last executing test programs: 9.642473898s ago: executing program 4 (id=2343): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000008c0), 0x121202, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00'}) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0) r6 = fanotify_init(0x2, 0x8000) fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4) read$FUSE(r6, &(0x7f0000002740)={0x2020}, 0x2020) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e060525"], 0x9) write$binfmt_elf32(r3, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x2}) unshare(0x8040480) fsopen(&(0x7f0000000500)='aufs\x00', 0x0) r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) r8 = fsmount(r7, 0x1, 0x0) fchdir(r8) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) 9.266619962s ago: executing program 0 (id=2344): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda116b1d34e47473f39aa995a813a710dae914618c4d6fe5ba44aca3e0570dd32977ed521baedf6801196e24f18640f84add06d5a3d091db19c0afcfc4fe365e11e5c9b82d02b079c934b9324386f08f8f13b68e630f47ac96b480f"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) socket(0x11, 0x6, 0xc) 7.108656223s ago: executing program 2 (id=2347): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 6.664026484s ago: executing program 2 (id=2349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 5.877057628s ago: executing program 1 (id=2350): openat$rfkill(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f00000002c0)='./config/usb_gadget/g1/functions/gser.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1/gser.usb0\x00') write(0xffffffffffffffff, &(0x7f0000000380)='dummy_udc.0', 0xb) r3 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r3, &(0x7f0000000400)='\n', 0x1) 5.727548314s ago: executing program 2 (id=2351): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c", 0x4d, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 4.107587388s ago: executing program 1 (id=2352): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a13024", 0xcf}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.664092212s ago: executing program 2 (id=2354): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.407202165s ago: executing program 4 (id=2356): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x28, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x70}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.347317727s ago: executing program 1 (id=2357): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 3.164172069s ago: executing program 4 (id=2358): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f", 0x9e}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d08", 0xc7}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.133591144s ago: executing program 2 (id=2359): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) fsopen(0x0, 0x0) socket(0x11, 0x6, 0xc) 3.104247179s ago: executing program 1 (id=2360): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1ab", 0x87, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4c", 0xa4}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 3.102281564s ago: executing program 3 (id=2361): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat$nullb(0xffffffffffffff9c, 0x0, 0x400000000a882, 0x0) mmap(&(0x7f000077e000/0x4000)=nil, 0x4000, 0x3000002, 0x28011, r3, 0x0) r4 = socket$kcm(0x2, 0x200000000000001, 0x0) sendmsg$inet(r4, &(0x7f0000000080)={&(0x7f0000000340)={0x2, 0x4001, @dev}, 0x10, 0x0}, 0x3000c085) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xfffc}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24000890}, 0x0) sendmsg$inet(r4, &(0x7f0000000040)={0x0, 0xeafbff3, &(0x7f0000000000)=[{&(0x7f0000000300)="b8", 0xfffffdef}], 0x1, 0x0, 0x0, 0x10000000}, 0x52cc) 2.895796785s ago: executing program 0 (id=2362): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{0x0}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf15}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.199028808s ago: executing program 1 (id=2363): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) socket(0x11, 0x6, 0xc) 2.118333276s ago: executing program 3 (id=2364): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.080082108s ago: executing program 4 (id=2365): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46", 0xb5}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 2.016309049s ago: executing program 0 (id=2366): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf82}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.745866997s ago: executing program 4 (id=2367): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5) getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) socket(0x11, 0x6, 0xc) 1.662740344s ago: executing program 0 (id=2368): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$kcm(0x11, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0) 1.629373312s ago: executing program 3 (id=2369): sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {&(0x7f0000000740)}], 0x2}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725", 0x74}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1.302286312s ago: executing program 3 (id=2370): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa0}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000000000850000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 1.123089846s ago: executing program 3 (id=2371): sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010) socket$kcm(0x21, 0x2, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x8c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x21}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x100}}, 0x0) getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 981.155472ms ago: executing program 0 (id=2372): sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e9"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x8441}, 0x4000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000499000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f320f300f20e06635800000000f22e02b6aa6c8", 0x4a}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10008000}, 0x40095) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x0, 0x0, &(0x7f0000000000)='GPL\x00', 0x2a7, 0x0, 0x0, 0x41100, 0x24, '\x00', 0x0, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffffc6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3ff}, 0x94) ioctl$KVM_RUN(r3, 0xae80, 0x0) 866.596041ms ago: executing program 3 (id=2373): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) socket(0x11, 0x6, 0xc) 742.841965ms ago: executing program 0 (id=2374): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x2, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]}) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000340000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000400), 0x40, 0x8000) ioctl$EVIOCGABS3F(r4, 0x8018457f, 0x0) 351.437869ms ago: executing program 2 (id=2375): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1ab", 0x87, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4c", 0xa4}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 268.061444ms ago: executing program 1 (id=2376): kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0) sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x40, 0x117, 0x2, 0x28, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x58, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 0s ago: executing program 4 (id=2377): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0xfffffff9) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680)) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, 0x0, &(0x7f0000000280)) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x42060680) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000) socket(0x11, 0x6, 0xc) kernel console output (not intermixed with test programs): sb error -71 [ 423.919013][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 423.925710][ T9] usb 5-1: USB disconnect, device number 9 [ 423.943929][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 424.009488][ T5708] usb 3-1: config 0 descriptor?? [ 424.042759][ T5708] cp210x 3-1:0.0: cp210x converter detected [ 424.476543][ T5708] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 424.494092][ T5708] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 424.522136][ T5708] cp210x 3-1:0.0: GPIO initialisation failed: -71 [ 424.547127][ T5708] usb 3-1: cp210x converter now attached to ttyUSB0 [ 424.573164][ T5708] usb 3-1: USB disconnect, device number 6 [ 424.654439][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 424.668393][ T30] audit: type=1400 audit(1785191609.527:344): avc: denied { create } for pid=10243 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.696159][ T5708] cp210x 3-1:0.0: device disconnected [ 424.770788][ T30] audit: type=1400 audit(1785191609.557:345): avc: denied { connect } for pid=10243 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 424.924404][ T30] audit: type=1400 audit(1785191609.557:346): avc: denied { write } for pid=10243 comm="syz.0.1221" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 426.454956][ T30] audit: type=1400 audit(1785191611.317:347): avc: denied { setopt } for pid=10262 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 426.545734][ T30] audit: type=1400 audit(1785191611.347:348): avc: denied { connect } for pid=10262 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 426.639160][ T30] audit: type=1400 audit(1785191611.367:349): avc: denied { read } for pid=10262 comm="syz.0.1227" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 428.818899][ T30] audit: type=1400 audit(1785191613.677:350): avc: denied { read write } for pid=10311 comm="syz.1.1242" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 428.861358][ T5701] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 428.865974][ T30] audit: type=1400 audit(1785191613.707:351): avc: denied { open } for pid=10311 comm="syz.1.1242" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 428.992325][ T30] audit: type=1400 audit(1785191613.707:352): avc: denied { mounton } for pid=10311 comm="syz.1.1242" path="/261/file0" dev="tmpfs" ino=1487 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 429.066079][ T5701] usb 1-1: Using ep0 maxpacket: 16 [ 429.085690][ T5701] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 429.112997][ T5701] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.146599][ T5701] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.183675][ T5701] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 429.224551][ T5701] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 429.259050][ T5701] usb 1-1: config 0 has no interface number 0 [ 429.278839][ T5701] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 429.311097][ T5701] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 429.336932][ T5701] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 429.371684][ T5701] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 429.423103][ T5701] usb 1-1: config 0 interface 125 has no altsetting 0 [ 429.462181][ T5701] usb 1-1: config 0 interface 125 has no altsetting 2 [ 429.521327][ T5701] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 429.541937][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.566046][ T5701] usb 1-1: Product: syz [ 429.580792][ T30] audit: type=1400 audit(1785191614.437:353): avc: denied { write } for pid=10321 comm="syz.1.1244" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 429.606370][ T5701] usb 1-1: Manufacturer: syz [ 429.615923][ T5701] usb 1-1: SerialNumber: syz [ 429.637887][ T5701] usb 1-1: config 0 descriptor?? [ 429.658890][ T5701] usb 1-1: selecting invalid altsetting 2 [ 429.867194][ C0] usb 1-1: async_complete: urb error -71 [ 429.872925][ C0] usb 1-1: async_complete: urb error -71 [ 429.878656][ C0] usb 1-1: async_complete: urb error -71 [ 429.884324][ C0] usb 1-1: async_complete: urb error -71 [ 429.921489][ T5701] get_1284_register: usb error -71 [ 429.980106][ T5701] usb 1-1: USB disconnect, device number 12 [ 431.911823][ T5701] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 432.106457][ T5701] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 432.131079][ T5701] usb 4-1: config 2 has no interface number 0 [ 432.162913][ T5701] usb 4-1: config 2 interface 43 has no altsetting 0 [ 432.227905][ T5701] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 432.263718][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.345211][ T5701] usb 4-1: Product: syz [ 432.380917][ T5701] usb 4-1: Manufacturer: syz [ 432.400023][ T5701] usb 4-1: SerialNumber: syz [ 432.888731][T10380] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 432.897636][T10380] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 433.521103][ T5701] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 433.567498][ T5701] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 433.718010][ T5701] usb 4-1: USB disconnect, device number 6 [ 435.751250][ T5701] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 435.929804][ T5701] usb 3-1: Using ep0 maxpacket: 16 [ 435.981023][ T5701] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 436.006427][T10416] overlayfs: overlapping lowerdir path [ 436.060563][ T5701] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 436.092750][T10417] overlayfs: missing 'lowerdir' [ 436.154266][ T5701] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 436.210855][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 436.275105][ T5701] usb 3-1: Product: syz [ 436.307678][ T5701] usb 3-1: Manufacturer: syz [ 436.337085][ T5701] usb 3-1: SerialNumber: syz [ 436.748788][ T5701] usb 3-1: config 0 descriptor?? [ 436.892727][T10415] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 436.913450][ T5701] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 436.941355][ T5701] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 437.131285][T10415] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 437.274151][T10415] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 437.282384][T10415] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 437.302844][T10415] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 437.440871][ T5701] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 437.447929][ T5701] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 437.909170][ T5701] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 437.923665][ T5701] em28xx 3-1:0.0: No AC97 audio processor [ 437.972198][ T5701] usb 3-1: USB disconnect, device number 7 [ 438.002211][ T5701] em28xx 3-1:0.0: Disconnecting em28xx [ 438.041019][ T5701] em28xx 3-1:0.0: Freeing device [ 438.057878][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 439.151287][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 439.311228][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 439.311250][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 439.317969][ T5620] Bluetooth: hci3: command 0x0406 tx timeout [ 439.722415][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.731209][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.802002][ T30] audit: type=1400 audit(1785191625.657:354): avc: denied { listen } for pid=10500 comm="syz.1.