last executing test programs:

10.37191623s ago: executing program 1 (id=932):
mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x9, 0x15031, 0xffffffffffffffff, 0x0)
unshare(0x22020600)
r0 = userfaultfd(0x80001)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100))
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5})
ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) (fail_nth: 12)

9.7584802s ago: executing program 1 (id=934):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000880)='ns/uts\x00')
ioctl$TUNGETVNETHDRSZ(r2, 0xb701, 0x0)
ioctl$NS_GET_USERNS(r2, 0xb701, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$nl_route(0x10, 0x3, 0x0)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000440)=ANY=[@ANYBLOB="2c000000948721cb582ca73ecd16bdc2c46e5ea46f62829e7a0cfaf6dd559891a35540f1efd0cbb3b651a463b4cdcc46a7040e21911e67b1819786dd6ca9f2bdc190ff2778acd3a2d91e1b094b1e1b1d66d81df015de8f7947200daa3604757dc7fec8cf3e33db402f51d240ed38a2d68718c823e31bf7025e66084d5614379e03f22be94aab015d6a706b9acf8bc0420b9a49345088880d82e3c2a5053bed767a8ce47418cd4d2c46b15eec9e20de69eb3d21c496b0d0ca8eccf9", @ANYRES16=r4, @ANYBLOB="010028bd7000000000000c000000180001801400020076657468305f746f5f626f6e64000000"], 0x2c}}, 0x0)
r5 = socket(0x1, 0x803, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000000)={<r6=>0x0, 0xfffffff8, 0x7, 0x6}, &(0x7f0000000040)=0x10)
getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x84, 0x76, &(0x7f00000000c0)={r6, 0xdc}, &(0x7f0000000200)=0x8)
ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000100)={'wlan1\x00'})
getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, <r7=>0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14)
socket$packet(0x11, 0x2, 0x300)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r8 = syz_open_dev$audion(&(0x7f0000000180), 0x4000000000000000, 0x0)
vmsplice(r8, &(0x7f0000000400)=[{0x0}, {&(0x7f0000000200)}], 0x2, 0x5)
sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0003001c0000001f000000060001000000000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
pipe2(&(0x7f0000000340), 0x0)
mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0x3000, 0x3, &(0x7f0000ffc000/0x3000)=nil)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x1, 0x4, &(0x7f00000000c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1ff, @void, @value}, 0x94)
r9 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r9, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0)

8.714836892s ago: executing program 0 (id=937):
socket$nl_xfrm(0x10, 0x3, 0x6)
r0 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="120100000cb768405e0483020b9901e4020109021b000100000000090400fb015c291d00090509"], 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000240)={'wlan1\x00', <r2=>0x0})
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff)
sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x1c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000080), 0x3, 0x800)
syz_usb_disconnect(r0)
r4 = fsopen(&(0x7f00000003c0)='tracefs\x00', 0x1)
close_range(r4, 0xffffffffffffffff, 0x0)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100), 0x8a340, 0x0)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r8 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x40400)
ioctl$DRM_IOCTL_MODE_GETFB(r8, 0xc01c64ad, &(0x7f0000000040))
ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000001040)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_TDLS_OPER(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000540)={0x1c, r7, 0x400, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r9}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000880}, 0x800)

8.271949066s ago: executing program 1 (id=941):
unshare(0x6a040000)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000) (async)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x51857000)
unshare(0x50060700)
r0 = socket$kcm(0x2, 0x5, 0x84)
r1 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0xff}) (async)
ioctl$SIOCSIFMTU(r1, 0x89fb, &(0x7f0000000040)={'bond0\x00', 0xff})
sendmsg$inet(r0, &(0x7f0000000680)={&(0x7f0000000080)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000240)='\x00', 0x1}], 0x1}, 0x24000041)

7.317624893s ago: executing program 0 (id=943):
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]})
mlock(&(0x7f0000947000/0x1000)=nil, 0x1000)
r0 = gettid()
prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]})
lremovexattr(0x0, 0xfffffffffffffffe)
timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc))
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events.local\x00', 0x275a, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000300), 0x121800)
r3 = socket$inet_sctp(0x2, 0x1, 0x84)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000019c0)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x34}}, @in={0x2, 0x4e20, @local}, @in6={0xa, 0x4e23, 0x100, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0x3c)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000400)={{0xb, 0x6}, 0x0, 0x3, 0x4, {0xb, 0x2}, 0xa, 0x7})
write$binfmt_misc(r1, &(0x7f00000001c0), 0xed)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0)
r4 = socket$isdn(0x22, 0x2, 0x26)
ioctl$sock_SIOCGIFINDEX_80211(r4, 0x80044944, &(0x7f00000002c0)={'wlan0\x00'})
ptrace$poke(0xc, r0, &(0x7f0000000040), 0x6)
r5 = socket$nl_route(0x10, 0x3, 0x0)
r6 = socket$can_bcm(0x1d, 0x2, 0x2)
ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000080)={'vxcan1\x00', <r7=>0x0})
connect$can_bcm(r6, &(0x7f0000000300)={0x1d, r7}, 0x10)
ioctl$sock_ipv6_tunnel_SIOCGET6RD(r1, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl2\x00', <r8=>0x0, 0x7800, 0x7, 0x7, 0x449, {{0x1d, 0x4, 0x2, 0x3b, 0x74, 0x64, 0x0, 0x0, 0x4, 0x0, @multicast2, @private=0xa010101, {[@cipso={0x86, 0x12, 0x1, [{0x6, 0x3, 'F'}, {0x2, 0x9, "aa08f5efdb94e0"}]}, @ssrr={0x89, 0x2b, 0xf4, [@loopback, @empty, @remote, @local, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x26}, @rand_addr=0x64010101, @private=0xa010102]}, @cipso={0x86, 0xe, 0x0, [{0x0, 0x8, "7aad40c1ea38"}]}, @ssrr={0x89, 0x13, 0x8f, [@empty, @multicast2, @loopback, @multicast1]}]}}}}})
ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f0000000340)={'ip6gre0\x00', <r9=>0x0, 0x4, 0x7, 0x6, 0x2, 0x8, @loopback, @remote, 0x40, 0x1, 0x4, 0xfe6}})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000280)={'wg2\x00', <r10=>0x0})
ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'veth1_to_batadv\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', <r12=>0x0})
sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@RTM_DELMDB={0xf8, 0x55, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@MDBA_SET_ENTRY={0x20, 0x1, {r7, 0x0, 0x2, 0x0, {@in6_addr=@remote, 0x86dd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r8, 0x0, 0x1, 0x3, {@in6_addr=@local, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r9, 0x0, 0x0, 0x3, {@in6_addr=@private1={0xfc, 0x1, '\x00', 0x1}}}}, @MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x3, 0x2, {@ip4=@broadcast, 0x8edd}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r10, 0x0, 0x1, 0x1, {@in6_addr=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r11, 0x0, 0x1, 0x3, {@in6_addr=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x3, 0x0, {@ip4=@broadcast, 0x8edd}}}]}, 0xf8}}, 0x24000840)

7.023120151s ago: executing program 0 (id=945):
socket$inet_icmp_raw(0x2, 0x3, 0x1) (async)
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_int(r0, 0x0, 0xb, &(0x7f0000000040)=0x3, 0x4)
setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x1a, &(0x7f0000000200)={0x1, 'netdevsim0\x00'}, 0x18)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r1)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000340)={0x0, 0x4}, 0x8)
sendto$inet6(r3, &(0x7f0000000380)='\f', 0x1, 0xcd4e8ec47367e7d3, &(0x7f0000000000)={0xa, 0x4e21, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, 0x1c)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x4, 0x9417}, 0x8)
syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r1)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000020000000110000000c0009"], 0x20}}, 0x0) (async)
sendmsg$TIPC_NL_MON_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002a40)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000020000000110000000c0009"], 0x20}}, 0x0)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x6, "7f36c525"}, {0x2, 0x3, "ff"}, {0x7, 0xa, "d364ab0c7e1af520"}, {0x2, 0x2}, {0x1, 0x2}]}, @generic={0x86, 0x10, "ea1c3ac87130f9f34b2d08d486a3"}, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0xe, [{@local, 0x7fffffff}]}]}}}}}}}, 0x0) (async)
syz_emit_ethernet(0x7e, &(0x7f0000000300)={@broadcast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x15, 0x4, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x1, 0x8, @local, @multicast1, {[@ra={0x94, 0x4}, @cipso={0x86, 0x1d, 0x3, [{0x0, 0x6, "7f36c525"}, {0x2, 0x3, "ff"}, {0x7, 0xa, "d364ab0c7e1af520"}, {0x2, 0x2}, {0x1, 0x2}]}, @generic={0x86, 0x10, "ea1c3ac87130f9f34b2d08d486a3"}, @timestamp_prespec={0x44, 0xc, 0x81, 0x3, 0xe, [{@local, 0x7fffffff}]}]}}}}}}}, 0x0)
socket(0xb, 0x1, 0x7) (async)
socket(0xb, 0x1, 0x7)

6.415650915s ago: executing program 0 (id=946):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
syz_usb_connect(0x0, 0x24, 0x0, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000003000000040122000b00000001"], 0x48)
bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38)
r4 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00')
writev(r4, &(0x7f00000002c0)=[{&(0x7f0000000280)='2', 0x1}], 0x1)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000001c0)={'wlan0\x00'})
r5 = syz_open_procfs(0x0, &(0x7f0000000280)='net/protocols\x00')
preadv(r5, &(0x7f0000000080)=[{&(0x7f0000000000)=""/73, 0x49}], 0x1, 0xfffffffa, 0x0)
sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x40}}, 0x200040b4)
sendmsg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x39}, 0x71413704a069e9ef)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r6=>0xffffffffffffffff})
socketpair$unix(0x1, 0x5, 0x0, 0x0)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
dup3(r6, 0xffffffffffffffff, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x9101, 0x0)
openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70ee}, 0x0, &(0x7f0000000040)={0xb, 0xffffffffffffffff}, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000280))
ioctl$SNAPSHOT_ATOMIC_RESTORE(r7, 0x3304)

5.467611802s ago: executing program 4 (id=949):
r0 = socket$nl_route(0x10, 0x3, 0x0) (async)
r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', <r2=>0x0})
sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001000058020000400aaaaaaaaaabb000008000300030000000a000400aaaaaaaab1aa000008000500", @ANYRES32=r2], 0x68}}, 0x0) (async)
syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0x4001}, &(0x7f0000000000)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0xffffffffffffffff, 0x0}) (async)
syz_usb_connect(0x3, 0x51, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc2e3f2063072110c08e0000000109023f0001000000004904880005ffb717000905adda0000020154090501000004007f070905020c200009027e09050f042000410f04090505", @ANYRES16, @ANYRES32=r4, @ANYRESHEX=r4, @ANYRESHEX=r4], 0x0) (async)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
getsockopt$inet_mreqsrc(r5, 0x0, 0xf, &(0x7f0000000040)={@dev, @empty, @remote}, &(0x7f00000001c0)=0xc)

5.363199355s ago: executing program 1 (id=951):
syz_usb_connect(0x0, 0x3d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x92, 0xe5, 0x9e, 0x20, 0x108c, 0x169, 0x75b9, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xdb, 0x0, 0x2, 0xd, 0xfa, 0x0, 0x3, [], [{{0x9, 0x5, 0x80, 0x0, 0x0, 0x0, 0xfc, 0x0, [@generic={0x7, 0x5, "db224370bf"}]}}, {{0x9, 0x5, 0xb, 0x2, 0x3ff}}]}}]}}]}}, 0x0)

5.244110215s ago: executing program 4 (id=952):
r0 = add_key$user(&(0x7f0000000100), &(0x7f00000001c0)={'syz', 0x3}, &(0x7f0000000200)="ed", 0x1, 0xffffffffffffffff)
keyctl$set_timeout(0xf, r0, 0x101000) (fail_nth: 1)

4.811152373s ago: executing program 4 (id=954):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1db, &(0x7f00000001c0)=<r4=>0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0)
recvfrom$inet6(r5, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0)
r6 = syz_usb_connect$cdc_ecm(0xb846d10e541f05bb, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0xd, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "101d"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x6, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9f, 0x4, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x14fc5516736507d1, 0x6, 0x0, 0xe}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x7, 0x2, 0x6, 0x10, 0x5}, 0x31, &(0x7f0000000480)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0xd, 0xfe00}, @generic={0x7, 0x10, 0x3, "e230daed"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x13, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1373b2e386a6bb1553abc345dd97d040"}]}, 0x1, [{0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "19233866527178787f694eff0c5e761d6d3174cca3ff19c2710eeb2307edcc454b9b1c1cd207fb40567ccf9f943e7d7f4d0777c1b7f346ee00fb1dc2c3fe24bef5df6673599b6e91ec0eed1749f57773ef403458cf10a3fd24c73eb749531b35d2e6fc1d3041b4a80044d8061b63676cdabc7d913fb9c9dce80d8dea1adb67cc025ec95f5a22195e2de2b974a51750"}}]})
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x40, 0x8, 0xd7, {0xd7, 0x30, "0a653100fdb54d6049160f76f8393a2ff43a1923f74e04c51b8b1e63a178a4110a41e41633803b09fca8a92499e922463638725d1cae9754f046fb17bf51bca39f1a8c5e3bd5d0157dd92fe7dee8d92429870744d8427f7c4413e9bb476c3ec622b0fc5509381719ab5dcc9f48c8465ee5549e912ff1df3f4359f245f0cfe1ff470ca2fb7614130a94d8c6e822ab0cc98113f38a499f13a0738a4bf519a41986e4c35e5d9ee888d9541184def96f74d6df4dd017e402bf8e41549375a8d2153f75f8d1775dfc7915c231cb3dcf06af67144845266f"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x40, 0x10, 0xdb, "2a3fe0ede2969edc0fad7f9605e14e8727b6defb1beadc6032d40f4730318d883cf400b389bb7467630451ebee013637d38f803fe9dfbebb067ee18e4c9344af569385bc1727bb07fbc2aaa232f966870024a76043bd3c9cf8835f971938ed7f968356603216fcc59fba7cbc9fd37907daabdc40f027a63bcd09c93f2e19800e28982d3b3eb9997832b59447b11bea71d6ea928aa556a6713f522c4eed19fba8495474cf771084c5d52e6692fa237f73f56cef8d9374e3d8d24698c879faf5e0968a626285ae5ead52e3e5ea652100df30649a28df5623b0181d76"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x35}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x84}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_destroy(r4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)

3.728680699s ago: executing program 1 (id=956):
r0 = socket$inet_tcp(0x2, 0x1, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000001800dd8d47b79660f6000000020000005d3db69bb80000000600000100040000008008000100"/53, @ANYRES16=r0, @ANYRES8=r0], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4000)
setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f00000000c0)=0x100000001, 0x4)
bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10)
userfaultfd(0x80c01)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r3, &(0x7f00000bd000), 0x218, 0x0)
recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
ioctl$VIDIOC_S_PARM(0xffffffffffffffff, 0xc0cc5616, &(0x7f0000000300)={0x3, @output={0x0, 0x1, {0x1, 0x2}, 0x4, 0x7}})
ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)=0x10000)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
r4 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r4, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4)
connect$inet(r4, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10)
fcntl$setstatus(r0, 0x4, 0x46000)
syz_usb_connect(0x0, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f"], 0x0)
r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0)
syz_open_dev$midi(&(0x7f0000000000), 0x3, 0x4a243)
close(r5)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20041, 0x0)
ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000140)={'veth0_macvtap\x00', 0x200})
sendmmsg$inet(r4, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00)
r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000400)='net/arp\x00')
setns(r7, 0x20000000)
preadv(r7, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xfff, 0x9)

3.666170887s ago: executing program 2 (id=957):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501000000080005000100000006000600234e0000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x30, r3, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x1c}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x30}}, 0x0)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(r4)
r5 = socket$inet6_mptcp(0xa, 0x1, 0x106)
bind$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c)
listen(r5, 0x0)
r6 = socket$inet_mptcp(0x2, 0x1, 0x106)
connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000000000002000000140001800500020001"], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094)
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r10, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60)
ioctl$KVM_CREATE_PIT2(r10, 0x4040ae77, &(0x7f0000000280)={0x3})
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x0)
ioctl$KVM_RUN(r11, 0xae80, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000500)="b8010000000f01c10f22a10f20e035800000000f22e066ba610066b80a0066ef66b832000f00d0b8010000000f01c166ba4300b0beee0f793c1e2e643e2e3e650f79288fc878c15b0e3f", 0x4a}], 0x1, 0x21, 0x0, 0x0)
symlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00')
sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x20000040)
ioctl$KVM_RUN(r11, 0xae80, 0x0)

3.661079943s ago: executing program 3 (id=958):
socket$l2tp6(0xa, 0x2, 0x73)
r0 = syz_io_uring_setup(0x6440, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000040)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, 0x0, &(0x7f00000001c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x40, 0x0, 0x3, 0x1, 0x0, 0xce})
r3 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8}]}}}]}]}], {0x14}}, 0xbc}}, 0x0)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0)
write$UHID_CREATE2(r4, &(0x7f00000001c0)=ANY=[@ANYBLOB='.'], 0x118)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r4, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x55, 0x2000, @fd_index=0xd, 0x7, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r0, 0x2d3e, 0x0, 0x0, 0x0, 0x0)

3.539507883s ago: executing program 3 (id=959):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000001180)=ANY=[@ANYBLOB="12010000090003206d0414c34000ffff000109022400010400a000090400000103010100093700086ce82201000905815f"], 0x0)
r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x28403)
ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000083c0)={{0x1}})
ioctl$SNDRV_TIMER_IOCTL_STATUS32(r1, 0x80585414, 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000dc0)=ANY=[], 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000340)={0x2c, &(0x7f0000000200)=ANY=[], 0x0, 0x0, 0x0, 0x0})
r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x8280, 0x0)
ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000180)={{0x1, 0x1, 0x18, r1, {0x3}}, './file0\x00'})
syz_usb_control_io(r0, 0x0, 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = socket$inet6(0x10, 0x80000, 0x3)
sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
r4 = syz_open_dev$swradio(&(0x7f0000000000), 0x1, 0x2)
readv(r4, &(0x7f0000000240)=[{&(0x7f0000000040)=""/84, 0x9000}], 0x1)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
r5 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r3], 0x4c}}, 0x3)
sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10000082}, 0x80)
sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c00000000000705001dc91af20000000000000000000000000000002b6a5d0a084d08887d414c3c87"], 0x1c}}, 0x40001)
sendto$inet6(r5, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)

3.384548362s ago: executing program 2 (id=960):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x40}}, 0x0) (fail_nth: 7)

3.271086702s ago: executing program 0 (id=961):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
shmctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(r1, 0x0, 0x5f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006800)={0x2020}, 0x2020) (fail_nth: 1)
lseek(r3, 0xfffffffffffffff5, 0x1)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8d8)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7a6f7570c0df39e1e6c0844aaf5f69643d", @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f00000047c0)={0x2020}, 0x2020)

2.863522769s ago: executing program 2 (id=962):
capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffff})
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20)
shmctl$IPC_RMID(0x0, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_udp(0xa, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
socketpair$tipc(0x1e, 0x5, 0x0, 0x0)
recvmsg(r1, 0x0, 0x5f00)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002200)='/proc/diskstats\x00', 0x0, 0x0)
read$FUSE(r3, &(0x7f0000006800)={0x2020}, 0x2020)
lseek(r3, 0xfffffffffffffff5, 0x1)
read$FUSE(r3, &(0x7f0000002240)={0x2020}, 0x2020)
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x8d8)
r5 = socket$inet6(0xa, 0x6, 0x0)
connect$inet6(r5, 0x0, 0x0)
syz_open_procfs$pagemap(0x0, 0x0)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0)
syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="7a6f7570c0df39e1e6c0844aaf5f69643d", @ANYRESDEC=0x0], 0x0, 0x0, 0x0)
read$FUSE(r6, &(0x7f00000047c0)={0x2020}, 0x2020)

1.702018105s ago: executing program 4 (id=963):
r0 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080)=0x80000003)
openat$audio1(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
write$cgroup_devices(r1, 0x0, 0xffdd)
connect$unix(0xffffffffffffffff, 0x0, 0x0)
sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_io_uring_setup(0x497, &(0x7f00000000c0)={0x0, 0x7079, 0x400, 0x3, 0x288}, &(0x7f0000000340)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0})
connect$can_bcm(0xffffffffffffffff, &(0x7f0000000040), 0x10)
sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x5, 0x410, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f87455da7fce92f7"}}, 0x48}, 0x300, 0x0, 0x0, 0x20000000}, 0x4000005)
dup2(r0, r0)
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast2}, 0x80, 0x0}, 0x0)
r4 = socket$kcm(0xa, 0x2, 0x73)
sendmsg$inet(r4, &(0x7f0000001180)={&(0x7f0000000000)={0xa, 0x0, @multicast2}, 0x3c, &(0x7f0000001080)=[{&(0x7f0000000040)="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", 0x1000}, {&(0x7f0000001040)="9d7fcf3efc63f4a6a555ba8b4726d7ccaf8a207100e69cfac4377876021d7131b838059f96bd206d4776368ed2a92432e5af71", 0x33}], 0x2, &(0x7f00000010c0)=[@ip_tos_int={{0x14, 0x29, 0x34}}, @ip_tos_u8={{0x18, 0x29, 0x4}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @remote}}}], 0x14}, 0x0)

1.361105813s ago: executing program 4 (id=964):
ioprio_set$uid(0x3, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0xfc)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c)
r1 = dup2(r0, r0)
write$tun(r1, &(0x7f0000000040)=ANY=[], 0x46)

