last executing test programs:

16m46.870029385s ago: executing program 4 (id=3419):
r0 = socket(0x10, 0x80002, 0x0)
syz_open_procfs(0x0, 0x0)
ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sendmsg$RDMA_NLDEV_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="10"], 0x10}}, 0x0)
keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, 0x0, &(0x7f0000000040)=@chain)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
r4 = dup(r3)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c)
sendmsg$inet6(r3, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0xb, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1, 0x0, 0x0, 0x8000000}, 0x48043)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x5, 0x10}, 0xc)
ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[], 0x1c}}, 0x0)

16m46.232597202s ago: executing program 4 (id=3421):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb0}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b708000000000000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

16m44.982914386s ago: executing program 4 (id=3423):
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000840)={0x24, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="00220f000000540b4550182395"], 0x0}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0)
ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000000480)=""/74, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000400))
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x0, 0x0, 0x0, &(0x7f0000000340)=""/185, &(0x7f0000000140)=""/92})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000800}, 0x10)
ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000001500)={@my=0x1})
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001"], 0x64}}, 0x40110)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r1, &(0x7f0000000500)={0x28, 0x0, 0x2710, @my=0x1}, 0x10)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)

16m42.887397014s ago: executing program 4 (id=3431):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
ioctl$COMEDI_INSN(0xffffffffffffffff, 0x8028640c, 0x0)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
socket$nl_netfilter(0x10, 0x3, 0xc)
sched_setaffinity(0x0, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0)
r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8)
r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48)
r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50)
openat$sndtimer(0xffffffffffffff9c, 0x0, 0x1a0001)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000340)={0x750, 0x0, 0x0, 'queue1\x00', 0x5})
bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xe0}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x2, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0x50}, {0x7, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)

16m40.983163239s ago: executing program 4 (id=3435):
openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100), 0x6ad01, 0x0)
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, 0x0)
ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7)
r0 = getpgrp(0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5)
r1 = getpid()
sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000)
r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0)
r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0)
read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8)
r4 = fsopen(&(0x7f0000000180)='proc\x00', 0x1)
fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0)
write$P9_RCREATE(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x73, 0x2, {{0x20, 0x2, 0x4}, 0x14}}, 0x18)
r5 = socket(0x28, 0x801, 0x0)
connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x2710, @local}, 0x10)
shutdown(r5, 0x1)
r6 = epoll_create(0x628)
epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f00000001c0)={0x30000009})
sendmmsg$sock(r5, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)}}, {{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000a80)="6a4896578ce22ed3a86ae1cb2a14835a3cbf692304443a089858452bbed18b9669de459ccc0ee22af144a2dcbbb2baf9b8b9430daf0b2e9ee9f687ae4657d2f3cf8e5c6b9d842fed7b789cf6883f4c71ba064f3a0fd276b073116e03ff", 0x5d}], 0x1}}], 0x2, 0x40000)

16m39.856009232s ago: executing program 4 (id=3436):
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000000882, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20)
ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44)
syz_usb_disconnect(r1)
mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x20, 0xe, 0xa4, {0xa4, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)

16m24.54232873s ago: executing program 32 (id=3436):
syz_genetlink_get_family_id$gtp(0x0, 0xffffffffffffffff)
r0 = io_uring_setup(0x2a90, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x277})
r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902120001000000000904"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000000882, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@loopback, 0x8000600, 0x0, 0x1, 0x9, 0x1}, 0x20)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000180)={@mcast1, 0x8000600, 0x0, 0xff, 0x1, 0x400, 0xfffc}, 0x20)
ioctl$BLKBSZSET(r2, 0x40041271, &(0x7f0000000300)=0x300)
r4 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f0000000000)={'security\x00', 0x2, [{}, {}]}, 0x44)
syz_usb_disconnect(r1)
mount(&(0x7f0000000400)=@sr0, &(0x7f0000000280)='./cgroup\x00', &(0x7f00000000c0)='xfs\x00', 0x2a1800d, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
syz_usb_control_io$uac2(r1, &(0x7f0000000600)={0x14, &(0x7f0000000500)={0x20, 0xe, 0xa4, {0xa4, 0xb, "1d29ac45a2327b6573215665eb2fe4cfe9983c13e7cc0d5a65a962afef0f294681bf1eece26c54819f89176b52985a37b179998946237b144c40d6cfc34c29ee427d4303906e34fd197103eb244bad31feae01f538007138c9f77030a1f2e8c0935e180c52988e800f97509c769b582c8c2e1905dca983e1d980c5092cc65994c02f9a8b839adb68eb582a4cad59a359b317864cb47c9c48a5d58f096c0dc1899adc"}}, &(0x7f00000005c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2401}}}, &(0x7f0000000900)={0x44, &(0x7f0000000640)={0x0, 0x3, 0xa3, "3268002fbd7b3f4baf44d073ac8a6ed0f8cb0c50595fb639a5bf3b74698f0fe9b711b5f325f774f397a10f756ec6aa8b71eca9bdcf76286dc1b8aa1172a1bbbd2d4338e51fd35c117c8ee04bd9a1c6827a615761cd6034db307280ff3ade2de41525fadd8a4ce313d204174b6281018c8deaf08ef996e7f5d307e5f2e2509fd87daaaa467208811f9bee50a029d63f8ea50ce74b8775ec52a71243f867032f6d1abc2b"}, &(0x7f0000000700)={0x0, 0xa, 0x1, 0x1}, &(0x7f0000000740)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000780)={0x20, 0x81, 0x1, "ea"}, 0x0, 0x0, &(0x7f0000000880)={0x20, 0x84, 0x4, "168aa602"}, &(0x7f00000008c0)={0x20, 0x85, 0x3, "3a9f4b"}})
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r5 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102)
writev(r5, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
mkdirat(0xffffffffffffff9c, 0x0, 0x181)
r6 = syz_open_dev$I2C(&(0x7f00000001c0), 0xcda, 0x0)
ioctl$I2C_SMBUS(r6, 0x720, &(0x7f0000000180)={0x1, 0xae, 0x6, &(0x7f0000000100)={0x3, "3122d8073600db6519200b0836d2538fab6b3e90d98edd82f27327084265958d2c"}})
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910000000000000cb041818000100009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xe4}, 0x48)
close_range(r0, 0xffffffffffffffff, 0x0)

7.405319308s ago: executing program 5 (id=7059):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9240d73f87776a10bec23122eeb4dee2bb94c9fed02d69693935ca436bdc62cfb19aa3c7d2be9c561eca2", 0x150)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9d, 0xbd, 0x45, 0x40, 0x10b9, 0x6000, 0xbe16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x40, 0x19, 0x0, 0x3a, 0x92, 0xe0, 0x8}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000300)='\x00')

7.212261331s ago: executing program 1 (id=7062):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32", 0x2b}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52", 0xc5}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.864043736s ago: executing program 2 (id=7064):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.783732408s ago: executing program 1 (id=7066):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880), 0x0, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

6.527273923s ago: executing program 2 (id=7068):
r0 = syz_usb_connect(0x3, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="1201000075f84c1071042703a461000000010902120001000000"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000100)={0x2c, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000100000011"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)

6.179185626s ago: executing program 1 (id=7069):
socket$nl_netfilter(0x10, 0x3, 0xc)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f0000000500)=@abs={0x0, 0x0, 0x4e20}, 0x6e)
sendmmsg$unix(r1, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$video(&(0x7f0000000040), 0x8, 0x101840)
ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000080)={0xd, 0x3, 0x1, {0x3, 0x1, 0x1400, 0x870}})
r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000180)={0xc, 0x0, <r4=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r3, 0x3ba0, &(0x7f0000000740)={0x48, 0x2, r4, 0x0, 0x0, 0x0, <r5=>0x0})
ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f0000000000)={0x28, 0x7, r4, 0x0, &(0x7f0000c00000/0x400000)=nil, 0x400000, 0x1004000})
ioctl$IOMMU_HWPT_ALLOC$TEST(r3, 0x3b89, &(0x7f0000000140)={0x28, 0x4, r5, r4, 0x0, 0x0, 0xdead, 0x4, &(0x7f0000000100)})
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, 0x0)
r6 = socket(0xa, 0x3, 0x3a)
r7 = socket$inet6(0xa, 0x400000000001, 0x100)
bpf$MAP_CREATE(0x4000000000000, &(0x7f0000000380)=ANY=[@ANYBLOB="0600000004000000be7000005c000000000000206799179d0daf0ceef5e5c806539ecb99e15adf626bd3ded47456b6695c9931433cfd0912211e71859f80a595ab39df3469ddfa8167c78c6869ad19efbce5f605f39182a9fab6aad48509322a0a31484b86b266bc2817b969b7e9194a3bf8342d7d734e878eb45442234cad0d35695434e63ca43d2d551cec4f2a2404ef4a1702b70acc", @ANYRESOCT=r1, @ANYBLOB="003601005fb112"], 0x50)
sendto$inet6(r7, 0x0, 0x0, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e1f, 0xc, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x4}, 0x1c)
unshare(0x0)
socket$inet6_sctp(0xa, 0x5, 0x84)
socket$packet(0x11, 0x3, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r8 = socket(0x10, 0x803, 0x0)
sendmsg$BATADV_CMD_GET_MESH(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0)
getsockname$packet(r8, 0x0, &(0x7f0000000200))
sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newqdisc={0x40, 0x24, 0x713, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffff, 0xffff}, {0xfff1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_QUANTUM={0x8, 0x2, 0xa5ba}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0)

5.09593687s ago: executing program 1 (id=7073):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

4.73636804s ago: executing program 1 (id=7074):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
getpid()
socketpair$unix(0x1, 0x2, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff, 0x3fd, 0x0, 0xb2, 0x0, 0x2}, 0x9c)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0)
bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, 0x0, 0x0)
ptrace$getregset(0x4204, 0x0, 0x6, &(0x7f0000000480)={0x0})

4.68278984s ago: executing program 3 (id=7075):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

4.576712119s ago: executing program 1 (id=7076):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="d6f5fbcf8c5f6b1eab996ddbb1a3fa9e7faef2c7e9b975084ebb6f5557284549957db0e43ddd82283e9404df9f48beef3bbdd77a64dd1807932d9fc1530c25d99c0108e15f903702feb5de78597f9aa52ffbbaa5b0228712aba726a32334d84e12920ffc0f4553e561dc7b6570bcaca912b5e63022bbf50cdbee9d0cc9586939fe7d49ccbde680e7e0cd18997741457262cdba41de28c9e3a6e1fe79bd5c5c2459f4f619fc95346792b3f20155bbaaa9a07248026b6159c403bea11fa2b5e85ba3e189f96d08063e2d3fc85078655058cd151e6e60ed04bd487becfe0ec08c6af41bd54fe99c4b94c18fa34940161469afcd05e1c1cd5a98ba5f28d768fcec333f2cb041afc799c8eea8f460e58de122899d699da77dcb9655b52b93be558a36c317426b69e9240d73f87776a10bec23122eeb4dee2bb94c9fed02d69693935ca436bdc62cfb19aa3c7d2be9c561eca2", 0x150)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x1, "90"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9d, 0xbd, 0x45, 0x40, 0x10b9, 0x6000, 0xbe16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x40, 0x19, 0x0, 0x3a, 0x92, 0xe0, 0x8}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0)
syz_usb_control_io$hid(r1, 0x0, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000300)='\x00')

4.412441779s ago: executing program 3 (id=7078):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda116b1d34e47473f39aa995a813a710dae914618c4d6fe5ba44aca3e0570dd32977ed521baedf6801196e24f18640f84add06d5a3d091db19c0afcfc4fe365e11e5c9b82d02b079c934b9324386f08f8f13b68e630f47ac96b480f"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

4.298289195s ago: executing program 0 (id=7079):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r1, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.156777588s ago: executing program 0 (id=7080):
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{0x0}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r2 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.012410521s ago: executing program 0 (id=7081):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

3.821082699s ago: executing program 5 (id=7082):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x4e, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.594052828s ago: executing program 5 (id=7083):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000008600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b0000000800", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

3.477624194s ago: executing program 3 (id=7084):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.475670777s ago: executing program 0 (id=7085):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1ab", 0x87, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473e", 0xdc}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.348755535s ago: executing program 5 (id=7086):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000008c0), 0x121202, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r6 = fanotify_init(0x2, 0x8000)
fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4)
read$FUSE(r6, 0x0, 0x0)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9)
write$binfmt_elf32(r3, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x2})
unshare(0x8040480)
fsopen(&(0x7f0000000500)='aufs\x00', 0x0)
r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x0)
fchdir(r8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)

3.279041519s ago: executing program 3 (id=7087):
kexec_load(0x3, 0x0, &(0x7f00000005c0), 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}], 0x1, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.237125586s ago: executing program 2 (id=7088):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, 0x0, 0x10b8}, 0x588)
bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000b5593c0a000200d7a60000070000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
close(r1)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000010800034000000014480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c0003801800008008000340000000020c0004400000000000000c7f14000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x240048d0}, 0x40)
sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a0101000000000000e54b0a0000060900020073797a31000000000900010073797a31000000001c000380180000800c0001800600010000000000080003400000000114000000110001"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40)
sendmsg$NFT_BATCH(r0, 0x0, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]})
close_range(r3, 0xffffffffffffffff, 0x0)
r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4)
landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff)
sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="0200000004000000040000000800000014100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00e64703a446effd68f65888cb00"/40], 0x48)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r6 = accept4(r5, 0x0, 0x0, 0x800)
sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e7", 0x9b}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @remote}, 0x6}, 0x1c)
connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c)
syz_emit_ethernet(0x42, &(0x7f00000003c0)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x2, 0x21, 0x34, 0x67, 0x0, 0x7, 0x6, 0x0, @remote, @remote}, {{0x4e22, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x4, 0x8, 0x0, 0xe7, {[@timestamp={0x8, 0xa, 0xfffffffb}]}}}}}}}, 0x0)

3.052864104s ago: executing program 2 (id=7089):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb)
r4 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r4, &(0x7f0000000400)='\n', 0x1)

2.979974876s ago: executing program 0 (id=7090):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c", 0x4d, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.710252206s ago: executing program 3 (id=7091):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.353610043s ago: executing program 0 (id=7092):
r0 = socket$can_raw(0x1d, 0x3, 0x1)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', <r1=>0x0})
bind$can_raw(r0, &(0x7f00000001c0)={0x1d, r1}, 0x10)
setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x2, &(0x7f0000000040)=0x8, 0x4)
r2 = socket(0x10, 0x3, 0x0)
write(r2, &(0x7f0000000000)="2400000011005f0414f9f4070009041f810000000e0000000000000008000f0001000000", 0x24)
r3 = fsopen(&(0x7f00000001c0)='bfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0)
r4 = fsmount(r3, 0x0, 0x82)
fchdir(r4)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0)
r5 = fsopen(&(0x7f00000000c0)='msdos\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000b00)='\xbf%#\x00', 0x0)
write$binfmt_script(r4, &(0x7f0000000040)={'#! ', '', [{0x20, 'memorl\xa6cy.events.loc'}, {}], 0xa, "ec2d28cff03bb6764b021c9b5fbc8b423a53db46316c44092d10dde4bceea7b75159534487400eae71427b6bf463722e2fde6e31de4f"}, 0x50)
openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r3, 0x0)
r6 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0)
syz_usb_control_io(r6, 0x0, 0x0)
r7 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000003173610ef171e7206de010203010902f3c8010000000009040000000206"], 0x0)
syz_usb_control_io$cdc_ecm(r7, 0x0, &(0x7f0000000740)={0x1c, &(0x7f00000005c0)={0x20, 0x16, 0x4, "e1450549"}, 0x0, 0x0})
r8 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
read$char_usb(r8, &(0x7f0000000480)=""/74, 0x49)
syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0x494, &(0x7f00000008c0)=ANY=[])
ioctl$BTRFS_IOC_RESIZE(r5, 0x50009403, &(0x7f0000000140)={{r3}, {@void, @max}})

