last executing test programs:

3m57.268030031s ago: executing program 1 (id=601):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000840)={"6cdd4237dd245c8404721efdc9c8dc1964125fa96fa42b761c6ec25b2bec0ba4c81036c93a40c8a4d4412a763b00040000000000003c5ca206c047ecee377abaece6b88378e38e06c5fc191f361d264ffa8b46485f02baee1ab6b8154252066178868d1ef4b53606000000000000007c21a984c2b9ca4bbb7a87165c0c1dbc75d7ea4df1001000000000694525952f44500a1f0db509c32cc7ace842c28f37f06e4ea9f1e5f0c6c379f9cc58bf69fcde317fad4825aa1b6a832d4e48cc41bb5a6baa41d614f6c8941bee805954a62d196a4e8d4bf6b21224b57f530d0000c1ff53bf79a1f5c5dc34cf2645cbc11c4562d22db88d0edc5daee171cc04d96d9ec2db07478f347edbd6424923ad4a5672b1b285c7988c4ec0922c655ff600000000c00dc290d936d93236051fadfb4b95d02c0bda7ce38dabb7cd103fe4d0c9c963cd717a77f8df8d46099b1f580968af6afbbc19db161c6df3e7c9c71bc08a282fc2c142856b5e4caff4c0a4f72445ef10dcd2c569319d6e9bb2058d023f669a64fc7d9684b45b00000000364673dcfa9235ea5a2ff23c4bb5c5acb290e8976dcac779ff0000f5620000003d4e185afe28a774b99d3890bd37428617de4cdd6f53c419ce31054182fd098af7b7f1b1152c691611f897558d4b755cb783978d9859b0537b05b623dcb5c4ca9317471a40fa4998cca80e961efffb4e1aa25d8a17deef0c8694c4395fc99be3c3fe7aeb8af4929ce7d346ca62b25d48fda5d10146702f78b233b5208752726ed9f0c340d494b92d19cc930bb8a5f8b4da8f4603ac0c3b698384e17a570dc8524823ed15af4ecfabb4b2541d3c114b7bba1c21a845c9cf0d1cc24aba47e30f558b2246ad95ccf7d2f80cc0ab26f08336ea1a33b79cf35b898837016eb211a1734c7af076e15451e33519fc978f66df7df4557c91024a8dc130a28ef5f63ad07b39c8d23b85cf434e065e8a29a80047fe17dee6f6347b4951f97b5703dc78b1ca9d74ea6a9ae12ab367c0de2659cc38d2f33ddd86e0597d33361eada119b5132145fa4525c488c7fffd6ceda6e9a02ebd97ced6b0161f2cc84615ceb8b18883299c636e9e46724a9a0600a8bb02f3e489631d522019a35fe12a33caf9dd8768ddbc02a484c345c3eff254297b1dbb04989c3f9f3c7b3c985c39b1d313018068d3809bac8c657e39f4f692613e28387e955722908dd88b56163be8312ff47c5b6f280472935af74e97a5a8110a4d74496f4c8ec82ddb010100000000000001a047526865c888c9ff36056cc4ad258021e1581d43badaaec6cc5a2ef989de9801fed6d4be2bfcfe656c9c46bffbe9dd03970800000000000000d372bdd6d89dc1ecf63c23d506114d0fba2bd1c69e8f7e3fccdcda85ce975ec1381b1cec6ddaa76e186719d819164300"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x100, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r6, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x72, 0x0, 0x0)
r7 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r8=>0x0})
bind$can_raw(r7, &(0x7f00000004c0), 0x10)
setsockopt$CAN_RAW_FILTER(r7, 0x65, 0x1, &(0x7f0000000140)=[{{0x4, 0x0, 0x1, 0x1}}, {{0x0, 0x0, 0x1, 0x1}, {0x3, 0x1}}, {{0x4}, {0x1, 0x1, 0x1}}, {{0x2, 0x0, 0x1}, {0x2, 0x1, 0x1}}, {{0x3, 0x1}, {0x4, 0x0, 0x1, 0x1}}], 0x28)
bind$can_raw(r7, &(0x7f0000000200)={0x1d, r8}, 0x10)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, &(0x7f00000000c0)={0x1, 0x0, 0x6e, 0x6, @vifc_lcl_ifindex=r8, @empty}, 0x10)
ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000040)=0x9)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000000)={0xc, 0x0, <r9=>0x0})
syz_usb_connect(0x2, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x41, 0xdc, 0x32, 0x8, 0xb57, 0x2a8d, 0x3374, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x60, 0x3, 0x0, 0x3, 0x1, 0x2}}]}}]}}, 0x0)
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r9, 0x0, 0x0, <r10=>0x0})
ioctl$IOMMU_HWPT_GET_DIRTY_BITMAP(r0, 0x3b8c, &(0x7f0000000200)={0x30, r10, 0x0, 0x0, 0x4000000000000000, 0x10000, 0x0, 0x0})
ioctl$IOMMU_VFIO_IOAS$GET(r6, 0x3b88, &(0x7f00000001c0)={0xc})
syz_usb_connect(0x5, 0x59, &(0x7f0000000140)=ANY=[@ANYRES64=r0], 0x0)

3m55.539308327s ago: executing program 1 (id=610):
syz_emit_vhci(&(0x7f0000002bc0)=ANY=[@ANYBLOB="02c90010000c00050017050800b5ae84"], 0x15)
r0 = socket$inet6_mptcp(0xa, 0x1, 0x106)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380), 0xc0001, 0x0)
ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)={0xa0, r5, 0x1, 0x1, 0x8000000, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_PEERS={0x4c, 0x8, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}]}]}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010)
sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001180)={0x40, r5, 0x301, 0x70bd2c, 0x25dfdbfe, {}, [@WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x20040000)
ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000000)=0x15)
r6 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'team_slave_1\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000080)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_OPTIONS_SET(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x5c, 0x0, 0x809, 0x0, 0x25dfdbff, {}, [{{0x8, 0x1, r10}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x14000}, 0x40010)
r11 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r11, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33)
recvmsg(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)=""/4125, 0x101d}], 0x1}, 0x40002022)
socket$kcm(0x10, 0x2, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r12 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2)
ioctl$KVM_SET_VCPU_EVENTS(r12, 0x4040aea0, &(0x7f0000000140)=@x86={0x6, 0x0, 0x28, 0x0, 0xc, 0x8, 0x4, 0xb, 0x2, 0xff, 0x5, 0x70, 0x0, 0xd, 0xb, 0x0, 0x0, 0x0, 0xce, '\x00', 0x4, 0x2})
ioctl$KVM_RUN(r12, 0xae80, 0x0)
connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000000c0)='cubic', 0x9)

3m55.413734097s ago: executing program 1 (id=611):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x58, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4)
mount$9p_fd(0x0, 0x0, 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB=',wfdno', @ANYRESHEX])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

3m53.58623883s ago: executing program 1 (id=628):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x201, 0xe4340000, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x81}, 0x0)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
r2 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$SW_SYNC_IOC_INC(r2, 0x40045701, &(0x7f0000000180)=0xffffffff)
r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)
pivot_root(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000400)='./file0\x00')

3m53.471075219s ago: executing program 1 (id=629):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x18, 0x29, 0x4, {0x4}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xad, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x1f0}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m53.169457614s ago: executing program 1 (id=632):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xe, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x260}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

3m53.024288927s ago: executing program 32 (id=632):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xe, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x260}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

2m24.055294652s ago: executing program 4 (id=1140):
r0 = syz_open_dev$usbfs(&(0x7f0000000100), 0x204, 0x4300c0)
r1 = socket$packet(0x11, 0x2, 0x300)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', <r2=>0x0})
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
r3 = userfaultfd(0x801)
ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x4})
ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1})
ioctl$UFFDIO_CONTINUE(r3, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r4 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000200)={0xaa, 0x30})
ioctl$UFFDIO_CONTINUE(r4, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}})
r5 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000001400), 0x2, 0x0)
ioctl$VIDIOC_CROPCAP(r5, 0xc02c563a, &(0x7f0000001440)={0x2, {0x7, 0x6, 0x6, 0x1}, {0x7fffffff, 0x3ff, 0xfe6, 0x9}, {0x1, 0x40}})
setsockopt$packet_int(r1, 0x107, 0x14, &(0x7f00000000c0)=0xf3e, 0x4)
sendto$packet(r1, &(0x7f0000000280)="81", 0x1, 0x0, &(0x7f0000000080)={0x11, 0x0, r2, 0x1, 0xf6, 0x6, @random="5afe8b181d50"}, 0x14)
ioctl$USBDEVFS_ALLOW_SUSPEND(r0, 0x5522)
ioctl$USBDEVFS_BULK(r0, 0x5523, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x5522, 0x0)
ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"})
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x100000000, 0xb0000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3b9ac9ff, 0x0, 0x8, 0x0, 0x2000000000000000, 0x5a6c101, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xf})
sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYBLOB="01022abd7000fedbdf250f00000021000e006804020004007e15000408"], 0x38}, 0x1, 0x0, 0x0, 0x20000050}, 0x48000)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_SET_LINK_PRI(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="7a391670fc4a4e841306009e190403e146c841316fc4631c9aa062f25ca49bcb4ab6cfbb54a77af51bf33445a9f136ad3a8a7d81e2ae25f90f6452d2ef5c74806c7d9e69c6d94563f481f4848855aa247db96d83cac651a8bd3b13c0"], 0x68}, 0x1, 0x0, 0x0, 0x200480d0}, 0x0)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='attr\x00')
getdents(r7, 0x0, 0x0)
faccessat2(r7, &(0x7f0000000140)='./file0\x00', 0x100, 0x1300)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="280000002100010002000000000000000a00000000000001016200000c0014"], 0x28}], 0x1, 0x0, 0x0, 0x8000}, 0x0)
ioctl$USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522)
ioctl$USBDEVFS_SETINTERFACE(0xffffffffffffffff, 0x80045510, &(0x7f0000000000))

2m24.039435547s ago: executing program 4 (id=1142):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, &(0x7f0000000600)=ANY=[@ANYBLOB=',wfdno', @ANYRESHEX])
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, 0x0)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb0", 0x49}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

2m22.027529175s ago: executing program 4 (id=1152):
r0 = socket$kcm(0x10, 0x2, 0x10) (async)
r1 = socket$packet(0x11, 0x3, 0x300) (async)
r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001680)={<r3=>0x0, @rand_addr, @local}, &(0x7f00000016c0)=0xc)
ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f00000017c0)={'erspan0\x00', &(0x7f0000001700)={'erspan0\x00', r3, 0x40, 0x727, 0x8001, 0x3, {{0x19, 0x4, 0x2, 0x2e, 0x64, 0x68, 0x0, 0x80, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@timestamp_prespec={0x44, 0x3c, 0x5f, 0x3, 0x6, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x4}, {@multicast2, 0x7}, {@remote, 0x3}, {@rand_addr=0x64010102}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xd}, {@remote, 0x100}]}, @rr={0x7, 0x13, 0x1f, [@private=0xa010101, @multicast1, @private=0xa010100, @remote]}]}}}}})
setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async)
r4 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r4, 0x1, 0x41, 0x0, 0x0)
r5 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x9007}, 0x4) (async)
sendmmsg$inet6(r4, &(0x7f00000015c0)=[{{&(0x7f00000000c0)={0xa, 0x4e20, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c, &(0x7f0000000200)=[{&(0x7f0000000100)="a8726c2642a246a71defbda63aadd7d5ac3f502ef213e8c539daa87bcf532f418bffafb9e2c97a9c053dd257362f02a3b616f9d4129dd6622fcbfba19595ce596c76190ec185597e1efb4f6066187917d12ff38cecd993e23497bb406bff855ee1149beb77020c886287bbd53a61f248bb827777ea6e35b1bf659675d58c30ad576428a31cc08191f5b8cfad90e337bac7108ce0d704a01710131a2b9dd0145231731d52cdd4882cf1c1248db44e4fd916cccc6987a35274a62eb32214a45689d13adae36a9ba36081f44328a3a4432dffa6322da37cb6069dc4791886ff3f387701c82d52349b303d48870e628d1ad997f9", 0xf2}], 0x1}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="203e49b5c54e08cccc910ce73ac7d823ed68b06684c1ad3e763fd6b676226fb86435c4209c4359962c223995d06b5f0d9d8116bcbce7a94043c2f4659ca5164d18822313ee03c8175caf0c4a5184e29c6c1388f2ad11855bf35f9a2a1a6135870bacf9b9577540c1a952af99035ad1f15e129b88f0f7eeb1d14812263d8d3faf638461825a64ee83e8cb8b5b2d1aa154a750606e81b8e3a30b7f213651feba66bb55484d764b7de84d0912383afb3b856e21", 0xb2}], 0x2}}, {{&(0x7f0000001340)={0xa, 0x4e22, 0x1bb, @rand_addr=' \x01\x00', 0x32d31047}, 0x1c, &(0x7f0000001580)=[{&(0x7f0000001380)="b1e518969b16767a9b2f7219c769bdfd2da24d8c6af78ca937425ae94cc9c99363f3de65a032c76a61dc5309304890b09459ec373587a738dd074e91c1b1a7cc5de62689bb304c6bdba1ef6ded84e28247eeacf7706bb908772bafba1f054510a82de34f3f42cd9a8447c379ab7419fc4fd38f04e06089abdf0c65001434c1622039bcd79a7ed9b1654356aa90", 0x8d}, {&(0x7f0000001440)="b3e5fcfa51cda96225cf4b3cb43a6e004dd953c0cfdf3d4133d1a9419a3e10f561556fd8e81223d90c01a10b257eecc45699add663677289dde48b6fffae9ae16671dbf54b3fe617e4d3cc971950ef7fc76a566bff106504f3d56e3254573cd6a47fb8c562d9", 0x66}, {&(0x7f00000014c0)="5b011665d1f38f3f61e1557198cf6b43e47bda0601a095600cad544071210de63b590168e9bffe5ea5b8223a56478dbda8228eb54b8c90fb0bcf58a6a83e367c7d1846c83a010570646183694dad6d836b3c3f5f98436273185bc0eaef7184bcca91b9276db66f14bc87ac843425b1878ffa674e908a06e8c2a0eaf141fcbd910b4b7f63ad804e720bf8f133789be7092d7784b334720a18e587c4a46610e698", 0xa0}], 0x3}}], 0x3, 0x40) (async)
setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x6, 0x0, 0x3}, 0x1c)
sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003f000b05d25a806c8c6394f90324fc60100002000a000300053582c137153e3704020180fc0b09000c00", 0x2e}], 0x1}, 0x40)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000094b24610b11342003d9d0102030109021b000100000000090400390009"], 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)

2m18.145689701s ago: executing program 4 (id=1167):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'wp256-generic\x00'}, 0x58)
r1 = accept4$alg(r0, 0x0, 0x0, 0x0)
sendmmsg$sock(r1, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xe, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xae, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014e3"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x260}}], 0x1, 0x810)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r4, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r5 = accept4(r4, 0x0, 0x0, 0x800)
sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8a}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

2m17.923546572s ago: executing program 4 (id=1170):
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0)
mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0])
mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400))
chdir(&(0x7f0000000080)='./file1\x00')
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x80, 0x0)
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r2, 0xc018937c, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x1}}, './file0\x00'})

2m17.055449084s ago: executing program 4 (id=1173):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000)
io_getevents(0x0, 0x80000001, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680})
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b810c976044216fdc6f602020083a10200000000000002000a090582020002e4a8b9166a9402000000100000"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x0, 0x10, 0xc, "0a32aff1f6c23dceb5d21e9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="407075b80ed8a05f5af3f880499e0c31c2d82a85a366fbc26f91c9dd9703dea1db10036af404fc72076a2e94c0ca678246d7"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000400)={0x40, 0x15, 0x28, "6db18531e052ac0b10cf08423f29f415b6ea83f34deb31aabd35f47aac14ec29edf3118aa0d8197f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x220028, &(0x7f0000000680)=ANY=[@ANYBLOB="66643d2be05b8d63dc8f5ca860ceb60f24ccf2a8f2462dde5bee9bada82fde30536ac5514d37af", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="1f95d63c50e3660d3a3b4f8f44e64b492f0a56967082eb709ec295ce37989252a4701597cf4e5b17c16d2b91d01202a5ef2981837f60202434b893d02ea23049b5e6ea064371905b582c9d8d32b96b24a5a3e6b736f4c64ca1c2a5826dfe36cc8ac0507db660f6792df0af858ee47c07b54d6da98649b4ab16de714fcf96affc2558127e03a09b08f833c15cc0cb268178d499f69a1e032a2260950b77a33b5cc7b0c0d395bb19daba85a4903f230e"])
file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x4a, 0xffff, 0x0, 0x0, 0x40, 0x10000004}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a040000052412d2790e"], 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
setuid(0xee00)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0xc0046686, 0x0)

