last executing test programs:

13.21768254s ago: executing program 1 (id=920):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11000000}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x1, 0x0, [{0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r5 = dup(r4)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

11.753976988s ago: executing program 1 (id=930):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd", 0x35, 0x840, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd", 0x8}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

10.818164797s ago: executing program 1 (id=934):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0)
r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x5)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = accept4(r5, 0x0, 0x0, 0x800)
recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff00"], 0x44}}, 0x28000)

10.346889992s ago: executing program 3 (id=937):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x10, 0x56a, 0xd8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xe0, 0x3, "", [{{0x9, 0x4, 0x0, 0x0, 0x9, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x5, 0x3, 0x1, {0x22, 0x2c}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x1, 0x4, 0x4}}}}}]}}]}}, 0x0)
r1 = syz_usb_connect$cdc_ecm(0x6, 0x53, &(0x7f00000001c0)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x41, 0x1, 0x1, 0x92, 0x10, 0xfb, "", [{{0x9, 0x4, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x10, {{0x7, 0x24, 0x6, 0x0, 0x0, 'Hh'}, {0x5}, {0xd, 0x24, 0xf, 0x1, 0x400, 0xd4, 0xff, 0x10}, [@acm={0x4}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x248, 0x2, 0x6, 0x1}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x8, 0x6b, 0xfa}}}}}]}}]}}, &(0x7f0000001c00)={0xa, &(0x7f0000001800)={0xa, 0x6, 0x310, 0x6, 0xb, 0x6, 0x20, 0xb9}, 0x10b, &(0x7f0000001840)={0x5, 0xf, 0x10b, 0x2, [@ss_container_id={0x14, 0x10, 0x4, 0x2, "6eeb770b5db024e74d7e5cb42ebcacf9"}, @generic={0xf2, 0x10, 0xa, "a6675cf574b86e83bcd7fc1c44639473cd01ec7369aaf2aa736845d8cde4b6694e42d1aa10804dd5ef5a8cd76570a7f0204781604529c33bca38a341ee7ccfbc27397423a01d8f3e4d663247222c1407ab228ab95dd17628ef396c2a112dca67db2858cdc7c6569bbd85b748df43e96e4a99b356707656f2e63a0202200e710f891da716e5d19caadf0cf43eb4bf222db97f8451b91d1c3b5659a2d74bd8fc973527cb85476232501c358616762e25116aa4eff9cfc34793f5513630974295d9240b42a692e0e72f8666b3591e4681ac69f0cd863c0e2ef6cb41cc0e24c378efebd58dd30ecf03e2c894b5fc7d13cc"}]}, 0x5, [{0x8d, &(0x7f0000001980)=@string={0x8d, 0x3, "0cb93f3b7f178463ba12a21cf515d613c2a93e5a095004f148cba59bfdc7aaa8b106bf98ca9f3c0397d8b24b99b4908a076229c4cfdb14bac899ebb19a02e42455e2c08103351a10f280069cf22cd60d6c8508e76025a5abea88d262567a6d5b4834df496d19a9d81d7605244829231a91bf659a9908094c6c80655bf35c15e4c1d2f8bcb12aef8e94be5d"}}, {0x34, &(0x7f0000001a40)=@string={0x34, 0x3, "c50620bbd6716e6022e5b57771d5de73c6677a86d975c802f87f67c66849ed1181841cf9ecdb14e0e69eb671fea513eefcb4"}}, {0x4, &(0x7f0000001a80)=@lang_id={0x4, 0x3, 0x4ff}}, {0x4, &(0x7f0000001ac0)=@lang_id={0x4, 0x3, 0x41b}}, {0xe9, &(0x7f0000001b00)=@string={0xe9, 0x3, "73923f3f528322a5f146ef5ab033189774133c074b48d21d49caea140163d12213c3b2d1a8fcf26f8f57d69e7e8b985ba0ec8165c89f30258e00a848b108acd597706972639a79a9fe0afcc94afd0c9721cdc26c3cacaefeefbed475f117b760d6017c16612f4122a82a744e68b58d211f11c25e4aab47edb7019df794e32650abf80e92ca35dacd85f9a65b93b9665ebc49253c4cf7f92e3abe4cef25c9ccf0b746895d0d6c90440611bc93cd0c3c33cde072d5ed02d5cfa72c9d6d953196c1534888905f3685dfa5509f84ad0b01d1585e1860ea2fdf0defec9476fb0305b4e0b92098f51600"}}]})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000380)={0x2c, &(0x7f0000000140)={0x20, 0xa, 0x2c, {0x2c, 0x31, "5b1ae08f9948bdfe0be753ac73b21cc8e68164d0e410e78f47f71045f36b3622b6771dd5cc56857afce8"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
r3 = socket$inet6_udp(0xa, 0x2, 0x0)
syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x810, &(0x7f00000018c0)=ANY=[], 0xfd, 0x1501, &(0x7f00000002c0)="$eJzs3Am4T1X3OPC19t6H62b4JpnP2uvwTYZNkoSSZEiSJCRzQpIkSZK4ZEpCEjLeJHPInG665nnInHTzSpIkJCTZ/+c2/P16h5/3fX/9/vq/d32e5zz2cs7aZ+27nu89w/Pc79ddh1VvVKNKfWaGf4f+bYC//JMEAAkAMBAAcgBAAABlc5bNmb4/i8akf+sk4n9JgxlXugJxJUn/Mzbpf8Ym/c/YpP8Zm/Q/Y5P+Z2zS/4xN+i9EhjYr39WyZdxN3v//f079T5Ll+p8h4D/aIf3/T6P/paOl/xmb9D9jk/5nbNL/jCy40gWIK0w+/xmb9F+IDO0Pf6e84dyVfqct27+wCSGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQ/w+c85cYAPhtfKXrEkIIIYQQQgghxB/Hv3ulKxBCCCGEEEIIIcT/PgQFGgwEkAkyQwJkgUS4CrJCNsgOOSAGV0NOuAZywbWQG/JAXsgH+aEAFIQQCCwwRFAICkMcroMicD0UhWJQHEqAg5JQCm6A0nAjlIGboCzcDOXgFigPFX4+Z7rboTLcAVXgTqgK1aA61IC7oCbcDbXgHqgN90IduA/qwv1QDx6A+tAAGsKD0AgegsbQBJpCM2gOLaDlZfKTc/y9/OehB7wAPaEXJEFv6AMvQl/oB/1hAAyEl2AQvAyD4RUYAkNhGLwKw+E1GAGvw0gYBaPhDRgDY2EcjIcJMBGS4U2YBG/BZHj7oWwwFabBdJgBM2EWvAOzYQ7MhXdhHsyHBZCcZREshiXwHiyF9yEFPoBl8CGkwnJYASthFayGNbAW1sF62AAbYRNshi2wFbbBR7AddsBO2AW7YQ/shY9hH3wC++FTSMPP/sX8s7/Ph24ICKhQoUGDmTATJmACJmIiZsWsmB2zYwxjmBNzYi7MhbkxN+bFvJiE+bEgFkRCQkbGQlgI4xjHIlgEi2JRLI7F0aHDUlgKS+ONWAbLYFksi+WwHJbHClgBb8VbsRJWwspYGatgFayKVbE6Vse78C68G2thLayNtbEO1sG6WBfrYT2sj/WxITbERtgIG2NjbIpNsTk2x5bYElthK2yNrbEttsV22A7bY3vsgB2wI3bETtgJO2Nn7IJdsCt2xW74HD6Hz+Pz+AK+gL2wquqNfbAP9sW+2B8H4AB8CQfhy/gyvoJDcCgOw1fxVXwNR+AZHImjcDSOxkpqLI7D8chqIiZjMmaGSTgZJ+MUnIpTcTrOwJk4C2fhbJyDc/BdnIfzcT4uxIW4GJfgElyK72MKpuAyPIupuBxX4EpchatxFa7FdbgWN+BG3ICbcTNuxa34EX6EO3AH7sJduAf34Mf4MX6Cn+AQTMM0PIAH8CAexEN4CA/jYTyCR/AoHsVjeAyP43E8gSfxFJ7E03gaz+BZPAcA5/E8XsALeBEvpn/4VTqjjMqkMqkElaASVaLKqrKq7Cq7iqmYyqlyqlwql8qtcqu8Kq/Kr/KrgqqgIkWKVaQKqUIqruKqiCqiiqqiqrgqrpxyqpQqpUqr0qqMKqPKqptVOXWLKq8qqDbuVnWrqqTausrqDlVFVVFVVTVVXdVQNVRNVVPVUrVUbVVb1VF1VF11v6qnemN/bKDSO9NIDcXGahg2Vc1Uc9VCvYYPq1ZqBLZWbVRb9agahSOxvWrlOqgnVEc1Djupp9R4fFp1UROxq3pWdVPPqe7qedVDtXY9VS81BXurPmo69lX9VH81QM3Gaiq9Y9XVK+r5zEPVMPWqWoyvqRHqdTVSjVKj1RtqjBqrxqnxaoKaqJLVm2qSektNVm+rKWqqmqamqxlqppql3lGz1Rw1V72r5qn5aoFaqBapxWqJek8tVe+rFPWBWqY+VKlquVqhVqpVarVao9aqdWq92qA2qk1qs9qitqpt6iO1Xe1QO9UutVvtUXvVx2qf+kTtV5+qNPWZOqD+og6qz9Uh9YU6rL5UR9RX6qj6Wh1T36jj6lt1Qp1Up9R36rT6Xp1RZ9U59YM6r35UF9RP6qLyCjRqpbU2OtCZdGadoLPoRH2Vzqqz6ew6h47pq3VOfY3Opa/VuXUendfk0/l1AV1Qh5q01awjXUgX1nF9nS6ir9dFdTFdXJfQTpfUpfQNurS+UZfRN+my+mZdTt+iy+sKuqIHfZuupG/XlfUduoq+U1fV1XR1XUPfpWvqu3UtfY+ure/VdfR9uq6+X9fTD+j6uoFuqB/UjfRDurFuopvqZrq5bqFb6od1K/2Ibq3b6Lb6Ud1OP6bb68d1B/2E7qif1J30U7qzflp30c/orvpZ3U0/p7vrn/RF7XVP3Usn6d66j35R99X9dH89QA/UL+lB+mU9WL+ih+iheph+VQ/Xr+kR+nU9Uo/So/Ubeoweq8fp8XqCnqiT9Zt6kn5LT9Zv6yl6qp6mp+sZeqbu/+tMc/+J/Lf+Tv7gn8++VW/TH+nteofeqXfp3XqP3qv36n16n96v9+s0naYP6AP6oD6oD+lD+rA+rI/oI/qoPqqP6WP6uD6uT+iT+gf9nT6tv9dn9Fl9Vv+gz+vz+sKvPwMwaJTRxpjAZDKZTYLJYhLNVSaryWaymxwmZq42Oc01Jpe51uQ2eUxek8/kNwVMQRMaMtawiUwhU9jEzXWmiLneFDXFTHFTwjhT0pQyN/yP8y9XX0vT0rQyrUxr09q0NW1NO9POtDftTQfTwXQ0HU0n08l0Np1NF9PFdDVdTTfTzXQ33U0P08P0ND1NkkkyfcyLpq/pZ/qbAWageckMMoPMYDPYDDFDzDAzzAw3w80IM8KMNCPNaDPajDFjzDgzzkwwE0yyz2EmmUlmsplsppgpZtrAHGaGmWFmmVlmtplt5pq5Zp6ZZxaYBWaRWWSWmCVmqVlqUkyKWWaWmVSz3Cw3K81Ks9qsNmvNWrPerDcbzUaz2Ww2qWab2Wa2m+1mp9lpdpvdZq/Za/aZfWa/2W/STJo5YA6Yg+agOWQOmcPmsDlijpij5qg5Zo6Z4+a4OWFOmFPmlDltTpsz5ow5Z86Z8+a8uWAumIvmYvptX6ACFZjABJmCTEFCkBAkBolB1iBrkD3IHsSCWJAzyBnkCq4Ncgd5grxBviB/UCAoGIQBBTbgIAoKBYWDeHBdUCS4PigaFAuKByUCF5QMSgU3BKWDG4MywU1B2eDmoFxwS1A+qBBUDG4NbgsqBbcHlYM7girBnUHVoFpQPagR3BXUDO4OagX3BLWDe4M6wX1B3eD+oF7wQFA/aBA0DB4MGgUPBY2DJkHToFnQPGgRtPxD5/f+TJ5HXM+wV5gU9g77hC+GfcN+Yf9wQDgwfCkcFL4cDg5fCYeEQ8Nh4avh8PC1cET4ejgyHBWODt8Ix4Rjw3Hh+HBCODFMDt8MJ4VvhZPDt8Mp4dRwWjA9nBHODGeF74Szwznh3PDdcF44P1wQLgwXhYtD/OWWGFLCD8Jl4Ydharg8XBGuDFeFq8M14dpwXbg+3BBuDDeFm8sO+uXQcHu4I9wZ7gp3h3vCveHH4b7wk3B/+GmYFn4WHgj/Eh4MPw8PhV+Eh8MvwyPhV+HR8OvwWPhNeDz8NjwRngxPhd+Fp8PvwzPh2fBc+EN4PvwxvBD+FF4MffrNffrlnQwZykSZKIESKJESKStlpeyUnWIUo5yUk3JRLspNuSkv5aX8lJ8KUkFKx8RUiApRnOJUhIpQUSpKxak4OXJUikpRaSpNZagMlaWyVI7KUXkqTxWpIt1Gt9HtdDvdQXfQnXQnVaNqVINqUE2qSbWoFtWm2lSH6lBdqkv1qB7Vp/rUkBpSI2pEjakxNaWm1JyaU0tqSa2oFbWm1tSW2lI7akftqT11oA7UkTpSJ+pEnakzdaEu1JW6UjfqRt2pO/WgHtSTelISJVEf6kN9qS/1p/40kAbSIBpEg2kwDaEhNIyG0XAaTiNoBI2kUTSa3qAxNJbG0XiaQBMpmZJpEk2iyTSZptAUmkbTaAbNoFk0i2bTbJpLc2kezaMFtIAW0SJaQktoKS2lFEqhZbSMUimVVtAKWkWraA2toXW0jjbQBtpEm2gLbaFttI2203baSTtpN+2mvbSX9tE+2k/7KY3S6AAdoIN0kA7RITpMh+kIHaGjdJSO0TE6TsfpBJ2gU3SKTtNpOkNn6Bydo/P0I12gn+gieUqwWWyivcpmtdlsdpvD/nWc1+az+W0BW9CGNrfN87uYrLVFbTFb3Jawzpa0pewNfxOXtxVsRXurvc1Wsrfbyra8zQL/Na5p77a17D22tr3X1rB3/S6uY++zde1Dtp5tYuvbZrahbWEb2YdsY9vENrXNbHPbwrazj9n29nHbwT5hO9on/yZeat+36+x6u8FutPvsJ/ac/cEetV/b8/ZH29P2sgPtS3aQfdkOtq/YIXbo72MAO9q+YcfYsXacHW8n2Il/E0+z0+0MO9POsu/Y2XbO38RL7Ht2nk2xC+xCu8gu/jlOrynFfmCX2Q9tql1uV9iVdpVdbdfYtf+31pV2s91it9q99mO73e6wO+0uu9vu+TlOX8d++6lNs5/ZI/Yre9B+bg/ZY/aw/fLnOH19x+w39rj91p6wJ+0p+509bb+3Z+zZn9efvvbv7E/2ovUWGFmxZsMBZ+LMnMBZOJGv4qycjbNzDo7x1ZyTr+FcfC3n5jycl/Nxfi7ABTlkYsvMERfiwhzn67gIX89FuRgX5xLsuCSX4hu4NN/IZfgmLss3czm+hctzBa7It/JtXIlv58p8B1fhO7kqV+PqXIPv4pp8N9fie7g238t1+D6uy/dzPX6A63MDbsgPciN+iBtzE27Kzbg5t+CW/DC34ke4Nbfhtvwot+PHuD0/zh34Ce7IT3Infoo789PchZ/hrvwsd+PnuDs/zz34Be7JvTiJe3MffpH7cj/uzwN4IL/Eg/hlHsyv8BAeysP4VR7Or/EIfp1H8igezW/wGB7L43g8T+CJnMxv8iR+iyfz2zyFp/I0ns4zeCbP4nd4Ns/hufwuz+P5vIAX8iJezEv4PV7K73MKf8DL+ENO5eW8glfyKl7Na3gtr+P1vIE38ibezFt4K2/jj3g77+CdvIt38x7eyx/zPv6E9/OnnMaf8QH+Cx/kz/kQf8GH+Us+wl/xUf6aj/E3fJy/5RN8kk/xd3yav+czfJbP8Q98nn/kC/wTX2TPEGGkIh2ZKIgyRZmjhChLlBhdFWWNskXZoxxRLLo6yhldE+WKro1yR3mivFG+KH9UICoYhRFFNuIoigpFhaN4dF1UJLo+KhoVi4pHJSIXlYxKRTdEpaMbozLRTVHZ6OaoXHRLVD6qEFWMbo1uiypFt0eVozuiKtGdUdWoWlQ9qhHdFdWM7o5qRfdEtaN7ozLRfVHd6P6oXvRAVD9qEDWMHowaRQ9FjaMmUdOoWdQ8ahG1jB6OWkWPRK2jNlHb6NGoXfRY1D56POoQPRF1jJ68tL9Y8MvV9K/2J0W9I/3rG7J79KL44viS+HvxpfH34ynxD+LL4h/GU+PL4yviK+Or4qvja+Jr4+vi6+Mb4hvjm+Kb41viW+Pe18gMDtMfhMG4wGVymV2Cy+IS3VUuq8vmsrscLuaudjndNS6Xu9bldnlcXpfP5XcFXEEXOnLWsYtcIVfYxd11roi73hV1xVxxV8I5V9KVci1cS9fStXKPuNaujWvrHnWPusfcY+7xhF8Ld53cU66ze9p1cc+4Z9yzrpt7znV3z7se7gXX0/VySS7J9XF9XF/X1/V3/d1AN9ANcoPcYDfYDXFD3DA3zA13w90IN8KNdCPdaDfajXFj3Dg3zk1wE1yyS3aT3CQ32U12U9wUN81NczPcDDfLzXKz3Ww3181189w8t8AtcIvcIrfELXFL3VKX4lLcMrfMpbpUt8KtcKvcKrfGrXHr3Dq3wW1wm9wmt8VtcdvcNrfdbXc73U632+12e91et8/tc/vdfpfm0twBd8AddAfdIfeFO+y+dEfcV+6o+9odc9+44+5bd8KddKec16fd9+6MO+vOuR/cefeju+B+chedd8mxN2OTYm/FJsfejk2JTY1Ni02PzYjNjM2KvRObHZsTmxt7NzYvNj+2ILYwtii2OLYk9l5saez9WErsg9iy2Iex1Njy2IrYytiq2OqY9wW2R76QL+zj/jpfxF/vi/pivrgv4Z0v6Uv5G3xpf6Mv42/yZf3Nvpy/xZf3FXxF38Q39c18c9/Ct/QP+1b+Ed/at/Ft/aO+nX/Mt/eP+w7+Cd/RP+k7+ad8Z/+07+Kf8V39s/N/7bLv4V/wPX0vn+R7+z7+Rd/X9/P9/QA/0L/kB/mX/WD/ih/ih/ph/lU/3L/mR/jX/Ug/yo/2b/gxfqwf58f7CX6iT/Zv+kn+LT/Zv+2n+Kl+mp/uZ/iZfpZ/x8/2c/xc/66f5+f7BX6hX+QX+yX+Pb/Uv+9T/Ad+mf/Qp/rlfoVf6Vf51X6NX+vX+fV+g9/oN/nNfovf6rf5j/x2v8Pv9Lv8br/H7/Uf+33+E7/ff+rT/Gf+gP+LP+g/94f8F/6w/9If8V/5o/5rf8x/44/7b/0Jf9Kf8t/50/57f8af9ef8D/68/9Ff8D/5i/I3a0IIIYQQ/xR9mf29/87/qV+3dH0AINuOfIf/es5NuX8Z91P7OsYA4IleXRv8tjVokJSU9OuxqRqCwgsBIHYp/+fvH/g1Xg5t4THoAG2g9N+tr5+q+PN93383f/xmgESALL/lpD8eJcJfz3/jP5i/yXt8ufkXAhQtfCkn/US/xZfmL/MP5t/T7jLzZ/k8GaD1f8nJCpfiS/OXgkfgSejwuyOFEEIIIYQQQohf9FPnu13u+Tb9+Ty/uZSTGS7Fl3s+v4zKf8QahBBCCCGEEEII8d97+rnujz/coUObzv/Jg8x/jjL+BAMEgD9BGTL48w+u9G8mIYQQQgghxB/t0k3/la5ECCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYTIuP79bwhT//TBV3qNQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghhBBCCCGEEEIIIYQQQgghxJX2fwIAAP//5g1V0w==")
vmsplice(0xffffffffffffffff, 0x0, 0x0, 0xb)
syz_usb_control_io$cdc_ecm(r1, &(0x7f0000001cc0)={0x14, &(0x7f0000001ec0)=ANY=[@ANYBLOB="000527001c00270ced7fbf5f0fe83959e54fb2b56175945f4dc493acc3985cd52b4ddef8a36952f1c66e758c3a2400bf6319b72ad4bad23935e1"], &(0x7f0000001c80)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000001e80)={0x1c, &(0x7f0000001d00)=ANY=[@ANYBLOB="0005f000000028965add1e01b1dcb5912602f793edb19aca7dfa780cf99ba227cda001b5f9339db440b08fa9312c93fed527e0b2bd5818eebc451183200d82a1a20fa0dada1e2df735fe831e6b9855b6d50d3f7217b855a0e8f65f034e2362cfc27d724dddd7f6c39acfba1e3df7c1670d4e1684179d942c0269f5a02c8865bb56828df5e61fdcddbba1469b2f350003a9f52c9e87ed876aaa11c1c278f118c588629983df3c21d1d127adf13214e8317e04c34a730241646959efbe30e24e22fa63f9b56c1c2573b4743c397eec450d5e6f6359c310a96d3adeb02ead3d5422ba36d733accc4ee8466c811fec706d8cd3e3f482337a"], &(0x7f0000001e00)={0x0, 0xa, 0x1, 0xff}, &(0x7f0000001e40)={0x0, 0x8, 0x1, 0x1}})
r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0x8880, 0x85)
lseek(r4, 0x1, 0x1)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000002010102000000000000000002000000240002800c000280040001003a00000014000180080001007f000001080002"], 0x44}}, 0x0)
getdents64(r4, 0x0, 0x4f)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', <r6=>0x0})
r7 = syz_open_dev$vim2m(&(0x7f0000000140), 0x1e8d, 0x2)
bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x5e22, 0xfffffffb, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x23}}, 0xd30}, 0x1c)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x121301, 0x0)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000000)={0x401, 0x0, 0x10000, 0xb998, 0x0, "194f2f83c2e798c3584770116cddc8819592b1"})
write$binfmt_aout(r8, 0x0, 0xff2e)
ioctl$TCSETS(r8, 0x5402, &(0x7f0000000100)={0xa04c, 0x53b3, 0x71, 0x8, 0x13, "536c29bf81c173f4a8f5f73eb62f00"})
openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r9 = syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x802)
mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0)
lsetxattr$system_posix_acl(&(0x7f0000000180)='./file0\x00', &(0x7f0000003380)='system.posix_acl_access\x00', &(0x7f0000000540)={{}, {0x1, 0x3}, [], {}, [], {0x10, 0x5}}, 0x24, 0x0)
lchown(&(0x7f0000000880)='./file0\x00', 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00')
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000480), 0x1489a, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r10}, 0x2c, {'wfdno', 0x3d, r9}})
ioctl$vim2m_VIDIOC_S_FMT(r7, 0x40045613, &(0x7f00000003c0)={0x1, @pix_mp={0xfffffffe, 0xffff8000, 0x35314142, 0x8, 0x3, [{0x5, 0x6}, {0xc00}, {0x3, 0xfffffbac}, {0x14, 0x5}, {0x9, 0x4000069a}, {0x7, 0x2}, {0x2, 0x5}, {0x4, 0x17}], 0x77, 0x2, 0x8, 0x2, 0x4}})
sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x4000, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x50, 0x2, [@TCA_CODEL_TARGET={0x6, 0x1, 0xfffffffd}]}}]}, 0x3c}}, 0x0)