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 441.063127][T10523] overlayfs: overlapping lowerdir path [ 441.109903][T10523] overlayfs: missing 'lowerdir' [ 441.938883][T10518] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 441.950127][T10518] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 441.988383][T10518] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 442.005847][T10518] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 442.022115][T10518] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 442.441240][ T5701] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 442.612804][ T5701] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 442.621910][ T5701] usb 3-1: config 2 has no interface number 0 [ 442.632219][ T5701] usb 3-1: config 2 interface 43 has no altsetting 0 [ 442.648158][ T5701] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 442.664425][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 442.677340][ T5701] usb 3-1: Product: syz [ 442.690175][ T5701] usb 3-1: Manufacturer: syz [ 442.700811][ T5701] usb 3-1: SerialNumber: syz [ 443.001350][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 443.315509][ T5701] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 443.357350][ T5701] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 443.437983][ T5701] usb 3-1: USB disconnect, device number 8 [ 443.951280][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 444.031733][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 444.037818][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 444.044028][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 444.110098][T10557] syzkaller0: entered promiscuous mode [ 444.128361][T10557] syzkaller0: entered allmulticast mode [ 444.366957][T10564] overlayfs: missing 'lowerdir' [ 444.928656][T10565] tipc: Started in network mode [ 445.018354][T10565] tipc: Node identity b63ad0516292, cluster identity 4711 [ 445.104636][T10565] tipc: Enabled bearer , priority 0 [ 445.227522][T10563] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 445.297278][T10556] tipc: Resetting bearer [ 445.327351][T10556] tipc: Disabling bearer [ 445.468226][T10563] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 445.493060][T10563] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 445.512167][T10563] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 445.518291][T10563] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 446.992112][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 447.481460][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 447.551475][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 447.558296][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 447.564570][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 448.833708][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 448.996350][ T9] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 449.039799][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.157959][T10657] overlayfs: overlapping lowerdir path [ 449.188704][T10657] overlayfs: missing 'lowerdir' [ 449.222294][ T9] usb 2-1: config 0 descriptor?? [ 449.395385][ T9] cp210x 2-1:0.0: cp210x converter detected [ 450.020424][T10654] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 450.043300][ T9] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 450.119420][ T9] usb 2-1: cp210x converter now attached to ttyUSB0 [ 450.233218][T10654] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 450.283368][T10654] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 450.339488][T10654] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 450.348286][ T5701] usb 2-1: USB disconnect, device number 4 [ 450.370596][T10654] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 450.415972][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 450.586364][ T5701] cp210x 2-1:0.0: device disconnected [ 451.151470][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 451.722683][T10697] syzkaller0: entered promiscuous mode [ 451.742817][T10697] syzkaller0: entered allmulticast mode [ 451.929473][ T30] audit: type=1400 audit(1785191636.787:355): avc: denied { read } for pid=10700 comm="syz.2.1345" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 451.984935][ T30] audit: type=1400 audit(1785191636.827:356): avc: denied { open } for pid=10700 comm="syz.2.1345" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 452.271430][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 452.351665][ T5622] Bluetooth: hci3: command 0x0406 tx timeout [ 452.357774][ T5615] Bluetooth: hci2: command 0x0406 tx timeout [ 452.431325][ T5615] Bluetooth: hci4: command 0x0405 tx timeout [ 452.798280][ T30] audit: type=1400 audit(1785191637.647:357): avc: denied { mount } for pid=10725 comm="syz.4.1352" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 452.958736][ T30] audit: type=1400 audit(1785191637.817:358): avc: denied { remount } for pid=10725 comm="syz.4.1352" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 453.265681][T10734] overlayfs: missing 'lowerdir' [ 454.137895][T10731] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 454.299535][T10731] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 454.320876][T10731] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 454.348303][T10731] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 454.378010][T10731] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 454.986982][ T30] audit: type=1400 audit(1785191639.847:359): avc: denied { unmount } for pid=5619 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 455.231796][ T5615] Bluetooth: hci1: command 0x0406 tx timeout [ 456.365423][ T5615] Bluetooth: hci3: command 0x0406 tx timeout [ 456.365536][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 456.377827][ T5615] Bluetooth: hci0: command 0x0406 tx timeout [ 456.441325][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 456.587757][T10776] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 456.596824][T10776] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 462.844340][T10885] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 462.853320][T10885] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 464.430916][ T30] audit: type=1400 audit(1785191649.287:360): avc: denied { watch } for pid=10894 comm="syz.0.1394" path="/293/file0" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 464.462271][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 464.542589][ T30] audit: type=1400 audit(1785191649.317:361): avc: denied { watch_sb watch_reads } for pid=10894 comm="syz.0.1394" path="/293/file0" dev="tmpfs" ino=1647 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 464.662632][T10901] nvme_fabrics: missing parameter 'transport=%s' [ 464.709176][T10901] nvme_fabrics: missing parameter 'nqn=%s' [ 465.733822][ T5701] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 465.913670][ T5701] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 465.937755][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 465.982380][ T5701] usb 4-1: config 0 descriptor?? [ 466.005460][ T5701] cp210x 4-1:0.0: cp210x converter detected [ 466.418788][ T5701] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 466.486822][ T5701] usb 4-1: cp210x converter now attached to ttyUSB0 [ 466.704273][ T5701] usb 4-1: USB disconnect, device number 7 [ 466.736068][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 466.783516][ T5701] cp210x 4-1:0.0: device disconnected [ 468.063689][T10935] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 468.371991][T10935] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 468.897333][T10935] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 468.915598][T10935] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 468.932178][T10935] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 468.947617][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 469.246824][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 470.431422][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 470.841939][ T5701] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 470.921292][ T5622] Bluetooth: hci2: command 0x0406 tx timeout [ 471.008525][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 471.040138][ T5701] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 471.086071][ T5701] usb 3-1: config 2 has no interface number 0 [ 471.109681][ T5701] usb 3-1: config 2 interface 43 has no altsetting 0 [ 471.147839][ T5701] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 471.181143][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 471.201531][ T5701] usb 3-1: Product: syz [ 471.207736][ T5701] usb 3-1: Manufacturer: syz [ 471.215373][ T5701] usb 3-1: SerialNumber: syz [ 472.027739][ T5701] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 472.096957][ T5701] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 472.171023][ T5701] usb 3-1: USB disconnect, device number 9 [ 472.772365][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 472.965246][T11015] nvme_fabrics: missing parameter 'transport=%s' [ 473.022066][T11015] nvme_fabrics: missing parameter 'nqn=%s' [ 473.594680][ T30] audit: type=1400 audit(1785191658.407:362): avc: denied { mount } for pid=11010 comm="syz.0.1422" name="/" dev="ramfs" ino=65064 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 475.102622][T11024] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 475.129012][T11024] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 475.176084][T11024] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 475.207830][T11024] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 475.226519][T11024] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 475.232710][ T5622] Bluetooth: hci1: command 0x0406 tx timeout [ 475.881239][ T5701] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 476.542702][ T5701] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 476.630999][ T5701] usb 1-1: config 2 has no interface number 0 [ 476.649785][ T5701] usb 1-1: config 2 interface 43 has no altsetting 0 [ 476.710437][ T5701] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 476.744011][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.762780][ T5701] usb 1-1: Product: syz [ 476.767028][ T5701] usb 1-1: Manufacturer: syz [ 476.772137][ T5701] usb 1-1: SerialNumber: syz [ 476.999956][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 477.151237][ T5622] Bluetooth: hci0: command 0x0406 tx timeout [ 477.158302][T11066] nvme_fabrics: missing parameter 'transport=%s' [ 477.178598][T11066] nvme_fabrics: missing parameter 'nqn=%s' [ 477.231711][ T5622] Bluetooth: hci4: command 0x0405 tx timeout [ 477.231720][ T5620] Bluetooth: hci2: command 0x0406 tx timeout [ 477.530860][ T5701] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 477.564883][ T5701] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 477.645657][ T5701] usb 1-1: USB disconnect, device number 13 [ 478.801235][ T805] usb 1-1: new high-speed USB device number 14 using dummy_hcd [ 479.078768][ T805] usb 1-1: Using ep0 maxpacket: 16 [ 479.435728][ T805] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 479.449178][ T805] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 479.475450][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 479.527826][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 479.714992][ T805] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 479.731255][ T805] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 479.740361][ T805] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 480.310953][ T805] usb 1-1: config 0 descriptor?? [ 480.320043][T11092] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 480.356941][ T805] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 480.385480][T11109] Can't find ip_set type hash:i [ 480.717546][ T30] audit: type=1400 audit(1785191665.577:363): avc: denied { ioctl } for pid=11091 comm="syz.0.1442" path="/dev/input/event4" dev="devtmpfs" ino=2948 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 480.759342][ T805] usb 1-1: USB disconnect, device number 14 [ 483.914284][T11181] IPVS: rr: FWM 3 0x00000003 - no destination available [ 483.976214][ T5701] IPVS: starting estimator thread 0... [ 484.111259][T11183] IPVS: using max 64 ests per chain, 153600 per kthread [ 487.851273][ T805] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 487.876711][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 488.009192][T11229] nvme_fabrics: missing parameter 'transport=%s' [ 488.032387][T11229] nvme_fabrics: missing parameter 'nqn=%s' [ 488.043195][ T805] usb 2-1: config 2 has an invalid interface number: 43 but max is 0 [ 488.077781][ T805] usb 2-1: config 2 has no interface number 0 [ 488.106413][ T805] usb 2-1: config 2 interface 43 has no altsetting 0 [ 488.125841][ T805] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 488.143415][ T805] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 488.176687][ T805] usb 2-1: Product: syz [ 488.187179][ T805] usb 2-1: Manufacturer: syz [ 488.204774][ T805] usb 2-1: SerialNumber: syz [ 488.793418][ T805] ums-usbat 2-1:2.43: USB Mass Storage device detected [ 488.823203][ T805] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 488.916088][ T805] usb 2-1: USB disconnect, device number 5 [ 489.888123][T11266] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 490.360789][T11282] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 490.369760][T11282] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 490.972910][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 491.091224][T11286] nvme_fabrics: missing parameter 'transport=%s' [ 491.109659][T11286] nvme_fabrics: missing parameter 'nqn=%s' [ 491.612410][T11293] kvm_pr_unimpl_wrmsr: 196 callbacks suppressed [ 491.612431][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 491.724628][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 491.790967][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 491.864883][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 491.927765][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 491.993865][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 492.043217][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 492.070259][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 492.113522][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 492.227987][T11293] kvm: kvm [11291]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80 [ 492.882107][ T805] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 493.073775][ T805] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 493.093684][ T805] usb 5-1: config 2 has no interface number 0 [ 493.105034][ T805] usb 5-1: config 2 interface 43 has no altsetting 0 [ 493.137369][ T805] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 493.158596][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.175014][ T805] usb 5-1: Product: syz [ 493.192541][ T805] usb 5-1: Manufacturer: syz [ 493.206752][ T805] usb 5-1: SerialNumber: syz [ 493.675930][ T805] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 493.708413][ T805] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 493.813358][ T805] usb 5-1: USB disconnect, device number 10 [ 494.282866][ T30] audit: type=1400 audit(1785191679.147:364): avc: denied { accept } for pid=11364 comm="syz.1.1506" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 497.301227][ T5708] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 497.469911][ T5708] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 497.503011][ T5708] usb 1-1: config 2 has no interface number 0 [ 497.525857][ T5708] usb 1-1: config 2 interface 43 has no altsetting 0 [ 497.577591][ T5708] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 497.593423][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 497.625721][ T5708] usb 1-1: Product: syz [ 497.635747][ T5708] usb 1-1: Manufacturer: syz [ 497.644142][ T5708] usb 1-1: SerialNumber: syz [ 498.163571][ T5708] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 498.226904][ T5708] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 498.303549][ T5708] usb 1-1: USB disconnect, device number 15 [ 499.811482][ T5708] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 499.974561][ T5708] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 499.986070][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 500.032888][ T5708] usb 1-1: config 0 descriptor?? [ 500.049299][ T5708] cp210x 1-1:0.0: cp210x converter detected [ 500.273012][ T5708] cp210x 1-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 500.308598][ T5708] cp210x 1-1:0.0: querying part number failed [ 500.360115][ T5708] usb 1-1: cp210x converter now attached to ttyUSB0 [ 500.491117][ T5708] usb 1-1: USB disconnect, device number 16 [ 500.539788][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 500.592159][ T5708] cp210x 1-1:0.0: device disconnected [ 501.152525][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.158834][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.178533][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 501.307973][T11470] nvme_fabrics: missing parameter 'transport=%s' [ 501.359895][T11470] nvme_fabrics: missing parameter 'nqn=%s' [ 503.047218][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 503.139746][T11508] nvme_fabrics: missing parameter 'transport=%s' [ 503.150266][T11508] nvme_fabrics: missing parameter 'nqn=%s' [ 503.443167][T11519] Bluetooth: hci0: unsupported parameter 255 [ 503.491294][T11519] Bluetooth: hci0: unsupported parameter 255 [ 504.701540][ T5701] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 504.893151][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 504.921541][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 504.952663][ T5701] usb 2-1: config 0 descriptor?? [ 504.974608][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 505.071549][ T5708] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 505.195584][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 505.219517][ T5701] cp210x 2-1:0.0: querying part number failed [ 505.235400][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 505.238162][ T5708] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 505.272617][ T5708] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 505.298167][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 505.337967][ T5708] usb 5-1: config 0 descriptor?? [ 505.463154][T11561] Bluetooth: hci0: unsupported parameter 255 [ 