last executing test programs:

5.227660129s ago: executing program 0 (id=342):
socket$nl_generic(0x10, 0x3, 0x10)
madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15)
syz_clone(0x4200, 0x0, 0x0, 0x0, 0x0, 0x0)
r0 = syz_open_procfs(0x0, &(0x7f0000000100)='smaps_rollup\x00')
read$FUSE(r0, &(0x7f0000004e00)={0x2020}, 0x2020)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0)
r1 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000240)={0xf0, 0x9, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x58, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR={0x5, 0x3, 0xad}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'veth0_to_team\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0xd}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xb}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x10}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010101}}]}, @IPSET_ATTR_ADT={0x44, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_BYTES={0xc, 0x18, 0x1, 0x0, 0x92d}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_COMMENT={0x8, 0x1a, '^$%\x00'}}, {0x18, 0x7, 0x0, 0x1, @IPSET_ATTR_IFACE={0x14, 0x17, 'netpci0\x00'}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_CIDR2={0x5, 0x15, 0x2}}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xf0}, 0x1, 0x0, 0x0, 0x10}, 0x4000)
mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil)
socket$netlink(0x10, 0x3, 0x0)
openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0)
socket$netlink(0x10, 0x3, 0x0)
epoll_create1(0x80000)
socket$inet6_udp(0xa, 0x2, 0x0)
socket(0x10, 0x80002, 0x0)
socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x103081, 0x0)
syz_usb_connect$uac1(0x2, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r2, @ANYBLOB='\a'], 0x0)

4.983861895s ago: executing program 3 (id=343):
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000005c0)={0x24, 0x1a, 0x1, 0x0, 0x25dfdbff, "", [@typed={0x2, 0x3ffc, 0x0, 0x0, @str=':*^${\x00'}, @nested={0x8, 0x1c, 0x0, 0x1, [@generic="579d06ab3d77bdea0c5872b296a14470992a821be6ffdbf32c5366d1e30fbdf4979f70e209020724c90325a8f94f1c8d11dd08335526a4f561b8df1fc39ae9311177a9ba01fbcf916493691b8d325fe6f58df14d663c15c1f7d39b145a4dffc7b06a7436e1860dd3e79f9219f29924203db97abdd9640c62b8"]}]}, 0x24}], 0x1}, 0x0)
r1 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece)
ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f0000000000)=0x1)
r2 = socket$netlink(0x10, 0x3, 0x0)
writev(r2, &(0x7f0000000300)=[{&(0x7f0000000000)="390000001000034700bb5be1c3e4feff06000000012778010000190004000400ad003e34d61c00000000313200"/57, 0x39}], 0x1)
preadv(r1, &(0x7f0000000080)=[{&(0x7f00000010c0)=""/4096, 0x1000}, {&(0x7f0000000440)=""/229, 0xe5}], 0x2, 0x800, 0x80)
sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000029000000360000002b00000000000000b0"], 0xc8}, 0x810)
r3 = socket$packet(0x11, 0x3, 0x300)
setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4)
ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000280)={'ip6tnl0\x00', <r4=>0x0})
sendto$packet(r3, &(0x7f00000002c0)="05031600d3fc140000004788031c09103328", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r4, 0x1, 0x0, 0x6, @multicast}, 0x14)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff)
modify_ldt$write(0x1, &(0x7f0000000900)={0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x10)
modify_ldt$write(0x1, &(0x7f0000000a40)={0x476, 0x20000000, 0x1000, 0x0, 0x1, 0x0, 0x1}, 0x10)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r5, &(0x7f0000000180)={0x0, 0x59, &(0x7f00000003c0)={&(0x7f0000000400)={0x2c, r6, 0x1, 0x20, 0x25dfdbfd, {0x23}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
close(0xffffffffffffffff)
getsockopt$sock_int(r7, 0x1, 0x2e, 0x0, &(0x7f0000000040))
ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, {0x0, 0x0, 0x0, 0x2, 0xfffffffffffffffe, 0x0, 0x0, 0x1b, 0x15, "2e7da51a8dc4b9505dfa1ab0a34a10622e64ee4edb80cc9bd36b93b23733e6180aa539ec68114b5aba1c98911df5ba72296d56740d56ea4d0434aa3592a47913", "fc0177a6f3bb16d5d5568693e0e50bbf206c9d8db97cd01095e7ea15b0ba5f8a654e14dc7c4cc6b50488873b3acc6e02cd3eac8be657b534bfa1142100696b29", "c921095856cdf9fd8199034f3b875fe5c92394e3c7a178fb1c16c99189819ef4", [0x2, 0x8000000000000000]}})
ioctl$BTRFS_IOC_DEV_REPLACE(r1, 0xca289435, &(0x7f0000000680)={0x2, 0x16000000000, @status={[0x10001, 0x7, 0x0, 0x5, 0x4, 0x1]}, [0x7, 0x1, 0x1, 0x6, 0x36, 0x58, 0x7611, 0x2, 0x1d, 0xd45, 0x3, 0x8, 0xfffffffffffffffc, 0x8000000000000001, 0x5, 0x8, 0x3, 0x1ff, 0x1007, 0x7831, 0xfffffffffffffffc, 0x5, 0x76, 0x8, 0x9, 0xfe, 0x7, 0x5, 0x9, 0x1000000000000000, 0x1000, 0x2, 0x594, 0x1ff, 0x3, 0x8001, 0x39fb, 0x1, 0xff, 0x80087b3, 0x100, 0x3, 0x8, 0xd02f, 0x5, 0x8, 0x9, 0xfffffffffffffffd, 0x4, 0x4, 0x1, 0x9, 0x9, 0x2, 0x6, 0x7ff, 0x2, 0x1, 0xfffffffffffffe01, 0x8, 0x5, 0x80000000, 0x0, 0x7fff]})

4.983493174s ago: executing program 3 (id=344):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @main=@item_4={0x3, 0x0, 0xb, "ce9abc16"}]}}, 0x0}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108)

3.906637576s ago: executing program 0 (id=350):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1002, 0x0, 0x3}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x2c0, 0x0, 0x3, 0x0, 0x0}, {[0x3, 0x1c4, 0x7, 0x8f]}, 0x1, 0x0, 0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
r8 = socket$inet(0x2, 0xa, 0x9)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x7})
getpid()
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}})
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001010000002b000000fc0000000000000000938078621f00000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000011948390000000000fdffffffffffffff000004008a150000e80a000000000000000000000a000200701000000000000014000e00fe80000000000000000000"], 0x104}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00')
pread64(r10, &(0x7f0000000480)=""/14, 0xd, 0x8000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x64, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x64}}, 0x0)

3.747183371s ago: executing program 0 (id=351):
r0 = openat$kvm(0xffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0) (async)
ioctl$KVM_GET_LAPIC(r2, 0x8400ae8e, 0x0)

3.643866148s ago: executing program 0 (id=352):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="12010000090024206d041cc340000000000109022400010000a00009040000010301010009210008000122010009058103"], 0x0)
syz_usb_control_io$hid(r0, &(0x7f0000000240)={0x24, &(0x7f0000000000)=ANY=[@ANYRESDEC=0x0, @ANYBLOB="b7c709e07390f78c479915ba75b7ab1cc2c8c5abe8c218877d2aad10"], 0x0, 0x0, 0x0}, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000000180)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB=' '], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io(r0, 0x0, 0x0) (async)
syz_usb_control_io(r0, 0x0, &(0x7f0000001200)={0x4e4a291778a0fb7f, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x20, 0x0, 0x4, {0x3, 0x3}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async)
r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='ns\x00')
getdents64(r1, &(0x7f00000046c0)=""/4096, 0x1000) (async)
getdents64(r1, 0x0, 0x0) (async)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)