1.239408837s ago: executing program 3 (id=965):
openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0xc08, 0x3, 0x440, 0xc, 0x5002004a, 0xb, 0x310, 0xea13, 0x3d0, 0x3c8, 0x3c8, 0x3d0, 0x3c8, 0x3, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'erspan0\x00', 'ip6tnl0\x00', {}, {}, 0x6}, 0x0, 0x2c8, 0x310, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x2, 0x0, [{}, {0x16}]}}, @common=@ttl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE2={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x4a0)
sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, 0x0, 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000140)='batadv0\x00', 0x10)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000e40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000100)="c844cb", 0x3}], 0x1}}], 0x2, 0x4000c000)
socket$nl_route(0x10, 0x3, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x4008132, 0xffffffffffffffff, 0x0)
pselect6(0x40, &(0x7f0000000100)={0x200000000000, 0x0, 0x4, 0x0, 0x800}, 0x0, 0x0, 0x0, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000500), 0x10)
syz_emit_ethernet(0x2e, &(0x7f00000004c0)={@empty, @local, @val={@void, {0x8100, 0x6, 0x1, 0x2}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x2, @link_local, @empty, @multicast}}}}, 0x0)

1.176157618s ago: executing program 4 (id=966):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="130100002add1e20ef050a023691010203010902240001000000000904000002ea1998000905a6a70000000000090507", @ANYRES32], 0x0)
r1 = syz_usb_connect(0x0, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0)
mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0)
syz_usb_control_io$hid(r1, &(0x7f0000000400)={0x24, &(0x7f0000000180)={0x0, 0xb, 0x8e, {0x8e, 0x9, "9fee84b64bde36f9962690cf88fe409431d4430ba51d8505c0df1160dc9c1b557cc3839ffd4a0f9c80df570011284d5698f1995b95d4dd344113dd197bc2aabb2c9fbcb8f8a205f638267cc662da98571239aee6e40894b0bde0db41224002f6f79222d0c2660f8d619cb556c4e9b4483b193de415c39c663fd08361b7ab60abd7cc254f04bbca9853709f06"}}, &(0x7f0000000300)=ANY=[@ANYBLOB="0003020000000203"], 0x0, 0x0}, 0x0)
syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0xc38, &(0x7f0000000080)=ANY=[])
syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000300)=ANY=[@ANYBLOB="51146f0060006f"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x608100, 0x0)
ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0))
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="df16540000004e"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

1.022913411s ago: executing program 3 (id=967):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080))
openat$kvm(0xffffff9c, &(0x7f0000000000), 0x2000, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000))
socket$inet6_udp(0xa, 0x2, 0x0)
socket$packet(0x11, 0x3, 0x300)
socket$inet6(0xa, 0x80002, 0x88)
syz_open_procfs(0x0, &(0x7f0000000000)='net/udp6\x00')
socket$inet6(0xa, 0x2, 0x0)
openat$mixer(0xffffffffffffff9c, &(0x7f0000000700), 0x1c1140, 0x0)
syz_open_dev$tty1(0xc, 0x4, 0x3)
socket$nl_route(0x10, 0x3, 0x0)
socket$inet_dccp(0x2, 0x6, 0x0)
socket$xdp(0x2c, 0x3, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$pppl2tp(0x18, 0x1, 0x1)
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="64efff001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r0], 0x64}}, 0x0)

843.926738ms ago: executing program 2 (id=968):
r0 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = geteuid()
keyctl$get_persistent(0x16, r1, r0)

827.276629ms ago: executing program 3 (id=969):
r0 = add_key$keyring(&(0x7f00000016c0), &(0x7f0000001700)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x1)
r2 = geteuid()
r3 = socket$inet6(0xa, 0x5, 0x0)
setsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffa, 0x4)
setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x5, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @in={0x2, 0x0, @private=0xa010102}, @in6={0xa, 0x0, 0xd7d9, @loopback}, @in={0x2, 0x4e21, @dev}], 0x58)
keyctl$get_persistent(0x16, r2, r0)

620.837614ms ago: executing program 1 (id=970):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
bind$alg(0xffffffffffffffff, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0)
mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0)
r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000a80)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x50)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001240)={0x8, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x1, 0x70030000}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x100b, &(0x7f0000001e40)=""/4107, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1d, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90)
syz_clone(0x80800100, 0x0, 0x0, 0x0, 0x0, 0x0)
mknod$loop(&(0x7f00000000c0)='./file0\x00', 0x800, 0x0)
r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x42, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r4, &(0x7f0000006380)={0x2020, 0x0, <r5=>0x0}, 0x2020)
write$FUSE_INIT(r4, &(0x7f0000000100)={0x50, 0x0, r5, {0x7, 0x1f, 0x1000001, 0x5069f481, 0xfffe, 0x7fff, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50)
r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0)
r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x1)
mkdirat(0xffffffffffffffff, &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0)
setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10)
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000009e02"])
syz_fuse_handle_req(r4, &(0x7f00000041c0)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000500)={0x20, 0x0, 0x0, {0x0, 0x9}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
openat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x24c01, 0x0)
io_setup(0x202, &(0x7f0000000200))
syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000008400)="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", 0x2000, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)

620.277925ms ago: executing program 2 (id=971):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488)
r1 = socket$inet6(0xa, 0x80002, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c)
setsockopt$inet6_IPV6_DSTOPTS(r1, 0x29, 0x3b, &(0x7f00000008c0)=ANY=[@ANYBLOB="00020000000000000401"], 0x20)
sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0, 0x700}}], 0x1, 0x0)

559.19811ms ago: executing program 3 (id=972):
unshare(0x8040600)
r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000000380)={0xc, 0x0, <r1=>0x0})
ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r0, 0x3ba0, &(0x7f0000000200)={0x48, 0x2, r1, 0x0, 0x0, 0x0, 0x0, 0x1}) (fail_nth: 22)

97.99991ms ago: executing program 0 (id=973):
socket$key(0xf, 0x3, 0x2)
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
pipe(&(0x7f0000000280)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = socket$nl_route(0x10, 0x3, 0x0)
io_setup(0x1db, &(0x7f00000001c0)=<r4=>0x0)
openat$userio(0xffffffffffffff9c, &(0x7f0000000200), 0x101000, 0x0)
splice(r1, 0x0, r3, 0x0, 0x725e65a6, 0x0)
r5 = socket$inet6(0x10, 0x3, 0x0)
sendto$inet6(r5, &(0x7f00000005c0)="23000000220021bb00b9409b849ac00a00e3b8a98623ff2a09a6c5b01109e3ecabbe82", 0x23, 0x0, 0x0, 0x0)
recvfrom$inet6(r5, &(0x7f0000000000)=""/203, 0xcb, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="900000a453001f", 0x7, 0x20000080, 0x0, 0x0)
r6 = syz_usb_connect$cdc_ecm(0xb846d10e541f05bb, 0x58, &(0x7f00000003c0)={{0x12, 0x1, 0x200, 0x2, 0x0, 0x0, 0x8, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x46, 0x1, 0x1, 0xd, 0x10, 0x1, [{{0x9, 0x4, 0x0, 0xd, 0x3, 0x2, 0x6, 0x0, 0x0, {{0x7, 0x24, 0x6, 0x0, 0x0, "101d"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x8, 0x1, 0x7}}, {[{{0x9, 0x5, 0x81, 0x3, 0x400, 0x1, 0x6, 0x7}}], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x9f, 0x4, 0xfd}}, {{0x9, 0x5, 0x3, 0x2, 0x14fc5516736507d1, 0x6, 0x0, 0xe}}}}}]}}]}}, &(0x7f0000000580)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x7, 0x2, 0x6, 0x10, 0x5}, 0x31, &(0x7f0000000480)={0x5, 0xf, 0x31, 0x4, [@ext_cap={0x7, 0x10, 0x2, 0xa, 0x4, 0xd, 0xfe00}, @generic={0x7, 0x10, 0x3, "e230daed"}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x7, 0x13, 0x2}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "1373b2e386a6bb1553abc345dd97d040"}]}, 0x1, [{0x91, &(0x7f00000004c0)=@string={0x91, 0x3, "19233866527178787f694eff0c5e761d6d3174cca3ff19c2710eeb2307edcc454b9b1c1cd207fb40567ccf9f943e7d7f4d0777c1b7f346ee00fb1dc2c3fe24bef5df6673599b6e91ec0eed1749f57773ef403458cf10a3fd24c73eb749531b35d2e6fc1d3041b4a80044d8061b63676cdabc7d913fb9c9dce80d8dea1adb67cc025ec95f5a22195e2de2b974a51750"}}]})
syz_usb_control_io$cdc_ecm(r6, &(0x7f0000000740)={0x14, &(0x7f0000000600)={0x40, 0x8, 0xd7, {0xd7, 0x30, "0a653100fdb54d6049160f76f8393a2ff43a1923f74e04c51b8b1e63a178a4110a41e41633803b09fca8a92499e922463638725d1cae9754f046fb17bf51bca39f1a8c5e3bd5d0157dd92fe7dee8d92429870744d8427f7c4413e9bb476c3ec622b0fc5509381719ab5dcc9f48c8465ee5549e912ff1df3f4359f245f0cfe1ff470ca2fb7614130a94d8c6e822ab0cc98113f38a499f13a0738a4bf519a41986e4c35e5d9ee888d9541184def96f74d6df4dd017e402bf8e41549375a8d2153f75f8d1775dfc7915c231cb3dcf06af67144845266f"}}, &(0x7f0000000700)={0x0, 0x3, 0x1a, {0x1a}}}, &(0x7f0000000900)={0x1c, &(0x7f0000000780)={0x40, 0x10, 0xdb, "2a3fe0ede2969edc0fad7f9605e14e8727b6defb1beadc6032d40f4730318d883cf400b389bb7467630451ebee013637d38f803fe9dfbebb067ee18e4c9344af569385bc1727bb07fbc2aaa232f966870024a76043bd3c9cf8835f971938ed7f968356603216fcc59fba7cbc9fd37907daabdc40f027a63bcd09c93f2e19800e28982d3b3eb9997832b59447b11bea71d6ea928aa556a6713f522c4eed19fba8495474cf771084c5d52e6692fa237f73f56cef8d9374e3d8d24698c879faf5e0968a626285ae5ead52e3e5ea652100df30649a28df5623b0181d76"}, &(0x7f0000000880)={0x0, 0xa, 0x1, 0x35}, &(0x7f00000008c0)={0x0, 0x8, 0x1, 0x84}})
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='\'\x00\x00\x00!', 0x5, 0x0, 0x0, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)='q', 0x1, 0x0, 0x0, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680))
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0)
io_destroy(r4)
unlinkat(0xffffffffffffff9c, &(0x7f0000000380)='./file1\x00', 0x0)
write$binfmt_elf64(r2, &(0x7f0000000000)=ANY=[], 0xfffffd88)
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYBLOB="54010000100013070000000000000000ac1414aa000000000000000000000000ac1414bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x0)

0s ago: executing program 2 (id=974):
syz_emit_ethernet(0x6f, &(0x7f0000000b40)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x61, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x4d, 0x0, @opaque="8bcedf7daf3b3070444b3a7620704784368a8f88fcf954e79a8b111aa6c92c119d7b2bb18be8628cbfee5cad1f5708ec90983a3a9e41928f06c6a6fc8b64b9002ce9fc4c35"}}}}}, 0x0)
syz_emit_ethernet(0x46, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra}}}}}, 0x0)
r0 = gettid()
r1 = syz_open_procfs(r0, &(0x7f0000000180)='wchan\x00')
pread64(r1, &(0x7f000001a240)=""/102400, 0x19000, 0x41e)
write$tun(r1, &(0x7f0000000440)={@val={0x0, 0x7}, @val={0x1, 0x86, 0x0, 0x2, 0x9, 0x7}, @ipv6=@udp={0x6, 0x6, "f37f5e", 0x2b4, 0x11, 0xff, @private0, @mcast1, {[@srh={0x62, 0x8, 0x4, 0x4, 0x4, 0x18, 0x5, [@ipv4={'\x00', '\xff\xff', @remote}, @remote, @mcast2, @dev={0xfe, 0x80, '\x00', 0x38}]}, @dstopts={0x2c, 0x1e, '\x00', [@pad1, @jumbo={0xc2, 0x4, 0x101}, @hao={0xc9, 0x10, @remote}, @generic={0x3, 0x88, "df536bef0847c8c2635f6433c359772b4e1eb771fb862c81831efdbd72e09227ddaea874342e8b4cea5ac0053e013059e8c6c981cfa0e4f208f3d59948e505e8353a2948de58daed91f42e0d97a8fe41abd227ca5fbd7781d6328105f083f4aa74f97b7e1c058ff208944d0655182d20d3bb592b4d8146eca948846286b9d549f22c30c387a6ed2f"}, @hao={0xc9, 0x10, @private2={0xfc, 0x2, '\x00', 0x1}}, @generic={0x0, 0x34, "6a6d81ad89719ec0b1d551cc132f530b99567a4f6eabbbba29afa91830e710d511fd6861f790f5fb7cb2500de80ca2ac172c67ad"}, @jumbo={0xc2, 0x4, 0x1}, @pad1]}, @fragment={0x87, 0x0, 0x8, 0x0, 0x0, 0x10, 0x67}, @srh={0x1, 0x12, 0x4, 0x9, 0x9, 0x78, 0x3, [@private0, @mcast1, @ipv4={'\x00', '\xff\xff', @local}, @loopback, @dev={0xfe, 0x80, '\x00', 0x39}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x38}, @private2]}, @hopopts={0x29, 0xb, '\x00', [@ra={0x5, 0x2, 0x7}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @loopback}, @calipso={0x7, 0x40, {0x1, 0xe, 0xbd, 0x2, [0x80, 0x9, 0x8000, 0x1, 0x7ff, 0x8, 0xbd]}}]}], {0x4e20, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x2, 0x4, "56cd1aa054db4967b04286923f78d67e3e8a49580260853c0ad677cdb080ab32", "01cb3361c854a644ee102239023e19b0", {"9aff9c0446268e4789639f1dd4f2ee57", "d84ef5e57d583d0bb9fbbf72b00a2b05"}}}}}}, 0x2ea)

kernel console output (not intermixed with test programs):

