last executing test programs:

2m41.845292252s ago: executing program 3 (id=7833):
r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x802, 0x0)
write$uinput_user_dev(r1, &(0x7f0000000080)={'syz1\x00', {0x3ff, 0x3, 0x4}, 0x51, [0xd4, 0x6, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x101, 0x3c6, 0x7, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5e, 0x0, 0x1, 0x8, 0xffff, 0xe, 0xe, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0x6, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a23, 0x1000, 0x8, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7ffffffd, 0x1, 0x553, 0x6, 0x2, 0xfffffffc, 0x8, 0xc, 0x36, 0xa, 0x6, 0x1, 0x9, 0x98, 0x8, 0xe56d, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0xd, 0x5, 0x0, 0x6e38, 0x8000, 0xa, 0x2, 0x3, 0x0, 0x5, 0x7, 0x4, 0xd, 0x9, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x5, 0x8, 0x0, 0x34f1, 0x1ff, 0x4, 0x1b2c5a17, 0x0, 0x9, 0xc, 0x0, 0xffffffff, 0x1, 0x6, 0x6, 0xac, 0x2, 0x54, 0xcfb9], [0x6, 0xdb8, 0x9, 0x4, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d3, 0x33, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0x0, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x0, 0x0, 0x1, 0xfffffffe, 0x3, 0x0, 0x9, 0x8c0, 0x9, 0x2, 0x9, 0x7, 0x6, 0xfffffffa, 0x81, 0x8, 0xffffff20, 0x55f2, 0xdf46, 0xfffffffd, 0x7f, 0x9, 0x8000, 0x40, 0x3, 0x2, 0xa, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x897, 0x8, 0x246d, 0x6, 0x101, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x9, 0x80000001, 0x2, 0xb, 0x2, 0x7, 0x1, 0x7, 0x2, 0x7ff, 0x3ff, 0x0, 0x2, 0x6, 0x100, 0x1, 0xec9b, 0x61c8, 0x6, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x9, 0x0, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x1000, 0x3, 0x2, 0x15, 0x8000, 0x7, 0x81, 0x5, 0x7, 0xfffffffc, 0x4, 0x6, 0xeff]}, 0x45c)
ioctl$UI_DEV_CREATE(r1, 0x5501)
r2 = syz_open_dev$I2C(&(0x7f0000000040), 0x1, 0xc0802)
write$binfmt_elf32(r2, 0x0, 0x0)
writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000000)="4d6bde9aecc7955e497ac0d6834d6a35f38c20dd9d1b6fc9bf16ca130b0220132080b1e697d5b5bf83deb694c9e051cbe38440916cd8f55ffc2eec31a4b8c31b6dbfcd0a55b855bccd4f3d19ba42420aed78a0ad42841082d35072224477dfab6a944205c62dd0100514fc7ab410b74a89215d4a0e42d55b3d6b23554ab54542f615a44d7e68af934b93e4d0c8814706c2af21e24988d092815b2907c7fae781f6bd17642f1665c5", 0xa8}, {&(0x7f00000000c0)="d383", 0x2}], 0x2)
r3 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0)
syz_usb_control_io$uac1(r3, 0x0, &(0x7f0000000040)={0x44, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400000003070103474499360000000000000400"], 0x14}}, 0x0)
r5 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_ifreq(r5, 0x8929, &(0x7f00000010c0)={'syz_tun\x00', @ifru_addrs=@rc={0x1f, @none}})
ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000140)={0x400, 0x33e, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, {0x0, 0x401}, {}, {}, {0x0, 0x8}, 0x3, 0x3f0, 0x81, 0xe, 0x1, 0x0, 0x0, 0xffffffff, 0x761a, 0x0, 0x0, 0x0, 0x10, 0x1, 0x3, 0x1})

2m39.705021952s ago: executing program 3 (id=7841):
r0 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r0, 0x0, 0x18, &(0x7f0000000080)=0x200, 0x4)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000000100), 0x0, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, 0x0, 0x0)
madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil)
semctl$SEM_INFO(0x0, 0x2, 0x13, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0)
write$binfmt_script(r3, &(0x7f0000000240), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r3, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='smaps\x00')
r5 = semget(0x1, 0x3, 0x422)
semctl$IPC_STAT(r5, 0x0, 0x2, &(0x7f0000000800)=""/4096)
pread64(r4, &(0x7f0000000280)=""/70, 0x46, 0xbbf9)
recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x10013)
r6 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/config', 0x0, 0x1ea)
lseek(r6, 0x2, 0x0)
getdents64(r6, &(0x7f0000000000)=""/95, 0x5f)
io_uring_setup(0x377b, &(0x7f0000000140)={0x0, 0x516f, 0x2, 0x2, 0x23f, 0x0, r6})
socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e22, 0x81, @rand_addr=' \x01\x00', 0x6}}, 0x5, 0x7fff, 0xfffffffb, 0xb, 0x1, 0x0, 0x3}, 0x9c)
bind$unix(r7, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e)
ioctl$AUTOFS_DEV_IOCTL_READY(r6, 0xc0189376, &(0x7f0000000200)={{0x1, 0x1, 0x18, r7, {0x100}}, './file0\x00'})
bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x3, @mcast1, 0x2}, 0x1c)

2m38.68026682s ago: executing program 3 (id=7848):
pipe(&(0x7f00000045c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$packet(0x11, 0x3, 0x300)
mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2, 0x11, r1, 0x80000)
vmsplice(r0, &(0x7f00000019c0)=[{0x0}], 0x1, 0x1)

2m38.547243097s ago: executing program 3 (id=7850):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12, 0x0, 0x0, 0xe000, 0x9}}}}}, 0x0)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x89901)
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0)
chroot(&(0x7f0000000300)='./file0/../file0/../file0/../file0\x00')
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
move_mount(r1, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="2400000001040102000000c9fd0000000000000008000340000100000500010001"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x0)
sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x24, 0x1, 0x4, 0x5, 0x0, 0x0, {0x2}, [@NFULA_CFG_FLAGS={0x6}, @NFULA_CFG_CMD={0x5, 0x1, 0x2}]}, 0x24}}, 0x2000004)
pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='./file0/../file0/../file0/../file0\x00')
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x4, &(0x7f0000006680))
getegid()

2m38.348194141s ago: executing program 3 (id=7851):
r0 = fcntl$getown(0xffffffffffffffff, 0x9)
get_robust_list(r0, &(0x7f0000000140)=&(0x7f0000000100)={&(0x7f00000000c0)={&(0x7f0000000080)}}, &(0x7f0000000180)=0x18)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000113c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000002c0)="0d1b45235c6ad2ec6d57acc7325a1a7f37e46c5fb8", 0x15}, {&(0x7f0000000380)="329c73aacaf7bd70d6e7054d596b92b7a82f45", 0x13}], 0x2, 0x0, 0x0, 0x11}}], 0x1, 0x80)
syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0)
syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000340)={0x24, 0x0, 0x0, &(0x7f0000000300)=ANY=[@ANYRESDEC], 0x0}, 0x0)
r1 = socket$kcm(0x29, 0x2, 0x0)
r2 = memfd_create(&(0x7f0000000000)='e\xf4\x88\x7f\xa5\v', 0x0)
unshare(0x2c020400)
openat$audio(0xffffffffffffff9c, &(0x7f00000003c0), 0x100, 0x0)
r3 = socket(0x2c, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r3, 0x11b, 0xc, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x1f, 0x80000, 0xffffffff)
r5 = socket(0x1d, 0x2, 0x6)
ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vxcan0\x00', <r6=>0x0})
r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r7, 0x0)
bind$can_j1939(r5, &(0x7f0000000380)={0x1d, r6, 0x1, {0x0, 0x0, 0x3}, 0xff}, 0x18)
sendmmsg$sock(r5, &(0x7f0000000280)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1f", 0x206c}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0)
sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7800000000010904000000000000000002000000240001801400018008000100ac1414bb08000200ac1414aa0c00028005000100000000002400028014000180080001007f00000108000200ac1e00010c0002800500010000000000080007400000dfff130016"], 0x78}}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00'})
pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000480)="db", 0x1}], 0x1, 0x4000001, 0x0)
r8 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0)
ioctl$VHOST_SET_FEATURES(r8, 0x4008af00, &(0x7f0000000280)=0x1000000)
r9 = socket(0x1f, 0x2, 0xa)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000001c0)={'wlan1\x00'})
sendfile(r1, r2, 0x0, 0x8000fb00)

2m37.796440983s ago: executing program 3 (id=7854):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="2009860000008609c19ec9b28acd93689fbd2c9e5b6d1daf59c8a3c455e5e4f4c04238e697946473dc16d2f0933ea8efc3e1776b3794516813ed0dcfee57086ad7f273fdf022dabb8be75bd4f97fef4611ddcb6f9f54bc7cf03b6cd8fde2b8c4565763f41a5dfdda84fcb92b87572d3ef77ade0b0c9525f0c1de539d93861845ac06b4f183ef7dab550fad67de2948659e48c034f64fb31e8e58783b67cace240843aef58bcde0eecdf35b568445d47c8a57e3cd655d6d898227a7b2e14e83e4a785f661f6a413e42362b1f29063b23df85484161fe3fd949911eb22bba5f39a60"], &(0x7f00000006c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "42d947052c5f462d071fb08f73fa88707d125517bb9269acbd3f206287e89957d2a6e45fb703956d6336d6a552185765099089c515a8eb58d523b2811c4227b3c3b4fc132671bcddbd6149ce8292f6969763b3a908a20cbd088fddd0b29f98a889a7dd1aaca27a7b0d10b3a2ec5e893ed19fe329d249b432fc5d0ceefc8c120ffd2815904e28dff563e1b9d4c2a6a6c8a18368e8107e9da514d86aa274009b22323ec5aaef8d370aaf29a6a7b8b67bc41c69d20625cb86adfdbd687c1dfc3630d6e3133b08c9f6a5af1a151da81c98be90b4130d"}}, &(0x7f0000000e40)=ANY=[@ANYBLOB="000d05000000050f0500009be9e44a7d936885fcae499bfd8847d0a7ff343822c83e44f2acf1ee762937688957da5dd8521720ffc8c2912d430d8f23394e9e"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa6, 0x3, 0x5, 0xf, "da95e64d", "357881e8"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0xfd, 0x7, 0x3, 0x7}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x40, 0xa, 0x71, "4775b3129da70dd0c2e1a1ccfdaa89c70348de58d87e946361022632c1cff9c91502b6872f33142ae3f99182ffa68f61229d14ceefc800dd11dafd65d014ac7536f840db07a512313e79361be2115aaf569bbddafdad503c5e071263c35f638bc231e120f82d73bb04f90697126f59132b"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xb116}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "55d9"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "c1c0"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

2m37.188252089s ago: executing program 32 (id=7854):
r0 = syz_usb_connect(0x2, 0x239, &(0x7f0000000000)=ANY=[], 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000800)={0x2c, &(0x7f0000000e80)=ANY=[@ANYBLOB="2009860000008609c19ec9b28acd93689fbd2c9e5b6d1daf59c8a3c455e5e4f4c04238e697946473dc16d2f0933ea8efc3e1776b3794516813ed0dcfee57086ad7f273fdf022dabb8be75bd4f97fef4611ddcb6f9f54bc7cf03b6cd8fde2b8c4565763f41a5dfdda84fcb92b87572d3ef77ade0b0c9525f0c1de539d93861845ac06b4f183ef7dab550fad67de2948659e48c034f64fb31e8e58783b67cace240843aef58bcde0eecdf35b568445d47c8a57e3cd655d6d898227a7b2e14e83e4a785f661f6a413e42362b1f29063b23df85484161fe3fd949911eb22bba5f39a60"], &(0x7f00000006c0)={0x0, 0x3, 0xd6, @string={0xd6, 0x3, "42d947052c5f462d071fb08f73fa88707d125517bb9269acbd3f206287e89957d2a6e45fb703956d6336d6a552185765099089c515a8eb58d523b2811c4227b3c3b4fc132671bcddbd6149ce8292f6969763b3a908a20cbd088fddd0b29f98a889a7dd1aaca27a7b0d10b3a2ec5e893ed19fe329d249b432fc5d0ceefc8c120ffd2815904e28dff563e1b9d4c2a6a6c8a18368e8107e9da514d86aa274009b22323ec5aaef8d370aaf29a6a7b8b67bc41c69d20625cb86adfdbd687c1dfc3630d6e3133b08c9f6a5af1a151da81c98be90b4130d"}}, &(0x7f0000000e40)=ANY=[@ANYBLOB="000d05000000050f0500009be9e44a7d936885fcae499bfd8847d0a7ff343822c83e44f2acf1ee762937688957da5dd8521720ffc8c2912d430d8f23394e9e"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0xa6, 0x3, 0x5, 0xf, "da95e64d", "357881e8"}}, &(0x7f00000007c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x2, 0x0, 0x2, 0xfd, 0x7, 0x3, 0x7}}}, &(0x7f0000000c80)={0x84, &(0x7f0000000840)={0x40, 0xa, 0x71, "4775b3129da70dd0c2e1a1ccfdaa89c70348de58d87e946361022632c1cff9c91502b6872f33142ae3f99182ffa68f61229d14ceefc800dd11dafd65d014ac7536f840db07a512313e79361be2115aaf569bbddafdad503c5e071263c35f638bc231e120f82d73bb04f90697126f59132b"}, &(0x7f00000008c0)={0x0, 0xa, 0x1, 0xf0}, &(0x7f0000000900)={0x0, 0x8, 0x1, 0x8}, &(0x7f0000000940)={0x20, 0x0, 0x4, {0x1, 0x2}}, &(0x7f0000000980)={0x20, 0x0, 0x4, {0x80, 0x20}}, &(0x7f00000009c0)={0x40, 0x7, 0x2, 0xb116}, &(0x7f0000000a00)={0x40, 0x9, 0x1, 0x7}, &(0x7f0000000a40)={0x40, 0xb, 0x2, "55d9"}, &(0x7f0000000a80)={0x40, 0xf, 0x2, 0x6}, &(0x7f0000000ac0)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, &(0x7f0000000b00)={0x40, 0x17, 0x6, @remote}, &(0x7f0000000b40)={0x40, 0x19, 0x2, "c1c0"}, &(0x7f0000000b80)={0x40, 0x1a, 0x2, 0x6}, &(0x7f0000000bc0)={0x40, 0x1c, 0x1, 0xf}, &(0x7f0000000c00)={0x40, 0x1e, 0x1, 0x8}, &(0x7f0000000c40)={0x40, 0x21, 0x1, 0x7}})
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)

8.515843142s ago: executing program 4 (id=8516):
r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x104d9b3c, 0x2)
ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000002140)={0x32, 0x2, 0x0, "b41d70dde508000000000000003ac9180000c67f000300000000007b572c1f00", 0x72767312})
unshare(0x80)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0), 0x100}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000080)={'wlan0\x00', &(0x7f0000000000)=@ethtool_stats={0x11}})
r2 = syz_clone(0x20304000, 0x0, 0x0, 0x0, 0x0, 0x0)
r3 = socket$netlink(0x10, 0x3, 0x0)
r4 = socket(0x15, 0x1, 0x0)
sendmsg$IPVS_CMD_SET_INFO(r4, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0)
getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, <r5=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14)
sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESDEC=r3, @ANYRESOCT=r2, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0)
sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0)
r6 = socket(0x10, 0x3, 0x0)
r7 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r7, 0x3b81, &(0x7f00000000c0)={0xc, 0x0, <r8=>0x0})
ioctl$IOMMU_IOAS_ALLOW_IOVAS(r7, 0x3b82, &(0x7f0000000180)={0x20, r8, 0x2, 0x0, &(0x7f00000001c0)=[{0x0, 0x1}, {0x3, 0x5}]})
close(0xffffffffffffffff)
ioctl$IOMMU_DESTROY$ioas(r7, 0x3b80, &(0x7f0000000d00)={0x8, r8})
sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0)
sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0)

7.893107572s ago: executing program 1 (id=8519):
syz_usb_connect(0x0, 0x24, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000810087406d040e0a759400000001090212000100000000090400200003"], 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
socket$nl_generic(0x10, 0x3, 0x10)

7.698681915s ago: executing program 4 (id=8520):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffe7a, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="9de736c446adc3173922c1bdfecb0fe43b1fc2b74a2f7e403872daa3bf5937a6f220fe89f6420bb2a65736810a1773c77fe884b32c61a7ce04eebe9522904643de4095fbac6f893fc850f7db5e193bb1447cbb675ae5762fcd3da2a22d5195d0e914b9c671aaa529c7acd67e0ab03f598de6a795e9093403c181ef5ab1f752914bb5ee8d8c14e2b9d78461a39d055469c0c8a55cc01c8d87d2526aa9dda917abbcd921172235aaf5820d5b35e0d6f805f5c5380d39abeabc1f39bfa4b28c821bcf9b367998c3cd", @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=<r1=>0x0])
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f2c993d3030303030e7bd303030303030af5decdd8250d3d1a267b02d06000000000000002a30303030302c717365725f698c3232eaaa68115bda6fe0191a22b7439e4068646df38f941c0231ea2328739902e9a6d3de9b17", @ANYRESDEC=0x0, @ANYBLOB="7da5c1796f594f69924b8c0d094541f35046db9394994f7a5b6ddd011667dab337c115325da39859ee92c268b627579d7a9d625da72467864ba7dd7d6125921e7635e468f8c327e40a2017474bfdfb190c227b296713fb6565b0615d", @ANYRES32=r2])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8a10400, 0x0, 0x27}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
write$cgroup_int(r4, &(0x7f0000000300)=0x3, 0x12)
close(r2)
r5 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendto$inet(r5, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil})
r7 = getpid()
sched_setscheduler(r7, 0x2, 0x0)

6.311068969s ago: executing program 1 (id=8527):
syz_open_procfs$pagemap(0x0, &(0x7f0000000140))
socket$nl_generic(0x10, 0x3, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x0)
mknod(&(0x7f0000000140)='./file1/file3\x00', 0xc000, 0x9)
rename(&(0x7f00000003c0)='./file1/file3\x00', &(0x7f0000000100)='./file0\x00')
socket(0x10, 0x2, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_user\x00', 0x26e1, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
fsopen(&(0x7f0000000280)='ceph\x00', 0x0)
socket(0x2, 0x80805, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000001c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYRES16=r0], 0x0)
ioctl$VIDIOC_ENUM_FREQ_BANDS(0xffffffffffffffff, 0xc0405665, &(0x7f0000000400)={0xb, 0x5, 0x5, 0x0, 0x8, 0x6, 0x8})
r3 = syz_open_dev$radio(&(0x7f0000000300), 0x1, 0x2)
open_by_handle_at(r3, &(0x7f0000000380)=@orangefs={0x14, 0x1, {"dc9131f2ab573b18dbea20a584416b1a", 0x8}}, 0x284000)
write$P9_RREADDIR(r1, &(0x7f0000000080)={0x30, 0x29, 0x2, {0x9, [{{0x40, 0x3, 0x4}, 0x3, 0x2, 0xd, './file1/file3'}]}}, 0x30)
r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000100)={0xc, 0x0, <r5=>0x0})
ioctl$IOMMU_TEST_OP_ADD_RESERVED(r4, 0x3ba0, &(0x7f0000000900)={0x48, 0x1, r5, 0x0, 0x8e80, 0xfffffffffffffff0})
ioctl$IOMMU_IOAS_MAP$PAGES(r4, 0x3b85, &(0x7f0000000340)={0x28, 0x6, r5, 0x0, &(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x2b8000000000002})
splice(0xffffffffffffffff, &(0x7f0000000240)=0x4, r4, &(0x7f00000002c0)=0x767, 0x7, 0x7)

5.692177453s ago: executing program 0 (id=8535):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0)
mlock(&(0x7f0000ff3000/0x1000)=nil, 0x1000)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000040)={0x8, 'veth0_vlan\x00', {'ip6_vti0\x00'}, 0x8})
write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1)
r7 = fsopen(&(0x7f00000029c0)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
io_uring_setup(0x2d29, &(0x7f0000000600)={0x0, 0x707d, 0x400, 0x2, 0xe8})
close_range(r0, 0xffffffffffffffff, 0x0)

5.516059123s ago: executing program 2 (id=8537):
r0 = shmget$private(0x0, 0x9000, 0x0, &(0x7f0000ff7000/0x9000)=nil)
r1 = shmat(r0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) (async, rerun: 32)
r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0), 0x1dd70d5d6476bb9f, 0x0) (rerun: 32)
mmap$dsp(&(0x7f00007f6000/0x4000)=nil, 0x4000, 0x1000000, 0x110, r2, 0x0) (async)
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x5d031, 0xffffffffffffffff, 0x0)
shmdt(r1)
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10)
sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a5c000000060a0b040000000d45f4ff0003000000300004802c0001800a000100696e6e6572000009000000000000004000000007080004400000000f08000140000000000900011e73797a30000000000900020073797a3200000000140000001100010000000000000000000300000a354d60664ee4b30be639bc05b000ce2b40c146882b29b7f369324be013a06579e6541dbf0ec2328e32d95382287935862a108b13165319fafbafe426a339ae63c55d8735defc59fef48ca5361b"], 0x84}}, 0x0)