3.306514333s ago: executing program 3 (id=354):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"85f080a4933d55266e07e799aa0cc421388242df2a3c6b631b65b1c061edd2aa108c3528fe9b0bb3a53ab1200f5d01a68a4acdec8fee09648222f908c1fedc3000342e6139de28366c13509306d00ebcc67497181ac916db98af9d366b76e427d9ab5bb68095f0fb246df32b8af0783653136f8a04c03690312125b2ded6a24fda8685340c575ead69519e3583f89d467ec232d6a1ffd0463ba4ea3cbae5dae6654b5547b5458f02ac307729e57b09e134f68be44f88d72517b230b066f6315b5fb80206397bbff8cbc2a36e01c2e7b3aadb03bd3dd5288a69a991d9c674717e3abba7167280b2db3b1b8502afa4f3f296c532510c9d2dd79bb5eeb25adb5edddbdd069c09d14d15c2e7e1e2bb22e97d6992236d2273c8bb95536f7118d007965008b125c7daac2814e6bbe1adbfa3572ad0b7ad5c26c8014118d8374ca9f285779dfee7715a403908146a74de61b3853914c89f444c12e7a38bdd46c4ed36eb806ea598f44d1dec9eff9e2476f43802211f0762b66673b45d236b2391ce322e30fb9c69fe0d514dc1f8b6e3979c1205fd5224b07d18a44fec4f6f1a6f65158bb6adcc295bf2dd7dea107f59d7e03c61fe5822292e45968956b931bdc4d6445ff1631e0b98e4b4448774dd4b9cd53a45896fdb3f03702778741ae2b45a25bf9a23fc02fb97a630f132bf9def6c6d4a7baeb62972f1a814f6f2377bcfc78e2e86368c138510a04cedf7175af8c2033aae7413e3ace8c71ab9a0af1ca7042011a6ed028e205648535dabf3b2f85196ae18d36b839e3cd54ae4933ad529888fdac7bb8a70c72bc0fc81ba06506f2d5bc7686e219bbe5283959cbef9950e071cb6d9f341fc624a5110341f26cebd7100599a06e61f66fae120c7fc2b34c6221200eba75bd1277114671a3fa8f058b27fd897b052f4a52afcea814df526181c75c4497210a2b85b7b26601561e78735387cf123654b0295d1d60556956b36d96dd038866c4b4db31ebdcddd6929bbc2850cd4901389e6ea6e86041e0efa1111c2fb0e6df6364cb95659f506d5c7e63fb67c8116577d15e4a4b1fc4c27de2e52586cb1f52be9c3601f5066549de8bdc3ec07d1a84caf1961323ec2487a37b751aeabafcd647ce2dae5d9499c0f969467e6cabad198669ac96bd1488954eff0854ee0c83d7b596d273625bdb16270782321071fda5d980ded78ffa9dc2b56037d7cbf942547f48a5131f1991f6c17ae1ed5120ca6878f98e68e7997a9a2b70be640a70a34adb80de286c669bb5f092e4e3a15a83217e03d02a4054f34af3a65ff6b36f395b76a0579cffafd5d3bb0e704c935caecf3a7ab756c23fd60c9fe3f4fb2be7504f5bae22b116ff1588dcf02b327d31bf0488dba8af5b33ccf2d7d87f43bbc48fcd4f191ad6af9313ad38b8b2967cbfabd6651bc1f6ce5abb4a2f1413194f96b26d7d6edc4e013fba549075c97eef508af5ca7873664b058b7bcf455a8a04b591d29fab6366c844bb75576bac2d52323e747303d00a5736c9812922b0e17bcec9135550736b54cf6407d61e22e62d7bb75f62935b665acf33e75f688c36ef416f1b890d0f0c8ad1df00e02ec45967834d5649c8e7143978622fa3704672970b7993a87e97d3d926a14265647bc8b8c9e6f83e29572608d24b42c2635ef4abbd0af83860e99c90d7471cf6e8ce99507f5ec2bc572212fa9ee3f5a9dfa3815fe55f0bbb119acce062ae37f2ff921707abba139bcddf42bfd174d29b540161b4113c4e1a13f3a628c638ec4d3a884dfbc093e23ec0d0671b46b41dc8b42d950c8615ba5ee87f49b5d0910ffa4871207995001920db05a95199967f097ba7b55bbd271d818690c4238406b40a3dfc42fa56a67173b53a96b543326c56738b6d043195934018696f5ab49347e5148a78f2d1369a71afab8330273d46ecfba4ee05802a5385649851db949dbfb39e290941641c50b1ac20fb3102754a760b097f464ddb0b83f8168badfa71db6621dcf22fb081e3403f3bac5c7e65905aca52885c807f8ddab18bb2f12ef952c50483c0e251968bc70ff0d42a638ca744dea4c7ebb4fea777cf663bb4f1505ed79730c45bc86e488a13f924377a8e2ee6670a02ca52874ae1c42a35d55b9765757047b2cc3742aa51fa3e43fb2c113c92ad213bad252c1a82966dd016f12a7f1c3900c0f1ab455035163f31899bdd30f3ff43ad17d9e45bb7438c1c986712736f24be14f71ab1bfe92a25ec07f086ee8c7971b8077a13e58a8e8bea39c8e06b251909f02cb0080abf020f27ca160eb26c082dda1fa54ea4094dfdbcb2fa7bddccb67a844e8075f4cc08dad35757006d051e183dced336bc0c2502f93ffc87dca622286ba174c24e1f53f27dc2777baafe170348b0e8d3e743b3aa906bc0764bbe7da08ff403efe2212627d6748c2ce5bb513b7312517d1f88c61c7ba5f9647cd619281c5b390b48606ee39fb4171103df2e09d7cfd56c06c721f7c24ad8cce383623fc2dcb73f7b1b3b86df1b42490815513681aafbf7e871b4b9686efae6c45ecfca60a640a6f071dfd31f9437c3d03086164b48c1ed802986864bfe0d49bdd7709662262368dbc3ecc05eb240ecc41904c76d78ab5c52b66af5a720fdd6a92f52be0676427a56e32e5bc5085b25f90add28a76f2fce6f8f0ef74f4658098549646bd63175adf77b5cdcf102946554ba6136cbc83c6268ee40318f3c9d4718025688b35d2265bf60bf889ff629f7834586ef46eab7a9176337536bb6001e676546b987f36b1fe4baea02fa76fb4830aebbb9c14d8e2b43ea77ef887e5a26448f4086fa819a25e27725ac10298851c8bc45f2ce4430b07917ade5ea8c434c3f2576effbeb521173736e5c9557450643068b0c0fb132a7e99de6ca292246a9937fa7d7e06e59cf59ce5b9f8426a9049931146af40a8a1256ba373a88d09dc00cdf4453cc6ba78572bf3e1f2352a978cdbad60220cb8ac37d7f614a306492a4b5eee9244b0ca84b6cf2e23013bfb1cb92bf6d126fe550e58c19f84e7a4081437b75b31b2b9fb658dcd8ba077962e0f3359721a148d4fefe5c97941ca9688cb85adf38fd10f5811cdd8e074a21abfc9541c71465b08d7321281b68ed52bfab789b9c83849c09d52376d419b1e7ba367603236e119cdf4a7b7cf9d81f2229601deace53cea2f14a05f7fa0ca04b39e31c6453e332f4bd0915c0e09e28f4d1125c390c6ff0833a04b6fc37855e65de90333e505b9eb66e0068607000000fb7b8b215dbdc9787b5baa724cfa71ee6745b41e203de8b7794757ac328ec5567540b951b50530c3d4ee34705ea1c66fd6591e88561083e86d48c45ef3b83a3029319d8f3d8e65ce14c1dc3cb92d0a7dbeb609a8d2793928caa079f0fbbb2bc90b9fb4000000f4032041d14c5bca00e99b3027ec3a50c4957199cf016a4594069af8659df0973f20ffb15dbc265ac5b8a2203e90b114a3e9441e357c60ce0b550a7fe66fc34f5702ac8e8992a22e89194c1df69e81a9b7ad3d2634ea8c0388588192fd47d8e803b10044d558617fb2921b69eb4d85c051f86ef63a2f4382b9becd870fb2ecadca6902712b88680792e2f2ec89591cfebb6db3ad31c2a339af10465fcf7988519d382218df52261234f26a6f66ad0d1859de505d0fe819caf2f8d30aa9fd1228ac91d11ca67f1f8d50c8eefa5c441514321507dff6c6ea3cff6f340a1c11e0c40f419e8e60fc94d8828fa47a96cdf7ee4f61e23f40751b25cf9ca1295041a350f83f0e679515d6b4b46e2c9ce8999e07f835abc1663cefcf728df37831f4e17f8c8a4feaf1fbf44c38c9313284404a50ba4cd8abe835b33bfecb02cd6c9d7f435853b4c8d505ab83cf46512739116694765658bae64b3127152d216055aef9b25c70a8a3b302752d7b1e8791c657b9f3fc9001ef299fd1a349491ae6ee9940149160507fc4130fb825d47d97dc2c243209d2403583ac3ef6ddbedcaa76432255487c0a06e59e043e572ab3aec002afea6b6a2dc9cfaeefa70557886c4d12924a0388f2f1bc8e89e4cfa69705d1ef3c4658f8616278b588011d9dd914beec0b151d65b6524fba3e3f235d58373e021699b07622a51504eade747e0b2f9cf38bc167cabc8cb18c708d1337e25648707e8c0872876514c7a49c0b2aaee5ed9e9ecfcbcc23e032c4deb63e48e7120188056468fad31448e4b46e7d62fbcfc1c2cfb01fcf0db5e8a162bdb9bd820c763f17b96c23f32db9d1c1d74ddbe657b4f9595a9796982a0742153111b15e484d8ffebe47ce0a78a41e470a341616ec2eb6eef813fb415fab50fa965bec6a5977a0ade4fed67f86fc24e11b0e2f5364079f7c7c35b560cac726dbc80f29dbd248f7ecda0286a23ef172a28c96d9bdb1f598eab31c6baf0321312da23920c074b9d2d2e442717f2c21001142a39c2da6b8bd9d06b05a6a8deae1bd1be4108a636ddbebc682d113e715f2f3ee506abc28b1c654b3d2d28e02f73b171ed0deed71dda90ce4a0b728cc75cb576385e7418b545b992b1dd98e2ee53355f464f9250a2a03b3d1e4d2ac1aa71d01de2573530324e14d15a507883411ddbd37be21dc929db9b11f11010e4d2a04c7325a5ae6d24d19900ff97a8a89438f8676457a78cff05201528f4358fe67f61288bf042a8f3c2e0f8b4997b8fb74996b80d465489b2d7807a945eba72a945e8cf8625dbad6f6f6e30537b29e558ca8a8b0625f578c766d34f2d28d704715f94df1f6318a308042aa494baa295640679f1eab1e6a8308af8ce6441d5ad8a2f3d477eb5307af0dfae66444a8f1434030b8361621340ad3dcefa6d8f090ed3929d89ad9c0ba01a6903033428dd8f98619304b1803187d2a6130bf1e009b5eb0e7e21c75594b3b8470f3106c92a9e55bfeb026091ced127a90a1f1247f3c07e36d3572923e0de3f73518d0369a25fcd4e65d243b7eab91063a7bfd8bc8ac9e39fbbb32b5c9517886287a18eacd8dbfda9b91db693cb12e42cba5988280e09e51e72b91a0f360656d8f21cc1eb3248ac345ad51d1a6172b18419277851dab01e028c7e8e2cf34095efd28267852a08fccf61c45b5e46930160daf50282be058274e7ff58c48b60b86d0c8cc886ab8778a2a2b5fa2557ad7bf7f01f2175523ce758871d334c20a9839f7a89fe2867c06289c8a2f6456ac7e4fbadee53ac41aee68214bc76669853baa4f58255b39ba581414f2e8c4b49303f8936a33bae5cbc96b29a5c724d5b50e1614144c2acd03bd90de891c3d36ce040d57543682ecbfcae66c4153c337c3a5d01896524c8e0c27e9a08919821ca27bbfe3fc9ba24a823aeec8d4ad8ef8a65c585bee4dcf1acaa3da501a8c11a23b2e22920c1ad0129a038b31fe16c2abc80589dbf7c37211afc5d1a6db908bc5fe8a692060069fcbcdcba7c523d3c424aa3b0c6556387e0e51bcde9e5f850abf62d2c2101c3a2786a0cb94932877a09cb6b64aa61da8cab3b423e7adc4c4700418a65e87225710e1691f6d9cb2eb63cce5b605ce0a4a89cf519767e00845397c5e381141a0ed8a89b01064b495ec8d1e2da37433bf1597d919a69610d2ad26bdf6fca8de422bb2cb80d0516206e8194ee51445a3dcb5dee33c0c310b4751e68e58bebda2fb586985a5a5b06456756f44e6dbfef4bb99ca732f00fb9ea35775f7419681bfbe6f43dc7c4650c13b63d93c1d490bf0173f287a4309531f13ecb1a775d0bd881a00", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

3.191973818s ago: executing program 2 (id=355):
r0 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000001c0))
r1 = socket$nl_audit(0x10, 0x3, 0x9)
r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0)
ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32})
writev(r2, &(0x7f0000000980)=[{&(0x7f0000000200)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000140)="0700a2", 0x3}, {&(0x7f0000000280)="552f1a54", 0x4}], 0x3)
ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000380)={'veth0_to_team\x00', &(0x7f0000000340)=@ethtool_channels={0x3d, 0x6, 0x2f5f8000, 0xde2, 0xfff, 0x2, 0xfffffff8, 0x1, 0x2}})
ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000100)={&(0x7f0000ff9000/0x4000)=nil, 0x4000})

3.171238183s ago: executing program 2 (id=356):
r0 = socket$inet6(0xa, 0x2, 0x0)
sendmsg$sock(r0, &(0x7f0000001140)={&(0x7f00000009c0)=@in={0x2, 0x4e24, @loopback}, 0x80, 0x0, 0x0, &(0x7f00000010c0)=[@timestamping={{0x14, 0x1, 0x25, 0x7}}], 0x18}, 0x20004000)
r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)=0xffffffff)
socket$inet(0x2, 0x3, 0x8d)

3.160434621s ago: executing program 2 (id=357):
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r1 = syz_open_dev$loop(&(0x7f0000000200), 0x5, 0x86100)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpuset.effective_cpus\x00', 0x275a, 0x0)
ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f00000005c0)={r2, 0x3, {0x2a00, 0x80010000, 0x0, 0x9, 0xfffffffffffffe00, 0x0, 0x0, 0x1c, 0x1c, "fee8a2ab78fc179fd1f8a0e9a1af1ea09dc2b7fb0a010000000000000000030000000000000000000000000000000000000000000000001b00", "28095397bab22d0000b42076c1ce8ef05f819e01177d3d458dac0000000000000000000800000000003788cf8f00", "90be8b1c5512406c7f00", [0x4, 0xa]}})
r3 = syz_open_dev$loop(&(0x7f0000000300), 0x8f, 0x40240)
ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f0000000000)={r2, 0x0, {0x2a12, 0x80010000, 0x0, 0x6, 0x100004, 0x0, 0x0, 0xe, 0x5, "fee8a2ab78fc179fd1f809000100aca7ca44c6a4b3e00d9683dda1af01000000c0ff12001000000000000000000300", "2809e8dbe1b22d0000b420a1a93c7540f476779e0117613dd4070000ebff08000000000000000000020000000800000000faffffff00", "e7460000102006000000e444000017123c00", [0xe0, 0x40000000]}})
setsockopt$bt_l2cap_L2CAP_CONNINFO(r2, 0x6, 0x2, &(0x7f00000000c0)={0x6, "b421fc"}, 0x6)
r4 = openat$kvm(0x0, &(0x7f0000000000), 0x80, 0x0)
socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000))
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, 0x0, 0x0)
r5 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0)
fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0)
r6 = fsmount(r2, 0x1, 0x6)
r7 = openat(r6, &(0x7f0000000040)='.\x00', 0x0, 0xc4)
getdents64(r7, &(0x7f0000000080)=""/234, 0xea)
lseek(r7, 0x3, 0x1)
getdents64(r7, 0x0, 0x0)
ioctl$KVM_CHECK_EXTENSION(r4, 0xae03, 0xb9)
r8 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r8, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil})
r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
r10 = ioctl$KVM_CREATE_VM(r9, 0xae01, 0x0)
r11 = ioctl$KVM_CREATE_VCPU(r10, 0xae41, 0x2)
mremap(&(0x7f00007f5000/0x4000)=nil, 0x4000, 0xffff00000ad7e000, 0x3, &(0x7f0000ec0000/0x4000)=nil)
r12 = socket$inet_udp(0x2, 0x2, 0x0)
syz_clone3(0x0, 0x0)
ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000001040)={'gre0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x3f00, 0xa000, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x2f, 0x0, @empty, @remote}}}})
ioctl$KVM_GET_LAPIC(r11, 0x8400ae8e, 0x0)
r13 = ioctl$KVM_CREATE_VCPU(r8, 0xae41, 0x0)
ioctl$KVM_SET_NESTED_STATE(r13, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x25000, 0x40000, {}, 0x0, 0x4}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"}})

3.037622213s ago: executing program 2 (id=358):
syz_usb_connect$uac1(0x2, 0xa5, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902930003010000000904000000010100000a240100000002010213240600000600000000000000dfff000000000924030000000000000924050000f8431cfd09240300000300040206240504"], 0x0)
syz_usb_connect$printer(0x1, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x525, 0xa4a8, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x10, 0x40, 0xe, "", [{{0x9, 0x4, 0x0, 0xfb, 0x1, 0x7, 0x1, 0x1, 0x4, "", {{{0x9, 0x5, 0x1, 0x2, 0x20, 0x67, 0x69, 0x35}}, [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x80, 0xf, 0x10}}]}}}]}}]}}, &(0x7f0000000100)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x300, 0x7, 0x2, 0x20, 0x10, 0x9}, 0x5, &(0x7f0000000080)={0x5, 0xf, 0x5}, 0x1, [{0x4, &(0x7f00000000c0)=@lang_id={0x4, 0x3, 0x402}}]})
munlock(&(0x7f0000ffc000/0x3000)=nil, 0x3000)

3.029189401s ago: executing program 0 (id=359):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1002, 0x0, 0x3}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x2c0, 0x0, 0x3, 0x0, 0x0}, {[0x3, 0x1c4, 0x7, 0x8f]}, 0x1, 0x0, 0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
r8 = socket$inet(0x2, 0xa, 0x9)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x7})
getpid()
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}})
ioctl$TUNSETIFF(r6, 0x400454ca, 0x0)
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB="040100001a0007000000000000000000fe80000000000000000000000000001be0000002000000000000000000000000ffff0000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001010000002b000000fc0000000000000000938078621f00000000000000000000000000000000b4000000000000020000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000011948390000000000fdffffffffffffff000004008a150000e80a000000000000000000000a000200701000000000000014000e00fe80000000000000000000"], 0x104}}, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00')
pread64(r10, &(0x7f0000000480)=""/14, 0xd, 0x8000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x64, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x64}}, 0x0)

2.971597259s ago: executing program 0 (id=360):
r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000772904202404019957c2010203010902240001000010000904430002317d5500090502020002020000090582020002"], 0x0)
syz_usb_control_io$uac1(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
r1 = userfaultfd(0x80801)
ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100})
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1)
ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000100)={{&(0x7f0000ffe000/0x1000)=nil, 0x1000}})
syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000480)={0x2c, &(0x7f00000002c0)={0x20, 0xb, 0x4, "b4865713"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0)
syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000e40)=ANY=[@ANYBLOB="00036c"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)
syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f00000007c0)={0x2c, &(0x7f0000000680)={0x40, 0x7, 0x4, "292cc4ed"}, 0x0, 0x0, 0x0, 0x0})
syz_usb_control_io$rtl8150(r0, 0x0, 0x0)

