last executing test programs:

6.521410682s ago: executing program 3 (id=2116):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d93", 0xe6}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e", 0xc2}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

6.114881748s ago: executing program 3 (id=2119):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

5.387441852s ago: executing program 4 (id=2126):
keyctl$instantiate(0xc, 0x0, 0x0, 0x19, 0x0)
r0 = socket$kcm(0x29, 0x5, 0x0)
openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0)
write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef)
ioctl$int_in(r0, 0x5452, 0x0)
sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x20000818)
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x100000, 0x5691409, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x100000}}, 0x50)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x28a43, 0x0)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
close_range(r3, 0xffffffffffffffff, 0x0)

4.985405789s ago: executing program 4 (id=2128):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

4.956029336s ago: executing program 1 (id=2130):
sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000800)={0x14, 0x4, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}}, 0x14}, 0x1, 0x0, 0x0, 0x20008004}, 0x4000010)
socket$kcm(0x21, 0x2, 0x2)
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1, 0x4, 0x2, 0x7}, 0x50)
r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8003}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x89}]}}}, {0x3c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_MASK={0xc, 0x4, 0x0, 0x1, [@NFTA_DATA_VALUE={0x5, 0x1, 'n'}]}, @NFTA_BITWISE_XOR={0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0)
getpeername$netlink(r2, &(0x7f0000000340), &(0x7f0000000540)=0xc)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000008500"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x10000}, 0x28)
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
landlock_create_ruleset(&(0x7f0000000080)={0xc0d8, 0x1, 0x3}, 0x18, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014}, 0x48)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be521634", 0xc}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r7=>0x0})
sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.792882416s ago: executing program 1 (id=2131):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
fsopen(0x0, 0x0)
socket(0x11, 0x6, 0xc)

4.480826329s ago: executing program 3 (id=2133):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000000000040260933334000000000010902240001000000000904000001030100000921000000012201000905810308"], 0x0)
syz_usb_disconnect(r0)
write$char_usb(0xffffffffffffffff, &(0x7f0000000080)="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", 0x150)
r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc71f, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe8, 0xb, "", [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x7ffd, 0x0, 0x1, {0x22, 0x1e3}}, {{{0x9, 0x5, 0x81, 0x3, 0x38d707d343173689, 0x5, 0xa, 0x70}}}}}]}}]}}, 0x0)
syz_usb_control_io$uac3(0xffffffffffffffff, 0x0, &(0x7f0000000440)={0x44, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x20, 0x82, 0x1, "90"}, &(0x7f0000000300)=ANY=[@ANYBLOB="2083"], 0x0, 0x0})
syz_usb_control_io$cdc_ncm(0xffffffffffffffff, 0x0, &(0x7f0000000840)={0x44, 0x0, &(0x7f0000000340)={0x0, 0xa, 0x1, 0xc1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_connect(0x3, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x300, 0x9d, 0xbd, 0x45, 0x40, 0x10b9, 0x6000, 0xbe16, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x87, 0x9, 0x30, 0x7, "", [{{0x9, 0x4, 0x40, 0x19, 0x0, 0x3a, 0x92, 0xe0, 0x8}}]}}]}}, 0x0)
syz_usb_connect(0x2, 0x24, &(0x7f0000000400)=ANY=[@ANYBLOB="1201000095af324044060f8077c501020301090212000100000000090401"], 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000040)={0x24, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x371, {0x9}}}, &(0x7f0000000080)={0xffffffffffffffeb, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac2(0xffffffffffffffff, 0x0, 0x0)
syz_usb_disconnect(0xffffffffffffffff)
syz_usb_ep_write(r0, 0x81, 0x1, &(0x7f0000000300)='\x00')

4.001665332s ago: executing program 4 (id=2136):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2)
r3 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000008c0), 0x121202, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r4 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'tunl0\x00'})
r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x1a0)
r6 = fanotify_init(0x2, 0x8000)
fanotify_mark(r6, 0x105, 0x40001032, r5, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x40, 0x4)
read$FUSE(r6, &(0x7f0000002740)={0x2020}, 0x2020)
syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB="040e0605250c"], 0x9)
write$binfmt_elf32(r3, 0x0, 0x0)
ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000000)={0xf0f003, 0x2})
unshare(0x8040480)
fsopen(0x0, 0x0)
r7 = fsopen(&(0x7f0000000180)='ramfs\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0)
r8 = fsmount(r7, 0x1, 0x0)
fchdir(r8)
r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='freezer.state\x00', 0x275a, 0x0)
write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a)

3.636620811s ago: executing program 0 (id=2138):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.584982866s ago: executing program 2 (id=2139):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb09587", 0x4b}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

3.293723716s ago: executing program 1 (id=2140):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, 0x0, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x5)
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
fsopen(0x0, 0x0)
socket(0x11, 0x6, 0xc)

3.255820467s ago: executing program 2 (id=2141):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}], 0x40}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

3.130030633s ago: executing program 0 (id=2142):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0", 0x5e}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.758078853s ago: executing program 0 (id=2143):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1ab", 0x87, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x18}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x30, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f7", 0xab}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

2.438701735s ago: executing program 2 (id=2144):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x98}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

2.209898441s ago: executing program 0 (id=2145):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0xfffffffffffffea6, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x60}}, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = socket$vsock_stream(0x28, 0x1, 0x0)
getsockopt(r4, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

1.857081548s ago: executing program 2 (id=2146):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1ab", 0x87, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4", 0xcc}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f7", 0xab}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0)
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.530689174s ago: executing program 4 (id=2147):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x80}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r2=>0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = dup(r3)
syz_ublk_setup_queues(r4, r2, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

1.446416877s ago: executing program 2 (id=2148):
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000002c0)={0x1, r1})
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)
sendmmsg$unix(r3, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
ioctl$PTP_EXTTS_REQUEST(r4, 0x40103d02, 0x0)
sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

1.260958344s ago: executing program 1 (id=2149):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x42082, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2})
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r1)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r3=>0x0})
sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x4, 0x35dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x5, 0x1, 0x5, 0xd, 0xd9, 0x10}, {0x0, 0x2, 0x5, 0x3, 0x1}, 0x2, 0x5, 0x8d0}}, @TCA_TBF_BURST={0x8, 0x6, 0x10001}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x0, 0xb}, {0xffff, 0x6}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8, 0x1, 0x40}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240048e4}, 0x20004810)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast})
r4 = socket$kcm(0x11, 0x3, 0x0)
r5 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'})
setsockopt$sock_attach_bpf(r4, 0x107, 0xf, &(0x7f0000000600), 0x56)
sendmsg$kcm(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="27030200590214120600002fb96dbcf706e10500000086ddffff1144ee1611d4b8bf4a31accb", 0x26}], 0x1}, 0x0)

1.197337285s ago: executing program 0 (id=2150):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e", 0x64}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

1.015198734s ago: executing program 3 (id=2151):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796", 0x85, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f09", 0x7}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

818.285706ms ago: executing program 1 (id=2152):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c", 0xb7}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}], 0x4, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf8e}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

777.804994ms ago: executing program 0 (id=2153):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000000300)={{0x0, 0x49323de44ee88a26, 0x0, 0x49, 0x1, 0x7, 0x4, 0xe, 0x0, 0x0, 0x8, 0x2}, {0xf000, 0xdddd0000, 0x0, 0x5, 0xbb, 0x5, 0x38, 0x8, 0x5, 0xfd, 0xd9, 0x2}, {0xeeef0000, 0x2, 0xd, 0xe4, 0x3, 0xd, 0x6, 0x9, 0x0, 0x5, 0x42, 0xa}, {0x0, 0x8000000, 0xc, 0x9, 0x44, 0xcb, 0x5, 0x9, 0x40, 0x9, 0x1, 0x5}, {0xffff1000, 0x2000, 0xb, 0x7, 0xe, 0x2, 0x6, 0x8f, 0x1, 0xd, 0x5, 0x1}, {0x80a0001, 0x80a0000, 0xb, 0x5, 0x61, 0x18, 0x7, 0xfc, 0xc, 0x9, 0x6, 0x4}, {0x7002, 0xeeee0000, 0x1b, 0xff, 0xbc, 0x80, 0x1, 0x4, 0x5, 0x0, 0xbf, 0x9}, {0x8000000, 0x2000, 0xf, 0x3, 0x4, 0x6, 0x9, 0xfa, 0x7, 0xc6, 0x0, 0x81}, {0xf000, 0x3}, {0x2000, 0x8}, 0x14, 0x0, 0xeeee8000, 0x20, 0x0, 0x4801, 0x33339800, [0x9, 0x1ff, 0x86d, 0x8001]})
bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000340000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000108117980800000000000109024100010000000009040000020308000009210000010122290a0905", @ANYRES64], 0x0)
r4 = syz_open_dev$evdev(0x0, 0x40, 0x8000)
ioctl$EVIOCGABS3F(r4, 0x8018457f, &(0x7f00000000c0)=""/200)

629.46445ms ago: executing program 4 (id=2154):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{&(0x7f0000000100)="047715ac7141c111fab2fcda5de4dc8b278029bcb1bd17524f177856cac105f463c77e2d2ab44d875217dc82baa911f236f959fb9227524d4fe6b621a19823457d04c399283edbac755852623c82f7206d26e918a2981c8f68476969bf8c4bcd37ba24e4ba1683339879a11b854a7478f898805f327af12eaab8ac918c201b7f932e124796f1aba03e031312bd7e67403651abac282b310f420d", 0x9a, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f1538d9588323b836e6e2b7704dff3cbf89c2b828c7613310eafd664c946b1a6728154b1877257a8abe3d983344da083b86aee35e6b9b0d9307", 0xe7}], 0x1, &(0x7f00000008c0)=[@iv={0x68, 0x117, 0x2, 0x50, "bd19a432ebf20eb0a0ee39d005e869fe74b9842d9c92be0054aa20f9dbfeb8e59fa49c486a1a51c45c98c886185e506d1cf93255718fc79d6b6d1d434c678807c5ab4264c8ba94065d11d8ee27dd16f4"}, @assoc={0x18, 0x117, 0x4, 0x6}], 0x80, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b40)="86545d2157646172b815818bfd0e1457556266898579380233e0e3853e4a118a5a2bcc52eeea6b2dc4fc32c3", 0x2c}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c9", 0x59}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b3", 0xb8}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b5239833610ac4306ac2a443c768b9365de67f9f9be49fe7d6f4d71abedeb55ab91ddd31154758fcaa8f25a56126152b9ba46d9bd4cd0d67de6fda9f72a37319681c1750045b363a3b90faecc5b5cbc0a241152a62edc2d081937058931cfb823591b49c610995a895f214c473ef6e1d49051b919", 0xe3}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

