last executing test programs: 9.216883119s ago: executing program 2 (id=149): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f00000000c0)={0x0, &(0x7f0000000100)=[@enable_nested={0x12c, 0x18}, @nested_create_vm={0x12d, 0x18}, @nested_load_code={0x12e, 0x19, {0x0, "f4"}}, @nested_vmlaunch={0x12f, 0x18}], 0x61}) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_RUN(r3, 0xae80, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000000)={0x10, 0x0, 0x8000000, 0x1000, &(0x7f0000001000)=nil}) 8.16181707s ago: executing program 2 (id=157): socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004"], 0xfdef) 7.545068763s ago: executing program 2 (id=158): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000280), 0x8c, &(0x7f00000001c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 7.073450814s ago: executing program 1 (id=160): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000180)={0x0, 0x0, 0xfffffff9, 0x6, 0x16, "0062007d8200f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000009c0)=0x16) 6.987208017s ago: executing program 0 (id=161): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 6.81646027s ago: executing program 0 (id=162): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsmount(0xffffffffffffffff, 0x0, 0x0) 6.770854695s ago: executing program 2 (id=163): capset(&(0x7f00000000c0)={0x20080522}, &(0x7f0000000340)={0x200000, 0x200000, 0x9, 0x0, 0x5989, 0x99}) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000003c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000008c0), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x0, 0xc200040, 0x0, 0x8, 0x0, 0x1ff, 0x0, 0x0, 0x8}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000008900)="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000000000000000bcd4681f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b2c1ec000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008df76a250000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea21056000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000131a5d9400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b60000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)={0x20, 0x0, 0xb, {0x0, 0x17}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000001100)=ANY=[], 0x88) 6.052065737s ago: executing program 1 (id=165): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000bff000/0x400000)=nil) r3 = syz_kvm_add_vcpu$x86(r2, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xdc6, 0x0, 0x1}]}) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x440, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = syz_kvm_setup_syzos_vm$x86(r5, &(0x7f0000bff000/0x400000)=nil) r7 = syz_kvm_add_vcpu$x86(r6, &(0x7f0000000080)={0x0, 0x0}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0xdc6, 0x0, 0x1}]}) 5.875991746s ago: executing program 0 (id=166): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000100)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x48043) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6gretap0\x00', 0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000140)={0x8, 0xfe01, 0x0, 0x8, 0x5, 0x80000001, 0x6, 0xc8}, 0x20) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x8003, 0xbffc, 0x0, 0x5, 0x134, 0x48, 0x2}, 0x9c) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0xce20, 0x6, @empty, 0x2d}}, 0x7, 0x1, 0xf06, 0x3, 0xb4, 0x7f, 0x9}, 0x9c) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RSETATTR(r4, &(0x7f0000000000)={0x7, 0x1b, 0x2}, 0xffffff9a) splice(r3, 0x0, r0, 0x0, 0xffff, 0x2) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xeffffff2, @empty, 0x5}}, 0x10001fc, 0x6, 0xffff1896, 0x3, 0x26, 0xffffffb9, 0x1a}, 0x9c) 5.330859619s ago: executing program 3 (id=169): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0xef2, 0x4) sendto$inet(r0, &(0x7f0000000180)='v', 0x1, 0x40c0, 0x0, 0x0) 5.270699845s ago: executing program 3 (id=170): r0 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001500)=""/77, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 5.184359841s ago: executing program 3 (id=171): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x8, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000005c0)=[@text64={0x40, 0x0}], 0x1, 0x69, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000600)=@svm={0x4, 0x1, 0x1080, {0x80a0000}, {"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"}}) 5.029860393s ago: executing program 1 (id=172): mkdirat(0xffffffffffffff9c, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_KEY_STATUS(0xffffffffffffffff, 0xc080661a, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000140)={0x1, &(0x7f0000000200)=[{0x6, 0x1, 0x7, 0x7fffffff}]}) timerfd_settime(0xffffffffffffffff, 0x3, 0x0, 0x0) 4.936560302s ago: executing program 0 (id=173): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000105804105000000000000109022d00010700000009040005050300000009210002080122940309058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="00220508"], 0x0}, 0x0) syz_usb_connect(0x6, 0x0, 0x0, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write(0xffffffffffffffff, 0x6, 0x0, 0x0) r2 = syz_open_dev$hiddev(&(0x7f00000000c0), 0x0, 0x0) ioctl$HIDIOCSREPORT(r2, 0x81044804, &(0x7f0000000400)={0x1, 0x8d6c30f34124690b, 0x55f}) syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) ioctl$EVIOCGMASK(r1, 0x541b, 0x0) syz_open_dev$hiddev(&(0x7f0000000100), 0xbfe, 0xc48c0) 4.814904732s ago: executing program 1 (id=174): syz_open_dev$hidraw(0x0, 0x0, 0x418000) r0 = syz_usb_connect(0x3, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000014da2108ab12a390eb1e000000010902240001b30000040904410017ff5d810009050f1f01040000000905830300b3"], 0x0) syz_usb_connect(0x0, 0x10b, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ncm(0x0, 0x0, 0x0, 0x0) ioctl$HIDIOCGREPORTINFO(0xffffffffffffffff, 0xc00c4809, 0x0) syz_open_dev$evdev(0x0, 0x0, 0x4140) ioctl$HIDIOCGRAWNAME(0xffffffffffffffff, 0x80404804, 0x0) syz_usb_control_io$sierra_net(0xffffffffffffffff, 0x0, 0x0) syz_usb_ep_write$ath9k_ep2(r0, 0x83, 0x8, &(0x7f0000000200)=ANY=[@ANYBLOB="bcea"]) r1 = syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000480)=ANY=[@ANYBLOB="12011003000000404406218040000102030109026e00030154c00f080b0001010130040904000000010130000a24010e0a0081000000090401000001023000090401010101023000090542d1ad"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r1, &(0x7f0000001e80)={0x2c, 0x0, &(0x7f0000001c80)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0, 0x0}, 0x0) r2 = syz_open_dev$evdev(&(0x7f00000000c0), 0x40, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000001c0)={0x51, 0xffff, 0x5609, {0x5, 0x5d5}, {0xfffa, 0x2}, @period={0x5c, 0x2, 0x3, 0x6b, 0x9ee, {0x402, 0xfffd, 0x3, 0xa}, 0x0, 0x0}}) 3.907603757s ago: executing program 3 (id=175): syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x1, 0x77, 0x40, 0xc0, "", [{{0x9, 0x4, 0x0, 0x8, 0x1, 0x7, 0x1, 0x1, 0xfe, "", {{{0x9, 0x5, 0x1, 0x2, 0x8, 0x8, 0x1, 0xd}}}}}]}}]}}, 0xfffffffffffffffc) 3.170753797s ago: executing program 2 (id=176): r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000d00)=ANY=[@ANYBLOB="120100021982302013042360e5ec0102030109021b0001000060020904840001ee48b100090582"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000280)={0x20, 0x31, 0x1, 't'}, 0x0, 0x0}) 2.636006979s ago: executing program 0 (id=177): syz_usb_connect(0x0, 0x24, &(0x7f0000001180)={{0x12, 0x1, 0x110, 0x36, 0x8e, 0x48, 0x20, 0xb48, 0x1005, 0xd527, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x7, 0x0, 0x6cf134ef8374fbfe, 0xd, "", [{{0x9, 0x4, 0x1, 0x40, 0x0, 0x76, 0x41, 0xb3, 0x7f}}]}}]}}, 0x0) syz_usb_connect$uac2(0x0, 0x7b, 0x0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000000)={0x24, 0x0, &(0x7f0000001800)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000440)=ANY=[@ANYBLOB="12011f00abbe6740e9174e8b089c000000010902120001000000000904000000ff"], 0x0) syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="2010060000"], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_connect$rtl8150(0x4, 0x3f, &(0x7f00000000c0)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) r1 = syz_usb_connect$rtl8150(0x5, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xbda, 0x8150, 0x0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d}}]}}, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, 0x0) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_control_io$rtl8150(r1, 0x0, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="4005"]}) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, 0x0, 0x0) r2 = syz_usb_connect(0x0, 0x17d, &(0x7f0000000440)=ANY=[@ANYBLOB="12010000fa5c531046084010c9d00102030109026b0101000000000904620202436f1f0009050802100000fa00cd08dfa9a5fd67f84bd21113acd7fc0e3b35824deb14c9ec5d483d62169d56171de8bc4bc98d302e503f95cf970fcea2490ec47e33f438ea21d7203978d5e2904b6966f7096cf08bba8ddb7691bcbc9ce2c5760af21822ed33fc12b88222be6b3b70d8595ba08893f644fa53c1c55ad648952a80f17ece8bff775682c9a5167111725b5484fd0ab5d334dcfbe28eb0e02bd0fa90c776e4997388fc9442fd3e8657ac92601fd61a184cf49d513b7bf7cdcebe64"], 0x0) syz_usb_control_io$hid(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0) r3 = syz_usb_connect(0x2, 0x36, 0x0, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, 0x0, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_connect(0x0, 0x308, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x4f, 0xa5, 0x42, 0xff, 0x1199, 0x9070, 0xb9d0, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2f6, 0x1, 0xc1, 0x10, 0xa0, 0x2d, "", [{{0x9, 0x4, 0xf2, 0x5, 0xb, 0xa0, 0xbe, 0x7e, 0x4, [@cdc_ncm={{0x8, 0x24, 0x6, 0x0, 0x1, "9fea31"}, {0x5, 0x24, 0x0, 0x4}, {0xd, 0x24, 0xf, 0x1, 0xe2e, 0x5, 0x81, 0x7}, {0x6, 0x24, 0x1a, 0x7, 0x3c}, [@mdlm_detail={0x61, 0x24, 0x13, 0x3, "f3024ba4e810f3133f4066545e3c97dcb12c25349bea527442d0217c7dea72e16b3afa654d628e6599f27af6e4180a3d777ade8d231e3d1ebebb7fae1cc5bff55fb668ab43f6139579ade4a3dc874d288c0a70d9005126febac03fe62d"}]}], [{{0x9, 0x5, 0x7, 0x1c, 0x200, 0x9, 0x9, 0xf, [@generic={0xee, 0x0, "5c3d90affe6c25d6c83cc91d7a02ff3b29ae36003d9be37578b772a33e9b643ecd9b77ab30d08b207ccd691805c3498ec069d7fb99d60c7a4ec19b9368dd22818b439b00800a50857604744ce2491960846a937be93ab7bc560ec0fc9456d712e570cba3e0b665e524bcc57f918201db5d229c4be045e65577bb0111d44461c6daef50de5dcbd1d747620553258a1a8de57ab0250be88beab41f0f65673cf32607bf3dd4bb8101d079319ff320a92face8cba33a43a758058068b6ba9d4065a5233eaa7ea647b8324bdfff933c50cae6007e6e32dfc1044ce76f5b896a49fd98897e9ecac61fe04f1dce727a"}, @generic={0xcc, 0xa, "4dac883cdc5ce287d5cb4e85eec36f47d28b8b92807c980162c9cf288e022640219b2c322389bc1af96c6f134b293dba3e21b178528073c21f61dc238d2b932fb74b615ab0c71cb6aa107d66f0b42fe68e282053dbb720010e51c3794eca9b0d2a3623254f06228bc49cc4f42354c5781c3b48ce52d1f011a0d6cdb72acb15e0a4c45a54f108c57243296ca0dc0e41e3f06dee1c695a46cbb73338c87ebdb555a18e7df1923cf955712f029dd88df065723ce9274cfcc1918d708e11593480a4dcfe7fbbec120a2d1b0e"}]}}, {{0x9, 0x5, 0x80, 0x4, 0x8, 0x8, 0x7, 0x3}}, {{0x9, 0x5, 0x3, 0x0, 0x1ef, 0x19, 0x3, 0x5c}}, {{0x9, 0x5, 0xf, 0x8, 0x20, 0x7, 0xf8, 0xbe}}, {{0x9, 0x5, 0xc, 0x10, 0x20, 0xfe, 0xf7}}, {{0x9, 0x5, 0xb, 0xc, 0x200, 0xf5, 0x2, 0x2}}, {{0x9, 0x5, 0x4, 0x0, 0x200, 0x8, 0xf, 0x4}}, {{0x9, 0x5, 0x3, 0x0, 0x40, 0x5, 0xf2}}, {{0x9, 0x5, 0xf, 0x4, 0x10, 0x7f, 0x80, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x4, 0x8, 0x92d8}, @generic={0x3f, 0x9, "aeeca502f0022f7f51656732a5ce0b2636c9955bc288eecf75f7b46c1867d0b9167e9e920d55d666fda52b8d94161383f2a72914d90c926c52f4467ecb"}]}}, {{0x9, 0x5, 0x80, 0x0, 0x20, 0x9, 0x3, 0x3}}, {{0x9, 0x5, 0x2, 0x10, 0x400, 0x4, 0x8}}]}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x48, &(0x7f0000000980)={0x5, 0xf, 0x48, 0x6, [@ptm_cap={0x3}, @ss_container_id={0x14, 0x10, 0x4, 0x84, "0aacf4e3a5a6f2fc555728251a653eda"}, @wireless={0xb, 0x10, 0x1, 0x2, 0x2, 0xf7, 0xa1, 0x5, 0x7}, @wireless={0xb, 0x10, 0x1, 0xc, 0x20, 0x4, 0xc, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0xc, 0x40, 0x7, 0x2, 0x23, 0x7f}, @wireless={0xb, 0x10, 0x1, 0x8, 0x5, 0x1, 0x10, 0x2, 0x6}]}, 0x3, [{0xc, &(0x7f0000000a00)=@string={0xc, 0x3, "4c4912e181acbb40c289"}}, {0x34, &(0x7f0000000a80)=@string={0x34, 0x3, "5c872f9bc842478774fa9d8ec14b986f782b5551b1014e2beb0c690af9771371054a4adec1cdfece5eac6bf47306f1723deb"}}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x3401}}]}) syz_usb_ep_write(r1, 0x83, 0x0, 0x0) syz_usb_control_io$uac2(0xffffffffffffffff, &(0x7f00000020c0)={0x14, 0x0, &(0x7f0000002000)={0x0, 0x3, 0x2, @string={0x2}}}, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f0000003ac0)={0x44, &(0x7f0000003880)={0x40, 0x17, 0x9, "7098615c0db74dfa1a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12011001368e4820480b05103792730cec19affc973e84237b27d50102030109021200010700fe0d090401"], 0x0) 2.621739482s ago: executing program 1 (id=178): syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0xa2, 0xb9, 0x5b, 0x40, 0x7392, 0xb722, 0x782, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x8, 0x7, 0x0, 0x4, "", [{{0x9, 0x4, 0xae, 0x1, 0x0, 0xff, 0xff, 0xff, 0x3}}]}}]}}, 0x0) r0 = syz_open_dev$hiddev(&(0x7f0000000040), 0x0, 0x440601) ioctl$HIDIOCSREPORT(r0, 0x400c4808, &(0x7f0000000080)={0x3, 0x1, 0x7}) 2.415169193s ago: executing program 3 (id=179): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001a00)) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_SET_FEATURES(r0, 0x4008af00, &(0x7f0000000100)=0x200000000) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) 2.103260206s ago: executing program 3 (id=180): syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r0) syz_usb_connect$cdc_ncm(0x5, 0x72, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902"], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000300)={0x24, 0x0, 0x0, &(0x7f0000000080), 0x0}, 0x0) syz_usb_control_io$lan78xx(r1, 0x0, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r2, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) r3 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r3, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)=ANY=[], 0x0) r4 = syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) ioctl$EVIOCGKEYCODE_V2(r4, 0x80284504, &(0x7f00000000c0)=""/231) r5 = syz_open_dev$evdev(0x0, 0x0, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) ioctl$EVIOCRMFF(r5, 0x40044581, &(0x7f0000000040)=0x7) 565.837157ms ago: executing program 1 (id=181): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001581c2908570b28d4b9486602030109021b00010001000b0904c8020103010203090504"], 0x0) 315.206889ms ago: executing program 2 (id=182): r0 = syz_usb_connect(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000231bfef20861201202d060000000109022400c50000800009040d000294d29a000905060200020d0006090582020002"], 0x0) syz_usb_ep_read(r0, 0x6, 0x0, 0x0) r1 = syz_usb_connect(0x0, 0x57, &(0x7f0000000000)=ANY=[@ANYBLOB="12010102882333404f17cf8af43901020301"], &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x201, 0x75, 0xfd, 0x1c, 0x40, 0xeb1, 0x7007, 0x205, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x77, 0x9, 0x10, 0x3, "", [{{0x9, 0x4, 0xca, 0xe7, 0x1, 0xff, 0x0, 0xff, 0x94, [], [{{0x9, 0x5, 0x4, 0x0, 0x400, 0x4, 0x6, 0x3}}]}}]}}]}}, 0x0) syz_usb_connect$printer(0x1, 0x0, 0x0, 0x0) syz_usb_disconnect(r1) r2 = syz_usb_connect$midi(0x5, 0x31, &(0x7f00000037c0)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0x40, 0x1235, 0x8204, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1f, 0x1, 0x1, 0xcf, 0x40, 0x3, "", {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3, 0x0, 0xd3, [@midi_in_jack={0x6, 0x24, 0x2, 0x2, 0x5, 0xf}, @ms_header={0x7, 0x24, 0x1, 0x9, 0x7}]}}}}}]}}, &(0x7f00000039c0)={0x0, 0x0, 0x0, 0x0}) r3 = syz_usb_connect(0x0, 0x2d, 0x0, 0x0) syz_usb_disconnect(r2) r4 = syz_usb_connect$cdc_ncm(0x5, 0x72, &(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$lan78xx(0xffffffffffffffff, 0x0, &(0x7f0000001040)={0x34, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x2, 0x0) ioctl$EVIOCGMASK(r5, 0x80104592, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)}) r6 = syz_usb_connect(0x3, 0x24, &(0x7f0000000340)={{0x12, 0x1, 0x310, 0x1a, 0xcf, 0x3, 0x40, 0x423, 0xa, 