2.015880427s ago: executing program 1 (id=361):
getrandom(&(0x7f0000000240)=""/286, 0xffffff9a, 0x0)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) (async)
r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0)
ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x101, 0x2}) (async)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async)
sendto$inet(r1, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10)
syz_open_procfs(0xffffffffffffffff, 0x0) (async)
r2 = socket$inet6(0xa, 0x2, 0x0)
ioctl$sock_SIOCETHTOOL(r2, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000001180)=@ethtool_coalesce={0xf, 0x0, 0x9, 0x6, 0x5, 0xc, 0x0, 0xc0000000, 0x3, 0x32, 0x7fff, 0x7, 0x3, 0xe, 0x5, 0x4, 0xd88, 0x200002, 0x80000000, 0x5, 0x4001ff, 0xfffffff9, 0xa}}) (async)
sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) (async)
setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, 0x0, 0x0)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000004c0)={0x8, 0x0, &(0x7f0000000000)=[@acquire], 0x0, 0x0, 0x0})
pipe(&(0x7f0000000040)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async)
r4 = syz_open_dev$usbfs(&(0x7f0000000000), 0x800000001ff, 0x2)
r5 = dup(r4)
ioctl$USBDEVFS_CONTROL(r5, 0xc0185500, &(0x7f0000000280)={0x23, 0x3, 0x12, 0x6, 0x0, 0x3, 0x0})
sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x2c000010) (async)
read$FUSE(r5, &(0x7f0000000a40)={0x2020, 0x0, 0x0, 0x0, 0x0, <r6=>0x0}, 0x2020)
getpgid(r6) (async)
r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0)
write$cgroup_int(r7, &(0x7f0000000540), 0xfffffdd8) (async)
madvise(&(0x7f0000000000/0x400000)=nil, 0x40001e, 0x15) (async)
r8 = memfd_secret(0x0)
write$binfmt_aout(r8, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/859], 0x35b) (async)
socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000280)) (async)
r9 = socket$xdp(0x2c, 0x3, 0x0)
setsockopt$XDP_UMEM_REG(r9, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) (async)
madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x11)

1.897001201s ago: executing program 1 (id=362):
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x14, 0x0, 0xd25, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000010}, 0x8004)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x22}}, 0x6}, 0x1c)
connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0xd}, 0x1c)
r2 = fcntl$dupfd(r1, 0x0, r1)
sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000e40)=ANY=[], 0x20}}, 0x1)
sendmmsg$inet6(r2, &(0x7f0000000240)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="cd", 0x1}], 0x1}}], 0x4000000000000ec, 0x8001)
getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000540)=""/165, 0xee, 0x1, 0x0}, &(0x7f0000000180)=0x40)
setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f00000000c0)={0xfffffff6}, 0x10)
sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000000101"], 0x1c}}, 0x4000040)

1.853992411s ago: executing program 2 (id=363):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0)
syz_usb_control_io$hid(r0, 0x0, 0x0)
syz_usb_control_io$hid(r0, &(0x7f00000004c0)={0x24, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x22, 0x1d, {[@global=@item_012={0x2, 0x1, 0x9, "0100"}, @global=@item_012={0x2, 0x1, 0x0, "0100"}, @main=@item_4, @local=@item_012={0x2, 0x2, 0x2, "90a0"}, @global=@item_012={0x1, 0x1, 0x8, '8'}, @main=@item_4={0x3, 0x0, 0xb, "c83e2503"}, @local=@item_012={0x2, 0x2, 0x8, "3994"}, @main=@item_4={0x3, 0x0, 0xb, "ce9abc16"}]}}, 0x0}, 0x0)
setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x5}}}, 0x108)

1.807542181s ago: executing program 3 (id=364):
syz_usb_connect(0x3, 0x62, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000fb5d7d086d04c308166b010203010902"], 0x0)
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x101001, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x5, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f00000ce000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x8, 0x0, 0x0)
syz_open_dev$loop(0x0, 0x7, 0xc001)
ioctl$KVM_RUN(r2, 0xae80, 0x0) (fail_nth: 30)

1.007835723s ago: executing program 1 (id=365):
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x60a42, 0x0)
ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'veth1_macvtap\x00', 0x100})
pwritev2(r1, &(0x7f0000000440)=[{&(0x7f00000002c0)="69640b5f251511e28d78", 0xfffffe15}, {&(0x7f0000000340)="18232bbefa55", 0x6}], 0x2, 0xe, 0xff, 0x4)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
userfaultfd(0x80001)
munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000000)={0x1fd, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x51, 0x0, 0x0)
ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000005700)=@vmx={0x0, 0x0, 0x2080, {0x0, 0x2}, {"0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff00"}})
openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0)
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, 0x0)

671.042398ms ago: executing program 1 (id=366):
r0 = getpid()
r1 = syz_pidfd_open(r0, 0x0)
r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00')
read$FUSE(r2, &(0x7f0000000040)={0x2020}, 0x2020)
ioctl$SIOCGETNODEID(r2, 0x89e1, &(0x7f00000000c0)={0x2})
mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0)
mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0)
mount$bind(&(0x7f0000000040)='.\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x2a05004, 0x0)
mount$fuseblk(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x24000, 0x0)
mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0)
setns(r1, 0x24020000)
syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0)

602.403563ms ago: executing program 1 (id=367):
r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000027c0)=ANY=[@ANYBLOB="1201000000000010de280211000000000001090295c4010000000909040000010300000009210000000122050009058103"], 0x0)
mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000)
pipe2(0x0, 0x0)
tee(0xffffffffffffffff, 0xffffffffffffffff, 0x60000000000, 0x0)
ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f0000000100)={{0xd000, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x8, 0x6, 0x40}, {0xffff1000, 0x10000, 0xc, 0x0, 0x2, 0xfc, 0x0, 0x0, 0x4, 0xff, 0x4}, {0x2000, 0xdddd0000, 0xc, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x49, 0x3, 0x0, 0xfc}, {0xeeef0000, 0xcccc0000, 0xa, 0x0, 0x1, 0x0, 0x9, 0x0, 0x8, 0x0, 0x3}, {0x6000, 0xe000, 0xe, 0x0, 0x0, 0x4, 0x0, 0xfd, 0x0, 0x3c, 0x10}, {0x100000, 0x0, 0x0, 0x7a, 0x5, 0x80, 0x2, 0x0, 0x0, 0x6, 0x1}, {0xf6d99000, 0xeeee0000, 0xa, 0x4, 0x0, 0x1, 0x9, 0x20, 0xfc, 0x0, 0x8}, {0x2, 0x6000, 0xc, 0x0, 0x0, 0x7, 0x8, 0x40, 0x26, 0x0, 0x0, 0x6}, {0x80a0000, 0x8cc}, {0xdddd1000}, 0xddf9ffc7, 0x0, 0x0, 0x110, 0x0, 0xa801, 0x54000, [0x80000001, 0x0, 0x8000000001]})
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0)
syz_usb_control_io(r0, 0x0, 0x0)
syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000200)=ANY=[@ANYBLOB="200b4000000028b1"], 0x0, 0x0, 0x0, 0x0}, 0x0)
r1 = socket$inet6_icmp(0xa, 0x2, 0x3a)
ioctl$XFS_IOC_INUMBERS(r1, 0x80405880, 0x0)
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000080))
r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/ipc\x00')
ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f00000000c0))

419.921693ms ago: executing program 1 (id=368):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1002, 0x0, 0x3}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x2c0, 0x0, 0x3, 0x0, 0x0}, {[0x3, 0x1c4, 0x7, 0x8f]}, 0x1, 0x0, 0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
r8 = socket$inet(0x2, 0xa, 0x9)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x7})
getpid()
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00')
pread64(r10, &(0x7f0000000480)=""/14, 0xd, 0x8000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x64, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x64}}, 0x0)

419.588373ms ago: executing program 32 (id=368):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000000400)={@remote, 0x2, 0x0, 0x1, 0x0, 0x3}, 0x20)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4)
r2 = socket$inet6(0xa, 0x1, 0x0)
setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in=@rand_addr=0x64010100, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e23, 0x0, 0xffff, 0x8000, 0x2}, {0x0, 0x1, 0x0, 0x1000000000000, 0x5, 0xfffffffffffffffa, 0x0, 0xd}, {0x0, 0x0, 0x0, 0x2}, 0x8, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0xa, @in6=@dev={0xfe, 0x80, '\x00', 0x30}, 0x3507, 0x4, 0x1, 0x0, 0x0, 0x7c, 0xfffffffe}}, 0xe8)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c)
setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1002, 0x0, 0x3}, 0x20)
syz_open_procfs(0x0, &(0x7f0000000000)='net/anycast6\x00')
ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(0xffffffffffffffff, 0x4058587a, &(0x7f0000000340)={{0xffffffffffffffff, 0x0, 0x2c0, 0x0, 0x3, 0x0, 0x0}, {[0x3, 0x1c4, 0x7, 0x8f]}, 0x1, 0x0, 0x0})
sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff)
r4 = socket$inet6_tcp(0xa, 0x1, 0x0)
r5 = dup(r4)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x40241, 0x0)
r7 = socket$inet(0x2, 0x1, 0x0)
r8 = socket$inet(0x2, 0xa, 0x9)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e23, @local}, {0x2, 0x4e24, @loopback}, {0x2, 0x4e23, @broadcast}, 0x280, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x9, 0x7})
getpid()
ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000000080)={'lo\x00', {0x2, 0x4e23, @local}})
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201})
r9 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r9, 0x0, 0x0)
r10 = syz_open_procfs(0x0, &(0x7f0000000280)='schedstat\x00')
pread64(r10, &(0x7f0000000480)=""/14, 0xd, 0x8000)
ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000300)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}})
r11 = socket$nl_generic(0x10, 0x3, 0x10)
r12 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)={0x64, r12, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x3c, 0x8, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x8, 0x9, 0x0, 0x1, [{0x4}]}]}]}]}, 0x64}}, 0x0)

190.918372ms ago: executing program 3 (id=370):
r0 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00')
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000080), &(0x7f00000000c0), 0x0) (async, rerun: 32)
r1 = openat$binfmt(0xffffffffffffff9c, r0, 0x42, 0x1ff) (rerun: 32)
close(r1) (async)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000100), &(0x7f0000000140), 0x0) (async)
r2 = openat$binfmt(0xffffffffffffff9c, r0, 0x2, 0x0)
write(r2, &(0x7f0000000180)="01010101", 0x4)
close(r2) (async)
r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x80880, 0x4) (async, rerun: 64)
r4 = syz_create_resource$binfmt(&(0x7f00000003c0)='./file1\x00') (rerun: 64)
execveat$binfmt(r3, r4, &(0x7f00000001c0), &(0x7f0000000400), 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) (async)
sendmsg$ETHTOOL_MSG_PAUSE_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) (async, rerun: 32)
mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) (async, rerun: 32)
timerfd_settime(0xffffffffffffffff, 0x2, &(0x7f0000000140)={{}, {0x0, 0x3938700}}, 0x0)
close(r5) (async)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) (async)
read$FUSE(r5, &(0x7f0000000640)={0x2020, 0x0, <r6=>0x0}, 0x2020)
write$FUSE_INIT(r5, &(0x7f0000002680)={0x50, 0x0, r6, {0x7, 0x2d, 0x8, 0x0, 0x111, 0x1, 0x0, 0x8001, 0x0, 0x0, 0x10, 0x401}}, 0x50) (async, rerun: 64)
fchmodat(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x1ff) (rerun: 64)
execveat$binfmt(0xffffffffffffff9c, r0, &(0x7f0000000600)={[&(0x7f0000000500)='\\\x00']}, &(0x7f0000000380)={[&(0x7f0000000200)='\x00', &(0x7f0000000440)='(\x00', &(0x7f0000000480)='\x85$()\x00', &(0x7f00000004c0)='=)%\x00', &(0x7f00000005c0)='\x00\x00\a[\x98:\xf7\xed\x00\x03\xc1\n}wS\xc4\xd8\x8d)\x0ft\xaeP\xf8\xe3\xdf\xb8\xeee\x95\x90h\xab\x84\x88\x99+\xcb\x97:\x06\n\xcd\x90\xc5\xa7w\xb5\x05&-\xe6`', &(0x7f0000000540)='*-($-.:\x00', &(0x7f0000000580)]}, 0x0)