613.394132ms ago: executing program 3 (id=2155):
kexec_load(0x3, 0x1, &(0x7f00000005c0)=[{0x0, 0x0, 0x5, 0xffffffff}], 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000000700)=[{0x0}, {0x0}, {&(0x7f0000000740)}], 0x3}, 0x41)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x80, 0x0)
sendmmsg$alg(r2, &(0x7f0000007640)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000740)="bd9c629b909dddebc0508bf412865663aded7919352b141faa7dc00680ce5a44ff1ed1c813c6c1e58e28c509cd269d0e79fff4d2ea4c1da69fa672c4f5eb15788aa929e9f5c94e443cf68a1759ee805958a7c76c8c7f11a39ea32c019c2f2c8cce48d92d659f623081974c0135dc1fe2a057f725a843c083e0620ffa607d3b9570a5b4094fca255491844b3d5cb63bab3d76ad07f9503d1450f1fb860b18ac983285f983e51262c539312073482f", 0xae}], 0x1, 0x0, 0x0, 0x40800}, {0x0, 0x0, &(0x7f0000003900)=[{&(0x7f00000009c0)="c2debd9e2d4617d17e01e704d3576f8b26b757ffa164a105efcaa28e5d52d4383258c148e95e4ee927dab4ba9cdbf4dbf6b0e19f8b7e9a95211ec6aedfd78a09200b7076afabdae9c87c6837e202845b6cf3ac6b728856d66eef286087e0154a40c153e5fe7505615fb53b33f629928c80aeea7fd091180968d44cd4544b6bb4c116f4d6c4c3d148eb273bd4fa76ad8f709ed07bd2a91564fc364f1b971b0e005fe1d24f1b0d7f157b695c625cc39aac2d6f07b11d926c801fb1b98e", 0xbc}, {&(0x7f0000000ac0)="3fe4c8a3288f097706", 0x9}, {&(0x7f0000000b80)="0d4842ef613cd072196eae2d74d31c309df1c61a888039b1a23acbea852fb54afae1761845284c6e484aa5154a2b418ffe2ac1d6363010c9d8f2d75a71eb55849202714884c6a0a760f5e028016a68fc07407f5671a5a4a8c91e9d056039df63390376a7359c6fc2059d1e3ffeec1ff0f4c09099e8e61c268324d0fc621f6dc2912e4bd5316ff808ac5126ade9b759e1489c04a517e992d7b56d9df469c0c906000e0f82c089ec12677e7ade15e68a602d", 0xb1}, {&(0x7f0000000c40)="176d6b3905505e2a41391bf6fd66d8ad4ebc86e07694005204b0151bfa8dc581a5be209d8850a950791f10f76de79651272a11f6d7267276ff1596a47826a90a0b74b425d8ff2bbea5c5732f69a908c45b4b348abc24d2cd2031a9508ef8e3594bd12ebc38c466f76d6ff3618471f4f6574e1043766375eb889750ca25429f976089462bf1b689280ebc67640f4534eef4b7ffd85963bc5d8b114670c00f76cbdd722662dce5fc58daf323bf987ef7d646a99794c02b62b30e189691c4be9094ea58e9df52d9dbd9e0fae7a4a130246680b2", 0xd2}, {&(0x7f0000000d40)="7edb39aa76e39c9fc185dd49e1d028ba5e90ec3bb54d3c486f189f406945a495fe7b4ad51446c162f581368e4d711db9add53f7917e1dc55ae9543ea21d63f85d9a5a996f6fa32ead42a9b7e97a7ae1b4a8f76ff9321b4ec76606f9709bb57eda4e8c45e797ff2cabc03a3d03ca57b523983", 0x72}], 0x5, 0x0, 0x0, 0xc0}], 0x2, 0x48040)
r3 = socket$alg(0x26, 0x5, 0x0)
syz_open_dev$dri(&(0x7f0000000180), 0x1, 0xc0400)
bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r4 = accept4(r3, 0x0, 0x0, 0x800)
sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be5216344841", 0xe}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="ea7c5828b87d70214008724bcae1ce6577c01031b19698ecb8a7f5183947918ce2cc9dc778dbfff9e28e1a6df7d8f95c3e45768a6786d6325bc0fe4ed394c8ed0edcbb9f917074251a7f5b6b24c52516a68f181592262dfd12b5af7386658c5fb6c36d86d5084624a302a155c0463b6c36e9fc88338b0f66e2713728a21d19d9a33da93d419df63d8a87fa100381ec74de8b7409f4977d3cd7a9f2fb03cec91c4277b39b2c9f227a9b74926a11960d085e2aaf98673d2a67fa95b8d9dcc72ca6181f6b9b2d1c402267e6cfef5599e1520077d9bc472fb5a5db42b1befd498ec7b8d519b12f065323b15280a2540bc7a4ffe508fc12f93707064caf4111e893142f9867b432b1e6258caa2ae081b8b646c25de7f5366a21f9dd257b84546cd316e17b79d22c4bcaf70e8a96d1e502b53c581c75482d1d63f0d5f3fb5bdbb714583f0798e0c4d6c9d99513e91a68a26612053290f15f5a2e06acfa229356e37b4d57697224e9561c0430a67fcb5dea72acc91e60751a5b07eb603548a646f082ce213347b4ee908bd95cc56775330aa09d4f19f48a8cb5d7f6346d82bab8ff019309684bd01eb4d90febe2269cd2a1100130c242a2995ce38638a3bbc9008ac0e820a1e0b9a9511af47aa7f3e30a69589985423f3b4ea98152433bf1aa53a0981f783f11c4cc50f70fe63b2043b74b9cb7da59caedadc1fa1f662831a353969893d4f93b919cda52a1ce2200a0a7895abb293c29d6d197cce98a4df8fc90c582014742a00b4bd09f1fcc5ff5753320d2b5593e657c0fb87a4cfa323ce59111eea806a6e020fb0c4fdd601087811e33e793975b5e9e936c16d243bdea757e0ee4508f5d5b496ed07b6f0f1f46ed752448f30d679b23ba8142d4ab25beb913ee77547866e5d9501a55e9797ba3407f3f4cc11398bdaf3ac4c2e79a5b133a09fcf8ae790bb985fa01daf2758fd8a77fde15a822227dddf64bb2ebc49a56ad025e01c6c59e4818abdf808789d9f87c103cf7f7d21d2a1345b9b7fd66b1cf96002343fbd62f8080d945e70bd93d4bf42b401477abed49065b4a8ccfb9d93724118168de2e8df4f78ccf3b9593f993423a619ef6bd8392a2cfc6424d3687fcdc67d33073db95d856f312b934d05a3c4e967217837920fee73b00757b617d1ef3bfc2e88a8a72f0948263db2c9e7bd491f059b6ee8d0ea3f2193314562910529869b248172bfe0f914f7a91a27c6e9e6c2e3455a7ae765392b48fc959958aa39a5a483b2a6e873ac76f8579515e42f7a3bbc82bcf71edaf12f7b40a2adc74d67ef793988cc8ac788185049e57fb84757bdc700ffde10afc19df290787ed98222f8afb2b6d11944666331350e2914466b398750acae526146373b2cbe1bdd1803e6c920a182a1ad118a3d09313c2ce2703a0a1c09215cab90c35b03b1c795cf704f42dd31ddff6be67bb355977b2e07609c5228299a170308e54705674384fc294cdfa4abf989d3c3bf3eabbbcf52a6a0646bf6db5b61ad027007464fd6fc10490ee2e9190c28ae5cb3733105cb782c0d53e5c79c3e455609d557d824154d01e282788ec8ae7c8a03fcd6cd4e37829b0f921c46d715454d5e1281c641cf0756a2f31b0369ce94e819e6254af95b88bffd7bb2cfe9469d303497fead174839b2789b5aa703176510eab1f46916b3b63f6f5b2df262fe7274a0cee9bd6e115e5f9f48ac1c09e5b3c546ae95b9916a633869854d3ee39d4acb800e876e7fc084ffd79a20fca8331caff657ec89b445c6012ff7eb9531eb1e8c90cdc66b82d6fd608310099503a9dcf50b40d10a3b1ab520477e20ad5f6405cd4b5b36d201e12088d7868c6e94737ea88db6ed5f7df4d31cbd2d0c4f21cdcc3b181f5aae7216dc4c06b2989bb44e5369ba96ce87f3e3abbb530d103a53d7e0b914115c302c935eea7d256a73aa851d84dec6d9112163be8135889c67fa90e796a6f050fba0a6a740618cd513748072daac9f3e25034772cc400a14834afbde835bc9fd7cf1113d67ebe99a3b78907596886ad5a1670ef572c18e26c98fe40194428de339cba7b8efc5fa7faf7512ef6b89a877f3e534fb4512729df686e14aece08fab3b42ea14acde0e18ffe5dc00e74288661c7463e00f3b942cddf3b71e1dcf71989f378b933df099316451cca296a4e117bbeb3b1e552e5a10f9731449ae830de14989049ce818f720e77e78a86c307c80450b26278bc25ee7390ce6d4c4dfc8d39b6b4b1ce6f3865dbdd1d37aedb555288bea9ef95c8600dea1cd10e9e42d15aa804f99a31bfaa5ea52185333d734c766e3bb4a9abf86cf4d840dc188167a25cc3054b65fd7ce053d38518474ab55e59c1ccaf34d57b4cd73b07ed63d754ab3d57dfc0f67bbdb22e33d9f63aa2b36cf0af338794d4acbd1b13669bde67f7bd032f9c6b400e8054a0cff77fc6e0591195b21715e42c881e23156b4ba504d7e1b6eb9c2ec9b9e382d85f7c52bd964d305da9496dbaa022880ddf236730c458f31258d64ae2668aa863b3fe558c7f8cfb3dabf42edcaf2891e9b9462c44153658eae85cd499abd9dca762adf26d9904d28b772b3fc3d066d56261474c944387ac7eb00059025ff25e34b8f7c2986db1ccc4297e1315c3ceeef1b8f98e0500bbb8bb0ab52d80f8c6c8fa5d24b9a05f5350e2fd59af4b9fa9a2b4339b61e208f227ba968d4dbd36246133de2078c6a15dd57754a3537c31d04da545f062dbf9cbaa0840e23974f441a4d5937fec23ff81c193bd951a7bacac8eb6d4705702cbe3c930f27869753ba6026455bbb7742c53644f1646d7545467091a207905f831505f214fbd818aea4455705b5e727850cdcac40620135b8dba85cb0c0f393af252ec082cba5c43385fbc2cc5682bc1994b064e29c8c5a20e7e6d15fbb13e6fd1a86b2fda666fbcd80fd08be00a7423fcafbdd8283bac88ead203bc10d1c1a13ca2fe853fa6cc8991b0476561be085b086b0d0e45f73e59f519342c13f368a37464cb55b8a13846f4cd610536d5c4b8704fcd347abe6712d3de67d7918e6954898f31647a8ea37ecc2e1bb02b1b26e7a60fbb2b0a48efc5795c12d5c4ac8dc4149dea0f2e085422ec69352882622711b74e1e32c7ead2cf3c554e8ff1648e8b66d0dc6997b6304b3b560a33d75aa49476175a386ca721156ea79bdba432d439dbceb0285561abd5d134badd9f38c04fae8fa920edfff15705371c907848c14acdfb0b22a4c7168e1840e8b8a50349dcee5f429b3cb34e30f0f67acf93604792b8574f36ea9409d422621f3c0c7b781fc8e23d1d46f04a9b44f633e5f72cb079fbde66a9745705666c6dab6238628e57ee6cffa8cfad616dac1abe2789c9efccb4fc7e65e490d9a4e49e7ce72a6980e72f70a17649e67de86f86b61a4b6219daefc939b5904e5712ecaf85c98484fc02585b1aa990b95173e4a2907cf877af696e528e6b2b634a4fb7d791cacc8644fa76e062148d411e18f0da5aed22116828cd700a28e8f46bca950550acb4ab05eddeb6b2dac24702cff4de0a3ece393cac879ed2f0c5b9645839cfdb79fb1df87596b14504cba9dddda51edaffcd0214b91b5898ea022774e699aa0caf0f646cc0cb8e8fc8b8be43c23aa7f6bd29fd0615c0b78f3514a52989d7f35ad08a4bd473e61da6657cc2e85d3b2b7d3fb51174a96f27038ddbc87a35e09a668e436aa40146c6a26dca87b39220f139b772719d80aadb752c622bf09acd6846838fb48a8817ba4aa72eaa32e82251b3789969d8518f9aa07cdcb9a355f73f119725c086168aaca262f13cd742e5f06c969a462638a557e15a4f5d43e3242c08f23b00d2b8d57c60d3636abd4068ec03a4be3429b95e41351ab5c58812e552df90c3e6c9d8779aa484e74f073ea9fcdce13b1dff8e7c101b2c6865c5cefe108e3559f520e2bc42c9dc39b57fddb44ca49f2689e10c1381c0740d20cbca46da475c62f513cb08398a5fd5d4f6b13ce839fe149df0d291a8f7267fe90a7e1845dace17cd927c2d1aeffbdc36bb983172ceff025e84b0419645fcc72897b992f5081c78756122391947f08ccd20806cfc2bded705b472fc52e84734e016cbd309aadebbbb4e8bdfed77b1e0b15ce0904838d9e4d64643df66f0353c377e554b428dc0f31189a134cdb8e66d2755e84c2b2409c3d63a81f5f05616baf6a243b09153a4f8289e15a5a4ffb007b0cbeffde25391bb2acd86b453e245643c0fa1dfe5d42e0e3f1c592a00b77f0133adf7989c6c2bf3ddc0b8a2b14f35d33f62f4ee2fc56166372058e997b9abe6bad8aa718f8d87ad095e8f354aaef540840437b5451771266a8358ed75954db52b38bca4a1c8696dca1de03b12627254409f8bb68c94eeaa1a8bcf894482b96e81b9ff5c2383a907537a191aff0bb5b5418ef5670cecca1cfbd41b61879b11a5a5053cd86cf5d61f8c2f7d7ad2034a1801b3b92a79ac3b4343c680008b1ba10577a35173cac6d4dbc1d00e436f238b57093b34d4ea19c225b84a2d6086cc6cf72595b980c88142d268bbf9c8375a93afe75c3583b3b9687368d78147985d209e6d89c335e948c51696a948f01ad062dcf84a99584466e24646b2e441fefb10ef962432f2925d6d98e790acf4ca7d9339a589a537aa3392ec79f34a6544144072ab8248e45ac560a78c70c5afcbf10909299dfcd67981c88780c1340c951e115ffec56d23b9ead6a55024e199238f4b133e3e1e0e84318b5037a3947ae09749c25c7e4887936ecf0ba9a807dfa471ea1f3350b70feb58dc9e2836365ce4db456a341e43410cac1253fe08e79c21fca932716f4c171fc957cb325737b70532d81f0eb2f0a16478c0d934165728f7b29a8a0ff6bc964e99dea26d3efd28336b00c112a26da7a2ea1c21a9688cc3a68293958edf27ae89e5f9b8348af4121028e760cf68c931af92906d27dad4d330df9201b5395ccce0c803806422883667ccb11438d9dbe1901d4ab98d89914b313338486deb6f748053517e2188c479adb1eabb8e8ed5d05bb3f66826fae83bbc5bce3615ee32d937ffbe8846a1156aaf7bf9b9d4189bdf290b3df254077688eeda824d6ea0a452f7e7f915c1a94ee250a3907ec035d7ba7bb0256811f04646ca156b8925506c774df4d4072c02929e985057a5f7ddc1469c7306e6fdb86b810ada1cc96f6bd389597dd27dd656f55c316fb2d56b2d13eddf893722e813934a19778719be99697c365222db64039f9caab1201c430e53df1af8a0321c8759fc33e8204150080979936d0717f6c4c9145fb828389acbb894a4600485e8b105c7165a40e814889343deead6d434a8da60eed1e50aa507ac2793b4a4c5517265f859f223bb4f6cadc6fb53430304baea18189e2b5ddd266c38f5c325ba391a50fcd34060d217c4118889c4275e40a8428099ddfa3cc0d8241c22fc1554318e922f3b1257f2046d70df460c5283a539487583ffca1972a19237b06480e0a56d9e185fe4dc3607666d81ed0d9d9f5c5c568a5a0a87160b6d35c73dae9c6177f2b25d90a2598042f4b43bc765fa86a831c401a01c391a8fdc8f8c742f2322a1b8ef18ec7d82f013893c981f6bd96ec57d8e73e1633ae3970721fcea055ecc836ce3", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r5, 0xae80, 0x0)

436.185246ms ago: executing program 1 (id=2156):
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket(0xa, 0x3, 0x3a)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r2=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r3=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x90}, 0x80)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r4=>0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
r6 = dup(r5)
syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000001080)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8000e308, 0x42, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x69, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)

393.842522ms ago: executing program 4 (id=2157):
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="9f01000083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f3ed"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000600)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

332.855602ms ago: executing program 3 (id=2158):
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
r1 = eventfd(0xfffffff9)
ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1)
ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, 0x0, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/70, 0x100000})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000680))
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1)
socket(0x10, 0x803, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, 0x0, 0x0)
getsockopt(0xffffffffffffffff, 0x28, 0xfffffffe, &(0x7f0000001680)=""/56, &(0x7f0000000280)=0x38)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x6, 0x8, 0x3, 0x0, 0x5, 0x1, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0)
unshare(0x42060680)
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x40500, 0x0)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000000406010300000000000000000500000805000100070000eca777215e4970a1310000000005871a5b3c55a2036b3490585c8680d4b90f1c3ed86347cb095d855e535e8551c5e04cf293080401c8c49835ef06562f55db747575e3fe1c0f65c6a0ac39891ddac621f9bd3cbf328be4e17c86a5259ec1a6047bbf319f921e8fda1750034a2203b596e2fc59496e0e879997f964597aacc05792ab67cf827cb08efa5c5bd437de531d72f775265d29cfb0a33b436fd1ac72246a98f4305d1babfaf3a8fce40f1be2bda116b1d34e47473f39aa995a813a710dae914618c4d6fe5ba44aca3e0570dd32977ed521baedf6801196e24f18640f84add06d5a3d091db19c0afcfc4fe365e11e5c9b82d02b079c934b9324386f08f8f13b68e630f47ac96b480f"], 0x28}, 0x1, 0x0, 0x0, 0x40408d0}, 0x4000000)
socket(0x11, 0x6, 0xc)

0s ago: executing program 2 (id=2159):
r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1f, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000140)=[<r2=>0x0], 0x0, 0x0, 0x0, 0x1})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r1, 0xc02064b9, &(0x7f0000000280)={&(0x7f0000000400)=[<r3=>0x0], &(0x7f0000000280), 0x1, r2})
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000040)={0x500, 0x1, &(0x7f0000000180)=[r2], &(0x7f00000002c0), &(0x7f0000000240)=[r3], &(0x7f00000001c0), 0x0, 0xff})

kernel console output (not intermixed with test programs):