0x5fd8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0xac, 0x10, 0xf9, "", [{{0x9, 0x4, 0x8a, 0x1, 0x0, 0x40, 0x6c, 0x59, 0x9}}]}}]}}, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x15555899}) syz_usb_control_io$uac2(r6, 0x0, 0x0) r7 = syz_open_dev$evdev(&(0x7f0000000180), 0x0, 0x0) ioctl$EVIOCSKEYCODE_V2(r7, 0x80104592, &(0x7f0000000200)={0x0, 0x16, 0x0, 0x1000101, "0020946fc67f0000201b14700c1e0ac74f000000001600000000000900"}) syz_usb_connect$hid(0x2, 0x36, 0x0, 0x0) syz_open_dev$evdev(0x0, 0x80000000002, 0x30004) r8 = syz_open_dev$evdev(&(0x7f0000000000), 0x0, 0x0) ioctl$EVIOCGMASK(r8, 0x80104592, &(0x7f0000000300)={0x0, 0xffffffffffffff36, &(0x7f0000000200)="952bb3e006ae9a4c3a"}) syz_usb_ep_write(r4, 0x81, 0x3, &(0x7f0000000080)="0041c3") syz_usb_connect(0x2, 0x1b, &(0x7f00000005c0)={{0x12, 0x1, 0x310, 0xc1, 0x91, 0x1, 0x8, 0x10b8, 0x1f98, 0x3da2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x9, 0x0, 0x2, 0x58, 0x90, 0x5}}]}}, &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$rtl8150(r1, &(0x7f00000002c0)={0x14, &(0x7f0000000140)={0x20, 0xd, 0x2a, {0x2a, 0xc, "1ed275041d042f7a9394897e75fdebf6e42eb731afd3261d8ba0370c2c9230f1e5a612bc729e7d9b"}}, &(0x7f0000000240)={0x0, 0x3, 0x4e, @string={0x4e, 0x3, "d99d95c8b9811f0fb783bff36a56c49111760ac019b4b6201a39f7f34626cd72566890cb4014af5b46f9c44125494b43b12769a2f84dafb1011cd3168c7d0252e72cd73787c02baa12418e73"}}}, &(0x7f0000000680)={0x2c, &(0x7f0000000440)={0x0, 0x31, 0xec, "36e4721ec0939d9090657580937f46d7c6273674d29da2e6564aed42e9eab124ebf9527715118c8059c7509d3550600bb7e40e33438f181a8edcff56c4d4641036f09fafc81b6d4e1973be182e97731bf8d375dbbe4412cc539ab602a4bf6379c1292a4026d560ea1a281265de46788fc134865ade2016b6bfdd0d9dda86795c4576e2e03e13968098147d608fef59e22993e9bd66a6ac6f1d42f095f5a4af30cf4e61bc70309401b5df46af3a4ef81942fda6ead3a0a902120e95cbe7aaf80ee383dfa92267c3887d4905b4e75dae0fc3342b4d29c1b829f239fe1f39cd395d60fa5f685f0e20d239645a3c"}, &(0x7f0000000540)={0x0, 0xa, 0x1, 0x9}, &(0x7f0000000580)={0x0, 0x8, 0x1, 0x3}, 0x0, &(0x7f0000000640)={0x40, 0x5, 0x4, "0572d000"}}) syz_usb_connect(0x0, 0x5a, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000060f94d100d05020027230102030109024840020000000009047d04031d5abf0009050400005539000009050b00000000000009050200000005000009047d01013481af0009a00e00230000690009"], 0x0) 0s ago: executing program 0 (id=183): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000180)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f000905", @ANYRES64], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="80000f00000049003d140f3c36919790"], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000100), 0x0, 0x0) ioctl$HIDIOCSREPORT(r1, 0x400c4808, &(0x7f0000000000)={0x2, 0x100, 0x81}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.29' (ED25519) to the list of known hosts. [ 74.668023][ T5575] cgroup: Unknown subsys name 'net' [ 74.899518][ T5575] cgroup: Unknown subsys name 'cpuset' [ 74.955467][ T5575] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.617409][ T5575] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.019496][ T5597] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.023999][ T5597] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.026788][ T5599] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.027628][ T5597] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.040230][ T5597] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.041325][ T5597] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.070742][ T5597] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.086943][ T60] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.087223][ T5600] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.093274][ T60] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.103228][ T60] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.110995][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.120377][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.123529][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.124422][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.198491][ T60] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.213029][ T60] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.223487][ T60] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.230162][ T60] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.231240][ T60] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.012401][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.012593][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.012738][ T5587] bridge_slave_0: entered allmulticast mode [ 81.025902][ T5587] bridge_slave_0: entered promiscuous mode [ 81.072952][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.073224][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.073452][ T5587] bridge_slave_1: entered allmulticast mode [ 81.076229][ T5587] bridge_slave_1: entered promiscuous mode [ 81.085927][ T60] Bluetooth: hci3: command tx timeout [ 81.143549][ T5588] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.143763][ T5588] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.143901][ T5588] bridge_slave_0: entered allmulticast mode [ 81.146947][ T5588] bridge_slave_0: entered promiscuous mode [ 81.149457][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.149809][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.150042][ T5589] bridge_slave_0: entered allmulticast mode [ 81.154072][ T5589] bridge_slave_0: entered promiscuous mode [ 81.160528][ T5586] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.160825][ T5586] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.161075][ T5586] bridge_slave_0: entered allmulticast mode [ 81.165070][ T60] Bluetooth: hci0: command tx timeout [ 81.165290][ T5586] bridge_slave_0: entered promiscuous mode [ 81.190761][ T5588] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.191066][ T5588] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.191299][ T5588] bridge_slave_1: entered allmulticast mode [ 81.194607][ T5588] bridge_slave_1: entered promiscuous mode [ 81.198276][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.198572][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.198815][ T5589] bridge_slave_1: entered allmulticast mode [ 81.202118][ T5589] bridge_slave_1: entered promiscuous mode [ 81.203494][ T5586] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.203790][ T5586] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.204018][ T5586] bridge_slave_1: entered allmulticast mode [ 81.209464][ T5586] bridge_slave_1: entered promiscuous mode [ 81.224420][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.246017][ T60] Bluetooth: hci1: command tx timeout [ 81.324974][ T60] Bluetooth: hci2: command tx timeout [ 81.329630][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.392980][ T5588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.401004][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.411007][ T5586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.433279][ T5588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.439123][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.445858][ T5586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.451275][ T5587] team0: Port device team_slave_0 added [ 81.513842][ T5587] team0: Port device team_slave_1 added [ 81.621854][ T5588] team0: Port device team_slave_0 added [ 81.858843][ T5589] team0: Port device team_slave_0 added [ 81.861610][ T5586] team0: Port device team_slave_0 added [ 81.883045][ T5588] team0: Port device team_slave_1 added [ 81.892662][ T5589] team0: Port device team_slave_1 added [ 81.903481][ T5586] team0: Port device team_slave_1 added [ 81.912272][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.912290][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.912315][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.991692][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.991702][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 