5.203858114s ago: executing program 2 (id=8538):
syz_open_dev$dri(&(0x7f0000000240), 0xd21, 0x4000)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000a000007"], 0x14}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="58000000020601010000000000000000000000000500050002000000090002009d9ed161f787be650c00078008000b40000000000500040000000000050001000700000011000300686173683a69702c6d61726b00000000"], 0x58}}, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000a40), 0x40400, 0x0)
timer_create(0x4, &(0x7f0000002440)={0x0, 0x21, 0x1, @thr={&(0x7f00000000c0)="66d385abb02d5a7a00570a01ac068c5db4aa58ed1af4fb2d3283c3f47d8806bd140bc93dc193", &(0x7f0000002340)="ee3c5f070add8d7a7f7bf3c42ac5c55dbc9e942be0971cd0a8081ab92c4ee9783808e7a63a614952df01c2220153b49a7330cb4622e4bca4f574355cc263eb0acd04d5b1951964800a1ea568bc90bfaa1cb129c7ba2bab0950ade5ed9780ea7fd6c8538ab33f30c2d029bc7f55416f0f89d4c34cf6c1ebe1a19d6d81d0d2c34630f9645a6e3dcdedd73d350ef025ecc1232b995ac3ec699d660fbf7c3b17f56b78436ef01536021faa998902bf86b421c095196fe7fe9f88b410778de2598fc3e1e479e66546de3c2ce88bf7a2615c"}}, &(0x7f0000002480)=<r2=>0x0)
clock_gettime(0x0, &(0x7f0000002540))
timer_settime(r2, 0x0, &(0x7f00000024c0)={{0x77359400}}, &(0x7f0000002500))
syz_usb_connect$cdc_ncm(0x3, 0x1e7, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1d5, 0x2, 0x1, 0xb, 0xc0, 0xd, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x6, 0x24, 0x6, 0x0, 0x1, "87"}, {0x5, 0x24, 0x0, 0x6}, {0xd, 0x24, 0xf, 0x1, 0x200, 0xa079, 0x2, 0x4}, {0x6, 0x24, 0x1a, 0x8, 0x24}, [@mdlm_detail={0x83, 0x24, 0x13, 0x7f, "0d911d84df9847d3e9068277e98625a7fc7cbbc99ed91e33ce551b369b236930f6f61164c1feda9a1a9478fad48ba535dbc999d9fb0dc1933a4baaf5ecbac5fdf919d7ab5daf12fbcb34471b8b7396871ff49421b518a7a0c02ba6ab6c3f30427fb022481da34c5c5d99f14a8a91dd416763493f7307b94806d5e33a1f2dde"}, @mdlm_detail={0xf5, 0x24, 0x13, 0xe, "2b58a6161775991ee07cb220bd15a52dc72a06063deb338c441615ac5516c30e998bcb590bf6fac8c1dc4070bccf25c297b43180405a5f5ae0c1c970bc2ac49cc4e5d87a486a51eca044ee872764f53f73869a755b87914e6d8bc238792c8df187ad7dbfd6564ccef3fe5cae19ba3d54166ca76ce3207f594d938508e2a2304f095222b0dac2af52ffa2f19f01af049224392e75e0d0374456ede1b44e1468baec66f595f32793ef2a34c413244c0c4967cc0f8d9b5fce773e1f243d1beacc7ae54036e4731b9ffe7568184b079b796f1a34cd5e3b5af0f18ed02c5027df6f65218e1fb32c4228268d63d499b45208c284"}]}, {{0x9, 0x5, 0x81, 0x3, 0x200, 0x0, 0x9, 0x4}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x2, 0x2, 0xd, 0x0, 0x0, "", {{{0x9, 0x5, 0x82, 0x2, 0x8, 0x80, 0x5, 0x7}}, {{0x9, 0x5, 0x3, 0x2, 0x400, 0x2, 0x7, 0xf}}}}}}}]}}, &(0x7f0000000880)={0xa, &(0x7f0000000280)={0xa, 0x6, 0x250, 0x2, 0x4, 0x4, 0x8, 0x4}, 0x64, &(0x7f0000000380)=ANY=[@ANYBLOB="050f6400051410040030bda585381bfbdfe25b703683d184161410040f8f089118a9b90131f7f69f5254f99ebe1410046ec2b8739a133e6981df6b17b99b39fd0a933ec50b9917fa11903017ad333e1c100a05041000000f0001003000000000ff00000f"], 0x7, [{0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x425}}, {0x2b, &(0x7f0000000680)=@string={0x2b, 0x3, "38e111c37165613f23a0ceadc20e874c01b03d33ebbf6d3d8d72a78e9c490715b890ce9d4cfd9f605e"}}, {0x4, &(0x7f00000006c0)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000000700)=@lang_id={0x4, 0x3, 0xc0a}}, {0x55, &(0x7f0000000740)=@string={0x55, 0x3, "a0d9e239b7a68528025726bf2a0beb3bd76024f3de61b2c294cf21fa9b6371aa1ab6d7cb02e3b936b5e3706ca840f6f807c54c47e01da17ed5ba0b2cefe4b7e3b44cd7b7da406d33b13751ffad34bb672e3a36"}}, {0x6c, &(0x7f0000000900)=ANY=[@ANYBLOB="6c0381cbbbc92162fc62213ba35fc170f2b22ff7c08e59ef7b544994b782e06ee089107b4e97d8cda95ab889009f9705eb0c0557dcccc628d30d9a4a5f976ea8b92007fe24ba27ad5a8e0cbc1ad7159b2b76ed1d69af4d6353fc05496d8e97aa6ec585de1163d7a83cebd5483c7ea280cf0e788ddcb0fb0eb9c3cf6e0cae29a4d743fbe075242cc333d3941ab8d289a0e4f59d305198202219f3215000eb909789667d63b3c0c7a3cb8dd3ecea1c3bad73137116cd1d6af3ed55e89fc2fdc2dce7451753710220a899021a5cbb6df3b1afd4200291323a6ac311880ca5fea958c824977ba931181cb489a78958e46d616e059c3ce3493ebe00000000000000"]}, {0x8, &(0x7f0000002200)=ANY=[@ANYBLOB="08034a0ccf7449095329d60200000000000000a60fec49d8ad2c4a6ac30100008000000000079d92a0f3c543ed2e1515a9a7f3e52aa27e2c74e66d9745be3b138ddd02a382e0438e9b32004a8b7554bfd97c1af87d7c51287715aea67d8e9a4adfc0e096c43fab5c0c64e4cc0f3e3072bbefcca83640b9a6e9ad7c111053b0d693562e1ca77cc6f9fec03c7a5a7bdf1f566ff98059af47f60ba9512cf2beb629bdf0d5f1d01cf2a7da047c48c8f4c8e10be69c2535a4a4437c86ea6cd041106fc5800532af497b3863121380d72f2b11fe6ca594dd1415a7cfa90683038daae2e233c3"]}]})
sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000180)="1c00000021006bcd210002006e04000081000010000000017aa60864", 0x1c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0)
r3 = syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00')
read$FUSE(r3, &(0x7f00000001c0)={0x2020}, 0x2020)
bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x17, 0x3, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94)
r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={<r5=>0x0}, &(0x7f0000000800)=0xc)
sched_setaffinity(r5, 0x8, &(0x7f0000000a00)=0x5)
ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0)
ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f0000000300)={0x70001, 0x0, [0x40000000000, 0x64f, 0x6, 0x6, 0xfffffffffffffffc, 0x4ffff, 0x29]})
r7 = syz_open_dev$dri(&(0x7f0000000280), 0x1, 0x0)
ioctl$DRM_IOCTL_MODE_GET_LEASE(r7, 0xc01064c8, &(0x7f0000000200)={0x1, 0x0, &(0x7f0000000300)=[<r8=>0x0]})
pwrite64(r6, &(0x7f0000000100)="a33d901d8b14deeed48ff4064051cc9d463847338e31cab52e78a8d08cd2ded33ba569d28d0dfb1ff08eb39f19685ce7c63f6005b8319060bb483483e21b2c3d0c34c1a74e35f290d51de1ac4239adb843df36a64e5fc3611e78322a4010d59ad0fb16edb12ddf772112", 0x6a, 0x3)
ioctl$DRM_IOCTL_MODE_GETFB(r7, 0xc01c64ad, &(0x7f0000000040)={r8})
bind$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4e22, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, 0x1c)
syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@textreal={0x8, &(0x7f0000000000)="f20f1c0166b864912c870f23c80f21f866350c0080000f23f80f01fc0f20e06635000010000f22e00f20c06635000000400f22c00f1c9700000f01c566b9a001000066b80400000066ba000000000f30c0dbb6660f3adf932700de", 0x5b}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)

4.844266999s ago: executing program 4 (id=8539):
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
syz_usb_connect(0x4, 0xffffffffffffff82, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x0) (async)
r0 = syz_open_dev$sg(&(0x7f0000000000), 0xf3c, 0x181000)
ioctl$SG_IO(r0, 0x2285, &(0x7f0000000080)={0x53, 0x0, 0x6, 0x0, @scatter={0x0, 0x0, 0x0}, &(0x7f0000000040)="15002b5a4069", 0x0, 0x0, 0x10, 0x0, 0x0}) (async)
r1 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4)
bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) (async)
connect$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
r2 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$sock_int(r2, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) (async)
bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c)
connect$inet6(r2, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @private1}, 0x1c)
getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000100)={'icmp6\x00'}, &(0x7f0000000180)=0x1e)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

4.789842121s ago: executing program 1 (id=8540):
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x42002, 0x0)
socket$l2tp6(0xa, 0x2, 0x73)
syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="120100eaffffff3fef36b66894be213f2d793e01090224000100000064a972e85209040000010c0003000921000000012207000905cf89fe"], 0x0)
socket$can_bcm(0x1d, 0x2, 0x2)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x4, 0x20, 0x2, 0x315}, &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0)
recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r5, 0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f0000000040)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x10, 0x1})
io_uring_enter(r0, 0x3f70, 0x0, 0x0, 0x0, 0x0)

4.305202169s ago: executing program 0 (id=8541):
bpf$MAP_CREATE(0x0, &(0x7f0000003400)=@base={0x1c, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
add_key$user(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd)
r0 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r0, 0x47f9, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x3000, 0x3, &(0x7f0000000000/0x3000)=nil) (fail_nth: 2)

3.772396615s ago: executing program 0 (id=8543):
socket$alg(0x26, 0x5, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xbd, 0x1, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x40008, 0x5, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x7f, 0x9, 0x0, 0xfd, 0x2, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5})
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0)
ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f00000000c0)={0x2, 0x0, 0x0, 0x2, 0xfffffffd, 0x2})
r2 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
r3 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$sock_int(r3, 0x1, 0x2c, 0x0, &(0x7f0000000040)=0x14)
ioctl$VIDIOC_G_CROP(r2, 0xc014563b, &(0x7f0000000000)={0x7, {0x803, 0x40905b, 0x8, 0x10000000}})

3.531856869s ago: executing program 5 (id=8545):
r0 = socket$inet6(0xa, 0xa, 0x100)
r1 = syz_open_dev$vim2m(&(0x7f0000000080), 0x8, 0x2)
ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1})
ioctl$vim2m_VIDIOC_EXPBUF(r1, 0xc0405610, &(0x7f0000000040)={0x2, 0x0, 0x0, 0x0, <r2=>0xffffffffffffffff})
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r2, 0x0, r3)
mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0)
dup(r2)
setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4)
sendmsg$inet6(r0, &(0x7f0000000100)={&(0x7f0000000340)={0xa, 0x4622, 0x1000000080000, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=[@flowinfo={{0x14, 0x29, 0xb, 0x638}}], 0x18}, 0x20004040)

3.483613052s ago: executing program 5 (id=8546):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000280)=@arm64={0xf7, 0xd, 0x4, '\x00', 0x5a})
ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x1e0003, 0x0, [0x8, 0xff, 0xfffffffffffffffb, 0x3e00000000000000, 0x7fffffff, 0x7, 0x800000009, 0x2d4f2405]})
r3 = syz_open_dev$video(&(0x7f0000000040), 0xa7, 0x800)
ioctl$VIDIOC_G_CROP(r3, 0xc014563b, &(0x7f00000000c0)={0x3, {0x0, 0x3252, 0x4, 0x2}})
r4 = signalfd(0xffffffffffffffff, &(0x7f0000000040)={[0xffffffff7fffffff]}, 0x8)
fcntl$lock(r4, 0x7, &(0x7f0000000000)={0x1, 0x0, 0x100000000000, 0x0, 0xffffffffffffffff})
fcntl$lock(r4, 0x7, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1})
ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x2)

3.3701446s ago: executing program 5 (id=8547):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x377140)
openat$full(0xffffff9c, 0x0, 0x123300, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=<r7=>0x0)
quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r7, &(0x7f0000000480)={0x3748, 0x8000, 0x1, 0x4})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x002'], 0x14}}, 0x0)
r8 = io_uring_setup(0x5751, &(0x7f0000000100))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f1e0001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x19, &(0x7f0000000300), 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000700)={0x28, 0x0, 0x0, 0x0, 0x2d2501, 0x3, 0x1, 0x9d908})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e64000000001400028008001c008c0400000500010004000000263165f1110f7bcd2f88ea00b39ea07e6711779da1c9b5a082e97dc0056ee68949b8a0690a56ad15089a8e1fd3f7eb6643d3b5c59cd78cd50cbcc7b346d0ec9d0551513f3d68c87040d5392f1ecaa0ea29e86c9b49e30769de97c82cd2fb948783d54f4f338b26d5a809969118e30f8efe34d2ace5422cb410ef59109e9679af93e738c273ecbfe9eae54b07d698aeed3be5e276a73bbaf192"], 0x44}}, 0x0)

3.100022724s ago: executing program 2 (id=8548):
r0 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', <r3=>0x0})
sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x44, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @broadcast, @broadcast}}}]}, 0x44}}, 0x0)
write$tcp_congestion(r0, &(0x7f0000000100)='reno\x00', 0x5)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/vmstat\x00', 0x0, 0x0)
ioctl$KVM_CAP_ENFORCE_PV_FEATURE_CPUID(r4, 0x4068aea3, &(0x7f0000000440)={0xbe, 0x0, 0x1})
r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x17, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl=0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup\x00', 0x0, 0x0)
r7 = open(&(0x7f0000000180)='./bus\x00', 0x169a7c, 0x41)
copy_file_range(r7, 0x0, r7, 0x0, 0x1, 0x0)
bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
sendmsg$NFNL_MSG_COMPAT_GET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='L\x00\x00\x00'], 0x4c}, 0x1, 0x0, 0x0, 0x840}, 0x0)
mremap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000001000/0x1000)=nil)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r8, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000001fc0)={0x24, 0x2, 0x3, 0x201, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0xa}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x702}]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x80)
r9 = socket$inet6_sctp(0xa, 0x801, 0x84)
getsockopt$bt_hci(r9, 0x84, 0x0, &(0x7f0000001200)=""/4110, &(0x7f00000000c0)=0x100e)
write$tcp_congestion(r0, &(0x7f0000000300)='reno\x00', 0x5)
r10 = io_uring_setup(0x3e2f, &(0x7f0000000180))
io_uring_register$IORING_UNREGISTER_RING_FDS(r10, 0x15, &(0x7f0000003cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000001300)}, {0x0, 0x0, 0x0, 0x0, 0x0}], 0x2)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000340)={@cgroup=r6, r5, 0x12, 0x0, 0x0, @void, @value=0x0}, 0x20)
write$tcp_congestion(r0, &(0x7f0000000380)='reno\x00', 0x5)
socket$inet6_udplite(0xa, 0x2, 0x88)

2.923553638s ago: executing program 2 (id=8549):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000df2bfd404b0c0001cad7010203010902240001000000000904450002c9cee40009050802ff03000000090582030004"], 0x0)
syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xfffffe7a, &(0x7f0000000180)=ANY=[@ANYRES8=r0, @ANYRESOCT, @ANYRESOCT=r0, @ANYRES8=r0, @ANYBLOB="9de736c446adc3173922c1bdfecb0fe43b1fc2b74a2f7e403872daa3bf5937a6f220fe89f6420bb2a65736810a1773c77fe884b32c61a7ce04eebe9522904643de4095fbac6f893fc850f7db5e193bb1447cbb675ae5762fcd3da2a22d5195d0e914b9c671aaa529c7acd67e0ab03f598de6a795e9093403c181ef5ab1f752914bb5ee8d8c14e2b9d78461a39d055469c0c8a55cc01c8d87d2526aa9dda917abbcd921172235aaf5820d5b35e0d6f805f5c5380d39abeabc1f39bfa4b28c821bcf9b367998c3cd", @ANYRESOCT=0x0, @ANYRESDEC=r0, @ANYRES16=<r1=>0x0])
openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0)
mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000340), 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f2c993d3030303030e7bd303030303030af5decdd8250d3d1a267b02d06000000000000002a30303030302c717365725f698c3232eaaa68115bda6fe0191a22b7439e4068646df38f941c0231ea2328739902e9a6d3de9b17", @ANYRESDEC=0x0, @ANYBLOB="7da5c1796f594f69924b8c0d094541f35046db9394994f7a5b6ddd011667dab337c115325da39859ee92c268b627579d7a9d625da72467864ba7dd7d6125921e7635e468f8c327e40a2017474bfdfb190c227b296713fb6565b0615d", @ANYRES32=r2])
read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, <r3=>0x0}, 0x2020)
write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x8a10400, 0x0, 0x27}}, 0x50)
syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88, {0x0, 0x10}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0)
renameat2(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c, 0x0, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil)
write$cgroup_int(r4, &(0x7f0000000300)=0x3, 0x12)
close(r2)
r5 = socket(0xa, 0x2, 0x0)
setsockopt$inet_int(r5, 0x0, 0xb, &(0x7f00000000c0)=0x7, 0x4)
r6 = socket$netlink(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040))
sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x80)
sendto$inet(r5, 0x0, 0xffe5, 0x0, &(0x7f0000000000)={0x2, 0x4e20}, 0x10)
recvmsg(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x2001)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x1fd, 0x1, 0x0, 0x2000, &(0x7f0000bd3000/0x2000)=nil})
r7 = getpid()
sched_setscheduler(r7, 0x2, 0x0)

1.996211135s ago: executing program 5 (id=8550):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x74, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r5 = socket$kcm(0x2, 0xa, 0x2)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
setsockopt$MRT_ADD_VIF(r6, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10)
r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev={0xac, 0x14, 0x14, 0x40}}, 0x10)
setsockopt$inet_mreq(r7, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8)
syz_emit_ethernet(0x2a, &(0x7f0000000240)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x68, 0xd2}}}}}, 0x0)
setsockopt$MRT_ADD_MFC_PROXY(r8, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe42811ee1df06e9264f7d866b1970548fc3c7b", 0xb2, 0xfffffff7, 0x6, 0x6}, 0x3c)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local})
fcntl$setpipe(r8, 0x407, 0x2)
write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="001c86dd0700100000004000000061ec97000500000000000000000000000000aaff0200000000000000000000010000010000000000"], 0xffe)
sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@ipv4_newroute={0x24, 0x18, 0x1, 0x0, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}, [@RTA_NH_ID={0x8, 0x1e, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0)
pipe2$9p(&(0x7f0000000000), 0x80040)

1.791844405s ago: executing program 0 (id=8551):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
read$FUSE(r1, &(0x7f0000004e80)={0x2020, 0x0, <r2=>0x0}, 0x2020)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x2ae54000)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4)
write$FUSE_DIRENT(r1, &(0x7f000009df00)=ANY=[@ANYBLOB="3001000000000000", @ANYRES64=r2], 0x130)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000104001040000000000200000000080003efb1f68819317d4fcbc5fd470789ed31df914527388eda7b40d650eca430711fc698ddc757c1e5e53176ba0a51b2c3ba43a280ac214a9e75dbb6e3706ddbb138a6c51097047c92fa758382b22e5fe8a92afab4efda20658c5c266d4a68f967f166dcf88c60a4cf5a8afa6603544170f87c57378b217e1eecee74deda59b7c042542eb438241beb7b2e9b8b58d917fc58affd8e56a45836aac57561bd938071b16b233ed531f16fe3c29079352540229997b22eb42afb47420f88501827e76884ae8cb216aff259b991006b53b5465ec2ba85eebf4", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280080001006774700020000280050005000100000014000800"/52], 0x4c}, 0x1, 0x0, 0x0, 0x80091}, 0x0)
socket$nl_route(0x10, 0x3, 0x0) (async)
openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
read$FUSE(r1, &(0x7f0000004e80)={0x2020}, 0x2020) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x2ae54000) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x4) (async)
write$FUSE_DIRENT(r1, &(0x7f000009df00)=ANY=[@ANYBLOB="3001000000000000", @ANYRES64=r2], 0x130) (async)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c000000104001040000000000200000000080003efb1f68819317d4fcbc5fd470789ed31df914527388eda7b40d650eca430711fc698ddc757c1e5e53176ba0a51b2c3ba43a280ac214a9e75dbb6e3706ddbb138a6c51097047c92fa758382b22e5fe8a92afab4efda20658c5c266d4a68f967f166dcf88c60a4cf5a8afa6603544170f87c57378b217e1eecee74deda59b7c042542eb438241beb7b2e9b8b58d917fc58affd8e56a45836aac57561bd938071b16b233ed531f16fe3c29079352540229997b22eb42afb47420f88501827e76884ae8cb216aff259b991006b53b5465ec2ba85eebf4", @ANYRES32=0x0, @ANYBLOB="00000000000000002c001280080001006774700020000280050005000100000014000800"/52], 0x4c}, 0x1, 0x0, 0x0, 0x80091}, 0x0) (async)

1.716097488s ago: executing program 1 (id=8552):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0)
close_range(r0, r0, 0x2)
r1 = open(&(0x7f0000000180)='.\x00', 0x628080, 0x189)
signalfd(r1, &(0x7f0000000000)={[0x5]}, 0x8)