  T50] Bluetooth: hci4: command 0x0405 tx timeout
[  274.289218][ T8376] overlayfs: missing 'lowerdir'
[  275.164297][ T8375] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  275.204467][ T8382] overlayfs: missing 'lowerdir'
[  275.272373][ T8375] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  275.362911][ T8375] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  275.473012][ T8375] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  275.717325][ T8375] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  276.272445][ T5620] Bluetooth: hci0: command 0x0406 tx timeout
[  277.312006][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  277.392035][ T4926] Bluetooth: hci3: command 0x0406 tx timeout
[  277.398101][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  277.792042][   T50] Bluetooth: hci4: command 0x0405 tx timeout
[  279.504241][ T8426] overlayfs: missing 'lowerdir'
[  279.882054][   T50] Bluetooth: hci4: command 0x0405 tx timeout
[  280.208143][ T8425] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  280.224948][ T8425] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  280.236334][ T8425] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  280.355658][ T8425] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  280.456289][ T8425] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  281.635180][ T5620] Bluetooth: hci0: command 0x0406 tx timeout
[  282.272231][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  282.278388][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  282.442189][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  282.518663][ T5620] Bluetooth: hci4: command 0x0405 tx timeout
[  285.821237][ T8503] overlayfs: missing 'lowerdir'
[  285.992598][ T8508] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  285.998626][ T8508] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  286.004621][ T8508] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  286.010557][ T8508] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  286.016521][ T8508] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  287.712083][   T50] Bluetooth: hci0: command 0x0406 tx timeout
[  288.092305][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  288.098462][   T50] Bluetooth: hci2: command 0x0406 tx timeout
[  288.104620][   T50] Bluetooth: hci4: command 0x0405 tx timeout
[  288.110762][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  289.908010][ T8568] overlayfs: missing 'lowerdir'
[  290.207188][ T4926] Bluetooth: hci4: command 0x0405 tx timeout
[  290.770598][ T8567] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  290.807668][ T8567] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  290.873153][ T8567] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  290.939056][ T8567] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  290.970950][ T8567] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  292.211631][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  292.852189][ T4926] Bluetooth: hci1: command 0x0406 tx timeout
[  292.942085][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  292.992006][ T5620] Bluetooth: hci4: command 0x0405 tx timeout
[  292.998150][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  294.111156][ T8627] overlayfs: missing 'lowerdir'
[  294.976062][ T8626] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  295.050506][ T8626] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  295.094445][ T8626] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  295.114989][ T8626] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  295.142970][ T8626] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  296.202015][ T5620] Bluetooth: hci0: command 0x0406 tx timeout
[  297.072399][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  297.162121][ T5620] Bluetooth: hci4: command 0x0405 tx timeout
[  297.162126][ T4926] Bluetooth: hci2: command 0x0406 tx timeout
[  297.162155][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  309.678436][ T8800] overlayfs: missing 'lowerdir'
[  310.505301][ T8798] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  310.868697][ T8798] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  310.892157][ T8798] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  310.913606][ T8798] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  310.942929][ T8798] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  312.056441][ T5620] Bluetooth: hci0: command 0x0406 tx timeout
[  313.019042][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  313.032863][ T5620] Bluetooth: hci1: command 0x0406 tx timeout
[  313.039261][ T5620] Bluetooth: hci4: command 0x0405 tx timeout
[  313.046062][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  315.322467][    T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!!
[  316.375027][ T8891] overlayfs: failed to resolve './file1/file0': -2
[  316.849675][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  316.856091][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  317.882455][    T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!!
[  318.205089][ T8889] overlayfs: missing 'lowerdir'
[  318.361472][ T8892] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  318.395229][ T8892] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  318.419014][ T8892] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  318.440363][ T8892] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  318.463744][ T8892] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  319.189631][ T8921] overlayfs: missing 'lowerdir'
[  320.041583][ T8919] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  320.183958][ T8919] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  320.203273][ T8919] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  320.213471][ T8919] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  320.231803][ T8919] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  321.232051][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  321.291628][ T8949] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  322.331456][ T5620] Bluetooth: hci4: command 0x0405 tx timeout
[  322.331454][ T4926] Bluetooth: hci1: command 0x0406 tx timeout
[  322.331493][ T4926] Bluetooth: hci2: command 0x0406 tx timeout
[  322.337527][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  325.562127][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  326.225429][ T9007] overlayfs: missing 'lowerdir'
[  327.340272][ T9006] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  327.462362][ T9006] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  327.495183][ T9006] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  327.527394][ T9006] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  327.617466][ T9006] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  328.271974][ T5608] Bluetooth: hci0: command 0x0406 tx timeout
[  329.488270][ T5608] Bluetooth: hci1: command 0x0406 tx timeout
[  329.552331][ T5608] Bluetooth: hci2: command 0x0406 tx timeout
[  329.552557][ T4926] Bluetooth: hci3: command 0x0406 tx timeout
[  329.631983][ T4926] Bluetooth: hci4: command 0x0405 tx timeout
[  334.673122][ T9097] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  334.682282][ T9097] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  336.474199][   T30] audit: type=1400 audit(1785191593.663:327): avc:  denied  { read write } for  pid=9121 comm="syz.2.934" name="uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  336.539227][   T30] audit: type=1400 audit(1785191593.693:328): avc:  denied  { open } for  pid=9121 comm="syz.2.934" path="/dev/uhid" dev="devtmpfs" ino=1272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  344.621436][ T9258] overlayfs: failed to resolve './file1/file0': -2
[  345.472314][ T5798] usb 2-1: new high-speed USB device number 4 using dummy_hcd
[  345.687642][ T5798] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[  345.749172][ T5798] usb 2-1: config 2 has no interface number 0
[  345.790199][ T5798] usb 2-1: config 2 interface 43 has no altsetting 0
[  345.856252][ T5798] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  345.882941][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  345.910863][ T5798] usb 2-1: Product: syz
[  345.928299][ T5798] usb 2-1: Manufacturer: syz
[  345.953057][ T5798] usb 2-1: SerialNumber: syz
[  346.591092][ T5798] ums-usbat 2-1:2.43: USB Mass Storage device detected
[  346.678703][ T5798] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  347.344976][ T5798] usb 2-1: USB disconnect, device number 4
[  347.756686][   T30] audit: type=1400 audit(1785191604.943:329): avc:  denied  { ioctl } for  pid=9284 comm="syz.2.979" path="/dev/vbi9" dev="devtmpfs" ino=1008 ioctlcmd=0x5640 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1
[  347.823043][   T30] audit: type=1400 audit(1785191605.003:330): avc:  denied  { ioctl } for  pid=9284 comm="syz.2.979" path="/dev/dri/card1" dev="devtmpfs" ino=628 ioctlcmd=0x64a0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1
[  347.872058][ T9285] program syz.2.979 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  347.900165][   T30] audit: type=1400 audit(1785191605.043:331): avc:  denied  { write } for  pid=9284 comm="syz.2.979" name="sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  347.925749][   T30] audit: type=1400 audit(1785191605.043:332): avc:  denied  { open } for  pid=9284 comm="syz.2.979" path="/dev/sg0" dev="devtmpfs" ino=759 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  348.132737][ T5724] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[  348.844328][ T5724] usb 4-1: Using ep0 maxpacket: 16
[  348.950678][ T5724] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  349.061866][ T5724] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  349.241124][ T5724] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  349.314445][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  349.476784][ T5724] usb 4-1: Product: syz
[  349.512765][ T5724] usb 4-1: Manufacturer: syz
[  349.531942][ T5724] usb 4-1: SerialNumber: syz
[  349.555899][ T5724] usb 4-1: config 0 descriptor??
[  349.581627][ T5724] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  349.606141][ T5724] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  349.766206][   T30] audit: type=1400 audit(1785191606.953:333): avc:  denied  { setopt } for  pid=9304 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1
[  349.854708][   T30] audit: type=1400 audit(1785191606.993:334): avc:  denied  { connect } for  pid=9304 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  349.909833][   T30] audit: type=1400 audit(1785191607.013:335): avc:  denied  { write } for  pid=9304 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  349.971919][    T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!!
[  349.981920][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  350.011921][    T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!!
[  350.068060][   T30] audit: type=1400 audit(1785191607.243:336): avc:  denied  { read } for  pid=9304 comm="syz.4.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  350.248971][ T5724] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  350.255893][ T5724] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  350.659555][ T9322] program syz.0.988 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  350.933098][ T5724] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  350.941316][ T5724] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  350.967381][ T5724] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  351.020338][ T5724] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  351.048451][ T5724] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  351.067688][ T5724] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  351.106469][ T5724] usb 4-1: USB disconnect, device number 6
[  352.342180][ T9349] program syz.3.994 is using a deprecated SCSI ioctl, please convert it to SG_IO
[  356.095627][ T5724] usb 3-1: new high-speed USB device number 5 using dummy_hcd
[  356.769592][ T5724] usb 3-1: config 2 has an invalid interface number: 43 but max is 0
[  356.787780][ T5724] usb 3-1: config 2 has no interface number 0
[  356.869802][ T5724] usb 3-1: config 2 interface 43 has no altsetting 0
[  356.910810][ T5724] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  356.949600][ T5724] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  356.980877][ T5724] usb 3-1: Product: syz
[  356.996821][ T5724] usb 3-1: Manufacturer: syz
[  357.013137][ T5724] usb 3-1: SerialNumber: syz
[  357.300427][ T9428] syzkaller0: entered promiscuous mode
[  357.323972][ T9428] syzkaller0: entered allmulticast mode
[  357.487513][ T9428] tipc: Started in network mode
[  357.515994][ T9428] tipc: Node identity e6f6cebe0c04, cluster identity 4711
[  357.550450][ T9428] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  358.641578][ T5724] ums-usbat 3-1:2.43: USB Mass Storage device detected
[  358.684278][ T9427] tipc: Resetting bearer <eth:syzkaller0>
[  358.693944][ T5724] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  358.816185][ T5724] usb 3-1: USB disconnect, device number 5
[  358.919967][ T9427] tipc: Disabling bearer <eth:syzkaller0>
[  359.011712][ T5799] tipc: Node number set to 3941781182
[  359.462007][ T5799] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[  360.122613][ T5799] usb 4-1: Using ep0 maxpacket: 16
[  360.138904][ T5799] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  360.225997][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  360.251377][ T5799] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  360.263812][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  360.276147][ T5799] usb 4-1: Product: syz
[  360.281125][ T5799] usb 4-1: Manufacturer: syz
[  360.374811][ T5799] usb 4-1: SerialNumber: syz
[  360.390757][ T5799] usb 4-1: config 0 descriptor??
[  360.402100][ T5799] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  360.411377][ T5799] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  361.553775][ T5799] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  361.584343][ T5799] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  362.575666][ T5799] em28xx 4-1:0.0: AC97 chip type couldn't be determined
[  362.599064][ T5799] em28xx 4-1:0.0: No AC97 audio processor
[  362.694943][ T5799] usb 4-1: USB disconnect, device number 7
[  362.724415][ T5799] em28xx 4-1:0.0: Disconnecting em28xx
[  362.774193][ T5799] em28xx 4-1:0.0: Freeing device
[  362.861976][ T5798] usb 1-1: new high-speed USB device number 7 using dummy_hcd
[  363.015659][ T5798] usb 1-1: config 2 has an invalid interface number: 43 but max is 0
[  363.027773][ T5798] usb 1-1: config 2 has no interface number 0
[  363.036305][ T5798] usb 1-1: config 2 interface 43 has no altsetting 0
[  363.112084][ T5798] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  363.155898][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  363.167089][ T5798] usb 1-1: Product: syz
[  363.171450][ T5798] usb 1-1: Manufacturer: syz
[  363.178199][ T5798] usb 1-1: SerialNumber: syz
[  364.275960][   T30] audit: type=1400 audit(1785191621.463:337): avc:  denied  { getopt } for  pid=9492 comm="syz.0.1035" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[  364.309255][ T5798] ums-usbat 1-1:2.43: USB Mass Storage device detected
[  364.331313][ T5798] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  364.597709][ T9521] overlayfs: overlapping lowerdir path
[  364.745810][ T9523] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  364.754813][ T9523] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  365.451689][ T9531] overlayfs: missing 'lowerdir'
[  365.847085][ T9517] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  365.940108][ T5798] usb 1-1: USB disconnect, device number 7
[  366.015406][ T9517] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  366.043888][ T9517] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  366.061705][ T9517] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  366.095731][ T9517] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  366.492052][ T5798] usb 1-1: new high-speed USB device number 8 using dummy_hcd
[  366.517331][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  366.601966][ T5799] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[  366.683285][ T5798] usb 1-1: config 2 has an invalid interface number: 43 but max is 0
[  366.719046][ T5798] usb 1-1: config 2 has no interface number 0
[  366.772694][ T5798] usb 1-1: config 2 interface 43 has no altsetting 0
[  366.803549][ T5799] usb 4-1: config 2 has an invalid interface number: 43 but max is 0
[  366.811945][ T5798] usb 1-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  366.833654][ T5799] usb 4-1: config 2 has no interface number 0
[  366.856698][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.873829][ T5799] usb 4-1: config 2 interface 43 has no altsetting 0
[  366.901368][ T5798] usb 1-1: Product: syz
[  366.908141][ T5799] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  366.926728][ T5798] usb 1-1: Manufacturer: syz
[  366.937933][ T5799] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  366.946101][ T5798] usb 1-1: SerialNumber: syz
[  367.006004][ T5799] usb 4-1: Product: syz
[  367.023758][ T5799] usb 4-1: Manufacturer: syz
[  367.042229][ T5799] usb 4-1: SerialNumber: syz
[  367.581375][ T9574] syzkaller0: entered promiscuous mode
[  367.606978][ T5798] ums-usbat 1-1:2.43: USB Mass Storage device detected
[  367.629756][ T9574] syzkaller0: entered allmulticast mode
[  367.695482][ T5798] ums-usbat 1-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  367.801988][  T924] usb 2-1: new high-speed USB device number 5 using dummy_hcd
[  367.817845][ T9574] tipc: Started in network mode
[  367.830438][ T5798] usb 1-1: USB disconnect, device number 8
[  367.857890][ T9574] tipc: Node identity 5ea338375caa, cluster identity 4711
[  367.893958][ T9574] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[  367.935112][ T5799] ums-usbat 4-1:2.43: USB Mass Storage device detected
[  367.963060][ T9572] tipc: Resetting bearer <eth:syzkaller0>
[  367.993963][  T924] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[  368.033622][ T4926] Bluetooth: hci1: command 0x0406 tx timeout
[  368.034562][ T9572] tipc: Disabling bearer <eth:syzkaller0>
[  368.071713][ T5799] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  368.088915][  T924] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[  368.112281][ T4926] Bluetooth: hci3: command 0x0406 tx timeout
[  368.118314][ T5608] Bluetooth: hci4: command 0x0405 tx timeout
[  368.124453][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  368.142054][  T924] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[  368.151926][  T924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[  368.164221][  T924] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[  368.198774][  T924] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[  368.209082][ T5799] usb 4-1: USB disconnect, device number 8
[  368.241561][  T924] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[  368.262034][  T924] usb 2-1: Product: syz
[  368.266903][  T924] usb 2-1: Manufacturer: syz
[  368.292310][  T924] cdc_wdm 2-1:1.0: skipping garbage
[  368.300758][  T924] cdc_wdm 2-1:1.0: skipping garbage
[  368.352583][  T924] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[  368.370094][  T924] cdc_wdm 2-1:1.0: Unknown control protocol
[  369.463882][   T30] audit: type=1400 audit(1785191626.653:338): avc:  denied  { read write } for  pid=5612 comm="syz-executor" name="loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  369.705963][   T30] audit: type=1400 audit(1785191626.673:339): avc:  denied  { open } for  pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  369.888019][   T30] audit: type=1400 audit(1785191626.673:340): avc:  denied  { ioctl } for  pid=5612 comm="syz-executor" path="/dev/loop3" dev="devtmpfs" ino=650 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  369.940793][  T924] usb 2-1: USB disconnect, device number 5
[  369.974936][   T30] audit: type=1400 audit(1785191626.983:341): avc:  denied  { read write } for  pid=9570 comm="syz.1.1052" name="cdc-wdm0" dev="devtmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  370.212995][   T30] audit: type=1400 audit(1785191626.983:342): avc:  denied  { open } for  pid=9570 comm="syz.1.1052" path="/dev/cdc-wdm0" dev="devtmpfs" ino=2839 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1
[  371.246881][ T9618] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  371.269311][ T9618] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  371.503983][ T5799] usb 1-1: new high-speed USB device number 9 using dummy_hcd
[  371.911947][ T5799] usb 1-1: Using ep0 maxpacket: 16
[  371.928529][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  371.961920][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  372.011053][ T5799] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  372.068325][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  372.113244][ T5799] usb 1-1: Product: syz
[  372.137847][ T5799] usb 1-1: Manufacturer: syz
[  372.149045][ T5799] usb 1-1: SerialNumber: syz
[  372.214710][ T5799] usb 1-1: config 0 descriptor??
[  372.250883][ T5799] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  372.265782][ T5799] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  372.859912][ T5799] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  372.885548][ T5799] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  373.309596][ T5799] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  373.337745][ T5799] em28xx 1-1:0.0: No AC97 audio processor
[  373.417301][ T5799] usb 1-1: USB disconnect, device number 9
[  373.452179][ T5799] em28xx 1-1:0.0: Disconnecting em28xx
[  373.503006][ T5799] em28xx 1-1:0.0: Freeing device
[  373.869503][ T9658] overlayfs: overlapping lowerdir path
[  373.909089][ T9658] overlayfs: missing 'lowerdir'
