last executing test programs:

2m50.347234089s ago: executing program 3 (id=71):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8010000100001040000000000000000000000000000000000000000000000010000000000000000000100000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001400686d6163287368613129"], 0x1a8}}, 0x0)

2m50.272620201s ago: executing program 3 (id=73):
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101482, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60)
syz_kvm_setup_cpu$x86(r1, r0, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x15, 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
syz_io_uring_setup(0x100552d, &(0x7f0000000140)={0x0, 0x9f50, 0x36000, 0x6, 0x359}, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000040), 0x800)
pipe2(&(0x7f0000000080), 0x0)
ioctl$KVM_RUN(r2, 0xae80, 0x0)

2m50.105599825s ago: executing program 3 (id=74):
r0 = syz_usb_connect(0x0, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="12010002000000405a04105201010102030109022000010100803209040000020806f50007058102000200070502"], 0x0)
syz_usb_ep_read(r0, 0x71, 0x0, &(0x7f0000000100))
openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async)
r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0)
dup(r1)
openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0xa1c3, 0x194)
socket$inet(0x2, 0x1, 0x0)
r2 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10) (async)
setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000100)={0x2ffc, 0x4000006, 0xfffffefc, 0x6}, 0x10)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) (async)
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x168)
sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002540)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc3be07c", @ANYRES16, @ANYBLOB="010000000000000000000c0000000c000180080001"], 0x38}}, 0x0)
socket$netlink(0x10, 0x3, 0x0) (async)
r3 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000005500010200040000feffffff07"], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x400c080) (async)
sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="800000005500010200040000feffffff07"], 0x80}, 0x1, 0x0, 0x0, 0x4c504}, 0x400c080)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7}) (async)
capset(&(0x7f0000000380)={0x20080522}, &(0x7f0000000040)={0x200000, 0x40200003, 0x0, 0x6, 0x7})
mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0)
r4 = dup(0xffffffffffffffff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x181)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./bus\x00', 0x140)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) (async)
mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './cgroup'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
chdir(&(0x7f00000001c0)='./bus\x00')
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00') (async)
chdir(&(0x7f0000000000)='./file0/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/file0\x00')
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
creat(&(0x7f0000000240)='./file1\x00', 0x0)
ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
write$binfmt_misc(r4, &(0x7f00000001c0), 0x0) (async)
write$binfmt_misc(r4, &(0x7f00000001c0), 0x0)
sendmsg$nl_generic(r2, 0x0, 0x804)
mkdir(&(0x7f0000000000)='dir0\x00', 0x1ff)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) (async)
mount(0x0, &(0x7f0000000000)='dir0\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='dir0/per_cpu/cpu0/trace_pipe\x00', 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r5, 0xb240}], 0x1, &(0x7f0000000080)={0x0, 0x3938700}, 0x0, 0x0)

2m48.864671786s ago: executing program 3 (id=81):
syz_usb_connect$uac2(0x2, 0x95, &(0x7f0000000580)=ANY=[@ANYBLOB="1201000200000020392a8c3f4000010203010902017051080b0002010720090904000000010120000924010800022300080c24030604040b040eff010c05240403060924070402000400000904010000010220000904010101010220000905010940000602080825010003040200090402000001022000090402010101022000090582095006040702082501020f060300"], &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0})
r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./tracing/uprobe_events\x00', 0x401, 0x0)
write(r1, &(0x7f0000000180)='r:s/p ./file0:0', 0xf)
ioctl$XFS_IOC_FSINUMBERS(r0, 0xc0205867, &(0x7f0000000380)={&(0x7f0000000240)=0x4, 0xc7e, &(0x7f0000000280)=[{}], &(0x7f0000000340)})
openat$fuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0)
r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000001c0), 0x10000, 0x0)
chdir(&(0x7f0000000040)='./cgroup\x00')
r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)
ptrace(0x10, r4)
ptrace$setregs(0xd, r4, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb")
ptrace$getregset(0x4205, r4, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78})
ptrace$getregset(0x4204, r4, 0x2, &(0x7f0000000740)={0x0})
mkdirat(r3, &(0x7f0000000200)='./tracing\x00', 0x86)
read$FUSE(r2, &(0x7f0000002a80)={0x2020}, 0x2020)

2m47.608016108s ago: executing program 3 (id=86):
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000380)={'\x00', 0xf6ad, 0x2605, 0x0, 0x1, 0x8})
rt_sigqueueinfo(0x0, 0x28, &(0x7f0000000340)={0x2b, 0xfffffffd, 0x400})
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000040), 0x2, 0x0)
timerfd_create(0x1, 0x80800)
r2 = socket(0x10, 0x803, 0x0)
write(r2, &(0x7f0000000100)="1c0000005e001f3814584707f9f4ffffff0000000d000000f3f80000", 0x1c)
syz_clone(0x80, 0x0, 0x0, 0x0, 0x0, 0x0)
write$cgroup_netprio_ifpriomap(r1, &(0x7f0000001040)=ANY=[@ANYBLOB='gretap0 ', @ANYRESDEC], 0xa)
prctl$PR_CAP_AMBIENT(0x2f, 0x4, 0x7)

2m47.590979358s ago: executing program 3 (id=89):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0)

2m47.490532531s ago: executing program 32 (id=89):
r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000080)='syz1\x00', 0x200002, 0x0)
openat$cgroup_type(r0, &(0x7f0000000000), 0x2, 0x0)

7.433304044s ago: executing program 4 (id=1475):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0x1, 0x100000000000000, 0x1000, &(0x7f0000ffb000/0x1000)=nil})
syz_usb_connect$uac1(0x0, 0xa7, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902950003010000020904000000010100000a240100000302010213240600000600000800000000000a0000000009240300000000030009240603010102008c09240300fe0204040008240504"], 0x0)

6.215061734s ago: executing program 4 (id=1482):
syz_usb_control_io$rtl8150(0xffffffffffffffff, 0x0, &(0x7f00000029c0)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r0, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
socket$inet(0x2, 0x2, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_netfilter(0x10, 0x3, 0xc)
mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000b63fe4), 0x1c)
getsockopt$inet6_buf(r1, 0x29, 0x3d, 0x0, &(0x7f00000000c0)=0x37)
socketpair$unix(0x1, 0x3, 0x0, 0x0)
sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0)
recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, <r4=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, <r5=>0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=<r6=>0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
r8 = dup(r7)
syz_ublk_setup_queues(r8, r6, &(0x7f00000004c0)={0x0, 0xbd, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe708, 0x42, 0x1000002, 0x91, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x1, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x2000, 0x4003bfff, 0x2b9, 0x0, r5}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x26d}}], 0x1, 0x0, 0x0)
syz_usb_control_io$lan78xx(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$uac3(r0, 0x0, 0x0)
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000f00)={0x2c, &(0x7f0000000b40)={0x20, 0x23, 0x3d, {0x3d, 0xe, "5f833a6bfa40a7605dbe551c74807300fb0c35f497c00436a515d401b54c503155fb66e0fd06a3cfb288da18a38c2d37719eb1d56e121ad07d60a1"}}, 0x0, 0x0, &(0x7f0000000e80)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x10, 0x6, 0x2, "34581ddb", "81d93856"}}, 0x0}, 0x0)
syz_usb_control_io$sierra_net(r0, 0x0, 0x0)
syz_usb_control_io$uac2(r0, &(0x7f0000000140)={0x14, &(0x7f0000000040)={0x0, 0x6, 0x11, {0x11, 0x21, "772ddd71e1fbb0648caae984d033a6"}}, &(0x7f0000000080)={0x0, 0x3, 0x80, @string={0x80, 0x3, "90ffa5c6305ae299908695f6fcfeb9dabfe697c91afccc03c1ecf62f060602a2b66d83c59f9604571fb964a6082ed4ac680137c7f6811f0ba9ebcd034b4181f2df2328f9f31aeffdaf62c1d1866ea626b63dc3b5d227b046fd2e6109dd1e16b9d3e1f537b0a0e02eb43ffd0e447c5f0692e0cad72f9e5de35e4bf3392ff3"}}}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000340)={0x2c, &(0x7f00000000c0)={0x0, 0x10, 0xd, {0xd, 0x5, "d81311fdaf0b2cd1923741"}}, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "2a9f611945edddeefda9563e2329745204"}}, &(0x7f0000000180)=ANY=[@ANYBLOB="000f14010000050f14010503100b07100212e600020a100300020003000500e7100317e10c38837904236e1a12168230fc8690e44b1bf4c6d9f24dc3b0c66c374db271331c50e73d605ab36e7804f0cf31fcccc6766a347f54566a5339a1ccb5456470b94c6a82586f0c2c9c1ee7d5b74e3c84fcad812126b48a1eef19683e5ef2b85d85ece01c225fa2ba2f69d984cbfbfa03c9b439dcc714fb2f52b55b7a466f0fea5dff0dfd5744712f531fdac9057ad4ad1b849b800d3089ee1cb713cfda063c22c78be935a78c26c81d6d21bc5b80461f2f25885ac0823a39b6f5f9c3636945beca9511fa6b1803a20203512fd4bdd863b267c0ad885bd31e1b813f2d6770beb33f143014100aff0200e0ff000ffeff183f0000003f0000"], &(0x7f00000002c0)={0x20, 0x29, 0xf, {0xf, 0x29, 0x8, 0x8, 0xfd, 0xb, "7f91bb7c", "a0a6c240"}}, &(0x7f0000000300)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7f, 0x2, 0x2, 0x0, 0x1, 0x1, 0xd7d}}}, &(0x7f0000000840)={0x84, &(0x7f0000000d00)=ANY=[@ANYRESHEX=r8], &(0x7f0000000480)={0x0, 0xa, 0x1, 0x2}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0x20, 0x0, 0x4, {0x0, 0x2}}, &(0x7f0000000540)={0x20, 0x0, 0x8, {0xc0, 0x80, [0xf0]}}, &(0x7f0000000580)={0x40, 0x7, 0x2, 0x9}, &(0x7f00000005c0)={0x40, 0x9, 0x1, 0x9a}, &(0x7f0000000600)={0x40, 0xb, 0x2, "068d"}, &(0x7f0000000640)={0x40, 0xf, 0x2, 0x3ff}, &(0x7f0000000680)={0x40, 0x13, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, &(0x7f00000006c0)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000700)={0x40, 0x19, 0x2, "c2ae"}, &(0x7f0000000740)={0x40, 0x1a, 0x2, 0x4}, &(0x7f0000000780)={0x40, 0x1c, 0x1, 0x1}, &(0x7f00000007c0)={0x40, 0x1e, 0x1, 0x5}, &(0x7f0000000800)={0x40, 0x21, 0x1, 0x80}})

5.768268536s ago: executing program 1 (id=1486):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfdfa}, 0x3a, [0x8000, 0x3, 0xd, 0xb, 0x80, 0x4, 0x3, 0x7f, 0x20000006, 0x20000000, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0xa, 0x3c1b, 0x7, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3, 0x4, 0x8, 0x4c74, 0x80000000, 0x80, 0xfffffffb, 0xc, 0x0, 0x8071, 0x7, 0x3ff, 0xffffffff, 0x7, 0x5, 0x3e, 0x18f, 0x3, 0x8, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x7ff, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xcb, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x806, 0x7, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x40000400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x9, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0x101, 0x202, 0x4, 0xc, 0x3, 0x7, 0x8, 0x1, 0x7, 0x3, 0xbc45, 0x4, 0x44, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x9, 0x8, 0x4, 0x5, 0x6, 0x20004, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2000b, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x0, 0x800003, 0x200, 0x7f, 0x3, 0x4, 0x5, 0x1000, 0xa2, 0x3, 0xa9, 0x0, 0x6, 0xac8, 0x7fff, 0x4002, 0x5, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x3, 0xf0ca, 0x5, 0x5, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x9, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x1, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x95fe, 0xb, 0x80000000, 0x8, 0x406, 0x1, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x1003]}, 0x45c)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

3.862462843s ago: executing program 1 (id=1504):
r0 = add_key$keyring(&(0x7f00000000c0), 0x0, 0x0, 0x0, 0xffffffffffffffff)
request_key(&(0x7f0000000100)='asymmetric\x00', &(0x7f0000000140)={'syz', 0x1}, &(0x7f0000000180)='asymmetPic@\xe6u\x18\x8f\x8d\xd0\xb9\xb4d\x97\xee\x9bY\xb3\xa0dI$(\xed\x98S\xdcB\xdf\x99J\x9c&#m\xd0\xb0\x134m\xa7se\x8fvS\x84:\"-\x94\x84\xbd\xf4X\xf2F6\xe44\x1f\xa7f\x82\xd7aLt@%a\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbf\xb4\xc6m39\x9e)\xa5\xe7\xdb\xdc\xb3\xb6\x1f\x1d5\x13\xde\xab\x86\xf5`S<\xd5\xc7@-X0\xa9\xe4l\xab\xf0}\xf0\xeaco\x85kM\x8a<Z\x02\xfc\xb6E\x8c&\f\xb4)l\x93\xb8\xb1\xcfK\x0e\xben \xc3\xc5xH\xa5\t\xcc\"\xcd\xe2\xbb>S\x1bZ\xa1\xba\xb4E\xbc', r0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1342, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2})
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x20, 0x11, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x10, 0x0, 0x0, 0x0, [@typed={0xb, 0x0, 0x0, 0x0, @binary="56ccabd869c203"}]}]}, 0x20}], 0x1, 0x0, 0x0, 0xc010}, 0x40080)
request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0)

3.777451225s ago: executing program 1 (id=1505):
mlockall(0x7)
capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080))
syz_usb_connect(0x0, 0x5a, &(0x7f0000000180)=ANY=[@ANYBLOB="12010000ec13b2106d04f308280b0102030109024800010000000009046900000e0100002b4101"], 0x0)
openat$tun(0xffffffffffffff9c, 0x0, 0x101482, 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x4048aec9, &(0x7f0000000080)={[{0x1, 0xffff, 0x0, 0x6, 0xad, 0x81, 0x19, 0xfd, 0xc, 0x0, 0x1, 0x10, 0x9}, {0x3746, 0x1002, 0x2, 0x0, 0x0, 0x61, 0xfd, 0x0, 0x0, 0x0, 0x42, 0x0, 0xfffffffffffffffe}, {0xffffffff, 0x2, 0x60, 0x6, 0x9, 0x0, 0x5f, 0x1, 0xa, 0x2}], 0x1ffffff})
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000002d80)={0x0, 0x0, &(0x7f0000002d40)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000000203010200000000000000000000000009000200000000470200000008000340000000000800010001"], 0x30}}, 0x0)
sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000002030500000000000040000002000000090002"], 0x20}, 0x1, 0x0, 0x0, 0x40049d1}, 0x0)
r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x129042, 0x15)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0)
mkdir(&(0x7f0000000100)='./bus\x00', 0xe8)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4)
connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x9, @loopback}, 0x1c)
setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000540), 0x3c)
setsockopt$inet6_tcp_int(r3, 0x11a, 0x1, &(0x7f0000000100)=0x304, 0x4)
mount$overlay(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x2000000, &(0x7f0000000140)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]})
unlink(&(0x7f0000000180)='./file0/file1\x00')
linkat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0/file1\x00', 0xffffffffffffff9c, 0x0, 0x1000)
r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0)
r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0)
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f0000000100)="3e0f794c32e5b8010000000f01d9266736260f01c2360f009e00200000b805000000b9009000000f01c166baf80cb89b2d628aef66bafc0cb0d8ee66baf80cb844441180ef66bafc0cecb9860a0000b86a4b3a16ba025809000f30b996080000b800000000ba000000000f30f30f1be3", 0x70}], 0x1, 0x16, 0x0, 0x0)
r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ppoll(&(0x7f0000000040)=[{r7, 0xc122}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_RUN(r6, 0xae80, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2)

2.941096157s ago: executing program 4 (id=1510):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$packet(0x11, 0x2, 0x300)
mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0xc03, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x5)
syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, 0x0}], 0x1, 0x70, &(0x7f0000000200)=[@vmwrite={0x8, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2, 0x0, 0x81a00000c}], 0x1)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_GUEST_DEBUG_x86(r4, 0x4048ae9b, &(0x7f00000000c0)={0x12359e14e9244cbf, 0x0, {[0x0, 0xfffffffffffeffff, 0xfffffffffffffff9, 0xd4, 0x3, 0x5, 0x3, 0x7]}})
ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000380)={'team_slave_0\x00', &(0x7f00000002c0)=@ethtool_ringparam={0x10, 0x9, 0x100, 0x8003, 0x6, 0x200, 0x1, 0x800, 0x4}})
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101482, 0x0)
r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60)
syz_kvm_setup_cpu$x86(r6, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x15, 0x0, 0x0)
r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f0000000000)={[0x7ff, 0x0, 0x5, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x8, 0x8, 0x4, 0x0, 0x8000], 0x1, 0x3c4210})
lremovexattr(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="62747266732e010000002b00eb872a19e15fd1a04145dbf3839667e00869eaf3c15f9d855cbb24c319b14bb1d10b28c7d1bde666d720f77cc49ef3d3c57aaedf5bef32d5c37513"])
syz_io_uring_setup(0x300552d, &(0x7f0000000140)={0x0, 0x9f50, 0x36000, 0x6, 0x359}, 0x0, 0x0, 0x0)
r8 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000004c0)=ANY=[@ANYBLOB="ac0000002100010000000000000000009b009f801c41e128f31971580a817cc8423ad2259b7fb0d6353816cc61391677702a7a0a4675b44e8196dc55f6137cb6240f4e0e32bbe4b9ff46e1b710b25b27a7bf9f7b7ebbab9a18f4a2113c6fa331cdcb90e630633893db1d8154e99df77ab402f222975c9b99467e9b239aacb58ff1391f31dae3fe8585ee2b70f41f764b0670f0e1e3cb1ef754ba5bebdcf7a5eea168dc1d"], 0xac}], 0x1}, 0x20000001)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r9=>0xffffffffffffffff})
writev(r9, &(0x7f0000000480)=[{&(0x7f00000002c0)="462e3e1c", 0x4}], 0x1)
writev(r9, &(0x7f0000000180)=[{&(0x7f0000000000)="729804819e25bf1576ffe5c12a5207113f19d58313aba5de68f29cba9eabb7ffc8ffa6ff5e57bb2a1a4db35012bba91acdbe6123e6d1b0e9b009f638c2262aa71fdb6fdca6f5afd31515336efa9d3ac3d1dcb773d177640fa9d940ae528c0de4820b43c5ca5aadd87316a4539842e59b2b62294946b288ccec1b315ad96484c9ce1069450e4b459926691d6e833aa0bc56251cb81bd60c84e5c38f6d84f5e0d7", 0xa0}, {&(0x7f0000000880)="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", 0xf61}], 0x2)
pipe2(&(0x7f0000000080), 0x0)
ioctl$KVM_RUN(r7, 0xae80, 0x0)

2.79242868s ago: executing program 4 (id=1513):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a8010000100001040000000000000000000000000000000000000000000000010000000000000000000004000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001400686d6163287368613129"], 0x1a8}}, 0x0)

2.79223482s ago: executing program 4 (id=1514):
syz_usb_connect(0x3, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="120110008fcb2040c71b00309a690102030109024b0001020da007090424010002020509052406000105240009000d240f0102000000060006100906241a07001e0524010207052406000005010000000d240f"], 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xd, 0x5, 0x6000, 0xbd02, 0x2}, {0x80000001, 0x3, 0x8, 0x5, 0x3}, {0xb, 0xc, 0xb8, 0x1ff, 0xfffffff1}, {0x80000001, 0x0, 0x8000, 0x4, 0x8000}]})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = epoll_create1(0x80000)
close(r3)
userfaultfd(0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4", 0xe}], 0x1)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r6, 0x0)
preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_FPU(r6, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1})
ioctl$KVM_RUN(r7, 0xae80, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x2}, 0x4)

1.954090902s ago: executing program 0 (id=1531):
openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x121040, 0x0)
socket(0x1, 0x5, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1)
listen(r0, 0x3)
setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000080)=0xfff, 0x4)
socket$netlink(0x10, 0x3, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/arp\x00')
socket$nl_generic(0x10, 0x3, 0x10)
socket$nl_generic(0x10, 0x3, 0x10)
socket$can_raw(0x1d, 0x3, 0x1)
openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x200c00, 0x0)
socket$inet6(0xa, 0x80002, 0x0)
r1 = socket$key(0xf, 0x3, 0x2)
syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r1, @ANYBLOB='\a'], 0x0)

1.531634092s ago: executing program 4 (id=1533):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000018406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000000)={0x2c, &(0x7f0000000300)=ANY=[@ANYBLOB="000005"], 0x0, 0x0, 0x0, 0x0}, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0003040000000103"], 0x0, 0x0, 0x0}, 0x0)
timerfd_create(0x0, 0x0)
socket$netlink(0x10, 0x3, 0x0)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x3, 0x1002, 0x6, 0xfdfa}, 0x3a, [0x8000, 0x3, 0xd, 0xb, 0x80, 0x4, 0x3, 0x7f, 0x20000006, 0x20000000, 0xa, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x10000, 0xa, 0x3c1b, 0x7, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x3, 0x4, 0x8, 0x4c74, 0x80000000, 0x80, 0xfffffffb, 0xc, 0x0, 0x8071, 0x7, 0x3ff, 0xffffffff, 0x7, 0x5, 0x3e, 0x18f, 0x3, 0x8, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x7ff, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x5, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xcb, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x806, 0x7, 0xea4, 0x0, 0x3, 0x7, 0x7fef, 0x6, 0x40000400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x9, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0x101, 0x202, 0x4, 0xc, 0x3, 0x7, 0x8, 0x1, 0x7, 0x3, 0xbc45, 0x4, 0x44, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x9, 0x8, 0x4, 0x5, 0x6, 0x20004, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0x2000b, 0x9, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x0, 0x800003, 0x200, 0x7f, 0x3, 0x4, 0x5, 0x1000, 0xa2, 0x3, 0xa9, 0x0, 0x6, 0xac8, 0x7fff, 0x4002, 0x5, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x1, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x3, 0xf0ca, 0x5, 0x5, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x8, 0x2, 0x9, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0x1, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x95fe, 0xb, 0x80000000, 0x8, 0x406, 0x1, 0x5, 0x9, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x0, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0x1003]}, 0x45c)
socketpair$unix(0x1, 0x2, 0x0, 0x0)
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
listen(r1, 0x6d5)
r2 = socket$vsock_stream(0x28, 0x1, 0x0)
connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)