1.698730925s ago: executing program 4 (id=8553):
r0 = socket$inet6(0xa, 0x1, 0x0)
getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r1 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r1, 0x107, 0xe, 0x0, 0x0)
socket$kcm(0x29, 0xd, 0x0)

1.644317065s ago: executing program 5 (id=8554):
r0 = socket$netlink(0x10, 0x3, 0x0)
r1 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000600)={'team0\x00', <r2=>0x0})
sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0xc, 0x0, 0x0, 0x0, 0x0, 0xff], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x100], [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0)

1.559894868s ago: executing program 1 (id=8555):
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt(r0, 0x84, 0x81, &(0x7f0000000280)="1a00000002000000", 0x8) (async)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x401, @empty}], 0x1c) (async)
r1 = syz_open_dev$sg(&(0x7f0000000040), 0x5, 0x10400)
ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r1, 0x3) (async)
sendto$inet6(r0, &(0x7f0000000500)="a4", 0x10727, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) (async)
setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000540)=ANY=[], 0xed)
r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0)
openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) (async)
socket$inet6_mptcp(0xa, 0x1, 0x106) (async)
fcntl$notify(r2, 0x402, 0x8000003d) (async, rerun: 32)
fcntl$setsig(r2, 0xa, 0x21) (async, rerun: 32)
r3 = socket$inet_sctp(0x2, 0x5, 0x84) (async)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (async)
r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000000)={<r6=>0xffffffffffffffff}, 0x13f}}, 0x20)
write$RDMA_USER_CM_CMD_SET_OPTION(r5, &(0x7f00000002c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f0000000200)=[{0x2, 0x0, [0x4, 0x2, 0x1, 0x400, 0x6, 0x0, 0x147c, 0x7f9, 0x9, 0x6, 0x80, 0xfffff7f4, 0x7f, 0x6, 0x0, 0x3]}], r6, 0x1, 0x1, 0x48}}, 0x20)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async)
getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [<r7=>0x0]}, &(0x7f0000000240)=0x8)
getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r3, 0x84, 0x6d, &(0x7f0000000140)={r7}, &(0x7f0000000280)=0x8) (async)
setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000100)=ANY=[@ANYRES32=r7, @ANYBLOB="00040acb750877ee543d00020005000fdffe010600012af4d3b727f7decdf3"], 0x1c)

1.501857732s ago: executing program 5 (id=8556):
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000600), 0x40000, 0x0)
r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
syz_open_dev$vcsn(0x0, 0x1, 0x377140)
openat$full(0xffffff9c, 0x0, 0x123300, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r4 = syz_io_uring_setup(0x10d, &(0x7f0000000140), &(0x7f0000000340)=<r5=>0x0, &(0x7f0000000300)=<r6=>0x0)
getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=<r7=>0x0)
quotactl_fd$Q_SETINFO(r4, 0xffffffff80000600, r7, &(0x7f0000000480)={0x3748, 0x8000, 0x1, 0x4})
syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0})
io_uring_enter(r4, 0x47f9, 0x0, 0x0, 0x0, 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x1)
sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB="14", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x002'], 0x14}}, 0x0)
r8 = io_uring_setup(0x5751, &(0x7f0000000100))
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
r10 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c00000002060108000034e40000000000000000050001000600000005000400000000000900020073797a3100000080050005000200000011000300686173683a69702c706f"], 0x4c}}, 0x2)
sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="54000000090601020000000000000000020000000900020073797a310000000005000100070000002c0007800c00018008000140ffffffff0500070084000000060004404e2200000c000280080001407f1e0001"], 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
io_uring_register$IORING_REGISTER_BUFFERS(r8, 0x19, &(0x7f0000000300), 0x0)
prctl$PR_SET_IO_FLUSHER(0x43, 0x0)
syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
removexattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='system.posix_acl_access\x00')
ioctl$IOMMU_IOAS_COPY$syz(r0, 0x3b83, &(0x7f0000000700)={0x28, 0x0, 0x0, 0x0, 0x2d2501, 0x3, 0x1, 0x9d908})
r11 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000002400128009000100626f6e64000000001400028008001c008c0400000500010004000000263165f1110f7bcd2f88ea00b39ea07e6711779da1c9b5a082e97dc0056ee68949b8a0690a56ad15089a8e1fd3f7eb6643d3b5c59cd78cd50cbcc7b346d0ec9d0551513f3d68c87040d5392f1ecaa0ea29e86c9b49e30769de97c82cd2fb948783d54f4f338b26d5a809969118e30f8efe34d2ace5422cb410ef59109e9679af93e738c273ecbfe9eae54b07d698aeed3be5e276a73bbaf192"], 0x44}}, 0x0)

1.388284129s ago: executing program 4 (id=8557):
syz_clone3(&(0x7f00000004c0)={0xe12d480, &(0x7f0000000480), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
r0 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x2, 0xbfdffffc}, &(0x7f0000000000)=<r1=>0x0, &(0x7f0000000280)=<r2=>0x0)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4)
syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3})
io_uring_enter(r0, 0x47f6, 0x0, 0x2, 0x0, 0x0) (fail_nth: 25)

1.386288413s ago: executing program 1 (id=8558):
openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0)
r0 = syz_open_dev$loop(&(0x7f0000000080), 0x47ffffa, 0x122c42)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
r4 = socket$inet6_sctp(0xa, 0x5, 0x84)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r4, 0x84, 0x6, 0x0, &(0x7f00000000c0))
ioctl$FBIOGET_FSCREENINFO(0xffffffffffffffff, 0x4602, &(0x7f0000000100))
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_emit_ethernet(0x52, &(0x7f0000000300)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x44, 0x0, 0x0, 0x0, 0x21, 0x0, @private, @broadcast}, @redirect={0x5, 0x0, 0x0, @private=0xa010102, {0xa, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x1}, {[@rr={0x7, 0x13, 0x0, [@multicast2, @private, @broadcast, @dev={0xac, 0x14, 0x14, 0xc}]}]}}}}}}}, 0x0)
mlock(&(0x7f0000ff3000/0x1000)=nil, 0x1000)
r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0xa0201, 0x0)
ioctl$SNDCTL_DSP_SETFMT(r5, 0xc0045005, &(0x7f0000000640)=0x8000)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8982, &(0x7f0000000040)={0x8, 'veth0_vlan\x00', {'ip6_vti0\x00'}, 0x8})
write$binfmt_script(r5, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "5233f503dd8ad31feb7649d2f36f51602148f233d2f07c46d48811538630ce115cef7c3020ee1e44c7efd31fcaa4954cbbd4afdbc4"}, 0x2000)
r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000140), 0x8, 0x0)
io_uring_register$IORING_REGISTER_EVENTFD_ASYNC(0xffffffffffffffff, 0x21, &(0x7f0000000440)=r6, 0x1)
r7 = fsopen(&(0x7f00000029c0)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffffff, @empty}, 0x1c)
fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x37}}}, 0x1c)
io_uring_setup(0x2d29, &(0x7f0000000600)={0x0, 0x707d, 0x400, 0x2, 0xe8})
close_range(r0, 0xffffffffffffffff, 0x0)

851.449351ms ago: executing program 4 (id=8559):
mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0/../file0\x00', &(0x7f0000000380), 0x18)
r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0)
ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r0, 0x4d548000)

843.986772ms ago: executing program 0 (id=8560):
r0 = socket$l2tp6(0xa, 0x2, 0x73)
setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f00000000c0)=0x6, 0x4)
sendmmsg$inet6(r0, &(0x7f0000001700)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x3e, @dev={0xfe, 0x80, '\x00', 0x21}}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0xf}}], 0x1, 0x0)
socket(0x15, 0x5, 0x0)
r1 = socket(0x840000000002, 0x3, 0xff)
setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='bridge_slave_0\x00', 0x10)
connect$inet(r1, &(0x7f0000000540)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10)
r2 = socket$netlink(0x10, 0x3, 0xf)
bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc)
setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000000), 0x4)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x3}}, [@NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x50}, 0x1, 0x0, 0x0, 0xc080}, 0x0)

584.116907ms ago: executing program 0 (id=8561):
r0 = socket$nl_route(0x10, 0x3, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x3, 0x0, 0xfffff034}, {0x80000006, 0xfd, 0x0, 0x4}]}, 0x10)
syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
close(r3)
r4 = socket(0x10, 0x3, 0x0)
r5 = getpgrp(0x0)
r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
kcmp(r5, r6, 0x0, r4, r4)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280))
ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"})
write$cgroup_devices(r2, &(0x7f0000000a00)=ANY=[@ANYBLOB="1e030800dd5c9801288563a20dad121406"], 0xffdd)
syz_pidfd_open(0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6c0000000206010200000000000000000000000005000100070000000d000300686173683a6e6574000000000c00078008000600000000000900020073797a30000000000500050002000000050004000000000015000300686173683a69702c706f7274"], 0x6c}}, 0x0)
r8 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r9 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=@ipv6_delrule={0x30, 0x21, 0x1, 0x0, 0x25dfdbfd, {0xa, 0x0, 0x0, 0x8}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc}, @FIB_RULE_POLICY=@FRA_IP_PROTO={0x5}]}, 0x30}}, 0x0)
r10 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x1)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x8, &(0x7f00000001c0)=[{0x9, 0x31, 0x3}, {0x4, 0x1, 0xf, 0xfffffff8}, {0x5, 0x5a, 0x6, 0x2}, {0x667, 0x0, 0xf, 0x66d}, {0x2, 0x9, 0x2e, 0x2}, {0x5a67, 0x0, 0xe, 0x9}, {0x6, 0x9f, 0x2, 0x1}, {0xe1af, 0xe, 0x1, 0x660000}]}, 0x10)
ioctl$KVM_SET_MSRS(r10, 0x4008ae89, &(0x7f0000000040)={0x7, 0x0, [{0x40000000, 0x0, 0x1}, {0x8ae, 0x0, 0x4d0}, {0x821, 0x0, 0x9}, {0x290, 0x0, 0x9}, {0x81b, 0x0, 0x7}, {0xa01, 0x0, 0x5}, {0x9fd, 0x0, 0x4}]})

235.187654ms ago: executing program 2 (id=8562):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={0x0, 0xfcff, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c0007800800084000000020060004400000000006000540"], 0x64}, 0x1, 0x0, 0x0, 0x40800}, 0x0)

0s ago: executing program 2 (id=8563):
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x800, 0x113, &(0x7f0000000200))
r0 = landlock_create_ruleset(&(0x7f0000000080)={0x220, 0x0, 0x1}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0) (fail_nth: 5)

kernel console output (not intermixed with test programs):