[  374.737539][ T9653] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  374.756881][ T9653] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  374.768012][ T9653] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  374.783975][ T9653] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  374.809425][ T9653] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  374.856169][   T30] audit: type=1400 audit(1785191632.043:343): avc:  denied  { read } for  pid=9660 comm="syz.2.1076" name="event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  374.971260][   T30] audit: type=1400 audit(1785191632.043:344): avc:  denied  { open } for  pid=9660 comm="syz.2.1076" path="/dev/input/event0" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  375.075264][   T30] audit: type=1400 audit(1785191632.253:345): avc:  denied  { create } for  pid=9667 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  375.131522][   T30] audit: type=1400 audit(1785191632.283:346): avc:  denied  { connect } for  pid=9667 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  375.263784][   T30] audit: type=1400 audit(1785191632.283:347): avc:  denied  { write } for  pid=9667 comm="syz.3.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  375.722061][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  377.059884][ T4926] Bluetooth: hci4: command 0x0405 tx timeout
[  377.059900][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  377.059930][ T5620] Bluetooth: hci3: command 0x0406 tx timeout
[  377.065977][ T4926] Bluetooth: hci1: command 0x0406 tx timeout
[  378.113673][   T30] audit: type=1400 audit(1785191635.293:348): avc:  denied  { listen } for  pid=9701 comm="syz.3.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1
[  378.273883][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  378.280169][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  378.363049][ T9720] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  378.392404][ T9720] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  382.954683][ T9788] syzkaller0: entered promiscuous mode
[  382.995548][ T9788] syzkaller0: entered allmulticast mode
[  383.619438][ T9802] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  383.677129][ T9802] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  386.311958][   T30] audit: type=1400 audit(1785191643.493:349): avc:  denied  { read write } for  pid=9836 comm="syz.3.1123" name="fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  386.408384][   T30] audit: type=1400 audit(1785191643.493:350): avc:  denied  { open } for  pid=9836 comm="syz.3.1123" path="/dev/fuse" dev="devtmpfs" ino=99 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1
[  386.462500][   T30] audit: type=1400 audit(1785191643.493:351): avc:  denied  { mounton } for  pid=9836 comm="syz.3.1123" path="/230/file0" dev="tmpfs" ino=1308 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  386.519705][   T30] audit: type=1400 audit(1785191643.563:352): avc:  denied  { remount } for  pid=9836 comm="syz.3.1123" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  389.425627][ T5724] usb 1-1: new high-speed USB device number 10 using dummy_hcd
[  390.082747][ T5724] usb 1-1: Using ep0 maxpacket: 16
[  390.104230][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  390.132599][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  390.162469][ T5724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  390.185762][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  390.200388][ T5724] usb 1-1: Product: syz
[  390.205553][ T5724] usb 1-1: Manufacturer: syz
[  390.220015][ T5724] usb 1-1: SerialNumber: syz
[  390.267053][ T5724] usb 1-1: config 0 descriptor??
[  390.331055][ T5724] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  390.367537][ T5724] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  390.956731][ T5724] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  390.984625][ T5724] em28xx 1-1:0.0: Config register raw data: 0x00
[  392.355194][ T5724] usb 1-1: USB disconnect, device number 10
[  392.439561][ T5724] em28xx 1-1:0.0: Disconnecting em28xx
[  392.467557][ T5724] em28xx 1-1:0.0: Freeing device
[  396.001960][ T9945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  396.060344][ T9945] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  396.863759][ T5799] usb 1-1: new high-speed USB device number 11 using dummy_hcd
[  397.045884][ T5799] usb 1-1: Using ep0 maxpacket: 16
[  397.518454][ T5799] usb 1-1: config index 0 descriptor too short (expected 65, got 36)
[  397.545741][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  397.559643][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  397.577397][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  397.593806][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  397.616429][ T5799] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  397.629472][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  397.661110][ T5799] usb 1-1: config 0 descriptor??
[  397.674626][ T9950] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  397.708034][ T5799] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5
[  398.020759][ T5799] usb 1-1: USB disconnect, device number 11
[  398.020822][    C0] pxrc 1-1:0.0: pxrc_usb_irq - usb_submit_urb failed with result: -19
[  401.126652][T10035] loop9: detected capacity change from 0 to 7
[  401.233498][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.243198][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.268221][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.277866][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.324689][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.334351][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.343553][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.353150][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.361720][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.371357][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.381994][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.391565][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.402104][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  401.411702][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  401.419572][T10035] ldm_validate_partition_table(): Disk read failed.
[  402.461794][    C1] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.471500][    C1] Buffer I/O error on dev loop9, logical block 0, async page read
[  402.486419][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.496068][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  402.526265][    C0] I/O error, dev loop9, sector 0 op 0x0:(READ) flags 0x800000 phys_seg 1 prio class 2
[  402.535899][    C0] Buffer I/O error on dev loop9, logical block 0, async page read
[  402.595517][T10035] Dev loop9: unable to read RDB block 0
[  402.642588][T10035]  loop9: unable to read partition table
[  402.672167][T10035] loop9: partition table beyond EOD, truncated
[  402.700992][T10035] loop_reread_partitions: partition scan of loop9 (úù) failed (rc=-5)
[  406.073183][   T30] audit: type=1400 audit(1785191663.253:353): avc:  denied  { watch } for  pid=10104 comm="syz.4.1192" path="/236/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[  406.108107][ T4926] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  406.112626][ T5620] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  406.165627][ T4926] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  406.172898][   T30] audit: type=1400 audit(1785191663.253:354): avc:  denied  { watch_sb watch_reads } for  pid=10104 comm="syz.4.1192" path="/236/file0" dev="tmpfs" ino=1306 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[  406.237115][T10116] nvme_fabrics: missing parameter 'transport=%s'
[  406.316129][T10116] nvme_fabrics: missing parameter 'nqn=%s'
[  406.332529][   T30] audit: type=1400 audit(1785191663.513:355): avc:  denied  { mount } for  pid=10106 comm="syz.2.1193" name="/" dev="ramfs" ino=53321 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1
[  406.556771][T10115] nvme_fabrics: missing parameter 'transport=%s'
[  406.596247][T10115] nvme_fabrics: missing parameter 'nqn=%s'
[  406.726748][T10117] nvme_fabrics: missing parameter 'transport=%s'
[  406.889658][T10117] nvme_fabrics: missing parameter 'nqn=%s'
[  408.738725][ T5758] IPVS: starting estimator thread 0...
[  408.757211][T10164] IPVS: rr: FWM 3 0x00000003 - no destination available
[  408.872059][T10167] IPVS: using max 64 ests per chain, 153600 per kthread
[  408.902011][ T5758] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[  409.130877][ T5758] usb 4-1: config 2 has an invalid interface number: 43 but max is 0
[  409.173136][ T5758] usb 4-1: config 2 has no interface number 0
[  409.197389][ T5758] usb 4-1: config 2 interface 43 has no altsetting 0
[  409.224559][ T5758] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  409.256103][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  409.398879][ T5758] usb 4-1: Product: syz
[  409.421702][ T5758] usb 4-1: Manufacturer: syz
[  409.454183][ T5758] usb 4-1: SerialNumber: syz
[  410.365456][T10178] Bluetooth: hci0: Opcode 0x0c1a failed: -4
[  410.531640][T10178] Bluetooth: hci1: Opcode 0x0c1a failed: -4
[  410.550766][T10178] Bluetooth: hci3: Opcode 0x0c1a failed: -4
[  410.571398][T10178] Bluetooth: hci2: Opcode 0x0c1a failed: -4
[  410.590113][T10178] Bluetooth: hci4: Opcode 0x0c1a failed: -4
[  410.604825][ T5758] ums-usbat 4-1:2.43: USB Mass Storage device detected
[  410.613240][T10183] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  410.635077][T10183] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  410.673113][ T5758] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  410.946913][ T5758] usb 4-1: USB disconnect, device number 9
[  411.391997][ T4926] Bluetooth: hci0: command 0x0406 tx timeout
[  411.674224][T10196] Can't find ip_set type hash:i
[  412.594106][T10218] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  412.603423][T10218] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  412.612106][ T5620] Bluetooth: hci2: command 0x0406 tx timeout
[  412.618159][   T50] Bluetooth: hci3: command 0x0406 tx timeout
[  412.624272][   T50] Bluetooth: hci1: command 0x0406 tx timeout
[  412.630578][ T4926] Bluetooth: hci4: command 0x0405 tx timeout
[  413.365694][ T5608] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  413.454724][T10225] nvme_fabrics: missing parameter 'transport=%s'
[  413.481961][ T5758] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[  413.496810][T10225] nvme_fabrics: missing parameter 'nqn=%s'
[  413.681958][ T5758] usb 4-1: Using ep0 maxpacket: 16
[  413.702230][ T5758] usb 4-1: config index 0 descriptor too short (expected 65, got 36)
[  413.722776][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  413.777106][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  413.819661][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  413.849523][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  413.904151][ T5758] usb 4-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  413.937817][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  413.974661][ T5758] usb 4-1: config 0 descriptor??
[  413.996650][T10223] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  414.033851][ T5758] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6
[  414.434125][   T30] audit: type=1400 audit(1785191671.583:356): avc:  denied  { ioctl } for  pid=10220 comm="syz.3.1219" path="/dev/input/event4" dev="devtmpfs" ino=2867 ioctlcmd=0x457f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1
[  414.557194][ T5799] usb 4-1: USB disconnect, device number 10
[  414.904744][T10240] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state.
[  415.111954][ T5799] usb 3-1: new high-speed USB device number 6 using dummy_hcd
[  415.283131][ T5799] usb 3-1: Using ep0 maxpacket: 16
[  415.314504][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  415.361018][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  415.412330][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  415.439269][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  415.479068][ T5799] usb 3-1: Product: syz
[  415.503579][ T5799] usb 3-1: Manufacturer: syz
[  415.508219][ T5799] usb 3-1: SerialNumber: syz
[  415.539671][ T5799] usb 3-1: config 0 descriptor??
[  415.569974][ T5799] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  415.607308][ T5799] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  415.840880][T10259] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  415.878027][T10259] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  416.216347][ T5799] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  416.227990][ T5799] em28xx 3-1:0.0: Config register raw data: 0x00
[  418.042645][ T5758] usb 3-1: USB disconnect, device number 6
[  418.075215][ T5758] em28xx 3-1:0.0: Disconnecting em28xx
[  418.153221][ T5758] em28xx 3-1:0.0: Freeing device
[  421.062583][ T5724] usb 1-1: new high-speed USB device number 12 using dummy_hcd
[  421.253826][ T5724] usb 1-1: Using ep0 maxpacket: 16
[  421.806895][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  421.849835][ T5724] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  421.902931][ T5724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  421.943833][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  421.984406][ T5724] usb 1-1: Product: syz
[  422.004388][ T5724] usb 1-1: Manufacturer: syz
[  422.023797][ T5724] usb 1-1: SerialNumber: syz
[  422.073672][ T5724] usb 1-1: config 0 descriptor??
[  422.097450][ T5724] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  422.136102][ T5724] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  422.343991][T10361] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  422.352928][T10361] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  423.016893][ T5608] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  423.180226][T10363] nvme_fabrics: missing parameter 'transport=%s'
[  423.193214][T10363] nvme_fabrics: missing parameter 'nqn=%s'
[  423.321464][ T5724] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  423.363970][ T5724] em28xx 1-1:0.0: Config register raw data: 0x00
[  424.624332][ T5724] usb 1-1: USB disconnect, device number 12
[  424.835397][ T5724] em28xx 1-1:0.0: Disconnecting em28xx
[  424.860742][ T5724] em28xx 1-1:0.0: Freeing device
[  425.120905][T10380] kvm_pr_unimpl_wrmsr: 76 callbacks suppressed
[  425.120921][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  425.228663][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  425.289090][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  425.350989][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  425.417020][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  425.528760][T10380] kvm: kvm [10379]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x80
[  427.227251][T10411] syzkaller0: entered promiscuous mode
[  427.283407][T10411] syzkaller0: entered allmulticast mode
[  428.140782][ T5608] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  428.318430][T10438] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  428.327418][T10438] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  428.352850][ T5799] usb 1-1: new high-speed USB device number 13 using dummy_hcd
[  428.829475][T10429] nvme_fabrics: missing parameter 'transport=%s'
[  428.861958][T10429] nvme_fabrics: missing parameter 'nqn=%s'
[  428.993598][ T5799] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  429.016433][ T5799] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  429.086986][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  429.155310][ T5799] usb 1-1: config 0 descriptor??
[  429.543700][T10453] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1277'.
[  429.815043][ T5608] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  429.927319][T10461] nvme_fabrics: missing parameter 'transport=%s'
[  429.955715][T10461] nvme_fabrics: missing parameter 'nqn=%s'
[  431.097562][ T5799] usb 1-1: USB disconnect, device number 13
[  434.941976][ T5724] usb 3-1: new high-speed USB device number 7 using dummy_hcd
[  435.093651][ T5724] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  435.102881][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  435.127339][ T5724] usb 3-1: config 0 descriptor??
[  435.148466][ T5724] cp210x 3-1:0.0: cp210x converter detected
[  435.354203][ T5724] cp210x 3-1:0.0: failed to get vendor val 0x370b size 1: -121
[  435.376193][ T5724] cp210x 3-1:0.0: querying part number failed
[  435.425413][ T5724] usb 3-1: cp210x converter now attached to ttyUSB0
[  436.186775][ T5608] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  436.995261][   T30] audit: type=1400 audit(1785191694.183:357): avc:  denied  { ioctl } for  pid=10578 comm="syz.1.1307" path="/dev/ptp0" dev="devtmpfs" ino=1266 ioctlcmd=0x3d02 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1
[  437.053323][T10582] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1307'.
[  437.209145][T10581] wlan0 speed is unknown, defaulting to 1000
[  437.551687][T10586] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  437.575126][T10586] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  437.691344][  T924] usb 3-1: USB disconnect, device number 7
[  437.748699][  T924] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  437.778197][  T924] cp210x 3-1:0.0: device disconnected
[  438.942278][ T5724] usb 3-1: new high-speed USB device number 8 using dummy_hcd
[  439.125896][ T5724] usb 3-1: Using ep0 maxpacket: 16
[  439.140051][ T5724] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[  439.158520][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  439.188561][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  439.213731][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  439.232607][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  439.252664][ T5724] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  439.265922][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  439.301009][ T5724] usb 3-1: config 0 descriptor??
[  439.321208][T10612] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22
[  439.344502][ T5724] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input7
[  439.627878][ T5724] usb 3-1: USB disconnect, device number 8
[  439.713920][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  439.720330][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  440.616318][T10660] overlayfs: failed to resolve './file1/file0': -2
[  443.093807][T10687] overlayfs: failed to resolve './file1/file0': -2
[  445.035875][T10727] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1345'.
[  445.178766][T10724] wlan0 speed is unknown, defaulting to 1000
[  445.504882][T10718] wlan0 speed is unknown, defaulting to 1000
[  445.759264][T10740] overlayfs: overlapping lowerdir path
[  446.238017][T10735] wlan0 speed is unknown, defaulting to 1000
[  447.763383][T10764] wlan0 speed is unknown, defaulting to 1000
[  449.154683][T10800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  449.191401][T10800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  449.308473][T10779] wlan0 speed is unknown, defaulting to 1000
[  451.449405][T10824] wlan0 speed is unknown, defaulting to 1000
[  453.177122][T10873] overlayfs: failed to resolve './file1/file0': -2
[  454.098424][T10885] nvme_fabrics: missing parameter 'transport=%s'
[  454.127216][T10885] nvme_fabrics: missing parameter 'nqn=%s'
[  454.367977][T10879] nvme_fabrics: missing parameter 'transport=%s'
[  454.474356][T10879] nvme_fabrics: missing parameter 'nqn=%s'
[  456.453454][T10912] wlan0 speed is unknown, defaulting to 1000
[  457.188856][T10919] wlan0 speed is unknown, defaulting to 1000
[  457.343418][T10936] overlayfs: failed to resolve './file1/file0': -2
[  458.321183][T10942] wlan0 speed is unknown, defaulting to 1000
[  458.376551][T10938] wlan0 speed is unknown, defaulting to 1000
[  458.734972][T10945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1400'.
[  459.775418][ T5799] usb 1-1: new high-speed USB device number 14 using dummy_hcd
[  459.991917][ T5799] usb 1-1: Using ep0 maxpacket: 32
[  460.009698][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short
[  460.034628][ T5799] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  460.055635][ T5799] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  460.082005][ T5799] usb 1-1: config 14 has no interface number 0
[  460.092792][ T5799] usb 1-1: config 14 has no interface number 1
[  460.110137][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  460.168191][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  460.201513][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  460.244434][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  460.290007][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  460.327167][T10968] wlan0 speed is unknown, defaulting to 1000
[  460.327810][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  460.347313][ T5799] usb 1-1: config 14 interface 57 has no altsetting 0
[  460.354387][ T5799] usb 1-1: config 14 interface 228 has no altsetting 0
[  460.384186][ T5799] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  460.403652][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  460.424172][ T5799] usb 1-1: Product: syz
[  460.430395][ T5799] usb 1-1: Manufacturer: syz
[  460.444221][ T5799] usb 1-1: SerialNumber: syz
[  460.788816][T10979] overlayfs: failed to resolve './file1/file0': -2
[  461.397341][ T5799] legousbtower 1-1:14.57: interrupt endpoints not found
[  461.524553][  T924] usb 2-1: new high-speed USB device number 6 using dummy_hcd
[  461.685770][  T924] usb 2-1: Using ep0 maxpacket: 32
[  461.700786][  T924] usb 2-1: unable to get BOS descriptor or descriptor too short
[  461.719391][  T924] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  461.737284][  T924] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  461.762507][  T924] usb 2-1: config 14 has no interface number 0
[  461.768918][  T924] usb 2-1: config 14 has no interface number 1