1.422271815s ago: executing program 0 (id=1537):
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./tracing\x00', 0x1ff)
mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000200)='tracefs\x00', 0x0, 0x0)
r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./tracing/events/kvm/kvm_hv_stimer_cleanup/enable\x00', 0x1, 0x0)
write(r0, &(0x7f0000000400)='1', 0x1)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./tracing/events/kvm/kvm_hv_stimer_cleanup/trigger\x00', 0x1, 0x0)
write(r1, &(0x7f0000000600)='stacktrace', 0xa)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0)
r2 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$netlink(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)={0x24, 0x11, 0x1, 0x0, 0x25dfdbfb, "", [@nested={0x14, 0x0, 0x0, 0x0, [@typed={0xd, 0x0, 0x0, 0x0, @binary="56ccabd869c2033840"}]}]}, 0x24}], 0x1, 0x0, 0x0, 0x8011}, 0x40080)
ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x2e)
r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0xfffffffffffffed5)

1.275700339s ago: executing program 0 (id=1538):
ioctl$RTC_UIE_OFF(0xffffffffffffffff, 0x7004)
mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x190)
r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00')
r1 = socket$vsock_stream(0x28, 0x1, 0x0)
r2 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f0000000080)={0x0, 0x8}, 0x8)
bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6)
close_range(r1, 0xffffffffffffffff, 0x0)
read$FUSE(r0, &(0x7f0000002040)={0x2020}, 0x2020)
lseek(r0, 0xffffff7f00000000, 0x1)
mknodat$loop(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x1000, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = socket(0x28, 0x801, 0x0)
mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000780), 0x0, &(0x7f00000008c0)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x408, &(0x7f0000000140)={[{@index_off}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]})

1.20406266s ago: executing program 0 (id=1539):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)
socket$packet(0x11, 0x3, 0x300)
keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1}}, 0x0, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0xb, 0x2, "7b89"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="eb00e2ffd8000000000000000000e000000000060000"], 0x0, 0x0, 0x0, 0x0})

970.637666ms ago: executing program 2 (id=1540):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x158}, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000280)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300))
sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESHEX=r3], 0xc4}, 0x1, 0x0, 0x0, 0x881}, 0x400c0c5)
r5 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="d40000001b001d0328bd7000fcdbdf25ffffffff000000000000000000000000fe8000000000000000000000000000264e2000014e2404000200000087000000", @ANYRES64, @ANYRES32=0x0, @ANYBLOB="0800000000000000010001002c040b7c22e229913b9f9e6e3fb6cf00000000f4ffffffffffffff0400000010000091ad07000000000000000000008000000000ffffff7f0000000003000000000000000400000000000000080000000000000003000000b86b6e1e1aaec8d22cd81213a3017bce6fc1637fb3da09907b4b59859ac551fe74be7c36fd9d73"], 0xd4}}, 0x0)

949.159016ms ago: executing program 2 (id=1541):
r0 = openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$F2FS_IOC_ABORT_ATOMIC_WRITE(r0, 0xf505, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000540), 0x82, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x18)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000011000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000240)="2ed26f0f3566b842000f00d864f4b9a00000000f01c166baf80cb8b7351187ef66bafc0cc4c37bf01300ee0fde460b0f01b830300f0168cfe20a", 0x3a}], 0x1, 0x12, 0x0, 0x0)
setresuid(0xee00, 0xee00, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={<r4=>0xffffffffffffffff, <r5=>0xffffffffffffffff})
prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0)
sendmmsg$unix(r5, &(0x7f0000001fc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)="8c", 0x1}], 0x1, &(0x7f0000000080)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="b0", 0x1}], 0x1, &(0x7f0000000280)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4], 0x18, 0x841}}], 0x2, 0x11)
ioctl$NILFS_IOCTL_GET_VINFO(0xffffffffffffffff, 0xc0186e86, &(0x7f0000000200)={&(0x7f00000000c0), 0x0, 0x20, 0xa, 0xfffffffffffffffd})
r6 = socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$SO_TIMESTAMP(r6, 0x1, 0x23, 0x0, &(0x7f0000000200))
r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='temp_file\x00', 0x42, 0x1ff)
write(r7, &(0x7f0000000080)='/dev/mapper/control', 0x13)
lseek(r2, 0xffffffffffffeffe, 0x0)
ioctl$BTRFS_IOC_SNAP_DESTROY(r1, 0x5000940f, &(0x7f0000000c40)={{r2}, "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"})
read(r7, &(0x7f0000000100), 0x14)
ioctl(0xffffffffffffffff, 0xc138fd00, &(0x7f0000000200)="04")
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff)
mount(0x0, &(0x7f0000000200)='./config\x00', &(0x7f0000000300)='configfs\x00', 0x0, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1\x00', 0x1ff)
mkdirat(0xffffffffffffff9c, &(0x7f0000000a00)='./config/usb_gadget/g1/functions/hid.usb0\x00', 0x1ff)
r8 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./config/usb_gadget/g1/functions/hid.usb0/subclass\x00', 0x1, 0x1ff)
write(r8, &(0x7f0000000c00)='1', 0x1)
sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004041}, 0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
syz_usb_connect(0x1, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000564404204e080110f9330102030109021b00010000000009040000010000c2000905", @ANYRES32], 0x0)
read(r8, &(0x7f0000000140)=""/44, 0x2c)

679.770974ms ago: executing program 0 (id=1542):
syz_usb_connect(0x3, 0x5d, &(0x7f0000000200)=ANY=[@ANYBLOB="120110008fcb2040c71b00309a690102030109024b0001020da007090424010002020509052406000105240009000d240f0102000000060006100906241a07001e0524010207052406000005010000000d240f"], 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/stat\x00', 0x41, 0x0)
ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f00000000c0)={0x4, 0x0, [{0xd, 0x5, 0x6000, 0xbd02, 0x2}, {0x80000001, 0x3, 0x8, 0x5, 0x3}, {0xb, 0xc, 0xb8, 0x1ff, 0xfffffff1}, {0x80000001, 0x0, 0x8000, 0x4, 0x8000}]})
openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x1e9100, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1)
r4 = epoll_create1(0x80000)
close(r3)
userfaultfd(0x1)
mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}})
r5 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4", 0xe}], 0x1)
write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0x208e24b)
mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, 0xffffffffffffffff, 0x0)
preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x54, 0x0, 0x0)
ioctl$KVM_SET_FPU(0xffffffffffffffff, 0x41a0ae8d, &(0x7f0000000240)={'\x00', 0x4, 0xd, 0x96, 0x0, 0x100, 0x10000, 0x1, '\x00', 0x1})
ioctl$KVM_RUN(r6, 0xae80, 0x0)
setsockopt$inet_icmp_ICMP_FILTER(r0, 0x1, 0x1, &(0x7f0000000140)={0x2}, 0x4)

679.590603ms ago: executing program 1 (id=1543):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="a801000010000104000000000000000000000000000000000000000000000001000000000000000000001a000000000100000000000000000a00808000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000001000012343200000000000000000000000000000000000001ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000060001400686d6163287368613129"], 0x1a8}}, 0x0)

662.381584ms ago: executing program 1 (id=1544):
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_int(r1, 0x107, 0xc, &(0x7f0000000080)=0x400, 0x4)
r2 = socket$unix(0x1, 0x1, 0x0)
bind$unix(r2, &(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e)
listen(r2, 0x0)
listen(r2, 0x2)
sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="20010000120013"], 0x120}}, 0x0)

639.999615ms ago: executing program 1 (id=1545):
r0 = syz_io_uring_setup(0x3bd4, &(0x7f0000000180)={0x0, 0xcc19, 0x130c8, 0x6, 0x30e}, &(0x7f0000000100), &(0x7f0000000200), &(0x7f0000000000))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz1\x00', {0x4, 0x0, 0x5374}, 0x8000001d, [0x8000, 0x78, 0xf, 0x2, 0x80, 0x6, 0x203, 0x7e, 0x4, 0x4b, 0x39cc1919, 0x42, 0x9, 0x5, 0xffff2d37, 0x881, 0x6, 0x3, 0x0, 0x5, 0x4, 0x3, 0xfffffffb, 0x3c5d, 0x1, 0x0, 0x9, 0x2, 0x15bb, 0x2, 0xe65f, 0x3, 0x7, 0x3, 0x7fff, 0x7, 0x80000000, 0xa72, 0x3, 0x7, 0x0, 0x71, 0xe, 0x5, 0x1, 0x5, 0x9, 0x3a, 0xffffff7f, 0x6, 0x6, 0xfffc0003, 0x5, 0x4, 0x8, 0x101, 0x90, 0x2, 0x5, 0x9, 0x8, 0x7, 0x1f, 0x40], [0x10000007, 0x3, 0x800, 0x8000, 0x10, 0xffeffff3, 0x8, 0x2, 0xf7, 0x10, 0x2bf, 0x6c9, 0xfff, 0xfffffffe, 0x5, 0x0, 0xd14, 0x5, 0x2f, 0xe, 0x4312, 0x7c, 0xea4, 0x0, 0x4, 0x22, 0x1, 0x40009, 0x400400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x5, 0x5f31, 0x7f9, 0x5, 0x2, 0x2, 0x9, 0x5, 0x9, 0x8, 0x800000d, 0x88da, 0x2007, 0xd, 0x1, 0xfe000000, 0x10002, 0x2, 0x7b, 0x9, 0x3, 0x3, 0x8, 0x1, 0x7, 0x3, 0x9, 0x48c93690, 0x1000042, 0xff7f], [0x7, 0xf5fd, 0x0, 0x5, 0x1, 0x100, 0xa, 0x9, 0x800003, 0x7fff, 0x0, 0x1, 0xf, 0x4, 0x5, 0x20000005, 0x0, 0x1ef, 0x4, 0x8, 0x86, 0x3, 0x7, 0x3e7, 0x8003, 0x5, 0x200, 0x5, 0x3, 0x8, 0x8, 0x6cfc, 0x5, 0x39, 0x7, 0x200, 0x80000000, 0x3, 0x4e0a, 0x7, 0x1000, 0xa2, 0x7, 0x5, 0x1, 0x6, 0xac8, 0xffffffff, 0x2, 0x11, 0x7ff, 0xfffffff9, 0x0, 0x8, 0xffff, 0x2b98, 0x1, 0x4, 0x120000, 0xbe, 0x0, 0xa2ed, 0x2, 0x25], [0x9, 0xbb31, 0x7, 0xb, 0x5, 0xf0c1, 0xa, 0x80000006, 0x0, 0x5, 0x7d, 0xc9, 0x6, 0x6, 0x8, 0x57b, 0x7, 0x10000, 0x6, 0x7ffd, 0xfffd, 0x4, 0x20002, 0x5, 0xe8a0556, 0x2, 0x800014c, 0x3, 0x6, 0x10006, 0x3, 0x80000000, 0x5, 0x8, 0xce, 0xee1, 0xfffff000, 0x179, 0x3, 0x7e, 0x100, 0x9600, 0x56e, 0x2, 0x1007, 0x40000006, 0x100001, 0x0, 0x8, 0x4, 0x30b1d693, 0xa1f, 0xa, 0x800007, 0xfffffffe, 0x3, 0x8a13, 0xffff, 0x8000007, 0x2bf, 0x3, 0x1ff, 0x7fffffff, 0x12]}, 0x45c)
close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
socket$inet6_icmp_raw(0xa, 0x3, 0x3a)
socket$nl_netfilter(0x10, 0x3, 0xc)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x101482, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x101000, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, 0x0}], 0x1, 0x15, 0x0, 0x0)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000280)={0x0, 0x0, @pic={0x4, 0x7, 0xe1, 0x81, 0x9, 0xd9, 0x40, 0x41, 0xfb, 0x1, 0xc, 0x2, 0x2, 0x41, 0x1, 0xf7}})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x6e, 0x0, 0x3, 0x20, 0x3, 0x2, 0x106c, 0x100, 0x8000000000000001, 0x80000004000080, 0x380000, 0x2b8d, 0x8, 0x4, 0x2, 0x8000], 0x1, 0x3c4210})
ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r1, 0x80089419, &(0x7f00000008c0))
mount$binderfs(0x0, &(0x7f0000000080)='./binderfs\x00', 0x0, 0x2010860, &(0x7f0000000200)=ANY=[@ANYBLOB='context='])
syz_io_uring_setup(0x100552d, &(0x7f0000000140)={0x0, 0x9f50, 0x36000, 0x6, 0x359}, 0x0, 0x0, 0x0)
pipe2(&(0x7f0000000080)={0xffffffffffffffff, <r5=>0xffffffffffffffff}, 0x0)
r6 = socket$inet_tcp(0x2, 0x1, 0x0)
ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000240)={{0x2, 0x4e24, @empty}, {0x1}, 0x0, {0x2, 0x4e22, @empty}, 'lo\x00'})
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r7 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000000000000000000400000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x40004)
r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$TIOCGPTPEER(r8, 0x5441, 0x786d)
r9 = socket$inet6_tcp(0xa, 0x1, 0x0)
r10 = dup(r9)
ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @multicast})
sendmsg$NFT_BATCH(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000900)=ANY=[@ANYRES32=r6, @ANYRESHEX=r5, @ANYRESDEC=r10, @ANYRES32=r0], 0x1ec}}, 0x88814)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

351.590402ms ago: executing program 2 (id=1546):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4)
connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c)
r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0)
ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f0000000400)=0x4000000)
ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xfec00000, 0x39, &(0x7f0000000480)=""/57}]})
ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000000)=0x2)
setsockopt$inet6_tcp_int(r0, 0x6, 0x17, &(0x7f0000000140)=0x4, 0x4)

298.999483ms ago: executing program 2 (id=1547):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0x5001}) (async)
r1 = socket$inet_udp(0x2, 0x2, 0x0) (async)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000ff3f08000000480100100000000019002b000a0001000500000000000072080003001500000000", 0x39}], 0x1)
ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', 0x1}) (async)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000200)={'syzkaller1\x00', {0x2, 0x0, @dev={0xac, 0x14, 0x0, 0x1}}})
bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x0, 0x1}}, 0x10) (async)
write$tun(r0, &(0x7f0000000240)={@void, @val={0x2, 0x5, 0x1c, 0x10, 0x14, 0x6}, @ipv4=@udp={{0x5, 0x4, 0x0, 0x0, 0x2d, 0x0, 0x0, 0x40, 0x11, 0x0, @dev={0xac, 0x14, 0x0, 0x2}, @dev={0xac, 0x14, 0x0, 0x1}}, {0x1234, 0x4e20, 0x19, 0x0, @opaque="0123456789abcdef0123456789abcdef01"}}}, 0x37) (async, rerun: 64)
mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (rerun: 64)
munmap(&(0x7f0000470000/0x400000)=nil, 0xe06500)
mmap$KVM_VCPU(&(0x7f0000ee9000/0x1000)=nil, 0x930, 0x1000009, 0x4102932, 0xffffffffffffffff, 0x0) (async)
timer_create(0x0, 0x0, &(0x7f0000bbdffc)) (async)
mount$incfs(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000200), 0x80, 0x0)
mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', 0x0, 0x30600f0, 0x0)

171.072746ms ago: executing program 2 (id=1548):
pipe2(&(0x7f0000000100), 0x800)
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup/../file0\x00', &(0x7f00000003c0)={0x1, 0x174, 0xa}, 0x18)
mkdirat(r0, &(0x7f0000000200)='./cgroup/../file0\x00', 0xac)
mount$incfs(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x0, 0x0)
r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x4e)
futex(&(0x7f0000000080), 0x5, 0x0, 0x0, &(0x7f0000000200), 0x14fffffd)
openat$incfs(r1, &(0x7f00000001c0)='.pending_reads\x00', 0x0, 0x130)
syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x13, [0x8000, 0x10c95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x1000006, 0x10000, 0x80005, 0x2, 0xffff2d34, 0xffffff01, 0x6, 0x3, 0xfffffffc, 0x5, 0x4, 0x2, 0x7, 0x2, 0x80000001, 0x26, 0xd, 0x80000000, 0x6, 0x7, 0xe65e, 0x4, 0x7, 0x6, 0x8, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x80006, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0x9, 0x80000130, 0x8004, 0x5, 0x80000001, 0x2, 0xc8, 0xf5, 0xe, 0x7, 0x6c7, 0x8, 0xfffffffc, 0x3, 0xfffffffc, 0x0, 0x5, 0x42f, 0xe, 0x312, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4400, 0x3ff, 0x6, 0x1, 0xfc, 0x5, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x1, 0x4, 0xffff80f1, 0x4, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x0, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x8, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x0, 0x5, 0xf, 0x4, 0x6, 0x7, 0x0, 0x8, 0x5, 0x2, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x2, 0x6d03, 0xa, 0xd, 0x800003, 0x200, 0xfffffffd, 0x3, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0x1ff, 0x5, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x7ffffffd, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x9, 0x4, 0x3, 0x101, 0x10000, 0x4, 0x7fff, 0x1000, 0xc, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0x8, 0xfffff000, 0x4010080, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x4, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0xffffffff, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000afeb4f"], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x80)
syz_genetlink_get_family_id$nfc(&(0x7f0000002a80), r3)
r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000002b80), r3)
sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000340)={0x14, r4, 0x1, 0x70bd27, 0x25dfdbfb}, 0x14}}, 0x40000)
mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x8)
r5 = socket(0x10, 0x803, 0x0)
setsockopt$sock_int(r5, 0x1, 0x22, &(0x7f0000000380)=0xc, 0x4)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r5)
r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r7 = socket$packet(0x11, 0x3, 0x300)
r8 = socket(0x10, 0x3, 0x0)
ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f000001ab40)={'ip6_vti0\x00', &(0x7f000001aac0)={'ip6_vti0\x00', 0x0, 0x29, 0x5, 0x36, 0xffffffff, 0x10, @empty, @loopback, 0x1, 0x40, 0x65, 0xaa}})
ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000240)={'batadv_slave_0\x00', <r9=>0x0})
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000002c0)={r9, 0x1, 0x6, @broadcast}, 0x10)
setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f0000000080)={r9, 0x1, 0x6, @multicast}, 0x10)
setsockopt$packet_drop_memb(r7, 0x107, 0x2, &(0x7f0000000040)={r9, 0x1, 0x6, @broadcast}, 0x10)
syz_clone3(&(0x7f0000000240)={0x200a00000, 0x0, 0x0, 0x0, {0x2c}, 0x0, 0x0, 0x0, 0x0, 0x0, {r6}}, 0x58)

68.426609ms ago: executing program 0 (id=1549):
r0 = socket$inet6(0xa, 0x1, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0)
r2 = openat$ublk_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) (async)
r3 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040), &(0x7f00000000c0)=<r4=>0x0, &(0x7f0000000100)=<r5=>0x0, &(0x7f0000000140)=<r6=>0x0)
r7 = syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000200)={0x2e, 0xc, 0x0, r2, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r8=>0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x3, 0x104}}}, &(0x7f0000000300)=<r9=>0x0)
r10 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r7, 0x2)
syz_ublk_setup_queues(r10, r9, &(0x7f0000000280)={0x0, 0xf5b8, 0x10, 0x1, 0x215, 0x0, r3}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe4b8, 0x2, 0x3, 0xf}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x2b4f, 0x4000, 0x0, 0x344}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6f38, 0x1, 0x3, 0x221, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa5df, 0x200, 0x2, 0x2bd, 0x0, r3}}], 0x4, &(0x7f0000001dc0)={0x2e, 0xc, 0x0, r10, 0xc0107520, 0x0, 0x0, 0x0, 0x0, {0xfff9}, 0x0, r8, '\x00', {0x1, 0x362, 0x0, 0x0}}, &(0x7f0000001e40)) (async)
r11 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r12 = eventfd(0x8c66)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000040)={0x0, 0x70000, 0x0, r12}) (async)
ioctl$KVM_IOEVENTFD(r11, 0x4040ae79, &(0x7f0000000200)={0x7b, 0x0, 0x0, r12}) (async)
r13 = syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0)
syz_usb_control_io$printer(r13, 0x0, 0x0)
syz_usb_control_io$lan78xx(r13, 0x0, 0x0)
r14 = openat(0xffffffffffffff9c, &(0x7f0000000500)='.\x00', 0x0, 0x0) (async)
mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) (async)
syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01)
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0xb, 0x6, 0xff}, 0x3a, [0x1, 0xc95a, 0xf, 0x8, 0x80, 0x8, 0x3, 0x10007e, 0x20000006, 0x53, 0x6, 0x10000, 0x80005, 0x3, 0xffff2d34, 0xffffff01, 0x6, 0x4, 0x10003, 0x5, 0x4, 0x2, 0x7, 0x3c5b, 0x80000001, 0x26, 0xd, 0x1, 0x6, 0x7, 0xe661, 0x7, 0x7, 0x6, 0x0, 0x4c74, 0x80000000, 0x0, 0x3, 0xe, 0x8, 0x800080ee, 0xa, 0x17, 0x1, 0x9, 0x200, 0x3e, 0x8c, 0x6, 0xca9, 0x0, 0x5, 0x4, 0x8, 0x400, 0x80, 0x10001, 0x5, 0x6, 0x6, 0x5, 0x1, 0x40], [0x10000007, 0xc, 0x80000130, 0x8004, 0x5, 0xfffffff3, 0x2, 0xc8, 0xf9, 0xe, 0xb, 0x6c7, 0x9, 0xfffffffc, 0x1000, 0x0, 0x0, 0x205, 0x442f, 0x200000e, 0x6, 0x78, 0x1, 0x0, 0x2, 0x7, 0x7fff, 0x6, 0x4402, 0x401, 0x6, 0x1, 0xfc, 0x6, 0x1000005, 0x5f31, 0xd, 0x40000101, 0x7, 0x4, 0xffff80f1, 0x8, 0x6, 0x8, 0x9, 0x6, 0x47, 0x8020, 0x1, 0xfe000000, 0xffff, 0xfffffe01, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93694, 0x43, 0x9], [0x7, 0x9, 0x0, 0x5, 0xfffffffe, 0x100, 0x8d2, 0xb42a, 0x5, 0x7fff, 0x80000000, 0x5, 0xf, 0x4, 0x6, 0x805, 0x5, 0x8, 0x5, 0xffffffff, 0x86, 0x3, 0x303c, 0xbe7, 0xb, 0x1ff, 0x2, 0x2, 0x2, 0x20000008, 0x2, 0x6d03, 0x6, 0xd, 0x800006, 0x200, 0x1006a, 0x40000001, 0x4, 0x2950bfaf, 0x2, 0xa2, 0x7, 0xa9, 0x20000005, 0x6, 0xac8, 0xc2, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0x6, 0x0, 0x2, 0x21c, 0x120000, 0x3, 0x0, 0x80aaed, 0x4, 0x24], [0x9, 0x40bb33, 0x9db, 0xb, 0x5, 0x93a, 0x9, 0x1000006, 0x100, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x4, 0x3, 0x101, 0x7ff, 0x7fff, 0x7fff, 0x1000, 0x7f, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x96, 0xffffffff, 0x80000001, 0x7, 0x4, 0xc8, 0xfffffffd, 0xfffff000, 0x0, 0x3, 0x7e, 0x100, 0x1000, 0x7, 0x9, 0x8, 0x6, 0x226, 0x5, 0x5, 0x1, 0x30b1d69b, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x928, 0xb1e, 0xc7, 0x200, 0xffff2441, 0xfff]}, 0x45c)
ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) (async)
r15 = socket$nl_route(0x10, 0x3, 0x0) (async)
ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}})
sendmsg$netlink(r15, &(0x7f0000000100)={0x0, 0x32, &(0x7f0000006c40)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000190015000000ffffffffffff02"], 0x1c}], 0x1, 0x0, 0x0, 0x40000}, 0x0) (async)
fsetxattr$system_posix_acl(r14, &(0x7f0000000000)='system.posix_acl_access\x00', 0x0, 0x34, 0x1)
syz_usb_control_io$hid(r13, 0x0, &(0x7f0000000940)={0x2c, &(0x7f00000009c0)=ANY=[@ANYBLOB="00032d"], 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r13, 0x0, 0x0)
syz_usb_control_io$uac3(r13, 0x0, 0x0) (async)
syz_usb_control_io$cdc_ncm(r13, 0x0, 0x0)
syz_usb_control_io(r13, 0x0, 0x0) (async)
close_range(r0, 0xffffffffffffffff, 0x0)