173.975539ms ago: executing program 3 (id=371):
setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc)
r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$RTC_ALM_READ(r0, 0x40187014, &(0x7f0000000040))
write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000080)={'syz1\x00', {0x3fe, 0x3, 0x4}, 0x4c, [0xd4, 0x5, 0x9, 0x8a4, 0x2, 0x2, 0x7fffffff, 0x80000001, 0x5, 0x1, 0x105, 0x403c6, 0xa, 0x6, 0xf70, 0x3, 0xe7, 0x7, 0x401, 0xbc5d, 0x0, 0x1, 0x8, 0xffff, 0x2, 0xb, 0x10, 0x20000000, 0x15098855, 0x6, 0x2, 0xfffffffb, 0x6, 0xc, 0xfffffff7, 0x4, 0xe79, 0x7, 0x1ff4, 0x1, 0x1, 0x80000000, 0x401, 0x9, 0xbdc7, 0xb, 0x1, 0x9, 0x1, 0x1, 0xa, 0x2, 0x5, 0x9, 0x5, 0x9, 0x0, 0x3a26, 0x1000, 0x57f5, 0x2, 0x6, 0x7ff, 0xb8547353], [0x80000000, 0xffffffff, 0x4, 0x5, 0x7fffffff, 0x1, 0x553, 0x7, 0x2, 0xfffffffc, 0x8, 0x40000c, 0x36, 0xa, 0x6, 0x2d, 0x9, 0x98, 0x8, 0x0, 0xa4, 0x4, 0x99d, 0x8, 0x0, 0x400d, 0x5, 0x0, 0x6e38, 0x6, 0x8, 0x1, 0x3, 0x0, 0x2, 0x7, 0x4, 0xd, 0x80000009, 0xfff, 0x4, 0x0, 0x40, 0x1, 0x8, 0x2, 0x8, 0x0, 0x34f1, 0x1fc, 0x4, 0x1b2c5a17, 0x2, 0x9, 0x7, 0x0, 0x2, 0x1, 0x9, 0x6, 0xac, 0x5, 0x54, 0xcfb9], [0x5, 0xdb8, 0x9, 0x6, 0x2, 0x6, 0x5, 0x5, 0x3, 0x5, 0xfffffffd, 0xc8d0, 0x34, 0x9a45, 0x0, 0xee40000, 0x1, 0x1, 0x43, 0x69d, 0x8, 0xffff, 0xfffffffe, 0x0, 0x8, 0x2, 0x4, 0x800, 0x7, 0x9, 0x1, 0x0, 0x1, 0xfffffffe, 0x6, 0x6, 0x9, 0x8c0, 0x9, 0x8000002, 0x9, 0x8, 0x6, 0x5, 0x81, 0xf7b4, 0xffffff20, 0x55f2, 0x9, 0xfffffffd, 0x7f, 0x9, 0x7ffc, 0x40, 0x3, 0x2, 0xece9165b, 0x6, 0x2, 0xffffff00, 0xda15, 0x7f, 0x3, 0x10], [0x0, 0x896, 0x8, 0x246d, 0x6, 0xfe, 0xfffff410, 0xd, 0x7ff, 0x606, 0x4, 0x0, 0x80000001, 0x2, 0x8000000b, 0x2, 0x7, 0x1, 0x80000000, 0x401, 0x7ff, 0x3ff, 0x0, 0x2, 0x9, 0x100, 0x2, 0xec9b, 0x61c8, 0x7, 0x0, 0x101, 0xff, 0x7, 0x9, 0x5, 0x7, 0x101, 0x9, 0x3000000, 0xe, 0x4000006, 0x7, 0x1, 0x7, 0x4f, 0x4, 0x100009, 0x100, 0x3, 0x3c, 0x7, 0x1000, 0xfffffffe, 0x15, 0x800a, 0x5, 0x81, 0x5, 0x7, 0xfff7fffc, 0x4, 0x6, 0xeff]}, 0x45c)
openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0)
r1 = accept4$tipc(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x0)
clock_gettime(0x0, &(0x7f00000061c0))
syz_usb_connect$uac1(0x5, 0x81, &(0x7f0000006640)=ANY=[@ANYBLOB="12011003b51757f28dcab12a40000102030109026f0003010200150904000000010100000a24013a071100020102072408030600de09040100000102000009040101010102000009050109ff030402070725010c07020009040200000102000009040201010102000008240201ad03881009058209000404077f0725015c0d3800"], &(0x7f00000069c0)={0xa, &(0x7f0000006740)={0xa, 0x6, 0x300, 0xe, 0x9, 0x6a, 0x20, 0x27}, 0x5, &(0x7f0000006780)={0x5, 0xf, 0x5}})
r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00')
write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0)
sendfile(0xffffffffffffffff, r2, 0x0, 0xfffffffffffffbff)
syz_genetlink_get_family_id$ethtool(&(0x7f0000006a80), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, 0x0, 0x48800)
sendmsg$tipc(r1, 0x0, 0x200468d0)
sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x8006)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000007f80)={'wlan1\x00'})
sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, 0x0, 0x4000840)
ptrace$setregset(0x4205, 0x0, 0x1, 0x0)
syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff)
setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0)
sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, 0x0, 0x4040004)
syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b240404020904", @ANYBLOB="06c9a27685"], 0x0)

37.485339ms ago: executing program 2 (id=372):
r0 = syz_usb_connect$printer(0x0, 0x2d, &(0x7f0000000640)=ANY=[@ANYBLOB="12010000090000402505a8a440000102030109021b00010100000009040000020701010009050102"], 0x0)
syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000000)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001180)={0x20, 0x0, 0x1}})
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0)
write$UHID_INPUT(r1, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0)
timerfd_settime(0xffffffffffffffff, 0x1, &(0x7f0000000100)={{}, {0x0, 0x3938700}}, 0x0)
syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="120100009e173610ef171e7206de0102030109021200010000000009040000000206"], 0x0)
syz_open_dev$char_usb(0xc, 0xb4, 0x0)

0s ago: executing program 4 (id=369):
r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000000000406a05440000000000000109022466bbf85210020904000b010300020009a321000033012205000905810300000c09d5c4f297576f"], 0x0)
syz_usb_control_io(r0, 0x0, 0x0) (async)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
r3 = dup(r2)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2)
syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0)
openat$selinux_context(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) (async)
r5 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="940000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff02000000040000000000000000000114000400000000f7000000000000ffffac1e00010800074000000001"], 0x94}}, 0x0) (async)
r6 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$IPCTNL_MSG_CT_GET(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0xac, 0x0, 0x1, 0x505, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @remote}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_DST={0x18, 0xd, 0x0, 0x1, [@CTA_NAT_V6_MINIP={0x14, 0x4, @mcast1}]}]}, 0xac}}, 0x0) (async)
ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000006c0)={0x0, <r7=>0x0, "f046269f52672cafe119f7b47671a39dd2fa8aaf3de02f6f7c4038cabda48f1e8b561c98e6b0d9c3f032e40675d2caa4d859d18e6a81faac75fa166b6411eb7f56cdef01a5a81215e11b786f373516f1400276b9c0140c74513e1fcb2580b78c3ba12bed62cc21660fe311cd32b3283176a9e92556596a0c18720a36a9f84c3af080d26a0959d82afb68f3fa5a2194496d403f4971be1360c92eb08114aabaea3927ca6b6d6025790c080c4144057847098aef5bd45e54e193bd69588fd355904b8a4c48ea8198ea8ec33eb86efd6ef210f9e134bd6361d7906e591347192cc09431d4661be5e2e2cd394bd6dcdcf57a90f00c37983b6bdb647fd359f45ac4e3", "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"})
ioctl$BTRFS_IOC_TREE_SEARCH_V2(r5, 0xc0709411, &(0x7f00000003c0)={{r7, 0xe, 0xffff, 0x9, 0x1, 0x120000, 0x1, 0xffffffff, 0x5, 0x5f7, 0x5, 0x2, 0x7, 0x7fffffff, 0xff}, 0x30, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) (async)
syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0)
ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0x107000})
seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000080)=[{0x6, 0x5, 0x3, 0x41}]})
ioctl$KVM_NMI(r4, 0xae9a) (async)
r8 = syz_open_dev$loop(&(0x7f0000000240), 0xffffffff7ffffffd, 0x1ea1e2) (async)
syz_usb_connect$uac3(0x6, 0x110, &(0x7f0000000480)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0xff, 0x499, 0x1030, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xfe, 0x3, 0x1, 0x5, 0x0, 0x3, {0x8, 0xb, 0x0, 0x1, 0x1, 0x20, 0x30, 0x8}, {{{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xb, 0x13, 0x3}, [@power_domain={0x9, 0x24, 0x10, 0x2, 0x6, 0x8, 0xb}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@as_header={0x17, 0x24, 0x1, 0x10, 0x4, 0x9, 0x1001, 0x0, 0x6, 0x6}, @format_type_i_continuous={0x9, 0x24, 0x2, 0x1, 0x8, 0x2, 0x7, 0x2, "b3"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x4, 0x4}, @format_type_i_continuous={0xc, 0x24, 0x2, 0x1, 0x40, 0x2, 0x4, 0x2, "d1e182", "cd"}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x3, 0x7}]}, {{0x9, 0x5, 0x1, 0x9, 0x40, 0xec, 0x3, 0x3, {0xa, 0x25, 0x25, 0x10001, 0x8, 0xfff8}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {[@format_type_i_discrete={0x10, 0x24, 0x2, 0x1, 0x4a, 0x3, 0x8, 0x7f, "afeb77d8f0a70510"}, @format_type_i_continuous={0xa, 0x24, 0x2, 0x1, 0xb, 0x3, 0x4, 0x7f, "", "ca8b"}, @as_header={0x17, 0x24, 0x1, 0x3, 0xff, 0x9, 0x2, 0xd, 0xfd, 0x3, 0x1}, @format_type_ii_ext={0xa, 0x24, 0x2, 0x2, 0x7, 0xfffe, 0x5, 0x7e}, @format_type_i_descriptor={0x6, 0x24, 0x2, 0x1, 0x2, 0x2}, @format_type_i_continuous={0xe, 0x24, 0x2, 0x1, 0xff, 0x1, 0x7, 0x7, "c00585", "874c4b"}]}, {{0x9, 0x5, 0x82, 0x9, 0x20, 0x6, 0x9, 0x8, {0xa, 0x25, 0x25, 0x9, 0x0, 0x3}}}}}}}}]}}, &(0x7f0000001980)={0xa, &(0x7f0000000340)={0xa, 0x6, 0x200, 0xe, 0x40, 0x2, 0x8, 0x5}, 0xfffffd93, &(0x7f00000005c0)={0x5, 0xf, 0x3e, 0x4, [@ss_cap={0xa, 0x10, 0x3, 0x0, 0x2, 0x3, 0xfe, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x1, "de6877cb2d362de67e21492b4a3f6667"}, @ext_cap={0x7, 0x10, 0x2, 0x15, 0x4, 0x4}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "bdffc0be0395409b8408aba43b11c3ee"}]}, 0x6, [{0x78, &(0x7f00000016c0)=ANY=[@ANYBLOB="7803099d011a86d79bad8f9a92d18afa606d72e624c489bae0b4742d3ea90d8e04e1480e02b995d833f01233bb8fb9fd5aaae8162e16f8e0266cbee86d62868898f459eb70a4f70adbf0b918a66b7da3c59fe6bac7e0a1f56634044eeb4d8b720d9380c2b43a02466f60f0a4c281b8f0c44cc71d0a"]}, {0x4, &(0x7f0000001740)=@lang_id={0x4, 0x3, 0x423}}, {0x83, &(0x7f0000001780)=@string={0x83, 0x3, "6d5b7e998cb99ef0098275f15bfbdf387cb4d2a2ad8d9699d0b316dfe3550f69443e60ad4286568f80743b9bb55e0b0b32485c91070009cf8623207927e88c686b29183381cd4ebc30b85406d5013c4cf7e32e894a760787d5023453bdbcadd35887df79e3170ad50b77e43354ff1ec1afe8d6aa287b5328a4c192d7e0cf7e2e68"}}, {0x4, &(0x7f0000001840)=@lang_id={0x4, 0x3, 0x411}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x3c0a}}, {0x98, &(0x7f0000001a40)=ANY=[@ANYBLOB="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"]}]}) (async)
quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000600, 0x0, &(0x7f0000001bc0)={0x5, 0x6, 0x0, 0x6})
r9 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf)
ioctl$LOOP_CONFIGURE(r8, 0x4c0a, &(0x7f0000000080)={r9, 0x0, {0x0, 0x0, 0x0, 0x4, 0x4000000000000ffd, 0x0, 0x0, 0x1d, 0xc, "faf98357e5a1149989fc8dbec3bd02b82a128bbad0099cebdc25f5abb534464c516bdd8a0f3500", "32d8cc26f7061a74df2cfc06c89f3d9e234b30c50997d3bef409ff2176ff7bfe55cd4a5d83cd4a524bd3ffe70c7f3f800b2f7b6aa54cc50a1fcaed1e831fa79a", "715237641a8ccf162e43ac61f700000000009b4100", [0x9, 0xa]}})
syz_usb_disconnect(r0) (async)
unshare(0x2a020480) (async)
openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async)
ioctl$RTC_WKALM_SET(r9, 0x4028700f, &(0x7f0000001a00)={0x2, 0x0, {0x1, 0x5, 0x0, 0x18, 0x4, 0x5c, 0x4, 0x3d}}) (async)
ioctl$LOOP_CLR_FD(r8, 0x4c01)
writev(r8, &(0x7f0000000200)=[{&(0x7f0000000380)="21c92753156ff23289", 0x9}], 0x1) (async)
ioctl$KVM_RUN(r4, 0xae80, 0x0)

kernel console output (not intermixed with test programs):

