last executing test programs:

6m21.01899901s ago: executing program 3 (id=2565):
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
connect$inet6(0xffffffffffffffff, 0x0, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0)
syz_usb_connect(0x0, 0x5f, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b1f203401e0903003bd7010203010902"], 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
io_setup(0x58, &(0x7f0000000300)=<r4=>0x0)
io_submit(r4, 0x1, &(0x7f0000000080)=[&(0x7f0000000540)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}])
write(r2, 0x0, 0x0)
connect$unix(r3, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e23}, 0x6e)
r5 = socket$inet_smc(0x2b, 0x1, 0x0)
io_setup(0xffff, 0x0)
syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[@ANYRES32=0x41424344, @ANYRESHEX=r3, @ANYBLOB="5002d000"], 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15)
ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8923, &(0x7f0000000100)={'vlan0\x00', 0x40})
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r6, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0)
bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="1e00000000f0ffff060000000700000074000000", @ANYRES32=r5, @ANYBLOB="0e00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="040000000800b2e40000000000000c000f00"/30], 0x50)
keyctl$dh_compute(0x17, &(0x7f0000000180), &(0x7f00000000c0)=""/51, 0x33, &(0x7f0000000340)={&(0x7f0000000140)={'md5\x00'}})
r7 = socket$inet_smc(0x2b, 0x1, 0x0)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'dh\x00', 0x10, 0x5, 0x11}, 0x2c)
setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c)
r8 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="4800000003080102000000000000000000000000060002400000000005000300210000002400048008000640000000000800024000000000080007400000000008000340000000001ab9ab1958e44f1feba126166e7f2cf9c541ba86c5eae6360c7bb8c1655cd43f7e91187f99fc115049b5f83fef08889846133a5ea2ef1e8229367938fe746d6b"], 0x48}}, 0x804)
openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x180300, 0x0)
r9 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x14, 0x5, 0x1, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x22004880}, 0x40800)

6m17.739741651s ago: executing program 3 (id=2572):
r0 = userfaultfd(0x80001)
r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000002940)={@multicast2, @empty, 0x1}, 0x10)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x28})
ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000340)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x3})
syz_io_uring_setup(0x0, &(0x7f0000000280), &(0x7f0000c57000), 0x0)
ioctl$UFFDIO_ZEROPAGE(r0, 0xc018aa06, &(0x7f0000000380)={{&(0x7f00007db000/0x2000)=nil, 0x2000}})

6m16.416539343s ago: executing program 3 (id=2577):
r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x7, 0x0, 0x0, 0x7fff0000}]})
r1 = syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a00000804800200090581", @ANYBLOB="f7", @ANYRESDEC], 0x0)
r2 = openat$zero(0xffffff9c, &(0x7f0000000440), 0x82, 0x0)
r3 = openat$mice(0xffffffffffffff9c, 0x0, 0x41)
writev(r3, &(0x7f0000000a40), 0x0)
mmap$usbfs(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x100000d, 0x10013, r3, 0x1)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r2, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'})
r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
syz_usb_ep_write(r1, 0x81, 0x8, &(0x7f0000000080)="00012c615bc20000")
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001400)=@ipv6_delroute={0x24, 0x19, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc8, 0x6}, [@RTA_PRIORITY={0x8, 0x1e, 0x400}]}, 0x24}}, 0x804)
read$char_usb(r4, 0x0, 0x0)
close_range(r0, r4, 0x0)
r6 = socket$igmp(0x2, 0x3, 0x2)
setsockopt$MRT_INIT(r6, 0x0, 0xc8, &(0x7f0000003d40), 0x4)
r7 = semget(0x2, 0x4, 0x408)
semctl$SEM_STAT_ANY(r7, 0x2, 0x14, &(0x7f0000001440)=""/4096)
setsockopt$MRT_DEL_VIF(r6, 0x0, 0xcb, 0x0, 0x0)
openat$adsp1(0xffffff9c, &(0x7f0000000140), 0x3, 0x0)

6m13.260857014s ago: executing program 3 (id=2587):
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) (async)
r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901)
syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) (async)
r1 = syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.stat\x00', 0x275a, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async)
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4) (async)
ptrace(0x10, r4)
ptrace$peeksig(0x4209, r4, &(0x7f0000000740)={0x9, 0x1, 0x1}, &(0x7f00000001c0)=[{}])
ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000180)=r4)
ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000200)={'gretap0\x00', &(0x7f0000000540)={'syztnl0\x00', <r5=>0x0, 0x20, 0x7, 0x8f76, 0x0, {{0x19, 0x4, 0x1, 0x0, 0x64, 0x68, 0x0, 0x3, 0x4, 0x0, @multicast1, @loopback, {[@noop, @end, @ssrr={0x89, 0x13, 0x45, [@local, @local, @private=0xa010100, @local]}, @end, @end, @cipso={0x86, 0x2a, 0x3, [{0x1, 0x4, "8843"}, {0x2, 0x6, "15d2d7d2"}, {0x7, 0xd, "d7eaf56e3880d034b16351"}, {0x5, 0xd, "8775121bab5b179786d0e0"}]}, @generic={0x83, 0xc, "6e634c7f4985ab874785"}, @noop]}}}}})
sendmsg$nl_xfrm(r3, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000240)={&(0x7f00000007c0)=@updsa={0x1b6, 0x1a, 0x1, 0x0, 0x81, {{@in6=@private0={0xfc, 0x0, '\x00', 0x3}, @in6=@empty, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80, 0x0, 0x11, r5}, {@in=@multicast2, 0x0, 0x33}, @in6=@private1, {0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffff6f8}, {}, 0x0, 0x2000, 0x2}, [@mark={0x0, 0x15, {0x350759, 0xded7}}]}, 0x178}}, 0x0)
write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file1/../file0', [{0x20, '\x1f\x97M\x12J}.\x88\xfc\xe6P\xd7\xe4^\xfb\xa5\xd9\xe2\xa6\x1f\xe8\x17\xb2\x82Z\xed\x1b5\x99I\xa2\xc0p\x81\xc5[\x81\xcc\x17Q\xdeh\xa7\x10\x81\xff8\xe0$_\xff1q1P\x15\xc1<U!\x81\xfeN.\xa7C\" \xd2\x16t\x9a\xce\xe4\x96\xbe\xe7\xf36\x91q\x9c\xfb\xeb\x81\xf5\x93Y\xa1\xbe\xdf\x10\xb4\xe3\x8c\x8a\x12\xd2\x86\x82\x86\xe4\xfd8\xd2\x10\x9c\xdb\xa9\x04\x97Bpr\xfa4{\xee4\xce\x13;4\xd2\xdf\x1d\xcd\x89\xacyV\xfd\xcaEy\x90\x15\x92|\x15 \x88%\xe6\xd9\r\'\xeff]\xa1K&\xbf4\xbc\x86\xa8\xf8\xb6P'}, {0x20, 'cgroup.stat\x00'}], 0xa, "b5a4be350e761cb133a663b4ab379afe4b31e6783348b29e914224431b1f7740ca9a249fc145a1b6b32fe51de473baa1fa"}, 0xf4)
write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4607020002040000000000000002003e00fcffff01000038000000fb01000000080000040020000400000044006a5b00000000000000600b000000050000004000000005000000f3ffffff100000000100000003000000fcffffff0180000006000000007d56660ca91f000001000060070000000300000004000000060000e60300000004000000040000430d00000000000000de040000ffffffff080000000600000003000000570800003f491130be9b35140d77253ef9b3f66596ab4a19893ea69029a36a2b"], 0x2ff) (async)
write$binfmt_elf32(r2, &(0x7f00000006c0)=ANY=[@ANYBLOB="7f454c4607020002040000000000000002003e00fcffff01000038000000fb01000000080000040020000400000044006a5b00000000000000600b000000050000004000000005000000f3ffffff100000000100000003000000fcffffff0180000006000000007d56660ca91f000001000060070000000300000004000000060000e60300000004000000040000430d00000000000000de040000ffffffff080000000600000003000000570800003f491130be9b35140d77253ef9b3f66596ab4a19893ea69029a36a2b"], 0x2ff)
sendto$packet(r0, &(0x7f0000000040)="6cf8fb9c089b446b36631196df5e77ef281c4653cbb55083937a91758f4190fc120e67f1911463d0d4e1d052383ea034bc830777e3e59321662f8802940c416551e974", 0x43, 0x44, &(0x7f00000000c0)={0x11, 0x11, 0x0, 0x1, 0x3}, 0x14)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000002c0)={r2, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, "fee8a2ab78fc5e3ed1e00d96072000001ea89de2b7fb0000e60080b8785d96000100", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00"}})
move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0)
pivot_root(&(0x7f0000000280)='./file1/../file0\x00', &(0x7f0000000500)='./file1/../file0\x00')
r6 = socket(0x400000000010, 0x3, 0x0)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x80000000}}) (async)
ioctl$sock_SIOCETHTOOL(r6, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0x12, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x80000000}})
mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x84000, 0x0)

6m12.900857264s ago: executing program 3 (id=2592):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYRESHEX=r0], 0x2c}, 0x1, 0xffffff7f, 0x0, 0x20000800}, 0x404c080)
ioctl$BTRFS_IOC_DEFRAG(r0, 0x50009402, 0x0)

6m11.796568829s ago: executing program 3 (id=2595):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
unshare(0x6020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, <r4=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000a00)={r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xfffffffc})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x478)
socket(0x10, 0x80002, 0x0)
r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\x80\x00\x00\x00\x00\x00\x00\x1b', 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)

6m11.322312143s ago: executing program 32 (id=2595):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc2000000000001090224"], 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
unshare(0x6020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, 0x0)
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0, <r4=>0x0], 0x2})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000a00)={r4, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x5, 0x0, 0x0, 0x7fffffff, 0xfffffffc})
r5 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r5, 0x84, 0xc, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000a00)=ANY=[@ANYBLOB], 0x478)
socket(0x10, 0x80002, 0x0)
r6 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\x80\x00\x00\x00\x00\x00\x00\x1b', 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)

15.20738191s ago: executing program 1 (id=3617):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000308ed14000000000000000000000000050003000600000006000240000000003c000480080004400000000008000a40000000000800064000000000080009400000010008000b"], 0x60}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x140440)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa11, 0x6}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r6 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", <r7=>0xffffffffffffffff})
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000005c0)={"6739669f274d13b6910000000000000000000000d02acecdc67c6d3126628168", r7, <r10=>0xffffffffffffffff})
r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x220000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", <r12=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000240)={"1acc00d331000000e3c918040d8b7500000000000000001d0900", r12})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000100)={"351400000000000000000000000000002000"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@union={0xe, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x0, 0x1, 0x2}, {0xc, 0x0, 0xfffffffe}, {0x7, 0x3, 0x7e5}, {0x0, 0x2, 0x8}, {0xf, 0x5, 0x4}, {0xa}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x3}]}, @var={0x3, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/231, 0x93, 0xe7, 0x0, 0x8c, 0x10000, @value=r0}, 0x28)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000240)={0x3})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0xffffff01}, 0x4)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

11.976177821s ago: executing program 1 (id=3625):
bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90)
r0 = socket$inet6_sctp(0xa, 0x1, 0x84)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}, @NFTA_DYNSET_OP={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xc8}}, 0x0)
r2 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r2, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58)
r3 = accept4(r2, 0x0, 0x0, 0x0)
sendmmsg$alg(r3, &(0x7f0000000100)=[{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)="6b877407", 0x3f}], 0x1, 0x0, 0x0, 0x1}], 0x1, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000c80)=[{0x9c}, {0x6}]}, 0x8)
setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000002c0)={0x0, 0x3}, 0x8)
setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x20, 0x30}, 0xc)
mkdir(&(0x7f00000001c0)='./file0\x00', 0x0)
r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000480)='./file0\x00', 0x89901)
mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x2, 0x42032, 0xffffffffffffffff, 0x0)
r6 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_LAST_MEMBER_CNT={0x8, 0x31}, @IFLA_BR_MULTI_BOOLOPT={0xc, 0x2e, {0x0, 0x1}}]}}}]}, 0x48}}, 0x0)
migrate_pages(0x0, 0x9, &(0x7f0000000040)=0x9, &(0x7f0000000380)=0x102)
move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x100)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x3, @empty}, 0x1c)
mlock(&(0x7f00008c5000/0x2000)=nil, 0x2000)
sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
sendto$inet6(r0, &(0x7f0000000140)='4', 0x1, 0x20008800, 0x0, 0x0)
writev(r0, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1)
r7 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000100)={0x400, 0x300, 0x0, 0x384, 0x1000, 0x0, 0xd968d5b908ac0cdc, 0x0, {}, {0x3}, {0xf4ef}, {0x0, 0x0, 0xffe}, 0x0, 0x100, 0x0, 0xd613, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x1})

11.686223288s ago: executing program 2 (id=3626):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = inotify_init1(0x0)
fcntl$setstatus(r5, 0x4, 0x2c00)
ioctl$int_in(r5, 0x5452, &(0x7f0000000c00))
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xe0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}}, 0x0)

10.807360099s ago: executing program 1 (id=3629):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
unshare(0x6020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa152, 0x0, 0x0, 0x3c, 0x0, 0x0, "b4bc323ef77d1f0000568400"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={0x0})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021)
socket(0x10, 0x80002, 0x0)
r5 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\x80\x00\x00\x00\x00\x00\x00\x1b', 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)

9.412500738s ago: executing program 2 (id=3632):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="db5f580ada71e8f2ba118aaa4017ecb615a5c60e38ee3b27c0d062f101ee971f79e95f7364ecd9f0c11951d6be7ed5438d619107e6b7b7feeba3c76619f7d2cf9cc4b900c2eda7abf1650b04eb33caecb226e5122804e5f0897a15e1a894d222698a8825bb47ed98a5df4a68ec8124de95751239164484658e33f721bf1860cb64d825f91234734bac8bcb676e4e84de586c64ca53c3f75691edb3516965392a28233bc11b119d4e0dc599ebd90e8c", @ANYRES32], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100e6ff3f00cd000600000008000000000000001cf62de1f15de454b8681d6315b2be51fd95a0541c34380e6df280703d87da98afdfee454b064ca5f4ee7f0b9ddd78fea7fd942aa269d9b51f7fbff6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0xffffffffffffffff, 0x29)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0010000000bdda0a48cf2d4f000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x3, &(0x7f0000000000)=[{0x3ff, 0x5, 0x1, 0x40}, {0xd, 0x8, 0xfe, 0x80000001}, {0xff, 0xbb, 0x7f, 0x5}]})
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x10)

8.813615662s ago: executing program 2 (id=3635):
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000001c0)=0xe)
ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000000))

8.319041872s ago: executing program 2 (id=3637):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000340)=""/202)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x4, 0x0, 0x200000000000000, 0x0, 0xfffffffffffffffe, 0x1, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0)
socket$key(0xf, 0x3, 0x2)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x0, 0x8, 0xa, 0x20}, {0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x400000000002, 0x7f}, {0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)

7.616624223s ago: executing program 4 (id=3640):
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff)
r1 = gettid()
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0)
read(r2, &(0x7f0000000200)=""/209, 0xd1)
capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200000})
syz_usb_disconnect(0xffffffffffffffff)
r3 = syz_open_dev$char_usb(0xc, 0xb4, 0x0)
write$char_usb(r3, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x335, @tick, 0x52})
mlock(&(0x7f0000000000/0x800000)=nil, 0x800000)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
r8 = dup(r7)
ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1ff, 0x0, 0x0, 0x1000, &(0x7f0000456000/0x1000)=nil})
ioctl$KVM_SET_MSRS(r8, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"])
ioctl$KVM_SET_LAPIC(r8, 0x4400ae8f, &(0x7f0000000100)={"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"})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x40045304, &(0x7f0000000300)={0x1, 0x6})
tkill(r1, 0x7)
r9 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x0)

7.427325297s ago: executing program 5 (id=3641):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r1, @ANYRESOCT], 0x20)
r2 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x210000, 0x1)
fchdir(r2)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r4=>0x0], &(0x7f0000000340)=[<r5=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r5, r4], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
r7 = getpgrp(0x0)
syz_pidfd_open(r7, 0x0)
sched_setaffinity(r7, 0x8, &(0x7f0000000140)=0xc00000)
close(r6)
r8 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2, 0x0, 0x0, r3})
r9 = epoll_create1(0x0)
epoll_pwait(r9, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close_range(r8, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r6, 0x8b37, &(0x7f0000000000)={'wlan0\x00', @random="7cd6e9709eb0"})

6.818641489s ago: executing program 1 (id=3642):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = inotify_init1(0x0)
fcntl$setstatus(r5, 0x4, 0x2c00)
ioctl$int_in(r5, 0x5452, &(0x7f0000000c00))
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xe0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}}, 0x0)

6.712972129s ago: executing program 5 (id=3643):
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
shutdown(0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x240020)

6.281427226s ago: executing program 5 (id=3644):
socket$inet6_udp(0xa, 0x2, 0x0)
r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='fdinfo/3\x00')
waitid$P_PIDFD(0x3, r0, 0x0, 0x4, 0x0)
r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x101282, 0x0)
r2 = syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="120100007516b7108c0d0e008f8e0018030109021b0001000000000904080001030000000905", @ANYBLOB="8fcfd07a"], 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, 0x0)
syz_usb_connect(0x2, 0x36, 0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)={0x18, 0x40, 0x107, 0xfffffffc, 0x4, {0x7, 0x7c}, [@nested={0x4, 0x48}]}, 0x18}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000)
socket$packet(0x11, 0x2, 0x300)
socket$nl_route(0x10, 0x3, 0x0)
r4 = socket$inet_udplite(0x2, 0x2, 0x88)
r5 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000000000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}}, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = socket$inet6(0xa, 0x3, 0xff)
setsockopt$inet6_int(r7, 0x29, 0x16, &(0x7f0000fcb000), 0x4)
close(r7)
sendmsg$nl_generic(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000)
recvmmsg(r6, &(0x7f00000021c0)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000002c0)=""/4082, 0xff2}], 0x1}, 0x5}], 0x1, 0x2000, 0x0)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$NL80211_CMD_START_AP(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000", @ANYRES16=r9, @ANYBLOB="050000000000000000000200000008000300", @ANYRES32, @ANYBLOB="2d000e0080000000ffffffffffff080211000000080211000000000000000000000000006400000025030000000000000800"], 0x80}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000000c0))
r10 = dup(r1)
r11 = socket$inet6_dccp(0xa, 0x6, 0x0)
ioctl$sock_SIOCINQ(r11, 0x541b, &(0x7f0000002180))
read$FUSE(r10, &(0x7f0000000140)={0x2020}, 0x2020)

5.01443504s ago: executing program 0 (id=3646):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x39c}, 0x40)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000076"], 0xfe33)

4.591136086s ago: executing program 2 (id=3647):
r0 = socket(0x2b, 0x80801, 0x1)
connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @empty, 0x400005}, 0x1c)
r1 = getpid()
syz_open_procfs$pagemap(r1, &(0x7f0000000000))
r2 = syz_usb_connect(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x2, 0x96, 0xd1, 0xca, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0xd, 0x0, 0x6}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0)
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000000900)={0x84, &(0x7f00000003c0)={0x0, 0x5, 0x4, "abe763a8"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r2, 0x0, &(0x7f0000000740)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="601004000000cf"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ecm(r2, 0x0, &(0x7f0000000300)={0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="200104"], 0x0, 0x0})
syz_usb_control_io$printer(r2, 0x0, 0x0)
syz_usb_control_io$uac1(r2, 0x0, &(0x7f00000013c0)={0x44, &(0x7f00000011c0)={0x20, 0x14, 0x4, "0426fd98"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, &(0x7f0000000fc0)={0x84, &(0x7f0000000c80)={0x20, 0x0, 0x4, "f670e000"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$uac1(r2, 0x0, 0x0)
syz_usb_control_io(r2, 0x0, &(0x7f0000001200)={0x84, &(0x7f0000000f00)={0x0, 0x14, 0x4, "42467af9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r2, 0x0, 0x0)
sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x4008000)
r3 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000040)={<r4=>0x0, 0x3, 0x8}, &(0x7f0000000080)=0x8)
getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r3, 0x84, 0xf, &(0x7f0000000200)={r4, @in={{0x2, 0x4e22, @private=0xa010100}}, 0x6, 0x1000, 0xe6f9, 0x4, 0x1}, &(0x7f00000000c0)=0x98)