505.480666][T11561] Bluetooth: hci0: unsupported parameter 255 [ 505.881341][ T5701] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 506.062654][ T5701] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 506.071362][ T5701] usb 3-1: config 1 has an invalid descriptor of length 49, skipping remainder of the config [ 506.085434][ T5701] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 506.094827][ T5701] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 506.123238][ T5701] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 506.135467][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 506.143510][ T5701] usb 3-1: Product: syz [ 506.147820][ T5701] usb 3-1: Manufacturer: syz [ 506.159260][ T5701] cdc_wdm 3-1:1.0: skipping garbage [ 506.165355][ T5701] cdc_wdm 3-1:1.0: skipping garbage [ 506.174449][ T5701] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 506.204615][T11576] syzkaller0: entered promiscuous mode [ 506.216319][T11576] syzkaller0: entered allmulticast mode [ 506.376252][ T805] usb 3-1: USB disconnect, device number 10 [ 506.481337][ T5701] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 506.571233][ T5708] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 506.632626][ T5701] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 506.642003][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 506.652754][ T5701] usb 4-1: config 0 descriptor?? [ 506.660297][ T5701] cp210x 4-1:0.0: cp210x converter detected [ 506.732830][ T5708] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 506.740960][ T5708] usb 1-1: config 2 has no interface number 0 [ 506.747114][ T5708] usb 1-1: config 2 interface 43 has no altsetting 0 [ 506.755839][ T5708] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 506.764921][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 506.772961][ T5708] usb 1-1: Product: syz [ 506.777136][ T5708] usb 1-1: Manufacturer: syz [ 506.781800][ T5708] usb 1-1: SerialNumber: syz [ 506.865103][ T5701] cp210x 4-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 506.872820][ T5701] cp210x 4-1:0.0: querying part number failed [ 506.886372][ T5701] usb 4-1: cp210x converter now attached to ttyUSB1 [ 507.018013][ T5708] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 507.026859][ T5708] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 507.078617][ T5701] usb 4-1: USB disconnect, device number 8 [ 507.120661][ T5708] usb 1-1: USB disconnect, device number 17 [ 507.137272][ T5701] cp210x ttyUSB1: cp210x converter now disconnected from ttyUSB1 [ 507.164642][ T5701] cp210x 4-1:0.0: device disconnected [ 507.465513][ T5708] usb 2-1: USB disconnect, device number 6 [ 507.495305][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 507.526116][ T5708] cp210x 2-1:0.0: device disconnected [ 507.620984][T11592] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.1570'. [ 507.876079][ T5701] usb 5-1: USB disconnect, device number 11 [ 508.712317][ T5701] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 508.943854][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 508.962306][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 509.013281][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 509.061507][ T5701] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 509.079186][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.117992][ T5701] usb 4-1: Product: syz [ 509.137137][ T5701] usb 4-1: Manufacturer: syz [ 509.160553][ T5701] usb 4-1: SerialNumber: syz [ 509.189713][ T5701] usb 4-1: config 0 descriptor?? [ 509.214814][ T5701] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 509.260955][ T5701] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 509.798953][T11655] wlan0 speed is unknown, defaulting to 1000 [ 509.844074][ T5701] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 509.871721][ T5701] em28xx 4-1:0.0: Config register raw data: 0x00 [ 510.076963][ T30] audit: type=1400 audit(1785191694.837:365): avc: denied { ioctl } for pid=11652 comm="syz.4.1586" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 511.509044][ T805] usb 4-1: USB disconnect, device number 9 [ 511.574502][ T805] em28xx 4-1:0.0: Disconnecting em28xx [ 511.644556][ T805] em28xx 4-1:0.0: Freeing device [ 511.713893][T11686] nvme_fabrics: missing parameter 'transport=%s' [ 511.722654][T11686] nvme_fabrics: missing parameter 'nqn=%s' [ 511.877355][ T5622] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 512.087248][T11698] nvme_fabrics: missing parameter 'transport=%s' [ 512.122015][T11698] nvme_fabrics: missing parameter 'nqn=%s' [ 512.463264][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 513.435669][T11725] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1600'. [ 514.047840][T11720] wlan0 speed is unknown, defaulting to 1000 [ 514.651396][ T9] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 514.824892][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 514.843044][ T9] usb 5-1: config index 0 descriptor too short (expected 65, got 36) [ 514.861558][ T9] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 514.873600][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 514.890243][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 514.906986][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 514.958092][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 514.994582][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 515.029179][ T9] usb 5-1: config 0 descriptor?? [ 515.040577][T11749] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 515.069680][ T9] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input6 [ 515.227209][T11764] wlan0 speed is unknown, defaulting to 1000 [ 515.250541][T11771] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1614'. [ 515.318641][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1615'. [ 515.439458][ T9] usb 5-1: USB disconnect, device number 12 [ 515.648742][T11780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1616'. [ 515.667995][T11773] wlan0 speed is unknown, defaulting to 1000 [ 515.807261][T11788] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 515.816876][T11788] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 515.954540][T11772] wlan0 speed is unknown, defaulting to 1000 [ 516.906519][T11795] wlan0 speed is unknown, defaulting to 1000 [ 517.793298][T11807] wlan0 speed is unknown, defaulting to 1000 [ 518.401252][ T5622] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 519.071728][T11849] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 519.080474][T11849] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 520.131255][ T805] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 520.301245][ T805] usb 4-1: Using ep0 maxpacket: 16 [ 520.315166][ T805] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 520.341246][ T805] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 520.341440][ T9] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 520.353598][ T805] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.381491][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.401957][ T805] usb 4-1: Product: syz [ 520.406142][ T805] usb 4-1: Manufacturer: syz [ 520.411133][ T805] usb 4-1: SerialNumber: syz [ 520.440687][ T805] usb 4-1: config 0 descriptor?? [ 520.455430][ T805] em28xx 4-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 520.571216][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 520.592411][ T9] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 520.611105][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 520.658449][ T9] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 520.688719][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 520.720176][ T9] usb 3-1: Product: syz [ 520.736930][ T9] usb 3-1: Manufacturer: syz [ 520.747779][ T9] usb 3-1: SerialNumber: syz [ 520.774105][ T9] usb 3-1: config 0 descriptor?? [ 520.794968][ T9] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 520.818499][ T9] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 521.397488][ T9] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 521.426056][ T9] em28xx 3-1:0.0: Config register raw data: 0x00 [ 521.731324][ T805] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 521.902513][ T805] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 521.928141][ T805] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 521.938165][T11893] wlan0 speed is unknown, defaulting to 1000 [ 521.949223][ T805] usb 5-1: config 0 descriptor?? [ 521.965511][ T805] cp210x 5-1:0.0: cp210x converter detected [ 522.157356][T11896] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1646'. [ 522.180178][ T805] usb 5-1: cp210x converter now attached to ttyUSB0 [ 522.409006][ T9] usb 5-1: USB disconnect, device number 13 [ 522.463565][ T9] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 522.486831][ T9] cp210x 5-1:0.0: device disconnected [ 522.965485][ T9] usb 4-1: USB disconnect, device number 10 [ 523.013484][T11907] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 523.022272][T11907] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 523.144272][ T805] usb 3-1: USB disconnect, device number 11 [ 523.181090][ T805] em28xx 3-1:0.0: Disconnecting em28xx [ 523.215587][ T805] em28xx 3-1:0.0: Freeing device [ 525.230525][T11921] wlan0 speed is unknown, defaulting to 1000 [ 527.042323][T11973] wlan0 speed is unknown, defaulting to 1000 [ 528.390813][T11985] wlan0 speed is unknown, defaulting to 1000 [ 528.814338][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 528.954148][T12019] nvme_fabrics: missing parameter 'transport=%s' [ 528.967795][T12019] nvme_fabrics: missing parameter 'nqn=%s' [ 529.172861][T12032] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 529.181607][T12032] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 529.621849][T12029] wlan0 speed is unknown, defaulting to 1000 [ 529.662236][ T9] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 529.845757][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 529.891086][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 529.900288][ T9] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 529.909231][ T9] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 529.922387][ T9] usb 4-1: config 14 has no interface number 0 [ 529.930735][ T9] usb 4-1: config 14 has no interface number 1 [ 529.961313][ T5708] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 529.995881][ T9] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 530.021386][ T9] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 530.033303][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 530.046316][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 530.062035][ T9] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 530.073473][ T9] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 530.088995][ T9] usb 4-1: config 14 interface 57 has no altsetting 0 [ 530.104049][ T9] usb 4-1: config 14 interface 228 has no altsetting 0 [ 530.133254][ T9] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 530.144524][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.155534][ T9] usb 4-1: Product: syz [ 530.159723][ T9] usb 4-1: Manufacturer: syz [ 530.166792][ T9] usb 4-1: SerialNumber: syz [ 530.169725][ T5708] usb 3-1: config 2 has an invalid interface number: 43 but max is 0 [ 530.194629][ T5708] usb 3-1: config 2 has no interface number 0 [ 530.222253][ T5708] usb 3-1: config 2 interface 43 has no altsetting 0 [ 530.270326][ T5708] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 530.281085][ T5708] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.305337][ T5708] usb 3-1: Product: syz [ 530.317247][ T5708] usb 3-1: Manufacturer: syz [ 530.333931][ T5708] usb 3-1: SerialNumber: syz [ 530.641531][ T9] legousbtower 4-1:14.57: interrupt endpoints not found [ 530.776253][T12043] wlan0 speed is unknown, defaulting to 1000 [ 530.978348][ T5708] ums-usbat 3-1:2.43: USB Mass Storage device detected [ 531.007371][ T5708] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 531.026948][ T9] legousbtower 4-1:14.228: get version request failed: -121 [ 531.038781][ T9] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -121 [ 531.116795][ T5708] usb 3-1: USB disconnect, device number 12 [ 531.153643][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 531.258838][T12054] nvme_fabrics: missing parameter 'transport=%s' [ 531.278257][T12054] nvme_fabrics: missing parameter 'nqn=%s' [ 531.365774][ T9] usb 4-1: USB disconnect, device number 11 [ 532.063108][ T9] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 532.231243][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 532.263495][ T9] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 532.290903][ T9] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 532.333699][ T9] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 532.352806][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 532.375563][ T9] usb 2-1: Product: syz [ 532.377541][T12078] nvme_fabrics: missing parameter 'transport=%s' [ 532.390313][ T9] usb 2-1: Manufacturer: syz [ 532.393396][T12078] nvme_fabrics: missing parameter 'nqn=%s' [ 532.433069][ T9] usb 2-1: SerialNumber: syz [ 532.452616][ T9] usb 2-1: config 0 descriptor?? [ 532.495806][ T9] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 532.515186][ T9] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 533.117480][ T9] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 533.124136][ T9] em28xx 2-1:0.0: Config register raw data: 0x00 [ 533.778294][T12098] wlan0 speed is unknown, defaulting to 1000 [ 534.071268][ T5708] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 534.241362][ T5708] usb 5-1: Using ep0 maxpacket: 32 [ 534.255516][ T5708] usb 5-1: config 0 has an invalid interface number: 85 but max is 0 [ 534.274912][ T5708] usb 5-1: config 0 has no interface number 0 [ 534.294146][ T5708] usb 5-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 534.331239][ T5708] usb 5-1: config 0 interface 85 has no altsetting 0 [ 534.350176][ T5708] usb 5-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 534.368235][ T5708] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 534.389400][ T5708] usb 5-1: Product: syz [ 534.399876][ T5708] usb 5-1: Manufacturer: syz [ 534.413289][ T5708] usb 5-1: SerialNumber: syz [ 534.431049][ T5708] usb 5-1: config 0 descriptor?? [ 534.810108][ T805] usb 2-1: USB disconnect, device number 7 [ 534.846418][ T805] em28xx 2-1:0.0: Disconnecting em28xx [ 534.891802][ T805] em28xx 2-1:0.0: Freeing device [ 535.088200][ T5708] appletouch 5-1:0.85: Geyser mode initialized. [ 535.116747][ T5708] input: appletouch as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.85/input/input7 [ 535.333924][ T5708] usb 5-1: USB disconnect, device number 14 [ 535.375620][ T5708] appletouch 5-1:0.85: input: appletouch disconnected [ 535.507867][T12138] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1708'. [ 535.523738][T12134] wlan0 speed is unknown, defaulting to 1000 [ 535.589896][T12136] wlan0 speed is unknown, defaulting to 1000 [ 536.082016][T12147] wlan0 speed is unknown, defaulting to 1000 [ 536.192324][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1712'. [ 536.268359][T12151] netlink: 1688 bytes leftover after parsing attributes in process `syz.1.1713'. [ 536.940490][T12162] wlan0 speed is unknown, defaulting to 1000 [ 537.851275][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 537.901270][ T5701] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 538.011436][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 538.029074][ T9] usb 1-1: unable to get BOS descriptor or descriptor too short [ 538.058792][ T9] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 538.074363][ T9] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 538.086744][ T9] usb 1-1: config 14 has no interface number 0 [ 538.094053][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 538.110350][ T9] usb 1-1: config 14 has no interface number 1 [ 538.127996][ T9] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 538.141112][ T9] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 538.154196][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 538.166231][ T5701] usb 5-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 538.183763][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.195609][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 538.207199][ T5701] usb 5-1: Product: syz [ 538.212767][ T5701] usb 5-1: Manufacturer: syz [ 538.218884][ T9] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 538.230789][ T5701] usb 5-1: SerialNumber: syz [ 538.239190][ T5701] usb 5-1: config 0 descriptor?? [ 538.244943][ T9] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 538.258389][ T9] usb 1-1: config 14 interface 57 has no altsetting 0 [ 538.268449][ T5701] streamzap 5-1:0.0: streamzap_probe: Unexpected desc.bNumEndpoints (0) [ 538.280004][ T9] usb 1-1: config 14 interface 228 has no altsetting 0 [ 538.291028][ T9] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 538.300311][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.309391][ T9] usb 1-1: Product: syz [ 538.323928][ T9] usb 1-1: Manufacturer: syz [ 538.328585][ T9] usb 1-1: SerialNumber: syz [ 538.500517][T12199] wlan0 speed is unknown, defaulting to 1000 [ 538.507456][ T5701] usb 5-1: USB disconnect, device number 15 [ 538.754554][ T9] legousbtower 1-1:14.57: interrupt endpoints not found [ 539.155160][ T9] legousbtower 1-1:14.228: get version request failed: -121 [ 539.178841][ T9] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121 [ 539.442254][ T5701] usb 1-1: USB disconnect, device number 18 [ 539.890379][T12232] overlayfs: overlapping lowerdir path [ 542.684135][T12266] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1746'. [ 542.816334][T12260] wlan0 speed is unknown, defaulting to 1000 [ 543.225456][T12280] overlayfs: overlapping lowerdir path [ 543.727099][T12284] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 543.737844][T12284] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 544.991257][ T5708] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 545.088880][T12323] wlan0 speed is unknown, defaulting to 1000 [ 545.165095][ T5708] usb 1-1: config 0 has an invalid interface number: 50 but max is 0 [ 545.181260][ T5708] usb 1-1: config 0 has no interface number 0 [ 545.193641][ T5708] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 545.205772][ T805] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 545.227627][ T5708] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 545.239726][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.250543][ T5708] usb 1-1: Product: syz [ 545.257059][ T5708] usb 1-1: Manufacturer: syz [ 545.263561][ T5708] usb 1-1: SerialNumber: syz [ 545.275169][ T5708] usb 1-1: config 0 descriptor?? [ 545.296445][ T5708] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0 [ 545.362996][ T805] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 545.380018][ T805] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 545.389512][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.402660][ T805] usb 4-1: Product: syz [ 545.410415][ T805] usb 4-1: Manufacturer: syz [ 545.419171][ T805] usb 4-1: SerialNumber: syz [ 545.529586][ T5708] usb 1-1: USB disconnect, device number 19 [ 545.548073][ T5708] yurex 1-1:0.50: USB YUREX #0 now disconnected [ 545.646405][T12326] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 545.683826][T12326] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 545.766679][ T805] usb 4-1: No union descriptors [ 545.796757][ T805] usb 4-1: USB disconnect, device number 12 [ 545.920590][T12332] overlayfs: overlapping lowerdir path [ 546.721325][ T805] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 546.901548][ T805] usb 4-1: Using ep0 maxpacket: 8 [ 546.917960][ T805] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 546.948001][ T805] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 546.994183][ T805] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 547.016637][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 547.039013][ T805] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0 [ 547.066712][ T805] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0 [ 547.100267][ T805] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 547.227753][ T805] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 547.250800][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.285643][ T805] usbtmc 4-1:16.0: probe with driver usbtmc failed with error -22 [ 547.340337][T12347] wlan0 speed is unknown, defaulting to 1000 [ 547.491261][ T5701] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 547.521751][ T9] usb 4-1: USB disconnect, device number 13 [ 547.653201][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 547.674392][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.693663][ T5701] usb 2-1: config 0 descriptor?? [ 547.709312][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 547.814440][ T5724] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 548.050875][ T5724] usb 5-1: config 0 has an invalid interface number: 50 but max is 0 [ 548.062213][ T5724] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 548.073238][ T5724] usb 5-1: config 0 has no interface number 0 [ 548.081804][ T5724] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 548.092042][ T5724] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 548.111225][ T5724] usb 5-1: Product: syz [ 548.115436][ T5724] usb 5-1: Manufacturer: syz [ 548.121147][ T5724] usb 5-1: SerialNumber: syz [ 548.125912][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -71 [ 548.135893][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 548.146744][ T5701] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 548.167340][ T5724] usb 5-1: config 0 descriptor?? [ 548.180724][ T5724] yurex 5-1:0.50: Could not find endpoints [ 548.194147][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 548.225154][ T5701] usb 2-1: USB disconnect, device number 8 [ 548.260393][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 548.284579][ T5701] cp210x 2-1:0.0: device disconnected [ 548.385654][T12367] wlan0 speed is unknown, defaulting to 1000 [ 548.415839][ T5724] usb 5-1: USB disconnect, device number 16 [ 548.493075][ T805] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 548.662976][ T805] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 548.702049][ T805] usb 4-1: config 0 interface 0 has no altsetting 0 [ 548.724365][ T805] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 548.753225][ T805] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 548.777585][ T805] usb 4-1: Product: syz [ 548.787727][ T805] usb 4-1: Manufacturer: syz [ 548.797431][ T805] usb 4-1: SerialNumber: syz [ 548.814428][ T805] usb 4-1: config 0 descriptor?? [ 548.834448][T12371] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 548.858156][ T805] usb 4-1: selecting invalid altsetting 0 [ 549.084047][T12371] snd-usb-audio 4-1:0.0: Runtime PM usage count underflow! [ 549.135796][ T805] usb 4-1: USB disconnect, device number 14 [ 549.243914][T12381] wlan0 speed is unknown, defaulting to 1000 [ 549.832043][ T5724] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 550.026653][ T5724] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 550.048093][ T5724] usb 2-1: config 0 interface 0 has no altsetting 0 [ 550.063454][ T5724] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 550.074627][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.090134][ T5724] usb 2-1: Product: syz [ 550.101216][ T5724] usb 2-1: Manufacturer: syz [ 550.126160][ T5724] usb 2-1: SerialNumber: syz [ 550.129433][T12408] wlan0 speed is unknown, defaulting to 1000 [ 550.136858][ T805] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 550.188437][ T5724] usb 2-1: config 0 descriptor?? [ 550.218400][T12399] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 550.269651][ T5724] usb 2-1: selecting invalid altsetting 0 [ 550.294405][ T805] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 550.310290][ T805] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 550.369048][ T805] usb 4-1: config 0 descriptor?? [ 550.386952][ T805] cp210x 4-1:0.0: cp210x converter detected [ 550.504219][T12399] usb 2-1: BOGUS urb xfer, pipe 0 != type 1 [ 550.800605][ T805] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 550.834813][ C1] raw-gadget.1 gadget.3: ignoring, device is not running [ 550.859211][ T805] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 550.926185][ T805] cp210x 4-1:0.0: GPIO initialisation failed: -32 [ 550.954809][ T805] usb 4-1: cp210x converter now attached to ttyUSB0 [ 551.050906][ T805] usb 4-1: USB disconnect, device number 15 [ 551.078268][ T805] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 551.164887][ T805] cp210x 4-1:0.0: device disconnected [ 551.416342][T12418] wlan0 speed is unknown, defaulting to 1000 [ 551.807806][T12436] overlayfs: missing 'lowerdir' [ 552.560459][T12399] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 552.587891][ T5724] usb 2-1: USB disconnect, device number 9 [ 553.352606][T12459] wlan0 speed is unknown, defaulting to 1000 [ 553.377920][ T5701] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 553.509251][T12473] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 553.558196][T12473] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 553.572716][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 553.596891][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 553.654779][ T5701] usb 2-1: config 0 descriptor?? [ 553.685414][ T5622] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 553.714037][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 553.763718][T12480] nvme_fabrics: missing parameter 'transport=%s' [ 553.772198][T12480] nvme_fabrics: missing parameter 'nqn=%s' [ 554.125518][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 554.326050][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 554.339834][ T5701] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 554.383802][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 554.451516][ T5701] usb 2-1: USB disconnect, device number 10 [ 554.485592][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 554.518261][ T5701] cp210x 2-1:0.0: device disconnected [ 555.123487][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 555.270578][T12504] nvme_fabrics: missing parameter 'transport=%s' [ 555.330383][T12504] nvme_fabrics: missing parameter 'nqn=%s' [ 555.821447][ T5701] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 556.013240][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 556.043571][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.075684][ T5701] usb 2-1: config 0 descriptor?? [ 556.092360][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 556.111444][ T5724] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 556.282757][ T5724] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 556.306198][ T5724] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 556.353394][ T5724] usb 5-1: config 0 descriptor?? [ 556.412645][ T5724] cp210x 5-1:0.0: cp210x converter detected [ 556.499155][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 556.514296][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 556.530938][ T5701] cp210x 2-1:0.0: GPIO initialisation failed: -32 [ 556.612603][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 556.696284][ T5701] usb 2-1: USB disconnect, device number 11 [ 556.756414][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 556.783967][ T5701] cp210x 2-1:0.0: device disconnected [ 556.840629][ T5724] cp210x 5-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 556.858477][ T5724] cp210x 5-1:0.0: failed to get vendor val 0x000e size 678: -32 [ 556.885251][ T5724] cp210x 5-1:0.0: GPIO initialisation failed: -32 [ 556.928467][ T5724] usb 5-1: cp210x converter now attached to ttyUSB0 [ 556.961283][ T5724] usb 5-1: USB disconnect, device number 17 [ 556.994078][ T5724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 557.035597][ T5724] cp210x 5-1:0.0: device disconnected [ 557.315249][T12545] syzkaller0: entered promiscuous mode [ 557.334841][T12545] syzkaller0: entered allmulticast mode [ 557.497544][T12537] wlan0 speed is unknown, defaulting to 1000 [ 557.986034][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1825'. [ 558.089864][T12559] wlan0 speed is unknown, defaulting to 1000 [ 558.252153][ T5701] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 558.433343][ T5701] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 558.461324][ T5701] usb 5-1: config 0 interface 0 has no altsetting 0 [ 558.489047][ T5701] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 558.509253][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 558.529013][ T5701] usb 5-1: Product: syz [ 558.539941][ T5701] usb 5-1: Manufacturer: syz [ 558.556315][ T5701] usb 5-1: SerialNumber: syz [ 558.577748][ T5701] usb 5-1: config 0 descriptor?? [ 558.610536][T12570] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 558.630871][ T5701] usb 5-1: selecting invalid altsetting 0 [ 558.857649][ T5701] usb 5-1: USB disconnect, device number 18 [ 559.165331][T12578] wlan0 speed is unknown, defaulting to 1000 [ 559.871399][ T5701] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 559.896516][T12594] wlan0 speed is unknown, defaulting to 1000 [ 560.030889][T12604] wlan0 speed is unknown, defaulting to 1000 [ 560.037459][ T5701] usb 3-1: Using ep0 maxpacket: 32 [ 560.050529][ T5701] usb 3-1: unable to get BOS descriptor or descriptor too short [ 560.064005][ T5701] usb 3-1: config 14 has an invalid interface number: 57 but max is 0 [ 560.073088][ T5701] usb 3-1: config 14 has no interface number 0 [ 560.091994][ T5701] usb 3-1: config 14 interface 57 has no altsetting 0 [ 560.137279][ T5701] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 560.147499][ T5701] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.158361][ T5701] usb 3-1: Product: syz [ 560.162945][ T5701] usb 3-1: Manufacturer: syz [ 560.168452][ T5701] usb 3-1: SerialNumber: syz [ 560.298119][T12613] wlan0 speed is unknown, defaulting to 1000 [ 560.607574][ T5701] legousbtower 3-1:14.57: interrupt endpoints not found [ 560.882163][ T5622] Bluetooth: hci1: unexpected event for opcode 0x0c25 [ 560.976086][T12619] nvme_fabrics: missing parameter 'transport=%s' [ 561.004940][T12619] nvme_fabrics: missing parameter 'nqn=%s' [ 561.638910][T12639] wlan0 speed is unknown, defaulting to 1000 [ 562.579225][T12657] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 562.595280][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.603478][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.621278][T12657] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 562.656600][ T5701] usb 3-1: USB disconnect, device number 13 [ 563.466611][T12668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1855'. [ 563.590757][ T5622] Bluetooth: hci0: unexpected event for opcode 0x0c25 [ 563.594578][T12664] wlan0 speed is unknown, defaulting to 1000 [ 563.740633][T12676] nvme_fabrics: missing parameter 'transport=%s' [ 563.775645][T12676] nvme_fabrics: missing parameter 'nqn=%s' [ 564.289603][ T30] audit: type=1400 audit(1785191749.147:366): avc: denied { prog_run } for pid=12689 comm="syz.1.