last executing test programs: 7.882421961s ago: executing program 2 (id=216): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x88840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(r2, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text32={0x20, 0x0}], 0x1, 0x3, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f0000000080)="66450fc7746e0a0fb51ef2ab400f79ac680080000066bba100ed0fc77310c4427d988c170500000074492e942e94fb70190c190c75a854ff048fa800b6c3f9", 0x3f}], 0x1, 0x39, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r2, 0x4080aebf, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 6.720591521s ago: executing program 2 (id=221): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./mysys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./mysys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./mysys/bus/platform/drivers/dummy_hcd/unbind\x00', 0x1, 0x0) write(r0, &(0x7f0000000200)='dummy_hcd.0', 0xb) write(0xffffffffffffffff, &(0x7f0000000400)='dummy_hcd.0', 0xb) 5.944459874s ago: executing program 0 (id=226): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x80, &(0x7f00000002c0)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000080)={0x50, 0x0, r1, {0x7, 0x29, 0x9, 0xffffffff90adedc4, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x10}}, 0x50) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) syz_fuse_handle_req(r0, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006380)={0x20, 0x0, 0x0, {0x0, 0x1c}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f00000083c0)="c91443d5daaf04b192358b692f84d66c60492a57cffd585b0068ccde45d94ded1e86d3670791c21f8e0b2153d10d45d37b72ee2fa06ad61b0a9354045a8dae1bd1cfb49f3c11fe54c17eee632d95574681e6c472eb8a1beaf3a4b88561847a0a0f05fa4a26639d7e74a0c1c2790d6a59d4073b1c55539b7c21b8550efbd5f835c56642f4be57d170e36a6bf3a995f418554f0cab342769089d0777b28daad5c0c4ba56a0bd6c0515d9bf488fdcf49a9a7bbfcf5ad78733f8119f2568daefbd0985a9916c0d048e38765cc7bb1c82e0f3c81d98e7179ec782331bc3cfb2caf58a99668420795e6a00ef41dcf5283bbb61ebaedbb7a675be4fb2d11c31f9b76936d1112c68978c73f42e145b094490d748c1456a14c23fe25e2fdaeaaa7dc0d35dcc9bbfe86361f99f4d04090d1e66aa9714ee9f4608ad66c60f500bf06a1b5b90fbe2f6c42c4b5f337393b0bb201473712c48f898c514fff84c46b50d3aaf44578f41d312bb5a73526db7818617dcb938ebdb17f92423ca2cf7ea2c611483e0baff012fd97e28558317049e4fe2d27f72796d7260b33900cd61f984c087d3c54f6aa11e389a49069ef99ca86c279598b42dd3485f09fc7e119f707438498316cf2f2bc8a293eeb1a35635989327d4f6c9ba6b2d5b9b8ee89a1e13d538b954479663223bb704af6a63ee497734410ea43bfdb0ad3708cb7155df2432c44e8468a7b77b807d345c9b94fedadfdeba12f4b6d11d16fd6dd5fff6cf896d0f40785ffca538dae61d8a5ffee814e96628cd945553e788b8d915762ca3b40124149b3c186ddd5f7af5b75f4725444f2f7e54b999c93e8c5fd4d4fbd7a3b3d7e85df3053c866f1dd247cac6912ed8b0e491101ca5a0b999a21014b573ba3996c76065c9d8bebf431f8be6435837193efd6e5a565b2ced30d04355435f166b09f9dc91ee50412d0daf72b28ec14c505cb155de1a46362f140ac2b633fa42b12109f0a29fa8ba271d6fc2a77af3b16032ee46b3ddead76a481ef52f6bd25cab4494681f0abc2ffc60ebb36cffcc058a067fcdae6c9de670cd6fde6eb8086a65fc05df17cf69f654516ba30ee04a1427b40fb8e81fe46787d557046854ad342442bacd781c7a6063892402fb0d765397448991206b28193e20f285e50d9219ace39b311e572ebcd80702164315656e7fa92960d0fd28c6489406f0b3061218417548e7e78b8aaaf5a623eb47c92aebfebd1c78343bc781f184e0122a28f56b18832da5646ee8405fa2fc040ab30377c447b42d0bfdddc65e064ccdf1ad52a94309a819caeb523e22b25d1ba288b7f2c726290d50021b9839c5d3c471aadb08025d97619935a9880942cf653508a0b2c43838e5aada8b84d22042928dd372dedec14672266ddceb0744c7464ab282d7fbfb2767e891832aa25d1425b33a60c6894a8d5292fdd73e05a868b8e50cb1a412d1249a77ccfc3d3eb35a67221f80bb8960fd93ceb74e102f2a6946b50caae3ccb86a8ec441d6e58dbf24b3eb962c8a28cffeded9b7cf4a54f524a1ef49fbdc91e125aad65a54df6a0f10cd8799f48aa144f7aec977b4a347c5c9628c4805ecf71f305adc9e5ca7c1f313f9ea3e99b3590efd94d831e1ff5cd7a26b72281109547facfa3abac2cfc9177b117a3757b778e95b5069236abb25d8fb032c38d296f87388fdd364b491cb828732177a2c6bcaaf831d138c898bb60c0d9d8a02d8b4b8e7efa87d3ed66221ac52e31ba9c2da488b999eaf82994bc8f1ac29d5e60b8b1cdc30a1c9829aca1cd7881c8aaac9ede0f5d8b85538d2b13751cfc6b37587b0223b9f6b6dd9340753106b1eecdf4f63c51cc2c63a1f86235bad7602e115d1e0ed78a6b170b88eb9584d2098b187695627612189998171d245797391b2b79bb690a79dac4b769e3f18c4d49359f7b460d997c03c793f51a830d5b21faed2ae1c3eb0fce0cdadde3c789ec931b6397c2a2fb2eda87756fec031e5f50f07619130f8e39f1e00004a1f204e5d87780542bdedf0b1ca5168779ad7cb2ebf27e0a5d760a2492b4d92eab24f2bc9af0a3e51140c415a6f885d0faa38ee6dcffc41652b28e628b859db0e7a0f961e37c5806df137e68c5316667f36051eb05c971e208721fdb8a49b8c49f85114be9dd7288f4e95c5f6fb8c1bc1bc7d79f32ba5419d90130a0328ba70d10c770a1540718f7d890dba9c39a116623d492275a1268c91149bfe026ca1c6a458449d4004d653f4b0a234eacd1f4da495fd1f936b4b335f64514fc8091b1dab132f599e26cb127e25011efa30a922b5a3e8807db9a00a9cc732fd323708767c905c8a3cd53e2e8d377d3b43cb971cbd0e66e2e47f3d601d49e29941b2ea4d3c8b7f5698e1a633ebba00f6c178d6d04b9f1544f04cd173e2d49f129a8725a647e1a9e798b5581c6a461b585012a302353178188e55f8102a49343c9c370ee505d09e4be8580d95f5bf39267b00e93adb6b52b2029160d78ac271e4e0c70ed835484e80302b93efd599707d4d22c806476fd04d18ebd6a9bf88c11dc2c96041ac8c3e04ac0aa5d2ac6740972717b543fb871884a7a0434a433571fd621977777984ea9c06914be966da9f349cb1ef3a116c49f0c716eae1df118cd3d5b350b917c06d853c1e1514213f5a29071e42eecee264ff20529c53c3a060a18a680ade2a08b4549e6998f06e61e4f4c36d578e9ad83dd38d1eeb100e7ab023edb38426d5165b867b9507a6b644aa0322da335b208105f2e74a9841ea7c629ea20cef740f6364e9d84a4485d3bb6b5f4e14c7764f78b65c0647870638a8f618381ec0823faed0424a448f753a59fb22e5138e0ca537b6935befb99fc6eea2d9457c01345afbbaaf3a7a96a39478b222af322f86730d137c3f570b38c7363bb9a89bb4b3b8979b9afd232927becbc91c8d4a276febe47bacd4a84c0bfdd54e685080f2c3be0b1e37bc6d21b13b7b1bfd507880f6ad7fa39bf99eaf6b7088d758d9383e38326381088e9e3e792f75d682cf61cf1176953960b0e160b2a535495d52c28f14fa45ed7a3f91e219dcd05afdda2b7e6c1b742b29f6c5f62a040a5fe6606433fce7de757ed76372dfc0b1af9af10c0128bcd335eff1c6c9660b0893730c3ef8de6e50dba419b35d1766eb9a5dce4c2fa518f8e3e2a27855e04d06b89e97578a4406ac03f3314575143db5e43ae3d03a7e90a590b4c188a5acbe1cf23cd4cf60ca98248d4e740122a55ac6e463511b4c4cd47040aafc0bed7878348a4caad4d977671cf4ac319773767ee28f8ccc4c9deae531b029eff5345470f20865549b2f2c4089306304e13e42ca37fbca6839bbcd2f10bd20c81d44ab73ad5ffcc55f51b53efb00d3c68d8d8505e005247ba23e86a803b199f36447fd01f192994b2fa27c9db59ae66b56b30c1ae5cd717407068a9b13ca941b82db254f4ecdbd1751a3f8f1061031bb41af5c04a33ffc98509f456830cf3c94c14451f04d84844e41c618e82958710d07daeba666329b914f2cc7c1d34ffbf6b50620b7c78c25c5d82a5aadcc4d824b3b68c34231fa7c0befe5241c447f90111c55848feed9d1ee67f61095ec2c0b4ac82f5cf169201516082a804c9d1775990d430d21bc65877041905caf385918f44191c134e493d960724b28f01e79fbf3b99eac1e75fbc8ab8dcfdd98b573fa6d7e6a6ead6b15ed78e2a8d564f61d8c52be8104306c104146696e16c9e9bff79a5fc1d92326cf0f2ff5e5c5c252773f2bd2c554bc409aaec03055f71d439daebc1d8b06c9ca0e1fe4729e8e6119616e8fb861b1e2694d1df267cbc496ba4a87013c3317a16b4c1e369748507794a20ad06aad20e4dbfc1834d789d2a8e9395ddad33a74c6c7cf54e61e533cae228909536eba8020f0c3845d2063270cae4d8e8dd8cfe3f112c46751444546ced9f6434741656dcda2185be13eebcc0392c256f384fc16353e89cbdeef8fb2e3cadc1ed2142f3b6485dc2d540fe799d027413128f624aaf8bc1933d3a0e6a954931bfc914921dec7ec822a31ebb652d4f312ab4068cedc6203b0de98e60c5f82296a3482132b288ba0a8eabdd8ac40faf145928e7563dbcb14d0625c92b542860993bb0388d8390dae727ae4086d4de1b7fea9d79f4844374bcd67fa5e1a3a28cd6d8da3f171fcf9d13062bb149fde18917c6650cdfa2be8de33b556ad34fad454db13a446e8a7c40167117e884d874c786768975df0b201ea0077ba735d31d65a832dc122d13c6559601b83899af1f14808f55f077ad465ed61378c63abff3ad742691168fe1e31bfd0dbb9f43d364ddf0bb185f69e69110c9eb1ab808354fdd2cf571838d5ec63bac3d70ca40878dc3c3cea26adffd5a197206d7c80d6a86c202338e72f17dc7185e1df0cfefa9475a2156738f90c6410c1698d1a160fd396548323c796ec5dca3cd59e468ff6a14caf34b4fdb16f1c92acb6bff2e859f9de1266dea0d1828598319b40a3edef657be02188fc94490c1da088d3ec2f315d6b5bb2f262764b67ba321379f4c93bb3ef9bc7db0c0e5f1e680ebfa84463e904d5351ecf25d1d22a98f81f7a1fc4c4fee3934b7672661f0bcd94109706644d0fdac4b7933b5db