2m1.996561406s ago: executing program 33 (id=1173):
openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x40, 0x0)
set_mempolicy(0x3, &(0x7f0000000000)=0x7, 0x7)
syz_clone(0x640c7400, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x1000000000040000)
io_getevents(0x0, 0x80000001, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x989680})
r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1)
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="12014101f2c59620d016b810c976044216fdc6f602020083a10200000000000002000a090582020002e4a8b9166a9402000000100000"], 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000005c0)={0x44, &(0x7f00000002c0)={0x0, 0x10, 0xc, "0a32aff1f6c23dceb5d21e9d"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000140)=ANY=[@ANYBLOB="407075b80ed8a05f5af3f880499e0c31c2d82a85a366fbc26f91c9dd9703dea1db10036af404fc72076a2e94c0ca678246d7"], 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = socket$can_raw(0x1d, 0x3, 0x1)
bind$can_raw(r3, &(0x7f0000000000), 0x10)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r2, 0x0, &(0x7f00000004c0)={0x34, &(0x7f0000000400)={0x40, 0x15, 0x28, "6db18531e052ac0b10cf08423f29f415b6ea83f34deb31aabd35f47aac14ec29edf3118aa0d8197f"}, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x220028, &(0x7f0000000680)=ANY=[@ANYBLOB="66643d2be05b8d63dc8f5ca860ceb60f24ccf2a8f2462dde5bee9bada82fde30536ac5514d37af", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRES64=0x0, @ANYRESOCT=r1, @ANYBLOB="1f95d63c50e3660d3a3b4f8f44e64b492f0a56967082eb709ec295ce37989252a4701597cf4e5b17c16d2b91d01202a5ef2981837f60202434b893d02ea23049b5e6ea064371905b582c9d8d32b96b24a5a3e6b736f4c64ca1c2a5826dfe36cc8ac0507db660f6792df0af858ee47c07b54d6da98649b4ab16de714fcf96affc2558127e03a09b08f833c15cc0cb268178d499f69a1e032a2260950b77a33b5cc7b0c0d395bb19daba85a4903f230e"])
file_setattr(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0xfff, 0x245b1f2a, 0x8000, 0x10000}, 0x18, 0x1000)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r0, &(0x7f0000002980)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r5, {0x7, 0x1f, 0x2000, 0xa68d7c519f800ff1, 0xffbc, 0x6, 0x4a, 0xffff, 0x0, 0x0, 0x40, 0x10000004}}, 0x50)
syz_fuse_handle_req(r0, &(0x7f0000008380)="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x20, 0x0, 0x68cc, {0x0, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x0, 0x56, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000143edd08b82225646cd3010203010902440001000000000904000000020a0000052406000105240000000d240f0100000000000000000006241a040000052412d2790e"], 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
setuid(0xee00)
ioctl$KVM_CAP_X86_USER_SPACE_MSR(r6, 0xc0046686, 0x0)

5.873567508s ago: executing program 2 (id=1998):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

4.247013999s ago: executing program 2 (id=2010):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$OSF_MSG_ADD(r0, &(0x7f0000002880)={0x0, 0x0, &(0x7f0000002840)={&(0x7f0000000000)=ANY=[@ANYBLOB="68020000000501040000000000000000070000025402010001"], 0x268}, 0x1, 0x28, 0x0, 0x20000800}, 0x800)

4.167953602s ago: executing program 2 (id=2012):
semctl$SEM_STAT_ANY(0x0, 0x4, 0x14, &(0x7f0000000040)=""/173)
r0 = socket$kcm(0x29, 0x2, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', <r3=>0x0})
sendmsg$ETHTOOL_MSG_FEATURES_SET(r1, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000340)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}, @ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x2c}}, 0x4004)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={<r4=>0xffffffffffffffff})
r5 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYRESOCT=0x0], 0x0)
syz_usb_disconnect(r5)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100009ac0b620110f2110"], 0x0)
r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r6, 0x0, 0x11)
read$char_usb(r6, &(0x7f0000000100)=""/178, 0xb2)
socket$kcm(0x29, 0x0, 0x0)
syz_usb_ep_write(r5, 0x81, 0x1, &(0x7f00000000c0)="ad")
syz_usb_connect(0x2, 0x0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(0xffffffffffffffff, 0x0, 0x0)
getsockopt$inet_pktinfo(r4, 0x0, 0x8, 0x0, 0x0)
r7 = semget$private(0x0, 0x4, 0x40)
ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={r4})
semtimedop(r7, &(0x7f0000000140)=[{0x4, 0x5, 0x7207ed1a92430e3}], 0x1, 0x0)
semctl$SEM_STAT_ANY(r7, 0x4, 0x14, &(0x7f0000000100)=""/174)

2.155303905s ago: executing program 5 (id=2027):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

1.947385293s ago: executing program 0 (id=2031):
r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0)
io_setup(0x81, &(0x7f0000001440)=<r1=>0x0)
r2 = syz_io_uring_setup(0x2af8, &(0x7f0000000380)={0x0, 0x0, 0x13090}, &(0x7f0000000340), &(0x7f0000000080))
pipe(&(0x7f0000000180)={<r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f0000001280)=[{&(0x7f0000001180)="83", 0x1}], 0x1, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
io_submit(r1, 0x1, &(0x7f00000008c0)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
ioctl$IOCTL_VMCI_VERSION2(r0, 0x7a7, &(0x7f00000000c0)=0xb0000)
ioctl$IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, &(0x7f0000000000)={@hyper})
ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r0, 0x7a8, 0x0)

1.64840457s ago: executing program 0 (id=2032):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
setreuid(0x0, 0xee00)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x240)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x56, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x188}}], 0x1, 0x810)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{}, {0x9, 0x8}}}}, 0x9)

1.61362696s ago: executing program 0 (id=2033):
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10f, 0x4})
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
dup3(r1, r0, 0x0)
r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x10000000000)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0})
ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x78, 0x0, &(0x7f0000000280)={@ptr={0x66642a85, 0x0, 0x0, 0x0, 0x40000000000002, 0x400000000024}, @ptr={0x70742a85, 0x20000002, 0x0, 0x0, 0x2}, @ptr={0x70742a85, 0x1, 0x0, 0x0, 0x1, 0xd}}, 0x0}, 0x1000}], 0x0, 0x0, 0x0})

1.559229817s ago: executing program 5 (id=2034):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040)={0x4a, 0x40, 0x5, 0x6e, 0x7c, 0xff, 0x9, 0xc4, 0x3, 0x8, 0x4, 0x0, 0x9b, 0x5}, 0xe)
shutdown(r1, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000140)={<r2=>0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e24, 0xdcdf, @loopback, 0xffff}]}, &(0x7f0000000100)=0x10)
getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000080)=@assoc_value={r2, 0x200}, &(0x7f00000000c0)=0x8)
r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008001000000100000800130000000000080012"], 0x44}}, 0x0)
r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000180)={0x1f, 0x0, @fixed}, &(0x7f00000001c0)=0xe, 0x800)
setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f0000000200)=0x6, 0x4)

1.557767913s ago: executing program 0 (id=2035):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) (async)
open(&(0x7f0000000080)='./bus\x00', 0x143142, 0x0)
mount(&(0x7f00000004c0)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000003c0)='9p\x00', 0x2208440, &(0x7f0000000300)='trans=rdma,') (async)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) (async)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0)
write$binfmt_misc(r2, &(0x7f0000000040), 0xe09) (async)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x2, 0x0, 0x0, 0x0, 0xb, 0x1c, "fee8a2ab78fc979fd1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "f4bd00b94e3d500007000000e0ff00000018000500", [0x0, 0x2000000000001]}}) (async)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={<r3=>0xffffffffffffffff}, 0x13f, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_BIND(r0, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r3, 0x30, 0x0, @ib={0x1b, 0x3ff, 0x0, {}, 0x2000000000001005, 0x401}}}, 0x90) (async)
r4 = socket$igmp(0x2, 0x3, 0x2)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380"], 0x44}}, 0x0) (async)
write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000280)={0x8, 0x120, 0xfa00, {0x3, {0x5393, 0x7, "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", 0x16, 0x3d, 0x3, 0x8, 0xf, 0xc, 0xa}, r3}}, 0x128)
setsockopt$MRT_TABLE(r4, 0x0, 0xd1, &(0x7f0000000000)=0xffffffff, 0x4) (async, rerun: 64)
syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002f38ca810ac050a123237010203010902121401800b50580904bb000027f8007f"], 0x0) (rerun: 64)

1.487139476s ago: executing program 5 (id=2036):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xe, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xad, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x260}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f", 0xcd}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

1.486683517s ago: executing program 0 (id=2037):
r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_disconnect(r1)
close_range(r0, 0xffffffffffffffff, 0x0)

1.365883479s ago: executing program 5 (id=2038):
socket$key(0xf, 0x3, 0x2)
socket$caif_stream(0x25, 0x1, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xb0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x4000)

1.307621697s ago: executing program 5 (id=2039):
r0 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x88602, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, 0x0)
ioctl$SNDCTL_DSP_GETODELAY(r0, 0x80045017, &(0x7f0000000040))
inotify_init1(0x800)
pselect6(0x40, &(0x7f00000002c0)={0x3, 0x7fff, 0x0, 0x1, 0xffffffffffffffff, 0x8, 0x400, 0x84}, &(0x7f0000000300)={0x9, 0x6, 0x10001, 0x3, 0xf, 0x0, 0x7ff, 0x6}, 0x0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_usb_connect(0x0, 0x3f, &(0x7f0000000100)=ANY=[@ANYBLOB="120100010038d408f01002204ddc0102030109022d00f4da06800809045f40030a0000400905ff0f010202040c09050a0c400001c60d090582"], 0x0)
sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)={0x1c, 0x2e, 0x9, 0x70bd27, 0x0, {0x4}, [@typed={0x6, 0xb, 0x0, 0x0, @str='{\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x42804}, 0x84)

1.119353515s ago: executing program 2 (id=2040):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000d40)={0x44, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x44}, 0x1, 0xa00}, 0x0)

1.114597393s ago: executing program 2 (id=2041):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
setreuid(0x0, 0xee00)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x240)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xd0, 0x29, 0x4, {0x4, 0x16, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x56, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x188}}], 0x1, 0x810)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{}, {0x9, 0x8}}}}, 0x9)

1.033434223s ago: executing program 2 (id=2042):
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x68, &(0x7f00000004c0)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e20, 0xa07, @private2, 0x60}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x2, @mcast1, 0xb}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x39}}]}, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0)
setsockopt$TIPC_SRC_DROPPABLE(0xffffffffffffffff, 0x10f, 0x80, &(0x7f00000000c0)=0x9, 0x4)
mount$9p_fd(0x0, &(0x7f0000000680)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x8802, 0x0)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="2c235aa9c5", 0x5)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
syz_usb_control_io$cdc_ecm(r2, &(0x7f0000000140)={0x14, 0x0, &(0x7f0000000100)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0)
syz_usb_ep_write$ath9k_ep1(r2, 0x82, 0xc38, &(0x7f0000000dc0)=ANY=[])