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 565.384623][ T5701] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 565.575603][ T5701] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 565.619132][ T5701] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 565.662359][ T5701] usb 2-1: config 0 descriptor?? [ 565.700627][ T5701] cp210x 2-1:0.0: cp210x converter detected [ 566.129780][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -121 [ 566.331459][ T5701] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71 [ 566.336795][T12736] wlan0 speed is unknown, defaulting to 1000 [ 566.370975][ T5701] cp210x 2-1:0.0: GPIO initialisation failed: -71 [ 566.414839][ T5701] usb 2-1: cp210x converter now attached to ttyUSB0 [ 566.462111][ T5701] usb 2-1: USB disconnect, device number 12 [ 566.482387][T12738] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1876'. [ 566.495368][ T5701] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 566.529676][ T5701] cp210x 2-1:0.0: device disconnected [ 566.651240][ T805] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 566.801260][ T805] usb 1-1: Using ep0 maxpacket: 16 [ 566.828637][ T805] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 566.863835][ T805] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 566.924187][ T805] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 566.954598][ T805] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.001183][ T805] usb 1-1: Product: syz [ 567.017082][ T805] usb 1-1: Manufacturer: syz [ 567.037527][ T805] usb 1-1: SerialNumber: syz [ 567.617188][ T805] usb 1-1: config 0 descriptor?? [ 567.646324][ T805] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 567.676911][ T805] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 568.269618][ T805] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 568.288581][ T805] em28xx 1-1:0.0: Config register raw data: 0xfffffffb [ 568.436046][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 568.541035][T12784] nvme_fabrics: missing parameter 'transport=%s' [ 568.548906][T12784] nvme_fabrics: missing parameter 'nqn=%s' [ 568.707730][ T805] em28xx 1-1:0.0: AC97 chip type couldn't be determined [ 568.723420][ T805] em28xx 1-1:0.0: No AC97 audio processor [ 568.774503][ T805] usb 1-1: USB disconnect, device number 20 [ 568.809828][ T805] em28xx 1-1:0.0: Disconnecting em28xx [ 568.849902][ T805] em28xx 1-1:0.0: Freeing device [ 570.283251][T12809] wlan0 speed is unknown, defaulting to 1000 [ 570.478546][T12832] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 570.487337][T12832] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 571.177250][T12821] wlan0 speed is unknown, defaulting to 1000 [ 571.817205][T12840] wlan0 speed is unknown, defaulting to 1000 [ 572.509930][T12860] overlayfs: missing 'lowerdir' [ 573.261249][ T805] usb 5-1: new full-speed USB device number 19 using dummy_hcd [ 573.432723][ T805] usb 5-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 573.448087][ T805] usb 5-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 46011, setting to 64 [ 573.459735][ T805] usb 5-1: config 0 interface 0 has no altsetting 0 [ 573.494919][ T805] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 573.504269][ T805] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 573.553734][ T805] usb 5-1: Product: syz [ 573.594432][ T805] usb 5-1: Manufacturer: syz [ 573.635411][ T805] usb 5-1: SerialNumber: syz [ 573.688925][ T805] usb 5-1: config 0 descriptor?? [ 573.719862][T12862] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 573.757048][ T805] usb 5-1: selecting invalid altsetting 0 [ 573.964333][T12862] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 573.991739][T12862] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 574.033367][T12862] usb 5-1: cannot submit urb 0, error -2: endpoint not enabled [ 574.069337][ T805] usb 5-1: USB disconnect, device number 19 [ 574.078478][T12862] usb 5-1: cannot submit urb 0, error -19: no device [ 574.611526][ T5708] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 574.771238][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 574.789045][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 574.823149][ T5708] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 574.863264][ T5708] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 574.889270][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 574.921497][ T5708] usb 2-1: Product: syz [ 574.935110][ T5708] usb 2-1: Manufacturer: syz [ 574.946058][ T5708] usb 2-1: SerialNumber: syz [ 574.963852][ T5708] usb 2-1: config 0 descriptor?? [ 574.982892][ T5708] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 575.005308][ T5708] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 575.416835][T12905] overlayfs: missing 'lowerdir' [ 575.658591][ T5708] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 575.759185][ T5708] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 576.112847][T12920] wlan0 speed is unknown, defaulting to 1000 [ 576.257955][ T5708] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 576.280298][ T5708] em28xx 2-1:0.0: No AC97 audio processor [ 576.306310][ T5708] usb 2-1: USB disconnect, device number 13 [ 576.338245][ T5708] em28xx 2-1:0.0: Disconnecting em28xx [ 576.387011][ T5708] em28xx 2-1:0.0: Freeing device [ 577.144269][T12946] wlan0 speed is unknown, defaulting to 1000 [ 577.816469][T12957] wlan0 speed is unknown, defaulting to 1000 [ 578.268817][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1936'. [ 578.721767][T12966] wlan0 speed is unknown, defaulting to 1000 [ 579.232403][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 579.292325][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 579.332663][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 579.405859][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 579.462669][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 579.494293][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 579.533272][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 579.547726][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 579.587937][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 579.637195][T12988] kvm: kvm [12987]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 579.660975][T12993] wlan0 speed is unknown, defaulting to 1000 [ 579.668180][ T805] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 579.824125][ T805] usb 4-1: Using ep0 maxpacket: 32 [ 579.832150][T13001] wlan0 speed is unknown, defaulting to 1000 [ 579.860752][ T805] usb 4-1: unable to get BOS descriptor or descriptor too short [ 579.888082][ T805] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 579.923204][ T805] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 579.958072][ T805] usb 4-1: config 14 has no interface number 0 [ 579.991692][ T805] usb 4-1: config 14 has no interface number 1 [ 580.012106][ T805] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 580.053862][ T805] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 580.123796][ T805] usb 4-1: config 14 interface 57 has no altsetting 0 [ 580.148911][ T805] usb 4-1: config 14 interface 228 has no altsetting 0 [ 580.181379][ T805] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 580.214488][ T805] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.248639][ T805] usb 4-1: Product: syz [ 580.274203][ T805] usb 4-1: Manufacturer: syz [ 580.300584][ T805] usb 4-1: SerialNumber: syz [ 580.795986][ T805] legousbtower 4-1:14.57: interrupt endpoints not found [ 580.946585][T13010] wlan0 speed is unknown, defaulting to 1000 [ 581.002231][ T805] legousbtower 4-1:14.228: interrupt endpoints not found [ 581.137318][T13016] wlan0 speed is unknown, defaulting to 1000 [ 581.714287][T13034] overlayfs: missing 'lowerdir' [ 581.891290][ T5724] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 581.899642][ C0] raw-gadget.1 gadget.1: ignoring, device is not running [ 582.031280][ T5724] usb 2-1: device descriptor read/64, error -32 [ 582.271824][ T5724] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 582.442071][ T5724] usb 2-1: Using ep0 maxpacket: 32 [ 582.479295][ T5724] usb 2-1: unable to get BOS descriptor or descriptor too short [ 582.502038][ T5724] usb 2-1: config 14 has an invalid interface number: 57 but max is 1 [ 582.522060][ T5724] usb 2-1: config 14 has an invalid interface number: 228 but max is 1 [ 582.538203][ T5724] usb 2-1: config 14 has no interface number 0 [ 582.546621][ T5724] usb 2-1: config 14 has no interface number 1 [ 582.553176][ T5724] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 582.564177][ T5724] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 582.578279][ T5724] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 582.624717][ T5724] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 582.654084][ T5701] usb 4-1: USB disconnect, device number 16 [ 582.679786][ T5724] usb 2-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 582.727966][ T5724] usb 2-1: config 14 interface 57 has no altsetting 0 [ 582.737569][ T5724] usb 2-1: config 14 interface 228 has no altsetting 0 [ 582.749876][ T5724] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 582.764053][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 582.778570][ T5724] usb 2-1: Product: syz [ 582.784114][ T5724] usb 2-1: Manufacturer: syz [ 582.788843][ T5724] usb 2-1: SerialNumber: syz [ 582.912786][ T805] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 583.061278][ T5701] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 583.083383][ T805] usb 3-1: Using ep0 maxpacket: 32 [ 583.094598][ T805] usb 3-1: unable to get BOS descriptor or descriptor too short [ 583.110919][ T805] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 583.128163][ T805] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 583.153666][ T805] usb 3-1: config 14 has no interface number 0 [ 583.166520][ T805] usb 3-1: config 14 has no interface number 1 [ 583.176511][ T805] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 583.206723][ T805] usb 3-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 583.214799][ T5724] legousbtower 2-1:14.57: interrupt endpoints not found [ 583.229926][ T805] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 583.234394][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 583.269192][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 583.294419][ T805] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 583.296524][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 583.326119][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.329094][ T805] usb 3-1: config 14 interface 57 has no altsetting 0 [ 583.345672][ T5701] usb 4-1: Product: syz [ 583.351118][ T5701] usb 4-1: Manufacturer: syz [ 583.359433][ T5701] usb 4-1: SerialNumber: syz [ 583.381682][ T805] usb 3-1: config 14 interface 228 has no altsetting 0 [ 583.409094][ T805] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 583.419729][ T5724] legousbtower 2-1:14.228: interrupt endpoints not found [ 583.454336][ T805] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 583.489606][ T805] usb 3-1: Product: syz [ 583.499171][ T805] usb 3-1: Manufacturer: syz [ 583.513912][ T805] usb 3-1: SerialNumber: syz [ 583.612720][ T5701] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 583.665148][ T5701] usb 4-1: USB disconnect, device number 17 [ 583.744834][ T805] legousbtower 3-1:14.57: interrupt endpoints not found [ 583.761382][ T805] legousbtower 3-1:14.228: interrupt endpoints not found [ 583.795113][ T805] usb 3-1: USB disconnect, device number 14 [ 584.151508][ T5701] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 584.176872][T13073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1966'. [ 584.323044][ T5701] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 584.354607][ T5701] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 584.397724][ T5701] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 584.421262][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.444685][ T5701] usb 4-1: Product: syz [ 584.457633][ T5701] usb 4-1: Manufacturer: syz [ 584.479959][ T5701] usb 4-1: SerialNumber: syz [ 584.718943][ T5701] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 584.766000][ T5701] usb 4-1: USB disconnect, device number 18 [ 585.124963][ T5701] usb 2-1: USB disconnect, device number 15 [ 585.397020][T13079] kvm_pr_unimpl_wrmsr: 59 callbacks suppressed [ 585.397041][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080 [ 585.429749][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000 [ 585.465298][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 585.492223][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 585.507563][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 585.537248][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 585.573704][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 585.591382][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 585.658173][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000 [ 585.695971][T13079] kvm: kvm [13078]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 586.045366][T13107] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 586.054146][T13107] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 586.349541][ T30] audit: type=1400 audit(1785191771.207:367): avc: denied { write } for pid=13110 comm="syz.0.1977" path="socket:[91896]" dev="sockfs" ino=91896 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 586.946512][T13118] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1978'. [ 587.046186][T13117] wlan0 speed is unknown, defaulting to 1000 [ 587.092986][T13123] wlan0 speed is unknown, defaulting to 1000 [ 588.975315][T13161] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1987'. [ 589.053587][T13158] wlan0 speed is unknown, defaulting to 1000 [ 589.316301][ T30] audit: type=1400 audit(1785191774.177:368): avc: denied { remount } for pid=13167 comm="syz.0.1991" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 590.508796][ T805] usb 5-1: new high-speed USB device number 20 using dummy_hcd [ 590.661241][ T805] usb 5-1: Using ep0 maxpacket: 16 [ 590.669187][ T805] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 590.681001][ T805] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 590.693986][ T805] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 590.703164][ T805] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 590.711183][ T805] usb 5-1: Product: syz [ 590.715404][ T805] usb 5-1: Manufacturer: syz [ 590.719992][ T805] usb 5-1: SerialNumber: syz [ 590.727003][ T805] usb 5-1: config 0 descriptor?? [ 590.735883][ T805] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 590.745205][ T805] em28xx 5-1:0.0: Audio interface 0 found (Vendor Class) [ 590.752485][ T5708] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 590.914596][ T5708] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 590.923769][ T5708] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.944671][ T5708] usb 3-1: config 0 descriptor?? [ 590.959536][ T5708] cp210x 3-1:0.0: cp210x converter detected [ 591.091264][ T5701] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 591.163491][ T5708] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 591.171122][ T5708] cp210x 3-1:0.0: querying part number failed [ 591.186062][ T5708] usb 3-1: cp210x converter now attached to ttyUSB0 [ 591.241248][ T5701] usb 4-1: Using ep0 maxpacket: 32 [ 591.248023][ T5701] usb 4-1: unable to get BOS descriptor or descriptor too short [ 591.259089][ T5701] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 591.267377][ T5701] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 591.275808][ T5701] usb 4-1: config 14 has no interface number 0 [ 591.284285][ T5701] usb 4-1: config 14 has no interface number 1 [ 591.290485][ T5701] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 591.301415][ T5701] usb 4-1: config 14 interface 228 altsetting 5 has an invalid endpoint descriptor of length 5, skipping [ 591.312909][ T5701] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 591.324318][ T5701] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 591.337521][ T5701] usb 4-1: config 14 interface 57 has no altsetting 0 [ 591.344726][ T5701] usb 4-1: config 14 interface 228 has no altsetting 0 [ 591.352557][ T805] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 591.353714][ T5701] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 591.359809][ T805] em28xx 5-1:0.0: Config register raw data: 0xfffffffb [ 591.367694][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.383326][ T5701] usb 4-1: Product: syz [ 591.387525][ T5701] usb 4-1: Manufacturer: syz [ 591.394569][ T5701] usb 4-1: SerialNumber: syz [ 591.481252][ T5724] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 591.631254][ T5724] usb 1-1: Using ep0 maxpacket: 16 [ 591.638031][ T5724] usb 1-1: config 0 has no interfaces? [ 591.645533][ T5724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 591.654682][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 591.662720][ T5724] usb 1-1: Product: syz [ 591.666902][ T5724] usb 1-1: Manufacturer: syz [ 591.671539][ T5724] usb 1-1: SerialNumber: syz [ 591.678531][ T5724] usb 1-1: config 0 descriptor?? [ 591.813701][ T5701] legousbtower 4-1:14.57: interrupt endpoints not found [ 591.994379][ T805] em28xx 5-1:0.0: Unknown AC97 audio processor detected! [ 592.003977][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 592.010790][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 592.018148][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 592.019016][ T5701] legousbtower 4-1:14.228: interrupt endpoints not found [ 592.025603][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 592.042369][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 592.250701][ C1] raw-gadget.0 gadget.4: ignoring, device is not running [ 592.258381][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 2 [ 592.264784][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 4 [ 592.271135][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 6 [ 592.277549][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 54 [ 592.284087][ T805] em28xx 5-1:0.0: couldn't setup AC97 register 56 [ 592.295647][ T805] usb 5-1: USB disconnect, device number 20 [ 593.513020][ T805] usb 3-1: USB disconnect, device number 15 [ 593.527853][ T805] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 593.549385][ T805] cp210x 3-1:0.0: device disconnected [ 593.645439][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 593.711974][T13241] nvme_fabrics: missing parameter 'transport=%s' [ 593.723169][T13241] nvme_fabrics: missing parameter 'nqn=%s' [ 593.885237][ T805] usb 4-1: USB disconnect, device number 19 [ 594.171469][ T5708] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 594.247039][T13255] wlan0 speed is unknown, defaulting to 1000 [ 594.306499][ T5701] usb 1-1: USB disconnect, device number 21 [ 594.340281][ T5708] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 594.369210][ T5708] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 594.388863][ T5708] usb 5-1: config 0 