2acf39b98c0a8106a7a757408404a4c299a077379458e2118fb0a53b798adc1b85d3eb20b539e572741b9855e44a545809f897dde06730145b5caefe9db1c321783450d25d38834532c3e372fa92a53ac9cb4330eaaf65fe1b69a66459058e02d20c6641b7d8edfa8e356baaeb011b61208ef36ed33235144c86d6ce65da89d66da06291d4acc05e3136559ab77a7c4ad229c5307b48ed642d96c28cd06c82dedd4a16ed90bceda81292120438fd5c47b7b41b2646fe0899643f896ddb2d11e7311f8a0cbb9bfa38106507e06f35b3052ad6b6a11ac5f0129bedc59d04aee3737ebbf10f97c80f1a4e3f51ac8ac4488ad9e3f685a7c0dd4074b07774f4efe4b9f2cba400ef49f73b12fc7d96d8f3283a1eaf8c003931fc24a9248e201ac31bb49226c37d535592e00308d86ba0765a7eda13b72686101d352fb959598038b8dec44a0f18e5c8ec089912d325880390ce5186d4585df46e5662987c164f0ccfb8f12f6144f91349051d3ffa35ba597d2b5920e279ca8e139dfe2ba9923c0190fd444c8bf12a627618791a8781d6b54470777e6a5dac8cb505ae1e534b0c3af7db010dd602b1459964e1e15a812f3b4c8038e6bc1dc568ba482ee4944582abeeda1ed012391706ddb1e0ce60efd15acde8283d3612de5d0cf76185ad3a1ce89488e1cea4009573b55a2766d100ecefc5d53c99876cfec65daea82f55cf9687ec70e45cfdba9fe69fc3a822c29ff4be34857bdcd4313fb23d1d01d8a79cbd0057eeb5c1c0b39f75d5a753a2e10bd0ebb91dab1312bdf1a984332d566ab56dfd838d285995bec8726c5d1358fe10b0b6aaa99b9d9b08894c1dbd06356e5c693ddebb9d8b306062defb160db9d8f02ae3df59697866f5adeb34c8c5b27b63b09675030f344197b3bff097b996819dec9059aaf5ec1a6c585a86d16528091543a9e6bca4d850b7963fd1e7d981814dedb165c1a6444ec0a21743a4de8845b386ad4e1e9c9f2873f6a353487d9a8f8f56ae1d0f69124ee56b5c2b2a48c78cc6ba6b313b889adf0acfaebb4e2dc71054a4992366a2b6ff1f5972d7d2f0e9e3b17d7fbe931f43871819dc6e6040ba239ebce2cfa424ff7344b8a880040321909dcd16956594f5d99fdd39ea5d7209b906d2601572c56c72db899f986185194fe5aab45f27d9ac12aa8600b3c2728ef2e589a6886d711edf4d7f95b2e10d9adde3009560ad754f9e7a52808720a973dc475f8177fd5b199b69925f03a44a8bd9f3c3369861802ce5ca4b40cb47d19e2e1bda1b054f16b66ac7b7c0e5205112e011d6957f1df50505003544631ff4385d8128d46838338930aebc0496348045a7c05abd7a56e1079947d3eb1c50e4d8be001d03d8973f8f08f2f21a415174173ccb90f7ab615be5036947e164a434c059637bfeebb8b9f2e87b9774a4595c71122c9fac74347488b9a054e2e7b9c45b7b12fcca0fe789db614c70d4149d44e50fb64aabccee7447288a5b865a60c2640171f89afecda2cb18b7ecea214bd32f43d5ff66e90741697d085f3ee9bfd8662a3cc570999bb151090160d3bf5bf1d85e896d66276cba7ed97f341f595b13c02ac2a1352aec7a5980de2c8f9d890951108947b7602dcf2bdd2aef680667572b87aadf7c54338492eae763df73e89e3c438c196da83d98bc65233a242e08894f2390d8714f0abb801d9e5c42f169555284b6cf079005b373e9938db71a93ee5945c2a43a06e3df580d372318b3d203503c6e968206d7db8116cca2f2a1fae7f5b5195bea92914d66516bc3ceb2d9dc4de59d0d52ab80910aba7ebb696c7deaddcf0fedf56e2a88c3496bb79897c6420a0ef1b03ad89c76b24f67ffd41c9227d464565457bb25f0b32c83e676b0a3284f2acbed39c6875871c5e866a8284f12e383f87f12dd9bbe3078c68b3711eaa9bc17a7ac8413a8ef486922eddf43f01625671b7c3d0a4c6c2dc38217b4135c8cb46df7d936aabfd253e95e0816dd1f92b257e2f96d2a259a320756ba77d99b709711326f2ea42def974d60f817a1f6779121dd32a1cb194c7809e4c8fd052ba357323436491ec45a49fa601ed373aadd2199e4483704fb2f4edd7bf2815b552fb84d09094cab9700b5125887ee508570217c16799bc11d9e3658de8d9812f30dc8078bbecaf887a6527686b026eea70229df1e61759adf19c1b96673419decb382ae29bd685c5f32120b2d56d3e97c9ef00a2c0598c2181b8fa53172312590a9549ff55dffb9070b042c74654b2ae56371b2a6bac8e2808a40fd5d6d0af184c035101394e347521467e0ddb962e0d63614cf1461ac7b9d744084e9f6f26c88d515dbb1b7392b8e9384b81f186224d5c09e266682d8044d8afb1bd6483962b03ed6884759d2647b8f174a6695a437a1f1aac3e6a2f8ca658ee8a8ae44a77393cec61a9f335a1e859825e73df4125828fbde19d3695125992ddb2826ffbc6c7cfbfdbae19ba864c4170c79cce408e8b280a7632c855d802029ebac8627fbd6fec1c3bd858411c969ca035992f2ab909c423158dffd0dd5a407b3e0c2d9b180440996e09e15f17b4e42f365371d9dd58c4609455253c44c2ba73f592e360ab5fcccdb6e90ae0c60ada9325c4824242c0d866e7dfbefe091067d5c7ff0432814f733591eb0096659738b34cfa8c6c988ec628f34fe08f31dc0156dc39866412932d045168f4f3a48f24fb3b884be1384845d496c3009626f1c41b0189e95c9055d24eb5a0390596f6ccf50d3727e607875a3b2cf076a277e12ac07ddc59da78ee16e1952706ac6a1a9ade80b867d889789c935d196cc4da67aa35ba80ef2077ee4dd69c5f31a0410f7fd0739303ddcdbff2f53e0a44ec5de0f062e533444bd946959a1d9c25b297b6fc7675ca4add9e24e8ff390e0375f3b15e1d3e8129007d743e384659f191bd23ffe02140fa64d5c6d75937b28d51afcaa9d207f57c878f2f54493025e9eff5b5ce0c997d11c9690262e38e1e83c7f1a0ed3f200d9d0472739d59dea3cc6e8783758e3e3201731cf27211267702594356345449b42fa64b64c6f00a8f26665524fe2208b1a7c5fbdc822ea611c1811526471e4f52ab5e3a43de8fd4eba2fb2796a206e348de9b0be78ded78204dc82d9e9adccbe408d7ff538aab3d663eab189927a9cd597388e8dc5063d2db42cd65415fa32d20288da017c9f94e788dfe7cc3a0f6b6ab06116ed3f72f3c048cb1e51abf308ed7169908d1ad5b7ab3a86a3316d164084f8d88c6f96142d888ccb158efa586015914c116db114aa82c44a55d4c33bd901dc34e820d3120d57def03ea4f01b263913cc02ca586b208506d149ef03a706fd5360a12b83acb7bf97ac1f1f85389d4fbfdcf38551e9dbce760a05e8e4023d85038570d3697b3e7de73aac9c7feb39b6ccd1a775c8ce01b08d7190e28866aa7bb8d0cff0fc45b452fcb6a290f98f4b5ec125224c8a93918b1f2888befba6de3d294ee1f13a9c56e92eaac0b8e6c6905e77a60ea7e1d1ed979b6b2606652e7d75750a065c57c7efb1ef5708719ef04e354bd861b15e0a1cbc7cfe65c8a3d9a2b790260d6e6eb60bd4e0fb3f040dfa27fa00797664122add0750a23a8b20fcd68b6be1e21620dda4bf0561f4c5ed74f41612a0676dcdbf669df3436cbf2ce253e69319e3ab36e6e6314f11e0d0882ee3d7f3d3b3dcfe3cd7f061e301369207545676e09801f9bc4bc4c3dcaf48e532084b3211051a7525868a0ac1278ed6fc9531ed89cf4205458acc05d5351bcab7ea50250b6cb4c6fdd0cd96f30cdc9a820f495d0a3e14eb6c493a85a87e3b7fb8e5f23431c3c5359f5802f1fc11ff71c3172c6b57b5587ab38579b79e328792edb7a81d60762bc6c88693a00712f811cab9b075a97535c904396dbd2fa0994ba9c9b06fe9c042cb6860d22844b94863bf7b68a1ab8639e4487b38d48e40da4a98dedd7d73ca4b575bf4c604a364a9247c2ea5e3b127ff42f9bce1d3d37c2428edab1708ebd71ac0e4a408a9c6eb97407a4a8b5e912e2c63fadd1abad9a772a96fc4666f7d2b604adbde6f1136de2adfe38994491ab0f34ff1fd20cb8034ad39aae4c5c0076da2e7a157764b770e1c5f35b6f323ce809b2e92be1345204021d74712368e0ef77056afd85f065bba085793c9b6950d3c3fc6c445afbdd5a80cf7b0bb13055fd486700be1500bdf8771e286a63962e56d4771ed5eefbf111ba7380f02d6f96eed174246820b73bd772689c072bb3d8e43ef96f5466dce5c9392e34b7176821d2f4df3dab4c6ef5e0238ffe61582812fdacc987fbb6d98cad5a2d7af0e4c8dd3f800cd75c38a515d4d4c7118c5f81c6f7504e7ae452370c56c4b7fb4daa65bf26919c12081485d09e9d142965320211f483ed2a0a6836fa2488a878eaf9653b0528c3680b75a1920a25b5c5c17548c7ceb9a1656a0cf6a404aec14f7ed8a1dcf8ed32e1cf94dc2f60b65aa102650b7a22d9e708c606ce8403ceb81434bd9938b2c4e5a8530a156a1df7d143b2da54071ba3e673ce11760f72c32273b7bcd9a48da2a6caeb4b782cf1c3a044c1731f3ad61ce32bbd0b52cbb187cb3ecc1e85a67ffe27cf86769a0d69fe293dd30f060b8a0f26ccd0287d0b8d941ee7410a7c6aa430add67c2dd60db292e24f294ce80b0321aaa4d054a6f5d9981e1d5e859b454f5005be082bd59baca5775eedb7994333c62c452ef7b2893e4d03a28c0e368928b4bdd6e31f52a83cd7e162975405fd128321e0a8e3e77fd93257b0c46b309e16203974382ced818faac3a02e74141e9ea36c4a1b98bd859fafce43b2984d856c832f61b1ca562cee96f5843adc14b35bec1ccdafedd214f1a344345373f3c9eccee8324950a23c3e77d55dbde9a7ac1b7804927affb8b0e1488dcd8919d227bd1f50a35abf25e3f120c25b0dfb4d85b4c2a2c69cf7047c76c45e4e901e7396140496f9a322c2c2ac777a27adff5a6daf32e852b1bac89f1086739a603cf0f6838f792351c08e38ab130e5a83aa5a4f2da19df131770a308d810eed0059a2e5546a2169b9d0119f6df7c18981f4b4f119c76fdaac031ce7551f25678b5c4d8815a7ea9565e63389fca6ea0bcd40e71ac72124113dc0041ce26a0c9979ff76d7f1f2c0cd2c16d8c7a36930b909ed7e2d4adfa8352b12b99bdcbc25b485f652539fab7ac983c1ae925967c15ba2345e45d6bafe13b3e9d7acf1a592422ea09c3a45f7fe24e235bd70b106cdaa665584e74cdaf9f39b804bc6c4e7f0bf572225acd4dfe010081b91c2d5970d4f43d2e1a0e05f84baaf50642991b3704034aed74572e6a4715b79276432d06660b39c989570fc0d5d0071a7c690658caee447370d3295db3b5dc625e697e1ca2675b5430b9969024835c7d001fbce86c5165c4fe8f2d46b883daaa3fbf42dc5cf61209379013896df740b9cc32638358ea8079a33f04197f650471086e67e5cf9779268d7973c73bbbde2f1c11e1a8e2b154aaa8b4b74f8a03f14ceb7afc4ba35e6620b7af89c969021d20cb260c1868f3fa432ce7e509db06001ae6540531b126c1e3a851acbf0a9c1354bece05c094d69d9bd87f99391e23306911383d2082997339daebd67d8a707c9b496a309b7921696f39a07864f31208802db7188881e346b41c34f4129fca9c6a13172a4dabfe791584d240fc03685057d53c08737aa1d486233318