2.302893758s ago: executing program 3 (id=7093):
r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000003005740ed0b0011c3ec000000010902120001000000000904"], 0x0)
syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000180)={0x84, &(0x7f0000000000)=ANY=[@ANYBLOB="00000100000022"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f00000023c0)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

2.029855343s ago: executing program 2 (id=7094):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

1.753172598s ago: executing program 5 (id=7095):
openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket$key(0xf, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r0 = getpid()
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0)
sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2)
recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff)
symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00')
r3 = openat(0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0)
write(r3, &(0x7f0000000380)='dummy_udc.0', 0xb)
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@mpls_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_VIA={0x14, 0x12, {0xa, "f5d6a6c4b0639b11374230874419"}}]}, 0x30}}, 0x0)
syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYBLOB="bbbbbbbbbbbbc59a1b7447f53fe76bb1121121be6cc815dd6003000000206cfffe8000000000000000080000000000aa000c000000007349384346f85bc22c22054aad9b3be48b4a62590e51bf97e2431e1c1b5b2a1adf9da6ae757747180e8be950a5484efc9339223b13f0c6605cb51463e1afe677187bc8f04bb4803af5d35160e591d3194faf817715c2f4529a02ed32c7e7a8ce3f0f"], 0x0)

23.350714ms ago: executing program 5 (id=7096):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

0s ago: executing program 2 (id=7097):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