4.568605734s ago: executing program 0 (id=3648):
r0 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff)
r4 = socket$kcm(0x10, 0x2, 0x0)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r5=>0x0})
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0)
close(r6)
socket$inet_sctp(0x2, 0x5, 0x84)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local})
r7 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', <r8=>0x0})
r9 = socket$nl_generic(0x10, 0x3, 0x10)
r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r11=>0x0})
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884123, &(0x7f0000000740)={0x1, 0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x4})
syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
socket$unix(0x1, 0x2, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async)
socket$kcm(0x10, 0x2, 0x0) (async)
sendmsg$kcm(r4, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) (async)
ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r3, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) (async)
close(r6) (async)
socket$inet_sctp(0x2, 0x5, 0x84) (async)
ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) (async)
ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) (async)
sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x24, r10, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x971}]}, 0x24}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) (async)
ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884123, &(0x7f0000000740)={0x1, 0x100, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe4, 0x0, 0x4}) (async)

4.426916483s ago: executing program 4 (id=3649):
r0 = socket(0x10, 0x803, 0x0)
sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0)
recvmmsg(r0, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f00000000c0)=""/100, 0x64}, {&(0x7f0000000380)=""/156, 0x9c}, {&(0x7f0000001fc0)=""/4109, 0x100d}, {&(0x7f0000000a00)=""/202, 0xca}, {&(0x7f0000000640)=""/87, 0x57}, {&(0x7f0000000540)=""/76, 0x4c}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f00000001c0)=""/17, 0x11}, {&(0x7f0000000300)=""/106, 0x6a}, {&(0x7f0000000200)=""/206, 0xce}, {&(0x7f0000000780)=""/203, 0xcb}, {&(0x7f00000006c0)=""/122, 0x7a}], 0xc, 0x0, 0x0, 0xb00}, 0x40d60b70}], 0x1, 0x0, 0x0) (fail_nth: 8)

4.301882869s ago: executing program 1 (id=3650):
openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f0000007080)=[{{&(0x7f0000000280)=@xdp, 0x80, &(0x7f0000000000)=[{&(0x7f0000000380)=""/123, 0x7b}, {&(0x7f0000000500)=""/198, 0xc6}, {&(0x7f0000000400)=""/84, 0x54}], 0x3, &(0x7f0000001300)=""/4096, 0x1000}, 0x1ff}, {{&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x0, @broadcast}}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000740)=""/245, 0xf5}, {&(0x7f0000002300)=""/4096, 0x1000}, {&(0x7f0000000840)=""/91, 0x5b}, {&(0x7f00000008c0)=""/195, 0xc3}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f00000009c0)=""/175, 0xaf}, {&(0x7f0000003300)=""/4096, 0x1000}, {&(0x7f0000000300)=""/42, 0x2a}], 0x9, &(0x7f0000000b00)=""/82, 0x52}, 0x5}, {{&(0x7f0000000b80)=@qipcrtr, 0x80, &(0x7f0000001140)=[{&(0x7f0000000c00)=""/186, 0xba}, {&(0x7f0000000cc0)=""/251, 0xfb}, {&(0x7f0000000dc0)=""/212, 0xd4}, {&(0x7f0000000ec0)=""/84, 0x54}, {&(0x7f0000000600)=""/58, 0x3a}, {&(0x7f0000000f40)=""/177, 0xb1}, {&(0x7f0000001000)=""/235, 0xeb}, {&(0x7f0000001100)=""/53, 0x35}], 0x8, &(0x7f0000001180)=""/36, 0x24}, 0x9}, {{&(0x7f00000011c0)=@xdp, 0x80, &(0x7f0000004800)=[{&(0x7f0000001240)=""/111, 0x6f}, {&(0x7f0000004300)=""/196, 0xc4}, {&(0x7f0000004400)=""/234, 0xea}, {&(0x7f0000004500)=""/95, 0x5f}, {&(0x7f0000004580)=""/124, 0x7c}, {&(0x7f0000004600)=""/205, 0xcd}, {&(0x7f0000004700)=""/235, 0xeb}], 0x7, &(0x7f0000004840)=""/240, 0xf0}, 0x1ff}, {{&(0x7f0000004940)=@ieee802154, 0x80, &(0x7f0000005c00)=[{&(0x7f00000049c0)=""/211, 0xd3}, {&(0x7f0000004ac0)=""/4096, 0x1000}, {&(0x7f0000005ac0)=""/198, 0xc6}, {&(0x7f0000005bc0)=""/48, 0x30}], 0x4, &(0x7f0000005c40)=""/4096, 0x1000}, 0x4}, {{&(0x7f0000006c40)=@ethernet={0x0, @local}, 0xfffffffffffffe78, &(0x7f0000007000)=[{&(0x7f0000006cc0)=""/196, 0xc4}, {&(0x7f0000006dc0)=""/89, 0x59}, {&(0x7f0000006e40)=""/82, 0x52}, {&(0x7f0000006ec0)=""/157, 0x9d}, {&(0x7f0000006f80)=""/124, 0x7c}], 0x5, &(0x7f0000007040)=""/31, 0x1f}, 0x5}], 0x6, 0x2, 0x0)
fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, 0x0, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x40, 0x0, 0xb49, 0x9, 0x100000000000008, 0x0, 0x3}, 0x0)
open_tree(0xffffffffffffff9c, 0x0, 0x89901)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket(0x10, 0x803, 0x0)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x302, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101})
r3 = syz_io_uring_setup(0x81f, &(0x7f0000000480)={0x0, 0x0, 0x800, 0x3, 0x34f}, &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
socket$inet_sctp(0x2, 0x4, 0x84)
syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffff9, 0x0, 0x4)
syz_io_uring_submit(r4, r5, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1})
io_uring_enter(r3, 0x47bc, 0x0, 0x21, 0x0, 0x0)
io_uring_register$IORING_REGISTER_SYNC_CANCEL(r3, 0x18, &(0x7f0000000100)={0x0, r3, 0x34, {0x1, 0x7f}, 0x8}, 0x1)
r6 = socket(0xf, 0x3, 0x0)
r7 = socket$unix(0x1, 0x5, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', <r8=>0x0})
sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffff, 0xf}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x4, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

4.099390707s ago: executing program 4 (id=3651):
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r2})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000400)=[0x9], &(0x7f0000000180)=[r3], &(0x7f0000000340), 0x4000000000000000})

4.067637937s ago: executing program 0 (id=3652):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x10141, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0)
syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106d049cc20000000000010902240001"], 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0)
unshare(0x6020400)
r3 = syz_open_procfs(0x0, &(0x7f0000000040)='mountinfo\x00')
read$FUSE(r3, &(0x7f0000000300)={0x2020}, 0x2020)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r2, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000140)={&(0x7f00000006c0)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r2, 0xc02064b6, 0x0)
ioctl$DRM_IOCTL_MODE_SETCRTC(r2, 0xc06864a2, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xa152, 0x0, 0x0, 0x3c, 0x0, 0x0, "b4bc323ef77d1f0000568400"}})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r2, 0xc01064b5, &(0x7f0000000180)={&(0x7f00000000c0)=[0x0], 0x1})
ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd})
r4 = socket$inet6_sctp(0xa, 0x1, 0x84)
setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xc, 0x0, 0x0)
syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x0)
inotify_add_watch(0xffffffffffffffff, 0x0, 0x12000021)
socket(0x10, 0x80002, 0x0)
r5 = fsopen(&(0x7f0000000140)='vfat\x00', 0x0)
fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000001100)='iocharset', &(0x7f0000001140)='\x80\x00\x00\x00\x00\x00\x00\x1b', 0x0)
setxattr$incfs_metadata(&(0x7f0000000800)='./cgroup\x00', &(0x7f0000000840), 0x0, 0x0, 0x1)

3.884643599s ago: executing program 4 (id=3653):
r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0)
socket$inet(0x2, 0x2, 0x0)
socket$netlink(0x10, 0x3, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_netfilter(0x10, 0x3, 0xc)
socket$nl_generic(0x10, 0x3, 0x10)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20)
r1 = openat$sysfs(0xffffff9c, &(0x7f0000000080)='/sys/kernel/config', 0x210000, 0x1)
fchdir(r1)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0xc01c2, 0x1fe)
ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={0x0, &(0x7f0000000300)=[<r3=>0x0], &(0x7f0000000340)=[<r4=>0x0], 0x0, 0x0, 0x1, 0x1})
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000640)=[r4, r3], 0x2})
ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f00000002c0)={0x0, 0x0, 0x0})
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpu.stat\x00', 0x26e1, 0x0)
r6 = getpgrp(0x0)
syz_pidfd_open(r6, 0x0)
sched_setaffinity(r6, 0x8, &(0x7f0000000140)=0xc00000)
close(r5)
r7 = io_uring_setup(0x7d98, &(0x7f00000003c0)={0x0, 0xdf07, 0x2, 0x2, 0x0, 0x0, r2})
r8 = epoll_create1(0x0)
epoll_pwait(r8, &(0x7f0000000080)=[{}], 0x1, 0x80000000, 0x0, 0x0)
close_range(r7, 0xffffffffffffffff, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SIOCSIFHWADDR(r5, 0x8b37, &(0x7f0000000000)={'wlan0\x00', @random="7cd6e9709eb0"})

3.751238279s ago: executing program 5 (id=3654):
bind$pptp(0xffffffffffffffff, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x42}}}, 0x1e)
connect$pptp(0xffffffffffffffff, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e)
shutdown(0xffffffffffffffff, 0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000015c0), 0x2300, 0x0)
ioctl$PPPIOCATTCHAN(r0, 0x40047438, &(0x7f0000000040)=0x1)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000000c0)=0x240020)

3.373487677s ago: executing program 4 (id=3655):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$audio(0xffffff9c, 0x0, 0x402, 0x0)
connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
socket$inet6(0x10, 0x80000, 0x3)
sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0)
ioctl$VIDIOC_QUERYBUF_DMABUF(0xffffffffffffffff, 0xc0585609, 0x0)
sendmsg$rds(0xffffffffffffffff, 0x0, 0x0)
ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0x40086602, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
r3 = socket$inet6_sctp(0xa, 0x801, 0x84)
sendto$inet6(r3, &(0x7f00000002c0), 0x0, 0x8910, &(0x7f0000000280)={0xa, 0x4e21, 0xfffffffd, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'netpci0\x00', 0x1})
r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0xffffffff, 0x4000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000100))
r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x88602, 0x0)
syz_open_dev$sndpcmp(&(0x7f0000000040), 0x0, 0xa2465)
ioctl$SNDCTL_DSP_GETOSPACE(r5, 0x8010500c, &(0x7f0000000280))
socket$unix(0x1, 0x1, 0x0)
socket$nl_xfrm(0x10, 0x3, 0x6)
r6 = socket$inet(0x2, 0x1, 0x0)
setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0)
socket$inet6(0xa, 0x3, 0x7)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4)

3.33288273s ago: executing program 5 (id=3656):
r0 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000080), 0x183822, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000308ed14000000000000000000000000050003000600000006000240000000003c000480080004400000000008000a40000000000800064000000000080009400000010008000b"], 0x60}}, 0x0)
sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x100, 0x8000, {0x0, 0x0, 0x0, 0x0, 0x137b}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x2}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000000}, 0x40080)
ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f00000002c0)=0x140440)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0)
recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0x1, 0xfa11, 0x6}, 0x0)
socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0)
r6 = openat$sw_sync(0xffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r6, 0xc0285700, &(0x7f00000001c0)={0xbf48ce7, "1803c80300000000000000ffff94d4ff000000000000d63175a60600", <r7=>0xffffffffffffffff})
r8 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x101001, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r8, 0xc0285700, &(0x7f0000000000)={0x2, "fa02c80a3a1e9d4b9aaf000000008d674fe69b5b7638dd031dd7504fe5809639", <r9=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r9, 0xc0303e03, &(0x7f00000005c0)={"6739669f274d13b6910000000000000000000000d02acecdc67c6d3126628168", r7, <r10=>0xffffffffffffffff})
r11 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000640), 0x220000, 0x0)
ioctl$SW_SYNC_IOC_CREATE_FENCE(r11, 0xc0285700, &(0x7f0000000000)={0x6, "34e6498c25f58dad9987ffe93bbabd18cf504a2700", <r12=>0xffffffffffffffff})
ioctl$SYNC_IOC_MERGE(r10, 0xc0303e03, &(0x7f0000000240)={"1acc00d331000000e3c918040d8b7500000000000000001d0900", r12})
ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000100)={"351400000000000000000000000000002000"})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f00000005c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x3, [@union={0xe, 0x6, 0x0, 0x5, 0x1, 0x9, [{0x0, 0x1, 0x2}, {0xc, 0x0, 0xfffffffe}, {0x7, 0x3, 0x7e5}, {0x0, 0x2, 0x8}, {0xf, 0x5, 0x4}, {0xa}]}, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x7, 0x3}]}, @var={0x3, 0x0, 0x0, 0xe, 0x2}]}, {0x0, [0x0]}}, &(0x7f00000004c0)=""/231, 0x93, 0xe7, 0x0, 0x8c, 0x10000, @value=r0}, 0x28)
ioctl$KVM_CREATE_PIT2(r0, 0x4040ae77, &(0x7f0000000240)={0x3})
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000300)={0xffffff01}, 0x4)
syz_usb_connect(0x0, 0x0, 0x0, 0x0)
socket$kcm(0x10, 0x3, 0x10)

3.131395919s ago: executing program 1 (id=3657):
socket$inet6(0xa, 0x2, 0x0)
openat$kvm(0xffffff9c, &(0x7f0000000180), 0x4a000, 0x0)
socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e)
sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0)
semctl$GETALL(0x0, 0x0, 0x12, &(0x7f0000000340)=""/202)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x9, 0x4, 0x0, 0x200000000000000, 0x0, 0xfffffffffffffffe, 0x1, 0xffffffff}, 0x0)
syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x57, 0x1c, 0x2, 0x20, 0x4da, 0x390d, 0x93a8, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xf6, 0xc7, 0x7c, 0x0, [], [{{0x9, 0x5, 0x3, 0x1, 0x200}}]}}]}}]}}, 0x0)
socket$key(0xf, 0x3, 0x2)
shutdown(0xffffffffffffffff, 0x1)
r2 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r2, &(0x7f0000000d40)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb4, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x0, 0x0, 0x8, 0xa, 0x20}, {0x0, 0x2, 0x0, 0x0, 0x10001, 0x0, 0x400000000002, 0x7f}, {0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffe}}}, 0xb4}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000015"], 0xb8}}, 0x0)

600.548905ms ago: executing program 0 (id=3658):
bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB="db5f580ada71e8f2ba118aaa4017ecb615a5c60e38ee3b27c0d062f101ee971f79e95f7364ecd9f0c11951d6be7ed5438d619107e6b7b7feeba3c76619f7d2cf9cc4b900c2eda7abf1650b04eb33caecb226e5122804e5f0897a15e1a894d222698a8825bb47ed98a5df4a68ec8124de95751239164484658e33f721bf1860cb64d825f91234734bac8bcb676e4e84de586c64ca53c3f75691edb3516965392a28233bc11b119d4e0dc599ebd90e8c", @ANYRES32], 0x48)
r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100e6ff3f00cd000600000008000000000000001cf62de1f15de454b8681d6315b2be51fd95a0541c34380e6df280703d87da98afdfee454b064ca5f4ee7f0b9ddd78fea7fd942aa269d9b51f7fbff6", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48)
close(0x3)
r1 = socket(0x1e, 0x805, 0x0)
setsockopt$packet_tx_ring(r1, 0x10f, 0x87, 0xffffffffffffffff, 0x29)
bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0010000000bdda0a48cf2d4f000000040000000900000000000000", @ANYRES32=r0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000300"/28], 0x50)
socket$inet6(0xa, 0x2, 0x0)
mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0xf)
r2 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', <r3=>0x0})
r4 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="380000001800010000000000000000000a000000000000000000000008000400", @ANYRES32=r3, @ANYBLOB="06001500070000000c0016800800010010"], 0x38}}, 0x10)

410.314535ms ago: executing program 0 (id=3659):
sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0, 0x0, 0x39c}, 0x40)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000076"], 0xfe33)

251.183647ms ago: executing program 4 (id=3660):
r0 = socket(0x11, 0x800000003, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', <r1=>0x0})
r2 = socket$netlink(0x10, 0x3, 0x0)
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0)
sched_setaffinity(0x0, 0x0, 0x0)
ioprio_set$pid(0x2, 0xffffffffffffffff, 0x6004)
openat$sysfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/power/resume', 0x149a82, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0)
sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8)
r3 = getpid()
r4 = socket$nl_netfilter(0x10, 0x3, 0xc)
r5 = inotify_init1(0x0)
fcntl$setstatus(r5, 0x4, 0x2c00)
ioctl$int_in(r5, 0x5452, &(0x7f0000000c00))
sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x14, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0xe0}}, 0x0)
sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2)
sched_setscheduler(r3, 0x2, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001180)={<r6=>0xffffffffffffffff})
connect$unix(r6, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e)
recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x0)
recvmsg$unix(0xffffffffffffffff, 0x0, 0x0)
r7 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x15, 0x301, 0x0, 0x0, {0xb}}, 0x14}}, 0x0)
sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0xac, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x200], [0x0, 0x8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xa040, 0x16a, 0x0, 0x0, 0x0, 0x9a]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}, @TCA_TAPRIO_ATTR_TXTIME_DELAY={0x8, 0xb, 0xff}]}}]}, 0xac}}, 0x0)

218.069879ms ago: executing program 0 (id=3661):
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]})
r0 = landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0)
landlock_restrict_self(r0, 0x0) (fail_nth: 5)

140.626515ms ago: executing program 2 (id=3662):
r0 = syz_open_dev$dri(&(0x7f0000000300), 0x1, 0x0)
ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2})
ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[<r1=>0x0], 0x1})
ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000001c0)={r1, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r0, 0xc02064b9, &(0x7f00000002c0)={&(0x7f0000000240)=[0x0, 0x0, <r3=>0x0], &(0x7f0000000040), 0x3, r2})
openat$nullb(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000380)={0x201, 0x1, &(0x7f0000000440)=[r2], &(0x7f0000000400)=[0x9], &(0x7f0000000180)=[r3], &(0x7f0000000340)})
syz_usb_connect(0x1, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000009a65d0860040800dee20102030109021b05000000000009040000f678eaf50009058402", @ANYBLOB="94"], &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]})
r4 = openat$mice(0xffffffffffffff9c, &(0x7f0000000300), 0x752f)
syz_open_dev$usbmon(&(0x7f0000000100), 0x3ca, 0x40040)
ioctl$MON_IOCX_GETX(r4, 0x400c920a, &(0x7f00000003c0)={&(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, 0x0})
r5 = syz_open_dev$vcsn(&(0x7f0000000040), 0xfffffffc, 0x208001)
r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000800), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r6, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0])
read$FUSE(r6, &(0x7f00000021c0)={0x2020, 0x0, <r7=>0x0, <r8=>0x0}, 0x2020)
syz_fuse_handle_req(r6, &(0x7f0000004380)="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", 0x2000, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x4000000000000, {0x0, 0x0, 0x20000000, 0x4, 0x6, 0x0, {0x0, 0x100, 0x0, 0xd, 0x0, 0x100, 0x0, 0x2, 0x0, 0x0, 0xfffffffc, r8, 0x0, 0x7}}}, 0x0, 0x0, 0x0, 0x0, 0x0})
write$FUSE_INIT(r6, &(0x7f0000000000)={0x50, 0x0, r7, {0x7, 0x26, 0x10001, 0x12007646, 0x0, 0x0, 0x0, 0x3}}, 0x50)
write$FUSE_INIT(r5, &(0x7f0000000080)={0x50, 0x0, r7, {0x7, 0x2b, 0xa, 0x4000, 0x10, 0x9, 0xfffffffe, 0x2, 0x0, 0x0, 0x0, 0x7f}}, 0x50)