0s ago: executing program 2 (id=1550):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000c000000070001"], 0x0, 0x0, 0x0}, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x275a, 0x0)
socket$packet(0x11, 0x3, 0x300)
keyctl$reject(0x13, 0x0, 0x9, 0x201, 0xfffffffffffffff9)
mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x10012, r1, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000a00)={0x84, 0x0, 0x0, 0x0, &(0x7f0000000640)={0x20, 0x0, 0x4, {0x1}}, 0x0, &(0x7f0000000700)={0x40, 0x7, 0x2}, &(0x7f0000000740)={0x40, 0x9, 0x1, 0x8}, &(0x7f0000000780)={0x40, 0xb, 0x2, "7b89"}, &(0x7f00000007c0)={0x40, 0xf, 0x2, 0x6}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000840)={0x2c, &(0x7f0000000140)=ANY=[@ANYBLOB="eb00e2ffd8000000000000000000e000000000060000"], 0x0, 0x0, 0x0, 0x0})

kernel console output (not intermixed with test programs):

device strings: Mfr=1, Product=2, SerialNumber=3
[  172.564546][   T31] usb 5-1: Product: syz
[  172.568731][   T31] usb 5-1: Manufacturer: syz
[  172.573373][   T31] usb 5-1: SerialNumber: syz
[  172.641499][   T36] audit: type=1400 audit(1785531576.931:21856): avc:  denied  { ioctl } for  pid=3883 comm="syz.2.1170" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x9418 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1
[  172.691079][ T3886] kvm: pic: single mode not supported
[  172.691091][ T3886] kvm: pic: level sensitive irq not supported
[  172.696985][ T3886] kvm: pic: single mode not supported
[  172.703122][ T3886] kvm: pic: level sensitive irq not supported
[  172.708870][ T3886] kvm: pic: single mode not supported
[  172.715289][ T3886] kvm: pic: level sensitive irq not supported
[  172.720884][ T3886] kvm: pic: non byte write
[  172.732200][ T3886] kvm: pic: single mode not supported
[  172.732214][ T3886] kvm: pic: level sensitive irq not supported
[  172.740818][ T3886] kvm: pic: non byte write
[  172.752040][ T3886] kvm: pic: non byte write
[  172.809237][ T3892] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1172'.
[  172.844073][   T31] usb 5-1: Invalid firmware size=18.
[  172.852109][   T31] usb 5-1: USB disconnect, device number 73
[  172.883287][   T36] audit: type=1400 audit(1785531577.171:21857): avc:  denied  { ioctl } for  pid=3893 comm="syz.2.1173" path="socket:[42515]" dev="sockfs" ino=42515 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  172.919708][ T3904] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.928223][ T3904] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  172.980187][ T3906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  172.988679][ T3906] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.129576][  T497] usb 2-1: new high-speed USB device number 94 using dummy_hcd
[  173.259654][  T497] usb 2-1: device descriptor read/64, error -71
[  173.499590][  T497] usb 2-1: device descriptor read/64, error -71
[  173.522369][ T3914] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.531858][ T3914] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.542550][ T3913] FAULT_INJECTION: forcing a failure.
[  173.542550][ T3913] name failslab, interval 1, probability 0, space 0, times 0
[  173.557708][ T3913] CPU: 0 UID: 0 PID: 3913 Comm: syz.2.1182 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  173.557741][ T3913] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  173.557757][ T3913] Call Trace:
[  173.557765][ T3913]  <TASK>
[  173.557774][ T3913]  __dump_stack+0x21/0x30
[  173.557811][ T3913]  dump_stack_lvl+0x140/0x1c0
[  173.557844][ T3913]  ? __cfi_dump_stack_lvl+0x10/0x10
[  173.557879][ T3913]  dump_stack+0x19/0x20
[  173.557922][ T3913]  should_fail_ex+0x3c2/0x510
[  173.557949][ T3913]  should_failslab+0xac/0x100
[  173.557977][ T3913]  __kmalloc_cache_noprof+0x41/0x470
[  173.558021][ T3913]  ? kvm_create_lapic+0xb1/0x550
[  173.558048][ T3913]  ? __asan_memset+0x39/0x50
[  173.558068][ T3913]  kvm_create_lapic+0xb1/0x550
[  173.558095][ T3913]  ? kvm_mmu_create+0x18d/0x2b0
[  173.558123][ T3913]  kvm_arch_vcpu_create+0x1b9/0xb90
[  173.558154][ T3913]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  173.558187][ T3913]  ? _parse_integer+0x2e/0x40
[  173.558208][ T3913]  kvm_vm_ioctl+0x7bd/0xc40
[  173.558237][ T3913]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  173.558267][ T3913]  ? ioctl_has_perm+0x1bc/0x500
[  173.558306][ T3913]  ? __asan_memcpy+0x5a/0x80
[  173.558328][ T3913]  ? ioctl_has_perm+0x408/0x500
[  173.558350][ T3913]  ? has_cap_mac_admin+0xd0/0xd0
[  173.558373][ T3913]  ? proc_fail_nth_write+0x184/0x220
[  173.558406][ T3913]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  173.558440][ T3913]  ? selinux_file_ioctl+0x732/0x1480
[  173.558462][ T3913]  ? vfs_write+0xbcf/0xfd0
[  173.558485][ T3913]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  173.558506][ T3913]  ? __cfi_vfs_write+0x10/0x10
[  173.558529][ T3913]  ? __kasan_check_write+0x18/0x20
[  173.558552][ T3913]  ? mutex_unlock+0x90/0x240
[  173.558595][ T3913]  ? __cfi_mutex_unlock+0x10/0x10
[  173.558626][ T3913]  ? bpf_lsm_file_ioctl+0xd/0x20
[  173.558654][ T3913]  ? security_file_ioctl+0x3e/0x110
[  173.558694][ T3913]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  173.558724][ T3913]  __se_sys_ioctl+0x132/0x1b0
[  173.558763][ T3913]  __x64_sys_ioctl+0x7f/0xa0
[  173.558789][ T3913]  x64_sys_call+0x1878/0x2ee0
[  173.558809][ T3913]  do_syscall_64+0x57/0xf0
[  173.558832][ T3913]  ? clear_bhb_loop+0x50/0xa0
[  173.558861][ T3913]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  173.558889][ T3913] RIP: 0033:0x7faa2579e019
[  173.558907][ T3913] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  173.558926][ T3913] RSP: 002b:00007faa26622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  173.558949][ T3913] RAX: ffffffffffffffda RBX: 00007faa25a25fa0 RCX: 00007faa2579e019
[  173.558966][ T3913] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  173.558980][ T3913] RBP: 00007faa26622090 R08: 0000000000000000 R09: 0000000000000000
[  173.558994][ T3913] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  173.559007][ T3913] R13: 00007faa25a26038 R14: 00007faa25a25fa0 R15: 00007ffc13d6e168
[  173.559025][ T3913]  </TASK>
[  173.589663][   T31] usb 5-1: new full-speed USB device number 74 using dummy_hcd
[  173.883442][ T3920] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  173.892274][ T3920] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  173.979601][  T497] usb 2-1: new high-speed USB device number 95 using dummy_hcd
[  174.001821][   T31] usb 5-1: New USB device found, idVendor=08e4, idProduct=017f, bcdDevice= 0.40
[  174.010925][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  174.018919][   T31] usb 5-1: Product: syz
[  174.023137][   T31] usb 5-1: Manufacturer: syz
[  174.027752][   T31] usb 5-1: SerialNumber: syz
[  174.119676][  T497] usb 2-1: device descriptor read/64, error -71
[  174.236701][   T31] usb 5-1: Can't get UAC3 power state for id 10
[  174.243648][   T31] usb 5-1: BAAD SPEAKERPHONE c_chmask mismatch
[  174.252486][   T31] snd-usb-audio 5-1:1.0: probe with driver snd-usb-audio failed with error -22
[  174.263332][   T31] usb 5-1: USB disconnect, device number 74
[  174.276809][  T315] udevd[315]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  174.359697][  T497] usb 2-1: device descriptor read/64, error -71
[  174.459346][ T3922] kvm: pic: single mode not supported
[  174.466143][ T3922] kvm: pic: non byte write
[  174.476273][  T497] usb usb2-port1: attempt power cycle
[  174.476990][ T3922] kvm: pic: non byte write
[  174.486641][ T3922] kvm: pic: non byte write
[  174.531545][ T3930] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1187'.
[  174.550190][ T3932] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.558675][ T3932] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.716400][ T3926] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  174.724936][ T3926] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  174.819574][  T497] usb 2-1: new high-speed USB device number 96 using dummy_hcd
[  174.840544][  T497] usb 2-1: device descriptor read/8, error -71
[  174.970610][  T497] usb 2-1: device descriptor read/8, error -71
[  174.980280][   T10] usb 5-1: new high-speed USB device number 75 using dummy_hcd
[  175.078378][ T3936] bridge: RTM_NEWNEIGH with invalid ether address
[  175.130605][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  175.142448][   T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  175.152242][   T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  175.161313][   T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  175.170012][   T10] usb 5-1: config 0 descriptor??
[  175.219569][  T497] usb 2-1: new high-speed USB device number 97 using dummy_hcd
[  175.240808][  T497] usb 2-1: device descriptor read/8, error -71
[  175.284003][ T3944] overlayfs: missing 'workdir'
[  175.290379][ T3946] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  175.299369][ T3946] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  175.327947][ T3950] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3950 comm=syz.0.1195
[  175.370807][  T497] usb 2-1: device descriptor read/8, error -71
[  175.436729][ T3954] pic_ioport_write: 3 callbacks suppressed
[  175.436745][ T3954] kvm: pic: single mode not supported
[  175.442644][ T3954] pic_ioport_write: 6 callbacks suppressed
[  175.442663][ T3954] kvm: pic: level sensitive irq not supported
[  175.454338][ T3954] kvm: pic: single mode not supported
[  175.460464][ T3954] kvm: pic: level sensitive irq not supported
[  175.466239][ T3954] kvm: pic: single mode not supported
[  175.472679][ T3954] kvm: pic: level sensitive irq not supported
[  175.478177][ T3954] kvm: pic: non byte write
[  175.488802][  T497] usb usb2-port1: unable to enumerate USB device
[  175.495776][ T3954] kvm: pic: single mode not supported
[  175.495790][ T3954] kvm: pic: level sensitive irq not supported
[  175.501696][ T3954] kvm: pic: level sensitive irq not supported
[  175.551058][ T3957] FAULT_INJECTION: forcing a failure.
[  175.551058][ T3957] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  175.570447][ T3957] CPU: 0 UID: 0 PID: 3957 Comm: syz.0.1197 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  175.570468][ T3957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  175.570477][ T3957] Call Trace:
[  175.570482][ T3957]  <TASK>
[  175.570488][ T3957]  __dump_stack+0x21/0x30
[  175.570511][ T3957]  dump_stack_lvl+0x140/0x1c0
[  175.570530][ T3957]  ? __cfi_dump_stack_lvl+0x10/0x10
[  175.570558][ T3957]  dump_stack+0x19/0x20
[  175.570576][ T3957]  should_fail_ex+0x3c2/0x510
[  175.570593][ T3957]  should_fail_alloc_page+0xec/0x110
[  175.570611][ T3957]  __alloc_pages_noprof+0x1c0/0x7e0
[  175.570631][ T3957]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  175.570651][ T3957]  ? __kmalloc_cache_noprof+0x23c/0x470
[  175.570666][ T3957]  ? kvm_create_lapic+0xb1/0x550
[  175.570684][ T3957]  ? __asan_memset+0x39/0x50
[  175.570698][ T3957]  get_zeroed_page_noprof+0x1f/0x50
[  175.570720][ T3957]  kvm_create_lapic+0x150/0x550
[  175.570738][ T3957]  kvm_arch_vcpu_create+0x1b9/0xb90
[  175.570759][ T3957]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  175.570780][ T3957]  ? _parse_integer+0x2e/0x40
[  175.570794][ T3957]  kvm_vm_ioctl+0x7bd/0xc40
[  175.570814][ T3957]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  175.570833][ T3957]  ? ioctl_has_perm+0x1bc/0x500
[  175.570847][ T3957]  ? __asan_memcpy+0x5a/0x80
[  175.570860][ T3957]  ? ioctl_has_perm+0x408/0x500
[  175.570873][ T3957]  ? has_cap_mac_admin+0xd0/0xd0
[  175.570886][ T3957]  ? proc_fail_nth_write+0x184/0x220
[  175.570907][ T3957]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  175.570927][ T3957]  ? selinux_file_ioctl+0x732/0x1480
[  175.570941][ T3957]  ? vfs_write+0xbcf/0xfd0
[  175.570954][ T3957]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  175.570968][ T3957]  ? __cfi_vfs_write+0x10/0x10
[  175.570982][ T3957]  ? __kasan_check_write+0x18/0x20
[  175.570995][ T3957]  ? mutex_unlock+0x90/0x240
[  175.571015][ T3957]  ? __cfi_mutex_unlock+0x10/0x10
[  175.571036][ T3957]  ? bpf_lsm_file_ioctl+0xd/0x20
[  175.571056][ T3957]  ? security_file_ioctl+0x3e/0x110
[  175.571077][ T3957]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  175.571095][ T3957]  __se_sys_ioctl+0x132/0x1b0
[  175.571112][ T3957]  __x64_sys_ioctl+0x7f/0xa0
[  175.571128][ T3957]  x64_sys_call+0x1878/0x2ee0
[  175.571141][ T3957]  do_syscall_64+0x57/0xf0
[  175.571157][ T3957]  ? clear_bhb_loop+0x50/0xa0
[  175.571175][ T3957]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  175.571193][ T3957] RIP: 0033:0x7f2b4f99e019
[  175.571204][ T3957] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  175.571216][ T3957] RSP: 002b:00007f2b50828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  175.571230][ T3957] RAX: ffffffffffffffda RBX: 00007f2b4fc25fa0 RCX: 00007f2b4f99e019
[  175.571242][ T3957] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  175.571250][ T3957] RBP: 00007f2b50828090 R08: 0000000000000000 R09: 0000000000000000
[  175.571259][ T3957] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  175.571276][ T3957] R13: 00007f2b4fc26038 R14: 00007f2b4fc25fa0 R15: 00007ffff53c0ad8
[  175.571288][ T3957]  </TASK>
[  175.571333][ T3957] malloc apic regs error for vcpu 2
[  175.883040][   T10] usb 5-1: string descriptor 0 read error: -22
[  175.923788][ T3961] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1199'.
[  176.087011][   T10] uclogic 0003:256C:006D.0021: failed retrieving string descriptor #200: -71
[  176.095889][   T10] uclogic 0003:256C:006D.0021: failed retrieving pen parameters: -71
[  176.104339][   T10] uclogic 0003:256C:006D.0021: failed probing pen v2 parameters: -71
[  176.112592][   T10] uclogic 0003:256C:006D.0021: failed probing parameters: -71
[  176.120257][   T10] uclogic 0003:256C:006D.0021: probe with driver uclogic failed with error -71
[  176.133058][   T10] usb 5-1: USB disconnect, device number 75
[  176.233863][ T3979] picdev_write: 2 callbacks suppressed
[  176.233875][ T3979] kvm: pic: non byte write
[  176.243946][ T3979] kvm: pic: non byte write
[  176.248475][ T3979] kvm: pic: non byte write
[  176.253201][ T3979] kvm: pic: non byte write
[  176.257710][ T3979] kvm: pic: non byte write
[  176.262341][ T3979] kvm: pic: level sensitive irq not supported
[  176.262440][ T3979] kvm: pic: non byte write
[  176.269595][  T497] usb 2-1: new high-speed USB device number 98 using dummy_hcd
[  176.273255][ T3979] kvm: pic: non byte write
[  176.284996][ T3979] kvm: pic: non byte write
[  176.289582][ T3979] kvm: pic: single mode not supported
[  176.289661][ T3979] kvm: pic: non byte write
[  176.429565][  T497] usb 2-1: Using ep0 maxpacket: 32
[  176.435812][  T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  176.446760][  T497] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  176.456565][  T497] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  176.465628][  T497] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  176.474629][  T497] usb 2-1: config 0 descriptor??
[  176.480892][  T497] hub 2-1:0.0: USB hub found
[  176.642440][ T3982] kvm: pic: single mode not supported
[  176.642451][ T3982] kvm: pic: level sensitive irq not supported
[  176.648225][ T3982] kvm: pic: single mode not supported
[  176.654352][ T3982] kvm: pic: level sensitive irq not supported
[  176.660026][ T3982] kvm: pic: single mode not supported
[  176.666393][ T3982] kvm: pic: level sensitive irq not supported
[  176.671896][ T3982] kvm: pic: non byte write
[  176.682716][ T3982] kvm: pic: single mode not supported
[  176.682729][ T3982] kvm: pic: level sensitive irq not supported
[  176.687999][  T497] hub 2-1:0.0: config failed, can't read hub descriptor (err -22)
[  176.841954][ T3990] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  176.851385][ T3990] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  176.906143][  T497] usbhid 2-1:0.0: can't add hid device: -71
[  176.912227][  T497] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[  176.949926][  T497] usb 2-1: USB disconnect, device number 98
[  177.109621][   T31] usb 5-1: new high-speed USB device number 76 using dummy_hcd
[  177.122358][ T3994] FAULT_INJECTION: forcing a failure.
[  177.122358][ T3994] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[  177.135643][ T3994] CPU: 1 UID: 0 PID: 3994 Comm: syz.2.1211 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  177.135673][ T3994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  177.135685][ T3994] Call Trace:
[  177.135693][ T3994]  <TASK>
[  177.135705][ T3994]  __dump_stack+0x21/0x30
[  177.135729][ T3994]  dump_stack_lvl+0x140/0x1c0
[  177.135748][ T3994]  ? __cfi_dump_stack_lvl+0x10/0x10
[  177.135768][ T3994]  ? text_poke_loc_init+0x7d0/0x7d0
[  177.135786][ T3994]  dump_stack+0x19/0x20
[  177.135805][ T3994]  should_fail_ex+0x3c2/0x510
[  177.135821][ T3994]  should_fail_alloc_page+0xec/0x110
[  177.135839][ T3994]  __alloc_pages_noprof+0x1c0/0x7e0
[  177.135860][ T3994]  ? mutex_unlock+0x90/0x240
[  177.135880][ T3994]  ? __cfi___alloc_pages_noprof+0x10/0x10
[  177.135901][ T3994]  ? cpus_read_unlock+0x68/0xa0
[  177.135915][ T3994]  ? static_key_slow_inc+0x25/0x30
[  177.135933][ T3994]  ? kvm_create_lapic+0x30b/0x550
[  177.135953][ T3994]  kvm_arch_vcpu_create+0x1e8/0xb90
[  177.135973][ T3994]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  177.135994][ T3994]  ? _parse_integer+0x2e/0x40
[  177.136014][ T3994]  kvm_vm_ioctl+0x7bd/0xc40
[  177.136033][ T3994]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  177.136052][ T3994]  ? ioctl_has_perm+0x1bc/0x500
[  177.136065][ T3994]  ? __asan_memcpy+0x5a/0x80
[  177.136079][ T3994]  ? ioctl_has_perm+0x408/0x500
[  177.136092][ T3994]  ? has_cap_mac_admin+0xd0/0xd0
[  177.136105][ T3994]  ? proc_fail_nth_write+0x184/0x220
[  177.136125][ T3994]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  177.136146][ T3994]  ? selinux_file_ioctl+0x732/0x1480
[  177.136159][ T3994]  ? vfs_write+0xbcf/0xfd0
[  177.136172][ T3994]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  177.136186][ T3994]  ? __cfi_vfs_write+0x10/0x10
[  177.136199][ T3994]  ? __kasan_check_write+0x18/0x20
[  177.136213][ T3994]  ? mutex_unlock+0x90/0x240
[  177.136231][ T3994]  ? __cfi_mutex_unlock+0x10/0x10
[  177.136251][ T3994]  ? bpf_lsm_file_ioctl+0xd/0x20
[  177.136268][ T3994]  ? security_file_ioctl+0x3e/0x110
[  177.136289][ T3994]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  177.136307][ T3994]  __se_sys_ioctl+0x132/0x1b0
[  177.136324][ T3994]  __x64_sys_ioctl+0x7f/0xa0
[  177.136340][ T3994]  x64_sys_call+0x1878/0x2ee0
[  177.136353][ T3994]  do_syscall_64+0x57/0xf0
[  177.136368][ T3994]  ? clear_bhb_loop+0x50/0xa0
[  177.136387][ T3994]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  177.136404][ T3994] RIP: 0033:0x7faa2579e019
[  177.136416][ T3994] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  177.136428][ T3994] RSP: 002b:00007faa26622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  177.136443][ T3994] RAX: ffffffffffffffda RBX: 00007faa25a25fa0 RCX: 00007faa2579e019
[  177.136454][ T3994] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  177.136462][ T3994] RBP: 00007faa26622090 R08: 0000000000000000 R09: 0000000000000000
[  177.136471][ T3994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  177.136480][ T3994] R13: 00007faa25a26038 R14: 00007faa25a25fa0 R15: 00007ffc13d6e168
[  177.136492][ T3994]  </TASK>
[  177.505664][ T4001] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  177.514167][ T4001] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  177.521180][   T31] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  177.530080][   T31] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  177.538758][   T31] usb 5-1: config 2 has no interface number 0
[  177.544993][   T31] usb 5-1: config 2 interface 36 has no altsetting 0
[  177.553322][   T31] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  177.562396][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  177.570424][   T31] usb 5-1: Product: syz
[  177.574584][   T31] usb 5-1: Manufacturer: syz
[  177.579166][   T31] usb 5-1: SerialNumber: syz
[  177.656349][ T4005] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1215'.
[  177.699939][ T4004] kvm: pic: single mode not supported
[  177.902385][   T31] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  177.915655][   T31] cdc_acm 5-1:2.36: skipping garbage