sb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 2289.667308][T27034] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 2289.675677][T21662] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2289.682594][T27034] usb 2-1: config 14 has no interface number 0
[ 2289.689450][T27034] usb 2-1: config 14 has no interface number 1
[ 2289.695781][T27034] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2289.706878][T27034] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2289.719296][T27034] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2289.730877][T21662] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2289.740109][T21662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2289.748170][T21662] usb 6-1: Product: syz
[ 2289.752528][T21662] usb 6-1: Manufacturer: syz
[ 2289.757196][T27034] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2289.768733][T21662] usb 6-1: SerialNumber: syz
[ 2289.774388][T27034] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2289.786654][T21662] usb 6-1: config 0 descriptor??
[ 2289.797840][T27034] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2289.811385][T27034] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2289.818549][T27034] usb 2-1: config 14 interface 228 has no altsetting 0
[ 2289.827234][T27034] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2289.836385][T27034] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2289.844606][T27034] usb 2-1: Product: syz
[ 2289.848768][T27034] usb 2-1: Manufacturer: syz
[ 2289.853513][T27034] usb 2-1: SerialNumber: syz
[ 2289.996149][T21662] appletouch 6-1:0.85: Failed to read mode from device.
[ 2290.003343][T21662] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 2290.020701][T29370] tipc: Started in network mode
[ 2290.026226][T29370] tipc: Node identity 7f000001, cluster identity 4711
[ 2290.036510][T29370] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2290.047906][T29370] netlink: 104 bytes leftover after parsing attributes in process `syz.0.6592'.
[ 2290.290503][T27034] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2290.411467][T21662] usb 6-1: USB disconnect, device number 112
[ 2290.523008][ T5745] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[ 2290.690514][T27034] legousbtower 2-1:14.228: get version request failed: -71
[ 2290.700163][T27034] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71
[ 2290.713155][ T5745] usb 3-1: Using ep0 maxpacket: 32
[ 2290.717155][T27034] usb 2-1: USB disconnect, device number 35
[ 2290.745828][ T5745] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2290.759747][ T5745] usb 3-1: unable to read config index 0 descriptor/start: -71
[ 2290.769472][ T5745] usb 3-1: can't read configurations, error -71
[ 2291.042079][T29381] syzkaller0: entered promiscuous mode
[ 2291.047758][T29381] syzkaller0: entered allmulticast mode
[ 2291.059244][T27034] usb 4-1: USB disconnect, device number 127
[ 2291.156378][T16376] tipc: Node number set to 2130706433
[ 2291.232717][T15573] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[ 2291.412797][T15573] usb 1-1: Using ep0 maxpacket: 32
[ 2291.424809][T15573] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2291.452628][T15573] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 2291.461066][T15573] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 2291.500206][T15573] usb 1-1: config 14 has no interface number 0
[ 2291.515071][T15573] usb 1-1: config 14 has no interface number 1
[ 2291.527005][T15573] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2291.545340][T15573] usb 1-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping
[ 2291.572317][T15573] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2291.592045][T15573] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2291.622944][T15573] usb 1-1: config 14 interface 57 has no altsetting 0
[ 2291.633806][T15573] usb 1-1: config 14 interface 228 has no altsetting 0
[ 2291.643569][T15573] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2291.654470][T15573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2291.672014][T15573] usb 1-1: Product: syz
[ 2291.689329][T15573] usb 1-1: Manufacturer: syz
[ 2291.694258][T15573] usb 1-1: SerialNumber: syz
[ 2292.109511][T15573] legousbtower 1-1:14.57: interrupt endpoints not found
[ 2292.136958][T29408] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2292.140970][T29406] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6602'.
[ 2292.161280][T29408] netlink: 104 bytes leftover after parsing attributes in process `syz.5.6604'.
[ 2292.325546][T15573] legousbtower 1-1:14.228: interrupt endpoints not found
[ 2292.439733][T29414] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6605'.
[ 2292.732723][T21662] usb 3-1: new high-speed USB device number 18 using dummy_hcd
[ 2292.882758][T21662] usb 3-1: Using ep0 maxpacket: 8
[ 2292.894563][T21662] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2292.913808][T21662] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2292.956873][T21662] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2292.973033][T21662] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2293.019464][T21662] usb 3-1: config 0 descriptor??
[ 2293.048094][T21662] iowarrior 3-1:0.0: no interrupt-in endpoint found
[ 2293.272741][T16376] usb 6-1: new high-speed USB device number 113 using dummy_hcd
[ 2293.302382][T21662] tipc: Node number set to 887380192
[ 2293.436379][T16376] usb 6-1: New USB device found, idVendor=045a, idProduct=5210, bcdDevice= 1.01
[ 2293.454151][T16376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2293.473268][T16376] usb 6-1: Product: syz
[ 2293.482498][T16376] usb 6-1: Manufacturer: syz
[ 2293.492218][T16376] usb 6-1: SerialNumber: syz
[ 2293.510841][T16376] ums-karma 6-1:1.0: USB Mass Storage device detected
[ 2293.527365][T16376] ums-karma 6-1:1.0: This device (045a,5210,0101 S 06 P f5) has unneeded SubClass and Protocol entries in unusual_devs.h (kernel syzkaller)
[ 2293.527365][T16376]    Please send a copy of this message to <linux-usb@vger.kernel.org> and <usb-storage@lists.one-eyed-alien.net>
[ 2293.567754][T29432] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.6611'.
[ 2293.657847][T29413] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2293.669027][T29413] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2293.960396][T16376] ums-karma 6-1:1.0: probe with driver ums-karma failed with error -5
[ 2294.130858][T16376] usb 6-1: USB disconnect, device number 113
[ 2294.195152][T29446] nvme_fabrics: missing parameter 'transport=%s'
[ 2294.201486][T29446] nvme_fabrics: missing parameter 'nqn=%s'
[ 2294.261020][T27034] usb 1-1: USB disconnect, device number 11
[ 2294.932868][T15573] usb 6-1: new full-speed USB device number 114 using dummy_hcd
[ 2294.942704][T27034] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[ 2295.094413][T15573] usb 6-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64
[ 2295.110484][T15573] usb 6-1: config 0 interface 0 has no altsetting 0
[ 2295.111512][T27034] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2295.121493][T15573] usb 6-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2295.137925][T15573] usb 6-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2295.149782][T15573] usb 6-1: Product: syz
[ 2295.152720][T27034] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2295.154925][T15573] usb 6-1: Manufacturer: syz
[ 2295.167225][T15573] usb 6-1: SerialNumber: syz
[ 2295.183018][T15573] usb 6-1: config 0 descriptor??
[ 2295.183396][T27034] usb 1-1: config 0 descriptor??
[ 2295.188983][T29457] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2295.200889][T27034] cp210x 1-1:0.0: cp210x converter detected
[ 2295.229901][T15573] usb 6-1: selecting invalid altsetting 0
[ 2295.377948][T15573] usb 3-1: USB disconnect, device number 18
[ 2295.404944][T27034] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 2295.440331][T27034] cp210x 1-1:0.0: querying part number failed
[ 2295.486674][T27034] usb 1-1: cp210x converter now attached to ttyUSB0
[ 2295.540279][T27034] usb 6-1: USB disconnect, device number 114
[ 2295.542560][T29457] usb 6-1: cannot submit urb 0, error -19: no device
[ 2295.963650][T29484] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6626'.
[ 2297.117195][T29528] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6639'.
[ 2297.839409][T15573] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[ 2297.912628][T23543] usb 1-1: USB disconnect, device number 12
[ 2297.965554][T23543] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2298.005429][T15573] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2298.022281][T23543] cp210x 1-1:0.0: device disconnected
[ 2298.041365][T15573] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[ 2298.154826][T15573] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2298.166134][T15573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2298.178725][T15573] usb 2-1: Product: syz
[ 2298.183109][T15573] usb 2-1: Manufacturer: syz
[ 2298.188700][T15573] usb 2-1: SerialNumber: syz
[ 2298.413531][T29530] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2298.453045][T23543] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[ 2298.463004][T29530] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2298.491034][T15573] cdc_ether 2-1:1.0: probe with driver cdc_ether failed with error -22
[ 2298.530135][T15573] usb 2-1: USB disconnect, device number 36
[ 2298.622690][T23543] usb 1-1: Using ep0 maxpacket: 32
[ 2298.631902][T23543] usb 1-1: config 0 has an invalid interface number: 85 but max is 0
[ 2298.645965][T23543] usb 1-1: config 0 has no interface number 0
[ 2298.652239][T29550] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6645'.
[ 2298.661993][T23543] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2298.677577][T23543] usb 1-1: config 0 interface 85 has no altsetting 0
[ 2298.698440][T23543] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2298.726519][T23543] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2298.740434][T23543] usb 1-1: Product: syz
[ 2298.747537][T23543] usb 1-1: Manufacturer: syz
[ 2298.759980][T23543] usb 1-1: SerialNumber: syz
[ 2298.794113][T23543] usb 1-1: config 0 descriptor??
[ 2298.802720][T19736] usb 4-1: new high-speed USB device number 2 using dummy_hcd
[ 2298.993212][T19736] usb 4-1: Using ep0 maxpacket: 16
[ 2299.003969][T19736] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2299.018627][T23543] appletouch 1-1:0.85: Failed to read mode from device.
[ 2299.026755][T15573] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[ 2299.040908][T19736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2299.052026][T23543] appletouch 1-1:0.85: probe with driver appletouch failed with error -5
[ 2299.061715][T19736] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2299.071506][T19736] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2299.101991][T19736] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2299.122111][T21662] usb 6-1: new high-speed USB device number 115 using dummy_hcd
[ 2299.136854][T19736] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2299.152787][T19736] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2299.164560][T19736] usb 4-1: Manufacturer: syz
[ 2299.175369][T19736] usb 4-1: config 0 descriptor??
[ 2299.204627][T15573] usb 2-1: Using ep0 maxpacket: 8
[ 2299.212392][T15573] usb 2-1: config index 0 descriptor too short (expected 301, got 72)
[ 2299.221195][T15573] usb 2-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 2299.232725][T15573] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 2299.246286][T15573] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 2299.256113][T15573] usb 2-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2299.269057][T15573] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[ 2299.278164][T15573] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2299.292743][T21662] usb 6-1: Using ep0 maxpacket: 16
[ 2299.293403][T15573] usbtmc 2-1:16.0: bulk endpoints not found
[ 2299.300904][T21662] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2299.322608][T21662] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2299.333907][T21662] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2299.346277][T21662] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2299.356237][T21662] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2299.372994][T21662] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2299.382156][T21662] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2299.390854][T21662] usb 6-1: Manufacturer: syz
[ 2299.398365][T21662] usb 6-1: config 0 descriptor??
[ 2299.422092][    C0] raw-gadget.1 gadget.0: ignoring, device is not running
[ 2299.433565][T23543] usb 1-1: USB disconnect, device number 13
[ 2299.474159][T19736] rc_core: IR keymap rc-hauppauge not found
[ 2299.484978][T19736] Registered IR keymap rc-empty
[ 2299.489948][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.508809][T27034] usb 2-1: USB disconnect, device number 37
[ 2299.514287][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.545950][T19736] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0
[ 2299.559901][T19736] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input59
[ 2299.584191][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.612861][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.644581][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.673394][T21662] rc_core: IR keymap rc-hauppauge not found
[ 2299.680798][T21662] Registered IR keymap rc-empty
[ 2299.686507][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.693977][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.722748][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.722848][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.753509][T21662] rc rc1: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1
[ 2299.773554][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.775199][T21662] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc1/input60
[ 2299.809753][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.823317][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.829229][T29576] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6651'.
[ 2299.853459][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.862984][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.874003][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.882812][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.892779][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.902797][T19736] mceusb 4-1:0.0: Error: mce write submit urb error = -90
[ 2299.913697][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.934252][T19736] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2299.949556][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.964115][T19736] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2299.972848][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2299.992824][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2300.003238][T19736] usb 4-1: USB disconnect, device number 2
[ 2300.033219][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2300.074206][T21662] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2300.136658][T21662] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2300.179626][T21662] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2300.195313][T29582] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2300.231652][T21662] usb 6-1: USB disconnect, device number 115
[ 2300.713588][T21662] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[ 2300.884370][T21662] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2300.909581][T21662] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2301.037111][T21662] usb 1-1: config 0 descriptor??
[ 2301.081819][T16365] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[ 2301.090229][T16365] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[ 2301.098253][T16365] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[ 2301.111018][T21662] cp210x 1-1:0.0: cp210x converter detected
[ 2301.123079][T16365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[ 2301.133828][T16365] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[ 2301.284758][T21662] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 2301.307900][T21662] cp210x 1-1:0.0: querying part number failed
[ 2301.349747][T21662] usb 1-1: cp210x converter now attached to ttyUSB0
[ 2301.776419][ T1160] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2301.903613][T29613] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6658'.
[ 2302.016505][ T1160] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2302.145043][ T1160] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2302.309566][ T1160] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 2302.997539][ T1160] bridge_slave_1: left allmulticast mode
[ 2303.006321][ T1160] bridge_slave_1: left promiscuous mode
[ 2303.018482][ T1160] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2303.039294][ T1160] bridge_slave_0: left allmulticast mode
[ 2303.059617][ T1160] bridge_slave_0: left promiscuous mode
[ 2303.074632][ T1160] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2303.222755][T13094] Bluetooth: hci2: command tx timeout
[ 2303.236680][T29650] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2303.536514][ T5763] usb 1-1: USB disconnect, device number 14
[ 2303.542494][   T29] audit: type=1400 audit(1785190550.098:766): avc:  denied  { write } for  pid=29640 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2303.569543][ T5763] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2303.584042][ T5763] cp210x 1-1:0.0: device disconnected
[ 2303.708002][ T1160] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 2303.754825][ T1160] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 2303.776023][ T1160] bond0 (unregistering): Released all slaves
[ 2303.788846][   T29] audit: type=1400 audit(1785190550.348:767): avc:  denied  { write } for  pid=29669 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2303.970698][ T1160] tipc: Disabling bearer <udp:syz2>
[ 2303.979178][ T1160] tipc: Left network mode
[ 2303.989784][ T5274] 8021q: adding VLAN 0 to HW filter on device eth5
[ 2304.058323][T29595] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2304.110358][T29595] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2304.141306][T29595] bridge_slave_0: entered allmulticast mode
[ 2304.152136][T29595] bridge_slave_0: entered promiscuous mode
[ 2304.191337][T29595] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2304.230904][T29595] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2304.250852][T29683] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6670'.
[ 2304.260465][T29595] bridge_slave_1: entered allmulticast mode
[ 2304.273677][T29595] bridge_slave_1: entered promiscuous mode
[ 2304.343403][T29595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 2304.457031][T29595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 2304.752250][T29595] team0: Port device team_slave_0 added
[ 2304.790696][T29595] team0: Port device team_slave_1 added
[ 2304.849034][ T1160] hsr_slave_0: left promiscuous mode
[ 2304.862095][   T29] audit: type=1400 audit(1785190551.418:768): avc:  denied  { write } for  pid=29689 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2304.913991][ T1160] hsr_slave_1: left promiscuous mode
[ 2304.931055][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2304.952186][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2304.985872][ T1160] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2305.013475][ T1160] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2305.063070][ T1160] veth1_macvtap: left promiscuous mode
[ 2305.083467][ T1160] veth0_macvtap: left promiscuous mode
[ 2305.102099][ T1160] veth1_vlan: left promiscuous mode
[ 2305.117726][ T1160] veth0_vlan: left promiscuous mode
[ 2305.203835][   T29] audit: type=1400 audit(1785190551.768:769): avc:  denied  { write } for  pid=29711 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2305.304828][T13094] Bluetooth: hci2: command tx timeout
[ 2305.437004][T29714] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6675'.