[ 2700.292150][ T4280]  ? __pfx_vfs_read+0x10/0x10
[ 2700.292179][ T4280]  ? __fget_files+0x2a/0x420
[ 2700.292202][ T4280]  ? __fget_files+0x39d/0x420
[ 2700.292224][ T4280]  ? __fget_files+0x2a/0x420
[ 2700.292253][ T4280]  ksys_read+0x19d/0x2d0
[ 2700.292281][ T4280]  ? __pfx_ksys_read+0x10/0x10
[ 2700.292315][ T4280]  ? do_syscall_64+0xb6/0x230
[ 2700.292349][ T4280]  do_syscall_64+0xf3/0x230
[ 2700.292388][ T4280]  ? clear_bhb_loop+0x45/0xa0
[ 2700.292414][ T4280]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2700.292437][ T4280] RIP: 0033:0x7f1f5ff8bb7c
[ 2700.292458][ T4280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2700.292477][ T4280] RSP: 002b:00007f1f60e65030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2700.292503][ T4280] RAX: ffffffffffffffda RBX: 00007f1f601a5fa0 RCX: 00007f1f5ff8bb7c
[ 2700.292520][ T4280] RDX: 000000000000000f RSI: 00007f1f60e650a0 RDI: 0000000000000006
[ 2700.292534][ T4280] RBP: 00007f1f60e65090 R08: 0000000000000000 R09: 0000000000000000
[ 2700.292549][ T4280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2700.292563][ T4280] R13: 0000000000000000 R14: 00007f1f601a5fa0 R15: 00007f1f602cfa28
[ 2700.292592][ T4280]  </TASK>
[ 2700.350563][   T30] audit: type=1326 audit(1743325424.223:5511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2700.357016][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2700.387945][   T30] audit: type=1326 audit(1743325424.223:5512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2700.387995][   T30] audit: type=1326 audit(1743325424.223:5513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2700.388065][   T30] audit: type=1326 audit(1743325424.223:5514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2700.388104][   T30] audit: type=1326 audit(1743325424.223:5515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=217 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2700.388142][   T30] audit: type=1326 audit(1743325424.223:5516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4275 comm="syz.2.8241" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1f5ff8d169 code=0x7ffc0000
[ 2701.031679][   T48] usb 3-1: new full-speed USB device number 40 using dummy_hcd
[ 2701.148525][ T1402] usb 6-1: USB disconnect, device number 17
[ 2701.156642][ T1402] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2701.197083][ T1402] cyberjack 6-1:0.69: device disconnected
[ 2701.269637][   T48] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config
[ 2701.296407][   T48] usb 3-1: config 27 has 0 interfaces, different from the descriptor's value: 1
[ 2701.343995][   T48] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[ 2701.408125][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2701.458963][ T4301] fuse: Unknown parameter '0x0000000000000006'
[ 2701.738028][ T4284] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2701.748225][ T4305] FAULT_INJECTION: forcing a failure.
[ 2701.748225][ T4305] name failslab, interval 1, probability 0, space 0, times 0
[ 2701.853998][ T4305] CPU: 0 UID: 0 PID: 4305 Comm: syz.1.8250 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2701.854030][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2701.854041][ T4305] Call Trace:
[ 2701.854047][ T4305]  <TASK>
[ 2701.854055][ T4305]  dump_stack_lvl+0x241/0x360
[ 2701.854082][ T4305]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2701.854103][ T4305]  ? __pfx__printk+0x10/0x10
[ 2701.854126][ T4305]  ? __pfx___might_resched+0x10/0x10
[ 2701.854147][ T4305]  should_fail_ex+0x424/0x570
[ 2701.854170][ T4305]  should_failslab+0xac/0x100
[ 2701.854194][ T4305]  __kmalloc_noprof+0xdf/0x4d0
[ 2701.854215][ T4305]  ? security_prepare_creds+0x53/0x360
[ 2701.854234][ T4305]  security_prepare_creds+0x53/0x360
[ 2701.854250][ T4305]  prepare_creds+0x467/0x640
[ 2701.854274][ T4305]  __se_sys_landlock_restrict_self+0x199/0x7d0
[ 2701.854295][ T4305]  ? arch_syscall_is_vdso_sigreturn+0x125/0x1a0
[ 2701.854312][ T4305]  ? syscall_user_dispatch+0x4e/0x90
[ 2701.854332][ T4305]  do_syscall_64+0xf3/0x230
[ 2701.854353][ T4305]  ? clear_bhb_loop+0x45/0xa0
[ 2701.854370][ T4305]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2701.854385][ T4305] RIP: 0033:0x7f05ab18d169
[ 2701.854398][ T4305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2701.854410][ T4305] RSP: 002b:00007f05ac093038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 2701.854427][ T4305] RAX: ffffffffffffffda RBX: 00007f05ab3a5fa0 RCX: 00007f05ab18d169
[ 2701.854439][ T4305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2701.854448][ T4305] RBP: 00007f05ac093090 R08: 0000000000000000 R09: 0000000000000000
[ 2701.854459][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2701.854468][ T4305] R13: 0000000000000000 R14: 00007f05ab3a5fa0 R15: 00007f05ab4cfa28
[ 2701.854487][ T4305]  </TASK>
[ 2702.046389][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2702.225809][ T4310] FAULT_INJECTION: forcing a failure.
[ 2702.225809][ T4310] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2702.239577][ T4310] CPU: 0 UID: 0 PID: 4310 Comm: syz.0.8253 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2702.239608][ T4310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2702.239623][ T4310] Call Trace:
[ 2702.239631][ T4310]  <TASK>
[ 2702.239641][ T4310]  dump_stack_lvl+0x241/0x360
[ 2702.239677][ T4310]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2702.239708][ T4310]  ? __pfx__printk+0x10/0x10
[ 2702.239744][ T4310]  should_fail_ex+0x424/0x570
[ 2702.239777][ T4310]  _copy_to_user+0x31/0xb0
[ 2702.239805][ T4310]  simple_read_from_buffer+0xc4/0x170
[ 2702.239840][ T4310]  proc_fail_nth_read+0x1ef/0x260
[ 2702.239866][ T4310]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2702.239902][ T4310]  ? rw_verify_area+0x246/0x630
[ 2702.239928][ T4310]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2702.239953][ T4310]  vfs_read+0x21f/0xb90
[ 2702.239982][ T4310]  ? __pfx___mutex_lock+0x10/0x10
[ 2702.240012][ T4310]  ? __pfx_vfs_read+0x10/0x10
[ 2702.240038][ T4310]  ? __fget_files+0x2a/0x420
[ 2702.240060][ T4310]  ? __fget_files+0x39d/0x420
[ 2702.240080][ T4310]  ? __fget_files+0x2a/0x420
[ 2702.240107][ T4310]  ksys_read+0x19d/0x2d0
[ 2702.240135][ T4310]  ? __pfx_ksys_read+0x10/0x10
[ 2702.240165][ T4310]  ? do_syscall_64+0xb6/0x230
[ 2702.240204][ T4310]  do_syscall_64+0xf3/0x230
[ 2702.240234][ T4310]  ? clear_bhb_loop+0x45/0xa0
[ 2702.240259][ T4310]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2702.240280][ T4310] RIP: 0033:0x7efdf1b8bb7c
[ 2702.240299][ T4310] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2702.240317][ T4310] RSP: 002b:00007efdf29c6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2702.240341][ T4310] RAX: ffffffffffffffda RBX: 00007efdf1da5fa0 RCX: 00007efdf1b8bb7c
[ 2702.240358][ T4310] RDX: 000000000000000f RSI: 00007efdf29c60a0 RDI: 0000000000000004
[ 2702.240371][ T4310] RBP: 00007efdf29c6090 R08: 0000000000000000 R09: 0000000000000000
[ 2702.240385][ T4310] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001
[ 2702.240398][ T4310] R13: 0000000000000000 R14: 00007efdf1da5fa0 R15: 00007efdf1ecfa28
[ 2702.240424][ T4310]  </TASK>
[ 2702.450912][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2702.868039][ T4311] fuse: Bad value for 'group_id'
[ 2702.995415][ T4312] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2703.037564][ T4312] bond38: entered promiscuous mode
[ 2703.043108][ T4312] bond38: entered allmulticast mode
[ 2703.056887][ T4312] 8021q: adding VLAN 0 to HW filter on device bond38
[ 2703.207564][ T4311] fuse: Bad value for 'group_id'
[ 2704.019023][   T48] usb 3-1: USB disconnect, device number 40
[ 2704.318088][T29917] IPVS: starting estimator thread 0...
[ 2704.412121][ T4332] IPVS: using max 25 ests per chain, 60000 per kthread
[ 2704.431558][   T48] usb 3-1: new high-speed USB device number 41 using dummy_hcd
[ 2704.494203][ T1402] usb 1-1: new high-speed USB device number 57 using dummy_hcd
[ 2704.571679][T27855] usb 5-1: new high-speed USB device number 67 using dummy_hcd
[ 2704.606061][   T48] usb 3-1: Using ep0 maxpacket: 32
[ 2704.613348][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2704.631795][   T48] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2704.651642][ T1402] usb 1-1: Using ep0 maxpacket: 8
[ 2704.652233][   T48] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2704.673860][ T1402] usb 1-1: config 0 has no interfaces?
[ 2704.675604][   T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2704.697455][   T48] usb 3-1: config 0 descriptor??
[ 2704.699660][ T1402] usb 1-1: New USB device found, idVendor=1661, idProduct=0932, bcdDevice=80.ea
[ 2704.711216][   T48] hub 3-1:0.0: USB hub found
[ 2704.744213][T27855] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2704.756691][T27855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2704.759717][ T1402] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2704.774812][ T1402] usb 1-1: Product: syz
[ 2704.779103][ T1402] usb 1-1: Manufacturer: syz
[ 2704.783990][ T1402] usb 1-1: SerialNumber: syz
[ 2704.789701][T27855] usb 5-1: Product: syz
[ 2704.800032][T27855] usb 5-1: Manufacturer: syz
[ 2704.800628][ T1402] usb 1-1: config 0 descriptor??
[ 2704.811249][T27855] usb 5-1: SerialNumber: syz
[ 2704.833949][T27855] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2704.857497][T22261] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2705.082485][ T1402] usb 1-1: USB disconnect, device number 57
[ 2705.121751][ T4325] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2705.144054][ T4325] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2705.219050][ T4350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2705.238452][ T4350] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2705.268512][ T5888] usb 5-1: USB disconnect, device number 67
[ 2705.903945][T22261] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2705.919837][T22261] ath9k_htc: Failed to initialize the device
[ 2705.942205][ T5888] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2706.069810][ T4364] input: syz1 as /devices/virtual/input/input150
[ 2706.512235][ T4368] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2706.543176][T22261] usb 5-1: new high-speed USB device number 68 using dummy_hcd
[ 2706.579261][ T4368] bond39: entered promiscuous mode
[ 2706.586571][ T4368] bond39: entered allmulticast mode
[ 2706.596041][ T4368] 8021q: adding VLAN 0 to HW filter on device bond39
[ 2706.823042][T22261] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 2706.832500][T22261] usb 5-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config
[ 2706.873845][T22261] usb 5-1: config 0 has no interface number 0
[ 2706.897969][ T4378] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8269'.
[ 2706.907323][T22261] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 145, changing to 11
[ 2706.941496][T22261] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 16516, setting to 1024
[ 2706.962936][T22261] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2707.052941][T22261] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2707.151476][T22261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2707.262338][T22261] usb 5-1: Product: syz
[ 2707.266933][T22261] usb 5-1: Manufacturer: syz
[ 2707.271843][T22261] usb 5-1: SerialNumber: syz
[ 2707.303218][T22261] usb 5-1: config 0 descriptor??
[ 2707.313786][   T48] hub 3-1:0.0: config failed, can't read hub descriptor (err -22)
[ 2707.326846][   T48] usbhid 3-1:0.0: can't add hid device: -71
[ 2707.333516][   T48] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2707.456141][   T48] usb 3-1: USB disconnect, device number 41
[ 2707.727845][ T4364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2707.757470][ T4364] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2707.818603][T22261] usb 5-1: USB disconnect, device number 68
[ 2708.231080][ T4398] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2708.351862][ T4398] bond4: entered promiscuous mode
[ 2708.430027][ T4398] bond4: entered allmulticast mode
[ 2708.435815][ T4398] 8021q: adding VLAN 0 to HW filter on device bond4
[ 2708.619468][ T4405] sctp: [Deprecated]: syz.4.8276 (pid 4405) Use of int in maxseg socket option.
[ 2708.619468][ T4405] Use struct sctp_assoc_value instead
[ 2709.881531][T22261] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[ 2710.031553][T22261] usb 2-1: Using ep0 maxpacket: 16
[ 2710.053643][T22261] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2710.101459][T22261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2710.112832][T22261] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2710.141778][T22261] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2710.170099][T22261] usb 2-1: Product: syz
[ 2710.203137][T22261] usb 2-1: Manufacturer: syz
[ 2710.216321][T22261] usb 2-1: SerialNumber: syz
[ 2710.402554][ T4432] input: syz1 as /devices/virtual/input/input152
[ 2710.415919][ T4426] tun0: tun_chr_ioctl cmd 1074025675
[ 2710.421270][ T4426] tun0: persist enabled
[ 2710.436748][T22261] usb 2-1: 0:2 : does not exist
[ 2710.454850][T22261] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2710.504150][T22261] usb 2-1: USB disconnect, device number 39
[ 2710.663630][ T5888] usb 3-1: new high-speed USB device number 42 using dummy_hcd
[ 2710.702678][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2710.887756][ T5888] usb 3-1: config 0 has an invalid interface number: 117 but max is 0
[ 2710.907615][ T5888] usb 3-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config
[ 2710.931537][ T4445] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2710.983414][ T5888] usb 3-1: config 0 has no interface number 0
[ 2710.983459][ T5888] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 145, changing to 11
[ 2710.983499][ T5888] usb 3-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 16516, setting to 1024
[ 2710.983527][ T5888] usb 3-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2711.002571][ T5888] usb 3-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2711.002608][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2711.002633][ T5888] usb 3-1: Product: syz
[ 2711.002659][ T5888] usb 3-1: Manufacturer: syz
[ 2711.002677][ T5888] usb 3-1: SerialNumber: syz
[ 2711.027045][ T4445] bond5: entered promiscuous mode
[ 2711.027078][ T4445] bond5: entered allmulticast mode
[ 2711.027709][ T4445] 8021q: adding VLAN 0 to HW filter on device bond5
[ 2711.064352][ T5888] usb 3-1: config 0 descriptor??
[ 2711.576454][ T4461] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2711.653327][ T4461] bond44: entered promiscuous mode
[ 2711.658731][ T4461] bond44: entered allmulticast mode
[ 2711.668600][ T4461] 8021q: adding VLAN 0 to HW filter on device bond44
[ 2711.715836][T22261] usb 3-1: USB disconnect, device number 42
[ 2713.301560][ T5888] usb 5-1: new high-speed USB device number 69 using dummy_hcd
[ 2713.413938][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 2713.420297][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 2713.453619][ T5888] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2713.471787][ T5888] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2713.482875][ T5888] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2713.492299][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2713.504182][ T5888] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2713.518013][ T5888] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2713.531663][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2713.539882][ T5888] usb 5-1: Product: syz
[ 2713.556502][ T5888] usb 5-1: Manufacturer: syz
[ 2713.581278][ T5888] cdc_wdm 5-1:1.0: skipping garbage
[ 2713.592164][ T5888] cdc_wdm 5-1:1.0: skipping garbage
[ 2713.598441][ T5888] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device
[ 2713.606105][ T5888] cdc_wdm 5-1:1.0: Unknown control protocol
[ 2713.851148][T22261] usb 5-1: USB disconnect, device number 69
[ 2714.382243][T22261] usb 6-1: new high-speed USB device number 18 using dummy_hcd
[ 2714.511608][ T5888] usb 1-1: new high-speed USB device number 58 using dummy_hcd
[ 2714.542173][T22261] usb 6-1: Using ep0 maxpacket: 8
[ 2714.575029][T22261] usb 6-1: config 0 has an invalid interface number: 55 but max is 0
[ 2714.600037][T22261] usb 6-1: config 0 has no interface number 0
[ 2714.616966][T22261] usb 6-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[ 2714.638582][T22261] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid wMaxPacketSize 0
[ 2714.670917][T22261] usb 6-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[ 2714.693080][ T5888] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[ 2714.699298][T22261] usb 6-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[ 2714.726146][ T5888] usb 1-1: config 0 has no interface number 0
[ 2714.732818][T22261] usb 6-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[ 2714.732897][ T5888] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2714.746961][T29917] usb 5-1: new high-speed USB device number 70 using dummy_hcd
[ 2714.758438][ T5888] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2714.793594][T22261] usb 6-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[ 2714.807263][T22261] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2714.816897][ T5888] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2714.827560][T22261] usb 6-1: config 0 descriptor??
[ 2714.830656][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2714.848132][ T5888] usb 1-1: Product: syz
[ 2714.853333][ T5888] usb 1-1: Manufacturer: syz
[ 2714.854836][T22261] ldusb 6-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[ 2714.857956][ T5888] usb 1-1: SerialNumber: syz
[ 2714.871827][ T5888] usb 1-1: config 0 descriptor??
[ 2714.880541][ T4497] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2714.908439][ T5888] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2714.928588][ T5888] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2714.965088][T29917] usb 5-1: New USB device found, idVendor=8086, idProduct=0110, bcdDevice=bf.ad
[ 2714.978649][T29917] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2715.011168][T29917] usb 5-1: config 0 descriptor??
[ 2715.037242][T29917] gspca_main: spca508-2.14.0 probing 8086:0110
[ 2715.085531][ T4494] ldusb 6-1:0.55: Write buffer overflow, 1 bytes dropped
[ 2715.105513][ T4494] ldusb 6-1:0.55: Couldn't submit interrupt_out_urb -90
[ 2715.186862][T22261] usb 6-1: USB disconnect, device number 18
[ 2715.197293][T22261] ldusb 6-1:0.55: LD USB Device #0 now disconnected
[ 2715.244536][T29917] gspca_spca508: reg_read err -32
[ 2715.256711][T29917] gspca_spca508: reg_read err -32
[ 2715.264669][T29917] gspca_spca508: reg_read err -32
[ 2715.272200][T29917] gspca_spca508: reg_read err -32
[ 2715.278888][T29917] gspca_spca508: reg_read err -32
[ 2715.376152][ T4497] fuse: Unknown parameter 'rootmo'
[ 2715.399028][ T4504] fuse: Bad value for 'fd'
[ 2715.490231][T29917] gspca_spca508: reg write: error -71
[ 2715.495954][T29917] spca508 5-1:0.0: probe with driver spca508 failed with error -71
[ 2715.541263][T29917] usb 5-1: USB disconnect, device number 70
[ 2715.691597][T22261] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[ 2715.840939][ T4510] FAULT_INJECTION: forcing a failure.
[ 2715.840939][ T4510] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2715.856350][ T4510] CPU: 0 UID: 0 PID: 4510 Comm: syz.5.8309 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2715.856381][ T4510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2715.856399][ T4510] Call Trace:
[ 2715.856408][ T4510]  <TASK>
[ 2715.856416][ T4510]  dump_stack_lvl+0x241/0x360
[ 2715.856455][ T4510]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2715.856486][ T4510]  ? __pfx__printk+0x10/0x10
[ 2715.856521][ T4510]  should_fail_ex+0x424/0x570
[ 2715.856554][ T4510]  _copy_to_user+0x31/0xb0
[ 2715.856580][ T4510]  simple_read_from_buffer+0xc4/0x170
[ 2715.856615][ T4510]  proc_fail_nth_read+0x1ef/0x260
[ 2715.856641][ T4510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2715.856667][ T4510]  ? rw_verify_area+0x246/0x630
[ 2715.856692][ T4510]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2715.856716][ T4510]  vfs_read+0x21f/0xb90
[ 2715.856744][ T4510]  ? __pfx___mutex_lock+0x10/0x10
[ 2715.856775][ T4510]  ? __pfx_vfs_read+0x10/0x10
[ 2715.856802][ T4510]  ? __fget_files+0x2a/0x420
[ 2715.856824][ T4510]  ? __fget_files+0x39d/0x420
[ 2715.856844][ T4510]  ? __fget_files+0x2a/0x420
[ 2715.856870][ T4510]  ksys_read+0x19d/0x2d0
[ 2715.856897][ T4510]  ? __pfx_ksys_read+0x10/0x10
[ 2715.856927][ T4510]  ? do_syscall_64+0xb6/0x230
[ 2715.856958][ T4510]  do_syscall_64+0xf3/0x230
[ 2715.856987][ T4510]  ? clear_bhb_loop+0x45/0xa0
[ 2715.857024][ T4510]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2715.857045][ T4510] RIP: 0033:0x7f638cf8bb7c
[ 2715.857064][ T4510] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2715.857082][ T4510] RSP: 002b:00007f638dd62030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2715.857105][ T4510] RAX: ffffffffffffffda RBX: 00007f638d1a5fa0 RCX: 00007f638cf8bb7c
[ 2715.857122][ T4510] RDX: 000000000000000f RSI: 00007f638dd620a0 RDI: 0000000000000003
[ 2715.857136][ T4510] RBP: 00007f638dd62090 R08: 0000000000000000 R09: 0000000000000000
[ 2715.857149][ T4510] R10: 0000200000ff2000 R11: 0000000000000246 R12: 0000000000000001
[ 2715.857163][ T4510] R13: 0000000000000000 R14: 00007f638d1a5fa0 R15: 00007f638d2cfa28
[ 2715.857189][ T4510]  </TASK>
[ 2715.932417][T22261] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2715.934595][T31809] usb 3-1: new high-speed USB device number 43 using dummy_hcd
[ 2715.951303][T22261] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2716.104482][T31809] usb 3-1: Using ep0 maxpacket: 16
[ 2716.136724][T31809] usb 3-1: config 0 has an invalid interface number: 41 but max is 0
[ 2716.157935][T31809] usb 3-1: config 0 has no interface number 0
[ 2716.189786][ T4515] blkio.reset_stats is deprecated
[ 2716.196624][T31809] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16
[ 2716.225325][T31809] usb 3-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64
[ 2716.237726][ T5888] usb 1-1: USB disconnect, device number 58
[ 2716.244174][T22261] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2716.257267][ T5888] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2716.274537][T31809] usb 3-1: config 0 interface 41 has no altsetting 0
[ 2716.291886][T31809] usb 3-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a
[ 2716.296543][T22261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2716.301330][ T5888] cyberjack 1-1:0.69: device disconnected
[ 2716.342511][T31809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2716.350575][T31809] usb 3-1: Product: syz
[ 2716.367331][T22261] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2716.367805][T31809] usb 3-1: Manufacturer: syz
[ 2716.419078][ T4524] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2716.494482][T22261] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2716.529057][T22261] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2716.544516][T31809] usb 3-1: SerialNumber: syz
[ 2716.559300][T31809] usb 3-1: config 0 descriptor??
[ 2716.561516][T22261] usb 2-1: Product: syz
[ 2716.581495][T22261] usb 2-1: Manufacturer: syz
[ 2716.587458][ T4507] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2716.595294][ T4507] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2716.651991][ T4524] bond27: entered promiscuous mode
[ 2716.657325][ T4524] bond27: entered allmulticast mode
[ 2716.668430][ T4524] 8021q: adding VLAN 0 to HW filter on device bond27
[ 2716.717662][T22261] cdc_wdm 2-1:1.0: skipping garbage
[ 2716.745582][T22261] cdc_wdm 2-1:1.0: skipping garbage