0s ago: executing program 5 (id=3663):
unshare(0x400) (async)
ioctl$EVIOCSFF(0xffffffffffffffff, 0x402c4580, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x5, &(0x7f0000006680)) (async)
acct(0x0) (async)
r3 = dup(r2)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000000, 0x8031, 0xffffffffffffffff, 0x6a855000) (async)
openat$rdma_cm(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
ioctl$KVM_SET_DEVICE_ATTR(r3, 0x4018aee1, 0x0)
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x8, 0x5, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@map_idx={0x18, 0x6, 0x5, 0x0, 0x8}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000780), 0x0, 0x10, 0x0, @void, @value}, 0x90)

kernel console output (not intermixed with test programs):

ailslab, interval 1, probability 0, space 0, times 0
[ 1113.540150][T17698] CPU: 1 UID: 0 PID: 17698 Comm: syz.1.3389 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1113.540184][T17698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1113.540199][T17698] Call Trace:
[ 1113.540208][T17698]  <TASK>
[ 1113.540217][T17698]  dump_stack_lvl+0x241/0x360
[ 1113.540256][T17698]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1113.540288][T17698]  ? __pfx__printk+0x10/0x10
[ 1113.540322][T17698]  ? __pfx___might_resched+0x10/0x10
[ 1113.540347][T17698]  should_fail_ex+0x424/0x570
[ 1113.540392][T17698]  should_failslab+0xac/0x100
[ 1113.540416][T17698]  __kmalloc_noprof+0xdf/0x4d0
[ 1113.540443][T17698]  ? tomoyo_realpath_from_path+0xc2/0x5e0
[ 1113.540472][T17698]  ? tomoyo_realpath_from_path+0xcf/0x5e0
[ 1113.540507][T17698]  tomoyo_realpath_from_path+0xcf/0x5e0
[ 1113.540551][T17698]  tomoyo_path_number_perm+0x245/0x790
[ 1113.540576][T17698]  ? __lock_acquire+0xad5/0xd80
[ 1113.540607][T17698]  ? tomoyo_path_number_perm+0x215/0x790
[ 1113.540635][T17698]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1113.540702][T17698]  ? __fget_files+0x2a/0x420
[ 1113.540721][T17698]  ? __fget_files+0x2a/0x420
[ 1113.540745][T17698]  ? __fget_files+0x2a/0x420
[ 1113.540771][T17698]  security_file_ioctl_compat+0xc6/0x2a0
[ 1113.540798][T17698]  __ia32_compat_sys_ioctl+0x128/0xc90
[ 1113.540829][T17698]  ? __fget_files+0x2a/0x420
[ 1113.540848][T17698]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1113.540879][T17698]  ? __fget_files+0x2a/0x420
[ 1113.540906][T17698]  ? fput+0x9b/0xd0
[ 1113.540928][T17698]  ? ksys_write+0x275/0x2d0
[ 1113.540966][T17698]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1113.540990][T17698]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1113.541089][T17698]  __do_fast_syscall_32+0xb4/0x110
[ 1113.541125][T17698]  ? exc_page_fault+0x5f8/0x920
[ 1113.541152][T17698]  do_fast_syscall_32+0x34/0x80
[ 1113.541177][T17698]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1113.541203][T17698] RIP: 0023:0xf7f71539
[ 1113.541223][T17698] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1113.541241][T17698] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1113.541274][T17698] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000c2c45512
[ 1113.541289][T17698] RDX: 0000000080000080 RSI: 0000000000000000 RDI: 0000000000000000
[ 1113.541302][T17698] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1113.541313][T17698] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1113.541328][T17698] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1113.541361][T17698]  </TASK>
[ 1113.545020][T17698] ERROR: Out of memory at tomoyo_realpath_from_path.
[ 1114.209750][T10434] usb 2-1: new full-speed USB device number 50 using dummy_hcd
[ 1114.760535][ T5929] usb 3-1: USB disconnect, device number 83
[ 1115.599960][ T5888] usb 6-1: new high-speed USB device number 40 using dummy_hcd
[ 1115.868805][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16
[ 1115.879055][ T5888] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64
[ 1115.911135][ T5888] usb 6-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32
[ 1115.938119][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1115.974634][T17725] ip6gretap1: entered allmulticast mode
[ 1115.982095][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1115.989046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1116.007249][ T5888] usb 6-1: Product: syz
[ 1116.012664][ T5888] usb 6-1: Manufacturer: syz
[ 1116.027751][ T5888] usb 6-1: SerialNumber: syz
[ 1116.030032][T10434] usb 5-1: new high-speed USB device number 46 using dummy_hcd
[ 1116.070228][ T5888] usb 6-1: config 0 descriptor??
[ 1116.118328][T17714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1116.130620][T17714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1116.216046][T17727] delete_channel: no stack
[ 1116.269075][T10434] usb 5-1: config 0 has no interfaces?
[ 1116.275776][T17727] FAULT_INJECTION: forcing a failure.
[ 1116.275776][T17727] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1116.302988][T10434] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1116.317867][T10434] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1116.339735][T17727] CPU: 1 UID: 0 PID: 17727 Comm: syz.2.3399 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1116.339768][T17727] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1116.339782][T17727] Call Trace:
[ 1116.339791][T17727]  <TASK>
[ 1116.339811][T17727]  dump_stack_lvl+0x241/0x360
[ 1116.339850][T17727]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1116.339882][T17727]  ? __pfx__printk+0x10/0x10
[ 1116.339933][T17727]  should_fail_ex+0x424/0x570
[ 1116.339970][T17727]  _copy_from_user+0x2d/0xb0
[ 1116.340001][T17727]  input_event_from_user+0x102/0x410
[ 1116.340028][T17727]  ? __pfx_input_event_from_user+0x10/0x10
[ 1116.340063][T17727]  evdev_write+0x36b/0x5e0
[ 1116.340108][T17727]  ? __pfx_evdev_write+0x10/0x10
[ 1116.340144][T17727]  ? bpf_lsm_file_permission+0x9/0x10
[ 1116.340175][T17727]  ? rw_verify_area+0x246/0x630
[ 1116.340202][T17727]  ? __pfx_evdev_write+0x10/0x10
[ 1116.340236][T17727]  vfs_write+0x2bc/0xd10
[ 1116.340278][T17727]  ? __pfx_vfs_write+0x10/0x10
[ 1116.340308][T17727]  ? __fget_files+0x2a/0x420
[ 1116.340328][T17727]  ? __fget_files+0x2a/0x420
[ 1116.340350][T17727]  ? __fget_files+0x39d/0x420
[ 1116.340369][T17727]  ? __fget_files+0x2a/0x420
[ 1116.340405][T17727]  ksys_write+0x19d/0x2d0
[ 1116.340437][T17727]  ? __pfx_ksys_write+0x10/0x10
[ 1116.340470][T17727]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1116.340493][T17727]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1116.340518][T17727]  __do_fast_syscall_32+0xb4/0x110
[ 1116.340541][T17727]  ? exc_page_fault+0x5f8/0x920
[ 1116.340572][T17727]  do_fast_syscall_32+0x34/0x80
[ 1116.340595][T17727]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1116.340621][T17727] RIP: 0023:0xf7f63539
[ 1116.340640][T17727] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1116.340659][T17727] RSP: 002b:00000000f508655c EFLAGS: 00000206 ORIG_RAX: 0000000000000004
[ 1116.340683][T17727] RAX: ffffffffffffffda RBX: 000000000000000b RCX: 0000000080000040
[ 1116.340698][T17727] RDX: 0000000000002250 RSI: 0000000000000000 RDI: 0000000000000000
[ 1116.340711][T17727] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1116.340724][T17727] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1116.340737][T17727] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1116.340769][T17727]  </TASK>
[ 1116.632163][T10434] usb 5-1: Product: syz
[ 1116.636529][T10434] usb 5-1: Manufacturer: syz
[ 1116.641233][T10434] usb 5-1: SerialNumber: syz
[ 1116.671907][T17714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1116.679429][T17714] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22
[ 1116.696613][T10434] usb 5-1: config 0 descriptor??
[ 1117.015177][T17723] openvswitch: netlink: Message has -1 unknown bytes.
[ 1117.150278][ T5888] dm9601: No valid MAC address in EEPROM, using 00:00:00:00:00:00
[ 1117.798961][ T5888] dm9601 6-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71
[ 1118.224974][ T5888] dm9601 6-1:0.0 eth5: register 'dm9601' at usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet, 5a:c8:8b:ff:a9:6d
[ 1118.277007][ T5888] usb 6-1: USB disconnect, device number 40
[ 1118.340467][ T5888] dm9601 6-1:0.0 eth5: unregister 'dm9601' usb-dummy_hcd.5-1, Davicom DM96xx USB 10/100 Ethernet
[ 1118.499862][T14489] usb 3-1: new high-speed USB device number 84 using dummy_hcd
[ 1118.528139][T17746] FAULT_INJECTION: forcing a failure.
[ 1118.528139][T17746] name failslab, interval 1, probability 0, space 0, times 0
[ 1118.570632][T17746] CPU: 1 UID: 0 PID: 17746 Comm: syz.1.3403 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1118.570666][T17746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1118.570680][T17746] Call Trace:
[ 1118.570689][T17746]  <TASK>
[ 1118.570699][T17746]  dump_stack_lvl+0x241/0x360
[ 1118.570739][T17746]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1118.570771][T17746]  ? __pfx__printk+0x10/0x10
[ 1118.570800][T17746]  ? cgroup_rstat_updated+0x144/0xc40
[ 1118.570837][T17746]  ? __pfx___might_resched+0x10/0x10
[ 1118.570863][T17746]  should_fail_ex+0x424/0x570
[ 1118.570901][T17746]  should_failslab+0xac/0x100
[ 1118.570934][T17746]  __kmalloc_noprof+0xdf/0x4d0
[ 1118.570957][T17746]  ? iovec_from_user+0x87/0x240
[ 1118.570990][T17746]  iovec_from_user+0x87/0x240
[ 1118.571024][T17746]  __import_iovec+0x175/0x830
[ 1118.571065][T17746]  import_iovec+0x7c/0xb0
[ 1118.571098][T17746]  get_compat_msghdr+0x45e/0x730
[ 1118.571136][T17746]  ? __pfx_get_compat_msghdr+0x10/0x10
[ 1118.571180][T17746]  __sys_sendmmsg+0x464/0x7b0
[ 1118.571214][T17746]  ? __pfx___sys_sendmmsg+0x10/0x10
[ 1118.571239][T17746]  ? __lock_acquire+0xad5/0xd80
[ 1118.571309][T17746]  ? vfs_write+0xb29/0xd10
[ 1118.571365][T17746]  ? __mutex_unlock_slowpath+0x229/0x800
[ 1118.571400][T17746]  ? __pfx___mutex_unlock_slowpath+0x10/0x10
[ 1118.571423][T17746]  ? __fget_files+0x2a/0x420
[ 1118.571457][T17746]  ? fput+0x9b/0xd0
[ 1118.571480][T17746]  ? ksys_write+0x275/0x2d0
[ 1118.571521][T17746]  __ia32_compat_sys_sendmmsg+0xa2/0xc0
[ 1118.571555][T17746]  __do_fast_syscall_32+0xb4/0x110
[ 1118.571583][T17746]  ? exc_page_fault+0x5f8/0x920
[ 1118.571611][T17746]  do_fast_syscall_32+0x34/0x80
[ 1118.571635][T17746]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1118.571661][T17746] RIP: 0023:0xf7f71539
[ 1118.571681][T17746] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1118.571700][T17746] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000159
[ 1118.571723][T17746] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080003cc0
[ 1118.571739][T17746] RDX: 0000000000000172 RSI: 0000000004000000 RDI: 0000000000000000
[ 1118.571754][T17746] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1118.571765][T17746] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1118.571778][T17746] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1118.571808][T17746]  </TASK>
[ 1118.824572][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1118.986442][T17751] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3405'.
[ 1119.010071][T14489] usb 3-1: Using ep0 maxpacket: 16
[ 1119.017369][T14489] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1119.025557][T14489] usb 3-1: config 0 has no interface number 0
[ 1119.031777][T14489] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1119.042895][T14489] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1119.057773][T14489] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1119.067493][T14489] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1119.077073][T14489] usb 3-1: Product: syz
[ 1119.081435][T14489] usb 3-1: SerialNumber: syz
[ 1119.090779][T14489] usb 3-1: config 0 descriptor??
[ 1119.101343][T14489] cm109 3-1:0.8: invalid payload size 1024, expected 4
[ 1119.111904][T14489] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input60
[ 1119.213842][ T5890] usb 5-1: USB disconnect, device number 46
[ 1119.835360][T17742] 8021q: VLANs not supported on ip6gre0
[ 1119.842958][T17742] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3402'.
[ 1119.860534][T17742] macvlan2: entered promiscuous mode
[ 1119.889777][T14489] usb 2-1: new high-speed USB device number 51 using dummy_hcd
[ 1119.936639][    C1] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1119.943946][    C1] cm109_urb_ctl_callback: 2 callbacks suppressed
[ 1119.943970][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.958960][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.966770][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.974073][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.981961][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.989152][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.996348][T10434] usb 3-1: USB disconnect, device number 84
[ 1119.996420][    C1] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1119.996437][    C1] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1120.409672][T14489] usb 2-1: Using ep0 maxpacket: 32
[ 1120.435528][T10434] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1120.523312][T14489] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1120.559765][T14489] usb 2-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1120.594341][T14489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1120.630764][T14489] usb 2-1: Product: syz
[ 1120.635807][T14489] usb 2-1: Manufacturer: syz
[ 1120.645658][T14489] usb 2-1: SerialNumber: syz
[ 1120.653501][T14489] usb 2-1: config 0 descriptor??
[ 1120.666541][T14489] hdpvr 2-1:0.0: Could not find bulk-in endpoint
[ 1120.680843][T14489] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12
[ 1120.850044][ T5890] usb 5-1: new high-speed USB device number 47 using dummy_hcd
[ 1121.012854][ T5890] usb 5-1: device descriptor read/64, error -71
[ 1121.279881][ T5890] usb 5-1: new high-speed USB device number 48 using dummy_hcd
[ 1121.355620][T10434] usb 6-1: new high-speed USB device number 41 using dummy_hcd
[ 1121.479736][ T5890] usb 5-1: device descriptor read/64, error -71
[ 1121.513685][T17780] "syz.0.3415" (17780) uses obsolete ecb(arc4) skcipher
[ 1121.559823][T10434] usb 6-1: Using ep0 maxpacket: 32
[ 1121.603760][ T5890] usb usb5-port1: attempt power cycle
[ 1121.780214][T10434] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1121.835865][T10434] usb 6-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1121.869327][T10434] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1121.878054][T10434] usb 6-1: Product: syz
[ 1121.889686][  T976] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[ 1121.900673][T10434] usb 6-1: Manufacturer: syz
[ 1121.906578][T10434] usb 6-1: SerialNumber: syz
[ 1121.918670][T10434] usb 6-1: config 0 descriptor??
[ 1122.020742][ T5890] usb 5-1: new high-speed USB device number 49 using dummy_hcd
[ 1122.191816][ T5890] usb 5-1: device descriptor read/8, error -71
[ 1122.217844][  T976] usb 1-1: New USB device found, idVendor=1604, idProduct=8001, bcdDevice=44.1f
[ 1122.227267][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1122.257591][  T976] usb 1-1: Product: syz
[ 1122.289925][  T976] usb 1-1: Manufacturer: syz
[ 1122.294576][  T976] usb 1-1: SerialNumber: syz
[ 1122.366916][  T976] usb 1-1: config 0 descriptor??
[ 1122.441635][ T5890] usb 5-1: new high-speed USB device number 50 using dummy_hcd
[ 1122.485097][ T5890] usb 5-1: device descriptor read/8, error -71
[ 1122.817207][ T5890] usb usb5-port1: unable to enumerate USB device
[ 1122.840116][  T976] usb 3-1: new high-speed USB device number 85 using dummy_hcd
[ 1122.903696][ T5891] usb 2-1: USB disconnect, device number 51
[ 1123.003939][T10434] ath6kl: Failed to submit usb control message: -110
[ 1123.020427][  T976] usb 3-1: Using ep0 maxpacket: 16
[ 1123.039710][T10434] ath6kl: unable to send the bmi data to the device: -110
[ 1123.063932][T10434] ath6kl: Unable to send get target info: -110
[ 1123.082442][  T976] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1123.109412][  T976] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1123.133093][T10434] ath6kl: Failed to init ath6kl core: -110
[ 1123.169145][T10434] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1123.199126][  T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1123.263744][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1123.359031][  T976] usb 3-1: config 0 descriptor??
[ 1123.563894][ T5891] usb 1-1: USB disconnect, device number 24
[ 1123.753030][T17785] netlink: 'syz.2.3417': attribute type 6 has an invalid length.
[ 1123.762081][  T976] usb 3-1: USB disconnect, device number 85
[ 1124.100127][  T976] usb 3-1: new high-speed USB device number 86 using dummy_hcd
[ 1124.249730][  T976] usb 3-1: device descriptor read/64, error -71
[ 1124.313138][ T5888] usb 6-1: USB disconnect, device number 41
[ 1124.499761][  T976] usb 3-1: new high-speed USB device number 87 using dummy_hcd
[ 1124.679682][  T976] usb 3-1: device descriptor read/64, error -71
[ 1124.830260][ T5891] usb 6-1: new high-speed USB device number 42 using dummy_hcd
[ 1124.842671][  T976] usb usb3-port1: attempt power cycle
[ 1124.989789][ T5891] usb 6-1: Using ep0 maxpacket: 16
[ 1124.997387][ T5891] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1125.024145][ T5891] usb 6-1: config 0 has no interface number 0
[ 1125.060964][ T5891] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1125.107446][ T5891] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1125.140356][ T5891] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1125.158778][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1125.199830][ T5891] usb 6-1: Product: syz
[ 1125.219791][ T5891] usb 6-1: SerialNumber: syz
[ 1125.260216][  T976] usb 3-1: new high-speed USB device number 88 using dummy_hcd
[ 1125.270472][ T5891] usb 6-1: config 0 descriptor??
[ 1125.341718][ T5891] cm109 6-1:0.8: invalid payload size 1024, expected 4
[ 1125.360912][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input61
[ 1125.487506][  T976] usb 3-1: device not accepting address 88, error -71
[ 1125.758162][T17804] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3422'.
[ 1125.808872][T17804] macvlan2: entered promiscuous mode
[ 1125.912989][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1125.920468][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1125.927992][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1125.935408][ T5929] usb 6-1: USB disconnect, device number 42
[ 1125.941398][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1125.941419][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1126.005227][ T5929] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1126.129831][  T976] usb 3-1: new high-speed USB device number 89 using dummy_hcd
[ 1126.181220][  T976] usb 3-1: Using ep0 maxpacket: 32
[ 1126.202121][  T976] usb 3-1: config index 0 descriptor too short (expected 38083, got 36)
[ 1126.221986][  T976] usb 3-1: config 28 has too many interfaces: 237, using maximum allowed: 32
[ 1126.249862][  T976] usb 3-1: config 28 has an invalid descriptor of length 127, skipping remainder of the config
[ 1126.289664][  T976] usb 3-1: config 28 has 0 interfaces, different from the descriptor's value: 237
[ 1126.315356][  T976] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[ 1126.349766][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1126.620418][T17813] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1126.659435][T17813] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1126.711584][T17819] delete_channel: no stack
[ 1126.715211][T17827] FAULT_INJECTION: forcing a failure.
[ 1126.715211][T17827] name failslab, interval 1, probability 0, space 0, times 0
[ 1126.740437][T17827] CPU: 0 UID: 0 PID: 17827 Comm: syz.4.3432 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1126.740473][T17827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1126.740487][T17827] Call Trace:
[ 1126.740496][T17827]  <TASK>
[ 1126.740506][T17827]  dump_stack_lvl+0x241/0x360
[ 1126.740545][T17827]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1126.740575][T17827]  ? __pfx__printk+0x10/0x10
[ 1126.740610][T17827]  ? ref_tracker_alloc+0x316/0x4c0
[ 1126.740636][T17827]  should_fail_ex+0x424/0x570
[ 1126.740673][T17827]  should_failslab+0xac/0x100
[ 1126.740698][T17827]  kmem_cache_alloc_noprof+0x78/0x390
[ 1126.740719][T17827]  ? skb_clone+0x20c/0x390
[ 1126.740746][T17827]  skb_clone+0x20c/0x390
[ 1126.740771][T17827]  __netlink_deliver_tap+0x3c4/0x7f0