7.238461627s ago: executing program 3 (id=946):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd", 0x35, 0x840, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd", 0x8}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

7.134473142s ago: executing program 2 (id=947):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r0)
ptrace(0x11, r0)

6.368581623s ago: executing program 2 (id=948):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xac)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r7=>0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

6.23665917s ago: executing program 0 (id=949):
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000002740), 0x80080)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='\x00', 0x0, r5)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
lseek(r6, 0xfffd, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r7 = socket(0x10, 0x2, 0x0)
write(r7, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB]}, 0x78)
r8 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r8, 0x89f1, &(0x7f0000000440)={'sit0\x00', &(0x7f0000000400)={'syztnl0\x00', 0x0, 0x89ff, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0xd1, 0x0, 0x0, @loopback, @multicast1}}}}) (fail_nth: 3)

5.188356375s ago: executing program 0 (id=950):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

5.061161402s ago: executing program 2 (id=951):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x20, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

4.982232796s ago: executing program 4 (id=952):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd50008ea)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef)

4.981134756s ago: executing program 3 (id=953):
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x20, 0x1d, 0x21, 0x70bd27, 0x2, {0x7}, [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @typed={0x4, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000044}, 0x0)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)=ANY=[], 0x50}}, 0x0)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x14, 0x9, 0x6, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x10000047}, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x37, [0xfffffff8, 0x8, 0x5, 0x9, 0x8, 0x155f, 0x6, 0x4, 0x25cd, 0x1, 0xb4, 0xa, 0xa2b9, 0x6, 0x7, 0xe4, 0x6, 0xfc000000, 0x3, 0xbbf, 0x4a732f64, 0x1, 0x8, 0xd, 0x0, 0x12a3, 0x6, 0x1, 0x2, 0x6, 0x7, 0x81, 0x8a, 0x79, 0x2, 0x10000, 0x0, 0x91, 0x4, 0x4, 0x16, 0x8, 0x5, 0x401, 0xfffffff5, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0x80000001, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x1, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x9, 0x4], [0x9, 0x3, 0x6, 0x9, 0x4, 0xc66, 0xa8a9, 0x20000073, 0x8e, 0xd50, 0x7, 0x5, 0x2, 0x809, 0x4, 0xa7, 0x1000, 0x0, 0x200b398, 0x400080, 0x1, 0x4, 0x1c, 0x7, 0x1, 0x2, 0x3, 0x8, 0xffffff7f, 0x400, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffffff8, 0x401, 0x46, 0xf1, 0x4, 0xab00060, 0x5, 0x6, 0x2, 0x1, 0x3ff, 0x1ff, 0x1, 0x7fff, 0x1, 0x1cb, 0x1, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x95, 0x7fffffff, 0x4, 0xfffffff9, 0x1, 0x1000, 0xfffff801, 0x5], [0x2, 0xfffffffe, 0xffff, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x8d3, 0x200006, 0x8, 0x400, 0x2, 0x400, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0x8000003, 0x4e, 0x9, 0x3, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x3e55, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0xd, 0x7, 0x601, 0x101, 0xdd80, 0x60a0, 0x7f, 0x9d26, 0x10000, 0x1, 0x2, 0x2, 0x6, 0x8000, 0xf45, 0x3, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0x1], [0xa772, 0x6, 0x5, 0x1afa, 0xbfc, 0x8, 0x5, 0x7f, 0x55, 0x40, 0xff, 0x1005, 0x1, 0x7, 0x1e, 0x9, 0x81, 0x3, 0x9d82, 0xd, 0xfffffff7, 0x8, 0x140f2, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0xffffffff, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x1, 0x26d, 0x6, 0xfffffff9, 0x4, 0xfffffff9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x6, 0x8, 0x14000, 0x1, 0x9]}, 0x45c)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000440)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{}], 0x1, 0x0, 0x0, 0x11000000}, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x4e2080, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000400)={0x1, 0x0, [{0x7, 0x7, 0x1, 0x100, 0x8f, 0x2, 0x7}]})
r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x6, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0x7, 0x4, 0x5, 0x4, 0x8], 0x25000, 0x304})
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_GET_SUPPORTED_CPUID(0xffffffffffffffff, 0xc008ae05, &(0x7f0000000280)={0x2, 0x0, [{0xb, 0x5, 0x1, 0x400, 0x1, 0x2, 0x3}, {0xc0000001, 0xcb7, 0x3, 0x73, 0x3}]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r6 = dup(r5)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0)
syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0) (fail_nth: 3)

4.797480136s ago: executing program 0 (id=954):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd", 0x35, 0x840, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd", 0x8}], 0x3, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

4.263809024s ago: executing program 1 (id=955):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)}, {0x0}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed", 0x30}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {&(0x7f0000000ac0)}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6e", 0x71}, {&(0x7f0000000580)}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{&(0x7f0000000d80)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e23, @local}, 0x2, 0x3, 0x1, 0x3}}, 0x80, 0x0}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x4, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0)

4.179325319s ago: executing program 4 (id=956):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xac)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r8=>0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

4.177853459s ago: executing program 3 (id=966):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd50008ea)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
r8 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef)

4.123141011s ago: executing program 2 (id=957):
syz_open_dev$vbi(&(0x7f0000000100), 0x0, 0x2)
madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe)
pipe(&(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xe}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7)
r2 = getpid()
sched_setscheduler(r2, 0x1, &(0x7f0000000200)=0x7)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f00000002c0)=0x4)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001480)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f5"], 0x20}}, 0x0)
recvmmsg(r5, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x20000000}, {{&(0x7f0000000380)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000400)=""/191, 0xbf}], 0x1, &(0x7f0000000500)=""/58, 0x3a}, 0x80}, {{&(0x7f0000000b80)=@sco={0x1f, @fixed}, 0x80, &(0x7f00000007c0)=[{&(0x7f00000005c0)=""/197, 0xc5}, {&(0x7f00000006c0)=""/20, 0x14}, {&(0x7f00000000c0)=""/6, 0x6}, {&(0x7f0000000740)=""/97, 0x61}, {&(0x7f0000000540)=""/80, 0x50}, {&(0x7f0000000840)=""/141, 0x8d}, {&(0x7f0000000900)=""/252, 0xfc}], 0x7, &(0x7f0000000a80)=""/12, 0xc}, 0x10001}], 0x3, 0x2, 0x0)
openat$binfmt_format(0xffffff9c, 0x0, 0x2, 0x0)
r6 = socket$inet6(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
ioctl$SIOCSIFHWADDR(r7, 0x8b04, &(0x7f0000000040)={'wlan1\x00', @broadcast})
setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4)
connect$inet6(r6, &(0x7f0000000080)={0xa, 0x900c, 0x0, @dev={0xfe, 0x80, '\x00', 0x21}, 0x7}, 0x1c)
vmsplice(r1, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0)
splice(r0, 0x0, r6, 0x0, 0x8001, 0xc)

4.073531244s ago: executing program 1 (id=958):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xac)
r5 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r5)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r5, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(r4, 0xffffffffffffffff, 0x0)

3.177223131s ago: executing program 0 (id=959):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r4 = creat(&(0x7f0000000040)='./file0\x00', 0x4b)
close(r4)
syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETFB2(r4, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(r4, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0)

3.176949551s ago: executing program 4 (id=960):
r0 = socket$igmp(0x2, 0x3, 0x2)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x103}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r1 = getpid()
sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7)
rt_tgsigqueueinfo(r1, r1, 0x2a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
pipe2$9p(&(0x7f0000002740), 0x80080)
fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000000100)='test_dummy_encryption', 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/cpuinfo\x00', 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48)
read$FUSE(r4, &(0x7f0000000200)={0x2020}, 0x2020)
mount(0x0, 0x0, &(0x7f0000000180)='tmpfs\x00', 0x2204c96, 0x0)
r5 = syz_init_net_socket$llc(0x1a, 0x0, 0x0)
fsconfig$FSCONFIG_SET_FD(r4, 0x5, &(0x7f00000001c0)='\x00', 0x0, r5)
r6 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=@ipv6_newaddr={0x40, 0x14, 0x119, 0x70bd26, 0x25dfdbf5, {0xa, 0x8, 0x19, 0xfe, r7}, [@IFA_ADDRESS={0x14, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x40000000, 0x10, 0x100, 0x7}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c051}, 0x8004)
r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00')
syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6)
lseek(r8, 0xfffd, 0x0)
socket$inet6(0xa, 0x2, 0x0)
r9 = socket(0x10, 0x2, 0x0)
write(r9, 0x0, 0x0)
setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x200000001300, 0x200000001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB]}, 0x78)

2.186411324s ago: executing program 2 (id=961):
r0 = inotify_init()
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x8aba, 0x4, 0x4, 0x804, 0x7, 0xf, 0x120000, 0x5, 0x0, 0x8, 0x8000000000000001, 0x2, 0xfffffffffffffffe, 0x101, 0x3, 0x1], 0x8000000, 0x141200})
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000140)=@arm64={0x10, 0x2, 0xb6, '\x00', 0x2})
ioctl$KVM_SET_MP_STATE(r3, 0x4004ae99, &(0x7f0000000040)=0x3)
ioctl$KVM_CAP_HYPERV_SYNIC(r3, 0x4068aea3, &(0x7f0000000080))
ioctl$KVM_RUN(r3, 0xae80, 0x0)
inotify_add_watch(r0, &(0x7f0000000000)='.\x00', 0xd50008ea)
openat(0xffffffffffffff9c, &(0x7f0000001740)='.\x00', 0x515001, 0x488)
bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x7ff}, 0x50)
r4 = socket$kcm(0x11, 0x200000000000002, 0x300)
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[@ANYBLOB="bf16000000000000b7070000000100004870000000000000500000000000000095000000000000002ba728041598fbd30cb599e83d24a3aa81d36bb3019c13bd23212fb56fa54f2641d8b02c3815e79c1414eb07eae6f0711e6bd917487960717142fa9ea4318123f602000000000080de89e661168c1886d0d4d94f204e34ff65c26e278ef5b915395b19284a1a4bc72fbc1626e3a2a2ad358061d0ae0209e62f51ee988e6ea604ce974a22a550d6f97080980400003e05df3ceb9f1feae5737ecaa80a666963c474c2a100c788b277beee1cbf9b0a4d3881dcc7b1b85f3c3d44aeaccd3641110bec4e90a6341965c39e4b3431abe802f5ab3e89cf6c662ed4048d3b3e22278d00ce00000000d3a02762c2951257b85802189d74005d2a1bcf9436e192e23fd275985bf31b714f000bcab6fcd610f25f5888000000003f11afc9bd08c6ebfbb89432fb465bc52f49129b9b6150e320c9901de2ebb9000000018e3095c4c5c7a156cec33a667dccaff950ca1e5efdd4c968dacf81baa3a509b1041d06f6b0097c430481824a3f4fddd3c643f630ba175d876defd3541772f26e27c44cfdb2d85d6d29983e830a9cdd79837b3468e8c67a571d0a017c100344c52a570dd39877dfb2ff1ae66e1ce917474b2e650ae630afd086004c4a56c6cce6e51723257c872c5255f20100000000000000f041b665ab21372c8d8b7bac5b5c784d20a4a24d8dbd75062e1daef9dead619cc6e7baa72707157791c3d2a286ffb8d35452bb5d36c2a8682bf7ecbd53f950ef4709ec01e230d2f53594ef4839c6130c4c13a0cca84b9935f771fd49e480cd9d48aeb12b1d6acabd38a817bcd222614d1f62734d679039a97d2b74f9e8e997ccd314000f7477137f4e8e7025123e783df8b8a17e3aa9fe1f662aef87a065b03cfb65b4dfe4f1b56e1f23128d743753a1de172d683d5892ce9414a1d98ea93e3d35dbb6c23b90cf36e83b8a434a97d09343d7f83079ccb02e69d384146056d125cfa788237874dd42dae334bda042819a2aa24dba1c25be2794448b4f63483026b5e34d44705b76ef29241adab0dd7d68bf975e02069f6f2425e1bc97a3d588085f16bef63a06578d4f5de7bfb6aaa75f16996d536256c02284cb1d3a6fb8cae87691fae365a70c3fc69e1565bba8dd8a8ca049f798abe646f738bebd69413afc9d8a5edd7aaa000000000000001e6c2f2a287c5278a218dbfaffffff00a14db5cfa6819eb1d39c48cfdc80d215c9e16e0c4736c819363154cca4e2f89800d18c89d7f46f679df6c9e2952ae1ebfd0ca88368ee6ce139e8b5822c22cf2e9dde943d34c432e1001171792c65986146666a5490928441f47e0fe5eac41824ca1fd0eb71aa243c88d5480efd8329d9a733d8f9ffffff5f912ac4e34bf6ea8a86da707b03bddb491ba0cc98f6be92c50008a2b50025419d1476c73132ca7ca26ce8a7e3ffb700f09e157f9b844051f1a642aca9ff98c9036471ccff0522903e7bcf62e18f7696bbc280b95e8e0d6fd5644b0ebde3a95b06548862de809d3dae3cccf109f7c78e8479a345e800000000000000000000009455bf417627ce723a5d9103706aba69279500bb82f6b5a3ddc0bd9856712945b70c75ce5b722578820820d010d7a3cffc99fc647d0b82ef26ab708c0b19ed144be51c3b398f0e6bb7a30006000000cba12953d58cff0f0378740fe6662f377b97d8e7cdb047acd083d3cd3856476a60a49ad127ba6570bafc2bbcf9ee721fd9cb467ff071e5604fbf0491245c0000007d932d7a64de4c4aa433fc0840aff7c47da3a4c6966d0000000000000000f6bfbae29e8a6e2a889f6ef6869d82d6bd73eb76b65c7a35a54a4a6b8ad4600e3a972a0bb5971a5f16590b0a03dafa3fd1118765cc8ab9fccf3b51c41a339f200f2fa33006910a679a9ae0187b4d750c4bd244cb0cbfd23b265f4d4da448a7a0d19c5e430a31609dfa2dde267551467eb6475293dd7012cc449009981f22820e57a0eff234ccfe21d7a2302e000669753d3c3432cc14ee1abe724adb6b5431befedd3e22971118f0e21aed1823cb7dde8212a8531bd9691dd4cc6a370e9eb56b3d790b98f2bd0db1e5de6a146597b2cbb7103040d2a39d7965d34df524b760ab92efcce7dd1574052c735935bf6a752c015c7f5ffee9ff66e5dd2866b15b6e0d17618cb1f5c1ee4b051f47db7aa110f499f840a5c965443d725556351ee25fe09f69494b053678dcadcf02e063dff2fa4bef1ac3bbbebe6c74d71ec3b23e29895eff1d1017024fe3e8cc759b05785adc346b7ffd05963f92c1d0d7d90ba878ad89e490f3e29ac51d30632869a534418f916bf6fe8167827a8e6c8f8b391c822805cb0adf1b8bd6947ff208753eb0d208ce14f7b206b2e02c21e963abc5ceb735c1b3c46b0a843de52a903375dfb663a8d8ee9c2b2705c1a81d9d3b9656b219c8cd99c9cafcd0d0540884d97aecb19983fc6af29ab44a82aff9cba921192c665b877af6539bdb1b567f481ba07982e7ad758f4e1eac69e7e88a63960975f490e161e371ec8534791e3b61c685d900a9c0839208356b53750e76fcc3c2d1bddcbd83897921414d0c02e8188f3df79ea2a5c5444004830e6cb227ca1bdafb977c00000000003a417193b8c5d793687335a930867094fd6a78218218e04b705ec62f1608cb569b81914e68f175b392af6bc4fd2121d7fd276af2c97a441b56e7a0687d98b8e76d8d0d231e4fe00be1de76bd19cc12e2bd938eb681ed6bc951c1b4f7c51af59eea4d40c6000000000200778a677b72786311153271a3313da02645e11761699e4d04ac86dd14ff7b9a10d3fa74696fe3953a5b7706bf5d1faba4b18808d9cb0e9db696dec4e0820ee4028d7225a2c9c427cf64cbde6fba056b2006b7a37c1181d530fb865e235cd302f3b4071ee5237ada986b9e5e3144bf479f277f10656ad3744037ccc9c63685a6f1109d2ea73773d3635f61497f1fa1ea4a16f601800bf3e59141fbf05a96113320c445f9ba8596970d5254727e804fbd99ccefb7c09269dd2c5c25e56e169ac15980f3f85f7ca36dd5950ef5b64fd46f123311829534a82940994199b3cf7a8fabea9930952f5da9b909c1946e55289f668c423fcbb31ae91864c882313151741a67538c9689dc8ecc9903c7041e5c0704e2fa55a756487517a7445cbd9e3f5175e41c0000000000000000000a000000bf98efd587fffe326f474b0b089c017b16c0062cbce96f5adebec52a79f9363909842f79c50a1520be46d87003137e4c5031f00123e812a5e37cd52c9eb7336281cb8c6ce9934b157d7875a70eaf103cb3938e2361c51cd1eab8a26b232acf6bf0ab829c26dab637538b2eb1420d812d2b80c777710ba0f18e4661681aa218d9ba54023ab4305d77eb15611ae2545835e9d30e9f6d4fb43a291c69545a1eea0f8720431132d8549f99bf6c5cb060da70cbb59d0a000000000034d083fc37d2449f72de0cbea4bc1dc89c136cdbc504f849d5502d77a95c7bfff4cd9c03058d0d4d07ea64824f1acf2b39389f675f39d01719cdbab3f1ce10609c8d7b3e37cb99b41da5e485a441b6a103549f55ab09dc98767763d1f2fafd45bb7d2b40050d1f8292f4d9ec6d0000000000003932062290f4996fdd55b06023437e9e2072daf7f5d82f6f1b5b89a41134f4dc2e65bb11272fdf8c8141f41d6160b3d8b6ecd16d14267f61b4881adee7f07f3d6af5ae79e16fe2c3f55ac7a6392d2e1d9b4286b6c3e1f5a76b85ed6e1f0000c67e6c5fcdc8c39381be4799b8cb2d08b8262c807dd755e22b801162381aa9d1af2bbc9cfd497585337eac408b8475b47a392a10cae349160f128e5f873a58064eb400c36a90624f6aed398a215e9ce64522ab249f67c38a656d32ecff5cdb2b039c4abf349d2c0f88a42e9189bbfa7f5cf35b6e7ef8f9d33163b7ea875583e3aec4714c9c4ca3ecb04f2720237615a28bf310b58ffa2a103216fdcc8c2d8f5d55e5e7ebf147105272aaae56e86d856b3cf79a3f7306436762dd1a08ce873e07cebc7892ec6f9f696da38feed3dc0001500e34adae1ba89a32bad2af9030f840f1ba46cdadd5cbacc59352c290f55d971b65953533668c25f21d8d62d849e9058eaa97c63491568887548f668cdbca2abf01a361a0b64d8b523e669da350e3ec7445dfbf366b0b3bc5e76824a1e43eaaeca70db90f2fa39596443447671933079a24fe3681ad9ac361f71ac279a688f10a1cc4df1112105edebc5e3bbc394c8305ab129ca2dfb9b7c5e9d097bd01b495cccefddce569117f7f5d6a6270ff0f0f4c371029ca8489571b55841bf3dd003bc81460eee57ceb3c33f4e9300b0144fe040cf5fcfcbb616c2070237881afdb314cecd1623f3e55ab8b7627fa1be349145a8d6313cbc790eefe2020138e82fb9d351be4ddcbcc9bc048dd3db5828d16baec6e07a007f0030f34ea3cfd524d6fa1d45da5641d6c94e1d3ae7fba1c85035d2a60ef1696e0d96aa1c60019f73ae0aa6113cd66ef26b5777337c26e1461405d86fdf091edd526f25cada439bb3609ed5c35ab60a539ade786bd6004d0ea3edbd6c4da0d8e8be8c771c8c8a0b07d9859e04adb18964dcce9bce546074c26dffbc2df372a016e8c845d4257000000000000000000000000000000000000f29657697d9c2b132b2dc2f5ea5122836582a7e85fe2bc166f17aefd9d861de0191f5277d4a3b5afb6f23d9eea2459f7844606e1202768d83c24cc791bde44a448022bbfa571fe029a7b2d5152639ee283894ab6168992ff0acc01b39a078f285ce615351f262019586eb9447bb3eaffd7b53d8f37ca6c5f1027dd5b7592996c8a7789ba108979cc9ad07ed86682843e2eaa855dd01443ee6ffde1811f10039d5d14458177096e15cc4d8f2582a1bea5ccb9f10f615c87c441dc50a244bc138a1cae9868c3079bafe69769000000000000000000e99b63029d219cd3545a8426b56554a9f265d3557eefb3602894507c256cb8ee9ebadfecb6afeb84ba757bfa8d00a5af0dd6aa1e8144ef8ef04410d52204c335408941b8eccc5c734cc6a05247142ed647f89bcb5c043acfb382b9cc918bc3cdc368983157851cdf678800aa7eb2a6cbc12c7ae23bc88b8f10223ab2a093429f3f6965bc5af0114cf6f246e891e20ecaad7059866506c3000000000c3230e901e885b7a4a36bdfdb5ce7a2e5807a0f4c1d461d1243fccf51b875b49490cd7d044e7a1e1a4c013fae1f070a8a37ab90da2efc6c875b3aab34b75a252072691fc97bef0fed8ee597ab83bb53f89c36bc2ee3ad54904542f66dc94132df75fc9944882d6f2e13b7057e0000000000000000000000000000000000001b726c0ccd24000000000000cfd2f4d005578b9ed06e1c41ef3b411066739de953d39b968caaca1507928d68c8f052"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48)
bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50)
pwrite64(0xffffffffffffffff, &(0x7f0000000000)=':', 0x1, 0x1)
r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6)
write$binfmt_misc(r6, &(0x7f0000000000), 0xd)
setsockopt$sock_attach_bpf(r4, 0x1, 0x32, &(0x7f0000000000)=r5, 0x4)
r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}})
write$tun(r7, &(0x7f0000000440)=ANY=[@ANYBLOB="000086dd0001110004000000a60c6eec00be00442fd3fe8000000000000000000000000000aaff02000000000000000000000000000104"], 0xfdef)

2.184738364s ago: executing program 4 (id=962):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB], 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = creat(&(0x7f0000000000)='./file0\x00', 0xac)
r5 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r6 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r6, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r7=>0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r7})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(r4, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