eb4545f2e8d18087705b9d3a7658564592f56aea3aee53d66c249988bf353853728553a1577062e24af533f47dc012ae90c5c085babc121be2993c063e203ab949a088041271ac0527c56edd4b7a87e98323a0137cd493aa05fe38d02754a66d89348b119e6200d5919bc366788eb67115fc57c4c1a9dd42c7411d6709ad82de8662a1849445b39beb2ba8f894860e41a054f61337179a9214b0884f3964c95ed2a4ab37de8038566bba76fbaa7502c0460558ff4bf4793ca68d78e50f384a81da4cfa23723747e906b82290e0b8ea07e3404bee0915800d4c3c07f94c43e7aafbc7a44d923de97963d0d1586bee06fc90aadbe5758fb9933ff7df346d62e082223741f5cb26ef953ca654ab983a72b30b296891c9e3f1ed5216b0e588eb25f5d4ccad6f96973cc2d26196bbd37c83266473071ccd84d9e3c74f22621e8bd60afa4bcad6c853c7591fe5d4298a954ea5006f682a7a65aeb26b230f3866a28a58bf532aca8fd5eaec64f442ac510a7df4114f00fd6ff7e02d77f8e72797222556959958c4c4d166c5af18a6e25588cac9871a3d5bb453889ff8d13db22024a997bf97a5afdf698b1deaff3101e27868d2de47b92c403ce82e15f3239d8923e8ca0c01e3781b5dd6121f57d2238dc3ff8a1bde3e371efd33838c552e43588042b360f55d7ca92f11987630364b263428e18601d7bf23f6432b3a9aa2c500cd9ac5f73cbe309443858a2806956b0cdcfc19904567bb1703641017c6199e768410e03d8ba603eb34249d567370202f39639ae8f6d52d9d5dbfc544c5b85ac8187095c63f1f613fe4af179fc5c837e6e0ccc21e62ac22ac045c4ac3b1ca6a4cbdbe29ea465240fc0aed1f0e086d7580bcf81d4e2a4d55a8e3bc57110e7cf1e1895df07974f0686dd2ea2b12bbfd64e7a9d0c62c662f0370e6ed495eeb2ee5029042147a1f2e5fcd6068b06567be893cb80e2cbb5fbb12847313811c13cf685698d5e2175959579e510279b9e959ac2c3f94fec653c6b521f8909d633ccedbc1109285ecbd52d27cd2891eaf354db2c966d1e3086718848433c12658fe7f6fbfef930b963139a63f6c4caee5a1964d3a038dd0db403c0a251d702c07a0fba4a3576ec6668a78e9e26efc6ad83a670a47608bf4207979bf196b3160c95e7ccc6406d46f529d34676b76d72396262e1448df051130a21484e0e977df1f7f0a259ac762eef9506877498b9998e1286d6294cf60b95352e81c3", 0x2000, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x0, 0x0, 0x0}) getdents64(r2, 0x0, 0x0) 5.489451251s ago: executing program 0 (id=228): memfd_create(&(0x7f00000001c0)='\x02A\xbbL\xeb\xbd]\x9c\x9aU\x9c\xcbb\xcc\xfa0\xf5JoeN\x8c\x86\xfa\xb3\x0e&\xfe\xa8NF\x96\t\x01\xceJ\xc3\x8f+\xe8\xa7v\x80\xfaj\xfe\x11\x0e\xed6\x00\x00\x00\x00\x00\x00\f\xd7\xe7\xdb?\xf3\xd9\xa3\xd6a\x1a\xfch}7K\xca\x90KA\x02\xd6\x94\xf0S\xcc\xd0\x14\x8c\xb3!\xa8\xeajy@\xa0\xdc~\xea\xfd\xfb\x12\x88Xa\x16\xcb\xe4\x03\x1e\xac\xf2\xe9\xf1<', 0x3) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = dup(r0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) openat$incfs(r1, &(0x7f00000000c0)='.pending_reads\x00', 0x100, 0x8b) write$tun(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="083c86dd0001110004600000a60c6eec00be11443cfffe8000000000000000000000000000aaff020000000000000000000000000001", @ANYRES32=r1], 0xfdef) 4.478001653s ago: executing program 2 (id=231): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x1, @loopback, 0x7}, 0x1c) shutdown(r0, 0x2) listen(r0, 0x5) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x24040004, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @empty, 0x7f}, 0x1c) sendto(r1, &(0x7f00000000c0)="1e1a02f8045f40dec1eee1eda0a1358fc61764f0678eb2354b1b5f7972d8d8a583060b008d5676a814b496b5598751acd495188d3526e054fe90538588262f1e704b8a262cfa495499471986ca25e6c90ccdd6d2464dab555f566ac4f2", 0x5d, 0x4048096, 0x0, 0x0) 4.204315111s ago: executing program 1 (id=232): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 4.203536751s ago: executing program 2 (id=233): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz0\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x5, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x25cd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000004, 0x402, 0xbbf, 0x4a732f64, 0x1, 0x1c0, 0xd, 0x0, 0x2a3, 0x6, 0x1, 0x2, 0xc3, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x0, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x40, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x4, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x4, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x80004, 0x46, 0xf1, 0x4, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xffffeffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x200026, 0x8, 0x400, 0x6, 0xffff0000, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x10, 0x5, 0x9, 0x7, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0xff4, 0x2, 0x400, 0x9, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x10010, 0x101, 0xdd81, 0x2, 0x7f, 0x9d27, 0x10000, 0x1, 0x100, 0x2, 0x6, 0x7ffd, 0x5, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0x9, 0x1005, 0x1, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0xd, 0xfffffff7, 0x8, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26e, 0x6, 0xc, 0x4, 0xfffffff9, 0x9, 0x5d9, 0x463f, 0x4, 0xb0, 0x6, 0x6, 0x14000, 0x1, 0x9]}, 0x45c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400000010000100000000000000"], 0xac}}, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x42002, 0x180) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x1c, &(0x7f0000000140)=""/123, &(0x7f00000001c0)=0x7b) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 3.937159787s ago: executing program 0 (id=234): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x800, 0x4, 0x81, 0x4, 0x1, 0x0, 0x3, 0x100000012, 0x0, 0x0, 0x0, 0x7, 0x4, 0x2, 0x100000000001], 0x6000, 0x4bb40}) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.933535015s ago: executing program 3 (id=235): symlink(&(0x7f0000000040)='.\x00', &(0x7f0000000100)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000140)='./file0\x00', &(0x7f00000003c0), &(0x7f0000000240)=@v3={0x3000000, [{0x5, 0xc53}, {0x4, 0x1}]}, 0x18, 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000000)='./bus\x00') lchown(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) 3.72847631s ago: executing program 0 (id=236): socket$nl_route(0x10, 0x3, 0x0) memfd_create(&(0x7f0000000540)='\x02A\xbb\xcc\xeb\x14\x16\xe8m\x14oSaW', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x42, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x2800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events.local\x00', 0x275a, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000000)="8ee8c9b8ee088ed8660f3801b2d6352ed9ff660f3882040f01cf0fc72d2626652e0f01ca0fc7386635002000000f22e0", 0xffffffffffffff8b}], 0x1, 0x50, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x12, 0x64, 0x0, 0x0) pipe(&(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3.728005017s ago: executing program 1 (id=237): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe0}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11d}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae13c8c2a1dcc8a3122aaa", 0xa8}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d00)="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", 0x12e}], 0x1}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 3.725215048s ago: executing program 3 (id=238): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x2718, 0x0, &(0x7f0000000040)) 3.586464349s ago: executing program 1 (id=239): r0 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ecm(r0, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x800) ioctl$EVIOCGKEYCODE_V2(r1, 0x80284504, &(0x7f0000000140)=""/210) 3.452850265s ago: executing program 3 (id=240): socket$nl_generic(0x10, 0x3, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x4, 0x11, r1, 0x100000) 2.352961746s ago: executing program 2 (id=241): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1.972516938s ago: executing program 2 (id=242): connect$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c0000000206010800000000000000000000003f0500010006000000050005000200000005000400000000000900020073797a310020000013000300686173683a6e65742c6966616365"], 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000005700)=ANY=[@ANYBLOB="580000000906010200000000000000000200fdff300007800c00018008000140e8000001140017006261746164765f736c6176655f3000000c00028008000140640101010900020073797a31000000000500010007"], 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x40c0080) 1.78859362s ago: executing program 0 (id=243): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0xac}}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYRESHEX], 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.628450958s ago: executing program 3 (id=244): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000001dc0)=[{&(0x7f0000000140)="91f8a9849519def28691bbc4173c3d6f357d0272b7319130feaab952ac4703cad04be68907e50e997fc26e4c91ea4feb931647fc53", 0x35}, {&(0x7f0000000e80)="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", 0x11d}, {&(0x7f00000003c0)="641a6a2b863c0dd898013a3f97a834ebb75a925ab48c844221841a232932fc2e37e327de21450df0", 0x28}, {&(0x7f00000001c0)="985e44efeabe001cabcf3d8673c3a254a9a2d3197970cb347b70a243bf77139a94bc3ae91684aaf7b7dff691deb8f8aef2d915fb3a0794a9a9b431a819bca6122c350637808dde804a048fd8696e524b2934126c443ce93d82e931eb9918e6c0827686e59209d2e02c9210fd8048f04ad6c48b3072092c483271361816bf21afb8473a064f1988536d4b5888807b3aaafaf59f53121782a0a9370dc0feae", 0x9e}], 0x4}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)="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", 0x1da}, {&(0x7f0000000d00)="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", 0x12e}], 0x2}}], 0x2, 0x14042082) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.517854833s ago: executing program 1 (id=245): syz_clone(0x2200011, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0x78b}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.347864314s ago: executing program 3 (id=246): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000380)={0x2, 0x34000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0xeeee8000, 0x102000, 0x1}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 1.284340731s ago: executing program 1 (id=247): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 1.065119395s ago: executing program 1 (id=248): r0 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e00100905"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$FS_IOC_GETVERSION(r1, 0x5b24, 0x0) 706.707727ms ago: executing program 3 (id=249): r0 = openat$sysfs(0xffffff9c, &(0x7f0000000000)='/sys/kernel/profiling', 0x1, 0x0) mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='dir0/trace_marker\x00', 0x81, 0x82) r2 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0) r3 = openat$ubi_ctrl(0xffffff9c, &(0x7f0000000080), 0x8001, 0x0) mkdirat(r3, &(0x7f00000000c0)='dir0\x00', 0x80) r4 = syz_open_dev$dri(&(0x7f0000000080), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r4, 0xc02064b2, &(0x7f0000000200)={0x28f, 0xfff, 0xa}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r4, 0xc04064a0, &(0x7f0000000700)={0x0, &(0x7f0000000000)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000000340)={0x3, r5, 0xfffffffa, 0x4, 0xb, 0x1fd, 0x1}) r6 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r6, 0xc03864bc, &(0x7f0000000380)={0x400, 0x2, &(0x7f0000000040)=[r8, r8], &(0x7f00000003c0), 0x0, 0x0, 0x0, 0x6}) ioctl$DRM_IOCTL_MODE_CURSOR(r4, 0xc01c64a3, &(0x7f0000001880)={0x2, r8, 0xfff, 0x10005, 0x2, 0x900, 0x2}) write(r1, &(0x7f0000000240)="62f5ff6ccf3d2ec97f0e4bc8a900d2e75067a5109d749cdf1ba00926335fdca4d6df9c6093533d", 0x27) read(r7, &(0x7f0000000440)=""/14, 0xe) write(r0, &(0x7f0000000100)='16c3 abc0\x00', 0xa) r9 = openat$pidfd(0xffffff9c, &(0x7f0000000140), 0x412c02, 0x0) ppoll(&(0x7f0000000180)=[{r2, 0x540}, {r3, 0x108}, {r2, 0x10}, {r9, 0x300}, {r1, 0x110}, {r0}, {r0, 0x9400}], 0x7, &(0x7f00000001c0), &(0x7f0000000200)={[0x9]}, 0x8) 0s ago: executing program 0 (id=250): syz_usb_connect(0x1, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="1a0100005c6b4408070a64006e40010203030902240001a82300000904000002ca744d00090503034d00ff99090805", @ANYRES32], &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x11, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000000)) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) pwrite64(r0, &(0x7f0000000040)="46f4b58982ede3e19e", 0x9, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts. [ 92.660250][ T10] cfg80211: failed to load regulatory.db [ 93.166862][ T5594] cgroup: Unknown subsys name 'net' [ 93.407229][ T5594] cgroup: Unknown subsys name 'cpuset' [ 93.462670][ T5594] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 95.726723][ T5594] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 99.660850][ T5617] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.696433][ T5617] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 99.705688][ T5618] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.711137][ T5619] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 99.720008][ T5617] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 99.722279][ T5619] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.724910][ T5619] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 99.726247][ T5619] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 99.731589][ T5619] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 99.732684][ T5619] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.736601][ T5617] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 99.737550][ T5617] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.738038][ T5617] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 99.740578][ T5617] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.741017][ T5617] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 99.741448][ T5617] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.747223][ T5617] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 99.754077][ T60] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.826069][ T4922] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.833735][ T4922] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 101.834370][ T4922] Bluetooth: hci0: command tx timeout [ 101.834583][ T5615] Bluetooth: hci1: command tx timeout [ 101.912927][ T5615] Bluetooth: hci3: command tx timeout [ 101.915538][ T5615] Bluetooth: hci2: command tx timeout [ 102.063693][ T5608] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.067090][ T5608] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.067447][ T5608] bridge_slave_0: entered allmulticast mode [ 102.094549][ T5608] bridge_slave_0: entered promiscuous mode [ 102.134502][ T5608] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.134727][ T5608] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.134960][ T5608] bridge_slave_1: entered allmulticast mode [ 102.137820][ T5608] bridge_slave_1: entered promiscuous mode [ 102.299334][ T5608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.351505][ T5608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.353744][ T5609] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.354067][ T5609] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.354349][ T5609] bridge_slave_0: entered allmulticast mode [ 102.368672][ T5609] bridge_slave_0: entered promiscuous mode [ 102.513156][ T5609] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.513362][ T5609] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.513629][ T5609] bridge_slave_1: entered allmulticast mode [ 102.516086][ T5609] bridge_slave_1: entered promiscuous mode [ 102.597886][ T5610] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.598154][ T5610] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.598534][ T5610] bridge_slave_0: entered allmulticast mode [ 102.604441][ T5610] bridge_slave_0: entered promiscuous mode [ 102.640079][ T5608] team0: Port device team_slave_0 added [ 102.670589][ T5610] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.670953][ T5610] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.671297][ T5610] bridge_slave_1: entered allmulticast mode [ 102.678083][ T5610] bridge_slave_1: entered promiscuous mode [ 102.707543][ T5608] team0: Port device team_slave_1 added [ 102.716714][ T5609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.746883][ T5607] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.747121][ T5607] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.747554][ T5607] bridge_slave_0: entered allmulticast mode [ 102.749761][ T5607] bridge_slave_0: entered promiscuous mode [ 102.789267][ T5609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.808223][ T5607] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.809422][ T5607] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.809633][ T5607] bridge_slave_1: entered allmulticast mode [ 102.812650][ T5607] bridge_slave_1: entered promiscuous mode [ 102.870681][ T5610] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.911126][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.911139][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.911154][ T5608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.955793][ T5610] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.980806][ T5608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.980819][ T5608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 102.980835][ T5608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.988994][ T5609] team0: Port device team_slave_0 added [ 103.030706][ T5607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.051275][ T5609] team0: Port device team_slave_1 added [ 103.081567][ T5607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.119369][ T5610] team0: Port device team_slave_0 added [ 103.164648][ T5610] team0: Port device team_slave_1 added [ 103.208976][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.208992][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.209008][ T5609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.240930][ T5607] team0: Port device team_slave_0 added [ 103.274160][ T5609] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.274182][ T5609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.274198][ T5609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.309235][ T5607] team0: Port device team_slave_1 added [ 103.327782][ T5608] hsr_slave_0: entered promiscuous mode [ 103.330750][ T5608] hsr_slave_1: entered promiscuous mode [ 103.355247][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.355267][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.355291][ T5610] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.404281][ T5610] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.404302][ T5610] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.404329][ T5610] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.796197][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.796212][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.796228][ T5607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.858409][ T5607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.858424][ T5607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.858442][ T5607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.914915][ T5615] Bluetooth: hci1: command tx timeout [ 103.914957][ T5615] Bluetooth: hci0: command tx timeout [ 103.961093][ T5609] hsr_slave_0: entered promiscuous mode [ 103.967032][ T5609] hsr_slave_1: entered promiscuous mode [ 103.969677][ T5609] debugfs: 'hsr0' already exists in 'hsr' [ 103.969792][ T5609] Cannot create hsr debugfs directory [ 103.992723][ T5615] Bluetooth: hci2: command tx timeout [ 103.992762][ T5615] Bluetooth: hci3: command tx timeout [ 104.069662][ T5610] hsr_slave_0: entered promiscuous mode [ 104.071676][ T5610] hsr_slave_1: entered promiscuous mode [ 104.075024][ T5610] debugfs: 'hsr0' already exists in 'hsr' [ 104.075055][ T5610] Cannot create hsr debugfs directory [ 104.189548][ T5607] hsr_slave_0: entered promiscuous mode [ 104.191011][ T5607] hsr_slave_1: entered promiscuous mode [ 104.193236][ T5607] debugfs: 'hsr0' already exists in 'hsr' [ 104.193263][ T5607] Cannot create hsr debugfs directory [ 105.094187][ T5608] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 105.147805][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.165446][ T5608] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 105.200758][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.226469][ T5608] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 105.267185][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.308791][ T5608] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 105.337773][ T5608] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.567109][ T5610] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 105.619544][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 105.631475][ T5610] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 105.685002][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 105.689539][ T5610] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 105.727383][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 105.757732][ T5610] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.786648][ T5610] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 105.993763][ T4922] Bluetooth: hci1: command tx timeout [ 106.002452][ T4922] Bluetooth: hci0: command tx timeout [ 106.029065][ T5607] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.061150][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.073556][ T4922] Bluetooth: hci3: command tx timeout [ 106.073601][ T4922] Bluetooth: hci2: command tx timeout [ 106.076710][ T5607] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.119939][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.172917][ T5607] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.201151][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.210757][ T5607] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.243490][ T5607] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.437536][ T5609] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 106.479090][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 106.505843][ T5609] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 106.537866][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 106.550751][ T5609] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 106.578504][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 106.596523][ T5609] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 106.645188][ T5609] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 106.685315][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.840356][ T5608] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.911250][ T3188] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.911459][ T3188] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.989831][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.990105][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.042652][ T5610] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.187271][ T5610] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.278073][ T3181] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.279302][ T3181] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.350571][ T5607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.364951][ T3181] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.365082][ T3181] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.537901][ T5607] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.580664][ T5609] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.640478][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.640654][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.745382][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.745489][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.828940][ T5609] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.898224][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.898710][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.072725][ T4922] Bluetooth: hci1: command tx timeout [ 108.085681][ T4922] Bluetooth: hci0: command tx timeout [ 108.107576][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.107791][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.152007][ T4922] Bluetooth: hci2: command tx timeout [ 108.152049][ T4922] Bluetooth: hci3: command tx timeout [ 108.481356][ T5608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.989086][ T5608] veth0_vlan: entered promiscuous mode [ 109.116748][ T5608] veth1_vlan: entered promiscuous mode [ 109.318265][ T5610] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.553932][ T5608] veth0_macvtap: entered promiscuous mode [ 109.631111][ T5608] veth1_macvtap: entered promiscuous mode [ 109.746072][ T5607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.853949][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.930283][ T5608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.972985][ T5610] veth0_vlan: entered promiscuous mode [ 110.037213][ T127] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.058913][ T127] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.074713][ T127] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.097502][ T127] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.115418][ T5609] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.120201][ T5610] veth1_vlan: entered promiscuous mode [ 110.441154][ T5607] veth0_vlan: entered promiscuous mode [ 110.725872][ T5607] veth1_vlan: entered promiscuous mode [ 110.775100][ T5610] veth0_macvtap: entered promiscuous mode [ 110.798028][ T57] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.798048][ T57] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.901269][ T5610] veth1_macvtap: entered promiscuous mode [ 110.975356][ T5609] veth0_vlan: entered promiscuous mode [ 110.989317][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.989344][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.094711][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.099417][ T5609] veth1_vlan: entered promiscuous mode [ 111.143877][ T5607] veth0_macvtap: entered promiscuous mode [ 111.156381][ T5610] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.187548][ T5607] veth1_macvtap: entered promiscuous mode [ 111.260133][ T47] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.280412][ T47] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.304607][ T47] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.316800][ T47] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.486053][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.634546][ T5607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.726338][ T5609] veth0_macvtap: entered promiscuous mode [ 111.895297][ T3188] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.945743][ T5609] veth1_macvtap: entered promiscuous mode [ 112.058778][ T1034] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.093541][ T1034] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.142579][ T1034] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.207160][ T198] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 112.350382][ T47] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.350408][ T47] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.381093][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.412760][ T198] usb 3-1: Using ep0 maxpacket: 32 [ 112.454308][ T198] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 112.454379][ T198] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 112.506346][ T198] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 112.506387][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 112.506410][ T198] usb 3-1: SerialNumber: syz [ 112.656328][ T5609] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.789442][ T198] cdc_acm 3-1:1.0: Zero length descriptor references [ 112.789496][ T198] cdc_acm 3-1:1.0: probe with driver cdc_acm failed with error -22 [ 113.167459][ T5717] usb 3-1: USB disconnect, device number 2 [ 113.283827][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.309446][ T1034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.356376][ T1034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.370952][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.370982][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 113.459167][ T1034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.595960][ T3181] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 113.595989][ T3181] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.201678][ T5764] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 114.500307][ T3188] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.500328][ T3188] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.696636][ T3188] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.696658][ T3188] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.884266][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.884290][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 121.065220][ T5840] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.914463][ T198] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 122.143734][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 122.143773][ T198] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 122.143818][ T198] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 122.143843][ T198] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.314300][ T198] usb 3-1: config 0 descriptor?? [ 122.788141][ T5869] overlayfs: failed to resolve './file1': -2 [ 123.046919][ T5762] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 123.192624][ T5762] usb 4-1: Using ep0 maxpacket: 16 [ 123.222148][ T5762] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 123.222182][ T5762] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 123.259892][ T5762] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 123.259924][ T5762] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.259945][ T5762] usb 4-1: Product: syz [ 123.259960][ T5762] usb 4-1: Manufacturer: syz [ 123.259974][ T5762] usb 4-1: SerialNumber: syz [ 123.436149][ T5762] usb 4-1: config 0 descriptor?? [ 123.553499][ T5762] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 123.553538][ T5762] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 123.567467][ T198] usb 3-1: string descriptor 0 read error: -71 [ 123.571441][ T198] uclogic 0003:256C:006D.0001: failed retrieving string descriptor #200: -71 [ 123.571514][ T198] uclogic 0003:256C:006D.0001: failed retrieving pen parameters: -71 [ 123.571597][ T198] uclogic 0003:256C:006D.0001: failed probing pen v2 parameters: -71 [ 123.571659][ T198] uclogic 0003:256C:006D.0001: failed probing parameters: -71 [ 123.571971][ T198] uclogic 0003:256C:006D.0001: probe with driver uclogic failed with error -71 [ 123.856279][ T198] usb 3-1: USB disconnect, device number 3 [ 124.119377][ T5762] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 124.131957][ T5762] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 125.173940][ T5762] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 125.174279][ C0] raw-gadget.1 gadget.3: ignoring, device is not running [ 125.174574][ T5762] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 125.177173][ T5762] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 125.177629][ T5762] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 125.178434][ T5762] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 125.179057][ T5762] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 125.336228][ T5762] usb 4-1: USB disconnect, device number 2 [ 126.741857][ T5762] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 126.894504][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 126.894542][ T5762] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 126.894581][ T5762] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 126.894605][ T5762] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.957055][ T5762] usb 2-1: config 0 descriptor?? [ 127.900787][ T5762] usb 2-1: string descriptor 0 read error: -71 [ 127.901470][ T5762] uclogic 0003:256C:006D.0002: failed retrieving string descriptor #200: -71 [ 127.901532][ T5762] uclogic 0003:256C:006D.0002: failed retrieving pen parameters: -71 [ 127.901549][ T5762] uclogic 0003:256C:006D.0002: failed probing pen v2 parameters: -71 [ 127.901605][ T5762] uclogic 0003:256C:006D.0002: failed probing parameters: -71 [ 127.938466][ T5762] uclogic 0003:256C:006D.0002: probe with driver uclogic failed with error -71 [ 127.980199][ T5762] usb 2-1: USB disconnect, device number 2 [ 128.594751][ T5944] overlayfs: failed to