][  T540] usb 4-1: unit 9 not found!
[   58.791610][  T540] usb 4-1: USB disconnect, device number 25
[   58.871257][  T905] Falling back ldisc for ttyS3.
[   58.936107][  T331] usb 3-1: new high-speed USB device number 22 using dummy_hcd
[   58.943749][  T366] usb 1-1: new high-speed USB device number 20 using dummy_hcd
[   58.967019][  T331] usb 3-1: device descriptor read/8, error -71
[   59.076113][  T366] usb 1-1: device descriptor read/64, error -71
[   59.097128][  T331] usb 3-1: device descriptor read/8, error -71
[   59.196083][  T354] usb 2-1: new high-speed USB device number 25 using dummy_hcd
[   59.206175][  T331] usb usb3-port1: unable to enumerate USB device
[   59.316285][  T366] usb 1-1: device descriptor read/64, error -71
[   59.347265][  T354] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   59.357071][  T354] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   59.366745][  T354] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   59.380905][  T354] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   59.390078][  T354] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.398091][  T354] usb 2-1: Product: syz
[   59.402230][  T354] usb 2-1: Manufacturer: syz
[   59.406835][  T354] usb 2-1: SerialNumber: syz
[   59.413174][  T354] hub 2-1:1.0: bad descriptor, ignoring hub
[   59.419400][  T354] hub 2-1:1.0: probe with driver hub failed with error -5
[   59.506438][  T331] usb 4-1: new high-speed USB device number 26 using dummy_hcd
[   59.515967][   T36] kauditd_printk_skb: 3 callbacks suppressed
[   59.515984][   T36] audit: type=1400 audit(1772418386.699:263): avc:  denied  { read write } for  pid=912 comm="syz.2.187" name="usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.545737][   T36] audit: type=1400 audit(1772418386.699:264): avc:  denied  { open } for  pid=912 comm="syz.2.187" path="/dev/usbmon0" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1
[   59.576424][  T366] usb 1-1: new high-speed USB device number 21 using dummy_hcd
[   59.613873][  T354] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 25 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   59.666084][  T331] usb 4-1: Using ep0 maxpacket: 8
[   59.672138][  T331] usb 4-1: config 0 has no interfaces?
[   59.679077][  T331] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   59.688161][  T331] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   59.696181][  T331] usb 4-1: Product: syz
[   59.700333][  T331] usb 4-1: Manufacturer: syz
[   59.704910][  T331] usb 4-1: SerialNumber: syz
[   59.709533][  T366] usb 1-1: device descriptor read/64, error -71
[   59.716362][  T331] usb 4-1: config 0 descriptor??
[   59.815728][  T909] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   59.824254][  T909] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   59.928649][  T911] FAULT_INJECTION: forcing a failure.
[   59.928649][  T911] name failslab, interval 1, probability 0, space 0, times 0
[   59.941741][  T911] CPU: 0 UID: 0 PID: 911 Comm: syz.3.186 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   59.941774][  T911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   59.941786][  T911] Call Trace:
[   59.941793][  T911]  <TASK>
[   59.941801][  T911]  __dump_stack+0x21/0x30
[   59.941829][  T911]  dump_stack_lvl+0x140/0x1c0
[   59.941852][  T911]  ? __cfi_dump_stack_lvl+0x10/0x10
[   59.941876][  T911]  dump_stack+0x19/0x20
[   59.941897][  T911]  should_fail_ex+0x3d7/0x530
[   59.941917][  T911]  should_failslab+0xac/0x100
[   59.941943][  T911]  kmem_cache_alloc_noprof+0x42/0x410
[   59.941966][  T911]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   59.941991][  T911]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   59.942016][  T911]  ? mutex_unlock+0x90/0x240
[   59.942040][  T911]  kvm_mmu_topup_memory_cache+0x24/0x30
[   59.942064][  T911]  kvm_mmu_load+0xa2/0x2890
[   59.942086][  T911]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   59.942109][  T911]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   59.942129][  T911]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   59.942151][  T911]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   59.942179][  T911]  vcpu_run+0x4dad/0x7840
[   59.942211][  T911]  ? signal_pending+0xc0/0xc0
[   59.942232][  T911]  ? __kasan_check_write+0x18/0x20
[   59.942253][  T911]  ? xfd_validate_state+0x68/0x140
[   59.942276][  T911]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   59.942295][  T911]  ? __kasan_check_write+0x18/0x20
[   59.942316][  T911]  ? fpregs_mark_activate+0x68/0x160
[   59.942335][  T911]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   59.942354][  T911]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   59.942373][  T911]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   59.942396][  T911]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   59.942418][  T911]  ? kstrtoull+0x13b/0x1e0
[   59.942435][  T911]  ? kstrtouint+0x78/0xf0
[   59.942452][  T911]  ? ioctl_has_perm+0x1bc/0x500
[   59.942471][  T911]  ? __asan_memcpy+0x5a/0x80
[   59.942493][  T911]  ? ioctl_has_perm+0x408/0x500
[   59.942513][  T911]  ? has_cap_mac_admin+0xd0/0xd0
[   59.942532][  T911]  ? __kasan_check_write+0x18/0x20
[   59.942553][  T911]  ? mutex_lock_killable+0x97/0x1d0
[   59.942575][  T911]  ? __cfi_mutex_lock_killable+0x10/0x10
[   59.942599][  T911]  ? proc_fail_nth_write+0x184/0x220
[   59.942620][  T911]  kvm_vcpu_ioctl+0xa48/0x1000
[   59.942657][  T911]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   59.942683][  T911]  ? __cfi_vfs_write+0x10/0x10
[   59.942705][  T911]  ? __kasan_check_write+0x18/0x20
[   59.942726][  T911]  ? mutex_unlock+0x90/0x240
[   59.942747][  T911]  ? __cfi_mutex_unlock+0x10/0x10
[   59.942773][  T911]  ? __fget_files+0x2c5/0x340
[   59.942798][  T911]  ? __fget_files+0x2c5/0x340
[   59.942824][  T911]  ? bpf_lsm_file_ioctl+0xd/0x20
[   59.942842][  T911]  ? security_file_ioctl+0x3e/0x110
[   59.942864][  T911]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   59.942889][  T911]  __se_sys_ioctl+0x135/0x1b0
[   59.942915][  T911]  __x64_sys_ioctl+0x7f/0xa0
[   59.942940][  T911]  x64_sys_call+0x1878/0x2ee0
[   59.942965][  T911]  do_syscall_64+0x57/0xf0
[   59.942983][  T911]  ? clear_bhb_loop+0x50/0xa0
[   59.943001][  T911]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   59.943029][  T911] RIP: 0033:0x7f67cb59c799
[   59.943046][  T911] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   59.943063][  T911] RSP: 002b:00007f67cc3c8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   59.943084][  T911] RAX: ffffffffffffffda RBX: 00007f67cb815fa0 RCX: 00007f67cb59c799
[   59.943099][  T911] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   59.943112][  T911] RBP: 00007f67cc3c8090 R08: 0000000000000000 R09: 0000000000000000
[   59.943124][  T911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   59.943135][  T911] R13: 00007f67cb816038 R14: 00007f67cb815fa0 R15: 00007fff3c5b0918
[   59.943153][  T911]  </TASK>
[   60.323316][  T366] usb 1-1: device descriptor read/64, error -71
[   60.346353][  T331] usb 2-1: USB disconnect, device number 25
[   60.353372][  T331] usblp0: removed
[   60.367350][   T55] usb 4-1: USB disconnect, device number 26
[   60.436307][  T366] usb usb1-port1: attempt power cycle
[   60.486627][  T922] netlink: 20 bytes leftover after parsing attributes in process `syz.2.189'.
[   60.679521][  T926] 9pnet: p9_errstr2errno: server reported unknown error 0x0000000000
[   60.776121][  T366] usb 1-1: new high-speed USB device number 22 using dummy_hcd
[   60.797212][  T366] usb 1-1: device descriptor read/8, error -71
[   60.927080][  T366] usb 1-1: device descriptor read/8, error -71
[   60.939687][   T36] audit: type=1400 audit(1772418388.129:265): avc:  denied  { read } for  pid=936 comm="syz.1.196" name="/" dev="configfs" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   60.961583][   T55] usb 3-1: new high-speed USB device number 23 using dummy_hcd
[   60.969818][   T36] audit: type=1400 audit(1772418388.129:266): avc:  denied  { open } for  pid=936 comm="syz.1.196" path="/" dev="configfs" ino=2426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[   61.091457][  T940] netlink: 'syz.1.197': attribute type 27 has an invalid length.
[   61.121941][  T940] bridge0: port 2(bridge_slave_1) entered disabled state
[   61.129332][  T940] bridge0: port 1(bridge_slave_0) entered disabled state
[   61.156125][   T55] usb 3-1: Using ep0 maxpacket: 16
[   61.165654][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   61.166095][  T366] usb 1-1: new high-speed USB device number 23 using dummy_hcd
[   61.185452][   T55] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   61.204795][   T55] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   61.207058][  T366] usb 1-1: device descriptor read/8, error -71
[   61.217721][   T55] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   61.250182][   T55] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   61.268036][   T55] usb 3-1: config 0 descriptor??
[   61.333593][  T959] netlink: 20 bytes leftover after parsing attributes in process `syz.1.199'.
[   61.357063][  T366] usb 1-1: device descriptor read/8, error -71
[   61.433564][  T961] fuse: Bad value for 'fd'
[   61.466195][  T366] usb usb1-port1: unable to enumerate USB device
[   61.676671][   T55] usbhid 3-1:0.0: can't add hid device: -71
[   61.682690][   T55] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   61.690492][   T31] usb 2-1: new high-speed USB device number 26 using dummy_hcd
[   61.699310][   T55] usb 3-1: USB disconnect, device number 23
[   61.796737][  T968] 9pnet_fd: Insufficient options for proto=fd
[   61.836079][   T31] usb 2-1: device descriptor read/64, error -71
[   61.936068][  T366] usb 1-1: new high-speed USB device number 24 using dummy_hcd
[   62.036076][  T949] usb 4-1: new high-speed USB device number 27 using dummy_hcd
[   62.076070][   T31] usb 2-1: device descriptor read/64, error -71
[   62.087062][  T366] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   62.096773][  T366] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   62.106422][  T366] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   62.120739][  T366] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   62.129810][  T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.137895][  T366] usb 1-1: Product: syz
[   62.142057][  T366] usb 1-1: Manufacturer: syz
[   62.146675][  T366] usb 1-1: SerialNumber: syz
[   62.152514][  T366] hub 1-1:1.0: bad descriptor, ignoring hub
[   62.158469][  T366] hub 1-1:1.0: probe with driver hub failed with error -5
[   62.186154][  T949] usb 4-1: Using ep0 maxpacket: 16
[   62.195182][  T949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   62.206404][  T949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   62.216198][  T949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   62.229117][  T949] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   62.238204][  T949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   62.246962][  T949] usb 4-1: config 0 descriptor??
[   62.316066][   T31] usb 2-1: new high-speed USB device number 27 using dummy_hcd
[   62.358006][  T366] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 24 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   62.426161][  T955] usb 3-1: new high-speed USB device number 24 using dummy_hcd
[   62.456071][   T31] usb 2-1: device descriptor read/64, error -71
[   62.560081][  T966] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   62.568733][  T966] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   62.576697][  T955] usb 3-1: Using ep0 maxpacket: 8
[   62.583165][  T955] usb 3-1: config 0 has no interfaces?
[   62.590382][  T955] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   62.599758][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   62.607955][  T955] usb 3-1: Product: syz
[   62.612243][  T955] usb 3-1: Manufacturer: syz
[   62.617157][  T955] usb 3-1: SerialNumber: syz
[   62.626310][  T955] usb 3-1: config 0 descriptor??
[   62.657448][  T949] microsoft 0003:045E:07DA.0007: unknown main item tag 0x0
[   62.664936][  T949] microsoft 0003:045E:07DA.0007: ignoring exceeding usage max
[   62.673746][  T949] microsoft 0003:045E:07DA.0007: item fetching failed at offset 30/34
[   62.682822][  T949] microsoft 0003:045E:07DA.0007: parse failed
[   62.689181][  T949] microsoft 0003:045E:07DA.0007: probe with driver microsoft failed with error -22
[   62.698738][   T31] usb 2-1: device descriptor read/64, error -71
[   62.806322][   T31] usb usb2-port1: attempt power cycle
[   62.836354][  T366] usb 1-1: USB disconnect, device number 24
[   62.837918][  T970] FAULT_INJECTION: forcing a failure.
[   62.837918][  T970] name failslab, interval 1, probability 0, space 0, times 0
[   62.844696][  T366] usblp0: removed
[   62.858129][  T970] CPU: 1 UID: 0 PID: 970 Comm: syz.2.204 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   62.858171][  T970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   62.858183][  T970] Call Trace:
[   62.858189][  T970]  <TASK>
[   62.858196][  T970]  __dump_stack+0x21/0x30
[   62.858223][  T970]  dump_stack_lvl+0x140/0x1c0
[   62.858244][  T970]  ? __cfi_dump_stack_lvl+0x10/0x10
[   62.858267][  T970]  dump_stack+0x19/0x20
[   62.858287][  T970]  should_fail_ex+0x3d7/0x530
[   62.858306][  T970]  should_failslab+0xac/0x100
[   62.858330][  T970]  kmem_cache_alloc_noprof+0x42/0x410
[   62.858352][  T970]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   62.858376][  T970]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   62.858400][  T970]  ? mutex_unlock+0x90/0x240
[   62.858422][  T970]  kvm_mmu_topup_memory_cache+0x24/0x30
[   62.858444][  T970]  kvm_mmu_load+0xa2/0x2890
[   62.858464][  T970]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   62.858486][  T970]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   62.858505][  T970]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   62.858526][  T970]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   62.858552][  T970]  vcpu_run+0x4dad/0x7840