715.172838ms ago: executing program 3 (id=2043):
r0 = syz_open_dev$sg(&(0x7f0000000000), 0x8, 0x400)
mprotect(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x8)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
mbind(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, &(0x7f0000000040)=0x400, 0x91e1, 0x1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x81}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, 0x4, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x2004810}, 0x8004)
ioctl$SIOCX25SCUDMATCHLEN(r1, 0x89e7, &(0x7f00000001c0)={0x19})
sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r2, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x7, 0x1, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x40)
r3 = memfd_secret(0x0)
r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000480)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x60, r4, 0x300, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_QOS_MAP={0xc, 0xc7, {[], "e1422ee26370997e"}}, @NL80211_ATTR_QOS_MAP={0x36, 0xc7, {[{0x8, 0x3}, {0x10, 0x7}, {0x5, 0x2}, {0x3, 0x2}, {0xfb, 0x7}, {0x6, 0x2}, {0x91}, {0x3, 0x3}, {0xfc, 0x3}, {0x4, 0x1}, {0x7, 0x4}, {0x2, 0x2}, {0x4, 0x5}, {0x2}, {0x7, 0x7}, {0xef, 0x2}, {0x0, 0x2}, {0x6, 0x7}, {0x2, 0x7}, {0xc, 0x2}, {0x8, 0x5}], "46cbf9d72dd792a9"}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000000}, 0x4080)
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f00000004c0)=0xfffffffa, 0x4)
ioctl$RTC_UIE_ON(r3, 0x7003)
ftruncate(r3, 0x8)
getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r6, 0x84, 0x13, &(0x7f0000000500)={<r7=>0x0, 0x81}, &(0x7f0000000540)=0x8)
setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000580)={r7, @in={{0x2, 0x4e23, @multicast1}}}, 0x84)
setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000640)=0xd, 0x4)
getresuid(&(0x7f0000000680)=<r8=>0x0, &(0x7f00000006c0), &(0x7f0000000700)=<r9=>0x0)
quotactl_fd$Q_QUOTAOFF(r3, 0xffffffff80000301, r9, 0x0)
r10 = gettid()
ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000f80)=<r11=>0x0)
ioctl$TIOCGPGRP(r6, 0x540f, &(0x7f0000001480)=<r12=>0x0)
getresgid(&(0x7f00000014c0)=<r13=>0x0, &(0x7f0000001500), &(0x7f0000001540))
fcntl$getownex(r1, 0x10, &(0x7f0000001580)={0x0, <r14=>0x0})
lstat(&(0x7f00000015c0)='./file0\x00', &(0x7f0000001600)={0x0, 0x0, 0x0, 0x0, 0x0, <r15=>0x0})
sendmsg$netlink(r6, &(0x7f0000001700)={&(0x7f0000000740)=@kern={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001400)=[{&(0x7f0000000780)={0x350, 0x42, 0x300, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x8, 0xf0, 0x0, 0x0, @fd=r6}, @nested={0x335, 0x20, 0x0, 0x1, [@generic="a9748cd13ff6be188800cd50538d22a4072b06f2b5b1e9d6b86443d7e97ae459f408c0638d4b14a3323abbc684f9d7633879e780e64eb0e33a3070970204c2fb052de28fa0052f98ea63cf0e8011ed9da348bcb6e7f8f923721fbd85dc3706a4b28180de28a801f8b0c5df272fe13db03e478cac5433520349dca742635efa9fd68b1b91067efcadac87e46ea0fb27767cc14d01ed922ea6ca", @typed={0x8, 0x123, 0x0, 0x0, @u32=0x6}, @typed={0x74, 0x102, 0x0, 0x0, @binary="806785f804c820713248f09bcbcc084bdbc9bacd131d4e33691fac293691098efcefbf01742c6bb392c9c167ed913f17597f6045c7d07a6463b8f88c7f3e5c874241e14fc24618d91f6ad1aa063b2033863cee312df85af8638f06313b1cb82bb15aad2d31efb0162e132dd9fcc2b979"}, @typed={0x4, 0x43}, @generic="2341ba131de8285de57ec39f13c524b08b52ab24b5733ae2c179efa978e7a99f252623a41d10fde913b58e15d08ccc73f3221fb2500f8db003cb8f80300f0e6eca2241a3e986ab887316a39e01443423ff28d9a6da19c91795e7d95458767454dbae26e5aff6c3d67d1a9a1afde76f6e980a6a", @generic="2e96cff1b24e1dcc3a0b6a51dbad0ccdf7b55caa3c44fcaf1ba222d193820e2e361cdb5b4012fbef9f32f7b799ec4afb5714a96485ff97144b88e94e122466a647d46583faadc2cb1f8579509cb593d540504d925a", @nested={0x4, 0x3c}, @generic="8a45dd2615ec914457d5eb1525d5ff5e8bf5d6a9f7c155723ae382296dd09d614c1426213f19a7bf31a6873e47f5fa8c7b9e4035f49085743b4cf44cca51a9cdfef3ee24ee468f6db53ec12dbe5ee8c7b40170adc100e877ef78b34648243b03dcc96778eb88f0104add9c040c44184e149017a4246349c9354e1c180621ff9208596553823b75a4bb012d9ba1e046aba735ed08ec42d944635cc01383533e7f8c6413943e6f072cf37542711f57d7ae74f79ab347ce921a339a33185e4a158462b0dd8e48458c", @generic="308e22e5ba52aee1d93cc0a87684a198b3c162c6bca51596f7b3a561134dcf22b07f51bfdd6829b64c95451c200bb5cb64349aec61688b6202db9b6db8b6416335b863e7d734939391b9efcfbaa561a5095435d2fe36ef9483d398b7c2ca9fa59614f32f388bf38c2c7fa09f5f6f8fab0bebf63f8279cad7268276d6e047ba532514b69cfc"]}]}, 0x350}, {&(0x7f0000000b00)={0x294, 0x27, 0x20, 0x70bd26, 0x25dfdbff, "", [@typed={0x8, 0x117, 0x0, 0x0, @u32=0x3}, @nested={0x274, 0x159, 0x0, 0x1, [@nested={0x4, 0x10a}, @generic="c3082597de66f096e2ff6b8600de23803d52341b79e3200ae3fa4f13289281ad07da790377cbc2553d5c3d743d1d9e09d3889b054fded37c698beabe2c0aa7ebfd4f39873631b335fd5233c77d62b8269c3ac0b0b1f49b14cfab583a9c55d57f55ac59db0469627f288b5d9179700192a2bd12c8a6fe8bb710da88d5e644e69a03b38fd4a58da88f02b25dfb91544f8ce6a89a74931be8e440ac19b1cafdbb3a049d0eed39ee4ac025d9bf2b619fc03790cf0c250b0e42284f220b406e1c501f6486f5e6453c61f322ce9251245cfabc221b18ba1624e25de168fd", @typed={0xfc, 0x79, 0x0, 0x0, @binary="6e59507686c04bc49715acdc73557d0d69be12b9ff3b2c8ba9fb7dd800f1e8bea815a03eb893e441f6a2770a9544a067d90dd1771fcc49035f841a1b9c93656b111b2ed8eb1734d799fb1c6b91a79b2e0c1f72aa598c443e9e9cdbe20059d1194820248c1859cdebee97a484269022748d7960aef4db01b6f7a5299fd344ef64a241c3219aabbcacac2ecaa4f48f4b37f4995b2591a9d8bb1616056def57ee431779f560b8630829a1ecb294691166351f13a34a10bdf41b0c31fc3f9128397cfb320fceca311bbd99a22e535a827e0b6bccdba42360fb8b219f1c310e00a77cfbdf918641f8d2032853f819879f350c1b9883739ba5592f"}, @generic="aedca528800d94fdbd2ceb83cad7796d582158dee8fc8271b68a4611e08402f6cc53edb07966df14f1c98759049cff7453c536657bb075de50a9d21986e437b74c0f95f37372070126be02984bb05d7b5aff8be119b0dcbbb4bd08d72e3cf30d8be604792a610c938c72bd83aea8dc7873790449178bb2fb68a9aef7bd3b638d81b8568ce5e6afd2ff81f349da", @typed={0x8, 0x62, 0x0, 0x0, @uid=r8}]}, @typed={0x8, 0xd5, 0x0, 0x0, @u32=0xe389}]}, 0x294}, {&(0x7f0000000dc0)={0x18c, 0x38, 0x300, 0x70bd25, 0x25dfdbfd, "", [@generic="1f069b1246fc0a58c4e4fe34f62a6c1e94618e2edfb1e4d70d8c5e8dd567666c86df6c07dbe3ccbf1548c40fcef67f05f0f4e615a18e8744b675931c514131d891b9f8318991b81168b81946319d145d2131ee1a151d058f1138f4a310bcb9d4fb65102d0e4feae23cd646", @generic="ccd4d2d80dcbee3240fa5c99aaf0fdf05c3c04b31e964de53867df74c958db589f70277f4bd2b4b4a292701af4a41732299d391f366e3b5cae9ac4371b8ea588d01f973c5f4c2601528004f45ac6270404b3f8d55e050d6477d97e22771576757ced7d04c665d0f23975b8ed5dc0e6fb305ca7ede77e6a82b2648ee7738bd12f7c0e5aaefa8bcb754cc9ed0e511592203a47c9286cc0e1e5c5f0e0eb66900fc824f627cbb3c9ddeaf199a4fcd898901cbb16f64f78a4334ca03cc651a3d883361fca75b08058b9704cdd254a67d8b218063cfa0b011811e01faf7e3371c52b200b63f34e529b5fddec3b907423e521d6c17459ad538d37", @nested={0x10, 0x1f, 0x0, 0x1, [@typed={0x8, 0x145, 0x0, 0x0, @uid=r9}, @nested={0x4, 0xc6}]}, @nested={0x4, 0xdd}, @typed={0x4, 0x52}]}, 0x18c}, {&(0x7f0000000fc0)={0x130, 0x3d, 0x0, 0x70bd2b, 0x25dfdbfb, "", [@nested={0x10f, 0x78, 0x0, 0x1, [@nested={0x4, 0x1a}, @generic="265138a13b0c9d930de646009ef2d6ea4808c4e819ab6b2d125e2ad708ecbda25ce27776045cf14807d8d94aa564dd", @generic="0d464a1cb59b27ff7c56da330321e612512391803a71ab06b0ea4570296f60806a5fd8dd18563e096e6730fe463d37c2e2d569d7707df33be7a2c17dd91f1ee079b214c3470abdd0a673cc7f1850768b2a698e6198986935b11f8ea81a0f8df455d6e7db323e1b1e3a92951b0a3a9a02849013066948f3e7ecd1dc57c0d5ea7d83671416728e65e384443d549014a2e31613f26229331936c75dd847fd445535fc4215cddb7ab8c8c8d152671862d7510da4a031b5df5cba98f933727178d72acf867d0cfdab130595a37703873e96d7", @typed={0x8, 0xb8, 0x0, 0x0, @pid=r10}]}, @nested={0x8, 0x152, 0x0, 0x1, [@nested={0x4, 0x93}]}, @typed={0x8, 0x80, 0x0, 0x0, @pid=r11}]}, 0x130}, {&(0x7f0000001100)={0x268, 0x2b, 0x400, 0x70bd26, 0x25dfdbfd, "", [@generic="66a9a21ed5a52dcfaeb091da5c8fe1746cb3f61d573e838903d9adf8273837cba3eba54f8b0e7fdf58e58b366e9e4059657735116bc0da95d10d3739b50ad8db27778f682d2852ae1561b8b50380b01f05d764658dc2062054c6", @typed={0x8, 0xff, 0x0, 0x0, @binary="22a7bfff"}, @typed={0x8, 0xc9, 0x0, 0x0, @fd=r6}, @typed={0x8, 0x2, 0x0, 0x0, @uid=r8}, @nested={0x96, 0xf1, 0x0, 0x1, [@nested={0x4, 0x19}, @generic="1b5275458baffabe24ff9aaecf73a1e84320ebbac44f238d2ca555f057f2a527ed040780ba9ca1e7dc0534fb4c261fd0cbd675cb6287895e13f1215d901fefa02d64a44103b2855af9337aa043985e2c5831bc21edc13eaabea308ce5ad2d08aca67acf4bed471cc2c4b058bc4dd7e75f3c68f457758c8e98939ee1e1e229698b73603c38267", @typed={0x8, 0x2c, 0x0, 0x0, @ipv4=@broadcast}]}, @typed={0x8, 0x6e, 0x0, 0x0, @fd=r0}, @nested={0x12e, 0x8e, 0x0, 0x1, [@generic="2c3cd27455e49ccef6c85c9f7585c7e22041e15295710f6037b1e51a0b139b4d4ac4a3b7af", @generic="c9678fb16ee7ca0d5080fe26ec21735e1677d804c3a482cec881038dbdea30e86c968922d4f959c479c1d19f518381fc39d829f61576408f5679bcf9cd2141eb781312a769c7c2fa3692c149cdf3df303cfefdbe00cde0782a0d7e6b30d2d5d8ee67448d62d823d9bffe6a5216a1992903866f48c4c9ea7961071d956d37d5ddd1a8d2e692716fb4da329b71ad3ae7b4cfb8924a5244e8ee84cdaaead27b6e571c49831c793bc885730a48d7362476473654df8e491bca02eaef21a49bd25af3651b20cc0ad6af67b2713e7267a4c50c2e8f63f7f862f8dd0795d4e6628ac8afc863f0418cbe0581", @generic="7f6c7c1cd3999ab301ee019446c178266d89030f50", @typed={0x8, 0x22, 0x0, 0x0, @uid=r8}]}, @typed={0x14, 0xb, 0x0, 0x0, @ipv6=@empty}]}, 0x268}, {&(0x7f0000001380)={0x60, 0x19, 0x300, 0x70bd2d, 0x25dfdbfe, "", [@nested={0x18, 0x3a, 0x0, 0x1, [@nested={0x4, 0x137}, @nested={0x4, 0x5b}, @typed={0xc, 0x78, 0x0, 0x0, @u64=0x9}]}, @nested={0x37, 0xbd, 0x0, 0x1, [@typed={0x8, 0x57, 0x0, 0x0, @ipv4=@broadcast}, @nested={0x4, 0x9c}, @typed={0xc, 0x5e, 0x0, 0x0, @u64=0x40}, @typed={0x4, 0x7}, @generic="17749bf92192fba024fc1d6ac2e83330874b97", @nested={0x4, 0x8}]}]}, 0x60}], 0x6, &(0x7f0000001680)=[@rights={{0x1c, 0x1, 0x1, [r2, r3, r2]}}, @cred={{0x1c, 0x1, 0x2, {r12, r9, r13}}}, @cred={{0x1c, 0x1, 0x2, {r14, r9, r15}}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r0, r2]}}], 0x80, 0xc0}, 0x20044810)
r16 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000001740)='/proc/sys/net/ipv4/tcp_rmem\x00', 0x1, 0x0)
ioctl$AUTOFS_DEV_IOCTL_READY(r3, 0xc0189376, &(0x7f0000001780)={{0x1, 0x1, 0x18, r16, {0x9}}, './file0\x00'})

713.326016ms ago: executing program 5 (id=2044):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000000)=0x4, 0x4)
r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0)
r2 = socket$inet6_mptcp(0xa, 0x1, 0x106)
setsockopt$SO_TIMESTAMP(r2, 0x1, 0x41, 0x0, 0x0)
connect$x25(r1, 0x0, 0x0)
r3 = timerfd_create(0x0, 0x0)
timerfd_settime(r3, 0x3, &(0x7f0000000140)={{}, {0x77359400}}, 0x0)
clock_adjtime(0x0, &(0x7f0000000000)={0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b9ac9ff, 0x0, 0x0, 0x0, 0x0, 0x5a6c103, 0x0, 0x1})
timerfd_settime(r3, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0)
r4 = syz_usb_connect$hid(0x2, 0x3f, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0xeef, 0x72c4, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x60, 0x2, [{{0x9, 0x4, 0x0, 0x0, 0x7, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x36, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc, 0x2, 0xe}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x81, 0x8, 0x80}}]}}}]}}]}}, 0x0)
r5 = syz_open_dev$tty1(0xc, 0x4, 0x1)
r6 = dup(r5)
write$UHID_INPUT(r6, &(0x7f0000001040)={0xfc, {"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", 0x1000}}, 0x1006)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r7)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan0\x00'})
sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r8, 0x1, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x20008040}, 0x2000c010)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000380)=ANY=[@ANYBLOB="1221000009"], 0x0)
syz_usb_disconnect(r4)
r9 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[], 0x0)
r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10)
sendmsg$netlink(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x114, 0x34, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x1, 0x0, 0x0, @u64}, @typed={0x14, 0x3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0)
syz_usb_control_io$hid(r9, 0x0, 0x0)
syz_usb_control_io(r9, &(0x7f00000001c0)={0x2c, &(0x7f00000000c0)=ANY=[@ANYBLOB="000085"], 0x0, 0x0, 0x0, 0x0}, 0x0)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'wpan1\x00', <r11=>0x0})
sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x1c, 0x0, 0xb15, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2600c8c0}, 0x4)
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000400)={'wpan3\x00'})
ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'wpan0\x00', <r12=>0x0})
sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x6c, 0x0, 0x4, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r11}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20000810}, 0x200c08d4)

704.057442ms ago: executing program 3 (id=2045):
r0 = open(&(0x7f00000001c0)='./file1\x00', 0x14927e, 0xa0)
fallocate(r0, 0x0, 0x0, 0x1001f0)
r1 = syz_open_procfs$namespace(0x0, &(0x7f0000001380)='ns/cgroup\x00')
ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f0000000180)={0x4, 0x4, {<r2=>0xffffffffffffffff}, {0xffffffffffffffff}, 0x3, 0x2})
sendmsg$DEVLINK_CMD_RELOAD(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="28010000", @ANYRES16=0x0, @ANYBLOB="000229bd7000ffdbdf25250000000e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r1, @ANYBLOB="080001432951fee63a93f819b885d7007063690011000200303030303a30303a", @ANYRES32=r2, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r0, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r1, @ANYBLOB="0e0001006e657464657673696d0000000f0002006e657464657673696d30000008008a00", @ANYRES32=r0, @ANYBLOB], 0x128}, 0x1, 0x0, 0x0, 0x48000}, 0x840)
prlimit64(0x0, 0x7, &(0x7f00000000c0), 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x1)
r5 = dup(r4)
ioctl$KVM_CHECK_EXTENSION(r5, 0xae03, 0xf4)
open_by_handle_at(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="20000000f100000002"], 0x0)
copy_file_range(r0, 0x0, r0, &(0x7f00000000c0)=0xc615, 0x101, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x180)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x4c)
r6 = socket(0xa, 0x2, 0x0)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffffd, @mcast2={0xff, 0x5}, 0x1ff}, 0x1c)
connect$inet(r6, &(0x7f0000000240)={0x2, 0x4e22, @empty}, 0x10)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0), 0x8, &(0x7f0000000040)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@verity_off}, {@index_off}]})
chdir(&(0x7f00000003c0)='./bus\x00')
getsockname(r5, &(0x7f0000000480)=@nfc, &(0x7f0000000500)=0x80)
r7 = syz_open_dev$tty20(0xc, 0x4, 0x1)
ioctl$TCXONC(r7, 0x540a, 0x0)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000340)=0x3)
ioctl$TIOCSTI(r7, 0x5412, &(0x7f00000001c0)=0x11)
openat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x42, 0x0)

624.335448ms ago: executing program 3 (id=2046):
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe)
r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4)
ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000040)={0x2, 'syzkaller1\x00', {0x101}, 0x40})
ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000400)=ANY=[@ANYRES32=r0])

483.742321ms ago: executing program 3 (id=2047):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002480)=[{{0x0, 0x0, &(0x7f0000001780)=[{&(0x7f00000005c0)="f2b314c96d500b66f7fd46", 0xb}], 0x1}}], 0x1, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x4, 0xe, '\x00', [@generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0x400, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @pad1, @ra={0x5, 0x2, 0xbf4}, @hao={0xc9, 0x10, @private2}]}}}, @hopopts={{0x140, 0x29, 0x36, {0x5e, 0x24, '\x00', [@pad1, @pad1, @padn={0x1, 0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @calipso={0x7, 0x40, {0x3, 0xe, 0x0, 0xfff, [0x2, 0x4, 0x966, 0x7, 0xfffffffffffffff7, 0x1, 0x1]}}, @generic={0x8, 0xad, "c8a110995d439fbfac9716a99c357bcb2d59a850490739734f6b321d19b3754df39cc2dc26cf263cbebbddb9a7f17b6771f74c46623f9e38bd23e6f0a2fd3a9a017f66738394aca44d1a9f0b35d9df0a964360ab0900a5e6fcac1cd41c91c97f6826ff706c41edc4e00205bbb53218ed58a1122d993b55a1b9a870a17e7869e3fc704b388202add651f628963a90fea5d8196d5e0373fd13584ae57b4f1c03d4f67005cdb5938591d5ea712014"}, @calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x7, [0x0, 0xffffffffffffff04]}}, @generic={0x1, 0x8, "2bdb86d1ce6a20c2"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x3a, 0x4, 0x2, 0x70, 0x0, [@mcast1, @mcast2]}}}], 0x260}}], 0x1, 0x810)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

246.686066ms ago: executing program 3 (id=2048):
socket$key(0xf, 0x3, 0x2)
socket$caif_stream(0x25, 0x1, 0x4)
sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000a00)={0xb0, 0x0, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x2}, [@CTA_EXPECT_MASK={0x88, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @private0}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}]}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}]}, 0xb0}, 0x1, 0x0, 0x0, 0x40010}, 0x4008000)
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x321}, {&(0x7f0000000280)=""/85, 0x21}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000580)=""/106, 0x659}, {&(0x7f0000000980)=""/73, 0xd}, {&(0x7f0000000200)=""/77, 0x69}, {&(0x7f00000007c0)=""/141, 0xc4}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}, 0x5}], 0x4000000000003b4, 0x2000, &(0x7f0000003700)={0x77359400})
r1 = socket$netlink(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[], 0xf0}}, 0x4000)

163.849348ms ago: executing program 3 (id=2049):
socket$nl_netfilter(0x10, 0x3, 0xc)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7ff}, 0x0)
r0 = socket$can_bcm(0x1d, 0x2, 0x2)
connect$can_bcm(r0, &(0x7f00000005c0), 0x10)
r1 = fsopen(&(0x7f00000014c0)='proc\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0)
r2 = fsmount(r1, 0x0, 0xa)
fchdir(r2)
write$P9_RVERSION(r2, &(0x7f0000000080)={0x15, 0x65, 0xffff, 0x0, 0x8, '9P2000.u'}, 0x15)
recvmmsg(r0, &(0x7f00000099c0)=[{{0x0, 0x0, 0x0}, 0x80000001}], 0x1, 0x40002000, 0x0)
ioctl$SIOCGSTAMP(r0, 0x8906, 0x0)
sendmsg$can_bcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x8000, 0x0)
ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xe)
r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x42300, 0x0)
ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCGFLAGS1(r4, 0x40047454, &(0x7f00000001c0))