[  177.922217][   T31] usb 5-1: USB disconnect, device number 76
[  177.979562][  T312] usb 2-1: new high-speed USB device number 99 using dummy_hcd
[  178.054871][ T4023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.063446][ T4023] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.129559][  T312] usb 2-1: Using ep0 maxpacket: 8
[  178.135645][  T312] usb 2-1: config 0 interface 0 has no altsetting 0
[  178.142296][  T312] usb 2-1: New USB device found, idVendor=056a, idProduct=0057, bcdDevice= 0.00
[  178.151367][  T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  178.160038][  T312] usb 2-1: config 0 descriptor??
[  178.446678][ T4025] FAULT_INJECTION: forcing a failure.
[  178.446678][ T4025] name failslab, interval 1, probability 0, space 0, times 0
[  178.459417][ T4025] CPU: 1 UID: 0 PID: 4025 Comm: syz.4.1223 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  178.459451][ T4025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  178.459460][ T4025] Call Trace:
[  178.459465][ T4025]  <TASK>
[  178.459471][ T4025]  __dump_stack+0x21/0x30
[  178.459495][ T4025]  dump_stack_lvl+0x140/0x1c0
[  178.459531][ T4025]  ? __cfi_dump_stack_lvl+0x10/0x10
[  178.459559][ T4025]  ? __alloc_pages_noprof+0x35a/0x7e0
[  178.459585][ T4025]  dump_stack+0x19/0x20
[  178.459603][ T4025]  should_fail_ex+0x3c2/0x510
[  178.459619][ T4025]  should_failslab+0xac/0x100
[  178.459636][ T4025]  __kmalloc_cache_noprof+0x41/0x470
[  178.459651][ T4025]  ? static_key_slow_inc+0x25/0x30
[  178.459669][ T4025]  ? kvm_arch_vcpu_create+0x273/0xb90
[  178.459689][ T4025]  ? kvm_create_lapic+0x30b/0x550
[  178.459708][ T4025]  kvm_arch_vcpu_create+0x273/0xb90
[  178.459728][ T4025]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  178.459749][ T4025]  ? _parse_integer+0x2e/0x40
[  178.459763][ T4025]  kvm_vm_ioctl+0x7bd/0xc40
[  178.459782][ T4025]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  178.459801][ T4025]  ? ioctl_has_perm+0x1bc/0x500
[  178.459814][ T4025]  ? __asan_memcpy+0x5a/0x80
[  178.459828][ T4025]  ? ioctl_has_perm+0x408/0x500
[  178.459841][ T4025]  ? has_cap_mac_admin+0xd0/0xd0
[  178.459856][ T4025]  ? proc_fail_nth_write+0x184/0x220
[  178.459876][ T4025]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  178.459897][ T4025]  ? selinux_file_ioctl+0x732/0x1480
[  178.459911][ T4025]  ? vfs_write+0xbcf/0xfd0
[  178.459924][ T4025]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  178.459938][ T4025]  ? __cfi_vfs_write+0x10/0x10
[  178.459952][ T4025]  ? __kasan_check_write+0x18/0x20
[  178.459965][ T4025]  ? mutex_unlock+0x90/0x240
[  178.459985][ T4025]  ? __cfi_mutex_unlock+0x10/0x10
[  178.460005][ T4025]  ? bpf_lsm_file_ioctl+0xd/0x20
[  178.460023][ T4025]  ? security_file_ioctl+0x3e/0x110
[  178.460044][ T4025]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  178.460063][ T4025]  __se_sys_ioctl+0x132/0x1b0
[  178.460080][ T4025]  __x64_sys_ioctl+0x7f/0xa0
[  178.460096][ T4025]  x64_sys_call+0x1878/0x2ee0
[  178.460109][ T4025]  do_syscall_64+0x57/0xf0
[  178.460124][ T4025]  ? clear_bhb_loop+0x50/0xa0
[  178.460142][ T4025]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  178.460160][ T4025] RIP: 0033:0x7fbc6379e019
[  178.460171][ T4025] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  178.460183][ T4025] RSP: 002b:00007fbc646a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  178.460198][ T4025] RAX: ffffffffffffffda RBX: 00007fbc63a25fa0 RCX: 00007fbc6379e019
[  178.460209][ T4025] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  178.460217][ T4025] RBP: 00007fbc646a0090 R08: 0000000000000000 R09: 0000000000000000
[  178.460226][ T4025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  178.460235][ T4025] R13: 00007fbc63a26038 R14: 00007fbc63a25fa0 R15: 00007ffcf40ad428
[  178.460247][ T4025]  </TASK>
[  178.607274][ T4027] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.630341][  T312] wacom 0003:056A:0057.0022: unknown main item tag 0x2
[  178.633518][ T4027] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  178.645742][  T312] wacom 0003:056A:0057.0022: ignoring exceeding usage max
[  178.783533][  T312] wacom 0003:056A:0057.0022: hidraw0: USB HID v0.81 Device [HID 056a:0057] on usb-dummy_hcd.1-1/input0
[  178.820698][   T10] usb 2-1: USB disconnect, device number 99
[  178.840127][   T36] audit: type=1400 audit(1785531583.131:21858): avc:  denied  { map } for  pid=4031 comm="syz.0.1226" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[  178.887738][ T4036] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1228'.
[  178.906338][ T4038] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  178.914816][ T4038] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  179.059583][  T357] usb 5-1: new high-speed USB device number 77 using dummy_hcd
[  179.209575][  T357] usb 5-1: Using ep0 maxpacket: 32
[  179.215843][  T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  179.226806][  T357] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  179.236620][  T357] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[  179.245672][  T357] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  179.254182][  T357] usb 5-1: config 0 descriptor??
[  179.260417][  T357] hub 5-1:0.0: USB hub found
[  179.465949][  T357] hub 5-1:0.0: config failed, can't read hub descriptor (err -22)
[  179.569569][   T31] usb 2-1: new high-speed USB device number 100 using dummy_hcd
[  179.680149][  T357] usbhid 5-1:0.0: can't add hid device: -71
[  179.686160][  T357] usbhid 5-1:0.0: probe with driver usbhid failed with error -71
[  179.710052][  T357] usb 5-1: USB disconnect, device number 77
[  179.721996][   T31] usb 2-1: config 2 has an invalid interface number: 36 but max is 0
[  179.730279][   T31] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  179.739067][   T31] usb 2-1: config 2 has no interface number 0
[  179.745578][   T31] usb 2-1: config 2 interface 36 has no altsetting 0
[  179.754085][   T31] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  179.763425][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  179.771623][   T31] usb 2-1: Product: syz
[  179.775972][   T31] usb 2-1: Manufacturer: syz
[  179.782689][   T31] usb 2-1: SerialNumber: syz
[  180.104424][   T31] cdc_acm 2-1:2.36: More than one union descriptor, skipping ...
[  180.112582][   T31] cdc_acm 2-1:2.36: skipping garbage
[  180.119681][   T31] usb 2-1: USB disconnect, device number 100
[  180.209172][ T4055] FAULT_INJECTION: forcing a failure.
[  180.209172][ T4055] name failslab, interval 1, probability 0, space 0, times 0
[  180.221873][ T4055] CPU: 0 UID: 0 PID: 4055 Comm: syz.4.1235 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  180.221902][ T4055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  180.221914][ T4055] Call Trace:
[  180.221921][ T4055]  <TASK>
[  180.221929][ T4055]  __dump_stack+0x21/0x30
[  180.221960][ T4055]  dump_stack_lvl+0x140/0x1c0
[  180.221987][ T4055]  ? __cfi_dump_stack_lvl+0x10/0x10
[  180.222017][ T4055]  dump_stack+0x19/0x20
[  180.222043][ T4055]  should_fail_ex+0x3c2/0x510
[  180.222066][ T4055]  should_failslab+0xac/0x100
[  180.222092][ T4055]  __kmalloc_cache_noprof+0x41/0x470
[  180.222113][ T4055]  ? static_key_slow_inc+0x25/0x30
[  180.222139][ T4055]  ? kvm_arch_vcpu_create+0x2d4/0xb90
[  180.222169][ T4055]  kvm_arch_vcpu_create+0x2d4/0xb90
[  180.222198][ T4055]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  180.222229][ T4055]  ? _parse_integer+0x2e/0x40
[  180.222250][ T4055]  kvm_vm_ioctl+0x7bd/0xc40
[  180.222278][ T4055]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  180.222306][ T4055]  ? ioctl_has_perm+0x1bc/0x500
[  180.222326][ T4055]  ? __asan_memcpy+0x5a/0x80
[  180.222347][ T4055]  ? ioctl_has_perm+0x408/0x500
[  180.222366][ T4055]  ? has_cap_mac_admin+0xd0/0xd0
[  180.222386][ T4055]  ? proc_fail_nth_write+0x184/0x220
[  180.222416][ T4055]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  180.222446][ T4055]  ? selinux_file_ioctl+0x732/0x1480
[  180.222466][ T4055]  ? vfs_write+0xbcf/0xfd0
[  180.222487][ T4055]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  180.222506][ T4055]  ? __cfi_vfs_write+0x10/0x10
[  180.222527][ T4055]  ? __kasan_check_write+0x18/0x20
[  180.222545][ T4055]  ? mutex_unlock+0x90/0x240
[  180.222570][ T4055]  ? __cfi_mutex_unlock+0x10/0x10
[  180.222599][ T4055]  ? bpf_lsm_file_ioctl+0xd/0x20
[  180.222625][ T4055]  ? security_file_ioctl+0x3e/0x110
[  180.222655][ T4055]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  180.222684][ T4055]  __se_sys_ioctl+0x132/0x1b0
[  180.222708][ T4055]  __x64_sys_ioctl+0x7f/0xa0
[  180.222731][ T4055]  x64_sys_call+0x1878/0x2ee0
[  180.222750][ T4055]  do_syscall_64+0x57/0xf0
[  180.222781][ T4055]  ? clear_bhb_loop+0x50/0xa0
[  180.222808][ T4055]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  180.222834][ T4055] RIP: 0033:0x7fbc6379e019
[  180.222852][ T4055] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  180.222869][ T4055] RSP: 002b:00007fbc646a0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  180.222890][ T4055] RAX: ffffffffffffffda RBX: 00007fbc63a25fa0 RCX: 00007fbc6379e019
[  180.222906][ T4055] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  180.222918][ T4055] RBP: 00007fbc646a0090 R08: 0000000000000000 R09: 0000000000000000
[  180.222932][ T4055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  180.222945][ T4055] R13: 00007fbc63a26038 R14: 00007fbc63a25fa0 R15: 00007ffcf40ad428
[  180.222962][ T4055]  </TASK>
[  180.523891][   T36] audit: type=1400 audit(1785531584.811:21859): avc:  denied  { map } for  pid=4056 comm="syz.0.1236" path="socket:[44005]" dev="sockfs" ino=44005 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1
[  180.563025][ T4063] netlink: 37 bytes leftover after parsing attributes in process `syz.0.1238'.
[  180.582418][ T4065] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1240'.
[  180.603811][ T4067] tmpfs: Too small a size for current use
[  180.626997][ T4075] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.635637][ T4075] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.660972][ T4077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  180.669846][ T4077] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  180.849796][   T31] usb 5-1: new high-speed USB device number 78 using dummy_hcd
[  181.014534][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  181.025594][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  181.035585][   T31] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  181.044656][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  181.055829][   T31] usb 5-1: config 0 descriptor??
[  181.082678][ T4092] FAULT_INJECTION: forcing a failure.
[  181.082678][ T4092] name failslab, interval 1, probability 0, space 0, times 0
[  181.095374][ T4092] CPU: 0 UID: 0 PID: 4092 Comm: syz.1.1250 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  181.095402][ T4092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  181.095415][ T4092] Call Trace:
[  181.095421][ T4092]  <TASK>
[  181.095429][ T4092]  __dump_stack+0x21/0x30
[  181.095459][ T4092]  dump_stack_lvl+0x140/0x1c0
[  181.095485][ T4092]  ? __cfi_dump_stack_lvl+0x10/0x10
[  181.095514][ T4092]  dump_stack+0x19/0x20
[  181.095539][ T4092]  should_fail_ex+0x3c2/0x510
[  181.095565][ T4092]  should_failslab+0xac/0x100
[  181.095582][ T4092]  kmem_cache_alloc_noprof+0x42/0x410
[  181.095610][ T4092]  ? static_key_slow_inc+0x25/0x30
[  181.095635][ T4092]  ? kvm_arch_vcpu_create+0x3b3/0xb90
[  181.095665][ T4092]  kvm_arch_vcpu_create+0x3b3/0xb90
[  181.095693][ T4092]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  181.095721][ T4092]  ? _parse_integer+0x2e/0x40
[  181.095744][ T4092]  kvm_vm_ioctl+0x7bd/0xc40
[  181.095782][ T4092]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  181.095809][ T4092]  ? ioctl_has_perm+0x1bc/0x500
[  181.095827][ T4092]  ? __asan_memcpy+0x5a/0x80
[  181.095846][ T4092]  ? ioctl_has_perm+0x408/0x500
[  181.095865][ T4092]  ? has_cap_mac_admin+0xd0/0xd0
[  181.095884][ T4092]  ? proc_fail_nth_write+0x184/0x220
[  181.095913][ T4092]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  181.095943][ T4092]  ? selinux_file_ioctl+0x732/0x1480
[  181.095962][ T4092]  ? vfs_write+0xbcf/0xfd0
[  181.095983][ T4092]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  181.096003][ T4092]  ? __cfi_vfs_write+0x10/0x10
[  181.096023][ T4092]  ? __kasan_check_write+0x18/0x20
[  181.096042][ T4092]  ? mutex_unlock+0x90/0x240
[  181.096067][ T4092]  ? __cfi_mutex_unlock+0x10/0x10
[  181.096097][ T4092]  ? bpf_lsm_file_ioctl+0xd/0x20
[  181.096121][ T4092]  ? security_file_ioctl+0x3e/0x110
[  181.096154][ T4092]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  181.096174][ T4092]  __se_sys_ioctl+0x132/0x1b0
[  181.096191][ T4092]  __x64_sys_ioctl+0x7f/0xa0
[  181.096207][ T4092]  x64_sys_call+0x1878/0x2ee0
[  181.096242][ T4092]  do_syscall_64+0x57/0xf0
[  181.096263][ T4092]  ? clear_bhb_loop+0x50/0xa0
[  181.096289][ T4092]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  181.096313][ T4092] RIP: 0033:0x7fe6c1f9e019
[  181.096324][ T4092] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  181.096337][ T4092] RSP: 002b:00007fe6c2e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  181.096352][ T4092] RAX: ffffffffffffffda RBX: 00007fe6c2225fa0 RCX: 00007fe6c1f9e019
[  181.096374][ T4092] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  181.096388][ T4092] RBP: 00007fe6c2e96090 R08: 0000000000000000 R09: 0000000000000000
[  181.096401][ T4092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  181.096413][ T4092] R13: 00007fe6c2226038 R14: 00007fe6c2225fa0 R15: 00007ffdb515d578
[  181.096430][ T4092]  </TASK>
[  181.096443][ T4092] kvm: failed to allocate vcpu's emulator
[  181.264633][ T4096] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1252'.
[  181.498134][ T4104] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  181.510836][ T4104] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  181.669607][  T312] usb 2-1: new high-speed USB device number 101 using dummy_hcd
[  181.706978][   T31] usb 5-1: string descriptor 0 read error: -22
[  181.845031][  T312] usb 2-1: config 2 has an invalid interface number: 36 but max is 0
[  181.855180][  T312] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  181.868332][  T312] usb 2-1: config 2 has no interface number 0
[  181.874607][  T312] usb 2-1: config 2 interface 36 has no altsetting 0
[  181.883107][  T312] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  181.892899][  T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  181.901645][  T312] usb 2-1: Product: syz
[  181.906960][  T312] usb 2-1: Manufacturer: syz
[  181.927989][   T31] uclogic 0003:256C:006D.0023: failed retrieving string descriptor #200: -71
[  181.944058][   T31] uclogic 0003:256C:006D.0023: failed retrieving pen parameters: -71
[  181.952913][  T312] usb 2-1: SerialNumber: syz
[  181.958198][   T31] uclogic 0003:256C:006D.0023: failed probing pen v2 parameters: -71
[  181.966713][   T31] uclogic 0003:256C:006D.0023: failed probing parameters: -71
[  181.974885][   T31] uclogic 0003:256C:006D.0023: probe with driver uclogic failed with error -71
[  181.988667][   T31] usb 5-1: USB disconnect, device number 78
[  182.189330][ T4117] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1261'.
[  182.234967][ T4122] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1262'.
[  182.268301][ T4125] FAULT_INJECTION: forcing a failure.
[  182.268301][ T4125] name failslab, interval 1, probability 0, space 0, times 0
[  182.281068][ T4125] CPU: 0 UID: 0 PID: 4125 Comm: syz.2.1263 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  182.281091][ T4125] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  182.281118][ T4125] Call Trace:
[  182.281126][ T4125]  <TASK>
[  182.281135][ T4125]  __dump_stack+0x21/0x30
[  182.281167][ T4125]  dump_stack_lvl+0x140/0x1c0
[  182.281198][ T4125]  ? __cfi_dump_stack_lvl+0x10/0x10
[  182.281219][ T4125]  dump_stack+0x19/0x20
[  182.281238][ T4125]  should_fail_ex+0x3c2/0x510
[  182.281274][ T4125]  should_failslab+0xac/0x100
[  182.281299][ T4125]  kmem_cache_alloc_noprof+0x42/0x410
[  182.281320][ T4125]  ? static_key_slow_inc+0x25/0x30
[  182.281348][ T4125]  ? kvm_arch_vcpu_create+0x3b3/0xb90
[  182.281371][ T4125]  kvm_arch_vcpu_create+0x3b3/0xb90
[  182.281392][ T4125]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  182.281441][ T4125]  ? _parse_integer+0x2e/0x40
[  182.281462][ T4125]  kvm_vm_ioctl+0x7bd/0xc40
[  182.281494][ T4125]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  182.281515][ T4125]  ? ioctl_has_perm+0x1bc/0x500
[  182.281528][ T4125]  ? __asan_memcpy+0x5a/0x80
[  182.281557][ T4125]  ? ioctl_has_perm+0x408/0x500
[  182.281578][ T4125]  ? has_cap_mac_admin+0xd0/0xd0
[  182.281599][ T4125]  ? proc_fail_nth_write+0x184/0x220
[  182.281633][ T4125]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  182.281656][ T4125]  ? selinux_file_ioctl+0x732/0x1480
[  182.281670][ T4125]  ? vfs_write+0xbcf/0xfd0
[  182.281684][ T4125]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  182.281716][ T4125]  ? __cfi_vfs_write+0x10/0x10
[  182.281737][ T4125]  ? __kasan_check_write+0x18/0x20
[  182.281757][ T4125]  ? mutex_unlock+0x90/0x240
[  182.281789][ T4125]  ? __cfi_mutex_unlock+0x10/0x10
[  182.281811][ T4125]  ? bpf_lsm_file_ioctl+0xd/0x20
[  182.281852][ T4125]  ? security_file_ioctl+0x3e/0x110
[  182.281882][ T4125]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  182.281927][ T4125]  __se_sys_ioctl+0x132/0x1b0
[  182.281951][ T4125]  __x64_sys_ioctl+0x7f/0xa0
[  182.281968][ T4125]  x64_sys_call+0x1878/0x2ee0
[  182.281981][ T4125]  do_syscall_64+0x57/0xf0
[  182.282015][ T4125]  ? clear_bhb_loop+0x50/0xa0
[  182.282048][ T4125]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  182.282079][ T4125] RIP: 0033:0x7faa2579e019
[  182.282091][ T4125] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  182.282104][ T4125] RSP: 002b:00007faa26622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  182.282120][ T4125] RAX: ffffffffffffffda RBX: 00007faa25a25fa0 RCX: 00007faa2579e019
[  182.282132][ T4125] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  182.282157][ T4125] RBP: 00007faa26622090 R08: 0000000000000000 R09: 0000000000000000
[  182.282171][ T4125] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  182.282184][ T4125] R13: 00007faa25a26038 R14: 00007faa25a25fa0 R15: 00007ffc13d6e168
[  182.282202][ T4125]  </TASK>
[  182.282210][ T4125] kvm: failed to allocate vcpu's emulator
[  182.582491][  T312] cdc_acm 2-1:2.36: More than one union descriptor, skipping ...
[  182.590342][  T312] cdc_acm 2-1:2.36: skipping garbage
[  182.596381][  T312] usb 2-1: USB disconnect, device number 101
[  182.667493][ T4139] netlink: 'syz.0.1269': attribute type 16 has an invalid length.
[  182.722350][ T4143] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1271'.
[  182.735101][ T4144] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.744695][ T4144] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  182.755606][ T4146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  182.764133][ T4146] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  183.113761][ T4150] FAULT_INJECTION: forcing a failure.
[  183.113761][ T4150] name failslab, interval 1, probability 0, space 0, times 0
[  183.126418][ T4150] CPU: 1 UID: 0 PID: 4150 Comm: syz.1.1274 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  183.126442][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  183.126452][ T4150] Call Trace:
[  183.126457][ T4150]  <TASK>
[  183.126462][ T4150]  __dump_stack+0x21/0x30
[  183.126485][ T4150]  dump_stack_lvl+0x140/0x1c0
[  183.126505][ T4150]  ? __cfi_dump_stack_lvl+0x10/0x10
[  183.126525][ T4150]  ? kernel_text_address+0xa9/0xe0
[  183.126544][ T4150]  ? kasan_save_alloc_info+0x3a/0x50
[  183.126566][ T4150]  dump_stack+0x19/0x20
[  183.126586][ T4150]  should_fail_ex+0x3c2/0x510
[  183.126602][ T4150]  should_failslab+0xac/0x100
[  183.126619][ T4150]  __kmalloc_node_noprof+0x69/0x500
[  183.126634][ T4150]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  183.126656][ T4150]  __vmalloc_node_range_noprof+0x529/0x1300
[  183.126676][ T4150]  ? kasan_save_track+0x4f/0x80
[  183.126692][ T4150]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  183.126706][ T4150]  ? __se_sys_ioctl+0x132/0x1b0
[  183.126725][ T4150]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  183.126748][ T4150]  ? fpu_alloc_guest_fpstate+0x41/0x490