descriptor?? [ 594.411539][ T5708] cp210x 5-1:0.0: cp210x converter detected [ 594.625345][ T5708] cp210x 5-1:0.0: failed to get vendor val 0x370b size 1: -121 [ 594.653870][ T5708] cp210x 5-1:0.0: querying part number failed [ 594.694298][ T5708] usb 5-1: cp210x converter now attached to ttyUSB0 [ 595.326638][T13281] wlan0 speed is unknown, defaulting to 1000 [ 595.342590][ T5701] usb 4-1: new full-speed USB device number 20 using dummy_hcd [ 595.363012][T13284] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2022'. [ 595.522696][ T5701] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0 [ 595.537785][ T5701] usb 4-1: config 0 interface 0 has no altsetting 0 [ 595.544544][ T5724] usb 3-1: new full-speed USB device number 16 using dummy_hcd [ 595.557134][ T5701] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.573166][ T5701] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.588094][ T5701] usb 4-1: Product: syz [ 595.595745][ T5701] usb 4-1: Manufacturer: syz [ 595.604370][ T5701] usb 4-1: SerialNumber: syz [ 595.616760][ T5701] usb 4-1: config 0 descriptor?? [ 595.634513][ T5701] usb 4-1: selecting invalid altsetting 0 [ 595.722844][ T5724] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 595.758969][ T5724] usb 3-1: config 0 interface 0 has no altsetting 0 [ 595.768904][ T5724] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.778327][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.787377][ T5724] usb 3-1: Product: syz [ 595.795734][ T5724] usb 3-1: Manufacturer: syz [ 595.803016][ T5724] usb 3-1: SerialNumber: syz [ 595.815624][ T5724] usb 3-1: config 0 descriptor?? [ 595.823724][T13283] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 595.867222][ T5724] usb 3-1: selecting invalid altsetting 0 [ 595.922108][ T5708] usb 4-1: USB disconnect, device number 20 [ 596.132512][ T805] usb 3-1: USB disconnect, device number 16 [ 596.591140][T13294] wlan0 speed is unknown, defaulting to 1000 [ 596.940867][ T5708] usb 5-1: USB disconnect, device number 21 [ 596.987735][ T5708] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 597.016028][ T5708] cp210x 5-1:0.0: device disconnected [ 597.739688][T13327] wlan0 speed is unknown, defaulting to 1000 [ 597.965918][ T5708] usb 1-1: new full-speed USB device number 22 using dummy_hcd [ 598.086071][ T30] audit: type=1400 audit(1785191782.947:369): avc: denied { setopt } for pid=13343 comm="syz.3.2042" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 598.153877][ T5708] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64 [ 598.168186][ T5708] usb 1-1: config 0 interface 0 has no altsetting 0 [ 598.210480][ T5708] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 598.249275][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 598.272146][T13352] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2043'. [ 598.274548][ T5708] usb 1-1: Product: syz [ 598.323822][ T5708] usb 1-1: Manufacturer: syz [ 598.336063][ T5708] usb 1-1: SerialNumber: syz [ 598.362087][ T5708] usb 1-1: config 0 descriptor?? [ 598.385710][T13351] wlan0 speed is unknown, defaulting to 1000 [ 598.397061][T13333] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 598.416378][ T5708] usb 1-1: selecting invalid altsetting 0 [ 598.429015][T13349] wlan0 speed is unknown, defaulting to 1000 [ 598.759974][ T5724] usb 1-1: USB disconnect, device number 22 [ 598.765945][ C0] usb 1-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs [ 598.774859][ C0] dummy_hcd dummy_hcd.0: timer fired with no URBs pending? [ 598.783566][T13333] usb 1-1: cannot submit urb 0, error -19: no device [ 598.792135][ T5701] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 598.812079][T13333] usb 1-1: cannot submit urb 0, error -19: no device [ 598.961896][ T5701] usb 4-1: Using ep0 maxpacket: 16 [ 598.978900][ T5701] usb 4-1: config index 0 descriptor too short (expected 65, got 36) [ 598.988937][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 599.021740][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 599.038367][ T5701] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 599.075430][ T5701] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 599.104346][ T5701] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 599.147797][T13364] wlan0 speed is unknown, defaulting to 1000 [ 599.157864][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 599.184393][T13370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2048'. [ 599.191842][ T5701] usb 4-1: config 0 descriptor?? [ 599.199809][T13357] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 599.240139][ T5701] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input8 [ 599.347769][T13367] wlan0 speed is unknown, defaulting to 1000 [ 599.507745][ T5701] usb 4-1: USB disconnect, device number 21 [ 600.858965][T13399] wlan0 speed is unknown, defaulting to 1000 [ 601.495283][T13419] wlan0 speed is unknown, defaulting to 1000 [ 601.518038][T13423] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2060'. [ 603.454836][T13457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2064'. [ 603.563731][T13439] wlan0 speed is unknown, defaulting to 1000 [ 604.798944][T13477] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2072'. [ 604.982698][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 605.140271][T13484] nvme_fabrics: missing parameter 'transport=%s' [ 605.155461][T13484] nvme_fabrics: missing parameter 'nqn=%s' [ 605.208839][T13468] wlan0 speed is unknown, defaulting to 1000 [ 608.088949][T13535] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 608.132214][T13535] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 608.545149][T13533] wlan0 speed is unknown, defaulting to 1000 [ 611.685087][ T5617] udevd[5617]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 612.196060][T13595] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 612.204834][T13595] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 612.598882][T13602] wlan0 speed is unknown, defaulting to 1000 [ 612.662788][T13596] wlan0 speed is unknown, defaulting to 1000 [ 612.741293][ T805] usb 2-1: new full-speed USB device number 16 using dummy_hcd [ 612.892915][ T805] usb 2-1: config 0 has an invalid interface number: 255 but max is 0 [ 612.921811][ T805] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 612.963946][ T805] usb 2-1: config 0 has no interface number 0 [ 612.997939][ T805] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 613.021993][ T805] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 613.038392][ T30] audit: type=1400 audit(1785191797.897:370): avc: denied { cmd } for pid=13606 comm="syz.0.2108" path="socket:[97923]" dev="sockfs" ino=97923 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 613.065560][ T805] usb 2-1: Product: syz [ 613.078135][ T805] usb 2-1: Manufacturer: syz [ 613.091398][ T805] usb 2-1: SerialNumber: syz [ 613.108263][ T805] usb 2-1: config 0 descriptor?? [ 613.375900][ T5701] usb 2-1: USB disconnect, device number 16 [ 614.191258][ T5701] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 614.368283][ T5701] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 614.380985][T13639] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2113'. [ 614.412803][ T5701] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.437842][ T5701] usb 4-1: config 0 descriptor?? [ 614.455312][ T5701] cp210x 4-1:0.0: cp210x converter detected [ 614.516586][T13625] wlan0 speed is unknown, defaulting to 1000 [ 614.688292][ T5701] usb 4-1: cp210x converter now attached to ttyUSB0 [ 615.453005][T13652] wlan0 speed is unknown, defaulting to 1000 [ 617.301281][ T5708] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 617.382541][ T5811] usb 4-1: USB disconnect, device number 22 [ 617.428000][ T5811] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 617.459979][ T5811] cp210x 4-1:0.0: device disconnected [ 617.524238][ T5708] usb 1-1: Dual-Role OTG device on HNP port [ 617.540707][ T5708] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 617.557621][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 617.594796][ T5708] gspca_main: spca501-2.14.0 probing 0000:0000 [ 617.611294][ T5708] gspca_spca501: reg write: error -32 [ 617.616920][ T5708] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 617.632282][ T5708] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 617.702054][ T5701] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 617.901222][ T5701] usb 5-1: Using ep0 maxpacket: 16 [ 617.930953][ T5701] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 618.002376][ T5701] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 618.082557][ T5701] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 618.137930][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 618.182165][ T5701] usb 5-1: Product: syz [ 618.199234][ T5701] usb 5-1: Manufacturer: syz [ 618.227925][ T5701] usb 5-1: SerialNumber: syz [ 618.258904][ T5701] usb 5-1: config 0 descriptor?? [ 619.251245][ T5701] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 619.421257][ T5701] usb 2-1: Using ep0 maxpacket: 32 [ 619.464939][ T5701] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 619.497182][ T5701] usb 2-1: config 0 interface 0 altsetting 2 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 620.483910][ T5701] usb 2-1: config 0 interface 0 has no altsetting 0 [ 620.493161][ T5701] usb 2-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 620.638345][ T5708] usb 5-1: USB disconnect, device number 22 [ 621.090259][ T5701] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 621.099768][ T5701] usb 2-1: Product: syz [ 621.104373][ T5701] usb 2-1: Manufacturer: syz [ 621.109022][ T5701] usb 2-1: SerialNumber: syz [ 621.117577][ T5701] usb 2-1: config 0 descriptor?? [ 621.131500][ T5701] gs_usb 2-1:0.0: Required endpoints not found [ 622.408142][ T5708] usb 2-1: USB disconnect, device number 17 [ 622.620782][T13769] wlan0 speed is unknown, defaulting to 1000 [ 624.033890][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.040288][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 624.590618][ T5811] usb 1-1: USB disconnect, device number 23 [ 625.778281][T13809] wlan0 speed is unknown, defaulting to 1000 [ 626.665571][ T5708] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 626.870395][ T5708] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 626.925489][ T5708] usb 4-1: config 2 has no interface number 0 [ 627.002581][ T5708] usb 4-1: config 2 interface 43 has no altsetting 0 [ 627.047000][ T5708] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 627.081275][ T5708] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 627.117219][ T5708] usb 4-1: Product: syz [ 627.136977][ T5708] usb 4-1: Manufacturer: syz [ 627.147037][ T5708] usb 4-1: SerialNumber: syz [ 627.405448][ T5708] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 627.422628][ T5708] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 627.477863][ T5708] usb 4-1: USB disconnect, device number 23 [ 627.981273][ T5708] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 628.004479][T13863] UDC core: g1: couldn't find an available UDC or it's busy [ 628.341844][ T5708] usb 1-1: Using ep0 maxpacket: 32 [ 628.466492][ T5708] usb 1-1: unable to get BOS descriptor or descriptor too short [ 628.892909][ T5708] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 628.920994][ T5708] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 628.960891][ T5708] usb 1-1: config 14 has no interface number 0 [ 628.991332][ T5708] usb 1-1: config 14 has no interface number 1 [ 629.019360][ T5708] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64 [ 629.073852][ T5708] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 629.140950][ T5708] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 629.639448][ T5708] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 629.746067][ T5708] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 629.923801][ T5708] usb 1-1: config 14 interface 57 has no altsetting 0 [ 629.943060][ T5708] usb 1-1: config 14 interface 228 has no altsetting 0 [ 629.999452][ T5708] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 630.009473][ T5708] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 630.017724][ T5708] usb 1-1: Product: syz [ 630.025194][ T5708] usb 1-1: Manufacturer: syz [ 630.029826][ T5708] usb 1-1: SerialNumber: syz [ 630.331261][ T5811] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 630.488562][ T5708] legousbtower 1-1:14.57: interrupt endpoints not found [ 630.511641][ T5811] usb 4-1: config 0 has an invalid descriptor of length 187, skipping remainder of the config [ 630.528359][ T5811] usb 4-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 630.547241][ T5811] usb 4-1: config 0 interface 0 has no altsetting 0 [ 630.556906][ T5811] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 630.572121][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 630.588781][ T5811] usb 4-1: Product: syz [ 630.603347][ T5811] usb 4-1: Manufacturer: syz [ 630.610871][ T5811] usb 4-1: SerialNumber: syz [ 630.626409][ T5811] usb 4-1: config 0 descriptor?? [ 630.698708][ T5708] legousbtower 1-1:14.228: interrupt endpoints not found [ 630.753593][ T5701] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 630.918354][T13909] wlan0 speed is unknown, defaulting to 1000 [ 630.927190][ T5811] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 630.947133][ T5701] usb 5-1: config 2 has an invalid interface number: 43 but max is 0 [ 630.955887][ T5811] usb 4-1: USB disconnect, device number 24 [ 630.973394][ T5701] usb 5-1: config 2 has no interface number 0 [ 631.017138][ T8517] udevd[8517]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 631.032937][ T5701] usb 5-1: config 2 interface 43 has no altsetting 0 [ 631.057157][ T5701] usb 5-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 631.075541][ T5701] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 631.097792][ T5701] usb 5-1: Product: syz [ 631.106395][ T5701] usb 5-1: Manufacturer: syz [ 631.118344][ T5701] usb 5-1: SerialNumber: syz [ 631.346892][ T5701] ums-usbat 5-1:2.43: USB Mass Storage device detected [ 631.355688][ T5701] ums-usbat 5-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 631.398698][ T5701] usb 5-1: USB disconnect, device number 23 [ 631.409336][T13912] wlan0 speed is unknown, defaulting to 1000 [ 631.742222][T13922] UDC core: g1: couldn't find an available UDC or it's busy [ 633.658253][ T5811] usb 1-1: USB disconnect, device number 24 [ 634.135242][T13935] wlan0 speed is unknown, defaulting to 1000 [ 634.200239][ T5622] Bluetooth: hci4: unexpected event for opcode 0x0c25 [ 634.308640][T13944] nvme_fabrics: missing parameter 'transport=%s' [ 634.349879][T13944] nvme_fabrics: missing parameter 'nqn=%s' [ 636.311255][ T190] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 636.392747][ T5811] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 636.513964][ T190] usb 5-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 636.544343][ T190] usb 5-1: config 0 interface 0 has no altsetting 0 [ 636.567159][ T190] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 636.576843][ T190] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 636.600462][ T190] usb 5-1: Product: syz [ 636.610574][ T190] usb 5-1: Manufacturer: syz [ 636.623394][ T190] usb 5-1: SerialNumber: syz [ 636.627506][ T5811] usb 1-1: Dual-Role OTG device on HNP port [ 636.649783][ T5811] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 636.669566][ T190] usb 5-1: config 0 descriptor?? [ 636.693036][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.804588][ T5811] gspca_main: spca501-2.14.0 probing 0000:0000 [ 636.807718][ T190] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 636.839525][ T5811] gspca_spca501: reg write: error -32 [ 636.862292][ T5811] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 636.872536][T13977] syzkaller0: entered promiscuous mode [ 636.895241][ T5811] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 636.906855][T13977] syzkaller0: entered allmulticast mode [ 636.914069][ T8517] udevd[8517]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory [ 637.006863][ T5701] usb 5-1: USB disconnect, device number 24 [ 637.626628][ T5708] usb 1-1: USB disconnect, device number 25 [ 640.643524][ T5708] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 640.811243][ T5708] usb 2-1: Using ep0 maxpacket: 16 [ 640.818630][ T5708] usb 2-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 640.832662][ T5708] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 640.844827][ T5708] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 640.855481][ T5708] usb 2-1: Product: syz [ 640.859769][ T5708] usb 2-1: Manufacturer: syz [ 640.865734][ T5708] usb 2-1: SerialNumber: syz [ 640.877570][ T5708] usb 2-1: config 0 descriptor?? [ 