[ 1126.740811][T17827]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1126.740837][T17827]  netlink_deliver_tap+0x19d/0x1b0
[ 1126.740865][T17827]  netlink_sendskb+0x68/0x140
[ 1126.740890][T17827]  netlink_unicast+0x39f/0x9a0
[ 1126.740911][T17827]  ? __asan_memcpy+0x40/0x70
[ 1126.740948][T17827]  ? __pfx_netlink_unicast+0x10/0x10
[ 1126.740983][T17827]  netlink_rcv_skb+0x296/0x480
[ 1126.741010][T17827]  ? __pfx_nfnetlink_rcv_msg+0x10/0x10
[ 1126.741045][T17827]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1126.741086][T17827]  ? apparmor_capable+0x13b/0x1b0
[ 1126.741109][T17827]  ? bpf_lsm_capable+0x9/0x10
[ 1126.741140][T17827]  ? security_capable+0x7e/0x2d0
[ 1126.741174][T17827]  nfnetlink_rcv+0x296/0x28f0
[ 1126.741216][T17827]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 1126.741238][T17827]  ? __pfx___local_bh_enable_ip+0x10/0x10
[ 1126.741276][T17827]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 1126.741297][T17827]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 1126.741320][T17827]  ? __dev_queue_xmit+0x1780/0x3f60
[ 1126.741339][T17827]  ? kasan_save_track+0x3f/0x80
[ 1126.741367][T17827]  ? __kasan_slab_alloc+0x66/0x80
[ 1126.741404][T17827]  ? __do_fast_syscall_32+0xb4/0x110
[ 1126.741431][T17827]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1126.741461][T17827]  ? __dev_queue_xmit+0x2f9/0x3f60
[ 1126.741488][T17827]  ? __pfx___dev_queue_xmit+0x10/0x10
[ 1126.741530][T17827]  ? ref_tracker_free+0x63e/0x7e0
[ 1126.741552][T17827]  ? __asan_memcpy+0x40/0x70
[ 1126.741579][T17827]  ? __pfx_ref_tracker_free+0x10/0x10
[ 1126.741598][T17827]  ? __skb_clone+0x5c/0x6d0
[ 1126.741636][T17827]  ? skb_clone+0x240/0x390
[ 1126.741669][T17827]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1126.741698][T17827]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1126.741727][T17827]  netlink_unicast+0x7f8/0x9a0
[ 1126.741761][T17827]  ? __pfx_netlink_unicast+0x10/0x10
[ 1126.741786][T17827]  ? skb_put+0x114/0x1f0
[ 1126.741822][T17827]  netlink_sendmsg+0x8c3/0xcd0
[ 1126.741864][T17827]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1126.741896][T17827]  ? aa_sock_msg_perm+0x91/0x160
[ 1126.741929][T17827]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1126.741954][T17827]  __sock_sendmsg+0x221/0x270
[ 1126.741983][T17827]  ____sys_sendmsg+0x523/0x860
[ 1126.742026][T17827]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1126.742077][T17827]  __sys_sendmsg+0x271/0x360
[ 1126.742115][T17827]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1126.742209][T17827]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1126.742232][T17827]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1126.742256][T17827]  __do_fast_syscall_32+0xb4/0x110
[ 1126.742279][T17827]  ? exc_page_fault+0x5f8/0x920
[ 1126.742306][T17827]  do_fast_syscall_32+0x34/0x80
[ 1126.742329][T17827]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1126.742355][T17827] RIP: 0023:0xf7f14539
[ 1126.742374][T17827] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1126.742393][T17827] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1126.742417][T17827] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000240
[ 1126.742433][T17827] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1126.742446][T17827] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1126.742459][T17827] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1126.742473][T17827] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1126.742504][T17827]  </TASK>
[ 1126.742664][  T976] usb 3-1: string descriptor 0 read error: -71
[ 1127.387550][  T976] usb 3-1: USB disconnect, device number 89
[ 1127.409733][ T5891] usb 6-1: new high-speed USB device number 43 using dummy_hcd
[ 1127.618325][ T5891] usb 6-1: Using ep0 maxpacket: 16
[ 1127.633436][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1127.651784][ T5891] usb 6-1: config 0 has no interfaces?
[ 1127.664301][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1127.688098][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1127.708767][ T5891] usb 6-1: config 0 descriptor??
[ 1128.769869][ T5891] usb 3-1: new high-speed USB device number 90 using dummy_hcd
[ 1128.809780][ T5890] usb 2-1: new full-speed USB device number 52 using dummy_hcd
[ 1128.819897][ T5888] usb 5-1: new high-speed USB device number 51 using dummy_hcd
[ 1128.859859][ T5929] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[ 1128.935637][ T5891] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.948742][ T5891] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df
[ 1128.963890][ T5891] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1128.977610][ T5891] usb 3-1: config 0 descriptor??
[ 1128.985237][ T5890] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1128.995463][ T5888] usb 5-1: config 0 has an invalid descriptor of length 1, skipping remainder of the config
[ 1129.010218][ T5929] usb 1-1: Using ep0 maxpacket: 16
[ 1129.011598][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1129.021415][ T5891] pwc: Askey VC010 type 2 USB webcam detected.
[ 1129.029750][ T5890] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2
[ 1129.039051][ T5929] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1129.048225][ T5890] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[ 1129.049456][ T5929] usb 1-1: config 0 has no interface number 0
[ 1129.061519][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c293, bcdDevice= 0.00
[ 1129.061552][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1129.070863][ T5888] usb 5-1: config 0 descriptor??
[ 1129.093785][ T5929] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1129.107785][ T5929] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1129.120155][ T5890] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1129.130913][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1129.135584][ T5929] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1129.153674][ T5890] usb 2-1: Product: syz
[ 1129.153719][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1129.157871][ T5890] usb 2-1: Manufacturer: syz
[ 1129.157892][ T5890] usb 2-1: SerialNumber: syz
[ 1129.174680][ T5890] cdc_ncm 2-1:1.0: skipping garbage
[ 1129.185007][ T5890] cdc_ncm 2-1:1.0: CDC Union missing and no IAD found
[ 1129.186714][ T5929] usb 1-1: Product: syz
[ 1129.199797][ T5929] usb 1-1: SerialNumber: syz
[ 1129.206959][ T5890] cdc_ncm 2-1:1.0: bind() failure
[ 1129.208599][ T5929] usb 1-1: config 0 descriptor??
[ 1129.226963][ T5929] cm109 1-1:0.8: invalid payload size 1024, expected 4
[ 1129.242642][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input63
[ 1129.435114][ T5891] pwc: recv_control_msg error -32 req 02 val 2b00
[ 1129.453170][   T30] audit: type=1326 audit(1745153744.037:1173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.475458][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1129.495256][ T5891] pwc: recv_control_msg error -32 req 02 val 2700
[ 1129.505946][ T5891] pwc: recv_control_msg error -71 req 02 val 2c00
[ 1129.522691][ T5891] pwc: recv_control_msg error -71 req 04 val 1000
[ 1129.612166][ T5891] pwc: recv_control_msg error -71 req 04 val 1300
[ 1129.629258][   T30] audit: type=1326 audit(1745153744.037:1174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.642803][ T5891] pwc: recv_control_msg error -71 req 04 val 1400
[ 1129.668855][   T30] audit: type=1326 audit(1745153744.037:1175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.691088][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1129.692593][ T5891] pwc: recv_control_msg error -71 req 02 val 2000
[ 1129.712751][T17862] program syz.4.3440 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1129.723318][ T5890] usb 2-1: USB disconnect, device number 52
[ 1129.768124][   T30] audit: type=1326 audit(1745153744.037:1176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=54 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.777182][T17858] vlan2: entered promiscuous mode
[ 1129.790311][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1129.804669][ T5929] usb 6-1: USB disconnect, device number 43
[ 1129.832482][T17862] loop2: detected capacity change from 0 to 7
[ 1129.838886][   T30] audit: type=1326 audit(1745153744.037:1177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.866818][ T5891] pwc: recv_control_msg error -71 req 02 val 2100
[ 1129.906027][T17862] Dev loop2: unable to read RDB block 7
[ 1129.912498][ T5891] pwc: recv_control_msg error -71 req 04 val 1500
[ 1129.928682][T17862]  loop2: unable to read partition table
[ 1129.950718][ T5891] pwc: recv_control_msg error -71 req 02 val 2500
[ 1129.951570][ T5891] pwc: recv_control_msg error -71 req 02 val 2400
[ 1129.960046][   T30] audit: type=1326 audit(1745153744.037:1178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=135 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1129.979806][ T5891] pwc: recv_control_msg error -71 req 02 val 2600
[ 1129.996174][T17862] loop2: partition table beyond EOD, truncated
[ 1130.024726][ T5891] pwc: recv_control_msg error -71 req 02 val 2900
[ 1130.042505][T17868] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3441'.
[ 1130.055872][ T5891] pwc: recv_control_msg error -71 req 02 val 2800
[ 1130.069253][T17864] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3441'.
[ 1130.079853][ T5891] pwc: recv_control_msg error -71 req 04 val 1100
[ 1130.085402][T17862] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5)
[ 1130.096827][   T30] audit: type=1326 audit(1745153744.037:1179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1130.114335][ T5891] pwc: recv_control_msg error -71 req 04 val 1200
[ 1130.120851][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1130.160464][T17858] macvlan3: entered promiscuous mode
[ 1130.182069][   T30] audit: type=1326 audit(1745153744.037:1180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=295 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1130.183053][ T5215] Dev loop2: unable to read RDB block 7
[ 1130.204360][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1130.211162][   T30] audit: type=1326 audit(1745153744.037:1181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=240 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1130.240242][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1130.260697][ T5891] pwc: Registered as video103.
[ 1130.268724][ T5891] input: PWC snapshot button as /devices/platform/dummy_hcd.2/usb3/3-1/input/input64
[ 1130.298078][ T5215]  loop2: unable to read partition table
[ 1130.315603][ T5215] loop2: partition table beyond EOD, truncated
[ 1130.333905][ T5891] usb 3-1: USB disconnect, device number 90
[ 1130.415037][   T30] audit: type=1326 audit(1745153744.047:1182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17851 comm="syz.2.3438" exe="/root/syz-executor" sig=0 arch=40000003 syscall=383 compat=1 ip=0xf7f63539 code=0x7ffc0000
[ 1130.437390][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1130.445873][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1130.449984][ T5836] usb 1-1: USB disconnect, device number 25
[ 1130.452859][    C1] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1130.581331][ T5836] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1130.790104][T17875] FAULT_INJECTION: forcing a failure.
[ 1130.790104][T17875] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1130.824320][T17875] CPU: 0 UID: 0 PID: 17875 Comm: syz.1.3445 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1130.824359][T17875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1130.824374][T17875] Call Trace:
[ 1130.824383][T17875]  <TASK>
[ 1130.824392][T17875]  dump_stack_lvl+0x241/0x360
[ 1130.824434][T17875]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1130.824466][T17875]  ? __pfx__printk+0x10/0x10
[ 1130.824509][T17875]  should_fail_ex+0x424/0x570
[ 1130.824548][T17875]  _copy_to_user+0x31/0xb0
[ 1130.824580][T17875]  simple_read_from_buffer+0xc4/0x170
[ 1130.824617][T17875]  proc_fail_nth_read+0x1ef/0x260
[ 1130.824643][T17875]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1130.824668][T17875]  ? rw_verify_area+0x246/0x630
[ 1130.824696][T17875]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1130.824720][T17875]  vfs_read+0x21f/0xb90
[ 1130.824755][T17875]  ? __pfx___mutex_lock+0x10/0x10
[ 1130.824780][T17875]  ? __pfx_vfs_read+0x10/0x10
[ 1130.824812][T17875]  ? __fget_files+0x2a/0x420
[ 1130.824835][T17875]  ? __fget_files+0x39d/0x420
[ 1130.824862][T17875]  ? __fget_files+0x2a/0x420
[ 1130.824893][T17875]  ksys_read+0x19d/0x2d0
[ 1130.824924][T17875]  ? __pfx_ksys_read+0x10/0x10
[ 1130.824957][T17875]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1130.824979][T17875]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1130.825004][T17875]  __do_fast_syscall_32+0xb4/0x110
[ 1130.825028][T17875]  ? exc_page_fault+0x5f8/0x920
[ 1130.825055][T17875]  do_fast_syscall_32+0x34/0x80
[ 1130.825078][T17875]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1130.825104][T17875] RIP: 0023:0xf7f71539
[ 1130.825123][T17875] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1130.825143][T17875] RSP: 002b:00000000f5075590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1130.825166][T17875] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5075620
[ 1130.825181][T17875] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000
[ 1130.825194][T17875] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1130.825207][T17875] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1130.825220][T17875] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1130.825252][T17875]  </TASK>
[ 1131.056325][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1132.647913][T14489] usb 5-1: USB disconnect, device number 51
[ 1133.230243][T17913] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3457'.
[ 1133.278975][T17913] bridge1: entered promiscuous mode
[ 1133.349541][T17913] bridge1: entered allmulticast mode
[ 1133.389936][T14489] usb 2-1: new high-speed USB device number 53 using dummy_hcd
[ 1133.416359][T17914] program syz.5.3455 is using a deprecated SCSI ioctl, please convert it to SG_IO
[ 1133.459721][ T5836] usb 5-1: new high-speed USB device number 52 using dummy_hcd
[ 1133.560189][T14489] usb 2-1: Using ep0 maxpacket: 32
[ 1133.591736][T14489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 52, changing to 9
[ 1133.640962][T14489] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 8241, setting to 1024
[ 1133.659738][ T5836] usb 5-1: Using ep0 maxpacket: 16
[ 1133.691690][T14489] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=58.16
[ 1133.693541][ T5836] usb 5-1: config 0 has an invalid interface number: 8 but max is 0
[ 1133.756816][T14489] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1133.792660][ T5836] usb 5-1: config 0 has no interface number 0
[ 1133.816505][T14489] usb 2-1: Product: syz
[ 1133.821069][ T5836] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1133.839829][ T5836] usb 5-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1133.853796][ T5836] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1133.863418][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1133.877064][ T5836] usb 5-1: Product: syz
[ 1133.884663][T14489] usb 2-1: Manufacturer: syz
[ 1133.894759][ T5836] usb 5-1: SerialNumber: syz
[ 1133.909783][T14489] usb 2-1: SerialNumber: syz
[ 1133.913461][ T5836] usb 5-1: config 0 descriptor??
[ 1133.941630][T14489] usb 2-1: config 0 descriptor??
[ 1133.953182][ T5836] cm109 5-1:0.8: invalid payload size 1024, expected 4
[ 1133.980785][ T5836] input: CM109 USB driver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.8/input/input65
[ 1133.992747][T14489] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work!
[ 1134.291178][ T5836] usb 3-1: new high-speed USB device number 91 using dummy_hcd
[ 1134.385307][T17915] vlan2: entered promiscuous mode
[ 1134.443449][T17929] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3458'.
[ 1134.463545][ T9571] usb 2-1: Failed to submit usb control message: -71
[ 1134.465328][ T5890] usb 2-1: USB disconnect, device number 53
[ 1134.477362][ T5836] usb 3-1: Using ep0 maxpacket: 16
[ 1134.487715][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1134.489047][ T9571] usb 2-1: unable to send the bmi data to the device: -71
[ 1134.514575][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7
[ 1134.527904][ T9571] usb 2-1: unable to get target info from device
[ 1134.543832][ T9571] usb 2-1: could not get target info (-71)
[ 1134.559526][ T9571] usb 2-1: could not probe fw (-71)
[ 1134.560853][T17915] macvlan3: entered promiscuous mode
[ 1134.576370][ T5836] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0
[ 1134.609353][ T5836] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0
[ 1134.621132][ T5836] usb 3-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3
[ 1134.636518][ T5836] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42
[ 1134.654354][ T5836] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0
[ 1134.664257][ T5836] usb 3-1: Manufacturer: syz
[ 1134.672887][ T5836] usb 3-1: config 0 descriptor??
[ 1135.009823][ T5836] rc_core: IR keymap rc-hauppauge not found
[ 1135.015856][ T5836] Registered IR keymap rc-empty
[ 1135.029888][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.081077][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.139533][ T5836] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0
[ 1135.175702][ T5929] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[ 1135.191092][ T5929] hid-generic 0000:0003:0000.0012: unknown main item tag 0x0
[ 1135.199536][ T5836] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/rc/rc0/input66
[ 1135.255857][ T5929] hid-generic 0000:0003:0000.0012: hidraw0: <UNKNOWN> HID v0.00 Device [syz0] on syz1
[ 1135.264684][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.300758][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.350548][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.392955][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.442534][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.487414][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.538010][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.580117][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.625738][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.671431][ T5836] mceusb 3-1:0.0: Error: mce write submit urb error = -90
[ 1135.717548][ T5836] mceusb 3-1:0.0: Registered  with mce emulator interface version 1
[ 1135.735205][ T5836] mceusb 3-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active)
[ 1135.867683][    C0] cm109 5-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1135.869501][T14489] usb 5-1: USB disconnect, device number 52
[ 1135.874689][    C0] cm109 5-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1135.934815][T14489] cm109 5-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1136.003037][T17946] netlink: 136 bytes leftover after parsing attributes in process `syz.5.3465'.
[ 1136.042063][T17946] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check.
[ 1137.048159][ T5888] usb 3-1: USB disconnect, device number 91
[ 1137.060037][ T5891] usb 6-1: new high-speed USB device number 44 using dummy_hcd
[ 1137.389720][ T5891] usb 6-1: Using ep0 maxpacket: 32
[ 1137.600785][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1137.625070][ T5891] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1137.635176][ T5891] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1137.751155][ T5891] usb 6-1: Product: syz
[ 1137.755480][ T5891] usb 6-1: Manufacturer: syz
[ 1137.799684][ T5929] usb 5-1: new high-speed USB device number 53 using dummy_hcd
[ 1137.825648][ T5891] usb 6-1: SerialNumber: syz
[ 1137.887305][ T5891] usb 6-1: config 0 descriptor??
[ 1138.084145][ T5888] usb 3-1: new high-speed USB device number 92 using dummy_hcd
[ 1138.127345][ T5891] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[ 1138.153252][ T5891] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[ 1138.333366][ T5888] usb 3-1: Using ep0 maxpacket: 32
[ 1138.337240][ T5929] usb 5-1: Using ep0 maxpacket: 16
[ 1138.361552][ T5929] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1138.375838][ T5929] usb 5-1: config 0 has no interfaces?
[ 1138.383301][ T5929] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1138.422499][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1138.452429][ T5888] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1138.474730][ T5929] usb 5-1: config 0 descriptor??