[ 2716.786750][T22261] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2716.814493][T22261] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2716.935527][T22261] usb 2-1: USB disconnect, device number 40
[ 2716.960410][ T4506] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2716.969538][ T4506] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2716.988620][ T4506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2717.041665][ T4506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2717.251664][    C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured!
[ 2717.292093][T29917] usb 6-1: new high-speed USB device number 19 using dummy_hcd
[ 2717.489760][T31809] Error reading MAC address
[ 2717.490300][T29917] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2717.504343][ T4506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2717.518936][ T4506] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2717.640171][T29917] usb 6-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2717.687231][T29917] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2717.730448][T29917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9
[ 2717.798423][T29917] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024
[ 2717.859601][T29917] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2717.869169][T29917] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2718.301733][T29917] usb 6-1: Product: syz
[ 2718.306068][T29917] usb 6-1: Manufacturer: syz
[ 2718.327898][T29917] cdc_wdm 6-1:1.0: skipping garbage
[ 2718.341035][T29917] cdc_wdm 6-1:1.0: skipping garbage
[ 2718.361906][T29917] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device
[ 2718.368162][T29917] cdc_wdm 6-1:1.0: Unknown control protocol
[ 2718.371008][T31809] sr9700 3-1:0.41 eth1: register 'sr9700' at usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet, 52:cb:2d:f0:96:a2
[ 2718.491685][T31809] usb 3-1: USB disconnect, device number 43
[ 2718.592652][T31809] sr9700 3-1:0.41 eth1: unregister 'sr9700' usb-dummy_hcd.2-1, CoreChip SR9700 USB Ethernet
[ 2718.621466][T29917] usb 6-1: USB disconnect, device number 19
[ 2718.737485][ T4532] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551614)
[ 2718.751156][ T4532] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647
[ 2719.474182][ T4559] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8321'.
[ 2719.689820][ T4562] FAULT_INJECTION: forcing a failure.
[ 2719.689820][ T4562] name failslab, interval 1, probability 0, space 0, times 0
[ 2719.689913][ T4562] CPU: 0 UID: 0 PID: 4562 Comm: syz.4.8322 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2719.689940][ T4562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2719.689953][ T4562] Call Trace:
[ 2719.689961][ T4562]  <TASK>
[ 2719.689970][ T4562]  dump_stack_lvl+0x241/0x360
[ 2719.690007][ T4562]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2719.690036][ T4562]  ? __pfx__printk+0x10/0x10
[ 2719.690068][ T4562]  ? __pfx___might_resched+0x10/0x10
[ 2719.690097][ T4562]  should_fail_ex+0x424/0x570
[ 2719.690129][ T4562]  should_failslab+0xac/0x100
[ 2719.690162][ T4562]  __kmalloc_noprof+0xdf/0x4d0
[ 2719.690182][ T4562]  ? drm_atomic_state_init+0x9e/0x2f0
[ 2719.690213][ T4562]  ? __kasan_kmalloc+0x9d/0xb0
[ 2719.690243][ T4562]  drm_atomic_state_init+0x9e/0x2f0
[ 2719.690274][ T4562]  drm_atomic_state_alloc+0xb9/0x100
[ 2719.690305][ T4562]  drm_client_modeset_commit_atomic+0xdc/0x7d0
[ 2719.690337][ T4562]  ? __mutex_lock+0x380/0x10c0
[ 2719.690368][ T4562]  ? __pfx_drm_client_modeset_commit_atomic+0x10/0x10
[ 2719.690412][ T4562]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 2719.690448][ T4562]  drm_client_modeset_commit_locked+0xe0/0x520
[ 2719.690482][ T4562]  drm_fb_helper_pan_display+0x3e8/0xc20
[ 2719.690515][ T4562]  fb_pan_display+0x3a3/0x680
[ 2719.690536][ T4562]  ? __pfx_drm_fb_helper_pan_display+0x10/0x10
[ 2719.690563][ T4562]  bit_update_start+0x4d/0x1c0
[ 2719.690588][ T4562]  fbcon_modechanged+0xb7b/0x1200
[ 2719.690629][ T4562]  do_fb_ioctl+0x74c/0x7e0
[ 2719.690664][ T4562]  ? __pfx_do_fb_ioctl+0x10/0x10
[ 2719.690705][ T4562]  ? __lock_acquire+0xad5/0xd80
[ 2719.690739][ T4562]  ? __fget_files+0x2a/0x420
[ 2719.690759][ T4562]  ? __fget_files+0x2a/0x420
[ 2719.690781][ T4562]  ? __fget_files+0x2a/0x420
[ 2719.690804][ T4562]  ? __pfx_fb_ioctl+0x10/0x10
[ 2719.690831][ T4562]  __se_sys_ioctl+0xf1/0x160
[ 2719.690860][ T4562]  do_syscall_64+0xf3/0x230
[ 2719.690888][ T4562]  ? clear_bhb_loop+0x45/0xa0
[ 2719.690913][ T4562]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2719.690933][ T4562] RIP: 0033:0x7fa7a978d169
[ 2719.690953][ T4562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2719.690971][ T4562] RSP: 002b:00007fa7aa506038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 2719.690994][ T4562] RAX: ffffffffffffffda RBX: 00007fa7a99a5fa0 RCX: 00007fa7a978d169
[ 2719.691009][ T4562] RDX: 0000200000000140 RSI: 0000000000004601 RDI: 0000000000000003
[ 2719.691023][ T4562] RBP: 00007fa7aa506090 R08: 0000000000000000 R09: 0000000000000000
[ 2719.691036][ T4562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2719.691048][ T4562] R13: 0000000000000000 R14: 00007fa7a99a5fa0 R15: 00007fa7a9acfa28
[ 2719.691076][ T4562]  </TASK>
[ 2719.821692][T31809] usb 3-1: new full-speed USB device number 44 using dummy_hcd
[ 2719.976760][T31809] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2719.976793][T31809] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2719.986486][T31809] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2720.034557][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2720.104923][T29917] usb 6-1: new high-speed USB device number 20 using dummy_hcd
[ 2720.137223][T27214] usb 1-1: new high-speed USB device number 59 using dummy_hcd
[ 2720.162789][T31809] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2720.170880][T31809] usb 3-1: Product: syz
[ 2720.175783][T31809] usb 3-1: Manufacturer: syz
[ 2720.180425][T31809] usb 3-1: SerialNumber: syz
[ 2720.257864][T29917] usb 6-1: Using ep0 maxpacket: 8
[ 2720.288691][T29917] usb 6-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2720.298597][T29917] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2720.307458][T29917] usb 6-1: Product: syz
[ 2720.312235][T29917] usb 6-1: Manufacturer: syz
[ 2720.313514][T27214] usb 1-1: config 0 has an invalid interface number: 69 but max is 0
[ 2720.316842][T29917] usb 6-1: SerialNumber: syz
[ 2720.331960][T27214] usb 1-1: config 0 has no interface number 0
[ 2720.351773][T27214] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2720.356922][T29917] usb 6-1: config 0 descriptor??
[ 2720.373079][T27214] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2720.402804][T29917] gspca_main: se401-2.14.0 probing 047d:5003
[ 2720.471114][T27214] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2720.489098][T27214] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2720.541202][T27214] usb 1-1: Product: syz
[ 2720.624350][T27214] usb 1-1: Manufacturer: syz
[ 2720.636102][T27214] usb 1-1: SerialNumber: syz
[ 2720.716119][T27214] usb 1-1: config 0 descriptor??
[ 2720.729753][ T4565] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2720.740088][T27214] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2720.756580][T27214] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2721.209228][ T4565] fuse: Unknown parameter 'rootmo'
[ 2721.627127][T29917] input: se401 as /devices/platform/dummy_hcd.5/usb6/6-1/input/input154
[ 2721.687225][T29917] usb 6-1: USB disconnect, device number 20
[ 2721.868999][ T4343] usb 1-1: USB disconnect, device number 59
[ 2722.053145][   T48] usb 2-1: new high-speed USB device number 41 using dummy_hcd
[ 2722.158837][ T4343] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2722.179365][ T4343] cyberjack 1-1:0.69: device disconnected
[ 2722.261704][T29917] usb 5-1: new high-speed USB device number 71 using dummy_hcd
[ 2722.281535][   T48] usb 2-1: Using ep0 maxpacket: 8
[ 2722.288460][   T48] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2722.306778][   T48] usb 2-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2722.319812][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2722.333800][   T48] usb 2-1: Product: syz
[ 2722.338142][   T48] usb 2-1: Manufacturer: syz
[ 2722.353892][   T48] usb 2-1: SerialNumber: syz
[ 2722.360641][   T48] usb 2-1: config 0 descriptor??
[ 2722.410227][T31809] usb 3-1: 0:2 : does not exist
[ 2722.423659][T31809] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[ 2722.444514][T29917] usb 5-1: Using ep0 maxpacket: 16
[ 2722.462679][T29917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2722.469957][T31809] usb 3-1: USB disconnect, device number 44
[ 2722.479383][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2722.491301][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2722.503574][T29917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2722.513893][T29917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2722.541658][T29917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2722.552314][T29917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2722.630056][T29917] usb 5-1: Manufacturer: syz
[ 2722.649913][T29917] usb 5-1: config 0 descriptor??
[ 2722.704812][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2723.013092][T29917] rc_core: IR keymap rc-hauppauge not found
[ 2723.029453][T29917] Registered IR keymap rc-empty
[ 2723.040845][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.048104][ T4343] usb 3-1: new high-speed USB device number 45 using dummy_hcd
[ 2723.081514][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.123539][T29917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2723.157323][T29917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input155
[ 2723.182308][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.202102][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.221645][ T4343] usb 3-1: Using ep0 maxpacket: 32
[ 2723.227283][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.247747][ T4343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2723.262511][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.271799][ T4343] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2723.291872][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.397935][ T4343] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2723.407339][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.415154][ T4343] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2723.424263][ T4343] usb 3-1: Product: syz
[ 2723.428548][ T4343] usb 3-1: Manufacturer: syz
[ 2723.433712][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.471630][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.484821][ T4343] hub 3-1:4.0: USB hub found
[ 2723.511533][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.551843][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.591625][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2723.618867][T29917] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2723.639352][T29917] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2723.687069][ T4343] hub 3-1:4.0: 2 ports detected
[ 2723.736541][T29917] usb 5-1: USB disconnect, device number 71
[ 2723.861541][T31809] usb 1-1: new full-speed USB device number 60 using dummy_hcd
[ 2724.067364][T31809] usb 1-1: config 0 has an invalid interface number: 138 but max is 0
[ 2724.094401][T31809] usb 1-1: config 0 has no interface number 0
[ 2724.116008][T31809] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x61, changing to 0x1
[ 2724.128009][T31809] usb 1-1: config 0 interface 138 altsetting 0 has an endpoint descriptor with address 0x97, changing to 0x87
[ 2724.140019][T31809] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 10
[ 2724.152039][T31809] usb 1-1: config 0 interface 138 altsetting 0 endpoint 0x87 has invalid wMaxPacketSize 0
[ 2724.162093][T31809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a0, bcdDevice= f.66
[ 2724.171577][T31809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2724.187827][T31809] usb 1-1: config 0 descriptor??
[ 2724.498016][ T4343] hub 3-1:4.0: hub_hub_status failed (err = -71)
[ 2724.553344][ T4343] hub 3-1:4.0: config failed, can't get hub status (err -71)
[ 2724.642293][ T4343] usb 3-1: USB disconnect, device number 45
[ 2724.750235][T27855] usb 2-1: USB disconnect, device number 41
[ 2724.881685][ T5888] usb 5-1: new high-speed USB device number 72 using dummy_hcd
[ 2725.232986][ T4343] usb 3-1: new high-speed USB device number 46 using dummy_hcd
[ 2725.238098][ T5888] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2725.262054][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2725.270424][ T5888] usb 5-1: Product: syz
[ 2725.359645][ T5888] usb 5-1: Manufacturer: syz
[ 2725.398051][ T5888] usb 5-1: SerialNumber: syz
[ 2725.430595][ T5888] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2725.511058][ T1402] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2725.521626][ T4343] usb 3-1: Using ep0 maxpacket: 32
[ 2725.536096][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2725.554670][ T4343] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2725.631830][ T4343] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 2725.708861][ T4343] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2725.769794][ T4343] usb 3-1: config 0 descriptor??
[ 2725.793682][ T4343] hub 3-1:0.0: USB hub found
[ 2725.975624][ T4634] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2726.000102][ T4343] hub 3-1:0.0: config failed, can't read hub descriptor (err -90)
[ 2726.008262][T31809] usb 1-1: string descriptor 0 read error: -71
[ 2726.035944][ T4634] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2726.050675][T27855] usb 5-1: USB disconnect, device number 72
[ 2726.105505][T31809] usbtest 1-1:0.138: Linux gadget zero
[ 2726.138372][T31809] usbtest 1-1:0.138: full-speed {control in/out bulk-out int-in} tests (+alt)
[ 2726.289449][T31809] usb 1-1: USB disconnect, device number 60
[ 2726.511501][ T5888] usb 6-1: new high-speed USB device number 21 using dummy_hcd
[ 2726.673622][ T5888] usb 6-1: config 0 has an invalid interface number: 69 but max is 0
[ 2726.691585][ T1402] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[ 2726.698659][ T1402] ath9k_htc: Failed to initialize the device
[ 2726.724864][ T5888] usb 6-1: config 0 has no interface number 0
[ 2726.742397][ T5888] usb 6-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2726.758287][ T5888] usb 6-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2726.762105][T27855] usb 5-1: ath9k_htc: USB layer deinitialized
[ 2726.810925][ T5888] usb 6-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2726.829222][ T4343] usbhid 3-1:0.0: can't add hid device: -71
[ 2726.842749][ T4343] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[ 2726.901133][ T4655] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8354'.
[ 2726.915729][ T4343] usb 3-1: USB disconnect, device number 46
[ 2726.951716][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2727.056311][ T5888] usb 6-1: Product: syz
[ 2727.115544][ T5888] usb 6-1: Manufacturer: syz
[ 2727.147432][ T5888] usb 6-1: SerialNumber: syz
[ 2727.203694][ T5888] usb 6-1: config 0 descriptor??
[ 2727.250366][ T4642] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 2727.314885][ T5888] cyberjack 6-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2727.406695][ T5888] usb 6-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2727.785084][ T4642] fuse: Unknown parameter 'rootmo'
[ 2728.048768][ T4667] fuse: Bad value for 'rootmode'
[ 2728.343154][T27855] usb 6-1: USB disconnect, device number 21
[ 2728.352743][T27855] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2728.387888][T27855] cyberjack 6-1:0.69: device disconnected
[ 2728.656315][ T4670] netlink: 'syz.4.8359': attribute type 2 has an invalid length.
[ 2728.668309][ T4670] netlink: 'syz.4.8359': attribute type 8 has an invalid length.
[ 2728.678980][ T4670] netlink: 32 bytes leftover after parsing attributes in process `syz.4.8359'.
[ 2730.961550][ T5888] usb 5-1: new high-speed USB device number 73 using dummy_hcd
[ 2731.114492][ T5888] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[ 2731.140878][ T5888] usb 5-1: config 0 has no interface number 0
[ 2731.148225][ T5888] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2731.169788][ T5888] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2731.186814][T31809] usb 6-1: new high-speed USB device number 22 using dummy_hcd
[ 2731.202648][ T5888] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2731.221667][ T5888] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2731.240158][ T5888] usb 5-1: Product: syz
[ 2731.244708][ T5888] usb 5-1: Manufacturer: syz
[ 2731.249316][ T5888] usb 5-1: SerialNumber: syz
[ 2731.259467][ T5888] usb 5-1: config 0 descriptor??
[ 2731.269524][ T4703] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2731.279581][ T5888] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2731.293751][ T5888] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2731.341659][T31809] usb 6-1: Using ep0 maxpacket: 32
[ 2731.348606][T31809] usb 6-1: config index 0 descriptor too short (expected 35577, got 27)
[ 2731.358013][T31809] usb 6-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[ 2731.367331][T31809] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 92
[ 2731.376800][T31809] usb 6-1: config 1 has no interface number 0
[ 2731.383478][T31809] usb 6-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2731.395227][T31809] usb 6-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[ 2731.408735][T31809] usb 6-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[ 2731.428955][T31809] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2731.454790][T31809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD found
[ 2731.512826][ T4343] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[ 2731.526439][ T4720] fuse: Bad value for 'fd'
[ 2731.651705][ T4343] usb 2-1: device descriptor read/64, error -71
[ 2731.665554][T31809] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now attached
[ 2731.716093][ T4724] netlink: 228 bytes leftover after parsing attributes in process `syz.0.8375'.
[ 2731.733874][ T4703] fuse: Unknown parameter 'rootmo'
[ 2731.901525][ T4343] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[ 2732.051504][ T4343] usb 2-1: device descriptor read/64, error -71
[ 2732.172884][ T4343] usb usb2-port1: attempt power cycle
[ 2732.336063][T29917] usb 3-1: new high-speed USB device number 47 using dummy_hcd
[ 2732.496636][T27855] usb 5-1: USB disconnect, device number 73
[ 2732.508118][T27855] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2732.524657][T29917] usb 3-1: Using ep0 maxpacket: 8
[ 2732.538137][ T4343] usb 2-1: new high-speed USB device number 44 using dummy_hcd
[ 2732.565797][T29917] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 2732.590232][T29917] usb 3-1: New USB device found, idVendor=047d, idProduct=5003, bcdDevice=2f.8c
[ 2732.604670][T27855] cyberjack 5-1:0.69: device disconnected
[ 2732.613218][ T4343] usb 2-1: device descriptor read/8, error -71
[ 2732.619460][T29917] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2732.629948][T29917] usb 3-1: Product: syz
[ 2732.636513][T29917] usb 3-1: Manufacturer: syz
[ 2732.646513][T29917] usb 3-1: SerialNumber: syz
[ 2732.656917][T29917] usb 3-1: config 0 descriptor??
[ 2732.694919][T31809] snd_usb_pod 6-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[ 2732.851487][ T4343] usb 2-1: new high-speed USB device number 45 using dummy_hcd
[ 2732.892337][ T4343] usb 2-1: device descriptor read/8, error -71
[ 2733.001810][ T4343] usb usb2-port1: unable to enumerate USB device
[ 2733.281565][ T5888] usb 1-1: new high-speed USB device number 61 using dummy_hcd
[ 2733.481618][ T5888] usb 1-1: Using ep0 maxpacket: 16
[ 2733.495725][ T5888] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2733.511804][ T5888] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2733.528143][ T5888] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2733.537725][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2733.546195][ T5888] usb 1-1: Product: syz
[ 2733.560748][ T5888] usb 1-1: Manufacturer: syz
[ 2733.568076][ T5888] usb 1-1: SerialNumber: syz
[ 2733.711587][ T4343] usb 5-1: new high-speed USB device number 74 using dummy_hcd
[ 2733.802516][ T5888] usb 1-1: 0:2 : does not exist
[ 2733.822769][ T5888] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[ 2733.849349][ T5888] usb 1-1: USB disconnect, device number 61
[ 2733.906451][ T4343] usb 5-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config
[ 2733.929735][ T4343] usb 5-1: New USB device found, idVendor=041e, idProduct=4007, bcdDevice=5d.18
[ 2733.958965][ T4343] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2734.062503][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[ 2734.087915][T29917] usb 6-1: USB disconnect, device number 22
[ 2734.103798][T29917] snd_usb_pod 6-1:1.1: Line 6 Pocket POD now disconnected
[ 2734.123029][ T4343] gspca_main: stv0680-2.14.0 probing 041e:4007
[ 2734.179466][ T4741] fuse: Invalid rootmode
[ 2734.462144][ T4738] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2734.478750][ T4738] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2734.668149][   T30] kauditd_printk_skb: 29 callbacks suppressed
[ 2734.668169][   T30] audit: type=1326 audit(1743325458.893:5546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.750887][   T30] audit: type=1326 audit(1743325458.933:5547): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.782779][   T30] audit: type=1326 audit(1743325458.933:5548): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=5 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.807551][   T30] audit: type=1326 audit(1743325458.933:5549): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.835973][   T30] audit: type=1326 audit(1743325458.933:5550): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.870383][ T4754] netlink: 40 bytes leftover after parsing attributes in process `syz.1.8386'.
[ 2734.896480][   T30] audit: type=1326 audit(1743325458.933:5551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.924426][   T30] audit: type=1326 audit(1743325458.933:5552): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2734.952491][   T30] audit: type=1326 audit(1743325458.933:5553): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=54 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2735.035859][   T30] audit: type=1326 audit(1743325458.953:5554): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2735.090469][T29917] usb 3-1: USB disconnect, device number 47
[ 2735.172752][ T4343] stv0680 5-1:4.0: STV(e): camera ping failed!!
[ 2735.195760][   T30] audit: type=1326 audit(1743325458.953:5555): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4751 comm="syz.1.8385" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7f05ab18d169 code=0x7ffc0000
[ 2735.586434][ T4764] fuse: Invalid rootmode
[ 2735.693393][ T4343] gspca_stv0680: usb_control_msg error 0, request = 0x80, error = -110
[ 2735.702467][ T4343] stv0680 5-1:4.0: last error: 0,  command = 0x0
[ 2735.881541][T29917] usb 6-1: new high-speed USB device number 23 using dummy_hcd
[ 2736.023919][T29917] usb 6-1: device descriptor read/64, error -71
[ 2736.282095][T29917] usb 6-1: new high-speed USB device number 24 using dummy_hcd
[ 2736.321489][ T4343] usb 2-1: new high-speed USB device number 46 using dummy_hcd
[ 2736.421542][T29917] usb 6-1: device descriptor read/64, error -71
[ 2736.493119][ T4343] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2736.501975][ T4343] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2736.524532][ T4343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2736.542398][T29917] usb usb6-port1: attempt power cycle