642.876746][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 643.450437][ T5622] Bluetooth: hci3: unexpected event for opcode 0x0c25 [ 643.489630][ T190] usb 2-1: USB disconnect, device number 18 [ 643.580973][T14064] nvme_fabrics: missing parameter 'transport=%s' [ 643.595304][T14064] nvme_fabrics: missing parameter 'nqn=%s' [ 645.483137][ T5811] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 645.807159][ T190] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 645.969531][ T190] usb 2-1: config 0 has an invalid interface number: 219 but max is 0 [ 645.986504][ T190] usb 2-1: config 0 has 2 interfaces, different from the descriptor's value: 1 [ 646.052197][ T5811] usb 1-1: Dual-Role OTG device on HNP port [ 646.061723][ T5811] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 646.072431][ T5811] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 646.083516][ T190] usb 2-1: config 0 has no interface number 1 [ 646.099304][ T190] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 646.100921][ T5811] gspca_main: spca501-2.14.0 probing 0000:0000 [ 647.073608][ T190] usb 2-1: config 0 interface 0 has no altsetting 0 [ 647.080316][ T190] usb 2-1: config 0 interface 219 has no altsetting 0 [ 647.092292][ T190] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 647.101386][ T190] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 647.111088][ T190] usb 2-1: Product: syz [ 647.115307][ T190] usb 2-1: Manufacturer: syz [ 647.119897][ T190] usb 2-1: SerialNumber: syz [ 647.121393][ T5811] gspca_spca501: reg write: error -71 [ 647.492532][ T190] usb 2-1: config 0 descriptor?? [ 647.526610][ T5811] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 647.552306][ T5811] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 647.575692][ T190] usb 2-1: can't set config #0, error -71 [ 647.609572][ T5811] usb 1-1: Failed to set altset [ 647.621087][ T190] usb 2-1: USB disconnect, device number 19 [ 647.643000][ T5811] usb 1-1: 1:2: cannot create sequencer device [ 647.670109][ T5811] usb 1-1: string descriptor 0 read error: -71 [ 647.727281][ T5811] usb 1-1: Failed to set altset [ 647.829162][ T5811] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71 [ 647.877627][ T5811] usb 1-1: USB disconnect, device number 26 [ 647.935289][T14133] wlan0 speed is unknown, defaulting to 1000 [ 648.374197][T14134] wlan0 speed is unknown, defaulting to 1000 [ 648.470331][T14151] wlan0 speed is unknown, defaulting to 1000 [ 650.286652][ T5708] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 650.462214][ T5708] usb 1-1: Dual-Role OTG device on HNP port [ 650.486576][ T5708] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 650.508727][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 650.563376][ T5708] gspca_main: spca501-2.14.0 probing 0000:0000 [ 650.598727][ T5708] gspca_spca501: reg write: error -32 [ 650.621282][ T5811] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 650.636406][ T5708] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 650.658481][ T5708] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 650.811319][ T5811] usb 4-1: Using ep0 maxpacket: 32 [ 650.838857][ T5811] usb 4-1: unable to get BOS descriptor or descriptor too short [ 650.866186][ T5811] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 650.893824][ T5811] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 650.946492][ T5811] usb 4-1: config 14 has no interface number 0 [ 650.983007][ T5811] usb 4-1: config 14 has no interface number 1 [ 651.018593][ T5811] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 651.072693][ T5811] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 651.156827][ T5811] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 651.200247][ T5811] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 651.250213][ T5811] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 651.336211][ T5811] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 651.416796][ T5811] usb 4-1: config 14 interface 57 has no altsetting 0 [ 651.506958][ T5811] usb 4-1: config 14 interface 228 has no altsetting 0 [ 651.541964][ T5811] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 651.596725][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.627604][ T5811] usb 4-1: Product: syz [ 651.645806][ T5811] usb 4-1: Manufacturer: syz [ 651.669488][ T5811] usb 4-1: SerialNumber: syz [ 652.145639][ T5811] legousbtower 4-1:14.57: interrupt endpoints not found [ 652.377627][T14202] fuse: Unknown parameter 'grou00000000000000000000' [ 652.450431][ T5811] legousbtower 4-1:14.228: get version request failed: -71 [ 652.464677][ T5811] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 652.485839][ T5811] usb 4-1: USB disconnect, device number 25 [ 654.630401][T14232] wlan0 speed is unknown, defaulting to 1000 [ 654.878053][T14252] sch_tbf: burst 0 is lower than device syzkaller0 mtu (1514) ! [ 654.907687][T14254] syzkaller0: entered promiscuous mode [ 655.010608][ T5811] usb 1-1: USB disconnect, device number 27 [ 655.868472][T14254] syzkaller0: entered allmulticast mode [ 658.574222][T14276] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2276'. [ 659.008809][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2278'. [ 659.202249][ T190] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 659.228832][T14271] wlan0 speed is unknown, defaulting to 1000 [ 659.345611][T14278] wlan0 speed is unknown, defaulting to 1000 [ 659.373473][ T190] usb 1-1: Using ep0 maxpacket: 32 [ 659.396664][ T190] usb 1-1: unable to get BOS descriptor or descriptor too short [ 659.420410][ T190] usb 1-1: config 14 has an invalid interface number: 57 but max is 1 [ 659.458893][ T190] usb 1-1: config 14 has an invalid interface number: 228 but max is 1 [ 659.486464][ T190] usb 1-1: config 14 has no interface number 0 [ 659.503887][ T190] usb 1-1: config 14 has no interface number 1 [ 659.520576][ T190] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 659.549169][ T190] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 659.586148][ T190] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 659.627983][ T190] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 659.674267][ T190] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 659.731053][ T190] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 659.773587][ T190] usb 1-1: config 14 interface 57 has no altsetting 0 [ 659.794120][ T190] usb 1-1: config 14 interface 228 has no altsetting 0 [ 659.824216][ T190] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 659.852014][ T190] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.883873][ T190] usb 1-1: Product: syz [ 659.901878][ T190] usb 1-1: Manufacturer: syz [ 659.921264][ T190] usb 1-1: SerialNumber: syz [ 660.354126][T14303] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2282'. [ 660.381832][ T190] legousbtower 1-1:14.57: interrupt endpoints not found [ 660.480791][T14294] wlan0 speed is unknown, defaulting to 1000 [ 660.589003][ T190] legousbtower 1-1:14.228: get version request failed: -71 [ 660.611934][ T190] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71 [ 660.660265][ T190] usb 1-1: USB disconnect, device number 28 [ 660.919137][T14306] wlan0 speed is unknown, defaulting to 1000 [ 662.283690][ T8516] udevd[8516]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 665.756986][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 666.441968][ T190] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 666.611277][ T190] usb 3-1: Using ep0 maxpacket: 16 [ 666.635682][ T190] usb 3-1: config index 0 descriptor too short (expected 65, got 36) [ 666.654896][ T190] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config [ 666.721403][ T190] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 666.736518][T14346] wlan0 speed is unknown, defaulting to 1000 [ 666.742826][ T190] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 666.792316][ T190] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 666.834202][ T190] usb 3-1: rejected 1 configuration due to insufficient available bus power [ 666.849792][ T190] usb 3-1: no configuration chosen from 1 choice [ 667.373091][T14350] wlan0 speed is unknown, defaulting to 1000 [ 668.023423][T14381] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 668.032230][T14381] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 668.167267][ T190] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 668.228410][T14376] wlan0 speed is unknown, defaulting to 1000 [ 668.322738][ T190] usb 4-1: Using ep0 maxpacket: 32 [ 668.340043][ T190] usb 4-1: unable to get BOS descriptor or descriptor too short [ 668.359917][ T190] usb 4-1: config 14 has an invalid interface number: 57 but max is 1 [ 668.371962][ T190] usb 4-1: config 14 has an invalid interface number: 228 but max is 1 [ 668.391063][ T190] usb 4-1: config 14 has no interface number 0 [ 668.401907][ T190] usb 4-1: config 14 has no interface number 1 [ 668.414320][ T190] usb 4-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 668.435174][ T190] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 668.454121][ T190] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 668.480527][T14388] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2304'. [ 668.494064][ T190] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 668.515306][ T190] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 668.528407][T14387] wlan0 speed is unknown, defaulting to 1000 [ 668.537449][ T190] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 668.550681][ T190] usb 4-1: config 14 interface 57 has no altsetting 0 [ 668.557534][ T190] usb 4-1: config 14 interface 228 has no altsetting 0 [ 668.577289][ T190] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 668.609133][ T190] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.637034][ T190] usb 4-1: Product: syz [ 668.644437][ T190] usb 4-1: Manufacturer: syz [ 668.658388][ T190] usb 4-1: SerialNumber: syz [ 669.079455][ T5724] usb 3-1: USB disconnect, device number 17 [ 669.089573][ T190] legousbtower 4-1:14.57: interrupt endpoints not found [ 669.231607][ T5701] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 669.310275][ T190] legousbtower 4-1:14.228: get version request failed: -71 [ 669.326075][ T190] legousbtower 4-1:14.228: probe with driver legousbtower failed with error -71 [ 669.354928][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2307'. [ 669.369460][ T190] usb 4-1: USB disconnect, device number 26 [ 669.422793][ T5701] usb 1-1: config 2 has an invalid interface number: 43 but max is 0 [ 669.441059][ T5701] usb 1-1: config 2 has no interface number 0 [ 669.465493][ T5701] usb 1-1: config 2 interface 43 has no altsetting 0 [ 669.482063][ T5701] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 669.498243][ T5701] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.519925][ T5701] usb 1-1: Product: syz [ 669.538377][ T5701] usb 1-1: Manufacturer: syz [ 669.550047][ T5701] usb 1-1: SerialNumber: syz [ 669.568226][T14398] wlan0 speed is unknown, defaulting to 1000 [ 669.818862][ T5701] ums-usbat 1-1:2.43: USB Mass Storage device detected [ 669.838182][ T5701] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 669.933262][ T5701] usb 1-1: USB disconnect, device number 29 [ 670.245593][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2312'. [ 671.674763][ T5864] udevd[5864]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 671.767005][T14422] wlan0 speed is unknown, defaulting to 1000 [ 672.587343][T14451] nvme_fabrics: missing parameter 'transport=%s' [ 672.596327][T14451] nvme_fabrics: missing parameter 'nqn=%s' [ 672.604018][T14446] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2316'. [ 672.811097][T14459] wlan0 speed is unknown, defaulting to 1000 [ 675.501335][ T5708] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 675.741722][ T5708] usb 1-1: Dual-Role OTG device on HNP port [ 675.766832][ T5708] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02 [ 675.792557][ T5708] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 675.859687][ T5708] gspca_main: spca501-2.14.0 probing 0000:0000 [ 675.908969][ T5708] gspca_spca501: reg write: error -32 [ 675.930848][ T5708] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05 [ 675.972131][ T5811] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 675.996674][ T5708] spca501 1-1:1.0: probe with driver spca501 failed with error -22 [ 676.192951][ T5811] usb 4-1: config 2 has an invalid interface number: 43 but max is 0 [ 676.220887][ T5811] usb 4-1: config 2 has no interface number 0 [ 676.246703][ T5811] usb 4-1: config 2 interface 43 has no altsetting 0 [ 676.296657][ T5811] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05 [ 676.356419][ T5811] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 676.402308][ T5811] usb 4-1: Product: syz [ 676.415740][ T5811] usb 4-1: Manufacturer: syz [ 676.441027][ T5811] usb 4-1: SerialNumber: syz [ 676.766452][ T5811] ums-usbat 4-1:2.43: USB Mass Storage device detected [ 676.797000][ T5811] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1 [ 676.907098][ T5811] usb 4-1: USB disconnect, device number 27 [ 677.229331][T14507] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2331'. [ 677.279014][T14504] wlan0 speed is unknown, defaulting to 1000 [ 677.461475][ T5811] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 677.534333][T14511] fuse: Bad value for 'rootmode' [ 677.641398][ T5811] usb 3-1: Using ep0 maxpacket: 32 [ 677.659750][ T5811] usb 3-1: unable to get BOS descriptor or descriptor too short [ 677.677357][ T5811] usb 3-1: config 14 has an invalid interface number: 57 but max is 1 [ 677.690842][ T5811] usb 3-1: config 14 has an invalid interface number: 228 but max is 1 [ 677.726922][ T5811] usb 3-1: config 14 has no interface number 0 [ 677.744046][ T5811] usb 3-1: config 14 has no interface number 1 [ 677.773186][ T5811] usb 3-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping [ 677.787431][ T5622] Bluetooth: hci1: unexpected event for opcode 0x3125 [ 677.794615][ T5811] usb 3-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81 [ 677.813028][ T5811] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10 [ 677.824820][ T5811] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024 [ 677.838095][ T5811] usb 3-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10 [ 677.949783][ T5811] usb 3-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3 [ 677.963462][ T5811] usb 3-1: config 14 interface 57 has no altsetting 0 [ 677.970332][ T5811] usb 3-1: config 14 interface 228 has no altsetting 0 [ 677.983607][ T5811] usb 3-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13 [ 677.992974][ T5811] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 678.001048][ T5811] usb 3-1: Product: syz [ 678.010690][ T5811] usb 3-1: Manufacturer: syz [ 678.115303][ T805] usb 1-1: USB disconnect, device number 30 [ 678.991014][T14525] nvme_fabrics: missing parameter 'transport=%s' [ 679.004254][T14525] nvme_fabrics: missing parameter 'nqn=%s' [ 679.004278][ T5811] usb 3-1: SerialNumber: syz [ 679.744417][ T5622] Bluetooth: hci2: unexpected event for opcode 0x0c25 [ 679.868563][ T5811] legousbtower 3-1:14.57: interrupt endpoints not found [ 679.890324][T14541] nvme_fabrics: missing parameter 'transport=%s' [ 679.899178][T14541] nvme_fabrics: missing parameter 'nqn=%s' [ 680.159880][ T5811] legousbtower 3-1:14.228: get version request failed: -71 [ 680.176229][ T5811] legousbtower 3-1:14.228: probe with driver legousbtower failed with error -71 [ 680.197790][ T5811] usb 3-1: USB disconnect, device number 18 [ 680.341300][ T5622] Bluetooth: hci3: unexpected event for opcode 0x3125 [ 680.397981][T14555] nvme_fabrics: missing parameter 'transport=%s' [ 680.435372][T14555] nvme_fabrics: missing parameter 'nqn=%s' [ 682.128830][ T5611] udevd[5611]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 682.733282][T14574] wlan0 speed is unknown, defaulting to 1000 [ 683.017125][T14563] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2344'. [ 683.785663][T14577] wlan0 speed is unknown, defaulting to 1000 [ 685.604142][ T1313] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.610537][ T1313] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.850487][T14653] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2363'. [ 688.018395][T14641] wlan0 speed is unknown, defaulting to 1000 [ 688.167670][T14645] wlan0 speed is unknown, defaulting to 1000 [ 688.487738][T14668] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2367'. [ 688.509007][T14669] syzkaller0: entered promiscuous mode [ 688.524998][T14669] syzkaller0: entered allmulticast mode [ 688.598230][T14661] wlan0 speed is unknown, defaulting to 1000 [ 689.306966][ T190] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 689.319997][T14685] wlan0 speed is unknown, defaulting