[  183.126765][ T4150]  vzalloc_noprof+0x103/0x1d0
[  183.126785][ T4150]  ? fpu_alloc_guest_fpstate+0x41/0x490
[  183.126801][ T4150]  ? __cfi_vzalloc_noprof+0x10/0x10
[  183.126821][ T4150]  ? kasan_save_alloc_info+0x3a/0x50
[  183.126862][ T4150]  ? __kasan_slab_alloc+0x73/0x90
[  183.126882][ T4150]  fpu_alloc_guest_fpstate+0x41/0x490
[  183.126903][ T4150]  kvm_arch_vcpu_create+0x449/0xb90
[  183.126927][ T4150]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  183.126952][ T4150]  ? _parse_integer+0x2e/0x40
[  183.126969][ T4150]  kvm_vm_ioctl+0x7bd/0xc40
[  183.126991][ T4150]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  183.127014][ T4150]  ? ioctl_has_perm+0x1bc/0x500
[  183.127049][ T4150]  ? __asan_memcpy+0x5a/0x80
[  183.127080][ T4150]  ? ioctl_has_perm+0x408/0x500
[  183.127104][ T4150]  ? has_cap_mac_admin+0xd0/0xd0
[  183.127130][ T4150]  ? proc_fail_nth_write+0x184/0x220
[  183.127154][ T4150]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  183.127178][ T4150]  ? selinux_file_ioctl+0x732/0x1480
[  183.127194][ T4150]  ? vfs_write+0xbcf/0xfd0
[  183.127210][ T4150]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  183.127226][ T4150]  ? __cfi_vfs_write+0x10/0x10
[  183.127242][ T4150]  ? __kasan_check_write+0x18/0x20
[  183.127257][ T4150]  ? mutex_unlock+0x90/0x240
[  183.127280][ T4150]  ? __cfi_mutex_unlock+0x10/0x10
[  183.127304][ T4150]  ? bpf_lsm_file_ioctl+0xd/0x20
[  183.127325][ T4150]  ? security_file_ioctl+0x3e/0x110
[  183.127350][ T4150]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  183.127372][ T4150]  __se_sys_ioctl+0x132/0x1b0
[  183.127392][ T4150]  __x64_sys_ioctl+0x7f/0xa0
[  183.127411][ T4150]  x64_sys_call+0x1878/0x2ee0
[  183.127426][ T4150]  do_syscall_64+0x57/0xf0
[  183.127444][ T4150]  ? clear_bhb_loop+0x50/0xa0
[  183.127466][ T4150]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  183.127487][ T4150] RIP: 0033:0x7fe6c1f9e019
[  183.127501][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.127515][ T4150] RSP: 002b:00007fe6c2e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.127532][ T4150] RAX: ffffffffffffffda RBX: 00007fe6c2225fa0 RCX: 00007fe6c1f9e019
[  183.127545][ T4150] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  183.127555][ T4150] RBP: 00007fe6c2e96090 R08: 0000000000000000 R09: 0000000000000000
[  183.127566][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  183.127577][ T4150] R13: 00007fe6c2226038 R14: 00007fe6c2225fa0 R15: 00007ffdb515d578
[  183.127592][ T4150]  </TASK>
[  183.127600][ T4150] syz.1.1274: vmalloc error: size 4096, failed to allocated page array size 8, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  183.435420][ T4156] syz.2.1275: attempt to access beyond end of device
[  183.435420][ T4156] loop2: rw=0, sector=0, nr_sectors = 1 limit=0
[  183.437818][ T4150] ,cpuset=
[  183.445980][ T4156] exFAT-fs (loop2): unable to read boot sector
[  183.453659][ T4150] syz1,mems_allowed=0
[  183.518275][ T4156] exFAT-fs (loop2): failed to read boot sector
[  183.526897][ T4156] exFAT-fs (loop2): failed to recognize exfat type
[  183.528951][ T4150] CPU: 0 UID: 0 PID: 4150 Comm: syz.1.1274 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  183.529032][ T4150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  183.529081][ T4150] Call Trace:
[  183.529101][ T4150]  <TASK>
[  183.529123][ T4150]  __dump_stack+0x21/0x30
[  183.529209][ T4150]  dump_stack_lvl+0x140/0x1c0
[  183.529289][ T4150]  ? __cfi_dump_stack_lvl+0x10/0x10
[  183.529371][ T4150]  dump_stack+0x19/0x20
[  183.529444][ T4150]  warn_alloc+0x1e7/0x2c0
[  183.529534][ T4150]  ? __kasan_check_write+0x18/0x20
[  183.529597][ T4150]  ? __cfi_warn_alloc+0x10/0x10
[  183.529678][ T4150]  ? __kasan_kmalloc+0x28/0xb0
[  183.529749][ T4150]  ? __kmalloc_node_noprof+0x252/0x500
[  183.529837][ T4150]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  183.529948][ T4150]  __vmalloc_node_range_noprof+0x65f/0x1300
[  183.530032][ T4150]  ? kasan_save_track+0x4f/0x80
[  183.530102][ T4150]  ? kmem_cache_alloc_noprof+0x1bf/0x410
[  183.530173][ T4150]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  183.530276][ T4150]  ? fpu_alloc_guest_fpstate+0x41/0x490
[  183.530348][ T4150]  vzalloc_noprof+0x103/0x1d0
[  183.530413][ T4150]  ? fpu_alloc_guest_fpstate+0x41/0x490
[  183.530466][ T4150]  ? __cfi_vzalloc_noprof+0x10/0x10
[  183.530531][ T4150]  ? kasan_save_alloc_info+0x3a/0x50
[  183.530602][ T4150]  ? __kasan_slab_alloc+0x73/0x90
[  183.530663][ T4150]  fpu_alloc_guest_fpstate+0x41/0x490
[  183.530730][ T4150]  kvm_arch_vcpu_create+0x449/0xb90
[  183.530835][ T4150]  kvm_vm_ioctl_create_vcpu+0x3a7/0xab0
[  183.530935][ T4150]  ? _parse_integer+0x2e/0x40
[  183.530997][ T4150]  kvm_vm_ioctl+0x7bd/0xc40
[  183.531086][ T4150]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  183.531176][ T4150]  ? ioctl_has_perm+0x1bc/0x500
[  183.531249][ T4150]  ? __asan_memcpy+0x5a/0x80
[  183.531323][ T4150]  ? ioctl_has_perm+0x408/0x500
[  183.531382][ T4150]  ? has_cap_mac_admin+0xd0/0xd0
[  183.531445][ T4150]  ? proc_fail_nth_write+0x184/0x220
[  183.531527][ T4150]  ? __cfi_proc_fail_nth_write+0x10/0x10
[  183.531628][ T4150]  ? selinux_file_ioctl+0x732/0x1480
[  183.531682][ T4150]  ? vfs_write+0xbcf/0xfd0
[  183.531745][ T4150]  ? __cfi_selinux_file_ioctl+0x10/0x10
[  183.531806][ T4150]  ? __cfi_vfs_write+0x10/0x10
[  183.531867][ T4150]  ? __kasan_check_write+0x18/0x20
[  183.531929][ T4150]  ? mutex_unlock+0x90/0x240
[  183.532015][ T4150]  ? __cfi_mutex_unlock+0x10/0x10
[  183.532106][ T4150]  ? bpf_lsm_file_ioctl+0xd/0x20
[  183.532171][ T4150]  ? security_file_ioctl+0x3e/0x110
[  183.532249][ T4150]  ? __cfi_kvm_vm_ioctl+0x10/0x10
[  183.532321][ T4150]  __se_sys_ioctl+0x132/0x1b0
[  183.532380][ T4150]  __x64_sys_ioctl+0x7f/0xa0
[  183.532444][ T4150]  x64_sys_call+0x1878/0x2ee0
[  183.532490][ T4150]  do_syscall_64+0x57/0xf0
[  183.532567][ T4150]  ? clear_bhb_loop+0x50/0xa0
[  183.532647][ T4150]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  183.532709][ T4150] RIP: 0033:0x7fe6c1f9e019
[  183.532754][ T4150] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  183.532792][ T4150] RSP: 002b:00007fe6c2e96028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  183.532845][ T4150] RAX: ffffffffffffffda RBX: 00007fe6c2225fa0 RCX: 00007fe6c1f9e019
[  183.532881][ T4150] RDX: 0000000000000002 RSI: 000000000000ae41 RDI: 0000000000000004
[  183.532916][ T4150] RBP: 00007fe6c2e96090 R08: 0000000000000000 R09: 0000000000000000
[  183.532945][ T4150] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[  183.532979][ T4150] R13: 00007fe6c2226038 R14: 00007fe6c2225fa0 R15: 00007ffdb515d578
[  183.533006][ T4150]  </TASK>
[  183.540543][ T4150] Mem-Info:
[  183.882404][ T4150] active_anon:8035 inactive_anon:188 isolated_anon:0
[  183.882404][ T4150]  active_file:7929 inactive_file:12301 isolated_file:0
[  183.882404][ T4150]  unevictable:589 dirty:35 writeback:0
[  183.882404][ T4150]  slab_reclaimable:6913 slab_unreclaimable:69982
[  183.882404][ T4150]  mapped:25044 shmem:167 pagetables:1692
[  183.882404][ T4150]  sec_pagetables:0 bounce:0
[  183.882404][ T4150]  kernel_misc_reclaimable:0
[  183.882404][ T4150]  free:1522368 free_pcp:2231 free_cma:0
[  183.927930][ T4150] Node 0 active_anon:32140kB inactive_anon:752kB active_file:31716kB inactive_file:49204kB unevictable:2356kB isolated(anon):0kB isolated(file):0kB mapped:100176kB dirty:140kB writeback:0kB shmem:668kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7564kB pagetables:6768kB sec_pagetables:0kB all_unreclaimable? no
[  183.960535][ T4150] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5236kB free_cma:0kB
[  183.990613][ T4150] lowmem_reserve[]: 0 3921 3921
[  183.995576][ T4150] Normal free:3130640kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:32140kB inactive_anon:752kB active_file:31716kB inactive_file:49204kB unevictable:2356kB writepending:140kB present:5242880kB managed:4015864kB mlocked:2380kB bounce:0kB free_pcp:4712kB local_pcp:2240kB free_cma:0kB
[  184.027615][ T4150] lowmem_reserve[]: 0 0 0
[  184.032030][ T4150] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  184.047659][ T4150] Normal: 182*4kB (UME) 463*8kB (UME) 696*16kB (UM) 250*32kB (UME) 631*64kB (UME) 240*128kB (UME) 71*256kB (UME) 34*512kB (UME) 20*1024kB (UME) 13*2048kB (UME) 721*4096kB (UM) = 3130576kB
[  184.074462][ T4150] 20825 total pagecache pages
[  184.079288][ T4150] 192 pages in swap cache
[  184.083941][ T4150] Free swap  = 56064kB
[  184.088082][ T4150] Total swap = 124996kB
[  184.094862][ T4150] 2097051 pages RAM
[  184.098724][ T4150] 0 pages HighMem/MovableOnly
[  184.103456][ T4150] 352235 pages reserved
[  184.109359][ T4150] 0 pages cma reserved
[  184.117491][ T4168] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent
[  184.120095][ T4150] Memory allocations:
[  184.129938][ T4150]          0 B        0 init/main.c:1477 func:do_initcalls
[  184.137147][ T4150]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  184.145498][ T4150]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  184.154190][ T4150]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  184.163574][ T4150]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  184.171643][ T4150]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  184.180419][ T4150]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  184.188360][ T4150]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  184.196387][ T4150]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  184.204526][ T4150]          0 B        0 init/initramfs.c:101 func:find_link
[  184.211984][ T4150] kvm: failed to allocate vcpu's fpu
[  184.242575][ T4168] picdev_write: 5 callbacks suppressed
[  184.242586][ T4168] kvm: pic: non byte write
[  184.304283][ T4177] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1285'.
[  184.399584][   T31] usb 5-1: new high-speed USB device number 79 using dummy_hcd
[  184.519567][  T312] usb 2-1: new high-speed USB device number 102 using dummy_hcd
[  184.550640][   T31] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  184.558773][   T31] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  184.567509][   T31] usb 5-1: config 2 has no interface number 0
[  184.573639][   T31] usb 5-1: config 2 interface 36 has no altsetting 0
[  184.581866][   T31] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  184.591005][   T31] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  184.598995][   T31] usb 5-1: Product: syz
[  184.603269][   T31] usb 5-1: Manufacturer: syz
[  184.607874][   T31] usb 5-1: SerialNumber: syz
[  184.680606][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  184.691572][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  184.701382][  T312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  184.710472][  T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  184.719164][  T312] usb 2-1: config 0 descriptor??
[  184.857112][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.865716][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.876761][ T4192] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  184.885980][ T4192] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  184.944012][   T31] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  184.951848][   T31] cdc_acm 5-1:2.36: skipping garbage
[  184.958138][   T31] usb 5-1: USB disconnect, device number 79
[  185.296947][ T4198] pic_ioport_write: 3 callbacks suppressed
[  185.296961][ T4198] kvm: pic: single mode not supported
[  185.326881][  T312] usb 2-1: string descriptor 0 read error: -22
[  185.341283][   T36] audit: type=1400 audit(1785531589.631:21860): avc:  denied  { cmd } for  pid=4200 comm="syz.2.1293" path="socket:[47336]" dev="sockfs" ino=47336 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[  185.391600][ T4201] veth1: entered allmulticast mode
[  185.399079][ T4200] veth1: left allmulticast mode
[  185.422158][ T4205] fuse: Unknown parameter '000000000000000000030x0000000000000004'
[  185.439864][   T36] audit: type=1400 audit(1785531589.721:21861): avc:  denied  { create } for  pid=4204 comm="syz.2.1295" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
[  185.522696][ T4214] Invalid argument reading file caps for ./file0
[  185.529843][  T312] uclogic 0003:256C:006D.0024: failed retrieving string descriptor #200: -71
[  185.549846][  T312] uclogic 0003:256C:006D.0024: failed retrieving pen parameters: -71
[  185.567201][  T312] uclogic 0003:256C:006D.0024: failed probing pen v2 parameters: -71
[  185.568091][ T4221] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1299'.
[  185.576432][  T312] uclogic 0003:256C:006D.0024: failed probing parameters: -71
[  185.593222][  T312] uclogic 0003:256C:006D.0024: probe with driver uclogic failed with error -71
[  185.610943][  T312] usb 2-1: USB disconnect, device number 102
[  186.032239][ T4284] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.040881][ T4284] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.109582][  T312] usb 5-1: new high-speed USB device number 80 using dummy_hcd
[  186.165555][ T4303] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1311'.
[  186.260680][  T312] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  186.268938][  T312] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  186.277718][  T312] usb 5-1: config 2 has no interface number 0
[  186.283893][  T312] usb 5-1: config 2 interface 36 has no altsetting 0
[  186.291871][  T312] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  186.300972][  T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  186.308986][  T312] usb 5-1: Product: syz
[  186.313167][  T312] usb 5-1: Manufacturer: syz
[  186.317771][  T312] usb 5-1: SerialNumber: syz
[  186.564224][ T4310] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  186.573388][ T4310] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  186.644045][  T312] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  186.651838][  T312] cdc_acm 5-1:2.36: skipping garbage
[  186.658043][  T312] usb 5-1: USB disconnect, device number 80
[  186.860045][ T4317] syzkaller1: entered promiscuous mode
[  186.865570][ T4317] syzkaller1: entered allmulticast mode
[  187.025851][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.034551][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.043107][ T4329] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.051710][ T4329] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.249107][ T4344] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1324'.
[  187.519668][  T312] usb 2-1: new full-speed USB device number 103 using dummy_hcd
[  187.570189][ T4357] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  187.578806][ T4357] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  187.609562][   T31] usb 5-1: new high-speed USB device number 81 using dummy_hcd
[  187.692010][  T312] usb 2-1: New USB device found, idVendor=0d49, idProduct=7010, bcdDevice= c.90
[  187.703792][  T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  187.723150][  T312] usb 2-1: Product: syz
[  187.727358][  T312] usb 2-1: Manufacturer: syz
[  187.732509][  T312] usb 2-1: SerialNumber: syz
[  187.739050][ T4364] FAULT_INJECTION: forcing a failure.
[  187.739050][ T4364] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  187.749896][  T312] usb 2-1: config 0 descriptor??
[  187.752658][ T4364] CPU: 0 UID: 0 PID: 4364 Comm: syz.0.1332 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  187.752741][ T4364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  187.752780][ T4364] Call Trace:
[  187.752800][ T4364]  <TASK>
[  187.752827][ T4364]  __dump_stack+0x21/0x30
[  187.752917][ T4364]  dump_stack_lvl+0x140/0x1c0
[  187.753003][ T4364]  ? __cfi_dump_stack_lvl+0x10/0x10
[  187.753093][ T4364]  ? check_stack_object+0x10f/0x150
[  187.753155][ T4364]  dump_stack+0x19/0x20
[  187.753234][ T4364]  should_fail_ex+0x3c2/0x510
[  187.753306][ T4364]  should_fail+0xf/0x20
[  187.753361][ T4364]  should_fail_usercopy+0x1e/0x30
[  187.753425][ T4364]  _copy_from_user+0x20/0xa0
[  187.753491][ T4364]  copy_clone_args_from_user+0x20c/0x740
[  187.753580][ T4364]  ? __delayed_free_task+0x40/0x40
[  187.753685][ T4364]  ? proc_fail_nth_write+0x184/0x220
[  187.753762][ T4364]  ? bpf_lsm_file_permission+0xd/0x20
[  187.753836][ T4364]  __se_sys_clone3+0x143/0x360
[  187.753914][ T4364]  ? __x64_sys_clone3+0x80/0x80
[  187.754010][ T4364]  ? __kasan_check_write+0x18/0x20
[  187.754062][ T4364]  ? fput+0x1a4/0x230
[  187.754143][ T4364]  ? __kasan_check_read+0x15/0x20
[  187.754202][ T4364]  __x64_sys_clone3+0x5f/0x80
[  187.754284][ T4364]  x64_sys_call+0x28fc/0x2ee0
[  187.754336][ T4364]  do_syscall_64+0x57/0xf0
[  187.754406][ T4364]  ? clear_bhb_loop+0x50/0xa0
[  187.754486][ T4364]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  187.754559][ T4364] RIP: 0033:0x7f2b4f99e019
[  187.754610][ T4364] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  187.754661][ T4364] RSP: 002b:00007f2b50827ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  187.754728][ T4364] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f2b4f99e019
[  187.754764][ T4364] RDX: 00007f2b50827f10 RSI: 0000000000000058 RDI: 00007f2b50827f10
[  187.754806][ T4364] RBP: 00007f2b50828090 R08: 0000000000000000 R09: 0000000000000058
[  187.754846][ T4364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  187.754886][ T4364] R13: 00007f2b4fc26038 R14: 00007f2b4fc25fa0 R15: 00007ffff53c0ad8
[  187.754938][ T4364]  </TASK>
[  187.973917][  T312] ums-onetouch 2-1:0.0: USB Mass Storage device detected
[  187.990747][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  188.001633][   T31] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  188.011607][   T31] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  188.020727][   T31] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  188.029252][   T31] usb 5-1: config 0 descriptor??
[  188.132505][ T4378] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.141049][ T4378] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.160331][ T4383] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1338'.
[  188.182191][ T4385] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  188.191697][ T4385] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  188.240302][  T357] usb 2-1: USB disconnect, device number 103
[  188.604714][   T36] audit: type=1400 audit(1785531592.891:21862): avc:  denied  { create } for  pid=4386 comm="syz.2.1340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1
[  188.636417][   T31] usb 5-1: string descriptor 0 read error: -22
[  188.687261][ T4396] FAULT_INJECTION: forcing a failure.
[  188.687261][ T4396] name failslab, interval 1, probability 0, space 0, times 0
[  188.699928][ T4396] CPU: 1 UID: 0 PID: 4396 Comm: syz.2.1343 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  188.699961][ T4396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  188.699971][ T4396] Call Trace:
[  188.699976][ T4396]  <TASK>
[  188.699982][ T4396]  __dump_stack+0x21/0x30
[  188.700006][ T4396]  dump_stack_lvl+0x140/0x1c0
[  188.700027][ T4396]  ? __cfi_dump_stack_lvl+0x10/0x10
[  188.700051][ T4396]  dump_stack+0x19/0x20
[  188.700070][ T4396]  should_fail_ex+0x3c2/0x510
[  188.700088][ T4396]  should_failslab+0xac/0x100
[  188.700106][ T4396]  kmem_cache_alloc_node_noprof+0x45/0x420
[  188.700123][ T4396]  ? dup_task_struct+0xc1/0xd80
[  188.700141][ T4396]  dup_task_struct+0xc1/0xd80
[  188.700159][ T4396]  ? __kasan_check_write+0x18/0x20
[  188.700173][ T4396]  ? _raw_spin_lock_irq+0x93/0x120
[  188.700192][ T4396]  ? copy_process+0x3350/0x3350
[  188.700210][ T4396]  ? __kasan_check_write+0x18/0x20
[  188.700226][ T4396]  copy_process+0x57c/0x3350
[  188.700244][ T4396]  ? check_stack_object+0x10f/0x150
[  188.700259][ T4396]  ? __check_object_size+0xdc/0x870
[  188.700274][ T4396]  ? kstrtouint+0x78/0xf0
[  188.700289][ T4396]  ? __cfi_copy_process+0x10/0x10
[  188.700308][ T4396]  ? copy_clone_args_from_user+0x63c/0x740
[  188.700329][ T4396]  kernel_clone+0x233/0x810
[  188.700348][ T4396]  ? __delayed_free_task+0x40/0x40
[  188.700368][ T4396]  ? proc_fail_nth_write+0x184/0x220
[  188.700390][ T4396]  ? __cfi_kernel_clone+0x10/0x10
[  188.700410][ T4396]  __se_sys_clone3+0x33e/0x360
[  188.700429][ T4396]  ? __x64_sys_clone3+0x80/0x80
[  188.700450][ T4396]  ? __kasan_check_write+0x18/0x20
[  188.700464][ T4396]  ? fput+0x1a4/0x230
[  188.700485][ T4396]  ? __kasan_check_read+0x15/0x20