0s ago: executing program 0 (id=2050):
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x10, 0xffffffffffffffff, 0x0)
setreuid(0x0, 0xee00)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
mount$fuse(0x0, &(0x7f0000000280)='./file0\x00', 0x0, 0x100000, 0x0)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x240)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@hoplimit={{0x14, 0x29, 0x34, 0x4}}, @hoplimit={{0x14, 0x29, 0x34, 0xfffffffd}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x4, 0x18, '\x00', [@calipso={0x7, 0x8, {0x1, 0x0, 0x9, 0x9f}}, @generic={0xfe, 0x56, "f4a4a3142ee1e12b9826287997a6b33d89f3d60da1641d9fe3896c3c1b6c130ef4f01be8f5836d417874540898619050b14420ab124b11de36afb16ef4fc1cf3f4e4fa0e647cd1b07b068d3894180b6aa7527a4a8252"}, @generic={0x80, 0xf, "09e12e5f0b6bdcf72f2ec7008a15fa"}, @calipso={0x7, 0x38, {0x1, 0xc, 0x7a, 0x8001, [0x5, 0x9, 0x4, 0x6, 0x4, 0xb]}}, @ra={0x5, 0x2, 0xa7e}, @hao={0xc9, 0x10, @private2}]}}}, @hoplimit={{0x14}}, @rthdrdstopts={{0x18, 0x29, 0x37, {0x73}}}, @flowinfo={{0x14, 0x29, 0xb, 0x2}}, @rthdr={{0x18}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x3a, 0x2, 0x2, 0x70, 0x0, [@mcast2]}}}], 0x198}}], 0x1, 0x810)
r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
syz_emit_vhci(&(0x7f0000000000)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x6}, @hci_rp_read_def_link_policy={{}, {0x9, 0x8}}}}, 0x9)

kernel console output (not intermixed with test programs):