1.088421672s ago: executing program 0 (id=963):
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7)
r0 = getpid()
sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeee, 0x8031, 0xffffffffffffffff, 0x3d6d9000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfff}, 0x6e)
sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0)
syz_open_dev$video(0x0, 0x100000000, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000180)={0x1, &(0x7f0000000000)=[{0x6, 0x7, 0x0, 0x7fff8000}]})
close_range(r3, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
pipe(&(0x7f0000000140)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
openat(r6, 0x0, 0x60042, 0x18f)
ioctl$IOCTL_VMCI_QUEUEPAIR_SETVA(r6, 0x7a4, &(0x7f0000000300)={{@host}, 0x10001, 0x1, 0x8000, 0x4})
recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0)
getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @multicast1, @remote}, &(0x7f0000000100)=0xc)
r7 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180), 0x109842, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, &(0x7f0000000000)=0x400)

1.029729625s ago: executing program 4 (id=964):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, &(0x7f00000006c0)=ANY=[@ANYBLOB="18"], &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {0x0}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae9968fe8", 0x60}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {0x0}, {&(0x7f00000000c0)}], 0x6}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{0x0}, {0x0}, {&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b96", 0x63}, {&(0x7f0000000580)="8f966bd94d169820f6b844307d323b8c13deaeff91", 0x15}], 0x4, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}], 0x60}}, {{0x0, 0x0, &(0x7f0000003a40)=[{&(0x7f0000000640)="f3f4c60f4caeeeb0b0c17aa4", 0xc}], 0x1}}], 0x3, 0x20000044)
ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'})
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r1 = accept4(r0, 0x0, 0x0, 0x800)
sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', <r4=>0x0})
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff0802110000"], 0x6f4}}, 0x0)

945.50556ms ago: executing program 4 (id=965):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00', <r3=>0x0})
syz_usb_connect(0x2, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="120100000c9768405e0483020b9901e4020109021b000100000000090400fb0160291d00090509a9143c"], 0x0)
r4 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x1)
ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)=0x5)
r5 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r5, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256\x00'}, 0x58)
prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0)
r6 = getpid()
sched_setscheduler(r6, 0x2, &(0x7f0000000200)=0x4)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={<r7=>0xffffffffffffffff, <r8=>0xffffffffffffffff})
connect$unix(r7, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r8, &(0x7f0000000000), 0x651, 0x0)
recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r9 = accept4(r5, 0x0, 0x0, 0x800)
recvmmsg$unix(r9, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0)
sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000005fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002dbd0600ffdbdb252100000020000300", @ANYRES32=r3, @ANYBLOB="0600eb00000800000400ec000a00060008021100000100000600f70000ff000008"], 0x44}}, 0x28000)

869.166904ms ago: executing program 3 (id=967):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = eventfd(0x2)
ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000040)={r2, 0xc2b, 0x2}) (fail_nth: 2)

828.375446ms ago: executing program 1 (id=968):
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100048b}, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000021c0)={0x1f, 0xd3, @any, 0x3}, 0xe)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x0)
syz_80211_join_ibss(&(0x7f0000000280)='wlan0\x00', &(0x7f00000002c0)=@default_ap_ssid, 0x6, 0x0)

50.544907ms ago: executing program 0 (id=969):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd", 0x35, 0x840, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd", 0x8}, {0x0}], 0x4, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

977.82µs ago: executing program 3 (id=970):
sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd", 0x35, 0x840, 0x0, 0x0)
bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x006'], 0x48)
sendmmsg$sock(0xffffffffffffffff, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001400)=[{0x0}, {&(0x7f0000000d00)}, {&(0x7f0000000fc0)="c6eae69212ba50dd", 0x8}], 0x3, &(0x7f0000000600)=[@mark={{0x14, 0x1, 0x24, 0x358}}, @mark={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0x401}}, @txtime={{0x18, 0x1, 0x3d, 0x101}}], 0x78}}], 0x2, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
ioctl$vim2m_VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0205647, &(0x7f0000000940)={0xf010000, @vbi={0x0, 0x9, 0x6, 0x32435750, [0x1, 0x4bf], [0x1, 0x2], 0x13a}})
bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6)
r3 = accept4(r2, 0x0, 0x0, 0x800)
sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800)
recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0)
pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2)
syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

0s ago: executing program 2 (id=971):
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_vhci(0x0, 0x7)
prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0)
sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5)
openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x8081)
writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2)
r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0)
r2 = getpid()
sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3)
r3 = syz_open_dev$tty1(0xc, 0x4, 0x1)
ioctl$VT_RESIZE(r3, 0x5609, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x110b, 0x8000000000002})
r4 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0)
r5 = creat(&(0x7f0000000000)='./file0\x00', 0xac)
r6 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000000140)=[@in6={0xa, 0x4e20, 0x0, @loopback}, @in={0x2, 0x4e20, @local}], 0x2c)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback, 0x7}, @in6={0xa, 0x4e20, 0x1, @private2, 0x740}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x13}}]}, &(0x7f00000002c0)=0x10)
r7 = syz_open_dev$dri(&(0x7f0000000000), 0x1ff, 0x0)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r7, 0xc04064a0, &(0x7f0000000200)={0x0, &(0x7f0000000100)=[<r8=>0x0], 0x0, 0x0, 0xffffffffffffffc1, 0x1})
ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r8})
ioctl$DRM_IOCTL_MODE_GETFB2(0xffffffffffffffff, 0xc06864ce, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB2(0xffffffffffffffff, 0xc06864b8, &(0x7f00000001c0)={0x0, 0xae, 0x3ff, 0x34325241, 0x0, [], [0x2b8]})
close_range(r5, 0xffffffffffffffff, 0x0)
ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x58}}, 0x0)
openat$panthor(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0)

kernel console output (not intermixed with test programs):