[  188.700499][ T4396]  __x64_sys_clone3+0x5f/0x80
[  188.700518][ T4396]  x64_sys_call+0x28fc/0x2ee0
[  188.700531][ T4396]  do_syscall_64+0x57/0xf0
[  188.700548][ T4396]  ? clear_bhb_loop+0x50/0xa0
[  188.700568][ T4396]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  188.700587][ T4396] RIP: 0033:0x7faa2579e019
[  188.700600][ T4396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  188.700613][ T4396] RSP: 002b:00007faa26621ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  188.700629][ T4396] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007faa2579e019
[  188.700640][ T4396] RDX: 00007faa26621f10 RSI: 0000000000000058 RDI: 00007faa26621f10
[  188.700650][ T4396] RBP: 00007faa26622090 R08: 0000000000000000 R09: 0000000000000058
[  188.700660][ T4396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  188.700670][ T4396] R13: 00007faa25a26038 R14: 00007faa25a25fa0 R15: 00007ffc13d6e168
[  188.700687][ T4396]  </TASK>
[  188.976047][   T31] uclogic 0003:256C:006D.0025: failed retrieving string descriptor #200: -71
[  188.984881][   T31] uclogic 0003:256C:006D.0025: failed retrieving pen parameters: -71
[  188.988796][ T4401] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1344'.
[  189.004373][   T31] uclogic 0003:256C:006D.0025: failed probing pen v2 parameters: -71
[  189.012525][   T31] uclogic 0003:256C:006D.0025: failed probing parameters: -71
[  189.020194][   T31] uclogic 0003:256C:006D.0025: probe with driver uclogic failed with error -71
[  189.032060][   T31] usb 5-1: USB disconnect, device number 81
[  189.051312][ T4404] bridge0: port 3(veth0_vlan) entered blocking state
[  189.058236][ T4404] bridge0: port 3(veth0_vlan) entered disabled state
[  189.065256][ T4404] veth0_vlan: entered allmulticast mode
[  189.071869][ T4404] bridge0: port 3(veth0_vlan) entered blocking state
[  189.078597][ T4404] bridge0: port 3(veth0_vlan) entered forwarding state
[  189.093488][   T36] audit: type=1400 audit(1785531593.381:21863): avc:  denied  { getopt } for  pid=4402 comm="syz.2.1346" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  189.171022][ T4410] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.180329][ T4410] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.250498][ T4412] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1350'.
[  189.283482][ T4408] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  189.295559][ T4408] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  189.307298][   T36] audit: type=1400 audit(1785531593.591:21864): avc:  denied  { map } for  pid=4414 comm="syz.1.1351" path="/dev/kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1
[  189.503987][ T4426] FAULT_INJECTION: forcing a failure.
[  189.503987][ T4426] name failslab, interval 1, probability 0, space 0, times 0
[  189.516665][ T4426] CPU: 1 UID: 0 PID: 4426 Comm: syz.4.1355 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  189.516713][ T4426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  189.516728][ T4426] Call Trace:
[  189.516736][ T4426]  <TASK>
[  189.516750][ T4426]  __dump_stack+0x21/0x30
[  189.516778][ T4426]  dump_stack_lvl+0x140/0x1c0
[  189.516815][ T4426]  ? __cfi_dump_stack_lvl+0x10/0x10
[  189.516840][ T4426]  dump_stack+0x19/0x20
[  189.516861][ T4426]  should_fail_ex+0x3c2/0x510
[  189.516881][ T4426]  should_failslab+0xac/0x100
[  189.516901][ T4426]  __kmalloc_cache_node_noprof+0x46/0x430
[  189.516920][ T4426]  ? __get_vm_area_node+0x150/0x390
[  189.516943][ T4426]  ? kasan_save_alloc_info+0x3a/0x50
[  189.516967][ T4426]  ? __kasan_slab_alloc+0x73/0x90
[  189.516986][ T4426]  ? kmem_cache_alloc_node_noprof+0x1ca/0x420
[  189.517004][ T4426]  __get_vm_area_node+0x150/0x390
[  189.517028][ T4426]  __vmalloc_node_range_noprof+0x340/0x1300
[  189.517052][ T4426]  ? copy_process+0x57c/0x3350
[  189.517079][ T4426]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  189.517104][ T4426]  ? kasan_save_alloc_info+0x3a/0x50
[  189.517129][ T4426]  ? __kasan_slab_alloc+0x73/0x90
[  189.517149][ T4426]  ? arch_dup_task_struct+0x5b/0xe0
[  189.517173][ T4426]  ? __asan_memcpy+0x5a/0x80
[  189.517190][ T4426]  dup_task_struct+0x5d6/0xd80
[  189.517210][ T4426]  ? copy_process+0x57c/0x3350
[  189.517230][ T4426]  ? _raw_spin_lock_irq+0x93/0x120
[  189.517249][ T4426]  ? copy_process+0x3350/0x3350
[  189.517269][ T4426]  ? __kasan_check_write+0x18/0x20
[  189.517286][ T4426]  copy_process+0x57c/0x3350
[  189.517306][ T4426]  ? check_stack_object+0x10f/0x150
[  189.517324][ T4426]  ? __check_object_size+0xdc/0x870
[  189.517340][ T4426]  ? kstrtouint+0x78/0xf0
[  189.517358][ T4426]  ? __cfi_copy_process+0x10/0x10
[  189.517378][ T4426]  ? copy_clone_args_from_user+0x63c/0x740
[  189.517404][ T4426]  kernel_clone+0x233/0x810
[  189.517424][ T4426]  ? __delayed_free_task+0x40/0x40
[  189.517447][ T4426]  ? proc_fail_nth_write+0x184/0x220
[  189.517471][ T4426]  ? __cfi_kernel_clone+0x10/0x10
[  189.517493][ T4426]  __se_sys_clone3+0x33e/0x360
[  189.517515][ T4426]  ? __x64_sys_clone3+0x80/0x80
[  189.517539][ T4426]  ? __kasan_check_write+0x18/0x20
[  189.517555][ T4426]  ? fput+0x1a4/0x230
[  189.517586][ T4426]  ? __kasan_check_read+0x15/0x20
[  189.517602][ T4426]  __x64_sys_clone3+0x5f/0x80
[  189.517624][ T4426]  x64_sys_call+0x28fc/0x2ee0
[  189.517639][ T4426]  do_syscall_64+0x57/0xf0
[  189.517657][ T4426]  ? clear_bhb_loop+0x50/0xa0
[  189.517679][ T4426]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  189.517700][ T4426] RIP: 0033:0x7fbc6379e019
[  189.517714][ T4426] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  189.517728][ T4426] RSP: 002b:00007fbc6469fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  189.517746][ T4426] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbc6379e019
[  189.517758][ T4426] RDX: 00007fbc6469ff10 RSI: 0000000000000058 RDI: 00007fbc6469ff10
[  189.517769][ T4426] RBP: 00007fbc646a0090 R08: 0000000000000000 R09: 0000000000000058
[  189.517780][ T4426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  189.517790][ T4426] R13: 00007fbc63a26038 R14: 00007fbc63a25fa0 R15: 00007ffcf40ad428
[  189.517804][ T4426]  </TASK>
[  189.937966][ T4435] kvm: pic: single mode not supported
[  189.937988][ T4435] pic_ioport_write: 6 callbacks suppressed
[  189.938006][ T4435] kvm: pic: level sensitive irq not supported
[  189.949573][ T4435] kvm: pic: level sensitive irq not supported
[  189.972474][   T31] usb 2-1: new high-speed USB device number 104 using dummy_hcd
[  189.997564][   T36] audit: type=1400 audit(1785531594.281:21865): avc:  denied  { setattr } for  pid=4437 comm="syz.4.1360" name="001" dev="devtmpfs" ino=117 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  190.020778][   T36] audit: type=1400 audit(1785531594.281:21866): avc:  denied  { accept } for  pid=4437 comm="syz.4.1360" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1
[  190.130648][ T4447] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1362'.
[  190.150201][   T31] usb 2-1: device descriptor read/64, error -71
[  190.153014][ T4449] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.165039][ T4449] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  190.229599][  T386] usb 5-1: new low-speed USB device number 82 using dummy_hcd
[  190.380760][  T386] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  190.390967][  T386] usb 5-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[  190.399698][   T31] usb 2-1: device descriptor read/64, error -71
[  190.404080][  T386] usb 5-1: config 1 interface 0 has no altsetting 0
[  190.419074][  T386] usb 5-1: string descriptor 0 read error: -22
[  190.425894][  T386] usb 5-1: New USB device found, idVendor=04b8, idProduct=0202, bcdDevice= 0.40
[  190.434960][  T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  190.644454][  T312] usb 5-1: USB disconnect, device number 82
[  190.652263][   T31] usb 2-1: new high-speed USB device number 105 using dummy_hcd
[  190.685991][   T36] audit: type=1400 audit(1785531594.971:21867): avc:  denied  { create } for  pid=4450 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  190.707189][   T36] audit: type=1400 audit(1785531594.971:21868): avc:  denied  { create } for  pid=4450 comm="syz.0.1364" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_scsitransport_socket permissive=1
[  190.775131][ T4454] kvm: pic: single mode not supported
[  190.789574][   T31] usb 2-1: device descriptor read/64, error -71
[  190.841172][ T4459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  190.849847][ T4459] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.039606][   T31] usb 2-1: device descriptor read/64, error -71
[  191.149681][   T31] usb usb2-port1: attempt power cycle
[  191.162223][ T4465] FAULT_INJECTION: forcing a failure.
[  191.162223][ T4465] name failslab, interval 1, probability 0, space 0, times 0
[  191.174908][ T4465] CPU: 1 UID: 0 PID: 4465 Comm: syz.4.1369 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  191.174943][ T4465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  191.174953][ T4465] Call Trace:
[  191.174959][ T4465]  <TASK>
[  191.174965][ T4465]  __dump_stack+0x21/0x30
[  191.174990][ T4465]  dump_stack_lvl+0x140/0x1c0
[  191.175012][ T4465]  ? __cfi_dump_stack_lvl+0x10/0x10
[  191.175034][ T4465]  dump_stack+0x19/0x20
[  191.175053][ T4465]  should_fail_ex+0x3c2/0x510
[  191.175070][ T4465]  ? security_prepare_creds+0x66/0x260
[  191.175085][ T4465]  should_failslab+0xac/0x100
[  191.175103][ T4465]  __kmalloc_noprof+0x69/0x510
[  191.175118][ T4465]  ? kasan_save_alloc_info+0x3a/0x50
[  191.175139][ T4465]  ? security_prepare_creds+0x66/0x260
[  191.175154][ T4465]  ? __kasan_slab_alloc+0x73/0x90
[  191.175172][ T4465]  security_prepare_creds+0x66/0x260
[  191.175186][ T4465]  prepare_creds+0x46d/0x6b0
[  191.175203][ T4465]  copy_creds+0xe4/0x5d0
[  191.175219][ T4465]  copy_process+0x8ee/0x3350
[  191.175238][ T4465]  ? check_stack_object+0x10f/0x150
[  191.175254][ T4465]  ? __check_object_size+0xdc/0x870
[  191.175268][ T4465]  ? kstrtouint+0x78/0xf0
[  191.175284][ T4465]  ? __cfi_copy_process+0x10/0x10
[  191.175303][ T4465]  ? copy_clone_args_from_user+0x63c/0x740
[  191.175348][ T4465]  kernel_clone+0x233/0x810
[  191.175375][ T4465]  ? __delayed_free_task+0x40/0x40
[  191.175395][ T4465]  ? proc_fail_nth_write+0x184/0x220
[  191.175417][ T4465]  ? __cfi_kernel_clone+0x10/0x10
[  191.175436][ T4465]  __se_sys_clone3+0x33e/0x360
[  191.175456][ T4465]  ? __x64_sys_clone3+0x80/0x80
[  191.175477][ T4465]  ? __kasan_check_write+0x18/0x20
[  191.175514][ T4465]  ? fput+0x1a4/0x230
[  191.175536][ T4465]  ? __kasan_check_read+0x15/0x20
[  191.175552][ T4465]  __x64_sys_clone3+0x5f/0x80
[  191.175572][ T4465]  x64_sys_call+0x28fc/0x2ee0
[  191.175586][ T4465]  do_syscall_64+0x57/0xf0
[  191.175616][ T4465]  ? clear_bhb_loop+0x50/0xa0
[  191.175636][ T4465]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  191.175654][ T4465] RIP: 0033:0x7fbc6379e019
[  191.175667][ T4465] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  191.175679][ T4465] RSP: 002b:00007fbc6469fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  191.175696][ T4465] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbc6379e019
[  191.175710][ T4465] RDX: 00007fbc6469ff10 RSI: 0000000000000058 RDI: 00007fbc6469ff10
[  191.175720][ T4465] RBP: 00007fbc646a0090 R08: 0000000000000000 R09: 0000000000000058
[  191.175730][ T4465] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  191.175739][ T4465] R13: 00007fbc63a26038 R14: 00007fbc63a25fa0 R15: 00007ffcf40ad428
[  191.175752][ T4465]  </TASK>
[  191.494699][ T4467] kvm: pic: single mode not supported
[  191.494714][ T4467] kvm: pic: level sensitive irq not supported
[  191.500319][ T4467] kvm: pic: level sensitive irq not supported
[  191.719569][   T31] usb 2-1: new high-speed USB device number 106 using dummy_hcd
[  191.741021][   T36] audit: type=1400 audit(1785531596.031:21869): avc:  denied  { ioctl } for  pid=4475 comm="syz.2.1373" path="socket:[50363]" dev="sockfs" ino=50363 ioctlcmd=0x9365 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1
[  191.767666][   T31] usb 2-1: device descriptor read/8, error -71
[  191.809556][  T386] usb 5-1: new high-speed USB device number 83 using dummy_hcd
[  191.871424][ T4483] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1375'.
[  191.910495][   T31] usb 2-1: device descriptor read/8, error -71
[  191.924370][ T4487] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  191.932924][ T4487] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  191.941603][   T36] audit: type=1400 audit(1785531596.231:21870): avc:  denied  { accept } for  pid=4486 comm="syz.2.1377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[  191.980651][  T386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  191.991690][  T386] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  192.001480][  T386] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  192.010582][  T386] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  192.019136][  T386] usb 5-1: config 0 descriptor??
[  192.159592][   T31] usb 2-1: new high-speed USB device number 107 using dummy_hcd
[  192.180655][   T31] usb 2-1: device descriptor read/8, error -71
[  192.310596][   T31] usb 2-1: device descriptor read/8, error -71
[  192.419674][   T31] usb usb2-port1: unable to enumerate USB device
[  192.485555][ T4496] kvm: pic: single mode not supported
[  192.485576][ T4496] kvm: pic: level sensitive irq not supported
[  192.491118][ T4496] kvm: pic: level sensitive irq not supported
[  192.626868][  T386] usb 5-1: string descriptor 0 read error: -22
[  192.828400][  T386] uclogic 0003:256C:006D.0026: failed retrieving string descriptor #200: -71
[  192.837333][  T357] usb 2-1: new high-speed USB device number 108 using dummy_hcd
[  192.845053][  T386] uclogic 0003:256C:006D.0026: failed retrieving pen parameters: -71
[  192.853282][  T386] uclogic 0003:256C:006D.0026: failed probing pen v2 parameters: -71
[  192.861447][  T386] uclogic 0003:256C:006D.0026: failed probing parameters: -71
[  192.869099][  T386] uclogic 0003:256C:006D.0026: probe with driver uclogic failed with error -71
[  192.879221][  T386] usb 5-1: USB disconnect, device number 83
[  193.010702][  T357] usb 2-1: config 2 has an invalid interface number: 36 but max is 0
[  193.018846][  T357] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  193.027593][  T357] usb 2-1: config 2 has no interface number 0
[  193.033723][  T357] usb 2-1: config 2 interface 36 has no altsetting 0
[  193.041969][  T357] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  193.051058][  T357] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  193.059058][  T357] usb 2-1: Product: syz
[  193.063267][  T357] usb 2-1: Manufacturer: syz
[  193.067883][  T357] usb 2-1: SerialNumber: syz
[  193.352667][ T4509] FAULT_INJECTION: forcing a failure.
[  193.352667][ T4509] name failslab, interval 1, probability 0, space 0, times 0
[  193.365473][ T4509] CPU: 1 UID: 0 PID: 4509 Comm: syz.4.1383 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  193.365505][ T4509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  193.365519][ T4509] Call Trace:
[  193.365527][ T4509]  <TASK>
[  193.365535][ T4509]  __dump_stack+0x21/0x30
[  193.365570][ T4509]  dump_stack_lvl+0x140/0x1c0
[  193.365600][ T4509]  ? __cfi_dump_stack_lvl+0x10/0x10
[  193.365631][ T4509]  dump_stack+0x19/0x20
[  193.365659][ T4509]  should_fail_ex+0x3c2/0x510
[  193.365685][ T4509]  should_failslab+0xac/0x100
[  193.365711][ T4509]  kmem_cache_alloc_noprof+0x42/0x410
[  193.365734][ T4509]  ? dup_fd+0x63/0x9c0
[  193.365756][ T4509]  ? __cfi_avc_has_perm+0x10/0x10
[  193.365782][ T4509]  dup_fd+0x63/0x9c0
[  193.365805][ T4509]  ? __kasan_check_write+0x18/0x20
[  193.365827][ T4509]  ? selinux_task_alloc+0x91/0xc0
[  193.365849][ T4509]  copy_files+0xb7/0x130
[  193.365876][ T4509]  copy_process+0x11f4/0x3350
[  193.365906][ T4509]  ? __cfi_copy_process+0x10/0x10
[  193.365933][ T4509]  ? copy_clone_args_from_user+0x63c/0x740
[  193.365967][ T4509]  kernel_clone+0x233/0x810
[  193.365995][ T4509]  ? __delayed_free_task+0x40/0x40
[  193.366024][ T4509]  ? proc_fail_nth_write+0x184/0x220
[  193.366056][ T4509]  ? __cfi_kernel_clone+0x10/0x10
[  193.366085][ T4509]  __se_sys_clone3+0x33e/0x360
[  193.366114][ T4509]  ? __x64_sys_clone3+0x80/0x80
[  193.366145][ T4509]  ? __kasan_check_write+0x18/0x20
[  193.366166][ T4509]  ? fput+0x1a4/0x230
[  193.366195][ T4509]  ? __kasan_check_read+0x15/0x20
[  193.366216][ T4509]  __x64_sys_clone3+0x5f/0x80
[  193.366245][ T4509]  x64_sys_call+0x28fc/0x2ee0
[  193.366265][ T4509]  do_syscall_64+0x57/0xf0
[  193.366289][ T4509]  ? clear_bhb_loop+0x50/0xa0
[  193.366318][ T4509]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  193.366346][ T4509] RIP: 0033:0x7fbc6379e019
[  193.366389][ T4509] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  193.366408][ T4509] RSP: 002b:00007fbc6469fef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  193.366431][ T4509] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fbc6379e019
[  193.366447][ T4509] RDX: 00007fbc6469ff10 RSI: 0000000000000058 RDI: 00007fbc6469ff10
[  193.366462][ T4509] RBP: 00007fbc646a0090 R08: 0000000000000000 R09: 0000000000000058
[  193.366477][ T4509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  193.366490][ T4509] R13: 00007fbc63a26038 R14: 00007fbc63a25fa0 R15: 00007ffcf40ad428
[  193.366512][ T4509]  </TASK>
[  193.645967][ T4515] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1386'.
[  193.670968][  T357] cdc_acm 2-1:2.36: More than one union descriptor, skipping ...
[  193.678761][  T357] cdc_acm 2-1:2.36: skipping garbage
[  193.684962][  T357] usb 2-1: USB disconnect, device number 108
[  193.919657][  T312] usb 5-1: new high-speed USB device number 84 using dummy_hcd
[  194.059584][  T312] usb 5-1: device descriptor read/64, error -71
[  194.074582][ T4525] kvm: pic: level sensitive irq not supported
[  194.142887][ T4531] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  194.157548][ T4531] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  194.204475][   T36] audit: type=1400 audit(1785531598.491:21871): avc:  denied  { write } for  pid=4532 comm="syz.1.1393" path="socket:[49759]" dev="sockfs" ino=49759 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  194.228086][   T36] audit: type=1400 audit(1785531598.491:21872): avc:  denied  { read } for  pid=4532 comm="syz.1.1393" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
[  194.246222][ T4535] FAULT_INJECTION: forcing a failure.
[  194.246222][ T4535] name failslab, interval 1, probability 0, space 0, times 0
[  194.260216][ T4535] CPU: 0 UID: 0 PID: 4535 Comm: syz.1.1394 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  194.260247][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  194.260256][ T4535] Call Trace:
[  194.260261][ T4535]  <TASK>
[  194.260267][ T4535]  __dump_stack+0x21/0x30
[  194.260292][ T4535]  dump_stack_lvl+0x140/0x1c0
[  194.260311][ T4535]  ? __cfi_dump_stack_lvl+0x10/0x10
[  194.260331][ T4535]  ? kasan_save_alloc_info+0x3a/0x50
[  194.260354][ T4535]  dump_stack+0x19/0x20
[  194.260372][ T4535]  should_fail_ex+0x3c2/0x510
[  194.260388][ T4535]  should_failslab+0xac/0x100
[  194.260405][ T4535]  __kmalloc_node_noprof+0x69/0x500
[  194.260419][ T4535]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  194.260442][ T4535]  __vmalloc_node_range_noprof+0x529/0x1300
[  194.260466][ T4535]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  194.260488][ T4535]  ? kasan_save_alloc_info+0x3a/0x50
[  194.260508][ T4535]  ? __kasan_slab_alloc+0x73/0x90
[  194.260525][ T4535]  ? arch_dup_task_struct+0x5b/0xe0
[  194.260546][ T4535]  ? __asan_memcpy+0x5a/0x80
[  194.260559][ T4535]  dup_task_struct+0x5d6/0xd80
[  194.260577][ T4535]  ? copy_process+0x57c/0x3350
[  194.260594][ T4535]  ? _raw_spin_lock_irq+0x93/0x120
[  194.260610][ T4535]  ? copy_process+0x3350/0x3350
[  194.260627][ T4535]  ? __kasan_check_write+0x18/0x20
[  194.260641][ T4535]  copy_process+0x57c/0x3350
[  194.260658][ T4535]  ? check_stack_object+0x10f/0x150
[  194.260673][ T4535]  ? __check_object_size+0xdc/0x870
[  194.260691][ T4535]  ? kstrtouint+0x78/0xf0
[  194.260706][ T4535]  ? __cfi_copy_process+0x10/0x10
[  194.260723][ T4535]  ? copy_clone_args_from_user+0x63c/0x740
[  194.260744][ T4535]  kernel_clone+0x233/0x810
[  194.260761][ T4535]  ? __delayed_free_task+0x40/0x40
[  194.260779][ T4535]  ? proc_fail_nth_write+0x184/0x220