[ 2305.720702][ T1160] team0 (unregistering): Port device team_slave_1 removed
[ 2305.751591][ T1160] team0 (unregistering): Port device team_slave_0 removed
[ 2305.941231][ T5274] 8021q: adding VLAN 0 to HW filter on device eth6
[ 2305.981635][T29595] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 2306.002752][T29595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2306.048768][T29595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 2306.156950][T29595] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 2306.164893][T29595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 2306.200175][T29595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 2306.308631][T29595] hsr_slave_0: entered promiscuous mode
[ 2306.315467][T29595] hsr_slave_1: entered promiscuous mode
[ 2306.812365][T29752] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.6684'.
[ 2306.895480][T29759] syzkaller0: entered promiscuous mode
[ 2306.901300][   T29] audit: type=1400 audit(1785190553.458:770): avc:  denied  { write } for  pid=29740 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2306.929724][ T5763] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[ 2306.937641][T29759] syzkaller0: entered allmulticast mode
[ 2307.039474][   T29] audit: type=1400 audit(1785190553.598:771): avc:  denied  { write } for  pid=29764 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2307.103495][ T5763] usb 2-1: Using ep0 maxpacket: 32
[ 2307.115596][ T5763] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2307.140083][ T5763] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 2307.165985][ T5763] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 2307.179693][ T5274] 8021q: adding VLAN 0 to HW filter on device eth7
[ 2307.194487][ T5763] usb 2-1: config 14 has no interface number 0
[ 2307.210764][ T5763] usb 2-1: config 14 has no interface number 1
[ 2307.236063][ T5763] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2307.260633][ T5763] usb 2-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 6, skipping
[ 2307.274762][ T5763] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2307.301625][ T5763] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2307.321328][ T5763] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2307.342459][ T5763] usb 2-1: config 14 interface 228 has no altsetting 0
[ 2307.363987][ T5763] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2307.383479][T13094] Bluetooth: hci2: command tx timeout
[ 2307.389653][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2307.403743][ T5763] usb 2-1: Product: syz
[ 2307.410212][ T5763] usb 2-1: Manufacturer: syz
[ 2307.416256][ T5763] usb 2-1: SerialNumber: syz
[ 2307.494235][T21662] usb 4-1: new high-speed USB device number 3 using dummy_hcd
[ 2307.668984][T21662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2307.690714][T21662] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2307.703047][T21662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2307.716560][T21662] usb 4-1: config 0 descriptor??
[ 2307.833704][ T5763] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2307.940210][T21662] usbhid 4-1:0.0: can't add hid device: -71
[ 2307.969500][T21662] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2307.995631][T21662] usb 4-1: USB disconnect, device number 3
[ 2308.043992][ T5763] legousbtower 2-1:14.228: interrupt endpoints not found
[ 2308.153883][   T29] audit: type=1400 audit(1785190554.708:772): avc:  denied  { write } for  pid=29789 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2308.192016][T29595] netdevsim netdevsim5 netdevsim0: renamed from eth0
[ 2308.206028][T29595] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 2308.215393][T29595] netdevsim netdevsim5 netdevsim1: renamed from eth1
[ 2308.226655][T29595] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 2308.234794][T29595] netdevsim netdevsim5 netdevsim2: renamed from eth2
[ 2308.253442][T29595] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 2308.270079][T29595] netdevsim netdevsim5 netdevsim3: renamed from eth3
[ 2308.299269][T29595] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 2308.351374][   T29] audit: type=1400 audit(1785190554.908:773): avc:  denied  { write } for  pid=29808 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2308.456669][T29595] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2308.494019][T29595] 8021q: adding VLAN 0 to HW filter on device team0
[ 2308.503081][T21662] usb 4-1: new high-speed USB device number 4 using dummy_hcd
[ 2308.516534][ T1160] bridge0: port 1(bridge_slave_0) entered blocking state
[ 2308.523683][ T1160] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 2308.534327][ T1160] bridge0: port 2(bridge_slave_1) entered blocking state
[ 2308.541511][ T1160] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 2308.665850][T21662] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 2308.685227][T21662] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 2308.706764][T21662] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2308.719326][T21662] usb 4-1: config 0 descriptor??
[ 2308.930375][T29773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2308.971446][T29773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2309.001840][T29773] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2309.013677][T29773] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2309.168409][   T29] audit: type=1400 audit(1785190555.728:774): avc:  denied  { write } for  pid=29824 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2309.270418][T21662] hid_parser_main: 354 callbacks suppressed
[ 2309.270443][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.308983][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.335462][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.354108][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.373798][T28410] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[ 2309.383684][   T29] audit: type=1400 audit(1785190555.938:775): avc:  denied  { write } for  pid=29857 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2309.413127][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.421371][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.429993][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.438582][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.448595][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.458061][T21662] logitech-djreceiver 0003:046D:C71F.000B: unknown main item tag 0x0
[ 2309.466638][T13094] Bluetooth: hci2: command tx timeout
[ 2309.476432][T21662] logitech-djreceiver 0003:046D:C71F.000B: collection stack underflow
[ 2309.484816][T21662] logitech-djreceiver 0003:046D:C71F.000B: item 0 1 0 12 parsing failed
[ 2309.494084][T21662] logitech-djreceiver 0003:046D:C71F.000B: logi_dj_probe: parse failed
[ 2309.502537][T21662] logitech-djreceiver 0003:046D:C71F.000B: probe with driver logitech-djreceiver failed with error -22
[ 2309.533102][T29595] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 2309.564813][T28410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2309.590218][T28410] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2309.610879][T28410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2309.627637][T28410] usb 1-1: config 0 descriptor??
[ 2309.748845][T16376] usb 2-1: USB disconnect, device number 38
[ 2309.878468][T28410] usbhid 1-1:0.0: can't add hid device: -71
[ 2309.890796][T28410] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2309.908622][T28410] usb 1-1: USB disconnect, device number 15
[ 2310.042991][T21662] usb 4-1: USB disconnect, device number 4
[ 2310.136184][T29890] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2310.145238][T29595] veth0_vlan: entered promiscuous mode
[ 2310.150875][   T29] audit: type=1400 audit(1785190556.708:776): avc:  denied  { write } for  pid=29863 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2310.153239][T16376] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2310.204755][T29595] veth1_vlan: entered promiscuous mode
[ 2310.259257][T29595] veth0_macvtap: entered promiscuous mode
[ 2310.288200][T29595] veth1_macvtap: entered promiscuous mode
[ 2310.316671][   T29] audit: type=1400 audit(1785190556.878:777): avc:  denied  { write } for  pid=29894 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2310.349982][T16376] usb 2-1: Using ep0 maxpacket: 32
[ 2310.364560][T29595] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 2310.389293][T29595] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 2310.392129][T16376] usb 2-1: config 0 has an invalid interface number: 51 but max is 0
[ 2310.408764][T18793] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 2310.423642][T16376] usb 2-1: config 0 has no interface number 0
[ 2310.437787][T18793] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 2310.444491][T28410] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[ 2310.459627][T16376] usb 2-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2310.477287][T16376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2310.488392][T16376] usb 2-1: Product: syz
[ 2310.489837][T18793] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 2310.492584][T16376] usb 2-1: Manufacturer: syz
[ 2310.510672][T16376] usb 2-1: SerialNumber: syz
[ 2310.522458][T16376] usb 2-1: config 0 descriptor??
[ 2310.548587][ T1160] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 2310.559960][T16376] quatech2 2-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2310.658565][T28410] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 2310.701516][T28410] usb 1-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 2310.753848][T28410] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2310.765508][T13934] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2310.774228][T16376] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[ 2310.799773][T28410] usb 1-1: config 0 descriptor??
[ 2310.814428][T13934] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2310.843051][T16376] usb 2-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[ 2310.879362][  T982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 2310.898283][  T982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 2311.041660][T29847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2311.088213][T29847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2311.160903][T29847] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2311.176576][    C1] usb 2-1: qt2_read_bulk_callback - non-zero urb status: -71
[ 2311.203718][T16376] usb 2-1: USB disconnect, device number 39
[ 2311.210175][T29847] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2311.245740][T16376] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[ 2311.303789][T16376] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[ 2311.364284][T16376] quatech2 2-1:0.51: device disconnected
[ 2311.457105][   T29] audit: type=1400 audit(1785190558.018:778): avc:  denied  { write } for  pid=29897 comm="dhcpcd-run-hook" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2311.538622][T28410] logitech-djreceiver 0003:046D:C71F.000C: collection stack underflow
[ 2311.549437][T28410] logitech-djreceiver 0003:046D:C71F.000C: item 0 1 0 12 parsing failed
[ 2311.558913][T28410] logitech-djreceiver 0003:046D:C71F.000C: logi_dj_probe: parse failed
[ 2311.578621][T28410] logitech-djreceiver 0003:046D:C71F.000C: probe with driver logitech-djreceiver failed with error -22
[ 2311.685821][   T29] audit: type=1400 audit(1785190558.248:779): avc:  denied  { write } for  pid=29921 comm="rm" name="hook-state" dev="tmpfs" ino=1776 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 2312.177737][T28410] usb 1-1: USB disconnect, device number 16
[ 2313.030018][T29968] netlink: 14 bytes leftover after parsing attributes in process `syz.0.6720'.
[ 2313.261605][T29981] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2313.332776][T21662] usb 6-1: new high-speed USB device number 116 using dummy_hcd
[ 2313.532706][T21662] usb 6-1: Using ep0 maxpacket: 32
[ 2313.548240][T21662] usb 6-1: config 0 has an invalid interface number: 85 but max is 0
[ 2313.566653][T21662] usb 6-1: config 0 has no interface number 0
[ 2313.587012][T21662] usb 6-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2313.623628][T21662] usb 6-1: config 0 interface 85 has no altsetting 0
[ 2313.640795][T21662] usb 6-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2313.661058][T21662] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2313.692227][T21662] usb 6-1: Product: syz
[ 2313.703459][T21662] usb 6-1: Manufacturer: syz
[ 2313.708431][T29980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.6722'.
[ 2313.719483][T21662] usb 6-1: SerialNumber: syz
[ 2313.738158][T21662] usb 6-1: config 0 descriptor??
[ 2313.956576][T21662] appletouch 6-1:0.85: Failed to read mode from device.
[ 2313.966404][T21662] appletouch 6-1:0.85: probe with driver appletouch failed with error -5
[ 2314.343036][ T5763] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2314.374118][T21662] usb 6-1: USB disconnect, device number 116
[ 2314.492744][ T5763] usb 2-1: device descriptor read/64, error -71
[ 2314.748483][ T5763] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2314.862706][T16376] usb 4-1: new high-speed USB device number 5 using dummy_hcd
[ 2314.892751][ T5763] usb 2-1: device descriptor read/64, error -71
[ 2315.024055][ T5763] usb usb2-port1: attempt power cycle
[ 2315.033348][T16376] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2315.046626][T16376] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2315.059120][T16376] usb 4-1: config 0 descriptor??
[ 2315.072194][T16376] cp210x 4-1:0.0: cp210x converter detected
[ 2315.151195][T30025] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6735'.
[ 2315.233823][T21662] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[ 2315.274164][T16376] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121
[ 2315.284632][T16376] cp210x 4-1:0.0: querying part number failed
[ 2315.305715][T16376] usb 4-1: cp210x converter now attached to ttyUSB0
[ 2315.392759][ T5763] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 2315.412701][T21662] usb 3-1: Using ep0 maxpacket: 32
[ 2315.419657][T21662] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2315.431639][ T5763] usb 2-1: device descriptor read/8, error -71
[ 2315.441077][T21662] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[ 2315.455966][T21662] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[ 2315.468832][T21662] usb 3-1: config 14 has no interface number 0
[ 2315.481589][T21662] usb 3-1: config 14 has no interface number 1
[ 2315.494494][T21662] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2315.514815][T21662] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2315.534725][T21662] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2315.559408][T21662] usb 3-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2315.580065][T21662] usb 3-1: config 14 interface 57 has no altsetting 0
[ 2315.590629][T21662] usb 3-1: config 14 interface 228 has no altsetting 0
[ 2315.605017][T21662] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2315.619297][T21662] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2315.632402][T21662] usb 3-1: Product: syz
[ 2315.637600][T21662] usb 3-1: Manufacturer: syz
[ 2315.642472][T21662] usb 3-1: SerialNumber: syz
[ 2315.682878][ T5763] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 2315.703294][ T5763] usb 2-1: device descriptor read/8, error -71
[ 2315.833096][ T5763] usb usb2-port1: unable to enumerate USB device
[ 2316.029985][T30037] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6741'.
[ 2316.079127][T21662] legousbtower 3-1:14.57: interrupt endpoints not found
[ 2316.194493][T26153] usb 1-1: new high-speed USB device number 17 using dummy_hcd
[ 2316.281766][T21662] legousbtower 3-1:14.228: interrupt endpoints not found
[ 2316.362714][T26153] usb 1-1: Using ep0 maxpacket: 32
[ 2316.370525][T26153] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2316.379862][T26153] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 2316.389014][T26153] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 2316.397384][T26153] usb 1-1: config 14 has no interface number 0
[ 2316.403743][T26153] usb 1-1: config 14 has no interface number 1
[ 2316.409971][T26153] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2316.421921][T26153] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2316.435433][T26153] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2316.450962][T26153] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2316.462846][T26153] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2316.474586][T26153] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2316.495949][T26153] usb 1-1: config 14 interface 57 has no altsetting 0
[ 2316.506985][T26153] usb 1-1: config 14 interface 228 has no altsetting 0
[ 2316.517490][T26153] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2316.526679][T26153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2316.534695][T26153] usb 1-1: Product: syz
[ 2316.538884][T26153] usb 1-1: Manufacturer: syz
[ 2316.544209][T26153] usb 1-1: SerialNumber: syz
[ 2316.975953][T26153] legousbtower 1-1:14.57: interrupt endpoints not found
[ 2317.376523][T26153] legousbtower 1-1:14.228: get version request failed: -32
[ 2317.385356][T26153] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -32
[ 2317.407104][T30068] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2317.465991][T30069] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6748'.
[ 2317.644253][T21662] usb 4-1: USB disconnect, device number 5
[ 2317.680121][T21662] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2317.712909][T21662] cp210x 4-1:0.0: device disconnected
[ 2318.219391][T15573] usb 3-1: USB disconnect, device number 19
[ 2318.975345][ T5763] usb 1-1: USB disconnect, device number 17
[ 2320.422912][ T5763] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2320.592733][ T5763] usb 4-1: Using ep0 maxpacket: 32
[ 2320.605692][ T5763] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2320.626450][ T5763] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[ 2320.643249][ T5763] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[ 2320.661538][ T5763] usb 4-1: config 14 has no interface number 0
[ 2320.672765][T15573] usb 6-1: new high-speed USB device number 117 using dummy_hcd
[ 2320.675232][ T5763] usb 4-1: config 14 has no interface number 1
[ 2320.700677][ T5763] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2320.727254][ T5763] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2320.752916][ T5763] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2320.777355][ T5763] usb 4-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2320.805713][ T5763] usb 4-1: config 14 interface 57 has no altsetting 0
[ 2320.819399][ T5763] usb 4-1: config 14 interface 228 has no altsetting 0
[ 2320.838717][ T5763] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2320.853075][T15573] usb 6-1: Using ep0 maxpacket: 16
[ 2320.860687][T15573] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2320.877090][T26153] usb 3-1: new high-speed USB device number 20 using dummy_hcd
[ 2320.878033][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2320.892777][T15573] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2320.910829][T15573] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2320.921995][T15573] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2320.938288][T15573] usb 6-1: Product: syz
[ 2320.938297][ T5763] usb 4-1: Product: syz
[ 2320.938316][ T5763] usb 4-1: Manufacturer: syz
[ 2320.962571][T15573] usb 6-1: Manufacturer: syz
[ 2320.972325][ T5763] usb 4-1: SerialNumber: syz
[ 2320.982019][T15573] usb 6-1: SerialNumber: syz
[ 2321.004650][T15573] usb 6-1: config 0 descriptor??
[ 2321.028126][T15573] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2321.040274][T15573] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class)
[ 2321.052750][T26153] usb 3-1: Using ep0 maxpacket: 32
[ 2321.061537][T26153] usb 3-1: config 0 has an invalid interface number: 85 but max is 0
[ 2321.080392][T26153] usb 3-1: config 0 has no interface number 0
