiptek 3-1:0.0: Aiptek using 400 ms programming speed [ 28.624176][ T346] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 28.632685][ T45] input: Aiptek as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input5 [ 28.641691][ T346] usb 4-1: config 179 has an invalid descriptor of length 0, skipping remainder of the config [ 28.652273][ T346] usb 4-1: config 179 has no interface number 0 [ 28.659748][ T346] usb 4-1: config 179 interface 65 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 28.673087][ T346] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 28.682159][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 28.695712][ T371] netlink: 26148 bytes leftover after parsing attributes in process `syz.1.19'. [ 28.705312][ T371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.19'. [ 28.715399][ T371] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 28.723962][ T371] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 28.741093][ T10] usb 2-1: Cannot read MAC address [ 28.746615][ T10] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 28.761894][ T10] usb 2-1: USB disconnect, device number 2 [ 28.892933][ T346] usb 4-1: USB disconnect, device number 3 [ 28.949037][ T65] usb 3-1: USB disconnect, device number 3 [ 28.954925][ C0] aiptek 3-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 29.020795][ T333] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 29.070744][ T10] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 29.171755][ T333] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 29.182860][ T333] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 29.195850][ T333] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 29.205322][ T333] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 29.213874][ T333] usb 1-1: config 0 descriptor?? [ 29.219281][ T388] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 29.231719][ T10] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 29.241863][ T10] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 29.251752][ T10] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 29.263830][ T10] usb 2-1: New USB device found, idVendor=174c, idProduct=55aa, bcdDevice= 1.00 [ 29.272927][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 29.280935][ T10] usb 2-1: Product: syz [ 29.285085][ T10] usb 2-1: Manufacturer: syz [ 29.289664][ T10] usb 2-1: SerialNumber: syz [ 29.296634][ T10] usb-storage 2-1:1.0: USB Mass Storage device detected [ 29.304473][ T10] usb-storage 2-1:1.0: Quirks match for vid 174c pid 55aa: 400000 [ 29.312684][ T10] scsi host1: usb-storage 2-1:1.0 [ 29.428067][ T388] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 29.436641][ T388] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 29.448026][ T333] usbhid 1-1:0.0: can't add hid device: -71 [ 29.454061][ T333] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 29.465402][ T333] usb 1-1: USB disconnect, device number 3 [ 29.471332][ T36] kauditd_printk_skb: 68 callbacks suppressed [ 29.471348][ T36] audit: type=1400 audit(1785928237.919:142): avc: denied { read write } for pid=396 comm="syz.2.27" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.502155][ T36] audit: type=1400 audit(1785928237.919:143): avc: denied { open } for pid=396 comm="syz.2.27" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.508229][ T389] futex_wake_op: syz.1.25 tries to shift op by 144; fix this program [ 29.525387][ T36] audit: type=1400 audit(1785928237.919:144): avc: denied { ioctl } for pid=396 comm="syz.2.27" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x7013 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 29.561925][ T36] audit: type=1400 audit(1785928237.919:145): avc: denied { create } for pid=396 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.584609][ T36] audit: type=1400 audit(1785928237.919:146): avc: denied { write } for pid=396 comm="syz.2.27" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 29.604948][ T36] audit: type=1400 audit(1785928237.959:147): avc: denied { mmap_zero } for pid=387 comm="syz.1.25" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 29.624593][ T36] audit: type=1400 audit(1785928237.959:148): avc: denied { read } for pid=387 comm="syz.1.25" dev="nsfs" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.645527][ T36] audit: type=1400 audit(1785928237.959:149): avc: denied { open } for pid=387 comm="syz.1.25" path="net:[4026532305]" dev="nsfs" ino=4026532305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 29.668518][ T36] audit: type=1400 audit(1785928238.029:150): avc: denied { map } for pid=387 comm="syz.1.25" path="socket:[4479]" dev="sockfs" ino=4479 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 29.690773][ T346] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 29.742619][ T36] audit: type=1400 audit(1785928238.199:151): avc: denied { create } for pid=403 comm="syz.2.29" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 29.804099][ T413] mmap: syz.2.32 (413) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 29.817557][ T333] usb 2-1: USB disconnect, device number 3 [ 29.825799][ T413] overlayfs: conflicting options: nfs_export=on,metacopy=on [ 29.862905][ T346] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 64 [ 29.872803][ T346] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 29.886782][ T346] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 29.895894][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 29.903916][ T346] usb 4-1: SerialNumber: syz [ 29.909399][ T395] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 29.978761][ T418] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 30.080772][ T311] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 30.169719][ T428] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 30.242126][ T311] usb 3-1: unable to get BOS descriptor or descriptor too short [ 30.250575][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 30.261055][ T311] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 