[   62.858584][  T970]  ? signal_pending+0xc0/0xc0
[   62.858603][  T970]  ? __kasan_check_write+0x18/0x20
[   62.858622][  T970]  ? xfd_validate_state+0x68/0x140
[   62.858642][  T970]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   62.858660][  T970]  ? __kasan_check_write+0x18/0x20
[   62.858680][  T970]  ? fpregs_mark_activate+0x68/0x160
[   62.858698][  T970]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   62.858718][  T970]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   62.858742][  T970]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   62.858763][  T970]  ? kstrtoull+0x13b/0x1e0
[   62.858779][  T970]  ? kstrtouint+0x78/0xf0
[   62.858795][  T970]  ? ioctl_has_perm+0x1bc/0x500
[   62.858813][  T970]  ? __asan_memcpy+0x5a/0x80
[   62.858834][  T970]  ? ioctl_has_perm+0x408/0x500
[   62.858851][  T970]  ? has_cap_mac_admin+0xd0/0xd0
[   62.858869][  T970]  ? __kasan_check_write+0x18/0x20
[   62.858889][  T970]  ? mutex_lock_killable+0x97/0x1d0
[   62.858911][  T970]  ? __cfi_mutex_lock_killable+0x10/0x10
[   62.858932][  T970]  ? proc_fail_nth_write+0x184/0x220
[   62.858951][  T970]  kvm_vcpu_ioctl+0xa48/0x1000
[   62.858977][  T970]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   62.859001][  T970]  ? __cfi_vfs_write+0x10/0x10
[   62.859028][  T970]  ? __kasan_check_write+0x18/0x20
[   62.859048][  T970]  ? mutex_unlock+0x90/0x240
[   62.859068][  T970]  ? __cfi_mutex_unlock+0x10/0x10
[   62.859088][  T970]  ? __fget_files+0x2c5/0x340
[   62.859112][  T970]  ? __fget_files+0x2c5/0x340
[   62.859135][  T970]  ? bpf_lsm_file_ioctl+0xd/0x20
[   62.859151][  T970]  ? security_file_ioctl+0x3e/0x110
[   62.859169][  T970]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   62.859193][  T970]  __se_sys_ioctl+0x135/0x1b0
[   62.859217][  T970]  __x64_sys_ioctl+0x7f/0xa0
[   62.859240][  T970]  x64_sys_call+0x1878/0x2ee0
[   62.859263][  T970]  do_syscall_64+0x57/0xf0
[   62.859279][  T970]  ? clear_bhb_loop+0x50/0xa0
[   62.859297][  T970]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   62.859323][  T970] RIP: 0033:0x7f888259c799
[   62.859340][  T970] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   62.859356][  T970] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   62.859376][  T970] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   62.859391][  T970] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   62.859402][  T970] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   62.859414][  T970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   62.859426][  T970] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   62.859442][  T970]  </TASK>
[   62.862510][  T949] usb 4-1: USB disconnect, device number 27
[   63.248318][  T366] usb 3-1: USB disconnect, device number 24
[   63.395066][   T36] audit: type=1400 audit(1772418390.579:267): avc:  denied  { create } for  pid=974 comm="syz.3.206" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1
[   63.405443][  T975] VFS: Mount too revealing
[   63.445831][   T36] audit: type=1400 audit(1772418390.589:268): avc:  denied  { sys_admin } for  pid=974 comm="syz.3.206" capability=21  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1
[   63.496121][   T31] usb 2-1: new high-speed USB device number 28 using dummy_hcd
[   63.517076][   T31] usb 2-1: device descriptor read/8, error -71
[   63.647139][   T31] usb 2-1: device descriptor read/8, error -71
[   63.655570][  T981] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.662735][  T981] bridge0: port 1(bridge_slave_0) entered disabled state
[   63.669934][  T981] bridge_slave_0: entered allmulticast mode
[   63.676443][  T981] bridge_slave_0: entered promiscuous mode
[   63.682817][  T981] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.689883][  T981] bridge0: port 2(bridge_slave_1) entered disabled state
[   63.696974][  T981] bridge_slave_1: entered allmulticast mode
[   63.703186][  T981] bridge_slave_1: entered promiscuous mode
[   63.716242][  T354] usb 1-1: new high-speed USB device number 25 using dummy_hcd
[   63.744378][  T981] bridge0: port 2(bridge_slave_1) entered blocking state
[   63.751438][  T981] bridge0: port 2(bridge_slave_1) entered forwarding state
[   63.758746][  T981] bridge0: port 1(bridge_slave_0) entered blocking state
[   63.765857][  T981] bridge0: port 1(bridge_slave_0) entered forwarding state
[   63.790166][   T36] audit: type=1400 audit(1772418390.969:269): avc:  denied  { bind } for  pid=991 comm="syz.2.209" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[   63.814619][   T36] audit: type=1400 audit(1772418390.979:270): avc:  denied  { mounton } for  pid=991 comm="syz.2.209" path="/57/file0" dev="tmpfs" ino=329 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1
[   63.849399][  T981] veth0_vlan: entered promiscuous mode
[   63.860448][  T981] veth1_macvtap: entered promiscuous mode
[   63.878656][   T36] audit: type=1400 audit(1772418391.069:271): avc:  denied  { mounton } for  pid=981 comm="syz-executor" path="/root/syzkaller.FtIadn/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1
[   63.905950][   T31] usb 2-1: new high-speed USB device number 29 using dummy_hcd
[   63.914665][  T354] usb 1-1: config 0 has more interface descriptors, than it declares in bNumInterfaces, ignoring interface number: 0
[   63.928157][  T354] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   63.931792][  T995] netlink: 20 bytes leftover after parsing attributes in process `syz.3.208'.
[   63.938520][  T354] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 4
[   63.961292][   T31] usb 2-1: device descriptor read/8, error -71
[   63.968215][  T354] usb 1-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00
[   63.977353][  T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   63.985836][  T354] usb 1-1: Product: syz
[   63.990763][  T354] usb 1-1: Manufacturer: syz
[   63.995455][  T354] usb 1-1: SerialNumber: syz
[   64.000959][  T354] usb 1-1: config 0 descriptor??
[   64.006816][  T354] usb-storage 1-1:0.0: USB Mass Storage device detected
[   64.014495][  T354] usb-storage 1-1:0.0: Quirks match for vid 1908 pid 1315: 20000
[   64.045231][   T36] audit: type=1400 audit(1772418391.229:272): avc:  denied  { getopt } for  pid=999 comm="syz.3.210" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1
[   64.099795][   T31] usb 2-1: device descriptor read/8, error -71
[   64.206466][   T31] usb usb2-port1: unable to enumerate USB device
[   64.217407][  T366] usb 1-1: USB disconnect, device number 25
[   64.436103][  T354] usb 4-1: new high-speed USB device number 28 using dummy_hcd
[   64.586068][  T354] usb 4-1: Using ep0 maxpacket: 16
[   64.592257][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   64.603654][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   64.613429][  T354] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   64.626665][  T354] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   64.635727][  T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   64.644531][  T354] usb 4-1: config 0 descriptor??
[   64.688765][ T1016] netlink: 'syz.2.215': attribute type 30 has an invalid length.
[   64.821979][ T1024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.218'.
[   64.846091][   T31] usb 2-1: new high-speed USB device number 30 using dummy_hcd
[   64.976153][  T366] usb 1-1: new high-speed USB device number 26 using dummy_hcd
[   64.997147][   T31] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   65.007074][   T31] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   65.016788][   T31] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   65.029954][   T36] kauditd_printk_skb: 2 callbacks suppressed
[   65.029970][   T36] audit: type=1400 audit(1772418392.219:275): avc:  denied  { accept } for  pid=1032 comm="syz.2.221" path="socket:[10324]" dev="sockfs" ino=10324 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[   65.060108][  T354] usbhid 4-1:0.0: can't add hid device: -71
[   65.066192][  T354] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   65.074156][   T31] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   65.084128][  T354] usb 4-1: USB disconnect, device number 28
[   65.090157][   T31] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.098909][   T31] usb 2-1: Product: syz
[   65.103472][   T31] usb 2-1: Manufacturer: syz
[   65.108209][   T31] usb 2-1: SerialNumber: syz
[   65.115085][   T31] hub 2-1:1.0: bad descriptor, ignoring hub
[   65.121077][   T31] hub 2-1:1.0: probe with driver hub failed with error -5
[   65.156132][  T366] usb 1-1: Using ep0 maxpacket: 8
[   65.162440][  T366] usb 1-1: config 0 has no interfaces?
[   65.169366][  T366] usb 1-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   65.178762][  T366] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   65.186788][  T366] usb 1-1: Product: syz
[   65.190977][  T366] usb 1-1: Manufacturer: syz
[   65.195615][  T366] usb 1-1: SerialNumber: syz
[   65.200931][  T366] usb 1-1: config 0 descriptor??
[   65.315765][   T31] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 30 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   65.411805][ T1022] FAULT_INJECTION: forcing a failure.
[   65.411805][ T1022] name failslab, interval 1, probability 0, space 0, times 0
[   65.424649][ T1022] CPU: 1 UID: 0 PID: 1022 Comm: syz.0.217 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   65.424679][ T1022] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   65.424690][ T1022] Call Trace:
[   65.424696][ T1022]  <TASK>
[   65.424703][ T1022]  __dump_stack+0x21/0x30
[   65.424730][ T1022]  dump_stack_lvl+0x140/0x1c0
[   65.424750][ T1022]  ? __cfi_dump_stack_lvl+0x10/0x10
[   65.424851][ T1022]  dump_stack+0x19/0x20
[   65.424866][ T1022]  should_fail_ex+0x3d7/0x530
[   65.424878][ T1022]  should_failslab+0xac/0x100
[   65.424893][ T1022]  kmem_cache_alloc_noprof+0x42/0x410
[   65.424906][ T1022]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   65.424920][ T1022]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   65.424933][ T1022]  ? mutex_unlock+0x90/0x240
[   65.424948][ T1022]  kvm_mmu_topup_memory_cache+0x24/0x30
[   65.424970][ T1022]  kvm_mmu_load+0xa2/0x2890
[   65.424989][ T1022]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   65.425011][ T1022]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   65.425031][ T1022]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   65.425047][ T1022]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   65.425063][ T1022]  vcpu_run+0x4dad/0x7840
[   65.425081][ T1022]  ? signal_pending+0xc0/0xc0
[   65.425092][ T1022]  ? __kasan_check_write+0x18/0x20
[   65.425104][ T1022]  ? xfd_validate_state+0x68/0x140
[   65.425117][ T1022]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   65.425127][ T1022]  ? __kasan_check_write+0x18/0x20
[   65.425139][ T1022]  ? fpregs_mark_activate+0x68/0x160
[   65.425149][ T1022]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   65.425159][ T1022]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   65.425170][ T1022]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   65.425183][ T1022]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   65.425195][ T1022]  ? kstrtoull+0x13b/0x1e0
[   65.425205][ T1022]  ? kstrtouint+0x78/0xf0
[   65.425214][ T1022]  ? ioctl_has_perm+0x1bc/0x500
[   65.425225][ T1022]  ? __asan_memcpy+0x5a/0x80
[   65.425237][ T1022]  ? ioctl_has_perm+0x408/0x500
[   65.425247][ T1022]  ? has_cap_mac_admin+0xd0/0xd0
[   65.425257][ T1022]  ? __kasan_check_write+0x18/0x20
[   65.425269][ T1022]  ? mutex_lock_killable+0x97/0x1d0
[   65.425281][ T1022]  ? __cfi_mutex_lock_killable+0x10/0x10
[   65.425294][ T1022]  ? proc_fail_nth_write+0x184/0x220
[   65.425306][ T1022]  kvm_vcpu_ioctl+0xa48/0x1000
[   65.425320][ T1022]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   65.425334][ T1022]  ? __cfi_vfs_write+0x10/0x10
[   65.425347][ T1022]  ? __kasan_check_write+0x18/0x20
[   65.425358][ T1022]  ? mutex_unlock+0x90/0x240
[   65.425370][ T1022]  ? __cfi_mutex_unlock+0x10/0x10
[   65.425381][ T1022]  ? __fget_files+0x2c5/0x340
[   65.425396][ T1022]  ? __fget_files+0x2c5/0x340
[   65.425410][ T1022]  ? bpf_lsm_file_ioctl+0xd/0x20
[   65.425419][ T1022]  ? security_file_ioctl+0x3e/0x110
[   65.425429][ T1022]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   65.425443][ T1022]  __se_sys_ioctl+0x135/0x1b0
[   65.425457][ T1022]  __x64_sys_ioctl+0x7f/0xa0
[   65.425471][ T1022]  x64_sys_call+0x1878/0x2ee0
[   65.425485][ T1022]  do_syscall_64+0x57/0xf0
[   65.425495][ T1022]  ? clear_bhb_loop+0x50/0xa0
[   65.425505][ T1022]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   65.425521][ T1022] RIP: 0033:0x7f985019c799
[   65.425532][ T1022] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   65.425542][ T1022] RSP: 002b:00007f98510e0028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   65.425555][ T1022] RAX: ffffffffffffffda RBX: 00007f9850415fa0 RCX: 00007f985019c799
[   65.425563][ T1022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   65.425570][ T1022] RBP: 00007f98510e0090 R08: 0000000000000000 R09: 0000000000000000
[   65.425577][ T1022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   65.425584][ T1022] R13: 00007f9850416038 R14: 00007f9850415fa0 R15: 00007fffa316cfc8
[   65.425593][ T1022]  </TASK>
[   65.518420][ T1014] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   65.811775][ T1014] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   65.846873][  T366] usb 1-1: USB disconnect, device number 26
[   65.912120][ T1049] mmap: syz.2.225 (1049) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst.
[   66.126204][  T950] usb 2-1: USB disconnect, device number 30
[   66.132683][  T950] usblp0: removed
[   66.216102][  T953] usb 4-1: new low-speed USB device number 29 using dummy_hcd
[   66.246098][   T31] usb 3-1: new high-speed USB device number 25 using dummy_hcd
[   66.366064][  T953] usb 4-1: Invalid ep0 maxpacket: 32