[ 1138.619981][ T5890] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[ 1138.664181][ T5888] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1138.707357][ T5888] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1138.751045][ T5888] usb 3-1: Product: syz
[ 1138.784741][ T5888] usb 3-1: Manufacturer: syz
[ 1138.877516][ T5888] usb 3-1: SerialNumber: syz
[ 1138.888955][ T5890] usb 1-1: config 0 has no interfaces?
[ 1138.910864][ T5888] usb 3-1: config 0 descriptor??
[ 1138.958861][ T5890] usb 1-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1138.973242][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1139.240390][T17978] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3476'.
[ 1139.250070][T17978] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3476'.
[ 1139.269860][ T5890] usb 1-1: Product: syz
[ 1139.283098][ T5890] usb 1-1: Manufacturer: syz
[ 1139.299714][ T5890] usb 1-1: SerialNumber: syz
[ 1139.331379][ T5890] usb 1-1: config 0 descriptor??
[ 1139.908057][T17983] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3477'.
[ 1139.975496][T17983] sch_tbf: burst 0 is lower than device bridge2 mtu (1514) !
[ 1139.985095][ T5888] ath6kl: Failed to submit usb control message: -110
[ 1139.996758][ T5888] ath6kl: unable to send the bmi data to the device: -110
[ 1140.094149][ T5888] ath6kl: Unable to send get target info: -110
[ 1140.152756][ T5888] ath6kl: Failed to init ath6kl core: -110
[ 1140.188457][ T5888] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1140.617314][ T5891] usb 6-1: USB disconnect, device number 44
[ 1141.024828][ T5929] usb 5-1: USB disconnect, device number 53
[ 1141.199829][ T5891] usb 6-1: new high-speed USB device number 45 using dummy_hcd
[ 1141.299380][T17992] netlink: 164 bytes leftover after parsing attributes in process `syz.4.3479'.
[ 1141.359783][ T5891] usb 6-1: Using ep0 maxpacket: 16
[ 1141.376107][ T5891] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1141.388094][ T5891] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 22
[ 1141.414109][ T5888] usb 3-1: USB disconnect, device number 92
[ 1141.439314][ T5891] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[ 1141.454897][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[ 1141.465216][ T5891] usb 6-1: SerialNumber: syz
[ 1141.535850][T17996] xt_ecn: cannot match TCP bits for non-tcp packets
[ 1141.679974][ T5890] usb 2-1: new high-speed USB device number 54 using dummy_hcd
[ 1141.746720][ T5929] usb 6-1: USB disconnect, device number 45
[ 1141.851346][ T5890] usb 2-1: Using ep0 maxpacket: 16
[ 1141.865221][ T5890] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1141.914492][ T5890] usb 2-1: config 0 has no interface number 0
[ 1141.931741][ T5890] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1141.946723][ T5929] usb 1-1: USB disconnect, device number 26
[ 1141.980979][ T5890] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1142.005772][ T5890] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1142.030025][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1142.039487][ T5890] usb 2-1: Product: syz
[ 1142.050566][ T5890] usb 2-1: SerialNumber: syz
[ 1142.062856][ T5890] usb 2-1: config 0 descriptor??
[ 1142.082559][ T5890] cm109 2-1:0.8: invalid payload size 1024, expected 4
[ 1142.105524][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input67
[ 1142.581802][T17994] syz_tun: entered promiscuous mode
[ 1142.587520][T17994] vlan2: entered promiscuous mode
[ 1142.733572][T18019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3481'.
[ 1142.830751][T17994] macvlan2: entered promiscuous mode
[ 1142.851125][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1142.858646][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.865831][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.873397][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.880647][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.888250][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.896278][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1142.896557][ T5891] usb 2-1: USB disconnect, device number 54
[ 1142.903265][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1143.046226][ T5891] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1143.571101][T18024] FAULT_INJECTION: forcing a failure.
[ 1143.571101][T18024] name failslab, interval 1, probability 0, space 0, times 0
[ 1143.635003][T18024] CPU: 0 UID: 0 PID: 18024 Comm: syz.1.3491 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1143.635029][T18024] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1143.635039][T18024] Call Trace:
[ 1143.635045][T18024]  <TASK>
[ 1143.635053][T18024]  dump_stack_lvl+0x241/0x360
[ 1143.635082][T18024]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1143.635105][T18024]  ? __pfx__printk+0x10/0x10
[ 1143.635130][T18024]  ? __pfx___might_resched+0x10/0x10
[ 1143.635150][T18024]  should_fail_ex+0x424/0x570
[ 1143.635177][T18024]  should_failslab+0xac/0x100
[ 1143.635194][T18024]  __kmalloc_cache_noprof+0x73/0x370
[ 1143.635210][T18024]  ? vkms_plane_duplicate_state+0x8d/0x110
[ 1143.635230][T18024]  vkms_plane_duplicate_state+0x8d/0x110
[ 1143.635248][T18024]  drm_atomic_get_plane_state+0x249/0x510
[ 1143.635273][T18024]  drm_atomic_helper_update_plane+0x8b/0x3a0
[ 1143.635308][T18024]  drm_mode_setplane+0x74d/0xbe0
[ 1143.635357][T18024]  ? __pfx_drm_mode_setplane+0x10/0x10
[ 1143.635386][T18024]  ? __lock_acquire+0xad5/0xd80
[ 1143.635420][T18024]  ? do_raw_spin_unlock+0x13c/0x8b0
[ 1143.635444][T18024]  ? _raw_spin_unlock+0x28/0x50
[ 1143.635470][T18024]  drm_ioctl_kernel+0x34e/0x450
[ 1143.635494][T18024]  ? __pfx_drm_mode_setplane+0x10/0x10
[ 1143.635516][T18024]  ? __pfx_drm_ioctl_kernel+0x10/0x10
[ 1143.635546][T18024]  drm_ioctl+0x687/0xbb0
[ 1143.635566][T18024]  ? __pfx_drm_mode_setplane+0x10/0x10
[ 1143.635596][T18024]  ? __pfx_drm_ioctl+0x10/0x10
[ 1143.635632][T18024]  ? __fget_files+0x2a/0x420
[ 1143.635647][T18024]  ? drm_compat_ioctl+0x11c/0x340
[ 1143.635668][T18024]  __ia32_compat_sys_ioctl+0x561/0xc90
[ 1143.635691][T18024]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1143.635714][T18024]  ? __fget_files+0x2a/0x420
[ 1143.635733][T18024]  ? fput+0x9b/0xd0
[ 1143.635750][T18024]  ? ksys_write+0x275/0x2d0
[ 1143.635777][T18024]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1143.635794][T18024]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1143.635811][T18024]  __do_fast_syscall_32+0xb4/0x110
[ 1143.635828][T18024]  ? exc_page_fault+0x5f8/0x920
[ 1143.635847][T18024]  do_fast_syscall_32+0x34/0x80
[ 1143.635864][T18024]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1143.635883][T18024] RIP: 0023:0xf7f71539
[ 1143.635897][T18024] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1143.635910][T18024] RSP: 002b:00000000f509655c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1143.635927][T18024] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000c03064b7
[ 1143.635938][T18024] RDX: 0000000080000040 RSI: 0000000000000000 RDI: 0000000000000000
[ 1143.635948][T18024] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1143.635957][T18024] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1143.635965][T18024] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1143.635987][T18024]  </TASK>
[ 1144.045871][T18027] fuse: Unknown parameter 'no'
[ 1144.237008][T18027] fuse: Unknown parameter 'no'
[ 1145.221795][ T5929] usb 2-1: new high-speed USB device number 55 using dummy_hcd
[ 1145.469804][ T5929] usb 2-1: Using ep0 maxpacket: 32
[ 1145.568637][ T5929] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1145.615617][ T5929] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1145.649627][ T5929] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1145.688536][ T5929] usb 2-1: Product: syz
[ 1145.708818][ T5929] usb 2-1: Manufacturer: syz
[ 1145.719115][ T5929] usb 2-1: SerialNumber: syz
[ 1145.770737][ T5929] usb 2-1: config 0 descriptor??
[ 1146.044773][T18034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3493'.
[ 1146.079925][T18034] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3493'.
[ 1146.840780][   T30] kauditd_printk_skb: 40 callbacks suppressed
[ 1146.840804][   T30] audit: type=1326 audit(1745153761.357:1223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18059 comm="syz.0.3499" exe="/root/syz-executor" sig=31 arch=40000003 syscall=240 compat=1 ip=0xf706d539 code=0x0
[ 1146.891658][ T5929] ath6kl: Failed to submit usb control message: -110
[ 1146.898659][ T5929] ath6kl: unable to send the bmi data to the device: -110
[ 1146.934546][ T5929] ath6kl: Unable to send get target info: -110
[ 1146.954655][ T5929] ath6kl: Failed to init ath6kl core: -110
[ 1146.971894][ T5929] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1147.539741][ T5929] usb 6-1: new high-speed USB device number 46 using dummy_hcd
[ 1147.699744][ T5929] usb 6-1: Using ep0 maxpacket: 16
[ 1147.709051][ T5929] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1147.717678][ T5929] usb 6-1: config 0 has no interface number 0
[ 1147.743744][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1147.757477][T18070] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3502'.
[ 1147.813715][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1147.842347][T18070] bridge3: entered promiscuous mode
[ 1147.846249][ T5929] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1147.857225][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1147.874965][ T5929] usb 6-1: Product: syz
[ 1147.885724][ T5929] usb 6-1: SerialNumber: syz
[ 1147.898906][T18070] bridge3: entered allmulticast mode
[ 1147.909221][ T5929] usb 6-1: config 0 descriptor??
[ 1147.932960][ T5929] cm109 6-1:0.8: invalid payload size 1024, expected 4
[ 1147.951050][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input68
[ 1148.343487][T18067] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3501'.
[ 1148.362294][T18067] macvlan3: entered promiscuous mode
[ 1148.376502][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1148.384161][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1148.392254][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1148.399669][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1148.406977][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1148.414871][ T5929] usb 6-1: USB disconnect, device number 46
[ 1148.421180][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1148.421204][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1148.498832][T14489] usb 2-1: USB disconnect, device number 55
[ 1148.540140][ T5929] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1148.590844][T18081] netlink: 'syz.4.3504': attribute type 16 has an invalid length.
[ 1148.599040][T18081] netlink: 'syz.4.3504': attribute type 17 has an invalid length.
[ 1148.703881][T18081] bridge0: port 2(bridge_slave_1) entered disabled state
[ 1148.712508][T18081] bridge0: port 1(bridge_slave_0) entered disabled state
[ 1148.978294][T18081] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 1149.015352][T18081] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 1149.417078][T18081] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.449226][T18081] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.491626][T18081] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.512046][ T5888] usb 6-1: new high-speed USB device number 47 using dummy_hcd
[ 1149.548481][T18081] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0
[ 1149.679832][ T5888] usb 6-1: Using ep0 maxpacket: 32
[ 1149.711937][ T5888] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1149.759702][ T5888] usb 6-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1149.824425][ T5888] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1149.908844][ T5888] usb 6-1: Product: syz
[ 1149.939210][ T5888] usb 6-1: Manufacturer: syz
[ 1149.967533][ T5888] usb 6-1: SerialNumber: syz
[ 1150.027022][ T5888] usb 6-1: config 0 descriptor??
[ 1150.084920][ T5888] hdpvr 6-1:0.0: Could not find bulk-in endpoint
[ 1150.110597][ T5888] hdpvr 6-1:0.0: probe with driver hdpvr failed with error -12
[ 1150.219664][ T5890] usb 3-1: new high-speed USB device number 93 using dummy_hcd
[ 1150.529678][ T5890] usb 3-1: Using ep0 maxpacket: 16
[ 1150.543629][ T5890] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.559539][ T5890] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[ 1150.569870][ T5891] usb 2-1: new high-speed USB device number 56 using dummy_hcd
[ 1150.609881][ T5890] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[ 1150.678945][ T5890] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[ 1150.730201][ T5891] usb 2-1: Using ep0 maxpacket: 16
[ 1150.779988][ T5888] usb 5-1: new high-speed USB device number 54 using dummy_hcd
[ 1150.791106][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1150.797791][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1150.890268][ T5891] usb 2-1: config 0 has no interfaces?
[ 1150.934063][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1150.954878][ T5890] usb 3-1: Product: syz
[ 1150.975244][ T5890] usb 3-1: Manufacturer: syz
[ 1151.002401][ T5890] usb 3-1: SerialNumber: syz
[ 1151.006636][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.065372][ T5891] usb 2-1: config 0 descriptor??
[ 1151.113332][ T5888] usb 5-1: Using ep0 maxpacket: 16
[ 1151.186053][ T5888] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1151.223445][ T5888] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1151.253857][ T5888] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1151.377634][ T5888] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1151.415015][ T5890] usb 3-1: cannot find UAC_HEADER
[ 1151.460221][ T5888] usb 5-1: config 0 descriptor??
[ 1151.482190][ T5890] snd-usb-audio 3-1:1.2: probe with driver snd-usb-audio failed with error -22
[ 1151.572248][ T5890] usb 3-1: USB disconnect, device number 93
[ 1152.469899][ T5890] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[ 1152.619738][ T5890] usb 1-1: Using ep0 maxpacket: 32
[ 1152.627965][ T5890] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1152.692445][ T5890] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1152.706817][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1152.716106][ T5890] usb 1-1: Product: syz
[ 1152.726018][ T5890] usb 1-1: Manufacturer: syz
[ 1152.747767][ T5890] usb 1-1: SerialNumber: syz
[ 1152.788498][ T5890] usb 1-1: config 0 descriptor??
[ 1153.105787][T18124] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3516'.
[ 1153.115269][T18124] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3516'.
[ 1153.228287][ T5891] usb 6-1: USB disconnect, device number 47
[ 1153.453045][ T5888] usb 5-1: USB disconnect, device number 54
[ 1153.963328][ T5890] ath6kl: Failed to submit usb control message: -110
[ 1154.002742][ T5890] ath6kl: unable to send the bmi data to the device: -110
[ 1154.019767][ T5890] ath6kl: Unable to send get target info: -110
[ 1154.029469][ T5890] ath6kl: Failed to init ath6kl core: -110
[ 1154.050364][ T5890] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1154.317452][ T5890] usb 2-1: USB disconnect, device number 56
[ 1155.059683][ T5890] usb 6-1: new high-speed USB device number 48 using dummy_hcd
[ 1155.230966][ T5890] usb 6-1: Using ep0 maxpacket: 16
[ 1155.269500][ T5890] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1155.309435][ T5890] usb 6-1: config 0 has no interface number 0
[ 1155.326771][ T5890] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1155.384029][ T5890] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1155.471414][ T5890] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1155.569689][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1155.608994][ T5890] usb 6-1: Product: syz
[ 1155.619853][ T5890] usb 6-1: SerialNumber: syz
[ 1155.635354][ T5890] usb 6-1: config 0 descriptor??
[ 1155.655656][ T5890] cm109 6-1:0.8: invalid payload size 1024, expected 4
[ 1155.683450][ T5890] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input69
[ 1155.724186][ T5891] usb 1-1: USB disconnect, device number 27
[ 1156.086172][T18139] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3522'.
[ 1156.106433][T18139] macvlan4: entered promiscuous mode
[ 1156.239682][ T5890] usb 5-1: new high-speed USB device number 55 using dummy_hcd
[ 1156.312643][    C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1156.314484][T10434] usb 6-1: USB disconnect, device number 48
[ 1156.319634][    C0] cm109 6-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1156.412528][T10434] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1156.413145][ T5890] usb 5-1: Using ep0 maxpacket: 32
[ 1156.461474][ T5890] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1156.493268][ T5890] usb 5-1: New USB device found, idVendor=2040, idProduct=4901, bcdDevice=47.77
[ 1156.503480][ T5890] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1156.519417][ T5890] usb 5-1: Product: syz
[ 1156.525740][ T5890] usb 5-1: Manufacturer: syz
[ 1156.535398][ T5890] usb 5-1: SerialNumber: syz
[ 1156.554566][ T5890] usb 5-1: config 0 descriptor??
[ 1156.564025][ T5890] hdpvr 5-1:0.0: Could not find bulk-in endpoint
[ 1156.573856][ T5890] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12
[ 1156.892492][T18161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3529'.
[ 1157.045077][T18161] bridge4: entered promiscuous mode
[ 1157.051270][T18161] bridge4: entered allmulticast mode
[ 1157.769694][ T5891] usb 6-1: new high-speed USB device number 49 using dummy_hcd
[ 1158.509671][ T5891] usb 6-1: Using ep0 maxpacket: 16
[ 1158.536855][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1158.559845][ T5891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1158.615452][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1158.683293][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1158.729915][ T5888] usb 3-1: new high-speed USB device number 94 using dummy_hcd
[ 1158.774781][ T5891] usb 6-1: config 0 descriptor??
[ 1158.996592][ T5891] usb 5-1: USB disconnect, device number 55
[ 1159.009920][ T5888] usb 3-1: Using ep0 maxpacket: 16
[ 1159.230929][ T5888] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1159.288702][ T5888] usb 3-1: config 0 has no interfaces?
[ 1159.313056][ T5888] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1159.334727][ T5888] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1159.392003][ T5888] usb 3-1: config 0 descriptor??
[ 1160.962649][  T976] usb 6-1: USB disconnect, device number 49
[ 1161.411229][  T976] usb 6-1: new high-speed USB device number 50 using dummy_hcd
[ 1161.437843][ T5836] usb 3-1: USB disconnect, device number 94
[ 1161.495226][ T5888] usb 2-1: new high-speed USB device number 57 using dummy_hcd
[ 1161.610721][  T976] usb 6-1: Using ep0 maxpacket: 16
[ 1161.629038][  T976] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1161.638995][  T976] usb 6-1: config 0 has no interface number 0
[ 1161.709791][  T976] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1161.751496][ T5888] usb 2-1: Using ep0 maxpacket: 32
[ 1161.806996][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1162.033225][  T976] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1162.110494][ T5888] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1162.130359][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1162.139094][  T976] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1162.187371][ T5888] usb 2-1: Product: syz
[ 1162.193783][  T976] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1162.214448][ T5888] usb 2-1: Manufacturer: syz
[ 1162.290264][  T976] usb 6-1: Product: syz
[ 1162.296154][ T5888] usb 2-1: SerialNumber: syz
[ 1162.313883][  T976] usb 6-1: SerialNumber: syz
[ 1162.326686][ T5888] usb 2-1: config 0 descriptor??
[ 1162.360320][  T976] usb 6-1: config 0 descriptor??
[ 1162.412884][  T976] cm109 6-1:0.8: invalid payload size 1024, expected 4
[ 1162.453338][  T976] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input70
[ 1162.575907][T18202] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3538'.
[ 1162.585349][T18202] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3538'.
[ 1162.906297][T18196] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3540'.
[ 1162.993677][T18196] macvlan5: entered promiscuous mode