, different from the descriptor's value: 25
[  218.511080][ T5896] usb 4-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  218.526526][ T5896] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.545722][ T5896] usb 4-1: Product: syz
[  218.566428][  T918] usb 3-1: New USB device found, idVendor=061d, idProduct=c020, bcdDevice=9c.15
[  218.582824][ T5896] usb 4-1: Manufacturer: syz
[  218.592025][  T918] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  218.612210][ T5896] usb 4-1: SerialNumber: syz
[  218.617217][ T5891] usb 5-1: device descriptor read/64, error -71
[  218.640174][  T918] usb 3-1: Product: syz
[  218.644405][  T918] usb 3-1: Manufacturer: syz
[  218.673291][  T918] usb 3-1: SerialNumber: syz
[  218.689192][  T918] usb 3-1: config 0 descriptor??
[  218.703987][  T918] ssu100 3-1:0.0: Quatech SSU-100 USB to Serial Driver converter detected
[  218.747600][ T5891] usb usb5-port1: attempt power cycle
[  218.906839][    T9] usb 1-1: new high-speed USB device number 19 using dummy_hcd
[  219.080923][    T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  219.091322][    T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8
[  219.118662][    T9] usb 1-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice= 0.00
[  219.137523][    T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[  219.159049][ T5891] usb 5-1: new high-speed USB device number 29 using dummy_hcd
[  219.170249][    T9] usb 1-1: SerialNumber: syz
[  219.179867][    T9] usb 1-1: config 0 descriptor??
[  219.188294][ T5891] usb 5-1: device descriptor read/8, error -71
[  219.198898][    T9] port100 1-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint
[  219.391902][    T9] usb 1-1: USB disconnect, device number 19
[  219.464267][  T918] ssu100 3-1:0.0: probe with driver ssu100 failed with error -71
[  219.487868][ T5891] usb 5-1: new high-speed USB device number 30 using dummy_hcd
[  219.504741][  T918] usb 3-1: USB disconnect, device number 23
[  219.563595][ T5891] usb 5-1: device descriptor read/8, error -71
[  219.697399][ T5891] usb usb5-port1: unable to enumerate USB device
[  220.238463][ T5896] usbhid 4-1:1.0: couldn't find an input interrupt endpoint
[  220.334014][ T5896] usb 4-1: USB disconnect, device number 15
[  220.464520][ T7964] tipc: Started in network mode
[  220.479485][ T7964] tipc: Node identity 4, cluster identity 4711
[  220.488708][ T7966] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'.
[  220.517361][ T7964] tipc: Node number set to 4
[  221.017161][   T30] kauditd_printk_skb: 19 callbacks suppressed
[  221.017183][   T30] audit: type=1326 audit(1743847667.397:118): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7981 comm="syz.1.636" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faf7218d169 code=0x0
[  221.036898][ T7975] xt_CT: No such helper "pptp"
[  221.813640][ T8006] FAULT_INJECTION: forcing a failure.
[  221.813640][ T8006] name failslab, interval 1, probability 0, space 0, times 0
[  221.834934][ T8006] CPU: 0 UID: 0 PID: 8006 Comm: syz.4.644 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  221.834970][ T8006] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  221.834982][ T8006] Call Trace:
[  221.834990][ T8006]  <TASK>
[  221.834999][ T8006]  dump_stack_lvl+0x241/0x360
[  221.835042][ T8006]  ? __pfx_dump_stack_lvl+0x10/0x10
[  221.835068][ T8006]  ? __pfx__printk+0x10/0x10
[  221.835098][ T8006]  ? __pfx___might_resched+0x10/0x10
[  221.835125][ T8006]  should_fail_ex+0x424/0x570
[  221.835150][ T8006]  should_failslab+0xac/0x100
[  221.835300][ T8006]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  221.835327][ T8006]  ? __alloc_skb+0x1c2/0x480
[  221.835350][ T8006]  __alloc_skb+0x1c2/0x480
[  221.835374][ T8006]  ? __pfx___alloc_skb+0x10/0x10
[  221.835395][ T8006]  ? netlink_autobind+0xd6/0x2f0
[  221.835419][ T8006]  ? netlink_autobind+0x2b0/0x2f0
[  221.835448][ T8006]  netlink_sendmsg+0x638/0xcd0
[  221.835486][ T8006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.835515][ T8006]  ? aa_sock_msg_perm+0x91/0x160
[  221.835547][ T8006]  ? __pfx_netlink_sendmsg+0x10/0x10
[  221.835569][ T8006]  __sock_sendmsg+0x221/0x270
[  221.835597][ T8006]  ____sys_sendmsg+0x523/0x860
[  221.835627][ T8006]  ? __pfx_____sys_sendmsg+0x10/0x10
[  221.835644][ T8006]  ? __fget_files+0x2a/0x420
[  221.835664][ T8006]  ? __fget_files+0x2a/0x420
[  221.835690][ T8006]  __sys_sendmsg+0x271/0x360
[  221.835715][ T8006]  ? __pfx___sys_sendmsg+0x10/0x10
[  221.835791][ T8006]  ? do_syscall_64+0xb6/0x230
[  221.835817][ T8006]  do_syscall_64+0xf3/0x230
[  221.835838][ T8006]  ? clear_bhb_loop+0x45/0xa0
[  221.835861][ T8006]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  221.835879][ T8006] RIP: 0033:0x7f2d52b8d169
[  221.835896][ T8006] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  221.835909][ T8006] RSP: 002b:00007f2d53935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  221.835932][ T8006] RAX: ffffffffffffffda RBX: 00007f2d52da5fa0 RCX: 00007f2d52b8d169
[  221.835946][ T8006] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 0000000000000003
[  221.835957][ T8006] RBP: 00007f2d53935090 R08: 0000000000000000 R09: 0000000000000000
[  221.835969][ T8006] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  221.835981][ T8006] R13: 0000000000000000 R14: 00007f2d52da5fa0 R15: 00007f2d52ecfa28
[  221.836011][ T8006]  </TASK>
[  222.072896][    C0] vkms_vblank_simulate: vblank timer overrun
[  222.170447][ T8008] FAULT_INJECTION: forcing a failure.
[  222.170447][ T8008] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  222.190264][ T8008] CPU: 0 UID: 0 PID: 8008 Comm: syz.1.645 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  222.190290][ T8008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  222.190298][ T8008] Call Trace:
[  222.190303][ T8008]  <TASK>
[  222.190308][ T8008]  dump_stack_lvl+0x241/0x360
[  222.190332][ T8008]  ? __pfx_dump_stack_lvl+0x10/0x10
[  222.190349][ T8008]  ? __pfx__printk+0x10/0x10
[  222.190371][ T8008]  should_fail_ex+0x424/0x570
[  222.190387][ T8008]  _copy_from_iter+0x211/0x1c70
[  222.190407][ T8008]  ? alloc_pages_mpol+0x4e6/0x690
[  222.190426][ T8008]  ? __pfx__copy_from_iter+0x10/0x10
[  222.190444][ T8008]  ? set_page_refcounted+0xa1/0x1e0
[  222.190459][ T8008]  ? alloc_pages_noprof+0x136/0x190
[  222.190473][ T8008]  ? page_copy_sane+0x46/0x260
[  222.190489][ T8008]  copy_page_from_iter+0x7a/0x100
[  222.190505][ T8008]  tun_get_user+0x1f6c/0x47c0
[  222.190518][ T8008]  ? tun_get_user+0x852/0x47c0
[  222.190537][ T8008]  ? aa_file_perm+0x139/0xf60
[  222.190554][ T8008]  ? aa_file_perm+0x3f1/0xf60
[  222.190569][ T8008]  ? __pfx_tun_get_user+0x10/0x10
[  222.190590][ T8008]  ? __pfx_ref_tracker_alloc+0x10/0x10
[  222.190612][ T8008]  ? tun_get+0x1e/0x2f0
[  222.190629][ T8008]  ? tun_get+0x1e/0x2f0
[  222.190644][ T8008]  ? tun_get+0x27d/0x2f0
[  222.190662][ T8008]  tun_chr_write_iter+0x10d/0x1f0
[  222.190680][ T8008]  vfs_write+0x70f/0xd10
[  222.190697][ T8008]  ? __pfx_tun_chr_write_iter+0x10/0x10
[  222.190715][ T8008]  ? __pfx_vfs_write+0x10/0x10
[  222.190729][ T8008]  ? __fget_files+0x2a/0x420
[  222.190741][ T8008]  ? __fget_files+0x2a/0x420
[  222.190756][ T8008]  ksys_write+0x19d/0x2d0
[  222.190770][ T8008]  ? __pfx_ksys_write+0x10/0x10
[  222.190786][ T8008]  ? do_syscall_64+0xb6/0x230
[  222.190802][ T8008]  do_syscall_64+0xf3/0x230
[  222.190815][ T8008]  ? clear_bhb_loop+0x45/0xa0
[  222.190828][ T8008]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  222.190839][ T8008] RIP: 0033:0x7faf7218bc1f
[  222.190851][ T8008] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  222.190861][ T8008] RSP: 002b:00007faf6fff6000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  222.190875][ T8008] RAX: ffffffffffffffda RBX: 00007faf723a5fa0 RCX: 00007faf7218bc1f
[  222.190883][ T8008] RDX: 000000000000006a RSI: 0000200000000240 RDI: 00000000000000c8
[  222.190891][ T8008] RBP: 00007faf6fff6090 R08: 0000000000000000 R09: 0000000000000000
[  222.190898][ T8008] R10: 000000000000006a R11: 0000000000000293 R12: 0000000000000001
[  222.190905][ T8008] R13: 0000000000000001 R14: 00007faf723a5fa0 R15: 00007faf724cfa28
[  222.190921][ T8008]  </TASK>
[  222.454166][    C0] vkms_vblank_simulate: vblank timer overrun
[  222.460318][ T5887] usb 4-1: new full-speed USB device number 16 using dummy_hcd
[  222.511759][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'.
[  222.543110][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.4.646'.
[  222.679980][ T5887] usb 4-1: unable to get BOS descriptor or descriptor too short
[  222.758241][ T5887] usb 4-1: not running at top speed; connect to a high speed hub
[  222.827119][ T5887] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config
[  222.867204][ T5887] usb 4-1: New USB device found, idVendor=16ca, idProduct=1502, bcdDevice=51.58
[  222.876316][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  222.922696][ T5887] usb 4-1: Product: syz
[  222.929935][ T8013] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false
[  222.955675][ T5887] usb 4-1: Manufacturer: syz
[  222.980230][ T5887] usb 4-1: SerialNumber: syz
[  223.221132][ T8004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.643'.
[  223.449230][ T5891] IPVS: starting estimator thread 0...
[  223.449536][ T8029] IPVS: wrr: UDP 224.0.0.2:0 - no destination available
[  223.554770][ T8032] IPVS: using max 28 ests per chain, 67200 per kthread
[  223.693905][ T8035] netlink: 68 bytes leftover after parsing attributes in process `syz.4.654'.
[  224.472615][ T8045] input: syz0 as /devices/virtual/input/input11
[  224.708487][ T5887] usb 4-1: USB disconnect, device number 16
[  224.936051][ T8059] xt_TCPMSS: Only works on TCP SYN packets
[  225.286872][  T918] usb 2-1: new high-speed USB device number 22 using dummy_hcd
[  225.286997][ T5887] usb 4-1: new high-speed USB device number 17 using dummy_hcd
[  225.436818][ T5894] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[  225.459030][ T5887] usb 4-1: config 0 has an invalid interface number: 83 but max is 0
[  225.468745][  T918] usb 2-1: config 0 has no interfaces?
[  225.482096][  T918] usb 2-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  225.492381][  T918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  225.493385][ T5887] usb 4-1: config 0 has no interface number 0
[  225.519967][ T5887] usb 4-1: config 0 interface 83 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0
[  225.533184][ T5887] usb 4-1: New USB device found, idVendor=0b48, idProduct=2003, bcdDevice=39.61
[  225.545469][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.566003][ T5887] usb 4-1: config 0 descriptor??
[  225.581257][  T918] usb 2-1: Product: syz
[  225.593725][ T5887] ttusbir 4-1:0.83: cannot find expected altsetting
[  225.629682][  T918] usb 2-1: Manufacturer: syz
[  225.636923][ T5894] usb 3-1: Using ep0 maxpacket: 8
[  225.644489][  T918] usb 2-1: SerialNumber: syz
[  225.661912][ T5894] usb 3-1: config 0 has no interfaces?
[  225.670820][  T918] usb 2-1: config 0 descriptor??
[  225.684754][ T5894] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23
[  225.696362][ T5894] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  225.736011][ T5894] usb 3-1: config 0 descriptor??
[  225.905574][ T5894] usb 4-1: USB disconnect, device number 17
[  226.517384][ T5891] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[  226.695150][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  226.713163][ T5891] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  226.727385][ T5891] usb 1-1: New USB device found, idVendor=13e5, idProduct=0001, bcdDevice=4e.53
[  226.745783][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  226.766578][ T5891] usb 1-1: config 0 descriptor??
[  227.121400][ T5891] usb 1-1: USB disconnect, device number 20
[  227.581370][ T5887] usb 3-1: USB disconnect, device number 24
[  227.903873][  T918] usb 2-1: USB disconnect, device number 22
[  228.654198][ T8112] x_tables: ip6_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT
[  228.788131][ T8114] netlink: 53 bytes leftover after parsing attributes in process `syz.3.675'.
[  229.957052][ T5887] usb 5-1: new high-speed USB device number 31 using dummy_hcd
[  230.116875][ T5887] usb 5-1: Using ep0 maxpacket: 32
[  230.131990][ T5887] usb 5-1: config 0 has an invalid interface number: 51 but max is 0
[  230.141088][ T5887] usb 5-1: config 0 has no interface number 0
[  230.151101][ T5887] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f
[  230.161459][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  230.466745][ T5887] usb 5-1: Product: syz
[  230.472220][ T5887] usb 5-1: Manufacturer: syz
[  230.477381][ T5887] usb 5-1: SerialNumber: syz
[  230.485821][ T5887] usb 5-1: config 0 descriptor??
[  230.503210][ T5887] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected
[  230.711350][ T8129] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  230.747614][ T8129] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  231.303191][ T8153] syz.2.687 (8153): /proc/8152/oom_adj is deprecated, please use /proc/8152/oom_score_adj instead.
[  231.337264][ T5894] usb 2-1: new high-speed USB device number 23 using dummy_hcd
[  231.346510][ T5887] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0
[  231.370080][ T5887] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1
[  231.515148][ T5894] usb 2-1: Using ep0 maxpacket: 8
[  231.548203][    C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71
[  231.560373][ T5891] usb 5-1: USB disconnect, device number 31
[  231.560681][ T5894] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb
[  231.585896][ T5894] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  231.591500][ T5891] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0
[  231.620879][ T5894] usb 2-1: config 0 descriptor??
[  231.639291][ T5891] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1
[  231.666066][ T5891] quatech2 5-1:0.51: device disconnected
[  231.866733][ T5894] asix 2-1:0.0 (unnamed net_device) (uninitialized): invalid hw address, using random
[  232.071013][ T5894] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71
[  232.108624][ T5894] asix 2-1:0.0 (unnamed net_device) (uninitialized): Error reading PHY_ID register: ffffffb9
[  232.147191][ T5894] asix 2-1:0.0: probe with driver asix failed with error -71
[  232.189186][ T5894] usb 2-1: USB disconnect, device number 23
[  232.212722][ T8167] netlink: 4 bytes leftover after parsing attributes in process `syz.2.691'.
[  232.419673][ T5893] usb 5-1: new high-speed USB device number 32 using dummy_hcd
[  232.506743][   T47] usb 1-1: new full-speed USB device number 21 using dummy_hcd
[  232.586333][ T5893] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[  232.606989][ T5893] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.615030][ T5893] usb 5-1: Product: syz
[  232.621788][ T5893] usb 5-1: Manufacturer: syz
[  232.627346][ T5893] usb 5-1: SerialNumber: syz
[  232.639616][ T5893] usb 5-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested
[  232.669179][   T47] usb 1-1: config 162 has an invalid interface number: 251 but max is 1
[  232.673029][ T5891] usb 5-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[  232.687527][   T47] usb 1-1: config 162 has an invalid interface number: 209 but max is 1
[  232.687561][   T47] usb 1-1: config 162 has no interface number 0
[  232.687595][   T47] usb 1-1: config 162 has no interface number 1
[  232.687660][   T47] usb 1-1: config 162 interface 251 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  232.687705][   T47] usb 1-1: config 162 interface 209 altsetting 1 has a duplicate endpoint with address 0x9, skipping
[  232.687730][   T47] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  232.687769][   T47] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x3 has invalid maxpacket 1023, setting to 64
[  232.687796][   T47] usb 1-1: config 162 interface 209 altsetting 1 has an endpoint descriptor with address 0xA6, changing to 0x86
[  232.687832][   T47] usb 1-1: config 162 interface 209 altsetting 1 endpoint 0x86 has invalid maxpacket 23105, setting to 64
[  232.687860][   T47] usb 1-1: config 162 interface 209 altsetting 1 has 5 endpoint descriptors, different from the interface descriptor's value: 4
[  232.687887][   T47] usb 1-1: config 162 interface 251 has no altsetting 0
[  232.687907][   T47] usb 1-1: config 162 interface 209 has no altsetting 0
[  232.690539][   T47] usb 1-1: New USB device found, idVendor=1608, idProduct=0010, bcdDevice=4f.88
[  232.836447][   T47] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  232.848667][   T47] usb 1-1: Product: syz
[  232.853036][   T47] usb 1-1: Manufacturer: syz
[  232.860181][   T47] usb 1-1: SerialNumber: syz
[  233.063610][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802502fc00: rx timeout, send abort
[  233.073807][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802502f400: rx timeout, send abort
[  233.095987][   T47] io_edgeport 1-1:162.251: required endpoints missing
[  233.290874][   T47] io_edgeport 1-1:162.209: Edgeport 2 port adapter converter detected
[  233.572940][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802502fc00: abort rx timeout. Force session deactivation
[  233.585557][    C0] vcan0: j1939_tp_rxtimer: 0xffff88802502f400: abort rx timeout. Force session deactivation
[  233.753975][   T47] usb 1-1: ꒫ꕪ弃쿵㗑媖ꧺ蕞暘嗇䐨鍷Ŀ深ʼꠉꐎ댁괌鰃ꦞ￀  detected
[  233.777194][ T5891] ath9k_htc 5-1:1.0: ath9k_htc: Target is unresponsive
[  233.789277][ T5891] ath9k_htc: Failed to initialize the device
[  233.851044][ T5891] usb 5-1: ath9k_htc: USB layer deinitialized
[  233.977198][   T47] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB0
[  234.038364][   T47] usb 1-1: Edgeport 2 port adapter converter now attached to ttyUSB1
[  234.262254][   T47] usb 1-1: USB disconnect, device number 21
[  234.268384][    C1] usb 1-1: edge_interrupt_callback - Error -19 submitting control urb
[  234.326788][ T8196] netlink: 12 bytes leftover after parsing attributes in process `syz.3.700'.
[  234.415966][   T47] edgeport_2 ttyUSB0: Edgeport 2 port adapter converter now disconnected from ttyUSB0
[  234.535031][   T47] edgeport_2 ttyUSB1: Edgeport 2 port adapter converter now disconnected from ttyUSB1
[  234.552213][   T47] io_edgeport 1-1:162.209: device disconnected
[  234.887732][ T8202] ptrace attach of "./syz-executor exec"[5852] was attempted by ""[8202]
[  234.925944][ T8204] netlink: 368 bytes leftover after parsing attributes in process `syz.0.702'.
[  234.968536][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.702'.
[  235.304922][ T5893] usb 5-1: USB disconnect, device number 32
[  235.987351][ T5887] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[  236.180747][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  236.365347][ T8232] netlink: 32 bytes leftover after parsing attributes in process `syz.0.710'.
[  236.486357][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  236.522269][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  236.533670][ T5887] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00
[  236.543597][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  236.595622][ T5887] usb 3-1: config 0 descriptor??
[  237.087922][ T5887] appleir 0003:05AC:8241.0003: unknown main item tag 0x0
[  237.095081][ T5887] appleir 0003:05AC:8241.0003: unknown main item tag 0x0
[  237.155261][ T5887] appleir 0003:05AC:8241.0003: unknown main item tag 0x0
[  237.186817][ T5887] appleir 0003:05AC:8241.0003: unknown main item tag 0x0
[  237.194757][ T5887] appleir 0003:05AC:8241.0003: unknown main item tag 0x0
[  237.461376][ T5887] appleir 0003:05AC:8241.0003: No inputs registered, leaving
[  237.485113][ T5887] appleir 0003:05AC:8241.0003: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0
[  237.515595][ T5887] usb 3-1: USB disconnect, device number 25
[  238.230412][ T8261] 8021q: adding VLAN 0 to HW filter on device macvlan2
[  238.278232][ T5893] usb 2-1: new high-speed USB device number 24 using dummy_hcd
[  238.460449][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  238.489933][ T5893] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  238.536922][ T5893] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21
[  238.614394][ T5893] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00
[  238.648553][ T5893] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  238.679713][ T5893] usb 2-1: config 0 descriptor??
[  238.756822][ T5887] usb 5-1: new high-speed USB device number 33 using dummy_hcd
[  238.909162][ T5887] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  238.918290][ T5887] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  238.929186][ T5887] usb 5-1: config 1 has 2 interfaces, different from the descriptor's value: 3
[  238.938263][ T5887] usb 5-1: config 1 has no interface number 1
[  238.946776][ T5887] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0
[  238.969377][ T5887] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  238.978969][ T5887] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  238.990993][ T5887] usb 5-1: Product: syz
[  239.000765][ T5887] usb 5-1: Manufacturer: syz
[  239.010047][ T5887] usb 5-1: SerialNumber: syz
[  239.093930][ T5893] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving
[  239.171426][ T5893] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.1-1/input0
[  239.233845][ T5887] usb 5-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0
[  239.246002][ T5887] usb 5-1: MIDIStreaming interface descriptor not found
[  239.361784][ T5887] usb 5-1: USB disconnect, device number 33