[ 2736.551291][ T4343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2736.563824][ T4343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2736.594172][ T4343] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2736.605016][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2736.614936][ T4343] usb 2-1: Product: syz
[ 2736.620633][ T4343] usb 2-1: Manufacturer: syz
[ 2736.647740][ T4343] cdc_wdm 2-1:1.0: skipping garbage
[ 2736.661163][ T4343] cdc_wdm 2-1:1.0: skipping garbage
[ 2736.674664][ T4343] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2736.701423][ T4343] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2736.859069][ T1402] usb 2-1: USB disconnect, device number 46
[ 2736.891448][T29917] usb 6-1: new high-speed USB device number 25 using dummy_hcd
[ 2736.937884][ T4343] usb 5-1: USB disconnect, device number 74
[ 2736.972711][T29917] usb 6-1: device descriptor read/8, error -71
[ 2737.255949][T29917] usb 6-1: new high-speed USB device number 26 using dummy_hcd
[ 2737.302102][ T4791] ptrace attach of "./syz-executor exec"[5853] was attempted by "/dev/kvm o#              ��      ��      ��      ��             
      ���������      �       �
                                 �                                                                                                                                                                                      /dev/kvm                                                         P\x5c��                                                           PZ��                                                                                                                                                                                                                                                          \x07\x0b\x07                                                                                                                                                                                                                                              
[ 2737.311997][T29917] usb 6-1: device descriptor read/8, error -71
[ 2737.631840][T29917] usb usb6-port1: unable to enumerate USB device
[ 2737.749394][ T4803] fuse: Unknown parameter 'grou00000000000000000000'
[ 2737.758082][ T4803] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2737.870421][ T4803] bond40: entered promiscuous mode
[ 2737.905112][ T4803] bond40: entered allmulticast mode
[ 2737.998114][ T4803] 8021q: adding VLAN 0 to HW filter on device bond40
[ 2738.214657][ T4809] netlink: 'syz.4.8404': attribute type 10 has an invalid length.
[ 2738.223884][ T4809] netlink: 152 bytes leftover after parsing attributes in process `syz.4.8404'.
[ 2738.302565][ T4811] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw'
[ 2740.211476][T29917] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[ 2740.321556][ T1402] usb 3-1: new high-speed USB device number 48 using dummy_hcd
[ 2740.380112][T29917] usb 5-1: Using ep0 maxpacket: 16
[ 2740.403066][T29917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2740.430696][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2740.450690][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2740.484390][ T1402] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 2740.504192][ T1402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2740.512329][T29917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2740.524748][ T1402] usb 3-1: Product: syz
[ 2740.529014][ T1402] usb 3-1: Manufacturer: syz
[ 2740.543762][T29917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2740.563619][ T1402] usb 3-1: SerialNumber: syz
[ 2740.565535][T29917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2740.600530][ T1402] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[ 2740.601505][T29917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2740.641872][T31809] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 2740.663534][T29917] usb 5-1: Manufacturer: syz
[ 2740.690332][T29917] usb 5-1: config 0 descriptor??
[ 2740.851781][ T4343] usb 2-1: new high-speed USB device number 47 using dummy_hcd
[ 2740.951461][T27855] usb 1-1: new high-speed USB device number 62 using dummy_hcd
[ 2740.991438][T29917] rc_core: IR keymap rc-hauppauge not found
[ 2740.997398][T29917] Registered IR keymap rc-empty
[ 2741.014502][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.034660][ T4343] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2741.049135][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.056447][ T4343] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2741.067454][ T4343] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2741.076497][ T4343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2741.089836][T29917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2741.102101][ T4343] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2741.114431][T29917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input156
[ 2741.126799][T27855] usb 1-1: Using ep0 maxpacket: 32
[ 2741.140272][T27855] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2741.152887][ T4343] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2741.162062][ T4343] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2741.170084][ T4343] usb 2-1: Product: syz
[ 2741.175437][T27855] usb 1-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2741.186284][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.197673][ T4343] usb 2-1: Manufacturer: syz
[ 2741.207342][T27855] usb 1-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2741.221786][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.229464][T27855] usb 1-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2741.252643][ T4343] cdc_wdm 2-1:1.0: skipping garbage
[ 2741.257991][ T4343] cdc_wdm 2-1:1.0: skipping garbage
[ 2741.263603][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.272094][T27855] usb 1-1: Product: syz
[ 2741.276349][T27855] usb 1-1: Manufacturer: syz
[ 2741.281277][ T4343] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2741.281611][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.296251][ T4343] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2741.306282][T27855] hub 1-1:4.0: USB hub found
[ 2741.351553][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.381615][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.401537][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.421565][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.441633][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.459202][ T1402] usb 2-1: USB disconnect, device number 47
[ 2741.472703][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.491788][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2741.512903][T27855] hub 1-1:4.0: 2 ports detected
[ 2741.525836][T29917] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2741.536943][T29917] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2741.551043][T29917] usb 5-1: USB disconnect, device number 75
[ 2741.732326][T31809] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive
[ 2741.740127][T31809] ath9k_htc: Failed to initialize the device
[ 2741.785969][T31809] usb 3-1: ath9k_htc: USB layer deinitialized
[ 2742.017704][   T48] usb 3-1: USB disconnect, device number 48
[ 2742.032678][T29917] usb 6-1: new high-speed USB device number 27 using dummy_hcd
[ 2742.169697][ T4857] FAULT_INJECTION: forcing a failure.
[ 2742.169697][ T4857] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2742.183364][T29917] usb 6-1: device descriptor read/64, error -71
[ 2742.190382][ T4857] CPU: 1 UID: 0 PID: 4857 Comm: syz.1.8419 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2742.190411][ T4857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2742.190425][ T4857] Call Trace:
[ 2742.190432][ T4857]  <TASK>
[ 2742.190440][ T4857]  dump_stack_lvl+0x241/0x360
[ 2742.190476][ T4857]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2742.190503][ T4857]  ? __pfx__printk+0x10/0x10
[ 2742.190537][ T4857]  should_fail_ex+0x424/0x570
[ 2742.190568][ T4857]  _copy_to_user+0x31/0xb0
[ 2742.190593][ T4857]  simple_read_from_buffer+0xc4/0x170
[ 2742.190626][ T4857]  proc_fail_nth_read+0x1ef/0x260
[ 2742.190651][ T4857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2742.190676][ T4857]  ? rw_verify_area+0x246/0x630
[ 2742.190700][ T4857]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 2742.190723][ T4857]  vfs_read+0x21f/0xb90
[ 2742.190749][ T4857]  ? __pfx___mutex_lock+0x10/0x10
[ 2742.190777][ T4857]  ? __pfx_vfs_read+0x10/0x10
[ 2742.190803][ T4857]  ? __fget_files+0x2a/0x420
[ 2742.190824][ T4857]  ? __fget_files+0x39d/0x420
[ 2742.190843][ T4857]  ? __fget_files+0x2a/0x420
[ 2742.190868][ T4857]  ksys_read+0x19d/0x2d0
[ 2742.190894][ T4857]  ? __pfx_ksys_read+0x10/0x10
[ 2742.190929][ T4857]  ? do_syscall_64+0xb6/0x230
[ 2742.190959][ T4857]  do_syscall_64+0xf3/0x230
[ 2742.190987][ T4857]  ? clear_bhb_loop+0x45/0xa0
[ 2742.191010][ T4857]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2742.191029][ T4857] RIP: 0033:0x7f05ab18bb7c
[ 2742.191047][ T4857] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[ 2742.191065][ T4857] RSP: 002b:00007f05ac093030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[ 2742.191087][ T4857] RAX: ffffffffffffffda RBX: 00007f05ab3a5fa0 RCX: 00007f05ab18bb7c
[ 2742.191103][ T4857] RDX: 000000000000000f RSI: 00007f05ac0930a0 RDI: 0000000000000006
[ 2742.191134][ T4857] RBP: 00007f05ac093090 R08: 0000000000000000 R09: 0000000000000000
[ 2742.191148][ T4857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2742.191161][ T4857] R13: 0000000000000000 R14: 00007f05ab3a5fa0 R15: 00007f05ab4cfa28
[ 2742.191187][ T4857]  </TASK>
[ 2742.479215][T27855] hub 1-1:4.0: hub_hub_status failed (err = -71)
[ 2742.495224][T27855] hub 1-1:4.0: config failed, can't get hub status (err -71)
[ 2742.535138][T27855] usb 1-1: USB disconnect, device number 62
[ 2742.541969][T29917] usb 6-1: new high-speed USB device number 28 using dummy_hcd
[ 2742.682733][T29917] usb 6-1: device descriptor read/64, error -71
[ 2742.701513][T22261] usb 5-1: new full-speed USB device number 76 using dummy_hcd
[ 2742.802042][T29917] usb usb6-port1: attempt power cycle
[ 2742.810656][ T4868] fuse: Unknown parameter 'grou00000000000000000000'
[ 2742.828234][ T4868] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2742.896351][ T4868] bond41: entered promiscuous mode
[ 2743.051708][ T4868] bond41: entered allmulticast mode
[ 2743.057473][ T4868] 8021q: adding VLAN 0 to HW filter on device bond41
[ 2743.109112][T22261] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2743.131839][T22261] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2743.183689][T22261] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2743.293932][T22261] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2743.310157][T22261] usb 5-1: Product: syz
[ 2743.320770][T22261] usb 5-1: Manufacturer: syz
[ 2743.330470][T22261] usb 5-1: SerialNumber: syz
[ 2743.411566][T29917] usb 6-1: new high-speed USB device number 29 using dummy_hcd
[ 2743.450619][T29917] usb 6-1: device descriptor read/8, error -71
[ 2743.625869][T22261] usb 5-1: 0:2 : does not exist
[ 2743.646778][T22261] usb 5-1: 5:0: failed to get current value for ch 0 (-22)
[ 2743.683119][T22261] usb 5-1: USB disconnect, device number 76
[ 2743.727102][T29917] usb 6-1: new high-speed USB device number 30 using dummy_hcd
[ 2743.772169][T29917] usb 6-1: device descriptor read/8, error -71
[ 2743.851569][T31809] usb 1-1: new high-speed USB device number 63 using dummy_hcd
[ 2743.891858][T29917] usb usb6-port1: unable to enumerate USB device
[ 2744.003363][T31809] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2744.017689][T31809] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82
[ 2744.070873][T31809] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2744.106001][T31809] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 2744.152348][T31809] usb 1-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94
[ 2744.183165][T31809] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2744.201002][T31809] usb 1-1: config 0 descriptor??
[ 2744.210465][T31809] em28xx 1-1:0.0: New device   @ 480 Mbps (2040:1605, interface 0, class 0)
[ 2744.221994][T31809] em28xx 1-1:0.0: Video interface 0 found: isoc
[ 2744.282137][ T4883] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8427'.
[ 2744.400864][ T4889] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:19998
[ 2744.482132][T31809] em28xx 1-1:0.0: unknown em28xx chip ID (0)
[ 2744.550985][T31809] em28xx 1-1:0.0: reading from i2c device at 0xa0 failed (error=-5)
[ 2744.559212][T31809] em28xx 1-1:0.0: board has no eeprom
[ 2744.581580][ T1402] usb 2-1: new high-speed USB device number 48 using dummy_hcd
[ 2744.622392][T31809] em28xx 1-1:0.0: Identified as Hauppauge WinTV HVR 930C (card=81)
[ 2744.630523][T31809] em28xx 1-1:0.0: Currently, V4L2 is not supported on this model
[ 2744.644381][ T5888] em28xx 1-1:0.0: Binding DVB extension
[ 2744.650009][ T5888] em28xx 1-1:0.0: no endpoint for DVB mode and transfer type 0
[ 2744.660700][T31809] usb 1-1: USB disconnect, device number 63
[ 2744.667865][T31809] em28xx 1-1:0.0: Disconnecting em28xx
[ 2744.673515][ T5888] em28xx 1-1:0.0: failed to pre-allocate USB transfer buffers for DVB.
[ 2744.682044][ T5888] em28xx 1-1:0.0: Registering input extension
[ 2744.691509][T31809] em28xx 1-1:0.0: Closing input extension
[ 2744.692107][T22261] usb 3-1: new full-speed USB device number 49 using dummy_hcd
[ 2744.716577][T31809] em28xx 1-1:0.0: Freeing device
[ 2744.743950][ T1402] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2744.756833][ T1402] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2744.768138][ T1402] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2744.777650][ T1402] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2744.789227][ T1402] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2744.805621][ T1402] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2744.815560][ T1402] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2744.824031][ T1402] usb 2-1: Product: syz
[ 2744.828235][ T1402] usb 2-1: Manufacturer: syz
[ 2744.841707][T29917] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[ 2744.844808][ T1402] cdc_wdm 2-1:1.0: skipping garbage
[ 2744.856726][ T1402] cdc_wdm 2-1:1.0: skipping garbage
[ 2744.865854][ T1402] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device
[ 2744.872703][ T1402] cdc_wdm 2-1:1.0: Unknown control protocol
[ 2744.883461][T22261] usb 3-1: config 54 has an invalid interface number: 154 but max is 0
[ 2744.899774][T22261] usb 3-1: config 54 has an invalid descriptor of length 1, skipping remainder of the config
[ 2744.910592][T22261] usb 3-1: config 54 has no interface number 0
[ 2744.923476][T22261] usb 3-1: config 54 interface 154 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2
[ 2744.940013][T22261] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice= 0.ec
[ 2744.950448][T22261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2744.958737][T22261] usb 3-1: Product: syz
[ 2744.964735][T22261] usb 3-1: Manufacturer: syz
[ 2744.969376][T22261] usb 3-1: SerialNumber: syz
[ 2745.011661][T29917] usb 5-1: Using ep0 maxpacket: 32
[ 2745.024059][T29917] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2745.051542][T29917] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2745.147769][T29917] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2745.161920][T29917] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2745.170607][T29917] usb 5-1: Product: syz
[ 2745.177910][T27855] usb 2-1: USB disconnect, device number 48
[ 2745.188418][T29917] usb 5-1: Manufacturer: syz
[ 2745.269817][T29917] hub 5-1:4.0: USB hub found
[ 2745.281798][T22261] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 2745.286484][T20795] usb 3-1: Failed to submit usb control message: -71
[ 2745.338765][T22261] usb 3-1: USB disconnect, device number 49
[ 2745.381609][T20795] usb 3-1: unable to send the bmi data to the device: -71
[ 2745.388812][T20795] usb 3-1: unable to get target info from device
[ 2745.432228][T20795] usb 3-1: could not get target info (-71)
[ 2745.438131][T20795] usb 3-1: could not probe fw (-71)
[ 2745.500426][T29917] hub 5-1:4.0: 2 ports detected
[ 2745.741724][T27855] usb 6-1: new high-speed USB device number 31 using dummy_hcd
[ 2746.001881][T27855] usb 6-1: device descriptor read/64, error -71
[ 2746.261603][   T48] usb 2-1: new high-speed USB device number 49 using dummy_hcd
[ 2746.361533][T27855] usb 6-1: new high-speed USB device number 32 using dummy_hcd
[ 2746.460050][T29917] hub 5-1:4.0: hub_hub_status failed (err = -71)
[ 2746.474866][   T48] usb 2-1: config 0 has no interfaces?
[ 2746.497135][ T4918] fuse: Unknown parameter 'group_i00000000000000000000'
[ 2746.513957][T29917] hub 5-1:4.0: config failed, can't get hub status (err -71)
[ 2746.523104][ T4924] FAULT_INJECTION: forcing a failure.
[ 2746.523104][ T4924] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 2746.567369][ T4918] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2746.589232][   T48] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2746.610887][T27855] usb 6-1: device descriptor read/64, error -71
[ 2746.616471][ T4924] CPU: 0 UID: 0 PID: 4924 Comm: syz.0.8438 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2746.616506][ T4924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2746.616522][ T4924] Call Trace:
[ 2746.616536][ T4924]  <TASK>
[ 2746.616545][ T4924]  dump_stack_lvl+0x241/0x360
[ 2746.616591][ T4924]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2746.616624][ T4924]  ? __pfx__printk+0x10/0x10
[ 2746.616665][ T4924]  should_fail_ex+0x424/0x570
[ 2746.616701][ T4924]  _copy_from_user+0x2d/0xb0
[ 2746.616728][ T4924]  copy_msghdr_from_user+0xb3/0x580
[ 2746.616770][ T4924]  ? __pfx_copy_msghdr_from_user+0x10/0x10
[ 2746.616804][ T4924]  ? __fget_files+0x2a/0x420
[ 2746.616828][ T4924]  ? __fget_files+0x2a/0x420
[ 2746.616857][ T4924]  __sys_sendmsg+0x20a/0x360
[ 2746.616889][ T4924]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2746.616956][ T4924]  ? do_syscall_64+0xb6/0x230
[ 2746.616991][ T4924]  do_syscall_64+0xf3/0x230
[ 2746.617022][ T4924]  ? clear_bhb_loop+0x45/0xa0
[ 2746.617047][ T4924]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2746.617068][ T4924] RIP: 0033:0x7efdf1b8d169
[ 2746.617088][ T4924] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2746.617107][ T4924] RSP: 002b:00007efdf29c6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2746.617133][ T4924] RAX: ffffffffffffffda RBX: 00007efdf1da5fa0 RCX: 00007efdf1b8d169
[ 2746.617150][ T4924] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000003
[ 2746.617165][ T4924] RBP: 00007efdf29c6090 R08: 0000000000000000 R09: 0000000000000000
[ 2746.617179][ T4924] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2746.617193][ T4924] R13: 0000000000000000 R14: 00007efdf1da5fa0 R15: 00007efdf1ecfa28
[ 2746.617221][ T4924]  </TASK>
[ 2746.801052][   T48] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2746.809290][   T48] usb 2-1: Product: syz
[ 2746.813560][   T48] usb 2-1: Manufacturer: syz
[ 2746.818170][   T48] usb 2-1: SerialNumber: syz
[ 2746.830048][   T48] usb 2-1: config 0 descriptor??
[ 2746.851492][T29917] usb 5-1: USB disconnect, device number 77
[ 2746.981933][T27855] usb usb6-port1: attempt power cycle
[ 2747.088620][ T4918] bond33: entered promiscuous mode
[ 2747.111289][ T4918] bond33: entered allmulticast mode
[ 2747.117650][ T4918] 8021q: adding VLAN 0 to HW filter on device bond33
[ 2747.160500][ T4914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2747.180681][ T4914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2747.231635][T29917] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[ 2747.341698][T27855] usb 6-1: new high-speed USB device number 33 using dummy_hcd
[ 2747.382226][T27855] usb 6-1: device descriptor read/8, error -71
[ 2747.401555][T29917] usb 5-1: Using ep0 maxpacket: 16
[ 2747.418034][T29917] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 2747.453079][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2747.476811][ T4933] netdevsim netdevsim0 netdevsim0: entered promiscuous mode
[ 2747.484615][ T4933] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check.
[ 2747.581692][T29917] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 2747.655200][T27855] usb 6-1: new high-speed USB device number 34 using dummy_hcd
[ 2747.721490][T29917] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 2747.743264][T29917] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2747.761317][T27855] usb 6-1: device descriptor read/8, error -71
[ 2747.831012][T29917] usb 5-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 2747.861298][T29917] usb 5-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 2747.881954][T27855] usb usb6-port1: unable to enumerate USB device
[ 2747.895525][T29917] usb 5-1: Manufacturer: syz
[ 2747.913814][T29917] usb 5-1: config 0 descriptor??
[ 2748.331645][T31809] usb 3-1: new high-speed USB device number 50 using dummy_hcd
[ 2748.343216][T29917] rc_core: IR keymap rc-hauppauge not found
[ 2748.351186][T29917] Registered IR keymap rc-empty
[ 2748.359394][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.395478][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.423541][T29917] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0
[ 2748.461076][T29917] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input158
[ 2748.481580][T31809] usb 3-1: Using ep0 maxpacket: 8
[ 2748.488860][T31809] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2748.497148][T31809] usb 3-1: can't read configurations, error -61
[ 2748.533997][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.611910][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.634636][T31809] usb 3-1: new high-speed USB device number 51 using dummy_hcd
[ 2748.691714][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.722342][ T4941] input: syz1 as /devices/virtual/input/input159
[ 2748.729876][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.802281][T31809] usb 3-1: Using ep0 maxpacket: 8
[ 2748.824402][T31809] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2748.841530][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.847909][T31809] usb 3-1: can't read configurations, error -61
[ 2748.870647][T31809] usb usb3-port1: attempt power cycle
[ 2748.883444][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2748.950752][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2749.001977][ T1402] usb 6-1: new high-speed USB device number 35 using dummy_hcd
[ 2749.014157][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2749.045935][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2749.092057][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2749.111557][T29917] mceusb 5-1:0.0: Error: mce write submit urb error = -90
[ 2749.130008][T27855] usb 2-1: USB disconnect, device number 49
[ 2749.138310][T29917] mceusb 5-1:0.0: Registered 424242424242 with mce emulator interface version 1
[ 2749.173853][ T1402] usb 6-1: config 0 has an invalid interface number: 117 but max is 0
[ 2749.178048][T29917] mceusb 5-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 2749.188760][ T1402] usb 6-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config
[ 2749.231127][ T1402] usb 6-1: config 0 has no interface number 0
[ 2749.236532][T29917] usb 5-1: USB disconnect, device number 78
[ 2749.243297][T31809] usb 3-1: new high-speed USB device number 52 using dummy_hcd
[ 2749.260984][ T1402] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 145, changing to 11
[ 2749.279880][T31809] usb 3-1: Using ep0 maxpacket: 8
[ 2749.321229][T31809] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2749.391556][ T1402] usb 6-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 16516, setting to 1024
[ 2749.403515][T31809] usb 3-1: can't read configurations, error -61