[  194.260815][ T4535]  ? __cfi_kernel_clone+0x10/0x10
[  194.260842][ T4535]  __se_sys_clone3+0x33e/0x360
[  194.260870][ T4535]  ? __x64_sys_clone3+0x80/0x80
[  194.260890][ T4535]  ? __kasan_check_write+0x18/0x20
[  194.260903][ T4535]  ? fput+0x1a4/0x230
[  194.260923][ T4535]  ? __kasan_check_read+0x15/0x20
[  194.260936][ T4535]  __x64_sys_clone3+0x5f/0x80
[  194.260953][ T4535]  x64_sys_call+0x28fc/0x2ee0
[  194.260966][ T4535]  do_syscall_64+0x57/0xf0
[  194.260981][ T4535]  ? clear_bhb_loop+0x50/0xa0
[  194.261000][ T4535]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.261017][ T4535] RIP: 0033:0x7fe6c1f9e019
[  194.261030][ T4535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.261042][ T4535] RSP: 002b:00007fe6c2e95ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  194.261057][ T4535] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe6c1f9e019
[  194.261068][ T4535] RDX: 00007fe6c2e95f10 RSI: 0000000000000058 RDI: 00007fe6c2e95f10
[  194.261077][ T4535] RBP: 00007fe6c2e96090 R08: 0000000000000000 R09: 0000000000000058
[  194.261087][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.261096][ T4535] R13: 00007fe6c2226038 R14: 00007fe6c2225fa0 R15: 00007ffdb515d578
[  194.261108][ T4535]  </TASK>
[  194.261114][ T4535] warn_alloc: 1 callbacks suppressed
[  194.261122][ T4535] syz.1.1394: vmalloc error: size 32768, failed to allocated page array size 64, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null)
[  194.309623][  T312] usb 5-1: device descriptor read/64, error -71
[  194.312738][ T4535] ,cpuset=
[  194.579616][  T312] usb 5-1: new high-speed USB device number 85 using dummy_hcd
[  194.584849][ T4535] syz1,mems_allowed=0
[  194.605282][ T4535] CPU: 0 UID: 0 PID: 4535 Comm: syz.1.1394 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  194.605303][ T4535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  194.605312][ T4535] Call Trace:
[  194.605318][ T4535]  <TASK>
[  194.605324][ T4535]  __dump_stack+0x21/0x30
[  194.605349][ T4535]  dump_stack_lvl+0x140/0x1c0
[  194.605369][ T4535]  ? __cfi_dump_stack_lvl+0x10/0x10
[  194.605391][ T4535]  dump_stack+0x19/0x20
[  194.605410][ T4535]  warn_alloc+0x1e7/0x2c0
[  194.605431][ T4535]  ? __kasan_check_write+0x18/0x20
[  194.605447][ T4535]  ? __cfi_warn_alloc+0x10/0x10
[  194.605467][ T4535]  ? __kasan_kmalloc+0x28/0xb0
[  194.605485][ T4535]  ? __kmalloc_node_noprof+0x252/0x500
[  194.605501][ T4535]  ? __vmalloc_node_range_noprof+0x529/0x1300
[  194.605524][ T4535]  __vmalloc_node_range_noprof+0x65f/0x1300
[  194.605549][ T4535]  ? __cfi___vmalloc_node_range_noprof+0x10/0x10
[  194.605572][ T4535]  ? kasan_save_alloc_info+0x3a/0x50
[  194.605594][ T4535]  ? __kasan_slab_alloc+0x73/0x90
[  194.605611][ T4535]  ? arch_dup_task_struct+0x5b/0xe0
[  194.605652][ T4535]  ? __asan_memcpy+0x5a/0x80
[  194.605674][ T4535]  dup_task_struct+0x5d6/0xd80
[  194.605716][ T4535]  ? copy_process+0x57c/0x3350
[  194.605734][ T4535]  ? _raw_spin_lock_irq+0x93/0x120
[  194.605751][ T4535]  ? copy_process+0x3350/0x3350
[  194.605769][ T4535]  ? __kasan_check_write+0x18/0x20
[  194.605784][ T4535]  copy_process+0x57c/0x3350
[  194.605802][ T4535]  ? check_stack_object+0x10f/0x150
[  194.605818][ T4535]  ? __check_object_size+0xdc/0x870
[  194.605844][ T4535]  ? kstrtouint+0x78/0xf0
[  194.605859][ T4535]  ? __cfi_copy_process+0x10/0x10
[  194.605876][ T4535]  ? copy_clone_args_from_user+0x63c/0x740
[  194.605897][ T4535]  kernel_clone+0x233/0x810
[  194.605914][ T4535]  ? __delayed_free_task+0x40/0x40
[  194.605933][ T4535]  ? proc_fail_nth_write+0x184/0x220
[  194.605954][ T4535]  ? __cfi_kernel_clone+0x10/0x10
[  194.605973][ T4535]  __se_sys_clone3+0x33e/0x360
[  194.605991][ T4535]  ? __x64_sys_clone3+0x80/0x80
[  194.606011][ T4535]  ? __kasan_check_write+0x18/0x20
[  194.606024][ T4535]  ? fput+0x1a4/0x230
[  194.606044][ T4535]  ? __kasan_check_read+0x15/0x20
[  194.606057][ T4535]  __x64_sys_clone3+0x5f/0x80
[  194.606075][ T4535]  x64_sys_call+0x28fc/0x2ee0
[  194.606088][ T4535]  do_syscall_64+0x57/0xf0
[  194.606120][ T4535]  ? clear_bhb_loop+0x50/0xa0
[  194.606141][ T4535]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  194.606159][ T4535] RIP: 0033:0x7fe6c1f9e019
[  194.606172][ T4535] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  194.606187][ T4535] RSP: 002b:00007fe6c2e95ef8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3
[  194.606203][ T4535] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe6c1f9e019
[  194.606214][ T4535] RDX: 00007fe6c2e95f10 RSI: 0000000000000058 RDI: 00007fe6c2e95f10
[  194.606224][ T4535] RBP: 00007fe6c2e96090 R08: 0000000000000000 R09: 0000000000000058
[  194.606234][ T4535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  194.606243][ T4535] R13: 00007fe6c2226038 R14: 00007fe6c2225fa0 R15: 00007ffdb515d578
[  194.606257][ T4535]  </TASK>
[  194.606263][ T4535] Mem-Info:
[  194.719754][  T312] usb 5-1: device descriptor read/64, error -71
[  194.726555][ T4535] active_anon:8601 inactive_anon:188 isolated_anon:0
[  194.726555][ T4535]  active_file:8003 inactive_file:12548 isolated_file:0
[  194.726555][ T4535]  unevictable:0 dirty:231 writeback:0
[  194.726555][ T4535]  slab_reclaimable:7358 slab_unreclaimable:69774
[  194.726555][ T4535]  mapped:25138 shmem:173 pagetables:1980
[  194.726555][ T4535]  sec_pagetables:3 bounce:0
[  194.726555][ T4535]  kernel_misc_reclaimable:0
[  194.726555][ T4535]  free:1519447 free_pcp:4058 free_cma:0
[  194.771989][   T36] audit: type=1400 audit(1785531599.061:21873): avc:  denied  { shutdown } for  pid=4539 comm="syz.0.1396" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  194.775085][ T4535] Node 0 active_anon:34504kB inactive_anon:752kB active_file:32012kB inactive_file:50192kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100552kB dirty:924kB writeback:0kB shmem:692kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:7864kB pagetables:8020kB sec_pagetables:12kB all_unreclaimable? no
[  194.785062][   T36] audit: type=1400 audit(1785531599.071:21874): avc:  denied  { ioctl } for  pid=4539 comm="syz.0.1396" path="socket:[50747]" dev="sockfs" ino=50747 ioctlcmd=0x9431 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  194.785538][ T4535] DMA32 free:2958164kB boost:0kB min:19080kB low:23848kB high:28616kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2963400kB mlocked:0kB bounce:0kB free_pcp:5236kB local_pcp:5236kB free_cma:0kB
[  194.833153][ T4542] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1397'.
[  194.839150][ T4535] lowmem_reserve[]:
[  195.029614][  T312] usb 5-1: device descriptor read/64, error -71
[  195.049384][ T4535]  0 3921 3921
[  195.100486][ T4535] Normal free:3118548kB boost:0kB min:25972kB low:32464kB high:38956kB reserved_highatomic:0KB free_highatomic:0KB active_anon:34384kB inactive_anon:752kB active_file:32012kB inactive_file:50192kB unevictable:0kB writepending:924kB present:5242880kB managed:4015864kB mlocked:0kB bounce:0kB free_pcp:11596kB local_pcp:9348kB free_cma:0kB
[  195.135560][ T4535] lowmem_reserve[]: 0 0 0
[  195.144078][ T4535] DMA32: 5*4kB (M) 4*8kB (M) 4*16kB (M) 5*32kB (M) 3*64kB (M) 5*128kB (M) 5*256kB (M) 5*512kB (M) 4*1024kB (UM) 4*2048kB (M) 718*4096kB (M) = 2958164kB
[  195.160413][ T4535] Normal: 290*4kB (UM) 484*8kB (ME) 688*16kB (UME) 254*32kB (UME) 578*64kB (UME) 233*128kB (UME) 65*256kB (UME) 36*512kB (UME) 22*1024kB (UME) 13*2048kB (UME) 721*4096kB (UM) = 3128424kB
[  195.179072][ T4535] 20906 total pagecache pages
[  195.184823][ T4535] 191 pages in swap cache
[  195.189424][  T312] usb usb5-port1: attempt power cycle
[  195.194890][ T4535] Free swap  = 56064kB
[  195.198983][ T4535] Total swap = 124996kB
[  195.203467][ T4535] 2097051 pages RAM
[  195.207330][ T4535] 0 pages HighMem/MovableOnly
[  195.212816][ T4535] 352235 pages reserved
[  195.217048][ T4535] 0 pages cma reserved
[  195.223484][ T4535] Memory allocations:
[  195.227533][ T4535]          0 B        0 init/main.c:1477 func:do_initcalls
[  195.234930][ T4535]          0 B        0 init/do_mounts.c:186 func:mount_root_generic
[  195.243206][ T4535]          0 B        0 init/do_mounts.c:158 func:do_mount_root
[  195.250991][ T4535]          0 B        0 init/do_mounts.c:352 func:mount_nodev_root
[  195.255192][ T4552] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.261640][ T4535]          0 B        0 init/do_mounts_rd.c:241 func:rd_load_image
[  195.269211][ T4552] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.276206][ T4535]          0 B        0 init/do_mounts_rd.c:72 func:identify_ramdisk_image
[  195.295001][ T4535]          0 B        0 init/initramfs.c:507 func:unpack_to_rootfs
[  195.303082][ T4535]          0 B        0 init/initramfs.c:508 func:unpack_to_rootfs
[  195.319376][ T4535]          0 B        0 init/initramfs.c:509 func:unpack_to_rootfs
[  195.327992][ T4535]          0 B        0 init/initramfs.c:101 func:find_link
[  195.329340][   T36] audit: type=1400 audit(1785531599.611:21875): avc:  denied  { read } for  pid=4551 comm="syz.2.1401" dev="sockfs" ino=49790 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[  195.363654][ T4553] kvm: pic: level sensitive irq not supported
[  195.410491][ T4558] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.425256][ T4558] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.559571][  T312] usb 5-1: new high-speed USB device number 86 using dummy_hcd
[  195.580560][  T312] usb 5-1: device descriptor read/8, error -71
[  195.599575][   T31] usb 2-1: new high-speed USB device number 109 using dummy_hcd
[  195.710669][  T312] usb 5-1: device descriptor read/8, error -71
[  195.750710][   T31] usb 2-1: config 2 has an invalid interface number: 36 but max is 0
[  195.758808][   T31] usb 2-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  195.767552][   T31] usb 2-1: config 2 has no interface number 0
[  195.773691][   T31] usb 2-1: config 2 interface 36 has no altsetting 0
[  195.781829][   T31] usb 2-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  195.790953][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  195.798977][   T31] usb 2-1: Product: syz
[  195.803167][   T31] usb 2-1: Manufacturer: syz
[  195.807803][   T31] usb 2-1: SerialNumber: syz
[  195.949413][ T4568] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1407'.
[  195.965049][ T4570] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  195.969655][  T312] usb 5-1: new high-speed USB device number 87 using dummy_hcd
[  195.974278][ T4570] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  195.995402][ T4573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.003968][ T4573] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.020970][  T312] usb 5-1: device descriptor read/8, error -71
[  196.051424][ T4573] kvm: pic: non byte write
[  196.056881][ T4573] kvm: pic: non byte write
[  196.161998][   T31] cdc_acm 2-1:2.36: More than one union descriptor, skipping ...
[  196.169878][   T31] cdc_acm 2-1:2.36: skipping garbage
[  196.176104][  T312] usb 5-1: device descriptor read/8, error -71
[  196.182719][   T31] usb 2-1: USB disconnect, device number 109
[  196.289650][  T312] usb usb5-port1: unable to enumerate USB device
[  196.615722][ T4583] kvm: pic: level sensitive irq not supported
[  196.693055][ T4590] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.717665][ T4596] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1418'.
[  196.743088][ T4590] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.759345][ T4599] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  196.770100][ T4599] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  196.842292][ T4606] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1422'.
[  196.842306][ T4607] netlink: 216 bytes leftover after parsing attributes in process `syz.4.1422'.
[  196.988300][   T36] audit: type=1400 audit(1785531601.271:21876): avc:  denied  { write } for  pid=4610 comm="syz.4.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  197.007796][   T31] usb 2-1: new high-speed USB device number 110 using dummy_hcd
[  197.159662][   T31] usb 2-1: Using ep0 maxpacket: 32
[  197.166280][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  197.175297][   T31] usb 2-1: unable to read config index 0 descriptor/start: -61
[  197.183032][   T31] usb 2-1: can't read configurations, error -61
[  197.279606][  T312] usb 5-1: new high-speed USB device number 88 using dummy_hcd
[  197.297566][ T4617] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.306477][ T4617] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.314351][   T31] usb 2-1: new high-speed USB device number 111 using dummy_hcd
[  197.327111][ T4615] kvm: pic: single mode not supported
[  197.327122][ T4615] kvm: pic: level sensitive irq not supported
[  197.332877][ T4615] kvm: pic: single mode not supported
[  197.338946][ T4615] kvm: pic: level sensitive irq not supported
[  197.345039][ T4615] kvm: pic: non byte write
[  197.355923][ T4615] kvm: pic: level sensitive irq not supported
[  197.356357][ T4615] kvm: pic: non byte write
[  197.367188][ T4615] kvm: pic: single mode not supported
[  197.367199][ T4615] kvm: pic: level sensitive irq not supported
[  197.372857][ T4615] kvm: pic: level sensitive irq not supported
[  197.379162][ T4615] kvm: pic: non byte write
[  197.390346][ T4615] kvm: pic: single mode not supported
[  197.390428][ T4615] kvm: pic: non byte write
[  197.400503][ T4615] kvm: pic: non byte write
[  197.441104][  T312] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  197.449228][  T312] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  197.458120][  T312] usb 5-1: config 2 has no interface number 0
[  197.464293][  T312] usb 5-1: config 2 interface 36 has no altsetting 0
[  197.473143][  T312] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  197.482262][  T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  197.490686][   T31] usb 2-1: Using ep0 maxpacket: 32
[  197.496278][  T312] usb 5-1: Product: syz
[  197.501521][  T312] usb 5-1: Manufacturer: syz
[  197.504295][ T4620] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  197.507814][  T312] usb 5-1: SerialNumber: syz
[  197.516649][ T4620] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  197.520891][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  197.536895][   T31] usb 2-1: unable to read config index 0 descriptor/start: -61
[  197.544742][   T31] usb 2-1: can't read configurations, error -61
[  197.551284][   T31] usb usb2-port1: attempt power cycle
[  197.861979][  T312] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  197.870022][  T312] cdc_acm 5-1:2.36: skipping garbage
[  197.876623][ T4624] FAULT_INJECTION: forcing a failure.
[  197.876623][ T4624] name failslab, interval 1, probability 0, space 0, times 0
[  197.879915][  T312] usb 5-1: USB disconnect, device number 88
[  197.889912][ T4624] CPU: 0 UID: 0 PID: 4624 Comm: syz.0.1428 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  197.890011][ T4624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  197.890052][ T4624] Call Trace:
[  197.890073][ T4624]  <TASK>
[  197.890094][ T4624]  __dump_stack+0x21/0x30
[  197.890187][ T4624]  dump_stack_lvl+0x140/0x1c0
[  197.890274][ T4624]  ? __cfi_dump_stack_lvl+0x10/0x10
[  197.890343][ T4624]  ? avc_has_perm+0x155/0x240
[  197.890407][ T4624]  ? __cfi_avc_has_perm+0x10/0x10
[  197.890472][ T4624]  dump_stack+0x19/0x20
[  197.890546][ T4624]  should_fail_ex+0x3c2/0x510
[  197.890605][ T4624]  should_failslab+0xac/0x100
[  197.890694][ T4624]  __kmalloc_cache_noprof+0x41/0x470
[  197.890773][ T4624]  ? vhost_task_create+0x12c/0x3f0
[  197.890832][ T4624]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  197.890908][ T4624]  vhost_task_create+0x12c/0x3f0
[  197.890995][ T4624]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  197.891069][ T4624]  ? __cfi_vhost_task_create+0x10/0x10
[  197.891123][ T4624]  ? __cfi_vhost_task_fn+0x10/0x10
[  197.891172][ T4624]  ? __kasan_check_write+0x18/0x20
[  197.891219][ T4624]  ? mutex_lock+0x97/0x1d0
[  197.891288][ T4624]  ? __cfi_mutex_lock+0x10/0x10
[  197.891347][ T4624]  ? kernel_text_address+0xa9/0xe0
[  197.891419][ T4624]  kvm_mmu_post_init_vm+0x161/0x300
[  197.891504][ T4624]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  197.891575][ T4624]  ? _parse_integer_limit+0x195/0x1e0
[  197.891630][ T4624]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  197.891695][ T4624]  ? kstrtoull+0x13b/0x1e0
[  197.891748][ T4624]  ? kstrtouint+0x78/0xf0
[  197.891784][ T4624]  ? ioctl_has_perm+0x1bc/0x500
[  197.891830][ T4624]  ? __asan_memcpy+0x5a/0x80
[  197.891885][ T4624]  ? ioctl_has_perm+0x408/0x500
[  197.891940][ T4624]  ? has_cap_mac_admin+0xd0/0xd0
[  197.891986][ T4624]  ? __kasan_check_write+0x18/0x20
[  197.892038][ T4624]  ? mutex_lock_killable+0x97/0x1d0
[  197.892110][ T4624]  ? __cfi_mutex_lock_killable+0x10/0x10
[  197.892173][ T4624]  ? proc_fail_nth_write+0x184/0x220
[  197.892247][ T4624]  kvm_vcpu_ioctl+0xa43/0x1000
[  197.892313][ T4624]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  197.892378][ T4624]  ? __cfi_vfs_write+0x10/0x10
[  197.892440][ T4624]  ? __kasan_check_write+0x18/0x20
[  197.892492][ T4624]  ? mutex_unlock+0x90/0x240
[  197.892544][ T4624]  ? __cfi_mutex_unlock+0x10/0x10
[  197.892616][ T4624]  ? bpf_lsm_file_ioctl+0xd/0x20
[  197.892679][ T4624]  ? security_file_ioctl+0x3e/0x110
[  197.892753][ T4624]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  197.892799][ T4624]  __se_sys_ioctl+0x132/0x1b0
[  197.892861][ T4624]  __x64_sys_ioctl+0x7f/0xa0
[  197.892917][ T4624]  x64_sys_call+0x1878/0x2ee0
[  197.892965][ T4624]  do_syscall_64+0x57/0xf0
[  197.893019][ T4624]  ? clear_bhb_loop+0x50/0xa0
[  197.893083][ T4624]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  197.893146][ T4624] RIP: 0033:0x7f2b4f99e019
[  197.893191][ T4624] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  197.893236][ T4624] RSP: 002b:00007f2b50828028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  197.893289][ T4624] RAX: ffffffffffffffda RBX: 00007f2b4fc25fa0 RCX: 00007f2b4f99e019
[  197.893327][ T4624] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  197.893362][ T4624] RBP: 00007f2b50828090 R08: 0000000000000000 R09: 0000000000000000
[  197.893392][ T4624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  197.893428][ T4624] R13: 00007f2b4fc26038 R14: 00007f2b4fc25fa0 R15: 00007ffff53c0ad8
[  197.893474][ T4624]  </TASK>
[  198.241853][   T31] usb 2-1: new high-speed USB device number 112 using dummy_hcd
[  198.269986][   T31] usb 2-1: Using ep0 maxpacket: 32
[  198.276663][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.290198][   T31] usb 2-1: unable to read config index 0 descriptor/start: -61
[  198.297987][   T31] usb 2-1: can't read configurations, error -61
[  198.306705][ T4630] 9pnet_fd: p9_fd_create_tcp (4630): problem connecting socket to 127.0.0.1
[  198.342679][   T36] audit: type=1400 audit(1785531602.631:21877): avc:  denied  { mounton } for  pid=4633 comm="syz.0.1432" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  198.342712][ T4634] binder: Bad value for 'stats'
[  198.430198][   T31] usb 2-1: new high-speed USB device number 113 using dummy_hcd
[  198.448068][ T4640] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1435'.
[  198.459946][   T31] usb 2-1: Using ep0 maxpacket: 32
[  198.466549][   T31] usb 2-1: unable to get BOS descriptor or descriptor too short
[  198.475684][   T31] usb 2-1: unable to read config index 0 descriptor/start: -61
[  198.484135][   T31] usb 2-1: can't read configurations, error -61
[  198.492037][   T31] usb usb2-port1: unable to enumerate USB device
[  198.502538][ T4644] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.511449][ T4644] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.580492][ T4646] random: crng reseeded on system resumption
[  198.699581][  T312] usb 5-1: new high-speed USB device number 89 using dummy_hcd
[  198.722237][ T4650] kvm: pic: single mode not supported
[  198.722249][ T4650] kvm: pic: level sensitive irq not supported
[  198.727892][ T4650] kvm: pic: single mode not supported
[  198.734040][ T4650] kvm: pic: level sensitive irq not supported
[  198.740264][ T4650] kvm: pic: non byte write
[  198.751026][ T4650] kvm: pic: level sensitive irq not supported
[  198.751381][ T4650] kvm: pic: non byte write
[  198.762157][ T4650] kvm: pic: single mode not supported
[  198.762537][ T4650] kvm: pic: non byte write
[  198.772854][ T4650] kvm: pic: single mode not supported