[  239.700045][ T5930] udevd[5930]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  239.780032][ T8255] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  239.815766][ T8255] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  240.123013][ T8284] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  240.386765][ T5893] usb 5-1: new high-speed USB device number 34 using dummy_hcd
[  240.568520][ T5893] usb 5-1: device descriptor read/64, error -71
[  240.833634][ T8291] netlink: 8 bytes leftover after parsing attributes in process `syz.3.728'.
[  240.885065][ T8291] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0)
[  240.907065][ T5893] usb 5-1: new high-speed USB device number 35 using dummy_hcd
[  241.071785][ T5893] usb 5-1: device descriptor read/64, error -71
[  241.187410][ T5893] usb usb5-port1: attempt power cycle
[  241.542454][ T5887] usb 2-1: USB disconnect, device number 24
[  241.577345][ T5893] usb 5-1: new high-speed USB device number 36 using dummy_hcd
[  241.635888][ T8309] sch_tbf: burst 7710 is lower than device lo mtu (65550) !
[  241.658625][ T5893] usb 5-1: device descriptor read/8, error -71
[  241.896799][ T5893] usb 5-1: new high-speed USB device number 37 using dummy_hcd
[  241.968299][ T5893] usb 5-1: device descriptor read/8, error -71
[  242.016869][ T5887] usb 2-1: new low-speed USB device number 25 using dummy_hcd
[  242.080404][ T5893] usb usb5-port1: unable to enumerate USB device
[  242.190567][ T5887] usb 2-1: config 0 has an invalid interface number: 55 but max is 0
[  242.219831][ T5887] usb 2-1: config 0 has no interface number 0
[  242.233511][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  242.256989][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0xE has invalid maxpacket 32, setting to 8
[  242.300116][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B
[  242.377212][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10
[  242.388750][ T5887] usb 2-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 8
[  242.459136][ T5887] usb 2-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  242.480514][ T5887] usb 2-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a
[  242.584260][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  242.608307][ T5887] usb 2-1: config 0 descriptor??
[  242.614324][ T8311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.724426][ T8311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  242.762927][ T5887] ldusb 2-1:0.55: LD USB Device #0 now attached to major 180 minor 0
[  243.837953][ T5891] usb 5-1: new low-speed USB device number 38 using dummy_hcd
[  243.979707][  T918] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[  244.008865][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  244.019942][ T5891] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[  244.033545][ T5891] usb 5-1: New USB device found, idVendor=12d1, idProduct=42f7, bcdDevice=aa.47
[  244.044806][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  244.056853][ T5891] usb 5-1: config 0 descriptor??
[  244.146861][  T918] usb 3-1: Using ep0 maxpacket: 32
[  244.157366][  T918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  244.169071][  T918] usb 3-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  244.182255][  T918] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  244.191681][  T918] usb 3-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  244.200259][  T918] usb 3-1: Product: syz
[  244.204640][  T918] usb 3-1: Manufacturer: syz
[  244.216352][  T918] hub 3-1:4.0: USB hub found
[  244.236807][    T9] usb 4-1: new high-speed USB device number 18 using dummy_hcd
[  244.263748][ T5891] usb 5-1: string descriptor 0 read error: -71
[  244.273457][ T5891] qmi_wwan 5-1:0.0: probe with driver qmi_wwan failed with error -22
[  244.285729][ T5891] usb 5-1: USB disconnect, device number 38
[  244.366942][    T9] usb 4-1: device descriptor read/64, error -71
[  244.473611][ T5887] usb 2-1: USB disconnect, device number 25
[  244.493372][ T5887] ldusb 2-1:0.55: LD USB Device #0 now disconnected
[  244.616834][    T9] usb 4-1: new high-speed USB device number 19 using dummy_hcd
[  244.625896][  T918] hub 3-1:4.0: config failed, can't read hub descriptor (err -22)
[  244.770743][    T9] usb 4-1: device descriptor read/64, error -71
[  244.817641][ T5887] usb 3-1: USB disconnect, device number 26
[  244.887372][    T9] usb usb4-port1: attempt power cycle
[  245.227043][    T9] usb 4-1: new high-speed USB device number 20 using dummy_hcd
[  245.267479][    T9] usb 4-1: device descriptor read/8, error -71
[  245.538880][    T9] usb 4-1: new high-speed USB device number 21 using dummy_hcd
[  245.577726][    T9] usb 4-1: device descriptor read/8, error -71
[  245.727342][    T9] usb usb4-port1: unable to enumerate USB device
[  245.855875][ T8393] netlink: 'syz.4.757': attribute type 7 has an invalid length.
[  245.907605][ T5891] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[  246.076936][ T5891] usb 1-1: Using ep0 maxpacket: 16
[  246.089635][ T5891] usb 1-1: unable to get BOS descriptor or descriptor too short
[  246.101093][ T5891] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  246.111558][ T5891] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 1
[  246.658629][ T5891] usb 1-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.40
[  246.668108][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  246.677179][ T5891] usb 1-1: Product: syz
[  246.681907][ T5891] usb 1-1: Manufacturer: syz
[  246.686545][ T5891] usb 1-1: SerialNumber: syz
[  246.918622][ T5891] usb 1-1: USB disconnect, device number 22
[  248.466778][   T30] audit: type=1326 audit(1743847694.847:119): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.556501][   T30] audit: type=1326 audit(1743847694.847:120): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.598043][ T8439] netlink: 'syz.4.770': attribute type 1 has an invalid length.
[  248.614321][   T30] audit: type=1326 audit(1743847694.877:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.699323][   T30] audit: type=1326 audit(1743847694.877:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.724672][   T30] audit: type=1326 audit(1743847694.877:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.749567][   T30] audit: type=1326 audit(1743847694.917:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.784685][   T30] audit: type=1326 audit(1743847694.917:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.846806][   T30] audit: type=1326 audit(1743847694.917:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  248.961067][   T47] usb 5-1: new high-speed USB device number 39 using dummy_hcd
[  249.016027][ T5887] usb 4-1: new high-speed USB device number 22 using dummy_hcd
[  249.142919][   T30] audit: type=1326 audit(1743847694.917:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f40ca78cd6b code=0x7ffc0000
[  249.175894][   T47] usb 5-1: device descriptor read/64, error -71
[  249.209077][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  249.224898][   T30] audit: type=1326 audit(1743847694.917:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8436 comm="syz.0.768" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f40ca78bad0 code=0x7ffc0000
[  249.266848][ T5887] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40
[  249.272955][    T9] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[  249.291169][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.317508][ T1208] usb 3-1: new full-speed USB device number 27 using dummy_hcd
[  249.340929][ T5887] usb 4-1: config 0 descriptor??
[  249.427072][   T47] usb 5-1: new high-speed USB device number 40 using dummy_hcd
[  249.456925][    T9] usb 2-1: Using ep0 maxpacket: 32
[  249.468676][    T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27)
[  249.483921][    T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32
[  249.502465][    T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92
[  249.512102][    T9] usb 2-1: config 1 has no interface number 0
[  249.522974][    T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  249.534296][    T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17
[  249.535908][ T1208] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  249.555319][    T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8
[  249.571878][    T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  249.578679][ T5887] usbhid 4-1:0.0: can't add hid device: -71
[  249.597715][ T5887] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  249.607469][   T47] usb 5-1: device descriptor read/64, error -71
[  249.628357][ T1208] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[  249.643064][ T5887] usb 4-1: USB disconnect, device number 22
[  249.655981][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found
[  249.673248][ T1208] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  249.706519][ T1208] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  249.722270][   T47] usb usb5-port1: attempt power cycle
[  249.727863][ T1208] usb 3-1: Product: syz
[  249.732061][ T1208] usb 3-1: Manufacturer: syz
[  249.739068][ T1208] usb 3-1: SerialNumber: syz
[  249.847236][   T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[  249.870073][    T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached
[  249.964158][ T8453] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  249.973166][ T8453] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  249.993892][ T1208] usb 3-1: 0:2 : does not exist
[  249.999652][   T24] usb 1-1: Using ep0 maxpacket: 8
[  250.011494][   T24] usb 1-1: config 0 has an invalid interface number: 176 but max is 2
[  250.022789][   T24] usb 1-1: config 0 has an invalid interface number: 49 but max is 2
[  250.034359][ T1208] usb 3-1: 5:0: failed to get current value for ch 0 (-22)
[  250.042742][   T24] usb 1-1: config 0 has no interface number 1
[  250.050356][   T24] usb 1-1: config 0 has no interface number 2
[  250.059380][   T24] usb 1-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac
[  250.072996][   T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.086013][   T47] usb 5-1: new high-speed USB device number 41 using dummy_hcd
[  250.106817][ T1208] usb 3-1: USB disconnect, device number 27
[  250.115393][   T24] usb 1-1: config 0 descriptor??
[  250.121411][ T5887] usb 4-1: new high-speed USB device number 23 using dummy_hcd
[  250.133663][   T24] qmi_wwan 1-1:0.0: probe with driver qmi_wwan failed with error -22
[  250.149440][   T47] usb 5-1: device descriptor read/8, error -71
[  250.296753][ T5887] usb 4-1: Using ep0 maxpacket: 16
[  250.304409][ T5887] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  250.316081][ T5887] usb 4-1: New USB device found, idVendor=077d, idProduct=0410, bcdDevice= 0.40
[  250.325718][ T5887] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  250.343773][ T8455] netlink: 24 bytes leftover after parsing attributes in process `syz.0.774'.
[  250.354708][ T8455] netlink: 12 bytes leftover after parsing attributes in process `syz.0.774'.
[  250.365646][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card4/controlC4/../uevent} for writing: No such file or directory
[  250.387499][   T24] usb 1-1: Could not set interface, error -71
[  250.407928][   T24] usb 1-1: USB disconnect, device number 23
[  250.440150][ T5887] usb 4-1: config 0 descriptor??
[  250.456761][   T47] usb 5-1: new high-speed USB device number 42 using dummy_hcd
[  250.508352][   T47] usb 5-1: device descriptor read/8, error -71
[  250.617646][   T47] usb usb5-port1: unable to enumerate USB device
[  250.650458][ T5887] powermate: Expected payload of 3--6 bytes, found 8 bytes!
[  250.662355][ T5887] input: Griffin PowerMate as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input13
[  251.169949][    C1] powermate: config urb returned -71
[  251.178496][    C1] powermate: config urb returned -71
[  251.184041][    C1] powermate: config urb returned -71
[  251.191434][    C1] powermate: config urb returned -71
[  251.197459][ T5887] usb 4-1: USB disconnect, device number 23
[  251.203505][    C1] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19
[  251.348701][ T5891] snd_usb_pod 2-1:1.1: line6_send_raw_message_async_part: usb_submit_urb failed (-22)
[  251.362579][ T8469] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  251.456779][ T8470] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  251.651340][ T5887] usb 2-1: USB disconnect, device number 26
[  251.685378][ T5887] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected
[  252.027040][   T47] usb 5-1: new high-speed USB device number 43 using dummy_hcd
[  252.186814][ T5887] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[  252.200723][   T47] usb 5-1: Using ep0 maxpacket: 8
[  252.228347][   T47] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[  252.269282][   T47] usb 5-1: New USB device found, idVendor=056a, idProduct=0300, bcdDevice= 0.00
[  252.286430][   T47] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.309449][   T47] usb 5-1: rejected 1 configuration due to insufficient available bus power
[  252.319178][   T47] usb 5-1: no configuration chosen from 1 choice
[  252.408985][ T5887] usb 2-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  252.428870][ T5887] usb 2-1: config 0 interface 0 has no altsetting 0
[  252.448452][ T5887] usb 2-1: New USB device found, idVendor=044e, idProduct=1215, bcdDevice= 0.00
[  252.612559][ T5891] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[  252.626767][ T5887] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  252.650482][ T5887] usb 2-1: config 0 descriptor??
[  252.766999][ T5891] usb 1-1: Using ep0 maxpacket: 8
[  252.795054][ T5891] usb 1-1: config 210 has an invalid interface number: 63 but max is 1
[  252.805089][ T5891] usb 1-1: config 210 has an invalid interface number: 193 but max is 1
[  252.814094][ T5891] usb 1-1: config 210 has an invalid interface number: 208 but max is 1
[  252.823791][ T5891] usb 1-1: config 210 has 3 interfaces, different from the descriptor's value: 2
[  252.833702][ T5891] usb 1-1: config 210 has no interface number 0
[  252.840186][ T5891] usb 1-1: config 210 has no interface number 1
[  252.846781][ T5891] usb 1-1: config 210 has no interface number 2
[  252.854011][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0xB has invalid maxpacket 512, setting to 64
[  252.867208][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0xE has invalid maxpacket 1024, setting to 64
[  252.878653][    T9] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[  252.886467][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0xD has invalid maxpacket 1024, setting to 64
[  252.898263][ T5891] usb 1-1: config 210 interface 63 altsetting 1 has a duplicate endpoint with address 0xB, skipping
[  252.910315][ T5891] usb 1-1: config 210 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  252.921519][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0x8 has an invalid bInterval 255, changing to 11
[  252.933055][ T5891] usb 1-1: config 210 interface 63 altsetting 1 bulk endpoint 0xF has invalid maxpacket 16
[  252.943952][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0x6 has invalid maxpacket 512, setting to 64
[  252.955302][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64
[  252.977906][ T5891] usb 1-1: config 210 interface 63 altsetting 1 endpoint 0x1 has invalid maxpacket 1024, setting to 64
[  252.995003][ T5891] usb 1-1: config 210 interface 63 altsetting 1 has a duplicate endpoint with address 0x6, skipping
[  253.013074][ T5891] usb 1-1: config 210 interface 63 altsetting 1 has an invalid descriptor for endpoint zero, skipping
[  253.025326][ T5891] usb 1-1: config 210 interface 193 altsetting 3 endpoint 0x9 has an invalid bInterval 198, changing to 7
[  253.037537][ T5891] usb 1-1: config 210 interface 193 altsetting 3 endpoint 0x7 has an invalid bInterval 253, changing to 7
[  253.052707][ T5891] usb 1-1: config 210 interface 193 altsetting 3 has a duplicate endpoint with address 0xB, skipping
[  253.066465][    T9] usb 3-1: Using ep0 maxpacket: 32
[  253.071857][ T5891] usb 1-1: config 210 interface 193 altsetting 3 endpoint 0xA has an invalid bInterval 215, changing to 7
[  253.085649][    T9] usb 3-1: config 0 has an invalid interface number: 231 but max is 0
[  253.099049][ T5891] usb 1-1: config 210 interface 193 altsetting 3 has 4 endpoint descriptors, different from the interface descriptor's value: 10
[  253.114499][    T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  253.125336][ T5891] usb 1-1: too many endpoints for config 210 interface 208 altsetting 47: 92, using maximum allowed: 30
[  253.151428][    T9] usb 3-1: config 0 has no interface number 0
[  253.160780][    T9] usb 3-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023
[  253.179868][ T5891] usb 1-1: config 210 interface 208 altsetting 47 endpoint 0x2 has invalid maxpacket 512, setting to 64
[  253.192437][    T9] usb 3-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5
[  253.212258][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has a duplicate endpoint with address 0xE, skipping
[  253.224221][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has an endpoint descriptor with address 0xAC, changing to 0x8C
[  253.246316][ T5891] usb 1-1: config 210 interface 208 altsetting 47 endpoint 0x8C has invalid maxpacket 12670, setting to 1024
[  253.266835][    T9] usb 3-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9
[  253.291464][    T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.300583][ T5891] usb 1-1: config 210 interface 208 altsetting 47 bulk endpoint 0x8C has invalid maxpacket 1024
[  253.311572][    T9] usb 3-1: Product: syz
[  253.315770][    T9] usb 3-1: Manufacturer: syz
[  253.321103][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has a duplicate endpoint with address 0xC, skipping
[  253.332574][    T9] usb 3-1: SerialNumber: syz
[  253.343137][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has a duplicate endpoint with address 0x9, skipping
[  253.356873][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has a duplicate endpoint with address 0x82, skipping
[  253.372371][ T5891] usb 1-1: config 210 interface 208 altsetting 47 has 7 endpoint descriptors, different from the interface descriptor's value: 92
[  253.387385][    T9] usb 3-1: config 0 descriptor??
[  253.395147][ T8493] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[  253.411243][    T9] usb-storage 3-1:0.231: USB Mass Storage device detected
[  253.418717][ T5891] usb 1-1: config 210 interface 63 has no altsetting 0
[  253.425976][ T5891] usb 1-1: config 210 interface 193 has no altsetting 0
[  253.435870][ T5891] usb 1-1: config 210 interface 208 has no altsetting 0
[  253.450595][ T5891] usb 1-1: Dual-Role OTG device on HNP port
[  253.457857][ T5891] usb 1-1: New USB device found, idVendor=19d2, idProduct=0079, bcdDevice=10.3c
[  253.467869][ T5891] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  253.478252][ T5891] usb 1-1: Product: ဌ
[  253.484335][ T5891] usb 1-1: Manufacturer: 㦨灷꞊뢘䢇坄뀹臊ꎏ瘊㓫偹艊䐏镺嬃痳ꙫ澔꜊薋쑮
[  253.496017][ T5891] usb 1-1: SerialNumber: ᅽꭢ柆屁륌뎆ᶌㅘ숂ㅘ몓≮ﰟۼ缍늨徚隩⭡犆ಯ估૩倲尦埭ꏶ癹棧
[  253.531464][ T8491] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  253.548128][ T8491] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22
[  253.581343][ T8511] netlink: 'syz.3.791': attribute type 21 has an invalid length.
[  253.591898][ T8511] netlink: 132 bytes leftover after parsing attributes in process `syz.3.791'.
[  253.686532][    T9] usb 3-1: USB disconnect, device number 28
[  254.711789][   T24] usb 5-1: USB disconnect, device number 43
[  254.760751][ T5891] option 1-1:210.63: GSM modem (1-port) converter detected
[  254.907322][ T5887] usbhid 2-1:0.0: can't add hid device: -71
[  254.913553][ T5887] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  254.964351][ T5891] usb 1-1: USB disconnect, device number 24
[  254.994492][ T5887] usb 2-1: USB disconnect, device number 27
[  255.053426][ T5891] option 1-1:210.63: device disconnected
[  255.127185][ T8533] netlink: 40 bytes leftover after parsing attributes in process `syz.2.797'.
[  255.212812][ T8537] FAULT_INJECTION: forcing a failure.
[  255.212812][ T8537] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  255.257060][  T918] usb 5-1: new high-speed USB device number 44 using dummy_hcd
[  255.276121][ T8537] CPU: 0 UID: 0 PID: 8537 Comm: syz.3.799 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  255.276150][ T8537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  255.276161][ T8537] Call Trace:
[  255.276169][ T8537]  <TASK>
[  255.276178][ T8537]  dump_stack_lvl+0x241/0x360
[  255.276211][ T8537]  ? __pfx_dump_stack_lvl+0x10/0x10
[  255.276237][ T8537]  ? __pfx__printk+0x10/0x10
[  255.276282][ T8537]  should_fail_ex+0x424/0x570
[  255.276307][ T8537]  _copy_from_user+0x2d/0xb0
[  255.276334][ T8537]  input_event_from_user+0x211/0x510
[  255.276359][ T8537]  ? __pfx_input_event_from_user+0x10/0x10
[  255.276392][ T8537]  evdev_write+0x4c4/0x7d0
[  255.276421][ T8537]  ? __pfx_evdev_write+0x10/0x10
[  255.276441][ T8537]  ? bpf_lsm_file_permission+0x9/0x10
[  255.276463][ T8537]  ? rw_verify_area+0x246/0x630
[  255.276482][ T8537]  ? __pfx_evdev_write+0x10/0x10
[  255.276501][ T8537]  vfs_write+0x2bc/0xd10
[  255.276534][ T8537]  ? __pfx_vfs_write+0x10/0x10
[  255.276556][ T8537]  ? __fget_files+0x2a/0x420
[  255.276572][ T8537]  ? __fget_files+0x2a/0x420
[  255.276590][ T8537]  ? __fget_files+0x39d/0x420
[  255.276605][ T8537]  ? __fget_files+0x2a/0x420