[ T6699] usb 4-1: selecting invalid altsetting 0
[  235.929738][ T1335] wacom 0003:056A:00D8.0013: unknown global tag 0xe
[  235.942080][ T1335] wacom 0003:056A:00D8.0013: item 0 2 1 14 parsing failed
[  235.949236][ T6699] usb 4-1: 0:0: usb_set_interface failed (-22)
[  235.957493][ T1335] wacom 0003:056A:00D8.0013: parse failed
[  235.963366][ T1335] wacom: probe of 0003:056A:00D8.0013 failed with error -22
[  236.103893][ T6695] loop2: detected capacity change from 0 to 256
[  236.111840][   T26] audit: type=1800 audit(1776843619.700:6): pid=6714 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.625" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=4430 res=0 errno=0
[  236.153872][    C1] vkms_vblank_simulate: vblank timer overrun
[  236.618736][ T6695] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  236.672869][ T6719] FAULT_INJECTION: forcing a failure.
[  236.672869][ T6719] name failslab, interval 1, probability 0, space 0, times 0
[  236.840987][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  236.851302][ T6719] CPU: 0 PID: 6719 Comm: syz.0.628 Not tainted syzkaller #0
[  236.858636][ T6719] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  236.868705][ T6719] Call Trace:
[  236.872051][ T6719]  <TASK>
[  236.875007][ T6719]  dump_stack_lvl+0x188/0x250
[  236.879712][ T6719]  ? show_regs_print_info+0x20/0x20
[  236.884925][ T6719]  ? load_image+0x400/0x400
[  236.889456][ T6719]  ? __might_sleep+0xf0/0xf0
[  236.894064][ T6719]  ? __lock_acquire+0x7d10/0x7d10
[  236.899112][ T6719]  ? mark_lock+0x94/0x320
[  236.903467][ T6719]  should_fail+0x38c/0x4c0
[  236.907919][ T6719]  should_failslab+0x5/0x20
[  236.912448][ T6719]  slab_pre_alloc_hook+0x51/0xc0
[  236.917410][ T6719]  __kmalloc+0x6b/0x330
[  236.921583][ T6719]  ? tomoyo_realpath_from_path+0x118/0x610
[  236.927426][ T6719]  tomoyo_realpath_from_path+0x118/0x610
[  236.933094][ T6719]  tomoyo_path_number_perm+0x242/0x660
[  236.938585][ T6719]  ? verify_lock_unused+0x140/0x140
[  236.943816][ T6719]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  236.949308][ T6719]  ? ksys_write+0x1c6/0x260
[  236.953901][ T6719]  security_file_ioctl+0x6c/0xa0
[  236.958920][ T6719]  __se_sys_ioctl+0x48/0x170
[  236.963553][ T6719]  do_syscall_64+0x4c/0xa0
[  236.967992][ T6719]  ? clear_bhb_loop+0x30/0x80
[  236.972682][ T6719]  ? clear_bhb_loop+0x30/0x80
[  236.977387][ T6719]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  236.983300][ T6719] RIP: 0033:0x7ff2fbcdf819
[  236.987743][ T6719] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  237.007371][ T6719] RSP: 002b:00007ff2f9f18028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  237.015817][ T6719] RAX: ffffffffffffffda RBX: 00007ff2fbf59090 RCX: 00007ff2fbcdf819
[  237.023811][ T6719] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000007
[  237.031805][ T6719] RBP: 00007ff2f9f18090 R08: 0000000000000000 R09: 0000000000000000
[  237.039796][ T6719] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  237.047805][ T6719] R13: 00007ff2fbf59128 R14: 00007ff2fbf59090 R15: 00007ffd2fc79bb8
[  237.055814][ T6719]  </TASK>
[  237.150866][ T6695] netlink: 'syz.2.624': attribute type 1 has an invalid length.
[  237.355518][ T5500] kernel write not supported for file /sg0 (pid: 5500 comm: kworker/0:10)
[  237.404473][ T6695] netlink: 12 bytes leftover after parsing attributes in process `syz.2.624'.
[  237.672205][ T4195] XFS (loop4): Unmounting Filesystem
[  237.685147][ T6720] usb 4-1: selecting invalid altsetting 0
[  237.690920][ T6720] usb 4-1: 0:0: usb_set_interface failed (-22)
[  237.697166][ T6720] usb 4-1: selecting invalid altsetting 0
[  237.702970][ T6720] usb 4-1: 0:0: usb_set_interface failed (-22)
[  237.709277][ T6720] usb 4-1: selecting invalid altsetting 0
[  237.715060][ T6720] usb 4-1: 0:0: usb_set_interface failed (-22)
[  237.774291][ T1335] usb 3-1: USB disconnect, device number 17
[  237.790816][ T4229] usb 4-1: USB disconnect, device number 11
[  237.815592][ T6719] ERROR: Out of memory at tomoyo_realpath_from_path.
[  237.888555][ T5896] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  237.899951][ T5896] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  237.928692][ T5896] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  238.059475][ T5896] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.233808][ T5896] usb 2-1: config 0 descriptor??
[  238.304537][ T6713] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  238.854471][ T5896] usbhid 2-1:0.0: can't add hid device: -71
[  238.860502][ T5896] usbhid: probe of 2-1:0.0 failed with error -71
[  239.479830][ T6731] loop3: detected capacity change from 0 to 4096
[  239.576394][ T5896] usb 2-1: USB disconnect, device number 13
[  239.644645][ T6734] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  239.690990][ T6731] ntfs3: loop3: Different NTFS' sector size (1024) and media sector size (512)
[  240.671889][ T6752] FAULT_INJECTION: forcing a failure.
[  240.671889][ T6752] name failslab, interval 1, probability 0, space 0, times 0
[  240.694407][ T5500] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[  240.740038][ T6752] CPU: 0 PID: 6752 Comm: syz.0.637 Not tainted syzkaller #0
[  240.747380][ T6752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  240.757456][ T6752] Call Trace:
[  240.760766][ T6752]  <TASK>
[  240.763727][ T6752]  dump_stack_lvl+0x188/0x250
[  240.768480][ T6752]  ? show_regs_print_info+0x20/0x20
[  240.773699][ T6752]  ? load_image+0x400/0x400
[  240.778228][ T6752]  ? __might_sleep+0xf0/0xf0
[  240.782850][ T6752]  ? __lock_acquire+0x7d10/0x7d10
[  240.787925][ T6752]  should_fail+0x38c/0x4c0
[  240.792409][ T6752]  should_failslab+0x5/0x20
[  240.796968][ T6752]  slab_pre_alloc_hook+0x51/0xc0
[  240.801942][ T6752]  __kmalloc_node_track_caller+0x68/0x3a0
[  240.807694][ T6752]  ? sock_wmalloc+0xa6/0x120
[  240.812332][ T6752]  ? kmem_cache_alloc_node+0x162/0x2d0
[  240.817834][ T6752]  ? __alloc_skb+0xf4/0x750
[  240.822367][ T6752]  ? sock_wmalloc+0xa6/0x120
[  240.827010][ T6752]  __alloc_skb+0x22c/0x750
[  240.831518][ T6752]  sock_wmalloc+0xa6/0x120
[  240.835972][ T6752]  pppoe_sendmsg+0x202/0x740
[  240.840594][ T6752]  ? security_socket_sendmsg+0x7c/0xa0
[  240.846082][ T6752]  ? pppoe_getname+0x120/0x120
[  240.850887][ T6752]  ____sys_sendmsg+0x5b7/0x8f0
[  240.855708][ T6752]  ? __sys_sendmsg_sock+0x30/0x30
[  240.860793][ T6752]  ? import_iovec+0x6f/0xa0
[  240.865337][ T6752]  ___sys_sendmsg+0x236/0x2e0
[  240.870059][ T6752]  ? __sys_sendmsg+0x2a0/0x2a0
[  240.874901][ T6752]  __sys_sendmmsg+0x2ba/0x500
[  240.879612][ T6752]  ? __ia32_sys_sendmsg+0x80/0x80
[  240.884692][ T6752]  ? __context_tracking_exit+0x4c/0x80
[  240.890195][ T6752]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  240.896213][ T6752]  ? lock_chain_count+0x20/0x20
[  240.901102][ T6752]  ? vtime_user_exit+0x2c8/0x3e0
[  240.906105][ T6752]  __x64_sys_sendmmsg+0x9c/0xb0
[  240.910990][ T6752]  do_syscall_64+0x4c/0xa0
[  240.915439][ T6752]  ? clear_bhb_loop+0x30/0x80
[  240.920142][ T6752]  ? clear_bhb_loop+0x30/0x80
[  240.924854][ T6752]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  240.930806][ T6752] RIP: 0033:0x7ff2fbcdf819
[  240.935244][ T6752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  240.954887][ T6752] RSP: 002b:00007ff2f9f39028 EFLAGS: 00000246 ORIG_RAX: 0000000000000133
[  240.963332][ T6752] RAX: ffffffffffffffda RBX: 00007ff2fbf58fa0 RCX: 00007ff2fbcdf819
[  240.971337][ T6752] RDX: 00000000000003e8 RSI: 0000200000002340 RDI: 0000000000000006
[  240.979439][ T6752] RBP: 00007ff2f9f39090 R08: 0000000000000000 R09: 0000000000000000
[  240.987520][ T6752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  240.995524][ T6752] R13: 00007ff2fbf59038 R14: 00007ff2fbf58fa0 R15: 00007ffd2fc79bb8
[  241.003537][ T6752]  </TASK>
[  241.091673][ T6760] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  241.134442][ T5500] usb 4-1: Using ep0 maxpacket: 32
[  241.174455][ T5503] usb 2-1: new full-speed USB device number 14 using dummy_hcd
[  241.254472][ T5500] usb 4-1: config 0 has an invalid interface number: 196 but max is 0
[  241.262845][ T5500] usb 4-1: config 0 has no interface number 0
[  241.284307][ T5500] usb 4-1: config 0 interface 196 altsetting 1 bulk endpoint 0x2 has invalid maxpacket 528
[  241.309310][ T5500] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has an invalid bInterval 180, changing to 7
[  241.329162][ T5500] usb 4-1: config 0 interface 196 altsetting 1 endpoint 0x82 has invalid maxpacket 34701, setting to 1024
[  241.364475][ T5500] usb 4-1: config 0 interface 196 has no altsetting 0
[  241.426633][ T6763] loop0: detected capacity change from 0 to 32768
[  241.479821][ T6763] XFS (loop0): Mounting V5 Filesystem
[  241.524377][ T5500] usb 4-1: New USB device found, idVendor=05ac, idProduct=7700, bcdDevice=eb.3a
[  241.533548][ T5500] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  241.542071][ T5503] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  241.564540][ T5503] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  241.589445][ T5500] usb 4-1: Product: syz
[  241.593738][ T5500] usb 4-1: Manufacturer: syz
[  241.598478][ T5503] usb 2-1: config 0 interface 0 has no altsetting 0
[  241.611949][ T5500] usb 4-1: SerialNumber: syz
[  241.619134][ T5500] usb 4-1: config 0 descriptor??
[  241.632909][ T6763] XFS (loop0): Ending clean mount
[  241.645584][ T6731] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  241.662283][ T6763] XFS (loop0): Quotacheck needed: Please wait.
[  241.716917][ T6763] XFS (loop0): Quotacheck: Done.
[  241.726329][ T6782] loop4: detected capacity change from 0 to 128
[  241.784599][ T5503] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  241.833304][ T5503] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  241.845020][ T5500] ipheth 4-1:0.196: Unable to find endpoints
[  241.878432][ T5500] usb 4-1: USB disconnect, device number 12
[  241.892995][ T5503] usb 2-1: Product: syz
[  241.921140][ T5503] usb 2-1: Manufacturer: syz
[  241.928332][ T5503] usb 2-1: SerialNumber: syz
[  241.950262][ T5503] usb 2-1: config 0 descriptor??
[  242.003241][ T5503] usb 2-1: selecting invalid altsetting 0
[  242.204541][ T6754] usb 2-1: selecting invalid altsetting 0
[  242.212629][ T6754] usb 2-1: 0:0: usb_set_interface failed (-22)
[  242.406420][   T26] audit: type=1800 audit(1776843626.010:7): pid=6763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.640" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop0" ino=4430 res=0 errno=0
[  243.312661][ T4185] XFS (loop0): Unmounting Filesystem
[  243.590691][ T6787] usb 2-1: selecting invalid altsetting 0
[  243.596532][ T6787] usb 2-1: 0:0: usb_set_interface failed (-22)
[  243.602832][ T6787] usb 2-1: selecting invalid altsetting 0
[  243.608643][ T6787] usb 2-1: 0:0: usb_set_interface failed (-22)
[  243.614863][ T6787] usb 2-1: selecting invalid altsetting 0
[  243.620624][ T6787] usb 2-1: 0:0: usb_set_interface failed (-22)
[  243.689274][ T5896] usb 2-1: USB disconnect, device number 14
[  243.778154][ T6784] loop2: detected capacity change from 0 to 32768
[  243.788520][ T1324] usb 4-1: new full-speed USB device number 13 using dummy_hcd
[  244.105469][ T6784] XFS (loop2): Mounting V5 Filesystem
[  244.870783][ T6784] XFS (loop2): Ending clean mount
[  244.974760][ T6784] XFS (loop2): Quotacheck needed: Please wait.
[  244.984953][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  245.046650][ T1324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  245.267745][ T1324] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  245.393078][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  245.615166][ T1324] usb 4-1: config 0 descriptor??
[  245.642039][ T6784] XFS (loop2): Quotacheck: Done.
[  245.660342][ T6793] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  245.708986][ T6819] loop1: detected capacity change from 0 to 64
[  245.740415][ T4189] XFS (loop2): Unmounting Filesystem
[  245.856884][ T6822] FAULT_INJECTION: forcing a failure.
[  245.856884][ T6822] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  246.194804][ T1324] hid (null): unknown global tag 0xe
[  246.712119][ T1324] hid (null): unknown global tag 0xe
[  246.718094][ T1324] hid (null): unknown global tag 0xe
[  246.719343][ T6822] CPU: 1 PID: 6822 Comm: syz.4.654 Not tainted syzkaller #0
[  246.730702][ T6822] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  246.733016][ T1324] wacom 0003:056A:00D8.0014: unknown main item tag 0x3
[  246.740787][ T6822] Call Trace:
[  246.740797][ T6822]  <TASK>
[  246.740807][ T6822]  dump_stack_lvl+0x188/0x250
[  246.740836][ T6822]  ? show_regs_print_info+0x20/0x20
[  246.740859][ T6822]  ? load_image+0x400/0x400
[  246.740887][ T6822]  ? __lock_acquire+0x7d10/0x7d10
[  246.740919][ T6822]  should_fail+0x38c/0x4c0
[  246.740950][ T6822]  _copy_from_iter+0x22e/0x1170
[  246.740978][ T6822]  ? __lock_acquire+0x7d10/0x7d10
[  246.751955][ T1324] wacom 0003:056A:00D8.0014: unknown global tag 0xe
[  246.754273][ T6822]  ? copy_mc_pipe_to_iter+0x7d0/0x7d0
[  246.754309][ T6822]  ? __virt_addr_valid+0x3c6/0x470
[  246.754334][ T6822]  ? __check_object_size+0x30c/0x410
[  246.754362][ T6822]  file_tty_write+0x515/0x910
[  246.754391][ T6822]  ? n_hdlc_tty_read+0xa20/0xa20
[  246.754420][ T6822]  vfs_write+0x745/0xd60
[  246.754447][ T6822]  ? file_end_write+0x250/0x250
[  246.754480][ T6822]  ? __fget_files+0x40f/0x480
[  246.754511][ T6822]  ? __fdget_pos+0x1e2/0x370
[  246.754529][ T6822]  ? ksys_write+0x71/0x260
[  246.754551][ T6822]  ksys_write+0x152/0x260
[  246.754575][ T6822]  ? __ia32_sys_read+0x80/0x80
[  246.754599][ T6822]  ? lockdep_hardirqs_on+0x94/0x140
[  246.754628][ T6822]  do_syscall_64+0x4c/0xa0
[  246.754647][ T6822]  ? clear_bhb_loop+0x30/0x80
[  246.754668][ T6822]  ? clear_bhb_loop+0x30/0x80
[  246.754690][ T6822]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  246.754712][ T6822] RIP: 0033:0x7f051e97e819
[  246.754731][ T6822] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  246.754750][ T6822] RSP: 002b:00007f051cbd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  246.754773][ T6822] RAX: ffffffffffffffda RBX: 00007f051ebf7fa0 RCX: 00007f051e97e819
[  246.754789][ T6822] RDX: 00000000fffffdef RSI: 0000200000001040 RDI: 0000000000000006
[  246.754803][ T6822] RBP: 00007f051cbd8090 R08: 0000000000000000 R09: 0000000000000000
[  246.754817][ T6822] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  246.762169][ T1324] wacom 0003:056A:00D8.0014: item 0 2 1 14 parsing failed
[  246.764702][ T6822] R13: 00007f051ebf8038 R14: 00007f051ebf7fa0 R15: 00007ffc573b7d78
[  246.764738][ T6822]  </TASK>
[  246.764803][    C1] vkms_vblank_simulate: vblank timer overrun
[  246.771039][ T1324] wacom 0003:056A:00D8.0014: parse failed
[  246.874847][ T6793] loop3: detected capacity change from 0 to 256
[  247.034829][ T6793] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  247.120663][ T6826] ODEBUG: Out of memory. ODEBUG disabled
[  247.154452][ T1324] wacom: probe of 0003:056A:00D8.0014 failed with error -22
[  247.187827][ T6793] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  247.245482][ T6793] netlink: 'syz.3.644': attribute type 1 has an invalid length.
[  247.404332][ T5896] usb 1-1: new full-speed USB device number 18 using dummy_hcd
[  247.412727][ T4406] kernel write not supported for file /sg0 (pid: 4406 comm: kworker/1:17)
[  247.432531][ T6833] netlink: 12 bytes leftover after parsing attributes in process `syz.3.644'.
[  247.498792][ T1335] usb 5-1: new full-speed USB device number 15 using dummy_hcd
[  247.608912][ T6835] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  247.824453][ T5896] usb 1-1: config 0 has an invalid interface number: 3 but max is 2
[  247.835930][ T5896] usb 1-1: config 0 has an invalid interface number: 188 but max is 2
[  247.853470][ T5896] usb 1-1: config 0 contains an unexpected descriptor of type 0x2, skipping
[  247.879869][ T5896] usb 1-1: config 0 has an invalid interface number: 165 but max is 2
[  247.888779][ T1335] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  247.914321][ T1335] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  247.927605][ T5896] usb 1-1: config 0 has no interface number 0
[  247.933788][ T5896] usb 1-1: config 0 has no interface number 1
[  247.940563][ T1335] usb 5-1: config 0 interface 0 has no altsetting 0
[  247.947905][ T5896] usb 1-1: config 0 has no interface number 2
[  247.954683][ T5896] usb 1-1: config 0 interface 3 altsetting 7 endpoint 0x6 has invalid maxpacket 1024, setting to 64
[  247.966553][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  247.977715][ T5896] usb 1-1: config 0 interface 188 altsetting 3 endpoint 0xD has invalid maxpacket 544, setting to 64
[  248.003085][ T6840] loop2: detected capacity change from 0 to 512
[  248.009724][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has a duplicate endpoint with address 0x5, skipping
[  248.020941][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has a duplicate endpoint with address 0x6, skipping
[  248.033955][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has an invalid endpoint with address 0xA0, skipping
[  248.045625][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has a duplicate endpoint with address 0xD, skipping
[  248.056748][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has a duplicate endpoint with address 0xF, skipping
[  248.067915][ T5896] usb 1-1: config 0 interface 188 altsetting 3 endpoint 0xC has invalid maxpacket 1052, setting to 64
[  248.079615][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  248.091071][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has an invalid endpoint with address 0x0, skipping
[  248.113974][ T5896] usb 1-1: config 0 interface 188 altsetting 3 has 13 endpoint descriptors, different from the interface descriptor's value: 12
[  248.158406][ T1335] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  248.171116][ T5896] usb 1-1: config 0 interface 165 altsetting 9 endpoint 0x4 has an invalid bInterval 30, changing to 4
[  248.189887][ T1335] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  248.207083][ T1335] usb 5-1: Product: syz
[  248.211460][ T5896] usb 1-1: config 0 interface 165 altsetting 9 endpoint 0xB has invalid wMaxPacketSize 0
[  248.225390][ T1335] usb 5-1: Manufacturer: syz
[  248.230079][ T1335] usb 5-1: SerialNumber: syz
[  248.235157][ T5896] usb 1-1: config 0 interface 3 has no altsetting 0
[  248.242715][ T5896] usb 1-1: config 0 interface 188 has no altsetting 0
[  248.250725][ T1335] usb 5-1: config 0 descriptor??
[  248.257896][ T5896] usb 1-1: config 0 interface 165 has no altsetting 0
[  248.286488][ T6840] EXT4-fs (loop2): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,nombcache,,errors=continue. Quota mode: writeback.
[  248.307367][ T1335] usb 5-1: selecting invalid altsetting 0
[  248.320765][ T6840] ext4 filesystem being mounted at /133/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff)
[  248.431632][    T7] usb 4-1: USB disconnect, device number 13
[  248.464504][ T5896] usb 1-1: New USB device found, idVendor=04da, idProduct=250d, bcdDevice=e5.40
[  248.479693][ T5896] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  248.490090][ T5896] usb 1-1: Product: �
[  248.494558][ T5896] usb 1-1: Manufacturer: щ
[  248.499229][ T5896] usb 1-1: SerialNumber: ᰮ뛿纫䄊욳�뿣鴖﨧쵬꞊ꊄ�啷둦ў㫮ࣶ쵄霹檈鴣�䯂籨䧇ﾟ뚊潃�粳㘕뗌ᔲ�⒋⠘陦쪤蹿ᛙ䩘
[  248.529964][ T6831] usb 5-1: selecting invalid altsetting 0
[  248.537751][ T6831] usb 5-1: 0:0: usb_set_interface failed (-22)
[  248.684888][ T5896] usb 1-1: config 0 descriptor??
[  249.379918][    T7] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[  249.493313][ T6829] capability: warning: `syz.0.657' uses deprecated v2 capabilities in a way that may be insecure
[  249.523136][ T6829] udc-core: couldn't find an available UDC or it's busy
[  249.527144][ T6849] usb 5-1: selecting invalid altsetting 0
[  249.535912][ T6849] usb 5-1: 0:0: usb_set_interface failed (-22)
[  249.542104][ T6849] usb 5-1: selecting invalid altsetting 0
[  249.547937][ T6849] usb 5-1: 0:0: usb_set_interface failed (-22)
[  249.552577][ T6829] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  249.554291][ T6849] usb 5-1: selecting invalid altsetting 0
[  249.567400][ T6849] usb 5-1: 0:0: usb_set_interface failed (-22)
[  249.628806][    T7] usb 4-1: Using ep0 maxpacket: 16
[  249.632599][ T4406] usb 5-1: USB disconnect, device number 15
[  249.718304][ T6853] loop4: detected capacity change from 0 to 512
[  249.764665][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.785152][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  249.806278][ T6853] EXT4-fs (loop4): Ignoring removed nobh option
[  249.839117][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  249.870992][    T7] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  249.872481][ T6853] EXT4-fs error (device loop4): __ext4_iget:4919: inode #11: block 1: comm syz.4.663: invalid block
[  249.880869][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.893694][ T5896] usb 1-1: USB disconnect, device number 18
[  249.924338][    T7] usb 4-1: config 0 descriptor??
[  249.936068][ T6853] EXT4-fs (loop4): Remounting filesystem read-only
[  249.942824][ T6853] EXT4-fs error (device loop4): ext4_orphan_get:1411: comm syz.4.663: couldn't read orphan inode 11 (err -117)
[  250.039396][ T6853] EXT4-fs (loop4): Remounting filesystem read-only
[  250.066481][ T6853] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,nobh,max_dir_size_kb=0x0000000000000004,bsddf,nodiscard,errors=remount-ro,debug_want_extra_isize=0x0000000000000004,noauto_da_alloc,init_itable,. Quota mode: writeback.
[  250.089151][    C1] vkms_vblank_simulate: vblank timer overrun
[  250.451512][    T7] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0015/input/input6
[  250.616715][    T7] appleir 0003:05AC:8241.0015: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0
[  250.648088][ T6845] loop3: detected capacity change from 0 to 128
[  250.720168][ T6866] comedi comedi2: das16m1: I/O port conflict (0x501,8)
[  250.790904][ T6869] FAULT_INJECTION: forcing a failure.
[  250.790904][ T6869] name failslab, interval 1, probability 0, space 0, times 0
[  250.855771][ T6869] CPU: 0 PID: 6869 Comm: syz.4.667 Not tainted syzkaller #0
[  250.863125][ T6869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  250.873202][ T6869] Call Trace:
[  250.876513][ T6869]  <TASK>
[  250.879467][ T6869]  dump_stack_lvl+0x188/0x250
[  250.884189][ T6869]  ? show_regs_print_info+0x20/0x20
[  250.889426][ T6869]  ? load_image+0x400/0x400
[  250.894068][ T6869]  ? __might_sleep+0xf0/0xf0
[  250.898706][ T6869]  ? __lock_acquire+0x7d10/0x7d10
[  250.903789][ T6869]  should_fail+0x38c/0x4c0
[  250.908250][ T6869]  should_failslab+0x5/0x20
[  250.912778][ T6869]  slab_pre_alloc_hook+0x51/0xc0
[  250.917739][ T6869]  __kmalloc_node+0x6e/0x3b0
[  250.922355][ T6869]  ? kvmalloc_node+0x84/0x130
[  250.927074][ T6869]  kvmalloc_node+0x84/0x130
[  250.931619][ T6869]  xt_alloc_table_info+0x37/0xa0
[  250.936700][ T6869]  do_ip6t_set_ctl+0x873/0xd90
[  250.941503][ T6869]  ? nf_setsockopt+0x218/0x280
[  250.946306][ T6869]  ? ip6t_unregister_table_exit+0x230/0x230
[  250.952234][ T6869]  ? __lock_acquire+0x7d10/0x7d10
[  250.957303][ T6869]  ? __mutex_lock_common+0x465/0x2400
[  250.962720][ T6869]  ? __mutex_unlock_slowpath+0x1b0/0x6c0
[  250.968415][ T6869]  ? mutex_unlock+0x10/0x10
[  250.972952][ T6869]  ? __local_bh_enable_ip+0x136/0x1c0
[  250.978344][ T6869]  ? lockdep_hardirqs_on+0x94/0x140
[  250.983588][ T6869]  ? __local_bh_enable_ip+0x136/0x1c0
[  250.988986][ T6869]  nf_setsockopt+0x25f/0x280
[  250.993613][ T6869]  ipv6_setsockopt+0x2086/0x3cc0
[  250.998588][ T6869]  ? ipv6_update_options+0x400/0x400
[  251.003905][ T6869]  ? verify_lock_unused+0x140/0x140
[  251.009143][ T6869]  ? mark_lock+0x94/0x320
[  251.013506][ T6869]  ? __lock_acquire+0x12e8/0x7d10
[  251.018576][ T6869]  ? __lock_acquire+0x13bc/0x7d10
[  251.023633][ T6869]  ? verify_lock_unused+0x140/0x140
[  251.028868][ T6869]  ? aa_label_sk_perm+0x3d0/0x530
[  251.033926][ T6869]  ? aa_sk_perm+0x910/0x910
[  251.038471][ T6869]  ? __might_sleep+0xf0/0xf0
[  251.043114][ T6869]  ? rcu_lock_release+0x9/0x20
[  251.047909][ T6869]  ? __lock_acquire+0x7d10/0x7d10
[  251.053167][ T6869]  ? aa_sk_perm+0x7dc/0x910
[  251.057700][ T6869]  ? aa_af_perm+0x340/0x340
[  251.062223][ T6869]  ? __fget_files+0x40f/0x480
[  251.066936][ T6869]  ? aa_sock_opt_perm+0x74/0x100
[  251.071910][ T6869]  ? udpv6_setsockopt+0x7a/0xa0
[  251.076808][ T6869]  ? sock_common_recvmsg+0x1c0/0x1c0
[  251.082384][ T6869]  __sys_setsockopt+0x2bf/0x3d0
[  251.087274][ T6869]  __x64_sys_setsockopt+0xb1/0xc0
[  251.092450][ T6869]  do_syscall_64+0x4c/0xa0
[  251.096902][ T6869]  ? clear_bhb_loop+0x30/0x80
[  251.101605][ T6869]  ? clear_bhb_loop+0x30/0x80