[  198.838990][ T4657] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  198.851147][  T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  198.854146][ T4657] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  198.864514][  T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  198.881175][  T312] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  198.891615][  T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  198.903506][  T312] usb 5-1: config 0 descriptor??
[  199.082024][ T4661] FAULT_INJECTION: forcing a failure.
[  199.082024][ T4661] name failslab, interval 1, probability 0, space 0, times 0
[  199.094828][ T4661] CPU: 0 UID: 0 PID: 4661 Comm: syz.2.1443 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  199.094873][ T4661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  199.094887][ T4661] Call Trace:
[  199.094894][ T4661]  <TASK>
[  199.094903][ T4661]  __dump_stack+0x21/0x30
[  199.094937][ T4661]  dump_stack_lvl+0x140/0x1c0
[  199.094958][ T4661]  ? __cfi_dump_stack_lvl+0x10/0x10
[  199.094981][ T4661]  dump_stack+0x19/0x20
[  199.095021][ T4661]  should_fail_ex+0x3c2/0x510
[  199.095045][ T4661]  should_failslab+0xac/0x100
[  199.095075][ T4661]  kmem_cache_alloc_node_noprof+0x45/0x420
[  199.095091][ T4661]  ? dup_task_struct+0xc1/0xd80
[  199.095110][ T4661]  ? kasan_save_alloc_info+0x3a/0x50
[  199.095145][ T4661]  ? __kasan_kmalloc+0x96/0xb0
[  199.095170][ T4661]  ? __kmalloc_cache_noprof+0x23c/0x470
[  199.095192][ T4661]  dup_task_struct+0xc1/0xd80
[  199.095222][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.095237][ T4661]  ? _raw_spin_lock_irq+0x93/0x120
[  199.095254][ T4661]  ? copy_process+0x3350/0x3350
[  199.095272][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.095304][ T4661]  copy_process+0x57c/0x3350
[  199.095332][ T4661]  ? kasan_save_alloc_info+0x3a/0x50
[  199.095367][ T4661]  ? __cfi_copy_process+0x10/0x10
[  199.095385][ T4661]  ? __kmalloc_cache_noprof+0x23c/0x470
[  199.095402][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.095416][ T4661]  ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10
[  199.095450][ T4661]  vhost_task_create+0x1f7/0x3f0
[  199.095472][ T4661]  ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10
[  199.095498][ T4661]  ? __cfi_vhost_task_create+0x10/0x10
[  199.095528][ T4661]  ? __cfi_vhost_task_fn+0x10/0x10
[  199.095543][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.095558][ T4661]  ? mutex_lock+0x97/0x1d0
[  199.095591][ T4661]  ? __cfi_mutex_lock+0x10/0x10
[  199.095619][ T4661]  ? kernel_text_address+0xa9/0xe0
[  199.095648][ T4661]  kvm_mmu_post_init_vm+0x161/0x300
[  199.095678][ T4661]  kvm_arch_vcpu_ioctl_run+0xf3/0x1bc0
[  199.095699][ T4661]  ? _parse_integer_limit+0x195/0x1e0
[  199.095715][ T4661]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[  199.095756][ T4661]  ? kstrtoull+0x13b/0x1e0
[  199.095776][ T4661]  ? kstrtouint+0x78/0xf0
[  199.095796][ T4661]  ? ioctl_has_perm+0x1bc/0x500
[  199.095818][ T4661]  ? __asan_memcpy+0x5a/0x80
[  199.095832][ T4661]  ? ioctl_has_perm+0x408/0x500
[  199.095846][ T4661]  ? has_cap_mac_admin+0xd0/0xd0
[  199.095860][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.095889][ T4661]  ? mutex_lock_killable+0x97/0x1d0
[  199.095918][ T4661]  ? __cfi_mutex_lock_killable+0x10/0x10
[  199.095947][ T4661]  ? proc_fail_nth_write+0x184/0x220
[  199.095977][ T4661]  kvm_vcpu_ioctl+0xa43/0x1000
[  199.095991][ T4661]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  199.096006][ T4661]  ? __cfi_vfs_write+0x10/0x10
[  199.096038][ T4661]  ? __kasan_check_write+0x18/0x20
[  199.096059][ T4661]  ? mutex_unlock+0x90/0x240
[  199.096086][ T4661]  ? __cfi_mutex_unlock+0x10/0x10
[  199.096118][ T4661]  ? bpf_lsm_file_ioctl+0xd/0x20
[  199.096137][ T4661]  ? security_file_ioctl+0x3e/0x110
[  199.096159][ T4661]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[  199.096190][ T4661]  __se_sys_ioctl+0x132/0x1b0
[  199.096216][ T4661]  __x64_sys_ioctl+0x7f/0xa0
[  199.096239][ T4661]  x64_sys_call+0x1878/0x2ee0
[  199.096262][ T4661]  do_syscall_64+0x57/0xf0
[  199.096278][ T4661]  ? clear_bhb_loop+0x50/0xa0
[  199.096298][ T4661]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[  199.096331][ T4661] RIP: 0033:0x7faa2579e019
[  199.096349][ T4661] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[  199.096366][ T4661] RSP: 002b:00007faa26622028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[  199.096388][ T4661] RAX: ffffffffffffffda RBX: 00007faa25a25fa0 RCX: 00007faa2579e019
[  199.096407][ T4661] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008
[  199.096417][ T4661] RBP: 00007faa26622090 R08: 0000000000000000 R09: 0000000000000000
[  199.096426][ T4661] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  199.096436][ T4661] R13: 00007faa25a26038 R14: 00007faa25a25fa0 R15: 00007ffc13d6e168
[  199.096449][ T4661]  </TASK>
[  199.651138][ T4667] kvm: pic: single mode not supported
[  199.651216][ T4667] kvm: pic: single mode not supported
[  199.787394][ T4675] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1449'.
[  199.902908][  T312] usb 5-1: string descriptor 0 read error: -22
[  200.080766][ T4687] netlink: 'syz.2.1455': attribute type 2 has an invalid length.
[  200.105754][  T312] uclogic 0003:256C:006D.0027: failed retrieving string descriptor #200: -71
[  200.115390][  T312] uclogic 0003:256C:006D.0027: failed retrieving pen parameters: -71
[  200.123735][  T312] uclogic 0003:256C:006D.0027: failed probing pen v2 parameters: -71
[  200.133178][  T312] uclogic 0003:256C:006D.0027: failed probing parameters: -71
[  200.142556][  T312] uclogic 0003:256C:006D.0027: probe with driver uclogic failed with error -71
[  200.160682][  T312] usb 5-1: USB disconnect, device number 89
[  200.169574][  T357] usb 2-1: new high-speed USB device number 114 using dummy_hcd
[  200.299714][  T357] usb 2-1: device descriptor read/64, error -71
[  200.315425][ T4701] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1460'.
[  200.402228][ T4705] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  200.410830][ T4705] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  200.549591][  T357] usb 2-1: device descriptor read/64, error -71
[  200.799649][  T357] usb 2-1: new high-speed USB device number 115 using dummy_hcd
[  200.821217][ T4725] netlink: 192 bytes leftover after parsing attributes in process `syz.2.1468'.
[  200.850791][ T4729] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1470'.
[  200.929600][  T357] usb 2-1: device descriptor read/64, error -71
[  201.169671][  T357] usb 2-1: device descriptor read/64, error -71
[  201.220294][ T4737] block device autoloading is deprecated and will be removed.
[  201.281373][  T357] usb usb2-port1: attempt power cycle
[  201.360748][ T4746] kvm: user requested TSC rate below hardware speed
[  201.371192][ T4746] No source specified
[  201.376363][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.385803][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.428870][ T4746] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  201.437475][ T4746] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  201.479572][  T386] usb 5-1: new high-speed USB device number 90 using dummy_hcd
[  201.619689][  T357] usb 2-1: new high-speed USB device number 116 using dummy_hcd
[  201.629738][  T386] usb 5-1: Using ep0 maxpacket: 16
[  201.636092][  T386] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[  201.646272][  T386] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3
[  201.656212][  T357] usb 2-1: device descriptor read/8, error -71
[  201.662841][  T386] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[  201.671932][  T386] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  201.680085][  T386] usb 5-1: Product: syz
[  201.684292][  T386] usb 5-1: Manufacturer: syz
[  201.688889][  T386] usb 5-1: SerialNumber: syz
[  201.790740][  T357] usb 2-1: device descriptor read/8, error -71
[  201.898722][  T386] usb 5-1: 0:2 : does not exist
[  201.905706][  T386] usb 5-1: USB disconnect, device number 90
[  201.915119][  T355] udevd[355]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[  201.937602][ T4752] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1480'.
[  202.029572][  T357] usb 2-1: new high-speed USB device number 117 using dummy_hcd
[  202.050656][  T357] usb 2-1: device descriptor read/8, error -71
[  202.180584][  T357] usb 2-1: device descriptor read/8, error -71
[  202.289680][  T357] usb usb2-port1: unable to enumerate USB device
[  202.637087][ T4759] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1483'.
[  202.709575][  T357] usb 5-1: new full-speed USB device number 91 using dummy_hcd
[  202.870695][  T357] usb 5-1: config 0 has an invalid interface number: 41 but max is 0
[  202.878846][  T357] usb 5-1: config 0 has no interface number 0
[  202.885027][  T357] usb 5-1: config 0 interface 41 has no altsetting 0
[  202.893218][  T357] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a
[  202.907410][  T357] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  202.915484][  T357] usb 5-1: Product: syz
[  202.919704][  T357] usb 5-1: Manufacturer: syz
[  202.924305][  T357] usb 5-1: SerialNumber: syz
[  202.929588][  T357] usb 5-1: config 0 descriptor??
[  203.299559][  T312] usb 2-1: new high-speed USB device number 118 using dummy_hcd
[  203.450622][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  203.461682][  T312] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  203.471470][  T312] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  203.480548][  T312] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  203.489218][  T312] usb 2-1: config 0 descriptor??
[  203.625310][ T4773] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1489'.
[  203.663034][ T4775] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1490'.
[  203.771728][  T357] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0
[  204.097532][  T312] usb 2-1: string descriptor 0 read error: -22
[  204.300015][  T312] uclogic 0003:256C:006D.0028: failed retrieving string descriptor #200: -71
[  204.308992][  T312] uclogic 0003:256C:006D.0028: failed retrieving pen parameters: -71
[  204.317121][  T312] uclogic 0003:256C:006D.0028: failed probing pen v2 parameters: -71
[  204.325260][  T312] uclogic 0003:256C:006D.0028: failed probing parameters: -71
[  204.332838][  T312] uclogic 0003:256C:006D.0028: probe with driver uclogic failed with error -71
[  204.342848][  T312] usb 2-1: USB disconnect, device number 118
[  204.506126][ T4788] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.514826][ T4788] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.598614][ T4797] pic_ioport_write: 7 callbacks suppressed
[  204.598626][ T4797] kvm: pic: level sensitive irq not supported
[  204.650422][ T4800] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  204.665116][ T4800] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  204.747984][ T4807] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1502'.
[  205.139595][  T312] usb 2-1: new high-speed USB device number 119 using dummy_hcd
[  205.221266][  T357] CoreChips 5-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9
[  205.233586][  T357] CoreChips 5-1:0.41: probe with driver CoreChips failed with error -71
[  205.243461][  T357] usb 5-1: USB disconnect, device number 91
[  205.254352][   T36] audit: type=1400 audit(1785531609.536:21878): avc:  denied  { ioctl } for  pid=4814 comm="syz.0.1506" path="socket:[53510]" dev="sockfs" ino=53510 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1
[  205.256470][ T4815] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable
[  205.299561][  T312] usb 2-1: Using ep0 maxpacket: 16
[  205.305848][  T312] usb 2-1: config 0 has an invalid interface number: 105 but max is 0
[  205.315307][  T312] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[  205.328791][  T312] usb 2-1: config 0 has no interface number 0
[  205.334715][ T4823] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  205.341032][  T312] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28
[  205.344947][ T4823] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  205.353376][  T312] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  205.368183][  T312] usb 2-1: Product: syz
[  205.372397][  T312] usb 2-1: Manufacturer: syz
[  205.377000][  T312] usb 2-1: SerialNumber: syz
[  205.382264][  T312] usb 2-1: config 0 descriptor??
[  205.389361][  T312] uvcvideo 2-1:0.105: Found Unit with invalid ID 0
[  205.395982][  T312] usb 2-1: Found UVC 0.00 device syz (046d:08f3)
[  205.402530][  T312] usb 2-1: No valid video chain found.
[  205.646370][   T36] audit: type=1400 audit(1785531609.926:21879): avc:  denied  { link } for  pid=4812 comm="syz.1.1505" name="#1d" dev="tmpfs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  205.670473][   T36] audit: type=1400 audit(1785531609.926:21880): avc:  denied  { rename } for  pid=4812 comm="syz.1.1505" name="#1e" dev="tmpfs" ino=1765 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1
[  205.854774][ T4836] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1513'.
[  205.972378][ T4844] overlayfs: missing 'lowerdir'
[  206.017094][ T4850] input: syz0 as /devices/virtual/input/input49
[  206.081942][   T36] audit: type=1400 audit(1785531610.366:21881): avc:  denied  { sys_module } for  pid=4849 comm="syz.0.1520" capability=16  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1
[  206.119607][  T312] usb 5-1: new high-speed USB device number 92 using dummy_hcd
[  206.168870][ T4859] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1523'.
[  206.192754][ T4861] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.201906][ T4861] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  206.305639][  T312] usb 5-1: config 2 has an invalid interface number: 36 but max is 0
[  206.314028][  T312] usb 5-1: config 2 contains an unexpected descriptor of type 0x1, skipping
[  206.323385][  T312] usb 5-1: config 2 has no interface number 0
[  206.329661][  T312] usb 5-1: config 2 interface 36 has no altsetting 0
[  206.337933][  T312] usb 5-1: New USB device found, idVendor=1bc7, idProduct=3000, bcdDevice=69.9a
[  206.347386][  T312] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[  206.355544][  T312] usb 5-1: Product: syz
[  206.359893][  T312] usb 5-1: Manufacturer: syz
[  206.364540][  T312] usb 5-1: SerialNumber: syz
[  206.621352][  T312] cdc_acm 5-1:2.36: More than one union descriptor, skipping ...
[  206.629265][  T312] cdc_acm 5-1:2.36: skipping garbage
[  206.636728][  T312] usb 5-1: USB disconnect, device number 92
[  206.725808][ T4882] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  206.734416][ T4882] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.154315][ T4888] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1534'.
[  207.256031][ T4894] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1537'.
[  207.265044][ T4894] bridge_slave_1: left allmulticast mode
[  207.270751][ T4894] bridge_slave_1: left promiscuous mode
[  207.276457][ T4894] bridge0: port 2(bridge_slave_1) entered disabled state
[  207.283931][ T4894] bridge_slave_0: left allmulticast mode
[  207.289660][ T4894] bridge_slave_0: left promiscuous mode
[  207.295304][ T4894] bridge0: port 1(bridge_slave_0) entered disabled state
[  207.379587][  T312] usb 5-1: new high-speed USB device number 93 using dummy_hcd
[  207.403770][ T4897] 9pnet_fd: Insufficient options for proto=fd
[  207.410377][ T4897] overlayfs: conflicting options: nfs_export=on,index=off
[  207.427084][ T4899] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.435666][ T4899] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.530680][  T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[  207.541851][  T312] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[  207.551648][  T312] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00
[  207.560760][  T312] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[  207.569398][  T312] usb 5-1: config 0 descriptor??
[  207.708823][ T4901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1540'.
[  207.956877][ T4905] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[  207.965518][ T4905] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[  207.975476][  T357] usb 2-1: USB disconnect, device number 119
[  207.992300][ T4907] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1543'.
[  208.016686][ T4910] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1544'.
[  208.066700][   T36] audit: type=1400 audit(1785531612.346:21882): avc:  denied  { remount } for  pid=4911 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1
[  208.066707][ T4912] SELinux: security_context_str_to_sid () failed with errno=-22
[  208.095674][ T4912] kvm: pic: non byte read
[  208.100419][ T4912] kvm: pic: non byte read
[  208.104980][ T4912] kvm: pic: non byte read
[  208.109549][ T4912] kvm: pic: non byte read
[  208.114149][ T4912] kvm: pic: non byte read
[  208.118701][ T4912] kvm: pic: non byte read
[  208.123451][ T4912] kvm: pic: non byte read
[  208.128056][ T4912] kvm: pic: non byte read
[  208.132836][ T4912] kvm: pic: non byte read
[  208.191137][  T312] usb 5-1: string descriptor 0 read error: -22
[  208.403392][  T312] uclogic 0003:256C:006D.0029: failed retrieving string descriptor #200: -71
[  208.420677][  T312] uclogic 0003:256C:006D.0029: failed retrieving pen parameters: -71
[  208.429874][  T312] uclogic 0003:256C:006D.0029: failed probing pen v2 parameters: -71
[  208.438147][ T4917] sit0: entered promiscuous mode
[  208.438336][  T312] uclogic 0003:256C:006D.0029: failed probing parameters: -71
[  208.451061][  T312] uclogic 0003:256C:006D.0029: probe with driver uclogic failed with error -71
[  208.452217][ T4917] netlink: 'syz.2.1547': attribute type 1 has an invalid length.
[  208.471917][  T312] usb 5-1: USB disconnect, device number 93
[  208.536542][ T4921] batadv_slave_0: entered promiscuous mode
[  208.545382][ T4920] batadv_slave_0: left promiscuous mode
[  208.708841][ T2075] ------------[ cut here ]------------
[  208.714390][ T2075] WARNING: CPU: 1 PID: 2075 at drivers/block/ublk_drv.c:1579 ublk_uring_cmd_cancel_fn+0x351/0x410
[  208.725129][ T2075] Modules linked in:
[  208.729232][ T2075] CPU: 1 UID: 0 PID: 2075 Comm: kworker/u8:17 Not tainted syzkaller #0 200dea8a17c83f35b0a1e1238c384757fc17b797
[  208.741407][ T2075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[  208.751766][ T2075] Workqueue: iou_exit io_ring_exit_work
[  208.757609][ T2075] RIP: 0010:ublk_uring_cmd_cancel_fn+0x351/0x410
[  208.764580][ T2075] Code: 5d e9 43 2d 52 02 cc e8 1d 90 33 fe 0f 0b eb e3 e8 14 90 33 fe 0f 0b eb da e8 0b 90 33 fe 0f 0b e9 4d fe ff ff e8 ff 8f 33 fe <0f> 0b eb c5 44 89 e1 80 e1 07 fe c1 38 c1 0f 8c 0a fd ff ff 4c 89
[  208.784302][ T2075] RSP: 0018:ffffc90000e0f990 EFLAGS: 00010293
[  208.790525][ T2075] RAX: ffffffff8353e1c1 RBX: 1ffff1102372e655 RCX: ffff8881226f0000
[  208.798758][ T2075] RDX: 0000000000000000 RSI: 0000000000000062 RDI: 0000000000000104
[  208.807062][ T2075] RBP: ffffc90000e0f9e0 R08: 0000000000000003 R09: 0000000000000004
[  208.815468][ T2075] R10: 0000000000000000 R11: ffffffff8353d1a0 R12: ffff88811bb93900
[  208.823560][ T2075] R13: ffff88811b973280 R14: ffff8881350a98a8 R15: ffff8881350a98b8
[  208.831847][ T2075] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[  208.841039][ T2075] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[  208.847864][ T2075] CR2: 0000000000000000 CR3: 0000000121852000 CR4: 00000000003526b0
[  208.856187][ T2075] Call Trace:
[  208.859540][ T2075]  <TASK>
[  208.862642][ T2075]  ublk_ch_uring_cmd+0x6f/0xa0
[  208.867716][ T2075]  io_uring_try_cancel_uring_cmd+0x193/0x280
[  208.874076][ T2075]  io_uring_try_cancel_requests+0x4d6/0x5b5
[  208.880178][ T2075]  ? io_uring_cancel_generic+0x6eb/0x6eb
[  208.885894][ T2075]  io_ring_exit_work+0x23d/0x83b
[  208.891078][ T2075]  ? finish_task_switch+0x139/0x770
[  208.896309][ T2075]  ? __cfi_io_ring_exit_work+0x10/0x10
[  208.901912][ T2075]  ? kick_pool+0xb9/0x540
[  208.906316][ T2075]  process_scheduled_works+0x7f7/0x1060
[  208.911998][ T2075]  worker_thread+0xc99/0x13f0
[  208.916717][ T2075]  kthread+0x2c7/0x360
[  208.920837][ T2075]  ? __cfi_worker_thread+0x10/0x10
[  208.925979][ T2075]  ? __cfi_kthread+0x10/0x10
[  208.930616][ T2075]  ret_from_fork+0x67/0xa0
[  208.935074][ T2075]  ? __cfi_kthread+0x10/0x10
[  208.939789][ T2075]  ret_from_fork_asm+0x1a/0x30
[  208.944579][ T2075]  </TASK>
[  208.947630][ T2075] ---[ end trace 0000000000000000 ]---