last executing test programs:

12.927530529s ago: executing program 4 (id=3764):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4f3, 0x755, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0xc}}}}}]}}]}}, 0x0)
openat$binfmt_register(0xffffff9c, &(0x7f0000000480), 0x1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r1, &(0x7f00000077c0)={0x2020, 0x0, <r2=>0x0}, 0x2020)
write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, r2, {0x7, 0x1f}}, 0x50)
syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000090c400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000542d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000015000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000001f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ea8286a2fba523440000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000633956a10000000000000000000000000000000000000000000000000000000000000000000000000000000093160000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f1000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007d6ab715107fa1820000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f6ffffffffffffff0000000000000e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e1ffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffff3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f40000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007f0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000286071480000000000b13bc1e6d970884f00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001b000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f3ffffffffffffff0000000000000000000000000000002000", 0x2000, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006340)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r3 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r1, &(0x7f0000002140)="c119ed7667ec1da6ce5ad10520d9f0d916f246337b0557963a20976c5c2e3b9c50442c3aa3ad8af4490e25e8a248ad6569c868927ce88fde8f6dd47700c012579d8f5517c15a8692ebbfe31637d24da9b182159a75eb201be82b5b3482e6f7d3344eb462be4e452a789b9246974e521beb91400d62ba27d79dc7e4a2511c941b7658a426f1b03867abe8958cf54e277c8c7eba60d65881156958563b415fdfb45237d979dfffc5a2399d245c064928d88f8f2ad57fc65556fc4404b0deb7fe8b794c8f853fc356646a4bd5a3bde17b164539cde75bfbcb82189d10658affc840871f99d48a657c0a490f44959ec808a7de09590156b5f4dbe9689884f22c3388c3d735ab0a38bfa911e234a40a7700258e36df5be8b1e6e8d229a9ad553628c9e2d099d87e54328d8e75a59b5add9aa55447c933e752fc3bd90aa92645449401e7a715f3b4bcc17c799eed78a917850f05886472640ec78ba017ae6e83683db81d999696d3ad34143e5d6be46724f4086dd8480e85b070e2980ee952ef91f8467bf542428b1958ead9f7a09641d0c33c1566e77a3c923d94bee7dc9046e8b6803dc5c5a6e34ba951d2a0fe9d6d03a57391560e2328e8c581474e38e40055b45f7467b4dba95d64dac57b6fc0dc8a40f054aa801a3c022dcfadc793ecfb9968d3121157b0a8b25b99b09038c58570205b4166f3bd749d7a0f8bf89033e11c0a456bb72788cf7ccfeb980ce085711f8ea531fcc57206d8e0e0aea1f3220066c7769d71026259468604a5cc7331cc971a4cd78d8552e0e0d9955deb21282a27f0a5f8364d0f9fe91016f086c10a3662a154316891ae4fb8cc3481b2253bbd09c64629f3ffcb5e82b495e6721dce47734254ab64cc119c2a446f34d6cac813a3c0444d9a13ebbc0fa4baf1bdf78b9a9cf6620fe488bf2a1bf7e857ad6ea157542761cc6a7da8d4c2242853a1fd14629491680253603b910466927c2dd4818464d7d9c246b9cd726d123d1dda95d0325370a0f1b5751796d13501a2aa1ec0dc70a5b749f8d171cb7569d9b74354883a2216f452cc712d0829c8c5f206cc7924652473931adfd2bd3940b3adaf54967c0af599d4968da74f25d2cc309dbdbe3d6faa08f2c08205365d3c4a2c8344b1047c7d0caf6b595e5d24c89ea1b532fe3094d7a16c716110b75deb22a5a281c0f133cfcfaf5238a3c493c4f97f890bb33769ea652c67149be70e62de16b65730b3bd2f547c084ee77d456a86bf8f1f7304703d2524443c4b66ceb7d2e5d97124a6ae48158c16cefa3eb94a7ec49ae43dd02f9edd0924d73c7cec977186442518b8dc642dea31dce2b79b4ec5400210817da04caf0198e933e8c618a5f0e7123ca5786c45b10a543e7de350aa4c072c85612a99ec9534f70130eebc0ef842416091a0adba1d30730d04080928c094d49a70f0a354b918725578b27a9b65f1a43a7dc9d8b6c9a23e08ba83bb8802e69454eb316a6a0188713704b30098479f5d99497e60ffb372dbbe07642dea12bf6f3f4b6c508f1e061b0211b9be792fda7bb86f51f018085f2fd5ae316c761b35d562dcfb783b87d6da0820947f5d055f0f7cd3c50f1c61f1da1a73c7ef107f0ad957977a33cdc67f6aa82e03490f5333c1ec0a1fbd14b2aa961d2b3f6315bd06029c4c9654414bd9256de44ecf3b0485a41a9f7183d0469bd327f549201924ab80e3227f228e20e9fd3b646b3134385ed058f4bff4f714cdaa855e2c364d7bbaaf26df65bdb9dfc4f6104d219e41684493c621588ca8d01ef3211c28d613bc67e498b4b80279249bd947d029315dcabea9362e0258a5a819530459df44f7c83972299e54a29afd836fb176cdc1d86398b6c7a75cd15b1f76a0070839b5a24366603a0aee35a9f784e4a633703de42e6648a9626160a25c9033242cd97eb07ffc54a01d94c48333e832ec0eefe51a266fcb526dd2954cd1147d2a2df260affac31e4cec7ece02dce3f61078b0111b94c3bbddd41487e33820ddc8cdf7a1ebc58531f280e2c12a8514bb4e7a176208b73ec6f4cf1b660393837dea00a8474fc41039db848ad6b0375a36ba35582736cf7bdb33a051d49f966fd17a80cef2f0c458d1d5c932e4193c5018105416ff1b27eddf56d4277a49d0adbf34c998a062db4c8263f5c03696cda85a6f0db49a5c58e2809d7519e6ecaa017d90e31eef725fdb3f26d77bb15a3d924d3ccb728535dfdb7517a10b9a54a551c1ec95c6770ee0901d18f24149678f1677d1f5c447aee584c6f1dbb7a952da6b91e8af3d98fe790201b89a05b61abacfe6acd7a774e3a12436d169f54b8e2572f0ed70ca78e801bbc3b783d73c96d5424b82de2d8ba84f585c67cb4c7d8175b8a2fd75a59b24db0403064924a4a6ea5423ee818b70d1c5403da14370fbc98ab4ea6a7fe78e7d3e8da1a3f04856edd96e8b9d7e80064daed38d0ca194a638a11175a9812569a640a8d373aed41e9a1e0118ff7ecade45238544dcf5864697c4d36e444fb82bbc222a8a2bec2869c623f61aa38299d3a4e8806721d579907c31a0cf50b82dcebe08d8c5a21d97a707d5a83de1fb145227d0303334e5cc73c628e818ab6901c001ef8f02557d5ec579189b620f0e3307df5273573f707ee91985823894f9ccd80415c91d7baadd31ceedb3b26212e09a62bc22392fbbf3aa5e340dd3408c1c9e3d1d144dd5260c904812952466ba31a2dc80b8826b1354335b0d754954bc93cfce0eaf93665600f67505595ed66eb38ac98a23ae6568aac700361e784fc8ff3cf0cd19e15a3508f42fb1bca1f95a6502b5ed09df0f75859527025798b890df2f0110cc20798a7096831c9822ed5a9341fd6afc85a78736b857bbfbcae5f61fb5a3ca5577c4bfb6b1ccac7f21e95cb2c1e3fbe91f5a46522bfc49a0e11b4ccae898b5215cebacac2ac8d6685b05a9df649d39e40c66f4f1373e77a722beb0ed05167fa206fd66cae5b01741f86cc1681ce7efcee5d67cf8a89627d7d02ca8ae96e32cd5d74dffa715b7c2e0f24648932930e69667939490cadcd06b4396800152fa3dfb4810ab6c4de8f0814a9fb211517d19932befe0c0613699d481ba2d3140836d9dd074ac5dbbc27284463f190442b453d4a06e1e0053d0e097420e1406b104cc8bdc486a1fc581cf1dca50f63ce3de1403eb4a5080971aa2a2a911c3d24d0370b1c062e6b21c6a694eda76e61b877e596d34ebc507f10c3bbf969793f5b71d026d03cfcc2bdda2acdeea4b7066f07be408f6bb35ba7f3b8196e9a1d1ea30ff709d8c0fa29c40056bd53e609b5217976c422efe8052e4cbda4b12dd2a1286a4460c57bb3a138c55408fa6a0888e32299cc47efb84ad61a98385854824ec253f1279f9d1ffe6becb8c427b53c57b537e6494f6acc7902347589230aa7316523108ab38842b3b97a0840d4c3eabd229232a71302edd1f3375d0092cb3a07312400c1be8a94da53a79d2fce38fed341193f6c4dc41f396774145aa18400bf108577e714f4a4c50ce408392f954eeae696d2605bb973b147ef98fa35d576c957a01f262d81157e1c8aaafc708634366afcebbf31cd4b7190d29e0b3a2960ab5ea952eecd38becbb7cf7659a95044a1ebe4240b0d26c7a932c14c1252eb24bad57be94c5632bc42aea31f722904306d39f1d0850ac029537c4425d048ecf3fcb5428638dbcb86e17d60164fc396c706c10f0a1ccb4dff2f36b47510a749dc03e32fd7f13893db135790d29a56fe1fae6d0202831d440242be2086c6e5dc71dae14089fc080a358f159faafb397da8ad8b48b1615112c76627a0e47a7cbfd2cb0e9a9c5316e96f8c2cf4ab7c875ed1bbd5a020ff2f265a1f63b6151a2288c3e83183e68cd12dce8094d392137f061d43421eeeee504e4db172c9fabc6297a5641a9a7696f16660489fd6f7ad9421068bd1294941e51b8d2b818627e3081369583e91c6b8b68c93173dc7fae27f3bb9a4c6a3d69cf5bf28b3f8b5c8fa8a8a90bfc228acd1df93c8b3f15fb318c7524ef2e8b6bc18010b4ac5b448dd3a134531654d610cfc9b393b5b1a22e90377b74ebc64aae95987881c0602311c0fa94cd612889125da49b810acf9617263b55e504b1b9160675cfbef83170fba4134640cc2be541bdb54077dd65304eddabcef91a3445804bcdbf00f53dbd3345c190c2ec117dfa986dd04c3f02b7ba9eee47538c5fda856d432cf343596c53cf3c109ada41fc6d7b09c3f14b60c2c8a4cdf5ee0791017cd25f7ad96d0c51a5cc52e2647826662a99266a2f2072b7b1acf805d44d8064d419999df38537ffcd78a78ce3837bfe1faf7dc79f5e0d32ea5e62c06e6aa716e0e048cd5c5fa8b4212ac668ffaca2a4e8afb91aa7425a800fef89fd97587569489088b434510a38a49e8ee3e1b96a307dcd999268967405f354dc0478bac5229203eb9d6aacc2db83e233ce852ad55b799b6923653d3d5788ac56ffdfeb206acac33010161536e3573d54eea1925b6f4edc6aa193e9e362681e34564d146b49ed916ab8d6aea1a78e526c7a0dc56f5ca90d07862d17cb3f21307f2e012ffd011ec64d4cc23faa4a08c4128c0892be5d5999f681dd28bd6796f83e1e0b80ab61249e5049e81c2e692e360194129d1c9aa13d5302d3cbc6060159632c6d3c2db27c3fab53e0919a81ff5878f6328536292905883095b65581b696ee94a8a0dd7d0d11a2e269959a6f848c87eefef283e57fadf325b665ade2d6591b283c33ce9092ceb39df5bf6ff92cd6180353d8021cd3b8a7efb9be4f79b37ee19e4b9eccfec49b1f526420aed78424d5129afca3e28e1e6cb5cfdd894289abd5ee69d29413c548f65baea4c99ae73055000adb0dab38e7bc6c9c562a3214e3b279decf1dc731ceed1e4def2d70360953886da1eb7b18b745fd6d8751d038c6cde166d4101df1418689468d3add001cc44c8f2ab8105fc362cf5792d5c270441af890ba4bd563ce68b57a0f99b80ba93f7fea3765ec1fdadfc7274d4d7c46da05fbaf47e29de56ffc53f71188f94cc3ea26197eb9274aea10f793e348541feda0cb82915fbc966d317b74ef23a851f3a7886fe99c4bf917d5932dc9576313518276f690f400b8de28cc92c2b753ae283c7fa1639af82ab939e3be687621a525dbed50d33cd6366d559a75f1bd1cf25a0bc421c79debae4263beb171539835e6e5447d411383c3d7ebc8157892ab6d5013d49b0b777dc27f629e9e0924d889702dec588045563cc09cf1bea68fcfd0a2c6943248009b95cb6055b5c2f521c4120ecb4233c47d7f0454afa93063d5b26b94530b3b3089b85b64ebc684e5c38a561ba437b09582d38fd379e48e752cffc532bb8bec2999b2ce70fb9e5d7101d740008c935680537e8992b576c9f5dbcfb35513c11fa48caaedf52a6bc350aa2acbf1ec561680d8ee9837d3373e2d51183279a95d41eeb9558dee0fa43256b9a19012b3091a4bc1e94961beb05c33869915e69413122a953e0be0fb9759c9b8ac1254aabcce151638d60d197458e9757a1d1b0e7286fd66dbbe9deb51ca7274b3e0efb464ff44aafd5024cc534ce0d725bdd4e43601279231b6fda22ec25a680588794f086a9c094b751c575d0e0251afa27381c55a9c190ee3af55af0d20424db2411233fe46c537b41dc576639979469925a8c8e515539bebba248d3372ec80875afd26a04ef5d1aeb61390901eccf4df562680445ccd6a90fc70cf0ec08910b23e108ba9b35a689fecbeeacccda80a2ac86d2e7ed2990ac386ff3cc7992ea29d94bbe7d13c96cd31763cb8a5a150c6ee1781160e27df9b51678e650d009e95322a0a63a9165288be42681e3dea6262e00ffdea6f076b9bc810880cfed87a609f1096dcf6af0f053b5ed80c2053157b97396d2876f6600149cda0fcbdac08621ae99e9fd24393d30c3911da7573c3675a695f9e014a3dc2d2e45296abaff428a733cb742a01df7059828f64e515099141081ab3a263c7c38459dbc0d32fa8768b8fc3550131d286637e25466d2a129d587663d9d0eaf4079a72cf37c9fccf5f2cdda2e9db69d82a87b4cf9c20dee03d935cf6099d1d1174344d551cb569a73c21ccafa6c59b988e0681bb175edd912cd64670598b444825c8f4a280dfee91ba18f50aa0f2fb529e5f73302fa09c4b9937f19ff6175af4f1321d3dc09e692ca7e1934f31ac91fb6e6fca4b1dda3a0063c8eeb5f68d43c820f8b9e1c6903ec1a2626ca3536bc386f42e7d865102daa82db5b2d2b580825afcfb65ca9c5cca7de06d838f84a84ee4f8381c05de2a0ec53bdcc447df8e8b9921c21cdd43312e1454790d727ae9c33487239195afc93149090e3c47dd9ec03feb51551ae92e9dc21ce5ebc4e8c8b99b9dd09ecd33a949aac69299024a52680c91244fcfefb9e2def28d0cdb621d7be8442c67c61b18a1228d341014a3116e9b8f2829e291f788e368b6e36460a6a76987918caa641f06184ab0a3910a43dfa97b3e5c31c837a12a436ee8796f9f507cfc438e6b061a59342be0c0bef0b646973d58830063a28c1cd3f434173f450c2ca3a846adcedf6b5d0bfd0813948e79fb8b6bdf9a5add644ab2a1d9795faae8ab680db6a4ad933848ec6ad09b212605ce497b2dba4eea307c45c17099a3f116508c73371d6f3dad906cf8ee9a9eab88e9365fc78112dfc8a4f865e627f1f6e11357632a3a1a2e9391f56376f8e181555ffc98ab9d93874392e81aa4183e8caec57a4a29613a3c4319595553143adf28bae56b719b8be0b2acc4b03038d48de63b19ca362945637d4a385becaaddad5b3dba297ffe71ca0cc9c9c1ff843ea5f0dff511b88ec7a6001a2570d09606c36d6bede06c4c7e93c77ca3da73f9933b16650df963a39ff34a3e83bad1c14a5a9457166f13c53502e9b9600982aa99598f711ef22720204282c9b02fea3eb55d568160f0fd62633787a77fd8acaed92f2607020c26f6f9386f9021f9123204a3f20e745caf37849b25f360e174718e1d78a32dbdab5d5aeb36c9b3366167b0fee60883a9b0f8bcd9695472ff4820462fa6f75801abe45c4ce02c6de61bddb434bf020b1145f0ca58f035f46107ca63a507498d7a1ffd9f6d3071479aec5999c1e7abc0e014c5be04b92486dce4d8bd88c321f3017050c599a6ed8888f810c75f2607fd35a8795b7478d1c346ce6694a0e1e3604cbe2ec7a31415d80508dd23ffe4db304a2ca1bc65681cff1135b95fc05f0a3b8cada0f5c83e8d0f3cdcbd4bfb48a7895cc9535d81d13ccc8f9534dfc542d9837e352eddd62577ee711d26bb07f41e9948d4b917a926eb8093944ae45cc6dd13ec9b61816950d158226ab7f1b8d8a1465f3eef2e9a63b3ff097282d2541fef5102c8b651ded051d3219f6527d4b5b6fcb1bd0fffe7080abde84ea1acbd2b89b0c9577fd7273675527a12dcaec02b3262389b05c2c09792ce465f7a879de0270fc2b6f28403a1dca0c5fc28f0687351c5bb346de8cfea7532b834904bb012731ef8fe83036c95251c757683834672fa80ba8383308e3e9e536fb0e906a9727e6b2870c3a8ee056d353a3fafe8e9ffde7b0ce951b60b35fc2f7d1e476ad1c45f2559ac66dd007fc27253256f98877a4476ad273880a874023e3f75b14b32366172bf860eb6dbcb0a98b83972e23b02fd02027ca7f9eaa0ee38eef55ccbace6ea3051d79c6017c34b5b502a9b0e52c8b4bd80391af549e6f4accb1cfdf2071de59ba903dde378d9e66ed0cbbddd66ac365e64c8fdb93b97305a55cb39beb745d4a824d1de5282b1b839a72603fe033f8c7aae2cbab65fcfb54eff28eb0bd4c72e3e892f953e3251b88ce178641e79ab5484bff93a8eaaf601be15368b46690ca10e70188f581f999eac931fe48f31b8951ccff1ba5d6cc007246595bdb22a3dcbfb2c9fe0d010bbab856f4c651dc5ab7e8fb0193b1c9924facf3c05a255ef328d589a0a89bfe67c7d971bd7b708517c8540391f6a6b9724069e572be3f85ca86e46e6fdedd22695fd8b364f3d10723a34971a39e1822eac8f51661ecd13c41e6349c030434a0dff79f441cb195bb08717345cf29401c834c35d9009895b6e5c03406b202ee333d7f531898967f93aaea74265fc605fb4b5a5750305ab82203f2fb49493a5d3deb285a2777c8641b3d5df1c7cdde888786d314ccdf20b60c5e05279160fae24073027d8b8b61aa4e4760d8d7d785d2fa1e551c2ff644bb83e69fc574c754a195efbca225e7a5e5ffb1f0852cc80187661295786fa35cca2baba685f744ec9e193e212823741437dde5ca003973261a167a389f2e5ead402feecbb4045a39d3ebd76c4bfcc65f60bc841f8488d08f258a95caf36cbac22671ac59a7e3ebd22d600bc417b15daaf296b562928ca6a2d7c11c5e96d3c1f56e683f1a55c07dde2cf889be2ca901606b613a299703312e74f80092ff6128835ea200fad70e0c2d094818ba6178200a211d6b2d2b068a4a0d757361535a73ad59a309c2167c874b23b2abf4e5eaf76e7e6851d4232303b8c9073ccea7398d34732289d0530f4183d004cc4c9827668005d28799ed2b23005f70bfbdcf2f4b6a821c2ca12b7915a5bd6098753218ebc41b16475c8611f492f85b08f551fee983915a5cfc82d24abd29a281963feadfe33cfe14735168b2e0528b0493011aa234d18450d9b29322d7094f3202f6a6b49094dad52707a3a80324835bf34daf557ac5f18695069601c6011f148084355af3b531fb0e16a6ff81a8f9708e1a610d38dda66365255c7aa3a3d37bd4b58baa13d1b910280567642f97bf4836a1fcf336bf6e9a0fb347abcd1cdccfda04acdca918766a64fe7904b2e67b8872afd4366f9feb944f9b9ae5577c76c55c24b85e44b48d464333ba1a9f6e1e8ba10b57d7d8aab05e86702637485998fecc12b3fb12ff7ba3fd26223881a06350f215a8bffc46eba2cba0af2e11439ce012c667c5cafe3d0690c77b3f1ba108caffd5726393e61f194295cf4c51d0d383632cd9b75daeceb84ec450a0d344b08596530f1b95ff8b034c04b263a530c59d822e9c8c5c7328e539a18a2905c117944e22eceb60247b7aaaabdf0859a9143ffe2935454b6a87f21bc1de97893c23b48ce03782252f60e880f56b839daae71aa8a19e753506b370739ea88294ca2e0c1af31438ea33b084c43c6fa1381b7f1b9423685c53f3438e1e8893c6d157b297b336cf7f032ab4c01248ea5b2222e24f90240d8f28f6455e36cc423dbd2888d56c3fe6bdbcacf397ac13a1983797f7ccb84a1cb83339d4e9f599a154ac406a3bee3d4b3749b4f0768b0b225f31c9c91dc26a45a2e109a218ddd22af93b86b6fe336d3a051f7e07ff1d1d5eb662de4cfda0dacce0e20c37f34c75a97815591da22aacaa1e3a8028af1b5e15e470e800fd1dbdc99f21687724f07737c2c315e0836cb169f71e689fca00a2c73fe666699cd6571ea106767bd7f0bca061f0b4a21991fd02b8e695b78474ee1c9bc13bcdb9e477c02acf2343d449f9b85bd618bf7a2bc353c356b9578d3316b17f8bd3fc20f2b1a7a4cdc518e79c77d472c5cb6762693388d3124579d884a49a69d7f07c332be891c3244525c2e6b9387c041b93706a0121365cdf69aa839346e5e180945d8af7da0a8f65cd1bad1377d13ff6d02e7ea54d4377a1d3d49d3d357e61890034409b19f44fc02f5574f40fe535bd423bbd96a0a542ccade1b478b78265b25c1322fbbb8ec99cb45b22d737ee248169fe08f8a2958b925ace6372bcf1d1be57e9b4de97bd0db62425c53d869794d4390312b67db5e61d1b42c5afa549065005f359c47734f54b7f30918be1e2d0ff21596258caa287159fbe6dc0090242c43815367bb45067a55e0658d58eefd081b1541cf393561a5a369fe90c6d5d8caba63198c84fa0467fae813ecd3fb740a3783a53dfad07c9493fb3936b802e1bd9fb558bae88c44d9a4795aa634c13a5fba50923636ac6e2952da6c8424cc616eb364c11f876663d105fed392c15dbb00f9caf50af20c44e4fea91480cb4bfecaf126451e6f19146bb2ff26d310416c62410c37b000a1d1f0480419e5f5f320827fce26fbb25c9ab882ad4bdf6a674aaee87b85309a9783bbd34606ed46f6f761c5e124825b0e5df507c505814c769323bfa36170015e1720e2cbf30f79cc8515df1fb7d58695ecf8825e924e098d0dfcd5e396093d996a2fd4a9c5de03254b12dfcd2342f49acbecf18dc3417382e5b507652b1d089eed0805479546eba0fc7d17ecf11d692b4ce817f270720cf20737d3f02e302cf5e18d649bf3405fd262dba305e916280a38e3511307033dd70d2cde39d528e676f6a051ebc73b6ff0d5f63b58970e38e39ea366977a0809e22eed665620f65bbdd2f94ad82f3faaba1bfac309f60f843fe89573787092c8f7a7b44018ba7daba13e6b093b496f79adc0732574cac1cc33e5234d7770ad6cb534dab9856e390e172a91532ae77f4ec98054f4c12b02d0438ddf8d8d173e6a59f66564accb785693897b335199d9d8338e242703ad120f465a19153a1a330dcc275a399af921e0dac2b6d79ea51ec72fe932be071352c12933367487d7385de66d62b2bf5cae6c4d54f099d7c4ee10919dcb33a2b31498d979504b619a6eaf64ed400e491859f9c78c1d9d434d6ac69d570796088d76a47b4999816eb3b15e8de155f1392b75c1517c91df38ef0793610451ad31a0906eecf14c80b679202a6df9f00c7d28d1449988410c652740dde2ace85080e2a4f16024cde15ec4023b1fc4537d6947f1e001d37c90acae2995aab5476a99d3a20af07ae2e564e27e31b30d7bc3b8aa016e3b5c38feb9fc947ace24e83e7ba4f69f72e92f8f26bda8dd09ca791fe9cb1d0e14278c89a20ee2896924e88ba9cb3b916aff3b7a5924a91b4495d0305fb4adb3e036a31e2f200f272d4fa7285f96ab7e7b934464227e108511ded2ae4337aee944e4067c7b741d2f55483243d641b8bcca425bb69f591065a3b45c6f9513b472aff95c1b3e71133b3479cd5fc51e9eefe5bf0f7c2f9256f8d49a2ceb2d11ca0f0eab1e42464cb7d6aaa0c023147c1f108c3d6d1fa379638979170cb6d94fa92e5cf5f69316fd64c027eb10ddfd9b91fc91829f347cd73433e5197fd97fb10e99d2ed8868d49e24d59efa6758667f6ffc18e5258f98afeb01a3d794813fc2b9190090ccceaca0526f06a948d45bc7e2e40cdec3cf78c10676a8bb8a3e5e7200b3726b3407bf666862f9038d8216f9505cf7aa9a04f934d6da311d6500452676dccfd60977c4c99d56dcb7bb45fb2081e19803841a8edd8cc55b08082d9798a5c3a80de66f4ba2ccd90566d393d94608f17724719393b9df7725baacdf0e4e984b454576ad4f793143f4c8dc5f1ca822fbcdc90e9636727ee0638fb26759e6ff79b19c97ad224e5a85e1075833fe7fd2f3424420a5197eaa9d440c52807fc3e96c647dd745e49189f427454aae6aede782a8ac40582d85acc9ae68f95af556945889ae1fe381e69ed18aecb08866f5558ae36b6ff61c86fdb2b6f3eca083dc41c0", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsync(r3)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f0000000040)={0x20, 0xa, 0x7, {0x7, 0x35, "00f4000000"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)
r4 = syz_open_dev$hidraw(&(0x7f0000000280), 0x82, 0x2)
r5 = epoll_create1(0x80000)
epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f0000000000)={0x20002000})
epoll_ctl$EPOLL_CTL_MOD(r5, 0x3, r4, &(0x7f0000000080)={0x20002006})