[ 1163.171400][    C0] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1163.178611][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1163.185765][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1163.193103][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1163.201045][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1163.208128][  T976] usb 6-1: USB disconnect, device number 50
[ 1163.214301][    C0] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1163.214323][    C0] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1163.282548][  T976] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1163.399876][ T5888] ath6kl: Failed to submit usb control message: -110
[ 1163.414590][ T5888] ath6kl: unable to send the bmi data to the device: -110
[ 1163.434106][ T5888] ath6kl: Unable to send get target info: -110
[ 1163.497724][ T5888] ath6kl: Failed to init ath6kl core: -110
[ 1163.525504][ T5888] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1165.563727][ T5836] usb 2-1: USB disconnect, device number 57
[ 1166.839975][ T5836] usb 3-1: new high-speed USB device number 95 using dummy_hcd
[ 1167.000138][ T5836] usb 3-1: Using ep0 maxpacket: 16
[ 1167.021976][ T5836] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1167.032329][ T5836] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1167.053744][ T5836] usb 3-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1167.078788][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.107637][ T5836] usb 3-1: config 0 descriptor??
[ 1167.309782][ T5891] usb 5-1: new high-speed USB device number 56 using dummy_hcd
[ 1167.481183][ T5891] usb 5-1: Using ep0 maxpacket: 16
[ 1167.513267][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1167.524540][ T5891] usb 5-1: config 0 has no interfaces?
[ 1167.538447][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1167.560303][T18254] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3554'.
[ 1167.589854][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1167.629408][ T5891] usb 5-1: config 0 descriptor??
[ 1167.939701][ T5891] usb 2-1: new high-speed USB device number 58 using dummy_hcd
[ 1168.151261][ T5891] usb 2-1: Using ep0 maxpacket: 16
[ 1168.318108][ T5891] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1168.328683][ T5891] usb 2-1: config 0 has no interface number 0
[ 1168.886643][ T5891] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1168.968931][ T5891] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1169.000312][ T5891] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1169.011679][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1169.031735][ T5891] usb 2-1: Product: syz
[ 1169.040654][ T5891] usb 2-1: SerialNumber: syz
[ 1169.123525][  T976] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[ 1169.143917][ T5891] usb 2-1: config 0 descriptor??
[ 1169.262772][ T5891] cm109 2-1:0.8: invalid payload size 1024, expected 4
[ 1169.299773][  T976] usb 1-1: Using ep0 maxpacket: 32
[ 1169.317530][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1169.344324][ T5891] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input71
[ 1169.386705][  T976] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1169.457233][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1169.511023][ T5888] usb 3-1: USB disconnect, device number 95
[ 1169.585216][  T976] usb 1-1: Product: syz
[ 1169.596159][  T976] usb 1-1: Manufacturer: syz
[ 1169.609468][  T976] usb 1-1: SerialNumber: syz
[ 1169.640869][  T976] usb 1-1: config 0 descriptor??
[ 1169.690293][T18259] vlan2: entered promiscuous mode
[ 1170.075152][T18270] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3558'.
[ 1170.339770][T18270] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3558'.
[ 1170.424446][T18276] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3555'.
[ 1170.559102][T18280] macvlan3: entered promiscuous mode
[ 1170.624082][    C1] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1170.624846][ T5888] usb 2-1: USB disconnect, device number 58
[ 1170.631354][    C1] cm109 2-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1170.690736][  T976] ath6kl: Failed to submit usb control message: -110
[ 1170.703466][ T5888] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1170.714580][  T976] ath6kl: unable to send the bmi data to the device: -110
[ 1170.761488][  T976] ath6kl: Unable to send get target info: -110
[ 1170.795348][  T976] ath6kl: Failed to init ath6kl core: -110
[ 1170.830171][  T976] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1171.059885][ T5891] usb 5-1: USB disconnect, device number 56
[ 1171.389344][T18293] FAULT_INJECTION: forcing a failure.
[ 1171.389344][T18293] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1171.424866][T18293] CPU: 0 UID: 0 PID: 18293 Comm: syz.1.3565 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1171.424901][T18293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1171.424916][T18293] Call Trace:
[ 1171.424926][T18293]  <TASK>
[ 1171.424936][T18293]  dump_stack_lvl+0x241/0x360
[ 1171.424977][T18293]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1171.425018][T18293]  ? __pfx__printk+0x10/0x10
[ 1171.425059][T18293]  should_fail_ex+0x424/0x570
[ 1171.425096][T18293]  _copy_to_user+0x31/0xb0
[ 1171.425126][T18293]  simple_read_from_buffer+0xc4/0x170
[ 1171.425166][T18293]  proc_fail_nth_read+0x1ef/0x260
[ 1171.425191][T18293]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1171.425214][T18293]  ? rw_verify_area+0x246/0x630
[ 1171.425242][T18293]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1171.425263][T18293]  vfs_read+0x21f/0xb90
[ 1171.425288][T18293]  ? __pfx___mutex_lock+0x10/0x10
[ 1171.425306][T18293]  ? __pfx_vfs_read+0x10/0x10
[ 1171.425329][T18293]  ? __fget_files+0x2a/0x420
[ 1171.425345][T18293]  ? __fget_files+0x39d/0x420
[ 1171.425358][T18293]  ? __fget_files+0x2a/0x420
[ 1171.425380][T18293]  ksys_read+0x19d/0x2d0
[ 1171.425402][T18293]  ? __pfx_ksys_read+0x10/0x10
[ 1171.425425][T18293]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1171.425441][T18293]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1171.425467][T18293]  __do_fast_syscall_32+0xb4/0x110
[ 1171.425485][T18293]  ? exc_page_fault+0x5f8/0x920
[ 1171.425600][T18293]  do_fast_syscall_32+0x34/0x80
[ 1171.425623][T18293]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1171.425644][T18293] RIP: 0023:0xf7f71539
[ 1171.425659][T18293] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1171.425672][T18293] RSP: 002b:00000000f5096590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1171.425690][T18293] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620
[ 1171.425703][T18293] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000
[ 1171.425713][T18293] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1171.425722][T18293] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1171.425733][T18293] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1171.425755][T18293]  </TASK>
[ 1171.811921][ T5891] usb 5-1: new high-speed USB device number 57 using dummy_hcd
[ 1172.092468][  T976] usb 1-1: USB disconnect, device number 28
[ 1172.109782][ T5891] usb 5-1: device descriptor read/64, error -71
[ 1172.208520][T18295] syzkaller1: entered promiscuous mode
[ 1172.215535][T18295] syzkaller1: entered allmulticast mode
[ 1172.227184][T18295] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3566'.
[ 1172.239753][T18295] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3566'.
[ 1172.256680][T18295] geneve2: entered promiscuous mode
[ 1172.592718][T18295] geneve2: entered allmulticast mode
[ 1172.619682][ T5891] usb 5-1: new high-speed USB device number 58 using dummy_hcd
[ 1172.770119][ T5891] usb 5-1: device descriptor read/64, error -71
[ 1172.904099][ T5891] usb usb5-port1: attempt power cycle
[ 1173.249739][ T5890] usb 2-1: new high-speed USB device number 59 using dummy_hcd
[ 1173.259677][ T5891] usb 5-1: new high-speed USB device number 59 using dummy_hcd
[ 1173.340036][ T5891] usb 5-1: device descriptor read/8, error -71
[ 1173.499897][  T976] usb 3-1: new high-speed USB device number 96 using dummy_hcd
[ 1173.538162][ T5890] usb 2-1: Using ep0 maxpacket: 16
[ 1173.660889][ T5890] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1173.687133][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1173.729807][ T5891] usb 5-1: new high-speed USB device number 60 using dummy_hcd
[ 1173.761549][ T5891] usb 5-1: device descriptor read/8, error -71
[ 1173.843441][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1173.866491][ T5890] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1173.880255][ T5891] usb usb5-port1: unable to enumerate USB device
[ 1173.927353][  T976] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00
[ 1173.936738][ T5890] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1173.958187][  T976] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1173.973149][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1174.064848][  T976] usb 3-1: config 0 descriptor??
[ 1174.071530][ T5890] usb 2-1: config 0 descriptor??
[ 1174.294478][T18313] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1174.318648][T18313] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1174.699157][  T976] pyra 0003:1E7D:2CF6.0013: unknown main item tag 0x0
[ 1174.718869][  T976] pyra 0003:1E7D:2CF6.0013: item fetching failed at offset 4/7
[ 1174.753207][  T976] pyra 0003:1E7D:2CF6.0013: parse failed
[ 1174.786786][  T976] pyra 0003:1E7D:2CF6.0013: probe with driver pyra failed with error -22
[ 1174.831019][ T5891] usb 5-1: new high-speed USB device number 61 using dummy_hcd
[ 1174.934699][  T976] usb 3-1: USB disconnect, device number 96
[ 1175.382419][ T5891] usb 5-1: Using ep0 maxpacket: 16
[ 1175.555943][ T5891] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1175.652235][ T5891] usb 5-1: config 0 has no interfaces?
[ 1175.684768][ T5891] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1175.765317][ T5891] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1175.842773][ T5929] usb 2-1: USB disconnect, device number 59
[ 1175.910706][ T5891] usb 5-1: config 0 descriptor??
[ 1175.980247][T18340] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3577'.
[ 1176.139699][  T976] usb 3-1: new high-speed USB device number 97 using dummy_hcd
[ 1176.329990][  T976] usb 3-1: Using ep0 maxpacket: 16
[ 1176.337813][  T976] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1176.346502][  T976] usb 3-1: config 0 has no interface number 0
[ 1176.799922][ T5836] usb 2-1: new high-speed USB device number 60 using dummy_hcd
[ 1176.944208][  T976] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1176.979776][ T5836] usb 2-1: Using ep0 maxpacket: 32
[ 1176.991875][ T5836] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1177.072289][  T976] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1177.088626][T18348] FAULT_INJECTION: forcing a failure.
[ 1177.088626][T18348] name failslab, interval 1, probability 0, space 0, times 0
[ 1177.090628][ T5836] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1177.119180][T18348] CPU: 1 UID: 0 PID: 18348 Comm: syz.5.3579 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1177.119211][T18348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1177.119223][T18348] Call Trace:
[ 1177.119231][T18348]  <TASK>
[ 1177.119240][T18348]  dump_stack_lvl+0x241/0x360
[ 1177.119277][T18348]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1177.119306][T18348]  ? __pfx__printk+0x10/0x10
[ 1177.119338][T18348]  ? __pfx___might_resched+0x10/0x10
[ 1177.119364][T18348]  should_fail_ex+0x424/0x570
[ 1177.119400][T18348]  should_failslab+0xac/0x100
[ 1177.119422][T18348]  __kmalloc_noprof+0xdf/0x4d0
[ 1177.119442][T18348]  ? nla_strdup+0x9e/0x140
[ 1177.119461][T18348]  ? __kasan_kmalloc+0x9d/0xb0
[ 1177.119495][T18348]  nla_strdup+0x9e/0x140
[ 1177.119521][T18348]  nf_tables_newtable+0x5c0/0x1e80
[ 1177.119553][T18348]  ? __lock_acquire+0xad5/0xd80
[ 1177.119592][T18348]  ? __pfx_nf_tables_newtable+0x10/0x10
[ 1177.119626][T18348]  ? __nla_parse+0x40/0x60
[ 1177.119667][T18348]  nfnetlink_rcv+0x12eb/0x28f0
[ 1177.119732][T18348]  ? __pfx_nfnetlink_rcv+0x10/0x10
[ 1177.119814][T18348]  ? skb_clone+0x240/0x390
[ 1177.119847][T18348]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1177.119875][T18348]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1177.119903][T18348]  netlink_unicast+0x7f8/0x9a0
[ 1177.119936][T18348]  ? __pfx_netlink_unicast+0x10/0x10
[ 1177.119962][T18348]  ? skb_put+0x114/0x1f0
[ 1177.119995][T18348]  netlink_sendmsg+0x8c3/0xcd0
[ 1177.120035][T18348]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1177.120065][T18348]  ? aa_sock_msg_perm+0x91/0x160
[ 1177.120097][T18348]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1177.120121][T18348]  __sock_sendmsg+0x221/0x270
[ 1177.120149][T18348]  ____sys_sendmsg+0x523/0x860
[ 1177.120188][T18348]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1177.120239][T18348]  __sys_sendmsg+0x271/0x360
[ 1177.120277][T18348]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1177.120363][T18348]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1177.120387][T18348]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1177.120412][T18348]  __do_fast_syscall_32+0xb4/0x110
[ 1177.120435][T18348]  ? exc_page_fault+0x5f8/0x920
[ 1177.120463][T18348]  do_fast_syscall_32+0x34/0x80
[ 1177.120488][T18348]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1177.120515][T18348] RIP: 0023:0xf70dd539
[ 1177.120534][T18348] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1177.120553][T18348] RSP: 002b:00000000f50cd55c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1177.120576][T18348] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000080000100
[ 1177.120592][T18348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1177.120604][T18348] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1177.120616][T18348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1177.120629][T18348] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1177.120667][T18348]  </TASK>
[ 1177.412893][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1177.793145][ T1300] ieee802154 phy0 wpan0: encryption failed: -22
[ 1177.799809][ T1300] ieee802154 phy1 wpan1: encryption failed: -22
[ 1177.810982][ T5836] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1177.820266][ T5836] usb 2-1: Product: syz
[ 1177.821240][  T976] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1177.834758][  T976] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1177.847235][  T976] usb 3-1: Product: syz
[ 1177.863516][ T5836] usb 2-1: Manufacturer: syz
[ 1177.884651][ T5836] usb 2-1: SerialNumber: syz
[ 1177.889814][  T976] usb 3-1: SerialNumber: syz
[ 1177.901382][ T5836] usb 2-1: config 0 descriptor??
[ 1177.940699][  T976] usb 3-1: config 0 descriptor??
[ 1177.953042][  T976] cm109 3-1:0.8: invalid payload size 1024, expected 4
[ 1178.004519][  T976] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input72
[ 1178.203816][T18345] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3578'.
[ 1178.253107][T18345] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3578'.
[ 1178.471677][T18336] syz_tun: entered promiscuous mode
[ 1178.517067][T18336] vlan2: entered promiscuous mode
[ 1178.649064][T18358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'.
[ 1178.760021][ T5891] usb 5-1: USB disconnect, device number 61
[ 1178.780045][T18336] macvlan3: entered promiscuous mode
[ 1178.806569][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1178.813859][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.821179][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.828356][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.835529][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.843259][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.850394][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1178.857434][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1178.877310][ T5888] usb 3-1: USB disconnect, device number 97
[ 1178.934989][ T5888] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1179.000283][ T5836] ath6kl: Failed to submit usb control message: -110
[ 1179.007287][ T5836] ath6kl: unable to send the bmi data to the device: -110
[ 1179.026451][ T5836] ath6kl: Unable to send get target info: -110
[ 1179.037257][T18366] FAULT_INJECTION: forcing a failure.
[ 1179.037257][T18366] name failslab, interval 1, probability 0, space 0, times 0
[ 1179.042124][ T5836] ath6kl: Failed to init ath6kl core: -110
[ 1179.084068][ T5836] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1179.124504][T18366] CPU: 1 UID: 0 PID: 18366 Comm: syz.4.3585 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1179.124536][T18366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1179.124546][T18366] Call Trace:
[ 1179.124553][T18366]  <TASK>
[ 1179.124560][T18366]  dump_stack_lvl+0x241/0x360
[ 1179.124590][T18366]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1179.124613][T18366]  ? __pfx__printk+0x10/0x10
[ 1179.124638][T18366]  ? __pfx___might_resched+0x10/0x10
[ 1179.124658][T18366]  should_fail_ex+0x424/0x570
[ 1179.124687][T18366]  should_failslab+0xac/0x100
[ 1179.124705][T18366]  __kvmalloc_node_noprof+0x170/0x5a0
[ 1179.124722][T18366]  ? alloc_netdev_mqs+0x92c/0x1210
[ 1179.124744][T18366]  alloc_netdev_mqs+0x92c/0x1210
[ 1179.124766][T18366]  rtnl_create_link+0x2f9/0xc90
[ 1179.124788][T18366]  rtnl_newlink_create+0x2f2/0xcb0
[ 1179.124811][T18366]  ? __mutex_lock+0x380/0x10c0
[ 1179.124830][T18366]  ? __pfx_aa_get_newest_label+0x10/0x10
[ 1179.124852][T18366]  ? __pfx_rtnl_newlink_create+0x10/0x10
[ 1179.124877][T18366]  ? __pfx___mutex_lock+0x10/0x10
[ 1179.124901][T18366]  ? ns_capable+0x8a/0xf0
[ 1179.124917][T18366]  rtnl_newlink+0x18b0/0x1fe0
[ 1179.124951][T18366]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1179.124976][T18366]  ? __lock_acquire+0xad5/0xd80
[ 1179.125003][T18366]  ? __lock_acquire+0xad5/0xd80
[ 1179.125026][T18366]  ? __lock_acquire+0xad5/0xd80
[ 1179.125071][T18366]  ? is_bpf_text_address+0x26/0x2a0
[ 1179.125119][T18366]  ? is_bpf_text_address+0x288/0x2a0
[ 1179.125150][T18366]  ? is_bpf_text_address+0x26/0x2a0
[ 1179.125173][T18366]  ? __pfx_stack_trace_consume_entry+0x10/0x10
[ 1179.125193][T18366]  ? kernel_text_address+0xa7/0xe0
[ 1179.125213][T18366]  ? __kernel_text_address+0xd/0x40
[ 1179.125238][T18366]  ? aa_get_newest_label+0x101/0x6f0
[ 1179.125262][T18366]  ? __lock_acquire+0xad5/0xd80
[ 1179.125305][T18366]  ? __pfx_rtnl_newlink+0x10/0x10
[ 1179.125326][T18366]  rtnetlink_rcv_msg+0x80f/0xd70
[ 1179.125345][T18366]  ? rtnetlink_rcv_msg+0x1ba/0xd70
[ 1179.125369][T18366]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1179.125387][T18366]  ? __lock_acquire+0xad5/0xd80
[ 1179.125421][T18366]  netlink_rcv_skb+0x208/0x480
[ 1179.125442][T18366]  ? __pfx_rtnetlink_rcv_msg+0x10/0x10
[ 1179.125464][T18366]  ? __pfx_netlink_rcv_skb+0x10/0x10
[ 1179.125497][T18366]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1179.125518][T18366]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1179.125541][T18366]  netlink_unicast+0x7f8/0x9a0
[ 1179.125565][T18366]  ? __pfx_netlink_unicast+0x10/0x10
[ 1179.125583][T18366]  ? skb_put+0x114/0x1f0
[ 1179.125609][T18366]  netlink_sendmsg+0x8c3/0xcd0
[ 1179.125640][T18366]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1179.125663][T18366]  ? aa_sock_msg_perm+0x91/0x160
[ 1179.125687][T18366]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1179.125705][T18366]  __sock_sendmsg+0x221/0x270
[ 1179.125727][T18366]  ____sys_sendmsg+0x523/0x860
[ 1179.125758][T18366]  ? __pfx_____sys_sendmsg+0x10/0x10
[ 1179.125795][T18366]  __sys_sendmsg+0x271/0x360
[ 1179.125824][T18366]  ? __pfx___sys_sendmsg+0x10/0x10
[ 1179.125887][T18366]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1179.125903][T18366]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1179.125921][T18366]  __do_fast_syscall_32+0xb4/0x110
[ 1179.125937][T18366]  ? exc_page_fault+0x5f8/0x920
[ 1179.125956][T18366]  do_fast_syscall_32+0x34/0x80
[ 1179.125973][T18366]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1179.125991][T18366] RIP: 0023:0xf7f14539
[ 1179.126005][T18366] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1179.126018][T18366] RSP: 002b:00000000f503655c EFLAGS: 00000206 ORIG_RAX: 0000000000000172
[ 1179.126035][T18366] RAX: ffffffffffffffda RBX: 0000000000000010 RCX: 00000000800000c0