30.271589][ T311] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40 [ 30.280745][ T311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 30.288784][ T311] usb 3-1: Product: syz [ 30.293233][ T311] usb 3-1: Manufacturer: syz [ 30.297892][ T311] usb 3-1: SerialNumber: syz [ 30.305530][ T311] usb 3-1: selecting invalid altsetting 1 [ 30.311672][ T311] usb 3-1: unit 6 not found! [ 30.383010][ T428] netlink: 'syz.3.26': attribute type 4 has an invalid length. [ 30.505402][ T413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 30.513891][ T311] usb 3-1: 2:0: cannot get min/max values for control 1 (id 2) [ 30.514591][ T413] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 30.535506][ T311] snd-usb-audio 3-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 30.545526][ T311] usb 3-1: USB disconnect, device number 4 [ 30.553387][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 30.660734][ T347] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.811782][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.822815][ T347] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 30.831893][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.840858][ T347] usb 2-1: config 0 descriptor?? [ 30.862263][ T438] ======================================================= [ 30.862263][ T438] WARNING: The mand mount option has been deprecated and [ 30.862263][ T438] and is ignored by this kernel. Remove the mand [ 30.862263][ T438] option from the mount to silence this warning. [ 30.862263][ T438] ======================================================= [ 30.899272][ T438] netlink: 5892 bytes leftover after parsing attributes in process `syz.0.37'. [ 31.014231][ T440] incfs: Options parsing error. -22 [ 31.019572][ T440] incfs: mount failed -22 [ 31.027568][ T440] 9pnet_fd: Insufficient options for proto=fd [ 31.050747][ T347] usbhid 2-1:0.0: can't add hid device: -71 [ 31.057108][ T347] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 31.068445][ T347] usb 2-1: USB disconnect, device number 4 [ 31.270754][ T311] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 31.431816][ T311] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid maxpacket 8, setting to 0 [ 31.442453][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 4 [ 31.453819][ T311] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 31.465544][ T311] usb 1-1: string descriptor 0 read error: -22 [ 31.471769][ T311] usb 1-1: New USB device found, idVendor=0582, idProduct=0582, bcdDevice= 0.40 [ 31.480820][ T311] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 31.490744][ T10] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 31.493000][ T311] usb 1-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 31.508175][ T311] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 31.511675][ T313] udevd[313]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 31.517268][ T347] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 31.641845][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.652817][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 31.663007][ T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=30d4, bcdDevice= 0.01 [ 31.672135][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.680956][ T10] usb 3-1: config 0 descriptor?? [ 31.701832][ T347] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 31.712841][ T347] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 31.721911][ T347] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.730604][ T347] usb 2-1: config 0 descriptor?? [ 32.288706][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 32.294741][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 32.303976][ T10] usb 3-1: USB disconnect, device number 5 [ 32.424263][ T346] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -71 [ 32.435832][ T346] usb 4-1: USB disconnect, device number 4 [ 32.541273][ T347] aiptek 2-1:0.0: Aiptek using 400 ms programming speed [ 32.549560][ T347] input: Aiptek as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input6 [ 32.730736][ T346] usb 4-1: new full-speed USB device number 5 using dummy_hcd [ 32.839434][ T311] usb 2-1: USB disconnect, device number 5 [ 32.845510][ C1] aiptek 2-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 32.881856][ T346] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 32.892852][ T346] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 32.905673][ T346] usb 4-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 32.914964][ T346] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 32.923902][ T346] usb 4-1: config 0 descriptor?? [ 32.929173][ T451] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 33.040738][ T347] usb 3-1: new low-speed USB device number 6 using dummy_hcd [ 33.138111][ T451] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.146748][ T451] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.157160][ T346] usbhid 4-1:0.0: can't add hid device: -71 [ 33.163193][ T346] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 33.172001][ T346] usb 4-1: USB disconnect, device number 5 [ 33.192052][ T347] usb 3-1: unable to get BOS descriptor or descriptor too short [ 33.200463][ T347] usb 3-1: config 1 interface 0 altsetting 129 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 33.211490][ T347] usb 3-1: config 1 interface 0 has no altsetting 0 [ 33.220062][ T347] usb 3-1: string descriptor 0 read error: -22 [ 33.226298][ T347] usb 3-1: New USB device found, idVendor=16c0, idProduct=05e1, bcdDevice= 0.40 [ 33.235354][ T347] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.246288][ T453] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 33.454539][ T453] netlink: 24 bytes leftover after parsing attributes in process `syz.2.42'. [ 33.464885][ T347] usbhid 3-1:1.0: can't add hid device: -71 [ 33.470948][ T347] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 33.479497][ T347] usb 3-1: USB disconnect, device number 6 [ 33.590748][ T346] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 33.741280][ T346] usb 2-1: Using ep0 maxpacket: 16 [ 33.746828][ T346] usb 2-1: too many configurations: 17, using maximum allowed: 8 [ 33.777276][ T455] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 33.785812][ T455] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 33.834148][ T346] usb 2-1: string descriptor 0 read error: -71 [ 33.840395][ T346] usb 2-1: New USB device found, idVendor=04e8, idProduct=a101, bcdDevice= 4.48 [ 33.849517][ T346] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 33.859285][ T346] r8152-cfgselector 2-1: Unknown version 0x0000 [ 33.863627][ T333] usb 1-1: USB disconnect, device number 4 [ 33.865736][ T346] r8152-cfgselector 2-1: rejected 8 configurations due to insufficient available bus power [ 33.881471][ T346] r8152-cfgselector 2-1: no configuration chosen from 8 choices [ 33.891294][ T346] r8152-cfgselector 2-1: USB disconnect, device number 6 [ 33.910875][ T347] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 34.061822][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.073007][ T347] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 34.083113][ T347] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.096396][ T347] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.105530][ T347] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.114291][ T347] usb 4-1: config 0 descriptor?? [ 34.208771][ T390] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 34.217071][ T390] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 34.227529][ T10] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 34.321476][ T457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 34.329980][ T457] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 34.382188][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.390512][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 34.401502][ T10] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 34.409426][ T10] usb 3-1: can't read configurations, error -22 [ 34.540754][ T10] usb 3-1: new full-speed USB device number 8 using dummy_hcd [ 34.543782][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.555666][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.563078][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.570489][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.577918][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.585451][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.593021][ T346] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 34.600543][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.608043][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.615598][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.623021][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.630401][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.637807][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.645205][ T347] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 34.652607][ T347] plantronics 0003:047F:FFFF.0002: unbalanced collection at end of report description [ 34.662415][ T347] plantronics 0003:047F:FFFF.0002: parse failed [ 34.668676][ T347] plantronics 0003:047F:FFFF.0002: probe with driver plantronics failed with error -22 [ 34.702201][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 34.710190][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 34.718942][ T10] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 34.720781][ T311] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 34.726893][ T10] usb 3-1: can't read configurations, error -22 [ 34.740970][ T10] usb usb3-port1: attempt power cycle [ 34.761871][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 34.772909][ T346] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 34.782842][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.804197][ T346] usb 1-1: config 0 descriptor?? [ 34.852476][ T390] usb 4-1: USB disconnect, device number 6 [ 34.874919][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.883911][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.884784][ T311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 34.893037][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.903666][ T311] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 34.912425][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.925073][ T311] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 34.933772][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.942689][ T311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.951572][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.968051][ T311] usb 2-1: config 0 descriptor?? [ 34.968105][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.973980][ T485] raw-gadget.4 gadget.1: fail, usb_ep_enable returned -22 [ 34.984727][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 34.997630][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.006470][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.015366][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.024372][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.024874][ T346] usbhid 1-1:0.0: can't add hid device: -71 [ 35.033672][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.039078][ T346] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 35.047801][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.057868][ T346] usb 1-1: USB disconnect, device number 5 [ 35.066073][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.080781][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.089598][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.098232][ T10] usb 3-1: new full-speed USB device number 9 using dummy_hcd [ 35.100992][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.114740][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.123729][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.132796][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.141766][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.150745][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.158580][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.167243][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 