12.128343347s ago: executing program 0 (id=3767):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x22042, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003b80)=[{{&(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000140)="d2492ab07c0f85", 0x7}, {&(0x7f0000000240)="b4343087602952fea004f97b8ee85726f890a357dee907b83f1ee0397339867d782eba3df90699d2b80296882216f2caf3d8809df2b090856314fff13b4351f9d69149e646f08666c210386f9e5da40d44752064d39fbdfa92ca9930453aeb427fecee2ddd6df803366e2a98af2cd2d41f7532cb0dd2aa27056af627b0b21ca28536e5204da7aab69f94aa486a0e4c6f0e14ed05e6e6f4c5f0a4bea5794e0027b819b72644fe2c350aeb350010f57b574ebb71b98c221d926cb01716c7b0e8ffdbde577fe5c09e34da2c6f32d91682eab8335c6b86570908a1b0586f65d2be0a219a8e560a03eb0b92d565c56b7774", 0xef}, {&(0x7f0000000340)="1bfb2f3ca70a0cffd9a704fffb82a9ca796597d4d296d0a4f4be51c178a35011a4d9505b2e9545efd026588cb47f1c3df23c55aaedb0598fad9e9fbf75cbc4840c8e7aef6484f7846640b0a7ff13c063fd43f9af98e702f7666ca88cabc90c6f7a838bb89d332a381134c8c99fde3fea139aa59d5e92c4a68fc8c394a6c57165f04f0091333217d8c970e973c59381322ac74fa29b6afbe01575b38ab326d2b42f6f491bec08711ca32ffd2927eac90b27352bf4d29ac0d42079df6fcf70b2ca848d9579ebad6db0c06490ff905ab9b0e0bf7e515cc4db1da710e75496c71bc5b01c237602637db330ec7b", 0xeb}, {&(0x7f00000004c0)="d340b463380f8b7b170384f1cbbb218cad81f6a1d23a49e7ab6f2a2c845210f8b076597ed0cb7a6715875434e3f4c3a269c41ae7c26be35c2515c8a9b505c47f82f36e64a784a6c4574cce05130ada493177218f53e1d88abc0eb43df549e92cb30d582c8e6cfa3626b6f9d161bf604f690d6de84bcbf8c2977e", 0x7a}], 0x4, &(0x7f00000009c0)=[@cred={{0x18}}, @rights={{0x18, 0x1, 0x1, [r2, r1, r2]}}, @rights={{0x30, 0x1, 0x1, [r1, r0, r2, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, 0xffffffffffffffff, r1]}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}, @rights={{0x20, 0x1, 0x1, [r0, r0, r0, r2, 0xffffffffffffffff]}}, @cred={{0x18, 0x1, 0x2, {0xffffffffffffffff}}}, @cred={{0x18, 0x1, 0x2, {0x0, 0xee00}}}], 0xc8, 0x40000}}], 0x1, 0x4)
unshare(0x60600)
socket(0x40000000015, 0x5, 0x0)
userfaultfd(0x801)
pselect6(0x40, &(0x7f0000000080)={0x6, 0x0, 0x1}, &(0x7f0000000000)={0x1f, 0x0, 0x0, 0x2128, 0x7, 0x0, 0x7}, 0x0, 0x0, 0x0)
r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x1000, 0x0)
ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0xd7)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
getuid()
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socket$kcm(0x2, 0x3, 0x2)
r4 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0)
r5 = userfaultfd(0x1)
ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f00000000c0))
r6 = socket$inet6_sctp(0xa, 0x1, 0x84)
bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
shutdown(r6, 0x0)
sendto$inet6(r6, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendmmsg$sock(r6, &(0x7f0000000380), 0x0, 0x40000)
shutdown(r6, 0x1)
ioctl$UFFDIO_REGISTER(r5, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1})
syz_memcpy_off$KVM_EXIT_HYPERCALL(r4, 0x20, 0x0, 0x0, 0x0)
keyctl$read(0xb, 0x0, &(0x7f0000000b40)=""/4096, 0x1000)
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
syz_open_dev$vivid(&(0x7f0000000000), 0x0, 0x2)

10.568574107s ago: executing program 4 (id=3770):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="400601"], 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)

8.972436944s ago: executing program 0 (id=3776):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0)
fcntl$getownex(r0, 0x10, &(0x7f0000000180)={0x0, <r2=>0x0})
sched_setattr(r2, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000940)}}], 0x2, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94)
socket(0x10, 0x803, 0x0)
r3 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0)
ioctl$VIDIOC_TRY_FMT(r3, 0xc0d05640, &(0x7f0000000040)={0xc, @sliced={0x7, [0x8001, 0x1, 0x7ff, 0x3151, 0x9, 0x7, 0x5, 0x347, 0xfff9, 0x5, 0x4, 0x2, 0x5, 0x140, 0x2, 0x7, 0x3, 0x1, 0x7, 0x2, 0x3, 0x32f, 0xe, 0x6, 0x5, 0x8000, 0x211, 0x7, 0x7, 0x1, 0x10, 0x2, 0xf, 0x74c, 0x57b, 0xa, 0x2770, 0x9260, 0x9ee, 0xe, 0x6, 0xc, 0x6d92, 0x8, 0x7, 0x0, 0x8001, 0x6], 0xb}})
r4 = socket(0x10, 0x80002, 0x0)
sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc4910700004f78d4c1a0731cccff"], 0x1c}}, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x4, 0x1010, 0xffffffffffffffff, 0xdbed000)
recvmmsg$unix(r4, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0)

8.876038587s ago: executing program 3 (id=3777):
r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x4f4, 0x27c, 0x190, 0x0, 0x27c, 0x0, 0x42c, 0x42c, 0x42c, 0x42c, 0x42c, 0x6, 0x0, {[{{@ipv6={@local, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'virt_wifi0\x00', 'veth0_to_bond\x00'}, 0x0, 0xa4, 0xc8, 0x0, {0x7a00000000000000}}, @HL={0x24}}, {{@ipv6={@loopback, @mcast2, [0x0, 0x0, 0xffffffff], [], 'pimreg\x00', 'veth1_macvtap\x00', {}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xc8, 0xec, 0x0, {}, [@inet=@rpfilter={{0x24}, {0x4}}]}, @unspec=@CHECKSUM={0x24}}, {{@ipv6={@private2={0xfc, 0x2, '\x00', 0x1}, @private1, [0xffffffff, 0xffffff00, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'dvmrp1\x00', 'netpci0\x00', {}, {0xff}, 0x3f, 0x9, 0x4, 0x13}, 0x0, 0xa4, 0xc8}, @unspec=@CHECKSUM={0x24}}, {{@uncond, 0x0, 0xa4, 0xe8}, @SNPT={0x44, 'SNPT\x00', 0x0, {@ipv4, @ipv4=@multicast1, 0x80}}}], {{'\x00', 0x0, 0xa4, 0xc8}, {0x24}}}}, 0x550) (fail_nth: 2)

8.16947014s ago: executing program 3 (id=3778):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40)
ioctl$VIDIOC_S_CROP(r0, 0xc0405627, &(0x7f0000000040)={0x1, {0xffff, 0x9, 0x6, 0x75}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r2 = dup(r1)
write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
r4 = dup(r3)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000007, 0x38011, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1)
mmap$IORING_OFF_SQ_RING(&(0x7f000062a000/0x1000)=nil, 0x1000, 0x1000000, 0x12, r4, 0x0)
r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f00000002c0)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x4000}}, 0x0, 0x0, 0x0)
r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r7 = dup(r6)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r7, 0x2000)

8.157024303s ago: executing program 1 (id=3779):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$HIDIOCGRDESC(0xffffffffffffffff, 0x90044802, &(0x7f0000000200)={0x91, "fe799809b15b38670a7d96e5f1f06d163befb527c31f632e66567f957aac8aa393de06ac537573829e8958305cd11c49167e8daf79dc4e00a9685b808231e9c54239eb203f3e41245ed8744931600ba7512de30e083d35a3f30270baef654cb87c2ab3028e4fe2de7a2b863533b7b106a12c6b560aab459a9c0ff88a2ad5f434ecac35ff628d2555fbe2e37b310f945cac"})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x4002004c4, 0x1000], 0xeeee8000, 0x1144})
ioctl$KVM_RUN(r2, 0xae80, 0x28)

7.723283735s ago: executing program 2 (id=3781):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$alg(0x26, 0x5, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff00000000"], 0x0)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

7.512483459s ago: executing program 1 (id=3782):
mkdir(&(0x7f0000000040)='./file0\x00', 0x0)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000180)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}})
read$FUSE(r0, &(0x7f00000077c0)={0x2020, 0x0, <r1=>0x0}, 0x2020)
write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, r1, {0x7, 0x1f}}, 0x50)
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000b00)={&(0x7f0000000280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
fsync(r2)

7.002458972s ago: executing program 0 (id=3783):
r0 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0x4)
pipe(&(0x7f0000019480)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1)
close(r2)
r3 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', <r4=>0x0})
sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0)
splice(r1, 0x0, r2, 0x0, 0x10500, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)={0x40, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x14, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_VALUE={0x4}]}]}, 0x40}}, 0x2008040)
r7 = socket$packet(0x11, 0x3, 0x300)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'bridge0\x00', <r8=>0x0})
bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @remote}, 0x14)
sendto$inet6(r0, &(0x7f0000000280)="0605ee031603480301020200c52cf7c25975e010b02f0800eb2b2ff0dac8897c6b118777faffffff3066100cb600c5471d130a66321a54e7df305f80a88161b6fd8f24286a57c3feffff", 0xfc13, 0x802, 0x0, 0x2f)
r9 = openat$vimc2(0xffffff9c, &(0x7f0000000600), 0x2, 0x0)
ioctl$VIDIOC_ENUM_FMT(r9, 0xc0405602, &(0x7f0000000640)={0x96, 0x9, 0x1, "ea863bdaa1f7f2595f98b3db93cdc344020d9d29a4e9c107626c9c73e0f45082", 0x31424752})
r10 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70022000000090507", @ANYRES32], 0x0)
syz_usb_control_io(r10, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x0, 0x5, 0x1, 'O'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

6.489574172s ago: executing program 4 (id=3784):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x22820, 0x55007}, [@IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x24040840)

6.280508076s ago: executing program 1 (id=3785):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_usb_connect(0x0, 0x5f, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f0000000000), 0x0)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r2 = socket$netlink(0x10, 0x3, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0)

6.205366218s ago: executing program 4 (id=3786):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x509000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'dvmrp0\x00', <r3=>0x0})
bind$packet(r2, &(0x7f0000000140)={0x11, 0x10, r3, 0x1, 0x0, 0x6, @remote}, 0x14)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = dup(0xffffffffffffffff)
write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c)
syz_io_uring_setup(0x72d9, &(0x7f0000000380)={0x0, 0x1ffffa, 0x400, 0x3, 0x0, 0x0, r4}, &(0x7f0000000180)=<r5=>0x0, &(0x7f00000001c0)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x8, 0x0, 0x0, 0x0, &(0x7f00003af000/0x4000)=nil, 0x4000, 0x3})
mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0)
r7 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0)
r8 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0)
sendfile(r8, r7, &(0x7f0000002080)=0x64, 0x23b)
socket$nl_xfrm(0x10, 0x3, 0x6)
socket$pppl2tp(0x18, 0x1, 0x1)
getpid()
socket$nl_xfrm(0x10, 0x3, 0x6)
r9 = socket$inet6(0xa, 0x80003, 0x6)
connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in=@remote, @in6=@dev={0xfe, 0x80, '\x00', 0x14}, 0x40, 0x0, 0x3, 0x400, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x24, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1, 0x1}, {{@in=@private, 0x0, 0x6c}, 0x0, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x3, 0x3, 0x47, 0x0, 0x0, 0xcc}}, 0xe4)
sendmmsg(r9, &(0x7f0000000480), 0x2e9, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x10200, 0x4, 0xffff1000, 0x1000, &(0x7f0000b7b000/0x1000)=nil})
sendmmsg$sock(r2, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@x25={0x9, @remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}}, 0x80, 0x0}}], 0x2, 0x20004874)
r10 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1)
write(0xffffffffffffffff, &(0x7f00000002c0)="fc00000001000704ab5b2509b8680300ab087a0100000001481093210001c0f0030584050060100000000000039815fa2c53c28648000000b9d95662537a00bc000c00f0ff7f0000b400600033d44000040560916a0033f436313012dafd5a32e273fc83ab82d710f74cece0c606f90d435ef8b29d3ef3d92c94170e5bba2e177312e081bea05d3a021e8ca062914a46ccfc510bb73c9455cdc8363ae4f5df7700", 0xa1)
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000002c0)={[0x3c, 0xffffffffffffa3f1, 0x4, 0xd646, 0x7, 0xf, 0x120000, 0x1fe, 0x0, 0x1, 0x4, 0xc7, 0x7fff, 0x101, 0x392ad71a, 0x1], 0xdddd1000, 0x141a54})
ioctl$KVM_SET_VCPU_EVENTS(r10, 0x4400ae8f, &(0x7f0000000140)=@x86={0x1, 0x0, 0x3, 0x0, 0xb85f, 0x3, 0x6, 0x21, 0xe, 0x9, 0x9, 0x2, 0x0, 0x2a, 0x81e, 0x8, 0xe, 0x7, 0x61, '\x00', 0xe, 0x200004})

6.129034256s ago: executing program 2 (id=3787):
socket$nl_netfilter(0x10, 0x3, 0xc)
ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3f})
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0xf, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, 0x0, 0x0)
socket$inet_smc(0x2b, 0x1, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x2881)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, 0x0)
write$sndseq(r2, &(0x7f0000000000), 0x0)
ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x3)
write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a0b0400000000000000000200000044000480400001800a0001006d6174636800000030000280080002400000000118000300c6a41d106c720000f5ffffff2fad0a4883cdbba10a0001006f776e65720000000900010073797a30000000000900020073797a32"], 0x98}}, 0x4048010)
r4 = socket$netlink(0x10, 0x3, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00'})
ioctl$sock_netdev_private(r5, 0x89f7, &(0x7f00000001c0)="4d2bf9c2423a388781d29a7e96cc417a837b7b9f4d949e4db89e5da1006dd1798b21ca5b2787913c9fef90c3d16f1c81c9725185c8734d283a9616b620256f5ce04eacf26da13c903fedd9f81b25b8")
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[], 0x58}}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NL80211_CMD_SET_KEY(r4, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB, @ANYRES16=r6, @ANYBLOB="010029bd7000fedbdf250a0000000c0099000002000054000000050008000100000005000800020000000c006e800400020004000200090007"], 0x48}, 0x1, 0x0, 0x0, 0x40000c0}, 0x80)
sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x70bd29, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0x68315}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x5}]}}}]}, 0x3c}}, 0x0)

4.488651515s ago: executing program 4 (id=3788):
r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0xc}}}}}]}}]}}, 0x0)
syz_io_uring_complete(0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0))
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000100)={0x0, 0x30, 0x57, {0x57, 0x1, "a7ea3163fd3bc518194b120c1e73d54cfc4ad2841ef4f6a3fd7c59ccb785025f2e7b3504ff87cbfd10f3c080b73385a7015d3a32ed6b5217cdbb6fadb2ea7a288982d5337c364daf03bd400d66293b0a2b103dd93f"}}, 0x0, 0x0, 0x0, 0x0}, 0x0)

4.488132787s ago: executing program 0 (id=3789):
r0 = socket$inet_sctp(0x2, 0x5, 0x84)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="60000000010203000000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x40000c4}, 0x8000)
getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0xd, &(0x7f0000000340), &(0x7f000001f200)=0x4)

3.992933757s ago: executing program 0 (id=3790):
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x80002, 0x0)
r0 = syz_open_dev$video(&(0x7f0000000000), 0x7, 0x40)
ioctl$VIDIOC_S_CROP(r0, 0xc0405627, &(0x7f0000000040)={0x1, {0xffff, 0x9, 0x6, 0x75}})
setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x1a, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r1)
syz_io_uring_submit(0x0, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, 0x0, 0x0)
write$rfkill(0xffffffffffffffff, 0x0, 0x0)
syz_usb_connect(0x2, 0x24, 0x0, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000200), 0x4000000004002, 0x0)
mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1000000, 0x4010, r1, 0xf3e4d000)
socket$inet6(0xa, 0x2, 0x0)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x64}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xa}]}], {0x14}}, 0x64}}, 0x0)
r4 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000006, 0x38011, r4, 0x0)
madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x17)
syz_mount_image$fuse(&(0x7f0000000000), &(0x7f00000000c0)='./file0\x00', 0x400, &(0x7f0000000100)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x101}}]}}, 0x0, 0x0, 0x0)
r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0)
r6 = dup(r5)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000)

3.857163837s ago: executing program 3 (id=3791):
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x6c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0x7}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0x4000002}}]}}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}}, {0x4}}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40014}, 0x24010)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0xe8381, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
sendto$inet(0xffffffffffffffff, &(0x7f00000000c0)="8689d46205a34100bf2bbe11a5ce7839edaf02afe39ead95913e9c4f8cf31440006769ebdf12cfacae8e8c03f5db079da7d9", 0x32, 0x0, 0x0, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
getpeername(0xffffffffffffffff, &(0x7f0000000180)=@phonet, &(0x7f0000000240)=0x80)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000200)={0x0, 0x0, 0xf000, 0x2000, &(0x7f0000f9a000/0x2000)=nil})
r3 = dup(r2)
ioctl$KVM_SET_VCPU_EVENTS(r3, 0x4400ae8f, &(0x7f0000000000)=@arm64={0x9, 0xfc, 0x2, '\x00', 0x8001})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000002c0)=0x10000)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 5)