sy
[  357.148259][T11181] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  357.255226][T11185] binder: 11184:11185 ioctl c0306201 2000000003c0 returned -14
[  357.773254][ T8538] zl10353_read_register: readreg error (reg=127, ret==0)
[  357.782344][T11159] usb 1-1: dvb_usb_au6610: wlen=0, aborting
[  357.791003][T11190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  358.306220][ T5939] usb 1-1: USB disconnect, device number 123
[  358.375728][T11197] binder: 11196:11197 ioctl 4018620d 0 returned -22
[  358.382992][T11197] binder: 11196:11197 ioctl c0306201 2000000003c0 returned -14
[  358.438462][ T8538] usb 4-1: new full-speed USB device number 115 using dummy_hcd
[  358.462493][  T798] gspca_zc3xx: i2c_w status error 05
[  358.524340][T11205] binder: 11204:11205 ioctl c0306201 2000000003c0 returned -14
[  358.569274][T11207] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  358.579642][T11207] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  358.593062][ T8538] usb 4-1: not running at top speed; connect to a high speed hub
[  358.602882][ T8538] usb 4-1: config 9 has an invalid interface number: 133 but max is 0
[  358.611056][ T8538] usb 4-1: config 9 has no interface number 0
[  358.618167][ T8538] usb 4-1: config 9 interface 133 has no altsetting 0
[  358.627241][ T8538] usb 4-1: New USB device found, idVendor=050d, idProduct=0121, bcdDevice=93.9b
[  358.636335][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  358.644425][ T8538] usb 4-1: Product: syz
[  358.648597][ T8538] usb 4-1: Manufacturer: syz
[  358.653398][ T8538] usb 4-1: SerialNumber: syz
[  358.661899][  T798] gspca_zc3xx: reg_w_i err -71
[  358.741090][ T5939] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[  358.882826][ T8538] pegasus 4-1:9.133: probe with driver pegasus failed with error -71
[  358.893589][ T8538] usb 4-1: USB disconnect, device number 115
[  358.901145][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  358.909534][ T5939] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config
[  358.924538][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  358.939629][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  358.949523][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  358.959237][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  358.974324][ T5939] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  358.984267][ T5939] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  358.992310][ T5939] usb 1-1: Manufacturer: syz
[  358.998869][ T5939] usb 1-1: config 0 descriptor??
[  359.126003][T11209] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1772'.
[  359.252765][ T5939] rc_core: IR keymap rc-hauppauge not found
[  359.258792][ T5939] Registered IR keymap rc-empty
[  359.264970][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.290500][  T798] gspca_zc3xx: Unknown sensor - set to TAS5130C
[  359.290592][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.296992][  T798] gspca_zc3xx 3-1:0.0: probe with driver gspca_zc3xx failed with error -71
[  359.319389][  T798] usb 3-1: USB disconnect, device number 118
[  359.334077][ T5939] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  359.347131][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input111
[  359.362733][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.383045][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.424667][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.462042][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.490608][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.503970][T11220] binder: 11219:11220 ioctl 4018620d 0 returned -22
[  359.513346][T11220] binder: 11219:11220 ioctl c0306201 2000000003c0 returned -14
[  359.520273][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.550422][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.571711][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.611892][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.651134][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  359.692128][ T5939] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  359.702092][ T5939] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  359.716268][ T5939] usb 1-1: USB disconnect, device number 124
[  359.821694][T11233] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  359.831897][T11233] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  359.873003][ T8538] usb 3-1: new high-speed USB device number 119 using dummy_hcd
[  360.029667][ T8538] usb 3-1: Using ep0 maxpacket: 16
[  360.036389][ T8538] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  360.047217][ T8538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  360.058412][ T8538] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  360.068226][ T8538] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  360.078195][ T8538] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  360.093340][ T8538] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  360.103079][T10899] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88807dcdc000 (15)(pim6reg1) start
[  360.119972][ T8538] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  360.128008][T10899] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88807dcdc000 (5)(pim6reg1) end
[  360.144561][ T8538] usb 3-1: Manufacturer: syz
[  360.144989][T10899] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (26)(wg2) cookie=ffff88807dcdc000 (3)(pim6reg1) start
[  360.159156][ T8538] usb 3-1: config 0 descriptor??
[  360.167282][T10899] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (26)(wg2) cookie=ffff88807dcdc000 (3)(pim6reg1) end
[  360.345837][T11246] binder: 11245:11246 ioctl c0306201 0 returned -14
[  360.451880][ T8538] rc_core: IR keymap rc-hauppauge not found
[  360.458080][ T8538] Registered IR keymap rc-empty
[  360.476977][T11251] QAT: failed to copy from user cfg_data.
[  360.485578][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.519183][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.559789][ T8538] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  360.608497][T11257] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  360.611147][ T8538] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input112
[  360.648622][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.669285][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.685889][T11261] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  360.689064][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.709790][T11261] kvm: pic: non byte write
[  360.729038][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.766781][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.804515][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.837507][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.870782][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.878827][ T5939] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[  360.901807][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.926022][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.928796][ T8538] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  360.935629][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.955465][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  360.960752][ T8538] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  360.967516][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  360.975985][ T8538] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  360.994324][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.003637][ T8538] usb 3-1: USB disconnect, device number 119
[  361.005433][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.048554][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  361.056763][ T5939] usb 1-1: config 0 has an invalid descriptor of length 31, skipping remainder of the config
[  361.073023][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  361.084862][ T5939] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  361.096444][ T5939] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  361.106171][ T5939] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  361.119152][ T5863] usb 4-1: new high-speed USB device number 116 using dummy_hcd
[  361.128991][ T5939] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  361.138277][ T5939] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  361.146512][ T5939] usb 1-1: Manufacturer: syz
[  361.153119][ T5939] usb 1-1: config 0 descriptor??
[  361.224791][T11274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  361.233999][T11274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  361.249037][T11274] IPv4: Oversized IP packet from 127.202.26.0
[  361.269955][ T5863] usb 4-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  361.279495][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  361.290583][ T5863] usb 4-1: config 0 descriptor??
[  361.300370][ T5863] gspca_main: cpia1-2.14.0 probing 0813:0001
[  361.421929][ T5939] rc_core: IR keymap rc-hauppauge not found
[  361.427854][ T5939] Registered IR keymap rc-empty
[  361.433348][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.458205][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.483511][T11278] binder: 11277:11278 ioctl c0306201 0 returned -14
[  361.502095][ T5939] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  361.528338][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input113
[  361.543989][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.568186][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.588410][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.608360][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.628073][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.648234][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.670712][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.698081][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.715459][ T5863] cpia1 4-1:0.0: unexpected state after lo power cmd: 00
[  361.728286][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.748500][ T5939] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  361.769940][ T5939] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  361.779172][ T5939] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  361.841635][ T5939] usb 1-1: USB disconnect, device number 125
[  362.024024][T11295] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  362.033511][T11295] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  362.116276][ T5863] cpia1 4-1:0.0: only firmware version 1 is supported (got: 0)
[  362.227521][  T798] usb 3-1: new high-speed USB device number 120 using dummy_hcd
[  362.319903][ T5863] usb 4-1: USB disconnect, device number 116
[  362.377318][  T798] usb 3-1: Using ep0 maxpacket: 32
[  362.384706][  T798] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[  362.394127][  T798] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  362.418139][  T798] usb 3-1: config 0 descriptor??
[  362.428463][  T798] gspca_main: sunplus-2.14.0 probing 041e:400b
[  362.647179][ T5863] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[  362.797654][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  362.804666][ T5863] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  362.815517][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  362.826475][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  362.836201][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  362.846173][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  362.864381][ T5863] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  362.873661][ T5863] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  362.888057][ T5863] usb 1-1: Manufacturer: syz
[  362.892817][  T798] gspca_sunplus: reg_w_riv err -71
[  362.899602][  T798] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[  362.909037][ T5863] usb 1-1: config 0 descriptor??
[  362.919533][  T798] usb 3-1: USB disconnect, device number 120
[  362.976595][T11305] sctp: [Deprecated]: syz.3.1809 (pid 11305) Use of struct sctp_assoc_value in delayed_ack socket option.
[  362.976595][T11305] Use struct sctp_sack_info instead
[  363.141306][T11313] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4
[  363.197523][ T5863] rc_core: IR keymap rc-hauppauge not found
[  363.209345][ T5863] Registered IR keymap rc-empty
[  363.229498][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.279329][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.309280][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  363.324550][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input114
[  363.343981][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.376543][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.379643][T11326] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1816'.
[  363.397442][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.397515][T11326] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1816'.
[  363.419463][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.449024][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.476418][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.507321][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.527436][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.543789][T11332] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  363.554521][T11332] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  363.564177][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.586292][  T798] usb 4-1: new high-speed USB device number 117 using dummy_hcd
[  363.595854][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  363.647675][ T5863] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  363.666084][ T5863] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  363.688680][ T5863] usb 1-1: USB disconnect, device number 126
[  363.716204][ T8538] usb 3-1: new high-speed USB device number 121 using dummy_hcd
[  363.766006][  T798] usb 4-1: Using ep0 maxpacket: 16
[  363.778166][  T798] usb 4-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[  363.796003][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  363.816510][  T798] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  363.841534][  T798] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  363.851236][  T798] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  363.865425][  T798] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  363.874542][  T798] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  363.882707][  T798] usb 4-1: Manufacturer: syz
[  363.889351][  T798] usb 4-1: config 0 descriptor??
[  363.907437][ T8538] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  363.916658][ T8538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  363.932006][ T8538] usb 3-1: config 0 descriptor??
[  363.940758][ T8538] gspca_main: cpia1-2.14.0 probing 0813:0001
[  364.155707][  T798] rc_core: IR keymap rc-hauppauge not found
[  364.161811][  T798] Registered IR keymap rc-empty
[  364.167854][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.184711][T10901] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035b70000 (15)(syzkaller1) start
[  364.202891][T10901] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035b70000 (10)(syzkaller1) end
[  364.205939][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.221817][T10901] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035b70000 (8)(syzkaller1) start
[  364.245229][T10901] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035b70000 (7)(syzkaller1) end
[  364.264892][  T798] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  364.277977][  T798] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input115
[  364.293865][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.315726][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.336518][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.344310][ T8538] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  364.368263][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.405707][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.426222][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.455654][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.475666][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.492218][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.501927][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.511019][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.535579][  T798] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  364.559199][  T798] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  364.568601][  T798] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  364.583926][  T798] usb 4-1: USB disconnect, device number 117
[  364.731843][T11345] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.742156][T11345] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.756984][ T8538] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  364.898693][T11362] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  364.908594][T11362] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  364.960450][ T5939] usb 3-1: USB disconnect, device number 121
[  365.221655][T11373] FAULT_INJECTION: forcing a failure.
[  365.221655][T11373] name failslab, interval 1, probability 0, space 0, times 0
[  365.234300][T11373] CPU: 0 UID: 0 PID: 11373 Comm: syz.3.1834 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  365.234325][T11373] Tainted: [L]=SOFTLOCKUP
[  365.234332][T11373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  365.234341][T11373] Call Trace:
[  365.234347][T11373]  <TASK>
[  365.234352][T11373]  dump_stack_lvl+0xe8/0x150
[  365.234371][T11373]  should_fail_ex+0x412/0x560
[  365.234388][T11373]  should_failslab+0xa8/0x100
[  365.234405][T11373]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  365.234427][T11373]  kmem_cache_alloc_noprof+0x87/0x650
[  365.234449][T11373]  ? __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  365.234469][T11373]  ? kmem_cache_alloc_noprof+0x15a/0x650
[  365.234485][T11373]  __kvm_mmu_topup_memory_cache+0x1b4/0x610
[  365.234505][T11373]  mmu_topup_memory_caches+0x21/0x170
[  365.234522][T11373]  kvm_mmu_load+0x9d/0x22d0
[  365.234537][T11373]  ? vmx_set_intercept_for_msr+0x2ea/0x3e0
[  365.234550][T11373]  ? vmx_recalc_intercepts+0xed5/0x1b40
[  365.234559][T11373]  ? kvm_apic_has_interrupt+0x4b1/0x770
[  365.234575][T11373]  vcpu_run+0x5faf/0x7b90
[  365.234621][T11373]  ? __pfx_vcpu_run+0x10/0x10
[  365.234631][T11373]  ? fpu_swap_kvm_fpstate+0xc1/0x4f0
[  365.234646][T11373]  ? rcu_is_watching+0x15/0xb0
[  365.234662][T11373]  kvm_arch_vcpu_ioctl_run+0x11e6/0x20d0
[  365.234679][T11373]  ? kvm_arch_vcpu_ioctl_run+0x2e8/0x20d0
[  365.234690][T11373]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  365.234701][T11373]  ? register_lock_class+0x31/0x2e0
[  365.234714][T11373]  ? __lock_acquire+0x6b5/0x2cf0
[  365.234738][T11373]  ? kasan_quarantine_put+0xbb/0x1f0
[  365.234761][T11373]  ? kvm_vcpu_ioctl+0x280/0xfd0
[  365.234781][T11373]  ? do_raw_write_lock+0x11d/0x260
[  365.234811][T11373]  kvm_vcpu_ioctl+0xa62/0xfd0
[  365.234830][T11373]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.234843][T11373]  ? __mutex_unlock_slowpath+0x1bd/0x7d0
[  365.234875][T11373]  ? __fget_files+0x2a/0x420
[  365.234897][T11373]  ? __fget_files+0x2a/0x420
[  365.234911][T11373]  ? __fget_files+0x3a0/0x420
[  365.234926][T11373]  ? __fget_files+0x2a/0x420
[  365.234948][T11373]  ? bpf_lsm_file_ioctl+0x9/0x20
[  365.234965][T11373]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[  365.234981][T11373]  __se_sys_ioctl+0xfc/0x170
[  365.235000][T11373]  do_syscall_64+0x14d/0xf80
[  365.235014][T11373]  ? trace_irq_disable+0x3b/0x150
[  365.235030][T11373]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.235043][T11373]  ? clear_bhb_loop+0x40/0x90
[  365.235058][T11373]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  365.235070][T11373] RIP: 0033:0x7fe8fe39bf79
[  365.235084][T11373] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  365.235094][T11373] RSP: 002b:00007fe8ff1da028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  365.235108][T11373] RAX: ffffffffffffffda RBX: 00007fe8fe615fa0 RCX: 00007fe8fe39bf79
[  365.235117][T11373] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005
[  365.235125][T11373] RBP: 00007fe8ff1da090 R08: 0000000000000000 R09: 0000000000000000
[  365.235142][T11373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  365.235149][T11373] R13: 00007fe8fe616038 R14: 00007fe8fe615fa0 R15: 00007ffda5c0eeb8
[  365.235169][T11373]  </TASK>
[  365.706792][ T5939] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[  365.864357][ T5939] usb 1-1: Using ep0 maxpacket: 16
[  365.871178][ T5939] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 11
[  365.883758][ T5939] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0xB has invalid wMaxPacketSize 0
[  365.893487][ T5939] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0xB has invalid maxpacket 0
[  365.903516][ T5939] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x8A has invalid wMaxPacketSize 0
[  365.913337][ T5939] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x8A has invalid maxpacket 0
[  365.923243][ T5939] usb 1-1: config 1 interface 0 has no altsetting 0
[  365.930141][ T5939] usb 1-1: New USB device found, idVendor=04e6, idProduct=0003, bcdDevice= 1.77
[  365.939762][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  365.955953][ T5939] ums-sddr09 1-1:1.0: USB Mass Storage device detected
[  366.166072][ T5939] scsi host1: usb-storage 1-1:1.0
[  366.363607][T11400] xt_AUDIT: Audit type out of range (valid range: 0..2)
[  366.366891][ T5939] usb 1-1: USB disconnect, device number 127
[  366.913664][ T8538] usb 3-1: new high-speed USB device number 122 using dummy_hcd
[  367.065219][ T8538] usb 3-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  367.074720][ T8538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  367.085041][ T8538] usb 3-1: config 0 descriptor??
[  367.101888][ T8538] gspca_main: cpia1-2.14.0 probing 0813:0001
[  367.237298][T11420] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1851'.
[  367.373314][  T798] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[  367.492777][ T8538] cpia1 3-1:0.0: unexpected state after lo power cmd: 00
[  367.523263][  T798] usb 1-1: Using ep0 maxpacket: 32
[  367.532117][  T798] usb 1-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b
[  367.541801][  T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  367.550592][  T798] usb 1-1: Product: syz
[  367.555268][  T798] usb 1-1: Manufacturer: syz
[  367.559906][  T798] usb 1-1: SerialNumber: syz
[  367.599149][T11424] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1852'.
[  367.611104][T11424] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.622199][T11424] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  367.635498][T11424] netlink: 'syz.5.1852': attribute type 21 has an invalid length.
[  367.644268][T11424] netlink: 'syz.5.1852': attribute type 1 has an invalid length.
[  367.778038][  T798] visor 1-1:1.0: Handspring Visor / Palm OS converter detected
[  367.788359][  T798] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB0
[  367.799713][  T798] usb 1-1: Handspring Visor / Palm OS converter now attached to ttyUSB1
[  367.894521][ T8538] cpia1 3-1:0.0: only firmware version 1 is supported (got: 0)
[  367.985013][T11418] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  367.994414][T11418] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.004934][  T798] usb 1-1: USB disconnect, device number 2
[  368.016680][  T798] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0
[  368.030518][  T798] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1
[  368.040648][  T798] visor 1-1:1.0: device disconnected
[  368.097477][ T5939] usb 3-1: USB disconnect, device number 122
[  368.441333][  T979] usb 4-1: new high-speed USB device number 118 using dummy_hcd
[  368.586324][T11447] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  368.596431][T11447] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  368.608620][T11447] program syz.5.1863 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  368.612464][  T979] usb 4-1: Using ep0 maxpacket: 16
[  368.634880][  T979] usb 4-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config
[  368.673525][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  368.699641][  T979] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  368.710188][  T979] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  368.724331][  T979] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  368.775446][  T979] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  368.790656][  T979] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  368.802654][  T979] usb 4-1: Manufacturer: syz
[  368.813983][  T979] usb 4-1: config 0 descriptor??
[  368.844223][T10905] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge)
[  368.891301][T11463] vcan0 speed is unknown, defaulting to 1000
[  369.062200][ T5939] usb 3-1: new high-speed USB device number 123 using dummy_hcd
[  369.108338][T11463] wg2 speed is unknown, defaulting to 1000
[  369.114884][  T979] rc_core: IR keymap rc-hauppauge not found
[  369.120791][  T979] Registered IR keymap rc-empty
[  369.132703][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.182470][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.203358][  T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  369.235894][  T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input117
[  369.253395][ T5939] usb 3-1: Using ep0 maxpacket: 16
[  369.263301][T11468] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1871'.
[  369.275684][ T5939] usb 3-1: config 0 has an invalid descriptor of length 37, skipping remainder of the config
[  369.277073][T11468] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  369.286688][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.297268][T11468] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  369.309636][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  369.332503][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.344248][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  369.355937][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.372197][ T5939] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  369.382283][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  369.395398][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.404321][ T5939] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  369.413454][ T5939] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  369.421490][ T5939] usb 3-1: Manufacturer: syz
[  369.426288][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.437857][ T5939] usb 3-1: config 0 descriptor??
[  369.452005][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.472063][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.492081][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.512060][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.532452][  T979] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  369.557535][  T979] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  369.567901][  T979] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  369.644045][  T979] usb 4-1: USB disconnect, device number 118