resolve './file0': -2 [ 129.194720][ T5961] overlayfs: failed to resolve './file0': -2 [ 129.225771][ T5951] syz.1.67 (5951) used greatest stack depth: 18688 bytes left [ 130.432555][ T5759] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 130.604992][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 130.605027][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 130.605066][ T5759] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 130.605090][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 130.850584][ T5759] usb 2-1: config 0 descriptor?? [ 130.965807][ T5988] overlayfs: failed to resolve './file0': -2 [ 131.751888][ T5759] usb 2-1: string descriptor 0 read error: -71 [ 131.752410][ T5759] uclogic 0003:256C:006D.0003: failed retrieving string descriptor #200: -71 [ 131.752464][ T5759] uclogic 0003:256C:006D.0003: failed retrieving pen parameters: -71 [ 131.752480][ T5759] uclogic 0003:256C:006D.0003: failed probing pen v2 parameters: -71 [ 131.752530][ T5759] uclogic 0003:256C:006D.0003: failed probing parameters: -71 [ 131.752633][ T5759] uclogic 0003:256C:006D.0003: probe with driver uclogic failed with error -71 [ 131.796448][ T5759] usb 2-1: USB disconnect, device number 3 [ 132.421866][ T198] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 132.662642][ T198] usb 4-1: Using ep0 maxpacket: 16 [ 132.665072][ T198] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 132.665108][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 132.706237][ T198] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 132.706272][ T198] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.706293][ T198] usb 4-1: Product: syz [ 132.706309][ T198] usb 4-1: Manufacturer: syz [ 132.706323][ T198] usb 4-1: SerialNumber: syz [ 132.798767][ T198] usb 4-1: config 0 descriptor?? [ 132.878931][ T198] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 132.878976][ T198] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 133.513180][ T198] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 133.514419][ T198] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 133.600474][ T1341] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.613579][ T1341] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.006948][ T6022] overlayfs: failed to resolve './file0': -2 [ 134.549145][ T198] em28xx 4-1:0.0: AC97 vendor ID = 0x00fc00fe [ 134.751458][ T198] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 134.752402][ T198] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 134.752855][ T198] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 134.753327][ T198] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 134.753751][ T198] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 134.754384][ T198] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 134.829685][ T198] usb 4-1: USB disconnect, device number 3 [ 135.845305][ T6051] overlayfs: failed to resolve './file1': -2 [ 136.365943][ T198] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 136.517084][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 136.517131][ T198] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 136.517173][ T198] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 136.517198][ T198] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 136.589061][ T198] usb 4-1: config 0 descriptor?? [ 137.215972][ T6076] overlayfs: failed to resolve './file1': -2 [ 137.450167][ T198] usb 4-1: string descriptor 0 read error: -71 [ 137.459449][ T198] uclogic 0003:256C:006D.0004: failed retrieving string descriptor #200: -71 [ 137.459540][ T198] uclogic 0003:256C:006D.0004: failed retrieving pen parameters: -71 [ 137.459558][ T198] uclogic 0003:256C:006D.0004: failed probing pen v2 parameters: -71 [ 137.459618][ T198] uclogic 0003:256C:006D.0004: failed probing parameters: -71 [ 137.459734][ T198] uclogic 0003:256C:006D.0004: probe with driver uclogic failed with error -71 [ 137.582191][ T198] usb 4-1: USB disconnect, device number 4 [ 138.564137][ T6099] overlayfs: failed to resolve './file1': -2 [ 139.502562][ T198] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 139.586720][ T6128] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 139.655086][ T198] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 139.655117][ T198] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 139.659187][ T198] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 139.659219][ T198] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.659240][ T198] usb 3-1: Product: syz [ 139.659255][ T198] usb 3-1: Manufacturer: syz [ 139.659270][ T198] usb 3-1: SerialNumber: syz [ 139.727117][ T198] usb 3-1: config 0 descriptor?? [ 141.280893][ T6158] evm: overlay not supported [ 142.456547][ T5762] usb 3-1: USB disconnect, device number 4 [ 145.001893][ T5717] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 145.213602][ T5717] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 145.213637][ T5717] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.213667][ T5717] usb 2-1: Product: syz [ 145.213681][ T5717] usb 2-1: Manufacturer: syz [ 145.213696][ T5717] usb 2-1: SerialNumber: syz [ 145.263772][ T5717] usb 2-1: config 0 descriptor?? [ 145.509154][ T6234] syz.3.170 uses obsolete (PF_INET,SOCK_PACKET) [ 145.527984][ T5717] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 145.799067][ T5717] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 145.871844][ T5717] usb 2-1: USB disconnect, device number 4 [ 148.401920][ T198] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 148.923483][ T198] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 148.923505][ T198] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 148.923516][ T198] usb 1-1: Product: syz [ 148.923525][ T198] usb 1-1: Manufacturer: syz [ 148.923534][ T198] usb 1-1: SerialNumber: syz [ 149.096794][ T198] usb 1-1: config 0 descriptor?? [ 149.351160][ T198] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 149.563674][ T198] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 149.656052][ T198] usb 1-1: USB disconnect, device number 2 [ 150.798261][ T5615] Bluetooth: hci3: connection err: -111 [ 150.843105][ T5702] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 150.994683][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 150.994720][ T5702] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 150.994761][ T5702] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 150.994786][ T5702] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 151.048540][ T5702] usb 3-1: config 0 descriptor?? [ 151.965451][ T5702] usb 3-1: string descriptor 0 read error: -71 [ 151.966045][ T5702] uclogic 0003:256C:006D.0005: failed retrieving string descriptor #200: -71 [ 151.966110][ T5702] uclogic 0003:256C:006D.0005: failed retrieving pen parameters: -71 [ 151.966128][ T5702] uclogic 0003:256C:006D.0005: failed probing pen v2 parameters: -71 [ 151.966194][ T5702] uclogic 0003:256C:006D.0005: failed probing parameters: -71 [ 151.966319][ T5702] uclogic 0003:256C:006D.0005: probe with driver uclogic failed with error -71 [ 152.063992][ T5702] usb 3-1: USB disconnect, device number 5 [ 155.530018][ T6373] dummy_hcd dummy_hcd.0: remove, state 4 [ 155.567970][ T6373] usb usb1: USB disconnect, device number 1 [ 156.578529][ T6373] dummy_hcd dummy_hcd.0: stopped [ 156.578559][ T6373] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 156.830603][ T6381] dummy_hcd dummy_hcd.0: USB Host+Gadget Emulator, driver 02 May 2005 [ 156.830729][ T6381] dummy_hcd dummy_hcd.0: Dummy host controller [ 157.087655][ T6381] dummy_hcd dummy_hcd.0: new USB bus registered, assigned bus number 1 [ 157.267699][ T6381] usb usb1: New USB device found, idVendor=1d6b, idProduct=0002, bcdDevice= 7.02 [ 157.267736][ T6381] usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 [ 157.267758][ T6381] usb usb1: Product: Dummy host controller [ 157.267774][ T6381] usb usb1: Manufacturer: Linux syzkaller dummy_hcd [ 157.267791][ T6381] usb usb1: SerialNumber: dummy_hcd.0 [ 157.485792][ T6381] hub 1-0:1.0: USB hub found [ 157.525304][ T6381] hub 