[ 2321.093889][T26153] usb 3-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2321.125510][T26153] usb 3-1: config 0 interface 85 has no altsetting 0
[ 2321.140869][T26153] usb 3-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[ 2321.151084][T26153] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2321.167248][T26153] usb 3-1: Product: syz
[ 2321.171756][T26153] usb 3-1: Manufacturer: syz
[ 2321.179335][T26153] usb 3-1: SerialNumber: syz
[ 2321.187749][T26153] usb 3-1: config 0 descriptor??
[ 2321.307761][T30138] tipc: Started in network mode
[ 2321.319182][T30138] tipc: Node identity 7f000001, cluster identity 4711
[ 2321.334599][T30138] tipc: Enabled bearer <udp:syz2>, priority 10
[ 2321.358427][T30138] netlink: 104 bytes leftover after parsing attributes in process `syz.1.6768'.
[ 2321.418160][ T5763] legousbtower 4-1:14.57: interrupt endpoints not found
[ 2321.598995][T26153] appletouch 3-1:0.85: Geyser mode initialized.
[ 2321.609949][T26153] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.85/input/input62
[ 2321.621555][ T5763] legousbtower 4-1:14.228: interrupt endpoints not found
[ 2321.644472][T15573] em28xx 6-1:0.0: unknown em28xx chip ID (0)
[ 2321.653681][T15573] em28xx 6-1:0.0: Config register raw data: 0x00
[ 2321.810257][ T5763] usb 3-1: USB disconnect, device number 20
[ 2321.841929][ T5763] appletouch 3-1:0.85: input: appletouch disconnected
[ 2322.194650][T30156] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6773'.
[ 2322.402716][ T5763] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[ 2322.462722][T16376] tipc: Node number set to 2130706433
[ 2322.563330][ T5763] usb 1-1: Using ep0 maxpacket: 32
[ 2322.577179][ T5763] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 2322.596118][ T5763] usb 1-1: config 0 has no interface number 0
[ 2322.614836][ T5763] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2322.632744][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2322.651436][ T5763] usb 1-1: Product: syz
[ 2322.662304][ T5763] usb 1-1: Manufacturer: syz
[ 2322.674213][ T5763] usb 1-1: SerialNumber: syz
[ 2322.682323][ T5763] usb 1-1: config 0 descriptor??
[ 2323.109085][ T5763] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2323.123598][ T5763] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2323.422815][T16376] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 2323.445106][T30180] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2323.458851][T21662] usb 6-1: USB disconnect, device number 117
[ 2323.480859][T21662] em28xx 6-1:0.0: Disconnecting em28xx
[ 2323.500327][T21662] em28xx 6-1:0.0: Freeing device
[ 2323.582810][T16376] usb 2-1: Using ep0 maxpacket: 32
[ 2323.594868][T16376] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2323.614404][ T5733] usb 4-1: USB disconnect, device number 6
[ 2323.623676][T16376] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 2323.643160][T16376] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 2323.653292][T16376] usb 2-1: config 14 has no interface number 0
[ 2323.659687][T16376] usb 2-1: config 14 has no interface number 1
[ 2323.687774][T16376] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2323.720815][T16376] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2323.733916][T16376] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2323.779488][T16376] usb 2-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2323.820012][T16376] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2323.833280][T16376] usb 2-1: config 14 interface 228 has no altsetting 0
[ 2323.864288][T21662] usb 6-1: new high-speed USB device number 118 using dummy_hcd
[ 2323.874458][T16376] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2323.886840][T16376] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2323.896653][T16376] usb 2-1: Product: syz
[ 2323.901152][T16376] usb 2-1: Manufacturer: syz
[ 2323.906664][T16376] usb 2-1: SerialNumber: syz
[ 2324.023429][T21662] usb 6-1: device descriptor read/64, error -71
[ 2324.263341][T21662] usb 6-1: new high-speed USB device number 119 using dummy_hcd
[ 2324.325373][T16376] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2324.363064][ T5763] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[ 2324.377497][ T5763] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[ 2324.414379][T21662] usb 6-1: device descriptor read/64, error -71
[ 2324.522904][T15573] usb 3-1: new high-speed USB device number 21 using dummy_hcd
[ 2324.532174][T16376] legousbtower 2-1:14.228: interrupt endpoints not found
[ 2324.540130][T21662] usb usb6-port1: attempt power cycle
[ 2324.684158][T15573] usb 3-1: Using ep0 maxpacket: 32
[ 2324.691022][T15573] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2324.700146][T15573] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[ 2324.709402][T15573] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[ 2324.727952][T15573] usb 3-1: config 14 has no interface number 0
[ 2324.742685][T15573] usb 3-1: config 14 has no interface number 1
[ 2324.753208][T15573] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2324.769823][T15573] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2324.787416][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2324.798863][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2324.812917][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2324.824484][T15573] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2324.837653][T15573] usb 3-1: config 14 interface 57 has no altsetting 0
[ 2324.844640][T15573] usb 3-1: config 14 interface 228 has no altsetting 0
[ 2324.855587][T15573] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2324.864663][T15573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2324.873978][T15573] usb 3-1: Product: syz
[ 2324.878184][T15573] usb 3-1: Manufacturer: syz
[ 2324.882822][T15573] usb 3-1: SerialNumber: syz
[ 2324.892742][T21662] usb 6-1: new high-speed USB device number 120 using dummy_hcd
[ 2324.914607][T21662] usb 6-1: device descriptor read/8, error -71
[ 2325.154748][T21662] usb 6-1: new high-speed USB device number 121 using dummy_hcd
[ 2325.183168][T21662] usb 6-1: device descriptor read/8, error -71
[ 2325.293716][T21662] usb usb6-port1: unable to enumerate USB device
[ 2325.309828][T15573] legousbtower 3-1:14.57: interrupt endpoints not found
[ 2325.389692][T19736] usb 1-1: USB disconnect, device number 18
[ 2325.452699][T23543] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2325.622749][T23543] usb 4-1: Using ep0 maxpacket: 32
[ 2325.635077][T23543] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2325.648852][T23543] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[ 2325.663377][T23543] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[ 2325.677375][T23543] usb 4-1: config 14 has no interface number 0
[ 2325.687904][T23543] usb 4-1: config 14 has no interface number 1
[ 2325.697482][T23543] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2325.712172][T15573] legousbtower 3-1:14.228: get version request failed: -121
[ 2325.725344][T15573] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121
[ 2325.736287][T23543] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2325.763830][T23543] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2325.784422][T23543] usb 4-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2325.806547][T23543] usb 4-1: config 14 interface 57 has no altsetting 0
[ 2325.817903][T23543] usb 4-1: config 14 interface 228 has no altsetting 0
[ 2325.831533][T23543] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2325.845122][T23543] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2325.859144][T23543] usb 4-1: Product: syz
[ 2325.866375][T23543] usb 4-1: Manufacturer: syz
[ 2325.873501][T23543] usb 4-1: SerialNumber: syz
[ 2326.196386][ T5763] usb 2-1: USB disconnect, device number 44
[ 2326.274192][T30224] syzkaller1: entered promiscuous mode
[ 2326.290682][T30224] syzkaller1: entered allmulticast mode
[ 2326.301451][T23543] legousbtower 4-1:14.57: interrupt endpoints not found
[ 2326.507551][T23543] legousbtower 4-1:14.228: interrupt endpoints not found
[ 2326.644666][T30236] netlink: 4 bytes leftover after parsing attributes in process `syz.5.6797'.
[ 2326.741646][T30234] netlink: 14 bytes leftover after parsing attributes in process `syz.1.6796'.
[ 2326.952730][T19736] usb 6-1: new high-speed USB device number 122 using dummy_hcd
[ 2328.066028][T19736] usb 6-1: Using ep0 maxpacket: 8
[ 2328.096940][T19736] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2328.142675][ T5733] usb 3-1: USB disconnect, device number 21
[ 2328.508381][T19736] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2328.522839][T19736] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2328.562341][T19736] usb 6-1: config 0 descriptor??
[ 2328.663716][T30262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2328.685780][T16376] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[ 2328.702052][T30262] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2328.786804][T19736] iowarrior 6-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2328.863979][T16376] usb 1-1: Dual-Role OTG device on HNP port
[ 2328.879911][T16376] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2328.895176][T16376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2328.924827][T16376] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2328.932433][T16376] gspca_spca501: reg write: error -32
[ 2328.942207][T16376] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2328.958377][T16376] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2328.968009][ T5733] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[ 2329.009563][T30236] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2329.025609][T30236] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2329.134251][ T5733] usb 3-1: Using ep0 maxpacket: 32
[ 2329.172161][ T5733] usb 3-1: config 0 has an invalid interface number: 67 but max is 0
[ 2329.213644][ T5733] usb 3-1: config 0 has no interface number 0
[ 2329.244135][T15573] usb 4-1: USB disconnect, device number 7
[ 2329.246590][ T5733] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2329.305550][ T5733] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2329.330799][T19736] usb 6-1: USB disconnect, device number 122
[ 2329.332042][ T5733] usb 3-1: Product: syz
[ 2329.388200][ T5733] usb 3-1: Manufacturer: syz
[ 2329.394814][ T5733] usb 3-1: SerialNumber: syz
[ 2329.462288][ T5733] usb 3-1: config 0 descriptor??
[ 2329.500611][T30269] syzkaller1: entered promiscuous mode
[ 2329.506254][T30269] syzkaller1: entered allmulticast mode
[ 2329.906335][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[ 2329.932696][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2330.023973][T15573] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 2330.192706][T15573] usb 2-1: Using ep0 maxpacket: 32
[ 2330.208106][T15573] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2330.258118][T15573] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2330.279370][T15573] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2330.289410][T15573] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2330.297831][T15573] usb 2-1: Product: syz
[ 2330.302261][T15573] usb 2-1: Manufacturer: syz
[ 2331.258096][T15573] usb 2-1: SerialNumber: syz
[ 2331.275829][T15573] usb 2-1: config 0 descriptor??
[ 2331.751647][T30287] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2331.869818][T30293] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2332.077214][ T5733] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61
[ 2332.103771][ T5733] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61
[ 2332.707067][T30306] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2332.720962][T30306] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2332.732693][T23543] usb 6-1: new high-speed USB device number 123 using dummy_hcd
[ 2332.810810][ T5763] usb 2-1: USB disconnect, device number 45
[ 2332.892717][T23543] usb 6-1: Using ep0 maxpacket: 32
[ 2332.904269][T23543] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2332.917587][T23543] usb 6-1: config 14 has an invalid interface number: 228 but max is 0
[ 2332.932702][T23543] usb 6-1: config 14 has no interface number 0
[ 2332.940121][T23543] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2332.961375][T23543] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2332.979889][T23543] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2332.995123][T23543] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2333.009386][T23543] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2333.032726][T23543] usb 6-1: config 14 interface 228 has no altsetting 0
[ 2333.052060][T23543] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2333.062074][T23543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2333.074473][T23543] usb 6-1: Product: syz
[ 2333.078658][T23543] usb 6-1: Manufacturer: syz
[ 2333.083882][T23543] usb 6-1: SerialNumber: syz
[ 2333.202860][ T5763] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2333.352842][ T5763] usb 2-1: Using ep0 maxpacket: 16
[ 2333.366409][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2333.392092][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2333.407696][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2333.408495][T19736] usb 3-1: USB disconnect, device number 22
[ 2333.436828][ T5763] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2333.456879][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2333.487304][ T5763] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2333.503075][ T5763] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2333.511506][ T5763] usb 2-1: Manufacturer: syz
[ 2333.519391][T23543] legousbtower 6-1:14.228: interrupt endpoints not found
[ 2333.532108][ T5763] usb 2-1: config 0 descriptor??
[ 2333.647687][T30320] netlink: 14 bytes leftover after parsing attributes in process `syz.3.6819'.
[ 2333.770461][T30330] netlink: 4 bytes leftover after parsing attributes in process `syz.0.6821'.
[ 2333.844381][ T5763] rc_core: IR keymap rc-hauppauge not found
[ 2333.861479][ T5763] Registered IR keymap rc-empty
[ 2333.877126][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2333.912780][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2333.935347][ T5763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2333.950149][ T5763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input63
[ 2333.972496][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2333.993288][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.013683][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.032883][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.170977][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.192748][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.212773][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.222698][T21662] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[ 2334.232762][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.252787][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.273283][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2334.359697][T16376] usb 1-1: USB disconnect, device number 19
[ 2334.690023][T21662] usb 3-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config
[ 2334.842257][ T5763] mceusb 2-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2335.207555][T21662] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2335.222307][ T5763] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2335.234628][T21662] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2335.253440][ T5763] usb 2-1: USB disconnect, device number 46
[ 2335.261475][T21662] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2335.270685][T21662] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2335.278897][T21662] usb 3-1: Product: syz
[ 2335.283104][T21662] usb 3-1: Manufacturer: syz
[ 2335.287690][T21662] usb 3-1: SerialNumber: syz
[ 2335.372958][T21662] usb 3-1: config 0 descriptor??
[ 2335.727351][T21662] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2335.755933][T21662] usb 3-1: USB disconnect, device number 23
[ 2335.791637][T30353] syzkaller0: entered promiscuous mode
[ 2335.797364][T30353] syzkaller0: entered allmulticast mode
[ 2335.886107][T23218] udevd[23218]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2337.337854][T16376] usb 6-1: USB disconnect, device number 123
[ 2337.915503][T30195] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[ 2338.134710][T30195] usb 1-1: Dual-Role OTG device on HNP port
[ 2338.538746][T30195] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2338.694082][T30195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2338.904801][T30195] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2338.925635][T30195] gspca_spca501: reg write: error -32
[ 2338.931036][T30195] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2338.938387][T30195] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2339.557666][T21662] usb 3-1: new full-speed USB device number 24 using dummy_hcd
[ 2339.653238][T30389] netlink: 14 bytes leftover after parsing attributes in process `syz.5.6833'.
[ 2339.705048][T21662] usb 3-1: device descriptor read/64, error -71
[ 2339.962782][T21662] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[ 2340.200796][T21662] usb 3-1: device descriptor read/64, error -71
[ 2340.398224][ T5763] usb 1-1: USB disconnect, device number 20
[ 2341.230216][T21662] usb usb3-port1: attempt power cycle
[ 2341.954041][T21662] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[ 2341.973583][T21662] usb 3-1: device descriptor read/8, error -71
[ 2342.094007][T23543] usb 6-1: new high-speed USB device number 124 using dummy_hcd
[ 2342.153106][ T5763] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[ 2342.222730][T21662] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[ 2342.252847][T23543] usb 6-1: Using ep0 maxpacket: 32
[ 2342.253133][    C1] raw-gadget.0 gadget.2: ignoring, device is not running
[ 2342.265146][T23543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2342.285017][T21662] usb 3-1: device descriptor read/8, error -32
[ 2342.287427][T23543] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2342.312774][ T5763] usb 1-1: Using ep0 maxpacket: 32
[ 2342.317784][T23543] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e
[ 2342.334294][ T5763] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2342.335183][T23543] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.366549][ T5763] usb 1-1: config 14 has an invalid interface number: 228 but max is 0
[ 2342.378991][T23543] usb 6-1: Product: syz
[ 2342.384885][ T5763] usb 1-1: config 14 has no interface number 0
[ 2342.387697][T23543] usb 6-1: Manufacturer: syz
[ 2342.404220][T21662] usb usb3-port1: unable to enumerate USB device
[ 2342.407475][T23543] usb 6-1: SerialNumber: syz
[ 2342.412316][ T5763] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2342.438463][T23543] usb 6-1: config 0 descriptor??
[ 2342.443613][ T5763] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2342.443652][ T5763] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2342.443685][ T5763] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2342.443716][ T5763] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2342.443747][ T5763] usb 1-1: config 14 interface 228 has no altsetting 0
[ 2342.445927][ T5763] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2342.539058][ T5763] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2342.557968][ T5763] usb 1-1: Product: syz
[ 2342.564025][ T5763] usb 1-1: Manufacturer: syz
[ 2342.572870][ T5763] usb 1-1: SerialNumber: syz
[ 2342.754976][T21662] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[ 2342.893043][T21662] usb 3-1: device descriptor read/64, error -71
[ 2343.005194][ T5763] legousbtower 1-1:14.228: interrupt endpoints not found
[ 2343.132729][T21662] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[ 2343.282715][T21662] usb 3-1: device descriptor read/64, error -71
[ 2343.403256][T21662] usb usb3-port1: attempt power cycle
[ 2343.752714][T21662] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[ 2343.795477][T21662] usb 3-1: device descriptor read/8, error -71