[  369.701953][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888055578000 (5)(erspan0) start
[  369.745096][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888055578000 (4)(erspan0) end
[  369.756958][ T5939] rc_core: IR keymap rc-hauppauge not found
[  369.773685][ T5939] Registered IR keymap rc-empty
[  369.785724][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  369.793106][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888055578000 (4)(erspan0) start
[  369.793153][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888055578000 (4)(erspan0) end
[  369.793331][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888029b98000 (4)(gretap0) start
[  369.793372][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888029b98000 (4)(gretap0) end
[  369.793415][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888029b98000 (4)(gretap0) start
[  369.793452][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888029b98000 (4)(gretap0) end
[  369.932098][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  369.976538][ T5939] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1
[  370.000528][ T5939] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc1/input118
[  370.055502][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.092652][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.131609][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.152169][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.181591][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.201624][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.221526][ T8538] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[  370.251557][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.271692][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.311993][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.343214][ T5939] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  370.375419][ T8538] usb 1-1: New USB device found, idVendor=0813, idProduct=0001, bcdDevice=3a.08
[  370.382857][ T5939] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  370.394894][ T5939] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  370.411932][ T8538] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.428539][ T5939] usb 3-1: USB disconnect, device number 123
[  370.432365][ T8538] usb 1-1: config 0 descriptor??
[  370.449555][ T8538] gspca_main: cpia1-2.14.0 probing 0813:0001
[  370.551335][  T798] usb 4-1: new high-speed USB device number 119 using dummy_hcd
[  370.711339][  T798] usb 4-1: Using ep0 maxpacket: 32
[  370.718204][  T798] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  370.727383][  T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  370.737710][  T798] usb 4-1: config 0 descriptor??
[  370.753515][  T798] as10x_usb: device has been detected
[  370.759853][  T798] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  370.772291][  T798] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  370.783461][  T798] as10x_usb: error during firmware upload part1
[  370.790589][  T798] Registered device nBox DVB-T Dongle
[  370.842749][ T8538] cpia1 1-1:0.0: unexpected state after lo power cmd: 00
[  370.953014][ T5939] usb 4-1: USB disconnect, device number 119
[  370.976406][ T5939] Unregistered device nBox DVB-T Dongle
[  370.979417][ T5939] as10x_usb: device has been disconnected
[  371.227252][T11496] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.236497][T11496] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.247879][ T8538] cpia1 1-1:0.0: only firmware version 1 is supported (got: 0)
[  371.297702][T11500] raw_sendmsg: syz.5.1882 forgot to set AF_INET. Fix it!
[  371.384909][T11504] binder: 11503:11504 ioctl 4018620d 0 returned -22
[  371.393925][T11504] binder: 11503:11504 ioctl c0306201 2000000003c0 returned -14
[  371.453146][ T8538] usb 1-1: USB disconnect, device number 3
[  371.561935][T11511] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.571221][T11511] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  372.033627][T11524] binder: 11523:11524 ioctl 4018620d 0 returned -22
[  372.043907][T11524] binder: 11523:11524 ioctl c0306201 2000000003c0 returned -14
[  372.044846][  T979] usb 3-1: new high-speed USB device number 124 using dummy_hcd
[  372.141677][ T8538] usb 4-1: new high-speed USB device number 120 using dummy_hcd
[  372.210911][  T979] usb 3-1: Using ep0 maxpacket: 32
[  372.217156][T11532] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1897'.
[  372.218523][  T979] usb 3-1: config 0 has an invalid interface number: 51 but max is 0
[  372.240667][  T979] usb 3-1: config 0 has no interface number 0
[  372.249323][  T979] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  372.258496][  T979] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.266669][  T979] usb 3-1: Product: syz
[  372.271391][  T979] usb 3-1: Manufacturer: syz
[  372.275992][  T979] usb 3-1: SerialNumber: syz
[  372.291058][ T8538] usb 4-1: Using ep0 maxpacket: 8
[  372.300960][  T979] usb 3-1: config 0 descriptor??
[  372.303584][ T8538] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea
[  372.319232][  T979] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  372.329821][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.338291][ T8538] usb 4-1: Product: syz
[  372.343799][ T8538] usb 4-1: Manufacturer: syz
[  372.348875][ T8538] usb 4-1: SerialNumber: syz
[  372.356957][ T8538] usb 4-1: config 0 descriptor??
[  372.390839][T11536] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1899'.
[  372.420404][ T5863] usb 1-1: new high-speed USB device number 4 using dummy_hcd
[  372.527080][  T979] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  372.544990][  T979] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  372.570314][ T5863] usb 1-1: Using ep0 maxpacket: 32
[  372.579569][ T8538] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state
[  372.590074][ T5863] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  372.607893][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  372.641457][ T5863] usb 1-1: config 0 descriptor??
[  372.682683][ T5863] as10x_usb: device has been detected
[  372.689008][ T5863] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  372.731873][ T5863] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  372.752903][ T5863] as10x_usb: error during firmware upload part1
[  372.760067][ T5863] Registered device nBox DVB-T Dongle
[  372.852613][ T5863] usb 1-1: USB disconnect, device number 4
[  372.892980][ T5863] Unregistered device nBox DVB-T Dongle
[  372.897232][ T5863] as10x_usb: device has been disconnected
[  373.674593][T11571] binder: BINDER_SET_CONTEXT_MGR already set
[  373.681104][T11571] binder: 11570:11571 ioctl 4018620d 200000000040 returned -16
[  373.970383][  T979] usb 1-1: new high-speed USB device number 5 using dummy_hcd
[  374.131833][  T979] usb 1-1: Using ep0 maxpacket: 16
[  374.142493][  T979] usb 1-1: config 0 has an invalid descriptor of length 43, skipping remainder of the config
[  374.153591][  T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  374.164874][  T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  374.175757][  T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  374.185728][  T979] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  374.200242][  T979] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  374.209367][  T979] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  374.217536][  T979] usb 1-1: Manufacturer: syz
[  374.218642][ T8538] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32
[  374.225505][  T979] usb 1-1: config 0 descriptor??
[  374.256453][ T8538] usb 4-1: USB disconnect, device number 120
[  374.408433][T11589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  374.418836][T11589] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  374.509543][  T979] rc_core: IR keymap rc-hauppauge not found
[  374.515517][  T979] Registered IR keymap rc-empty
[  374.521523][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.539531][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.570507][  T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  374.584585][  T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input119
[  374.599547][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.629438][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.659436][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.689363][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.710413][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.729531][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.749759][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.769685][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.791384][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.809310][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  374.832121][    C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71
[  374.832430][ T8538] usb 3-1: USB disconnect, device number 124
[  374.842990][  T979] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  374.852005][ T8538] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  374.871959][ T8538] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  374.879196][  T979] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  374.897370][ T8538] quatech2 3-1:0.51: device disconnected
[  374.917447][  T979] usb 1-1: USB disconnect, device number 5
[  374.933666][T11595] binder: BINDER_SET_CONTEXT_MGR already set
[  374.947545][T11595] binder: 11594:11595 ioctl 4018620d 200000000040 returned -16
[  375.029334][ T5863] usb 4-1: new high-speed USB device number 121 using dummy_hcd
[  375.173337][T11599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.182791][T11599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.189795][ T5863] usb 4-1: Using ep0 maxpacket: 16
[  375.198601][ T5863] usb 4-1: config 0 has an invalid interface number: 126 but max is 0
[  375.207794][ T5863] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  375.218934][ T5863] usb 4-1: config 0 has no interface number 0
[  375.225142][ T5863] usb 4-1: config 0 interface 126 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[  375.238430][ T5863] usb 4-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88
[  375.247608][ T5863] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  375.257692][ T5863] usb 4-1: config 0 descriptor??
[  375.267264][ T5863] usb 4-1: Quirk or no altset; falling back to MIDI 1.0
[  375.347742][ T5863] snd-usb-audio 4-1:0.126: probe with driver snd-usb-audio failed with error -2
[  375.477166][T11593] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  375.487509][T11593] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  375.510505][ T5863] usb 4-1: USB disconnect, device number 121
[  375.828951][ T5863] usb 3-1: new high-speed USB device number 125 using dummy_hcd
[  375.878882][  T979] usb 1-1: new high-speed USB device number 6 using dummy_hcd
[  375.978802][ T5863] usb 3-1: Using ep0 maxpacket: 32
[  375.985635][ T5863] usb 3-1: config 0 has an invalid interface number: 203 but max is 0
[  375.994835][ T5863] usb 3-1: config 0 has no interface number 0
[  376.001145][ T5863] usb 3-1: config 0 interface 203 has no altsetting 0
[  376.012107][ T5863] usb 3-1: New USB device found, idVendor=0525, idProduct=2888, bcdDevice= b.d5
[  376.021324][ T5863] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  376.029678][ T5863] usb 3-1: Product: syz
[  376.034314][ T5863] usb 3-1: Manufacturer: syz
[  376.038874][  T979] usb 1-1: Using ep0 maxpacket: 16
[  376.040358][ T5863] usb 3-1: SerialNumber: syz
[  376.054100][ T5863] usb 3-1: config 0 descriptor??
[  376.055557][  T979] usb 1-1: config 0 has an invalid descriptor of length 40, skipping remainder of the config
[  376.076979][  T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  376.086816][T11617] binder: BINDER_SET_CONTEXT_MGR already set
[  376.088627][  T979] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  376.095567][T11617] binder: 11616:11617 ioctl 4018620d 200000000040 returned -16
[  376.106854][  T979] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  376.122881][  T979] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  376.137267][  T979] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  376.146932][  T979] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  376.156397][  T979] usb 1-1: Manufacturer: syz
[  376.169532][  T979] usb 1-1: config 0 descriptor??
[  376.298002][ T5863] cdc_subset 3-1:0.203: probe with driver cdc_subset failed with error -71
[  376.315504][ T5863] usb 3-1: USB disconnect, device number 125
[  376.419738][  T798] usb 4-1: new high-speed USB device number 122 using dummy_hcd
[  376.430890][  T979] rc_core: IR keymap rc-hauppauge not found
[  376.436822][  T979] Registered IR keymap rc-empty
[  376.442143][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.469827][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.489720][  T979] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  376.502716][  T979] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input120
[  376.518203][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.548837][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.568582][  T798] usb 4-1: Using ep0 maxpacket: 32
[  376.568641][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.576636][  T798] usb 4-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  376.599219][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.608626][  T798] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  376.618860][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.630198][  T798] usb 4-1: config 0 descriptor??
[  376.656880][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.657259][  T798] as10x_usb: device has been detected
[  376.683232][  T798] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  376.699359][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.717051][  T798] usb 4-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  376.729392][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.730985][  T798] as10x_usb: error during firmware upload part1
[  376.752465][  T798] Registered device nBox DVB-T Dongle
[  376.780010][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.801008][T11629] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  376.810537][  T979] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  376.811369][T11629] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  376.830465][  T979] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  376.839767][  T979] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  376.852755][  T798] usb 4-1: USB disconnect, device number 122
[  376.858278][  T979] usb 1-1: USB disconnect, device number 6
[  376.922131][  T798] Unregistered device nBox DVB-T Dongle
[  376.928047][  T798] as10x_usb: device has been disconnected
[  377.518440][T11641] binder: 11640:11641 ioctl c0306201 0 returned -14
[  377.527388][T11641] binder: 11640:11641 ioctl c0306201 2000000003c0 returned -14
[  377.628608][T11644] netlink: 'syz.2.1930': attribute type 10 has an invalid length.
[  377.636874][T11644] veth0_vlan: entered allmulticast mode
[  377.675776][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  377.682465][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  377.686938][T11644] veth0_vlan: left promiscuous mode
[  377.701158][   T29] audit: type=1800 audit(1770788627.199:2406): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.1930" name="memory.events" dev="tmpfs" ino=2298 res=0 errno=0
[  377.721968][T11644] veth0_vlan: entered promiscuous mode
[  377.728378][ T5890] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  377.741456][T11644] team0: Device veth0_vlan failed to register rx_handler
[  377.753120][T11646] cgroup: fork rejected by pids controller in /syz3
[  377.800191][T11643] netlink: 'syz.2.1930': attribute type 10 has an invalid length.
[  377.813533][T11643] ipvlan1: entered promiscuous mode
[  377.824328][T11643] team0: Device ipvlan1 failed to register rx_handler
[  377.859997][T11731] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  377.869781][T11731] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  377.898854][ T5890] usb 1-1: Using ep0 maxpacket: 16
[  377.919459][ T5890] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  377.938351][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  377.950021][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  377.960756][ T5890] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  377.987340][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  378.037122][ T5890] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  378.050503][ T5890] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  378.070936][ T5890] usb 1-1: Manufacturer: syz
[  378.083358][ T5890] usb 1-1: config 0 descriptor??
[  378.086148][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804db8c000 (21)(syz_tun) start
[  378.105467][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804db8c000 (21)(syz_tun) end
[  378.122574][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804db8c000 (18)(syz_tun) start
[  378.142445][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804db8c000 (16)(syz_tun) end
[  378.282856][T11760] binder: 11759:11760 ioctl c0306201 2000000003c0 returned -14
[  378.326189][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6a4000 (15)(netdevsim3) start
[  378.353624][T10901] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.368732][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6a4000 (11)(netdevsim3) end
[  378.400280][ T5890] rc_core: IR keymap rc-hauppauge not found
[  378.406330][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (26)(wg2) cookie=ffff88805e6a4000 (6)(netdevsim3) start
[  378.433497][ T5890] Registered IR keymap rc-empty
[  378.443634][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.465471][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (26)(wg2) cookie=ffff88805e6a4000 (5)(netdevsim3) end
[  378.498105][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.527419][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805dc60000 (16)(netdevsim2) start
[  378.530242][ T5890] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  378.547743][T10901] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.567134][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805dc60000 (8)(netdevsim2) end
[  378.593431][  T798] wg2 speed is unknown, defaulting to 1000
[  378.599638][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (26)(wg2) cookie=ffff88805dc60000 (3)(netdevsim2) start
[  378.616372][ T5890] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input121
[  378.628887][  T798] syz2: Port: 1 Link DOWN
[  378.629705][  T798] wg2 speed is unknown, defaulting to 1000
[  378.640019][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88805dc60000 (3)(netdevsim2) end
[  378.657104][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.664650][   T10] usb 3-1: new high-speed USB device number 126 using dummy_hcd
[  378.687935][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.695575][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805dc64000 (16)(netdevsim1) start
[  378.716628][T10901] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.727113][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805dc64000 (8)(netdevsim1) end
[  378.727995][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.758893][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88805dc64000 (4)(netdevsim1) start
[  378.779277][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88805dc64000 (4)(netdevsim1) end
[  378.813884][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.837909][   T10] usb 3-1: Using ep0 maxpacket: 32
[  378.843382][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.852486][   T10] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  378.867803][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  378.891437][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.909910][   T10] usb 3-1: config 0 descriptor??
[  378.931024][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888034bc8000 (12)(netdevsim0) start
[  378.937799][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  378.951409][T10901] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  378.960875][   T10] as10x_usb: device has been detected
[  378.975879][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888034bc8000 (8)(netdevsim0) end
[  378.980853][   T10] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  379.001202][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  379.018802][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888034bc8000 (4)(netdevsim0) start
[  379.027768][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  379.035992][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888034bc8000 (4)(netdevsim0) end
[  379.073477][   T10] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  379.073591][ T5836] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[  379.100528][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[  379.110108][   T10] as10x_usb: error during firmware upload part1
[  379.122040][ T5836] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[  379.130764][ T5890] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  379.140077][ T5836] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[  379.140189][   T10] Registered device nBox DVB-T Dongle
[  379.149398][ T5836] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[  379.159694][ T5890] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  379.193946][   T10] usb 3-1: USB disconnect, device number 126
[  379.210061][T11773] FAULT_INJECTION: forcing a failure.
[  379.210061][T11773] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  379.226155][ T5890] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  379.244486][   T10] Unregistered device nBox DVB-T Dongle
[  379.247126][T11773] CPU: 0 UID: 0 PID: 11773 Comm: syz.5.1942 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  379.247151][T11773] Tainted: [L]=SOFTLOCKUP
[  379.247158][T11773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  379.247171][T11773] Call Trace:
[  379.247177][T11773]  <TASK>
[  379.247189][T11773]  dump_stack_lvl+0xe8/0x150
[  379.247216][T11773]  should_fail_ex+0x412/0x560
[  379.247239][T11773]  _copy_to_user+0x31/0xb0
[  379.247262][T11773]  simple_read_from_buffer+0xe1/0x170
[  379.247287][T11773]  proc_fail_nth_read+0x1bb/0x230
[  379.247310][T11773]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  379.247333][T11773]  ? rw_verify_area+0x2a6/0x4d0
[  379.247355][T11773]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  379.247374][T11773]  vfs_read+0x20c/0xa70
[  379.247388][T11773]  ? fdget_pos+0x246/0x320
[  379.247411][T11773]  ? __pfx___mutex_lock+0x10/0x10
[  379.247430][T11773]  ? __pfx_vfs_read+0x10/0x10
[  379.247444][T11773]  ? __fget_files+0x2a/0x420
[  379.247468][T11773]  ? __fget_files+0x3a0/0x420
[  379.247486][T11773]  ? __fget_files+0x2a/0x420
[  379.247515][T11773]  ksys_read+0x150/0x270
[  379.247538][T11773]  ? __pfx_ksys_read+0x10/0x10
[  379.247551][T11773]  ? __pfx_drm_ioctl+0x10/0x10
[  379.247577][T11773]  do_syscall_64+0x14d/0xf80
[  379.247593][T11773]  ? trace_irq_disable+0x3b/0x150
[  379.247613][T11773]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.247630][T11773]  ? clear_bhb_loop+0x40/0x90
[  379.247650][T11773]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  379.247674][T11773] RIP: 0033:0x7fedca55c84e
[  379.247691][T11773] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  379.247704][T11773] RSP: 002b:00007fedcb3ccfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  379.247721][T11773] RAX: ffffffffffffffda RBX: 00007fedcb3cd6c0 RCX: 00007fedca55c84e
[  379.247733][T11773] RDX: 000000000000000f RSI: 00007fedcb3cd0a0 RDI: 0000000000000007
[  379.247743][T11773] RBP: 00007fedcb3cd090 R08: 0000000000000000 R09: 0000000000000000
[  379.247754][T11773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  379.247764][T11773] R13: 00007fedca816038 R14: 00007fedca815fa0 R15: 00007fff4ea254f8
[  379.247792][T11773]  </TASK>
[  379.482835][   T10] as10x_usb: device has been disconnected
[  379.494531][ T5890] usb 1-1: USB disconnect, device number 7
[  379.652678][T10901] bridge_slave_1: left allmulticast mode
[  379.658538][T10901] bridge_slave_1: left promiscuous mode
[  379.664321][T10901] bridge0: port 2(bridge_slave_1) entered disabled state
[  379.688279][T10901] bridge_slave_0: left allmulticast mode
[  379.694707][T10901] bridge_slave_0: left promiscuous mode
[  379.701032][T10901] bridge0: port 1(bridge_slave_0) entered disabled state
[  379.839965][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff8880799de000 (15)(ip6gretap0) start
[  379.875054][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff8880799de000 (7)(ip6gretap0) end
[  379.897728][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff8880799de000 (7)(ip6gretap0) start
[  379.930169][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff8880799de000 (5)(ip6gretap0) end
[  379.960111][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88804d930000 (12)(erspan0) start
[  379.977687][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88804d930000 (7)(erspan0) end
[  380.016488][T11792] binder: 11791:11792 ioctl c0306201 2000000003c0 returned -14
[  380.024894][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804d930000 (5)(erspan0) start
[  380.056992][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804d930000 (5)(erspan0) end
[  380.073877][ T5863] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  380.090631][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88803797c000 (5)(gretap0) start
[  380.125804][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88803797c000 (5)(gretap0) end
[  380.142902][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88803797c000 (5)(gretap0) start
[  380.172529][T11795] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  380.180559][T10901] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  380.185581][T11795] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  380.202687][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88803797c000 (5)(gretap0) end
[  380.220597][T10901] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  380.224529][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88805dc38000 (5)(geneve1) start
[  380.247468][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  380.249084][T10901] bond0 (unregistering): Released all slaves
[  380.253825][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88805dc38000 (5)(geneve1) end
[  380.276180][ T5863] usb 1-1: config 4 has an invalid interface number: 9 but max is 0
[  380.284786][ T5863] usb 1-1: config 4 has no interface number 0
[  380.291450][ T5863] usb 1-1: config 4 interface 9 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[  380.303212][ T5863] usb 1-1: config 4 interface 9 has no altsetting 0