[  255.276630][ T8537]  ksys_write+0x19d/0x2d0
[  255.276653][ T8537]  ? __pfx_ksys_write+0x10/0x10
[  255.276680][ T8537]  ? do_syscall_64+0xb6/0x230
[  255.276705][ T8537]  do_syscall_64+0xf3/0x230
[  255.276727][ T8537]  ? clear_bhb_loop+0x45/0xa0
[  255.276750][ T8537]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  255.276768][ T8537] RIP: 0033:0x7f1c9538d169
[  255.276786][ T8537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  255.276802][ T8537] RSP: 002b:00007f1c961b5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001
[  255.276825][ T8537] RAX: ffffffffffffffda RBX: 00007f1c955a6080 RCX: 00007f1c9538d169
[  255.276838][ T8537] RDX: 00000000000012d8 RSI: 0000200000000040 RDI: 0000000000000006
[  255.276850][ T8537] RBP: 00007f1c961b5090 R08: 0000000000000000 R09: 0000000000000000
[  255.276870][ T8537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  255.276882][ T8537] R13: 0000000000000000 R14: 00007f1c955a6080 R15: 00007f1c956cfa28
[  255.276912][ T8537]  </TASK>
[  255.716745][  T918] usb 5-1: Using ep0 maxpacket: 8
[  255.729490][  T918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  255.740399][  T918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E
[  255.754370][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7
[  255.765475][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0
[  255.775652][  T918] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[  255.791706][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[  255.799905][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[  255.866179][  T918] usb 5-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46
[  255.877714][  T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35
[  255.886419][  T918] usb 5-1: Product: syz
[  255.940164][  T918] usb 5-1: Manufacturer: syz
[  255.997886][  T918] usb 5-1: SerialNumber: syz
[  256.025167][  T918] usb 5-1: config 0 descriptor??
[  256.273759][  T918] radio-si470x 5-1:0.0: DeviceID=0x0000 ChipID=0x0000
[  256.284570][  T918] radio-si470x 5-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0.
[  256.390132][ T5887] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[  256.487780][  T918] radio-si470x 5-1:0.0: si470x_get_report: usb_control_msg returned -71
[  256.508827][  T918] radio-si470x 5-1:0.0: si470x_get_scratch: si470x_get_report returned -71
[  256.693238][ T5887] usb 3-1: Using ep0 maxpacket: 16
[  256.703485][  T918] radio-si470x 5-1:0.0: probe with driver radio-si470x failed with error -5
[  256.722590][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  256.775575][  T918] usb 5-1: USB disconnect, device number 44
[  256.786854][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[  256.798491][ T5887] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[  256.830663][ T5887] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[  256.866585][ T5887] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[  256.887095][ T5887] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[  256.914777][ T5887] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[  256.948635][ T5887] usb 3-1: Manufacturer: syz
[  256.956801][   T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[  256.970145][ T5887] usb 3-1: config 0 descriptor??
[  257.099713][   T10] usb 1-1: device descriptor read/64, error -71
[  257.266705][ T5887] rc_core: IR keymap rc-hauppauge not found
[  257.275246][ T5887] Registered IR keymap rc-empty
[  257.284622][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.316820][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.338415][ T5887] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[  257.361368][ T5887] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input14
[  257.376874][   T10] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[  257.452028][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.496928][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.536919][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.706912][   T10] usb 1-1: device descriptor read/64, error -71
[  257.766971][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.787495][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.827054][   T10] usb usb1-port1: attempt power cycle
[  257.837077][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.951303][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  257.986916][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  258.006812][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  258.057019][ T5887] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[  258.060762][ T8576] netlink: 8 bytes leftover after parsing attributes in process `syz.1.808'.
[  258.080781][ T5887] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[  258.100106][ T5887] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[  258.156960][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'.
[  258.176749][   T10] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[  258.247972][   T10] usb 1-1: device descriptor read/8, error -71
[  258.255313][ T8576] netlink: 24 bytes leftover after parsing attributes in process `syz.1.808'.
[  258.488169][   T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[  258.517617][   T10] usb 1-1: device descriptor read/8, error -71
[  258.638727][   T10] usb usb1-port1: unable to enumerate USB device
[  259.143981][ T8583] IPv6: Can't replace route, no match found
[  259.423695][ T8587] netlink: 45 bytes leftover after parsing attributes in process `syz.4.812'.
[  260.041149][ T5887] usb 3-1: USB disconnect, device number 29
[  260.646931][   T10] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[  260.726865][    T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd
[  260.856776][   T10] usb 3-1: Using ep0 maxpacket: 16
[  260.863735][   T10] usb 3-1: config 0 has an invalid descriptor of length 215, skipping remainder of the config
[  260.876939][   T10] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  260.890671][   T10] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00
[  260.900498][   T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.918789][   T10] usb 3-1: config 0 descriptor??
[  260.933157][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  260.947010][    T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  260.957224][    T9] usb 4-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00
[  260.966453][    T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  260.984405][    T9] usb 4-1: config 0 descriptor??
[  261.221286][ T8594] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  261.240326][ T8594] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  261.296368][ T8594] netlink: 4 bytes leftover after parsing attributes in process `syz.3.815'.
[  261.330306][ T8594] batadv0: entered promiscuous mode
[  261.337321][ T8594] macvtap1: entered promiscuous mode
[  261.342974][ T8594] macvtap1: entered allmulticast mode
[  261.353072][ T8594] batadv0: entered allmulticast mode
[  261.368140][ T8594] 8021q: adding VLAN 0 to HW filter on device macvtap1
[  261.384056][ T8602] batadv0: left allmulticast mode
[  261.390364][ T8602] batadv0: left promiscuous mode
[  261.553201][    T9] usbhid 4-1:0.0: can't add hid device: -71
[  261.561147][    T9] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[  261.573550][    T9] usb 4-1: USB disconnect, device number 24
[  262.345033][ T8614] netlink: 4 bytes leftover after parsing attributes in process `syz.4.821'.
[  262.497122][    T9] usb 4-1: new full-speed USB device number 25 using dummy_hcd
[  262.554586][ T8622] dccp_invalid_packet: P.Data Offset(0) too small
[  262.672431][    T9] usb 4-1: config 0 has an invalid interface number: 214 but max is 0
[  262.680938][    T9] usb 4-1: config 0 has no interface number 0
[  262.692206][    T9] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64
[  262.708671][    T9] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5
[  262.719310][    T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  262.739019][    T9] usb 4-1: Product: syz
[  262.744266][    T9] usb 4-1: Manufacturer: syz
[  262.749931][    T9] usb 4-1: SerialNumber: syz
[  262.756985][ T5892] usb 5-1: new high-speed USB device number 45 using dummy_hcd
[  262.772914][    T9] usb 4-1: config 0 descriptor??
[  262.906754][ T5892] usb 5-1: device descriptor read/64, error -71
[  263.166812][ T5892] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[  263.263708][   T10] usb 3-1: string descriptor 0 read error: -71
[  263.317219][ T5892] usb 5-1: device descriptor read/64, error -71
[  263.339139][   T10] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[  263.372939][   T10] usb 3-1: USB disconnect, device number 30
[  263.467513][ T5892] usb usb5-port1: attempt power cycle
[  263.513425][    T9] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.214/input/input15
[  263.806768][ T5892] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[  263.849068][ T8637] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  263.877376][ T5892] usb 5-1: device descriptor read/8, error -71
[  264.016989][ T8637] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  264.107842][ T8641] netlink: 53 bytes leftover after parsing attributes in process `syz.1.831'.
[  264.220002][ T8635] bridge0: port 2(bridge_slave_1) entered disabled state
[  264.229263][ T8635] bridge0: port 1(bridge_slave_0) entered disabled state
[  264.307207][ T5892] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[  264.338709][ T5892] usb 5-1: device descriptor read/8, error -71
[  264.405222][ T8635] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  264.417046][ T8635] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  264.481147][ T5892] usb usb5-port1: unable to enumerate USB device
[  264.833218][ T8635] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.858192][ T8635] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.881274][ T8635] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[  264.902352][ T8635] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[  265.104168][ T8650] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3)
[  265.110718][ T8650] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed)
[  265.122285][ T8650] vhci_hcd vhci_hcd.0: Device attached
[  265.275847][ T8651] vhci_hcd: connection closed
[  265.277441][ T1148] vhci_hcd: stop threads
[  265.288024][ T1148] vhci_hcd: release socket
[  265.293691][ T1148] vhci_hcd: disconnect device
[  265.306796][ T5893] vhci_hcd: vhci_device speed not set
[  265.870829][ T5887] usb 4-1: USB disconnect, device number 25
[  266.667208][ T5887] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[  266.858361][ T5887] usb 4-1: Using ep0 maxpacket: 16
[  266.865610][ T5887] usb 4-1: config 1 contains an unexpected descriptor of type 0x2, skipping
[  266.876774][ T5887] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  266.906913][ T5887] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3
[  266.919145][ T5887] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  267.026884][ T5887] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  267.137101][   T10] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[  267.146876][ T5887] usb 4-1: Product: syz
[  267.151179][ T5887] usb 4-1: Manufacturer: syz
[  267.155895][ T5887] usb 4-1: SerialNumber: syz
[  267.336857][   T10] usb 2-1: Using ep0 maxpacket: 32
[  267.350531][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  267.370404][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  267.553587][ T8689] netlink: 24 bytes leftover after parsing attributes in process `syz.4.842'.
[  267.629227][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  267.630355][ T5887] usb 4-1: 0:2 : does not exist
[  267.647833][ T5887] usb 4-1: 1:0: cannot get min/max values for control 4 (id 1)
[  267.671563][ T5887] usb 4-1: USB disconnect, device number 26
[  267.688553][   T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  267.756238][   T10] usb 2-1: Product: syz
[  267.788816][   T10] usb 2-1: Manufacturer: syz
[  267.813939][   T10] hub 2-1:4.0: USB hub found
[  268.161781][ T8707] FAULT_INJECTION: forcing a failure.
[  268.161781][ T8707] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  268.175662][ T8707] CPU: 1 UID: 0 PID: 8707 Comm: syz.0.848 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  268.175691][ T8707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  268.175708][ T8707] Call Trace:
[  268.175716][ T8707]  <TASK>
[  268.175725][ T8707]  dump_stack_lvl+0x241/0x360
[  268.175761][ T8707]  ? __pfx_dump_stack_lvl+0x10/0x10
[  268.175786][ T8707]  ? __pfx__printk+0x10/0x10
[  268.175824][ T8707]  should_fail_ex+0x424/0x570
[  268.175851][ T8707]  _copy_to_user+0x31/0xb0
[  268.175876][ T8707]  simple_read_from_buffer+0xc4/0x170
[  268.175907][ T8707]  proc_fail_nth_read+0x1ef/0x260
[  268.175930][ T8707]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  268.175953][ T8707]  ? rw_verify_area+0x246/0x630
[  268.175972][ T8707]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  268.175993][ T8707]  vfs_read+0x21f/0xb90
[  268.176021][ T8707]  ? __pfx___mutex_lock+0x10/0x10
[  268.176045][ T8707]  ? __pfx_vfs_read+0x10/0x10
[  268.176070][ T8707]  ? __fget_files+0x2a/0x420
[  268.176089][ T8707]  ? __fget_files+0x39d/0x420
[  268.176103][ T8707]  ? __fget_files+0x2a/0x420
[  268.176130][ T8707]  ksys_read+0x19d/0x2d0
[  268.176153][ T8707]  ? __pfx_ksys_read+0x10/0x10
[  268.176181][ T8707]  ? do_syscall_64+0xb6/0x230
[  268.176213][ T8707]  do_syscall_64+0xf3/0x230
[  268.176234][ T8707]  ? clear_bhb_loop+0x45/0xa0
[  268.176256][ T8707]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  268.176274][ T8707] RIP: 0033:0x7f40ca78bb7c
[  268.176292][ T8707] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  268.176308][ T8707] RSP: 002b:00007f40cb503030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  268.176330][ T8707] RAX: ffffffffffffffda RBX: 00007f40ca9a5fa0 RCX: 00007f40ca78bb7c
[  268.176344][ T8707] RDX: 000000000000000f RSI: 00007f40cb5030a0 RDI: 0000000000000004
[  268.176356][ T8707] RBP: 00007f40cb503090 R08: 0000000000000000 R09: 0000000000000000
[  268.176368][ T8707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  268.176379][ T8707] R13: 0000000000000000 R14: 00007f40ca9a5fa0 R15: 00007f40caacfa28
[  268.176407][ T8707]  </TASK>
[  268.228193][   T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  268.244775][ T5887] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[  268.475446][ T8710] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'.
[  268.485992][ T8456] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[  268.547328][ T5887] usb 4-1: device descriptor read/64, error -71
[  268.607660][   T10] usb 2-1: USB disconnect, device number 28
[  268.646757][ T8456] usb 5-1: Using ep0 maxpacket: 32
[  268.655729][ T8456] usb 5-1: New USB device found, idVendor=052b, idProduct=1803, bcdDevice= c.62
[  268.675971][ T8456] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  268.687592][ T8456] usb 5-1: config 0 descriptor??
[  268.695733][ T8456] gspca_main: sunplus-2.14.0 probing 052b:1803
[  268.817137][ T5887] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[  268.917894][ T8715] netlink: 53 bytes leftover after parsing attributes in process `syz.2.851'.
[  268.956843][ T5887] usb 4-1: device descriptor read/64, error -71
[  269.067314][ T5887] usb usb4-port1: attempt power cycle
[  269.101021][   T10] usb 5-1: USB disconnect, device number 49
[  269.201488][ T8724] dvmrp0: entered allmulticast mode
[  269.416950][ T5887] usb 4-1: new high-speed USB device number 29 using dummy_hcd
[  269.461239][ T5887] usb 4-1: device descriptor read/8, error -71
[  269.496762][ T5893] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[  269.668252][ T5893] usb 2-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00
[  269.684080][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  269.701351][ T5893] usb 2-1: Product: syz
[  269.712174][ T5893] usb 2-1: Manufacturer: syz
[  269.720258][ T5893] usb 2-1: SerialNumber: syz
[  269.722936][ T5887] usb 4-1: new high-speed USB device number 30 using dummy_hcd
[  269.736095][ T5893] usb 2-1: config 0 descriptor??
[  269.769053][ T5887] usb 4-1: device descriptor read/8, error -71
[  269.887172][ T5887] usb usb4-port1: unable to enumerate USB device
[  270.053983][ T5893] hso 2-1:0.0: Failed to find BULK IN ep
[  270.202548][ T5890] udevd[5890]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory
[  270.223227][ T5893] usb-storage 2-1:0.0: USB Mass Storage device detected
[  270.234630][ T8729] netlink: 'syz.1.855': attribute type 5 has an invalid length.
[  270.259540][ T8729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.855'.
[  270.392422][ T5893] usb 2-1: USB disconnect, device number 29
[  270.566967][   T10] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[  270.726778][   T10] usb 5-1: Using ep0 maxpacket: 32
[  270.733655][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  270.752313][   T10] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  270.763955][   T10] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  270.773448][   T10] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  270.783678][   T10] usb 5-1: Product: syz
[  270.787909][   T10] usb 5-1: Manufacturer: syz
[  270.797990][   T10] hub 5-1:4.0: USB hub found
[  271.233630][   T10] hub 5-1:4.0: 2 ports detected
[  271.276763][ T5887] usb 4-1: new high-speed USB device number 31 using dummy_hcd
[  271.308605][ T8759] netlink: 24 bytes leftover after parsing attributes in process `syz.1.864'.
[  271.436959][ T5887] usb 4-1: Using ep0 maxpacket: 32
[  271.458110][ T5887] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  271.480729][ T5887] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  271.508586][ T5887] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  271.526792][ T5887] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  271.535179][ T5887] usb 4-1: Product: syz
[  271.546961][ T5887] usb 4-1: Manufacturer: syz
[  271.582090][   T10] hub 5-1:4.0: hub_hub_status failed (err = -71)
[  271.604931][   T10] hub 5-1:4.0: config failed, can't get hub status (err -71)
[  271.631275][ T5887] hub 4-1:4.0: USB hub found
[  271.658984][   T10] usb 5-1: USB disconnect, device number 50
[  272.017158][ T5887] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  272.067912][ T5887] usb 4-1: USB disconnect, device number 31
[  272.442790][ T8771] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN
[  272.449835][ T8771] netlink: 4 bytes leftover after parsing attributes in process `syz.2.867'.
[  274.001059][ T8787] FAULT_INJECTION: forcing a failure.
[  274.001059][ T8787] name failslab, interval 1, probability 0, space 0, times 0
[  274.029349][ T8787] CPU: 1 UID: 0 PID: 8787 Comm: syz.1.872 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  274.029380][ T8787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  274.029391][ T8787] Call Trace:
[  274.029399][ T8787]  <TASK>
[  274.029408][ T8787]  dump_stack_lvl+0x241/0x360
[  274.029444][ T8787]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.029469][ T8787]  ? __pfx__printk+0x10/0x10
[  274.029498][ T8787]  ? __pfx___might_resched+0x10/0x10
[  274.029524][ T8787]  should_fail_ex+0x424/0x570
[  274.029549][ T8787]  should_failslab+0xac/0x100
[  274.029574][ T8787]  __kmalloc_cache_noprof+0x73/0x370
[  274.029595][ T8787]  ? shrinker_alloc+0x57/0xab0
[  274.029617][ T8787]  ? pcpu_alloc_noprof+0xfa9/0x1740
[  274.029641][ T8787]  shrinker_alloc+0x57/0xab0
[  274.029669][ T8787]  ? __raw_spin_lock_init+0x45/0x100
[  274.029698][ T8787]  alloc_super+0x6c0/0x9d0
[  274.029719][ T8787]  ? __pfx_fuse_test_super+0x10/0x10
[  274.029747][ T8787]  sget_fc+0x34c/0xa50
[  274.029771][ T8787]  ? __pfx_fuse_set_no_super+0x10/0x10
[  274.029796][ T8787]  fuse_get_tree+0x2f4/0x4b0
[  274.029824][ T8787]  vfs_get_tree+0x90/0x2b0
[  274.029849][ T8787]  do_new_mount+0x2cf/0xb70
[  274.029877][ T8787]  ? __pfx_do_new_mount+0x10/0x10
[  274.029900][ T8787]  __se_sys_mount+0x38c/0x400
[  274.029921][ T8787]  ? __pfx___se_sys_mount+0x10/0x10
[  274.029942][ T8787]  ? __x64_sys_mount+0x20/0xc0
[  274.029961][ T8787]  do_syscall_64+0xf3/0x230
[  274.029975][ T8787]  ? clear_bhb_loop+0x45/0xa0
[  274.029990][ T8787]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.030001][ T8787] RIP: 0033:0x7faf7218d169
[  274.030013][ T8787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.030023][ T8787] RSP: 002b:00007faf6fff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5
[  274.030037][ T8787] RAX: ffffffffffffffda RBX: 00007faf723a5fa0 RCX: 00007faf7218d169
[  274.030045][ T8787] RDX: 00002000000001c0 RSI: 00002000000020c0 RDI: 0000000000000000
[  274.030053][ T8787] RBP: 00007faf6fff6090 R08: 0000200000000240 R09: 0000000000000000
[  274.030060][ T8787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  274.030067][ T8787] R13: 0000000000000000 R14: 00007faf723a5fa0 R15: 00007faf724cfa28
[  274.030085][ T8787]  </TASK>
[  274.302770][ T8789] FAULT_INJECTION: forcing a failure.
[  274.302770][ T8789] name failslab, interval 1, probability 0, space 0, times 0
[  274.371624][ T8794] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  274.388477][ T8789] CPU: 0 UID: 0 PID: 8789 Comm: syz.0.870 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  274.388508][ T8789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  274.388519][ T8789] Call Trace:
[  274.388528][ T8789]  <TASK>
[  274.388536][ T8789]  dump_stack_lvl+0x241/0x360
[  274.388579][ T8789]  ? __pfx_dump_stack_lvl+0x10/0x10