[ 2344.032978][T21662] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[ 2344.063608][T21662] usb 3-1: device descriptor read/8, error -71
[ 2344.188754][T21662] usb usb3-port1: unable to enumerate USB device
[ 2344.344223][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 2344.350917][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 2344.882532][T19736] usb 6-1: USB disconnect, device number 124
[ 2345.480369][T15573] usb 1-1: USB disconnect, device number 21
[ 2345.667214][T30474] netlink: 12 bytes leftover after parsing attributes in process `syz.1.6856'.
[ 2346.022742][T15573] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[ 2346.184758][T15573] usb 1-1: Using ep0 maxpacket: 32
[ 2346.200772][T15573] usb 1-1: unable to get BOS descriptor or descriptor too short
[ 2346.222727][T15573] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[ 2346.273773][T15573] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[ 2346.293809][T15573] usb 1-1: config 14 has no interface number 0
[ 2346.318033][T15573] usb 1-1: config 14 has no interface number 1
[ 2346.348358][T15573] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2346.429755][T15573] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2346.448491][T15573] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2346.460454][T15573] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2346.520160][T15573] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2346.574902][T15573] usb 1-1: config 14 interface 57 has no altsetting 0
[ 2346.581992][T15573] usb 1-1: config 14 interface 228 has no altsetting 0
[ 2346.599041][T15573] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2346.608423][T15573] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2346.616758][T15573] usb 1-1: Product: syz
[ 2346.625018][T15573] usb 1-1: Manufacturer: syz
[ 2346.633855][T15573] usb 1-1: SerialNumber: syz
[ 2347.066749][T15573] legousbtower 1-1:14.57: interrupt endpoints not found
[ 2347.330190][T30496] UDC core: g1: couldn't find an available UDC or it's busy
[ 2348.211333][T15573] legousbtower 1-1:14.228: interrupt endpoints not found
[ 2348.993345][T30497] UDC core: g1: couldn't find an available UDC or it's busy
[ 2349.608241][ T5763] usb 1-1: USB disconnect, device number 22
[ 2350.022720][T30345] usb 6-1: new high-speed USB device number 125 using dummy_hcd
[ 2350.262728][T30345] usb 6-1: device descriptor read/64, error -71
[ 2350.522774][T30345] usb 6-1: new high-speed USB device number 126 using dummy_hcd
[ 2350.664278][T30345] usb 6-1: device descriptor read/64, error -71
[ 2350.791522][ T5763] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2350.800046][T30345] usb usb6-port1: attempt power cycle
[ 2351.542805][T13094] Bluetooth: hci1: command 0x0406 tx timeout
[ 2351.932968][ T5763] usb 2-1: Using ep0 maxpacket: 16
[ 2352.265125][T26774] udevd[26774]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2352.283210][ T5763] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2352.308510][T30345] usb 6-1: new high-speed USB device number 127 using dummy_hcd
[ 2352.327355][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2352.346243][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2352.358824][T30345] usb 6-1: device descriptor read/8, error -71
[ 2352.366984][ T5763] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2352.378494][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2352.396505][ T5763] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2352.407388][ T5763] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2352.418694][ T5763] usb 2-1: Manufacturer: syz
[ 2352.527894][ T5763] usb 2-1: config 0 descriptor??
[ 2352.663735][T30345] usb 6-1: new high-speed USB device number 2 using dummy_hcd
[ 2354.500418][T30345] usb 6-1: device descriptor read/8, error -71
[ 2354.646345][T30345] usb usb6-port1: unable to enumerate USB device
[ 2354.652845][ T5763] rc_core: IR keymap rc-hauppauge not found
[ 2354.681999][ T5763] Registered IR keymap rc-empty
[ 2354.690507][T30195] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[ 2354.718510][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.734681][T30548] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2354.743526][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.767389][T30548] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2354.786136][ T5763] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0
[ 2354.810720][ T5763] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/rc/rc0/input64
[ 2354.838567][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.872914][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.882500][T30195] usb 1-1: Dual-Role OTG device on HNP port
[ 2354.890774][T30195] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2354.911620][T30195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2354.922835][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.953606][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2354.965371][T30195] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2354.981263][T30195] gspca_spca501: reg write: error -32
[ 2354.993002][T30345] usb 6-1: new high-speed USB device number 3 using dummy_hcd
[ 2355.000876][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.010704][T30195] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2355.020842][T30195] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2355.032806][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.073578][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.130217][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.162799][T30345] usb 6-1: Using ep0 maxpacket: 32
[ 2355.171485][T30345] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2355.180386][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.207133][T30345] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 2355.242247][T30345] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 2355.250962][ T5763] mceusb 2-1:0.0: Error: mce write submit urb error = -90
[ 2355.275825][T30345] usb 6-1: config 14 has no interface number 0
[ 2355.295494][ T5763] mceusb 2-1:0.0: Registered  with mce emulator interface version 1
[ 2355.319770][T30345] usb 6-1: config 14 has no interface number 1
[ 2355.341801][ T5763] mceusb 2-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2355.350405][T30345] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[ 2355.378606][T30345] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2355.405383][T30345] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2355.434937][ T5763] usb 2-1: USB disconnect, device number 47
[ 2355.461698][T30345] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2355.508261][T30345] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2355.537157][T30345] usb 6-1: config 14 interface 57 has no altsetting 0
[ 2355.539558][T30565] syzkaller0: entered promiscuous mode
[ 2355.554035][T30565] syzkaller0: entered allmulticast mode
[ 2355.562024][T30345] usb 6-1: config 14 interface 228 has no altsetting 0
[ 2355.601219][T30345] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2355.611911][T30345] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2355.623765][T30345] usb 6-1: Product: syz
[ 2355.628865][T30345] usb 6-1: Manufacturer: syz
[ 2355.635362][T30345] usb 6-1: SerialNumber: syz
[ 2355.872834][ T5763] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 2356.052816][ T5763] usb 2-1: Using ep0 maxpacket: 16
[ 2356.075665][T30345] legousbtower 6-1:14.57: interrupt endpoints not found
[ 2356.100157][ T5763] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2356.134402][ T5763] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2356.172504][ T5763] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2356.185861][ T5763] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2356.211254][ T5763] usb 2-1: Product: syz
[ 2356.221597][ T5763] usb 2-1: Manufacturer: syz
[ 2356.234125][ T5763] usb 2-1: SerialNumber: syz
[ 2356.255640][ T5763] usb 2-1: config 0 descriptor??
[ 2356.273587][T30345] legousbtower 6-1:14.228: interrupt endpoints not found
[ 2356.282151][ T5763] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2356.319116][ T5763] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 2356.884135][T30345] usb 1-1: USB disconnect, device number 23
[ 2357.048684][ T5763] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2357.772089][ T5763] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[ 2358.221811][T15573] usb 6-1: USB disconnect, device number 3
[ 2358.402169][ T5763] em28xx 2-1:0.0: AC97 chip type couldn't be determined
[ 2359.365697][ T5763] em28xx 2-1:0.0: No AC97 audio processor
[ 2359.755025][ T5763] usb 2-1: USB disconnect, device number 48
[ 2359.871663][ T5763] em28xx 2-1:0.0: Disconnecting em28xx
[ 2359.899263][ T5763] em28xx 2-1:0.0: Freeing device
[ 2359.944111][T23229] udevd[23229]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2361.502708][T30195] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 2361.723769][T30195] usb 1-1: Dual-Role OTG device on HNP port
[ 2362.679290][T15573] usb 3-1: new full-speed USB device number 32 using dummy_hcd
[ 2362.712448][T30195] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2362.734717][T30195] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2362.754509][T30195] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2362.761134][T30195] gspca_spca501: reg write: error -32
[ 2363.123567][T30195] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2363.153959][T30195] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2363.194472][T15573] usb 3-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2363.314487][T15573] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2363.323676][T15573] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2364.302668][T15573] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2364.801737][T15573] usb 3-1: Product: syz
[ 2364.806189][T15573] usb 3-1: Manufacturer: syz
[ 2364.810812][T15573] usb 3-1: SerialNumber: syz
[ 2364.967581][T15573] usb 3-1: config 0 descriptor??
[ 2365.022998][T30195] usb 1-1: string descriptor 0 read error: -71
[ 2365.051161][T30195] usb 1-1: USB disconnect, device number 24
[ 2365.099099][T23143] udevd[23143]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.1/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2365.242849][T15573] usb 3-1: can't set config #0, error -71
[ 2365.304986][T15573] usb 3-1: USB disconnect, device number 32
[ 2366.487130][T21672] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 2366.902717][T16365] Bluetooth: hci4: command 0x0406 tx timeout
[ 2367.103623][T21672] usb 1-1: Dual-Role OTG device on HNP port
[ 2367.122238][T21672] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2367.139132][T21672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2367.183954][T21672] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2367.200619][T21672] gspca_spca501: reg write: error -32
[ 2367.215524][T21672] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2367.233798][T21672] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2368.868941][T21672] usb 1-1: string descriptor 0 read error: -71
[ 2368.884644][T19736] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 2369.083485][T19736] usb 2-1: Using ep0 maxpacket: 32
[ 2369.109931][T19736] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2369.128693][T19736] usb 2-1: unable to read config index 0 descriptor/start: -71
[ 2369.150749][T19736] usb 2-1: can't read configurations, error -71
[ 2371.186085][T21672] usb 1-1: USB disconnect, device number 25
[ 2371.633613][T19736] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2371.852688][T19736] usb 2-1: Using ep0 maxpacket: 16
[ 2371.876345][T19736] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2371.934905][T30640] udevd[30640]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2371.959068][T19736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2372.001771][T19736] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2372.028218][T19736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2372.037069][T19736] usb 2-1: Product: syz
[ 2372.041690][T19736] usb 2-1: Manufacturer: syz
[ 2372.048107][T19736] usb 2-1: SerialNumber: syz
[ 2372.086074][T19736] usb 2-1: config 0 descriptor??
[ 2372.120577][T30640] udevd[30640]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2372.152337][T19736] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2372.173949][T26152] usb 6-1: new high-speed USB device number 4 using dummy_hcd
[ 2372.188365][T19736] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 2372.353185][T26152] usb 6-1: Using ep0 maxpacket: 16
[ 2372.365374][T26152] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2372.382014][T26152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2372.394367][T26152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2372.407346][T26152] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2372.419695][T26152] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2372.452959][T26152] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2372.462583][T26152] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2372.471023][T26152] usb 6-1: Manufacturer: syz
[ 2372.478747][T26152] usb 6-1: config 0 descriptor??
[ 2372.542712][T15573] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[ 2372.692718][T15573] usb 3-1: Using ep0 maxpacket: 32
[ 2372.707323][T15573] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2372.720795][T19736] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2372.728263][T19736] em28xx 2-1:0.0: Config register raw data: 0x00
[ 2372.740143][T15573] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[ 2372.758728][T15573] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[ 2372.778120][T15573] usb 3-1: config 14 has no interface number 0
[ 2372.791233][T15573] usb 3-1: config 14 has no interface number 1
[ 2372.802876][T15573] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2372.827146][T15573] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2372.852670][T26152] rc_core: IR keymap rc-hauppauge not found
[ 2372.860228][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2372.875879][T26152] Registered IR keymap rc-empty
[ 2372.885786][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2372.893190][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2372.906020][T15573] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2372.917765][T15573] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2372.931056][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2372.946269][T15573] usb 3-1: config 14 interface 57 has no altsetting 0
[ 2372.953466][T15573] usb 3-1: config 14 interface 228 has no altsetting 0
[ 2372.963421][T15573] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2372.974584][T26152] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0
[ 2372.987129][T15573] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2372.996434][T15573] usb 3-1: Product: syz
[ 2373.002117][T26152] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input65
[ 2373.016211][T15573] usb 3-1: Manufacturer: syz
[ 2373.020832][T15573] usb 3-1: SerialNumber: syz
[ 2373.030945][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.052900][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.094344][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.125515][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.162784][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.192750][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.233031][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.282767][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.302824][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.346270][T26152] mceusb 6-1:0.0: Error: mce write submit urb error = -90
[ 2373.395275][T26152] mceusb 6-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2373.412876][T26152] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2373.451067][T26152] usb 6-1: USB disconnect, device number 4
[ 2373.458308][T15573] legousbtower 3-1:14.57: interrupt endpoints not found
[ 2373.859329][T15573] legousbtower 3-1:14.228: get version request failed: -121
[ 2373.881504][T15573] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -121
[ 2374.882523][T30640] udevd[30640]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2376.041469][T15573] usb 2-1: USB disconnect, device number 51
[ 2376.145447][T19736] usb 3-1: USB disconnect, device number 33
[ 2376.170447][T15573] em28xx 2-1:0.0: Disconnecting em28xx
[ 2376.219877][T15573] em28xx 2-1:0.0: Freeing device
[ 2376.290937][T30737] netlink: 40 bytes leftover after parsing attributes in process `syz.1.6918'.
[ 2376.325418][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6918'.
[ 2376.355861][T30737] netlink: 8 bytes leftover after parsing attributes in process `syz.1.6918'.
[ 2376.542692][T19736] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[ 2376.555377][T30738] netlink: 12 bytes leftover after parsing attributes in process `syz.0.6915'.
[ 2376.722763][T19736] usb 3-1: Using ep0 maxpacket: 32
[ 2376.759171][T19736] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2376.780258][T19736] usb 3-1: config 14 has an invalid interface number: 57 but max is 1
[ 2376.815159][T19736] usb 3-1: config 14 has an invalid interface number: 228 but max is 1
[ 2376.847503][T19736] usb 3-1: config 14 has no interface number 0
[ 2376.856563][T19736] usb 3-1: config 14 has no interface number 1
[ 2376.863157][T19736] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2376.874357][T19736] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2376.950262][T19736] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2377.024228][T19736] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2377.094524][T19736] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2377.114259][T19736] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2377.158288][T19736] usb 3-1: config 14 interface 57 has no altsetting 0
[ 2377.182733][T19736] usb 3-1: config 14 interface 228 has no altsetting 0
[ 2377.192185][T19736] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2377.202262][T19736] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2377.210879][T19736] usb 3-1: Product: syz
[ 2377.215418][T19736] usb 3-1: Manufacturer: syz
[ 2377.227179][T19736] usb 3-1: SerialNumber: syz
[ 2377.695811][T19736] legousbtower 3-1:14.57: interrupt endpoints not found
[ 2378.226625][T30345] usb 2-1: new high-speed USB device number 52 using dummy_hcd
[ 2378.996728][T19736] legousbtower 3-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[ 2379.030564][T19736] legousbtower 3-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 2379.040729][T23228] udevd[23228]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2379.182680][T30345] usb 2-1: Using ep0 maxpacket: 16
[ 2379.191065][T30345] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2379.203068][T30345] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2379.217404][T30345] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2379.230932][T30345] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2379.241761][T30345] usb 2-1: Product: syz
[ 2379.246165][T30345] usb 2-1: Manufacturer: syz
[ 2379.250937][T30345] usb 2-1: SerialNumber: syz
[ 2379.259193][T30345] usb 2-1: config 0 descriptor??
[ 2379.272470][T30345] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2379.282690][T30345] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 2379.567627][T15573] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2379.723203][T15573] usb 4-1: Using ep0 maxpacket: 16
[ 2379.735965][T15573] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2379.748983][T15573] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2379.761984][T15573] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2379.775087][T15573] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2379.783587][T15573] usb 4-1: Product: syz
[ 2379.790599][T15573] usb 4-1: Manufacturer: syz
[ 2379.795529][T15573] usb 4-1: SerialNumber: syz
[ 2379.805062][T15573] usb 4-1: config 0 descriptor??
[ 2379.817742][T15573] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2379.831186][T15573] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[ 2379.875946][T30345] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2379.884570][T30345] em28xx 2-1:0.0: Config register raw data: 0x00