[  380.309647][T11770] vcan0 speed is unknown, defaulting to 1000
[  380.317640][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88805dc38000 (4)(geneve1) start
[  380.335715][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88805dc38000 (4)(geneve1) end
[  380.353057][ T5863] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=76.fe
[  380.362508][ T5863] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  380.372628][ T5863] usb 1-1: Product: syz
[  380.376815][ T5863] usb 1-1: Manufacturer: syz
[  380.395339][ T5863] usb 1-1: SerialNumber: syz
[  380.416868][T11784] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22
[  380.430272][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff8880374ec000 (4)(geneve0) start
[  380.471837][ T5863] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[  380.497443][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff8880374ec000 (4)(geneve0) end
[  380.524587][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff8880374ec000 (4)(geneve0) start
[  380.544130][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff8880374ec000 (4)(geneve0) end
[  380.562258][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035a30000 (4)(bridge0) start
[  380.598100][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035a30000 (4)(bridge0) end
[  380.647293][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035a30000 (4)(bridge0) start
[  380.679806][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035a30000 (4)(bridge0) end
[  380.697265][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88807d438000 (8)(bond0) start
[  380.715948][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88807d438000 (8)(bond0) end
[  380.733517][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88807d438000 (8)(bond0) start
[  380.750273][T10903] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88807d438000 (8)(bond0) end
[  380.833451][T10901] tipc: Left network mode
[  380.876800][T11770] wg2 speed is unknown, defaulting to 1000
[  380.896803][T11818] fuse: Bad value for 'user_id'
[  380.913621][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035a88000 (9)(wlan3) start
[  380.917238][T11818] fuse: Bad value for 'user_id'
[  380.931074][ T5889] usb 3-1: new high-speed USB device number 127 using dummy_hcd
[  380.958903][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888035a88000 (4)(wlan3) end
[  380.985614][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035a88000 (3)(wlan3) start
[  381.052173][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff888035a88000 (3)(wlan3) end
[  381.120140][ T5889] usb 3-1: Using ep0 maxpacket: 32
[  381.132081][ T5889] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  381.147746][ T5889] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  381.158236][T11823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.170074][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804d8b4000 (11)(wlan2) start
[  381.177778][ T5889] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  381.196679][T11823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  381.205287][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804d8b4000 (6)(wlan2) end
[  381.209068][ T5889] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  381.232136][ T5889] usb 3-1: Product: syz
[  381.236388][ T5889] usb 3-1: Manufacturer: syz
[  381.251540][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804d8b4000 (4)(wlan2) start
[  381.267093][ T5142] Bluetooth: hci2: command tx timeout
[  381.275857][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88804d8b4000 (4)(wlan2) end
[  381.302998][ T5889] hub 3-1:4.0: USB hub found
[  381.385214][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88806d244000 (11)(wlan1) start
[  381.402451][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88806d244000 (3)(wlan1) end
[  381.439871][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88806d244000 (3)(wlan1) start
[  381.462044][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88806d244000 (3)(wlan1) end
[  381.513510][ T5889] hub 3-1:4.0: 5 ports detected
[  381.557106][ T5889] hub 3-1:4.0: insufficient power available to use all downstream ports
[  381.575112][  T798] usb 1-1: USB disconnect, device number 8
[  381.580423][T10899] usb 1-1: Failed to read usb control message: -71
[  381.608730][T10899] usb 1-1: Unable to read the bmi data from the device: -71
[  381.624272][T10899] usb 1-1: unable to get target info from device
[  381.639897][T10899] usb 1-1: could not get target info (-71)
[  381.655262][T10899] usb 1-1: could not probe fw (-71)
[  381.689362][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88806d230000 (17)(wlan0) start
[  381.742613][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88806d230000 (3)(wlan0) end
[  381.782837][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88806d230000 (3)(wlan0) start
[  381.800803][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (25)(wg2) cookie=ffff88806d230000 (3)(wlan0) end
[  381.878158][T11840] binder: 11839:11840 ioctl c0306201 2000000003c0 returned -14
[  381.879866][T11770] chnl_net:caif_netlink_parms(): no params data found
[  381.969682][T11842] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  381.987192][T11842] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.106875][  T798] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  382.266903][  T798] usb 1-1: Using ep0 maxpacket: 8
[  382.279271][  T798] usb 1-1: config 0 has an invalid interface number: 148 but max is 0
[  382.296800][  T798] usb 1-1: config 0 has no interface number 0
[  382.306982][  T798] usb 1-1: New USB device found, idVendor=0d46, idProduct=2012, bcdDevice=4d.36
[  382.318453][ T5889] hub 3-1:4.0: hub_hub_status failed (err = -71)
[  382.321526][  T798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  382.334199][  T798] usb 1-1: Product: syz
[  382.338649][  T798] usb 1-1: Manufacturer: syz
[  382.342880][T11770] bridge0: port 1(bridge_slave_0) entered blocking state
[  382.343251][  T798] usb 1-1: SerialNumber: syz
[  382.365941][ T5889] hub 3-1:4.0: config failed, can't get hub status (err -71)
[  382.391462][  T798] usb 1-1: config 0 descriptor??
[  382.399287][T11770] bridge0: port 1(bridge_slave_0) entered disabled state
[  382.413968][  T798] kobil_sct 1-1:0.148: KOBIL USB smart card terminal converter detected
[  382.416762][T11770] bridge_slave_0: entered allmulticast mode
[  382.443363][  T798] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0
[  382.445679][T11770] bridge_slave_0: entered promiscuous mode
[  382.492902][T11770] bridge0: port 2(bridge_slave_1) entered blocking state
[  382.502469][ T5889] usb 3-1: USB disconnect, device number 127
[  382.510604][T11770] bridge0: port 2(bridge_slave_1) entered disabled state
[  382.526280][T11770] bridge_slave_1: entered allmulticast mode
[  382.547284][T11770] bridge_slave_1: entered promiscuous mode
[  382.572147][T10901] hsr_slave_0: left promiscuous mode
[  382.579270][T10901] hsr_slave_1: left promiscuous mode
[  382.585481][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  382.604453][T10901] batman_adv: batadv0: Removing interface: batadv_slave_0
[  382.604551][  T798] usb 1-1: USB disconnect, device number 9
[  382.647164][T10901] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  382.652508][  T798] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0
[  382.668288][T10901] batman_adv: batadv0: Removing interface: batadv_slave_1
[  382.670817][  T798] kobil_sct 1-1:0.148: device disconnected
[  382.696400][T10901] veth1_macvtap: left promiscuous mode
[  382.705910][T10901] veth0_macvtap: left promiscuous mode
[  382.718560][T10901] veth1_vlan: left promiscuous mode
[  382.838044][T11858] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  382.848153][T11858] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.856467][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88807939a000 (15)(macsec0) start
[  382.874472][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (21)(vcan0) cookie=ffff88807939a000 (15)(macsec0) end
[  382.892161][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (20)(wg2) cookie=ffff88807939a000 (8)(macsec0) start
[  382.909630][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (20)(wg2) cookie=ffff88807939a000 (8)(macsec0) end
[  382.929701][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e69c000 (14)(macvtap0) start
[  382.948055][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e69c000 (7)(macvtap0) end
[  382.965549][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e69c000 (7)(macvtap0) start
[  382.983045][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e69c000 (7)(macvtap0) end
[  382.999586][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6aa000 (9)(veth0_macvtap) start
[  383.017174][ T5889] usb 3-1: new high-speed USB device number 2 using dummy_hcd
[  383.023065][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6aa000 (9)(veth0_macvtap) end
[  383.049884][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e6aa000 (7)(veth0_macvtap) start
[  383.075563][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e6aa000 (7)(veth0_macvtap) end
[  383.093396][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6e0000 (7)(veth1_macvtap) start
[  383.110866][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e6e0000 (7)(veth1_macvtap) end
[  383.121414][T10901] team0 (unregistering): Port device team_slave_1 removed
[  383.128459][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e6e0000 (7)(veth1_macvtap) start
[  383.152277][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88805e6e0000 (7)(veth1_macvtap) end
[  383.172021][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888037acc000 (5)(ipvlan1) start
[  383.177323][T10901] team0 (unregistering): Port device team_slave_0 removed
[  383.196971][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff888037acc000 (5)(ipvlan1) end
[  383.213784][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff888037acc000 (5)(ipvlan1) start
[  383.230587][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff888037acc000 (5)(ipvlan1) end
[  383.234083][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  383.248140][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804d478000 (5)(ipvlan0) start
[  383.269005][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88804d478000 (5)(ipvlan0) end
[  383.286377][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88804d478000 (5)(ipvlan0) start
[  383.297985][ T5889] usb 3-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  383.312034][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (19)(wg2) cookie=ffff88804d478000 (5)(ipvlan0) end
[  383.332431][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (20)(vcan0) cookie=ffff88805e5b0000 (5)(macvlan1) start
[  383.349082][ T5142] Bluetooth: hci2: command tx timeout
[  383.355024][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff88805e5b0000 (5)(macvlan1) end
[  383.356665][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  383.385539][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) start
[  383.404252][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  383.436218][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff88805e5b0000 (5)(macvlan1) start
[  383.436273][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  383.480138][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (13)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff88805e5b0000 (5)(macvlan1) end
[  383.507159][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff8880366f4000 (5)(macvlan0) start
[  383.507293][T10907] smc: removing ib device syz2
[  383.543753][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  383.562249][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (19)(vcan0) cookie=ffff8880366f4000 (5)(macvlan0) end
[  383.588635][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (12)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff8880366f4000 (5)(macvlan0) start
[  383.591433][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  383.608051][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (12)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff8880366f4000 (5)(macvlan0) end
[  383.617906][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) start
[  383.634435][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (14)(vcan0) cookie=ffff888037a6e000 (5)(vlan1) start
[  383.665160][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (10)(vcan0) cookie=ffff888037a6e000 (5)(vlan1) end
[  383.681356][ T5889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  383.681380][ T5889] usb 3-1: Manufacturer: syz
[  383.691298][ T5889] usb 3-1: config 0 descriptor??
[  383.700253][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (9)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff888037a6e000 (5)(vlan1) start
[  383.700299][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (9)(syz2) rdma_ndev=ffff88807e170000 (7)(wg2) cookie=ffff888037a6e000 (5)(vlan1) end
[  383.700432][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (8)(vcan0) cookie=ffff88805e44a000 (5)(vlan0) start
[  383.748403][T11867] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1963'.
[  383.753757][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (7)(vcan0) cookie=ffff88805e44a000 (4)(vlan0) end
[  383.785306][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (2)(syz2) rdma_ndev=ffff88807e170000 (6)(wg2) cookie=ffff88805e44a000 (4)(vlan0) start
[  383.831674][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (0)(syz2) rdma_ndev=ffff88807e170000 (6)(wg2) cookie=ffff88805e44a000 (4)(vlan0) end
[  383.839851][T11866] pimreg: entered allmulticast mode
[  383.848141][T10905] smc: removing ib device syz1
[  383.854472][  T798] vcan0 speed is unknown, defaulting to 1000
[  383.865242][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (13)(syz1) rdma_ndev=ffff88804d578000 (6)(vcan0) cookie=ffff8880363c4000 (5)(veth0_vlan) start
[  383.867283][  T798] syz1: Port: 1 Link DOWN
[  383.888078][   T42] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  383.907872][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (11)(syz1) rdma_ndev=ffff88804d578000 (5)(vcan0) cookie=ffff8880363c4000 (5)(veth0_vlan) end
[  383.939219][T11770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  383.948876][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (6)(syz1) rdma_ndev=ffff88804d578000 (5)(vcan0) cookie=ffff88804cfd6000 (4)(veth1_vlan) start
[  384.005482][T11869] binder: 11868:11869 ioctl c0306201 2000000003c0 returned -14
[  384.044746][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (0)(syz1) rdma_ndev=ffff88804d578000 (5)(vcan0) cookie=ffff88804cfd6000 (4)(veth1_vlan) end
[  384.066656][   T42] usb 1-1: Using ep0 maxpacket: 16
[  384.072564][T11770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  384.083965][   T42] usb 1-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  384.085967][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (0)(syz1) rdma_ndev=ffff88804d578000 (5)(vcan0) cookie=ffff88804cbe8000 (5)(virt_wifi0) start
[  384.120953][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  384.146006][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  384.173977][   T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  384.190615][   T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  384.196430][ T5889] rc_core: IR keymap rc-hauppauge not found
[  384.206136][   T13] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (0)(syz1) rdma_ndev=ffff88804d578000 (5)(vcan0) cookie=ffff88804cbe8000 (5)(virt_wifi0) end
[  384.229980][   T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  384.236345][ T5889] Registered IR keymap rc-empty
[  384.247660][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.254900][   T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  384.269099][   T42] usb 1-1: Manufacturer: syz
[  384.269785][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.284744][T11872] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  384.317434][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  384.333218][T11872] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  384.348261][   T42] usb 1-1: config 0 descriptor??
[  384.362781][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input122
[  384.409203][T11770] team0: Port device team_slave_0 added
[  384.416454][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.428513][T11770] team0: Port device team_slave_1 added
[  384.442158][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.468340][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.496379][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.516888][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.576350][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.596364][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.597935][T11770] batman_adv: batadv0: Adding interface: batadv_slave_0
[  384.621099][T11770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.647321][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.656681][T11770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  384.676393][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.688484][T11770] batman_adv: batadv0: Adding interface: batadv_slave_1
[  384.707410][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  384.715831][T11770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[  384.752609][   T42] rc_core: IR keymap rc-hauppauge not found
[  384.766127][   T42] Registered IR keymap rc-empty
[  384.776645][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  384.776807][ T5889] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  384.805954][ T5889] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  384.815821][T11770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  384.816676][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  384.923134][   T42] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1
[  384.968050][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc1/input123
[  384.980750][ T5889] usb 3-1: USB disconnect, device number 2
[  384.992197][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.037613][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.066318][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.116278][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.150408][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.206646][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.241456][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.281206][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.334910][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.348383][T11770] hsr_slave_0: entered promiscuous mode
[  385.386640][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  385.393089][T11770] hsr_slave_1: entered promiscuous mode
[  385.426354][ T5142] Bluetooth: hci2: command tx timeout
[  385.447793][T11770] debugfs: 'hsr0' already exists in 'hsr'
[  385.477491][T11770] Cannot create hsr debugfs directory
[  385.615728][   T42] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  385.634134][   T42] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  385.712316][   T42] usb 1-1: USB disconnect, device number 10
[  385.736778][ T5889] usb 3-1: new high-speed USB device number 3 using dummy_hcd
[  385.906056][ T5889] usb 3-1: Using ep0 maxpacket: 32
[  385.914563][ T5889] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  385.972979][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  386.045496][ T5889] usb 3-1: config 0 descriptor??
[  386.136151][ T5889] as10x_usb: device has been detected
[  386.143275][ T5889] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  386.204994][ T5889] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  386.260116][ T5889] as10x_usb: error during firmware upload part1
[  386.274751][ T5889] Registered device nBox DVB-T Dongle
[  386.294737][ T5889] usb 3-1: USB disconnect, device number 3
[  386.311512][T10907] infiniband: Removed from hash: ib_dev=ffff88804ddb4000 (0)(syz2) ndev=ffff88807e170000 (5)(wg2)
[  386.490709][ T5889] Unregistered device nBox DVB-T Dongle
[  386.497304][ T5889] as10x_usb: device has been disconnected
[  386.515848][   T42] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  386.529201][T11912] binder: BINDER_SET_CONTEXT_MGR already set
[  386.536658][T11912] binder: 11911:11912 ioctl 4018620d 200000000040 returned -16
[  386.544724][T11912] binder: 11911:11912 ioctl c0306201 2000000003c0 returned -14
[  386.617141][T10905] infiniband: Removed from hash: ib_dev=ffff88807d370000 (0)(syz1) ndev=ffff88804d578000 (4)(vcan0)
[  386.686010][   T42] usb 1-1: Using ep0 maxpacket: 16
[  386.702012][   T42] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  386.736950][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  386.755863][   T42] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  386.780496][   T42] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  386.792445][   T42] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  386.816382][   T42] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  386.825584][   T42] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  386.839585][   T42] usb 1-1: Manufacturer: syz
[  386.887230][   T42] usb 1-1: config 0 descriptor??
[  386.983057][T10907] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88804ddb4000 (0)(syz2) end
[  387.073112][T11926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  387.119985][T11926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  387.207091][T10905] infiniband: netdevice_event(NETDEV_UNREGISTER) ib_dev=ffff88807d370000 (0)(syz1) end
[  387.216897][   T42] rc_core: IR keymap rc-hauppauge not found
[  387.222808][   T42] Registered IR keymap rc-empty
[  387.228365][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.246302][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.301649][   T42] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  387.328455][   T42] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input124
[  387.360361][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.408293][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.436641][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.475704][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.504563][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.507426][ T5142] Bluetooth: hci2: command tx timeout
[  387.571669][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.615909][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.657457][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.685892][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.715799][   T42] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  387.753778][   T42] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  387.786005][   T42] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  387.805807][   T42] usb 1-1: USB disconnect, device number 11
[  387.866621][ T5889] usb 3-1: new high-speed USB device number 4 using dummy_hcd
[  388.011078][T11770] netdevsim netdevsim3 netdevsim0: renamed from eth0
[  388.029171][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  388.030762][T11770] netdevsim netdevsim3 netdevsim1: renamed from eth1
[  388.052076][ T5889] usb 3-1: config 0 has an invalid descriptor of length 93, skipping remainder of the config
[  388.077328][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  388.102864][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  388.107541][T11770] netdevsim netdevsim3 netdevsim2: renamed from eth2
[  388.132964][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  388.157533][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  388.196937][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  388.217571][T11770] netdevsim netdevsim3 netdevsim3: renamed from eth3
[  388.246076][ T5889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  388.257908][ T5889] usb 3-1: Manufacturer: syz
[  388.268292][T11961] binder: BINDER_SET_CONTEXT_MGR already set
[  388.276645][ T5889] usb 3-1: config 0 descriptor??
[  388.282195][T11961] binder: 11959:11961 ioctl 4018620d 200000000040 returned -16
[  388.306205][T11961] binder: 11959:11961 ioctl c0306201 2000000003c0 returned -14
[  388.430398][T11974] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  388.472131][T11974] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  388.625306][T11770] 8021q: adding VLAN 0 to HW filter on device bond0
[  388.626951][ T5889] rc_core: IR keymap rc-hauppauge not found
[  388.656133][ T5889] Registered IR keymap rc-empty
[  388.666626][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.673164][T11770] 8021q: adding VLAN 0 to HW filter on device team0
[  388.705657][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.717619][T10901] bridge0: port 1(bridge_slave_0) entered blocking state
[  388.724849][T10901] bridge0: port 1(bridge_slave_0) entered forwarding state
[  388.747950][T10901] bridge0: port 2(bridge_slave_1) entered blocking state
[  388.755184][T10901] bridge0: port 2(bridge_slave_1) entered forwarding state
[  388.766077][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  388.802988][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input125
[  388.832986][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.860596][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.905443][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.948374][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  388.975565][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.005425][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.045403][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.075454][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.096596][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.115452][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  389.137533][ T5889] mceusb 3-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  389.159496][ T5889] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  389.182365][ T5889] usb 3-1: USB disconnect, device number 4
[  389.236943][ T5863] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  389.312978][T12006] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  389.328357][T12006] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  389.342129][T11770] 8021q: adding VLAN 0 to HW filter on device batadv0
[  389.435520][ T5863] usb 1-1: Using ep0 maxpacket: 16
[  389.442448][ T5863] usb 1-1: config 0 has an invalid descriptor of length 42, skipping remainder of the config
[  389.467631][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  389.479539][T11770] veth0_vlan: entered promiscuous mode
[  389.485542][ T5863] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  389.497258][ T5863] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  389.510147][ T5863] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  389.518817][T11770] veth1_vlan: entered promiscuous mode