[  461.776242][  T924] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  461.790270][  T924] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  461.802352][T10993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  461.802752][T10993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  461.813314][ T5799] legousbtower 1-1:14.228: get version request failed: -121
[  461.826342][  T924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  461.838663][ T5799] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -121
[  461.855190][  T924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  461.880182][  T924] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  461.896269][  T924] usb 2-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  461.910196][  T924] usb 2-1: config 14 interface 57 has no altsetting 0
[  461.917163][  T924] usb 2-1: config 14 interface 228 has no altsetting 0
[  461.927574][  T924] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  461.948890][  T924] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  461.960711][  T924] usb 2-1: Product: syz
[  461.965029][  T924] usb 2-1: Manufacturer: syz
[  461.969718][  T924] usb 2-1: SerialNumber: syz
[  463.451276][ T5799] usb 1-1: USB disconnect, device number 14
[  463.602965][  T924] legousbtower 2-1:14.57: interrupt endpoints not found
[  463.835763][T11008] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  463.844579][T11008] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  464.018006][  T924] legousbtower 2-1:14.228: get version request failed: -71
[  464.051843][  T924] legousbtower 2-1:14.228: probe with driver legousbtower failed with error -71
[  464.127378][  T924] usb 2-1: USB disconnect, device number 6
[  464.137411][T11004] wlan0 speed is unknown, defaulting to 1000
[  464.469503][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  464.625185][T11019] nvme_fabrics: missing parameter 'transport=%s'
[  464.641844][T11019] nvme_fabrics: missing parameter 'nqn=%s'
[  464.784874][ T5608] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  464.906768][T11036] overlayfs: overlapping lowerdir path
[  465.424492][T11033] nvme_fabrics: missing parameter 'transport=%s'
[  465.453798][T11033] nvme_fabrics: missing parameter 'nqn=%s'
[  466.583020][T11058] wlan0 speed is unknown, defaulting to 1000
[  467.331923][T11069] wlan0 speed is unknown, defaulting to 1000
[  467.381959][ T5758] usb 2-1: new high-speed USB device number 7 using dummy_hcd
[  467.554212][ T5758] usb 2-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  467.578943][ T5758] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  467.621122][ T5758] usb 2-1: config 0 descriptor??
[  467.646544][ T5758] cp210x 2-1:0.0: cp210x converter detected
[  468.056590][ T5758] cp210x 2-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  468.074938][ T5758] cp210x 2-1:0.0: failed to get vendor val 0x000e size 678: -71
[  468.093340][ T5758] cp210x 2-1:0.0: GPIO initialisation failed: -71
[  468.124162][ T5758] usb 2-1: cp210x converter now attached to ttyUSB0
[  468.143400][ T5758] usb 2-1: USB disconnect, device number 7
[  468.178097][ T5758] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  468.217291][ T5758] cp210x 2-1:0.0: device disconnected
[  468.577991][T11095] wlan0 speed is unknown, defaulting to 1000
[  469.063407][  T924] usb 1-1: new high-speed USB device number 15 using dummy_hcd
[  469.149498][T11115] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  469.158312][T11115] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  469.243667][  T924] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  469.256448][  T924] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  469.293279][  T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  469.303559][  T924] usb 1-1: Product: syz
[  469.316171][  T924] usb 1-1: Manufacturer: syz
[  469.331992][  T924] usb 1-1: SerialNumber: syz
[  469.448178][T11119] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1445'.
[  469.470913][T11113] wlan0 speed is unknown, defaulting to 1000
[  469.551705][T11106] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.664634][T11106] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.700721][T11123] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  469.723734][  T924] usb 1-1: No union descriptors
[  469.733955][T11123] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  469.759865][  T924] usb 1-1: USB disconnect, device number 15
[  470.017771][T11127] syzkaller0: entered promiscuous mode
[  470.033790][T11127] syzkaller0: entered allmulticast mode
[  470.093626][T11132] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  470.202301][ T5724] usb 1-1: new high-speed USB device number 16 using dummy_hcd
[  470.371960][ T5724] usb 1-1: Using ep0 maxpacket: 8
[  470.390417][ T5724] usb 1-1: config index 0 descriptor too short (expected 301, got 72)
[  470.412235][ T5724] usb 1-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  470.446354][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  470.471256][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  470.496655][ T5724] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid wMaxPacketSize 0
[  470.547542][ T5724] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 0
[  470.561996][ T5724] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  470.575305][ T5724] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  470.585250][ T5724] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  470.613296][ T5724] usbtmc 1-1:16.0: probe with driver usbtmc failed with error -22
[  470.940040][ T5758] usb 1-1: USB disconnect, device number 16
[  472.348038][T11173] wlan0 speed is unknown, defaulting to 1000
[  472.742555][T11196] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  472.751338][T11196] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  472.774793][  T924] usb 1-1: new full-speed USB device number 17 using dummy_hcd
[  472.963146][  T924] usb 1-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 46011, setting to 64
[  472.992583][  T924] usb 1-1: config 0 interface 0 has no altsetting 0
[  473.027194][  T924] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  473.048076][  T924] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  473.073872][  T924] usb 1-1: Product: syz
[  473.091605][  T924] usb 1-1: Manufacturer: syz
[  473.103656][  T924] usb 1-1: SerialNumber: syz
[  473.111314][T11200] wlan0 speed is unknown, defaulting to 1000
[  473.127609][  T924] usb 1-1: config 0 descriptor??
[  473.142396][T11190] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  473.171025][  T924] usb 1-1: selecting invalid altsetting 0
[  473.412749][T11190] usb 1-1: BOGUS urb xfer, pipe 0 != type 1
[  473.466676][ T5758] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[  473.644660][ T5758] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  473.686091][ T5758] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  473.741712][ T5758] usb 4-1: config 0 descriptor??
[  473.810725][ T5758] cp210x 4-1:0.0: cp210x converter detected
[  474.238619][ T5758] cp210x 4-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  474.275845][ T5758] cp210x 4-1:0.0: failed to get vendor val 0x000e size 678: -32
[  474.283670][ T5758] cp210x 4-1:0.0: GPIO initialisation failed: -32
[  474.314330][ T5758] usb 4-1: cp210x converter now attached to ttyUSB0
[  474.352287][ T5758] usb 4-1: USB disconnect, device number 11
[  474.363634][ T5758] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  474.375061][ T5758] cp210x 4-1:0.0: device disconnected
[  474.683413][T11212] wlan0 speed is unknown, defaulting to 1000
[  474.715939][ T5724] usb 3-1: new high-speed USB device number 9 using dummy_hcd
[  474.894057][ T5724] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  474.932663][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  474.974893][ T5724] usb 3-1: config 0 descriptor??
[  475.003793][ T5724] cp210x 3-1:0.0: cp210x converter detected
[  475.410104][ T5724] cp210x 3-1:0.0: failed to get vendor val 0x0010 size 3: -32
[  475.452877][ T5724] cp210x 3-1:0.0: failed to get vendor val 0x000e size 678: -71
[  475.487024][ T5724] cp210x 3-1:0.0: GPIO initialisation failed: -71
[  475.521246][ T5724] usb 3-1: cp210x converter now attached to ttyUSB0
[  475.538056][T11190] snd-usb-audio 1-1:0.0: Runtime PM usage count underflow!
[  475.567312][  T924] usb 1-1: USB disconnect, device number 17
[  475.581075][ T5724] usb 3-1: USB disconnect, device number 9
[  475.627478][ T5724] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  475.667653][ T5724] cp210x 3-1:0.0: device disconnected
[  475.930615][T11234] wlan0 speed is unknown, defaulting to 1000
[  475.943757][ T5608] Bluetooth: hci3: unexpected event for opcode 0x0c25
[  476.060936][T11248] nvme_fabrics: missing parameter 'transport=%s'
[  476.085644][T11248] nvme_fabrics: missing parameter 'nqn=%s'
[  476.481964][T11251] wlan0 speed is unknown, defaulting to 1000
[  477.274976][T11259] wlan0 speed is unknown, defaulting to 1000
[  477.936158][T11271] wlan0 speed is unknown, defaulting to 1000
[  478.383007][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1488'.
[  478.634924][ T5608] Bluetooth: hci0: unexpected event for opcode 0x0c25
[  478.730318][T11303] wlan0 speed is unknown, defaulting to 1000
[  478.777302][T11305] nvme_fabrics: missing parameter 'transport=%s'
[  478.816253][T11305] nvme_fabrics: missing parameter 'nqn=%s'
[  479.502066][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  479.592778][T11318] nvme_fabrics: missing parameter 'transport=%s'
[  479.599340][T11318] nvme_fabrics: missing parameter 'nqn=%s'
[  480.904394][  T924] usb 2-1: new high-speed USB device number 8 using dummy_hcd
[  481.072687][  T924] usb 2-1: Using ep0 maxpacket: 16
[  481.089729][  T924] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  481.110910][  T924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  481.148147][  T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  481.179571][  T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  481.207121][  T924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  481.241122][  T924] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  481.268370][  T924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  481.299886][  T924] usb 2-1: config 0 descriptor??
[  481.313211][T11334] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  481.330389][  T924] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input8
[  481.633674][  T924] usb 2-1: USB disconnect, device number 8
[  482.240438][T11361] wlan0 speed is unknown, defaulting to 1000
[  482.355412][T11369] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1509'.
[  482.898577][T11383] wlan0 speed is unknown, defaulting to 1000
[  482.928874][T11382] wlan0 speed is unknown, defaulting to 1000
[  483.031202][T11377] wlan0 speed is unknown, defaulting to 1000
[  483.425136][ T5608] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  483.504588][T11393] nvme_fabrics: missing parameter 'transport=%s'
[  483.529328][T11393] nvme_fabrics: missing parameter 'nqn=%s'
[  484.372511][ T5724] usb 1-1: new high-speed USB device number 18 using dummy_hcd
[  484.564755][ T5724] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  484.583718][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  484.619597][ T5724] usb 1-1: config 0 has no interface number 0
[  484.660234][ T5724] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  484.692389][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  484.714279][ T5724] usb 1-1: Product: syz
[  484.726985][ T5724] usb 1-1: Manufacturer: syz
[  484.739315][ T5724] usb 1-1: SerialNumber: syz
[  484.775308][ T5724] usb 1-1: config 0 descriptor??
[  484.807268][ T5724] yurex 1-1:0.50: Could not find endpoints
[  485.084162][  T924] usb 1-1: USB disconnect, device number 18
[  485.736110][T11410] wlan0 speed is unknown, defaulting to 1000
[  486.311947][ T5724] usb 2-1: new high-speed USB device number 9 using dummy_hcd
[  486.473713][ T5724] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  486.482310][ T5724] usb 2-1: config 0 has no interface number 0
[  486.491644][ T5724] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  486.513174][ T5724] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  486.522425][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.534134][ T5724] usb 2-1: Product: syz
[  486.543965][ T5724] usb 2-1: Manufacturer: syz
[  486.550870][ T5724] usb 2-1: SerialNumber: syz
[  486.568880][ T5724] usb 2-1: config 0 descriptor??
[  486.585841][ T5724] yurex 2-1:0.50: USB YUREX device now attached to Yurex #0
[  486.711993][ T5758] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  486.811738][ T5724] usb 2-1: USB disconnect, device number 9
[  486.823984][ T5724] yurex 2-1:0.50: USB YUREX #0 now disconnected
[  486.873087][ T5758] usb 4-1: Using ep0 maxpacket: 16
[  486.880209][ T5758] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  486.901070][ T5758] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  486.933544][ T5758] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  486.972084][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  486.986953][ T5758] usb 4-1: Product: syz
[  486.993967][ T5758] usb 4-1: Manufacturer: syz
[  487.006468][ T5758] usb 4-1: SerialNumber: syz
[  487.034387][ T5758] usb 4-1: config 0 descriptor??
[  487.052640][ T5758] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  487.072414][ T5758] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class)
[  487.084861][T11447] wlan0 speed is unknown, defaulting to 1000
[  487.209442][T11458] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  487.227418][T11458] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  487.663220][ T5758] em28xx 4-1:0.0: unknown em28xx chip ID (0)
[  487.673975][ T5758] em28xx 4-1:0.0: Config register raw data: 0xfffffffb
[  487.881951][ T5724] usb 2-1: new high-speed USB device number 10 using dummy_hcd
[  487.921935][  T924] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  488.033391][ T5724] usb 2-1: config 0 has an invalid interface number: 50 but max is 0
[  488.052391][ T5724] usb 2-1: config 0 has no interface number 0
[  488.067239][ T5724] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  488.081103][ T5724] usb 2-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0
[  488.081922][  T924] usb 1-1: Using ep0 maxpacket: 16
[  488.095655][ T5724] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  488.106492][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.107030][  T924] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  488.114815][ T5724] usb 2-1: Product: syz
[  488.114833][ T5724] usb 2-1: Manufacturer: syz
[  488.114851][ T5724] usb 2-1: SerialNumber: syz
[  488.119528][ T5724] usb 2-1: config 0 descriptor??
[  488.138501][  T924] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  488.169388][  T924] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  488.170808][ T5724] yurex 2-1:0.50: Could not submitting URB
[  488.181326][  T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  488.187269][ T5724] yurex 2-1:0.50: probe with driver yurex failed with error -5
[  488.216833][  T924] usb 1-1: Product: syz
[  488.230766][  T924] usb 1-1: Manufacturer: syz
[  488.237565][  T924] usb 1-1: SerialNumber: syz
[  488.249011][  T924] usb 1-1: config 0 descriptor??
[  488.263180][  T924] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  488.277759][  T924] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  488.294014][ T5758] em28xx 4-1:0.0: Unknown AC97 audio processor detected!
[  488.301840][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  488.309298][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  488.316593][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  488.325932][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  488.333726][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  488.367424][T11476] wlan0 speed is unknown, defaulting to 1000
[  488.427208][ T5724] usb 2-1: USB disconnect, device number 10
[  488.542611][    C0] raw-gadget.3 gadget.3: ignoring, device is not running
[  488.550408][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 2
[  488.556795][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 4
[  488.568521][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 6
[  488.575287][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 54
[  488.583691][ T5758] em28xx 4-1:0.0: couldn't setup AC97 register 56
[  488.603422][ T5758] usb 4-1: USB disconnect, device number 12
[  488.812296][T11476] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1542'.
[  488.873200][  T924] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  488.879919][  T924] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  489.196182][T11482] wlan0 speed is unknown, defaulting to 1000
[  489.506783][  T924] em28xx 1-1:0.0: Unknown AC97 audio processor detected!
[  489.555826][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  489.663966][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  489.679549][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  489.688426][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  489.696284][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  489.905144][    C1] raw-gadget.4 gadget.0: ignoring, device is not running
[  489.923963][    C1] raw-gadget.4 gadget.0: ignoring, device is not running
[  489.934838][    C1] raw-gadget.4 gadget.0: ignoring, device is not running
[  489.946806][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 2
[  489.957561][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 4
[  489.964830][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 6
[  489.971244][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 54
[  489.990569][  T924] em28xx 1-1:0.0: couldn't setup AC97 register 56
[  490.024848][  T924] usb 1-1: USB disconnect, device number 19
[  490.542592][   T30] audit: type=1400 audit(1785191747.733:358): avc:  denied  { prog_run } for  pid=11517 comm="syz.1.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  491.170041][T11522] wlan0 speed is unknown, defaulting to 1000
[  492.932219][T11588] overlayfs: missing 'lowerdir'
[  494.063840][T11617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  494.079836][T11617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  494.228740][T11623] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  494.242761][T11623] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  494.272755][T11615] wlan0 speed is unknown, defaulting to 1000
[  495.166502][T11637] wlan0 speed is unknown, defaulting to 1000
[  495.237816][T11646] overlayfs: missing 'lowerdir'
[  496.500930][ T5608] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  496.589200][T11667] nvme_fabrics: missing parameter 'transport=%s'
[  496.598754][T11667] nvme_fabrics: missing parameter 'nqn=%s'
[  496.625526][  T924] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[  496.806437][  T924] usb 4-1: config 2 has an invalid interface number: 43 but max is 0
[  497.364135][  T924] usb 4-1: config 2 has no interface number 0
[  497.379773][  T924] usb 4-1: config 2 interface 43 has no altsetting 0
[  497.394195][  T924] usb 4-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  497.422207][  T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  497.454569][  T924] usb 4-1: Product: syz
[  497.463242][  T924] usb 4-1: Manufacturer: syz
[  497.469336][T11671] wlan0 speed is unknown, defaulting to 1000
[  497.469713][  T924] usb 4-1: SerialNumber: syz
[  497.719571][  T924] ums-usbat 4-1:2.43: USB Mass Storage device detected
[  497.764044][  T924] ums-usbat 4-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  497.883784][  T924] usb 4-1: USB disconnect, device number 13
[  499.348619][T11730] wlan0 speed is unknown, defaulting to 1000
[  499.727192][T11725] wlan0 speed is unknown, defaulting to 1000
[  501.002048][ T5758] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  501.154943][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  501.161280][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  501.171200][ T5758] usb 1-1: config 0 has an invalid interface number: 50 but max is 0
[  501.190135][T11773] wlan0 speed is unknown, defaulting to 1000
[  501.200208][ T5758] usb 1-1: config 0 has no interface number 0
[  501.214578][ T5758] usb 1-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  501.254535][ T5758] usb 1-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc
[  501.272126][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  501.287980][ T5758] usb 1-1: Product: syz
[  501.292613][ T5758] usb 1-1: Manufacturer: syz
[  501.297263][ T5758] usb 1-1: SerialNumber: syz
[  501.309083][ T5758] usb 1-1: config 0 descriptor??
[  501.334243][ T5758] yurex 1-1:0.50: USB YUREX device now attached to Yurex #0
[  501.584275][ T5758] usb 1-1: USB disconnect, device number 20
[  501.603467][ T5758] yurex 1-1:0.50: USB YUREX #0 now disconnected
[  502.496260][T11801] wlan0 speed is unknown, defaulting to 1000
[  503.144209][ T5758] usb 2-1: new high-speed USB device number 11 using dummy_hcd
[  503.312008][ T5758] usb 2-1: Using ep0 maxpacket: 32
[  503.337203][ T5758] usb 2-1: unable to get BOS descriptor or descriptor too short
[  503.367010][ T5758] usb 2-1: config 14 has an invalid interface number: 57 but max is 1
[  503.385315][ T5758] usb 2-1: config 14 has an invalid interface number: 228 but max is 1
[  503.403426][ T5758] usb 2-1: config 14 has no interface number 0
[  503.416954][ T5758] usb 2-1: config 14 has no interface number 1
[  503.430082][ T5758] usb 2-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  503.461095][ T5758] usb 2-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  503.498339][ T5758] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  503.540986][ T5758] usb 2-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  503.560389][T11820] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  503.574367][ T5758] usb 2-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  503.601895][ T5758] usb 2-1: config 14 interface 57 has no altsetting 0