[  251.106316][ T6869]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  251.112249][ T6869] RIP: 0033:0x7f051e97e819
[  251.116709][ T6869] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  251.136347][ T6869] RSP: 002b:00007f051cbd8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  251.144907][ T6869] RAX: ffffffffffffffda RBX: 00007f051ebf7fa0 RCX: 00007f051e97e819
[  251.152952][ T6869] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003
[  251.161142][ T6869] RBP: 00007f051cbd8090 R08: 0000000000000540 R09: 0000000000000000
[  251.169143][ T6869] R10: 00002000000005c0 R11: 0000000000000246 R12: 0000000000000001
[  251.177140][ T6869] R13: 00007f051ebf8038 R14: 00007f051ebf7fa0 R15: 00007ffc573b7d78
[  251.185152][ T6869]  </TASK>
[  251.229339][ T5500] usb 4-1: USB disconnect, device number 14
[  251.315951][ T6875] fido_id[6875]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory
[  252.539451][ T6826] Set syz1 is full, maxelem 65536 reached
[  252.760046][ T4401] usb 3-1: new full-speed USB device number 18 using dummy_hcd
[  253.044253][ T5500] usb 1-1: new full-speed USB device number 19 using dummy_hcd
[  253.165146][ T4401] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  253.237356][ T4401] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  253.266883][ T4401] usb 3-1: config 0 interface 0 has no altsetting 0
[  253.415075][ T5500] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  253.438470][ T5500] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  253.454461][ T4401] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  253.471484][ T4401] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  253.484993][ T5500] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  253.509943][ T4401] usb 3-1: Product: syz
[  253.527927][ T4401] usb 3-1: Manufacturer: syz
[  253.542705][ T4401] usb 3-1: SerialNumber: syz
[  253.555619][ T5500] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  253.585226][ T5500] usb 1-1: config 0 descriptor??
[  253.585228][ T4401] usb 3-1: config 0 descriptor??
[  253.607669][ T6904] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  253.625161][ T6912] FAULT_INJECTION: forcing a failure.
[  253.625161][ T6912] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.647846][ T4401] usb 3-1: selecting invalid altsetting 0
[  253.675093][ T6912] CPU: 0 PID: 6912 Comm: syz.1.682 Not tainted syzkaller #0
[  253.682443][ T6912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  253.692541][ T6912] Call Trace:
[  253.695847][ T6912]  <TASK>
[  253.698803][ T6912]  dump_stack_lvl+0x188/0x250
[  253.703527][ T6912]  ? show_regs_print_info+0x20/0x20
[  253.708814][ T6912]  ? load_image+0x400/0x400
[  253.711772][ T6914] FAULT_INJECTION: forcing a failure.
[  253.711772][ T6914] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  253.713410][ T6912]  ? __lock_acquire+0x7d10/0x7d10
[  253.731479][ T6912]  should_fail+0x38c/0x4c0
[  253.735928][ T6912]  _copy_from_user+0x2e/0x170
[  253.740644][ T6912]  iovec_from_user+0x142/0x370
[  253.745457][ T6912]  __import_iovec+0x70/0x490
[  253.750110][ T6912]  import_iovec+0x6f/0xa0
[  253.754475][ T6912]  ___sys_sendmsg+0x1fd/0x2e0
[  253.759210][ T6912]  ? __sys_sendmsg+0x2a0/0x2a0
[  253.764024][ T6912]  ? vfs_write+0x8b2/0xd60
[  253.768483][ T6912]  __se_sys_sendmsg+0x1af/0x290
[  253.773371][ T6912]  ? __x64_sys_sendmsg+0x80/0x80
[  253.778345][ T6912]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  253.784373][ T6912]  ? lockdep_hardirqs_on+0x94/0x140
[  253.789603][ T6912]  do_syscall_64+0x4c/0xa0
[  253.794051][ T6912]  ? clear_bhb_loop+0x30/0x80
[  253.798755][ T6912]  ? clear_bhb_loop+0x30/0x80
[  253.803463][ T6912]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  253.809383][ T6912] RIP: 0033:0x7fa44cbb4819
[  253.813832][ T6912] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  253.833920][ T6912] RSP: 002b:00007fa44ae0e028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  253.842365][ T6912] RAX: ffffffffffffffda RBX: 00007fa44ce2dfa0 RCX: 00007fa44cbb4819
[  253.850371][ T6912] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000003
[  253.858375][ T6912] RBP: 00007fa44ae0e090 R08: 0000000000000000 R09: 0000000000000000
[  253.866411][ T6912] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  253.874416][ T6912] R13: 00007fa44ce2e038 R14: 00007fa44ce2dfa0 R15: 00007fff85302068
[  253.882423][ T6912]  </TASK>
[  253.885505][ T6914] CPU: 1 PID: 6914 Comm: syz.3.683 Not tainted syzkaller #0
[  253.892840][ T6914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  253.902920][ T6914] Call Trace:
[  253.906228][ T6914]  <TASK>
[  253.909185][ T6914]  dump_stack_lvl+0x188/0x250
[  253.913932][ T6914]  ? show_regs_print_info+0x20/0x20
[  253.919176][ T6914]  ? load_image+0x400/0x400
[  253.923713][ T6914]  ? __lock_acquire+0x7d10/0x7d10
[  253.928786][ T6914]  should_fail+0x38c/0x4c0
[  253.933249][ T6914]  _copy_from_user+0x2e/0x170
[  253.936942][ T6889] usb 3-1: selecting invalid altsetting 0
[  253.937958][ T6914]  iovec_from_user+0x142/0x370
[  253.938007][ T6914]  __import_iovec+0x70/0x490
[  253.943925][ T6889] usb 3-1: 0:0: usb_set_interface failed (-22)
[  253.948513][ T6914]  import_iovec+0x6f/0xa0
[  253.948543][ T6914]  ___sys_sendmsg+0x1fd/0x2e0
[  253.948576][ T6914]  ? __sys_sendmsg+0x2a0/0x2a0
[  253.948611][ T6914]  ? vfs_write+0x8b2/0xd60
[  253.948650][ T6914]  __se_sys_sendmsg+0x1af/0x290
[  253.948687][ T6914]  ? __x64_sys_sendmsg+0x80/0x80
[  253.948708][ T6914]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  253.993465][ T6914]  ? lockdep_hardirqs_on+0x94/0x140
[  253.998685][ T6914]  do_syscall_64+0x4c/0xa0
[  254.003118][ T6914]  ? clear_bhb_loop+0x30/0x80
[  254.007897][ T6914]  ? clear_bhb_loop+0x30/0x80
[  254.012587][ T6914]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  254.018498][ T6914] RIP: 0033:0x7f4bd8416819
[  254.022926][ T6914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  254.042549][ T6914] RSP: 002b:00007f4bd6670028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  254.050979][ T6914] RAX: ffffffffffffffda RBX: 00007f4bd868ffa0 RCX: 00007f4bd8416819
[  254.058970][ T6914] RDX: 0000000000040040 RSI: 00002000000000c0 RDI: 0000000000000003
[  254.066957][ T6914] RBP: 00007f4bd6670090 R08: 0000000000000000 R09: 0000000000000000
[  254.074942][ T6914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  254.083444][ T6914] R13: 00007f4bd8690038 R14: 00007f4bd868ffa0 R15: 00007fffd57cf368
[  254.091441][ T6914]  </TASK>
[  254.094586][    C1] vkms_vblank_simulate: vblank timer overrun
[  254.235414][ T5500] hid (null): unknown global tag 0xe
[  254.241066][ T5500] hid (null): unknown global tag 0xe
[  254.246491][ T5500] hid (null): unknown global tag 0xe
[  254.255333][ T5500] wacom 0003:056A:00D8.0016: unknown main item tag 0x3
[  254.262402][ T5500] wacom 0003:056A:00D8.0016: unknown global tag 0xe
[  254.269251][ T5500] wacom 0003:056A:00D8.0016: item 0 2 1 14 parsing failed
[  254.283810][ T5500] wacom 0003:056A:00D8.0016: parse failed
[  254.728708][ T6904] loop0: detected capacity change from 0 to 256
[  254.797431][ T6904] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  254.958705][ T6915] usb 3-1: selecting invalid altsetting 0
[  254.964614][ T6915] usb 3-1: 0:0: usb_set_interface failed (-22)
[  254.970850][ T6915] usb 3-1: selecting invalid altsetting 0
[  254.976665][ T6915] usb 3-1: 0:0: usb_set_interface failed (-22)
[  254.982955][ T6915] usb 3-1: selecting invalid altsetting 0
[  254.988802][ T6915] usb 3-1: 0:0: usb_set_interface failed (-22)
[  255.027534][ T5500] wacom: probe of 0003:056A:00D8.0016 failed with error -22
[  255.050762][   T13] usb 3-1: USB disconnect, device number 18
[  255.557338][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  255.564099][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  255.687622][ T6904] netlink: 12 bytes leftover after parsing attributes in process `syz.0.680'.
[  255.711410][ T6904] netlink: 'syz.0.680': attribute type 1 has an invalid length.
[  255.869877][ T6924] Bluetooth: hci0: service_discovery: expected 4 bytes, got 7 bytes
[  256.027563][ T4401] kernel write not supported for file /sg0 (pid: 4401 comm: kworker/1:13)
[  256.380635][   T13] usb 1-1: USB disconnect, device number 19
[  256.544458][ T5500] usb 4-1: new high-speed USB device number 15 using dummy_hcd
[  257.461388][ T6960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.697'.
[  257.574832][   T13] usb 2-1: new full-speed USB device number 15 using dummy_hcd
[  257.784568][ T5500] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  257.934339][   T13] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  258.546810][ T6974] loop2: detected capacity change from 0 to 8
[  258.699946][ T5500] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 3
[  258.709044][   T13] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  258.720639][ T5500] usb 4-1: New USB device found, idVendor=0489, idProduct=e057, bcdDevice= 0.00
[  258.729979][   T13] usb 2-1: config 0 interface 0 has no altsetting 0
[  258.736818][ T5500] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  258.748714][ T5500] usb 4-1: config 0 descriptor??
[  258.904498][   T13] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  258.919041][   T13] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  258.927455][   T13] usb 2-1: Product: syz
[  258.931712][   T13] usb 2-1: Manufacturer: syz
[  258.941960][   T13] usb 2-1: SerialNumber: syz
[  258.963194][   T13] usb 2-1: config 0 descriptor??
[  259.007974][   T13] usb 2-1: selecting invalid altsetting 0
[  259.090647][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  259.100103][ T1324] usb 5-1: new full-speed USB device number 16 using dummy_hcd
[  259.118175][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  259.131284][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  259.209972][ T6951] usb 2-1: selecting invalid altsetting 0
[  259.216029][    T7] usb 3-1: new high-speed USB device number 19 using dummy_hcd
[  259.217621][ T4406] netdevsim0 speed is unknown, defaulting to 1000
[  259.230844][ T6951] usb 2-1: 0:0: usb_set_interface failed (-22)
[  259.213145][ T6985] infiniband syz1: set active
[  259.242424][ T6985] infiniband syz1: added netdevsim0
[  259.406164][ T6985] RDS/IB: syz1: added
[  259.411059][ T6985] smc: adding ib device syz1 with port count 1
[  259.417653][ T6985] smc:    ib device syz1 port 1 has pnetid 
[  259.428981][   T13] netdevsim0 speed is unknown, defaulting to 1000
[  259.818532][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  259.854231][    T7] usb 3-1: Using ep0 maxpacket: 16
[  259.864634][ T1324] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  259.903405][ T1324] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  259.922615][ T5500] Bluetooth: Can't get version to change to load ram patch err
[  259.940090][ T5500] Bluetooth: Loading sysconfig file failed
[  259.959867][ T5500] ath3k: probe of 4-1:0.0 failed with error -71
[  259.966777][ T1324] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  259.976396][    T7] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[  260.024429][ T5500] usb 4-1: USB disconnect, device number 15
[  260.040051][ T1324] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.146471][ T1324] usb 5-1: config 0 descriptor??
[  260.178930][    T7] usb 3-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice= 0.40
[  260.188634][ T6976] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  260.204966][ T6987] usb 2-1: selecting invalid altsetting 0
[  260.208898][    T7] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  260.210746][ T6987] usb 2-1: 0:0: usb_set_interface failed (-22)
[  260.225005][ T6987] usb 2-1: selecting invalid altsetting 0
[  260.230756][ T6987] usb 2-1: 0:0: usb_set_interface failed (-22)
[  260.236999][ T6987] usb 2-1: selecting invalid altsetting 0
[  260.242791][ T6987] usb 2-1: 0:0: usb_set_interface failed (-22)
[  260.257124][    T7] usb 3-1: Product: syz
[  260.261413][    T7] usb 3-1: Manufacturer: syz
[  260.272967][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  260.279798][    T7] usb 3-1: SerialNumber: syz
[  260.318450][ T4401] usb 2-1: USB disconnect, device number 15
[  260.354545][ T6981] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  260.389597][ T6992] FAULT_INJECTION: forcing a failure.
[  260.389597][ T6992] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  260.404414][ T6992] CPU: 1 PID: 6992 Comm: syz.1.707 Not tainted syzkaller #0
[  260.411741][ T6992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  260.421821][ T6992] Call Trace:
[  260.425127][ T6992]  <TASK>
[  260.428080][ T6992]  dump_stack_lvl+0x188/0x250
[  260.432793][ T6992]  ? show_regs_print_info+0x20/0x20
[  260.438030][ T6992]  ? load_image+0x400/0x400
[  260.442565][ T6992]  ? __lock_acquire+0x7d10/0x7d10
[  260.447621][ T6992]  ? unix_ioctl+0x25d/0x660
[  260.452154][ T6992]  should_fail+0x38c/0x4c0
[  260.456604][ T6992]  _copy_from_user+0x2e/0x170
[  260.461328][ T6992]  sock_do_ioctl+0x18c/0x320
[  260.465949][ T6992]  ? sock_show_fdinfo+0xb0/0xb0
[  260.470834][ T6992]  sock_ioctl+0x4d2/0x710
[  260.475198][ T6992]  ? sock_poll+0x410/0x410
[  260.479654][ T6992]  ? bpf_lsm_file_ioctl+0x5/0x10
[  260.484616][ T6992]  ? security_file_ioctl+0x7c/0xa0
[  260.489755][ T6992]  ? sock_poll+0x410/0x410
[  260.494189][ T6992]  __se_sys_ioctl+0xfa/0x170
[  260.499245][ T6992]  do_syscall_64+0x4c/0xa0
[  260.503712][ T6992]  ? clear_bhb_loop+0x30/0x80
[  260.508423][ T6992]  ? clear_bhb_loop+0x30/0x80
[  260.513132][ T6992]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  260.519051][ T6992] RIP: 0033:0x7fa44cbb4819
[  260.523496][ T6992] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  260.543240][ T6992] RSP: 002b:00007fa44ae0e028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  260.551926][ T6992] RAX: ffffffffffffffda RBX: 00007fa44ce2dfa0 RCX: 00007fa44cbb4819
[  260.559929][ T6992] RDX: 0000200000002280 RSI: 0000000000008914 RDI: 0000000000000004
[  260.568038][ T6992] RBP: 00007fa44ae0e090 R08: 0000000000000000 R09: 0000000000000000
[  260.576042][ T6992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  260.584046][ T6992] R13: 00007fa44ce2e038 R14: 00007fa44ce2dfa0 R15: 00007fff85302068
[  260.592082][ T6992]  </TASK>
[  260.595133][    C1] vkms_vblank_simulate: vblank timer overrun
[  260.694901][ T1324] hid (null): unknown global tag 0xe
[  260.695319][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  260.700417][ T1324] hid (null): unknown global tag 0xe
[  260.918651][ T6976] loop4: detected capacity change from 0 to 256
[  261.016683][ T6976] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  261.285418][ T6976] netlink: 12 bytes leftover after parsing attributes in process `syz.4.703'.
[  261.359017][ T6976] netlink: 'syz.4.703': attribute type 1 has an invalid length.
[  261.627584][ T5896] kernel write not supported for file /sg0 (pid: 5896 comm: kworker/1:19)
[  261.662496][ T1324] hid (null): unknown global tag 0xe
[  261.670971][ T1324] wacom 0003:056A:00D8.0017: unknown main item tag 0x3
[  261.678095][ T1324] wacom 0003:056A:00D8.0017: unknown global tag 0xe
[  261.684900][ T1324] wacom 0003:056A:00D8.0017: item 0 2 1 14 parsing failed
[  261.693020][ T1324] wacom 0003:056A:00D8.0017: parse failed
[  261.698949][ T1324] wacom: probe of 0003:056A:00D8.0017 failed with error -22
[  262.556157][    T7] usb 3-1: selecting invalid altsetting 1
[  262.667190][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  262.689372][    T7] snd-usb-audio: probe of 3-1:1.0 failed with error -22
[  262.763335][    T7] usb 3-1: USB disconnect, device number 19
[  262.786332][ T4406] usb 5-1: USB disconnect, device number 16
[  263.047798][ T6147] udevd[6147]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  263.124044][ T7017] device syzkaller0 entered promiscuous mode
[  263.444304][ T6985] netdevsim0 speed is unknown, defaulting to 1000
[  265.424266][   T13] usb 3-1: new full-speed USB device number 20 using dummy_hcd
[  265.814598][   T13] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  265.892071][   T13] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  266.081350][   T13] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  266.105615][   T13] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  266.183428][   T13] usb 3-1: config 0 descriptor??
[  266.268204][ T7047] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  266.776247][   T13] hid (null): unknown global tag 0xe
[  266.786646][   T13] hid (null): unknown global tag 0xe
[  266.892153][   T13] hid (null): unknown global tag 0xe
[  267.010235][ T7047] loop2: detected capacity change from 0 to 256
[  267.051622][   T13] wacom 0003:056A:00D8.0018: unknown main item tag 0x3
[  267.131532][ T7047] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  267.166662][   T13] wacom 0003:056A:00D8.0018: unknown global tag 0xe
[  267.231277][   T13] wacom 0003:056A:00D8.0018: item 0 2 1 14 parsing failed
[  267.303582][   T13] wacom 0003:056A:00D8.0018: parse failed
[  267.351289][ T7047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'.
[  267.375026][   T13] wacom: probe of 0003:056A:00D8.0018 failed with error -22
[  267.477997][ T7047] netlink: 'syz.2.724': attribute type 1 has an invalid length.
[  267.747809][ T4227] kernel write not supported for file /sg0 (pid: 4227 comm: kworker/0:5)
[  267.755428][ T7078] netlink: 12 bytes leftover after parsing attributes in process `syz.2.724'.
[  267.804421][ T5500] usb 1-1: new full-speed USB device number 20 using dummy_hcd
[  269.045259][ T5500] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  269.724453][ T5500] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  269.737626][ T5500] usb 1-1: config 0 interface 0 has no altsetting 0
[  269.824392][ T5500] usb 1-1: string descriptor 0 read error: -71
[  269.834322][ T5500] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  269.853768][ T5500] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  269.864336][ T5500] usb 1-1: config 0 descriptor??
[  269.899386][ T5500] usb 1-1: can't set config #0, error -71
[  269.911719][ T4402] usb 3-1: USB disconnect, device number 20
[  270.687492][ T5500] usb 1-1: USB disconnect, device number 20
[  270.815862][ T7110] netlink: 'syz.0.744': attribute type 180 has an invalid length.
[  270.854255][   T13] usb 5-1: new high-speed USB device number 17 using dummy_hcd
[  271.192015][ T7120] gfs2: Unknown parameter 'barrierm'
[  271.240782][ T7124] netlink: 8 bytes leftover after parsing attributes in process `syz.2.746'.
[  271.254355][   T13] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.265926][   T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0
[  271.279929][ T7124] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  271.287552][   T13] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 0
[  271.298519][ T7120] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready
[  271.306061][   T13] usb 5-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0
[  271.319044][ T7120] loop2: detected capacity change from 0 to 22
[  271.327962][   T13] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 0
[  271.415169][ T7120] romfs: Unknown parameter '
'
[  271.494334][   T13] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[  271.964565][ T1335] Bluetooth: hci4: command 0x0405 tx timeout
[  272.270129][   T13] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  272.279053][   T13] usb 5-1: Product: syz
[  272.283485][   T13] usb 5-1: Manufacturer: syz
[  272.288483][   T13] usb 5-1: SerialNumber: syz
[  273.029433][ T7096] loop4: detected capacity change from 0 to 512
[  273.224280][ T7096] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode
[  273.340910][ T7096] EXT4-fs (loop4): 1 orphan inode deleted
[  273.401857][ T7096] EXT4-fs (loop4): 1 truncate cleaned up
[  273.434788][ T7096] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[  273.567408][ T7149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  273.638481][ T5496] usb 3-1: new full-speed USB device number 21 using dummy_hcd
[  273.741336][ T7096] udc-core: couldn't find an available UDC or it's busy
[  273.755218][ T7096] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  273.815448][ T1324] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  273.994524][   T13] cdc_ncm 5-1:1.0: bind() failure
[  274.004604][ T5496] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  274.021946][   T13] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found
[  274.029124][ T5496] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  274.041394][   T13] cdc_ncm 5-1:1.1: bind() failure
[  274.050221][ T5496] usb 3-1: config 0 interface 0 has no altsetting 0
[  274.171607][ T7153] netlink: 1752 bytes leftover after parsing attributes in process `syz.1.755'.
[  274.233532][ T1324] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  274.244774][ T5496] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  274.264429][ T5496] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  274.272769][ T5496] usb 3-1: Product: syz
[  274.284203][ T1324] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  274.325883][ T5496] usb 3-1: Manufacturer: syz
[  274.330581][ T5496] usb 3-1: SerialNumber: syz
[  274.340993][ T1324] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  274.369230][ T5496] usb 3-1: config 0 descriptor??
[  274.374829][ T1324] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  274.397318][ T1324] usb 1-1: config 0 descriptor??
[  274.410868][   T13] usb 5-1: USB disconnect, device number 17
[  274.417271][ T7151] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  274.452628][ T5496] usb 3-1: selecting invalid altsetting 0
[  274.652403][ T7094] Set syz1 is full, maxelem 65536 reached
[  274.690876][ T7143] usb 3-1: selecting invalid altsetting 0
[  274.706566][ T7143] usb 3-1: 0:0: usb_set_interface failed (-22)
[  274.886149][ T1324] hid (null): unknown global tag 0xe
[  274.892606][ T1324] hid (null): unknown global tag 0xe
[  275.485589][ T7165] usb 3-1: selecting invalid altsetting 0
[  275.491385][ T7165] usb 3-1: 0:0: usb_set_interface failed (-22)
[  275.497625][ T7165] usb 3-1: selecting invalid altsetting 0
[  275.503359][ T7165] usb 3-1: 0:0: usb_set_interface failed (-22)
[  275.509584][ T7165] usb 3-1: selecting invalid altsetting 0
[  275.515335][ T7165] usb 3-1: 0:0: usb_set_interface failed (-22)
[  275.617469][ T1324] hid (null): unknown global tag 0xe
[  275.691643][ T7151] loop0: detected capacity change from 0 to 256
[  275.755704][ T4405] usb 3-1: USB disconnect, device number 21
[  275.755725][ T1324] wacom 0003:056A:00D8.0019: unknown main item tag 0x3
[  275.799949][ T1324] wacom 0003:056A:00D8.0019: unknown global tag 0xe
[  275.812141][ T1324] wacom 0003:056A:00D8.0019: item 0 2 1 14 parsing failed
[  275.823556][ T1324] wacom 0003:056A:00D8.0019: parse failed
[  275.827200][ T7151] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  275.860954][ T1324] wacom: probe of 0003:056A:00D8.0019 failed with error -22
[  276.129722][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'.
[  276.332456][ T7151] netlink: 'syz.0.754': attribute type 1 has an invalid length.
[  276.531941][ T5496] kernel write not supported for file /sg0 (pid: 5496 comm: kworker/0:9)
[  276.568535][ T7151] netlink: 12 bytes leftover after parsing attributes in process `syz.0.754'.
[  276.594372][    T7] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  276.659122][ T7187] loop1: detected capacity change from 0 to 4096
[  276.715152][ T7187] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096)
[  276.901749][ T7181] loop2: detected capacity change from 0 to 32768
[  276.940854][ T7181] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 scanned by syz.2.763 (7181)
[  277.004787][ T7181] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  277.005284][    T7] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  277.013671][ T7181] BTRFS info (device loop2): setting nodatasum
[  277.013720][ T7181] BTRFS info (device loop2): force zlib compression, level 3
[  277.038775][ T4405] usb 2-1: new high-speed USB device number 16 using dummy_hcd
[  277.051555][ T7181] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_LZO (0x8)
[  277.062382][ T7181] BTRFS info (device loop2): use lzo compression, level 0
[  277.064904][    T7] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  277.079139][ T7181] BTRFS info (device loop2): turning on flush-on-commit
[  277.088957][ T7181] BTRFS info (device loop2): enabling auto defrag
[  277.095701][ T7181] BTRFS info (device loop2): max_inline at 4096
[  277.102051][ T7181] BTRFS info (device loop2): using free space tree
[  277.108961][ T7181] BTRFS info (device loop2): has skinny extents
[  277.118033][    T7] usb 4-1: config 0 interface 0 has no altsetting 0