[  389.525308][ T5863] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  389.541353][ T5863] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  389.558188][ T5863] usb 1-1: Manufacturer: syz
[  389.571923][ T5863] usb 1-1: config 0 descriptor??
[  389.618107][T11770] veth0_macvtap: entered promiscuous mode
[  389.633462][T11770] veth1_macvtap: entered promiscuous mode
[  389.681047][T11770] batman_adv: batadv0: Interface activated: batadv_slave_0
[  389.706069][T11770] batman_adv: batadv0: Interface activated: batadv_slave_1
[  389.739585][   T13] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  389.757285][   T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  389.779159][   T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  389.789058][   T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  389.918532][T10905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  389.935205][T10905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  389.935329][ T5863] rc_core: IR keymap rc-hauppauge not found
[  389.950558][ T5863] Registered IR keymap rc-empty
[  389.956676][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.000285][T10905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  390.009447][T10905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  390.018293][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.058314][ T5863] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0
[  390.110209][ T5863] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input126
[  390.142093][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.176544][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.198315][T12028] binder: 12026:12028 ioctl c0306201 0 returned -14
[  390.216889][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.247222][T12028] binder: 12026:12028 ioctl c0306201 2000000003c0 returned -14
[  390.265981][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.285766][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.327958][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.365408][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.395389][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.426153][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.447003][ T5863] mceusb 1-1:0.0: Error: mce write submit urb error = -90
[  390.451510][T12043] binder: 12041:12043 ioctl c0306201 2000000003c0 returned -14
[  390.477453][ T5863] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  390.505223][ T5863] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  390.532131][ T5863] usb 1-1: USB disconnect, device number 12
[  390.635935][ T5889] usb 4-1: new high-speed USB device number 123 using dummy_hcd
[  390.805138][ T5889] usb 4-1: Using ep0 maxpacket: 16
[  390.814728][ T5889] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  390.826251][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  390.838025][ T5889] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  390.848771][ T5889] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  390.862078][ T5889] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  390.883163][ T5889] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  390.893136][ T5889] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  390.901275][ T5889] usb 4-1: Manufacturer: syz
[  390.910280][ T5889] usb 4-1: config 0 descriptor??
[  390.977107][ T8538] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  391.012266][T12064] binder: 12063:12064 ioctl c0306201 0 returned -14
[  391.021956][T12064] binder: 12063:12064 ioctl c0306201 2000000003c0 returned -14
[  391.089882][T12067] FAULT_INJECTION: forcing a failure.
[  391.089882][T12067] name failslab, interval 1, probability 0, space 0, times 0
[  391.104569][T12067] CPU: 1 UID: 0 PID: 12067 Comm: syz.5.2002 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  391.104607][T12067] Tainted: [L]=SOFTLOCKUP
[  391.104613][T12067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  391.104620][T12067] Call Trace:
[  391.104625][T12067]  <TASK>
[  391.104630][T12067]  dump_stack_lvl+0xe8/0x150
[  391.104648][T12067]  should_fail_ex+0x412/0x560
[  391.104661][T12067]  should_failslab+0xa8/0x100
[  391.104673][T12067]  ? alloc_empty_file_noaccount+0x23/0xc0
[  391.104694][T12067]  kmem_cache_alloc_noprof+0x87/0x650
[  391.104727][T12067]  alloc_empty_file_noaccount+0x23/0xc0
[  391.104748][T12067]  kernel_tmpfile_open+0x2a/0x90
[  391.104812][T12067]  ovl_copy_up_flags+0x17a7/0x3940
[  391.104850][T12067]  ? __pfx_ovl_copy_up_flags+0x10/0x10
[  391.104865][T12067]  ? is_bpf_text_address+0x26/0x2b0
[  391.104891][T12067]  ? kernel_text_address+0xa5/0xe0
[  391.104910][T12067]  ? __kernel_text_address+0xd/0x30
[  391.104929][T12067]  ? unwind_get_return_address+0x4d/0x90
[  391.104948][T12067]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  391.104963][T12067]  ? arch_stack_walk+0xfb/0x150
[  391.104993][T12067]  ? stack_trace_save+0xa9/0x100
[  391.105008][T12067]  ? __pfx_stack_trace_save+0x10/0x10
[  391.105028][T12067]  ? stack_depot_save_flags+0x33/0x810
[  391.105048][T12067]  ? kasan_save_track+0x4f/0x80
[  391.105062][T12067]  ? kasan_save_track+0x3e/0x80
[  391.105076][T12067]  ? kasan_save_free_info+0x46/0x50
[  391.105094][T12067]  ? __kasan_slab_free+0x5c/0x80
[  391.105109][T12067]  ? kfree+0x1c1/0x630
[  391.105128][T12067]  ? tomoyo_check_open_permission+0x32c/0x470
[  391.105150][T12067]  ? security_file_open+0xa9/0x240
[  391.105169][T12067]  ? do_dentry_open+0x384/0x14e0
[  391.105186][T12067]  ? vfs_open+0x3b/0x340
[  391.105202][T12067]  ? path_openat+0x2e08/0x3860
[  391.105215][T12067]  ? do_file_open+0x23e/0x4a0
[  391.105227][T12067]  ? do_sys_openat2+0x113/0x200
[  391.105245][T12067]  ? __x64_sys_openat+0x138/0x170
[  391.105348][T12067]  ? ovl_already_copied_up+0x181/0x310
[  391.105373][T12067]  ovl_open+0x140/0x300
[  391.105393][T12067]  ? __pfx_apparmor_file_open+0x10/0x10
[  391.105415][T12067]  ? __pfx_ovl_open+0x10/0x10
[  391.105438][T12067]  ? __pfx_ovl_open+0x10/0x10
[  391.105454][T12067]  do_dentry_open+0x785/0x14e0
[  391.105483][T12067]  vfs_open+0x3b/0x340
[  391.105500][T12067]  ? path_openat+0x2df0/0x3860
[  391.105577][T12067]  path_openat+0x2e08/0x3860
[  391.105625][T12067]  ? __pfx_path_openat+0x10/0x10
[  391.105639][T12067]  ? __x64_sys_openat+0x138/0x170
[  391.105669][T12067]  ? __lock_acquire+0x6b5/0x2cf0
[  391.105735][T12067]  do_file_open+0x23e/0x4a0
[  391.105758][T12067]  ? __pfx_do_file_open+0x10/0x10
[  391.105794][T12067]  ? _raw_spin_unlock+0x28/0x50
[  391.105815][T12067]  ? alloc_fd+0x64b/0x6c0
[  391.105847][T12067]  do_sys_openat2+0x113/0x200
[  391.105870][T12067]  ? __pfx_do_sys_openat2+0x10/0x10
[  391.105891][T12067]  ? ksys_write+0x242/0x270
[  391.105910][T12067]  ? __pfx_ksys_write+0x10/0x10
[  391.105929][T12067]  __x64_sys_openat+0x138/0x170
[  391.105960][T12067]  do_syscall_64+0x14d/0xf80
[  391.105977][T12067]  ? trace_irq_disable+0x3b/0x150
[  391.105997][T12067]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.106014][T12067]  ? clear_bhb_loop+0x40/0x90
[  391.106034][T12067]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  391.106050][T12067] RIP: 0033:0x7fedca59bf79
[  391.106068][T12067] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  391.106082][T12067] RSP: 002b:00007fedcb3cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[  391.106100][T12067] RAX: ffffffffffffffda RBX: 00007fedca815fa0 RCX: 00007fedca59bf79
[  391.106112][T12067] RDX: 000000000000275a RSI: 0000200000000000 RDI: ffffffffffffff9c
[  391.106123][T12067] RBP: 00007fedcb3cd090 R08: 0000000000000000 R09: 0000000000000000
[  391.106134][T12067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  391.106144][T12067] R13: 00007fedca816038 R14: 00007fedca815fa0 R15: 00007fff4ea254f8
[  391.106173][T12067]  </TASK>
[  391.175046][ T5889] rc_core: IR keymap rc-hauppauge not found
[  391.205337][ T8538] usb 3-1: Using ep0 maxpacket: 32
[  391.208566][ T8538] usb 3-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  391.237908][ T5889] Registered IR keymap rc-empty
[  391.242867][ T8538] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  391.248241][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.271809][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.278726][ T8538] usb 3-1: config 0 descriptor??
[  391.306604][ T5889] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[  391.316662][ T8538] as10x_usb: device has been detected
[  391.331844][ T5889] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input127
[  391.336277][ T8538] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  391.358528][ T5939] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  391.372500][ T8538] usb 3-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  391.464527][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.476030][T12074] binder: 12073:12074 ioctl c0306201 2000000003c0 returned -14
[  391.505119][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.518754][ T8538] as10x_usb: error during firmware upload part1
[  391.545453][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.586896][ T8538] Registered device nBox DVB-T Dongle
[  391.592197][ T5939] usb 1-1: Using ep0 maxpacket: 8
[  391.615324][ T8538] usb 3-1: USB disconnect, device number 5
[  391.649981][ T5939] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  391.677852][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.687487][ T5939] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  391.699080][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  391.711195][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.720704][ T8538] Unregistered device nBox DVB-T Dongle
[  391.722211][ T8538] as10x_usb: device has been disconnected
[  391.723454][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  391.748650][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.761530][T12076] openvswitch: netlink: Either Ethernet header or EtherType is required.
[  391.778974][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.786602][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  391.798191][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  391.810511][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.821795][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  391.836165][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.843449][ T5939] usb 1-1: config 168 interface 0 has no altsetting 0
[  391.853414][ T5939] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  391.861689][ T5889] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[  391.869524][ T5939] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  391.882667][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  391.896630][ T5889] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[  391.906921][ T5889] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  391.915411][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  391.938076][ T5889] usb 4-1: USB disconnect, device number 123
[  391.944223][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  391.959700][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  391.971722][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  391.988611][ T5939] usb 1-1: config 168 interface 0 has no altsetting 0
[  391.997577][ T5939] usb 1-1: config 168 descriptor has 1 excess byte, ignoring
[  392.006162][ T5939] usb 1-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30
[  392.018009][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11
[  392.031218][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  392.053362][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7
[  392.067852][ T5939] usb 1-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  392.084124][ T5939] usb 1-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100
[  392.097740][ T5939] usb 1-1: config 168 interface 0 has no altsetting 0
[  392.107262][ T5939] usb 1-1: string descriptor 0 read error: -22
[  392.113503][ T5939] usb 1-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e
[  392.122877][ T5939] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  392.139247][ T5939] adutux 1-1:168.0: ADU100  now attached to /dev/usb/adutux0
[  392.234706][T12084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  392.244543][T12084] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  392.358688][ T5889] usb 1-1: USB disconnect, device number 13
[  392.378615][T12088] binder: 12087:12088 ioctl c0306201 2000000003c0 returned -14
[  392.474465][T12094] binder: 12093:12094 ioctl c0306201 2000000003c0 returned -14
[  392.572418][T12097] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2015'.
[  392.654820][ T5939] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  392.784791][ T5939] usb 3-1: device descriptor read/64, error -71
[  393.026967][ T5939] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  393.164758][ T5939] usb 3-1: device descriptor read/64, error -71
[  393.275587][ T5939] usb usb3-port1: attempt power cycle
[  393.304721][ T5889] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  393.456734][ T5889] usb 1-1: Using ep0 maxpacket: 32
[  393.463912][ T5889] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  393.473099][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  393.484064][ T5889] usb 1-1: config 0 descriptor??
[  393.500816][ T5889] as10x_usb: device has been detected
[  393.516020][ T5889] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  393.540385][ T5889] usb 1-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)...
[  393.560010][ T5889] as10x_usb: error during firmware upload part1
[  393.567255][ T5889] Registered device nBox DVB-T Dongle
[  393.614700][ T5939] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  393.645433][ T5939] usb 3-1: device descriptor read/8, error -71
[  393.696251][ T5890] usb 1-1: USB disconnect, device number 14
[  393.717121][ T5890] Unregistered device nBox DVB-T Dongle
[  393.718148][ T5890] as10x_usb: device has been disconnected
[  393.794670][ T8538] usb 4-1: new high-speed USB device number 124 using dummy_hcd
[  393.839899][T12115] binder: 12114:12115 ioctl c0306201 2000000003c0 returned -14
[  393.879165][T12117] FAULT_INJECTION: forcing a failure.
[  393.879165][T12117] name failslab, interval 1, probability 0, space 0, times 0
[  393.891941][T12117] CPU: 0 UID: 0 PID: 12117 Comm: syz.5.2024 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  393.891958][T12117] Tainted: [L]=SOFTLOCKUP
[  393.891962][T12117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  393.891968][T12117] Call Trace:
[  393.891972][T12117]  <TASK>
[  393.891977][T12117]  dump_stack_lvl+0xe8/0x150
[  393.891995][T12117]  should_fail_ex+0x412/0x560
[  393.892008][T12117]  should_failslab+0xa8/0x100
[  393.892021][T12117]  __kmalloc_noprof+0xe8/0x760
[  393.892031][T12117]  ? rcu_is_watching+0x15/0xb0
[  393.892044][T12117]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  393.892059][T12117]  genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  393.892072][T12117]  genl_family_rcv_msg_doit+0xd9/0x330
[  393.892085][T12117]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  393.892097][T12117]  ? __pfx_genl_get_cmd+0x10/0x10
[  393.892105][T12117]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  393.892121][T12117]  ? __lock_acquire+0x6b5/0x2cf0
[  393.892136][T12117]  genl_rcv_msg+0x61c/0x7a0
[  393.892149][T12117]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.892158][T12117]  ? __pfx_nbd_genl_disconnect+0x10/0x10
[  393.892169][T12117]  ? __lock_acquire+0x6b5/0x2cf0
[  393.892186][T12117]  netlink_rcv_skb+0x232/0x4b0
[  393.892199][T12117]  ? __pfx_genl_rcv_msg+0x10/0x10
[  393.892209][T12117]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  393.892230][T12117]  ? down_read+0x272/0x2e0
[  393.892240][T12117]  ? genl_rcv+0xd/0x40
[  393.892250][T12117]  genl_rcv+0x28/0x40
[  393.892259][T12117]  netlink_unicast+0x80f/0x9b0
[  393.892274][T12117]  ? __pfx_netlink_unicast+0x10/0x10
[  393.892286][T12117]  ? netlink_sendmsg+0x650/0xb40
[  393.892298][T12117]  ? skb_put+0x11b/0x210
[  393.892316][T12117]  netlink_sendmsg+0x813/0xb40
[  393.892333][T12117]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.892351][T12117]  ? tomoyo_socket_sendmsg_permission+0x1e0/0x300
[  393.892368][T12117]  ? __pfx_netlink_sendmsg+0x10/0x10
[  393.892379][T12117]  sock_sendmsg_nosec+0x18f/0x1d0
[  393.892393][T12117]  ____sys_sendmsg+0x589/0x8c0
[  393.892407][T12117]  ? __pfx_____sys_sendmsg+0x10/0x10
[  393.892421][T12117]  ? import_iovec+0x73/0xa0
[  393.892435][T12117]  ___sys_sendmsg+0x2a5/0x360
[  393.892447][T12117]  ? __pfx____sys_sendmsg+0x10/0x10
[  393.892474][T12117]  ? __fget_files+0x2a/0x420
[  393.892487][T12117]  ? __fget_files+0x3a0/0x420
[  393.892504][T12117]  __x64_sys_sendmsg+0x1bd/0x2a0
[  393.892515][T12117]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  393.892530][T12117]  ? __pfx_ksys_write+0x10/0x10
[  393.892545][T12117]  do_syscall_64+0x14d/0xf80
[  393.892555][T12117]  ? trace_irq_disable+0x3b/0x150
[  393.892573][T12117]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.892582][T12117]  ? clear_bhb_loop+0x40/0x90
[  393.892594][T12117]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  393.892603][T12117] RIP: 0033:0x7fedca59bf79
[  393.892614][T12117] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  393.892622][T12117] RSP: 002b:00007fedcb3cd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  393.892633][T12117] RAX: ffffffffffffffda RBX: 00007fedca815fa0 RCX: 00007fedca59bf79
[  393.892640][T12117] RDX: 0000000004000810 RSI: 00002000000002c0 RDI: 0000000000000006
[  393.892646][T12117] RBP: 00007fedcb3cd090 R08: 0000000000000000 R09: 0000000000000000
[  393.892652][T12117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  393.892658][T12117] R13: 00007fedca816038 R14: 00007fedca815fa0 R15: 00007fff4ea254f8
[  393.892674][T12117]  </TASK>
[  393.954635][ T8538] usb 4-1: Using ep0 maxpacket: 16
[  393.959078][ T5939] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  393.994717][ T8538] usb 4-1: config 0 has an invalid interface number: 113 but max is 0
[  394.026872][ T5939] usb 3-1: device descriptor read/8, error -71
[  394.031761][ T8538] usb 4-1: config 0 has no interface number 0
[  394.146567][ T5939] usb usb3-port1: unable to enumerate USB device
[  394.158454][ T8538] usb 4-1: New USB device found, idVendor=04ca, idProduct=f001, bcdDevice=13.9b
[  394.287312][ T8538] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  394.295366][ T8538] usb 4-1: Product: syz
[  394.299528][ T8538] usb 4-1: Manufacturer: syz
[  394.304128][ T8538] usb 4-1: SerialNumber: syz
[  394.321048][ T8538] usb 4-1: config 0 descriptor??
[  394.329671][ T8538] dvb-usb: found a 'LITE-ON USB2.0 DVB-T Tuner' in warm state.
[  394.338474][ T8538] dvb-usb: bulk message failed: -22 (3/0)
[  394.349815][ T8538] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer.
[  394.360493][ T8538] dvbdev: DVB: registering new adapter (LITE-ON USB2.0 DVB-T Tuner)
[  394.368886][ T8538] usb 4-1: media controller created
[  394.381082][ T8538] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[  394.432734][T12124] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  394.442014][T12124] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  394.990418][T12138] binder: 12137:12138 ioctl c0306201 2000000003c0 returned -14
[  395.287569][T12155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.296544][T12155] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.334810][ T5863] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  395.424647][ T8538] dvb-usb: bulk message failed: -22 (6/0)
[  395.430728][ T8538] dvb-usb: bulk message failed: -22 (6/0)
[  395.436708][ T8538] dvb-usb: no frontend was attached by 'LITE-ON USB2.0 DVB-T Tuner'
[  395.448575][ T8538] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.3/usb4/4-1/input/input128
[  395.463209][ T8538] dvb-usb: schedule remote query interval to 150 msecs.
[  395.472079][ T8538] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully initialized and connected.
[  395.490024][ T8538] usb 4-1: USB disconnect, device number 124
[  395.496506][ T5863] usb 1-1: Using ep0 maxpacket: 32
[  395.517258][ T5863] usb 1-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64
[  395.530804][ T5863] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  395.542285][ T5863] usb 1-1: config 0 descriptor??
[  395.552400][ T5863] as10x_usb: device has been detected
[  395.588282][ T5863] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle)
[  395.619232][ T5863] usb 1-1: DVB: registering adapter 2 frontend 0 (nBox DVB-T Dongle)...
[  395.630631][ T8538] dvb-usb: LITE-ON USB2.0 DVB-T Tuner successfully deinitialized and disconnected.
[  395.642723][ T5863] as10x_usb: error during firmware upload part1
[  395.653065][ T5863] Registered device nBox DVB-T Dongle
[  395.751542][ T5863] usb 1-1: USB disconnect, device number 15
[  395.777503][ T5863] Unregistered device nBox DVB-T Dongle
[  395.778544][ T5863] as10x_usb: device has been disconnected
[  395.824617][ T5889] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  395.890090][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.905728][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.913515][T12167] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  395.922865][T12167] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  395.963032][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  395.974142][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  395.986910][ T5889] usb 3-1: Using ep0 maxpacket: 16
[  395.994023][ T5889] usb 3-1: config 0 has an invalid descriptor of length 222, skipping remainder of the config
[  396.010197][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  396.030852][ T5889] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  396.055628][ T5889] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  396.075391][ T5889] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  396.092871][ T5889] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  396.115954][ T5889] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  396.127603][ T5889] usb 3-1: Manufacturer: syz
[  396.147039][ T5889] usb 3-1: config 0 descriptor??
[  396.184260][T12165] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.206633][T12165] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.232897][T12165] netlink: 'syz.5.2044': attribute type 3 has an invalid length.
[  396.246710][T12165] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2044'.
[  396.466138][ T5142] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0
[  396.479179][ T5142] Bluetooth: hci2: Injecting HCI hardware error event
[  396.488624][ T5889] rc_core: IR keymap rc-hauppauge not found
[  396.488731][ T5836] Bluetooth: hci2: hardware error 0x00
[  396.505260][ T5889] Registered IR keymap rc-empty
[  396.513829][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  396.542266][ T5836] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN PTI
[  396.554190][ T5836] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f]
[  396.562616][ T5836] CPU: 1 UID: 0 PID: 5836 Comm: kworker/u9:6 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  396.573648][ T5836] Tainted: [L]=SOFTLOCKUP
[  396.577976][ T5836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026
[  396.588043][ T5836] Workqueue: hci2 hci_error_reset
[  396.593086][ T5836] RIP: 0010:klist_remove+0x156/0x340
[  396.598383][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 54 81 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 54 81 f6 49 8b 44 24 58 48 89 44 24 08
[  396.601232][ T5889] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  396.618000][ T5836] RSP: 0018:ffffc90003fd77e0 EFLAGS: 00010202
[  396.618028][ T5836] RAX: 000000000000000b RBX: ffff8880348d5ac0 RCX: 0000000000000000
[  396.618037][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  396.618046][ T5836] RBP: ffffc90003fd78e0 R08: ffffffff9019fc63 R09: 1ffffffff2033f8c
[  396.618056][ T5836] R10: dffffc0000000000 R11: fffffbfff2033f8d R12: 0000000000000000
[  396.618066][ T5836] R13: 1ffff11006495a8c R14: ffff8880324ad460 R15: dffffc0000000000
[  396.618076][ T5836] FS:  0000000000000000(0000) GS:ffff888125110000(0000) knlGS:0000000000000000
[  396.618087][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.618097][ T5836] CR2: 00007fc7663456b8 CR3: 0000000076e88000 CR4: 00000000003526f0
[  396.618111][ T5836] Call Trace:
[  396.618118][ T5836]  <TASK>
[  396.618127][ T5836]  ? __pfx_klist_remove+0x10/0x10
[  396.618147][ T5836]  ? kobject_move+0x5de/0x720
[  396.618167][ T5836]  ? __pfx_kobject_move+0x10/0x10
[  396.618183][ T5836]  ? do_raw_spin_unlock+0xf5/0x210
[  396.618199][ T5836]  ? get_device_parent+0x366/0x3a0
[  396.618220][ T5836]  device_move+0x193/0x730
[  396.618242][ T5836]  hci_conn_del_sysfs+0xb8/0x1a0
[  396.618259][ T5836]  hci_conn_del+0xc36/0x1230
[  396.618282][ T5836]  hci_conn_hash_flush+0x191/0x260
[  396.618305][ T5836]  hci_dev_close_sync+0x821/0x10e0
[  396.618328][ T5836]  ? __pfx_hci_dev_close_sync+0x10/0x10
[  396.618352][ T5836]  hci_error_reset+0x127/0x4c0
[  396.618369][ T5836]  ? process_one_work+0x87c/0x1650
[  396.618388][ T5836]  process_one_work+0x949/0x1650
[  396.618413][ T5836]  ? __pfx_process_one_work+0x10/0x10
[  396.618431][ T5836]  ? do_raw_spin_lock+0x12b/0x2f0
[  396.618451][ T5836]  worker_thread+0xb46/0x1140
[  396.618478][ T5836]  kthread+0x388/0x470
[  396.618493][ T5836]  ? __pfx_worker_thread+0x10/0x10
[  396.618511][ T5836]  ? __pfx_kthread+0x10/0x10
[  396.618526][ T5836]  ret_from_fork+0x51e/0xb90
[  396.618545][ T5836]  ? __pfx_ret_from_fork+0x10/0x10
[  396.618561][ T5836]  ? __switch_to+0xc7d/0x1450
[  396.813508][ T5836]  ? __pfx_kthread+0x10/0x10
[  396.818088][ T5836]  ret_from_fork_asm+0x1a/0x30
[  396.822850][ T5836]  </TASK>
[  396.825863][ T5836] Modules linked in:
[  396.830557][ T5836] ---[ end trace 0000000000000000 ]---
[  396.837007][ T5836] RIP: 0010:klist_remove+0x156/0x340
[  396.842346][ T5836] Code: 4d 89 f5 49 c1 ed 03 43 80 7c 3d 00 00 74 08 4c 89 f7 e8 5d 54 81 f6 4d 8b 26 49 83 e4 fe 49 8d 7c 24 58 48 89 f8 48 c1 e8 03 <42> 80 3c 38 00 74 05 e8 3e 54 81 f6 49 8b 44 24 58 48 89 44 24 08
[  396.862553][ T5836] RSP: 0018:ffffc90003fd77e0 EFLAGS: 00010202
[  396.868929][ T5836] RAX: 000000000000000b RBX: ffff8880348d5ac0 RCX: 0000000000000000
[  396.877147][ T5836] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000058
[  396.885384][ T5836] RBP: ffffc90003fd78e0 R08: ffffffff9019fc63 R09: 1ffffffff2033f8c
[  396.893838][ T5836] R10: dffffc0000000000 R11: fffffbfff2033f8d R12: 0000000000000000
[  396.902825][ T5836] R13: 1ffff11006495a8c R14: ffff8880324ad460 R15: dffffc0000000000
[  396.911185][ T5836] FS:  0000000000000000(0000) GS:ffff888125110000(0000) knlGS:0000000000000000
[  396.920248][ T5836] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  396.927159][ T5836] CR2: 00007fc7663456b8 CR3: 0000000076e88000 CR4: 00000000003526f0
[  396.935263][ T5836] Kernel panic - not syncing: Fatal exception
[  396.941697][ T5836] Kernel Offset: disabled
[  396.946046][ T5836] Rebooting in 86400 seconds..