[  503.612277][T11820] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  503.625964][ T5758] usb 2-1: config 14 interface 228 has no altsetting 0
[  503.644278][ T5758] usb 2-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  503.669741][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  503.687873][ T5758] usb 2-1: Product: syz
[  503.695639][ T5758] usb 2-1: Manufacturer: syz
[  503.708159][ T5758] usb 2-1: SerialNumber: syz
[  503.851990][  T924] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[  504.012053][  T924] usb 1-1: Using ep0 maxpacket: 32
[  504.024063][  T924] usb 1-1: unable to get BOS descriptor or descriptor too short
[  504.037153][  T924] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  504.047955][  T924] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  504.061209][  T924] usb 1-1: config 14 has no interface number 0
[  504.081920][  T924] usb 1-1: config 14 has no interface number 1
[  504.098881][  T924] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  504.128261][  T924] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  504.146283][T11828] wlan0 speed is unknown, defaulting to 1000
[  504.154186][ T5758] legousbtower 2-1:14.57: interrupt endpoints not found
[  504.193883][  T924] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  504.209742][  T924] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  504.224195][  T924] usb 1-1: config 14 interface 228 altsetting 5 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  504.238683][  T924] usb 1-1: config 14 interface 57 has no altsetting 0
[  504.246204][  T924] usb 1-1: config 14 interface 228 has no altsetting 0
[  504.287191][  T924] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  504.308378][  T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  504.328109][  T924] usb 1-1: Product: syz
[  504.340031][  T924] usb 1-1: Manufacturer: syz
[  504.349617][  T924] usb 1-1: SerialNumber: syz
[  504.362658][ T5758] legousbtower 2-1:14.228: interrupt endpoints not found
[  504.433685][ T5724] usb 3-1: new high-speed USB device number 10 using dummy_hcd
[  504.601951][ T5724] usb 3-1: Using ep0 maxpacket: 16
[  504.623471][ T5724] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[  504.636504][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  504.658207][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  504.691942][ T5724] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  504.703226][ T5724] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  504.716124][ T5724] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  504.725197][ T5724] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  504.737132][ T5724] usb 3-1: config 0 descriptor??
[  504.750327][T11833] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  504.772507][ T5724] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input9
[  504.831063][  T924] legousbtower 1-1:14.57: interrupt endpoints not found
[  505.025472][  T924] legousbtower 1-1:14.228: interrupt endpoints not found
[  505.083611][  T924] usb 3-1: USB disconnect, device number 10
[  505.228767][T11851] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  505.253659][T11851] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  506.021378][  T924] usb 2-1: USB disconnect, device number 11
[  506.645759][T11871] wlan0 speed is unknown, defaulting to 1000
[  506.702256][  T924] usb 1-1: USB disconnect, device number 21
[  507.387959][T11889] wlan0 speed is unknown, defaulting to 1000
[  509.007218][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0xc2) = 0x800100000080
[  509.040979][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0x800000000000
[  509.074904][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  509.098802][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  509.142406][  T924] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  509.151688][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  509.179643][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  509.241827][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  509.276848][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  509.312075][  T924] usb 4-1: Using ep0 maxpacket: 32
[  509.320991][  T924] usb 4-1: config 0 has an invalid interface number: 85 but max is 0
[  509.332948][  T924] usb 4-1: config 0 has no interface number 0
[  509.344697][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x11e) = 0x800000000000
[  509.355763][  T924] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  509.401043][  T924] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has invalid wMaxPacketSize 0
[  509.401090][T11925] kvm: kvm [11924]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111
[  509.456233][  T924] usb 4-1: config 0 interface 85 has no altsetting 0
[  509.475810][  T924] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72
[  509.490939][  T924] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  509.511318][  T924] usb 4-1: Product: syz
[  509.561038][  T924] usb 4-1: Manufacturer: syz
[  509.583216][  T924] usb 4-1: SerialNumber: syz
[  509.625674][  T924] usb 4-1: config 0 descriptor??
[  510.050629][  T924] appletouch 4-1:0.85: Geyser mode initialized.
[  510.077472][  T924] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input10
[  510.340676][  T924] usb 4-1: USB disconnect, device number 14
[  510.424030][  T924] appletouch 4-1:0.85: input: appletouch disconnected
[  511.263517][ T5724] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[  511.400082][   T30] audit: type=1400 audit(1785191768.583:359): avc:  denied  { write } for  pid=11969 comm="syz.2.1686" path="socket:[74752]" dev="sockfs" ino=74752 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1
[  511.437024][ T5724] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  511.470440][ T5724] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid maxpacket 46011, setting to 64
[  511.498093][ T5724] usb 4-1: config 0 interface 0 has no altsetting 0
[  511.516190][ T5724] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  511.528179][ T5724] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  511.562209][ T5724] usb 4-1: Product: syz
[  511.577895][ T5724] usb 4-1: Manufacturer: syz
[  511.601124][ T5724] usb 4-1: SerialNumber: syz
[  511.627969][ T5724] usb 4-1: config 0 descriptor??
[  511.647553][T11961] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22
[  511.673591][ T5724] usb 4-1: selecting invalid altsetting 0
[  511.894203][T11961] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  511.912727][T11961] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  511.953543][T11961] usb 4-1: cannot submit urb 0, error -2: endpoint not enabled
[  511.999059][  T924] usb 4-1: USB disconnect, device number 15
[  512.012307][T11961] usb 4-1: cannot submit urb 0, error -19: no device
[  512.809368][T11998] wlan0 speed is unknown, defaulting to 1000
[  513.164771][T12006] wlan0 speed is unknown, defaulting to 1000
[  513.191069][T12009] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1694'.
[  513.564311][ T5799] usb 3-1: new high-speed USB device number 11 using dummy_hcd
[  513.726120][ T5799] usb 3-1: Using ep0 maxpacket: 16
[  513.738489][ T5799] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  513.751784][ T5799] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  513.765315][ T5799] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  513.775865][ T5799] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  513.790430][ T5799] usb 3-1: Product: syz
[  513.800605][ T5799] usb 3-1: Manufacturer: syz
[  513.805304][ T5799] usb 3-1: SerialNumber: syz
[  513.814910][ T5799] usb 3-1: config 0 descriptor??
[  513.836057][ T5799] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  513.847243][ T5799] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class)
[  513.882924][ T5724] usb 2-1: new high-speed USB device number 12 using dummy_hcd
[  514.062319][ T5724] usb 2-1: Using ep0 maxpacket: 16
[  514.083419][ T5724] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  514.118633][ T5724] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  514.137025][ T5724] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  514.156454][ T5724] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  514.179369][ T5724] usb 2-1: Product: syz
[  514.186857][ T5724] usb 2-1: Manufacturer: syz
[  514.197530][ T5724] usb 2-1: SerialNumber: syz
[  514.204071][T12026] wlan0 speed is unknown, defaulting to 1000
[  514.214474][ T5724] usb 2-1: config 0 descriptor??
[  514.226870][ T5724] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  514.236887][ T5724] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class)
[  514.328664][T12032] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1700'.
[  514.441030][ T5799] em28xx 3-1:0.0: unknown em28xx chip ID (0)
[  514.460162][ T5799] em28xx 3-1:0.0: Config register raw data: 0xfffffffb
[  515.292983][ T5724] em28xx 2-1:0.0: unknown em28xx chip ID (0)
[  515.306441][ T5799] em28xx 3-1:0.0: Unknown AC97 audio processor detected!
[  515.316141][ T5724] em28xx 2-1:0.0: Config register raw data: 0xfffffffb
[  515.330156][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  515.340927][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  515.353324][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  515.364967][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  515.377337][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  515.594051][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 2
[  515.610414][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 4
[  515.620616][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 6
[  515.627506][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 54
[  515.634173][ T5799] em28xx 3-1:0.0: couldn't setup AC97 register 56
[  515.649444][ T5799] usb 3-1: USB disconnect, device number 11
[  515.932495][  T924] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  515.934804][ T5724] em28xx 2-1:0.0: Unknown AC97 audio processor detected!
[  515.949031][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  515.956095][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  515.963728][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  515.970909][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  515.981962][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  516.083401][  T924] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  516.093570][  T924] usb 4-1: config 0 interface 0 has no altsetting 0
[  516.102152][  T924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  516.111488][  T924] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  516.120662][  T924] usb 4-1: Product: syz
[  516.125056][  T924] usb 4-1: Manufacturer: syz
[  516.130974][  T924] usb 4-1: SerialNumber: syz
[  516.138696][  T924] usb 4-1: config 0 descriptor??
[  516.158070][  T924] usb 4-1: selecting invalid altsetting 0
[  516.191378][    C0] raw-gadget.3 gadget.1: ignoring, device is not running
[  516.210931][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 2
[  516.218884][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 4
[  516.242236][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 6
[  516.262880][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 54
[  516.283581][ T5724] em28xx 2-1:0.0: couldn't setup AC97 register 56
[  516.323660][ T5724] usb 2-1: USB disconnect, device number 12
[  516.420013][T12072] wlan0 speed is unknown, defaulting to 1000
[  516.498604][  T924] usb 4-1: USB disconnect, device number 16
[  518.065784][T12112] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  518.088041][T12112] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  518.575750][T12131] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1729'.
[  518.790231][T12128] wlan0 speed is unknown, defaulting to 1000
[  520.434126][  T924] usb 2-1: new high-speed USB device number 13 using dummy_hcd
[  520.612148][  T924] usb 2-1: Using ep0 maxpacket: 16
[  520.630246][  T924] usb 2-1: config index 0 descriptor too short (expected 65, got 36)
[  520.656984][  T924] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  520.688349][  T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  520.728275][  T924] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  520.761939][  T924] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  520.775485][  T924] usb 2-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  520.784685][  T924] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  520.810842][  T924] usb 2-1: config 0 descriptor??
[  520.841575][T12154] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  520.876604][  T924] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input11
[  521.165940][  T924] usb 2-1: USB disconnect, device number 13
[  521.596804][T12186] wlan0 speed is unknown, defaulting to 1000
[  521.874889][   T30] audit: type=1400 audit(1785191779.063:360): avc:  denied  { setopt } for  pid=12192 comm="syz.2.1751" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[  522.831295][T12226] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  522.838719][   T30] audit: type=1400 audit(1785191780.013:361): avc:  denied  { mount } for  pid=12223 comm="syz.1.1761" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  522.870809][T12226] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  523.024363][   T30] audit: type=1400 audit(1785191780.213:362): avc:  denied  { remount } for  pid=12223 comm="syz.1.1761" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  523.123635][  T924] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  523.443672][  T924] usb 1-1: Using ep0 maxpacket: 16
[  523.452421][  T924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  523.483466][  T924] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  523.503148][  T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  523.975467][  T924] usb 1-1: Product: syz
[  523.979682][  T924] usb 1-1: Manufacturer: syz
[  523.984316][  T924] usb 1-1: SerialNumber: syz
[  523.991381][  T924] usb 1-1: config 0 descriptor??
[  524.486779][T12257] wlan0 speed is unknown, defaulting to 1000
[  524.634623][T12260] wlan0 speed is unknown, defaulting to 1000
[  525.719559][T12283] wlan0 speed is unknown, defaulting to 1000
[  525.892453][ T5758] usb 3-1: new full-speed USB device number 12 using dummy_hcd
[  525.927466][ T5724] usb 1-1: USB disconnect, device number 22
[  525.988226][   T30] audit: type=1400 audit(1785191783.173:363): avc:  denied  { unmount } for  pid=5606 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1
[  526.059642][ T5758] usb 3-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid wMaxPacketSize 0
[  526.075717][ T5758] usb 3-1: config 0 interface 0 has no altsetting 0
[  526.120410][ T5758] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  526.138270][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  526.184286][ T5758] usb 3-1: Product: syz
[  526.215473][ T5758] usb 3-1: Manufacturer: syz
[  526.244124][ T5758] usb 3-1: SerialNumber: syz
[  526.267691][ T5758] usb 3-1: config 0 descriptor??
[  526.287540][T12299] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1781'.
[  526.300637][T12298] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  526.323253][ T5758] usb 3-1: selecting invalid altsetting 0
[  526.362649][T12298] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  526.378551][T12296] wlan0 speed is unknown, defaulting to 1000
[  526.570322][ T5758] usb 3-1: USB disconnect, device number 12
[  527.121959][ T5758] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  527.207028][T12316] overlayfs: missing 'lowerdir'
[  527.743671][ T5758] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  527.770082][ T5758] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  527.790946][ T5758] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8B has invalid wMaxPacketSize 0
[  527.814852][ T5758] usb 4-1: config 0 interface 0 has no altsetting 0
[  527.845937][ T5758] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  527.862115][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  527.883528][ T5758] usb 4-1: Product: syz
[  527.894513][ T5758] usb 4-1: Manufacturer: syz
[  527.900151][ T5758] usb 4-1: SerialNumber: syz
[  528.527464][ T5758] usb 4-1: config 0 descriptor??
[  528.549394][ T5758] usb 4-1: selecting invalid altsetting 0
[  528.859538][  T924] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  528.905219][ T5799] usb 4-1: USB disconnect, device number 17
[  529.032237][  T924] usb 1-1: Using ep0 maxpacket: 16
[  529.054729][  T924] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  529.070171][T12332] wlan0 speed is unknown, defaulting to 1000
[  529.143467][  T924] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  529.163054][  T924] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  529.185140][  T924] usb 1-1: Product: syz
[  529.195564][T12335] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1790'.
[  529.206798][  T924] usb 1-1: Manufacturer: syz
[  529.214928][  T924] usb 1-1: SerialNumber: syz
[  529.232333][  T924] usb 1-1: config 0 descriptor??
[  531.485286][T12383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1799'.
[  531.563255][T12368] wlan0 speed is unknown, defaulting to 1000
[  531.714823][  T924] usb 1-1: USB disconnect, device number 23
[  532.473924][T12420] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1808'.
[  532.768296][T12410] wlan0 speed is unknown, defaulting to 1000
[  533.850074][T12442] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1814'.
[  534.319983][T12436] wlan0 speed is unknown, defaulting to 1000
[  534.454236][T12440] wlan0 speed is unknown, defaulting to 1000
[  534.531915][ T5758] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  534.701898][ T5758] usb 1-1: Using ep0 maxpacket: 16
[  534.723809][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  534.760100][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  534.805819][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  534.841469][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  534.875238][ T5758] usb 1-1: Product: syz
[  534.898831][ T5758] usb 1-1: Manufacturer: syz
[  534.923246][ T5758] usb 1-1: SerialNumber: syz
[  534.965940][ T5758] usb 1-1: config 0 descriptor??
[  535.011345][ T5758] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  535.046756][ T5758] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  535.598612][ T5758] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  535.609505][ T5758] em28xx 1-1:0.0: Config register raw data: 0x00
[  535.792027][  T924] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  535.962503][  T924] usb 4-1: config 0 has an invalid interface number: 255 but max is 0
[  535.985486][  T924] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  536.006430][  T924] usb 4-1: config 0 has no interface number 0
[  536.015817][  T924] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  536.026221][  T924] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  536.037373][  T924] usb 4-1: Product: syz
[  536.041591][  T924] usb 4-1: Manufacturer: syz
[  536.048097][  T924] usb 4-1: SerialNumber: syz
[  536.065415][  T924] usb 4-1: config 0 descriptor??
[  536.313887][  T924] usb 4-1: USB disconnect, device number 18
[  536.732797][T12495] wlan0 speed is unknown, defaulting to 1000
[  537.134921][T12514] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1831'.
[  537.318700][ T5724] usb 1-1: USB disconnect, device number 24
[  537.385645][ T5724] em28xx 1-1:0.0: Disconnecting em28xx
[  537.420285][ T5724] em28xx 1-1:0.0: Freeing device
[  537.531934][ T5758] usb 3-1: new high-speed USB device number 13 using dummy_hcd
[  537.637556][T12512] wlan0 speed is unknown, defaulting to 1000
[  537.751155][ T5758] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  537.761922][ T5758] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  537.780649][ T5758] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  537.790089][ T5758] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  537.814675][ T5758] usb 3-1: Product: syz
[  537.826697][ T5758] usb 3-1: Manufacturer: syz
[  537.828635][T12523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1834'.
[  537.873328][ T5758] usb 3-1: SerialNumber: syz
[  538.130540][T12517] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  538.190084][T12517] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  538.212475][T12497] wlan0 speed is unknown, defaulting to 1000
[  538.311754][ T5758] cdc_ether 3-1:1.0: probe with driver cdc_ether failed with error -22
[  538.388232][ T5758] usb 3-1: USB disconnect, device number 13
[  538.881950][ T5758] usb 3-1: new high-speed USB device number 14 using dummy_hcd
[  539.041917][ T5758] usb 3-1: Using ep0 maxpacket: 8
[  539.049637][ T5758] usb 3-1: config index 0 descriptor too short (expected 301, got 72)
[  539.060239][ T5758] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[  539.072183][ T5724] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  539.091348][ T5758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[  539.106289][ T5758] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[  539.116197][ T5758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 1024, setting to 64
[  539.127240][ T5758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  539.152439][ T5758] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  539.174868][ T5758] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  539.187325][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  539.214330][ T5758] usbtmc 3-1:16.0: bulk endpoints not found
[  539.231888][ T5724] usb 1-1: Using ep0 maxpacket: 16
[  539.240668][ T5724] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  539.251037][ T5724] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  539.266522][ T5724] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  539.278229][ T5724] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  539.286291][ T5724] usb 1-1: Product: syz
[  539.294353][ T5724] usb 1-1: Manufacturer: syz