3.160195723s ago: executing program 3 (id=3792):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r2 = openat$nullb(0xffffffffffffff9c, &(0x7f00000001c0), 0x446982, 0x0)
sendfile(r2, r2, 0x0, 0x40008)
sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r3, &(0x7f0000000600)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0)
r4 = accept4(r3, 0x0, 0x0, 0x80000)
sendmsg$alg(r4, 0x0, 0x0)
recvmsg$can_raw(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)=""/103, 0x67}], 0x1}, 0x40010022)
bind$inet6(0xffffffffffffffff, 0x0, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
syz_open_procfs$pagemap(0x0, &(0x7f0000000080))
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
r5 = socket(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r6=>0xffffffffffffffff})
ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', <r7=>0x0})
syz_emit_ethernet(0x12, &(0x7f00000003c0)={@link_local, @link_local, @void, {@llc={0x4, {@llc={0x42, 0x0, "97", '\x00'}}}}}, 0x0)
sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x5, "0000000000050000000500"}}}]}, 0x48}}, 0x0)
close(0x3)
r8 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x39c, 0x94, 0x1bc, 0x94, 0x128, 0x1bc, 0x308, 0x308, 0x308, 0x308, 0x308, 0x6, 0x0, {[{{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00', {}, {0xff}}, 0x0, 0x70, 0x94}, @TTL={0x24}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'netpci0\x00', 'caif0\x00'}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@local, @local, 0x0, 0x0, 'sit0\x00', 'veth0_to_team\x00', {}, {}, 0x11, 0x2}, 0x0, 0x70, 0x94}, @unspec=@CHECKSUM={0x24}}, {{@ip={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'syzkaller0\x00', 'bond0\x00'}, 0x0, 0x70, 0xb8}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ip={@broadcast, @rand_addr, 0x0, 0x0, 'ip6erspan0\x00', 'team_slave_1\x00'}, 0x0, 0x70, 0x94}, @TTL={0x24}}], {{'\x00', 0x0, 0x70, 0x94}, {0x24}}}}, 0x3f8)
openat$audio1(0xffffffffffffff9c, 0x0, 0x68000, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000ac0)=@base={0x6, 0x4, 0x1000, 0xb20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1e7d, 0x2dbe, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2d, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0xa, 0xc, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0xe, 0x0, 0x3}}}}}]}}]}}, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0xf9ba, 0x101)

3.044366386s ago: executing program 1 (id=3793):
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x14, &(0x7f0000000140)={<r1=>0xffffffffffffffff}, 0x106, 0x9}}, 0x20)
write$RDMA_USER_CM_CMD_BIND_IP(r0, &(0x7f0000000040)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0xe24, 0x0, @mcast2, 0x12}, r1}}, 0x30)
write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000180)={0x3, 0x40, 0xfa02, {{0x6000000, 0x4e24, 0x40003, @mcast1}, {0x2, 0xfff9, 0xc00, @remote, 0xffffffff}, r1, 0x9dffffff}}, 0x48)
r2 = socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'dummy0\x00', <r3=>0x0})
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
openat$zero(0xffffffffffffff9c, 0x0, 0x400001, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={<r5=>0xffffffffffffffff, <r6=>0xffffffffffffffff})
connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0)
r7 = userfaultfd(0x801)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0xa031, 0xffffffffffffffff, 0x0)
ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f00000000c0))
ioctl$UFFDIO_REGISTER(r7, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4})
ioctl$UFFDIO_COPY(r7, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000800000/0x800000)=nil, &(0x7f0000339000/0x1000)=nil, 0x800000})
r8 = socket$unix(0x1, 0x1, 0x0)
ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r9=>0x0})
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_route={{0xa}, {0x14, 0x2, [@TCA_ROUTE4_TO={0x8, 0x2, 0x2a}, @TCA_ROUTE4_IIF={0x8, 0x4, r9}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x800)
r10 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route_sched(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x70bd27, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}, 0x1, 0x0, 0x0, 0x4000091}, 0x0)

2.654656744s ago: executing program 2 (id=3794):
r0 = socket$inet_udp(0x2, 0x2, 0x0)
recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000240)=""/252, 0xfc}, {&(0x7f0000000340)=""/241, 0xf1}, {&(0x7f0000000000)=""/45, 0x2d}, {&(0x7f0000000040)=""/49, 0x31}, {&(0x7f00000000c0)=""/25, 0x19}, {&(0x7f0000000440)=""/71, 0x47}], 0x6, &(0x7f00000004c0)=""/42, 0x2a}, 0x7ff}, {{0x0, 0x0, &(0x7f0000002840)=[{&(0x7f0000000500)=""/75, 0x4b}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/104, 0x68}, {&(0x7f0000001600)=""/241, 0xf1}, {&(0x7f0000001700)=""/64, 0x40}, {&(0x7f0000001740)=""/223, 0xdf}, {&(0x7f0000001840)=""/4096, 0x1000}], 0x7, &(0x7f0000002880)=""/76, 0x4c}, 0x6}, {{0x0, 0x0, &(0x7f0000002a00)=[{&(0x7f0000002900)=""/245, 0xf5}], 0x1, &(0x7f0000002a40)=""/206, 0xce}, 0x7}], 0x3, 0x0, &(0x7f0000002bc0))
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000002c00)={{0x1, 0x1, 0x18, <r2=>r0, {0x8, 0x1}}, './file0\x00'})
fanotify_mark(r1, 0x40, 0x0, r2, &(0x7f0000002c40)='./file0\x00')
r3 = socket(0x10, 0x3, 0x0)
sendmsg$can_bcm(r3, &(0x7f0000000200)={&(0x7f0000000080), 0x10, &(0x7f0000000100)={&(0x7f0000000180)={0x5, 0x0, 0x1, {0x77359400}, {}, {0x4, 0x0, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x12, 0x0, 0x0, 0x0, "ad331077b530dc256f5a12fe6d2d8b825b42ab9560783364bc8d8465e301d540ead9d26602ff56ce87a365174a851685f209a3082b692cc66ce9bb2da4c9ec63"}}, 0x6c}, 0x1, 0x0, 0x0, 0x22008800}, 0x40000)

2.281035084s ago: executing program 4 (id=3795):
socketpair$unix(0x1, 0x0, 0x0, &(0x7f00000000c0))
r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x30, 0x39, 0x20, 0x2c42, 0x1202, 0x8540, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xc, 0x2, 0x1, 0xc1, 0x7f, 0xc, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, &(0x7f0000000b00)=ANY=[@ANYBLOB="400601"], 0x0, 0x0, 0x0, 0x0})
socket$nl_route(0x10, 0x3, 0x0)

1.524582033s ago: executing program 2 (id=3796):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newlink={0x28, 0x10, 0x403, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x74, r1, 0x22820, 0x55007}, [@IFLA_TXQLEN={0x8, 0xd, 0x7d631b68}]}, 0x28}, 0x1, 0x0, 0x0, 0x15}, 0x24040840)

1.447428051s ago: executing program 1 (id=3797):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$alg(0x26, 0x5, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff00000000"], 0x0)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

1.368400855s ago: executing program 2 (id=3798):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0)
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000"], 0x0)
connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r2, 0xae80, 0x0)

840.578096ms ago: executing program 1 (id=3799):
r0 = syz_open_dev$loop(&(0x7f0000000100), 0xd79, 0x0)
r1 = socket$isdn(0x22, 0x3, 0x25)
getsockopt$MISDN_TIME_STAMP(r1, 0x0, 0x1, &(0x7f0000000040), &(0x7f00000001c0)=0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b4050000000000006910a40000000000bc001000000000009500000000000000ef4f7c81f5427c16bd2aacf32cdbb47063fd9a7bb1f3ad622c3261f324e081c0ea39bd16d9869302cc08fbd94867708cb208e22cc0ad536525e3b39869285c126353f6a49bc5abc6b9a4eab313655286ee33a56f03b665dd5f1739bda6accc3b9b0d26450d3161263aed01194269a5fba4553bb18fa1f37e2f68a8ef81f090829d0ee04b52611a41642b31a6fe2653171379cc327fc11e38418b589777f8c8ddcbf88df947a05937ea"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48)
write$char_usb(r2, &(0x7f0000000180)="ab9038fc2fca54a48785970a180000007a88365c94e37136531dc09bb8d825f0748ebf2b08", 0x25)
write$UHID_INPUT(r2, &(0x7f0000000400)={0x8, {"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", 0x1000}}, 0x1006)
ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab780ef39fa3910d96072000001ea800000000fdffffff0000faffffffffffffff00", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac000000000000000000000000001700", "90be8bf4bd00000000000000000000000000001000"}})

510.017806ms ago: executing program 2 (id=3800):
socket$packet(0x11, 0x3, 0x300)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080))
socket$alg(0x26, 0x5, 0x0)
getsockopt$IP_SET_OP_GET_BYINDEX(0xffffffffffffffff, 0x1, 0x53, &(0x7f0000000100)={0x7, 0x7, 0x6}, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000002100)='numa_maps\x00')
syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6016000000102b00fc0100000000000000e2ff0000"], 0x0)
connect$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0xa}, 0x20)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x300}, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000180)="66b80e010f00d0b0060f21a20f01c40f009b2700000066b80c008ee00f3235008000000f30b80e0000000f23d80f21f835800000a00f23f8c9b9490300000f60b932c00a00b9730200000f32328fe858b660002fb90d090000b800680000ba000000000f30", 0x65}], 0x1, 0x0, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140))
ioctl$KVM_RUN(r3, 0xae80, 0x0)

353.839687ms ago: executing program 0 (id=3801):
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file0\x00', 0x1c0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x1c0)
r0 = landlock_create_ruleset(&(0x7f0000000180)={0x100}, 0x18, 0x0)
r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000200)={0x100, r1}, 0x0)
r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000280)={0x100, r2}, 0x0)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file1\x00', 0x200000, 0x0)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r0, 0x1, &(0x7f0000000340)={0x100, r3}, 0x0)
landlock_restrict_self(r0, 0x0) (fail_nth: 5)

224.295406ms ago: executing program 3 (id=3802):
capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x9, 0x0, 0x81, 0xffffffff})
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000002c0)={'ip6tnl0\x00', <r1=>0x0, 0x2f, 0x1, 0x1, 0x4, 0x0, @dev={0xfe, 0x80, '\x00', 0x20}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x7, 0x6, 0x4}})
r2 = openat(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0)
getdents64(r2, 0x0, 0x11)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f00000003c0)={0x0, <r3=>0x0}, 0x8)
r4 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x102, 0x0)
read$FUSE(r4, &(0x7f0000002240)={0x2020}, 0x2020)
writev(r4, &(0x7f0000001080)=[{&(0x7f0000002080)='T01\n', 0x4}, {&(0x7f0000001440)="c5674dc9fbeb539005273e1eed7253e4be757abea2c83242749b0763fe9d53f2315853998dd21f751d3c5712352fb6", 0x2f}], 0x2)
syz_io_uring_setup(0x669e, &(0x7f0000000180)={0x0, 0x237, 0x8, 0x0, 0x5, 0x0, r4}, &(0x7f0000000100), &(0x7f00000000c0))
r5 = syz_open_procfs(0x0, &(0x7f00000002c0)='fdinfo\x00')
openat$ubi_ctrl(0xffffff9c, &(0x7f0000000680), 0x80000, 0x0)
getdents64(r5, &(0x7f0000002440)=""/181, 0xb5)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={0x1, <r6=>0xffffffffffffffff}, 0x4)
r7 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@o_path={&(0x7f0000000440)='./file0\x00', 0x0, 0x10, r0}, 0x14)
bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, <r8=>0xffffffffffffffff}, 0x4)
bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x12, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101}, {}, {}, [@tail_call, @ldst={0x0, 0x2, 0x4, 0x7, 0x3, 0x18, 0xfffffffffffffffc}, @exit, @ldst={0x3, 0x1, 0x6, 0x4, 0x0, 0x2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0xff5, 0x0, 0x0, 0x41100, 0x62, '\x00', r1, @fallback=0x2f, r2, 0x8, &(0x7f0000000340)={0xa, 0x5}, 0x8, 0x10, &(0x7f0000000380)={0x3, 0x1, 0x6, 0x1}, 0x10, r3, r4, 0x8, &(0x7f0000000500)=[0x1, r5, r6, 0x1, 0xffffffffffffffff, r7, 0xffffffffffffffff, r8, 0x1], &(0x7f0000000540)=[{0x5, 0x2, 0x7}, {0x1, 0x2, 0x5, 0x1}, {0x0, 0x3, 0x4, 0x9}, {0x2, 0x1, 0x7, 0xb}, {0x5, 0x2, 0xf, 0xa}, {0x1, 0x3, 0x9, 0x9}, {0x5, 0x1, 0x4, 0x3}, {0x4, 0x5, 0xf, 0x6}], 0x10, 0x3, @void, @value}, 0x94)
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
openat$dlm_monitor(0xffffff9c, &(0x7f00000006c0), 0x4401c0, 0x0)
listen(r0, 0x0)
r9 = socket$netlink(0x10, 0x3, 0x8000000004)
writev(r9, &(0x7f0000000080)=[{&(0x7f0000000200)="a10100001400add427323b470c45b45602067fffffff81004e22000d00ff0028925aa80020007b00090080000efffeffe809000000ff0000f03ac7100003ffffffffffffffffffffffe7ee00000000000000000200000000", 0x1a1}], 0x1)

0s ago: executing program 3 (id=3803):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r1 = socket$kcm(0x2, 0xa, 0x2)
ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
write$tun(r0, &(0x7f0000000040)={@val={0x1c, 0x800}, @val={0x1, 0x3, 0x0, 0x3, 0x34}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0xa00, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x0, 0x14, 0x0, 0x1c}, {"624b41ddb4cad21deaf2057596586e437d815b27"}}}}}, 0x4a)

kernel console output (not intermixed with test programs):