1-0:1.0: 1 port detected [ 157.893867][ T6385] dummy_hcd dummy_hcd.0: remove, state 4 [ 157.893917][ T6385] usb usb1: USB disconnect, device number 1 [ 158.262517][ T6385] dummy_hcd dummy_hcd.0: stopped [ 158.262545][ T6385] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 159.663351][ T5759] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 159.821928][ T5759] usb 2-1: Using ep0 maxpacket: 16 [ 159.826313][ T5759] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 159.826374][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 159.826404][ T5759] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 159.826426][ T5759] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 159.826449][ T5759] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 159.902128][ T5759] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 159.902162][ T5759] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 159.902183][ T5759] usb 2-1: Manufacturer: syz [ 160.044967][ T5759] usb 2-1: config 0 descriptor?? [ 160.834595][ T5759] rc_core: IR keymap rc-hauppauge not found [ 160.834619][ T5759] Registered IR keymap rc-empty [ 160.835204][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.865060][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 160.999435][ T5759] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0 [ 161.141357][ T5759] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input5 [ 161.307154][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.329007][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.354112][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.372008][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.393980][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.411991][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.431946][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.452116][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.471981][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.491991][ T5759] mceusb 2-1:0.0: Error: mce write submit urb error = -90 [ 161.548740][ T5759] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 161.548769][ T5759] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 161.608190][ T5759] usb 2-1: USB disconnect, device number 5 [ 162.442102][ T5759] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 162.591837][ T5759] usb 2-1: Using ep0 maxpacket: 8 [ 162.607125][ T5759] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 162.607157][ T5759] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 162.607180][ T5759] usb 2-1: config 16 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 162.607199][ T5759] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 162.607240][ T5759] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 162.607262][ T5759] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 162.695234][ T6470] kernel profiling enabled (shift: 16) [ 162.714062][ T5759] usbtmc 2-1:16.0: bulk endpoints not found [ 163.005532][ T6473] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] SMP KASAN PTI [ 163.005560][ T6473] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 163.005582][ T6473] CPU: 1 UID: 0 PID: 6473 Comm: syz.0.250 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 163.005607][ T6473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 163.005620][ T6473] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 163.005657][ T6473] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 a5 09 8c fa eb 0c e8 9e 09 8c fa eb 05 e8 97 09 8c fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 61 60 f8 fa 4d 8b 36 4c 89 f7 e8 [ 163.005675][ T6473] RSP: 0018:ffffc90007aef810 EFLAGS: 00010246 [ 163.005696][ T6473] RAX: 0000000000000000 RBX: ffff88805f2ea090 RCX: 0000000000080000 [ 163.005712][ T6473] RDX: ffffc90005161000 RSI: 0000000000001f58 RDI: 0000000000001f59 [ 163.005727][ T6473] RBP: ffff88802b242000 R08: ffff888031df3e80 R09: 0000000000000004 [ 163.005742][ T6473] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 163.005763][ T6473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 163.005776][ T6473] FS: 00007f1889e066c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 163.005793][ T6473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.005807][ T6473] CR2: 00007f188bb97000 CR3: 000000002d210000 CR4: 00000000003526f0 [ 163.005827][ T6473] Call Trace: [ 163.005835][ T6473] [ 163.005842][ T6473] ? __pfx_dummy_udc_start+0x10/0x10 [ 163.005872][ T6473] gadget_bind_driver+0x3a8/0x9e0 [ 163.005896][ T6473] ? __pfx_gadget_bind_driver+0x10/0x10 [ 163.005915][ T6473] really_probe+0x254/0xae0 [ 163.005943][ T6473] __driver_probe_device+0x1e8/0x360 [ 163.005969][ T6473] driver_probe_device+0x4f/0x240 [ 163.005994][ T6473] __driver_attach+0x339/0x600 [ 163.006018][ T6473] bus_for_each_dev+0x23e/0x2c0 [ 163.006046][ T6473] ? __pfx___driver_attach+0x10/0x10 [ 163.006067][ T6473] ? __pfx_bus_for_each_dev+0x10/0x10 [ 163.006094][ T6473] ? rt_spin_unlock+0x157/0x200 [ 163.006123][ T6473] ? rt_spin_unlock+0x163/0x200 [ 163.006181][ T6473] bus_add_driver+0x348/0x670 [ 163.006214][ T6473] driver_register+0x23a/0x320 [ 163.006241][ T6473] usb_gadget_register_driver_owner+0xf9/0x270 [ 163.006272][ T6473] raw_ioctl+0x1503/0x40d0 [ 163.006297][ T6473] ? tomoyo_path_number_perm+0x219/0x5f0 [ 163.006323][ T6473] ? do_vfs_ioctl+0x1184/0x1550 [ 163.006351][ T6473] ? __pfx_raw_ioctl+0x10/0x10 [ 163.006378][ T6473] ? lock_vma_under_rcu+0x1d1/0x500 [ 163.006419][ T6473] ? __fget_files+0x2a/0x420 [ 163.006442][ T6473] ? __fget_files+0x3a8/0x420 [ 163.006473][ T6473] ? __fget_files+0x2a/0x420 [ 163.006494][ T6473] ? bpf_lsm_file_ioctl+0x9/0x20 [ 163.006524][ T6473] ? __pfx_raw_ioctl+0x10/0x10 [ 163.006550][ T6473] __se_sys_ioctl+0xff/0x170 [ 163.006576][ T6473] do_syscall_64+0x17b/0x530 [ 163.006596][ T6473] ? irqentry_exit+0x10f/0x8f0 [ 163.006615][ T6473] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.006635][ T6473] ? clear_bhb_loop+0x40/0x90 [ 163.006658][ T6473] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.006679][ T6473] RIP: 0033:0x7f188bbadb2b [ 163.006698][ T6473] Code: 00 48 89 44 24 18 31 c0 48 8d 44 24 60 c7 04 24 10 00 00 00 48 89 44 24 08 48 8d 44 24 20 48 89 44 24 10 b8 10 00 00 00 0f 05 <89> c2 3d 00 f0 ff ff 77 1c 48 8b 44 24 18 64 48 2b 04 25 28 00 00 [ 163.006715][ T6473] RSP: 002b:00007f1889e03f00 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 163.006737][ T6473] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007f188bbadb2b [ 163.006752][ T6473] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000003 [ 163.006764][ T6473] RBP: 00007f1889e04fd0 R08: 0000000000000001 R09: 00000000ffffffff [ 163.006778][ T6473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.006789][ T6473] R13: 00002000000000c0 R14: 0000000000000001 R15: 0000000000000000 [ 163.006808][ T6473] [ 163.006816][ T6473] Modules linked in: [ 163.006863][ T6473] ---[ end trace 0000000000000000 ]--- [ 163.006954][ T6473] RIP: 0010:dummy_udc_start+0xd0/0x1f0 [ 163.006991][ T6473] Code: 41 83 ff 03 74 18 41 83 ff 05 0f 85 93 00 00 00 e8 a5 09 8c fa eb 0c e8 9e 09 8c fa eb 05 e8 97 09 8c fa 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 61 60 f8 fa 4d 8b 36 4c 89 f7 e8 [ 163.007010][ T6473] RSP: 0018:ffffc90007aef810 EFLAGS: 00010246 [ 163.007029][ T6473] RAX: 0000000000000000 RBX: ffff88805f2ea090 RCX: 0000000000080000 [ 163.007045][ T6473] RDX: ffffc90005161000 RSI: 0000000000001f58 RDI: 0000000000001f59 [ 163.007059][ T6473] RBP: ffff88802b242000 R08: ffff888031df3e80 R09: 0000000000000004 [ 163.007074][ T6473] R10: 0000000000000100 R11: 0000000000000005 R12: dffffc0000000000 [ 163.007089][ T6473] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000001 [ 163.007103][ T6473] FS: 00007f1889e066c0(0000) GS:ffff888125af2000(0000) knlGS:0000000000000000 [ 163.007120][ T6473] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 163.007146][ T6473] CR2: 00007f188bb97000 CR3: 000000002d210000 CR4: 00000000003526f0 [ 163.007169][ T6473] Kernel panic - not syncing: Fatal exception [ 163.007768][ T6473] Kernel Offset: disabled