[  274.388607][ T8789]  ? __pfx__printk+0x10/0x10
[  274.388638][ T8789]  ? __pfx___might_resched+0x10/0x10
[  274.388667][ T8789]  should_fail_ex+0x424/0x570
[  274.388694][ T8789]  should_failslab+0xac/0x100
[  274.388721][ T8789]  __kmalloc_cache_noprof+0x73/0x370
[  274.388747][ T8789]  ? alloc_netdev_mqs+0xc7c/0x1210
[  274.388775][ T8789]  alloc_netdev_mqs+0xc7c/0x1210
[  274.388806][ T8789]  rtnl_create_link+0x2f9/0xc90
[  274.388837][ T8789]  rtnl_newlink_create+0x2f2/0xcb0
[  274.388866][ T8789]  ? __mutex_lock+0x380/0x10c0
[  274.388893][ T8789]  ? __pfx_aa_get_newest_label+0x10/0x10
[  274.388924][ T8789]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  274.388957][ T8789]  ? __pfx___mutex_lock+0x10/0x10
[  274.388990][ T8789]  ? ns_capable+0x8a/0xf0
[  274.389014][ T8789]  rtnl_newlink+0x18b0/0x1fe0
[  274.389042][ T8789]  ? stack_depot_save_flags+0x44/0x940
[  274.389076][ T8789]  ? __pfx_rtnl_newlink+0x10/0x10
[  274.389098][ T8789]  ? __netlink_deliver_tap+0x561/0x7f0
[  274.389122][ T8789]  ? netlink_deliver_tap+0x19d/0x1b0
[  274.389142][ T8789]  ? netlink_unicast+0x7c6/0x9a0
[  274.389161][ T8789]  ? netlink_sendmsg+0x8c3/0xcd0
[  274.389183][ T8789]  ? __sock_sendmsg+0x221/0x270
[  274.389203][ T8789]  ? ____sys_sendmsg+0x523/0x860
[  274.389220][ T8789]  ? __sys_sendmsg+0x271/0x360
[  274.389234][ T8789]  ? do_syscall_64+0xf3/0x230
[  274.389254][ T8789]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.389312][ T8789]  ? kasan_quarantine_put+0xdc/0x230
[  274.389330][ T8789]  ? lockdep_hardirqs_on+0x9d/0x150
[  274.389354][ T8789]  ? nlmon_xmit+0xaf/0x100
[  274.389389][ T8789]  ? __local_bh_enable_ip+0x168/0x200
[  274.389407][ T8789]  ? lockdep_hardirqs_on+0x9d/0x150
[  274.389437][ T8789]  ? aa_get_newest_label+0x101/0x6f0
[  274.389470][ T8789]  ? __lock_acquire+0xad5/0xd80
[  274.389521][ T8789]  ? __pfx_rtnl_newlink+0x10/0x10
[  274.389549][ T8789]  rtnetlink_rcv_msg+0x80f/0xd70
[  274.389583][ T8789]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  274.389613][ T8789]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.389646][ T8789]  ? ref_tracker_free+0x63e/0x7e0
[  274.389676][ T8789]  netlink_rcv_skb+0x208/0x480
[  274.389704][ T8789]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  274.389731][ T8789]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  274.389778][ T8789]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.389806][ T8789]  ? netlink_deliver_tap+0x2e/0x1b0
[  274.389833][ T8789]  netlink_unicast+0x7f8/0x9a0
[  274.389868][ T8789]  ? __pfx_netlink_unicast+0x10/0x10
[  274.389894][ T8789]  ? skb_put+0x114/0x1f0
[  274.389917][ T8789]  netlink_sendmsg+0x8c3/0xcd0
[  274.389958][ T8789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.389988][ T8789]  ? aa_sock_msg_perm+0x91/0x160
[  274.390018][ T8789]  ? __pfx_netlink_sendmsg+0x10/0x10
[  274.390040][ T8789]  __sock_sendmsg+0x221/0x270
[  274.390066][ T8789]  ____sys_sendmsg+0x523/0x860
[  274.390097][ T8789]  ? __pfx_____sys_sendmsg+0x10/0x10
[  274.390113][ T8789]  ? __fget_files+0x2a/0x420
[  274.390135][ T8789]  ? __fget_files+0x2a/0x420
[  274.390161][ T8789]  __sys_sendmsg+0x271/0x360
[  274.390187][ T8789]  ? __pfx___sys_sendmsg+0x10/0x10
[  274.390268][ T8789]  ? do_syscall_64+0xb6/0x230
[  274.390293][ T8789]  do_syscall_64+0xf3/0x230
[  274.390315][ T8789]  ? clear_bhb_loop+0x45/0xa0
[  274.390337][ T8789]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  274.390354][ T8789] RIP: 0033:0x7f40ca78d169
[  274.390372][ T8789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  274.390387][ T8789] RSP: 002b:00007f40cb503038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  274.390408][ T8789] RAX: ffffffffffffffda RBX: 00007f40ca9a5fa0 RCX: 00007f40ca78d169
[  274.390420][ T8789] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  274.390430][ T8789] RBP: 00007f40cb503090 R08: 0000000000000000 R09: 0000000000000000
[  274.390441][ T8789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  274.390452][ T8789] R13: 0000000000000000 R14: 00007f40ca9a5fa0 R15: 00007f40caacfa28
[  274.390485][ T8789]  </TASK>
[  274.816226][    C0] vkms_vblank_simulate: vblank timer overrun
[  274.954484][ T8799] netlink: 53 bytes leftover after parsing attributes in process `syz.1.876'.
[  275.156771][   T10] usb 4-1: new high-speed USB device number 32 using dummy_hcd
[  275.316941][   T10] usb 4-1: Using ep0 maxpacket: 32
[  275.333947][   T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  275.357162][   T10] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  275.379868][   T10] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  275.393174][   T10] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  275.402646][   T10] usb 4-1: Product: syz
[  275.417989][   T10] usb 4-1: Manufacturer: syz
[  275.480967][ T8818] netlink: 16 bytes leftover after parsing attributes in process `syz.2.882'.
[  275.497045][ T8818] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'.
[  275.603352][   T10] hub 4-1:4.0: USB hub found
[  275.965026][ T8820] loop8: detected capacity change from 0 to 8
[  275.975312][ T8820] Dev loop8: unable to read RDB block 8
[  275.981952][ T8820]  loop8: unable to read partition table
[  275.988248][ T8820] loop8: partition table beyond EOD, truncated
[  275.994717][ T8820] loop_reread_partitions: partition scan of loop8 (�被x�^>�� �) failed (rc=-5)
[  276.046368][   T10] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  276.150774][   T10] usb 4-1: USB disconnect, device number 32
[  276.248079][ T8828] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  276.347330][ T5893] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[  276.446312][ T8832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.887'.
[  276.464340][ T8832] netlink: 4 bytes leftover after parsing attributes in process `syz.2.887'.
[  276.487920][ T8832] input: syz0 as /devices/virtual/input/input16
[  276.542355][ T5893] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  276.557263][ T5893] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  276.568613][ T5893] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  276.578060][ T5893] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  276.599857][ T8824] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22
[  276.614023][ T5893] usb 5-1: Quirk or no altset; falling back to MIDI 1.0
[  276.812378][ T8835] FAULT_INJECTION: forcing a failure.
[  276.812378][ T8835] name failslab, interval 1, probability 0, space 0, times 0
[  276.848652][ T8824] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  276.857824][ T8824] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  276.921977][ T8835] CPU: 0 UID: 0 PID: 8835 Comm: syz.3.889 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  276.922010][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  276.922022][ T8835] Call Trace:
[  276.922031][ T8835]  <TASK>
[  276.922039][ T8835]  dump_stack_lvl+0x241/0x360
[  276.922074][ T8835]  ? __pfx_dump_stack_lvl+0x10/0x10
[  276.922099][ T8835]  ? __pfx__printk+0x10/0x10
[  276.922123][ T8835]  ? stack_trace_save+0x11a/0x1d0
[  276.922154][ T8835]  ? __pfx___might_resched+0x10/0x10
[  276.922183][ T8835]  should_fail_ex+0x424/0x570
[  276.922210][ T8835]  should_failslab+0xac/0x100
[  276.922238][ T8835]  kmem_cache_alloc_node_noprof+0x7d/0x3b0
[  276.922265][ T8835]  ? __alloc_skb+0x1c2/0x480
[  276.922281][ T8835]  ? genl_rcv_msg+0x8a4/0xf00
[  276.922303][ T8835]  __alloc_skb+0x1c2/0x480
[  276.922318][ T8835]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.922341][ T8835]  ? __pfx___alloc_skb+0x10/0x10
[  276.922368][ T8835]  netlink_dump+0x237/0xeb0
[  276.922405][ T8835]  ? __pfx_netlink_dump+0x10/0x10
[  276.922443][ T8835]  ? __asan_memset+0x23/0x50
[  276.922463][ T8835]  ? genl_start+0x4ae/0x6d0
[  276.922491][ T8835]  __netlink_dump_start+0x5a2/0x790
[  276.922527][ T8835]  genl_rcv_msg+0x8a4/0xf00
[  276.922557][ T8835]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.922574][ T8835]  ? __dev_queue_xmit+0x1780/0x3f60
[  276.922603][ T8835]  ? __pfx_genl_start+0x10/0x10
[  276.922629][ T8835]  ? __pfx_genl_dumpit+0x10/0x10
[  276.922647][ T8835]  ? __pfx_genl_done+0x10/0x10
[  276.922681][ T8835]  ? __lock_acquire+0xad5/0xd80
[  276.922703][ T8835]  ? __pfx_batadv_algo_dump+0x10/0x10
[  276.922740][ T8835]  netlink_rcv_skb+0x208/0x480
[  276.922765][ T8835]  ? __pfx_genl_rcv_msg+0x10/0x10
[  276.922787][ T8835]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  276.922836][ T8835]  ? netlink_deliver_tap+0x2e/0x1b0
[  276.922869][ T8835]  genl_rcv+0x28/0x40
[  276.922886][ T8835]  netlink_unicast+0x7f8/0x9a0
[  276.922918][ T8835]  ? __pfx_netlink_unicast+0x10/0x10
[  276.922945][ T8835]  ? skb_put+0x114/0x1f0
[  276.922968][ T8835]  netlink_sendmsg+0x8c3/0xcd0
[  276.923005][ T8835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.923035][ T8835]  ? aa_sock_msg_perm+0x91/0x160
[  276.923069][ T8835]  ? __pfx_netlink_sendmsg+0x10/0x10
[  276.923093][ T8835]  __sock_sendmsg+0x221/0x270
[  276.923119][ T8835]  ____sys_sendmsg+0x523/0x860
[  276.923151][ T8835]  ? __pfx_____sys_sendmsg+0x10/0x10
[  276.923169][ T8835]  ? __fget_files+0x2a/0x420
[  276.923192][ T8835]  ? __fget_files+0x2a/0x420
[  276.923218][ T8835]  __sys_sendmsg+0x271/0x360
[  276.923244][ T8835]  ? __pfx___sys_sendmsg+0x10/0x10
[  276.923321][ T8835]  ? do_syscall_64+0xb6/0x230
[  276.923345][ T8835]  do_syscall_64+0xf3/0x230
[  276.923367][ T8835]  ? clear_bhb_loop+0x45/0xa0
[  276.923387][ T8835]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  276.923403][ T8835] RIP: 0033:0x7f1c9538d169
[  276.923421][ T8835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  276.923436][ T8835] RSP: 002b:00007f1c961d6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  276.923457][ T8835] RAX: ffffffffffffffda RBX: 00007f1c955a5fa0 RCX: 00007f1c9538d169
[  276.923471][ T8835] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004
[  276.923483][ T8835] RBP: 00007f1c961d6090 R08: 0000000000000000 R09: 0000000000000000
[  276.923495][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  276.923506][ T8835] R13: 0000000000000000 R14: 00007f1c955a5fa0 R15: 00007f1c956cfa28
[  276.923538][ T8835]  </TASK>
[  277.270238][    C0] vkms_vblank_simulate: vblank timer overrun
[  277.976803][ T5892] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[  278.130238][ T5892] usb 3-1: config 0 has no interfaces?
[  278.150686][ T5892] usb 3-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  278.175204][ T5892] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  278.231143][ T5892] usb 3-1: Product: syz
[  278.263730][ T5892] usb 3-1: Manufacturer: syz
[  278.281423][ T5892] usb 3-1: SerialNumber: syz
[  278.314567][ T5892] usb 3-1: config 0 descriptor??
[  278.769513][   T10] usb 3-1: USB disconnect, device number 31
[  278.905123][ T8865] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  279.302750][  T918] usb 5-1: USB disconnect, device number 51
[  279.536760][   T10] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[  279.598036][ T8881] netlink: 45 bytes leftover after parsing attributes in process `syz.4.902'.
[  279.677320][ T8886] netlink: 'syz.3.905': attribute type 32 has an invalid length.
[  279.721125][ T8886] netlink: 84 bytes leftover after parsing attributes in process `syz.3.905'.
[  279.768780][   T10] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  279.779445][   T10] usb 2-1: New USB device found, idVendor=0471, idProduct=0303, bcdDevice=e5.df
[  279.794774][   T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  279.875456][   T10] usb 2-1: config 0 descriptor??
[  279.886300][   T10] pwc: Philips PCA646VC USB webcam detected.
[  279.940722][ T8891] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  279.958083][ T8891] batadv_slave_0: entered promiscuous mode
[  279.965588][ T8891] batadv_slave_0: entered allmulticast mode
[  279.980881][ T8891] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check.
[  280.096938][   T10] pwc: send_video_command error -71
[  280.102238][   T10] pwc: Failed to set video mode CIF@30 fps; return code = -71
[  280.136343][   T10] Philips webcam 2-1:0.0: probe with driver Philips webcam failed with error -71
[  280.139352][ T8897] FAULT_INJECTION: forcing a failure.
[  280.139352][ T8897] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  280.165104][ T8897] CPU: 1 UID: 0 PID: 8897 Comm: syz.3.908 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  280.165133][ T8897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  280.165145][ T8897] Call Trace:
[  280.165153][ T8897]  <TASK>
[  280.165161][ T8897]  dump_stack_lvl+0x241/0x360
[  280.165196][ T8897]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.165231][ T8897]  ? __pfx__printk+0x10/0x10
[  280.165267][ T8897]  should_fail_ex+0x424/0x570
[  280.165293][ T8897]  _copy_from_user+0x2d/0xb0
[  280.165319][ T8897]  xfrm_user_policy+0x209/0xc30
[  280.165344][ T8897]  ? rcu_is_watching+0x15/0xb0
[  280.165371][ T8897]  ? __pfx_xfrm_user_policy+0x10/0x10
[  280.165390][ T8897]  ? apparmor_capable+0x13b/0x1b0
[  280.165408][ T8897]  ? bpf_lsm_capable+0x9/0x10
[  280.165425][ T8897]  ? security_capable+0x7e/0x2d0
[  280.165450][ T8897]  do_ip_setsockopt+0x1b7c/0x39c0
[  280.165477][ T8897]  ? __pfx_do_ip_setsockopt+0x10/0x10
[  280.165498][ T8897]  ? aa_sk_perm+0x96f/0xac0
[  280.165520][ T8897]  ? ksys_write+0x24e/0x2d0
[  280.165536][ T8897]  ? __pfx_aa_sk_perm+0x10/0x10
[  280.165561][ T8897]  ip_setsockopt+0x63/0x100
[  280.165579][ T8897]  ? __pfx_sock_common_setsockopt+0x10/0x10
[  280.165598][ T8897]  do_sock_setsockopt+0x3b1/0x710
[  280.165619][ T8897]  ? __pfx_do_sock_setsockopt+0x10/0x10
[  280.165632][ T8897]  ? __fget_files+0x2a/0x420
[  280.165649][ T8897]  ? __fget_files+0x39d/0x420
[  280.165660][ T8897]  ? __fget_files+0x2a/0x420
[  280.165681][ T8897]  __x64_sys_setsockopt+0x1ee/0x280
[  280.165708][ T8897]  do_syscall_64+0xf3/0x230
[  280.165726][ T8897]  ? clear_bhb_loop+0x45/0xa0
[  280.165744][ T8897]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.165758][ T8897] RIP: 0033:0x7f1c9538d169
[  280.165772][ T8897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.165785][ T8897] RSP: 002b:00007f1c961d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036
[  280.165803][ T8897] RAX: ffffffffffffffda RBX: 00007f1c955a5fa0 RCX: 00007f1c9538d169
[  280.165814][ T8897] RDX: 0000000000000011 RSI: 0000000000000000 RDI: 0000000000000003
[  280.165823][ T8897] RBP: 00007f1c961d6090 R08: 00000000000000a8 R09: 0000000000000000
[  280.165832][ T8897] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001
[  280.165842][ T8897] R13: 0000000000000000 R14: 00007f1c955a5fa0 R15: 00007f1c956cfa28
[  280.165866][ T8897]  </TASK>
[  280.176346][   T10] usb 2-1: USB disconnect, device number 30
[  280.452113][ T8902] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  280.489656][ T8902] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  280.676831][  T918] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[  280.695593][ T8908] FAULT_INJECTION: forcing a failure.
[  280.695593][ T8908] name failslab, interval 1, probability 0, space 0, times 0
[  280.710093][ T8908] CPU: 1 UID: 0 PID: 8908 Comm: syz.1.912 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  280.710122][ T8908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  280.710134][ T8908] Call Trace:
[  280.710142][ T8908]  <TASK>
[  280.710151][ T8908]  dump_stack_lvl+0x241/0x360
[  280.710186][ T8908]  ? __pfx_dump_stack_lvl+0x10/0x10
[  280.710213][ T8908]  ? __pfx__printk+0x10/0x10
[  280.710237][ T8908]  ? __lock_acquire+0xad5/0xd80
[  280.710270][ T8908]  should_fail_ex+0x424/0x570
[  280.710296][ T8908]  should_failslab+0xac/0x100
[  280.710325][ T8908]  kmem_cache_alloc_noprof+0x78/0x390
[  280.710350][ T8908]  ? skb_clone+0x20c/0x390
[  280.710378][ T8908]  skb_clone+0x20c/0x390
[  280.710403][ T8908]  __netlink_deliver_tap+0x3c4/0x7f0
[  280.710442][ T8908]  ? netlink_deliver_tap+0x2e/0x1b0
[  280.710475][ T8908]  netlink_deliver_tap+0x19d/0x1b0
[  280.710502][ T8908]  netlink_unicast+0x7c6/0x9a0
[  280.710536][ T8908]  ? __pfx_netlink_unicast+0x10/0x10
[  280.710562][ T8908]  ? skb_put+0x114/0x1f0
[  280.710586][ T8908]  netlink_sendmsg+0x8c3/0xcd0
[  280.710625][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.710656][ T8908]  ? aa_sock_msg_perm+0x91/0x160
[  280.710688][ T8908]  ? __pfx_netlink_sendmsg+0x10/0x10
[  280.710711][ T8908]  __sock_sendmsg+0x221/0x270
[  280.710740][ T8908]  ____sys_sendmsg+0x523/0x860
[  280.710772][ T8908]  ? __pfx_____sys_sendmsg+0x10/0x10
[  280.710789][ T8908]  ? __fget_files+0x2a/0x420
[  280.710809][ T8908]  ? __fget_files+0x2a/0x420
[  280.710838][ T8908]  __sys_sendmsg+0x271/0x360
[  280.710865][ T8908]  ? __pfx___sys_sendmsg+0x10/0x10
[  280.710946][ T8908]  ? do_syscall_64+0xb6/0x230
[  280.710973][ T8908]  do_syscall_64+0xf3/0x230
[  280.710995][ T8908]  ? clear_bhb_loop+0x45/0xa0
[  280.711017][ T8908]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  280.711036][ T8908] RIP: 0033:0x7faf7218d169
[  280.711054][ T8908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  280.711070][ T8908] RSP: 002b:00007faf6fff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  280.711092][ T8908] RAX: ffffffffffffffda RBX: 00007faf723a5fa0 RCX: 00007faf7218d169
[  280.711107][ T8908] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000003
[  280.711119][ T8908] RBP: 00007faf6fff6090 R08: 0000000000000000 R09: 0000000000000000
[  280.711130][ T8908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  280.711142][ T8908] R13: 0000000000000000 R14: 00007faf723a5fa0 R15: 00007faf724cfa28
[  280.711174][ T8908]  </TASK>
[  280.711197][ T8908] netlink: 'syz.1.912': attribute type 32 has an invalid length.
[  280.860389][  T918] usb 4-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3
[  280.862932][ T8908] netlink: 84 bytes leftover after parsing attributes in process `syz.1.912'.
[  280.871947][  T918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  281.025740][  T918] usb 4-1: config 0 descriptor??
[  281.041199][  T918] cp210x 4-1:0.0: cp210x converter detected
[  281.443402][  T918] cp210x 4-1:0.0: failed to get vendor val 0x000e size 3: -32
[  281.606175][  T918] cp210x 4-1:0.0: failed to get vendor val 0x370c size 73: -71
[  281.625433][  T918] cp210x 4-1:0.0: GPIO initialisation failed: -71
[  281.656235][  T918] usb 4-1: cp210x converter now attached to ttyUSB0
[  281.694228][  T918] usb 4-1: USB disconnect, device number 33
[  281.756843][  T918] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0
[  281.772496][  T918] cp210x 4-1:0.0: device disconnected
[  281.917849][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.917'.
[  281.929312][ T8927] netlink: 28 bytes leftover after parsing attributes in process `syz.0.917'.
[  281.941434][ T8927] FAULT_INJECTION: forcing a failure.
[  281.941434][ T8927] name failslab, interval 1, probability 0, space 0, times 0
[  281.954597][ T8927] CPU: 0 UID: 0 PID: 8927 Comm: syz.0.917 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  281.954625][ T8927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  281.954638][ T8927] Call Trace:
[  281.954646][ T8927]  <TASK>
[  281.954654][ T8927]  dump_stack_lvl+0x241/0x360
[  281.954690][ T8927]  ? __pfx_dump_stack_lvl+0x10/0x10
[  281.954717][ T8927]  ? __pfx__printk+0x10/0x10
[  281.954749][ T8927]  ? __pfx___might_resched+0x10/0x10
[  281.954779][ T8927]  should_fail_ex+0x424/0x570
[  281.954806][ T8927]  should_failslab+0xac/0x100
[  281.954835][ T8927]  __kmalloc_cache_noprof+0x73/0x370
[  281.954860][ T8927]  ? alloc_netdev_mqs+0xc7c/0x1210
[  281.954888][ T8927]  alloc_netdev_mqs+0xc7c/0x1210
[  281.954919][ T8927]  rtnl_create_link+0x2f9/0xc90
[  281.954954][ T8927]  rtnl_newlink_create+0x2f2/0xcb0
[  281.954984][ T8927]  ? __mutex_lock+0x380/0x10c0
[  281.955010][ T8927]  ? __pfx_aa_get_newest_label+0x10/0x10
[  281.955041][ T8927]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  281.955073][ T8927]  ? __pfx___mutex_lock+0x10/0x10
[  281.955108][ T8927]  ? ns_capable+0x8a/0xf0
[  281.955132][ T8927]  rtnl_newlink+0x18b0/0x1fe0
[  281.955161][ T8927]  ? stack_depot_save_flags+0x44/0x940
[  281.955200][ T8927]  ? __pfx_rtnl_newlink+0x10/0x10
[  281.955223][ T8927]  ? __netlink_deliver_tap+0x561/0x7f0
[  281.955246][ T8927]  ? netlink_deliver_tap+0x19d/0x1b0
[  281.955268][ T8927]  ? netlink_unicast+0x7c6/0x9a0
[  281.955287][ T8927]  ? netlink_sendmsg+0x8c3/0xcd0
[  281.955311][ T8927]  ? __sock_sendmsg+0x221/0x270
[  281.955331][ T8927]  ? ____sys_sendmsg+0x523/0x860
[  281.955348][ T8927]  ? __sys_sendmsg+0x271/0x360
[  281.955364][ T8927]  ? do_syscall_64+0xf3/0x230
[  281.955384][ T8927]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.955446][ T8927]  ? kasan_quarantine_put+0xdc/0x230
[  281.955464][ T8927]  ? lockdep_hardirqs_on+0x9d/0x150
[  281.955490][ T8927]  ? nlmon_xmit+0xaf/0x100
[  281.955533][ T8927]  ? __local_bh_enable_ip+0x168/0x200
[  281.955551][ T8927]  ? lockdep_hardirqs_on+0x9d/0x150
[  281.955582][ T8927]  ? aa_get_newest_label+0x101/0x6f0
[  281.955615][ T8927]  ? __lock_acquire+0xad5/0xd80
[  281.955660][ T8927]  ? __pfx_rtnl_newlink+0x10/0x10
[  281.955687][ T8927]  rtnetlink_rcv_msg+0x80f/0xd70
[  281.955710][ T8927]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  281.955741][ T8927]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  281.955776][ T8927]  ? ref_tracker_free+0x63e/0x7e0
[  281.955805][ T8927]  netlink_rcv_skb+0x208/0x480