[ 2380.075779][T30345] usb 3-1: USB disconnect, device number 34
[ 2380.145111][T30345] legousbtower 3-1:14.228: LEGO USB Tower #-160 now disconnected
[ 2380.445548][T15573] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[ 2380.469578][T15573] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[ 2381.023934][T16376] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 2381.369217][T30345] usb 2-1: USB disconnect, device number 52
[ 2381.426309][T16376] usb 1-1: Dual-Role OTG device on HNP port
[ 2381.434783][T30345] em28xx 2-1:0.0: Disconnecting em28xx
[ 2381.485151][T16376] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2381.500125][T30345] em28xx 2-1:0.0: Freeing device
[ 2381.527129][T16376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2381.602378][T16376] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2381.617664][T15573] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[ 2381.668389][T16376] gspca_spca501: reg write: error -32
[ 2381.685579][T16376] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2381.770620][T16376] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2382.039367][T15573] em28xx 4-1:0.0: couldn't setup AC97 register 2
[ 2382.053042][T15573] em28xx 4-1:0.0: couldn't setup AC97 register 4
[ 2382.059724][T15573] em28xx 4-1:0.0: couldn't setup AC97 register 6
[ 2382.068780][T15573] em28xx 4-1:0.0: couldn't setup AC97 register 54
[ 2382.096803][T15573] em28xx 4-1:0.0: couldn't setup AC97 register 56
[ 2382.142754][T15573] usb 4-1: USB disconnect, device number 8
[ 2385.152527][ T5763] usb 1-1: USB disconnect, device number 26
[ 2387.485866][T16376] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 2387.795782][T16376] usb 1-1: Dual-Role OTG device on HNP port
[ 2387.827789][T16376] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2387.862025][T16376] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2387.940658][T16376] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2387.987070][T16376] gspca_spca501: reg write: error -32
[ 2388.018231][T16376] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2388.069511][T16376] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2388.633005][T26153] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2388.812326][T26153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2388.831645][T26153] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2388.868490][T26153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2388.940076][T26153] usb 4-1: config 0 descriptor??
[ 2389.044815][T16376] usb 6-1: new high-speed USB device number 5 using dummy_hcd
[ 2389.188289][T26153] usbhid 4-1:0.0: can't add hid device: -71
[ 2389.212074][T26153] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2389.212692][T16376] usb 6-1: Using ep0 maxpacket: 32
[ 2389.231546][T26153] usb 4-1: USB disconnect, device number 9
[ 2389.239654][T16376] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2389.260169][T16376] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 2389.278589][T16376] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 2389.279964][T30936] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2389.295386][T16376] usb 6-1: config 14 has no interface number 0
[ 2389.295409][T16376] usb 6-1: config 14 has no interface number 1
[ 2389.295490][T16376] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2389.295519][T16376] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2389.304932][T30936] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2389.322689][T16376] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2389.350431][T16376] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2389.362227][T16376] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2389.377317][T16376] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2389.391489][T16376] usb 6-1: config 14 interface 57 has no altsetting 0
[ 2389.398342][T16376] usb 6-1: config 14 interface 228 has no altsetting 0
[ 2389.408032][T16376] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2389.417289][T16376] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2389.425930][T16376] usb 6-1: Product: syz
[ 2389.430107][T16376] usb 6-1: Manufacturer: syz
[ 2389.434743][T16376] usb 6-1: SerialNumber: syz
[ 2389.442805][ T5763] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[ 2389.592809][ T5763] usb 3-1: Using ep0 maxpacket: 16
[ 2389.599371][ T5763] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2389.610934][ T5763] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2389.622765][T19736] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2389.633587][ T5763] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2389.642719][ T5763] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2389.651293][ T5763] usb 3-1: Product: syz
[ 2389.655565][ T5763] usb 3-1: Manufacturer: syz
[ 2389.660173][ T5763] usb 3-1: SerialNumber: syz
[ 2389.668251][ T5763] usb 3-1: config 0 descriptor??
[ 2389.678456][ T5763] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2389.687766][ T5763] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[ 2389.703271][T26153] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 2389.783225][T19736] usb 2-1: Using ep0 maxpacket: 32
[ 2389.790147][T19736] usb 2-1: unable to get BOS descriptor or descriptor too short
[ 2389.799132][T19736] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[ 2389.807370][T19736] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[ 2389.815845][T19736] usb 2-1: config 14 has no interface number 0
[ 2389.822037][T19736] usb 2-1: config 14 has no interface number 1
[ 2389.828555][T19736] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2389.843065][T19736] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2389.855307][T19736] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2389.857238][T16376] legousbtower 6-1:14.57: interrupt endpoints not found
[ 2389.867280][T19736] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2389.892871][T19736] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2389.904534][T19736] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2389.918606][T26153] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 2389.929850][T26153] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 2389.940489][T19736] usb 2-1: config 14 interface 57 has no altsetting 0
[ 2389.951320][T26153] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2389.960395][T19736] usb 2-1: config 14 interface 228 has no altsetting 0
[ 2389.972549][T26153] usb 4-1: config 0 descriptor??
[ 2389.980788][T19736] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2390.000153][T19736] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2390.022714][T19736] usb 2-1: Product: syz
[ 2390.029288][T19736] usb 2-1: Manufacturer: syz
[ 2390.034334][T19736] usb 2-1: SerialNumber: syz
[ 2390.213922][T30911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2390.228775][T30911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2390.331119][T30911] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2390.364368][ T5763] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[ 2390.374647][T16376] legousbtower 6-1:14.228: LEGO USB Tower firmware version is 228.166 build 40507
[ 2390.398980][ T5763] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[ 2390.412275][T30911] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2390.565592][T16376] legousbtower 6-1:14.228: LEGO USB Tower #-160 now attached to major 180 minor 0
[ 2391.212436][T26153] hid_parser_main: 718 callbacks suppressed
[ 2391.212462][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.227840][T19736] legousbtower 2-1:14.57: interrupt endpoints not found
[ 2391.235402][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.251667][T30947] usb 6-1: LEGO USB Tower reset control request failed
[ 2391.429913][ T5763] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[ 2391.438866][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 2
[ 2391.447051][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 4
[ 2391.455182][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 2391.463974][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 2391.471848][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 2391.685694][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 2
[ 2391.700855][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 4
[ 2391.710463][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 6
[ 2391.718415][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 54
[ 2391.725940][ T5763] em28xx 3-1:0.0: couldn't setup AC97 register 56
[ 2391.737183][ T5763] usb 3-1: USB disconnect, device number 35
[ 2391.833216][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.843501][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.852149][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.864617][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.872820][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.880937][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.890745][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.898881][T26153] logitech-djreceiver 0003:046D:C71F.000D: unknown main item tag 0x0
[ 2391.931806][T26153] usb 4-1: USB disconnect, device number 10
[ 2392.263674][T30947] usb 6-1: LEGO USB Tower reset control request failed
[ 2392.279154][T30944] usb 6-1: LEGO USB Tower reset control request failed
[ 2392.290994][T19736] legousbtower 2-1:14.228: get version request failed: -71
[ 2392.303573][T19736] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71
[ 2392.306737][ T5763] usb 6-1: USB disconnect, device number 5
[ 2392.349487][T19736] usb 2-1: USB disconnect, device number 53
[ 2392.378038][ T5763] legousbtower 6-1:14.228: LEGO USB Tower #-160 now disconnected
[ 2393.073085][T16376] usb 1-1: USB disconnect, device number 27
[ 2395.872535][T30976] syzkaller0: entered promiscuous mode
[ 2395.879490][T30976] syzkaller0: entered allmulticast mode
[ 2396.094024][ T5763] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 2396.305140][ T5763] usb 4-1: Using ep0 maxpacket: 32
[ 2396.329421][ T5763] usb 4-1: config 0 has an invalid interface number: 51 but max is 0
[ 2396.340639][ T5763] usb 4-1: config 0 has no interface number 0
[ 2396.363627][ T5763] usb 4-1: config 0 interface 51 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[ 2396.383981][ T5763] usb 4-1: config 0 interface 51 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0
[ 2396.411345][ T5763] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[ 2396.438885][ T5763] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2396.447230][ T5763] usb 4-1: Product: syz
[ 2396.451443][ T5763] usb 4-1: Manufacturer: syz
[ 2396.456381][ T5763] usb 4-1: SerialNumber: syz
[ 2396.474048][ T5763] usb 4-1: config 0 descriptor??
[ 2396.488782][ T5763] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[ 2396.537296][T26153] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2396.686455][ T5763] usb 4-1: qt2_setup_urbs - submit read urb failed -90
[ 2396.703212][ T5763] quatech2 4-1:0.51: probe with driver quatech2 failed with error -90
[ 2396.723689][T26153] usb 2-1: Using ep0 maxpacket: 16
[ 2396.730991][T26153] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2396.744747][T26153] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2396.762098][T26153] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2396.774009][T26153] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2396.782221][T26153] usb 2-1: Product: syz
[ 2396.786601][T26153] usb 2-1: Manufacturer: syz
[ 2396.791409][T26153] usb 2-1: SerialNumber: syz
[ 2396.807725][T26153] usb 2-1: config 0 descriptor??
[ 2396.821492][T26153] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2396.832487][T26153] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[ 2396.938791][ T5763] usb 4-1: USB disconnect, device number 11
[ 2397.441436][T26153] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[ 2397.461598][T26153] em28xx 2-1:0.0: Config register raw data: 0x00
[ 2399.380756][T16376] usb 2-1: USB disconnect, device number 54
[ 2399.413954][T16376] em28xx 2-1:0.0: Disconnecting em28xx
[ 2399.671121][T16376] em28xx 2-1:0.0: Freeing device
[ 2401.169265][T22918] udevd[22918]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2401.210118][T13094] Bluetooth: hci1: unexpected event for opcode 0x0c25
[ 2401.362223][T31020] nvme_fabrics: missing parameter 'transport=%s'
[ 2401.380116][T31020] nvme_fabrics: missing parameter 'nqn=%s'
[ 2401.844350][T23543] usb 6-1: new high-speed USB device number 6 using dummy_hcd
[ 2402.022670][T23543] usb 6-1: Using ep0 maxpacket: 16
[ 2402.038746][T23543] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2402.071487][T23543] usb 6-1: config 0 has no interfaces?
[ 2402.086895][T23543] usb 6-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 2402.104959][T23543] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2402.124500][T23543] usb 6-1: config 0 descriptor??
[ 2402.372681][T16376] usb 2-1: new full-speed USB device number 55 using dummy_hcd
[ 2402.542702][T26153] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 2402.544130][T16376] usb 2-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config
[ 2402.561655][T16376] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 2402.574996][T16376] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2402.588594][T16376] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2402.615518][T16376] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2402.623941][T16376] usb 2-1: Product: syz
[ 2402.628124][T16376] usb 2-1: Manufacturer: syz
[ 2402.637760][T16376] usb 2-1: SerialNumber: syz
[ 2402.644961][T16376] usb 2-1: config 0 descriptor??
[ 2402.704466][T26153] usb 1-1: Using ep0 maxpacket: 16
[ 2402.729202][T26153] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[ 2402.756211][T26153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[ 2402.784601][T26153] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[ 2402.802764][T26153] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2402.811290][T26153] usb 1-1: Product: syz
[ 2402.815791][T26153] usb 1-1: Manufacturer: syz
[ 2402.820418][T26153] usb 1-1: SerialNumber: syz
[ 2402.828110][T26153] usb 1-1: config 0 descriptor??
[ 2402.850213][T26153] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[ 2402.871172][T26153] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[ 2402.965556][T16376] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[ 2402.984633][T16376] usb 2-1: USB disconnect, device number 55
[ 2403.959437][T22830] udevd[22830]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2404.146531][T26153] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 2404.155191][T26153] em28xx 1-1:0.0: Config register raw data: 0x00
[ 2404.270274][T31090] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7012'.
[ 2404.472716][T26153] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2404.622678][T26153] usb 4-1: Using ep0 maxpacket: 32
[ 2404.630785][T26153] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2404.641675][T26153] usb 4-1: config 14 has an invalid interface number: 57 but max is 1
[ 2404.650332][T26153] usb 4-1: config 14 has an invalid interface number: 228 but max is 1
[ 2404.665756][T26153] usb 4-1: config 14 has no interface number 0
[ 2404.672241][T26153] usb 4-1: config 14 has no interface number 1
[ 2404.678737][T26153] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2404.689919][T16376] usb 6-1: USB disconnect, device number 6
[ 2404.696870][T26153] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2404.712004][T26153] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2404.725357][T26153] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2404.765981][T26153] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2404.794100][T26153] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2404.819895][T26153] usb 4-1: config 14 interface 57 has no altsetting 0
[ 2404.835137][T26153] usb 4-1: config 14 interface 228 has no altsetting 0
[ 2404.846496][T26153] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2404.859399][T26153] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2404.868092][T26153] usb 4-1: Product: syz
[ 2404.872385][T26153] usb 4-1: Manufacturer: syz
[ 2404.877489][T26153] usb 4-1: SerialNumber: syz
[ 2405.308553][T26153] legousbtower 4-1:14.57: interrupt endpoints not found
[ 2405.459846][T26152] usb 1-1: USB disconnect, device number 28
[ 2405.466788][T26152] em28xx 1-1:0.0: Disconnecting em28xx
[ 2405.476007][T16376] usb 6-1: new high-speed USB device number 7 using dummy_hcd
[ 2406.403845][ T1313] ieee802154 phy0 wpan0: encryption failed: -22
[ 2406.435529][T26152] em28xx 1-1:0.0: Freeing device
[ 2406.436193][ T1313] ieee802154 phy1 wpan1: encryption failed: -22
[ 2406.652688][T16376] usb 6-1: Using ep0 maxpacket: 16
[ 2406.935831][T26153] legousbtower 4-1:14.228: get version request failed: -71
[ 2406.940479][T16376] usb 6-1: config index 0 descriptor too short (expected 65, got 36)
[ 2406.953195][T26153] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71
[ 2406.968175][T26153] usb 4-1: USB disconnect, device number 12
[ 2406.976232][T16376] usb 6-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2406.990354][T16376] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 2407.003979][T16376] usb 6-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[ 2407.013109][T16376] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2407.026246][T16376] usb 6-1: config 0 descriptor??
[ 2407.046500][T16376] pxrc 6-1:0.0: Could not find endpoint
[ 2407.056928][T16376] usbhid 6-1:0.0: couldn't find an input interrupt endpoint
[ 2407.282690][T26153] usb 6-1: USB disconnect, device number 7
[ 2408.526256][T23143] udevd[23143]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2409.493103][T31170] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7033'.
[ 2410.915255][T31177] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.065334][T31177] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.138789][T31167] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2411.154000][T31167] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2411.199198][T21672] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 2411.247352][T31186] syzkaller0: entered promiscuous mode
[ 2411.258538][T31186] syzkaller0: entered allmulticast mode
[ 2411.376244][T21672] usb 1-1: Dual-Role OTG device on HNP port
[ 2411.382454][T21672] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[ 2411.392334][T21672] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2411.414332][T21672] gspca_main: spca501-2.14.0 probing 0000:0000
[ 2411.433743][T21672] gspca_spca501: reg write: error -32
[ 2411.448744][T21672] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[ 2411.464302][T21672] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[ 2411.466181][T26152] usb 6-1: new high-speed USB device number 8 using dummy_hcd
[ 2411.662744][T26152] usb 6-1: Using ep0 maxpacket: 32
[ 2411.682593][T26152] usb 6-1: unable to get BOS descriptor or descriptor too short
[ 2411.711784][T26152] usb 6-1: config 14 has an invalid interface number: 57 but max is 1
[ 2411.789695][T26152] usb 6-1: config 14 has an invalid interface number: 228 but max is 1
[ 2412.763640][T26152] usb 6-1: config 14 has no interface number 0
[ 2412.770959][T26152] usb 6-1: config 14 has no interface number 1
[ 2412.778352][T26152] usb 6-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[ 2413.324375][T26152] usb 6-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[ 2413.339443][T26152] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[ 2413.352385][T26152] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[ 2413.364567][T26152] usb 6-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[ 2413.369145][T31210] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2413.375945][T26152] usb 6-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[ 2413.412757][T26152] usb 6-1: config 14 interface 57 has no altsetting 0
[ 2413.419563][T26152] usb 6-1: config 14 interface 228 has no altsetting 0