to 1000 [ 689.471810][ T190] usb 1-1: Using ep0 maxpacket: 16 [ 689.497774][ T190] usb 1-1: config index 0 descriptor too short (expected 65, got 36) [ 689.516570][ T190] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 689.565088][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 689.611340][ T190] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 689.642769][ T190] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 689.657319][ T190] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 689.666502][ T190] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 689.677099][ T190] usb 1-1: config 0 descriptor?? [ 689.683278][T14687] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 689.696047][ T190] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input9 [ 689.713597][ C1] ================================================================== [ 689.721678][ C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0 [ 689.729300][ C1] Read of size 1 at addr ffff88805bb9ed12 by task rcu_exp_gp_kthr/18 [ 689.737333][ C1] [ 689.739639][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Tainted: G L syzkaller #0 PREEMPT(full) [ 689.739658][ C1] Tainted: [L]=SOFTLOCKUP [ 689.739662][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 689.739675][ C1] Call Trace: [ 689.739681][ C1] [ 689.739687][ C1] dump_stack_lvl+0x100/0x190 [ 689.739706][ C1] print_report+0x13d/0x4b0 [ 689.739725][ C1] ? __virt_addr_valid+0x239/0x430 [ 689.739742][ C1] ? find_endpoint+0x2a3/0x2c0 [ 689.739757][ C1] kasan_report+0xdf/0x1c0 [ 689.739774][ C1] ? find_endpoint+0x2a3/0x2c0 [ 689.739791][ C1] find_endpoint+0x2a3/0x2c0 [ 689.739807][ C1] dummy_timer+0x500/0x36f0 [ 689.739827][ C1] ? do_raw_spin_lock+0x128/0x260 [ 689.739845][ C1] ? find_held_lock+0x2b/0x80 [ 689.739863][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 689.739881][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 689.739898][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 689.739911][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 689.739927][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 689.739944][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 689.739962][ C1] ? rcu_is_watching+0x12/0xc0 [ 689.739981][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 689.739993][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 689.740011][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 689.740033][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 689.740052][ C1] handle_softirqs+0x1ea/0x9b0 [ 689.740069][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 689.740085][ C1] ? _raw_spin_unlock+0x28/0x50 [ 689.740103][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 689.740116][ C1] __irq_exit_rcu+0x162/0x210 [ 689.740132][ C1] irq_exit_rcu+0x9/0x30 [ 689.740147][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 689.740161][ C1] [ 689.740165][ C1] [ 689.740170][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 689.740184][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 689.740198][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f0 27 f6 48 89 df e8 de 3f 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 4f 17 f6 65 8b 05 ee 38 a6 08 85 c0 74 16 5b [ 689.740213][ C1] RSP: 0018:ffffc90000177998 EFLAGS: 00000246 [ 689.740224][ C1] RAX: 0000000000000002 RBX: ffffffff9b8faec0 RCX: 0000000000000000 [ 689.740233][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 689.740241][ C1] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000 [ 689.740248][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 689.740256][ C1] R13: ffffc90000177bf0 R14: ffffffff8bd2e2c0 R15: 1ffff9200002ef3a [ 689.740269][ C1] debug_object_assert_init+0x1c4/0x310 [ 689.740287][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 689.740305][ C1] ? rcu_is_watching+0x12/0xc0 [ 689.740323][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 689.740336][ C1] __mod_timer+0xad/0xca0 [ 689.740351][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 689.740367][ C1] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 689.740381][ C1] ? __pfx___mod_timer+0x10/0x10 [ 689.740397][ C1] ? __lock_acquire+0x49f/0x1a40 [ 689.740412][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 689.740429][ C1] add_timer+0x62/0x90 [ 689.740443][ C1] schedule_timeout+0x122/0x280 [ 689.740461][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 689.740478][ C1] ? do_raw_spin_lock+0x128/0x260 [ 689.740495][ C1] ? __pfx_process_timeout+0x10/0x10 [ 689.740509][ C1] ? rcu_is_watching+0x12/0xc0 [ 689.740526][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 689.740538][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 689.740552][ C1] rcu_exp_wait_wake+0x290/0x490 [ 689.740568][ C1] ? find_held_lock+0x2b/0x80 [ 689.740586][ C1] ? sync_rcu_exp_select_cpus+0x3ca/0xac0 [ 689.740599][ C1] ? rcu_is_watching+0x12/0xc0 [ 689.740626][ C1] ? __pfx_rcu_exp_wait_wake+0x10/0x10 [ 689.740640][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 689.740656][ C1] ? sync_rcu_exp_select_cpus+0x3ca/0xac0 [ 689.740670][ C1] ? rcu_is_watching+0x12/0xc0 [ 689.740689][ C1] kthread_worker_fn+0x300/0xbe0 [ 689.740709][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 689.740725][ C1] ? kthread+0x13a/0x450 [ 689.740736][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 689.740754][ C1] kthread+0x370/0x450 [ 689.740765][ C1] ? __pfx_kthread+0x10/0x10 [ 689.740777][ C1] ret_from_fork+0x72b/0xd50 [ 689.740794][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 689.740812][ C1] ? __switch_to+0x800/0x10f0 [ 689.740824][ C1] ? __pfx_kthread+0x10/0x10 [ 689.740836][ C1] ret_from_fork_asm+0x1a/0x30 [ 689.740857][ C1] [ 689.740861][ C1] [ 690.187419][ C1] Allocated by task 14470: [ 690.191810][ C1] kasan_save_stack+0x30/0x50 [ 690.196466][ C1] kasan_save_track+0x14/0x30 [ 690.201115][ C1] __kasan_kmalloc+0xaa/0xb0 [ 690.205934][ C1] __kmalloc_noprof+0x322/0x820 [ 690.210755][ C1] usb_copy_descriptors+0xcd/0x320 [ 690.215836][ C1] f_midi2_bind+0x1dad/0x2770 [ 690.220480][ C1] usb_add_function+0x219/0x890 [ 690.225300][ C1] configfs_composite_bind+0xd83/0x1960 [ 690.230815][ C1] gadget_bind_driver+0x28c/0xbf0 [ 690.235812][ C1] really_probe+0x241/0xa60 [ 690.240291][ C1] __driver_probe_device+0x20e/0x450 [ 690.245546][ C1] driver_probe_device+0x4a/0x140 [ 690.250542][ C1] __driver_attach+0x21f/0x5b0 [ 690.255273][ C1] bus_for_each_dev+0x13e/0x1d0 [ 690.260089][ C1] bus_add_driver+0x305/0x5b0 [ 690.264743][ C1] driver_register+0x1e2/0x360 [ 690.269477][ C1] usb_gadget_register_driver_owner+0x132/0x210 [ 690.275691][ C1] gadget_dev_desc_UDC_store+0x1b0/0x2e0 [ 690.281294][ C1] configfs_write_iter+0x302/0x4e0 [ 690.286375][ C1] vfs_write+0x6ac/0x1050 [ 690.290677][ C1] ksys_write+0x12a/0x250 [ 690.294980][ C1] do_syscall_64+0x115/0x870 [ 690.299539][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.305405][ C1] [ 690.307697][ C1] Freed by task 14531: [ 690.311728][ C1] kasan_save_stack+0x30/0x50 [ 690.316374][ C1] kasan_save_track+0x14/0x30 [ 690.321021][ C1] kasan_save_free_info+0x3b/0x70 [ 690.326018][ C1] __kasan_slab_free+0x5f/0x80 [ 690.330749][ C1] kfree+0x22b/0x6c0 [ 690.334616][ C1] usb_free_all_descriptors+0x81/0x1a0 [ 690.340045][ C1] purge_configs_funcs+0x285/0x510 [ 690.345125][ C1] configfs_composite_unbind+0xae/0x210 [ 690.350640][ C1] gadget_unbind_driver+0x20c/0x4f0 [ 690.355803][ C1] device_remove+0xcb/0x180 [ 690.360274][ C1] device_release_driver_internal+0x44e/0x620 [ 690.366315][ C1] driver_detach+0xd8/0x1b0 [ 690.370802][ C1] bus_remove_driver+0x13b/0x2e0 [ 690.375708][ C1] driver_unregister+0x76/0xb0 [ 690.380444][ C1] usb_gadget_unregister_driver+0x49/0x70 [ 690.386139][ C1] gadget_dev_desc_UDC_store+0x170/0x2e0 [ 690.391739][ C1] configfs_write_iter+0x302/0x4e0 [ 690.396819][ C1] vfs_write+0x6ac/0x1050 [ 690.401121][ C1] ksys_write+0x12a/0x250 [ 690.405424][ C1] do_syscall_64+0x115/0x870 [ 690.409992][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 690.415868][ C1] [ 690.418176][ C1] The buggy address belongs to the object at ffff88805bb9ec00 [ 690.418176][ C1] which belongs to the cache kmalloc-512 of size 512 [ 690.432210][ C1] The buggy address is located 274 bytes inside of [ 690.432210][ C1] freed 512-byte region [ffff88805bb9ec00, ffff88805bb9ee00) [ 690.445977][ C1] [ 690.448274][ C1] The buggy address belongs to the physical page: [ 690.454650][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5bb9c [ 690.463381][ C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 690.471848][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 690.479364][ C1] page_type: f5(slab) [ 690.483315][ C1] raw: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122 [ 690.491869][ C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 690.500420][ C1] head: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122 [ 690.509058][ C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 690.517696][ C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff [ 690.526332][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 690.534964][ C1] page dumped because: kasan: bad access detected [ 690.541555][ C1] page_owner tracks the page as allocated [ 690.547236][ C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 14470, tgid 14467 (syz.4.2323), ts 674299615827, free_ts 669606611341 [ 690.568732][ C1] post_alloc_hook+0xfd/0x120 [ 690.573388][ C1] get_page_from_freelist+0xf48/0x3530 [ 690.578813][ C1] __alloc_frozen_pages_noprof+0x299/0x2dc0 [ 690.584674][ C1] new_slab+0xa2/0x640 [ 690.588710][ C1] refill_objects+0xe3/0x410 [ 690.593268][ C1] __pcs_replace_empty_main+0x376/0x680 [ 690.598791][ C1] __kmalloc_cache_noprof+0x479/0x6c0 [ 690.604144][ C1] snd_mixer_oss_build_test+0x7a/0x380 [ 690.609579][ C1] snd_mixer_oss_build_test_all+0x33c/0x6e0 [ 690.615445][ C1] snd_mixer_oss_build_input+0x139/0xd50 [ 690.621070][ C1] snd_mixer_oss_notify_handler+0x48d/0x990 [ 690.626938][ C1] snd_card_register+0x2af/0x760 [ 690.631862][ C1] f_midi2_bind+0x1198/0x2770 [ 690.636523][ C1] usb_add_function+0x219/0x890 [ 690.641354][ C1] configfs_composite_bind+0xd83/0x1960 [ 690.646878][ C1] gadget_bind_driver+0x28c/0xbf0 [ 690.651882][ C1] page last free pid 5616 tgid 5616 stack trace: [ 690.658176][ C1] __free_frozen_pages+0x79f/0x1090 [ 690.663349][ C1] qlist_free_all+0x47/0xf0 [ 690.667825][ C1] kasan_quarantine_reduce+0x1a0/0x1f0 [ 690.673267][ C1] __kasan_slab_alloc+0x69/0x90 [ 690.678091][ C1] __kmalloc_cache_node_noprof+0x27f/0x6c0 [ 690.683869][ C1] __get_vm_area_node+0x101/0x330 [ 690.688866][ C1] __vmalloc_node_range_noprof+0x228/0x1630 [ 690.694733][ C1] __vmalloc_node_noprof+0xad/0xf0 [ 690.699815][ C1] do_ipt_get_ctl+0x7e0/0xbf0 [ 690.704478][ C1] nf_getsockopt+0x7c/0xe0 [ 690.708866][ C1] ip_getsockopt+0x192/0x1e0 [ 690.713428][ C1] tcp_getsockopt+0xa1/0x110 [ 690.717992][ C1] do_sock_getsockopt+0x50a/0x6e0 [ 690.722991][ C1] __sys_getsockopt+0x148/0x260 [ 690.727811][ C1] __x64_sys_getsockopt+0xbd/0x160 [ 690.732892][ C1] do_syscall_64+0x115/0x870 [ 690.737454][ C1] [ 690.739748][ C1] Memory state around the buggy address: [ 690.745344][ C1] ffff88805bb9ec00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 690.753372][ C1] ffff88805bb9ec80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 690.761398][ C1] >ffff88805bb9ed00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 690.769425][ C1] ^ [ 690.773980][ C1] ffff88805bb9ed80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 690.782005][ C1] ffff88805bb9ee00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 690.790030][ C1] ================================================================== [ 690.798063][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 690.805227][ C1] CPU: 1 UID: 0 PID: 18 Comm: rcu_exp_gp_kthr Tainted: G L syzkaller #0 PREEMPT(full) [ 690.816309][ C1] Tainted: [L]=SOFTLOCKUP [ 690.820603][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 690.830632][ C1] Call Trace: [ 690.833884][ C1] [ 690.836701][ C1] dump_stack_lvl+0x100/0x190 [ 690.841352][ C1] vpanic+0x552/0x970 [ 690.845304][ C1] ? __pfx_vpanic+0x10/0x10 [ 690.849775][ C1] ? __pfx_vprintk_emit+0x10/0x10 [ 690.854778][ C1] ? find_endpoint+0x2a3/0x2c0 [ 690.859515][ C1] panic+0xd1/0xe0 [ 690.863210][ C1] ? __pfx_panic+0x10/0x10 [ 690.867595][ C1] ? end_report.part.0+0x23/0x90 [ 690.872505][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.877248][ C1] ? end_report.part.0+0x23/0x90 [ 690.882164][ C1] ? check_panic_on_warn+0x1f/0x90 [ 690.887246][ C1] check_panic_on_warn.cold+0x19/0x34 [ 690.892588][ C1] end_report.part.0+0x3a/0x90 [ 690.897326][ C1] kasan_report.cold+0xe/0x18 [ 690.901977][ C1] ? find_endpoint+0x2a3/0x2c0 [ 690.906714][ C1] find_endpoint+0x2a3/0x2c0 [ 690.911278][ C1] dummy_timer+0x500/0x36f0 [ 690.915760][ C1] ? do_raw_spin_lock+0x128/0x260 [ 690.920772][ C1] ? find_held_lock+0x2b/0x80 [ 690.925427][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 690.931033][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 690.936639][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 690.942416][ C1] ? debug_object_deactivate+0x2e4/0x3b0 [ 690.948023][ C1] ? __pfx_debug_object_deactivate+0x10/0x10 [ 690.953976][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 690.958890][ C1] ? rcu_is_watching+0x12/0xc0 [ 690.963628][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 690.969405][ C1] ? __pfx_dummy_timer+0x10/0x10 [ 690.974316][ C1] __hrtimer_run_queues+0x462/0x9c0 [ 690.979494][ C1] hrtimer_run_softirq+0x17d/0x2c0 [ 690.984581][ C1] handle_softirqs+0x1ea/0x9b0 [ 690.989319][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 690.994578][ C1] ? _raw_spin_unlock+0x28/0x50 [ 690.999417][ C1] ? __hrtimer_rearm_deferred+0x9b/0x720 [ 691.005021][ C1] __irq_exit_rcu+0x162/0x210 [ 691.009671][ C1] irq_exit_rcu+0x9/0x30 [ 691.013887][ C1] sysvec_apic_timer_interrupt+0xa3/0xc0 [ 691.019492][ C1] [ 691.022393][ C1] [ 691.025295][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 691.031246][ C1] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 691.037632][ C1] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 56 f0 27 f6 48 89 df e8 de 3f 28 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 a5 4f 17 f6 65 8b 05 ee 38 a6 08 85 c0 74 16 5b [ 691.057210][ C1] RSP: 0018:ffffc90000177998 EFLAGS: 00000246 [ 691.063248][ C1] RAX: 0000000000000002 RBX: ffffffff9b8faec0 RCX: 0000000000000000 [ 691.071198][ C1] RDX: 0000000000000000 RSI: ffffffff8e1a5b18 RDI: ffffffff8c401580 [ 691.079141][ C1] RBP: 0000000000000206 R08: 0000000000000001 R09: 0000000000000000 [ 691.087085][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 691.095027][ C1] R13: ffffc90000177bf0 R14: ffffffff8bd2e2c0 R15: 1ffff9200002ef3a [ 691.102976][ C1] debug_object_assert_init+0x1c4/0x310 [ 691.108500][ C1] ? __pfx_debug_object_assert_init+0x10/0x10 [ 691.114551][ C1] ? rcu_is_watching+0x12/0xc0 [ 691.119289][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 691.125067][ C1] __mod_timer+0xad/0xca0 [ 691.129371][ C1] ? __pfx___debug_object_init+0x10/0x10 [ 691.134975][ C1] ? __pv_queued_spin_lock_slowpath+0x284/0xc00 [ 691.141194][ C1] ? __pfx___mod_timer+0x10/0x10 [ 691.146105][ C1] ? __lock_acquire+0x49f/0x1a40 [ 691.151013][ C1] ? lockdep_init_map_type+0x5c/0x250 [ 691.156356][ C1] add_timer+0x62/0x90 [ 691.160397][ C1] schedule_timeout+0x122/0x280 [ 691.165224][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 691.170571][ C1] ? do_raw_spin_lock+0x128/0x260 [ 691.175572][ C1] ? __pfx_process_timeout+0x10/0x10 [ 691.180827][ C1] ? rcu_is_watching+0x12/0xc0 [ 691.185568][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 691.191342][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 691.196530][ C1] rcu_exp_wait_wake+0x290/0x490 [ 691.201444][ C1] ? find_held_lock+0x2b/0x80 [ 691.206096][ C1] ? sync_rcu_exp_select_cpus+0x3ca/0xac0 [ 691.211798][ C1] ? rcu_is_watching+0x12/0xc0 [ 691.216567][ C1] ? __pfx_rcu_exp_wait_wake+0x10/0x10 [ 691.222008][ C1] ? lockdep_hardirqs_on+0x78/0x100 [ 691.227186][ C1] ? sync_rcu_exp_select_cpus+0x3ca/0xac0 [ 691.232879][ C1] ? rcu_is_watching+0x12/0xc0 [ 691.237621][ C1] kthread_worker_fn+0x300/0xbe0 [ 691.242539][ C1] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 691.247798][ C1] ? kthread+0x13a/0x450 [ 691.252010][ C1] ? __pfx_kthread_worker_fn+0x10/0x10 [ 691.257464][ C1] kthread+0x370/0x450 [ 691.261510][ C1] ? __pfx_kthread+0x10/0x10 [ 691.266068][ C1] ret_from_fork+0x72b/0xd50 [ 691.270632][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 691.275719][ C1] ? __switch_to+0x800/0x10f0 [ 691.280368][ C1] ? __pfx_kthread+0x10/0x10 [ 691.284926][ C1] ret_from_fork_asm+0x1a/0x30 [ 691.289678][ C1] [ 692.350190][ C1] Shutting down cpus with NMI [ 692.355134][ C1] Kernel Offset: disabled [ 692.359436][ C1] Rebooting in 86400 seconds..