[  281.955832][ T8927]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  281.955860][ T8927]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  281.955907][ T8927]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.955937][ T8927]  ? netlink_deliver_tap+0x2e/0x1b0
[  281.955966][ T8927]  netlink_unicast+0x7f8/0x9a0
[  281.956000][ T8927]  ? __pfx_netlink_unicast+0x10/0x10
[  281.956026][ T8927]  ? skb_put+0x114/0x1f0
[  281.956050][ T8927]  netlink_sendmsg+0x8c3/0xcd0
[  281.956090][ T8927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.956121][ T8927]  ? aa_sock_msg_perm+0x91/0x160
[  281.956153][ T8927]  ? __pfx_netlink_sendmsg+0x10/0x10
[  281.956177][ T8927]  __sock_sendmsg+0x221/0x270
[  281.956204][ T8927]  ____sys_sendmsg+0x523/0x860
[  281.956236][ T8927]  ? __pfx_____sys_sendmsg+0x10/0x10
[  281.956253][ T8927]  ? __fget_files+0x2a/0x420
[  281.956274][ T8927]  ? __fget_files+0x2a/0x420
[  281.956301][ T8927]  __sys_sendmsg+0x271/0x360
[  281.956329][ T8927]  ? __pfx___sys_sendmsg+0x10/0x10
[  281.956413][ T8927]  ? do_syscall_64+0xb6/0x230
[  281.956438][ T8927]  do_syscall_64+0xf3/0x230
[  281.956461][ T8927]  ? clear_bhb_loop+0x45/0xa0
[  281.956483][ T8927]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  281.956501][ T8927] RIP: 0033:0x7f40ca78d169
[  281.956519][ T8927] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  281.956565][ T8927] RSP: 002b:00007f40cb503038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  281.956588][ T8927] RAX: ffffffffffffffda RBX: 00007f40ca9a5fa0 RCX: 00007f40ca78d169
[  281.956602][ T8927] RDX: 0000000000000000 RSI: 00002000000000c0 RDI: 000000000000000c
[  281.956614][ T8927] RBP: 00007f40cb503090 R08: 0000000000000000 R09: 0000000000000000
[  281.956625][ T8927] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  281.956635][ T8927] R13: 0000000000000000 R14: 00007f40ca9a5fa0 R15: 00007f40caacfa28
[  281.956666][ T8927]  </TASK>
[  282.375821][    C0] vkms_vblank_simulate: vblank timer overrun
[  282.427364][ T8929] netlink: 264 bytes leftover after parsing attributes in process `syz.0.919'.
[  282.466471][ T8929] netlink: 8 bytes leftover after parsing attributes in process `syz.0.919'.
[  282.577221][   T10] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[  282.734610][ T8937] FAULT_INJECTION: forcing a failure.
[  282.734610][ T8937] name failslab, interval 1, probability 0, space 0, times 0
[  282.736914][   T10] usb 2-1: Using ep0 maxpacket: 32
[  282.756839][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  282.767898][   T10] usb 2-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  282.776880][ T8937] CPU: 1 UID: 0 PID: 8937 Comm: syz.4.923 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  282.776909][ T8937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  282.776920][ T8937] Call Trace:
[  282.776930][ T8937]  <TASK>
[  282.776939][ T8937]  dump_stack_lvl+0x241/0x360
[  282.776972][ T8937]  ? __pfx_dump_stack_lvl+0x10/0x10
[  282.776995][ T8937]  ? __pfx__printk+0x10/0x10
[  282.777016][ T8937]  ? __lock_acquire+0xad5/0xd80
[  282.777046][ T8937]  should_fail_ex+0x424/0x570
[  282.777069][ T8937]  should_failslab+0xac/0x100
[  282.777094][ T8937]  kmem_cache_alloc_noprof+0x78/0x390
[  282.777116][ T8937]  ? skb_clone+0x20c/0x390
[  282.777139][ T8937]  skb_clone+0x20c/0x390
[  282.777162][ T8937]  __netlink_deliver_tap+0x3c4/0x7f0
[  282.777196][ T8937]  ? netlink_deliver_tap+0x2e/0x1b0
[  282.777216][ T8937]  netlink_deliver_tap+0x19d/0x1b0
[  282.777240][ T8937]  netlink_unicast+0x7c6/0x9a0
[  282.777269][ T8937]  ? __pfx_netlink_unicast+0x10/0x10
[  282.777292][ T8937]  ? skb_put+0x114/0x1f0
[  282.777313][ T8937]  netlink_sendmsg+0x8c3/0xcd0
[  282.777348][ T8937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.777375][ T8937]  ? aa_sock_msg_perm+0x91/0x160
[  282.777403][ T8937]  ? __pfx_netlink_sendmsg+0x10/0x10
[  282.777429][ T8937]  __sock_sendmsg+0x221/0x270
[  282.777455][ T8937]  ____sys_sendmsg+0x523/0x860
[  282.777490][ T8937]  ? __pfx_____sys_sendmsg+0x10/0x10
[  282.777506][ T8937]  ? __fget_files+0x2a/0x420
[  282.777525][ T8937]  ? __fget_files+0x2a/0x420
[  282.777550][ T8937]  __sys_sendmsg+0x271/0x360
[  282.777573][ T8937]  ? __pfx___sys_sendmsg+0x10/0x10
[  282.777644][ T8937]  ? do_syscall_64+0xb6/0x230
[  282.777669][ T8937]  do_syscall_64+0xf3/0x230
[  282.777690][ T8937]  ? clear_bhb_loop+0x45/0xa0
[  282.777712][ T8937]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  282.777730][ T8937] RIP: 0033:0x7f2d52b8d169
[  282.777747][ T8937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  282.777762][ T8937] RSP: 002b:00007f2d53935038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  282.777784][ T8937] RAX: ffffffffffffffda RBX: 00007f2d52da5fa0 RCX: 00007f2d52b8d169
[  282.777798][ T8937] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004
[  282.777810][ T8937] RBP: 00007f2d53935090 R08: 0000000000000000 R09: 0000000000000000
[  282.777822][ T8937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  282.777833][ T8937] R13: 0000000000000000 R14: 00007f2d52da5fa0 R15: 00007f2d52ecfa28
[  282.777862][ T8937]  </TASK>
[  283.033790][   T10] usb 2-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  283.054879][   T10] usb 2-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  283.076448][   T10] usb 2-1: Product: syz
[  283.086447][   T10] usb 2-1: Manufacturer: syz
[  283.113041][   T10] hub 2-1:4.0: USB hub found
[  283.521070][   T10] hub 2-1:4.0: config failed, can't read hub descriptor (err -22)
[  283.619369][   T10] usb 2-1: USB disconnect, device number 31
[  283.737732][ T5893] usb 5-1: new low-speed USB device number 52 using dummy_hcd
[  283.897947][ T5893] usb 5-1: Invalid ep0 maxpacket: 64
[  284.026760][ T5893] usb 5-1: new low-speed USB device number 53 using dummy_hcd
[  284.175694][ T8969] FAULT_INJECTION: forcing a failure.
[  284.175694][ T8969] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  284.257393][ T8969] CPU: 0 UID: 0 PID: 8969 Comm: syz.1.932 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  284.257425][ T8969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  284.257437][ T8969] Call Trace:
[  284.257444][ T8969]  <TASK>
[  284.257453][ T8969]  dump_stack_lvl+0x241/0x360
[  284.257489][ T8969]  ? __pfx_dump_stack_lvl+0x10/0x10
[  284.257515][ T8969]  ? __pfx__printk+0x10/0x10
[  284.257555][ T8969]  should_fail_ex+0x424/0x570
[  284.257581][ T8969]  prepare_alloc_pages+0x220/0x610
[  284.257612][ T8969]  __alloc_frozen_pages_noprof+0x162/0x5b0
[  284.257636][ T8969]  ? __pfx___alloc_frozen_pages_noprof+0x10/0x10
[  284.257655][ T8969]  ? __lock_acquire+0xad5/0xd80
[  284.257695][ T8969]  alloc_pages_mpol+0x339/0x690
[  284.257727][ T8969]  ? __pfx_alloc_pages_mpol+0x10/0x10
[  284.257762][ T8969]  alloc_pages_noprof+0x121/0x190
[  284.257788][ T8969]  pte_alloc_one+0x1e/0x160
[  284.257811][ T8969]  __pte_alloc+0x7b/0x240
[  284.257834][ T8969]  ? __pfx___pte_alloc+0x10/0x10
[  284.257858][ T8969]  ? mfill_atomic_poison+0xd62/0x18d0
[  284.257888][ T8969]  mfill_atomic_poison+0xeca/0x18d0
[  284.257930][ T8969]  ? __pfx_mfill_atomic_poison+0x10/0x10
[  284.257984][ T8969]  userfaultfd_ioctl+0x36ff/0x6a80
[  284.258028][ T8969]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  284.258049][ T8969]  ? stack_trace_save+0x11a/0x1d0
[  284.258077][ T8969]  ? __pfx_stack_trace_save+0x10/0x10
[  284.258103][ T8969]  ? stack_depot_save_flags+0x44/0x940
[  284.258131][ T8969]  ? kasan_save_track+0x51/0x80
[  284.258147][ T8969]  ? kasan_save_track+0x3f/0x80
[  284.258164][ T8969]  ? kasan_save_free_info+0x40/0x50
[  284.258179][ T8969]  ? __kasan_slab_free+0x59/0x70
[  284.258203][ T8969]  ? kfree+0x198/0x430
[  284.258234][ T8969]  ? tomoyo_path_number_perm+0x5fd/0x790
[  284.258256][ T8969]  ? security_file_ioctl+0xc6/0x2a0
[  284.258276][ T8969]  ? __se_sys_ioctl+0x46/0x160
[  284.258295][ T8969]  ? do_syscall_64+0xf3/0x230
[  284.258315][ T8969]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.258339][ T8969]  ? do_vfs_ioctl+0xef8/0x2750
[  284.258368][ T8969]  ? __pfx_do_vfs_ioctl+0x10/0x10
[  284.258421][ T8969]  ? kasan_quarantine_put+0xdc/0x230
[  284.258439][ T8969]  ? lockdep_hardirqs_on+0x9d/0x150
[  284.258471][ T8969]  ? tomoyo_path_number_perm+0x215/0x790
[  284.258499][ T8969]  ? tomoyo_path_number_perm+0x684/0x790
[  284.258527][ T8969]  ? tomoyo_path_number_perm+0x215/0x790
[  284.258554][ T8969]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[  284.258632][ T8969]  ? ksys_write+0x266/0x2d0
[  284.258661][ T8969]  ? __pfx_userfaultfd_ioctl+0x10/0x10
[  284.258688][ T8969]  __se_sys_ioctl+0xf1/0x160
[  284.258713][ T8969]  do_syscall_64+0xf3/0x230
[  284.258736][ T8969]  ? clear_bhb_loop+0x45/0xa0
[  284.258759][ T8969]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  284.258777][ T8969] RIP: 0033:0x7faf7218d169
[  284.258795][ T8969] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  284.258811][ T8969] RSP: 002b:00007faf6fff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  284.258833][ T8969] RAX: ffffffffffffffda RBX: 00007faf723a5fa0 RCX: 00007faf7218d169
[  284.258847][ T8969] RDX: 0000200000000080 RSI: 00000000c020aa08 RDI: 0000000000000003
[  284.258860][ T8969] RBP: 00007faf6fff6090 R08: 0000000000000000 R09: 0000000000000000
[  284.258872][ T8969] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  284.258883][ T8969] R13: 0000000000000000 R14: 00007faf723a5fa0 R15: 00007faf724cfa28
[  284.258915][ T8969]  </TASK>
[  284.260938][ T8966] netlink: 53 bytes leftover after parsing attributes in process `syz.3.931'.
[  284.553562][    C0] vkms_vblank_simulate: vblank timer overrun
[  284.666325][ T5893] usb 5-1: Invalid ep0 maxpacket: 64
[  284.686942][ T5893] usb usb5-port1: attempt power cycle
[  285.046979][ T5893] usb 5-1: new low-speed USB device number 54 using dummy_hcd
[  285.081855][ T8979] netlink: 8 bytes leftover after parsing attributes in process `syz.1.934'.
[  285.091180][ T5893] usb 5-1: Invalid ep0 maxpacket: 64
[  285.114661][ T8979] hsr0: entered promiscuous mode
[  285.120874][ T8979] vlan2: entered promiscuous mode
[  285.280633][ T5893] usb 5-1: new low-speed USB device number 55 using dummy_hcd
[  285.311065][ T5893] usb 5-1: Invalid ep0 maxpacket: 64
[  285.318660][ T5893] usb usb5-port1: unable to enumerate USB device
[  286.147460][ T5887] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[  286.366779][ T9000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.940'.
[  286.401628][ T5887] usb 1-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0
[  286.422127][ T5887] usb 1-1: config 0 interface 0 has no altsetting 0
[  286.459833][ T5887] usb 1-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b
[  286.473852][ T5887] usb 1-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2
[  286.498703][ T5887] usb 1-1: Product: syz
[  286.510926][ T5887] usb 1-1: Manufacturer: syz
[  286.531605][ T5887] usb 1-1: SerialNumber: syz
[  286.577500][ T5887] usb 1-1: config 0 descriptor??
[  286.593175][ T5887] usb 1-1: selecting invalid altsetting 0
[  286.804917][ T5892] usb 1-1: USB disconnect, device number 29
[  287.054041][   T47] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[  287.247239][   T30] kauditd_printk_skb: 18 callbacks suppressed
[  287.247255][   T30] audit: type=1326 audit(1743847733.627:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.284172][   T30] audit: type=1326 audit(1743847733.667:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.309133][   T30] audit: type=1326 audit(1743847733.667:149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.331622][   T47] usb 5-1: Using ep0 maxpacket: 32
[  287.366550][   T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  287.386755][   T30] audit: type=1326 audit(1743847733.667:150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.422322][ T9006] delete_channel: no stack
[  287.426686][   T47] usb 5-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  287.514614][   T47] usb 5-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  287.526865][   T47] usb 5-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  287.562878][   T30] audit: type=1326 audit(1743847733.667:151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.591612][ T9013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  287.592835][   T47] usb 5-1: Product: syz
[  287.614250][   T47] usb 5-1: Manufacturer: syz
[  287.621957][   T30] audit: type=1326 audit(1743847733.667:152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=186 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.649475][   T47] hub 5-1:4.0: USB hub found
[  287.657254][   T30] audit: type=1326 audit(1743847733.667:153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.671977][ T9012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.945'.
[  287.680135][   T30] audit: type=1326 audit(1743847733.667:154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.720951][   T30] audit: type=1326 audit(1743847733.737:155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  287.929003][ T9020] syzkaller1: entered promiscuous mode
[  287.951795][ T9020] syzkaller1: entered allmulticast mode
[  288.019751][   T30] audit: type=1326 audit(1743847733.737:156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9006 comm="syz.0.943" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f40ca78d169 code=0x7ffc0000
[  288.149101][   T47] hub 5-1:4.0: config failed, can't read hub descriptor (err -22)
[  288.196819][ T1208] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[  288.308098][ T9023] random: crng reseeded on system resumption
[  288.335377][   T47] usb 5-1: USB disconnect, device number 56
[  288.479166][ T1208] usb 4-1: config 0 has no interfaces?
[  288.488680][ T1208] usb 4-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[  288.513893][ T1208] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  288.528847][ T1208] usb 4-1: Product: syz
[  288.534631][ T1208] usb 4-1: Manufacturer: syz
[  288.544983][ T1208] usb 4-1: SerialNumber: syz
[  288.646169][ T1208] usb 4-1: config 0 descriptor??
[  288.670165][ T9030] FAULT_INJECTION: forcing a failure.
[  288.670165][ T9030] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  288.711802][ T9030] CPU: 0 UID: 0 PID: 9030 Comm: syz.2.948 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  288.711832][ T9030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  288.711844][ T9030] Call Trace:
[  288.711852][ T9030]  <TASK>
[  288.711861][ T9030]  dump_stack_lvl+0x241/0x360
[  288.711898][ T9030]  ? __pfx_dump_stack_lvl+0x10/0x10
[  288.711925][ T9030]  ? __pfx__printk+0x10/0x10
[  288.711967][ T9030]  should_fail_ex+0x424/0x570
[  288.711995][ T9030]  _copy_from_user+0x2d/0xb0
[  288.712025][ T9030]  kstrtouint_from_user+0xce/0x1a0
[  288.712052][ T9030]  ? __pfx_kstrtouint_from_user+0x10/0x10
[  288.712078][ T9030]  ? __lock_acquire+0xad5/0xd80
[  288.712112][ T9030]  proc_fail_nth_write+0xac/0x2d0
[  288.712133][ T9030]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[  288.712158][ T9030]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  288.712180][ T9030]  ? __pfx_proc_fail_nth_write+0x10/0x10
[  288.712198][ T9030]  vfs_write+0x2bc/0xd10
[  288.712223][ T9030]  ? fdget_pos+0x247/0x310
[  288.712245][ T9030]  ? __pfx_vfs_write+0x10/0x10
[  288.712270][ T9030]  ? __fget_files+0x2a/0x420
[  288.712290][ T9030]  ? __fget_files+0x39d/0x420
[  288.712306][ T9030]  ? __fget_files+0x2a/0x420
[  288.712333][ T9030]  ksys_write+0x19d/0x2d0
[  288.712358][ T9030]  ? __pfx_ksys_write+0x10/0x10
[  288.712386][ T9030]  ? do_syscall_64+0xb6/0x230
[  288.712440][ T9030]  do_syscall_64+0xf3/0x230
[  288.712462][ T9030]  ? clear_bhb_loop+0x45/0xa0
[  288.712485][ T9030]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  288.712503][ T9030] RIP: 0033:0x7f002878bc1f
[  288.712522][ T9030] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48
[  288.712538][ T9030] RSP: 002b:00007f00296bb030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001
[  288.712561][ T9030] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f002878bc1f
[  288.712574][ T9030] RDX: 0000000000000001 RSI: 00007f00296bb0a0 RDI: 0000000000000007
[  288.712585][ T9030] RBP: 00007f00296bb090 R08: 0000000000000000 R09: 0000000000000000
[  288.712597][ T9030] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002
[  288.712607][ T9030] R13: 0000000000000000 R14: 00007f00289a5fa0 R15: 00007f0028acfa28
[  288.712638][ T9030]  </TASK>
[  289.397284][ T9044] FAULT_INJECTION: forcing a failure.
[  289.397284][ T9044] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  289.416306][ T1208] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[  289.428108][ T9044] CPU: 1 UID: 0 PID: 9044 Comm: syz.4.952 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  289.428135][ T9044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  289.428142][ T9044] Call Trace:
[  289.428147][ T9044]  <TASK>
[  289.428152][ T9044]  dump_stack_lvl+0x241/0x360
[  289.428183][ T9044]  ? __pfx_dump_stack_lvl+0x10/0x10
[  289.428200][ T9044]  ? __pfx__printk+0x10/0x10
[  289.428222][ T9044]  should_fail_ex+0x424/0x570
[  289.428238][ T9044]  _copy_to_user+0x31/0xb0
[  289.428256][ T9044]  simple_read_from_buffer+0xc4/0x170
[  289.428275][ T9044]  proc_fail_nth_read+0x1ef/0x260
[  289.428289][ T9044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  289.428303][ T9044]  ? rw_verify_area+0x246/0x630
[  289.428314][ T9044]  ? __pfx_proc_fail_nth_read+0x10/0x10
[  289.428327][ T9044]  vfs_read+0x21f/0xb90
[  289.428342][ T9044]  ? __pfx___mutex_lock+0x10/0x10
[  289.428357][ T9044]  ? __pfx_vfs_read+0x10/0x10
[  289.428372][ T9044]  ? __fget_files+0x2a/0x420
[  289.428383][ T9044]  ? __fget_files+0x39d/0x420
[  289.428392][ T9044]  ? __fget_files+0x2a/0x420
[  289.428407][ T9044]  ksys_read+0x19d/0x2d0
[  289.428425][ T9044]  ? __pfx_ksys_read+0x10/0x10
[  289.428441][ T9044]  ? do_syscall_64+0xb6/0x230
[  289.428456][ T9044]  do_syscall_64+0xf3/0x230
[  289.428473][ T9044]  ? clear_bhb_loop+0x45/0xa0
[  289.428486][ T9044]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  289.428497][ T9044] RIP: 0033:0x7f2d52b8bb7c
[  289.428508][ T9044] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48
[  289.428518][ T9044] RSP: 002b:00007f2d53935030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  289.428534][ T9044] RAX: ffffffffffffffda RBX: 00007f2d52da5fa0 RCX: 00007f2d52b8bb7c
[  289.428547][ T9044] RDX: 000000000000000f RSI: 00007f2d539350a0 RDI: 0000000000000003
[  289.428559][ T9044] RBP: 00007f2d53935090 R08: 0000000000000000 R09: 0000000000000000
[  289.428572][ T9044] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  289.428583][ T9044] R13: 0000000000000000 R14: 00007f2d52da5fa0 R15: 00007f2d52ecfa28
[  289.428614][ T9044]  </TASK>
[  289.786753][ T1208] usb 2-1: Using ep0 maxpacket: 32
[  289.793352][ T1208] usb 2-1: config 0 has an invalid interface number: 219 but max is 0
[  289.801587][ T1208] usb 2-1: config 0 has no interface number 0
[  289.807761][ T1208] usb 2-1: config 0 interface 219 altsetting 0 has an invalid descriptor for endpoint zero, skipping
[  289.819119][ T1208] usb 2-1: config 0 interface 219 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B
[  289.831381][ T1208] usb 2-1: config 0 interface 219 altsetting 0 endpoint 0x8B has invalid maxpacket 28739, setting to 1024
[  289.842897][ T1208] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024
[  289.853130][ T1208] usb 2-1: config 0 interface 219 altsetting 0 bulk endpoint 0xB has invalid maxpacket 1023
[  289.863361][ T1208] usb 2-1: config 0 interface 219 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2
[  289.888576][ T1208] usb 2-1: New USB device found, idVendor=108c, idProduct=0169, bcdDevice=75.b9
[  289.905068][ T1208] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  289.916057][ T1208] usb 2-1: Product: syz
[  289.922855][ T1208] usb 2-1: Manufacturer: syz
[  289.928214][ T1208] usb 2-1: SerialNumber: syz
[  289.940465][ T9047] netlink: 45 bytes leftover after parsing attributes in process `syz.4.954'.
[  289.951965][ T1208] usb 2-1: config 0 descriptor??
[  289.958590][ T9033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  289.968443][ T9033] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22
[  290.189815][ T1208] etas_es58x 2-1:0.219: Starting syz syz (Serial Number syz)
[  290.206449][ T1208] etas_es58x 2-1:0.219: could not retrieve the product info string
[  290.308087][ T1208] usb 2-1: USB disconnect, device number 32
[  290.321948][ T1208] etas_es58x 2-1:0.219: Disconnecting syz syz
[  290.695692][ T1208] usb 4-1: USB disconnect, device number 34
[  290.841954][ T9055] netlink: 16 bytes leftover after parsing attributes in process `syz.1.956'.
[  290.923868][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[  290.954399][ T9057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.957'.
[  291.179340][  T918] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[  291.181886][ T9066] FAULT_INJECTION: forcing a failure.
[  291.181886][ T9066] name failslab, interval 1, probability 0, space 0, times 0
[  291.203074][ T9066] CPU: 1 UID: 0 PID: 9066 Comm: syz.2.960 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  291.203103][ T9066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  291.203115][ T9066] Call Trace:
[  291.203123][ T9066]  <TASK>
[  291.203132][ T9066]  dump_stack_lvl+0x241/0x360
[  291.203170][ T9066]  ? __pfx_dump_stack_lvl+0x10/0x10
[  291.203196][ T9066]  ? __pfx__printk+0x10/0x10
[  291.203221][ T9066]  ? __mutex_trylock_common+0x184/0x2e0
[  291.203255][ T9066]  should_fail_ex+0x424/0x570
[  291.203281][ T9066]  should_failslab+0xac/0x100