[  539.303898][ T5724] usb 1-1: SerialNumber: syz
[  539.315170][ T5724] usb 1-1: config 0 descriptor??
[  539.450335][ T5724] usb 3-1: USB disconnect, device number 14
[  539.471923][ T5758] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  539.647269][ T5758] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has an invalid bInterval 0, changing to 10
[  539.658971][ T5758] usb 2-1: config 0 interface 0 altsetting 255 endpoint 0x4 has invalid maxpacket 187, setting to 64
[  539.670001][ T5758] usb 2-1: config 0 interface 0 has no altsetting 0
[  539.681943][ T5758] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  539.693019][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  539.701192][ T5758] usb 2-1: Product: syz
[  539.705389][ T5758] usb 2-1: Manufacturer: syz
[  539.709975][ T5758] usb 2-1: SerialNumber: syz
[  539.716435][ T5758] usb 2-1: config 0 descriptor??
[  539.721981][T12543] raw-gadget.5 gadget.1: fail, usb_ep_enable returned -22
[  539.731941][ T5758] usb 2-1: selecting invalid altsetting 0
[  539.921937][   T10] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  540.012055][ T5799] usb 2-1: USB disconnect, device number 14
[  540.012080][    C0] usb 2-1: Unable to submit urb #0: -19 at snd_usb_queue_pending_output_urbs
[  540.027540][T12543] usb 2-1: cannot submit urb 0, error -19: no device
[  540.028666][    C0] dummy_hcd dummy_hcd.1: timer fired with no URBs pending?
[  540.040083][T12543] usb 2-1: cannot submit urb 0, error -19: no device
[  540.048762][T12543] usb 2-1: cannot submit urb 0, error -19: no device
[  540.076863][T12543] usb 2-1: cannot submit urb 0, error -19: no device
[  540.085107][   T10] usb 4-1: Using ep0 maxpacket: 32
[  540.094168][   T10] usb 4-1: unable to get BOS descriptor or descriptor too short
[  540.116579][   T10] usb 4-1: config 14 has an invalid interface number: 228 but max is 0
[  540.135070][   T10] usb 4-1: config 14 has no interface number 0
[  540.149571][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x8 has invalid maxpacket 1024, setting to 64
[  540.183638][   T10] usb 4-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  540.203678][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  540.237005][   T10] usb 4-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  540.251668][   T10] usb 4-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  540.265060][   T10] usb 4-1: config 14 interface 228 has no altsetting 0
[  540.276952][   T10] usb 4-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  540.300367][   T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  540.313595][   T10] usb 4-1: Product: syz
[  540.322406][   T10] usb 4-1: Manufacturer: syz
[  540.327020][   T10] usb 4-1: SerialNumber: syz
[  540.505527][T12559] wlan0 speed is unknown, defaulting to 1000
[  540.754974][   T10] legousbtower 4-1:14.228: interrupt endpoints not found
[  541.155888][T12574] wlan0 speed is unknown, defaulting to 1000
[  541.500335][T12582] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1849'.
[  541.616473][T12570] wlan0 speed is unknown, defaulting to 1000
[  541.846614][ T5799] usb 1-1: USB disconnect, device number 25
[  543.891919][  T924] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  544.116608][ T5798] usb 4-1: USB disconnect, device number 19
[  544.225365][  T924] usb 1-1: Dual-Role OTG device on HNP port
[  544.245290][  T924] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  544.284836][  T924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  544.383847][  T924] gspca_main: spca501-2.14.0 probing 0000:0000
[  544.410563][  T924] gspca_spca501: reg write: error -32
[  544.460374][  T924] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  544.549208][  T924] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  544.556174][T12619] wlan0 speed is unknown, defaulting to 1000
[  544.636660][T12621] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1860'.
[  545.543151][T12617] wlan0 speed is unknown, defaulting to 1000
[  546.125972][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1862'.
[  546.127796][T12639] wlan0 speed is unknown, defaulting to 1000
[  547.442829][T12666] wlan0 speed is unknown, defaulting to 1000
[  550.556615][T12712] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  550.590568][T12712] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  550.602448][T12703] wlan0 speed is unknown, defaulting to 1000
[  550.749868][T12717] wlan0 speed is unknown, defaulting to 1000
[  552.796985][   T30] audit: type=1400 audit(1785191809.983:364): avc:  denied  { cmd } for  pid=12734 comm="syz.0.1889" path="socket:[85384]" dev="sockfs" ino=85384 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  553.773620][T12753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  553.943098][T12753] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  554.693293][T12772] wlan0 speed is unknown, defaulting to 1000
[  555.062057][ T5798] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  555.376012][ T5798] usb 2-1: config 0 interface 0 altsetting 255 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  555.404173][ T5798] usb 2-1: config 0 interface 0 has no altsetting 0
[  555.424107][ T5798] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  555.433618][ T5798] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  555.443123][ T5798] usb 2-1: Product: syz
[  555.447762][ T5798] usb 2-1: Manufacturer: syz
[  555.728842][  T924] usb 1-1: USB disconnect, device number 26
[  556.418552][ T5798] usb 2-1: SerialNumber: syz
[  556.469079][ T5798] usb 2-1: config 0 descriptor??
[  557.709010][ T5798] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -22
[  557.774190][ T5798] usb 2-1: USB disconnect, device number 15
[  557.863962][T11213] udevd[11213]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  558.172336][  T924] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  558.228372][ T5608] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  558.374800][  T924] usb 1-1: Dual-Role OTG device on HNP port
[  558.396973][T12822] nvme_fabrics: missing parameter 'transport=%s'
[  558.409169][  T924] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  558.426902][T12822] nvme_fabrics: missing parameter 'nqn=%s'
[  558.431481][  T924] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  558.569069][  T924] gspca_main: spca501-2.14.0 probing 0000:0000
[  558.584071][  T924] gspca_spca501: reg write: error -32
[  558.591374][  T924] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  558.600014][  T924] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  559.618590][  T924] usb 1-1: Failed to set altset
[  559.643610][  T924] usb 1-1: 1:2: cannot create sequencer device
[  560.053567][  T924] usb 1-1: string descriptor 0 read error: -71
[  560.078441][  T924] usb 1-1: Failed to set altset
[  560.128443][  T924] snd-usb-audio 1-1:1.2: probe with driver snd-usb-audio failed with error -71
[  560.179413][  T924] usb 1-1: USB disconnect, device number 27
[  561.121516][T12880] wlan0 speed is unknown, defaulting to 1000
[  561.180864][T12885] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1926'.
[  562.622608][ T1312] ieee802154 phy0 wpan0: encryption failed: -22
[  562.629016][ T1312] ieee802154 phy1 wpan1: encryption failed: -22
[  563.579019][ T5798] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  563.594670][ T5608] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  563.715362][T12891] nvme_fabrics: missing parameter 'transport=%s'
[  563.765644][T12891] nvme_fabrics: missing parameter 'nqn=%s'
[  563.805452][ T5798] usb 1-1: Dual-Role OTG device on HNP port
[  563.828738][ T5798] usb 1-1: New USB device found, idVendor=0000, idProduct=0000, bcdDevice= 7.02
[  563.870676][ T5798] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  563.958208][ T5798] gspca_main: spca501-2.14.0 probing 0000:0000
[  564.005228][ T5798] gspca_spca501: reg write: error -32
[  564.040589][ T5798] spca501 1-1:1.0: Reg write failed for 0x02,0x0f,0x05
[  564.085944][ T5798] spca501 1-1:1.0: probe with driver spca501 failed with error -22
[  564.202203][ T5758] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  564.383596][ T5758] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[  564.424376][ T5758] usb 2-1: config 2 has no interface number 0
[  564.447137][ T5758] usb 2-1: config 2 interface 43 has no altsetting 0
[  564.490369][ T5758] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  564.519643][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  564.546720][ T5758] usb 2-1: Product: syz
[  564.558135][ T5758] usb 2-1: Manufacturer: syz
[  564.570424][ T5758] usb 2-1: SerialNumber: syz
[  564.823485][ T5758] ums-usbat 2-1:2.43: USB Mass Storage device detected
[  564.863704][ T5758] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  564.959745][ T5758] usb 2-1: USB disconnect, device number 16
[  565.636812][T12952] wlan0 speed is unknown, defaulting to 1000
[  567.861122][T12982] syzkaller0: entered promiscuous mode
[  567.898154][T12982] syzkaller0: entered allmulticast mode
[  567.965579][T12983] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1944'.
[  568.365097][T12997] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  568.382415][T12997] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  568.564687][T13000] nvme_fabrics: missing parameter 'transport=%s'
[  568.582019][T13000] nvme_fabrics: missing parameter 'nqn=%s'
[  568.592363][T12956] wlan0 speed is unknown, defaulting to 1000
[  568.594116][ T5758] usb 4-1: new full-speed USB device number 20 using dummy_hcd
[  568.783235][ T5758] usb 4-1: config 0 interface 0 altsetting 255 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  568.798162][ T5758] usb 4-1: config 0 interface 0 altsetting 255 endpoint 0x8F has invalid wMaxPacketSize 0
[  568.816995][ T5758] usb 4-1: config 0 interface 0 has no altsetting 0
[  568.835508][ T5758] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  568.848787][ T5758] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  568.869855][ T5758] usb 4-1: Product: syz
[  568.887964][ T5758] usb 4-1: Manufacturer: syz
[  568.898971][ T5758] usb 4-1: SerialNumber: syz
[  568.912114][ T5758] usb 4-1: config 0 descriptor??
[  568.929106][ T5758] usb 4-1: selecting invalid altsetting 0
[  569.302965][ T5758] usb 4-1: USB disconnect, device number 20
[  569.464859][T13015] wlan0 speed is unknown, defaulting to 1000
[  572.618451][ T5608] Bluetooth: hci4: unexpected event for opcode 0x0c25
[  572.773486][T13041] nvme_fabrics: missing parameter 'transport=%s'
[  572.888707][T13041] nvme_fabrics: missing parameter 'nqn=%s'
[  573.183105][ T5798] usb 3-1: new high-speed USB device number 15 using dummy_hcd
[  573.363312][ T5798] usb 3-1: config 2 has an invalid interface number: 43 but max is 0
[  573.377228][ T5798] usb 3-1: config 2 has no interface number 0
[  573.397012][ T5798] usb 3-1: config 2 interface 43 has no altsetting 0
[  573.418014][ T5798] usb 3-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  573.441286][ T5798] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  573.475389][ T5798] usb 3-1: Product: syz
[  573.487519][ T5798] usb 3-1: Manufacturer: syz
[  573.501023][ T5798] usb 3-1: SerialNumber: syz
[  573.741039][ T5798] ums-usbat 3-1:2.43: USB Mass Storage device detected
[  573.777432][ T5798] ums-usbat 3-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  573.873448][ T5798] usb 3-1: USB disconnect, device number 15
[  574.152613][T13073] nvme_fabrics: missing parameter 'transport=%s'
[  574.168588][T13073] nvme_fabrics: missing parameter 'nqn=%s'
[  577.027189][T13101] wlan0 speed is unknown, defaulting to 1000
[  577.061921][ T5758] usb 3-1: new high-speed USB device number 16 using dummy_hcd
[  577.242435][ T5758] usb 3-1: Using ep0 maxpacket: 16
[  577.264347][ T5758] usb 3-1: config index 0 descriptor too short (expected 65, got 36)
[  577.277916][ T5758] usb 3-1: config 0 has an invalid descriptor of length 255, skipping remainder of the config
[  577.290885][ T5758] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[  577.300174][ T5758] usb 3-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  577.310132][ T5758] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  577.333465][ T5758] usb 3-1: rejected 1 configuration due to insufficient available bus power
[  577.351535][ T5758] usb 3-1: no configuration chosen from 1 choice
[  579.068669][T13119] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  579.094688][T13119] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  579.511480][ T5798] usb 1-1: USB disconnect, device number 28
[  580.444319][ T5799] usb 3-1: USB disconnect, device number 16
[  581.130420][T13133] wlan0 speed is unknown, defaulting to 1000
[  581.141026][T13144] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  581.150155][T13144] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  582.518998][ T5626] udevd[5626]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  582.927824][T13154] wlan0 speed is unknown, defaulting to 1000
[  584.781396][T13189] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2008'.
[  585.641581][T13230] syzkaller0: entered promiscuous mode
[  585.661500][T13230] syzkaller0: entered allmulticast mode
[  586.193166][T13225] wlan0 speed is unknown, defaulting to 1000
[  587.760807][T13260] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2027'.
[  588.615867][T13285] wlan0 speed is unknown, defaulting to 1000
[  589.092858][T13296] wlan0 speed is unknown, defaulting to 1000
[  589.552357][ T5758] usb 2-1: new high-speed USB device number 17 using dummy_hcd
[  589.577622][T13313] wlan0 speed is unknown, defaulting to 1000
[  589.784995][ T5758] usb 2-1: config 2 has an invalid interface number: 43 but max is 0
[  589.801251][ T5758] usb 2-1: config 2 has no interface number 0
[  589.835824][ T5758] usb 2-1: config 2 interface 43 has no altsetting 0
[  589.861729][ T5758] usb 2-1: New USB device found, idVendor=0781, idProduct=0005, bcdDevice= 0.05
[  589.887087][ T5758] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  589.925635][ T5758] usb 2-1: Product: syz
[  589.938534][ T5758] usb 2-1: Manufacturer: syz
[  589.953530][ T5758] usb 2-1: SerialNumber: syz
[  590.223325][ T5758] ums-usbat 2-1:2.43: USB Mass Storage device detected
[  590.273334][ T5758] ums-usbat 2-1:2.43: Quirks match for vid 0781 pid 0005: 1
[  590.378653][ T5758] usb 2-1: USB disconnect, device number 17
[  591.701903][ T5798] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  591.765210][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  591.874740][T13366] nvme_fabrics: missing parameter 'transport=%s'
[  591.895891][ T5798] usb 1-1: Using ep0 maxpacket: 16
[  591.907872][T13366] nvme_fabrics: missing parameter 'nqn=%s'
[  591.944883][ T5798] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  592.010051][ T5798] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  592.047268][ T5798] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  592.066598][ T5798] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  592.098906][ T5798] usb 1-1: Product: syz
[  592.107078][ T5798] usb 1-1: Manufacturer: syz
[  592.125164][ T5798] usb 1-1: SerialNumber: syz
[  592.150305][ T5798] usb 1-1: config 0 descriptor??
[  592.168351][ T5798] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  592.202820][ T5798] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  592.727294][T13376] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2051'.
[  592.779740][ T5798] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  592.797959][ T5798] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  592.811580][T13360] wlan0 speed is unknown, defaulting to 1000
[  592.819666][ T5798] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  592.846571][ T5798] em28xx 1-1:0.0: No AC97 audio processor
[  593.106865][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2059'.
[  594.840736][ T5798] usb 1-1: USB disconnect, device number 29
[  594.863771][ T5798] em28xx 1-1:0.0: Disconnecting em28xx
[  594.914584][ T5798] em28xx 1-1:0.0: Freeing device
[  595.376236][T13393] wlan0 speed is unknown, defaulting to 1000
[  595.938848][T13406] wlan0 speed is unknown, defaulting to 1000
[  596.702034][T13429] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2071'.
[  596.782011][ T5758] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[  597.000234][T13438] UDC core: g1: couldn't find an available UDC or it's busy
[  598.287991][ T5758] usb 1-1: Using ep0 maxpacket: 16
[  598.297333][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  598.310464][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  598.333450][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  598.342751][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  598.393521][ T5758] usb 1-1: Product: syz
[  598.407965][ T5758] usb 1-1: Manufacturer: syz
[  598.421551][ T5758] usb 1-1: SerialNumber: syz
[  598.444750][ T5758] usb 1-1: config 0 descriptor??
[  598.477141][ T5758] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  598.511878][ T5758] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  599.098861][ T5758] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  599.118699][ T5758] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  599.136349][ T5758] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  599.149271][ T5758] em28xx 1-1:0.0: No AC97 audio processor
[  599.453665][T13462] wlan0 speed is unknown, defaulting to 1000
[  599.691930][T13468] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore
[  599.700704][T13468] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  600.018834][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2078'.
[  600.174361][ T5758] usb 1-1: USB disconnect, device number 30
[  600.188818][ T5758] em28xx 1-1:0.0: Disconnecting em28xx
[  600.242419][ T5608] Bluetooth: hci3: unexpected event for opcode 0x3125
[  600.281626][ T5758] em28xx 1-1:0.0: Freeing device
[  600.455470][T13472] nvme_fabrics: missing parameter 'transport=%s'
[  601.503893][ T5631] udevd[5631]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  601.835509][T13472] nvme_fabrics: missing parameter 'nqn=%s'
[  601.952139][T13479] fuse: Bad value for 'rootmode'
[  602.201744][ T5608] Bluetooth: hci1: unexpected event for opcode 0x3125
[  602.319342][T13493] nvme_fabrics: missing parameter 'transport=%s'
[  602.438652][T13493] nvme_fabrics: missing parameter 'nqn=%s'
[  602.830966][ T5608] Bluetooth: hci2: unexpected event for opcode 0x0c25
[  602.946854][T13514] nvme_fabrics: missing parameter 'transport=%s'
[  602.968658][T13514] nvme_fabrics: missing parameter 'nqn=%s'
[  603.362142][ T5758] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[  603.531908][ T5758] usb 1-1: Using ep0 maxpacket: 16
[  603.558702][ T5758] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83
[  603.596257][ T5758] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7
[  603.635737][ T5758] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1
[  603.665434][ T5758] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  603.695732][ T5758] usb 1-1: Product: syz
[  603.705053][ T5758] usb 1-1: Manufacturer: syz
[  603.719878][ T5758] usb 1-1: SerialNumber: syz
[  603.741027][ T5758] usb 1-1: config 0 descriptor??
[  603.779046][ T5758] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0)
[  603.821804][ T5758] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class)
[  604.372761][ T5758] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[  604.398076][ T5758] em28xx 1-1:0.0: Config register raw data: 0xfffffffb
[  604.432516][ T5758] em28xx 1-1:0.0: AC97 chip type couldn't be determined
[  604.464484][ T5758] em28xx 1-1:0.0: No AC97 audio processor
[  605.124820][T13557] UDC core: g1: couldn't find an available UDC or it's busy
[  606.472109][ T5799] usb 1-1: USB disconnect, device number 31
[  606.498814][ T5799] em28xx 1-1:0.0: Disconnecting em28xx
[  606.520745][ T5799] em28xx 1-1:0.0: Freeing device
[  606.611217][T13553] wlan0 speed is unknown, defaulting to 1000
[  606.633200][T13559] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2107'.
[  606.657305][T13558] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2105'.
[  606.801007][T13547] wlan0 speed is unknown, defaulting to 1000
[  606.852029][ T5799] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[  607.011953][ T5799] usb 1-1: Using ep0 maxpacket: 32
[  607.032149][ T5799] usb 1-1: unable to get BOS descriptor or descriptor too short
[  607.059987][ T5799] usb 1-1: config 14 has an invalid interface number: 57 but max is 1
[  607.095766][ T5799] usb 1-1: config 14 has an invalid interface number: 228 but max is 1
[  607.095803][T13574] nvme_fabrics: missing parameter 'transport=%s'
[  607.129639][ T5799] usb 1-1: config 14 has no interface number 0
[  607.145412][T13574] nvme_fabrics: missing parameter 'nqn=%s'
[  607.176552][ T5799] usb 1-1: config 14 has no interface number 1
[  607.194208][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has a duplicate endpoint with address 0x8, skipping
[  607.245100][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has an endpoint descriptor with address 0xD1, changing to 0x81
[  607.281868][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has an invalid bInterval 109, changing to 10
[  607.311380][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x81 has invalid maxpacket 57993, setting to 1024
[  607.323846][ T5799] usb 1-1: config 14 interface 228 altsetting 5 endpoint 0x9 has an invalid bInterval 122, changing to 10
[  607.336249][ T5799] usb 1-1: config 14 interface 228 altsetting 5 has 4 endpoint descriptors, different from the interface descriptor's value: 3
[  607.351902][ T5799] usb 1-1: config 14 interface 57 has no altsetting 0
[  607.360675][ T5799] usb 1-1: config 14 interface 228 has no altsetting 0
[  607.372826][ T5799] usb 1-1: New USB device found, idVendor=0694, idProduct=0001, bcdDevice=78.13
[  607.382146][ T5799] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  607.390663][ T5799] usb 1-1: Product: syz