[   66.369207][ T1059] netlink: 20 bytes leftover after parsing attributes in process `syz.0.228'.
[   66.396151][   T31] usb 3-1: Using ep0 maxpacket: 32
[   66.402782][   T31] usb 3-1: config 2 has an invalid interface number: 88 but max is 0
[   66.411288][   T31] usb 3-1: config 2 has no interface number 0
[   66.417638][   T31] usb 3-1: config 2 interface 88 altsetting 7 bulk endpoint 0x6 has invalid maxpacket 256
[   66.427570][   T31] usb 3-1: config 2 interface 88 has no altsetting 0
[   66.435652][   T31] usb 3-1: New USB device found, idVendor=0557, idProduct=2009, bcdDevice=c7.1e
[   66.444770][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   66.453027][   T31] usb 3-1: Product: syz
[   66.457595][   T31] usb 3-1: Manufacturer: syz
[   66.462225][   T31] usb 3-1: SerialNumber: syz
[   66.469581][ T1057] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   66.496132][  T953] usb 4-1: new low-speed USB device number 30 using dummy_hcd
[   66.646067][  T953] usb 4-1: Invalid ep0 maxpacket: 32
[   66.651515][  T953] usb usb4-port1: attempt power cycle
[   66.687087][   T36] audit: type=1400 audit(1772418393.879:276): avc:  denied  { execute } for  pid=1064 comm="syz.1.230" name="file0" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.691817][ T1067] process 'syz.1.230' launched './file0' with NULL argv: empty string added
[   66.709636][ T1049] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22
[   66.718166][   T36] audit: type=1400 audit(1772418393.909:277): avc:  denied  { execute_no_trans } for  pid=1064 comm="syz.1.230" path="/48/file0" dev="tmpfs" ino=286 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1
[   66.972043][ T1049] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   66.980592][ T1049] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   66.988406][  T950] usb 2-1: new high-speed USB device number 31 using dummy_hcd
[   66.996192][   T31] asix 3-1:2.88 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71
[   67.006787][   T31] asix 3-1:2.88: probe with driver asix failed with error -71
[   67.024300][   T31] usb 3-1: USB disconnect, device number 25
[   67.036144][  T953] usb 4-1: new low-speed USB device number 31 using dummy_hcd
[   67.071103][  T953] usb 4-1: Invalid ep0 maxpacket: 32
[   67.135901][   T36] audit: type=1400 audit(1772418394.319:278): avc:  denied  { mount } for  pid=1074 comm="syz.0.234" name="/" dev="selinuxfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=filesystem permissive=1
[   67.176074][  T950] usb 2-1: Using ep0 maxpacket: 16
[   67.182302][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   67.193618][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   67.204484][  T950] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   67.217651][  T950] usb 2-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   67.226796][  T950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   67.235305][  T950] usb 2-1: config 0 descriptor??
[   67.237841][  T953] usb 4-1: new low-speed USB device number 32 using dummy_hcd
[   67.266472][  T953] usb 4-1: Invalid ep0 maxpacket: 32
[   67.271910][  T953] usb usb4-port1: unable to enumerate USB device
[   67.514012][   T36] audit: type=1400 audit(1772418394.699:279): avc:  denied  { watch watch_reads } for  pid=1080 comm="syz.2.235" path="/65" dev="tmpfs" ino=367 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1
[   67.542110][   T36] audit: type=1400 audit(1772418394.729:280): avc:  denied  { read write } for  pid=1080 comm="syz.2.235" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   67.565125][   T36] audit: type=1400 audit(1772418394.729:281): avc:  denied  { open } for  pid=1080 comm="syz.2.235" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   67.589614][   T36] audit: type=1400 audit(1772418394.729:282): avc:  denied  { ioctl } for  pid=1080 comm="syz.2.235" path="/dev/rnullb0" dev="devtmpfs" ino=31 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1
[   67.625305][ T1089] netlink: 20 bytes leftover after parsing attributes in process `syz.2.237'.
[   67.845535][  T950] usbhid 2-1:0.0: can't add hid device: -71
[   67.851570][  T950] usbhid 2-1:0.0: probe with driver usbhid failed with error -71
[   67.860273][  T950] usb 2-1: USB disconnect, device number 31
[   67.936109][   T31] usb 3-1: new high-speed USB device number 26 using dummy_hcd
[   68.086251][   T31] usb 3-1: Using ep0 maxpacket: 8
[   68.092363][   T31] usb 3-1: config 0 has no interfaces?
[   68.099226][   T31] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   68.108290][   T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.116351][   T31] usb 3-1: Product: syz
[   68.120587][   T31] usb 3-1: Manufacturer: syz
[   68.125157][   T31] usb 3-1: SerialNumber: syz
[   68.130415][   T31] usb 3-1: config 0 descriptor??
[   68.216084][  T949] usb 1-1: new high-speed USB device number 27 using dummy_hcd
[   68.339712][ T1091] FAULT_INJECTION: forcing a failure.
[   68.339712][ T1091] name failslab, interval 1, probability 0, space 0, times 0
[   68.352516][ T1091] CPU: 0 UID: 0 PID: 1091 Comm: syz.2.238 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   68.352546][ T1091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   68.352557][ T1091] Call Trace:
[   68.352562][ T1091]  <TASK>
[   68.352568][ T1091]  __dump_stack+0x21/0x30
[   68.352602][ T1091]  dump_stack_lvl+0x140/0x1c0
[   68.352621][ T1091]  ? __cfi_dump_stack_lvl+0x10/0x10
[   68.352641][ T1091]  dump_stack+0x19/0x20
[   68.352660][ T1091]  should_fail_ex+0x3d7/0x530
[   68.352677][ T1091]  should_failslab+0xac/0x100
[   68.352703][ T1091]  kmem_cache_alloc_noprof+0x42/0x410
[   68.352723][ T1091]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   68.352746][ T1091]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   68.352769][ T1091]  ? mutex_unlock+0x90/0x240
[   68.352790][ T1091]  kvm_mmu_topup_memory_cache+0x24/0x30
[   68.352811][ T1091]  kvm_mmu_load+0xa2/0x2890
[   68.352830][ T1091]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   68.352851][ T1091]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   68.352868][ T1091]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   68.352888][ T1091]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   68.352913][ T1091]  vcpu_run+0x4dad/0x7840
[   68.352942][ T1091]  ? signal_pending+0xc0/0xc0
[   68.352959][ T1091]  ? __kasan_check_write+0x18/0x20
[   68.352978][ T1091]  ? xfd_validate_state+0x68/0x140
[   68.353000][ T1091]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   68.353017][ T1091]  ? __kasan_check_write+0x18/0x20
[   68.353037][ T1091]  ? fpregs_mark_activate+0x68/0x160
[   68.353056][ T1091]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   68.353072][ T1091]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   68.353091][ T1091]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   68.353112][ T1091]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   68.353132][ T1091]  ? kstrtoull+0x13b/0x1e0
[   68.353148][ T1091]  ? kstrtouint+0x78/0xf0
[   68.353163][ T1091]  ? ioctl_has_perm+0x1bc/0x500
[   68.353182][ T1091]  ? __asan_memcpy+0x5a/0x80
[   68.353203][ T1091]  ? ioctl_has_perm+0x408/0x500
[   68.353222][ T1091]  ? has_cap_mac_admin+0xd0/0xd0
[   68.353241][ T1091]  ? __kasan_check_write+0x18/0x20
[   68.353262][ T1091]  ? mutex_lock_killable+0x97/0x1d0
[   68.353285][ T1091]  ? __cfi_mutex_lock_killable+0x10/0x10
[   68.353307][ T1091]  ? proc_fail_nth_write+0x184/0x220
[   68.353327][ T1091]  kvm_vcpu_ioctl+0xa48/0x1000
[   68.353351][ T1091]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   68.353376][ T1091]  ? __cfi_vfs_write+0x10/0x10
[   68.353397][ T1091]  ? __kasan_check_write+0x18/0x20
[   68.353418][ T1091]  ? mutex_unlock+0x90/0x240
[   68.353439][ T1091]  ? __cfi_mutex_unlock+0x10/0x10
[   68.353460][ T1091]  ? __fget_files+0x2c5/0x340
[   68.353484][ T1091]  ? __fget_files+0x2c5/0x340
[   68.353507][ T1091]  ? bpf_lsm_file_ioctl+0xd/0x20
[   68.353524][ T1091]  ? security_file_ioctl+0x3e/0x110
[   68.353542][ T1091]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   68.353564][ T1091]  __se_sys_ioctl+0x135/0x1b0
[   68.353598][ T1091]  __x64_sys_ioctl+0x7f/0xa0
[   68.353621][ T1091]  x64_sys_call+0x1878/0x2ee0
[   68.353644][ T1091]  do_syscall_64+0x57/0xf0
[   68.353659][ T1091]  ? clear_bhb_loop+0x50/0xa0
[   68.353676][ T1091]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   68.353702][ T1091] RIP: 0033:0x7f888259c799
[   68.353718][ T1091] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   68.353734][ T1091] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   68.353753][ T1091] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   68.353767][ T1091] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   68.353780][ T1091] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   68.353792][ T1091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   68.353804][ T1091] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   68.353820][ T1091]  </TASK>
[   68.373333][   T36] audit: type=1400 audit(1772418395.549:283): avc:  denied  { map } for  pid=1095 comm="syz.1.240" path="socket:[11321]" dev="sockfs" ino=11321 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
[   68.399092][ T1098] can: request_module (can-proto-0) failed.
[   68.403207][  T949] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   68.771543][  T949] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   68.781253][  T949] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   68.785262][  T955] usb 3-1: USB disconnect, device number 26
[   68.796638][  T949] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   68.809130][  T949] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   68.817161][  T949] usb 1-1: Product: syz
[   68.821332][  T949] usb 1-1: Manufacturer: syz
[   68.825917][  T949] usb 1-1: SerialNumber: syz
[   68.832427][  T949] hub 1-1:1.0: bad descriptor, ignoring hub
[   68.838392][  T949] hub 1-1:1.0: probe with driver hub failed with error -5
[   68.995087][ T1108] tmpfs: Bad value for 'nr_blocks'
[   69.036758][  T949] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 27 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   69.080353][   T36] audit: type=1400 audit(1772418396.269:284): avc:  denied  { getopt } for  pid=1109 comm="syz.3.245" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1
[   69.121807][ T1112] netlink: 20 bytes leftover after parsing attributes in process `syz.3.246'.
[   69.242524][ T1093] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.251130][ T1093] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   69.346225][  T953] usb 1-1: USB disconnect, device number 27
[   69.352934][  T953] usblp0: removed
[   69.449189][ T1134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.255'.
[   69.473789][ T1136] netlink: 20 bytes leftover after parsing attributes in process `syz.2.256'.
[   69.506177][  T949] usb 4-1: new high-speed USB device number 33 using dummy_hcd
[   69.656063][  T949] usb 4-1: Using ep0 maxpacket: 16
[   69.662206][  T949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   69.673215][  T949] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   69.682960][  T949] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   69.695839][  T949] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   69.704988][  T949] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   69.713499][  T949] usb 4-1: config 0 descriptor??
[   69.756119][  T950] usb 3-1: new high-speed USB device number 27 using dummy_hcd
[   69.906081][  T950] usb 3-1: Using ep0 maxpacket: 8
[   69.912265][  T950] usb 3-1: config 0 has no interfaces?
[   69.919150][  T950] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   69.931922][  T950] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   69.941581][  T950] usb 3-1: Product: syz
[   69.946240][  T950] usb 3-1: Manufacturer: syz
[   69.950922][  T950] usb 3-1: SerialNumber: syz
[   69.951291][ T1156] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   69.956522][  T950] usb 3-1: config 0 descriptor??
[   69.969662][ T1156] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   70.175175][ T1143] FAULT_INJECTION: forcing a failure.
[   70.175175][ T1143] name failslab, interval 1, probability 0, space 0, times 0
[   70.187933][  T942] usb 1-1: new high-speed USB device number 28 using dummy_hcd
[   70.187935][ T1143] CPU: 1 UID: 0 PID: 1143 Comm: syz.2.258 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   70.187963][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   70.187974][ T1143] Call Trace:
[   70.187981][ T1143]  <TASK>
[   70.187993][ T1143]  __dump_stack+0x21/0x30
[   70.188022][ T1143]  dump_stack_lvl+0x140/0x1c0
[   70.188048][ T1143]  ? __cfi_dump_stack_lvl+0x10/0x10
[   70.188081][ T1143]  dump_stack+0x19/0x20
[   70.188100][ T1143]  should_fail_ex+0x3d7/0x530
[   70.188120][ T1143]  should_failslab+0xac/0x100
[   70.188144][ T1143]  kmem_cache_alloc_noprof+0x42/0x410
[   70.188166][ T1143]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   70.188191][ T1143]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   70.188214][ T1143]  ? mutex_unlock+0x90/0x240
[   70.188248][ T1143]  kvm_mmu_topup_memory_cache+0x24/0x30
[   70.188271][ T1143]  kvm_mmu_load+0xa2/0x2890
[   70.188291][ T1143]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   70.188314][ T1143]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   70.188331][ T1143]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   70.188351][ T1143]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   70.188378][ T1143]  vcpu_run+0x4dad/0x7840
[   70.188408][ T1143]  ? signal_pending+0xc0/0xc0
[   70.188427][ T1143]  ? __kasan_check_write+0x18/0x20
[   70.188447][ T1143]  ? xfd_validate_state+0x68/0x140
[   70.188469][ T1143]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   70.188487][ T1143]  ? __kasan_check_write+0x18/0x20
[   70.188507][ T1143]  ? fpregs_mark_activate+0x68/0x160