[  291.203307][ T9066]  __kmalloc_cache_noprof+0x73/0x370
[  291.203329][ T9066]  ? __hw_addr_add_ex+0x1fb/0x760
[  291.203361][ T9066]  __hw_addr_add_ex+0x1fb/0x760
[  291.203385][ T9066]  dev_addr_init+0x159/0x240
[  291.203408][ T9066]  ? __pfx_dev_addr_init+0x10/0x10
[  291.203439][ T9066]  alloc_netdev_mqs+0x307/0x1210
[  291.203459][ T9066]  ? __pfx_ip6_tnl_dev_setup+0x10/0x10
[  291.203487][ T9066]  rtnl_create_link+0x2f9/0xc90
[  291.203516][ T9066]  rtnl_newlink_create+0x2f2/0xcb0
[  291.203544][ T9066]  ? __mutex_lock+0x380/0x10c0
[  291.203569][ T9066]  ? __pfx_aa_get_newest_label+0x10/0x10
[  291.203598][ T9066]  ? __pfx_rtnl_newlink_create+0x10/0x10
[  291.203628][ T9066]  ? __pfx___mutex_lock+0x10/0x10
[  291.203658][ T9066]  ? nla_strscpy+0x102/0x180
[  291.203681][ T9066]  ? full_name_hash+0x89/0xe0
[  291.203703][ T9066]  rtnl_newlink+0x18b0/0x1fe0
[  291.203748][ T9066]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.203769][ T9066]  ? unwind_get_return_address+0x4d/0x90
[  291.203811][ T9066]  ? __lock_acquire+0xad5/0xd80
[  291.203834][ T9066]  ? __lock_acquire+0xad5/0xd80
[  291.203874][ T9066]  ? is_bpf_text_address+0x26/0x2a0
[  291.203901][ T9066]  ? is_bpf_text_address+0x288/0x2a0
[  291.203919][ T9066]  ? is_bpf_text_address+0x26/0x2a0
[  291.203939][ T9066]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[  291.203966][ T9066]  ? kernel_text_address+0xa7/0xe0
[  291.203984][ T9066]  ? __kernel_text_address+0xd/0x40
[  291.204009][ T9066]  ? aa_get_newest_label+0x101/0x6f0
[  291.204044][ T9066]  ? __lock_acquire+0xad5/0xd80
[  291.204085][ T9066]  ? __pfx_rtnl_newlink+0x10/0x10
[  291.204112][ T9066]  rtnetlink_rcv_msg+0x80f/0xd70
[  291.204134][ T9066]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[  291.204160][ T9066]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.204181][ T9066]  ? __lock_acquire+0xad5/0xd80
[  291.204218][ T9066]  netlink_rcv_skb+0x208/0x480
[  291.204244][ T9066]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[  291.204272][ T9066]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  291.204318][ T9066]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.204354][ T9066]  ? netlink_deliver_tap+0x2e/0x1b0
[  291.204382][ T9066]  netlink_unicast+0x7f8/0x9a0
[  291.204416][ T9066]  ? __pfx_netlink_unicast+0x10/0x10
[  291.204442][ T9066]  ? skb_put+0x114/0x1f0
[  291.204466][ T9066]  netlink_sendmsg+0x8c3/0xcd0
[  291.204508][ T9066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.204537][ T9066]  ? aa_sock_msg_perm+0x91/0x160
[  291.204569][ T9066]  ? __pfx_netlink_sendmsg+0x10/0x10
[  291.204592][ T9066]  __sock_sendmsg+0x221/0x270
[  291.204621][ T9066]  ____sys_sendmsg+0x523/0x860
[  291.204652][ T9066]  ? __pfx_____sys_sendmsg+0x10/0x10
[  291.204669][ T9066]  ? __fget_files+0x2a/0x420
[  291.204691][ T9066]  ? __fget_files+0x2a/0x420
[  291.204720][ T9066]  __sys_sendmsg+0x271/0x360
[  291.204746][ T9066]  ? __pfx___sys_sendmsg+0x10/0x10
[  291.204828][ T9066]  ? do_syscall_64+0xb6/0x230
[  291.204854][ T9066]  do_syscall_64+0xf3/0x230
[  291.204876][ T9066]  ? clear_bhb_loop+0x45/0xa0
[  291.204896][ T9066]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  291.204912][ T9066] RIP: 0033:0x7f002878d169
[  291.204930][ T9066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  291.204945][ T9066] RSP: 002b:00007f00296bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  291.204968][ T9066] RAX: ffffffffffffffda RBX: 00007f00289a5fa0 RCX: 00007f002878d169
[  291.204982][ T9066] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000003
[  291.204994][ T9066] RBP: 00007f00296bb090 R08: 0000000000000000 R09: 0000000000000000
[  291.205005][ T9066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  291.205016][ T9066] R13: 0000000000000000 R14: 00007f00289a5fa0 R15: 00007f0028acfa28
[  291.205048][ T9066]  </TASK>
[  291.625597][ T5893] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[  291.800338][  T918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7
[  291.816475][  T918] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47
[  291.835206][  T918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d
[  291.847036][ T5893] usb 4-1: Using ep0 maxpacket: 32
[  291.863384][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  291.883470][ T5893] usb 4-1: config 4 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  291.905983][  T918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  291.923718][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40
[  291.936405][ T5893] usb 4-1: New USB device strings: Mfr=255, Product=255, SerialNumber=0
[  291.962931][ T9059] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[  291.990495][ T5893] usb 4-1: Product: syz
[  291.995794][  T918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0
[  292.006027][ T5893] usb 4-1: Manufacturer: syz
[  292.032804][ T5893] hub 4-1:4.0: USB hub found
[  292.152361][ T9072] fuse: Unknown parameter '0x000000000000000b'
[  292.487179][ T5893] hub 4-1:4.0: config failed, can't read hub descriptor (err -22)
[  292.719662][ T5893] usb 4-1: USB disconnect, device number 35
[  293.766986][  T918] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[  293.878429][ T5893] usb 2-1: USB disconnect, device number 33
[  293.943614][  T918] usb 5-1: Using ep0 maxpacket: 32
[  293.964959][  T918] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86
[  294.016698][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7
[  294.054695][ T9096] FAULT_INJECTION: forcing a failure.
[  294.054695][ T9096] name failslab, interval 1, probability 0, space 0, times 0
[  294.069654][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0
[  294.080446][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has an invalid bInterval 255, changing to 11
[  294.096293][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.3.972 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  294.096321][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  294.096332][ T9096] Call Trace:
[  294.096340][ T9096]  <TASK>
[  294.096348][ T9096]  dump_stack_lvl+0x241/0x360
[  294.096382][ T9096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.096407][ T9096]  ? __pfx__printk+0x10/0x10
[  294.096437][ T9096]  ? __pfx___might_resched+0x10/0x10
[  294.096465][ T9096]  should_fail_ex+0x424/0x570
[  294.096489][ T9096]  should_failslab+0xac/0x100
[  294.096516][ T9096]  kmem_cache_alloc_noprof+0x78/0x390
[  294.096539][ T9096]  ? __kernfs_new_node+0xdf/0x890
[  294.096564][ T9096]  __kernfs_new_node+0xdf/0x890
[  294.096582][ T9096]  ? __lock_acquire+0xad5/0xd80
[  294.096615][ T9096]  ? __pfx___kernfs_new_node+0x10/0x10
[  294.096643][ T9096]  ? kernfs_root+0x1c/0x230
[  294.096663][ T9096]  ? kernfs_root+0x1c/0x230
[  294.096684][ T9096]  kernfs_new_node+0x114/0x220
[  294.096710][ T9096]  kernfs_create_link+0xa5/0x1f0
[  294.096739][ T9096]  sysfs_do_create_link_sd+0x85/0x110
[  294.096761][ T9096]  software_node_notify+0xd9/0x1b0
[  294.096784][ T9096]  device_add+0x513/0xbf0
[  294.096805][ T9096]  ? iommufd_test+0x2efb/0x56a0
[  294.096826][ T9096]  iommufd_test+0x3350/0x56a0
[  294.096858][ T9096]  ? __pfx_iommufd_test+0x10/0x10
[  294.096891][ T9096]  ? __lock_acquire+0xad5/0xd80
[  294.096945][ T9096]  iommufd_fops_ioctl+0x4fc/0x610
[  294.096974][ T9096]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  294.097022][ T9096]  ? __pfx_iommufd_fops_ioctl+0x10/0x10
[  294.097048][ T9096]  __se_sys_ioctl+0xf1/0x160
[  294.097072][ T9096]  do_syscall_64+0xf3/0x230
[  294.097097][ T9096]  ? clear_bhb_loop+0x45/0xa0
[  294.097118][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.097144][ T9096] RIP: 0033:0x7f1c9538d169
[  294.097162][ T9096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  294.097178][ T9096] RSP: 002b:00007f1c961d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  294.097201][ T9096] RAX: ffffffffffffffda RBX: 00007f1c955a5fa0 RCX: 00007f1c9538d169
[  294.097215][ T9096] RDX: 0000200000000200 RSI: 0000000000003ba0 RDI: 0000000000000003
[  294.097228][ T9096] RBP: 00007f1c961d6090 R08: 0000000000000000 R09: 0000000000000000
[  294.097240][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  294.097251][ T9096] R13: 0000000000000000 R14: 00007f1c955a5fa0 R15: 00007f1c956cfa28
[  294.097281][ T9096]  </TASK>
[  294.347516][  T918] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 59391, setting to 1024
[  294.373546][  T918] usb 5-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36
[  294.382761][  T918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  294.387740][ T9096] iommufd_mock iommufd_mock0: Adding to iommu group 0
[  294.390921][  T918] usb 5-1: Product: syz
[  294.401942][  T918] usb 5-1: Manufacturer: syz
[  294.406574][  T918] usb 5-1: SerialNumber: syz
[  294.415027][  T918] usb 5-1: config 0 descriptor??
[  294.602616][ T9096] ==================================================================
[  294.610740][ T9096] BUG: KASAN: slab-use-after-free in software_node_notify_remove+0x1bc/0x1c0
[  294.619851][ T9096] Read of size 1 at addr ffff88802375bd08 by task syz.3.972/9096
[  294.627557][ T9096] 
[  294.629896][ T9096] CPU: 0 UID: 0 PID: 9096 Comm: syz.3.972 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  294.629911][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  294.629918][ T9096] Call Trace:
[  294.629924][ T9096]  <TASK>
[  294.629929][ T9096]  dump_stack_lvl+0x241/0x360
[  294.629948][ T9096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  294.629963][ T9096]  ? rcu_is_watching+0x15/0xb0
[  294.629977][ T9096]  ? __virt_addr_valid+0x183/0x530
[  294.629992][ T9096]  ? lock_release+0x4e/0x3e0
[  294.630004][ T9096]  ? __virt_addr_valid+0x183/0x530
[  294.630018][ T9096]  ? __virt_addr_valid+0x183/0x530
[  294.630032][ T9096]  print_report+0x16e/0x5b0
[  294.630046][ T9096]  ? __virt_addr_valid+0x183/0x530
[  294.630060][ T9096]  ? __virt_addr_valid+0x183/0x530
[  294.630074][ T9096]  ? __virt_addr_valid+0x45f/0x530
[  294.630087][ T9096]  ? __phys_addr+0xba/0x170
[  294.630101][ T9096]  ? software_node_notify_remove+0x1bc/0x1c0
[  294.630113][ T9096]  kasan_report+0x143/0x180
[  294.630127][ T9096]  ? software_node_notify_remove+0x1bc/0x1c0
[  294.630141][ T9096]  software_node_notify_remove+0x1bc/0x1c0
[  294.630153][ T9096]  device_del+0x594/0x9b0
[  294.630168][ T9096]  ? __pfx_device_del+0x10/0x10
[  294.630183][ T9096]  device_unregister+0x20/0xc0
[  294.630196][ T9096]  iommufd_fops_release+0x1bd/0x390
[  294.630213][ T9096]  ? __pfx_iommufd_fops_release+0x10/0x10
[  294.630230][ T9096]  ? evm_file_release+0x10c/0x1e0
[  294.630240][ T9096]  ? __pfx_iommufd_fops_release+0x10/0x10
[  294.630255][ T9096]  __fput+0x3e9/0x9f0
[  294.630268][ T9096]  task_work_run+0x251/0x310
[  294.630287][ T9096]  ? __pfx_task_work_run+0x10/0x10
[  294.630302][ T9096]  ? do_exit+0xa0c/0x27f0
[  294.630316][ T9096]  ? do_exit+0xa0c/0x27f0
[  294.630330][ T9096]  do_exit+0xa11/0x27f0
[  294.630352][ T9096]  ? do_raw_spin_lock+0x151/0x370
[  294.630367][ T9096]  ? __pfx_do_exit+0x10/0x10
[  294.630381][ T9096]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  294.630400][ T9096]  do_group_exit+0x207/0x2c0
[  294.630414][ T9096]  ? _raw_spin_unlock_irq+0x23/0x50
[  294.630425][ T9096]  ? lockdep_hardirqs_on+0x9d/0x150
[  294.630438][ T9096]  get_signal+0x1696/0x1730
[  294.630452][ T9096]  ? __pfx_get_signal+0x10/0x10
[  294.630464][ T9096]  arch_do_signal_or_restart+0x98/0x840
[  294.630482][ T9096]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  294.630501][ T9096]  ? syscall_exit_to_user_mode+0xa3/0x340
[  294.630515][ T9096]  syscall_exit_to_user_mode+0xce/0x340
[  294.630528][ T9096]  do_syscall_64+0x100/0x230
[  294.630541][ T9096]  ? clear_bhb_loop+0x45/0xa0
[  294.630554][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  294.630565][ T9096] RIP: 0033:0x7f1c9538d169
[  294.630576][ T9096] Code: Unable to access opcode bytes at 0x7f1c9538d13f.
[  294.630582][ T9096] RSP: 002b:00007f1c961d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  294.630595][ T9096] RAX: fffffffffffffe00 RBX: 00007f1c955a5fa8 RCX: 00007f1c9538d169
[  294.630604][ T9096] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1c955a5fa8
[  294.630611][ T9096] RBP: 00007f1c955a5fa0 R08: 0000000000000000 R09: 0000000000000000
[  294.630619][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c955a5fac
[  294.630626][ T9096] R13: 0000000000000000 R14: 00007f1c956cf940 R15: 00007f1c956cfa28
[  294.630637][ T9096]  </TASK>
[  294.630642][ T9096] 
[  294.943538][ T9096] Allocated by task 9096:
[  294.947858][ T9096]  kasan_save_track+0x3f/0x80
[  294.952548][ T9096]  __kasan_kmalloc+0x9d/0xb0
[  294.957128][ T9096]  __kmalloc_cache_noprof+0x236/0x370
[  294.962506][ T9096]  swnode_register+0x5a/0x540
[  294.967173][ T9096]  fwnode_create_software_node+0x199/0x1f0
[  294.972979][ T9096]  device_create_managed_software_node+0xd5/0x1f0
[  294.979383][ T9096]  iommufd_test+0x3335/0x56a0
[  294.984047][ T9096]  iommufd_fops_ioctl+0x4fc/0x610
[  294.989072][ T9096]  __se_sys_ioctl+0xf1/0x160
[  294.993669][ T9096]  do_syscall_64+0xf3/0x230
[  294.998165][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.004045][ T9096] 
[  295.006357][ T9096] Freed by task 9096:
[  295.010325][ T9096]  kasan_save_track+0x3f/0x80
[  295.014989][ T9096]  kasan_save_free_info+0x40/0x50
[  295.020001][ T9096]  __kasan_slab_free+0x59/0x70
[  295.024766][ T9096]  kfree+0x198/0x430
[  295.028668][ T9096]  kobject_put+0x22f/0x480
[  295.033078][ T9096]  software_node_notify_remove+0x159/0x1c0
[  295.038877][ T9096]  device_del+0x594/0x9b0
[  295.043258][ T9096]  device_unregister+0x20/0xc0
[  295.048048][ T9096]  iommufd_fops_release+0x1bd/0x390
[  295.053254][ T9096]  __fput+0x3e9/0x9f0
[  295.057245][ T9096]  task_work_run+0x251/0x310
[  295.061835][ T9096]  do_exit+0xa11/0x27f0
[  295.066067][ T9096]  do_group_exit+0x207/0x2c0
[  295.070648][ T9096]  get_signal+0x1696/0x1730
[  295.075136][ T9096]  arch_do_signal_or_restart+0x98/0x840
[  295.080762][ T9096]  syscall_exit_to_user_mode+0xce/0x340
[  295.086302][ T9096]  do_syscall_64+0x100/0x230
[  295.090968][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.096849][ T9096] 
[  295.099162][ T9096] The buggy address belongs to the object at ffff88802375bc00
[  295.099162][ T9096]  which belongs to the cache kmalloc-512 of size 512
[  295.113205][ T9096] The buggy address is located 264 bytes inside of
[  295.113205][ T9096]  freed 512-byte region [ffff88802375bc00, ffff88802375be00)
[  295.126999][ T9096] 
[  295.129312][ T9096] The buggy address belongs to the physical page:
[  295.135712][ T9096] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23758
[  295.144461][ T9096] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[  295.152965][ T9096] ksm flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[  295.160848][ T9096] page_type: f5(slab)
[  295.164818][ T9096] raw: 00fff00000000040 ffff88801b041c80 ffffea000048ff00 0000000000000003
[  295.173388][ T9096] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  295.181960][ T9096] head: 00fff00000000040 ffff88801b041c80 ffffea000048ff00 0000000000000003
[  295.190632][ T9096] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000
[  295.199290][ T9096] head: 00fff00000000002 ffffea00008dd601 00000000ffffffff 00000000ffffffff
[  295.207948][ T9096] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[  295.216656][ T9096] page dumped because: kasan: bad access detected
[  295.223102][ T9096] page_owner tracks the page as allocated
[  295.228830][ T9096] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8626, tgid 8625 (syz.1.827), ts 263275605278, free_ts 263139062635
[  295.250197][ T9096]  post_alloc_hook+0x1f4/0x240
[  295.254966][ T9096]  get_page_from_freelist+0x352b/0x36c0
[  295.260560][ T9096]  __alloc_frozen_pages_noprof+0x211/0x5b0
[  295.266383][ T9096]  alloc_pages_mpol+0x339/0x690
[  295.271225][ T9096]  allocate_slab+0x8f/0x3a0
[  295.275717][ T9096]  ___slab_alloc+0xc3b/0x1500
[  295.280378][ T9096]  __slab_alloc+0x58/0xa0
[  295.284691][ T9096]  __kmalloc_noprof+0x2ea/0x4d0
[  295.289532][ T9096]  copy_splice_read+0x181/0xb50
[  295.294369][ T9096]  splice_direct_to_actor+0x4f0/0xc90
[  295.299729][ T9096]  do_splice_direct+0x281/0x3d0
[  295.304571][ T9096]  do_sendfile+0x582/0x8c0
[  295.308985][ T9096]  __se_sys_sendfile64+0x17e/0x1e0
[  295.314088][ T9096]  do_syscall_64+0xf3/0x230
[  295.318585][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.324473][ T9096] page last free pid 8626 tgid 8625 stack trace:
[  295.330786][ T9096]  __free_frozen_pages+0xde8/0x10a0
[  295.335992][ T9096]  __put_partials+0x160/0x1c0
[  295.340657][ T9096]  put_cpu_partial+0x17e/0x250
[  295.345445][ T9096]  __slab_free+0x294/0x390
[  295.349875][ T9096]  qlist_free_all+0x9a/0x140
[  295.354463][ T9096]  kasan_quarantine_reduce+0x14f/0x170
[  295.359932][ T9096]  __kasan_slab_alloc+0x23/0x80
[  295.364778][ T9096]  __kmalloc_noprof+0x238/0x4d0
[  295.369623][ T9096]  copy_splice_read+0x181/0xb50
[  295.374466][ T9096]  splice_direct_to_actor+0x4f0/0xc90
[  295.379829][ T9096]  do_splice_direct+0x281/0x3d0
[  295.384671][ T9096]  do_sendfile+0x582/0x8c0
[  295.389079][ T9096]  __se_sys_sendfile64+0x17e/0x1e0
[  295.394186][ T9096]  do_syscall_64+0xf3/0x230
[  295.398678][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.404557][ T9096] 
[  295.406883][ T9096] Memory state around the buggy address:
[  295.412523][ T9096]  ffff88802375bc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.420595][ T9096]  ffff88802375bc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.428643][ T9096] >ffff88802375bd00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.436706][ T9096]                       ^
[  295.441020][ T9096]  ffff88802375bd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[  295.449070][ T9096]  ffff88802375be00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[  295.457134][ T9096] ==================================================================
[  295.490484][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  295.502776][ T9096] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[  295.510007][ T9096] CPU: 1 UID: 0 PID: 9096 Comm: syz.3.972 Not tainted 6.14.0-syzkaller-13423-ga8662bcd2ff1 #0 PREEMPT(full) 
[  295.521568][ T9096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[  295.531639][ T9096] Call Trace:
[  295.534929][ T9096]  <TASK>
[  295.537858][ T9096]  dump_stack_lvl+0x241/0x360
[  295.542553][ T9096]  ? __pfx_dump_stack_lvl+0x10/0x10
[  295.547764][ T9096]  ? __pfx__printk+0x10/0x10
[  295.552371][ T9096]  ? vscnprintf+0x5d/0x90
[  295.556824][ T9096]  panic+0x349/0x880
[  295.560751][ T9096]  ? check_panic_on_warn+0x21/0xb0
[  295.565879][ T9096]  ? __pfx_panic+0x10/0x10
[  295.570318][ T9096]  ? _raw_spin_unlock_irqrestore+0x134/0x140
[  295.576321][ T9096]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  295.582658][ T9096]  ? print_report+0x519/0x5b0
[  295.587362][ T9096]  check_panic_on_warn+0x86/0xb0
[  295.592308][ T9096]  ? software_node_notify_remove+0x1bc/0x1c0
[  295.598287][ T9096]  end_report+0x77/0x160
[  295.602536][ T9096]  kasan_report+0x154/0x180
[  295.607068][ T9096]  ? software_node_notify_remove+0x1bc/0x1c0
[  295.613066][ T9096]  software_node_notify_remove+0x1bc/0x1c0
[  295.618877][ T9096]  device_del+0x594/0x9b0
[  295.623230][ T9096]  ? __pfx_device_del+0x10/0x10
[  295.628089][ T9096]  device_unregister+0x20/0xc0
[  295.632874][ T9096]  iommufd_fops_release+0x1bd/0x390
[  295.638084][ T9096]  ? __pfx_iommufd_fops_release+0x10/0x10
[  295.643812][ T9096]  ? evm_file_release+0x10c/0x1e0
[  295.648850][ T9096]  ? __pfx_iommufd_fops_release+0x10/0x10
[  295.654580][ T9096]  __fput+0x3e9/0x9f0
[  295.658589][ T9096]  task_work_run+0x251/0x310
[  295.663215][ T9096]  ? __pfx_task_work_run+0x10/0x10
[  295.668346][ T9096]  ? do_exit+0xa0c/0x27f0
[  295.672684][ T9096]  ? do_exit+0xa0c/0x27f0
[  295.677028][ T9096]  do_exit+0xa11/0x27f0
[  295.681209][ T9096]  ? do_raw_spin_lock+0x151/0x370
[  295.686239][ T9096]  ? __pfx_do_exit+0x10/0x10
[  295.690832][ T9096]  ? __pfx_do_raw_spin_lock+0x10/0x10
[  295.696213][ T9096]  do_group_exit+0x207/0x2c0
[  295.700817][ T9096]  ? _raw_spin_unlock_irq+0x23/0x50
[  295.706031][ T9096]  ? lockdep_hardirqs_on+0x9d/0x150
[  295.711266][ T9096]  get_signal+0x1696/0x1730
[  295.715815][ T9096]  ? __pfx_get_signal+0x10/0x10
[  295.720692][ T9096]  arch_do_signal_or_restart+0x98/0x840
[  295.726263][ T9096]  ? __pfx_arch_do_signal_or_restart+0x10/0x10
[  295.732466][ T9096]  ? syscall_exit_to_user_mode+0xa3/0x340
[  295.738223][ T9096]  syscall_exit_to_user_mode+0xce/0x340
[  295.743799][ T9096]  do_syscall_64+0x100/0x230
[  295.748415][ T9096]  ? clear_bhb_loop+0x45/0xa0
[  295.753106][ T9096]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  295.759006][ T9096] RIP: 0033:0x7f1c9538d169
[  295.763461][ T9096] Code: Unable to access opcode bytes at 0x7f1c9538d13f.
[  295.770508][ T9096] RSP: 002b:00007f1c961d60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca
[  295.778965][ T9096] RAX: fffffffffffffe00 RBX: 00007f1c955a5fa8 RCX: 00007f1c9538d169
[  295.787010][ T9096] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1c955a5fa8
[  295.795030][ T9096] RBP: 00007f1c955a5fa0 R08: 0000000000000000 R09: 0000000000000000
[  295.803023][ T9096] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1c955a5fac
[  295.811021][ T9096] R13: 0000000000000000 R14: 00007f1c956cf940 R15: 00007f1c956cfa28
[  295.819033][ T9096]  </TASK>
[  295.822406][ T9096] Kernel Offset: disabled
[  295.826743][ T9096] Rebooting in 86400 seconds..