[  607.396338][ T5799] usb 1-1: Manufacturer: syz
[  607.400960][ T5799] usb 1-1: SerialNumber: syz
[  607.827647][ T5799] legousbtower 1-1:14.57: interrupt endpoints not found
[  608.051671][ T5799] legousbtower 1-1:14.228: get version request failed: -71
[  608.073065][ T5799] legousbtower 1-1:14.228: probe with driver legousbtower failed with error -71
[  608.126317][ T5799] usb 1-1: USB disconnect, device number 32
[  608.610357][T13601] wlan0 speed is unknown, defaulting to 1000
[  608.835712][T13621] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2124'.
[  608.949611][T13627] fuse: Bad value for 'fd'
[  609.145098][T13617] wlan0 speed is unknown, defaulting to 1000
[  609.812443][T13640] wlan0 speed is unknown, defaulting to 1000
[  609.941905][ T5799] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  610.127955][T13654] syzkaller0: entered promiscuous mode
[  610.141436][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  610.155943][T13654] syzkaller0: entered allmulticast mode
[  610.174266][ T5799] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  610.211378][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  610.233035][ T5799] usb 4-1: config 0 descriptor??
[  610.339562][ T5608] Bluetooth: hci1: unexpected event for opcode 0x0c25
[  610.486974][ T5799] usbhid 4-1:0.0: can't add hid device: -71
[  610.513073][T13663] nvme_fabrics: missing parameter 'transport=%s'
[  610.523637][ T5799] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  610.550535][ T5799] usb 4-1: USB disconnect, device number 21
[  610.583068][T13663] nvme_fabrics: missing parameter 'nqn=%s'
[  611.018898][T13681] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2140'.
[  611.034975][ T5799] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  611.223826][ T5799] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 9865, setting to 1024
[  611.265840][ T5799] usb 4-1: New USB device found, idVendor=046d, idProduct=c71f, bcdDevice= 0.00
[  611.300026][ T5799] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  611.337264][ T5799] usb 4-1: config 0 descriptor??
[  611.573703][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.627890][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  611.708517][T13647] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  611.776255][T13647] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  612.124136][T13695] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2145'.
[  612.212969][T13694] wlan0 speed is unknown, defaulting to 1000
[  612.438090][ T5799] usbhid 4-1:0.0: can't add hid device: -71
[  612.446667][ T5799] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  612.483426][ T5799] usb 4-1: USB disconnect, device number 22
[  613.097382][T13709] syzkaller0: entered promiscuous mode
[  613.117503][T13709] syzkaller0: entered allmulticast mode
[  613.135099][T13704] wlan0 speed is unknown, defaulting to 1000
[  613.710627][T13735] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  613.726880][ T5799] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[  613.769029][T13735] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  613.903910][ T5799] usb 1-1: Using ep0 maxpacket: 16
[  613.922264][ T5799] usb 1-1: config index 0 descriptor too short (expected 65, got 36)
[  613.937976][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[  613.972778][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11
[  614.007216][ T5799] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[  614.045233][ T5799] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[  614.082484][ T5799] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00
[  614.095042][ T5799] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  614.128890][ T5799] usb 1-1: config 0 descriptor??
[  614.137790][T13722] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[  614.158679][ T5799] input: PXRC Flight Controller Adapter as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12
[  614.203056][    C1] ==================================================================
[  614.211109][    C1] BUG: KASAN: slab-use-after-free in find_endpoint+0x2a3/0x2c0
[  614.218640][    C1] Read of size 1 at addr ffff888037fa5512 by task kworker/1:7/5799
[  614.226499][    C1] 
[  614.228813][    C1] CPU: 1 UID: 0 PID: 5799 Comm: kworker/1:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  614.228832][    C1] Tainted: [L]=SOFTLOCKUP
[  614.228837][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  614.228848][    C1] Workqueue: usb_hub_wq hub_event
[  614.228872][    C1] Call Trace:
[  614.228876][    C1]  <IRQ>
[  614.228881][    C1]  dump_stack_lvl+0x100/0x190
[  614.228899][    C1]  print_report+0x13d/0x4b0
[  614.228921][    C1]  ? __virt_addr_valid+0x239/0x430
[  614.228938][    C1]  ? find_endpoint+0x2a3/0x2c0
[  614.228954][    C1]  kasan_report+0xdf/0x1c0
[  614.228970][    C1]  ? find_endpoint+0x2a3/0x2c0
[  614.228988][    C1]  find_endpoint+0x2a3/0x2c0
[  614.229004][    C1]  dummy_timer+0x500/0x36f0
[  614.229024][    C1]  ? do_raw_spin_lock+0x128/0x260
[  614.229042][    C1]  ? find_held_lock+0x2b/0x80
[  614.229061][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  614.229078][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  614.229095][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  614.229109][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  614.229126][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  614.229145][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  614.229164][    C1]  ? mark_held_locks+0x40/0x70
[  614.229179][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  614.229192][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  614.229210][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  614.229232][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  614.229255][    C1]  handle_softirqs+0x1ea/0x9b0
[  614.229272][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  614.229288][    C1]  ? _raw_spin_unlock+0x28/0x50
[  614.229307][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  614.229321][    C1]  __irq_exit_rcu+0x162/0x210
[  614.229336][    C1]  irq_exit_rcu+0x9/0x30
[  614.229351][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  614.229364][    C1]  </IRQ>
[  614.229368][    C1]  <TASK>
[  614.229372][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  614.229386][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70
[  614.229403][    C1] Code: 64 00 be 03 00 00 00 5b e9 a2 c3 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 e5 df 59 12 <48> 8b 34 24 65 48 8b 15 c1 df 59 12 a9 00 01 ff 00 74 1b f6 c4 01
[  614.229420][    C1] RSP: 0018:ffffc90004c171d8 EFLAGS: 00000293
[  614.229430][    C1] RAX: 0000000080000000 RBX: ffff8880361de2d6 RCX: ffffffff8bb84f8e
[  614.229439][    C1] RDX: 000000000000000a RSI: 000000007fffffff RDI: ffff888030410000
[  614.229447][    C1] RBP: ffffc90004c172c8 R08: 0000000000000007 R09: 000000007fffffff
[  614.229455][    C1] R10: 000000000000000a R11: 0000000000000000 R12: 000000000000000a
[  614.229462][    C1] R13: ffff8880361de2cc R14: ffffffff8ca4edcb R15: 1ffff92000982e48
[  614.229472][    C1]  ? vsnprintf+0x4ae/0x1300
[  614.229487][    C1]  vsnprintf+0x4c0/0x1300
[  614.229501][    C1]  ? __pfx_vsnprintf+0x10/0x10
[  614.229513][    C1]  ? __pfx_vsnprintf+0x10/0x10
[  614.229527][    C1]  add_uevent_var+0x183/0x3a0
[  614.229545][    C1]  ? __pfx_add_uevent_var+0x10/0x10
[  614.229567][    C1]  ? __pfx_usb_dev_uevent+0x10/0x10
[  614.229584][    C1]  usb_dev_uevent+0x6d/0x100
[  614.229601][    C1]  dev_uevent+0x2f1/0x870
[  614.229619][    C1]  ? __pfx_dev_uevent+0x10/0x10
[  614.229637][    C1]  ? __asan_memcpy+0x3c/0x60
[  614.229649][    C1]  ? kobject_get_path+0x8d/0x2c0
[  614.229665][    C1]  ? __pfx_dev_uevent+0x10/0x10
[  614.229683][    C1]  kobject_uevent_env+0x6eb/0x18b0
[  614.229704][    C1]  driver_bound+0x13e/0x220
[  614.229717][    C1]  ? __pfx_usb_probe_device+0x10/0x10
[  614.229733][    C1]  really_probe+0x3d4/0xa60
[  614.229748][    C1]  __driver_probe_device+0x20e/0x450
[  614.229762][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  614.229777][    C1]  driver_probe_device+0x4a/0x140
[  614.229792][    C1]  __device_attach_driver+0x1df/0x320
[  614.229807][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  614.229823][    C1]  bus_for_each_drv+0x159/0x1e0
[  614.229834][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  614.229846][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  614.229859][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  614.229872][    C1]  __device_attach+0x1e4/0x4d0
[  614.229886][    C1]  ? __pfx___device_attach+0x10/0x10
[  614.229901][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  614.229924][    C1]  device_initial_probe+0xaf/0xd0
[  614.229940][    C1]  bus_probe_device+0x64/0x160
[  614.229953][    C1]  device_add+0x121d/0x1970
[  614.229970][    C1]  ? __pfx_device_add+0x10/0x10
[  614.229986][    C1]  ? usb_detect_static_quirks+0x335/0x3e0
[  614.230002][    C1]  usb_new_device.cold+0x685/0x115c
[  614.230019][    C1]  ? _mutex_trylock_nest_lock+0x2e1/0x310
[  614.230033][    C1]  ? do_raw_spin_lock+0x128/0x260
[  614.230050][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  614.230065][    C1]  ? mark_held_locks+0x40/0x70
[  614.230080][    C1]  hub_event+0x30a3/0x4a60
[  614.230101][    C1]  ? __pfx_hub_event+0x10/0x10
[  614.230114][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  614.230133][    C1]  ? rcu_is_watching+0x12/0xc0
[  614.230153][    C1]  process_one_work+0xa23/0x1940
[  614.230169][    C1]  ? __pfx_process_one_work+0x10/0x10
[  614.230185][    C1]  ? __pfx_hub_event+0x10/0x10
[  614.230200][    C1]  worker_thread+0x5ef/0xe50
[  614.230214][    C1]  ? __pfx_worker_thread+0x10/0x10
[  614.230228][    C1]  ? kthread+0x13a/0x450
[  614.230239][    C1]  ? __pfx_worker_thread+0x10/0x10
[  614.230251][    C1]  kthread+0x370/0x450
[  614.230262][    C1]  ? __pfx_kthread+0x10/0x10
[  614.230276][    C1]  ret_from_fork+0x72b/0xd50
[  614.230294][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  614.230311][    C1]  ? __switch_to+0x800/0x10f0
[  614.230323][    C1]  ? __pfx_kthread+0x10/0x10
[  614.230335][    C1]  ret_from_fork_asm+0x1a/0x30
[  614.230357][    C1]  </TASK>
[  614.230361][    C1] 
[  614.774691][    C1] Allocated by task 13679:
[  614.779081][    C1]  kasan_save_stack+0x30/0x50
[  614.783734][    C1]  kasan_save_track+0x14/0x30
[  614.788384][    C1]  __kasan_kmalloc+0xaa/0xb0
[  614.792946][    C1]  __kmalloc_noprof+0x322/0x820
[  614.797767][    C1]  io_cache_alloc_new+0x45/0xe0
[  614.802592][    C1]  io_uring_alloc_async_data+0x17e/0x300
[  614.808201][    C1]  io_recvmsg_prep+0x7cd/0x1040
[  614.813026][    C1]  io_submit_sqes+0xa03/0x2480
[  614.817767][    C1]  __do_sys_io_uring_enter+0xa88/0x1b10
[  614.823288][    C1]  do_syscall_64+0x115/0x870
[  614.827853][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.833717][    C1] 
[  614.836010][    C1] Freed by task 13679:
[  614.840042][    C1]  kasan_save_stack+0x30/0x50
[  614.844693][    C1]  kasan_save_track+0x14/0x30
[  614.849347][    C1]  kasan_save_free_info+0x3b/0x70
[  614.854354][    C1]  __kasan_slab_free+0x5f/0x80
[  614.859099][    C1]  kfree+0x22b/0x6c0
[  614.862969][    C1]  __io_submit_flush_completions+0x1570/0x1ac0
[  614.869098][    C1]  ctx_flush_and_put.isra.0+0x9a/0x410
[  614.874539][    C1]  tctx_task_work_run+0x1a7/0xbf0
[  614.879542][    C1]  tctx_task_work+0x7a/0xa0
[  614.884020][    C1]  task_work_run+0x150/0x240
[  614.888584][    C1]  do_exit+0x951/0x2ae0
[  614.892715][    C1]  do_group_exit+0xd5/0x2a0
[  614.897185][    C1]  get_signal+0x1ec7/0x21e0
[  614.901661][    C1]  arch_do_signal_or_restart+0x91/0x7e0
[  614.907178][    C1]  exit_to_user_mode_loop+0x139/0x6f0
[  614.912529][    C1]  do_syscall_64+0x666/0x870
[  614.917099][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  614.922966][    C1] 
[  614.925263][    C1] The buggy address belongs to the object at ffff888037fa5400
[  614.925263][    C1]  which belongs to the cache kmalloc-512 of size 512
[  614.939293][    C1] The buggy address is located 274 bytes inside of
[  614.939293][    C1]  freed 512-byte region [ffff888037fa5400, ffff888037fa5600)
[  614.953057][    C1] 
[  614.955358][    C1] The buggy address belongs to the physical page:
[  614.961735][    C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x37fa4
[  614.970468][    C1] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  614.978933][    C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  614.986451][    C1] page_type: f5(slab)
[  614.990404][    C1] raw: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122
[  614.998962][    C1] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  615.007520][    C1] head: 00fff00000000040 ffff88813fe23c80 dead000000000100 dead000000000122
[  615.016159][    C1] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[  615.024800][    C1] head: 00fff00000000002 ffffffffffffff01 00000000ffffffff 00000000ffffffff
[  615.033440][    C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  615.042074][    C1] page dumped because: kasan: bad access detected
[  615.048458][    C1] page_owner tracks the page as allocated
[  615.054144][    C1] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4975, tgid 4975 (udevd), ts 84274288380, free_ts 84269671825
[  615.074862][    C1]  post_alloc_hook+0xfd/0x120
[  615.079519][    C1]  get_page_from_freelist+0xf48/0x3530
[  615.084947][    C1]  __alloc_frozen_pages_noprof+0x299/0x2dc0
[  615.090812][    C1]  new_slab+0xa2/0x640
[  615.094856][    C1]  refill_objects+0xe3/0x410
[  615.099423][    C1]  __pcs_replace_empty_main+0x376/0x680
[  615.104949][    C1]  __kmalloc_cache_noprof+0x479/0x6c0
[  615.110300][    C1]  kernfs_fop_open+0x23d/0xd50
[  615.115039][    C1]  do_dentry_open+0x6ab/0x14d0
[  615.119773][    C1]  vfs_open+0x82/0x3f0
[  615.123815][    C1]  path_openat+0x2873/0x4280
[  615.128374][    C1]  do_file_open+0x20e/0x430
[  615.132846][    C1]  do_sys_openat2+0x10f/0x1e0
[  615.137494][    C1]  __x64_sys_openat+0x12d/0x210
[  615.142316][    C1]  do_syscall_64+0x115/0x870
[  615.146880][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.152744][    C1] page last free pid 4975 tgid 4975 stack trace:
[  615.159037][    C1]  __free_frozen_pages+0x79f/0x1090
[  615.164214][    C1]  qlist_free_all+0x47/0xf0
[  615.168688][    C1]  kasan_quarantine_reduce+0x1a0/0x1f0
[  615.174116][    C1]  __kasan_slab_alloc+0x69/0x90
[  615.178939][    C1]  kmem_cache_alloc_noprof+0x26b/0x6a0
[  615.184367][    C1]  do_getname+0x35/0x390
[  615.188581][    C1]  do_sys_openat2+0xc7/0x1e0
[  615.193143][    C1]  __x64_sys_openat+0x12d/0x210
[  615.197964][    C1]  do_syscall_64+0x115/0x870
[  615.202530][    C1]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  615.208404][    C1] 
[  615.210700][    C1] Memory state around the buggy address:
[  615.216300][    C1]  ffff888037fa5400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  615.224333][    C1]  ffff888037fa5480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  615.232368][    C1] >ffff888037fa5500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  615.240397][    C1]                          ^
[  615.244953][    C1]  ffff888037fa5580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  615.252997][    C1]  ffff888037fa5600: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  615.261044][    C1] ==================================================================
[  615.269089][    C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  615.276257][    C1] CPU: 1 UID: 0 PID: 5799 Comm: kworker/1:7 Tainted: G             L      syzkaller #0 PREEMPT(full) 
[  615.287163][    C1] Tainted: [L]=SOFTLOCKUP
[  615.291463][    C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  615.301493][    C1] Workqueue: usb_hub_wq hub_event
[  615.306498][    C1] Call Trace:
[  615.309750][    C1]  <IRQ>
[  615.312565][    C1]  dump_stack_lvl+0x100/0x190
[  615.317217][    C1]  vpanic+0x552/0x970
[  615.321170][    C1]  ? __pfx_vpanic+0x10/0x10
[  615.325651][    C1]  ? __pfx_vprintk_emit+0x10/0x10
[  615.330664][    C1]  ? find_endpoint+0x2a3/0x2c0
[  615.335403][    C1]  panic+0xd1/0xe0
[  615.339105][    C1]  ? __pfx_panic+0x10/0x10
[  615.343493][    C1]  ? end_report.part.0+0x23/0x90
[  615.348406][    C1]  ? rcu_is_watching+0x12/0xc0
[  615.353151][    C1]  ? end_report.part.0+0x23/0x90
[  615.358069][    C1]  ? check_panic_on_warn+0x1f/0x90
[  615.363154][    C1]  check_panic_on_warn.cold+0x19/0x34
[  615.368501][    C1]  end_report.part.0+0x3a/0x90
[  615.373243][    C1]  kasan_report.cold+0xe/0x18
[  615.377897][    C1]  ? find_endpoint+0x2a3/0x2c0
[  615.382638][    C1]  find_endpoint+0x2a3/0x2c0
[  615.387204][    C1]  dummy_timer+0x500/0x36f0
[  615.391687][    C1]  ? do_raw_spin_lock+0x128/0x260
[  615.396688][    C1]  ? find_held_lock+0x2b/0x80
[  615.401344][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  615.406958][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  615.412594][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  615.418377][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  615.423986][    C1]  ? __pfx_debug_object_deactivate+0x10/0x10
[  615.429943][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  615.434859][    C1]  ? mark_held_locks+0x40/0x70
[  615.439599][    C1]  ? _raw_spin_unlock_irqrestore+0x52/0x80
[  615.445378][    C1]  ? __pfx_dummy_timer+0x10/0x10
[  615.450293][    C1]  __hrtimer_run_queues+0x462/0x9c0
[  615.455472][    C1]  hrtimer_run_softirq+0x17d/0x2c0
[  615.460566][    C1]  handle_softirqs+0x1ea/0x9b0
[  615.465309][    C1]  ? __pfx_handle_softirqs+0x10/0x10
[  615.470568][    C1]  ? _raw_spin_unlock+0x28/0x50
[  615.475399][    C1]  ? __hrtimer_rearm_deferred+0x9b/0x720
[  615.481001][    C1]  __irq_exit_rcu+0x162/0x210
[  615.485654][    C1]  irq_exit_rcu+0x9/0x30
[  615.489872][    C1]  sysvec_apic_timer_interrupt+0xa3/0xc0
[  615.495478][    C1]  </IRQ>
[  615.498379][    C1]  <TASK>
[  615.501284][    C1]  asm_sysvec_apic_timer_interrupt+0x1a/0x20
[  615.507239][    C1] RIP: 0010:__sanitizer_cov_trace_pc+0xb/0x70
[  615.513281][    C1] Code: 64 00 be 03 00 00 00 5b e9 a2 c3 13 03 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 65 8b 05 e5 df 59 12 <48> 8b 34 24 65 48 8b 15 c1 df 59 12 a9 00 01 ff 00 74 1b f6 c4 01
[  615.532866][    C1] RSP: 0018:ffffc90004c171d8 EFLAGS: 00000293
[  615.538906][    C1] RAX: 0000000080000000 RBX: ffff8880361de2d6 RCX: ffffffff8bb84f8e
[  615.546862][    C1] RDX: 000000000000000a RSI: 000000007fffffff RDI: ffff888030410000
[  615.554810][    C1] RBP: ffffc90004c172c8 R08: 0000000000000007 R09: 000000007fffffff
[  615.562761][    C1] R10: 000000000000000a R11: 0000000000000000 R12: 000000000000000a
[  615.570709][    C1] R13: ffff8880361de2cc R14: ffffffff8ca4edcb R15: 1ffff92000982e48
[  615.578700][    C1]  ? vsnprintf+0x4ae/0x1300
[  615.583191][    C1]  vsnprintf+0x4c0/0x1300
[  615.587499][    C1]  ? __pfx_vsnprintf+0x10/0x10
[  615.592239][    C1]  ? __pfx_vsnprintf+0x10/0x10
[  615.596977][    C1]  add_uevent_var+0x183/0x3a0
[  615.601635][    C1]  ? __pfx_add_uevent_var+0x10/0x10
[  615.606814][    C1]  ? __pfx_usb_dev_uevent+0x10/0x10
[  615.612001][    C1]  usb_dev_uevent+0x6d/0x100
[  615.616572][    C1]  dev_uevent+0x2f1/0x870
[  615.620882][    C1]  ? __pfx_dev_uevent+0x10/0x10
[  615.625724][    C1]  ? __asan_memcpy+0x3c/0x60
[  615.630287][    C1]  ? kobject_get_path+0x8d/0x2c0
[  615.635204][    C1]  ? __pfx_dev_uevent+0x10/0x10
[  615.640032][    C1]  kobject_uevent_env+0x6eb/0x18b0
[  615.645124][    C1]  driver_bound+0x13e/0x220
[  615.649601][    C1]  ? __pfx_usb_probe_device+0x10/0x10
[  615.654954][    C1]  really_probe+0x3d4/0xa60
[  615.659465][    C1]  __driver_probe_device+0x20e/0x450
[  615.664728][    C1]  ? __sanitizer_cov_trace_switch+0x54/0x90
[  615.670597][    C1]  driver_probe_device+0x4a/0x140
[  615.675596][    C1]  __device_attach_driver+0x1df/0x320
[  615.680944][    C1]  ? __pfx___device_attach_driver+0x10/0x10
[  615.686809][    C1]  bus_for_each_drv+0x159/0x1e0
[  615.691645][    C1]  ? __pfx_bus_for_each_drv+0x10/0x10
[  615.696989][    C1]  ? lockdep_hardirqs_on+0x78/0x100
[  615.702162][    C1]  ? _raw_spin_unlock_irqrestore+0x3b/0x80
[  615.707940][    C1]  __device_attach+0x1e4/0x4d0
[  615.712679][    C1]  ? __pfx___device_attach+0x10/0x10
[  615.717939][    C1]  ? do_raw_spin_unlock+0x145/0x1e0
[  615.723117][    C1]  device_initial_probe+0xaf/0xd0
[  615.728121][    C1]  bus_probe_device+0x64/0x160
[  615.732858][    C1]  device_add+0x121d/0x1970
[  615.737341][    C1]  ? __pfx_device_add+0x10/0x10
[  615.742167][    C1]  ? usb_detect_static_quirks+0x335/0x3e0
[  615.747860][    C1]  usb_new_device.cold+0x685/0x115c
[  615.753038][    C1]  ? _mutex_trylock_nest_lock+0x2e1/0x310
[  615.758737][    C1]  ? do_raw_spin_lock+0x128/0x260
[  615.763743][    C1]  ? __pfx_usb_new_device+0x10/0x10
[  615.768939][    C1]  ? mark_held_locks+0x40/0x70
[  615.773683][    C1]  hub_event+0x30a3/0x4a60
[  615.778080][    C1]  ? __pfx_hub_event+0x10/0x10
[  615.782817][    C1]  ? debug_object_deactivate+0x2e4/0x3b0
[  615.788428][    C1]  ? rcu_is_watching+0x12/0xc0
[  615.793172][    C1]  process_one_work+0xa23/0x1940
[  615.798084][    C1]  ? __pfx_process_one_work+0x10/0x10
[  615.803433][    C1]  ? __pfx_hub_event+0x10/0x10
[  615.808185][    C1]  worker_thread+0x5ef/0xe50
[  615.812751][    C1]  ? __pfx_worker_thread+0x10/0x10
[  615.817835][    C1]  ? kthread+0x13a/0x450
[  615.822049][    C1]  ? __pfx_worker_thread+0x10/0x10
[  615.827131][    C1]  kthread+0x370/0x450
[  615.831170][    C1]  ? __pfx_kthread+0x10/0x10
[  615.835730][    C1]  ret_from_fork+0x72b/0xd50
[  615.840301][    C1]  ? __pfx_ret_from_fork+0x10/0x10
[  615.845386][    C1]  ? __switch_to+0x800/0x10f0
[  615.850033][    C1]  ? __pfx_kthread+0x10/0x10
[  615.854595][    C1]  ret_from_fork_asm+0x1a/0x30
[  615.859342][    C1]  </TASK>
[  615.862560][    C1] Kernel Offset: disabled
[  615.866862][    C1] Rebooting in 86400 seconds..