[ 2413.450809][T26152] usb 6-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[ 2413.480967][T26152] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2413.504264][T26152] usb 6-1: Product: syz
[ 2413.512456][T26152] usb 6-1: Manufacturer: syz
[ 2413.521594][T26152] usb 6-1: SerialNumber: syz
[ 2413.704581][T31211] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7041'.
[ 2413.956959][T26152] legousbtower 6-1:14.57: interrupt endpoints not found
[ 2415.146145][T26152] legousbtower 6-1:14.228: get version request failed: -71
[ 2415.554719][T26152] legousbtower 6-1:14.228: probe with driver legousbtower failed with error -71
[ 2415.725701][T26152] usb 6-1: USB disconnect, device number 8
[ 2415.883167][T31239] syzkaller0: entered promiscuous mode
[ 2415.909870][T31239] syzkaller0: entered allmulticast mode
[ 2416.257469][T31247] syzkaller0: entered promiscuous mode
[ 2416.283026][T31247] syzkaller0: entered allmulticast mode
[ 2416.332459][T31237] netlink: 14 bytes leftover after parsing attributes in process `syz.2.7048'.
[ 2416.931293][T31272] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7058'.
[ 2417.204646][T26152] usb 6-1: new high-speed USB device number 9 using dummy_hcd
[ 2417.374634][T26152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2417.417193][T26152] usb 6-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2417.436603][T26152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2417.467032][T26152] usb 6-1: config 0 descriptor??
[ 2417.730919][T26152] usbhid 6-1:0.0: can't add hid device: -71
[ 2417.769307][T26152] usbhid 6-1:0.0: probe with driver usbhid failed with error -71
[ 2417.809957][T26152] usb 6-1: USB disconnect, device number 9
[ 2417.887953][T31299] syzkaller0: entered promiscuous mode
[ 2417.926667][T31299] syzkaller0: entered allmulticast mode
[ 2417.989703][T31294] nvme_fabrics: missing parameter 'transport=%s'
[ 2418.004964][T31294] nvme_fabrics: missing parameter 'nqn=%s'
[ 2418.172909][T21672] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[ 2418.214800][T31308] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2418.343235][T26152] usb 6-1: new high-speed USB device number 10 using dummy_hcd
[ 2418.354140][T21672] usb 3-1: Using ep0 maxpacket: 16
[ 2418.382359][T21672] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2418.403292][T21672] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2418.424576][T21672] usb 3-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4
[ 2418.441496][T21672] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2418.471013][T21672] usb 3-1: config 0 descriptor??
[ 2418.545850][T26152] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 2418.570370][T26152] usb 6-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 2418.614287][T26152] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2418.645693][T26152] usb 6-1: config 0 descriptor??
[ 2418.881708][T31274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2418.901685][T31274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2418.932276][T31274] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2418.949715][T31274] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2419.208042][T26152] hid_parser_main: 462 callbacks suppressed
[ 2419.208071][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.225755][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.241067][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.251985][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.287363][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.319309][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.349845][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.370051][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.398283][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.412096][T26152] logitech-djreceiver 0003:046D:C71F.000E: unknown main item tag 0x0
[ 2419.438750][T26152] logitech-djreceiver 0003:046D:C71F.000E: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.5-1/input0
[ 2419.552297][T31320] netlink: 14 bytes leftover after parsing attributes in process `syz.0.7072'.
[ 2419.910392][T26152] usb 6-1: USB disconnect, device number 10
[ 2420.036267][T31346] netlink: 12 bytes leftover after parsing attributes in process `syz.3.7078'.
[ 2420.052697][T19736] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2420.214209][T19736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2420.229754][T19736] usb 2-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[ 2420.239299][T19736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2420.251839][T19736] usb 2-1: config 0 descriptor??
[ 2420.481858][T19736] usbhid 2-1:0.0: can't add hid device: -71
[ 2420.496692][T19736] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2420.524343][T19736] usb 2-1: USB disconnect, device number 56
[ 2420.973623][T19736] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2421.030634][T21672] usb 3-1: USB disconnect, device number 36
[ 2421.145487][T19736] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[ 2421.186497][T19736] usb 2-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[ 2421.227010][T19736] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2421.239442][T31371] nvme_fabrics: missing parameter 'transport=%s'
[ 2421.257011][T19736] usb 2-1: config 0 descriptor??
[ 2421.267784][T31371] nvme_fabrics: missing parameter 'nqn=%s'
[ 2421.549509][T31336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2421.586835][T26152] usb 1-1: USB disconnect, device number 29
[ 2421.595942][T31336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2421.661424][T31336] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2421.715936][T31336] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2422.016213][T19736] logitech-djreceiver 0003:046D:C71F.000F: hidraw0: USB HID v7f.fd Device [HID 046d:c71f] on usb-dummy_hcd.1-1/input0
[ 2422.076302][T31394] netlink: 4 bytes leftover after parsing attributes in process `syz.0.7092'.
[ 2422.332693][T26152] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2422.382716][T26153] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 2422.433685][T31402] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7094'.
[ 2422.495059][T26152] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[ 2422.517345][T26152] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2422.532339][T26152] usb 4-1: config 0 descriptor??
[ 2422.552908][T26153] usb 1-1: Using ep0 maxpacket: 8
[ 2422.560887][T26153] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2422.572708][T26152] cp210x 4-1:0.0: cp210x converter detected
[ 2422.579325][T26153] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22
[ 2422.589182][T26153] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2422.601227][T26153] usb 1-1: config 0 descriptor??
[ 2422.744588][T15573] usb 2-1: USB disconnect, device number 57
[ 2422.824517][T26153] iowarrior 1-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0
[ 2422.930885][T31407] UDC core: g1: couldn't find an available UDC or it's busy
[ 2423.811853][T26152] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[ 2423.822154][T26152] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32
[ 2423.830578][T26152] cp210x 4-1:0.0: GPIO initialisation failed: -32
[ 2423.858132][T26152] usb 4-1: cp210x converter now attached to ttyUSB0
[ 2424.242179][T26152] usb 4-1: USB disconnect, device number 13
[ 2424.258649][T31391] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2424.261688][T26152] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[ 2424.284766][T26152] cp210x 4-1:0.0: device disconnected
[ 2424.293423][T31391] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2424.326576][    C0] ==================================================================
[ 2424.334667][    C0] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[ 2424.342225][    C0] Read of size 1 at addr ffff88807bef7512 by task syz.0.7092/31390
[ 2424.350111][    C0] 
[ 2424.352450][    C0] CPU: 0 UID: 0 PID: 31390 Comm: syz.0.7092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2424.352482][    C0] Tainted: [L]=SOFTLOCKUP
[ 2424.352491][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2424.352512][    C0] Call Trace:
[ 2424.352520][    C0]  <TASK>
[ 2424.352529][    C0]  dump_stack_lvl+0x100/0x190
[ 2424.352562][    C0]  print_report+0x13d/0x4b0
[ 2424.352593][    C0]  ? __virt_addr_valid+0x239/0x430
[ 2424.352620][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 2424.352649][    C0]  kasan_report+0xdf/0x1c0
[ 2424.352680][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 2424.352720][    C0]  find_endpoint+0x2a3/0x2c0
[ 2424.352753][    C0]  dummy_timer+0x500/0x36f0
[ 2424.352796][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2424.352822][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 2424.352858][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2424.352890][    C0]  ? rcu_is_watching+0x12/0xc0
[ 2424.352923][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2424.352945][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2424.352976][    C0]  __hrtimer_run_queues+0x462/0x9c0
[ 2424.353014][    C0]  hrtimer_run_softirq+0x17d/0x2c0
[ 2424.353047][    C0]  handle_softirqs+0x1ea/0x9b0
[ 2424.353077][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2424.353105][    C0]  ? _raw_spin_unlock+0x28/0x50
[ 2424.353137][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[ 2424.353160][    C0]  __irq_exit_rcu+0x162/0x210
[ 2424.353187][    C0]  irq_exit_rcu+0x9/0x30
[ 2424.353213][    C0]  sysvec_apic_timer_interrupt+0x56/0xc0
[ 2424.353236][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2424.353262][    C0] RIP: 0033:0x7f9981a72660
[ 2424.353284][    C0] Code: 30 04 48 8d 50 fc 49 89 57 40 89 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 <c6> 44 24 0e 01 e9 0f ff ff ff 66 0f 1f 44 00 00 4c 89 f6 48 c1 e0
[ 2424.353310][    C0] RSP: 002b:00007fff5bc388d0 EFLAGS: 00000246
[ 2424.353327][    C0] RAX: 000000000001aa82 RBX: ffffffff8286fdb1 RCX: ffffffff8286fbac
[ 2424.353343][    C0] RDX: ffffffff8286f60f RSI: ffffffff8286fbac RDI: 00007f99815ff008
[ 2424.353358][    C0] RBP: 000000000000017e R08: 00007f9981e10000 R09: 00007f9981e12000
[ 2424.353376][    C0] R10: 000000008286fbb0 R11: 0000000000000014 R12: 00007f9981e26038
[ 2424.353391][    C0] R13: 000000000000071f R14: ffffffff8286f60f R15: 00007f9982955720
[ 2424.353406][    C0]  ? __nr_to_section+0x1f/0x100
[ 2424.353434][    C0]  ? page_ext_callback+0x131/0x2c0
[ 2424.353460][    C0]  ? lookup_page_ext+0x3c/0x100
[ 2424.353484][    C0]  ? __nr_to_section+0x1f/0x100
[ 2424.353506][    C0]  ? lookup_page_ext+0x3c/0x100
[ 2424.353532][    C0]  </TASK>
[ 2424.353540][    C0] 
[ 2424.603931][    C0] Allocated by task 31172:
[ 2424.608338][    C0]  kasan_save_stack+0x30/0x50
[ 2424.613010][    C0]  kasan_save_track+0x14/0x30
[ 2424.617682][    C0]  __kasan_kmalloc+0xaa/0xb0
[ 2424.622259][    C0]  __kmalloc_noprof+0x322/0x820
[ 2424.627096][    C0]  usb_copy_descriptors+0xcd/0x320
[ 2424.632197][    C0]  f_midi2_bind+0x1dad/0x2770
[ 2424.636862][    C0]  usb_add_function+0x219/0x890
[ 2424.641706][    C0]  configfs_composite_bind+0xd83/0x1960
[ 2424.647249][    C0]  gadget_bind_driver+0x28c/0xbf0
[ 2424.652269][    C0]  really_probe+0x241/0xa60
[ 2424.656763][    C0]  __driver_probe_device+0x20e/0x450
[ 2424.662041][    C0]  driver_probe_device+0x4a/0x140
[ 2424.667056][    C0]  __driver_attach+0x21f/0x5b0
[ 2424.671811][    C0]  bus_for_each_dev+0x13e/0x1d0
[ 2424.676644][    C0]  bus_add_driver+0x305/0x5b0
[ 2424.681305][    C0]  driver_register+0x1e2/0x360
[ 2424.686061][    C0]  usb_gadget_register_driver_owner+0x132/0x210
[ 2424.692298][    C0]  gadget_dev_desc_UDC_store+0x1b0/0x2e0
[ 2424.697920][    C0]  configfs_write_iter+0x302/0x4e0
[ 2424.703023][    C0]  vfs_write+0x6ac/0x1050
[ 2424.707347][    C0]  ksys_write+0x12a/0x250
[ 2424.711671][    C0]  do_syscall_64+0x115/0x870
[ 2424.716250][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2424.722129][    C0] 
[ 2424.724432][    C0] Freed by task 31382:
[ 2424.728480][    C0]  kasan_save_stack+0x30/0x50
[ 2424.733147][    C0]  kasan_save_track+0x14/0x30
[ 2424.737813][    C0]  kasan_save_free_info+0x3b/0x70
[ 2424.742836][    C0]  __kasan_slab_free+0x5f/0x80
[ 2424.747592][    C0]  kfree+0x22b/0x6c0
[ 2424.751482][    C0]  usb_free_all_descriptors+0x81/0x1a0
[ 2424.756930][    C0]  purge_configs_funcs+0x285/0x510
[ 2424.762033][    C0]  configfs_composite_unbind+0xae/0x210
[ 2424.767566][    C0]  gadget_unbind_driver+0x20c/0x4f0
[ 2424.772748][    C0]  device_remove+0xcb/0x180
[ 2424.777240][    C0]  device_release_driver_internal+0x44e/0x620
[ 2424.783299][    C0]  driver_detach+0xd8/0x1b0
[ 2424.787794][    C0]  bus_remove_driver+0x13b/0x2e0
[ 2424.792723][    C0]  driver_unregister+0x76/0xb0
[ 2424.797478][    C0]  usb_gadget_unregister_driver+0x49/0x70
[ 2424.803196][    C0]  gadget_dev_desc_UDC_store+0x170/0x2e0
[ 2424.808818][    C0]  configfs_write_iter+0x302/0x4e0
[ 2424.813920][    C0]  vfs_write+0x6ac/0x1050
[ 2424.818245][    C0]  ksys_write+0x12a/0x250
[ 2424.822569][    C0]  do_syscall_64+0x115/0x870
[ 2424.827148][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2424.833028][    C0] 
[ 2424.835336][    C0] The buggy address belongs to the object at ffff88807bef7400
[ 2424.835336][    C0]  which belongs to the cache kmalloc-512 of size 512
[ 2424.849378][    C0] The buggy address is located 274 bytes inside of
[ 2424.849378][    C0]  freed 512-byte region [ffff88807bef7400, ffff88807bef7600)
[ 2424.863158][    C0] 
[ 2424.865466][    C0] The buggy address belongs to the physical page:
[ 2424.871857][    C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807bef6c00 pfn:0x7bef4
[ 2424.881920][    C0] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 2424.890422][    C0] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff)
[ 2424.898921][    C0] page_type: f5(slab)
[ 2424.902891][    C0] raw: 00fff00000000240 ffff88813fe23c80 ffffea0001f05c10 ffffea00015d4f10
[ 2424.911472][    C0] raw: ffff88807bef6c00 000000080010000d 00000000f5000000 0000000000000000
[ 2424.920043][    C0] head: 00fff00000000240 ffff88813fe23c80 ffffea0001f05c10 ffffea00015d4f10
[ 2424.928701][    C0] head: ffff88807bef6c00 000000080010000d 00000000f5000000 0000000000000000
[ 2424.937355][    C0] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[ 2424.946017][    C0] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 2424.954666][    C0] page dumped because: kasan: bad access detected
[ 2424.961068][    C0] page_owner tracks the page as allocated
[ 2424.966769][    C0] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4980, tgid 4980 (udevadm), ts 26455570996, free_ts 22145892456
[ 2424.987700][    C0]  post_alloc_hook+0xfd/0x120
[ 2424.992383][    C0]  get_page_from_freelist+0xf48/0x3530
[ 2424.997827][    C0]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[ 2425.003711][    C0]  new_slab+0xa2/0x640
[ 2425.007765][    C0]  refill_objects+0xe3/0x410
[ 2425.012341][    C0]  __pcs_replace_empty_main+0x376/0x680
[ 2425.017885][    C0]  __kmalloc_cache_noprof+0x479/0x6c0
[ 2425.023253][    C0]  kernfs_fop_open+0x23d/0xd50
[ 2425.028007][    C0]  do_dentry_open+0x6ab/0x14d0
[ 2425.032755][    C0]  vfs_open+0x82/0x3f0
[ 2425.036813][    C0]  path_openat+0x2873/0x4280
[ 2425.041389][    C0]  do_file_open+0x20e/0x430
[ 2425.045879][    C0]  do_sys_openat2+0x10f/0x1e0
[ 2425.050547][    C0]  __x64_sys_openat+0x12d/0x210
[ 2425.055389][    C0]  do_syscall_64+0x115/0x870
[ 2425.059970][    C0]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2425.065854][    C0] page last free pid 1 tgid 1 stack trace:
[ 2425.071641][    C0]  free_pages_prepare+0x586/0xd80
[ 2425.076668][    C0]  __free_contig_range_common+0x14f/0x250
[ 2425.082384][    C0]  destroy_args+0xa8/0x7a0
[ 2425.086794][    C0]  debug_vm_pgtable+0x1d69/0x3490
[ 2425.091811][    C0]  do_one_initcall+0x11d/0x700
[ 2425.096573][    C0]  kernel_init_freeable+0x6ea/0x7b0
[ 2425.101762][    C0]  kernel_init+0x1f/0x1e0
[ 2425.106084][    C0]  ret_from_fork+0x72b/0xd50
[ 2425.110671][    C0]  ret_from_fork_asm+0x1a/0x30
[ 2425.115436][    C0] 
[ 2425.117741][    C0] Memory state around the buggy address:
[ 2425.123353][    C0]  ffff88807bef7400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2425.131412][    C0]  ffff88807bef7480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2425.139470][    C0] >ffff88807bef7500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2425.147515][    C0]                          ^
[ 2425.152086][    C0]  ffff88807bef7580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 2425.160141][    C0]  ffff88807bef7600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 2425.168184][    C0] ==================================================================
[ 2425.176238][    C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 2425.183422][    C0] CPU: 0 UID: 0 PID: 31390 Comm: syz.0.7092 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[ 2425.194363][    C0] Tainted: [L]=SOFTLOCKUP
[ 2425.198681][    C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 2425.208724][    C0] Call Trace:
[ 2425.211991][    C0]  <TASK>
[ 2425.214910][    C0]  dump_stack_lvl+0x100/0x190
[ 2425.219581][    C0]  vpanic+0x552/0x970
[ 2425.223550][    C0]  ? __pfx_vpanic+0x10/0x10
[ 2425.228042][    C0]  ? __pfx_vprintk_emit+0x10/0x10
[ 2425.233074][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 2425.237840][    C0]  panic+0xd1/0xe0
[ 2425.241560][    C0]  ? __pfx_panic+0x10/0x10
[ 2425.245972][    C0]  ? end_report.part.0+0x23/0x90
[ 2425.250911][    C0]  ? rcu_is_watching+0x12/0xc0
[ 2425.255677][    C0]  ? end_report.part.0+0x23/0x90
[ 2425.260622][    C0]  ? check_panic_on_warn+0x1f/0x90
[ 2425.265751][    C0]  check_panic_on_warn.cold+0x19/0x34
[ 2425.271124][    C0]  end_report.part.0+0x3a/0x90
[ 2425.275890][    C0]  kasan_report.cold+0xe/0x18
[ 2425.280571][    C0]  ? find_endpoint+0x2a3/0x2c0
[ 2425.285342][    C0]  find_endpoint+0x2a3/0x2c0
[ 2425.289933][    C0]  dummy_timer+0x500/0x36f0
[ 2425.294456][    C0]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[ 2425.300268][    C0]  ? debug_object_deactivate+0x2e4/0x3b0
[ 2425.305918][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2425.310858][    C0]  ? rcu_is_watching+0x12/0xc0
[ 2425.315623][    C0]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[ 2425.321425][    C0]  ? __pfx_dummy_timer+0x10/0x10
[ 2425.326374][    C0]  __hrtimer_run_queues+0x462/0x9c0
[ 2425.331593][    C0]  hrtimer_run_softirq+0x17d/0x2c0
[ 2425.336711][    C0]  handle_softirqs+0x1ea/0x9b0
[ 2425.341479][    C0]  ? __pfx_handle_softirqs+0x10/0x10
[ 2425.346763][    C0]  ? _raw_spin_unlock+0x28/0x50
[ 2425.351617][    C0]  ? __hrtimer_rearm_deferred+0x9b/0x720
[ 2425.357248][    C0]  __irq_exit_rcu+0x162/0x210
[ 2425.361933][    C0]  irq_exit_rcu+0x9/0x30
[ 2425.366182][    C0]  sysvec_apic_timer_interrupt+0x56/0xc0
[ 2425.371813][    C0]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2425.377790][    C0] RIP: 0033:0x7f9981a72660
[ 2425.382195][    C0] Code: 30 04 48 8d 50 fc 49 89 57 40 89 68 fc 41 8b 47 30 48 83 c4 28 5b 5d 41 5c 41 5d 41 5e 41 5f c3 66 2e 0f 1f 84 00 00 00 00 00 <c6> 44 24 0e 01 e9 0f ff ff ff 66 0f 1f 44 00 00 4c 89 f6 48 c1 e0
[ 2425.401793][    C0] RSP: 002b:00007fff5bc388d0 EFLAGS: 00000246
[ 2425.407856][    C0] RAX: 000000000001aa82 RBX: ffffffff8286fdb1 RCX: ffffffff8286fbac
[ 2425.415824][    C0] RDX: ffffffff8286f60f RSI: ffffffff8286fbac RDI: 00007f99815ff008
[ 2425.423785][    C0] RBP: 000000000000017e R08: 00007f9981e10000 R09: 00007f9981e12000
[ 2425.431749][    C0] R10: 000000008286fbb0 R11: 0000000000000014 R12: 00007f9981e26038
[ 2425.439710][    C0] R13: 000000000000071f R14: ffffffff8286f60f R15: 00007f9982955720
[ 2425.447679][    C0]  ? __nr_to_section+0x1f/0x100
[ 2425.452529][    C0]  ? page_ext_callback+0x131/0x2c0
[ 2425.457633][    C0]  ? lookup_page_ext+0x3c/0x100
[ 2425.462474][    C0]  ? __nr_to_section+0x1f/0x100
[ 2425.467317][    C0]  ? lookup_page_ext+0x3c/0x100
[ 2425.472175][    C0]  </TASK>
[ 2425.475408][    C0] Kernel Offset: disabled
[ 2425.479716][    C0] Rebooting in 86400 seconds..