[  277.151168][ T7181] BTRFS info (device loop2): enabling ssd optimizations
[  277.252624][ T7214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[  277.284405][    T7] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  277.295846][    T7] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  277.304564][    T7] usb 4-1: Product: syz
[  277.309157][    T7] usb 4-1: Manufacturer: syz
[  277.314010][    T7] usb 4-1: SerialNumber: syz
[  277.321114][    T7] usb 4-1: config 0 descriptor??
[  277.418938][ T6147] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 9 /dev/loop2 scanned by udevd (6147)
[  277.432573][    T7] usb 4-1: selecting invalid altsetting 0
[  277.440259][    C1] vkms_vblank_simulate: vblank timer overrun
[  277.476386][ T4405] usb 2-1: config index 0 descriptor too short (expected 7768, got 18)
[  277.490093][ T4405] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  277.499365][ T4405] usb 2-1: config 0 has no interface number 0
[  277.505747][ T4405] usb 2-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30
[  277.517144][ T4405] usb 2-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  277.531413][ T4405] usb 2-1: config 0 interface 39 has no altsetting 0
[  277.538805][ T4405] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  277.554752][ T4405] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  277.603603][ T7182] usb 4-1: selecting invalid altsetting 0
[  277.612190][ T7182] usb 4-1: 0:0: usb_set_interface failed (-22)
[  277.770653][ T4405] usb 2-1: config 0 descriptor??
[  277.804888][    T7] usb 1-1: USB disconnect, device number 21
[  277.947450][ T7220] netlink: 'syz.3.764': attribute type 3 has an invalid length.
[  278.182180][ T7187] udc-core: couldn't find an available UDC or it's busy
[  278.317214][ T7187] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  279.176187][ T7220] usb 4-1: selecting invalid altsetting 0
[  279.181945][ T7220] usb 4-1: 0:0: usb_set_interface failed (-22)
[  279.188170][ T7220] usb 4-1: selecting invalid altsetting 0
[  279.193900][ T7220] usb 4-1: 0:0: usb_set_interface failed (-22)
[  279.200106][ T7220] usb 4-1: selecting invalid altsetting 0
[  279.205840][ T7220] usb 4-1: 0:0: usb_set_interface failed (-22)
[  279.464689][ T5897] usb 4-1: USB disconnect, device number 16
[  279.718503][ T4405] usb 2-1: string descriptor 0 read error: -71
[  279.739947][ T4405] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected
[  279.776631][ T4405] usb 2-1: Detected FT-X
[  279.814280][ T4405] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  279.854433][ T4405] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  279.894341][ T4405] ftdi_sio 2-1:0.39: GPIO initialisation failed: -71
[  279.927868][ T4405] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  280.003740][ T4405] usb 2-1: USB disconnect, device number 16
[  280.050733][ T4405] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  280.067653][ T4405] ftdi_sio 2-1:0.39: device disconnected
[  280.253587][ T7228] loop4: detected capacity change from 0 to 32768
[  280.540419][ T7228] XFS (loop4): Mounting V5 Filesystem
[  281.092521][ T7228] XFS (loop4): Ending clean mount
[  281.124584][ T7228] XFS (loop4): Quotacheck needed: Please wait.
[  281.334248][    T7] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[  281.454619][ T4405] usb 3-1: new full-speed USB device number 22 using dummy_hcd
[  281.854580][ T4405] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  281.889129][ T4405] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  281.951735][ T4405] usb 3-1: config 0 interface 0 has no altsetting 0
[  282.052237][ T7228] XFS (loop4): Quotacheck: Done.
[  282.191517][ T4195] XFS (loop4): Unmounting Filesystem
[  282.214741][ T4405] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  282.238781][ T4405] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  282.279753][ T4405] usb 3-1: Product: syz
[  282.293767][ T4405] usb 3-1: Manufacturer: syz
[  282.310410][ T4405] usb 3-1: SerialNumber: syz
[  282.364413][    T7] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  282.389373][ T4405] usb 3-1: config 0 descriptor??
[  282.502147][ T4405] usb 3-1: selecting invalid altsetting 0
[  282.914373][    T7] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  282.927460][    T7] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  282.937292][    T7] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  282.975231][    T7] usb 4-1: config 0 descriptor??
[  282.992067][ T7267] usb 3-1: selecting invalid altsetting 0
[  282.999865][ T7263] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  283.005076][ T7267] usb 3-1: 0:0: usb_set_interface failed (-22)
[  283.190609][ T5503] usb 2-1: new full-speed USB device number 17 using dummy_hcd
[  283.377154][ T7278] netlink: 'syz.2.785': attribute type 3 has an invalid length.
[  283.474966][    T7] hid (null): unknown global tag 0xe
[  283.480554][    T7] hid (null): unknown global tag 0xe
[  283.498974][    T7] hid (null): unknown global tag 0xe
[  283.522141][    T7] wacom 0003:056A:00D8.001A: unknown main item tag 0x3
[  283.548027][    T7] wacom 0003:056A:00D8.001A: unknown global tag 0xe
[  283.567615][    T7] wacom 0003:056A:00D8.001A: item 0 2 1 14 parsing failed
[  283.589053][    T7] wacom 0003:056A:00D8.001A: parse failed
[  283.598833][ T7280] loop4: detected capacity change from 0 to 4096
[  283.609014][    T7] wacom: probe of 0003:056A:00D8.001A failed with error -22
[  283.644399][ T5503] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  283.655812][ T5503] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  283.669066][ T5503] usb 2-1: config 0 interface 0 has no altsetting 0
[  283.684930][ T7263] loop3: detected capacity change from 0 to 256
[  283.707994][ T7280] EXT4-fs (loop4): fragment/cluster size (1024) != block size (4096)
[  283.745328][ T7263] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  283.835001][ T5503] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  283.835023][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'.
[  283.847716][ T5503] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  283.861556][ T5503] usb 2-1: Product: syz
[  283.871866][ T5503] usb 2-1: Manufacturer: syz
[  283.876650][ T5503] usb 2-1: SerialNumber: syz
[  283.883692][ T5503] usb 2-1: config 0 descriptor??
[  283.897018][ T7263] netlink: 'syz.3.783': attribute type 1 has an invalid length.
[  283.924560][    T7] kernel write not supported for file /sg0 (pid: 7 comm: kworker/0:0)
[  283.933827][ T7263] netlink: 12 bytes leftover after parsing attributes in process `syz.3.783'.
[  283.946922][ T5503] usb 2-1: selecting invalid altsetting 0
[  283.958694][    T7] usb 4-1: USB disconnect, device number 17
[  284.044421][ T5500] usb 5-1: new high-speed USB device number 18 using dummy_hcd
[  284.401112][ T7282] netlink: 'syz.1.787': attribute type 3 has an invalid length.
[  284.790182][ T7278] usb 3-1: selecting invalid altsetting 0
[  284.796318][ T7278] usb 3-1: 0:0: usb_set_interface failed (-22)
[  284.802610][ T7278] usb 3-1: selecting invalid altsetting 0
[  284.808528][ T7278] usb 3-1: 0:0: usb_set_interface failed (-22)
[  284.815599][ T7278] usb 3-1: selecting invalid altsetting 0
[  284.821414][ T7278] usb 3-1: 0:0: usb_set_interface failed (-22)
[  285.026707][ T4394] usb 3-1: USB disconnect, device number 22
[  285.572674][ T5503] usb 2-1: USB disconnect, device number 17
[  285.736329][ T5500] usb 5-1: config index 0 descriptor too short (expected 7768, got 18)
[  285.994217][ T5500] usb 5-1: config 0 has an invalid interface number: 39 but max is 0
[  286.028947][ T5500] usb 5-1: config 0 has no interface number 0
[  286.044398][ T5500] usb 5-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30
[  286.105438][ T5500] usb 5-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  286.140584][ T7296] binder: BINDER_SET_CONTEXT_MGR already set
[  286.146871][ T7296] binder: 7294:7296 ioctl 4018620d 2000000000c0 returned -16
[  286.279943][ T5500] usb 5-1: config 0 interface 39 has no altsetting 0
[  286.389341][ T5500] usb 5-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  286.499321][ T5500] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  286.514317][ T5897] usb 2-1: new full-speed USB device number 18 using dummy_hcd
[  286.667975][ T5500] usb 5-1: config 0 descriptor??
[  286.874575][ T5500] usb 5-1: can't set config #0, error -71
[  286.948599][ T5500] usb 5-1: USB disconnect, device number 18
[  287.168628][ T7284] loop0: detected capacity change from 0 to 32768
[  287.230933][ T7284] XFS (loop0): Mounting V5 Filesystem
[  287.304488][ T5897] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  287.348895][ T5897] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  287.368671][ T7318] FAULT_INJECTION: forcing a failure.
[  287.368671][ T7318] name failslab, interval 1, probability 0, space 0, times 0
[  287.405521][ T7318] CPU: 0 PID: 7318 Comm: syz.4.798 Not tainted syzkaller #0
[  287.412854][ T7318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  287.422932][ T7318] Call Trace:
[  287.426218][ T7318]  <TASK>
[  287.429156][ T7318]  dump_stack_lvl+0x188/0x250
[  287.433883][ T7318]  ? show_regs_print_info+0x20/0x20
[  287.439096][ T7318]  ? load_image+0x400/0x400
[  287.443620][ T7318]  ? __might_sleep+0xf0/0xf0
[  287.448224][ T7318]  ? __lock_acquire+0x7d10/0x7d10
[  287.453270][ T7318]  ? netlink_insert+0xe95/0x11f0
[  287.458228][ T7318]  should_fail+0x38c/0x4c0
[  287.462668][ T7318]  should_failslab+0x5/0x20
[  287.467214][ T7318]  slab_pre_alloc_hook+0x51/0xc0
[  287.472161][ T7318]  kmem_cache_alloc_node+0x47/0x2d0
[  287.477379][ T7318]  ? __alloc_skb+0xf4/0x750
[  287.481902][ T7318]  __alloc_skb+0xf4/0x750
[  287.486247][ T7318]  netlink_sendmsg+0x654/0xbe0
[  287.491025][ T7318]  ? netlink_getsockopt+0x570/0x570
[  287.496241][ T7318]  ? aa_sock_msg_perm+0x94/0x150
[  287.501228][ T7318]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  287.506581][ T7318]  ? security_socket_sendmsg+0x7c/0xa0
[  287.512057][ T7318]  ? netlink_getsockopt+0x570/0x570
[  287.517267][ T7318]  ____sys_sendmsg+0x5b7/0x8f0
[  287.522050][ T7318]  ? __sys_sendmsg_sock+0x30/0x30
[  287.527103][ T7318]  ? import_iovec+0x6f/0xa0
[  287.531639][ T7318]  ___sys_sendmsg+0x236/0x2e0
[  287.536338][ T7318]  ? __sys_sendmsg+0x2a0/0x2a0
[  287.541117][ T7318]  ? vfs_write+0x8b2/0xd60
[  287.545558][ T7318]  __se_sys_sendmsg+0x1af/0x290
[  287.550422][ T7318]  ? __x64_sys_sendmsg+0x80/0x80
[  287.555387][ T7318]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  287.561385][ T7318]  ? lockdep_hardirqs_on+0x94/0x140
[  287.566599][ T7318]  do_syscall_64+0x4c/0xa0
[  287.571016][ T7318]  ? clear_bhb_loop+0x30/0x80
[  287.575790][ T7318]  ? clear_bhb_loop+0x30/0x80
[  287.580481][ T7318]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  287.586384][ T7318] RIP: 0033:0x7f051e97e819
[  287.590813][ T7318] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  287.610429][ T7318] RSP: 002b:00007f051cbd8028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  287.618856][ T7318] RAX: ffffffffffffffda RBX: 00007f051ebf7fa0 RCX: 00007f051e97e819
[  287.626960][ T7318] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  287.634954][ T7318] RBP: 00007f051cbd8090 R08: 0000000000000000 R09: 0000000000000000
[  287.642942][ T7318] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  287.650939][ T7318] R13: 00007f051ebf8038 R14: 00007f051ebf7fa0 R15: 00007ffc573b7d78
[  287.659032][ T7318]  </TASK>
[  287.668246][ T5897] usb 2-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  287.679184][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  287.698282][ T5897] usb 2-1: config 0 descriptor??
[  287.711157][ T7284] XFS (loop0): Ending clean mount
[  287.716722][ T7291] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  287.746683][ T7284] XFS (loop0): Quotacheck needed: Please wait.
[  287.878825][ T7284] XFS (loop0): Quotacheck: Done.
[  288.256534][ T5897] hid (null): unknown global tag 0xe
[  288.265124][ T5897] hid (null): unknown global tag 0xe
[  288.317117][ T5897] hid (null): unknown global tag 0xe
[  288.420201][ T5897] wacom 0003:056A:00D8.001B: unknown main item tag 0x3
[  288.510255][ T7291] loop1: detected capacity change from 0 to 256
[  288.521776][ T5897] wacom 0003:056A:00D8.001B: unknown global tag 0xe
[  288.587310][ T5897] wacom 0003:056A:00D8.001B: item 0 2 1 14 parsing failed
[  288.654793][ T7291] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  288.688587][ T5897] wacom 0003:056A:00D8.001B: parse failed
[  288.708087][ T5897] wacom: probe of 0003:056A:00D8.001B failed with error -22
[  288.769654][ T4185] XFS (loop0): Unmounting Filesystem
[  288.824956][ T7291] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'.
[  288.868465][ T7291] netlink: 'syz.1.794': attribute type 1 has an invalid length.
[  288.984298][ T4227] usb 4-1: new full-speed USB device number 18 using dummy_hcd
[  289.028042][ T5500] kernel write not supported for file /sg0 (pid: 5500 comm: kworker/0:10)
[  289.058063][ T7331] netlink: 12 bytes leftover after parsing attributes in process `syz.1.794'.
[  289.284446][   T21] usb 3-1: new full-speed USB device number 23 using dummy_hcd
[  289.354512][ T4227] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  289.379655][ T4227] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  289.405100][ T4227] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  289.429543][ T4227] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  289.498960][ T4227] usb 4-1: config 0 descriptor??
[  289.566485][ T7326] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  289.744636][   T21] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  290.047842][ T4227] hid (null): unknown global tag 0xe
[  290.069232][ T4227] hid (null): unknown global tag 0xe
[  290.119290][ T4227] hid (null): unknown global tag 0xe
[  290.196351][ T4227] wacom 0003:056A:00D8.001C: unknown main item tag 0x3
[  290.235409][ T4227] wacom 0003:056A:00D8.001C: unknown global tag 0xe
[  290.278450][ T7326] loop3: detected capacity change from 0 to 256
[  290.298565][   T21] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  290.310294][   T21] usb 3-1: config 0 interface 0 has no altsetting 0
[  290.338442][ T4227] wacom 0003:056A:00D8.001C: item 0 2 1 14 parsing failed
[  290.353948][ T4227] wacom 0003:056A:00D8.001C: parse failed
[  290.372995][ T4227] wacom: probe of 0003:056A:00D8.001C failed with error -22
[  290.384804][ T7326] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  290.439563][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'.
[  290.449006][ T7352] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount.
[  290.491391][ T5496] usb 2-1: USB disconnect, device number 18
[  290.510625][ T7326] netlink: 'syz.3.802': attribute type 1 has an invalid length.
[  290.521637][ T4394] kernel write not supported for file /sg0 (pid: 4394 comm: kworker/1:8)
[  290.535261][   T21] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  290.544561][ T7352] CIFS mount error: No usable UNC path provided in device string!
[  290.544561][ T7352] 
[  290.560214][ T7352] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string!
[  290.571882][   T21] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  290.584242][   T21] usb 3-1: Product: syz
[  290.584964][ T7326] netlink: 12 bytes leftover after parsing attributes in process `syz.3.802'.
[  290.588436][   T21] usb 3-1: Manufacturer: syz
[  290.588453][   T21] usb 3-1: SerialNumber: syz
[  290.600507][   T21] usb 3-1: config 0 descriptor??
[  290.650559][ T7352] process 'syz.4.813' launched './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa
[  290.673415][ T5897] usb 4-1: USB disconnect, device number 18
[  290.760298][    C1] vkms_vblank_simulate: vblank timer overrun
[  290.776246][   T21] usb 3-1: selecting invalid altsetting 0
[  291.741335][ T7330] usb 3-1: selecting invalid altsetting 0
[  291.820547][ T7330] usb 3-1: 0:0: usb_set_interface failed (-22)
[  291.832198][ T7330] usb 3-1: selecting invalid altsetting 0
[  291.838291][ T7330] usb 3-1: 0:0: usb_set_interface failed (-22)
[  291.850006][ T7330] usb 3-1: selecting invalid altsetting 0
[  291.856049][ T7330] usb 3-1: 0:0: usb_set_interface failed (-22)
[  291.882753][ T4405] usb 3-1: USB disconnect, device number 23
[  292.204388][ T5897] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  292.205787][ T7354] loop1: detected capacity change from 0 to 32768
[  292.326214][ T7354] XFS (loop1): Mounting V5 Filesystem
[  292.377607][ T7395] FAULT_INJECTION: forcing a failure.
[  292.377607][ T7395] name failslab, interval 1, probability 0, space 0, times 0
[  292.422299][ T7395] CPU: 0 PID: 7395 Comm: syz.4.820 Not tainted syzkaller #0
[  292.429669][ T7395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  292.439748][ T7395] Call Trace:
[  292.443052][ T7395]  <TASK>
[  292.446003][ T7395]  dump_stack_lvl+0x188/0x250
[  292.450719][ T7395]  ? show_regs_print_info+0x20/0x20
[  292.455951][ T7395]  ? load_image+0x400/0x400
[  292.460484][ T7395]  ? __might_sleep+0xf0/0xf0
[  292.465095][ T7395]  ? __lock_acquire+0x7d10/0x7d10
[  292.470156][ T7395]  should_fail+0x38c/0x4c0
[  292.474610][ T7395]  should_failslab+0x5/0x20
[  292.479181][ T7395]  slab_pre_alloc_hook+0x51/0xc0
[  292.484199][ T7395]  ? kvm_mmu_topup_memory_cache+0xde/0x200
[  292.490067][ T7395]  kmem_cache_alloc+0x3d/0x290
[  292.494872][ T7395]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  292.500890][ T7395]  kvm_mmu_topup_memory_cache+0xde/0x200
[  292.506643][ T7395]  kvm_mmu_load+0x88/0x1b90
[  292.511175][ T7395]  ? kvm_apic_accept_events+0x546/0x560
[  292.516771][ T7395]  ? lock_chain_count+0x20/0x20
[  292.521766][ T7395]  ? kvm_apic_has_interrupt+0x729/0x740
[  292.527337][ T7395]  ? kvm_lapic_enable_pv_eoi+0x140/0x140
[  292.532998][ T7395]  vcpu_enter_guest+0x61b5/0x7010
[  292.534253][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  292.538273][ T7395]  ? local_bh_enable+0x20/0x20
[  292.548043][ T7395]  ? 0xffffffffa002a000
[  292.552292][ T7395]  ? is_bpf_text_address+0x254/0x270
[  292.557633][ T7395]  ? __kernel_text_address+0x9a/0x100
[  292.563044][ T7395]  ? mark_lock+0x94/0x320
[  292.567403][ T7395]  ? __lock_acquire+0x13bc/0x7d10
[  292.572455][ T7395]  ? llist_add_batch+0x85/0xa0
[  292.577256][ T7395]  ? mark_lock+0x94/0x320
[  292.581784][ T7395]  ? __lock_acquire+0x12e8/0x7d10
[  292.586853][ T7395]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  292.592827][ T7354] XFS (loop1): Ending clean mount
[  292.592864][ T7395]  ? lock_chain_count+0x20/0x20
[  292.602755][ T7395]  ? verify_lock_unused+0x140/0x140
[  292.607979][ T7395]  ? vmx_vcpu_load_vmcs+0x17e/0x780
[  292.613197][ T7395]  ? vmx_vcpu_load_vmcs+0x2b0/0x780
[  292.618414][ T7395]  ? mark_lock+0x94/0x320
[  292.622772][ T7395]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  292.628777][ T7395]  ? __local_bh_enable_ip+0x136/0x1c0
[  292.634162][ T7395]  ? read_lock_is_recursive+0x10/0x10
[  292.639549][ T7395]  ? rcu_is_watching+0x11/0xa0
[  292.644337][ T7395]  kvm_arch_vcpu_ioctl_run+0xdea/0x1f40
[  292.649908][ T7395]  kvm_vcpu_ioctl+0x8f7/0xc10
[  292.654600][ T7395]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  292.660261][ T7395]  ? bpf_lsm_file_ioctl+0x5/0x10
[  292.665208][ T7395]  ? security_file_ioctl+0x7c/0xa0
[  292.670332][ T7395]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  292.675971][ T7395]  __se_sys_ioctl+0xfa/0x170
[  292.680574][ T7395]  do_syscall_64+0x4c/0xa0
[  292.685093][ T7395]  ? clear_bhb_loop+0x30/0x80
[  292.689800][ T7395]  ? clear_bhb_loop+0x30/0x80
[  292.694487][ T7395]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  292.700397][ T7395] RIP: 0033:0x7f051e97e819
[  292.704818][ T7395] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  292.724433][ T7395] RSP: 002b:00007f051cbb7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  292.732859][ T7395] RAX: ffffffffffffffda RBX: 00007f051ebf8090 RCX: 00007f051e97e819
[  292.740856][ T7395] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  292.748831][ T7395] RBP: 00007f051cbb7090 R08: 0000000000000000 R09: 0000000000000000
[  292.756808][ T7395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  292.764789][ T7395] R13: 00007f051ebf8128 R14: 00007f051ebf8090 R15: 00007ffc573b7d78
[  292.772793][ T7395]  </TASK>
[  292.776271][ T4394] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  292.801460][ T7354] XFS (loop1): Quotacheck needed: Please wait.
[  292.895828][ T7354] XFS (loop1): Quotacheck: Done.
[  292.897336][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  292.913819][ T5897] usb 4-1: no configurations
[  292.925840][ T5897] usb 4-1: can't read configurations, error -22
[  293.016372][ T4192] XFS (loop1): Unmounting Filesystem
[  293.061265][ T4394] usb 3-1: Using ep0 maxpacket: 16
[  293.094881][ T5897] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  293.238732][ T7405] bridge0: port 2(bridge_slave_1) entered disabled state
[  293.287206][ T4394] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 247, changing to 7
[  293.330956][ T4406] usb 5-1: new full-speed USB device number 19 using dummy_hcd
[  293.364240][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  293.496861][ T4394] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  293.538104][ T4394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  293.548876][ T4394] usb 3-1: Product: syz
[  293.553037][ T4394] usb 3-1: Manufacturer: syz
[  293.558556][ T4394] usb 3-1: SerialNumber: syz
[  293.594303][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  293.602095][ T5897] usb 4-1: no configurations
[  293.611354][ T5897] usb 4-1: can't read configurations, error -22
[  293.618002][ T5897] usb usb4-port1: attempt power cycle
[  293.767931][ T7405] loop0: detected capacity change from 0 to 32768
[  293.809416][ T7405] ocfs2: Mounting device (7,0) on (node local, slot 0) with writeback data mode.
[  293.879861][ T4406] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  293.913644][ T4406] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  293.988680][ T4406] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  294.024332][ T5897] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  294.060980][ T4406] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  294.124290][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  294.159189][ T4406] usb 5-1: config 0 descriptor??
[  294.215289][ T7400] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  294.294804][ T5897] usb 4-1: unable to get BOS descriptor or descriptor too short
[  294.304053][ T4185] ocfs2: Unmounting device (7,0) on (node local)
[  294.335662][ T5897] usb 4-1: no configurations
[  294.375330][ T5897] usb 4-1: can't read configurations, error -22
[  294.583237][ T5897] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  294.744598][ T5897] usb 4-1: Using ep0 maxpacket: 8
[  294.774575][ T4394] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found
[  294.785486][ T4406] hid (null): unknown global tag 0xe
[  294.790834][ T4406] hid (null): unknown global tag 0xe
[  294.802005][ T4394] usb 3-1: 2:1 : UAC_AS_GENERAL descriptor not found
[  294.808936][ T4406] hid (null): unknown global tag 0xe
[  294.832839][ T4406] wacom 0003:056A:00D8.001D: unknown main item tag 0x3
[  294.874845][ T4394] usb 3-1: USB disconnect, device number 24
[  294.890164][ T5897] usb 4-1: device descriptor read/all, error -71
[  294.911947][ T5897] usb usb4-port1: unable to enumerate USB device
[  294.921944][ T4406] wacom 0003:056A:00D8.001D: unknown global tag 0xe
[  295.034927][ T7400] loop4: detected capacity change from 0 to 256
[  295.094419][ T5496] usb 1-1: new full-speed USB device number 22 using dummy_hcd
[  295.524773][ T5496] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  295.720010][ T4406] wacom 0003:056A:00D8.001D: item 0 2 1 14 parsing failed
[  295.729816][ T4406] wacom 0003:056A:00D8.001D: parse failed
[  295.735887][ T4406] wacom: probe of 0003:056A:00D8.001D failed with error -22
[  295.747063][ T6157] udevd[6157]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  295.785456][ T7400] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  296.031152][ T5496] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  296.043381][ T5496] usb 1-1: config 0 interface 0 has no altsetting 0
[  296.064296][ T5897] usb 4-1: new full-speed USB device number 23 using dummy_hcd
[  296.105654][ T7400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.824'.
[  296.115059][ T7400] netlink: 'syz.4.824': attribute type 1 has an invalid length.
[  296.214775][ T5496] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.242116][ T5496] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.284198][ T5496] usb 1-1: Product: syz
[  296.288975][ T5496] usb 1-1: Manufacturer: syz
[  296.304251][ T5496] usb 1-1: SerialNumber: syz