[ 2749.432150][ T1402] usb 6-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2749.486791][ T1402] usb 6-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2749.512609][ T1402] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2749.521847][ T1402] usb 6-1: Product: syz
[ 2749.526062][ T1402] usb 6-1: Manufacturer: syz
[ 2749.530679][ T1402] usb 6-1: SerialNumber: syz
[ 2749.568034][T31809] usb 3-1: new high-speed USB device number 53 using dummy_hcd
[ 2749.595281][ T1402] usb 6-1: config 0 descriptor??
[ 2749.604434][T31809] usb 3-1: Using ep0 maxpacket: 8
[ 2749.626257][T31809] usb 3-1: unable to read config index 0 descriptor/start: -61
[ 2749.637551][T31809] usb 3-1: can't read configurations, error -61
[ 2749.651652][T31809] usb usb3-port1: unable to enumerate USB device
[ 2750.052673][T29917] usb 1-1: new high-speed USB device number 64 using dummy_hcd
[ 2750.170146][T27855] usb 6-1: USB disconnect, device number 35
[ 2750.215154][T29917] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32
[ 2750.224834][T29917] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config
[ 2750.241680][T29917] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66
[ 2750.252973][T29917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9
[ 2750.264730][T29917] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024
[ 2750.278911][T29917] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40
[ 2750.288215][T29917] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0
[ 2750.300830][T29917] usb 1-1: Product: syz
[ 2750.318623][T29917] usb 1-1: Manufacturer: syz
[ 2750.334320][T29917] cdc_wdm 1-1:1.0: skipping garbage
[ 2750.347333][T29917] cdc_wdm 1-1:1.0: skipping garbage
[ 2750.360834][T29917] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device
[ 2750.377205][T29917] cdc_wdm 1-1:1.0: Unknown control protocol
[ 2750.538378][T29917] usb 1-1: USB disconnect, device number 64
[ 2751.071567][T29917] usb 6-1: new high-speed USB device number 36 using dummy_hcd
[ 2751.241560][T29917] usb 6-1: Using ep0 maxpacket: 32
[ 2751.249019][T29917] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2751.260564][T29917] usb 6-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2751.272447][T29917] usb 6-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2751.281901][T29917] usb 6-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2751.290261][T29917] usb 6-1: Product: syz
[ 2751.295048][T29917] usb 6-1: Manufacturer: syz
[ 2751.302042][ T1402] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[ 2751.312876][T29917] hub 6-1:4.0: USB hub found
[ 2751.333854][T31809] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 2751.392365][ T5888] usb 1-1: new high-speed USB device number 65 using dummy_hcd
[ 2751.467024][ T1402] usb 5-1: config 0 has an invalid interface number: 219 but max is 0
[ 2751.481227][ T1402] usb 5-1: config 0 has no interface number 0
[ 2751.489955][ T1402] usb 5-1: New USB device found, idVendor=14aa, idProduct=022b, bcdDevice=56.19
[ 2751.506500][T31809] usb 2-1: not running at top speed; connect to a high speed hub
[ 2751.514769][ T1402] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2751.523874][ T1402] usb 5-1: Product: syz
[ 2751.526994][T29917] hub 6-1:4.0: 2 ports detected
[ 2751.528125][ T1402] usb 5-1: Manufacturer: syz
[ 2751.537897][T31809] usb 2-1: config 1 has an invalid interface number: 54 but max is 0
[ 2751.546727][ T5888] usb 1-1: Using ep0 maxpacket: 32
[ 2751.551981][ T1402] usb 5-1: SerialNumber: syz
[ 2751.557449][T31809] usb 2-1: config 1 has no interface number 0
[ 2751.566460][ T1402] usb 5-1: config 0 descriptor??
[ 2751.572651][T31809] usb 2-1: config 1 interface 54 has no altsetting 0
[ 2751.580362][ T5888] usb 1-1: config 0 has an invalid interface number: 42 but max is 0
[ 2751.592606][ T1402] dvb-usb: found a 'WideView WT-220U PenType Receiver (based on ZL353)' in warm state.
[ 2751.602829][ T5888] usb 1-1: config 0 has no interface number 0
[ 2751.609340][ T1402] dvb-usb: bulk message failed: -22 (2/0)
[ 2751.618116][ T1402] dvb-usb: will use the device's hardware PID filter (table count: 15).
[ 2751.627222][T31809] usb 2-1: New USB device found, idVendor=1114, idProduct=0001, bcdDevice=f4.a7
[ 2751.636631][ T5888] usb 1-1: New USB device found, idVendor=1bcf, idProduct=0b40, bcdDevice=42.27
[ 2751.645886][T31809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2751.654112][ T5888] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2751.662388][T31809] usb 2-1: Product: syz
[ 2751.666890][ T1402] dvbdev: DVB: registering new adapter (WideView WT-220U PenType Receiver (based on ZL353))
[ 2751.677289][ T5888] usb 1-1: Product: syz
[ 2751.681638][T31809] usb 2-1: Manufacturer: syz
[ 2751.686307][T31809] usb 2-1: SerialNumber: syz
[ 2751.691468][ T5888] usb 1-1: Manufacturer: syz
[ 2751.696109][ T5888] usb 1-1: SerialNumber: syz
[ 2751.701554][ T1402] usb 5-1: media controller created
[ 2751.708098][ T1402] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered.
[ 2751.720348][ T5888] usb 1-1: config 0 descriptor??
[ 2751.731958][ T1402] usb 5-1: DVB: registering adapter 2 frontend 0 (WideView USB DVB-T)...
[ 2751.740904][ T1402] dvbdev: dvb_create_media_entity: media entity 'WideView USB DVB-T' registered.
[ 2751.817361][ T4972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2751.826212][ T1402] rc_core: IR keymap rc-dtt200u not found
[ 2751.832526][ T4972] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2751.841762][ T1402] Registered IR keymap rc-empty
[ 2751.852081][ T1402] rc rc0: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0
[ 2751.866706][ T1402] input: WideView WT-220U PenType Receiver (based on ZL353) as /devices/platform/dummy_hcd.4/usb5/5-1/rc/rc0/input161
[ 2751.889192][ T1402] dvb-usb: schedule remote query interval to 300 msecs.
[ 2751.898992][ T1402] dvb-usb: WideView WT-220U PenType Receiver (based on ZL353) successfully initialized and connected.
[ 2751.913508][ T1402] usb 5-1: USB disconnect, device number 79
[ 2751.936727][T31809] usb 2-1: USB disconnect, device number 50
[ 2751.948850][ T5888] usb 1-1: Found UVC 0.00 device syz (1bcf:0b40)
[ 2751.979253][ T5888] usb 1-1: Forcing UVC version to 1.0a
[ 2751.989340][ T5888] usb 1-1: No valid video chain found.
[ 2751.999106][ T1402] dvb-usb: WideView WT-220U PenType Receiver (base successfully deinitialized and disconnected.
[ 2752.027086][ T5888] usb 1-1: USB disconnect, device number 65
[ 2752.117588][ T4981] fuse: Unknown parameter 'use00000000000000000000'
[ 2752.259525][T29917] hub 6-1:4.0: hub_hub_status failed (err = -71)
[ 2752.269451][T29917] hub 6-1:4.0: config failed, can't get hub status (err -71)
[ 2752.342313][T29917] usb 6-1: USB disconnect, device number 36
[ 2752.368221][ T4986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.8458'.
[ 2753.328908][ T5020] netlink: 228 bytes leftover after parsing attributes in process `syz.2.8471'.
[ 2753.559666][ T5024] program syz.2.8472 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 2753.607463][T27855] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 2753.631259][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8472'.
[ 2753.657916][ T5024] netlink: 8 bytes leftover after parsing attributes in process `syz.2.8472'.
[ 2753.771743][T27855] usb 2-1: Using ep0 maxpacket: 32
[ 2753.787909][T27855] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2753.821078][T27855] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2753.884923][T27855] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[ 2753.925633][T27855] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[ 2753.956688][T27855] usb 2-1: Product: syz
[ 2753.961001][T27855] usb 2-1: Manufacturer: syz
[ 2754.009678][T27855] hub 2-1:4.0: USB hub found
[ 2754.066850][ T5039] FAULT_INJECTION: forcing a failure.
[ 2754.066850][ T5039] name failslab, interval 1, probability 0, space 0, times 0
[ 2754.211681][ T5039] CPU: 0 UID: 0 PID: 5039 Comm: syz.2.8477 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2754.211711][ T5039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2754.211721][ T5039] Call Trace:
[ 2754.211727][ T5039]  <TASK>
[ 2754.211734][ T5039]  dump_stack_lvl+0x241/0x360
[ 2754.211773][ T5039]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2754.211804][ T5039]  ? __pfx__printk+0x10/0x10
[ 2754.211834][ T5039]  ? __pfx___might_resched+0x10/0x10
[ 2754.211867][ T5039]  should_fail_ex+0x424/0x570
[ 2754.211891][ T5039]  should_failslab+0xac/0x100
[ 2754.211924][ T5039]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[ 2754.211947][ T5039]  ? __alloc_skb+0x1c2/0x480
[ 2754.211973][ T5039]  __alloc_skb+0x1c2/0x480
[ 2754.211999][ T5039]  ? __pfx___alloc_skb+0x10/0x10
[ 2754.212022][ T5039]  ? netlink_autobind+0xd6/0x2f0
[ 2754.212037][ T5039]  ? netlink_autobind+0x2b0/0x2f0
[ 2754.212055][ T5039]  netlink_sendmsg+0x638/0xcd0
[ 2754.212089][ T5039]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2754.212112][ T5039]  ? tomoyo_socket_sendmsg_permission+0x130/0x420
[ 2754.212139][ T5039]  ? __sock_sendmsg+0x54/0x270
[ 2754.212162][ T5039]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2754.212176][ T5039]  __sock_sendmsg+0x221/0x270
[ 2754.212191][ T5039]  ____sys_sendmsg+0x523/0x860
[ 2754.212218][ T5039]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2754.212246][ T5039]  ? __fget_files+0x2a/0x420
[ 2754.212269][ T5039]  ? __fget_files+0x2a/0x420
[ 2754.212294][ T5039]  __sys_sendmsg+0x271/0x360
[ 2754.212323][ T5039]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2754.212368][ T5039]  ? do_syscall_64+0xb6/0x230
[ 2754.212403][ T5039]  do_syscall_64+0xf3/0x230
[ 2754.212432][ T5039]  ? clear_bhb_loop+0x45/0xa0
[ 2754.212457][ T5039]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2754.212478][ T5039] RIP: 0033:0x7f1f5ff8d169
[ 2754.212497][ T5039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2754.212516][ T5039] RSP: 002b:00007f1f60e23038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2754.212539][ T5039] RAX: ffffffffffffffda RBX: 00007f1f601a6160 RCX: 00007f1f5ff8d169
[ 2754.212555][ T5039] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000003
[ 2754.212569][ T5039] RBP: 00007f1f60e23090 R08: 0000000000000000 R09: 0000000000000000
[ 2754.212582][ T5039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2754.212595][ T5039] R13: 0000000000000000 R14: 00007f1f601a6160 R15: 00007f1f602cfa28
[ 2754.212621][ T5039]  </TASK>
[ 2754.463395][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2754.742893][ T5045] FAULT_INJECTION: forcing a failure.
[ 2754.742893][ T5045] name failslab, interval 1, probability 0, space 0, times 0
[ 2754.756208][ T5045] CPU: 0 UID: 0 PID: 5045 Comm: syz.5.8481 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2754.756239][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2754.756249][ T5045] Call Trace:
[ 2754.756255][ T5045]  <TASK>
[ 2754.756261][ T5045]  dump_stack_lvl+0x241/0x360
[ 2754.756300][ T5045]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2754.756331][ T5045]  ? __pfx__printk+0x10/0x10
[ 2754.756357][ T5045]  ? nfnetlink_rcv_msg+0xdfe/0x1190
[ 2754.756385][ T5045]  ? __pfx___might_resched+0x10/0x10
[ 2754.756405][ T5045]  should_fail_ex+0x424/0x570
[ 2754.756429][ T5045]  should_failslab+0xac/0x100
[ 2754.756466][ T5045]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[ 2754.756487][ T5045]  ? __alloc_skb+0x1c2/0x480
[ 2754.756509][ T5045]  ? stack_trace_save+0x11a/0x1d0
[ 2754.756538][ T5045]  __alloc_skb+0x1c2/0x480
[ 2754.756560][ T5045]  ? __pfx___alloc_skb+0x10/0x10
[ 2754.756580][ T5045]  ? netlink_ack_tlv_len+0x6e/0x200
[ 2754.756605][ T5045]  netlink_ack+0x147/0xa70
[ 2754.756623][ T5045]  ? netlink_sendmsg+0x8c3/0xcd0
[ 2754.756642][ T5045]  ? __sock_sendmsg+0x221/0x270
[ 2754.756659][ T5045]  ? __sys_sendmsg+0x271/0x360
[ 2754.756692][ T5045]  netlink_rcv_skb+0x296/0x480
[ 2754.756707][ T5045]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 2754.756727][ T5045]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 2754.756754][ T5045]  ? apparmor_capable+0x13b/0x1b0
[ 2754.756787][ T5045]  ? bpf_lsm_capable+0x9/0x10
[ 2754.756814][ T5045]  ? security_capable+0x7e/0x2d0
[ 2754.756841][ T5045]  nfnetlink_rcv+0x296/0x28f0
[ 2754.756861][ T5045]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2754.756881][ T5045]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 2754.756905][ T5045]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2754.756934][ T5045]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2754.756963][ T5045]  ? __dev_queue_xmit+0x1780/0x3f60
[ 2754.756990][ T5045]  ? kasan_save_track+0x3f/0x80
[ 2754.757009][ T5045]  ? __kasan_slab_alloc+0x66/0x80
[ 2754.757032][ T5045]  ? do_syscall_64+0xf3/0x230
[ 2754.757062][ T5045]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 2754.757088][ T5045]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 2754.757118][ T5045]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 2754.757156][ T5045]  ? ref_tracker_free+0x63e/0x7e0
[ 2754.757187][ T5045]  ? __asan_memcpy+0x40/0x70
[ 2754.757215][ T5045]  ? __pfx_ref_tracker_free+0x10/0x10
[ 2754.757245][ T5045]  ? __skb_clone+0x5c/0x6d0
[ 2754.757282][ T5045]  ? skb_clone+0x240/0x390
[ 2754.757315][ T5045]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2754.757331][ T5045]  ? netlink_deliver_tap+0x2e/0x1b0
[ 2754.757347][ T5045]  netlink_unicast+0x7f8/0x9a0
[ 2754.757382][ T5045]  ? __pfx_netlink_unicast+0x10/0x10
[ 2754.757414][ T5045]  ? skb_put+0x114/0x1f0
[ 2754.757459][ T5045]  netlink_sendmsg+0x8c3/0xcd0
[ 2754.757480][ T5045]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2754.757497][ T5045]  ? aa_sock_msg_perm+0x91/0x160
[ 2754.757521][ T5045]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 2754.757542][ T5045]  __sock_sendmsg+0x221/0x270
[ 2754.757564][ T5045]  ____sys_sendmsg+0x523/0x860
[ 2754.757595][ T5045]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 2754.757621][ T5045]  ? __fget_files+0x2a/0x420
[ 2754.757638][ T5045]  ? __fget_files+0x2a/0x420
[ 2754.757656][ T5045]  __sys_sendmsg+0x271/0x360
[ 2754.757682][ T5045]  ? __pfx___sys_sendmsg+0x10/0x10
[ 2754.757745][ T5045]  ? do_syscall_64+0xb6/0x230
[ 2754.757776][ T5045]  do_syscall_64+0xf3/0x230
[ 2754.757804][ T5045]  ? clear_bhb_loop+0x45/0xa0
[ 2754.757821][ T5045]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2754.757842][ T5045] RIP: 0033:0x7f638cf8d169
[ 2754.757861][ T5045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2754.757880][ T5045] RSP: 002b:00007f638dd62038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 2754.757902][ T5045] RAX: ffffffffffffffda RBX: 00007f638d1a5fa0 RCX: 00007f638cf8d169
[ 2754.757917][ T5045] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000003
[ 2754.757932][ T5045] RBP: 00007f638dd62090 R08: 0000000000000000 R09: 0000000000000000
[ 2754.757941][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2754.757950][ T5045] R13: 0000000000000000 R14: 00007f638d1a5fa0 R15: 00007f638d2cfa28
[ 2754.757969][ T5045]  </TASK>
[ 2755.161034][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2755.305721][T27855] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[ 2755.606583][T27855] usb 2-1: USB disconnect, device number 51
[ 2755.643255][ T5057] netlink: 68 bytes leftover after parsing attributes in process `syz.5.8487'.
[ 2755.979762][ T5076] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2756.031492][   T48] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[ 2756.131306][ T5076] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2756.178554][ T5076] bond42: entered promiscuous mode
[ 2756.198821][ T5076] bond42: entered allmulticast mode
[ 2756.211834][ T5076] 8021q: adding VLAN 0 to HW filter on device bond42
[ 2756.242069][   T48] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[ 2756.255491][   T48] usb 5-1: config 0 has no interface number 0
[ 2756.270762][   T48] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2756.282725][   T48] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2756.307661][   T48] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2756.330504][   T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2756.454497][   T48] usb 5-1: Product: syz
[ 2756.458996][   T48] usb 5-1: Manufacturer: syz
[ 2756.468963][   T48] usb 5-1: SerialNumber: syz
[ 2756.529083][   T48] usb 5-1: config 0 descriptor??
[ 2756.536902][ T5065] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22
[ 2756.549633][   T48] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2756.552447][T31809] usb 1-1: new high-speed USB device number 66 using dummy_hcd
[ 2756.607803][   T48] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2756.793492][T31809] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[ 2756.794287][ T5085] iommufd_mock iommufd_mock0: Adding to iommu group 0
[ 2756.825480][T31809] usb 1-1: config 0 interface 0 has no altsetting 0
[ 2756.893252][T31809] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[ 2756.906856][ T5085] iommufd_mock iommufd_mock1: Adding to iommu group 1
[ 2756.938855][T31809] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[ 2756.971334][T31809] usb 1-1: Product: syz
[ 2756.977101][T31809] usb 1-1: Manufacturer: syz
[ 2757.001488][T31809] usb 1-1: SerialNumber: syz
[ 2757.013713][T31809] usb 1-1: config 0 descriptor??
[ 2757.049439][T31809] usb 1-1: selecting invalid altsetting 0
[ 2757.108808][ T5065] fuse: Unknown parameter 'rootmo'
[ 2757.256340][T31809] usb 1-1: USB disconnect, device number 66
[ 2757.771551][T31809] usb 1-1: new high-speed USB device number 67 using dummy_hcd
[ 2757.921736][T31809] usb 1-1: Using ep0 maxpacket: 32
[ 2757.933363][T31809] usb 1-1: config 1 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2757.977181][T31809] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x82 has invalid maxpacket 64
[ 2758.022898][T31809] usb 1-1: config 1 interface 0 altsetting 3 bulk endpoint 0x3 has invalid maxpacket 1024
[ 2758.071779][T31809] usb 1-1: config 1 interface 0 has no altsetting 0
[ 2758.088834][T31809] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2758.098731][T31809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2758.123067][T31809] usb 1-1: Product: 䨂誅镵깶쟸贛ᧆⰗ㐂ᡰ➲ອ㒎㾆ﻭ埞䟎钌벰㿍뿬곺䯅樊ნ⡴꣢त蠝蠿諎ꑙ搉㟋ᣕ䭶鏝羂溬਩傮潌첹媼⛉ଃꎊࡋ鉎⌋뾗ۚꌈꀓƉ煐㜾⡭뿑뿄ᐴ꒲Ғ쳊岕脔䦋٣飒蕧ኼ⏡∮䌜䍆휕箍໘
[ 2758.220386][T31809] usb 1-1: Manufacturer: 嗀ﳉ畱ꄓ衑邑Ȇ樔밟뼾䲧ⴛᜩ妗섷⃍刉宄⫦朰훂䡓垷沀뙘噡䮊忱熰襖턓欤靽훘໋Ấ獁彷ڌ㠰딇删矡䓋礚뛰☋瘼㼯ﭮ·⤝ꄌ骗醤螱憩⮄嶝ﰝ죱ꥹ商闸쿰짹숪堜묇謹ﱬ鮙ꆝ䱓㥺
[ 2758.297868][T31809] usb 1-1: SerialNumber: 苧鍦ￆ믉駹彎疜覓◾ṹ믟ኋᩋ䗋ᨍ傌Ր툡﷝⯙斲袜㯆␇຤ﰾ녏睗䬖⓻仲ए彆왱摛䢟딗瞎譎ᆝ⸎鶿쥛➌
[ 2758.331065][ T5082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2758.331184][ T5082] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22
[ 2758.370774][   T48] usb 5-1: USB disconnect, device number 80
[ 2758.373861][   T48] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2758.374245][   T48] cyberjack 5-1:0.69: device disconnected
[ 2758.737212][T31809] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -71
[ 2758.757240][T31809] usb 1-1: USB disconnect, device number 67
[ 2758.921530][   T48] usb 3-1: new high-speed USB device number 54 using dummy_hcd
[ 2758.990577][ T5113] input: syz0 as /devices/virtual/input/input162
[ 2759.105033][   T48] usb 3-1: config 0 has no interfaces?
[ 2759.118744][   T48] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 2759.130298][   T48] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2759.138479][   T48] usb 3-1: Product: syz
[ 2759.142999][   T48] usb 3-1: Manufacturer: syz
[ 2759.148300][   T48] usb 3-1: SerialNumber: syz
[ 2759.156240][   T48] usb 3-1: config 0 descriptor??
[ 2759.261668][T31809] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[ 2759.427248][T31809] usb 5-1: config 0 has an invalid interface number: 117 but max is 0
[ 2759.451286][ T5111] ALSA: seq fatal error: cannot create timer (-19)
[ 2759.461699][T31809] usb 5-1: config 0 has an invalid descriptor of length 245, skipping remainder of the config
[ 2759.487302][T31809] usb 5-1: config 0 has no interface number 0
[ 2759.499552][T31809] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has an invalid bInterval 145, changing to 11
[ 2759.524791][T31809] usb 5-1: config 0 interface 117 altsetting 0 endpoint 0x88 has invalid maxpacket 16516, setting to 1024
[ 2759.550641][T31809] usb 5-1: config 0 interface 117 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 2759.583795][T31809] usb 5-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0
[ 2759.596878][T31809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2759.616966][T31809] usb 5-1: Product: syz
[ 2759.626511][T31809] usb 5-1: Manufacturer: syz
[ 2759.637212][T31809] usb 5-1: SerialNumber: syz
[ 2759.650869][T31809] usb 5-1: config 0 descriptor??
[ 2759.984412][ T5137] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2760.055052][ T5133] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2760.091802][   T48] usb 6-1: new high-speed USB device number 37 using dummy_hcd
[ 2760.187778][ T5133] bond45: entered promiscuous mode
[ 2760.193310][ T5133] bond45: entered allmulticast mode
[ 2760.199031][ T5133] 8021q: adding VLAN 0 to HW filter on device bond45
[ 2760.242553][   T48] usb 6-1: Using ep0 maxpacket: 16
[ 2760.249467][   T48] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2760.271845][   T48] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2760.305930][   T48] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2760.372098][   T48] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2760.427404][   T48] usb 6-1: Product: syz
[ 2760.432236][   T48] usb 6-1: Manufacturer: syz
[ 2760.436869][   T48] usb 6-1: SerialNumber: syz
[ 2760.658580][   T48] usb 6-1: 0:2 : does not exist
[ 2760.684984][   T48] usb 6-1: 5:0: failed to get current value for ch 0 (-22)
[ 2760.685167][ T5888] usb 5-1: USB disconnect, device number 81
[ 2760.721578][T31809] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[ 2760.796901][   T48] usb 6-1: USB disconnect, device number 37
[ 2760.883304][T31809] usb 2-1: config 0 has an invalid interface number: 24 but max is 0
[ 2760.896795][T31809] usb 2-1: config 0 has no interface number 0
[ 2760.911632][T31809] usb 2-1: too many endpoints for config 0 interface 24 altsetting 84: 236, using maximum allowed: 30
[ 2760.949317][T31809] usb 2-1: config 0 interface 24 altsetting 84 has 0 endpoint descriptors, different from the interface descriptor's value: 236
[ 2760.974821][T31809] usb 2-1: config 0 interface 24 has no altsetting 0
[ 2760.987516][T31809] usb 2-1: New USB device found, idVendor=046d, idProduct=08b4, bcdDevice= e.32
[ 2761.003874][T31809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2761.012740][T31809] usb 2-1: Product: syz
[ 2761.017098][T31809] usb 2-1: Manufacturer: syz
[ 2761.022279][T31809] usb 2-1: SerialNumber: syz
[ 2761.027353][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2761.047998][T31809] usb 2-1: config 0 descriptor??
[ 2761.250869][   T30] kauditd_printk_skb: 7 callbacks suppressed
[ 2761.250889][   T30] audit: type=1326 audit(1743325485.473:5563): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.299699][T31809] usb 2-1: USB disconnect, device number 52
[ 2761.322372][   T30] audit: type=1326 audit(1743325485.473:5564): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.346732][   T30] audit: type=1326 audit(1743325485.523:5565): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.377946][   T30] audit: type=1326 audit(1743325485.523:5566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.404709][   T30] audit: type=1326 audit(1743325485.523:5567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.428525][   T30] audit: type=1326 audit(1743325485.523:5568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=323 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.453934][   T30] audit: type=1326 audit(1743325485.523:5569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.478841][   T30] audit: type=1326 audit(1743325485.523:5570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.510016][   T30] audit: type=1326 audit(1743325485.523:5571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.533822][   T30] audit: type=1326 audit(1743325485.543:5572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5153 comm="syz.0.8513" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7efdf1b8d169 code=0x7ffc0000