 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2078.764383][T21980] team0: Port device team_slave_1 removed
[ 2078.781449][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2078.788974][T17683] usb 2-1: Manufacturer: syz
[ 2078.796424][    T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2078.806822][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2078.831803][T17683] usb 2-1: SerialNumber: syz
[ 2078.848896][T21980] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2078.859191][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2078.872076][T17683] usb 2-1: config 0 descriptor??
[ 2078.881578][    T9] usb 5-1: config 0 descriptor??
[ 2078.888296][T21993] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 2078.908012][T21980] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2078.921209][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2078.940973][T21980] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2078.973950][T21980] bond0: (slave wlan1): Releasing backup interface
[ 2078.981285][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2078.982582][T21980] mac80211_hwsim hwsim4 wlan1: left promiscuous mode
[ 2079.068619][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2079.168716][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2079.200955][T14680] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2079.209419][T19022] mceusb 1-1:0.0: Error: mce write urb status = -71
[ 2079.212052][T14680] usb 4-1: unable to read config index 0 descriptor/start: -71
[ 2079.231942][T19022] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2079.256258][T19022] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2079.259342][T14680] usb 4-1: can't read configurations, error -71
[ 2079.306247][T21991] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3508'.
[ 2079.451682][T21991] bond66: entered promiscuous mode
[ 2079.457031][T21991] bond66: entered allmulticast mode
[ 2079.467388][T21991] 8021q: adding VLAN 0 to HW filter on device bond66
[ 2079.493794][T21993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2079.513346][T21993] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2079.557037][T19022] usb 1-1: USB disconnect, device number 116
[ 2079.614002][    T9] elan 0003:04F3:0755.0010: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[ 2081.731051][T19022] usb 5-1: USB disconnect, device number 77
[ 2081.775113][T19206] usb 2-1: USB disconnect, device number 81
[ 2081.828352][T22026] FAULT_INJECTION: forcing a failure.
[ 2081.828352][T22026] name failslab, interval 1, probability 0, space 0, times 0
[ 2081.895077][T19022] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 2081.932532][T22026] CPU: 1 UID: 0 PID: 22026 Comm: syz.2.3518 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2081.932562][T22026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2081.932575][T22026] Call Trace:
[ 2081.932584][T22026]  <TASK>
[ 2081.932594][T22026]  dump_stack_lvl+0x241/0x360
[ 2081.932634][T22026]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2081.932664][T22026]  ? __pfx__printk+0x10/0x10
[ 2081.932697][T22026]  ? __pfx___might_resched+0x10/0x10
[ 2081.932729][T22026]  should_fail_ex+0x424/0x570
[ 2081.932757][T22026]  should_failslab+0xac/0x100
[ 2081.932792][T22026]  __kmalloc_noprof+0xdf/0x4d0
[ 2081.932822][T22026]  ? landlock_merge_ruleset+0xcf/0x900
[ 2081.932849][T22026]  landlock_merge_ruleset+0xcf/0x900
[ 2081.932874][T22026]  ? prepare_creds+0x4d2/0x6f0
[ 2081.932908][T22026]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2081.932936][T22026]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2081.932967][T22026]  __do_fast_syscall_32+0xb4/0x110
[ 2081.932993][T22026]  ? exc_page_fault+0x5f8/0x920
[ 2081.933022][T22026]  do_fast_syscall_32+0x34/0x80
[ 2081.933048][T22026]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2081.933074][T22026] RIP: 0023:0xf7f83579
[ 2081.933092][T22026] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2081.933110][T22026] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 2081.933133][T22026] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2081.933148][T22026] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2081.933161][T22026] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2081.933173][T22026] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2081.933190][T22026] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2081.933219][T22026]  </TASK>
[ 2082.186397][T22030] veth1_to_batadv: entered promiscuous mode
[ 2082.209869][T19022] usb 5-1: Using ep0 maxpacket: 32
[ 2082.216673][T19022] usb 5-1: config 0 has an invalid interface number: 149 but max is 0
[ 2082.226130][T19022] usb 5-1: config 0 has no interface number 0
[ 2082.234581][T19022] usb 5-1: New USB device found, idVendor=0c72, idProduct=0013, bcdDevice=44.19
[ 2082.244201][T19022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2082.252330][T19022] usb 5-1: Product: syz
[ 2082.256678][T19022] usb 5-1: Manufacturer: syz
[ 2082.261300][T19022] usb 5-1: SerialNumber: syz
[ 2082.295733][T19022] usb 5-1: config 0 descriptor??
[ 2082.449934][T16751] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 2082.533200][T19022] peak_usb 5-1:0.149 can0: unable to request usb[type=0 value=1] err=-71
[ 2082.545960][T19022] peak_usb 5-1:0.149: unable to read PCAN-Chip USB firmware info (err -71)
[ 2082.650787][T16751] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2082.667635][T16751] usb 3-1: config 0 interface 0 altsetting 129 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2082.680043][T16751] usb 3-1: config 0 interface 0 altsetting 129 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2082.695178][T16751] usb 3-1: config 0 interface 0 has no altsetting 0
[ 2082.704007][T19022] peak_usb 5-1:0.149: probe with driver peak_usb failed with error -71
[ 2082.717873][T16751] usb 3-1: New USB device found, idVendor=258a, idProduct=0036, bcdDevice= 0.00
[ 2082.738090][T19022] usb 5-1: USB disconnect, device number 78
[ 2082.747567][T16751] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2082.780092][T16751] usb 3-1: config 0 descriptor??
[ 2082.805897][T22035] (unnamed net_device) (uninitialized): option ad_select: invalid value (255)
[ 2083.089411][T14680] usb 4-1: new high-speed USB device number 6 using dummy_hcd
[ 2083.229644][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.237414][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.269389][T14680] usb 4-1: Using ep0 maxpacket: 16
[ 2083.275437][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.351270][T14680] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2083.361884][T14680] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2083.385776][T14680] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2083.477394][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.508956][T14680] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2083.511607][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.535699][T14680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2083.543980][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.558902][T16751] glorious 0003:258A:0036.0011: unknown main item tag 0x0
[ 2083.563530][T14680] usb 4-1: Product: syz
[ 2083.597887][T14680] usb 4-1: Manufacturer: syz
[ 2083.608546][T16751] glorious 0003:258A:0036.0011: hidraw0: USB HID v0.00 Device [Glorious Model O] on usb-dummy_hcd.2-1/input0
[ 2083.745509][T14680] usb 4-1: SerialNumber: syz
[ 2083.785466][T22044] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2083.826367][T22044] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2084.108767][T22046] FAULT_INJECTION: forcing a failure.
[ 2084.108767][T22046] name failslab, interval 1, probability 0, space 0, times 0
[ 2084.144879][T22046] CPU: 1 UID: 0 PID: 22046 Comm: syz.1.3524 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2084.144913][T22046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2084.144927][T22046] Call Trace:
[ 2084.144936][T22046]  <TASK>
[ 2084.144947][T22046]  dump_stack_lvl+0x241/0x360
[ 2084.144987][T22046]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2084.145018][T22046]  ? __pfx__printk+0x10/0x10
[ 2084.145052][T22046]  ? __pfx___might_resched+0x10/0x10
[ 2084.145084][T22046]  should_fail_ex+0x424/0x570
[ 2084.145132][T22046]  should_failslab+0xac/0x100
[ 2084.145167][T22046]  kmem_cache_alloc_noprof+0x78/0x390
[ 2084.145209][T22046]  ? alloc_empty_file+0x56/0x1d0
[ 2084.145248][T22046]  alloc_empty_file+0x56/0x1d0
[ 2084.145282][T22046]  path_openat+0x10d/0x35d0
[ 2084.145311][T22046]  ? stack_trace_save+0x11a/0x1d0
[ 2084.145341][T22046]  ? __pfx_kstrtoull+0x10/0x10
[ 2084.145366][T22046]  ? __pfx_stack_trace_save+0x10/0x10
[ 2084.145400][T22046]  ? stack_depot_save_flags+0x44/0x940
[ 2084.145433][T22046]  ? kasan_save_track+0x51/0x80
[ 2084.145517][T22046]  ? kasan_save_track+0x3f/0x80
[ 2084.145539][T22046]  ? __kasan_slab_alloc+0x66/0x80
[ 2084.145563][T22046]  ? kmem_cache_alloc_noprof+0x1e1/0x390
[ 2084.145591][T22046]  ? getname_flags+0xb6/0x530
[ 2084.145622][T22046]  ? __pfx_path_openat+0x10/0x10
[ 2084.145644][T22046]  ? do_fast_syscall_32+0x34/0x80
[ 2084.145670][T22046]  ? entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2084.145718][T22046]  do_filp_open+0x284/0x4e0
[ 2084.145746][T22046]  ? __pfx_do_filp_open+0x10/0x10
[ 2084.145767][T22046]  ? do_raw_spin_lock+0x151/0x370
[ 2084.145835][T22046]  do_sys_openat2+0x12b/0x1d0
[ 2084.145871][T22046]  ? __pfx_do_sys_openat2+0x10/0x10
[ 2084.145900][T22046]  ? __fget_files+0x2a/0x420
[ 2084.145923][T22046]  ? __fget_files+0x2a/0x420
[ 2084.145951][T22046]  __ia32_compat_sys_openat+0x241/0x290
[ 2084.145976][T22046]  ? __pfx___ia32_compat_sys_openat+0x10/0x10
[ 2084.146005][T22046]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2084.146031][T22046]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2084.146059][T22046]  __do_fast_syscall_32+0xb4/0x110
[ 2084.146085][T22046]  ? exc_page_fault+0x5f8/0x920
[ 2084.146131][T22046]  do_fast_syscall_32+0x34/0x80
[ 2084.146157][T22046]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2084.146182][T22046] RIP: 0023:0xf7f31579
[ 2084.146201][T22046] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2084.146220][T22046] RSP: 002b:00000000f5056100 EFLAGS: 00000206 ORIG_RAX: 0000000000000127
[ 2084.146243][T22046] RAX: ffffffffffffffda RBX: 00000000ffffff9c RCX: 00000000f5056150
[ 2084.146258][T22046] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000f73bdff4
[ 2084.146272][T22046] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2084.146285][T22046] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2084.146299][T22046] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2084.146330][T22046]  </TASK>
[ 2084.465119][T22044] random: crng reseeded on system resumption
[ 2085.114662][T16751] usb 2-1: new full-speed USB device number 82 using dummy_hcd
[ 2085.281718][T16751] usb 2-1: config index 0 descriptor too short (expected 50953, got 9)
[ 2085.291551][T16751] usb 2-1: config 175 has too many interfaces: 149, using maximum allowed: 32
[ 2085.332608][T16751] usb 2-1: config 175 has 0 interfaces, different from the descriptor's value: 149
[ 2085.379149][T16751] usb 2-1: New USB device found, idVendor=249c, idProduct=171c, bcdDevice=c5.9a
[ 2085.388631][T16751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2085.417820][T16751] usb 2-1: Product: syz
[ 2085.433436][T16751] usb 2-1: Manufacturer: syz
[ 2085.462421][T16751] usb 2-1: SerialNumber: syz
[ 2085.707741][T22048] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2085.753884][T22048] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2085.841700][T14680] usbhid 4-1:1.0: can't add hid device: -71
[ 2085.878285][T14680] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 2085.941589][T14680] usb 4-1: USB disconnect, device number 6
[ 2085.985714][T19022] usb 3-1: USB disconnect, device number 98
[ 2086.459856][T14680] usb 4-1: new high-speed USB device number 7 using dummy_hcd
[ 2086.753958][T14680] usb 4-1: config 0 has no interfaces?
[ 2087.092695][T14680] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2087.188983][T14680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2087.336596][T14680] usb 4-1: Product: syz
[ 2087.346648][T14680] usb 4-1: Manufacturer: syz
[ 2087.357701][T14680] usb 4-1: SerialNumber: syz
[ 2087.372820][T14680] usb 4-1: config 0 descriptor??
[ 2087.688752][T22060] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3529'.
[ 2087.700489][T14680] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 2087.864005][T14680] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2087.902334][T14680] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2087.955438][T14680] usb 3-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2087.967261][T14680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2087.987794][T14680] usb 3-1: config 0 descriptor??
[ 2088.048822][T16751] usb 2-1: USB disconnect, device number 82
[ 2088.106357][T22071] bond53: entered promiscuous mode
[ 2088.111917][T22071] bond53: entered allmulticast mode
[ 2088.117732][T22071] 8021q: adding VLAN 0 to HW filter on device bond53
[ 2088.344808][T19022] usb 3-1: USB disconnect, device number 99
[ 2089.299418][T19022] usb 1-1: new high-speed USB device number 117 using dummy_hcd
[ 2089.429853][T14680] usb 4-1: USB disconnect, device number 7
[ 2089.489620][T19022] usb 1-1: Using ep0 maxpacket: 32
[ 2089.497543][T19022] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 194, changing to 11
[ 2089.519568][T19022] usb 1-1: config 1 interface 0 altsetting 8 endpoint 0x2 has an invalid bInterval 20, changing to 8
[ 2089.537509][T19022] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2089.562029][T19022] usb 1-1: New USB device found, idVendor=04d9, idProduct=a081, bcdDevice= 0.40
[ 2089.599445][T19022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2089.611632][T19022] usb 1-1: Product: á �
[ 2089.615918][T19022] usb 1-1: Manufacturer: 氼얈喾⪣곮＋﷿閅
[ 2089.624221][T19022] usb 1-1: SerialNumber: syz
[ 2089.855409][T19022] usbhid 1-1:1.0: can't add hid device: -71
[ 2089.861618][T19022] usbhid 1-1:1.0: probe with driver usbhid failed with error -71
[ 2089.965495][T19022] usb 1-1: USB disconnect, device number 117
[ 2090.211704][T22090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2090.449610][T19022] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 2090.531907][T16751] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[ 2090.550035][T22094] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3538'.
[ 2090.619530][T19022] usb 5-1: Using ep0 maxpacket: 16
[ 2090.640464][T19022] usb 5-1: unable to get BOS descriptor or descriptor too short
[ 2090.658674][T19022] usb 5-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2090.677514][T19022] usb 5-1: config 1 interface 0 has no altsetting 0
[ 2090.699940][T22094] vxcan3: entered promiscuous mode
[ 2090.708554][T19022] usb 5-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2090.719062][T19022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2090.732206][T19022] usb 5-1: Product: syz
[ 2090.739032][T16751] usb 3-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62
[ 2090.749239][T16751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2090.765079][T19022] usb 5-1: Manufacturer: syz
[ 2090.772220][T16751] usb 3-1: Product: syz
[ 2090.776417][T16751] usb 3-1: Manufacturer: syz
[ 2090.783844][T19022] usb 5-1: SerialNumber: syz
[ 2090.795525][T16751] usb 3-1: SerialNumber: syz
[ 2090.875862][T16751] usb 3-1: config 0 descriptor??
[ 2091.002169][T16751] usb 3-1: selecting invalid altsetting 3
[ 2091.010860][T14680] usb 4-1: new high-speed USB device number 8 using dummy_hcd
[ 2091.044668][T16751] comedi comedi0: could not set alternate setting 3 in high speed
[ 2091.112242][T16751] usbdux 3-1:0.0: driver 'usbdux' failed to auto-configure device.
[ 2091.140156][T16751] usbdux 3-1:0.0: probe with driver usbdux failed with error -22
[ 2091.179766][T14680] usb 4-1: Using ep0 maxpacket: 16
[ 2091.188060][T14680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2091.201666][T14680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2091.220636][T16751] usb 3-1: USB disconnect, device number 100
[ 2091.225345][T14680] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2091.345757][T14680] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2091.369649][T19206] usb 1-1: new full-speed USB device number 118 using dummy_hcd
[ 2091.398569][T14680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2091.448157][T14680] usb 4-1: config 0 descriptor??
[ 2091.533488][T19206] usb 1-1: config index 0 descriptor too short (expected 50953, got 9)
[ 2091.546596][T19206] usb 1-1: config 175 has too many interfaces: 149, using maximum allowed: 32
[ 2091.570150][T19206] usb 1-1: config 175 has 0 interfaces, different from the descriptor's value: 149
[ 2091.616521][T22113] fuse: Bad value for 'fd'
[ 2091.624605][T19206] usb 1-1: New USB device found, idVendor=249c, idProduct=171c, bcdDevice=c5.9a
[ 2091.635641][T19206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2091.670679][T19206] usb 1-1: Product: syz
[ 2091.738764][T19206] usb 1-1: Manufacturer: syz
[ 2091.788267][T19206] usb 1-1: SerialNumber: syz
[ 2091.998096][T14680] usbhid 4-1:0.0: can't add hid device: -71
[ 2092.025379][T14680] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2092.111014][T22107] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2092.133716][T22107] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2092.152551][T14680] usb 4-1: USB disconnect, device number 8
[ 2092.720252][T14680] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 2092.884949][T14680] usb 3-1: config 0 has no interfaces?
[ 2092.913777][T14680] usb 3-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 2092.936889][T14680] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2092.966396][T14680] usb 3-1: Product: syz
[ 2092.976737][T14680] usb 3-1: Manufacturer: syz
[ 2092.991910][T14680] usb 3-1: SerialNumber: syz
[ 2093.054902][T14680] usb 3-1: config 0 descriptor??
[ 2093.210719][T22122] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'.
[ 2093.294577][T14680] usb 3-1: USB disconnect, device number 101
[ 2093.771011][T19022] usbhid 5-1:1.0: can't add hid device: -71
[ 2093.777534][T19022] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 2093.829685][T19022] usb 5-1: USB disconnect, device number 79
[ 2094.198083][T19206] usb 1-1: USB disconnect, device number 118
[ 2094.386024][T22134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3553'.
[ 2094.433807][T22134] sctp: [Deprecated]: syz.0.3553 (pid 22134) Use of int in maxseg socket option.
[ 2094.433807][T22134] Use struct sctp_assoc_value instead
[ 2095.051241][T14680] usb 4-1: new high-speed USB device number 9 using dummy_hcd
[ 2095.209451][T14680] usb 4-1: Using ep0 maxpacket: 32
[ 2095.218312][T14680] usb 4-1: config 0 has an invalid interface number: 12 but max is 0
[ 2095.229815][T19206] usb 1-1: new high-speed USB device number 119 using dummy_hcd
[ 2095.253764][T14680] usb 4-1: config 0 has no interface number 0
[ 2095.295100][T14680] usb 4-1: config 0 interface 12 has no altsetting 0
[ 2095.315316][T14680] usb 4-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2095.492313][T19206] usb 1-1: Using ep0 maxpacket: 32
[ 2095.494069][T14680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.517358][T19206] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[ 2095.525621][T14680] usb 4-1: Product: syz
[ 2095.525645][T14680] usb 4-1: Manufacturer: syz
[ 2095.525662][T14680] usb 4-1: SerialNumber: syz
[ 2095.530564][T14680] usb 4-1: config 0 descriptor??
[ 2095.616781][T19206] usb 1-1: config 0 has no interface number 0
[ 2095.640571][    T9] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 2095.662054][T19206] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[ 2095.707906][T19206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.777343][T19206] usb 1-1: Product: syz
[ 2095.819427][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 2095.829310][T19206] usb 1-1: Manufacturer: syz
[ 2095.848368][    T9] usb 3-1: unable to get BOS descriptor or descriptor too short
[ 2095.851123][T19206] usb 1-1: SerialNumber: syz
[ 2095.865264][    T9] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2095.884255][T19206] usb 1-1: config 0 descriptor??
[ 2095.887024][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[ 2095.900779][T19206] smsc95xx v2.0.0
[ 2095.916728][    T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2095.926078][T17683] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 2095.934172][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2095.943850][    T9] usb 3-1: Product: syz
[ 2095.948228][    T9] usb 3-1: Manufacturer: syz
[ 2095.958607][    T9] usb 3-1: SerialNumber: syz
[ 2096.012777][T14680] f81534 4-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 2096.028805][T14680] f81534 4-1:0.12: f81534_find_config_idx: read failed: -71
[ 2096.036985][T14680] f81534 4-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2096.055764][T14680] f81534 4-1:0.12: probe with driver f81534 failed with error -71
[ 2096.077070][T14680] usb 4-1: USB disconnect, device number 9
[ 2096.091615][T17683] usb 5-1: config 0 has no interfaces?
[ 2096.102341][T17683] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 2096.128297][T17683] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2096.158084][T17683] usb 5-1: Product: syz
[ 2096.174419][T17683] usb 5-1: Manufacturer: syz
[ 2096.185374][T17683] usb 5-1: SerialNumber: syz
[ 2096.233975][T17683] usb 5-1: config 0 descriptor??
[ 2096.502872][T14680] usb 5-1: USB disconnect, device number 80
[ 2097.986722][T22145] delete_channel: no stack
[ 2098.098581][T19206] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -71
[ 2098.330598][    T9] usbhid 3-1:1.0: can't add hid device: -71
[ 2098.336626][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 2098.374108][T19206] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 2098.385515][    T9] usb 3-1: USB disconnect, device number 102
[ 2098.443695][T19206] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71
[ 2098.492569][T19206] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71
[ 2098.566079][T19206] usb 1-1: USB disconnect, device number 119
[ 2098.749596][T19022] usb 5-1: new low-speed USB device number 81 using dummy_hcd
[ 2098.912756][T19022] usb 5-1: Invalid ep0 maxpacket: 32
[ 2099.049416][T19022] usb 5-1: new low-speed USB device number 82 using dummy_hcd
[ 2099.219436][T19022] usb 5-1: Invalid ep0 maxpacket: 32
[ 2099.227061][T19022] usb usb5-port1: attempt power cycle
[ 2099.252851][T19206] usb 1-1: new high-speed USB device number 120 using dummy_hcd
[ 2099.413261][T19206] usb 1-1: config 0 has no interfaces?
[ 2099.431020][T19206] usb 1-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 2099.444131][T19206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2099.463301][T19206] usb 1-1: Product: syz
[ 2099.474744][T19206] usb 1-1: Manufacturer: syz
[ 2099.515811][T19206] usb 1-1: SerialNumber: syz
[ 2099.545287][T19206] usb 1-1: config 0 descriptor??
[ 2099.579376][T19022] usb 5-1: new low-speed USB device number 83 using dummy_hcd
[ 2099.610144][T19022] usb 5-1: Invalid ep0 maxpacket: 32
[ 2099.679176][T22203] veth0_to_bridge: entered promiscuous mode
[ 2099.739604][T19022] usb 5-1: new low-speed USB device number 84 using dummy_hcd
[ 2099.761540][T22202] veth0_to_bridge: left promiscuous mode
[ 2099.768410][T19022] usb 5-1: Invalid ep0 maxpacket: 32
[ 2099.782500][T19022] usb usb5-port1: unable to enumerate USB device
[ 2099.809436][T19022] usb 1-1: USB disconnect, device number 120
[ 2100.034564][T22210] vlan0: entered promiscuous mode
[ 2100.179781][T19206] usb 3-1: new high-speed USB device number 103 using dummy_hcd
[ 2100.319415][T19206] usb 3-1: device descriptor read/64, error -71
[ 2100.579564][T19206] usb 3-1: new high-speed USB device number 104 using dummy_hcd
[ 2100.722755][T19206] usb 3-1: device descriptor read/64, error -71
[ 2100.744911][T22220] fuse: Bad value for 'fd'
[ 2100.849883][T19206] usb usb3-port1: attempt power cycle
[ 2101.066921][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 2101.085590][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 2101.096020][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 2101.105476][T22226] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 2101.114518][T22226] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3585'.