[  296.329846][ T4228] kernel write not supported for file /sg0 (pid: 4228 comm: kworker/0:6)
[  296.345057][ T5496] usb 1-1: config 0 descriptor??
[  296.417453][ T5496] usb 1-1: selecting invalid altsetting 0
[  296.435365][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  296.452618][ T4405] usb 5-1: USB disconnect, device number 19
[  296.489093][ T5897] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  296.559157][ T5897] usb 4-1: config 0 interface 0 has no altsetting 0
[  296.644426][ T7418] usb 1-1: selecting invalid altsetting 0
[  296.650316][ T7418] usb 1-1: 0:0: usb_set_interface failed (-22)
[  296.824489][ T5897] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  296.834464][ T5897] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  296.842683][ T5897] usb 4-1: Product: syz
[  296.855522][ T5897] usb 4-1: Manufacturer: syz
[  296.860247][ T5897] usb 4-1: SerialNumber: syz
[  297.574994][ T7448] usb 1-1: selecting invalid altsetting 0
[  297.580767][ T7448] usb 1-1: 0:0: usb_set_interface failed (-22)
[  297.586980][ T7448] usb 1-1: selecting invalid altsetting 0
[  297.592710][ T7448] usb 1-1: 0:0: usb_set_interface failed (-22)
[  297.598965][ T7448] usb 1-1: selecting invalid altsetting 0
[  297.604726][ T7448] usb 1-1: 0:0: usb_set_interface failed (-22)
[  297.652957][ T5897] usb 4-1: config 0 descriptor??
[  297.669175][ T4406] usb 1-1: USB disconnect, device number 22
[  297.699174][ T5897] usb 4-1: selecting invalid altsetting 0
[  297.968648][ T7424] usb 4-1: selecting invalid altsetting 0
[  297.974749][ T7424] usb 4-1: 0:0: usb_set_interface failed (-22)
[  298.252382][ T7466] netlink: 'syz.3.829': attribute type 3 has an invalid length.
[  300.173245][ T7466] usb 4-1: selecting invalid altsetting 0
[  300.179377][ T7466] usb 4-1: 0:0: usb_set_interface failed (-22)
[  300.185614][ T7466] usb 4-1: selecting invalid altsetting 0
[  300.191610][ T7466] usb 4-1: 0:0: usb_set_interface failed (-22)
[  300.197836][ T7466] usb 4-1: selecting invalid altsetting 0
[  300.203587][ T7466] usb 4-1: 0:0: usb_set_interface failed (-22)
[  300.278562][ T4406] usb 4-1: USB disconnect, device number 23
[  301.854418][ T5496] usb 3-1: new full-speed USB device number 25 using dummy_hcd
[  301.874439][ T4228] usb 1-1: new full-speed USB device number 23 using dummy_hcd
[  302.824349][ T4228] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  302.835703][ T5496] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  303.550752][ T5496] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  303.565551][ T4228] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  303.579751][ T5496] usb 3-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  303.589120][ T4228] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  303.598504][ T5496] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.010427][ T4228] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  304.025212][ T4228] usb 1-1: config 0 descriptor??
[  304.030881][ T5496] usb 3-1: config 0 descriptor??
[  304.044588][ T7481] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  304.063726][ T7479] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  304.203102][ T6347] udevd[6347]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  304.364228][ T4227] usb 2-1: new full-speed USB device number 19 using dummy_hcd
[  304.454404][ T4406] usb 5-1: new full-speed USB device number 20 using dummy_hcd
[  304.514832][ T4228] hid (null): unknown global tag 0xe
[  304.520800][ T4228] hid (null): unknown global tag 0xe
[  304.534781][ T5496] hid (null): unknown global tag 0xe
[  304.579381][ T5496] hid (null): unknown global tag 0xe
[  304.585325][ T4228] hid (null): unknown global tag 0xe
[  304.590866][ T5496] hid (null): unknown global tag 0xe
[  304.599185][ T4228] wacom 0003:056A:00D8.001E: unknown main item tag 0x3
[  304.609003][ T5496] wacom 0003:056A:00D8.001F: unknown main item tag 0x3
[  304.616503][ T4228] wacom 0003:056A:00D8.001E: unknown global tag 0xe
[  304.623393][ T4228] wacom 0003:056A:00D8.001E: item 0 2 1 14 parsing failed
[  304.631175][ T5496] wacom 0003:056A:00D8.001F: unknown global tag 0xe
[  304.638406][ T5496] wacom 0003:056A:00D8.001F: item 0 2 1 14 parsing failed
[  304.706491][ T4228] wacom 0003:056A:00D8.001E: parse failed
[  304.719234][ T5496] wacom 0003:056A:00D8.001F: parse failed
[  304.725563][ T4228] wacom: probe of 0003:056A:00D8.001E failed with error -22
[  304.734444][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  304.737407][ T7481] loop0: detected capacity change from 0 to 256
[  304.756130][ T7479] loop2: detected capacity change from 0 to 256
[  304.762721][ T5496] wacom: probe of 0003:056A:00D8.001F failed with error -22
[  304.770186][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  304.791307][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0
[  304.815104][ T7479] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  304.833048][ T7481] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  304.874448][ T4406] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  304.902078][ T7479] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'.
[  304.925611][ T4406] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  304.937026][ T7479] netlink: 'syz.2.842': attribute type 1 has an invalid length.
[  304.964350][ T4406] usb 5-1: config 0 interface 0 has no altsetting 0
[  304.974595][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  304.982387][ T7481] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'.
[  304.984041][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  305.015451][ T7481] netlink: 'syz.0.847': attribute type 1 has an invalid length.
[  305.084376][ T4227] usb 2-1: Product: syz
[  305.104606][ T4227] usb 2-1: Manufacturer: syz
[  305.110533][ T7513] netlink: 12 bytes leftover after parsing attributes in process `syz.2.842'.
[  305.121149][ T4227] usb 2-1: SerialNumber: syz
[  305.132926][ T1324] kernel write not supported for file /sg0 (pid: 1324 comm: kworker/0:3)
[  305.149227][ T4227] usb 2-1: config 0 descriptor??
[  305.155265][ T5496] kernel write not supported for file /sg0 (pid: 5496 comm: kworker/0:9)
[  305.165457][ T7514] netlink: 12 bytes leftover after parsing attributes in process `syz.0.847'.
[  305.194493][ T4406] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  305.203383][ T4227] usb 2-1: selecting invalid altsetting 0
[  305.209446][ T4406] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  305.222416][ T4406] usb 5-1: Product: syz
[  305.229186][ T4406] usb 5-1: Manufacturer: syz
[  305.233910][ T4406] usb 5-1: SerialNumber: syz
[  305.247041][ T4406] usb 5-1: config 0 descriptor??
[  305.304297][ T1324] usb 4-1: new full-speed USB device number 24 using dummy_hcd
[  305.313994][ T4406] usb 5-1: selecting invalid altsetting 0
[  305.409416][ T7501] usb 2-1: selecting invalid altsetting 0
[  305.415333][ T7501] usb 2-1: 0:0: usb_set_interface failed (-22)
[  307.479851][ T7518] netlink: 'syz.1.851': attribute type 3 has an invalid length.
[  307.487681][ T7518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.851'.
[  308.638459][ T4394] usb 3-1: USB disconnect, device number 25
[  309.175200][ T4394] usb 1-1: USB disconnect, device number 23
[  309.201162][ T7516] usb 2-1: selecting invalid altsetting 0
[  309.207029][ T7516] usb 2-1: 0:0: usb_set_interface failed (-22)
[  309.213260][ T7516] usb 2-1: selecting invalid altsetting 0
[  309.219167][ T7516] usb 2-1: 0:0: usb_set_interface failed (-22)
[  309.225479][ T7516] usb 2-1: selecting invalid altsetting 0
[  309.231300][ T7516] usb 2-1: 0:0: usb_set_interface failed (-22)
[  309.285273][ T4228] usb 2-1: USB disconnect, device number 19
[  309.291824][ T4227] usb 5-1: USB disconnect, device number 20
[  309.324402][ T1324] usb 4-1: device descriptor read/all, error -71
[  312.724233][ T4399] usb 2-1: new full-speed USB device number 20 using dummy_hcd
[  312.731929][ T4174] usb 4-1: new full-speed USB device number 26 using dummy_hcd
[  313.416414][ T7537] loop2: detected capacity change from 0 to 32768
[  313.496120][ T7537] XFS (loop2): Mounting V5 Filesystem
[  313.525045][ T7537] XFS (loop2): Ending clean mount
[  313.532530][ T7537] XFS (loop2): Quotacheck needed: Please wait.
[  313.570790][ T7537] XFS (loop2): Quotacheck: Done.
[  313.635078][ T4189] XFS (loop2): Unmounting Filesystem
[  313.734355][ T4399] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  313.745440][ T4174] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  313.905165][ T5503] usb 5-1: new full-speed USB device number 21 using dummy_hcd
[  314.325012][ T5503] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  314.369704][ T5503] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  314.442249][ T5503] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  314.474646][ T4399] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  314.486233][ T4174] usb 4-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  314.512248][ T4174] usb 4-1: config 0 interface 0 has no altsetting 0
[  314.518867][ T5503] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  314.527412][ T4399] usb 2-1: config 0 interface 0 has no altsetting 0
[  314.540226][ T5503] usb 5-1: config 0 descriptor??
[  314.574763][ T7568] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  314.694414][ T4174] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  314.783268][ T4399] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  314.824229][ T4394] usb 1-1: new full-speed USB device number 24 using dummy_hcd
[  315.057418][ T5503] hid (null): unknown global tag 0xe
[  315.064792][ T5503] hid (null): unknown global tag 0xe
[  315.086771][ T5503] hid (null): unknown global tag 0xe
[  315.137005][ T5503] wacom 0003:056A:00D8.0020: unknown main item tag 0x3
[  315.162090][ T5503] wacom 0003:056A:00D8.0020: unknown global tag 0xe
[  315.187199][ T5503] wacom 0003:056A:00D8.0020: item 0 2 1 14 parsing failed
[  315.217959][ T5503] wacom 0003:056A:00D8.0020: parse failed
[  315.238209][ T5503] wacom: probe of 0003:056A:00D8.0020 failed with error -22
[  315.283385][ T7568] loop4: detected capacity change from 0 to 256
[  315.401106][ T7568] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  315.467224][ T4174] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  315.475681][ T4399] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  315.483902][ T4399] usb 2-1: Product: syz
[  315.488324][ T4174] usb 4-1: Product: syz
[  315.492624][ T4174] usb 4-1: Manufacturer: syz
[  315.497397][ T4399] usb 2-1: Manufacturer: syz
[  315.502049][ T4399] usb 2-1: SerialNumber: syz
[  315.507043][ T4174] usb 4-1: SerialNumber: syz
[  315.533734][ T4174] usb 4-1: config 0 descriptor??
[  315.539715][ T4399] usb 2-1: config 0 descriptor??
[  315.550391][ T7568] netlink: 12 bytes leftover after parsing attributes in process `syz.4.869'.
[  315.568202][ T7568] netlink: 'syz.4.869': attribute type 1 has an invalid length.
[  315.576191][ T4174] usb 4-1: can't set config #0, error -71
[  315.584106][ T4399] usb 2-1: can't set config #0, error -71
[  315.592309][ T4174] usb 4-1: USB disconnect, device number 26
[  315.598561][ T4399] usb 2-1: USB disconnect, device number 20
[  315.754236][ T5897] kernel write not supported for file /sg0 (pid: 5897 comm: kworker/1:20)
[  315.854675][ T4394] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  315.950158][ T4394] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  316.114936][ T4394] usb 1-1: config 0 interface 0 has no altsetting 0
[  316.404519][ T4394] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  316.534305][ T4394] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  316.542528][ T4394] usb 1-1: Product: syz
[  316.609309][ T7589] binder: BINDER_SET_CONTEXT_MGR already set
[  316.615819][ T7589] binder: 7587:7589 ioctl 4018620d 2000000000c0 returned -16
[  316.632909][ T4394] usb 1-1: Manufacturer: syz
[  316.672229][ T4394] usb 1-1: SerialNumber: syz
[  316.786586][ T4394] usb 1-1: config 0 descriptor??
[  316.912291][ T4394] usb 1-1: selecting invalid altsetting 0
[  316.998531][ T1432] ieee802154 phy0 wpan0: encryption failed: -22
[  317.005026][ T1432] ieee802154 phy1 wpan1: encryption failed: -22
[  317.933330][ T7592] netlink: 'syz.0.870': attribute type 3 has an invalid length.
[  317.941360][ T7592] netlink: 8 bytes leftover after parsing attributes in process `syz.0.870'.
[  319.796270][ T5503] usb 1-1: USB disconnect, device number 24
[  319.835239][ T4405] usb 5-1: USB disconnect, device number 21
[  322.364274][    T7] usb 1-1: new full-speed USB device number 25 using dummy_hcd
[  322.455261][ T4227] usb 3-1: new full-speed USB device number 26 using dummy_hcd
[  322.500916][ T7608] loop1: detected capacity change from 0 to 32768
[  322.624848][ T7608] XFS (loop1): Mounting V5 Filesystem
[  322.661380][ T7598] loop4: detected capacity change from 0 to 32768
[  322.711782][ T7608] XFS (loop1): Ending clean mount
[  322.726311][ T7608] XFS (loop1): Quotacheck needed: Please wait.
[  322.734686][    T7] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  322.766417][    T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  322.824479][ T4227] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  322.853322][ T4227] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  323.713890][    T7] usb 1-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  323.723826][ T4227] usb 3-1: config 0 interface 0 has no altsetting 0
[  323.730832][    T7] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  323.757360][    T7] usb 1-1: config 0 descriptor??
[  323.769535][ T7608] XFS (loop1): Quotacheck: Done.
[  323.775111][ T7612] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  323.782714][ T7598] XFS (loop4): Mounting V5 Filesystem
[  323.813778][ T7598] XFS (loop4): log mount failed
[  323.895065][ T4192] XFS (loop1): Unmounting Filesystem
[  323.904471][ T4227] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  323.913708][ T4227] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  323.927646][ T4227] usb 3-1: Product: syz
[  323.932047][ T4227] usb 3-1: Manufacturer: syz
[  323.937483][ T4227] usb 3-1: SerialNumber: syz
[  323.968872][ T4227] usb 3-1: config 0 descriptor??
[  324.010392][ T4227] usb 3-1: selecting invalid altsetting 0
[  324.081205][ T4405] usb 4-1: new full-speed USB device number 27 using dummy_hcd
[  324.213255][ T7614] usb 3-1: selecting invalid altsetting 0
[  324.220785][ T7614] usb 3-1: 0:0: usb_set_interface failed (-22)
[  324.356051][    T7] hid (null): unknown global tag 0xe
[  324.361496][    T7] hid (null): unknown global tag 0xe
[  324.388134][    T7] hid (null): unknown global tag 0xe
[  324.397118][    T7] wacom 0003:056A:00D8.0021: unknown main item tag 0x3
[  324.404305][    T7] wacom 0003:056A:00D8.0021: unknown global tag 0xe
[  324.412013][    T7] wacom 0003:056A:00D8.0021: item 0 2 1 14 parsing failed
[  324.422946][    T7] wacom 0003:056A:00D8.0021: parse failed
[  324.429605][    T7] wacom: probe of 0003:056A:00D8.0021 failed with error -22
[  324.888089][ T6161] udevd[6161]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  324.935189][ T7612] loop0: detected capacity change from 0 to 256
[  324.954222][    T7] usb 5-1: new full-speed USB device number 22 using dummy_hcd
[  324.966778][ T7612] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  325.243796][ T7648] usb 3-1: selecting invalid altsetting 0
[  325.249627][ T7648] usb 3-1: 0:0: usb_set_interface failed (-22)
[  325.255867][ T7648] usb 3-1: selecting invalid altsetting 0
[  325.261623][ T7648] usb 3-1: 0:0: usb_set_interface failed (-22)
[  325.267918][ T7648] usb 3-1: selecting invalid altsetting 0
[  325.273686][ T7648] usb 3-1: 0:0: usb_set_interface failed (-22)
[  325.324416][ T4406] usb 3-1: USB disconnect, device number 26
[  325.423855][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'.
[  325.433258][    T7] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  325.445103][    T7] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.464349][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  325.473476][ T7612] netlink: 8 bytes leftover after parsing attributes in process `syz.0.884'.
[  325.495048][    T7] usb 5-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  325.529617][    T7] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.544577][ T4405] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  325.562683][ T4405] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  325.576553][ T4405] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  325.587361][    T7] usb 5-1: config 0 descriptor??
[  325.595225][ T4405] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  325.604066][ T4259] kernel write not supported for file /sg0 (pid: 4259 comm: kworker/0:7)
[  325.609733][ T4405] usb 4-1: config 0 descriptor??
[  325.618367][ T7645] raw-gadget.3 gadget: fail, usb_ep_enable returned -22
[  325.626345][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.0.884'.
[  325.644640][ T7642] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  326.865221][ T4405] hid (null): unknown global tag 0xe
[  326.908773][ T4405] hid (null): unknown global tag 0xe
[  326.924853][    T7] hid (null): unknown global tag 0xe
[  326.930297][    T7] hid (null): unknown global tag 0xe
[  326.937997][ T4405] hid (null): unknown global tag 0xe
[  326.969560][    T7] hid (null): unknown global tag 0xe
[  326.977063][    T7] wacom 0003:056A:00D8.0023: unknown main item tag 0x3
[  326.984335][    T7] wacom 0003:056A:00D8.0023: unknown global tag 0xe
[  326.991013][    T7] wacom 0003:056A:00D8.0023: item 0 2 1 14 parsing failed
[  326.998625][    T7] wacom 0003:056A:00D8.0023: parse failed
[  327.004510][    T7] wacom: probe of 0003:056A:00D8.0023 failed with error -22
[  327.063753][ T4405] wacom 0003:056A:00D8.0022: unknown main item tag 0x3
[  327.074940][ T7642] loop3: detected capacity change from 0 to 256
[  327.081625][ T4405] wacom 0003:056A:00D8.0022: unknown global tag 0xe
[  327.204412][ T4405] wacom 0003:056A:00D8.0022: item 0 2 1 14 parsing failed
[  327.212098][ T4405] wacom 0003:056A:00D8.0022: parse failed
[  327.218263][ T4405] wacom: probe of 0003:056A:00D8.0022 failed with error -22
[  327.238814][ T7681] binder: BINDER_SET_CONTEXT_MGR already set
[  327.250983][ T5897] usb 1-1: USB disconnect, device number 25
[  327.269908][ T7681] binder: 7673:7681 ioctl 4018620d 2000000000c0 returned -16
[  327.287812][ T7645] loop4: detected capacity change from 0 to 256
[  327.334816][ T7642] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  327.359083][ T7642] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'.
[  327.369120][ T7645] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  327.387799][ T7642] netlink: 'syz.3.889': attribute type 1 has an invalid length.
[  327.433508][ T7680] loop1: detected capacity change from 0 to 4096
[  327.492828][ T7680] EXT4-fs (loop1): fragment/cluster size (1024) != block size (4096)
[  327.508496][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'.
[  327.559566][    T7] kernel write not supported for file /sg0 (pid: 7 comm: kworker/0:0)
[  327.576538][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'.
[  327.586497][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.3.889'.
[  327.641172][ T7645] netlink: 16 bytes leftover after parsing attributes in process `syz.4.891'.
[  327.761790][    T7] kernel write not supported for file /sg0 (pid: 7 comm: kworker/0:0)
[  327.790747][ T7645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.891'.
[  327.874451][ T5897] usb 2-1: new high-speed USB device number 21 using dummy_hcd
[  328.068608][ T7689] loop0: detected capacity change from 0 to 32768
[  328.111977][ T7689] XFS (loop0): Mounting V5 Filesystem
[  328.148252][ T7689] XFS (loop0): Ending clean mount
[  328.156780][ T7689] XFS (loop0): Quotacheck needed: Please wait.
[  328.201767][ T7689] XFS (loop0): Quotacheck: Done.
[  328.210612][ T7686] loop2: detected capacity change from 0 to 32768
[  328.244357][ T5897] usb 2-1: config index 0 descriptor too short (expected 7768, got 18)
[  328.252941][ T5897] usb 2-1: config 0 has an invalid interface number: 39 but max is 0
[  328.261431][ T5897] usb 2-1: config 0 has no interface number 0
[  328.267818][ T5897] usb 2-1: too many endpoints for config 0 interface 39 altsetting 147: 48, using maximum allowed: 30
[  328.279232][ T5897] usb 2-1: config 0 interface 39 altsetting 147 has 0 endpoint descriptors, different from the interface descriptor's value: 48
[  328.293336][ T5897] usb 2-1: config 0 interface 39 has no altsetting 0
[  328.300329][ T5897] usb 2-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d
[  328.309716][ T5897] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  328.318998][ T7686] XFS (loop2): Mounting V5 Filesystem
[  328.331101][ T5897] usb 2-1: config 0 descriptor??
[  328.347030][ T4185] XFS (loop0): Unmounting Filesystem
[  328.392254][ T7686] XFS (loop2): Ending clean mount
[  328.403254][ T7686] XFS (loop2): Quotacheck needed: Please wait.
[  328.505684][ T7686] XFS (loop2): Quotacheck: Done.
[  328.542563][ T4189] XFS (loop2): Unmounting Filesystem
[  328.588768][ T7680] udc-core: couldn't find an available UDC or it's busy
[  328.619053][ T7680] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  328.672718][ T4259] usb 4-1: USB disconnect, device number 27
[  329.655399][ T7710] loop0: detected capacity change from 0 to 32768
[  329.723941][ T4405] usb 5-1: USB disconnect, device number 22
[  330.394368][ T4259] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  330.684364][ T5897] usb 2-1: string descriptor 0 read error: -71
[  330.692613][ T5897] ftdi_sio 2-1:0.39: FTDI USB Serial Device converter detected
[  330.835081][ T4259] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  330.913880][ T4259] usb 3-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  331.087150][ T4259] usb 3-1: config 0 interface 0 has no altsetting 0
[  331.354746][ T4259] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  331.410229][ T4259] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  331.538761][ T5897] usb 2-1: Detected FT-X
[  331.564380][ T5897] ftdi_sio ttyUSB0: Unable to read latency timer: -71
[  331.574207][ T4259] usb 3-1: Product: syz
[  331.578462][ T4259] usb 3-1: Manufacturer: syz
[  331.583153][ T4259] usb 3-1: SerialNumber: syz
[  331.597160][ T5897] ftdi_sio ttyUSB0: Unable to write latency timer: -71
[  331.674364][ T5897] ftdi_sio 2-1:0.39: GPIO initialisation failed: -71
[  331.679602][ T4259] usb 3-1: config 0 descriptor??
[  331.690931][ T5897] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0
[  331.702220][ T5897] usb 2-1: USB disconnect, device number 21
[  331.715421][ T5897] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0
[  331.733205][ T5897] ftdi_sio 2-1:0.39: device disconnected
[  331.840890][ T4259] usb 3-1: selecting invalid altsetting 0
[  332.002996][ T7718] usb 3-1: selecting invalid altsetting 0
[  332.044470][ T7718] usb 3-1: 0:0: usb_set_interface failed (-22)
[  333.284232][ T1324] usb 4-1: new full-speed USB device number 28 using dummy_hcd
[  333.784758][ T1324] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  333.841939][ T1324] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  333.973816][ T1324] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  334.067364][ T1324] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  334.206108][ T1324] usb 4-1: config 0 descriptor??
[  334.334443][ T7749] raw-gadget.0 gadget: fail, usb_ep_enable returned -22
[  334.653861][ T7762] loop4: detected capacity change from 0 to 32768
[  335.047315][ T1324] hid (null): unknown global tag 0xe
[  335.055617][ T1324] hid (null): unknown global tag 0xe
[  335.086899][ T1324] hid (null): unknown global tag 0xe
[  335.180970][ T1324] wacom 0003:056A:00D8.0024: unknown main item tag 0x3
[  335.224414][ T1324] wacom 0003:056A:00D8.0024: unknown global tag 0xe
[  335.248448][ T7749] loop3: detected capacity change from 0 to 256
[  335.290530][ T1324] wacom 0003:056A:00D8.0024: item 0 2 1 14 parsing failed
[  335.321409][ T1324] wacom 0003:056A:00D8.0024: parse failed
[  335.328477][ T7749] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  335.355763][ T1324] wacom: probe of 0003:056A:00D8.0024 failed with error -22
[  335.435696][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'.
[  335.511954][ T7749] netlink: 'syz.3.915': attribute type 1 has an invalid length.
[  335.587979][ T4405] kernel write not supported for file /sg0 (pid: 4405 comm: kworker/1:16)
[  335.619999][ T7749] netlink: 12 bytes leftover after parsing attributes in process `syz.3.915'.
[  335.666484][ T7781] loop4: detected capacity change from 0 to 128
[  335.692194][ T1324] usb 4-1: USB disconnect, device number 28
[  335.726090][ T7745] usb 3-1: selecting invalid altsetting 0