[ 2761.591590][ T5888] usb 6-1: new high-speed USB device number 38 using dummy_hcd
[ 2761.626246][ T1402] usb 3-1: USB disconnect, device number 54
[ 2761.741490][ T5888] usb 6-1: Using ep0 maxpacket: 8
[ 2761.753178][ T5888] usb 6-1: config 0 has an invalid interface number: 1 but max is 0
[ 2761.770567][ T5888] usb 6-1: config 0 has no interface number 0
[ 2761.779827][ T5888] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=70.2f
[ 2761.797054][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2761.808113][ T5888] usb 6-1: Product: syz
[ 2761.817321][ T5888] usb 6-1: Manufacturer: syz
[ 2761.823805][ T5888] usb 6-1: SerialNumber: syz
[ 2762.025516][ T5168] netlink: 3 bytes leftover after parsing attributes in process `syz.4.8516'.
[ 2762.097235][ T5888] usb 6-1: config 0 descriptor??
[ 2762.108723][ T5168] batadv1: entered promiscuous mode
[ 2762.119314][ T5888] usb 6-1: selecting invalid altsetting 2
[ 2762.126002][ T5888] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22
[ 2762.301627][ T5168] batadv1: entered allmulticast mode
[ 2762.564257][T27855] usb 1-1: new high-speed USB device number 68 using dummy_hcd
[ 2762.701765][   T48] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 2762.831507][T27855] usb 1-1: Using ep0 maxpacket: 8
[ 2762.838036][T27855] usb 1-1: config 179 has an invalid interface number: 65 but max is 0
[ 2762.847423][T27855] usb 1-1: config 179 has no interface number 0
[ 2762.857613][T27855] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[ 2762.870601][T27855] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[ 2762.889321][   T48] usb 2-1: config 0 interface 0 has no altsetting 0
[ 2762.900971][   T48] usb 2-1: New USB device found, idVendor=046d, idProduct=0a0e, bcdDevice=94.75
[ 2762.916631][T27855] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9
[ 2762.928230][T29917] usb 5-1: new high-speed USB device number 82 using dummy_hcd
[ 2762.940586][   T48] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2762.951884][T27855] usb 1-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024
[ 2762.974937][   T48] usb 2-1: config 0 descriptor??
[ 2763.003252][ T1402] usb 6-1: USB disconnect, device number 38
[ 2763.024732][T27855] usb 1-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[ 2763.055965][T27855] usb 1-1: config 179 interface 65 has no altsetting 0
[ 2763.071602][T27855] usb 1-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[ 2763.090984][T27855] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2763.114396][T29917] usb 5-1: config 0 has an invalid interface number: 69 but max is 0
[ 2763.146219][T29917] usb 5-1: config 0 has no interface number 0
[ 2763.155269][T27855] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:179.65/input/input164
[ 2763.168179][T29917] usb 5-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2763.181975][T29917] usb 5-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2763.196349][T29917] usb 5-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2763.213920][T29917] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2763.223981][ T5196] input input164: unable to receive magic message: -110
[ 2763.240580][   T48]  (null): keene_cmd_main failed (-71)
[ 2763.249525][T29917] usb 5-1: Product: syz
[ 2763.276578][T29917] usb 5-1: Manufacturer: syz
[ 2763.281308][T29917] usb 5-1: SerialNumber: syz
[ 2763.292193][ T5196] input input164: unable to receive magic message: -32
[ 2763.302410][   T48] video4linux radio48: keene_cmd_main failed (-71)
[ 2763.308982][   T48] radio-keene 2-1:0.0: V4L2 device registered as radio48
[ 2763.346853][T29917] usb 5-1: config 0 descriptor??
[ 2763.363778][ T5180] raw-gadget.3 gadget.4: fail, usb_ep_enable returned -22
[ 2763.386970][T29917] cyberjack 5-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2763.396082][   T48] usb 2-1: USB disconnect, device number 53
[ 2763.419507][T24365] input input164: unable to receive magic message: -32
[ 2763.446099][T29917] usb 5-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2763.555766][ T5197] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2763.570499][ T5196] input input164: unable to receive magic message: -32
[ 2763.593320][ T5197] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2763.643313][ T5196] input input164: unable to receive magic message: -32
[ 2763.718896][ T5203] netlink: 12 bytes leftover after parsing attributes in process `syz.2.8525'.
[ 2763.732326][ T5888] usb 1-1: USB disconnect, device number 68
[ 2763.732409][    C1] xpad 1-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19
[ 2763.776419][ T5888] xpad 1-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[ 2763.827664][ T5180] fuse: Unknown parameter 'rootmo'
[ 2764.170790][ T5209] x_tables: duplicate underflow at hook 2
[ 2764.301715][T31809] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 2764.462368][T31809] usb 2-1: Using ep0 maxpacket: 16
[ 2764.492634][T31809] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 2764.517601][T31809] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 2764.531815][ T5888] usb 6-1: new full-speed USB device number 39 using dummy_hcd
[ 2764.548338][T31809] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 2764.560269][T31809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2764.569178][T31809] usb 2-1: Product: syz
[ 2764.576907][T31809] usb 2-1: Manufacturer: syz
[ 2764.587622][T31809] usb 2-1: SerialNumber: syz
[ 2764.601831][T29917] usb 5-1: USB disconnect, device number 82
[ 2764.621748][T29917] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2764.644933][T29917] cyberjack 5-1:0.69: device disconnected
[ 2764.736168][ T5888] usb 6-1: config 4 has an invalid interface number: 231 but max is 0
[ 2764.744717][ T5888] usb 6-1: config 4 has no interface number 0
[ 2764.757121][ T5888] usb 6-1: New USB device found, idVendor=13d3, idProduct=3224, bcdDevice=cb.0d
[ 2764.768740][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2764.777479][ T5231] netlink: 28 bytes leftover after parsing attributes in process `syz.2.8537'.
[ 2764.791020][ T5888] usb 6-1: Product: syz
[ 2764.796678][ T5888] usb 6-1: Manufacturer: syz
[ 2764.813856][ T5888] usb 6-1: SerialNumber: syz
[ 2764.819380][T31809] usb 2-1: 0:2 : does not exist
[ 2764.884726][T31809] usb 2-1: 5:0: failed to get current value for ch 0 (-22)
[ 2764.899735][ T5888] dvb-usb: found a 'DigitalNow TinyUSB 2 DVB-t Receiver' in warm state.
[ 2764.969701][T31809] usb 2-1: USB disconnect, device number 54
[ 2765.111292][ T5216] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 2765.126966][ T5216] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 2765.286418][ T1644] udevd[1644]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[ 2765.455619][ T5888] vp7045: USB control message 'in' went wrong.
[ 2765.462290][ T5888] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter)
[ 2765.478109][ T5888] dvb-usb: DigitalNow TinyUSB 2 DVB-t Receiver error while loading driver (-19)
[ 2765.551743][ T1402] usb 3-1: new high-speed USB device number 55 using dummy_hcd
[ 2765.611760][ T5888] usb 6-1: USB disconnect, device number 39
[ 2765.711546][ T1402] usb 3-1: Using ep0 maxpacket: 8
[ 2765.719969][ T1402] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2765.731818][ T1402] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 8
[ 2765.742471][ T1402] usb 3-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024
[ 2765.758719][ T1402] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 2765.768600][ T1402] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2765.782149][ T1402] usb 3-1: Product: ခ
[ 2765.787491][ T1402] usb 3-1: Manufacturer: 쌑敱㽡ꀣ귎ໂ䲇뀁㌽뿫㵭犍躧䦜ᔇ邸鷎﵌悟
[ 2765.803008][T31809] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 2765.882709][ T1402] usb 3-1: SerialNumber: ఊ
[ 2765.947345][ T5244] FAULT_INJECTION: forcing a failure.
[ 2765.947345][ T5244] name failslab, interval 1, probability 0, space 0, times 0
[ 2765.961806][ T5244] CPU: 0 UID: 0 PID: 5244 Comm: syz.0.8541 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2765.961843][ T5244] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2765.961853][ T5244] Call Trace:
[ 2765.961860][ T5244]  <TASK>
[ 2765.961866][ T5244]  dump_stack_lvl+0x241/0x360
[ 2765.961899][ T5244]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2765.961921][ T5244]  ? __pfx__printk+0x10/0x10
[ 2765.961943][ T5244]  ? __pfx___might_resched+0x10/0x10
[ 2765.961964][ T5244]  should_fail_ex+0x424/0x570
[ 2765.961988][ T5244]  should_failslab+0xac/0x100
[ 2765.962011][ T5244]  kmem_cache_alloc_noprof+0x78/0x390
[ 2765.962035][ T5244]  ? vm_area_dup+0x61/0x290
[ 2765.962059][ T5244]  vm_area_dup+0x61/0x290
[ 2765.962082][ T5244]  __split_vma+0x1c2/0xc00
[ 2765.962101][ T5244]  ? __pfx___split_vma+0x10/0x10
[ 2765.962117][ T5244]  ? mas_find+0x950/0xbb0
[ 2765.962140][ T5244]  vms_gather_munmap_vmas+0x4bb/0x15f0
[ 2765.962162][ T5244]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[ 2765.962190][ T5244]  ? __pfx_vms_gather_munmap_vmas+0x10/0x10
[ 2765.962213][ T5244]  ? __pfx_try_to_wake_up+0x10/0x10
[ 2765.962233][ T5244]  ? io_worker_get+0x1fa/0x2e0
[ 2765.962257][ T5244]  ? __pfx_io_worker_get+0x10/0x10
[ 2765.962283][ T5244]  do_vmi_align_munmap+0x401/0x6f0
[ 2765.962308][ T5244]  ? __pfx_do_vmi_align_munmap+0x10/0x10
[ 2765.962346][ T5244]  ? mas_find+0x8c0/0xbb0
[ 2765.962364][ T5244]  ? mtree_load+0x23c/0x9c0
[ 2765.962384][ T5244]  do_vmi_munmap+0x24e/0x2d0
[ 2765.962408][ T5244]  do_munmap+0x18c/0x240
[ 2765.962427][ T5244]  ? __pfx_do_munmap+0x10/0x10
[ 2765.962446][ T5244]  ? __pfx_down_write_killable+0x10/0x10
[ 2765.962471][ T5244]  ? vfs_write+0xb29/0xd10
[ 2765.962491][ T5244]  __se_sys_mremap+0x10c6/0x1b20
[ 2765.962520][ T5244]  ? __pfx___se_sys_mremap+0x10/0x10
[ 2765.962547][ T5244]  ? __fget_files+0x2a/0x420
[ 2765.962566][ T5244]  ? fput+0x9b/0xd0
[ 2765.962582][ T5244]  ? ksys_write+0x275/0x2d0
[ 2765.962605][ T5244]  ? __x64_sys_mremap+0x20/0xc0
[ 2765.962628][ T5244]  do_syscall_64+0xf3/0x230
[ 2765.962649][ T5244]  ? clear_bhb_loop+0x45/0xa0
[ 2765.962666][ T5244]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2765.962680][ T5244] RIP: 0033:0x7efdf1b8d169
[ 2765.962695][ T5244] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2765.962708][ T5244] RSP: 002b:00007efdf29c6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019
[ 2765.962725][ T5244] RAX: ffffffffffffffda RBX: 00007efdf1da5fa0 RCX: 00007efdf1b8d169
[ 2765.962736][ T5244] RDX: 0000000000003000 RSI: 0000000000004000 RDI: 0000200000005000
[ 2765.962746][ T5244] RBP: 00007efdf29c6090 R08: 0000200000000000 R09: 0000000000000000
[ 2765.962756][ T5244] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001
[ 2765.962765][ T5244] R13: 0000000000000000 R14: 00007efdf1da5fa0 R15: 00007efdf1ecfa28
[ 2765.962789][ T5244]  </TASK>
[ 2766.251098][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2766.267616][T31809] usb 2-1: device descriptor read/64, error -71
[ 2766.468679][ T1402] cdc_ncm 3-1:1.0: CDC Union missing and no IAD found
[ 2766.487995][ T1402] cdc_ncm 3-1:1.0: bind() failure
[ 2766.500897][ T1402] cdc_ncm 3-1:1.1: CDC Union missing and no IAD found
[ 2766.511704][T31809] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 2766.554643][ T1402] cdc_ncm 3-1:1.1: bind() failure
[ 2766.564565][ T1402] usb 3-1: USB disconnect, device number 55
[ 2766.651594][T31809] usb 2-1: device descriptor read/64, error -71
[ 2766.772006][T31809] usb usb2-port1: attempt power cycle
[ 2766.793854][T29917] usb 1-1: new high-speed USB device number 69 using dummy_hcd
[ 2766.966055][T29917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 2766.979342][T29917] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 2767.019437][T29917] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[ 2767.047057][T29917] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[ 2767.075960][T29917] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 2767.111657][T31809] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 2767.127198][T29917] usb 1-1: config 0 descriptor??
[ 2767.137535][T31809] usb 2-1: device descriptor read/8, error -71
[ 2767.162085][ T5269] fuse: Unknown parameter 'group_id00000000000000000000'
[ 2767.184976][ T5269] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2767.246176][ T5269] bond6: entered promiscuous mode
[ 2767.251316][ T5269] bond6: entered allmulticast mode
[ 2767.259915][ T5269] 8021q: adding VLAN 0 to HW filter on device bond6
[ 2767.411550][T31809] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 2767.432054][T31809] usb 2-1: device descriptor read/8, error -71
[ 2767.541507][T31894] usb 3-1: new high-speed USB device number 56 using dummy_hcd
[ 2767.544026][T29917] plantronics 0003:047F:FFFF.004F: reserved main item tag 0xd
[ 2767.549966][T31809] usb usb2-port1: unable to enumerate USB device
[ 2767.577962][T29917] plantronics 0003:047F:FFFF.004F: No inputs registered, leaving
[ 2767.595921][T29917] plantronics 0003:047F:FFFF.004F: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0
[ 2767.749505][T31894] usb 3-1: config 0 has an invalid interface number: 69 but max is 0
[ 2767.761061][T31894] usb 3-1: config 0 has no interface number 0
[ 2767.775821][T31894] usb 3-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023
[ 2767.789501][T31894] usb 3-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 2767.810596][T31894] usb 3-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca
[ 2767.824119][T29917] usb 1-1: USB disconnect, device number 69
[ 2767.830738][T31894] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 2767.852972][T31894] usb 3-1: Product: syz
[ 2767.857420][T31894] usb 3-1: Manufacturer: syz
[ 2767.867886][T31894] usb 3-1: SerialNumber: syz
[ 2767.875675][T31894] usb 3-1: config 0 descriptor??
[ 2767.883571][ T5274] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22
[ 2767.898384][T31894] cyberjack 3-1:0.69: Reiner SCT Cyberjack USB card reader converter detected
[ 2767.930197][T31894] usb 3-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0
[ 2768.266524][ T5276] syz_tun: entered allmulticast mode
[ 2768.324997][ T5274] fuse: Unknown parameter 'rootmo'
[ 2769.001696][ T5306] fuse: Bad value for 'user_id'
[ 2769.006721][ T5306] fuse: Bad value for 'user_id'
[ 2769.061957][T31894] usb 3-1: USB disconnect, device number 56
[ 2769.075091][T31894] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0
[ 2769.087412][ T5306] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms
[ 2769.141943][T31894] cyberjack 3-1:0.69: device disconnected
[ 2769.247863][ T5306] bond7: entered promiscuous mode
[ 2769.253919][ T5306] bond7: entered allmulticast mode
[ 2769.259630][ T5306] 8021q: adding VLAN 0 to HW filter on device bond7
[ 2769.525049][ T5314] random: crng reseeded on system resumption
[ 2770.272166][ T5325] FAULT_INJECTION: forcing a failure.
[ 2770.272166][ T5325] name failslab, interval 1, probability 0, space 0, times 0
[ 2770.422231][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.2.8563 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2770.422260][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2770.422274][ T5325] Call Trace:
[ 2770.422282][ T5325]  <TASK>
[ 2770.422291][ T5325]  dump_stack_lvl+0x241/0x360
[ 2770.422329][ T5325]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2770.422360][ T5325]  ? __pfx__printk+0x10/0x10
[ 2770.422390][ T5325]  ? __pfx___might_resched+0x10/0x10
[ 2770.422419][ T5325]  should_fail_ex+0x424/0x570
[ 2770.422452][ T5325]  should_failslab+0xac/0x100
[ 2770.422486][ T5325]  __kmalloc_cache_noprof+0x73/0x370
[ 2770.422506][ T5325]  ? landlock_init_hierarchy_log+0xa0/0x640
[ 2770.422534][ T5325]  landlock_init_hierarchy_log+0xa0/0x640
[ 2770.422556][ T5325]  ? __kmalloc_cache_noprof+0x236/0x370
[ 2770.422581][ T5325]  landlock_merge_ruleset+0x66e/0x900
[ 2770.422612][ T5325]  ? prepare_creds+0x47b/0x640
[ 2770.422645][ T5325]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2770.422682][ T5325]  do_syscall_64+0xf3/0x230
[ 2770.422712][ T5325]  ? clear_bhb_loop+0x45/0xa0
[ 2770.422736][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2770.422756][ T5325] RIP: 0033:0x7f1f5ff8d169
[ 2770.422775][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2770.422793][ T5325] RSP: 002b:00007f1f60e65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 2770.422816][ T5325] RAX: ffffffffffffffda RBX: 00007f1f601a5fa0 RCX: 00007f1f5ff8d169
[ 2770.422832][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2770.422844][ T5325] RBP: 00007f1f60e65090 R08: 0000000000000000 R09: 0000000000000000
[ 2770.422857][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2770.422869][ T5325] R13: 0000000000000000 R14: 00007f1f601a5fa0 R15: 00007f1f602cfa28
[ 2770.422895][ T5325]  </TASK>
[ 2770.429990][ T5325] ------------[ cut here ]------------
[ 2770.567981][    C0] vkms_vblank_simulate: vblank timer overrun
[ 2770.631889][ T5325] WARNING: CPU: 0 PID: 5325 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250
[ 2770.641739][ T5325] Modules linked in:
[ 2770.645662][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.2.8563 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2770.657480][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2770.667619][ T5325] RIP: 0010:free_ruleset+0x1f3/0x250
[ 2770.673018][ T5325] Code: 89 ff e8 a0 6b 6d fd 49 8b 1f 4c 89 ff e8 25 c4 61 fd 48 85 db 74 36 e8 2b 31 05 fd 49 89 df e9 34 ff ff ff e8 1e 31 05 fd 90 <0f> 0b 90 eb c2 e8 13 31 05 fd eb 1c bf 01 00 00 00 89 ee e8 45 35
[ 2770.692833][ T5325] RSP: 0018:ffffc90004b87dd8 EFLAGS: 00010293
[ 2770.699114][ T5325] RAX: ffffffff84be39d2 RBX: 0000000000000000 RCX: ffff8880442abc00
[ 2770.707165][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2770.715454][ T5325] RBP: 1ffff11009adc774 R08: ffffffff84bf456f R09: 1ffff11009adc771
[ 2770.723703][ T5325] R10: dffffc0000000000 R11: ffffed1009adc772 R12: ffff88804d6e3ba0
[ 2770.732501][ T5325] R13: dffffc0000000000 R14: ffff888024e81a00 R15: ffff88804d6e3b80
[ 2770.740505][ T5325] FS:  00007f1f60e656c0(0000) GS:ffff888124fb7000(0000) knlGS:0000000000000000
[ 2770.749892][ T5325] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 2770.756688][ T5325] CR2: 00002000002cd030 CR3: 0000000061486000 CR4: 00000000003526f0
[ 2770.764778][ T5325] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 2770.773029][ T5325] DR3: 000000000000000e DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 2770.781213][ T5325] Call Trace:
[ 2770.784584][ T5325]  <TASK>
[ 2770.787530][ T5325]  ? __warn+0x165/0x4d0
[ 2770.791764][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2770.796472][ T5325]  ? report_bug+0x2b3/0x500
[ 2770.801043][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2770.805851][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2770.810584][ T5325]  ? free_ruleset+0x1f5/0x250
[ 2770.815396][ T5325]  ? handle_bug+0x89/0x170
[ 2770.819937][ T5325]  ? exc_invalid_op+0x1a/0x50
[ 2770.824707][ T5325]  ? asm_exc_invalid_op+0x1a/0x20
[ 2770.829759][ T5325]  ? landlock_log_drop_domain+0x4f/0x1b0
[ 2770.835524][ T5325]  ? free_ruleset+0x1f2/0x250
[ 2770.840234][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2770.845010][ T5325]  ? free_ruleset+0x1f2/0x250
[ 2770.849746][ T5325]  landlock_merge_ruleset+0x6d8/0x900
[ 2770.855264][ T5325]  ? prepare_creds+0x47b/0x640
[ 2770.860059][ T5325]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2770.866361][ T5325]  do_syscall_64+0xf3/0x230
[ 2770.870900][ T5325]  ? clear_bhb_loop+0x45/0xa0
[ 2770.875750][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2770.881714][ T5325] RIP: 0033:0x7f1f5ff8d169
[ 2770.886168][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2770.905903][ T5325] RSP: 002b:00007f1f60e65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 2770.914435][ T5325] RAX: ffffffffffffffda RBX: 00007f1f601a5fa0 RCX: 00007f1f5ff8d169
[ 2770.922503][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2770.930570][ T5325] RBP: 00007f1f60e65090 R08: 0000000000000000 R09: 0000000000000000
[ 2770.938708][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2770.946789][ T5325] R13: 0000000000000000 R14: 00007f1f601a5fa0 R15: 00007f1f602cfa28
[ 2770.954825][ T5325]  </TASK>
[ 2770.957868][ T5325] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 2770.965177][ T5325] CPU: 0 UID: 0 PID: 5325 Comm: syz.2.8563 Not tainted 6.14.0-syzkaller-10514-g7f2ff7b62617 #0 PREEMPT(full) 
[ 2770.976812][ T5325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 2770.986878][ T5325] Call Trace:
[ 2770.990173][ T5325]  <TASK>
[ 2770.993133][ T5325]  dump_stack_lvl+0x241/0x360
[ 2770.997826][ T5325]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 2771.003075][ T5325]  ? __pfx__printk+0x10/0x10
[ 2771.007671][ T5325]  ? _printk+0xd5/0x120
[ 2771.011861][ T5325]  ? vscnprintf+0x5d/0x90
[ 2771.016206][ T5325]  panic+0x349/0x880
[ 2771.020115][ T5325]  ? __warn+0x174/0x4d0
[ 2771.024386][ T5325]  ? __pfx_panic+0x10/0x10
[ 2771.028861][ T5325]  __warn+0x344/0x4d0
[ 2771.032865][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2771.037564][ T5325]  report_bug+0x2b3/0x500
[ 2771.041906][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2771.046604][ T5325]  ? free_ruleset+0x1f3/0x250
[ 2771.051296][ T5325]  ? free_ruleset+0x1f5/0x250
[ 2771.055992][ T5325]  handle_bug+0x89/0x170
[ 2771.060254][ T5325]  exc_invalid_op+0x1a/0x50
[ 2771.064780][ T5325]  asm_exc_invalid_op+0x1a/0x20
[ 2771.069644][ T5325] RIP: 0010:free_ruleset+0x1f3/0x250
[ 2771.074943][ T5325] Code: 89 ff e8 a0 6b 6d fd 49 8b 1f 4c 89 ff e8 25 c4 61 fd 48 85 db 74 36 e8 2b 31 05 fd 49 89 df e9 34 ff ff ff e8 1e 31 05 fd 90 <0f> 0b 90 eb c2 e8 13 31 05 fd eb 1c bf 01 00 00 00 89 ee e8 45 35
[ 2771.094574][ T5325] RSP: 0018:ffffc90004b87dd8 EFLAGS: 00010293
[ 2771.100665][ T5325] RAX: ffffffff84be39d2 RBX: 0000000000000000 RCX: ffff8880442abc00
[ 2771.108640][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 2771.116619][ T5325] RBP: 1ffff11009adc774 R08: ffffffff84bf456f R09: 1ffff11009adc771
[ 2771.124595][ T5325] R10: dffffc0000000000 R11: ffffed1009adc772 R12: ffff88804d6e3ba0
[ 2771.132570][ T5325] R13: dffffc0000000000 R14: ffff888024e81a00 R15: ffff88804d6e3b80
[ 2771.140550][ T5325]  ? landlock_log_drop_domain+0x4f/0x1b0
[ 2771.146189][ T5325]  ? free_ruleset+0x1f2/0x250
[ 2771.150874][ T5325]  ? free_ruleset+0x1f2/0x250
[ 2771.155563][ T5325]  landlock_merge_ruleset+0x6d8/0x900
[ 2771.160948][ T5325]  ? prepare_creds+0x47b/0x640
[ 2771.165740][ T5325]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 2771.172002][ T5325]  do_syscall_64+0xf3/0x230
[ 2771.176515][ T5325]  ? clear_bhb_loop+0x45/0xa0
[ 2771.181209][ T5325]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 2771.187116][ T5325] RIP: 0033:0x7f1f5ff8d169
[ 2771.191532][ T5325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 2771.211135][ T5325] RSP: 002b:00007f1f60e65038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be
[ 2771.219568][ T5325] RAX: ffffffffffffffda RBX: 00007f1f601a5fa0 RCX: 00007f1f5ff8d169
[ 2771.227551][ T5325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003
[ 2771.235530][ T5325] RBP: 00007f1f60e65090 R08: 0000000000000000 R09: 0000000000000000
[ 2771.243505][ T5325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 2771.251491][ T5325] R13: 0000000000000000 R14: 00007f1f601a5fa0 R15: 00007f1f602cfa28
[ 2771.259477][ T5325]  </TASK>
[ 2771.262766][ T5325] Kernel Offset: disabled
[ 2771.267105][ T5325] Rebooting in 86400 seconds..