35.171058][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.176107][ T10] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 35.184037][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.191823][ T10] usb 3-1: can't read configurations, error -22 [ 35.200947][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.210898][ T485] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.216511][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.231380][ T485] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.235452][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.248586][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.249148][ T311] usbhid 2-1:0.0: can't add hid device: -71 [ 35.257599][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.263189][ T311] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.272343][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.284308][ T311] usb 2-1: USB disconnect, device number 7 [ 35.288666][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.302980][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.311824][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.320597][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.329513][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.338166][ T10] usb 3-1: new full-speed USB device number 10 using dummy_hcd [ 35.340960][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.354953][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.363770][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.372558][ T10] usb 3-1: unable to get BOS descriptor or descriptor too short [ 35.372666][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.380801][ T10] usb 3-1: not running at top speed; connect to a high speed hub [ 35.389112][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.397866][ T10] usb 3-1: config index 0 descriptor too short (expected 9, got 0) [ 35.405672][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.413322][ T10] usb 3-1: can't read configurations, error -22 [ 35.422076][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.428246][ T10] usb usb3-port1: unable to enumerate USB device [ 35.436876][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.451726][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.460528][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.469422][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.478203][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.487099][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.495856][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.504688][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.513560][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.522370][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.531127][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.539831][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.540752][ T346] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 35.548751][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.564749][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.573573][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.582342][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.591175][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.599942][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.608775][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.617573][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.626599][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.635402][ T491] 9pnet_fd: p9_fd_create_tcp (491): problem connecting socket to 127.0.0.1 [ 35.701746][ T346] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 35.712758][ T346] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 35.721879][ T346] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 35.728023][ T36] kauditd_printk_skb: 26 callbacks suppressed [ 35.728049][ T36] audit: type=1400 audit(1785928244.179:178): avc: denied { create } for pid=492 comm="syz.3.55" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 35.752676][ T346] usb 1-1: config 0 descriptor?? [ 35.777892][ T36] audit: type=1400 audit(1785928244.229:179): avc: denied { append } for pid=494 comm="syz.1.56" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 35.960987][ T482] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 35.969559][ T482] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 35.990733][ T333] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 36.140748][ T333] usb 4-1: Using ep0 maxpacket: 16 [ 36.146976][ T333] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 36.157106][ T333] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 36.167412][ T333] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 36.176505][ T333] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.184539][ T333] usb 4-1: Product: syz [ 36.188694][ T333] usb 4-1: Manufacturer: syz [ 36.193292][ T333] usb 4-1: SerialNumber: syz [ 36.401146][ T333] usb 4-1: 0:2 : does not exist [ 36.411722][ T333] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 36.423701][ T333] usb 4-1: USB disconnect, device number 7 [ 36.436728][ T330] udevd[330]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 36.591094][ T346] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 36.604913][ T346] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input7 [ 36.626127][ C1] ------------[ cut here ]------------ [ 36.631628][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:741:31 [ 36.640224][ C1] index 4096 is out of range for type 'const int[34]' [ 36.646983][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 36.647004][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.647017][ C1] Call Trace: [ 36.647022][ C1] [ 36.647027][ C1] __dump_stack+0x21/0x30 [ 36.647055][ C1] dump_stack_lvl+0x140/0x1c0 [ 36.647071][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.647087][ C1] ? common_startup_64+0x13b/0x157 [ 36.647104][ C1] dump_stack+0x19/0x20 [ 36.647119][ C1] ubsan_epilogue+0xe/0x40 [ 36.647128][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 36.647145][ C1] aiptek_irq+0x208d/0x2a00 [ 36.647160][ C1] ? _raw_spin_unlock+0x45/0x60 [ 36.647173][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 36.647186][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 36.647205][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 36.647221][ C1] dummy_timer+0xa3f/0x4900 [ 36.647237][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.647248][ C1] ? sched_clock+0x44/0x60 [ 36.647262][ C1] ? timerqueue_del+0xd7/0x130 [ 36.647273][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 36.647289][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.647300][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 36.647317][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 36.647333][ C1] ? read_tsc+0xd/0x20 [ 36.647347][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 36.647361][ C1] hrtimer_run_softirq+0x159/0x560 [ 36.647371][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.647387][ C1] handle_softirqs+0x1aa/0x620 [ 36.647399][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.647409][ C1] irq_exit_rcu+0xd/0x30 [ 36.647419][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.647436][ C1] [ 36.647440][ C1] [ 36.647444][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.647460][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 36.647488][ C1] Code: cc cc cc cc cc cc cc b8 02 74 53 7c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 36.647498][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 36.647513][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366a600 RCX: ffffffff85a444fd [ 36.647523][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000093434 [ 36.647531][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 36.647540][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 36.647548][ C1] R13: 1ffff110206cd4c0 R14: dffffc0000000000 R15: ffffffff87ecbf28 [ 36.647558][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 36.647570][ C1] default_idle+0x17/0x30 [ 36.647580][ C1] arch_cpu_idle+0xd/0x20 [ 36.647591][ C1] default_idle_call+0x3e/0x80 [ 36.647602][ C1] do_idle+0x2fc/0x570 [ 36.647613][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 36.647627][ C1] cpu_startup_entry+0x47/0x60 [ 36.647638][ C1] start_secondary+0x12e/0x140 [ 36.647655][ C1] common_startup_64+0x13b/0x157 [ 36.647672][ C1] [ 36.647677][ C1] ---[ end trace ]--- [ 36.943198][ C1] ------------[ cut here ]------------ [ 36.948642][ C1] UBSAN: array-index-out-of-bounds in drivers/input/tablet/aiptek.c:763:30 [ 36.957228][ C1] index 4097 is out of range for type 'const int[34]' [ 36.963972][ C1] CPU: 1 UID: 0 PID: 0 Comm: swapper/1 Not tainted syzkaller #0 d75e9a393de9c6a33055d5e25749154d2cb9f431 [ 36.963993][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 36.964000][ C1] Call Trace: [ 36.964005][ C1] [ 36.964011][ C1] __dump_stack+0x21/0x30 [ 36.964032][ C1] dump_stack_lvl+0x140/0x1c0 [ 36.964047][ C1] ? __cfi_dump_stack_lvl+0x10/0x10 [ 36.964062][ C1] ? input_event_dispose+0x2f5/0x6d0 [ 36.964081][ C1] dump_stack+0x19/0x20 [ 36.964102][ C1] ubsan_epilogue+0xe/0x40 [ 36.964121][ C1] __ubsan_handle_out_of_bounds+0xe8/0xf0 [ 36.964154][ C1] aiptek_irq+0x1f3c/0x2a00 [ 36.964173][ C1] ? kcov_remote_start+0x1d2/0x3c0 [ 36.964185][ C1] __usb_hcd_giveback_urb+0x36e/0x530 [ 36.964203][ C1] usb_hcd_giveback_urb+0x12b/0x400 [ 36.964219][ C1] dummy_timer+0xa3f/0x4900 [ 36.964234][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.964244][ C1] ? sched_clock+0x44/0x60 [ 36.964260][ C1] ? timerqueue_del+0xd7/0x130 [ 36.964272][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 36.964289][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.964299][ C1] __hrtimer_run_queues+0x3ae/0x8e0 [ 36.964316][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 36.964333][ C1] ? read_tsc+0xd/0x20 [ 36.964348][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 36.964363][ C1] hrtimer_run_softirq+0x159/0x560 [ 36.964373][ C1] ? irqtime_account_irq+0x51/0x1c0 [ 36.964390][ C1] handle_softirqs+0x1aa/0x620 [ 36.964402][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.964412][ C1] irq_exit_rcu+0xd/0x30 [ 36.964422][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.964439][ C1] [ 36.964443][ C1] [ 36.964447][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.964463][ C1] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 36.964482][ C1] Code: cc cc cc cc cc cc cc b8 02 74 53 7c 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 23 19 43 00 55 48 89 e5 fb f4 <5d> c3 cc cc cc cc cc cc cc cc cc cc cc b8 00 00 00 00 90 90 90 90 [ 36.964491][ C1] RSP: 0018:ffffc900001a7e00 EFLAGS: 000002c2 [ 36.964504][ C1] RAX: ffff8881f6f00000 RBX: ffff88810366a600 RCX: ffffffff85a444fd [ 36.964513][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: 0000000000093434 [ 36.964520][ C1] RBP: ffffc900001a7e00 R08: ffff8881f6f395eb R09: 1ffff1103ede72bd [ 36.964529][ C1] R10: dffffc0000000000 R11: ffffed103ede72be R12: 0000000000000000 [ 36.964537][ C1] R13: 1ffff110206cd4c0 R14: dffffc0000000000 R15: ffffffff87ecbf28 [ 36.964546][ C1] ? ct_kernel_exit+0x7d/0xb0 [ 36.964557][ C1] default_idle+0x17/0x30 [ 36.964568][ C1] arch_cpu_idle+0xd/0x20 [ 36.964578][ C1] default_idle_call+0x3e/0x80 [ 36.964589][ C1] do_idle+0x2fc/0x570 [ 36.964601][ C1] ? idle_inject_timer_fn+0x80/0x80 [ 36.964614][ C1] cpu_startup_entry+0x47/0x60 [ 36.964626][ C1] start_secondary+0x12e/0x140 [ 36.964642][ C1] common_startup_64+0x13b/0x157 [ 36.964659][ C1] [ 36.964663][ C1] ---[ end trace ]--- [ 37.529122][ T10] usb 1-1: USB disconnect, device number 6 [ 37.529178][ C1] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19