[ 2101.216111][T19206] usb 3-1: new high-speed USB device number 105 using dummy_hcd
[ 2101.242026][T19206] usb 3-1: device descriptor read/8, error -71
[ 2101.361271][T19022] usb 2-1: new high-speed USB device number 83 using dummy_hcd
[ 2101.479504][T19206] usb 3-1: new high-speed USB device number 106 using dummy_hcd
[ 2101.510943][T19206] usb 3-1: device descriptor read/8, error -71
[ 2101.542681][T19022] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2101.577074][T19022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2101.614975][T19022] usb 2-1: Product: syz
[ 2101.623653][T19206] usb usb3-port1: unable to enumerate USB device
[ 2101.630346][T19022] usb 2-1: Manufacturer: syz
[ 2101.638896][T19022] usb 2-1: SerialNumber: syz
[ 2101.684481][T19022] usb 2-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2101.827154][T19206] usb 2-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2102.369417][    T9] usb 5-1: new full-speed USB device number 85 using dummy_hcd
[ 2102.525732][    T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2102.570462][    T9] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2102.602289][T22242] FAULT_INJECTION: forcing a failure.
[ 2102.602289][T22242] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2102.616245][    T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2102.635650][    T9] usb 5-1: config 0 descriptor??
[ 2102.642771][T22242] CPU: 0 UID: 0 PID: 22242 Comm: syz.3.3590 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2102.642802][T22242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2102.642816][T22242] Call Trace:
[ 2102.642824][T22242]  <TASK>
[ 2102.642834][T22242]  dump_stack_lvl+0x241/0x360
[ 2102.642879][T22242]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2102.642911][T22242]  ? __pfx__printk+0x10/0x10
[ 2102.642954][T22242]  should_fail_ex+0x424/0x570
[ 2102.642983][T22242]  _copy_to_user+0x31/0xb0
[ 2102.643016][T22242]  simple_read_from_buffer+0xc4/0x170
[ 2102.643053][T22242]  proc_fail_nth_read+0x1ef/0x260
[ 2102.643081][T22242]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2102.643116][T22242]  ? rw_verify_area+0x246/0x630
[ 2102.643139][T22242]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2102.643162][T22242]  vfs_read+0x21f/0xb90
[ 2102.643192][T22242]  ? __pfx___mutex_lock+0x10/0x10
[ 2102.643219][T22242]  ? __pfx_vfs_read+0x10/0x10
[ 2102.643248][T22242]  ? __fget_files+0x2a/0x420
[ 2102.643270][T22242]  ? __fget_files+0x39d/0x420
[ 2102.643288][T22242]  ? __fget_files+0x2a/0x420
[ 2102.643319][T22242]  ksys_read+0x19d/0x2d0
[ 2102.643345][T22242]  ? __pfx_ksys_read+0x10/0x10
[ 2102.643373][T22242]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2102.643399][T22242]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2102.643428][T22242]  __do_fast_syscall_32+0xb4/0x110
[ 2102.643454][T22242]  ? exc_page_fault+0x5f8/0x920
[ 2102.643484][T22242]  do_fast_syscall_32+0x34/0x80
[ 2102.643510][T22242]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2102.643548][T22242] RIP: 0023:0xf73fd579
[ 2102.643566][T22242] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2102.643584][T22242] RSP: 002b:00000000f5086590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2102.643607][T22242] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5086620
[ 2102.643622][T22242] RDX: 000000000000000f RSI: 00000000f73edff4 RDI: 0000000000000000
[ 2102.643635][T22242] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2102.643647][T22242] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2102.643659][T22242] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2102.643689][T22242]  </TASK>
[ 2102.644528][T22235] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2102.712547][T19022] usb 2-1: USB disconnect, device number 83
[ 2102.941292][T19206] ath9k_htc 2-1:1.0: ath9k_htc: Target is unresponsive
[ 2102.989654][T19206] ath9k_htc: Failed to initialize the device
[ 2103.066416][T19022] usb 2-1: ath9k_htc: USB layer deinitialized
[ 2103.399440][T17683] usb 4-1: new high-speed USB device number 10 using dummy_hcd
[ 2103.442412][   T30] audit: type=1326 audit(1744271897.129:245): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.541272][   T30] audit: type=1326 audit(1744271897.129:246): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.566273][   T30] audit: type=1326 audit(1744271897.129:247): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=359 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.572307][T17683] usb 4-1: config 0 has no interfaces?
[ 2103.601128][    T9] elan 0003:04F3:0755.0012: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[ 2103.632815][T17683] usb 4-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 2103.634093][   T30] audit: type=1326 audit(1744271897.129:248): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.708965][   T30] audit: type=1326 audit(1744271897.129:249): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.743587][T17683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2103.776977][T19022] usb 5-1: USB disconnect, device number 85
[ 2103.811296][T17683] usb 4-1: Product: syz
[ 2103.821032][   T30] audit: type=1326 audit(1744271897.129:250): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.853890][T17683] usb 4-1: Manufacturer: syz
[ 2103.881571][T17683] usb 4-1: SerialNumber: syz
[ 2103.887567][   T30] audit: type=1326 audit(1744271897.129:251): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2103.936189][T17683] usb 4-1: config 0 descriptor??
[ 2104.055193][   T30] audit: type=1326 audit(1744271897.129:252): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=366 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2104.081725][   T30] audit: type=1326 audit(1744271897.129:253): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2104.138826][   T30] audit: type=1326 audit(1744271897.129:254): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22247 comm="syz.0.3593" exe="/root/syz-executor" sig=0 arch=40000003 syscall=370 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2104.185359][    T9] usb 4-1: USB disconnect, device number 10
[ 2104.197885][ T1301] ieee802154 phy0 wpan0: encryption failed: -22
[ 2104.207290][ T1301] ieee802154 phy1 wpan1: encryption failed: -22
[ 2104.786187][T22263] netlink: 14 bytes leftover after parsing attributes in process `syz.2.3597'.
[ 2104.819401][T19022] usb 5-1: new full-speed USB device number 86 using dummy_hcd
[ 2105.006585][T22269] FAULT_INJECTION: forcing a failure.
[ 2105.006585][T22269] name failslab, interval 1, probability 0, space 0, times 0
[ 2105.021553][T19022] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2105.025655][T22269] CPU: 0 UID: 0 PID: 22269 Comm: syz.3.3600 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2105.025688][T22269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2105.025703][T22269] Call Trace:
[ 2105.025712][T22269]  <TASK>
[ 2105.025722][T22269]  dump_stack_lvl+0x241/0x360
[ 2105.025764][T22269]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2105.025798][T22269]  ? __pfx__printk+0x10/0x10
[ 2105.025834][T22269]  ? __pfx___might_resched+0x10/0x10
[ 2105.025869][T22269]  should_fail_ex+0x424/0x570
[ 2105.025900][T22269]  should_failslab+0xac/0x100
[ 2105.025943][T22269]  kmem_cache_alloc_noprof+0x78/0x390
[ 2105.025974][T22269]  ? security_file_alloc+0x32/0x310
[ 2105.026007][T22269]  security_file_alloc+0x32/0x310
[ 2105.026034][T22269]  init_file+0x90/0x300
[ 2105.026058][T22269]  alloc_empty_file+0x70/0x1d0
[ 2105.026094][T22269]  path_openat+0x10d/0x35d0
[ 2105.026134][T22269]  ? is_bpf_text_address+0x26/0x2a0
[ 2105.026167][T22269]  ? is_bpf_text_address+0x288/0x2a0
[ 2105.026191][T22269]  ? is_bpf_text_address+0x26/0x2a0
[ 2105.026217][T22269]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 2105.026252][T22269]  ? kernel_text_address+0xa7/0xe0
[ 2105.026274][T22269]  ? __pfx_path_openat+0x10/0x10
[ 2105.026297][T22269]  ? unwind_get_return_address+0x4d/0x90
[ 2105.026327][T22269]  ? arch_stack_walk+0xff/0x150
[ 2105.026374][T22269]  do_filp_open+0x284/0x4e0
[ 2105.026403][T22269]  ? __pfx_do_filp_open+0x10/0x10
[ 2105.026461][T22269]  ? do_open_execat+0x9b/0x500
[ 2105.026492][T22269]  do_open_execat+0x16e/0x500
[ 2105.026534][T22269]  ? __lock_acquire+0xad5/0xd80
[ 2105.026559][T22269]  ? __pfx_do_open_execat+0x10/0x10
[ 2105.026602][T22269]  alloc_bprm+0x2a/0xbe0
[ 2105.026642][T22269]  do_execveat_common+0x1ae/0x710
[ 2105.026684][T22269]  __ia32_compat_sys_execve+0x99/0xb0
[ 2105.026717][T22269]  __do_fast_syscall_32+0xb4/0x110
[ 2105.026747][T22269]  ? exc_page_fault+0x5f8/0x920
[ 2105.026779][T22269]  do_fast_syscall_32+0x34/0x80
[ 2105.026808][T22269]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2105.026837][T22269] RIP: 0023:0xf73fd579
[ 2105.026857][T22269] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2105.026875][T22269] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000000b
[ 2105.026901][T22269] RAX: ffffffffffffffda RBX: 0000000080000140 RCX: 0000000000000000
[ 2105.026918][T22269] RDX: 0000000080000480 RSI: 0000000000000000 RDI: 0000000000000000
[ 2105.026938][T22269] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2105.026952][T22269] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2105.026967][T22269] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2105.027000][T22269]  </TASK>
[ 2105.323910][T19022] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2105.333375][T19022] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2105.354117][T19022] usb 5-1: config 0 descriptor??
[ 2105.364273][T22261] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2105.774790][T22263] bond0 (unregistering): Released all slaves
[ 2105.789469][    T9] usb 2-1: new high-speed USB device number 84 using dummy_hcd
[ 2105.929802][    T9] usb 2-1: device descriptor read/64, error -71
[ 2105.972111][T19022] elan 0003:04F3:0755.0013: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[ 2106.094471][T22291] fuse: Bad value for 'fd'
[ 2106.199385][    T9] usb 2-1: new high-speed USB device number 85 using dummy_hcd
[ 2106.381101][T14680] usb 5-1: USB disconnect, device number 86
[ 2106.410950][    T9] usb 2-1: device descriptor read/64, error -71
[ 2106.590560][    T9] usb usb2-port1: attempt power cycle
[ 2106.938057][T22294] sctp: [Deprecated]: syz.3.3604 (pid 22294) Use of int in maxseg socket option.
[ 2106.938057][T22294] Use struct sctp_assoc_value instead
[ 2106.988852][    T9] usb 2-1: new high-speed USB device number 86 using dummy_hcd
[ 2107.126406][    T9] usb 2-1: device descriptor read/8, error -71
[ 2107.399540][    T9] usb 2-1: new high-speed USB device number 87 using dummy_hcd
[ 2107.443106][    T9] usb 2-1: device descriptor read/8, error -71
[ 2107.569774][    T9] usb usb2-port1: unable to enumerate USB device
[ 2107.850879][    T9] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[ 2108.097690][T14680] usb 4-1: new high-speed USB device number 11 using dummy_hcd
[ 2108.205334][    T9] usb 5-1: config 0 has no interfaces?
[ 2108.226308][    T9] usb 5-1: New USB device found, idVendor=1b5c, idProduct=0105, bcdDevice= 1.f1
[ 2108.269307][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2108.277381][    T9] usb 5-1: Product: syz
[ 2108.307724][    T9] usb 5-1: Manufacturer: syz
[ 2108.315704][    T9] usb 5-1: SerialNumber: syz
[ 2108.323647][    T9] usb 5-1: config 0 descriptor??
[ 2108.339514][T14680] usb 4-1: Using ep0 maxpacket: 16
[ 2108.356873][T22315] FAULT_INJECTION: forcing a failure.
[ 2108.356873][T22315] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2108.378911][T14680] usb 4-1: unable to get BOS descriptor or descriptor too short
[ 2108.404954][T14680] usb 4-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2108.420758][T14680] usb 4-1: config 1 interface 0 has no altsetting 0
[ 2108.454799][T22317] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2108.476024][T22317] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2108.489645][T14680] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2108.506314][T22315] CPU: 1 UID: 0 PID: 22315 Comm: syz.1.3614 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2108.506347][T22315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2108.506361][T22315] Call Trace:
[ 2108.506371][T22315]  <TASK>
[ 2108.506381][T22315]  dump_stack_lvl+0x241/0x360
[ 2108.506419][T22315]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2108.506450][T22315]  ? __pfx__printk+0x10/0x10
[ 2108.506501][T22315]  should_fail_ex+0x424/0x570
[ 2108.506529][T22315]  _copy_from_iter+0x211/0x1c70
[ 2108.506565][T22315]  ? __build_skb_around+0x247/0x3d0
[ 2108.506672][T22315]  ? __alloc_skb+0x298/0x480
[ 2108.506691][T22315]  ? __pfx__copy_from_iter+0x10/0x10
[ 2108.506722][T22315]  ? __pfx___alloc_skb+0x10/0x10
[ 2108.506745][T22315]  ? skb_put+0x114/0x1f0
[ 2108.506770][T22315]  netlink_sendmsg+0x73c/0xcd0
[ 2108.506861][T22315]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2108.506896][T22315]  ? __import_iovec+0x585/0x830
[ 2108.506924][T22315]  ? aa_sock_msg_perm+0x91/0x160
[ 2108.506961][T22315]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2108.506989][T22315]  __sock_sendmsg+0x221/0x270
[ 2108.507039][T22315]  ____sys_sendmsg+0x523/0x860
[ 2108.507071][T22315]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2108.507112][T22315]  __sys_sendmsg+0x271/0x360
[ 2108.507140][T22315]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2108.507218][T22315]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2108.507244][T22315]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2108.507272][T22315]  __do_fast_syscall_32+0xb4/0x110
[ 2108.507299][T22315]  ? exc_page_fault+0x5f8/0x920
[ 2108.507328][T22315]  do_fast_syscall_32+0x34/0x80
[ 2108.507355][T22315]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2108.507381][T22315] RIP: 0023:0xf7f31579
[ 2108.507399][T22315] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2108.507418][T22315] RSP: 002b:00000000f505655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2108.507440][T22315] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 2108.507456][T22315] RDX: 0000000024040840 RSI: 0000000000000000 RDI: 0000000000000000
[ 2108.507469][T22315] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2108.507481][T22315] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2108.507494][T22315] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2108.507524][T22315]  </TASK>
[ 2108.521508][T14680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2108.778536][T19206] usb 5-1: USB disconnect, device number 87
[ 2108.828059][T22320] netdevsim netdevsim1 netdevsim0: entered promiscuous mode
[ 2108.858228][T22320] netdevsim netdevsim1 netdevsim0: left promiscuous mode
[ 2108.893756][T14680] usb 4-1: Product: syz
[ 2108.898625][T14680] usb 4-1: Manufacturer: syz
[ 2108.905167][T14680] usb 4-1: SerialNumber: syz
[ 2108.979420][    T9] usb 3-1: new high-speed USB device number 107 using dummy_hcd
[ 2109.096128][   T30] kauditd_printk_skb: 49 callbacks suppressed
[ 2109.096154][   T30] audit: type=1326 audit(1744271902.799:304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22321 comm="syz.1.3616" exe="/root/syz-executor" sig=9 arch=40000003 syscall=252 compat=1 ip=0xf7f31579 code=0x0
[ 2109.185836][    T9] usb 3-1: too many configurations: 224, using maximum allowed: 8
[ 2109.196387][    T9] usb 3-1: config index 0 descriptor too short (expected 23569, got 27)
[ 2109.216386][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.309665][    T9] usb 3-1: config index 1 descriptor too short (expected 23569, got 27)
[ 2109.357552][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.423290][    T9] usb 3-1: config index 2 descriptor too short (expected 23569, got 27)
[ 2109.432058][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.444379][    T9] usb 3-1: config index 3 descriptor too short (expected 23569, got 27)
[ 2109.453664][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.474250][    T9] usb 3-1: config index 4 descriptor too short (expected 23569, got 27)
[ 2109.485285][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.520371][    T9] usb 3-1: config index 5 descriptor too short (expected 23569, got 27)
[ 2109.581935][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.677104][    T9] usb 3-1: config index 6 descriptor too short (expected 23569, got 27)
[ 2109.691220][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.847084][    T9] usb 3-1: config index 7 descriptor too short (expected 23569, got 27)
[ 2109.876231][    T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2109.912168][T22329] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[ 2109.970456][    T9] usb 3-1: New USB device found, idVendor=0009, idProduct=0000, bcdDevice=ba.c0
[ 2110.042339][    T9] usb 3-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0
[ 2110.111058][    T9] usb 3-1: Manufacturer: syz
[ 2110.148893][    T9] usb 3-1: config 0 descriptor??
[ 2110.540439][   T30] audit: type=1326 audit(1744271904.249:305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.607342][   T30] audit: type=1326 audit(1744271904.269:306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.667633][   T30] audit: type=1326 audit(1744271904.279:307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.691634][   T30] audit: type=1326 audit(1744271904.279:308): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.716715][   T30] audit: type=1326 audit(1744271904.279:309): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.747175][   T30] audit: type=1326 audit(1744271904.279:310): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.796662][   T30] audit: type=1326 audit(1744271904.279:311): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.842871][   T30] audit: type=1326 audit(1744271904.279:312): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2110.956140][   T30] audit: type=1326 audit(1744271904.279:313): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22336 comm="syz.1.3622" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf7f31579 code=0x7ffc0000
[ 2111.187082][T22349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3625'.
[ 2111.207491][T22349] syz_tun: left allmulticast mode
[ 2111.213411][T22349] bridge0: port 4(syz_tun) entered disabled state
[ 2111.231595][T22349] team0: left allmulticast mode
[ 2111.238982][T22349] team_slave_0: left allmulticast mode
[ 2111.266994][T22349] team_slave_1: left allmulticast mode
[ 2111.292516][T22349] bridge0: port 3(team0) entered disabled state
[ 2111.318991][T22349] bridge_slave_0: left allmulticast mode
[ 2111.325033][T22349] bridge_slave_0: left promiscuous mode
[ 2111.332589][T22349] bridge0: port 1(bridge_slave_0) entered disabled state
[ 2111.343862][T22356] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3625'.
[ 2111.355009][T22349] bridge_slave_1: left allmulticast mode
[ 2111.366110][T22358] program syz.0.3626 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2111.383327][T22349] bridge_slave_1: left promiscuous mode
[ 2111.389961][T22349] bridge0: port 2(bridge_slave_1) entered disabled state
[ 2111.414003][T22349] bond0: (slave bond_slave_0): Releasing backup interface
[ 2111.427376][T22349] bond_slave_0: left promiscuous mode
[ 2111.437979][T22349] bond0: (slave bond_slave_1): Releasing backup interface
[ 2111.463823][T17683] usb 3-1: USB disconnect, device number 107
[ 2111.476858][T22349] bond_slave_1: left promiscuous mode
[ 2111.489785][T22349] team_slave_0: left promiscuous mode
[ 2111.546687][T22349] team0: Port device team_slave_0 removed
[ 2111.624754][T14680] usbhid 4-1:1.0: can't add hid device: -71
[ 2111.631292][T14680] usbhid 4-1:1.0: probe with driver usbhid failed with error -71
[ 2111.649114][T22349] team_slave_1: left promiscuous mode
[ 2111.689215][T14680] usb 4-1: USB disconnect, device number 11
[ 2111.711887][T22349] team0: Port device team_slave_1 removed
[ 2111.759047][T22349] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 2111.795044][T22349] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 2111.818701][T22349] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 2111.862828][T22368] FAULT_INJECTION: forcing a failure.
[ 2111.862828][T22368] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2111.893461][T22349] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 2111.902938][T22369] fuse: Bad value for 'fd'
[ 2111.920840][T22368] CPU: 0 UID: 0 PID: 22368 Comm: syz.2.3628 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2111.920867][T22368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2111.920877][T22368] Call Trace:
[ 2111.920883][T22368]  <TASK>
[ 2111.920890][T22368]  dump_stack_lvl+0x241/0x360
[ 2111.920919][T22368]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2111.920941][T22368]  ? __pfx__printk+0x10/0x10
[ 2111.920970][T22368]  should_fail_ex+0x424/0x570
[ 2111.920990][T22368]  _copy_from_iter+0x211/0x1c70
[ 2111.921014][T22368]  ? __build_skb_around+0x247/0x3d0
[ 2111.921041][T22368]  ? __alloc_skb+0x298/0x480
[ 2111.921053][T22368]  ? __pfx__copy_from_iter+0x10/0x10
[ 2111.921075][T22368]  ? __pfx___alloc_skb+0x10/0x10
[ 2111.921090][T22368]  ? skb_put+0x114/0x1f0
[ 2111.921107][T22368]  netlink_sendmsg+0x73c/0xcd0
[ 2111.921137][T22368]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2111.921160][T22368]  ? __import_iovec+0x585/0x830
[ 2111.921180][T22368]  ? aa_sock_msg_perm+0x91/0x160
[ 2111.921204][T22368]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2111.921224][T22368]  __sock_sendmsg+0x221/0x270
[ 2111.921245][T22368]  ____sys_sendmsg+0x523/0x860
[ 2111.921267][T22368]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2111.921294][T22368]  __sys_sendmsg+0x271/0x360
[ 2111.921313][T22368]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2111.921364][T22368]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2111.921382][T22368]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2111.921401][T22368]  __do_fast_syscall_32+0xb4/0x110
[ 2111.921419][T22368]  ? exc_page_fault+0x5f8/0x920
[ 2111.921439][T22368]  do_fast_syscall_32+0x34/0x80
[ 2111.921457][T22368]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2111.921479][T22368] RIP: 0023:0xf7f83579
[ 2111.921492][T22368] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2111.921504][T22368] RSP: 002b:00000000f508555c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2111.921520][T22368] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000800001c0
[ 2111.921530][T22368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2111.921539][T22368] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2111.921548][T22368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2111.921562][T22368] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2111.921582][T22368]  </TASK>
[ 2112.166876][T22370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2112.221350][T22370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2112.288526][T22368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2112.912982][T22382] FAULT_INJECTION: forcing a failure.
[ 2112.912982][T22382] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2112.926380][T22382] CPU: 0 UID: 0 PID: 22382 Comm: syz.0.3635 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2112.926410][T22382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2112.926424][T22382] Call Trace:
[ 2112.926433][T22382]  <TASK>
[ 2112.926442][T22382]  dump_stack_lvl+0x241/0x360
[ 2112.926487][T22382]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2112.926518][T22382]  ? __pfx__printk+0x10/0x10
[ 2112.926562][T22382]  should_fail_ex+0x424/0x570
[ 2112.926591][T22382]  _copy_from_iter+0x211/0x1c70
[ 2112.926625][T22382]  ? __build_skb_around+0x247/0x3d0
[ 2112.926664][T22382]  ? __alloc_skb+0x298/0x480
[ 2112.926689][T22382]  ? __pfx__copy_from_iter+0x10/0x10
[ 2112.926720][T22382]  ? __pfx___alloc_skb+0x10/0x10
[ 2112.926742][T22382]  ? skb_put+0x114/0x1f0
[ 2112.926767][T22382]  netlink_sendmsg+0x73c/0xcd0
[ 2112.926812][T22382]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2112.926847][T22382]  ? __import_iovec+0x585/0x830
[ 2112.926874][T22382]  ? aa_sock_msg_perm+0x91/0x160
[ 2112.926910][T22382]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2112.926938][T22382]  __sock_sendmsg+0x221/0x270