81.991716][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.045981][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.045991][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.046004][ T5588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.066129][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.066144][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.066168][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.071471][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.071483][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.071506][ T5586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.077610][ T5588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.077623][ T5588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.077646][ T5588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.086550][ T5586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.086562][ T5586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.086586][ T5586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.090094][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.090106][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.090131][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.299956][ T5587] hsr_slave_0: entered promiscuous mode [ 82.302211][ T5587] hsr_slave_1: entered promiscuous mode [ 82.375449][ T5588] hsr_slave_0: entered promiscuous mode [ 82.376855][ T5588] hsr_slave_1: entered promiscuous mode [ 82.377911][ T5588] debugfs: 'hsr0' already exists in 'hsr' [ 82.377989][ T5588] Cannot create hsr debugfs directory [ 82.383967][ T5586] hsr_slave_0: entered promiscuous mode [ 82.385640][ T5586] hsr_slave_1: entered promiscuous mode [ 82.388053][ T5586] debugfs: 'hsr0' already exists in 'hsr' [ 82.388075][ T5586] Cannot create hsr debugfs directory [ 82.402036][ T5589] hsr_slave_0: entered promiscuous mode [ 82.404249][ T5589] hsr_slave_1: entered promiscuous mode [ 82.406781][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 82.406802][ T5589] Cannot create hsr debugfs directory [ 83.165246][ T60] Bluetooth: hci3: command tx timeout [ 83.246116][ T60] Bluetooth: hci0: command tx timeout [ 83.282456][ T5587] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.325518][ T60] Bluetooth: hci1: command tx timeout [ 83.350401][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.359592][ T5587] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.401448][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.407264][ T60] Bluetooth: hci2: command tx timeout [ 83.408054][ T5587] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.452150][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.471420][ T5587] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.510248][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.627611][ T5588] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 83.668336][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.670895][ T5588] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 83.698156][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.701878][ T5588] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 83.728722][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 83.748344][ T5588] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 83.789136][ T5588] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 83.917595][ T5586] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 83.953896][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 83.961659][ T5586] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 83.988081][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 83.993718][ T5586] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.018237][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.050512][ T5586] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.068293][ T5586] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.213630][ T5589] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.249869][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 84.258805][ T5589] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.288305][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 84.293574][ T5589] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.309729][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 84.317932][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.329932][ T5589] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.371049][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 84.471518][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.527387][ T4187] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.527539][ T4187] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.583320][ T172] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.583463][ T172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.620184][ T5588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.719935][ T5588] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.760310][ T5586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.768271][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.768676][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.819145][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.819278][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.887623][ T5586] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.951265][ T1030] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.951474][ T1030] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.034775][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.044630][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.044792][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.169636][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.230274][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.242462][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.245806][ T60] Bluetooth: hci3: command tx timeout [ 85.300982][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.301090][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.327412][ T60] Bluetooth: hci0: command tx timeout [ 85.408428][ T60] Bluetooth: hci1: command tx timeout [ 85.488993][ T60] Bluetooth: hci2: command tx timeout [ 85.866133][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.311980][ T5588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.373668][ T5587] veth0_vlan: entered promiscuous mode [ 86.442679][ T5587] veth1_vlan: entered promiscuous mode [ 86.552556][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.658775][ T37] cfg80211: failed to load regulatory.db [ 86.711311][ T5588] veth0_vlan: entered promiscuous mode [ 86.730062][ T5587] veth0_macvtap: entered promiscuous mode [ 86.762654][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.763780][ T5587] veth1_macvtap: entered promiscuous mode [ 86.790185][ T5588] veth1_vlan: entered promiscuous mode [ 86.869660][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.892595][ T5586] veth0_vlan: entered promiscuous mode [ 86.903578][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.942984][ T67] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.962704][ T67] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.973823][ T5586] veth1_vlan: entered promiscuous mode [ 86.982935][ T67] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.006908][ T5588] veth0_macvtap: entered promiscuous mode [ 87.010450][ T67] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.120640][ T5588] veth1_macvtap: entered promiscuous mode [ 87.135910][ T5589] veth0_vlan: entered promiscuous mode [ 87.325213][ T60] Bluetooth: hci3: command tx timeout [ 87.345259][ T5589] veth1_vlan: entered promiscuous mode [ 87.393786][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.404958][ T60] Bluetooth: hci0: command tx timeout [ 87.455993][ T5586] veth0_macvtap: entered promiscuous mode [ 87.461165][ T5588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.485286][ T60] Bluetooth: hci1: command tx timeout [ 87.487096][ T172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.487115][ T172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.492535][ T5586] veth1_macvtap: entered promiscuous mode [ 87.540341][ T172] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.547405][ T172] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.565970][ T60] Bluetooth: hci2: command tx timeout [ 87.566051][ T172] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.574424][ T172] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.699028][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.705161][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.705178][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.757901][ T5589] veth0_macvtap: entered promiscuous mode [ 87.777930][ T5586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.864234][ T5589] veth1_macvtap: entered promiscuous mode [ 87.940403][ T67] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.969659][ T67] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.974598][ T67] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.983351][ T172] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.142849][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.225269][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.225284][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.284160][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.478242][ T4187] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.480559][ T4187] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.485152][ T4187] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.619983][ T4187] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.699500][ T67] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.699518][ T67] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.282475][ T5746] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 89.358804][ T4027] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.358822][ T4027] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.536192][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.536210][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.677923][ T172] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.677940][ T172] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.752769][ T57] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.752786][ T57] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.758337][ T5761] syz.3.4 (5761) used greatest stack depth: 18880 bytes left [ 93.572872][ T5800] syz.1.18 (5800) used greatest stack depth: 18688 bytes left [ 97.991521][ T5888] kvm: user requested TSC rate below hardware speed [ 99.648062][ T5907] PM: suspend entry (deep) [ 99.757665][ T5903] fuse: root generation should be zero [ 100.487190][ T4187] Filesystems sync: 0.814 seconds [ 100.667037][ T5907] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 100.667618][ T5907] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.753829][ T5907] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 100.822960][ T5907] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 100.823046][ T5907] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 100.882970][ T5907] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 101.034526][ T5907] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 101.034635][ T5907] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 101.950136][ T5907] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 102.086874][ T5907] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 102.086956][ T5907] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.177741][ T5907] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 102.299134][ T5907] Freezing user space processes [ 102.410791][ T5907] Freezing user space processes completed (elapsed 0.111 seconds) [ 102.411066][ T5907] OOM killer disabled. [ 102.411072][ T5907] Freezing remaining freezable tasks [ 102.425414][ T5907] Freezing remaining freezable tasks completed (elapsed 0.014 seconds) [ 102.426161][ T5907] printk: Suspending console(s) (use no_console_suspend to debug) [ 102.690241][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 102.867956][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 103.085005][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 103.574398][ T5907] vhci_hcd vhci_hcd.14: suspend vhci_hcd [ 103.574499][ T5907] vhci_hcd vhci_hcd.13: suspend vhci_hcd [ 103.574596][ T5907] vhci_hcd vhci_hcd.12: suspend vhci_hcd [ 103.574691][ T5907] vhci_hcd vhci_hcd.11: suspend vhci_hcd [ 103.574785][ T5907] vhci_hcd vhci_hcd.10: suspend vhci_hcd [ 103.574993][ T5907] vhci_hcd vhci_hcd.9: suspend vhci_hcd [ 103.575089][ T5907] vhci_hcd vhci_hcd.8: suspend vhci_hcd [ 103.575184][ T5907] vhci_hcd vhci_hcd.7: suspend vhci_hcd [ 103.575278][ T5907] vhci_hcd vhci_hcd.6: suspend vhci_hcd [ 103.575373][ T5907] vhci_hcd vhci_hcd.5: suspend vhci_hcd [ 103.575470][ T5907] vhci_hcd vhci_hcd.4: suspend vhci_hcd [ 103.575563][ T5907] vhci_hcd vhci_hcd.3: suspend vhci_hcd [ 103.575657][ T5907] vhci_hcd vhci_hcd.2: suspend vhci_hcd [ 103.575750][ T5907] vhci_hcd vhci_hcd.1: suspend vhci_hcd [ 103.575844][ T5907] vhci_hcd vhci_hcd.0: suspend vhci_hcd [ 103.615624][ T5944] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 104.126391][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 104.378554][ T5907] ACPI: PM: Preparing to enter system sleep state S3 [ 104.381073][ T5907] ACPI: PM: Saving platform NVS memory [ 104.397398][ T5907] Disabling non-boot CPUs ... [ 104.539813][ T5907] smpboot: CPU 1 is now offline [ 104.570982][ T5907] ACPI: PM: Low-level resume complete [ 104.571030][ T5907] ACPI: PM: Restoring platform NVS memory [ 104.593083][ T5907] Enabling non-boot CPUs ... [ 104.594146][ T5907] smpboot: Booting Node 0 Processor 1 APIC 0x1 [ 104.645652][ T5907] CPU1 is up [ 104.647214][ T5907] ACPI: PM: Waking up from system sleep state S3 [ 104.716361][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 104.831189][ T6019] virtio_scsi virtio0: 1/0/0 default/read/poll queues [ 104.896955][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 105.116408][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 105.399379][ T5907] OOM killer enabled. [ 105.399387][ T5907] Restarting tasks: Starting [ 105.495429][ T5907] Restarting tasks: Done [ 105.495851][ T5907] random: crng reseeded on system resumption [ 105.671220][ T5907] PM: suspend exit [ 106.228214][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 106.786349][ T60] Bluetooth: hci3: command 0x0c1a tx timeout [ 106.946370][ T60] Bluetooth: hci1: command 0x0c1a tx timeout [ 107.186426][ T60] Bluetooth: hci0: command 0x0c1a tx timeout [ 107.989649][ T6087] syz.1.74 (6087) used greatest stack depth: 17664 bytes left [ 108.306622][ T60] Bluetooth: hci2: command 0x0c1a tx timeout [ 108.545411][ T6123] Zero length message leads to an empty skb [ 108.555785][ T6120] kvm: pic: single mode not supported [ 108.558728][ T6120] kvm: pic: level sensitive irq not supported [ 108.560211][ T6120] kvm: pic: single mode not supported [ 108.560221][ T6120] kvm: pic: level sensitive irq not supported [ 108.563928][ T6120] kvm: pic: level sensitive irq not supported [ 113.250107][ T6213] kvm: pic: single mode not supported [ 113.251343][ T6213] kvm: pic: level sensitive irq not supported [ 113.272910][ T6213] kvm: pic: single mode not supported [ 113.272922][ T6213] kvm: pic: level sensitive irq not supported [ 113.278739][ T6213] kvm: pic: level sensitive irq not supported [ 115.433895][ T6265] process 'syz.1.138' launched './file2' with NULL argv: empty string added [ 115.779964][ T6272] kvm: pic: single mode not supported [ 115.783967][ T6272] kvm: pic: level sensitive irq not supported [ 115.784751][ T6272] kvm: pic: single mode not supported [ 115.784762][ T6272] kvm: pic: level sensitive irq not supported [ 115.808167][ T6272] kvm: pic: level sensitive irq not supported [ 116.550677][ T6298] tun0: tun_chr_ioctl cmd 35111 [ 117.294245][ T6312] kvm_intel: VMCS ffff8880321d0000, last attempted VM-entry on CPU 0 [ 117.294265][ T6312] kvm_intel: *** Guest State *** [ 117.294271][ T6312] kvm_intel: CR0: actual=0x0000000000000030, shadow=0x0000000060000010, gh_mask=fffffffffffefff7 [ 117.294288][ T6312] kvm_intel: CR4: actual=0x0000000000002040, shadow=0x0000000000000000, gh_mask=fffffffffffff871 [ 117.294300][ T6312] kvm_intel: CR3 = 0x0000000000000000 [ 117.294310][ T6312] kvm_intel: PDPTR0 = 0x0000000000000000 PDPTR1 = 0x0000000000000000 [ 117.294324][ T6312] kvm_intel: PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 117.294334][ T6312] kvm_intel: RSP = 0x0000000000000000 RIP = 0x000000000000fff0 [ 117.294346][ T6312] kvm_intel: RFLAGS=0x00000002 DR7 = 0x0000000000000400 [ 117.294370][ T6312] kvm_intel: Sysenter RSP=0000000000000000 CS:RIP=0000:0000000000000000 [ 117.294388][ T6312] kvm_intel: CS: sel=0xf000, attr=0x0009b, limit=0x0000ffff, base=0x00000000ffff0000 [ 117.294413][ T6312] kvm_intel: DS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 117.294435][ T6312] kvm_intel: SS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 117.294458][ T6312] kvm_intel: ES: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 117.294482][ T6312] kvm_intel: FS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 117.294506][ T6312] kvm_intel: GS: sel=0x0000, attr=0x00093, limit=0x0000ffff, base=0x0000000000000000 [ 117.294526][ T6312] kvm_intel: GDTR: limit=0x0000ffff, base=0x0000000000000000 [ 117.294546][ T6312] kvm_intel: LDTR: sel=0x0000, attr=0x00082, limit=0x0000ffff, base=0x0000000000000000 [ 117.294566][ T6312] kvm_intel: IDTR: limit=0x0000ffff, base=0x0000000000000000 [ 117.294586][ T6312] kvm_intel: TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 117.294782][ T6312] kvm_intel: EFER= 0x0000000000000000 [ 117.294794][ T6312] kvm_intel: PAT = 0x0007040600070406 [ 117.294807][ T6312] kvm_intel: DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 117.294820][ T6312] kvm_intel: Interruptibility = 00000008 ActivityState = 00000000 [ 117.294835][ T6312] kvm_intel: *** Host State *** [ 117.294846][ T6312] kvm_intel: RIP = 0xffffffff8b4fcd70 RSP = 0xffffc90007467698 [ 117.294868][ T6312] kvm_intel: CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 117.294889][ T6312] kvm_intel: FSBase=00007f7c781166c0 GSBase=ffff8881259f2000 TRBase=fffffe0000003000 [ 117.294908][ T6312] kvm_intel: GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 117.294926][ T6312] kvm_intel: CR0=0000000080050033 CR3=000000003395c000 CR4=00000000003526f0 [ 117.294945][ T6312] kvm_intel: Sysenter RSP=fffffe0000003000 CS:RIP=0010:ffffffff81001df0 [ 117.294961][ T6312] kvm_intel: EFER= 0x0000000000000d01 [ 117.294971][ T6312] kvm_intel: PAT = 0x0407050600070106 [ 117.294983][ T6312] kvm_intel: *** Control State *** [ 117.294990][ T6312] kvm_intel: CPUBased=0xb5a06dfa SecondaryExec=0x000000e3 TertiaryExec=0x0000000000000000 [ 117.295004][ T6312] kvm_intel: PinBased=0x0000007f EntryControls=0000d1ff ExitControls=002befff [ 117.295021][ T6312] kvm_intel: ExceptionBitmap=00060042 PFECmask=00000000 PFECmatch=00000000 [ 117.295034][ T6312] kvm_intel: VMEntry: intr_info=80000604 errcode=00000000 ilen=00000000 [ 117.295047][ T6312] kvm_intel: VMExit: intr_info=00000000 errcode=00000000 ilen=00000000 [ 117.295060][ T6312] kvm_intel: reason=00000000 qualification=0000000000000000 [ 117.295070][ T6312] kvm_intel: IDTVectoring: info=00000000 errcode=00000000 [ 117.295082][ T6312] kvm_intel: TSC Offset = 0xffffffbe99599976 [ 117.295091][ T6312] TPR Threshold = 0x00 [ 117.295107][ T6312] kvm_intel: APIC-access addr = 0x0000000062184000 virt-APIC addr = 0x000000003f98f000 [ 117.295129][ T6312] kvm_intel: EPT pointer = 0x000000005dcff05e [ 117.295139][ T6312] kvm_intel: Virtual processor ID = 0x0001 [ 121.595639][ T5595] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.601086][ T5697] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 121.768202][ T5595] usb 1-1: Using ep0 maxpacket: 16 [ 121.776370][ T5697] usb 2-1: Using ep0 maxpacket: 8 [ 121.790453][ T5697] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 121.790484][ T5697] usb 2-1: config 179 has no interface number 0 [ 121.790526][ T5697] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 121.790550][ T5697] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 1024 [ 121.790576][ T5697] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 121.790599][ T5697] usb 2-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 41728, setting to 1024 [ 121.790623][ T5697] usb 2-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 121.790663][ T5697] usb 2-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 121.790683][ T5697] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.791051][ T5595] usb 1-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 121.791094][ T5595] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.791118][ T5595] usb 1-1: config 7 interface 0 altsetting 5 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.791139][ T5595] usb 1-1: config 7 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 121.791163][ T5595] usb 1-1: config 7 interface 0 has no altsetting 0 [ 121.791191][ T5595] usb 1-1: New USB device found, idVendor=0458, idProduct=5010, bcdDevice= 0.00 [ 121.791212][ T5595] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.994647][ T6378] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 122.511457][ T6378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 122.554369][ T6378] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 122.662982][ T5595] input: HID 0458:5010 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:7.0/0003:0458:5010.0001/input/input6 [ 122.810298][ T5684] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 122.869299][ T5697] input: Generic X-Box pad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input5 [ 122.934511][ C0] xpad 2-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 122.934574][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 122.991621][ T37] usb 2-1: USB disconnect, device number 2 [ 123.056915][ T5684] usb 4-1: Using ep0 maxpacket: 32 [ 123.129093][ T5684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 123.160814][ T5684] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 123.160849][ T5684] usb 4-1: can't read configurations, error -71 [ 123.505966][ T5595] kye 0003:0458:5010.0001: input,hiddev0,hidraw0: USB HID v2.00 Device [HID 0458:5010] on usb-dummy_hcd.0-1/input0 [ 123.616719][ T5595] usb 1-1: USB disconnect, device number 2 [ 123.656378][ T5698] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 123.810965][ T6388] fido_id[6388]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 123.857411][ T5698] usb 3-1: Using ep0 maxpacket: 32 [ 123.860980][ T5698] usb 3-1: config 0 has an invalid interface number: 132 but max is 0 [ 123.860995][ T5698] usb 3-1: config 0 has no interface number 0 [ 123.861019][ T5698] usb 3-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 123.883773][ T5698] usb 3-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 123.883800][ T5698] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.883818][ T5698] usb 3-1: Product: syz [ 123.883830][ T5698] usb 3-1: Manufacturer: syz [ 123.883843][ T5698] usb 3-1: SerialNumber: syz [ 124.090438][ T5698] usb 3-1: config 0 descriptor?? [ 124.150746][ T5698] em28xx 3-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 124.150784][ T5698] em28xx 3-1:0.132: Video interface 132 found: [ 124.318268][ T37] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 124.366482][ T5684] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 124.482532][ T37] usb 2-1: config 8 has an invalid interface number: 174 but max is 0 [ 124.482558][ T37] usb 2-1: config 8 has no interface number 0 [ 124.482580][ T37] usb 2-1: config 8 interface 174 has no altsetting 0 [ 124.484944][ T37] usb 2-1: New USB device found, idVendor=7392, idProduct=b722, bcdDevice= 7.82 [ 124.484969][ T37] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.484982][ T37] usb 2-1: Product: syz [ 124.484989][ T37] usb 2-1: Manufacturer: syz [ 124.485031][ T37] usb 2-1: SerialNumber: syz [ 124.514540][ T5698] em28xx 3-1:0.132: unknown em28xx chip ID (0) [ 124.538037][ T5595] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 124.578763][ T5684] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.582194][ T5684] usb 4-1: New USB device found, idVendor=1235, idProduct=8204, bcdDevice= 0.40 [ 124.582220][ T5684] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.582239][ T5684] usb 4-1: Product: syz [ 124.582252][ T5684] usb 4-1: Manufacturer: syz [ 124.582266][ T5684] usb 4-1: SerialNumber: syz [ 124.720125][ T5595] usb 1-1: Using ep0 maxpacket: 32 [ 124.743391][ T5595] usb 1-1: config 7 has an invalid interface number: 1 but max is 0 [ 124.743413][ T5595] usb 1-1: config 7 has no interface number 0 [ 124.743443][ T5595] usb 1-1: config 7 interface 1 has no altsetting 0 [ 124.792502][ T5595] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=d5.27 [ 124.792528][ T5595] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.792594][ T5595] usb 1-1: Product: syz [ 124.792607][ T5595] usb 1-1: Manufacturer: syz [ 124.792620][ T5595] usb 1-1: SerialNumber: syz [ 125.024246][ T37] usb 2-1: USB disconnect, device number 3 [ 125.074189][ T6394] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.074942][ T6394] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.161761][ T5698] em28xx 3-1:0.132: failed to trigger write to i2c address 0xa0 (error=-5) [ 125.161844][ T5698] em28xx 3-1:0.132: failed to read eeprom (err=-5) [ 125.161885][ T5698] em28xx 3-1:0.132: em28xx_i2c_register: em28xx_i2_eeprom failed! retval [-5] [ 125.225022][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.247594][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.257912][ T5698] em28xx 3-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 125.257936][ T5698] em28xx 3-1:0.132: analog set to bulk mode. [ 125.274213][ T6064] em28xx 3-1:0.132: Registering V4L2 extension [ 125.298174][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.332234][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.374494][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.374685][ T6395] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.395531][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.419748][ T6384] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 125.423059][ T6384] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.464781][ T6395] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 125.473133][ T5595] usb 1-1: selecting invalid altsetting 1 [ 125.535237][ T5698] usb 3-1: USB disconnect, device number 2 [ 125.543524][ T5595] dvb_ttusb_budget: ttusb_init_controller: error [ 125.543680][ T5595] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 125.620102][ T6064] em28xx 3-1:0.132: failed to trigger read from i2c address 0x4a (error=-19) [ 125.648426][ T5698] em28xx 3-1:0.132: Disconnecting em28xx [ 125.655168][ T6064] em28xx 3-1:0.132: failed to trigger read from i2c address 0x48 (error=-19) [ 125.885030][ T6064] em28xx 3-1:0.132: Config register raw data: 0xffffffed [ 125.885053][ T6064] em28xx 3-1:0.132: AC97 chip type couldn't be determined [ 125.885072][ T6064] em28xx 3-1:0.132: No AC97 audio processor [ 125.906932][ T37] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.048111][ T6064] usb 3-1: Decoder not found [ 126.048131][ T6064] em28xx 3-1:0.132: failed to create media graph [ 126.048202][ T6064] em28xx 3-1:0.132: V4L2 device video103 deregistered [ 126.079407][ T37] usb 2-1: Using ep0 maxpacket: 8 [ 126.084120][ T37] usb 2-1: config 0 has an invalid interface number: 200 but max is 0 [ 126.084144][ T37] usb 2-1: config 0 has no interface number 0 [ 126.084186][ T37] usb 2-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 126.084208][ T37] usb 2-1: config 0 interface 200 has no altsetting 0 [ 126.103546][ T5595] DVB: Unable to find symbol cx22700_attach() [ 126.133966][ T37] usb 2-1: New USB device found, idVendor=0b57, idProduct=d428, bcdDevice=48.b9 [ 126.134002][ T37] usb 2-1: New USB device strings: Mfr=102, Product=2, SerialNumber=3 [ 126.134021][ T37] usb 2-1: Product: syz [ 126.134033][ T37] usb 2-1: Manufacturer: syz [ 126.134046][ T37] usb 2-1: SerialNumber: syz [ 126.206082][ T6064] INFO: trying to register non-static key.[ 126.206082][ T6064] INFO: trying to register non-static key. [ 126.206094][ T6064] The code is fine but needs lockdep annotation, or maybe [ 126.206102][ T6064] you didn't initialize this object before use? [ 126.206108][ T6064] turning off the locking correctness validator. [ 126.206133][ T6064] CPU: 1 UID: 0 PID: 6064 Comm: kworker/1:8 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.206148][ T6064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.206154][ T6064] Workqueue: events request_module_async [ 126.206180][ T6064] Call Trace: [ 126.206187][ T6064] [ 126.206195][ T6064] dump_stack_lvl+0xe8/0x150 [ 126.206222][ T6064] assign_lock_key+0x133/0x150 [ 126.206242][ T6064] register_lock_class+0xcc/0x2e0 [ 126.206270][ T6064] __lock_acquire+0xaf/0x2e40 [ 126.206287][ T6064] ? ret_from_fork_asm+0x1a/0x30 [ 126.206313][ T6064] ? stack_trace_save+0xa9/0x100 [ 126.206339][ T6064] ? __pfx_stack_trace_save+0x10/0x10 [ 126.206369][ T6064] lock_acquire+0x115/0x350 [ 126.206396][ T6064] ? __wake_up_common_lock+0x2f/0x1f0 [ 126.206427][ T6064] rt_spin_lock+0x83/0x400 [ 126.206441][ T6064] ? __wake_up_common_lock+0x2f/0x1f0 [ 126.206454][ T6064] ? __pfx_rt_spin_lock+0x10/0x10 [ 126.206468][ T6064] __wake_up_common_lock+0x2f/0x1f0 [ 126.206483][ T6064] __vb2_queue_cancel+0x2de/0xdc0 [ 126.206510][ T6064] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.206527][ T6064] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.206545][ T6064] ? __vb2_cleanup_fileio+0x134/0x1f0 [ 126.206574][ T6064] vb2_core_queue_release+0x2f/0x150 [ 126.206596][ T6064] vb2_video_unregister_device+0x15b/0x200 [ 126.206611][ T6064] em28xx_v4l2_init+0x1c60/0x3140 [ 126.206624][ T6064] em28xx_init_extension+0x120/0x1d0 [ 126.206639][ T6064] ? process_one_work+0x7fd/0x1480 [ 126.206656][ T6064] process_one_work+0xaaf/0x1480 [ 126.206682][ T6064] ? __pfx_process_one_work+0x10/0x10 [ 126.206699][ T6064] ? do_raw_spin_lock+0x12b/0x2f0 [ 126.206726][ T6064] ? assign_work+0x3cf/0x5d0 [ 126.206745][ T6064] worker_thread+0xb05/0x10d0 [ 126.206757][ T6064] ? __kthread_parkme+0x71/0x1f0 [ 126.206769][ T6064] kthread+0x388/0x470 [ 126.206781][ T6064] ? __pfx_worker_thread+0x10/0x10 [ 126.206790][ T6064] ? __pfx_kthread+0x10/0x10 [ 126.206806][ T6064] ret_from_fork+0x514/0xb70 [ 126.206831][ T6064] ? __pfx_ret_from_fork+0x10/0x10 [ 126.206856][ T6064] ? __switch_to+0xc89/0x1420 [ 126.206878][ T6064] ? __pfx_kthread+0x10/0x10 [ 126.206900][ T6064] ret_from_fork_asm+0x1a/0x30 [ 126.206916][ T6064] [ 126.207760][ T37] usb 2-1: config 0 descriptor?? [ 126.208725][ T6404] ------------[ cut here ]------------ [ 126.208734][ T6404] mas->ld_seq != lock_sequence(map) [ 126.208749][ T6404] WARNING: lib/maple_tree.c:1188 at mas_find+0xa02/0xca0, CPU#1: modprobe/6404 [ 126.208780][ T6404] Modules linked in: [ 126.208800][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.208819][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.208830][ T6404] RIP: 0010:mas_find+0xa02/0xca0 [ 126.208849][ T6404] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 126.208864][ T6404] RSP: 0018:ffffc9000764f1f8 EFLAGS: 00010293 [ 126.208880][ T6404] RAX: ffffffff8b48c241 RBX: 1ffff92000ec9e5d RCX: ffff8880320a3e80 [ 126.208894][ T6404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.208905][ T6404] RBP: 000000000000005a R08: 0000000000000000 R09: 0000000000000000 [ 126.208916][ T6404] R10: 0000000000000100 R11: 0000000000000004 R12: 00000000ffffffff [ 126.208927][ T6404] R13: ffffc9000764f2f4 R14: ffffc9000764f2a0 R15: ffffc9000764f2e8 [ 126.208941][ T6404] FS: 0000000000000000(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 126.208956][ T6404] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 126.208969][ T6404] CR2: 000020000081e000 CR3: 000000003b500000 CR4: 00000000003526f0 [ 126.208985][ T6404] DR0: 0000000000000013 DR1: 00000000000001f8 DR2: 0000000000000084 [ 126.209003][ T6404] DR3: ffffffffefffff15 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 126.209016][ T6404] Call Trace: [ 126.209023][ T6404] [ 126.209032][ T6404] validate_mm+0xff/0x4f0 [ 126.209052][ T6404] ? __pfx_validate_mm+0x10/0x10 [ 126.209073][ T6404] ? percpu_counter_add_batch+0xec/0x1d0 [ 126.209097][ T6404] vms_complete_munmap_vmas+0x925/0xbe0 [ 126.209120][ T6404] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 126.209141][ T6404] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.209158][ T6404] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.209176][ T6404] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 126.209197][ T6404] __mmap_complete+0xab/0x4b0 [ 126.209219][ T6404] ? __pfx___mmap_complete+0x10/0x10 [ 126.209240][ T6404] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.209256][ T6404] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.209287][ T6404] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.209305][ T6404] ? up_write+0x5a/0x190 [ 126.209328][ T6404] mmap_region+0x11ab/0x2230 [ 126.209355][ T6404] ? __pfx_mmap_region+0x10/0x10 [ 126.209377][ T6404] ? __lock_acquire+0x6df/0x2e40 [ 126.209419][ T6404] ? __pfx_process_measurement+0x10/0x10 [ 126.209458][ T6404] ? cap_mmap_addr+0xaf/0x100 [ 126.209480][ T6404] ? bpf_lsm_mmap_addr+0x9/0x50 [ 126.209506][ T6404] ? security_mmap_addr+0x64/0x200 [ 126.209527][ T6404] ? shmem_mapping+0xd/0x50 [ 126.209546][ T6404] ? memfd_check_seals_mmap+0xcb/0x210 [ 126.209565][ T6404] do_mmap+0xc1e/0x10b0 [ 126.209590][ T6404] ? __pfx_do_mmap+0x10/0x10 [ 126.209611][ T6404] ? rwbase_write_lock+0x550/0x720 [ 126.209634][ T6404] vm_mmap_pgoff+0x275/0x4e0 [ 126.209658][ T6404] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 126.209678][ T6404] ? __fget_files+0x2a/0x420 [ 126.209697][ T6404] ? __fget_files+0x3a8/0x420 [ 126.209714][ T6404] ? __fget_files+0x2a/0x420 [ 126.209732][ T6404] ksys_mmap_pgoff+0x4a6/0x720 [ 126.209756][ T6404] ? __x64_sys_mmap+0x7f/0x140 [ 126.209783][ T6404] do_syscall_64+0x17b/0x530 [ 126.209801][ T6404] ? irqentry_exit+0x10f/0x8f0 [ 126.209817][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.209835][ T6404] ? clear_bhb_loop+0x40/0x90 [ 126.209855][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.209873][ T6404] RIP: 0033:0x7f0c9a47f242 [ 126.209894][ T6404] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 126.209909][ T6404] RSP: 002b:00007ffd6998cb68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 126.209927][ T6404] RAX: ffffffffffffffda RBX: 00007f0c9a153000 RCX: 00007f0c9a47f242 [ 126.209940][ T6404] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f0c9a153000 [ 126.209951][ T6404] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000006000 [ 126.209962][ T6404] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd6998cc28 [ 126.209974][ T6404] R13: 00007f0c9a1560c0 R14: 00007ffd6998cfa0 R15: 00000fffad331970 [ 126.210000][ T6404] [ 126.210010][ T6404] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 126.210023][ T6404] CPU: 1 UID: 0 PID: 6404 Comm: modprobe Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 126.210043][ T6404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 126.210052][ T6404] Call Trace: [ 126.210059][ T6404] [ 126.210066][ T6404] vpanic+0x56c/0xa60 [ 126.210084][ T6404] ? __pfx__printk+0x10/0x10 [ 126.210104][ T6404] ? __pfx_vpanic+0x10/0x10 [ 126.210120][ T6404] ? is_bpf_text_address+0x292/0x2b0 [ 126.210140][ T6404] ? is_bpf_text_address+0x26/0x2b0 [ 126.210163][ T6404] panic+0xc5/0xd0 [ 126.210179][ T6404] ? __pfx_panic+0x10/0x10 [ 126.210202][ T6404] __warn+0x315/0x4c0 [ 126.210218][ T6404] ? mas_find+0xa02/0xca0 [ 126.210236][ T6404] ? mas_find+0xa02/0xca0 [ 126.210253][ T6404] __report_bug+0x276/0x570 [ 126.210272][ T6404] ? mas_find+0xa02/0xca0 [ 126.210289][ T6404] ? __pfx___report_bug+0x10/0x10 [ 126.210306][ T6404] ? irqentry_exit+0x218/0x8f0 [ 126.210322][ T6404] ? trace_irq_disable+0x3b/0x140 [ 126.210344][ T6404] ? mas_find+0xa02/0xca0 [ 126.210361][ T6404] report_bug+0x16a/0x220 [ 126.210378][ T6404] ? mas_find+0xa02/0xca0 [ 126.210393][ T6404] ? mas_find+0xa04/0xca0 [ 126.210409][ T6404] handle_bug+0x9c/0x200 [ 126.210428][ T6404] exc_invalid_op+0x1a/0x50 [ 126.210448][ T6404] asm_exc_invalid_op+0x1a/0x20 [ 126.210465][ T6404] RIP: 0010:mas_find+0xa02/0xca0 [ 126.210482][ T6404] Code: 74 08 4c 89 f7 e8 5e 39 e9 f6 49 c7 06 ff ff ff ff 31 c0 e9 16 fd ff ff e8 7b e1 7c f6 31 c0 e9 0a fd ff ff e8 6f e1 7c f6 90 <0f> 0b 90 e9 65 f7 ff ff e8 61 e1 7c f6 31 c0 e9 f0 fc ff ff e8 55 [ 126.210497][ T6404] RSP: 0018:ffffc9000764f1f8 EFLAGS: 00010293 [ 126.210512][ T6404] RAX: ffffffff8b48c241 RBX: 1ffff92000ec9e5d RCX: ffff8880320a3e80 [ 126.210526][ T6404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 126.210537][ T6404] RBP: 000000000000005a R08: 0000000000000000 R09: 0000000000000000 [ 126.210547][ T6404] R10: 0000000000000100 R11: 0000000000000004 R12: 00000000ffffffff [ 126.210559][ T6404] R13: ffffc9000764f2f4 R14: ffffc9000764f2a0 R15: ffffc9000764f2e8 [ 126.210576][ T6404] ? mas_find+0xa01/0xca0 [ 126.210595][ T6404] ? mas_find+0xa01/0xca0 [ 126.210614][ T6404] validate_mm+0xff/0x4f0 [ 126.210632][ T6404] ? __pfx_validate_mm+0x10/0x10 [ 126.210653][ T6404] ? percpu_counter_add_batch+0xec/0x1d0 [ 126.210675][ T6404] vms_complete_munmap_vmas+0x925/0xbe0 [ 126.210698][ T6404] ? __pfx_vms_complete_munmap_vmas+0x10/0x10 [ 126.210720][ T6404] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.210736][ T6404] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.210754][ T6404] ? rt_mutex_slowunlock+0x4ee/0xa20 [ 126.210775][ T6404] __mmap_complete+0xab/0x4b0 [ 126.210797][ T6404] ? __pfx___mmap_complete+0x10/0x10 [ 126.210816][ T6404] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 126.210832][ T6404] ? lockdep_hardirqs_on+0x7a/0x110 [ 126.210849][ T6404] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 126.210866][ T6404] ? up_write+0x5a/0x190 [ 126.210889][ T6404] mmap_region+0x11ab/0x2230 [ 126.210916][ T6404] ? __pfx_mmap_region+0x10/0x10 [ 126.210938][ T6404] ? __lock_acquire+0x6df/0x2e40 [ 126.210981][ T6404] ? __pfx_process_measurement+0x10/0x10 [ 126.211027][ T6404] ? cap_mmap_addr+0xaf/0x100 [ 126.211047][ T6404] ? bpf_lsm_mmap_addr+0x9/0x50 [ 126.211072][ T6404] ? security_mmap_addr+0x64/0x200 [ 126.211094][ T6404] ? shmem_mapping+0xd/0x50 [ 126.211113][ T6404] ? memfd_check_seals_mmap+0xcb/0x210 [ 126.211131][ T6404] do_mmap+0xc1e/0x10b0 [ 126.211156][ T6404] ? __pfx_do_mmap+0x10/0x10 [ 126.211176][ T6404] ? rwbase_write_lock+0x550/0x720 [ 126.211200][ T6404] vm_mmap_pgoff+0x275/0x4e0 [ 126.211223][ T6404] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 126.211244][ T6404] ? __fget_files+0x2a/0x420 [ 126.211263][ T6404] ? __fget_files+0x3a8/0x420 [ 126.211279][ T6404] ? __fget_files+0x2a/0x420 [ 126.211298][ T6404] ksys_mmap_pgoff+0x4a6/0x720 [ 126.211321][ T6404] ? __x64_sys_mmap+0x7f/0x140 [ 126.211347][ T6404] do_syscall_64+0x17b/0x530 [ 126.211364][ T6404] ? irqentry_exit+0x10f/0x8f0 [ 126.211381][ T6404] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.211398][ T6404] ? clear_bhb_loop+0x40/0x90 [ 126.211418][ T6404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.211436][ T6404] RIP: 0033:0x7f0c9a47f242 [ 126.211450][ T6404] Code: 08 00 04 00 00 eb e2 90 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 33 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 5e 5b 5d c3 0f 1f 00 c7 05 46 40 01 00 16 00 [ 126.211464][ T6404] RSP: 002b:00007ffd6998cb68 EFLAGS: 00000206 ORIG_RAX: 0000000000000009 [ 126.211482][ T6404] RAX: ffffffffffffffda RBX: 00007f0c9a153000 RCX: 00007f0c9a47f242 [ 126.211494][ T6404] RDX: 0000000000000003 RSI: 0000000000002000 RDI: 00007f0c9a153000 [ 126.211506][ T6404] RBP: 0000000000000812 R08: 0000000000000000 R09: 0000000000006000 [ 126.211518][ T6404] R10: 0000000000000812 R11: 0000000000000206 R12: 00007ffd6998cc28 [ 126.211530][ T6404] R13: 00007f0c9a1560c0 R14: 00007ffd6998cfa0 R15: 00000fffad331970 [ 126.211549][ T6404] [ 126.211794][ T6404] Kernel Offset: disabled