[  335.769779][ T7745] usb 3-1: 0:0: usb_set_interface failed (-22)
[  335.786410][ T7745] usb 3-1: selecting invalid altsetting 0
[  335.824502][ T7781] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256
[  335.844228][ T7745] usb 3-1: 0:0: usb_set_interface failed (-22)
[  335.850505][ T7745] usb 3-1: selecting invalid altsetting 0
[  335.892220][ T7745] usb 3-1: 0:0: usb_set_interface failed (-22)
[  335.906884][ T7781] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[  335.941636][ T7783] loop0: detected capacity change from 0 to 512
[  335.962063][ T4394] usb 3-1: USB disconnect, device number 27
[  336.043052][ T7783] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[  336.168902][ T7783] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.922: invalid indirect mapped block 4294967295 (level 1)
[  336.366255][ T7783] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #11: comm syz.0.922: invalid indirect mapped block 4294967295 (level 1)
[  336.435688][ T7783] EXT4-fs (loop0): 2 truncates cleaned up
[  336.441593][ T7783] EXT4-fs (loop0): mounted filesystem without journal. Opts: grpjquota=,init_itable=0x0000000000000007,dioread_nolock,auto_da_alloc=0x000000007fffffff,,errors=continue. Quota mode: writeback.
[  338.068794][ T7822] loop2: detected capacity change from 0 to 32768
[  338.290811][ T7822] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm
[  338.300725][ T7822] BTRFS info (device loop2): turning on sync discard
[  338.307688][ T7822] BTRFS info (device loop2): setting incompat feature flag for COMPRESS_ZSTD (0x10)
[  338.317259][ T7822] BTRFS info (device loop2): use zstd compression, level 3
[  338.324679][ T7822] BTRFS info (device loop2): turning on async discard
[  338.331587][ T7822] BTRFS warning (device loop2): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead
[  338.342463][ T7822] BTRFS info (device loop2): trying to use backup root at mount time
[  338.350742][ T7822] BTRFS info (device loop2): enabling auto defrag
[  338.358498][ T7822] BTRFS info (device loop2): using free space tree
[  338.365290][ T7822] BTRFS info (device loop2): has skinny extents
[  338.483352][ T7834] IPv6: syztnl0: Disabled Multicast RS
[  338.500993][ T4227] usb 2-1: new full-speed USB device number 22 using dummy_hcd
[  338.824292][ T4259] usb 4-1: new full-speed USB device number 29 using dummy_hcd
[  338.914787][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  338.927364][ T4227] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  338.984397][ T4227] usb 2-1: config 0 interface 0 has no altsetting 0
[  339.101551][ T4311] BTRFS warning (device loop2): checksum verify failed on 5337088 wanted 0xe63dbdda found 0xc926492d level 0
[  339.140166][ T7822] BTRFS warning (device loop2): failed to read root (objectid=2): -5
[  339.151164][  T154] BTRFS warning (device loop2): checksum verify failed on 5324800 wanted 0x9f73850b found 0x80379423 level 0
[  339.163595][ T7822] BTRFS warning (device loop2): couldn't read tree root
[  339.171197][ T7822] BTRFS error (device loop2): parent transid verify failed on 5255168 wanted 5 found 7
[  339.181204][ T7822] BTRFS warning (device loop2): couldn't read tree root
[  339.188797][ T4227] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  339.202488][ T4259] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[  339.216148][ T4227] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  339.226581][ T4259] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[  339.240232][ T4227] usb 2-1: Product: syz
[  339.246012][ T4227] usb 2-1: Manufacturer: syz
[  339.250768][ T7822] BTRFS info (device loop2): enabling ssd optimizations
[  339.258278][ T4259] usb 4-1: New USB device found, idVendor=056a, idProduct=00d8, bcdDevice= 0.00
[  339.267769][ T7822] BTRFS info (device loop2): clearing free space tree
[  339.274769][ T7822] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  339.284690][ T7822] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  339.300223][ T4227] usb 2-1: SerialNumber: syz
[  339.305784][ T4259] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  339.314489][ T7822] BTRFS info (device loop2): creating free space tree
[  339.322294][ T7822] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE (0x1)
[  339.332089][ T7822] BTRFS info (device loop2): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2)
[  339.375270][ T4227] usb 2-1: config 0 descriptor??
[  339.382029][ T4259] usb 4-1: config 0 descriptor??
[  339.414596][ T7831] raw-gadget.1 gadget: fail, usb_ep_enable returned -22
[  339.422071][ T4227] usb 2-1: selecting invalid altsetting 0
[  339.636787][ T7824] usb 2-1: selecting invalid altsetting 0
[  339.654218][ T7824] usb 2-1: 0:0: usb_set_interface failed (-22)
[  339.907829][ T4259] hid (null): unknown global tag 0xe
[  339.913304][ T4259] hid (null): unknown global tag 0xe
[  339.919825][ T4259] hid (null): unknown global tag 0xe
[  340.002546][ T4259] wacom 0003:056A:00D8.0025: unknown main item tag 0x3
[  340.009751][ T4259] wacom 0003:056A:00D8.0025: unknown global tag 0xe
[  340.016608][ T4259] wacom 0003:056A:00D8.0025: item 0 2 1 14 parsing failed
[  340.023635][ T6157] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop2 scanned by udevd (6157)
[  340.044518][ T4259] wacom 0003:056A:00D8.0025: parse failed
[  340.064257][ T4259] wacom: probe of 0003:056A:00D8.0025 failed with error -22
[  340.114976][ T7831] loop3: detected capacity change from 0 to 256
[  340.164386][ T4394] usb 5-1: new high-speed USB device number 23 using dummy_hcd
[  340.185157][ T7831] exfat: Unknown parameter 'ÇÆV›½…·HßCénJ™³VpvVòæ: q‰§åÑœªßô>´¿"-¹„Q¹;VY¢×KØü—5'Ë…Gb2P5†v.%j¤ïùÏÃG“õQ60—B•Ù$B¦’àç/†f³YF�¬ið͆<.öËAÌ$ÃxïëÕ�ÓÏâÈ”µü}Ì'
[  340.257853][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'.
[  340.323629][ T7831] netlink: 'syz.3.937': attribute type 1 has an invalid length.
[  340.358421][ T4405] kernel write not supported for file /sg0 (pid: 4405 comm: kworker/1:16)
[  340.377953][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.3.937'.
[  340.425450][ T4405] usb 4-1: USB disconnect, device number 29
[  340.444289][ T4394] usb 5-1: Using ep0 maxpacket: 16
[  340.595004][ T4394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 91, changing to 10
[  340.693304][ T4394] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 34803, setting to 1024
[  340.821427][ T4394] usb 5-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00
[  340.910152][ T4394] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  341.084819][ T4394] usb 5-1: config 0 descriptor??
[  341.185619][ T7865] raw-gadget.2 gadget: fail, usb_ep_enable returned -22
[  341.910231][ T7865] udc-core: couldn't find an available UDC or it's busy
[  342.004274][ T7865] misc raw-gadget: fail, usb_gadget_probe_driver returned -16
[  342.174278][ T4394] usbhid 5-1:0.0: can't add hid device: -71
[  342.331099][ T4394] usbhid: probe of 5-1:0.0 failed with error -71
[  342.341496][ T4394] usb 5-1: USB disconnect, device number 23
[  342.636196][ T7900] FAULT_INJECTION: forcing a failure.
[  342.636196][ T7900] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  342.649422][ T7900] CPU: 1 PID: 7900 Comm: syz.0.949 Not tainted syzkaller #0
[  342.656794][ T7900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  342.666875][ T7900] Call Trace:
[  342.670181][ T7900]  <TASK>
[  342.673186][ T7900]  dump_stack_lvl+0x188/0x250
[  342.677906][ T7900]  ? show_regs_print_info+0x20/0x20
[  342.683130][ T7900]  ? load_image+0x400/0x400
[  342.687657][ T7900]  ? __lock_acquire+0x7d10/0x7d10
[  342.692721][ T7900]  should_fail+0x38c/0x4c0
[  342.697174][ T7900]  _copy_from_user+0x2e/0x170
[  342.701882][ T7900]  get_user_ifreq+0x67/0x170
[  342.706512][ T7900]  sock_ioctl+0x637/0x710
[  342.710870][ T7900]  ? sock_poll+0x410/0x410
[  342.715323][ T7900]  ? bpf_lsm_file_ioctl+0x5/0x10
[  342.720292][ T7900]  ? security_file_ioctl+0x7c/0xa0
[  342.725441][ T7900]  ? sock_poll+0x410/0x410
[  342.729893][ T7900]  __se_sys_ioctl+0xfa/0x170
[  342.734523][ T7900]  do_syscall_64+0x4c/0xa0
[  342.738976][ T7900]  ? clear_bhb_loop+0x30/0x80
[  342.743679][ T7900]  ? clear_bhb_loop+0x30/0x80
[  342.748380][ T7900]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  342.754299][ T7900] RIP: 0033:0x7ff2fbcdf819
[  342.758764][ T7900] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  342.778605][ T7900] RSP: 002b:00007ff2f9ef7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  342.787156][ T7900] RAX: ffffffffffffffda RBX: 00007ff2fbf59180 RCX: 00007ff2fbcdf819
[  342.795246][ T7900] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 000000000000000c
[  342.803249][ T7900] RBP: 00007ff2f9ef7090 R08: 0000000000000000 R09: 0000000000000000
[  342.811340][ T7900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  342.819352][ T7900] R13: 00007ff2fbf59218 R14: 00007ff2fbf59180 R15: 00007ffd2fc79bb8
[  342.827457][ T7900]  </TASK>
[  343.783368][ T7863] usb 2-1: selecting invalid altsetting 0
[  343.799744][ T7863] usb 2-1: 0:0: usb_set_interface failed (-22)
[  343.819956][ T7863] usb 2-1: selecting invalid altsetting 0
[  343.827669][ T7909] FAULT_INJECTION: forcing a failure.
[  343.827669][ T7909] name failslab, interval 1, probability 0, space 0, times 0
[  343.841641][ T7863] usb 2-1: 0:0: usb_set_interface failed (-22)
[  343.869517][ T7863] usb 2-1: selecting invalid altsetting 0
[  343.884038][ T7863] usb 2-1: 0:0: usb_set_interface failed (-22)
[  343.896364][ T7909] CPU: 0 PID: 7909 Comm: syz.3.953 Not tainted syzkaller #0
[  343.903708][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  343.913248][ T5897] usb 2-1: USB disconnect, device number 22
[  343.913795][ T7909] Call Trace:
[  343.913806][ T7909]  <TASK>
[  343.925960][ T7909]  dump_stack_lvl+0x188/0x250
[  343.930769][ T7909]  ? show_regs_print_info+0x20/0x20
[  343.936044][ T7909]  ? load_image+0x400/0x400
[  343.940603][ T7909]  ? __might_sleep+0xf0/0xf0
[  343.945245][ T7909]  ? __lock_acquire+0x7d10/0x7d10
[  343.950314][ T7909]  should_fail+0x38c/0x4c0
[  343.954770][ T7909]  should_failslab+0x5/0x20
[  343.959304][ T7909]  slab_pre_alloc_hook+0x51/0xc0
[  343.964366][ T7909]  ? kvm_mmu_topup_memory_cache+0xde/0x200
[  343.970209][ T7909]  kmem_cache_alloc+0x3d/0x290
[  343.975005][ T7909]  kvm_mmu_topup_memory_cache+0xde/0x200
[  343.980679][ T7909]  kvm_mmu_load+0x88/0x1b90
[  343.985215][ T7909]  ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[  343.991412][ T7909]  ? kvm_apic_has_interrupt+0x729/0x740
[  343.996998][ T7909]  ? kvm_cpu_has_injectable_intr+0x1a/0x3e0
[  344.002934][ T7909]  vcpu_enter_guest+0x61b5/0x7010
[  344.008031][ T7909]  ? local_bh_enable+0x20/0x20
[  344.012833][ T7909]  ? 0xffffffffa0028a0c
[  344.017023][ T7909]  ? is_bpf_text_address+0x254/0x270
[  344.022347][ T7909]  ? __kernel_text_address+0x9a/0x100
[  344.027766][ T7909]  ? mark_lock+0x94/0x320
[  344.032232][ T7909]  ? __lock_acquire+0x13bc/0x7d10
[  344.037300][ T7909]  ? llist_add_batch+0x85/0xa0
[  344.042118][ T7909]  ? mark_lock+0x94/0x320
[  344.046487][ T7909]  ? __lock_acquire+0x12e8/0x7d10
[  344.051569][ T7909]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  344.057596][ T7909]  ? lock_chain_count+0x20/0x20
[  344.062507][ T7909]  ? verify_lock_unused+0x140/0x140
[  344.067738][ T7909]  ? vmx_vcpu_load_vmcs+0x17e/0x780
[  344.072977][ T7909]  ? vmx_vcpu_load_vmcs+0x2b0/0x780
[  344.078209][ T7909]  ? mark_lock+0x94/0x320
[  344.082602][ T7909]  ? lockdep_hardirqs_on_prepare+0x409/0x770
[  344.088666][ T7909]  ? __local_bh_enable_ip+0x136/0x1c0
[  344.094074][ T7909]  ? read_lock_is_recursive+0x10/0x10
[  344.099663][ T7909]  ? rcu_is_watching+0x11/0xa0
[  344.104474][ T7909]  kvm_arch_vcpu_ioctl_run+0xdea/0x1f40
[  344.110080][ T7909]  kvm_vcpu_ioctl+0x8f7/0xc10
[  344.114824][ T7909]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  344.120522][ T7909]  ? bpf_lsm_file_ioctl+0x5/0x10
[  344.125501][ T7909]  ? security_file_ioctl+0x7c/0xa0
[  344.130649][ T7909]  ? kvm_clear_stat_per_vcpu+0x1f0/0x1f0
[  344.136360][ T7909]  __se_sys_ioctl+0xfa/0x170
[  344.140994][ T7909]  do_syscall_64+0x4c/0xa0
[  344.145453][ T7909]  ? clear_bhb_loop+0x30/0x80
[  344.150366][ T7909]  ? clear_bhb_loop+0x30/0x80
[  344.155090][ T7909]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  344.161031][ T7909] RIP: 0033:0x7f4bd8416819
[  344.165489][ T7909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  344.185139][ T7909] RSP: 002b:00007f4bd6670028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  344.193603][ T7909] RAX: ffffffffffffffda RBX: 00007f4bd868ffa0 RCX: 00007f4bd8416819
[  344.201612][ T7909] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 000000000000000a
[  344.209627][ T7909] RBP: 00007f4bd6670090 R08: 0000000000000000 R09: 0000000000000000
[  344.218080][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  344.226091][ T7909] R13: 00007f4bd8690038 R14: 00007f4bd868ffa0 R15: 00007fffd57cf368
[  344.234157][ T7909]  </TASK>
[  344.237271][    C0] vkms_vblank_simulate: vblank timer overrun
[  347.843126][ T7969] FAULT_INJECTION: forcing a failure.
[  347.843126][ T7969] name failslab, interval 1, probability 0, space 0, times 0
[  347.895381][ T7969] CPU: 0 PID: 7969 Comm: syz.3.967 Not tainted syzkaller #0
[  347.902754][ T7969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  347.912838][ T7969] Call Trace:
[  347.916157][ T7969]  <TASK>
[  347.919144][ T7969]  dump_stack_lvl+0x188/0x250
[  347.923862][ T7969]  ? show_regs_print_info+0x20/0x20
[  347.929202][ T7969]  ? load_image+0x400/0x400
[  347.933758][ T7969]  ? __might_sleep+0xf0/0xf0
[  347.938470][ T7969]  ? __lock_acquire+0x7d10/0x7d10
[  347.943577][ T7969]  should_fail+0x38c/0x4c0
[  347.948029][ T7969]  should_failslab+0x5/0x20
[  347.952557][ T7969]  slab_pre_alloc_hook+0x51/0xc0
[  347.957529][ T7969]  __kmalloc+0x6b/0x330
[  347.961718][ T7969]  ? tomoyo_encode+0x27e/0x540
[  347.966524][ T7969]  tomoyo_encode+0x27e/0x540
[  347.971145][ T7969]  tomoyo_realpath_from_path+0x5cd/0x610
[  347.976844][ T7969]  tomoyo_path_number_perm+0x242/0x660
[  347.982349][ T7969]  ? verify_lock_unused+0x140/0x140
[  347.987593][ T7969]  ? tomoyo_check_path_acl+0x1c0/0x1c0
[  347.993106][ T7969]  ? finish_task_switch+0x12f/0x640
[  347.998386][ T7969]  ? __switch_to_asm+0x34/0x60
[  348.003365][ T7969]  security_file_ioctl+0x6c/0xa0
[  348.008343][ T7969]  __se_sys_ioctl+0x48/0x170
[  348.012989][ T7969]  do_syscall_64+0x4c/0xa0
[  348.017456][ T7969]  ? clear_bhb_loop+0x30/0x80
[  348.022166][ T7969]  ? clear_bhb_loop+0x30/0x80
[  348.026890][ T7969]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  348.032816][ T7969] RIP: 0033:0x7f4bd8416819
[  348.037259][ T7969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  348.056986][ T7969] RSP: 002b:00007f4bd664f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  348.065449][ T7969] RAX: ffffffffffffffda RBX: 00007f4bd8690090 RCX: 00007f4bd8416819
[  348.073467][ T7969] RDX: 0000200000000040 RSI: 000000004020ae76 RDI: 0000000000000004
[  348.081561][ T7969] RBP: 00007f4bd664f090 R08: 0000000000000000 R09: 0000000000000000
[  348.089652][ T7969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  348.097649][ T7969] R13: 00007f4bd8690128 R14: 00007f4bd8690090 R15: 00007fffd57cf368
[  348.105663][ T7969]  </TASK>
[  348.108794][    C0] vkms_vblank_simulate: vblank timer overrun
[  348.184803][ T7874] usb 5-1: new full-speed USB device number 24 using dummy_hcd
[  348.217390][ T7969] ERROR: Out of memory at tomoyo_realpath_from_path.
[  348.340017][ T7971] ------------[ cut here ]------------
[  348.422478][ T7971] wlan0: Failed check-sdata-in-driver check, flags: 0x4
[  348.491804][ T7971] WARNING: CPU: 0 PID: 7971 at net/mac80211/driver-ops.h:172 ieee80211_bss_info_change_notify+0x37b/0x550
[  348.589577][ T7971] Modules linked in:
[  348.595893][ T7971] CPU: 1 PID: 7971 Comm: syz.1.968 Not tainted syzkaller #0
[  348.603605][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  348.613830][ T7874] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has an invalid bInterval 0, changing to 4
[  348.613893][ T7874] usb 5-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid maxpacket 15380, setting to 1023
[  348.613924][ T7874] usb 5-1: config 0 interface 0 has no altsetting 0
[  348.673731][ T7971] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  348.681132][ T7971] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb
[  348.706662][ T7971] RSP: 0018:ffffc90003a3f4c8 EFLAGS: 00010246
[  348.713608][ T7971] RAX: 767c4b1de06f9700 RBX: 0000000000400000 RCX: ffff88807ebd8000
[  348.729098][ T7971] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000
[  348.764287][ T7874] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  348.780179][ T7971] RBP: 0000000000000004 R08: 00000000000b9aa0 R09: 0000000000400000
[  348.792936][ T7874] usb 5-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  348.810543][ T7874] usb 5-1: Product: syz
[  348.815254][ T7874] usb 5-1: Manufacturer: syz
[  348.820770][ T7874] usb 5-1: SerialNumber: syz
[  348.892761][ T7971] R10: 00000000000b9ac8 R11: ffffed10172067b0 R12: ffff88805f8bc000
[  348.911372][ T7874] usb 5-1: config 0 descriptor??
[  349.157250][ T7971] R13: ffff88805f8bd290 R14: ffff888026828e00 R15: ffff88805f8be268
[  349.165467][ T7971] FS:  00007fa44aded6c0(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
[  349.168761][ T7874] usb 5-1: selecting invalid altsetting 0
[  349.174480][ T7971] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  349.174557][ T7971] CR2: 0000200000007000 CR3: 000000002665f000 CR4: 00000000003526e0
[  349.194956][ T7971] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[  349.202981][ T7971] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[  349.211067][ T7971] Call Trace:
[  349.214414][ T7971]  <TASK>
[  349.217397][ T7971]  ? netif_carrier_on+0x91/0x120
[  349.222395][ T7971]  ieee80211_ocb_leave+0x26f/0x320
[  349.237486][ T7971]  __cfg80211_leave_ocb+0x219/0x3f0
[  349.242788][ T7971]  cfg80211_leave_ocb+0x53/0x70
[  349.249045][ T7971]  cfg80211_change_iface+0x4f1/0xeb0
[  349.254470][ T7971]  nl80211_set_interface+0x5a7/0x7e0
[  349.259825][ T7971]  ? nl80211_dump_interface+0x5c0/0x5c0
[  349.266055][ T7971]  genl_rcv_msg+0xcea/0xf90
[  349.270627][ T7971]  ? lock_chain_count+0x20/0x20
[  349.276842][ T7971]  ? genl_bind+0x380/0x380
[  349.281334][ T7971]  ? verify_lock_unused+0x140/0x140
[  349.286693][ T7971]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  349.429982][ T7971]  ? nl80211_dump_interface+0x5c0/0x5c0
[  349.829250][ T7971]  netlink_rcv_skb+0x1f5/0x440
[  349.895181][ T7971]  ? genl_bind+0x380/0x380
[  349.948016][ T7971]  ? netlink_ack+0xb50/0xb50
[  349.964264][ T7971]  ? __lock_acquire+0x7d10/0x7d10
[  349.979753][ T7971]  ? down_read+0x1aa/0x2e0
[  349.989419][ T7971]  genl_rcv+0x24/0x40
[  349.993609][ T7971]  netlink_unicast+0x774/0x920
[  350.003436][ T7971]  netlink_sendmsg+0x8ba/0xbe0
[  350.010214][ T7971]  ? netlink_getsockopt+0x570/0x570
[  350.022433][ T7971]  ? aa_sock_msg_perm+0x94/0x150
[  350.029056][ T7971]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  350.039757][ T7971]  ? security_socket_sendmsg+0x7c/0xa0
[  350.046843][ T7971]  __sys_sendto+0x46d/0x620
[  350.051545][ T7971]  ? __ia32_sys_getpeername+0x80/0x80
[  350.062031][ T7971]  ? preempt_schedule_irq+0xe6/0x160
[  350.069064][ T7971]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  350.079801][ T7971]  __x64_sys_sendto+0xda/0xf0
[  350.085986][ T7971]  do_syscall_64+0x4c/0xa0
[  350.090798][ T7971]  ? clear_bhb_loop+0x30/0x80
[  350.100362][ T7971]  ? clear_bhb_loop+0x30/0x80
[  350.106760][ T7971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  350.112794][ T7971] RIP: 0033:0x7fa44cb7504e
[  350.122471][ T7971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  350.150368][ T7971] RSP: 002b:00007fa44adebde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  350.160862][ T7971] RAX: ffffffffffffffda RBX: 00007fa44aded6c0 RCX: 00007fa44cb7504e
[  350.173975][ T7971] RDX: 0000000000000024 RSI: 00007fa44adebfe0 RDI: 0000000000000004
[  350.183564][ T7971] RBP: 0000000000000000 R08: 00007fa44adebe64 R09: 000000000000000c
[  350.196568][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  350.207353][ T7971] R13: 0000000000000000 R14: 00007fa44adebfe0 R15: 0000000000000000
[  350.219213][ T7971]  </TASK>
[  350.222500][ T7971] Kernel panic - not syncing: kernel: panic_on_warn set ...
[  350.229809][ T7971] CPU: 1 PID: 7971 Comm: syz.1.968 Not tainted syzkaller #0
[  350.237216][ T7971] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[  350.247301][ T7971] Call Trace:
[  350.250614][ T7971]  <TASK>
[  350.253659][ T7971]  dump_stack_lvl+0x188/0x250
[  350.258379][ T7971]  ? show_regs_print_info+0x20/0x20
[  350.263611][ T7971]  ? load_image+0x400/0x400
[  350.268162][ T7971]  panic+0x2e5/0x810
[  350.272106][ T7971]  ? bpf_jit_dump+0xd0/0xd0
[  350.276667][ T7971]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  350.283115][ T7971]  __warn+0x248/0x2b0
[  350.287123][ T7971]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  350.293661][ T7971]  report_bug+0x1b7/0x2e0
[  350.298044][ T7971]  handle_bug+0x3a/0x70
[  350.302239][ T7971]  exc_invalid_op+0x16/0x40
[  350.306790][ T7971]  asm_exc_invalid_op+0x16/0x20
[  350.311683][ T7971] RIP: 0010:ieee80211_bss_info_change_notify+0x37b/0x550
[  350.318766][ T7971] Code: 0b 7e f8 49 8b 84 24 00 06 00 00 49 81 c4 20 06 00 00 48 85 c0 4c 0f 45 e0 48 c7 c7 c0 31 39 8b 4c 89 e6 89 ea e8 e5 a0 71 00 <0f> 0b e9 07 fd ff ff e8 09 ec 38 f8 0f 0b e9 b1 fe ff ff e8 fd eb
[  350.338445][ T7971] RSP: 0018:ffffc90003a3f4c8 EFLAGS: 00010246
[  350.344590][ T7971] RAX: 767c4b1de06f9700 RBX: 0000000000400000 RCX: ffff88807ebd8000
[  350.352598][ T7971] RDX: 0000000000000003 RSI: 0000000080000000 RDI: 0000000000000000
[  350.360693][ T7971] RBP: 0000000000000004 R08: 00000000000b9aa0 R09: 0000000000400000
[  350.368699][ T7971] R10: 00000000000b9ac8 R11: ffffed10172067b0 R12: ffff88805f8bc000
[  350.376880][ T7971] R13: ffff88805f8bd290 R14: ffff888026828e00 R15: ffff88805f8be268
[  350.384904][ T7971]  ? ieee80211_bss_info_change_notify+0x37b/0x550
[  350.391451][ T7971]  ? netif_carrier_on+0x91/0x120
[  350.396433][ T7971]  ieee80211_ocb_leave+0x26f/0x320
[  350.401733][ T7971]  __cfg80211_leave_ocb+0x219/0x3f0
[  350.406992][ T7971]  cfg80211_leave_ocb+0x53/0x70
[  350.411888][ T7971]  cfg80211_change_iface+0x4f1/0xeb0
[  350.417230][ T7971]  nl80211_set_interface+0x5a7/0x7e0
[  350.422570][ T7971]  ? nl80211_dump_interface+0x5c0/0x5c0
[  350.428176][ T7971]  genl_rcv_msg+0xcea/0xf90
[  350.432727][ T7971]  ? lock_chain_count+0x20/0x20
[  350.437639][ T7971]  ? genl_bind+0x380/0x380
[  350.441734][ T7876] usb 5-1: USB disconnect, device number 24
[  350.442135][ T7971]  ? verify_lock_unused+0x140/0x140
[  350.453824][ T7971]  ? rcu_preempt_deferred_qs_irqrestore+0x868/0xc30
[  350.460480][ T7971]  ? nl80211_dump_interface+0x5c0/0x5c0
[  350.466097][ T7971]  netlink_rcv_skb+0x1f5/0x440
[  350.470933][ T7971]  ? genl_bind+0x380/0x380
[  350.475408][ T7971]  ? netlink_ack+0xb50/0xb50
[  350.480048][ T7971]  ? __lock_acquire+0x7d10/0x7d10
[  350.485131][ T7971]  ? down_read+0x1aa/0x2e0
[  350.489605][ T7971]  genl_rcv+0x24/0x40
[  350.493631][ T7971]  netlink_unicast+0x774/0x920
[  350.498624][ T7971]  netlink_sendmsg+0x8ba/0xbe0
[  350.503469][ T7971]  ? netlink_getsockopt+0x570/0x570
[  350.508722][ T7971]  ? aa_sock_msg_perm+0x94/0x150
[  350.513720][ T7971]  ? bpf_lsm_socket_sendmsg+0x5/0x10
[  350.519056][ T7971]  ? security_socket_sendmsg+0x7c/0xa0
[  350.524675][ T7971]  __sys_sendto+0x46d/0x620
[  350.529396][ T7971]  ? __ia32_sys_getpeername+0x80/0x80
[  350.534827][ T7971]  ? preempt_schedule_irq+0xe6/0x160
[  350.540196][ T7971]  ? asm_sysvec_reschedule_ipi+0x16/0x20
[  350.545891][ T7971]  __x64_sys_sendto+0xda/0xf0
[  350.550621][ T7971]  do_syscall_64+0x4c/0xa0
[  350.555087][ T7971]  ? clear_bhb_loop+0x30/0x80
[  350.559844][ T7971]  ? clear_bhb_loop+0x30/0x80
[  350.564577][ T7971]  entry_SYSCALL_64_after_hwframe+0x66/0xd0
[  350.570515][ T7971] RIP: 0033:0x7fa44cb7504e
[  350.574971][ T7971] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 <c3> 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[  350.594627][ T7971] RSP: 002b:00007fa44adebde8 EFLAGS: 00000246 ORIG_RAX: 000000000000002c
[  350.603099][ T7971] RAX: ffffffffffffffda RBX: 00007fa44aded6c0 RCX: 00007fa44cb7504e
[  350.611132][ T7971] RDX: 0000000000000024 RSI: 00007fa44adebfe0 RDI: 0000000000000004
[  350.619589][ T7971] RBP: 0000000000000000 R08: 00007fa44adebe64 R09: 000000000000000c
[  350.627598][ T7971] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[  350.635604][ T7971] R13: 0000000000000000 R14: 00007fa44adebfe0 R15: 0000000000000000
[  350.643621][ T7971]  </TASK>
[  350.647098][ T7971] Kernel Offset: disabled
[  350.659936][ T7971] Rebooting in 86400 seconds..