[ 2112.926970][T22382]  ____sys_sendmsg+0x523/0x860
[ 2112.927003][T22382]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2112.927042][T22382]  __sys_sendmsg+0x271/0x360
[ 2112.927071][T22382]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2112.927148][T22382]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2112.927174][T22382]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2112.927202][T22382]  __do_fast_syscall_32+0xb4/0x110
[ 2112.927228][T22382]  ? exc_page_fault+0x5f8/0x920
[ 2112.927257][T22382]  do_fast_syscall_32+0x34/0x80
[ 2112.927284][T22382]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2112.927310][T22382] RIP: 0023:0xf746d579
[ 2112.927328][T22382] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2112.927346][T22382] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2112.927369][T22382] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00000000800002c0
[ 2112.927384][T22382] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2112.927397][T22382] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2112.927410][T22382] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2112.927422][T22382] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2112.927454][T22382]  </TASK>
[ 2113.264335][    T9] usb 5-1: new full-speed USB device number 88 using dummy_hcd
[ 2113.421191][    T9] usb 5-1: config 0 has an invalid interface number: 130 but max is 0
[ 2113.429588][    T9] usb 5-1: config 0 has no interface number 0
[ 2113.461754][    T9] usb 5-1: New USB device found, idVendor=2013, idProduct=0246, bcdDevice=e6.56
[ 2113.479605][    T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2113.487950][    T9] usb 5-1: Product: syz
[ 2113.492833][    T9] usb 5-1: Manufacturer: syz
[ 2113.497453][    T9] usb 5-1: SerialNumber: syz
[ 2113.516641][    T9] usb 5-1: config 0 descriptor??
[ 2113.547518][    T9] as10x_usb: device has been detected
[ 2113.573552][    T9] dvbdev: DVB: registering new adapter (PCTV Systems picoStick (74e))
[ 2113.582222][T17683] usb 1-1: new full-speed USB device number 121 using dummy_hcd
[ 2113.693678][    T9] usb 5-1: DVB: registering adapter 2 frontend 0 (PCTV Systems picoStick (74e))...
[ 2113.788511][T17683] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2113.842532][T17683] usb 1-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2113.882785][    T9] as10x_usb: error during firmware upload part1
[ 2113.889150][T17683] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2113.899870][    T9] Registered device PCTV Systems picoStick (74e)
[ 2113.915351][    T9] usb 5-1: USB disconnect, device number 88
[ 2113.963405][T17683] usb 1-1: config 0 descriptor??
[ 2114.005360][T22384] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2114.095965][    T9] Unregistered device PCTV Systems picoStick (74e)
[ 2114.102101][    T9] as10x_usb: device has been disconnected
[ 2114.455926][T22395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2114.470317][T14680] usb 2-1: new high-speed USB device number 88 using dummy_hcd
[ 2114.553095][T22395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2114.628518][T17683] usbhid 1-1:0.0: can't add hid device: -71
[ 2114.648409][T17683] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[ 2114.672328][T22395] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[ 2114.673470][T14680] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2114.703856][T17683] usb 1-1: USB disconnect, device number 121
[ 2114.737566][T14680] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2114.748234][T14680] usb 2-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2114.763600][T14680] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2114.777389][T14680] usb 2-1: config 0 descriptor??
[ 2115.039499][T19206] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[ 2115.077958][T17683] usb 2-1: USB disconnect, device number 88
[ 2115.209853][T19206] usb 5-1: Using ep0 maxpacket: 16
[ 2115.224153][T19206] usb 5-1: config 0 has an invalid interface number: 129 but max is 0
[ 2115.243843][T19206] usb 5-1: config 0 has no interface number 0
[ 2115.258980][T19206] usb 5-1: New USB device found, idVendor=0a5c, idProduct=2033, bcdDevice=11.ab
[ 2115.294333][T19206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2115.315052][T19206] usb 5-1: Product: syz
[ 2115.329922][T19206] usb 5-1: Manufacturer: syz
[ 2115.334645][T19206] usb 5-1: SerialNumber: syz
[ 2115.405117][T19206] usb 5-1: config 0 descriptor??
[ 2115.928392][T17683] usb 5-1: USB disconnect, device number 89
[ 2115.978452][T22422] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3647'.
[ 2116.198442][T22425] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3648'.
[ 2116.690250][T19206] usb 1-1: new high-speed USB device number 122 using dummy_hcd
[ 2116.784082][T22436] FAULT_INJECTION: forcing a failure.
[ 2116.784082][T22436] name failslab, interval 1, probability 0, space 0, times 0
[ 2116.825967][T22436] CPU: 0 UID: 0 PID: 22436 Comm: syz.3.3653 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2116.826000][T22436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2116.826014][T22436] Call Trace:
[ 2116.826024][T22436]  <TASK>
[ 2116.826034][T22436]  dump_stack_lvl+0x241/0x360
[ 2116.826075][T22436]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2116.826106][T22436]  ? __pfx__printk+0x10/0x10
[ 2116.826141][T22436]  ? __pfx___might_resched+0x10/0x10
[ 2116.826176][T22436]  should_fail_ex+0x424/0x570
[ 2116.826205][T22436]  should_failslab+0xac/0x100
[ 2116.826237][T22436]  __kmalloc_cache_noprof+0x73/0x370
[ 2116.826269][T22436]  ? landlock_merge_ruleset+0x1c9/0x900
[ 2116.826296][T22436]  landlock_merge_ruleset+0x1c9/0x900
[ 2116.826329][T22436]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2116.826357][T22436]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2116.826386][T22436]  __do_fast_syscall_32+0xb4/0x110
[ 2116.826415][T22436]  ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 2116.826438][T22436]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2116.826466][T22436]  do_fast_syscall_32+0x34/0x80
[ 2116.826494][T22436]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2116.826526][T22436] RIP: 0023:0xf73fd579
[ 2116.826545][T22436] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2116.826564][T22436] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 2116.826587][T22436] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2116.826601][T22436] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2116.826615][T22436] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2116.826628][T22436] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2116.826641][T22436] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2116.826672][T22436]  </TASK>
[ 2117.016624][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2117.038796][T19206] usb 1-1: config 0 has no interfaces?
[ 2117.046639][T19206] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2117.127107][T19206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2117.244710][T19206] usb 1-1: Product: syz
[ 2117.248944][T19206] usb 1-1: Manufacturer: syz
[ 2117.292890][T19206] usb 1-1: SerialNumber: syz
[ 2117.307666][T19206] usb 1-1: config 0 descriptor??
[ 2117.322283][T22447] netlink: 'syz.2.3655': attribute type 3 has an invalid length.
[ 2117.369371][T17683] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[ 2117.509486][T17683] usb 5-1: device descriptor read/64, error -71
[ 2117.709607][T14680] usb 4-1: new high-speed USB device number 12 using dummy_hcd
[ 2117.840736][T22428] bond46: entered promiscuous mode
[ 2117.849023][T17683] usb 5-1: new high-speed USB device number 91 using dummy_hcd
[ 2117.856225][T22428] bond46: entered allmulticast mode
[ 2117.877621][T22428] 8021q: adding VLAN 0 to HW filter on device bond46
[ 2117.932186][T14680] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2117.948660][T14680] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2117.958744][T14680] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2117.968087][T14680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2118.005303][T17683] usb 5-1: device descriptor read/64, error -71
[ 2118.020894][T14680] usb 4-1: config 0 descriptor??
[ 2118.129836][T17683] usb usb5-port1: attempt power cycle
[ 2118.308466][T19206] usb 4-1: USB disconnect, device number 12
[ 2118.324580][T14680] usb 3-1: new high-speed USB device number 108 using dummy_hcd
[ 2118.489485][T17683] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[ 2118.511950][T14680] usb 3-1: Using ep0 maxpacket: 32
[ 2118.548189][T14680] usb 3-1: New USB device found, idVendor=041e, idProduct=400b, bcdDevice=3e.e7
[ 2118.558002][T14680] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2118.568555][T17683] usb 5-1: device descriptor read/8, error -71
[ 2118.577411][T14680] usb 3-1: config 0 descriptor??
[ 2118.589690][T14680] gspca_main: sunplus-2.14.0 probing 041e:400b
[ 2118.831750][T17683] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[ 2118.919580][T17683] usb 5-1: device descriptor read/8, error -71
[ 2119.029705][T17683] usb usb5-port1: unable to enumerate USB device
[ 2119.428990][T19022] usb 1-1: USB disconnect, device number 122
[ 2119.572387][T19206] usb 2-1: new full-speed USB device number 89 using dummy_hcd
[ 2119.629392][T17683] usb 4-1: new high-speed USB device number 13 using dummy_hcd
[ 2119.735201][T19206] usb 2-1: config index 0 descriptor too short (expected 50953, got 9)
[ 2119.756418][T19206] usb 2-1: config 175 has too many interfaces: 149, using maximum allowed: 32
[ 2119.765915][T19206] usb 2-1: config 175 has 0 interfaces, different from the descriptor's value: 149
[ 2119.785497][T17683] usb 4-1: Using ep0 maxpacket: 32
[ 2119.792998][T19206] usb 2-1: New USB device found, idVendor=249c, idProduct=171c, bcdDevice=c5.9a
[ 2119.806632][T19206] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2119.815621][T19022] usb 1-1: new high-speed USB device number 123 using dummy_hcd
[ 2119.815781][T17683] usb 4-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00
[ 2119.836454][T19206] usb 2-1: Product: syz
[ 2119.842620][T19206] usb 2-1: Manufacturer: syz
[ 2119.847394][T19206] usb 2-1: SerialNumber: syz
[ 2119.854256][T17683] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2119.866213][T17683] usb 4-1: config 0 descriptor??
[ 2119.989363][T19022] usb 1-1: Using ep0 maxpacket: 32
[ 2119.996587][T19022] usb 1-1: config 0 has an invalid interface number: 12 but max is 0
[ 2120.006825][T19022] usb 1-1: config 0 has no interface number 0
[ 2120.019465][T19022] usb 1-1: config 0 interface 12 has no altsetting 0
[ 2120.033086][T19022] usb 1-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2120.046377][T19022] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2120.062136][T19022] usb 1-1: Product: syz
[ 2120.066435][T19022] usb 1-1: Manufacturer: syz
[ 2120.077429][T22472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2120.088225][T19022] usb 1-1: SerialNumber: syz
[ 2120.089403][T22472] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2120.102539][T19022] usb 1-1: config 0 descriptor??
[ 2120.205880][T22462] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3661'.
[ 2120.217460][T22462] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3661'.
[ 2120.237273][T14680] gspca_sunplus: reg_w_riv err -71
[ 2120.249210][T14680] sunplus 3-1:0.0: probe with driver sunplus failed with error -71
[ 2120.268975][T14680] usb 3-1: USB disconnect, device number 108
[ 2120.303793][T17683] uclogic 0003:28BD:0071.0014: interface is invalid, ignoring
[ 2120.524293][T14680] usb 4-1: USB disconnect, device number 13
[ 2120.732735][T19022] f81534 1-1:0.12: f81534_get_register: reg: 1003 failed: -71
[ 2120.747167][T19022] f81534 1-1:0.12: f81534_find_config_idx: read failed: -71
[ 2120.758127][T19022] f81534 1-1:0.12: f81534_calc_num_ports: find idx failed: -71
[ 2120.772062][T19022] f81534 1-1:0.12: probe with driver f81534 failed with error -71
[ 2120.804357][T19022] usb 1-1: USB disconnect, device number 123
[ 2121.739480][T19022] usb 1-1: new high-speed USB device number 124 using dummy_hcd
[ 2121.923902][T19022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2121.944654][T19022] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2121.967346][T19022] usb 1-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2121.985450][T19022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2121.996794][T22499] FAULT_INJECTION: forcing a failure.
[ 2121.996794][T22499] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2121.998576][T19022] usb 1-1: config 0 descriptor??
[ 2122.071418][T22499] CPU: 0 UID: 0 PID: 22499 Comm: syz.2.3675 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2122.071449][T22499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2122.071462][T22499] Call Trace:
[ 2122.071470][T22499]  <TASK>
[ 2122.071480][T22499]  dump_stack_lvl+0x241/0x360
[ 2122.071518][T22499]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2122.071550][T22499]  ? __pfx__printk+0x10/0x10
[ 2122.071590][T22499]  should_fail_ex+0x424/0x570
[ 2122.071618][T22499]  _copy_to_user+0x31/0xb0
[ 2122.071651][T22499]  simple_read_from_buffer+0xc4/0x170
[ 2122.071687][T22499]  proc_fail_nth_read+0x1ef/0x260
[ 2122.071713][T22499]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2122.071738][T22499]  ? rw_verify_area+0x246/0x630
[ 2122.071760][T22499]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2122.071784][T22499]  vfs_read+0x21f/0xb90
[ 2122.071814][T22499]  ? __pfx___mutex_lock+0x10/0x10
[ 2122.071842][T22499]  ? __pfx_vfs_read+0x10/0x10
[ 2122.071869][T22499]  ? __fget_files+0x2a/0x420
[ 2122.071899][T22499]  ? __fget_files+0x39d/0x420
[ 2122.071917][T22499]  ? __fget_files+0x2a/0x420
[ 2122.071944][T22499]  ksys_read+0x19d/0x2d0
[ 2122.071970][T22499]  ? __pfx_ksys_read+0x10/0x10
[ 2122.072002][T22499]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2122.072027][T22499]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2122.072054][T22499]  __do_fast_syscall_32+0xb4/0x110
[ 2122.072079][T22499]  ? exc_page_fault+0x5f8/0x920
[ 2122.072108][T22499]  do_fast_syscall_32+0x34/0x80
[ 2122.072135][T22499]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2122.072160][T22499] RIP: 0023:0xf7f83579
[ 2122.072178][T22499] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2122.072196][T22499] RSP: 002b:00000000f50a6590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 2122.072218][T22499] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f50a6620
[ 2122.072232][T22499] RDX: 000000000000000f RSI: 00000000f740dff4 RDI: 0000000000000000
[ 2122.072245][T22499] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 2122.072258][T22499] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2122.072271][T22499] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2122.072301][T22499]  </TASK>
[ 2122.301953][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2122.322595][T14680] usb 4-1: new high-speed USB device number 14 using dummy_hcd
[ 2122.393459][T17683] usb 1-1: USB disconnect, device number 124
[ 2122.478548][T19206] usb 2-1: USB disconnect, device number 89
[ 2122.497029][T14680] usb 4-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2122.506261][T14680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2122.526532][T14680] usb 4-1: config 0 descriptor??
[ 2122.803061][T19022] usb 3-1: new high-speed USB device number 109 using dummy_hcd
[ 2122.975242][T14680] ntrig 0003:1B96:0003.0015: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.3-1/input0
[ 2122.995608][T19022] usb 3-1: device descriptor read/64, error -71
[ 2123.053837][T19206] usb 2-1: new high-speed USB device number 90 using dummy_hcd
[ 2123.188142][T22513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3679'.
[ 2123.208641][T14680] usb 4-1: USB disconnect, device number 14
[ 2123.220122][T19206] usb 2-1: Using ep0 maxpacket: 16
[ 2123.223255][T19206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2123.223292][T19206] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2123.223316][T19206] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[ 2123.223387][T19206] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[ 2123.223413][T19206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2123.226828][T19206] usb 2-1: config 0 descriptor??
[ 2123.269757][T19022] usb 3-1: new high-speed USB device number 110 using dummy_hcd
[ 2123.338089][T22332] tipc: Subscription rejected, illegal request
[ 2123.362975][T22504] FAULT_INJECTION: forcing a failure.
[ 2123.362975][T22504] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2123.363026][T22504] CPU: 1 UID: 0 PID: 22504 Comm: syz.4.3676 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2123.363045][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2123.363054][T22504] Call Trace:
[ 2123.363061][T22504]  <TASK>
[ 2123.363068][T22504]  dump_stack_lvl+0x241/0x360
[ 2123.363095][T22504]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2123.363117][T22504]  ? __pfx__printk+0x10/0x10
[ 2123.363149][T22504]  should_fail_ex+0x424/0x570
[ 2123.363168][T22504]  copy_fpstate_to_sigframe+0xae4/0xdc0
[ 2123.363194][T22504]  ? __pfx_copy_fpstate_to_sigframe+0x10/0x10
[ 2123.363225][T22504]  ? fpu__alloc_mathframe+0xab/0x130
[ 2123.363253][T22504]  get_sigframe+0x5de/0x810
[ 2123.363279][T22504]  ? __pfx_get_sigframe+0x10/0x10
[ 2123.363304][T22504]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2123.363372][T22504]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2123.363390][T22504]  ia32_setup_frame+0x121/0xa00
[ 2123.363417][T22504]  ? __pfx_ia32_setup_frame+0x10/0x10
[ 2123.363440][T22504]  arch_do_signal_or_restart+0x450/0x840
[ 2123.363464][T22504]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[ 2123.363496][T22504]  ? syscall_exit_to_user_mode+0xa3/0x340
[ 2123.363514][T22504]  syscall_exit_to_user_mode+0xce/0x340
[ 2123.363533][T22504]  __do_fast_syscall_32+0xc1/0x110
[ 2123.363551][T22504]  ? asm_sysvec_reschedule_ipi+0x1a/0x20
[ 2123.363565][T22504]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2123.363582][T22504]  do_fast_syscall_32+0x34/0x80
[ 2123.363600][T22504]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2123.363617][T22504] RIP: 0023:0xf746d579
[ 2123.363629][T22504] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2123.363640][T22504] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000135
[ 2123.363655][T22504] RAX: fffffffffffffffc RBX: 0000000000000000 RCX: 0000000000000000
[ 2123.363664][T22504] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 2123.363673][T22504] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2123.363681][T22504] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2123.363689][T22504] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2123.363708][T22504]  </TASK>
[ 2123.411388][T19022] usb 3-1: device descriptor read/64, error -71
[ 2123.524417][T19022] usb usb3-port1: attempt power cycle
[ 2123.635921][T19206] usbhid 2-1:0.0: can't add hid device: -71
[ 2123.636047][T19206] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[ 2123.645547][T19206] usb 2-1: USB disconnect, device number 90
[ 2123.664671][ T5841] udevd[5841]: setting mode of /dev/bus/usb/002/090 to 020664 failed: No such file or directory
[ 2123.664842][ T5841] udevd[5841]: setting owner of /dev/bus/usb/002/090 to uid=0, gid=0 failed: No such file or directory
[ 2123.866276][T19022] usb 3-1: new high-speed USB device number 111 using dummy_hcd
[ 2123.901844][T19022] usb 3-1: device descriptor read/8, error -71
[ 2124.149566][T19022] usb 3-1: new high-speed USB device number 112 using dummy_hcd
[ 2124.173527][T19022] usb 3-1: device descriptor read/8, error -71
[ 2124.283398][T19022] usb usb3-port1: unable to enumerate USB device
[ 2124.896294][T22539] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3687'.
[ 2125.162815][T14680] usb 2-1: new high-speed USB device number 91 using dummy_hcd
[ 2125.229776][T17683] usb 4-1: new full-speed USB device number 15 using dummy_hcd
[ 2125.258570][T22544] sctp: [Deprecated]: syz.0.3689 (pid 22544) Use of int in maxseg socket option.
[ 2125.258570][T22544] Use struct sctp_assoc_value instead
[ 2125.369494][T14680] usb 2-1: Using ep0 maxpacket: 16
[ 2125.394185][T14680] usb 2-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2125.420687][T14680] usb 2-1: config 1 interface 0 has no altsetting 0
[ 2125.428413][T17683] usb 4-1: config index 0 descriptor too short (expected 50953, got 9)
[ 2125.437772][T17683] usb 4-1: config 175 has too many interfaces: 149, using maximum allowed: 32
[ 2125.454468][T17683] usb 4-1: config 175 has 0 interfaces, different from the descriptor's value: 149
[ 2125.474604][T14680] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2125.484123][T14680] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2125.495219][T14680] usb 2-1: Product: syz
[ 2125.499861][T14680] usb 2-1: Manufacturer: syz
[ 2125.506611][T14680] usb 2-1: SerialNumber: syz
[ 2125.511567][T17683] usb 4-1: New USB device found, idVendor=249c, idProduct=171c, bcdDevice=c5.9a
[ 2125.528029][T17683] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2125.537325][T17683] usb 4-1: Product: syz
[ 2125.558951][T22547] FAULT_INJECTION: forcing a failure.
[ 2125.558951][T22547] name failslab, interval 1, probability 0, space 0, times 0
[ 2125.574745][T22547] CPU: 0 UID: 0 PID: 22547 Comm: syz.0.3690 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2125.574767][T22547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2125.574778][T22547] Call Trace:
[ 2125.574785][T22547]  <TASK>
[ 2125.574792][T22547]  dump_stack_lvl+0x241/0x360
[ 2125.574822][T22547]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2125.574844][T22547]  ? __pfx__printk+0x10/0x10
[ 2125.574869][T22547]  ? __pfx___might_resched+0x10/0x10
[ 2125.574893][T22547]  should_fail_ex+0x424/0x570
[ 2125.574913][T22547]  should_failslab+0xac/0x100
[ 2125.574936][T22547]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[ 2125.574960][T22547]  ? dup_task_struct+0x57/0x870
[ 2125.575007][T22547]  dup_task_struct+0x57/0x870
[ 2125.575022][T22547]  ? _raw_spin_unlock_irq+0x23/0x50
[ 2125.575038][T22547]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2125.575058][T22547]  copy_process+0x5dc/0x3d10
[ 2125.575095][T22547]  ? __pfx_copy_process+0x10/0x10
[ 2125.575116][T22547]  ? __raw_spin_lock_init+0x45/0x100
[ 2125.575144][T22547]  vhost_task_create+0x244/0x320
[ 2125.575164][T22547]  ? is_bpf_text_address+0x288/0x2a0
[ 2125.575182][T22547]  ? is_bpf_text_address+0x26/0x2a0
[ 2125.575198][T22547]  ? __pfx_kvm_nx_huge_page_recovery_worker+0x10/0x10
[ 2125.575215][T22547]  ? __pfx_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[ 2125.575234][T22547]  ? __pfx_vhost_task_create+0x10/0x10
[ 2125.575262][T22547]  ? __pfx_vhost_task_fn+0x10/0x10
[ 2125.575293][T22547]  ? stack_trace_save+0x11a/0x1d0
[ 2125.575318][T22547]  kvm_mmu_post_init_vm+0x14e/0x2c0
[ 2125.575339][T22547]  kvm_arch_vcpu_ioctl_run+0xed/0x1910
[ 2125.575370][T22547]  ? __lock_acquire+0xad5/0xd80
[ 2125.575388][T22547]  ? __mutex_trylock_common+0x184/0x2e0
[ 2125.575411][T22547]  ? __pfx_kvm_arch_vcpu_ioctl_run+0x10/0x10
[ 2125.575433][T22547]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2125.575457][T22547]  ? rcu_is_watching+0x15/0xb0
[ 2125.575477][T22547]  ? look_up_lock_class+0x7b/0x170
[ 2125.575496][T22547]  ? register_lock_class+0x54/0x330
[ 2125.575516][T22547]  ? __lock_acquire+0xad5/0xd80
[ 2125.575536][T22547]  ? do_raw_write_lock+0x14a/0x4f0
[ 2125.575572][T22547]  kvm_vcpu_ioctl+0xa24/0x1030
[ 2125.575598][T22547]  ? __pfx_kvm_vcpu_ioctl+0x10/0x10
[ 2125.575618][T22547]  ? tomoyo_path_number_perm+0x215/0x790
[ 2125.575640][T22547]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2125.575700][T22547]  kvm_vcpu_compat_ioctl+0x241/0x450
[ 2125.575739][T22547]  ? __fget_files+0x2a/0x420
[ 2125.575762][T22547]  ? __pfx_kvm_vcpu_compat_ioctl+0x10/0x10
[ 2125.575794][T22547]  ? __fget_files+0x2a/0x420
[ 2125.575820][T22547]  __se_compat_sys_ioctl+0x50e/0xc30
[ 2125.575841][T22547]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[ 2125.575861][T22547]  ? __fget_files+0x2a/0x420
[ 2125.575879][T22547]  ? fput+0x9b/0xd0
[ 2125.575893][T22547]  ? ksys_write+0x275/0x2d0
[ 2125.575919][T22547]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2125.575938][T22547]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2125.575958][T22547]  __do_fast_syscall_32+0xb4/0x110