[ 1179.126046][T18366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1179.126055][T18366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1179.126063][T18366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1179.126073][T18366] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1179.126094][T18366]  </TASK>
[ 1179.524271][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1179.687886][T18371] xt_limit: Overflow, try lower: 83886080/3932
[ 1180.233248][ T5888] usb 2-1: USB disconnect, device number 60
[ 1180.299659][ T5836] usb 5-1: new high-speed USB device number 62 using dummy_hcd
[ 1180.519863][ T5836] usb 5-1: Using ep0 maxpacket: 16
[ 1180.589806][ T5836] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1180.690669][ T5836] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1180.918332][ T5836] usb 5-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1180.938254][ T5836] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1180.976701][ T5836] usb 5-1: config 0 descriptor??
[ 1182.045018][T18393] mmap: syz.1.3589 (18393): VmData 26025984 exceed data ulimit 0. Update limits or use boot option ignore_rlimit_data.
[ 1183.261854][ T5888] usb 5-1: USB disconnect, device number 62
[ 1183.380066][  T976] usb 3-1: new high-speed USB device number 98 using dummy_hcd
[ 1183.400277][ T5836] usb 6-1: new high-speed USB device number 51 using dummy_hcd
[ 1183.556664][T18415] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3600'.
[ 1183.570822][  T976] usb 3-1: Using ep0 maxpacket: 16
[ 1183.586534][  T976] usb 3-1: config 0 has an invalid interface number: 8 but max is 0
[ 1183.597479][ T5836] usb 6-1: Using ep0 maxpacket: 8
[ 1183.610858][ T5836] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1183.633726][  T976] usb 3-1: config 0 has no interface number 0
[ 1183.653956][ T5836] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1183.665510][  T976] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1183.679236][T18417] bridge5: entered promiscuous mode
[ 1183.694066][ T5836] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1183.696246][T18417] bridge5: entered allmulticast mode
[ 1183.710771][  T976] usb 3-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1183.753235][ T5836] usb 6-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1183.782762][  T976] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1183.795794][ T5836] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1183.815246][  T976] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1183.827740][ T5836] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1183.840478][  T976] usb 3-1: Product: syz
[ 1183.847300][  T976] usb 3-1: SerialNumber: syz
[ 1183.868551][  T976] usb 3-1: config 0 descriptor??
[ 1183.874360][ T5888] usb 2-1: new high-speed USB device number 61 using dummy_hcd
[ 1183.889317][ T5836] usbtmc 6-1:16.0: bulk endpoints not found
[ 1183.906803][  T976] cm109 3-1:0.8: invalid payload size 1024, expected 4
[ 1183.909892][ T5929] usb 5-1: new high-speed USB device number 63 using dummy_hcd
[ 1183.932631][  T976] input: CM109 USB driver as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.8/input/input73
[ 1184.049963][ T5888] usb 2-1: Using ep0 maxpacket: 32
[ 1184.058316][ T5888] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1184.084123][ T5929] usb 5-1: Using ep0 maxpacket: 32
[ 1184.105132][ T5929] usb 5-1: config 0 has no interfaces?
[ 1184.109947][ T5888] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1184.118246][ T5929] usb 5-1: New USB device found, idVendor=2133, idProduct=0018, bcdDevice= 0.00
[ 1184.153782][ T5888] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1184.162462][ T5929] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1184.172871][ T5888] usb 2-1: Product: syz
[ 1184.182667][ T5888] usb 2-1: Manufacturer: syz
[ 1184.193540][ T5888] usb 2-1: SerialNumber: syz
[ 1184.194073][ T5929] usb 5-1: config 0 descriptor??
[ 1184.221391][ T5888] usb 2-1: config 0 descriptor??
[ 1184.348776][T18406] vlan2: entered promiscuous mode
[ 1184.450981][T18416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3599'.
[ 1184.462919][T18416] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3599'.
[ 1184.475036][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3597'.
[ 1184.499337][T18423] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1184.510726][T18423] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1184.550988][T18406] macvlan4: entered promiscuous mode
[ 1184.571170][    C0] cm109 3-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1184.579019][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1184.587037][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1184.595248][ T5836] usb 3-1: USB disconnect, device number 98
[ 1184.602090][    C0] cm109 3-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1184.602128][    C0] cm109 3-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1184.629117][ T5836] cm109 3-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1185.319951][ T5888] ath6kl: Failed to submit usb control message: -110
[ 1185.327118][ T5888] ath6kl: unable to send the bmi data to the device: -110
[ 1185.337605][ T5888] ath6kl: Unable to send get target info: -110
[ 1185.354489][ T5888] ath6kl: Failed to init ath6kl core: -110
[ 1185.371582][ T5888] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1185.549909][ T5836] usb 3-1: new high-speed USB device number 99 using dummy_hcd
[ 1185.719934][ T5836] usb 3-1: Using ep0 maxpacket: 8
[ 1185.733176][ T5836] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config
[ 1185.748156][ T5836] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0
[ 1185.760355][ T5836] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0
[ 1185.774970][ T5836] usb 3-1: config 16 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3
[ 1185.795222][ T5836] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23
[ 1185.815301][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1185.833827][ T5836] usbtmc 3-1:16.0: bulk endpoints not found
[ 1186.178095][ T5888] usb 6-1: USB disconnect, device number 51
[ 1186.385085][T18433] FAULT_INJECTION: forcing a failure.
[ 1186.385085][T18433] name failslab, interval 1, probability 0, space 0, times 0
[ 1186.464336][T18433] CPU: 1 UID: 0 PID: 18433 Comm: syz.2.3602 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1186.464370][T18433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1186.464385][T18433] Call Trace:
[ 1186.464394][T18433]  <TASK>
[ 1186.464403][T18433]  dump_stack_lvl+0x241/0x360
[ 1186.464445][T18433]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1186.464476][T18433]  ? __pfx__printk+0x10/0x10
[ 1186.464506][T18433]  ? __lock_acquire+0xad5/0xd80
[ 1186.464547][T18433]  should_fail_ex+0x424/0x570
[ 1186.464585][T18433]  should_failslab+0xac/0x100
[ 1186.464610][T18433]  kmem_cache_alloc_noprof+0x78/0x390
[ 1186.464632][T18433]  ? skb_clone+0x20c/0x390
[ 1186.464658][T18433]  skb_clone+0x20c/0x390
[ 1186.464683][T18433]  __netlink_deliver_tap+0x3c4/0x7f0
[ 1186.464727][T18433]  ? netlink_deliver_tap+0x2e/0x1b0
[ 1186.464753][T18433]  netlink_deliver_tap+0x19d/0x1b0
[ 1186.464782][T18433]  netlink_unicast+0x7c6/0x9a0
[ 1186.464816][T18433]  ? __pfx_netlink_unicast+0x10/0x10
[ 1186.464842][T18433]  ? skb_put+0x114/0x1f0
[ 1186.464878][T18433]  netlink_sendmsg+0x8c3/0xcd0
[ 1186.464926][T18433]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1186.464959][T18433]  ? aa_sock_msg_perm+0x91/0x160
[ 1186.464992][T18433]  ? __pfx_netlink_sendmsg+0x10/0x10
[ 1186.465017][T18433]  __sock_sendmsg+0x221/0x270
[ 1186.465047][T18433]  sock_write_iter+0x2d9/0x3f0
[ 1186.465074][T18433]  ? __pfx_sock_write_iter+0x10/0x10
[ 1186.465123][T18433]  do_iter_readv_writev+0x71f/0x9d0
[ 1186.465161][T18433]  ? __pfx_do_iter_readv_writev+0x10/0x10
[ 1186.465192][T18433]  ? bpf_lsm_file_permission+0x9/0x10
[ 1186.465218][T18433]  ? rw_verify_area+0x246/0x630
[ 1186.465243][T18433]  vfs_writev+0x38d/0xbc0
[ 1186.465261][T18433]  ? __pfx_rcu_read_lock_any_held+0x10/0x10
[ 1186.465282][T18433]  ? vfs_write+0xb29/0xd10
[ 1186.465307][T18433]  ? __lock_acquire+0xad5/0xd80
[ 1186.465332][T18433]  ? __pfx_vfs_writev+0x10/0x10
[ 1186.465363][T18433]  ? __fget_files+0x2a/0x420
[ 1186.465381][T18433]  ? __fget_files+0x39d/0x420
[ 1186.465396][T18433]  ? __fget_files+0x2a/0x420
[ 1186.465420][T18433]  do_writev+0x1b8/0x360
[ 1186.465442][T18433]  ? __pfx_do_writev+0x10/0x10
[ 1186.465462][T18433]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1186.465481][T18433]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1186.465501][T18433]  __do_fast_syscall_32+0xb4/0x110
[ 1186.465519][T18433]  ? exc_page_fault+0x5f8/0x920
[ 1186.465540][T18433]  do_fast_syscall_32+0x34/0x80
[ 1186.465559][T18433]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1186.465580][T18433] RIP: 0023:0xf7f63539
[ 1186.465596][T18433] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1186.465611][T18433] RSP: 002b:00000000f506555c EFLAGS: 00000206 ORIG_RAX: 0000000000000092
[ 1186.465631][T18433] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000080000100
[ 1186.465644][T18433] RDX: 0000000000000001 RSI: 0000000000000000 RDI: 0000000000000000
[ 1186.465655][T18433] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1186.465664][T18433] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1186.465675][T18433] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1186.465698][T18433]  </TASK>
[ 1186.796621][    C1] vkms_vblank_simulate: vblank timer overrun
[ 1186.898928][ T5891] usb 5-1: USB disconnect, device number 63
[ 1186.933012][ T5929] usb 2-1: USB disconnect, device number 61
[ 1187.679960][ T5891] usb 6-1: new high-speed USB device number 52 using dummy_hcd
[ 1187.749680][ T5929] usb 5-1: new full-speed USB device number 64 using dummy_hcd
[ 1187.869694][ T5891] usb 6-1: Using ep0 maxpacket: 16
[ 1187.892337][ T5891] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1187.916839][ T5891] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1187.949985][  T976] usb 2-1: new high-speed USB device number 62 using dummy_hcd
[ 1187.954275][ T5929] usb 5-1: not running at top speed; connect to a high speed hub
[ 1188.086911][ T5891] usb 6-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1188.134275][ T5929] usb 5-1: config 1 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1024, setting to 64
[ 1188.142549][  T976] usb 2-1: Using ep0 maxpacket: 16
[ 1188.149728][ T5891] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1188.173590][ T5929] usb 5-1: config 1 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[ 1188.198815][ T5891] usb 6-1: config 0 descriptor??
[ 1188.201577][  T976] usb 2-1: config 0 has an invalid interface number: 8 but max is 0
[ 1188.220065][ T5929] usb 5-1: config 1 interface 0 has no altsetting 0
[ 1188.238518][ T5929] usb 5-1: New USB device found, idVendor=056a, idProduct=00e5, bcdDevice= 0.40
[ 1188.248167][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1188.263032][  T976] usb 2-1: config 0 has no interface number 0
[ 1188.274228][ T5929] usb 5-1: Product: Ц
[ 1188.283908][  T976] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1188.288762][ T5929] usb 5-1: Manufacturer: 
[ 1188.323777][  T976] usb 2-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1188.343981][ T5891] usb 3-1: USB disconnect, device number 99
[ 1188.401255][T18449] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22
[ 1188.401711][  T976] usb 2-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1188.490589][  T976] usb 2-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1188.559776][  T976] usb 2-1: Product: syz
[ 1188.574328][  T976] usb 2-1: SerialNumber: syz
[ 1188.606408][  T976] usb 2-1: config 0 descriptor??
[ 1188.639137][  T976] cm109 2-1:0.8: invalid payload size 1024, expected 4
[ 1188.643937][  T976] input: CM109 USB driver as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.8/input/input74
[ 1189.064801][T18453] vlan2: entered promiscuous mode
[ 1189.204800][T18458] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3612'.
[ 1189.475658][    C0] cm109 2-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1189.483476][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1189.491575][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1189.498781][    C0] cm109 2-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1189.501036][ T5891] usb 2-1: USB disconnect, device number 62
[ 1189.505918][    C0] cm109 2-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1189.671326][ T5891] cm109 2-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1189.919675][ T5836] usb 3-1: new full-speed USB device number 100 using dummy_hcd
[ 1190.166564][ T5836] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[ 1190.236733][ T5836] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[ 1190.281533][T18466] FAULT_INJECTION: forcing a failure.
[ 1190.281533][T18466] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1190.307058][T18468] FAULT_INJECTION: forcing a failure.
[ 1190.307058][T18468] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1190.341974][ T5836] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.00
[ 1190.405785][ T5836] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3
[ 1190.416175][T18468] CPU: 1 UID: 0 PID: 18468 Comm: syz.0.3615 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1190.416209][T18468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1190.416227][T18468] Call Trace:
[ 1190.416237][T18468]  <TASK>
[ 1190.416281][T18468]  dump_stack_lvl+0x241/0x360
[ 1190.416321][T18468]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1190.416351][T18468]  ? __pfx__printk+0x10/0x10
[ 1190.416392][T18468]  should_fail_ex+0x424/0x570
[ 1190.416429][T18468]  _copy_from_user+0x2d/0xb0
[ 1190.416457][T18468]  vmci_host_unlocked_ioctl+0x4af/0x35c0
[ 1190.416496][T18468]  ? __pfx_vmci_host_unlocked_ioctl+0x10/0x10
[ 1190.416544][T18468]  ? kasan_quarantine_put+0xdc/0x230
[ 1190.416572][T18468]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1190.416603][T18468]  ? tomoyo_path_number_perm+0x215/0x790
[ 1190.416633][T18468]  ? tomoyo_path_number_perm+0x684/0x790
[ 1190.416657][T18468]  ? __lock_acquire+0xad5/0xd80
[ 1190.416688][T18468]  ? tomoyo_path_number_perm+0x215/0x790
[ 1190.416716][T18468]  ? __pfx_tomoyo_path_number_perm+0x10/0x10
[ 1190.416780][T18468]  ? __fget_files+0x2a/0x420
[ 1190.416800][T18468]  ? __fget_files+0x2a/0x420
[ 1190.416824][T18468]  ? __fget_files+0x2a/0x420
[ 1190.416855][T18468]  __ia32_compat_sys_ioctl+0x561/0xc90
[ 1190.416888][T18468]  ? __pfx___ia32_compat_sys_ioctl+0x10/0x10
[ 1190.416918][T18468]  ? __fget_files+0x2a/0x420
[ 1190.416946][T18468]  ? fput+0x9b/0xd0
[ 1190.416968][T18468]  ? ksys_write+0x275/0x2d0
[ 1190.417007][T18468]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1190.417028][T18468]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1190.417053][T18468]  __do_fast_syscall_32+0xb4/0x110
[ 1190.417075][T18468]  ? exc_page_fault+0x5f8/0x920
[ 1190.417101][T18468]  do_fast_syscall_32+0x34/0x80
[ 1190.417125][T18468]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1190.417153][T18468] RIP: 0023:0xf706d539
[ 1190.417173][T18468] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1190.417192][T18468] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 0000000000000036
[ 1190.417215][T18468] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00000000000007af
[ 1190.417231][T18468] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1190.417275][T18468] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1190.417288][T18468] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1190.417301][T18468] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1190.417332][T18468]  </TASK>
[ 1190.417540][T18466] CPU: 1 UID: 0 PID: 18466 Comm: syz.1.3616 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1190.417560][T18466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1190.417570][T18466] Call Trace:
[ 1190.417576][T18466]  <TASK>
[ 1190.417583][T18466]  dump_stack_lvl+0x241/0x360
[ 1190.417609][T18466]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1190.417633][T18466]  ? __wake_up_klogd+0xcc/0x110
[ 1190.417651][T18466]  ? dump_stack+0x9/0x15
[ 1190.417677][T18466]  ? dump_stack_lvl+0x15/0x360
[ 1190.417704][T18466]  should_fail_ex+0x424/0x570
[ 1190.417731][T18466]  _copy_to_user+0x31/0xb0
[ 1190.417753][T18466]  simple_read_from_buffer+0xc4/0x170
[ 1190.417780][T18466]  proc_fail_nth_read+0x1ef/0x260
[ 1190.417798][T18466]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1190.417816][T18466]  ? rw_verify_area+0x246/0x630
[ 1190.417836][T18466]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1190.417852][T18466]  vfs_read+0x21f/0xb90
[ 1190.417878][T18466]  ? __pfx___mutex_lock+0x10/0x10
[ 1190.417895][T18466]  ? __pfx_vfs_read+0x10/0x10
[ 1190.417918][T18466]  ? __fget_files+0x2a/0x420
[ 1190.417934][T18466]  ? __fget_files+0x39d/0x420
[ 1190.417948][T18466]  ? __fget_files+0x2a/0x420
[ 1190.417969][T18466]  ksys_read+0x19d/0x2d0
[ 1190.417993][T18466]  ? __pfx_ksys_read+0x10/0x10
[ 1190.418016][T18466]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1190.418033][T18466]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1190.418050][T18466]  __do_fast_syscall_32+0xb4/0x110
[ 1190.418067][T18466]  ? exc_page_fault+0x5f8/0x920
[ 1190.418086][T18466]  do_fast_syscall_32+0x34/0x80
[ 1190.418103][T18466]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1190.418122][T18466] RIP: 0023:0xf7f71539
[ 1190.418134][T18466] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1190.418147][T18466] RSP: 002b:00000000f5096590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1190.418163][T18466] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f5096620
[ 1190.418174][T18466] RDX: 000000000000000f RSI: 00000000f7402ff4 RDI: 0000000000000000
[ 1190.418183][T18466] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1190.418192][T18466] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1190.418201][T18466] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1190.418223][T18466]  </TASK>
[ 1190.483385][ T5836] usb 3-1: SerialNumber: syz
[ 1190.989170][T18470] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3617'.
[ 1191.061336][ T5888] usb 6-1: USB disconnect, device number 52
[ 1191.074242][T18470] bridge3: entered promiscuous mode
[ 1191.088436][ T5836] usb 3-1: 0:2 : does not exist
[ 1191.101378][T18470] bridge3: entered allmulticast mode
[ 1191.165091][ T5929] usbhid 5-1:1.0: can't add hid device: -71
[ 1191.205665][ T5929] usbhid 5-1:1.0: probe with driver usbhid failed with error -71
[ 1191.250717][ T5929] usb 5-1: USB disconnect, device number 64
[ 1191.356138][T18464] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1191.368455][T18464] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1191.480067][  T976] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[ 1191.659134][  T976] usb 1-1: Using ep0 maxpacket: 32
[ 1191.668846][  T976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1191.688130][  T976] usb 1-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1191.736622][  T976] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1191.876534][  T976] usb 1-1: Product: syz
[ 1191.888262][  T976] usb 1-1: Manufacturer: syz
[ 1191.899378][  T976] usb 1-1: SerialNumber: syz
[ 1191.915919][ T5836] usb 3-1: USB disconnect, device number 100
[ 1191.931606][  T976] usb 1-1: config 0 descriptor??
[ 1192.186838][T18475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3618'.
[ 1192.196472][T18475] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3618'.
[ 1192.689784][ T5929] usb 5-1: new high-speed USB device number 65 using dummy_hcd
[ 1192.868082][ T5929] usb 5-1: config index 0 descriptor too short (expected 65503, got 77)
[ 1192.878435][ T5929] usb 5-1: config 19 has too many interfaces: 252, using maximum allowed: 32
[ 1192.992008][ T5929] usb 5-1: config 19 has an invalid descriptor of length 0, skipping remainder of the config
[ 1193.014242][  T976] ath6kl: Failed to submit usb control message: -110
[ 1193.020116][ T5929] usb 5-1: config 19 has 0 interfaces, different from the descriptor's value: 252
[ 1193.097454][  T976] ath6kl: unable to send the bmi data to the device: -110
[ 1193.123338][  T976] ath6kl: Unable to send get target info: -110
[ 1193.156570][  T976] ath6kl: Failed to init ath6kl core: -110
[ 1193.190629][  T976] ath6kl_usb 1-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1193.214547][ T5929] usb 5-1: New USB device found, idVendor=091e, idProduct=0003, bcdDevice=d7.3b
[ 1193.280011][ T5929] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1193.360907][ T5929] usb 5-1: Product: syz
[ 1193.385664][ T5929] usb 5-1: Manufacturer: syz
[ 1193.438491][ T5929] usb 5-1: SerialNumber: syz
[ 1193.709946][T18492] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[ 1193.719520][T18492] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[ 1194.492909][  T976] usb 1-1: USB disconnect, device number 29
[ 1195.069853][ T5929] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[ 1195.319718][ T5929] usb 1-1: Using ep0 maxpacket: 16
[ 1195.330160][    T9] usb 5-1: USB disconnect, device number 65
[ 1195.339774][ T5929] usb 1-1: config 0 has an invalid interface number: 8 but max is 0
[ 1195.348612][ T5929] usb 1-1: config 0 has no interface number 0
[ 1195.398854][ T5929] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1195.454853][ T5929] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1195.482443][ T5929] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1195.509226][ T5929] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1195.721698][  T976] usb 6-1: new high-speed USB device number 53 using dummy_hcd
[ 1195.755782][ T5929] usb 1-1: Product: syz
[ 1195.769739][ T5929] usb 1-1: SerialNumber: syz
[ 1195.786525][ T5929] usb 1-1: config 0 descriptor??
[ 1195.808307][ T5929] cm109 1-1:0.8: invalid payload size 1024, expected 4
[ 1195.839054][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.8/input/input75
[ 1195.916418][  T976] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30
[ 1195.929764][ T5891] usb 2-1: new high-speed USB device number 63 using dummy_hcd
[ 1195.987503][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[ 1196.039837][  T976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[ 1196.089886][ T5891] usb 2-1: Using ep0 maxpacket: 16
[ 1196.099893][  T976] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253
[ 1196.117575][ T5891] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1196.139454][  T976] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40
[ 1196.139482][ T5891] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1196.205741][ T5891] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1196.216788][  T976] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0
[ 1196.238689][ T5891] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1196.242294][  T976] usb 6-1: Manufacturer: syz
[ 1196.278936][T18503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3627'.
[ 1196.329439][    C1] cm109 1-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1196.332930][    T9] usb 1-1: USB disconnect, device number 30
[ 1196.336709][    C1] cm109 1-1:0.8: cm109_submit_ctl: usb_submit_urb (urb_ctl) failed -19
[ 1196.369203][ T5891] usb 2-1: config 0 descriptor??
[ 1196.380425][  T976] usb 6-1: config 0 descriptor??
[ 1196.524768][    T9] cm109 1-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1196.949930][  T976] appleir 0003:05AC:8243.0014: item fetching failed at offset 0/1
[ 1196.966296][  T976] appleir 0003:05AC:8243.0014: parse failed
[ 1197.055720][  T976] appleir 0003:05AC:8243.0014: probe with driver appleir failed with error -22
[ 1197.287537][T18525] FAULT_INJECTION: forcing a failure.
[ 1197.287537][T18525] name fail_usercopy, interval 1, probability 0, space 0, times 0
[ 1197.338091][T18525] CPU: 1 UID: 0 PID: 18525 Comm: syz.0.3634 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1197.338129][T18525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1197.338142][T18525] Call Trace:
[ 1197.338151][T18525]  <TASK>
[ 1197.338160][T18525]  dump_stack_lvl+0x241/0x360
[ 1197.338199][T18525]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1197.338230][T18525]  ? __pfx__printk+0x10/0x10
[ 1197.338271][T18525]  should_fail_ex+0x424/0x570
[ 1197.338307][T18525]  _copy_to_user+0x31/0xb0
[ 1197.338337][T18525]  simple_read_from_buffer+0xc4/0x170
[ 1197.338374][T18525]  proc_fail_nth_read+0x1ef/0x260
[ 1197.338398][T18525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1197.338422][T18525]  ? rw_verify_area+0x246/0x630
[ 1197.338449][T18525]  ? __pfx_proc_fail_nth_read+0x10/0x10
[ 1197.338473][T18525]  vfs_read+0x21f/0xb90
[ 1197.338508][T18525]  ? __pfx___mutex_lock+0x10/0x10
[ 1197.338534][T18525]  ? __pfx_vfs_read+0x10/0x10
[ 1197.338565][T18525]  ? __fget_files+0x2a/0x420
[ 1197.338588][T18525]  ? __fget_files+0x39d/0x420
[ 1197.338607][T18525]  ? __fget_files+0x2a/0x420
[ 1197.338651][T18525]  ksys_read+0x19d/0x2d0
[ 1197.338684][T18525]  ? __pfx_ksys_read+0x10/0x10
[ 1197.338717][T18525]  ? syscall_enter_from_user_mode_prepare+0x7f/0xe0
[ 1197.338740][T18525]  ? lockdep_hardirqs_on+0x9d/0x150
[ 1197.338765][T18525]  __do_fast_syscall_32+0xb4/0x110
[ 1197.338788][T18525]  ? exc_page_fault+0x5f8/0x920
[ 1197.338815][T18525]  do_fast_syscall_32+0x34/0x80
[ 1197.338839][T18525]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1197.338865][T18525] RIP: 0023:0xf706d539
[ 1197.338883][T18525] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1197.338902][T18525] RSP: 002b:00000000f505d590 EFLAGS: 00000206 ORIG_RAX: 0000000000000003
[ 1197.338923][T18525] RAX: ffffffffffffffda RBX: 0000000000000004 RCX: 00000000f505d620
[ 1197.338938][T18525] RDX: 000000000000000f RSI: 00000000f73d2ff4 RDI: 0000000000000000
[ 1197.338950][T18525] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000
[ 1197.338962][T18525] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1197.338975][T18525] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1197.339006][T18525]  </TASK>
[ 1197.714849][ T5929] usb 6-1: USB disconnect, device number 53
[ 1198.219806][  T976] usb 3-1: new high-speed USB device number 101 using dummy_hcd
[ 1198.460551][  T976] usb 3-1: Using ep0 maxpacket: 32
[ 1198.487121][  T976] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1198.587281][  T976] usb 3-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1198.596946][  T976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1198.642735][  T976] usb 3-1: Product: syz
[ 1198.671720][  T976] usb 3-1: Manufacturer: syz
[ 1198.686543][  T976] usb 3-1: SerialNumber: syz
[ 1198.893786][  T976] usb 3-1: config 0 descriptor??
[ 1199.140181][ T5888] usb 2-1: USB disconnect, device number 63
[ 1199.199309][T18534] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3637'.
[ 1199.270113][T18534] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3637'.
[ 1200.047597][  T976] ath6kl: Failed to submit usb control message: -110
[ 1200.081122][  T976] ath6kl: unable to send the bmi data to the device: -110
[ 1200.131097][  T976] ath6kl: Unable to send get target info: -110
[ 1200.226615][  T976] ath6kl: Failed to init ath6kl core: -110
[ 1200.250988][  T976] ath6kl_usb 3-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1200.449800][ T5929] usb 6-1: new high-speed USB device number 54 using dummy_hcd
[ 1200.849638][ T5929] usb 6-1: Using ep0 maxpacket: 16
[ 1200.869044][ T5929] usb 6-1: config 0 has an invalid interface number: 8 but max is 0
[ 1200.885543][ T5929] usb 6-1: config 0 has no interface number 0
[ 1200.920187][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[ 1200.948322][ T5929] usb 6-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid maxpacket 25296, setting to 1024
[ 1201.001399][ T5929] usb 6-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f
[ 1201.011808][ T5929] usb 6-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3
[ 1201.036448][ T5929] usb 6-1: Product: syz
[ 1201.072657][ T5929] usb 6-1: SerialNumber: syz
[ 1201.112044][ T5929] usb 6-1: config 0 descriptor??
[ 1201.149007][ T5929] cm109 6-1:0.8: invalid payload size 1024, expected 4
[ 1201.193080][ T5929] input: CM109 USB driver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.8/input/input76
[ 1201.377952][ T5929] usb 3-1: USB disconnect, device number 101
[ 1201.566373][T18560] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3644'.
[ 1201.596443][    C1] cm109 6-1:0.8: cm109_urb_irq_callback: urb status -71
[ 1201.604160][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.611909][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.619444][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.619765][T18570] netlink: 'syz.0.3648': attribute type 10 has an invalid length.
[ 1201.627127][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.642557][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.650650][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.658681][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.666840][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.675518][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.683873][    C1] cm109 6-1:0.8: cm109_urb_ctl_callback: urb status -71
[ 1201.698004][    C1] cm109 6-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19
[ 1201.707873][ T5891] usb 6-1: USB disconnect, device number 54
[ 1201.736547][T18570] bond0: (slave wlan1): Opening slave failed
[ 1201.741352][ T5891] cm109 6-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19
[ 1202.009724][ T5929] usb 3-1: new high-speed USB device number 102 using dummy_hcd
[ 1202.180837][ T5929] usb 3-1: Using ep0 maxpacket: 32
[ 1202.210041][ T5929] usb 3-1: config 0 has an invalid interface number: 184 but max is 0
[ 1202.218866][ T5929] usb 3-1: config 0 has no interface number 0
[ 1202.342778][ T5929] usb 3-1: config 0 interface 184 has no altsetting 0
[ 1202.492827][ T5929] usb 3-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee
[ 1202.554617][ T5929] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1202.580084][ T5891] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[ 1202.616686][ T5929] usb 3-1: Product: syz
[ 1202.657952][ T5929] usb 3-1: Manufacturer: syz
[ 1202.689064][ T5929] usb 3-1: SerialNumber: syz
[ 1202.768864][ T5929] usb 3-1: config 0 descriptor??
[ 1202.849971][ T5891] usb 1-1: Using ep0 maxpacket: 16
[ 1202.880745][T18605] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3656'.
[ 1202.940685][ T5929] smsc75xx v1.0.0
[ 1202.966100][ T5891] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[ 1202.977537][ T5891] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1
[ 1202.988537][ T5891] usb 1-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00
[ 1202.999282][ T5891] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[ 1203.154308][T18605] bridge3: entered promiscuous mode
[ 1203.194705][ T5891] usb 1-1: config 0 descriptor??
[ 1203.234093][T18605] bridge3: entered allmulticast mode
[ 1203.401059][T10434] usb 2-1: new high-speed USB device number 64 using dummy_hcd
[ 1203.548219][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32
[ 1203.560895][T10434] usb 2-1: Using ep0 maxpacket: 32
[ 1203.567073][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[ 1203.585480][T10434] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7
[ 1203.602329][T10434] usb 2-1: New USB device found, idVendor=04da, idProduct=390d, bcdDevice=93.a8
[ 1203.618641][T10434] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 1203.653926][T10434] usb 2-1: Product: syz
[ 1203.749710][T10434] usb 2-1: Manufacturer: syz
[ 1203.785556][T10434] usb 2-1: SerialNumber: syz
[ 1203.829326][T10434] usb 2-1: config 0 descriptor??
[ 1204.050593][T18611] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3657'.
[ 1204.061342][T18611] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3657'.
[ 1204.920392][T10434] ath6kl: Failed to submit usb control message: -110
[ 1204.936506][T10434] ath6kl: unable to send the bmi data to the device: -110
[ 1205.050026][T10434] ath6kl: Unable to send get target info: -110
[ 1205.101519][T10434] ath6kl: Failed to init ath6kl core: -110
[ 1205.137679][T10434] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -110
[ 1205.254311][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000011c: -71
[ 1205.320375][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to write RX_ADDRL: -71
[ 1205.337798][ T5891] usb 1-1: USB disconnect, device number 31
[ 1205.394083][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): Failed to set mac address
[ 1205.432299][ T5929] smsc75xx 3-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71
[ 1205.462181][ T5929] smsc75xx 3-1:0.184: probe with driver smsc75xx failed with error -71
[ 1205.503003][ T5929] usb 3-1: USB disconnect, device number 102
[ 1205.998651][T18623] FAULT_INJECTION: forcing a failure.
[ 1205.998651][T18623] name failslab, interval 1, probability 0, space 0, times 0
[ 1206.111963][T18623] CPU: 0 UID: 0 PID: 18623 Comm: syz.0.3661 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1206.111996][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1206.112011][T18623] Call Trace:
[ 1206.112021][T18623]  <TASK>
[ 1206.112031][T18623]  dump_stack_lvl+0x241/0x360
[ 1206.112070][T18623]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1206.112101][T18623]  ? __pfx__printk+0x10/0x10
[ 1206.112134][T18623]  ? __pfx___might_resched+0x10/0x10
[ 1206.112160][T18623]  should_fail_ex+0x424/0x570
[ 1206.112197][T18623]  should_failslab+0xac/0x100
[ 1206.112222][T18623]  __kmalloc_cache_noprof+0x73/0x370
[ 1206.112244][T18623]  ? landlock_init_hierarchy_log+0xa0/0x640
[ 1206.112277][T18623]  landlock_init_hierarchy_log+0xa0/0x640
[ 1206.112301][T18623]  ? __kmalloc_cache_noprof+0x236/0x370
[ 1206.112329][T18623]  landlock_merge_ruleset+0x66e/0x900
[ 1206.112372][T18623]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 1206.112404][T18623]  ? __secure_computing+0xea/0x2b0
[ 1206.112444][T18623]  __do_fast_syscall_32+0xb4/0x110
[ 1206.112468][T18623]  ? exc_page_fault+0x5f8/0x920
[ 1206.112493][T18623]  do_fast_syscall_32+0x34/0x80
[ 1206.112516][T18623]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1206.112545][T18623] RIP: 0023:0xf706d539
[ 1206.112564][T18623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1206.112583][T18623] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 1206.112608][T18623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1206.112622][T18623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.112634][T18623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1206.112646][T18623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1206.112659][T18623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1206.112693][T18623]  </TASK>
[ 1206.115643][T18623] ------------[ cut here ]------------
[ 1206.259743][    C0] vkms_vblank_simulate: vblank timer overrun
[ 1206.323427][T18623] WARNING: CPU: 0 PID: 18623 at security/landlock/domain.h:133 free_ruleset+0x1f3/0x250
[ 1206.333290][T18623] Modules linked in:
[ 1206.337221][T18623] CPU: 0 UID: 0 PID: 18623 Comm: syz.0.3661 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1206.349375][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1206.359659][T18623] RIP: 0010:free_ruleset+0x1f3/0x250
[ 1206.364996][T18623] Code: 89 ff e8 50 55 6c fd 49 8b 1f 4c 89 ff e8 15 b3 60 fd 48 85 db 74 36 e8 5b 1b 02 fd 49 89 df e9 34 ff ff ff e8 4e 1b 02 fd 90 <0f> 0b 90 eb c2 e8 43 1b 02 fd eb 1c bf 01 00 00 00 89 ee e8 75 1f
[ 1206.384761][T18623] RSP: 0018:ffffc9000eb17da8 EFLAGS: 00010293
[ 1206.390929][T18623] RAX: ffffffff84c0a1d2 RBX: 0000000000000000 RCX: ffff888020ac1e00
[ 1206.398947][T18623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.406998][T18623] RBP: 1ffff110063e5ce4 R08: ffffffff84c1ad6f R09: 1ffff110063e5ce1
[ 1206.415128][T18623] R10: dffffc0000000000 R11: ffffed10063e5ce2 R12: ffff888031f2e720
[ 1206.423214][T18623] R13: dffffc0000000000 R14: ffff8880355b7200 R15: ffff888031f2e700
[ 1206.431307][T18623] FS:  0000000000000000(0000) GS:ffff888124f9a000(0063) knlGS:00000000f505db40
[ 1206.440435][T18623] CS:  0010 DS: 002b ES: 002b CR0: 0000000080050033
[ 1206.447075][T18623] CR2: 00000000f7fa55c0 CR3: 000000006ba94000 CR4: 00000000003526f0
[ 1206.455175][T18623] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 000000000000fffa
[ 1206.463286][T18623] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1206.471353][T18623] Call Trace:
[ 1206.474765][T18623]  <TASK>
[ 1206.477741][T18623]  landlock_merge_ruleset+0x6d8/0x900
[ 1206.483247][T18623]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 1206.489442][T18623]  ? __secure_computing+0xea/0x2b0
[ 1206.494668][T18623]  __do_fast_syscall_32+0xb4/0x110
[ 1206.499840][T18623]  ? exc_page_fault+0x5f8/0x920
[ 1206.504755][T18623]  do_fast_syscall_32+0x34/0x80
[ 1206.509842][T18623]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1206.516220][T18623] RIP: 0023:0xf706d539
[ 1206.520430][T18623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1206.540350][T18623] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 1206.548871][T18623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1206.557043][T18623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.565139][T18623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1206.573284][T18623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1206.581364][T18623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1206.589387][T18623]  </TASK>
[ 1206.592492][T18623] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1206.599795][T18623] CPU: 0 UID: 0 PID: 18623 Comm: syz.0.3661 Not tainted 6.15.0-rc2-syzkaller-00488-g6fea5fabd332 #0 PREEMPT(full) 
[ 1206.611892][T18623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025
[ 1206.622056][T18623] Call Trace:
[ 1206.625355][T18623]  <TASK>
[ 1206.628303][T18623]  dump_stack_lvl+0x241/0x360
[ 1206.633051][T18623]  ? __pfx_dump_stack_lvl+0x10/0x10
[ 1206.638360][T18623]  ? __pfx__printk+0x10/0x10
[ 1206.643086][T18623]  ? vscnprintf+0x5d/0x90
[ 1206.647464][T18623]  panic+0x349/0x880
[ 1206.651402][T18623]  ? __warn+0x174/0x4d0
[ 1206.655599][T18623]  ? __pfx_panic+0x10/0x10
[ 1206.660068][T18623]  __warn+0x344/0x4d0
[ 1206.664082][T18623]  ? free_ruleset+0x1f3/0x250
[ 1206.668800][T18623]  report_bug+0x2b3/0x500
[ 1206.673157][T18623]  ? free_ruleset+0x1f3/0x250
[ 1206.677889][T18623]  ? free_ruleset+0x1f3/0x250
[ 1206.682623][T18623]  ? free_ruleset+0x1f5/0x250
[ 1206.687340][T18623]  handle_bug+0x89/0x170
[ 1206.691616][T18623]  exc_invalid_op+0x1a/0x50
[ 1206.696248][T18623]  asm_exc_invalid_op+0x1a/0x20
[ 1206.701158][T18623] RIP: 0010:free_ruleset+0x1f3/0x250
[ 1206.706489][T18623] Code: 89 ff e8 50 55 6c fd 49 8b 1f 4c 89 ff e8 15 b3 60 fd 48 85 db 74 36 e8 5b 1b 02 fd 49 89 df e9 34 ff ff ff e8 4e 1b 02 fd 90 <0f> 0b 90 eb c2 e8 43 1b 02 fd eb 1c bf 01 00 00 00 89 ee e8 75 1f
[ 1206.726137][T18623] RSP: 0018:ffffc9000eb17da8 EFLAGS: 00010293
[ 1206.732244][T18623] RAX: ffffffff84c0a1d2 RBX: 0000000000000000 RCX: ffff888020ac1e00
[ 1206.740255][T18623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.748268][T18623] RBP: 1ffff110063e5ce4 R08: ffffffff84c1ad6f R09: 1ffff110063e5ce1
[ 1206.756363][T18623] R10: dffffc0000000000 R11: ffffed10063e5ce2 R12: ffff888031f2e720
[ 1206.764360][T18623] R13: dffffc0000000000 R14: ffff8880355b7200 R15: ffff888031f2e700
[ 1206.772365][T18623]  ? landlock_log_drop_domain+0x4f/0x1b0
[ 1206.778037][T18623]  ? free_ruleset+0x1f2/0x250
[ 1206.782779][T18623]  ? free_ruleset+0x1f2/0x250
[ 1206.787505][T18623]  landlock_merge_ruleset+0x6d8/0x900
[ 1206.792929][T18623]  __se_sys_landlock_restrict_self+0x2ce/0x7d0
[ 1206.799126][T18623]  ? __secure_computing+0xea/0x2b0
[ 1206.804393][T18623]  __do_fast_syscall_32+0xb4/0x110
[ 1206.809535][T18623]  ? exc_page_fault+0x5f8/0x920
[ 1206.814504][T18623]  do_fast_syscall_32+0x34/0x80
[ 1206.819381][T18623]  entry_SYSENTER_compat_after_hwframe+0x84/0x8e
[ 1206.825737][T18623] RIP: 0023:0xf706d539
[ 1206.829857][T18623] Code: 03 74 b4 01 10 07 03 74 b0 01 10 08 03 74 d8 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 51 52 55 89 e5 0f 34 cd 80 <5d> 5a 59 c3 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90
[ 1206.849499][T18623] RSP: 002b:00000000f505d55c EFLAGS: 00000206 ORIG_RAX: 00000000000001be
[ 1206.857957][T18623] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000000000
[ 1206.865963][T18623] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 1206.873972][T18623] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000
[ 1206.881970][T18623] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000
[ 1206.889963][T18623] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000
[ 1206.897999][T18623]  </TASK>
[ 1206.901334][T18623] Kernel Offset: disabled
[ 1206.905702][T18623] Rebooting in 86400 seconds..