[ 2125.575976][T22547]  ? exc_page_fault+0x5f8/0x920
[ 2125.575997][T22547]  do_fast_syscall_32+0x34/0x80
[ 2125.576016][T22547]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2125.576035][T22547] RIP: 0023:0xf746d579
[ 2125.576049][T22547] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2125.576062][T22547] RSP: 002b:00000000f50d555c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2125.576079][T22547] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 000000000000ae80
[ 2125.576090][T22547] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2125.576099][T22547] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2125.576108][T22547] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2125.576119][T22547] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2125.576142][T22547]  </TASK>
[ 2125.578502][T17683] usb 4-1: Manufacturer: syz
[ 2126.034542][T17683] usb 4-1: SerialNumber: syz
[ 2126.787344][T22541] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2126.842957][T22541] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2127.449107][   T30] kauditd_printk_skb: 25 callbacks suppressed
[ 2127.449128][   T30] audit: type=1326 audit(1744271921.149:339): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.511470][   T30] audit: type=1326 audit(1744271921.179:340): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.552606][   T30] audit: type=1326 audit(1744271921.189:341): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=279 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.576861][   T30] audit: type=1326 audit(1744271921.189:342): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.621566][   T30] audit: type=1326 audit(1744271921.189:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=296 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.694862][   T30] audit: type=1326 audit(1744271921.189:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.726257][   T30] audit: type=1326 audit(1744271921.189:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=444 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.749640][   T30] audit: type=1326 audit(1744271921.189:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2127.772597][T22565] bridge_slave_0: default FDB implementation only supports local addresses
[ 2127.918870][   T30] audit: type=1326 audit(1744271921.189:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2128.056469][   T30] audit: type=1326 audit(1744271921.189:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22562 comm="syz.4.3695" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2128.083047][T17683] usb 4-1: USB disconnect, device number 15
[ 2128.198098][T14680] usbhid 2-1:1.0: can't add hid device: -71
[ 2128.204597][T14680] usbhid 2-1:1.0: probe with driver usbhid failed with error -71
[ 2128.257012][T22572] sctp: [Deprecated]: syz.3.3700 (pid 22572) Use of int in maxseg socket option.
[ 2128.257012][T22572] Use struct sctp_assoc_value instead
[ 2128.297464][T14680] usb 2-1: USB disconnect, device number 91
[ 2128.508033][T22576] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3701'.
[ 2128.639641][T19022] usb 5-1: new high-speed USB device number 94 using dummy_hcd
[ 2128.794290][T19022] usb 5-1: config 0 has no interfaces?
[ 2128.818759][T22594] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3705'.
[ 2128.845681][T19022] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2128.859592][T19022] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2128.877491][T19022] usb 5-1: Product: syz
[ 2128.898144][T19022] usb 5-1: Manufacturer: syz
[ 2128.936810][T19022] usb 5-1: SerialNumber: syz
[ 2128.980884][T19022] usb 5-1: config 0 descriptor??
[ 2129.212065][T14680] usb 1-1: new high-speed USB device number 125 using dummy_hcd
[ 2129.233909][T22577] bond47: entered promiscuous mode
[ 2129.246290][T22577] bond47: entered allmulticast mode
[ 2129.253862][T22577] 8021q: adding VLAN 0 to HW filter on device bond47
[ 2129.371573][T14680] usb 1-1: Using ep0 maxpacket: 8
[ 2129.384266][T14680] usb 1-1: New USB device found, idVendor=0ccd, idProduct=10a3, bcdDevice=23.a2
[ 2129.405243][T14680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2129.415207][T14680] usb 1-1: Product: syz
[ 2129.419775][T14680] usb 1-1: Manufacturer: syz
[ 2129.424798][T14680] usb 1-1: SerialNumber: syz
[ 2129.434236][T14680] usb 1-1: config 0 descriptor??
[ 2129.670667][T14680] usb 1-1: dvb_usb_v2: found a 'Terratec H7' in warm state
[ 2129.937075][T19022] usb 2-1: new full-speed USB device number 92 using dummy_hcd
[ 2130.111391][T19022] usb 2-1: config index 0 descriptor too short (expected 50953, got 9)
[ 2130.135815][T19022] usb 2-1: config 175 has too many interfaces: 149, using maximum allowed: 32
[ 2130.169529][T19022] usb 2-1: config 175 has 0 interfaces, different from the descriptor's value: 149
[ 2130.199206][    T9] usb 3-1: new high-speed USB device number 113 using dummy_hcd
[ 2130.217908][T19022] usb 2-1: New USB device found, idVendor=249c, idProduct=171c, bcdDevice=c5.9a
[ 2130.236812][T19022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2130.259949][T19022] usb 2-1: Product: syz
[ 2130.274773][T19022] usb 2-1: Manufacturer: syz
[ 2130.287841][T19022] usb 2-1: SerialNumber: syz
[ 2130.361203][    T9] usb 3-1: Using ep0 maxpacket: 16
[ 2130.425218][    T9] usb 3-1: config 1 interface 0 altsetting 8 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[ 2130.509970][    T9] usb 3-1: config 1 interface 0 has no altsetting 0
[ 2130.520854][T22602] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2130.537521][T22602] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2130.687158][    T9] usb 3-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[ 2130.706671][T22333] tipc: Subscription rejected, illegal request
[ 2130.728993][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2130.747466][    T9] usb 3-1: Product: syz
[ 2130.764429][    T9] usb 3-1: Manufacturer: syz
[ 2130.786452][    T9] usb 3-1: SerialNumber: syz
[ 2131.599188][T19206] usb 5-1: USB disconnect, device number 94
[ 2131.744296][T22613] xt_ecn: cannot match TCP bits for non-tcp packets
[ 2131.937371][T22615] sctp: [Deprecated]: syz.4.3713 (pid 22615) Use of int in maxseg socket option.
[ 2131.937371][T22615] Use struct sctp_assoc_value instead
[ 2131.961658][T14680] usb write operation failed. (-71)
[ 2131.986900][T14680] usb 1-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer
[ 2131.999053][T14680] dvbdev: DVB: registering new adapter (Terratec H7)
[ 2132.014138][T14680] usb 1-1: media controller created
[ 2132.023154][T14680] usb read operation failed. (-71)
[ 2132.029066][T14680] usb write operation failed. (-71)
[ 2132.054598][T14680] dvb_usb_az6007 1-1:0.0: probe with driver dvb_usb_az6007 failed with error -5
[ 2132.088243][T14680] usb 1-1: USB disconnect, device number 125
[ 2132.801381][T19022] usb 2-1: USB disconnect, device number 92
[ 2133.024430][T14680] usb 1-1: new high-speed USB device number 126 using dummy_hcd
[ 2133.063860][    T9] usbhid 3-1:1.0: can't add hid device: -71
[ 2133.091202][    T9] usbhid 3-1:1.0: probe with driver usbhid failed with error -71
[ 2133.206302][    T9] usb 3-1: USB disconnect, device number 113
[ 2133.378180][T19022] usb 2-1: new high-speed USB device number 93 using dummy_hcd
[ 2133.425094][T22634] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3721'.
[ 2133.436444][T14680] usb 1-1: config 0 has no interfaces?
[ 2133.458616][T14680] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2133.467837][T14680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2133.538126][T14680] usb 1-1: Product: syz
[ 2133.556596][T14680] usb 1-1: Manufacturer: syz
[ 2133.556969][T19022] usb 2-1: Using ep0 maxpacket: 32
[ 2133.570245][T19022] usb 2-1: config 0 has an invalid interface number: 12 but max is 0
[ 2133.579343][T19022] usb 2-1: config 0 has no interface number 0
[ 2133.585722][T19022] usb 2-1: config 0 interface 12 has no altsetting 0
[ 2133.593194][T14680] usb 1-1: SerialNumber: syz
[ 2133.596123][T19022] usb 2-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2133.599647][T17683] usb 5-1: new high-speed USB device number 95 using dummy_hcd
[ 2133.613950][T19022] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2133.628546][T19022] usb 2-1: Product: syz
[ 2133.636017][T19022] usb 2-1: Manufacturer: syz
[ 2133.650964][T19022] usb 2-1: SerialNumber: syz
[ 2133.676371][T19022] usb 2-1: config 0 descriptor??
[ 2133.690177][T14680] usb 1-1: config 0 descriptor??
[ 2133.735975][T19022] f81534 2-1:0.12: required endpoints missing
[ 2133.863004][T17683] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2133.938257][T17683] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2133.950148][T17683] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2133.959812][T17683] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2133.981054][T17683] usb 5-1: config 0 descriptor??
[ 2134.625219][T17683] usb 5-1: USB disconnect, device number 95
[ 2134.948010][T22654] sctp: [Deprecated]: syz.3.3725 (pid 22654) Use of int in maxseg socket option.
[ 2134.948010][T22654] Use struct sctp_assoc_value instead
[ 2135.369899][T19022] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[ 2135.542383][T19022] usb 4-1: config 2 has an invalid interface number: 243 but max is 0
[ 2135.555876][T19022] usb 4-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config
[ 2135.882777][T19022] usb 4-1: config 2 has no interface number 0
[ 2135.906118][T19022] usb 4-1: config 2 interface 243 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 12
[ 2136.091916][T19022] usb 4-1: New USB device found, idVendor=34ab, idProduct=59bb, bcdDevice=f9.e4
[ 2136.113417][T19206] usb 1-1: USB disconnect, device number 126
[ 2136.153177][T19022] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2136.153675][T17683] usb 2-1: USB disconnect, device number 93
[ 2136.185457][T19022] usb 4-1: Product: syz
[ 2136.232319][T19022] usb 4-1: Manufacturer: syz
[ 2136.247182][T19022] usb 4-1: SerialNumber: syz
[ 2136.284484][T19022] usb-storage 4-1:2.243: USB Mass Storage device detected
[ 2136.687083][T22679] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3732'.
[ 2137.574725][T22686] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3734'.
[ 2137.967607][T22691] sctp: [Deprecated]: syz.1.3736 (pid 22691) Use of int in maxseg socket option.
[ 2137.967607][T22691] Use struct sctp_assoc_value instead
[ 2138.053565][T19022] usb 4-1: USB disconnect, device number 16
[ 2138.222629][   T30] kauditd_printk_skb: 108 callbacks suppressed
[ 2138.222650][   T30] audit: type=1326 audit(1744271931.929:457): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.272033][T22693] xt_ecn: cannot match TCP bits for non-tcp packets
[ 2138.369529][   T30] audit: type=1326 audit(1744271931.929:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.391554][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2138.561907][   T30] audit: type=1326 audit(1744271931.959:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=288 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.712621][   T30] audit: type=1326 audit(1744271931.959:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.779338][   T30] audit: type=1326 audit(1744271931.959:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.826163][T22699] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3740'.
[ 2138.837581][T22699] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE
[ 2138.844985][T22699] IPv6: NLM_F_CREATE should be set when creating new route
[ 2138.852306][T22699] IPv6: NLM_F_CREATE should be set when creating new route
[ 2138.864856][   T30] audit: type=1326 audit(1744271931.959:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.933188][   T30] audit: type=1326 audit(1744271931.959:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2138.964404][T14680] usb 4-1: new full-speed USB device number 17 using dummy_hcd
[ 2139.017755][   T30] audit: type=1326 audit(1744271931.959:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2139.039847][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2139.058735][   T30] audit: type=1326 audit(1744271931.979:465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=357 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2139.088346][   T30] audit: type=1326 audit(1744271931.979:466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22692 comm="syz.4.3737" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf746d579 code=0x7ffc0000
[ 2139.110383][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2139.135525][T14680] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2139.146887][T14680] usb 4-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2139.165077][T14680] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2139.182096][T14680] usb 4-1: config 0 descriptor??
[ 2139.191559][T22697] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22
[ 2139.202524][T19022] usb 1-1: new high-speed USB device number 127 using dummy_hcd
[ 2139.451518][T19022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2139.466080][T19022] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2139.480309][T19022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2139.538127][T19022] usb 1-1: config 0 descriptor??
[ 2139.726774][T14680] elan 0003:04F3:0755.0016: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.3-1/input0
[ 2139.770572][T19022] usb 1-1: string descriptor 0 read error: -71
[ 2139.793787][T19022] pwc: Askey VC010 type 2 USB webcam detected.
[ 2139.804248][T19022] pwc: send_video_command error -71
[ 2139.812533][T19022] pwc: Failed to set video mode CIF@30 fps; return code = -71
[ 2139.828025][T19022] Philips webcam 1-1:0.0: probe with driver Philips webcam failed with error -71
[ 2139.845684][T19022] usb 1-1: USB disconnect, device number 127
[ 2139.928367][T14680] usb 4-1: USB disconnect, device number 17
[ 2140.268524][T22729] sctp: [Deprecated]: syz.4.3748 (pid 22729) Use of int in maxseg socket option.
[ 2140.268524][T22729] Use struct sctp_assoc_value instead
[ 2140.319383][T19022] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 2140.377142][T22732] program syz.2.3750 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2140.395296][T22732] FAULT_INJECTION: forcing a failure.
[ 2140.395296][T22732] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2140.422566][T22732] CPU: 0 UID: 0 PID: 22732 Comm: syz.2.3750 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2140.422596][T22732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2140.422610][T22732] Call Trace:
[ 2140.422618][T22732]  <TASK>
[ 2140.422627][T22732]  dump_stack_lvl+0x241/0x360
[ 2140.422665][T22732]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2140.422696][T22732]  ? __pfx__printk+0x10/0x10
[ 2140.422739][T22732]  should_fail_ex+0x424/0x570
[ 2140.422766][T22732]  _copy_from_user+0x2d/0xb0
[ 2140.422797][T22732]  scsi_ioctl+0x1f62/0x2f20
[ 2140.422942][T22732]  ? __kasan_slab_free+0x59/0x70
[ 2140.422967][T22732]  ? kfree+0x198/0x430
[ 2140.422992][T22732]  ? tomoyo_path_number_perm+0x5fd/0x790
[ 2140.423018][T22732]  ? __se_compat_sys_ioctl+0xd8/0xc30
[ 2140.423045][T22732]  ? do_vfs_ioctl+0xef8/0x2750
[ 2140.423074][T22732]  ? __pfx_scsi_ioctl+0x10/0x10
[ 2140.423104][T22732]  ? __pfx_do_vfs_ioctl+0x10/0x10
[ 2140.423155][T22732]  ? kasan_quarantine_put+0xdc/0x230
[ 2140.423177][T22732]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2140.423211][T22732]  ? tomoyo_path_number_perm+0x215/0x790
[ 2140.423241][T22732]  ? tomoyo_path_number_perm+0x684/0x790
[ 2140.423266][T22732]  ? __lock_acquire+0xad5/0xd80
[ 2140.423288][T22732]  ? tomoyo_path_number_perm+0x215/0x790
[ 2140.423318][T22732]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 2140.423358][T22732]  sg_ioctl+0x17f8/0x2ea0
[ 2140.423422][T22732]  ? __pfx_sg_ioctl+0x10/0x10
[ 2140.423467][T22732]  ? __fget_files+0x2a/0x420
[ 2140.423487][T22732]  ? __fget_files+0x2a/0x420
[ 2140.423510][T22732]  ? __fget_files+0x2a/0x420
[ 2140.423540][T22732]  __se_compat_sys_ioctl+0x50e/0xc30
[ 2140.423570][T22732]  ? __pfx___se_compat_sys_ioctl+0x10/0x10
[ 2140.423598][T22732]  ? __fget_files+0x2a/0x420
[ 2140.423624][T22732]  ? fput+0x9b/0xd0
[ 2140.423644][T22732]  ? ksys_write+0x275/0x2d0
[ 2140.423677][T22732]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2140.423702][T22732]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2140.423730][T22732]  __do_fast_syscall_32+0xb4/0x110
[ 2140.423757][T22732]  ? exc_page_fault+0x5f8/0x920
[ 2140.423786][T22732]  do_fast_syscall_32+0x34/0x80
[ 2140.423813][T22732]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2140.423840][T22732] RIP: 0023:0xf7f83579
[ 2140.423858][T22732] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2140.423877][T22732] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 2140.423900][T22732] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000001
[ 2140.423915][T22732] RDX: 0000000080000140 RSI: 0000000000000000 RDI: 0000000000000000
[ 2140.423929][T22732] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2140.423941][T22732] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2140.423955][T22732] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2140.423983][T22732]  </TASK>
[ 2140.741572][T19022] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2140.755680][T19022] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 2140.764941][T19022] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2140.794516][T19022] usb 1-1: config 0 descriptor??
[ 2140.804624][T22738] FAULT_INJECTION: forcing a failure.
[ 2140.804624][T22738] name failslab, interval 1, probability 0, space 0, times 0
[ 2140.822588][T22738] CPU: 1 UID: 0 PID: 22738 Comm: syz.2.3753 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2140.822620][T22738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2140.822639][T22738] Call Trace:
[ 2140.822647][T22738]  <TASK>
[ 2140.822657][T22738]  dump_stack_lvl+0x241/0x360
[ 2140.822698][T22738]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2140.822740][T22738]  ? __pfx__printk+0x10/0x10
[ 2140.822769][T22738]  ? __lock_acquire+0xad5/0xd80
[ 2140.822803][T22738]  should_fail_ex+0x424/0x570
[ 2140.822831][T22738]  should_failslab+0xac/0x100
[ 2140.822862][T22738]  kmem_cache_alloc_noprof+0x78/0x390
[ 2140.822909][T22738]  ? skb_clone+0x20c/0x390
[ 2140.823015][T22738]  skb_clone+0x20c/0x390
[ 2140.823044][T22738]  __netlink_deliver_tap+0x3c4/0x7f0
[ 2140.823088][T22738]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2140.823117][T22738]  netlink_deliver_tap+0x19d/0x1b0
[ 2140.823149][T22738]  netlink_unicast+0x7c6/0x9a0
[ 2140.823186][T22738]  ? __pfx_netlink_unicast+0x10/0x10
[ 2140.823216][T22738]  ? skb_put+0x114/0x1f0
[ 2140.823241][T22738]  netlink_sendmsg+0x8c3/0xcd0
[ 2140.823286][T22738]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2140.823321][T22738]  ? __import_iovec+0x585/0x830
[ 2140.823350][T22738]  ? aa_sock_msg_perm+0x91/0x160
[ 2140.823388][T22738]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2140.823416][T22738]  __sock_sendmsg+0x221/0x270
[ 2140.823448][T22738]  ____sys_sendmsg+0x523/0x860
[ 2140.823482][T22738]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2140.823524][T22738]  __sys_sendmsg+0x271/0x360
[ 2140.823553][T22738]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2140.823632][T22738]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2140.823658][T22738]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2140.823687][T22738]  __do_fast_syscall_32+0xb4/0x110
[ 2140.823713][T22738]  ? exc_page_fault+0x5f8/0x920
[ 2140.823743][T22738]  do_fast_syscall_32+0x34/0x80
[ 2140.823770][T22738]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2140.823798][T22738] RIP: 0023:0xf7f83579
[ 2140.823816][T22738] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2140.823835][T22738] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 2140.823858][T22738] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000280
[ 2140.823873][T22738] RDX: 0000000024040840 RSI: 0000000000000000 RDI: 0000000000000000
[ 2140.823886][T22738] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2140.823899][T22738] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2140.823912][T22738] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2140.823944][T22738]  </TASK>
[ 2141.125712][T19206] usb 2-1: new full-speed USB device number 94 using dummy_hcd
[ 2141.153855][T22738] syz_tun: refused to change device tx_queue_len
[ 2141.160541][T22738] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check.
[ 2141.255181][T19022] usb 1-1: string descriptor 0 read error: -32
[ 2141.268043][T19022] pwc: Askey VC010 type 2 USB webcam detected.
[ 2141.317153][T19206] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 10
[ 2141.336029][T19206] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2141.346226][T19206] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2141.352999][T19206] usb 2-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00
[ 2141.366541][T19206] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2141.377136][T19206] usb 2-1: config 0 descriptor??
[ 2141.416677][T22746] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3757'.
[ 2141.493655][T19022] pwc: recv_control_msg error -32 req 02 val 2b00
[ 2141.504179][T19022] pwc: recv_control_msg error -32 req 02 val 2700
[ 2141.526759][T19022] pwc: recv_control_msg error -32 req 02 val 2c00
[ 2141.526826][T14680] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[ 2141.599913][T22746] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3757'.
[ 2141.723799][T14680] usb 4-1: config 0 has no interfaces?
[ 2141.745007][T14680] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2141.758251][T14680] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2141.795225][T19206] hid (null): report_id 0 is invalid
[ 2141.800854][T19206] hid (null): invalid report_count -737697329
[ 2141.810550][T19206] hid (null): report_id 13203 is invalid
[ 2141.831533][T14680] usb 4-1: Product: syz
[ 2141.831538][T19206] hid (null): report_id 52616 is invalid
[ 2141.831573][T19206] hid (null): report_id 0 is invalid
[ 2141.835750][T14680] usb 4-1: Manufacturer: syz
[ 2141.835771][T14680] usb 4-1: SerialNumber: syz
[ 2141.902711][T14680] usb 4-1: config 0 descriptor??
[ 2142.019495][T19206] usb 2-1: USB disconnect, device number 94
[ 2142.265978][T22744] bond54: entered promiscuous mode
[ 2142.271530][T22744] bond54: entered allmulticast mode
[ 2142.277526][T22744] 8021q: adding VLAN 0 to HW filter on device bond54
[ 2142.781674][T19022] pwc: recv_control_msg error -71 req 04 val 1000
[ 2142.788650][T19022] pwc: recv_control_msg error -71 req 04 val 1300
[ 2142.850538][T19022] pwc: recv_control_msg error -71 req 04 val 1400
[ 2142.876177][T19022] pwc: recv_control_msg error -71 req 02 val 2000
[ 2142.887568][T19022] pwc: recv_control_msg error -71 req 02 val 2100
[ 2142.927087][T19022] pwc: recv_control_msg error -71 req 04 val 1500
[ 2142.971098][T19022] pwc: recv_control_msg error -71 req 02 val 2500
[ 2142.992286][T19022] pwc: recv_control_msg error -71 req 02 val 2400
[ 2143.005041][T22760] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3761'.
[ 2143.021489][T19022] pwc: recv_control_msg error -71 req 02 val 2600
[ 2143.028498][T19022] pwc: recv_control_msg error -71 req 02 val 2900
[ 2143.043313][T19022] pwc: recv_control_msg error -71 req 02 val 2800
[ 2143.051521][T22760] sctp: [Deprecated]: syz.0.3761 (pid 22760) Use of int in maxseg socket option.
[ 2143.051521][T22760] Use struct sctp_assoc_value instead
[ 2143.115700][T19022] pwc: recv_control_msg error -71 req 04 val 1100
[ 2143.139768][T19022] pwc: recv_control_msg error -71 req 04 val 1200
[ 2143.167312][T19022] pwc: Registered as video103.
[ 2143.192590][T19022] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input21
[ 2143.291496][T19022] usb 1-1: USB disconnect, device number 2
[ 2143.411771][T22771] bridge0: port 3(syz_tun) entered disabled state
[ 2143.451421][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 2143.451442][   T30] audit: type=1326 audit(1744271937.149:474): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000
[ 2143.530291][T19206] usb 5-1: new full-speed USB device number 96 using dummy_hcd
[ 2143.710222][   T30] audit: type=1326 audit(1744271937.149:475): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000
[ 2143.742967][T19206] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64
[ 2143.758240][T19206] usb 5-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00
[ 2143.761290][T16751] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[ 2143.788647][T19206] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2143.830837][T19206] usb 5-1: config 0 descriptor??
[ 2143.844822][T22766] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2143.858554][   T30] audit: type=1326 audit(1744271937.149:476): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=23 compat=1 ip=0xf7f83579 code=0x7ffc0000
[ 2143.954461][   T30] audit: type=1326 audit(1744271937.149:477): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000
[ 2144.034682][T16751] usb 2-1: config 0 has no interfaces?
[ 2144.055728][T16751] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2144.056580][   T30] audit: type=1326 audit(1744271937.149:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=22754 comm="syz.2.3759" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f83579 code=0x7ffc0000
[ 2144.102006][T16751] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2144.116625][T16751] usb 2-1: Product: syz
[ 2144.121734][T16751] usb 2-1: Manufacturer: syz
[ 2144.126974][T16751] usb 2-1: SerialNumber: syz
[ 2144.159102][T16751] usb 2-1: config 0 descriptor??
[ 2144.339813][T14680] usb 1-1: new high-speed USB device number 3 using dummy_hcd
[ 2144.604333][T19206] elan 0003:04F3:0755.0018: hidraw0: USB HID v1.01 Device [HID 04f3:0755] on usb-dummy_hcd.4-1/input0
[ 2144.669884][T17683] usb 4-1: USB disconnect, device number 18
[ 2144.784863][    T9] usb 5-1: USB disconnect, device number 96
[ 2144.837335][T14680] usb 1-1: config 0 has no interfaces?
[ 2144.885633][T14680] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2144.904985][T14680] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2145.011272][T14680] usb 1-1: Product: syz
[ 2145.015750][T14680] usb 1-1: Manufacturer: syz
[ 2145.024176][T14680] usb 1-1: SerialNumber: syz
[ 2145.045515][T14680] usb 1-1: config 0 descriptor??
[ 2145.786305][T19206] usb 5-1: new high-speed USB device number 97 using dummy_hcd
[ 2145.829084][T22792] FAULT_INJECTION: forcing a failure.
[ 2145.829084][T22792] name failslab, interval 1, probability 0, space 0, times 0
[ 2145.888686][T22792] CPU: 0 UID: 0 PID: 22792 Comm: syz.2.3771 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2145.888723][T22792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2145.888745][T22792] Call Trace:
[ 2145.888754][T22792]  <TASK>
[ 2145.888765][T22792]  dump_stack_lvl+0x241/0x360
[ 2145.888804][T22792]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2145.888835][T22792]  ? __pfx__printk+0x10/0x10
[ 2145.888871][T22792]  ? __pfx___might_resched+0x10/0x10
[ 2145.888904][T22792]  should_fail_ex+0x424/0x570
[ 2145.888933][T22792]  should_failslab+0xac/0x100
[ 2145.888965][T22792]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[ 2145.888997][T22792]  ? __alloc_skb+0x1c2/0x480
[ 2145.889023][T22792]  __alloc_skb+0x1c2/0x480
[ 2145.889049][T22792]  ? __pfx___alloc_skb+0x10/0x10
[ 2145.889074][T22792]  ? inet_diag_dump_one_icsk+0xc7/0x500
[ 2145.889191][T22792]  inet_diag_dump_one_icsk+0x35d/0x500
[ 2145.889216][T22792]  ? inet_diag_dump_one_icsk+0xc7/0x500
[ 2145.889242][T22792]  inet_diag_cmd_exact+0x44f/0x560
[ 2145.889292][T22792]  ? __pfx_inet_diag_cmd_exact+0x10/0x10
[ 2145.889318][T22792]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2145.889371][T22792]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2145.889413][T22792]  ? __lock_acquire+0xad5/0xd80
[ 2145.889441][T22792]  inet_diag_handler_cmd+0x209/0x2b0
[ 2145.889468][T22792]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[ 2145.889495][T22792]  ? sock_diag_lock_handler+0x19/0x280
[ 2145.889562][T22792]  ? sock_diag_lock_handler+0x19/0x280
[ 2145.889588][T22792]  ? __pfx_inet_diag_handler_cmd+0x10/0x10
[ 2145.889615][T22792]  sock_diag_rcv_msg+0x3dc/0x5f0
[ 2145.889648][T22792]  netlink_rcv_skb+0x208/0x480
[ 2145.889680][T22792]  ? __pfx_sock_diag_rcv_msg+0x10/0x10
[ 2145.889710][T22792]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2145.889766][T22792]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2145.889798][T22792]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2145.889831][T22792]  netlink_unicast+0x7f8/0x9a0
[ 2145.889867][T22792]  ? __pfx_netlink_unicast+0x10/0x10
[ 2145.889896][T22792]  ? skb_put+0x114/0x1f0
[ 2145.889922][T22792]  netlink_sendmsg+0x8c3/0xcd0
[ 2145.889977][T22792]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2145.890012][T22792]  ? aa_sock_msg_perm+0x91/0x160
[ 2145.890047][T22792]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2145.890075][T22792]  __sock_sendmsg+0x221/0x270
[ 2145.890107][T22792]  sock_write_iter+0x2d9/0x3f0
[ 2145.890136][T22792]  ? __pfx_sock_write_iter+0x10/0x10
[ 2145.890185][T22792]  do_iter_readv_writev+0x71f/0x9d0
[ 2145.890219][T22792]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 2145.890250][T22792]  ? bpf_lsm_file_permission+0x9/0x10
[ 2145.890276][T22792]  ? rw_verify_area+0x246/0x630
[ 2145.890304][T22792]  vfs_writev+0x38d/0xbc0
[ 2145.890335][T22792]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2145.890367][T22792]  ? vfs_write+0xb29/0xd10
[ 2145.890393][T22792]  ? __lock_acquire+0xad5/0xd80
[ 2145.890415][T22792]  ? __pfx_vfs_writev+0x10/0x10
[ 2145.890463][T22792]  ? __fget_files+0x2a/0x420
[ 2145.890484][T22792]  ? __fget_files+0x39d/0x420
[ 2145.890501][T22792]  ? __fget_files+0x2a/0x420
[ 2145.890528][T22792]  do_writev+0x1b8/0x360
[ 2145.890561][T22792]  ? __pfx_do_writev+0x10/0x10
[ 2145.890585][T22792]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 2145.890604][T22792]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2145.890623][T22792]  __do_fast_syscall_32+0xb4/0x110
[ 2145.890641][T22792]  ? exc_page_fault+0x5f8/0x920
[ 2145.890661][T22792]  do_fast_syscall_32+0x34/0x80
[ 2145.890680][T22792]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2145.890698][T22792] RIP: 0023:0xf7f83579
[ 2145.890711][T22792] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2145.890724][T22792] RSP: 002b:00000000f50a655c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[ 2145.890745][T22792] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 0000000080000080
[ 2145.890756][T22792] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 2145.890764][T22792] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2145.890773][T22792] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2145.890782][T22792] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2145.890802][T22792]  </TASK>
[ 2146.347284][T19206] usb 5-1: Using ep0 maxpacket: 32
[ 2146.421700][T19206] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 2146.433904][T19206] usb 5-1: config 0 has no interface number 0
[ 2146.442695][T19206] usb 5-1: config 0 interface 12 has no altsetting 0
[ 2146.846443][T19206] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2146.866551][T19206] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2146.893981][T19206] usb 5-1: Product: syz
[ 2146.906750][T19206] usb 5-1: Manufacturer: syz
[ 2146.945864][    T9] usb 2-1: USB disconnect, device number 95
[ 2146.955258][T19206] usb 5-1: SerialNumber: syz
[ 2146.979719][T19206] usb 5-1: config 0 descriptor??
[ 2147.006017][T22799] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3773'.
[ 2147.056001][T22801] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING
[ 2147.071133][T14680] usb 1-1: USB disconnect, device number 3
[ 2147.091106][T19206] f81534 5-1:0.12: required endpoints missing
[ 2147.214157][T22804] netlink: 76 bytes leftover after parsing attributes in process `syz.1.3775'.
[ 2147.244342][T22804] sctp: [Deprecated]: syz.1.3775 (pid 22804) Use of int in maxseg socket option.
[ 2147.244342][T22804] Use struct sctp_assoc_value instead
[ 2147.269650][T22808] FAULT_INJECTION: forcing a failure.
[ 2147.269650][T22808] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2147.363130][T22808] CPU: 0 UID: 0 PID: 22808 Comm: syz.3.3777 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2147.363156][T22808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2147.363166][T22808] Call Trace:
[ 2147.363173][T22808]  <TASK>
[ 2147.363180][T22808]  dump_stack_lvl+0x241/0x360
[ 2147.363208][T22808]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2147.363231][T22808]  ? __pfx__printk+0x10/0x10
[ 2147.363262][T22808]  should_fail_ex+0x424/0x570
[ 2147.363283][T22808]  _copy_from_user+0x2d/0xb0
[ 2147.363306][T22808]  do_ip6t_set_ctl+0x3ad/0x1270
[ 2147.363404][T22808]  ? __pfx___mutex_trylock_common+0x10/0x10
[ 2147.363425][T22808]  ? __pfx_do_ip6t_set_ctl+0x10/0x10
[ 2147.363453][T22808]  ? nf_setsockopt+0x240/0x2c0
[ 2147.363513][T22808]  ? __mutex_unlock_slowpath+0x229/0x800
[ 2147.363540][T22808]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2147.363563][T22808]  ? rcu_read_lock_any_held+0xbb/0x160
[ 2147.363583][T22808]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 2147.363610][T22808]  nf_setsockopt+0x295/0x2c0
[ 2147.363638][T22808]  rawv6_setsockopt+0x2b3/0x6d0
[ 2147.363691][T22808]  ? __pfx_rawv6_setsockopt+0x10/0x10
[ 2147.363713][T22808]  ? __lock_acquire+0xad5/0xd80
[ 2147.363729][T22808]  ? aa_sock_opt_perm+0x79/0x120
[ 2147.363750][T22808]  ? sock_common_setsockopt+0x37/0xc0
[ 2147.363774][T22808]  ? __pfx_sock_common_setsockopt+0x10/0x10
[ 2147.363795][T22808]  do_sock_setsockopt+0x3b1/0x710
[ 2147.363814][T22808]  ? __pfx_do_sock_setsockopt+0x10/0x10
[ 2147.363829][T22808]  ? __fget_files+0x2a/0x420
[ 2147.363845][T22808]  ? __fget_files+0x39d/0x420
[ 2147.363857][T22808]  ? __fget_files+0x2a/0x420
[ 2147.363876][T22808]  __ia32_sys_setsockopt+0x1f2/0x280
[ 2147.363896][T22808]  __do_fast_syscall_32+0xb4/0x110
[ 2147.363916][T22808]  ? exc_page_fault+0x5f8/0x920
[ 2147.363936][T22808]  do_fast_syscall_32+0x34/0x80
[ 2147.363956][T22808]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2147.363975][T22808] RIP: 0023:0xf73fd579
[ 2147.363989][T22808] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2147.364002][T22808] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 000000000000016e
[ 2147.364019][T22808] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000029
[ 2147.364030][T22808] RDX: 0000000000000040 RSI: 00000000800006c0 RDI: 0000000000000550
[ 2147.364039][T22808] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2147.364049][T22808] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2147.364058][T22808] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2147.364079][T22808]  </TASK>
[ 2149.419090][T16751] usb 5-1: USB disconnect, device number 97
[ 2149.469764][T19206] usb 1-1: new full-speed USB device number 4 using dummy_hcd
[ 2149.686071][T19206] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[ 2149.765798][T19206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 10
[ 2149.811621][T22830] bridge0: port 3(syz_tun) entered disabled state
[ 2149.867366][T19206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid maxpacket 8704, setting to 64
[ 2149.939565][T19206] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 65535, setting to 64
[ 2149.957048][T19206] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[ 2149.982370][T19206] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2150.056768][T22836] bond67: entered promiscuous mode
[ 2150.062185][T22836] bond67: entered allmulticast mode
[ 2150.068144][T22836] 8021q: adding VLAN 0 to HW filter on device bond67
[ 2150.126840][T19206] usb 1-1: Product: syz
[ 2150.174467][T19206] usb 1-1: Manufacturer: syz
[ 2150.269761][T19206] usb 1-1: SerialNumber: syz
[ 2150.391361][T19206] usb 1-1: config 0 descriptor??
[ 2150.719840][T16751] usb 3-1: new high-speed USB device number 114 using dummy_hcd
[ 2150.806753][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2150.817664][T19206] input input22: Device does not respond to id packet M
[ 2150.896884][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2150.948484][T19206] input input22: Device does not respond to id packet P
[ 2151.050921][T16751] usb 3-1: config 0 has no interfaces?
[ 2151.072264][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.078662][T19206] input input22: Device does not respond to id packet B
[ 2151.091195][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.104408][T19206] input input22: Device does not respond to id packet N
[ 2151.115549][T16751] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2151.125241][T16751] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2151.138973][T16751] usb 3-1: Product: syz
[ 2151.149106][T16751] usb 3-1: Manufacturer: syz
[ 2151.162316][T16751] usb 3-1: SerialNumber: syz
[ 2151.168674][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.191736][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.201611][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.225504][T16751] usb 3-1: config 0 descriptor??
[ 2151.248282][T19206] iforce 1-1:0.0: usb_submit_urb failed: -71
[ 2151.340830][T19206] input: Unknown I-Force Device [%04x:%04x] as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input22
[ 2151.388842][T22834] syz.4.3786 (22834): drop_caches: 2
[ 2151.509226][    C0] iforce 1-1:0.0: iforce_usb_irq - usb_submit_urb failed with result -1
[ 2151.629171][T19206] usb 1-1: USB disconnect, device number 4
[ 2151.734928][T22846] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3789'.
[ 2151.810080][T22846] sctp: [Deprecated]: syz.0.3789 (pid 22846) Use of int in maxseg socket option.
[ 2151.810080][T22846] Use struct sctp_assoc_value instead
[ 2151.877623][T22842] bond0: entered promiscuous mode
[ 2151.883010][T22842] bond0: entered allmulticast mode
[ 2151.890221][T22842] 8021q: adding VLAN 0 to HW filter on device bond0
[ 2151.949552][T16751] usb 5-1: new high-speed USB device number 98 using dummy_hcd
[ 2152.101835][T16751] usb 5-1: New USB device found, idVendor=1b96, idProduct=0003, bcdDevice= 0.00
[ 2152.112048][T16751] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2152.331574][T16751] usb 5-1: config 0 descriptor??
[ 2152.423782][T22851] fuse: Bad value for 'fd'
[ 2152.763061][T16751] ntrig 0003:1B96:0003.0019: hidraw0: USB HID v1.01 Device [HID 1b96:0003] on usb-dummy_hcd.4-1/input0
[ 2153.028572][T16751] usb 5-1: USB disconnect, device number 98
[ 2153.394178][T16751] usb 3-1: USB disconnect, device number 114
[ 2153.507088][T22863] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3793'.
[ 2154.003127][T19022] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[ 2154.284228][T19022] usb 4-1: New USB device found, idVendor=1e7d, idProduct=2dbe, bcdDevice= 0.00
[ 2154.293684][T19022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2154.514113][T19022] usb 4-1: config 0 descriptor??
[ 2154.569334][T14680] usb 5-1: new high-speed USB device number 99 using dummy_hcd
[ 2154.667789][T22870] syz_tun: refused to change device tx_queue_len
[ 2154.749568][T14680] usb 5-1: Using ep0 maxpacket: 32
[ 2154.774983][T14680] usb 5-1: config 0 has an invalid interface number: 12 but max is 0
[ 2154.797966][T14680] usb 5-1: config 0 has no interface number 0
[ 2154.828952][T14680] usb 5-1: config 0 interface 12 has no altsetting 0
[ 2154.887238][T14680] usb 5-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40
[ 2154.898423][T14680] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2154.918559][T14680] usb 5-1: Product: syz
[ 2154.927551][T14680] usb 5-1: Manufacturer: syz
[ 2154.942238][T14680] usb 5-1: SerialNumber: syz
[ 2154.972486][T14680] usb 5-1: config 0 descriptor??
[ 2155.031662][T14680] f81534 5-1:0.12: required endpoints missing
[ 2155.233658][T19022] usbhid 4-1:0.0: can't add hid device: -71
[ 2155.269558][T19022] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[ 2155.299471][T19022] usb 4-1: USB disconnect, device number 19
[ 2155.886666][T22880] loop9: detected capacity change from 0 to 8
[ 2155.894556][T22882] FAULT_INJECTION: forcing a failure.
[ 2155.894556][T22882] name failslab, interval 1, probability 0, space 0, times 0
[ 2155.928891][T22880] Dev loop9: unable to read RDB block 8
[ 2155.942018][T22882] CPU: 1 UID: 0 PID: 22882 Comm: syz.0.3801 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2155.942049][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2155.942062][T22882] Call Trace:
[ 2155.942072][T22882]  <TASK>
[ 2155.942081][T22882]  dump_stack_lvl+0x241/0x360
[ 2155.942119][T22882]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2155.942151][T22882]  ? __pfx__printk+0x10/0x10
[ 2155.942185][T22882]  ? __pfx___might_resched+0x10/0x10
[ 2155.942218][T22882]  should_fail_ex+0x424/0x570
[ 2155.942246][T22882]  should_failslab+0xac/0x100
[ 2155.942278][T22882]  __kmalloc_noprof+0xdf/0x4d0
[ 2155.942307][T22882]  ? create_rule+0x70/0x370
[ 2155.942332][T22882]  create_rule+0x70/0x370
[ 2155.942359][T22882]  insert_rule+0x333/0x6a0
[ 2155.942388][T22882]  merge_tree+0x327/0x540
[ 2155.942415][T22882]  ? __pfx_merge_tree+0x10/0x10
[ 2155.942439][T22882]  ? __kmalloc_cache_noprof+0x236/0x370
[ 2155.942467][T22882]  ? landlock_merge_ruleset+0x1c9/0x900
[ 2155.942494][T22882]  landlock_merge_ruleset+0x5e1/0x900
[ 2155.942527][T22882]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2155.942554][T22882]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2155.942583][T22882]  __do_fast_syscall_32+0xb4/0x110
[ 2155.942609][T22882]  ? exc_page_fault+0x5f8/0x920
[ 2155.942637][T22882]  do_fast_syscall_32+0x34/0x80
[ 2155.942663][T22882]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2155.942689][T22882] RIP: 0023:0xf746d579
[ 2155.942708][T22882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2155.942726][T22882] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 2155.942748][T22882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2155.942762][T22882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2155.942774][T22882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2155.942786][T22882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2155.942799][T22882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2155.942830][T22882]  </TASK>
[ 2155.943515][T22882] ------------[ cut here ]------------
[ 2155.983217][T22880]  loop9: unable to read partition table
[ 2155.984463][T22882] WARNING: CPU: 1 PID: 22882 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250
[ 2156.002637][T22880] loop9: partition table beyond EOD, 
[ 2156.004011][T22882] Modules linked in:
[ 2156.004039][T22882] CPU: 1 UID: 0 PID: 22882 Comm: syz.0.3801 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2156.009531][T22880] truncated
[ 2156.013370][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2156.017763][T22880] loop_reread_partitions: partition scan of loop9 (þ被x󟣑– ) failed (rc=-5)
[ 2156.024773][T22882] RIP: 0010:free_ruleset+0x1f3/0x250
[ 2156.236923][T22882] Code: 89 ff e8 10 05 6c fd 49 8b 1f 4c 89 ff e8 55 62 60 fd 48 85 db 74 36 e8 eb dc 01 fd 49 89 df e9 34 ff ff ff e8 de dc 01 fd 90 <0f> 0b 90 eb c2 e8 d3 dc 01 fd eb 1c bf 01 00 00 00 89 ee e8 05 e1
[ 2156.256741][T22882] RSP: 0018:ffffc90003d8fda8 EFLAGS: 00010293
[ 2156.262974][T22882] RAX: ffffffff84c18892 RBX: 0000000000000000 RCX: ffff88801c681e00
[ 2156.271115][T22882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2156.279162][T22882] RBP: 1ffff1100525d554 R08: ffffffff84c2942f R09: 1ffff1100525d551
[ 2156.287263][T22882] R10: dffffc0000000000 R11: ffffed100525d552 R12: ffff8880292eaaa0
[ 2156.295423][T22882] R13: dffffc0000000000 R14: ffff8880406ad300 R15: ffff8880292eaa80
[ 2156.303523][T22882] FS:  0000000000000000(0000) GS:ffff888125096000(0063) knlGS:00000000f50f6b40
[ 2156.312590][T22882] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 2156.319215][T22882] CR2: 00000000f50b4da4 CR3: 0000000042f86000 CR4: 00000000003526f0
[ 2156.327425][T22882] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2156.335523][T22882] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2156.343604][T22882] Call Trace:
[ 2156.346921][T22882]  <TASK>
[ 2156.350084][T22882]  landlock_merge_ruleset+0x6d8/0x900
[ 2156.355510][T22882]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2156.361792][T22882]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2156.367051][T22882]  __do_fast_syscall_32+0xb4/0x110
[ 2156.372334][T22882]  ? exc_page_fault+0x5f8/0x920
[ 2156.377233][T22882]  do_fast_syscall_32+0x34/0x80
[ 2156.382212][T22882]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2156.388575][T22882] RIP: 0023:0xf746d579
[ 2156.392787][T22882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2156.412570][T22882] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 2156.421141][T22882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2156.429165][T22882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2156.437413][T22882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2156.445509][T22882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2156.453601][T22882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2156.461710][T22882]  </TASK>
[ 2156.464776][T22882] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2156.472092][T22882] CPU: 1 UID: 0 PID: 22882 Comm: syz.0.3801 Not tainted 6.15.0-rc1-syzkaller-00065-g3b07108ada81 #0 PREEMPT(full) 
[ 2156.484204][T22882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2156.494304][T22882] Call Trace:
[ 2156.497620][T22882]  <TASK>
[ 2156.500578][T22882]  dump_stack_lvl+0x241/0x360
[ 2156.505296][T22882]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2156.510523][T22882]  ? __pfx__printk+0x10/0x10
[ 2156.515162][T22882]  ? vscnprintf+0x5d/0x90
[ 2156.519602][T22882]  panic+0x349/0x880
[ 2156.523531][T22882]  ? __warn+0x174/0x4d0
[ 2156.527706][T22882]  ? __pfx_panic+0x10/0x10
[ 2156.532163][T22882]  __warn+0x344/0x4d0
[ 2156.536157][T22882]  ? free_ruleset+0x1f3/0x250
[ 2156.540843][T22882]  report_bug+0x2b3/0x500
[ 2156.545247][T22882]  ? free_ruleset+0x1f3/0x250
[ 2156.549928][T22882]  ? free_ruleset+0x1f3/0x250
[ 2156.554606][T22882]  ? free_ruleset+0x1f5/0x250
[ 2156.559283][T22882]  handle_bug+0x89/0x170
[ 2156.563530][T22882]  exc_invalid_op+0x1a/0x50
[ 2156.568038][T22882]  asm_exc_invalid_op+0x1a/0x20
[ 2156.572903][T22882] RIP: 0010:free_ruleset+0x1f3/0x250
[ 2156.578210][T22882] Code: 89 ff e8 10 05 6c fd 49 8b 1f 4c 89 ff e8 55 62 60 fd 48 85 db 74 36 e8 eb dc 01 fd 49 89 df e9 34 ff ff ff e8 de dc 01 fd 90 <0f> 0b 90 eb c2 e8 d3 dc 01 fd eb 1c bf 01 00 00 00 89 ee e8 05 e1
[ 2156.597858][T22882] RSP: 0018:ffffc90003d8fda8 EFLAGS: 00010293
[ 2156.603937][T22882] RAX: ffffffff84c18892 RBX: 0000000000000000 RCX: ffff88801c681e00
[ 2156.611913][T22882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2156.619888][T22882] RBP: 1ffff1100525d554 R08: ffffffff84c2942f R09: 1ffff1100525d551
[ 2156.627881][T22882] R10: dffffc0000000000 R11: ffffed100525d552 R12: ffff8880292eaaa0
[ 2156.635873][T22882] R13: dffffc0000000000 R14: ffff8880406ad300 R15: ffff8880292eaa80
[ 2156.643870][T22882]  ? landlock_log_drop_domain+0x4f/0x1b0
[ 2156.649548][T22882]  ? free_ruleset+0x1f2/0x250
[ 2156.654248][T22882]  ? free_ruleset+0x1f2/0x250
[ 2156.658944][T22882]  landlock_merge_ruleset+0x6d8/0x900
[ 2156.664332][T22882]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2156.670500][T22882]  ? lockdep_hardirqs_on+0x9d/0x150
[ 2156.675712][T22882]  __do_fast_syscall_32+0xb4/0x110
[ 2156.680833][T22882]  ? exc_page_fault+0x5f8/0x920
[ 2156.685696][T22882]  do_fast_syscall_32+0x34/0x80
[ 2156.690558][T22882]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 2156.696896][T22882] RIP: 0023:0xf746d579
[ 2156.700970][T22882] Code: b8 01 10 06 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 2156.720669][T22882] RSP: 002b:00000000f50f655c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 2156.729093][T22882] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 2156.737071][T22882] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2156.745047][T22882] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 2156.753020][T22882] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 2156.760996][T22882] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 2156.768983][T22882]  </TASK>
[ 2156.772386][T22882] Kernel Offset: disabled
[ 2156.776715][T22882] Rebooting in 86400 seconds..