[   70.188525][ T1143]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   70.188542][ T1143]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   70.188560][ T1143]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   70.188589][ T1143]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   70.188611][ T1143]  ? kstrtoull+0x13b/0x1e0
[   70.188627][ T1143]  ? kstrtouint+0x78/0xf0
[   70.188643][ T1143]  ? ioctl_has_perm+0x1bc/0x500
[   70.188661][ T1143]  ? __asan_memcpy+0x5a/0x80
[   70.188680][ T1143]  ? ioctl_has_perm+0x408/0x500
[   70.188698][ T1143]  ? has_cap_mac_admin+0xd0/0xd0
[   70.188716][ T1143]  ? __kasan_check_write+0x18/0x20
[   70.188735][ T1143]  ? mutex_lock_killable+0x97/0x1d0
[   70.188756][ T1143]  ? __cfi_mutex_lock_killable+0x10/0x10
[   70.188777][ T1143]  ? proc_fail_nth_write+0x184/0x220
[   70.188798][ T1143]  kvm_vcpu_ioctl+0xa48/0x1000
[   70.188823][ T1143]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.188847][ T1143]  ? __cfi_vfs_write+0x10/0x10
[   70.188868][ T1143]  ? __kasan_check_write+0x18/0x20
[   70.188888][ T1143]  ? mutex_unlock+0x90/0x240
[   70.188908][ T1143]  ? __cfi_mutex_unlock+0x10/0x10
[   70.188928][ T1143]  ? __fget_files+0x2c5/0x340
[   70.188952][ T1143]  ? __fget_files+0x2c5/0x340
[   70.188974][ T1143]  ? bpf_lsm_file_ioctl+0xd/0x20
[   70.188991][ T1143]  ? security_file_ioctl+0x3e/0x110
[   70.189009][ T1143]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   70.189032][ T1143]  __se_sys_ioctl+0x135/0x1b0
[   70.189056][ T1143]  __x64_sys_ioctl+0x7f/0xa0
[   70.189079][ T1143]  x64_sys_call+0x1878/0x2ee0
[   70.189102][ T1143]  do_syscall_64+0x57/0xf0
[   70.189117][ T1143]  ? clear_bhb_loop+0x50/0xa0
[   70.189135][ T1143]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   70.189162][ T1143] RIP: 0033:0x7f888259c799
[   70.189177][ T1143] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   70.189194][ T1143] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   70.189215][ T1143] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   70.189229][ T1143] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   70.189241][ T1143] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   70.189253][ T1143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   70.189264][ T1143] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   70.189280][ T1143]  </TASK>
[   70.332005][  T949] usbhid 4-1:0.0: can't add hid device: -71
[   70.506062][  T942] usb 1-1: Using ep0 maxpacket: 32
[   70.521445][  T949] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   70.531573][  T942] usb 1-1: unable to get BOS descriptor or descriptor too short
[   70.540009][  T949] usb 4-1: USB disconnect, device number 33
[   70.557672][  T942] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   70.567753][  T950] usb 3-1: USB disconnect, device number 27
[   70.571253][  T942] usb 1-1: config 1 interface 0 altsetting 15 has 0 endpoint descriptors, different from the interface descriptor's value: 3
[   70.635080][  T942] usb 1-1: config 1 interface 0 has no altsetting 0
[   70.644059][  T942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   70.653128][  T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   70.661157][  T942] usb 1-1: Product: syz
[   70.665307][  T942] usb 1-1: Manufacturer: syz
[   70.669995][  T942] usb 1-1: SerialNumber: syz
[   70.690427][   T36] kauditd_printk_skb: 6 callbacks suppressed
[   70.690446][   T36] audit: type=1400 audit(1772418397.879:291): avc:  denied  { create } for  pid=1158 comm="syz.1.264" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1
[   70.877876][  T942] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22
[   70.878359][ T1163] netlink: 20 bytes leftover after parsing attributes in process `syz.3.265'.
[   70.891792][  T942] usb 1-1: USB disconnect, device number 28
[   70.918340][   T36] audit: type=1400 audit(1772418398.109:292): avc:  denied  { listen } for  pid=1164 comm="syz.3.266" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[   71.386878][ T1180] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1180 comm=syz.0.271
[   71.446082][  T949] usb 3-1: new high-speed USB device number 28 using dummy_hcd
[   71.532160][ T1188] SELinux:  policydb table sizes (0,0) do not match mine (6,7)
[   71.539934][ T1188] SELinux: failed to load policy
[   71.587272][ T1194] netlink: 20 bytes leftover after parsing attributes in process `syz.1.275'.
[   71.597307][  T949] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   71.607104][  T949] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   71.616852][  T949] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   71.631899][  T949] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   71.641040][  T949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   71.649174][  T949] usb 3-1: Product: syz
[   71.653380][  T949] usb 3-1: Manufacturer: syz
[   71.658074][  T949] usb 3-1: SerialNumber: syz
[   71.664408][  T949] hub 3-1:1.0: bad descriptor, ignoring hub
[   71.670652][  T949] hub 3-1:1.0: probe with driver hub failed with error -5
[   71.806073][  T950] usb 1-1: new high-speed USB device number 29 using dummy_hcd
[   71.856098][  T955] usb 2-1: new high-speed USB device number 32 using dummy_hcd
[   71.865588][  T949] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 28 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   71.956104][  T950] usb 1-1: Using ep0 maxpacket: 16
[   71.962329][  T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   71.973272][  T950] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   71.983031][  T950] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   71.995824][  T950] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   72.004880][  T950] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   72.013627][  T950] usb 1-1: config 0 descriptor??
[   72.026116][  T955] usb 2-1: Using ep0 maxpacket: 8
[   72.032433][  T955] usb 2-1: config 0 has no interfaces?
[   72.039420][  T955] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   72.048570][  T955] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   72.056678][  T955] usb 2-1: Product: syz
[   72.060860][  T955] usb 2-1: Manufacturer: syz
[   72.065465][  T955] usb 2-1: SerialNumber: syz
[   72.068749][ T1178] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   72.071396][  T955] usb 2-1: config 0 descriptor??
[   72.078517][  T354] usb 4-1: new high-speed USB device number 34 using dummy_hcd
[   72.083892][ T1178] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   72.186211][  T942] usb 3-1: USB disconnect, device number 28
[   72.192838][  T942] usblp0: removed
[   72.206117][  T354] usb 4-1: device descriptor read/64, error -71
[   72.303126][ T1196] FAULT_INJECTION: forcing a failure.
[   72.303126][ T1196] name failslab, interval 1, probability 0, space 0, times 0
[   72.315831][ T1196] CPU: 1 UID: 0 PID: 1196 Comm: syz.1.276 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   72.315863][ T1196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   72.315871][ T1196] Call Trace:
[   72.315876][ T1196]  <TASK>
[   72.315881][ T1196]  __dump_stack+0x21/0x30
[   72.315900][ T1196]  dump_stack_lvl+0x140/0x1c0
[   72.315912][ T1196]  ? __cfi_dump_stack_lvl+0x10/0x10
[   72.315926][ T1196]  dump_stack+0x19/0x20
[   72.315941][ T1196]  should_fail_ex+0x3d7/0x530
[   72.315953][ T1196]  should_failslab+0xac/0x100
[   72.315968][ T1196]  kmem_cache_alloc_noprof+0x42/0x410
[   72.315981][ T1196]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   72.315995][ T1196]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   72.316008][ T1196]  ? mutex_unlock+0x90/0x240
[   72.316030][ T1196]  kvm_mmu_topup_memory_cache+0x24/0x30
[   72.316054][ T1196]  kvm_mmu_load+0xa2/0x2890
[   72.316069][ T1196]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   72.316082][ T1196]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   72.316093][ T1196]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   72.316106][ T1196]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   72.316124][ T1196]  vcpu_run+0x4dad/0x7840
[   72.316142][ T1196]  ? signal_pending+0xc0/0xc0
[   72.316153][ T1196]  ? __kasan_check_write+0x18/0x20
[   72.316165][ T1196]  ? xfd_validate_state+0x68/0x140
[   72.316178][ T1196]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   72.316188][ T1196]  ? __kasan_check_write+0x18/0x20
[   72.316199][ T1196]  ? fpregs_mark_activate+0x68/0x160
[   72.316209][ T1196]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   72.316219][ T1196]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   72.316230][ T1196]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   72.316243][ T1196]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   72.316255][ T1196]  ? kstrtoull+0x13b/0x1e0
[   72.316264][ T1196]  ? kstrtouint+0x78/0xf0
[   72.316273][ T1196]  ? ioctl_has_perm+0x1bc/0x500
[   72.316284][ T1196]  ? __asan_memcpy+0x5a/0x80
[   72.316296][ T1196]  ? ioctl_has_perm+0x408/0x500
[   72.316307][ T1196]  ? has_cap_mac_admin+0xd0/0xd0
[   72.316319][ T1196]  ? __kasan_check_write+0x18/0x20
[   72.316331][ T1196]  ? mutex_lock_killable+0x97/0x1d0
[   72.316346][ T1196]  ? __cfi_mutex_lock_killable+0x10/0x10
[   72.316358][ T1196]  ? proc_fail_nth_write+0x184/0x220
[   72.316383][ T1196]  kvm_vcpu_ioctl+0xa48/0x1000
[   72.316398][ T1196]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   72.316413][ T1196]  ? __cfi_vfs_write+0x10/0x10
[   72.316425][ T1196]  ? __kasan_check_write+0x18/0x20
[   72.316437][ T1196]  ? mutex_unlock+0x90/0x240
[   72.316449][ T1196]  ? __cfi_mutex_unlock+0x10/0x10
[   72.316461][ T1196]  ? __fget_files+0x2c5/0x340
[   72.316476][ T1196]  ? __fget_files+0x2c5/0x340
[   72.316489][ T1196]  ? bpf_lsm_file_ioctl+0xd/0x20
[   72.316500][ T1196]  ? security_file_ioctl+0x3e/0x110
[   72.316510][ T1196]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   72.316524][ T1196]  __se_sys_ioctl+0x135/0x1b0
[   72.316538][ T1196]  __x64_sys_ioctl+0x7f/0xa0
[   72.316552][ T1196]  x64_sys_call+0x1878/0x2ee0
[   72.316566][ T1196]  do_syscall_64+0x57/0xf0
[   72.316576][ T1196]  ? clear_bhb_loop+0x50/0xa0
[   72.316587][ T1196]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   72.316603][ T1196] RIP: 0033:0x7f780539c799
[   72.316614][ T1196] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   72.316624][ T1196] RSP: 002b:00007f7806224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   72.316638][ T1196] RAX: ffffffffffffffda RBX: 00007f7805615fa0 RCX: 00007f780539c799
[   72.316646][ T1196] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   72.316653][ T1196] RBP: 00007f7806224090 R08: 0000000000000000 R09: 0000000000000000
[   72.316660][ T1196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   72.316667][ T1196] R13: 00007f7805616038 R14: 00007f7805615fa0 R15: 00007fff61254a48
[   72.316676][ T1196]  </TASK>
[   72.737842][  T955] usb 2-1: USB disconnect, device number 32
[   72.816082][  T354] usb 4-1: device descriptor read/64, error -71
[   72.893147][  T950] usbhid 1-1:0.0: can't add hid device: -71
[   72.899139][  T950] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   72.908076][  T950] usb 1-1: USB disconnect, device number 29
[   73.056096][  T354] usb 4-1: new high-speed USB device number 35 using dummy_hcd
[   73.186073][  T354] usb 4-1: device descriptor read/64, error -71
[   73.404718][   T36] audit: type=1400 audit(1772418400.589:293): avc:  denied  { sqpoll } for  pid=1214 comm="syz.0.282" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1
[   73.426220][  T354] usb 4-1: device descriptor read/64, error -71
[   73.486077][  T955] usb 2-1: new high-speed USB device number 33 using dummy_hcd
[   73.536188][  T354] usb usb4-port1: attempt power cycle
[   73.580149][ T1220] netlink: 20 bytes leftover after parsing attributes in process `syz.2.284'.
[   73.616132][  T955] usb 2-1: device descriptor read/64, error -71
[   73.676110][  T942] usb 1-1: new high-speed USB device number 30 using dummy_hcd
[   73.826052][  T942] usb 1-1: Using ep0 maxpacket: 32
[   73.832652][  T942] usb 1-1: unable to get BOS descriptor or descriptor too short
[   73.841215][  T942] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7
[   73.853651][  T942] usb 1-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice= 0.40
[   73.862854][  T955] usb 2-1: device descriptor read/64, error -71
[   73.869125][  T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   73.877393][  T942] usb 1-1: Product: syz
[   73.881593][  T942] usb 1-1: Manufacturer: syz
[   73.886421][  T354] usb 4-1: new high-speed USB device number 36 using dummy_hcd
[   73.886920][  T942] usb 1-1: SerialNumber: syz
[   73.907103][  T354] usb 4-1: device descriptor read/8, error -71
[   74.037291][  T354] usb 4-1: device descriptor read/8, error -71
[   74.116250][  T955] usb 2-1: new high-speed USB device number 34 using dummy_hcd
[   74.246080][  T955] usb 2-1: device descriptor read/64, error -71
[   74.276270][  T354] usb 4-1: new high-speed USB device number 37 using dummy_hcd
[   74.297102][  T354] usb 4-1: device descriptor read/8, error -71
[   74.303824][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.312487][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.320915][ T1218] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   74.329492][ T1218] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   74.343608][  T942] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   74.353915][  T942] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   74.363889][  T942] usb 1-1: USB disconnect, device number 30
[   74.373259][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   74.437226][  T354] usb 4-1: device descriptor read/8, error -71
[   74.486146][  T955] usb 2-1: device descriptor read/64, error -71
[   74.510169][ T1236] netlink: 'syz.2.289': attribute type 2 has an invalid length.
[   74.546183][  T354] usb usb4-port1: unable to enumerate USB device
[   74.606204][  T955] usb usb2-port1: attempt power cycle
[   74.666066][  T942] usb 1-1: new high-speed USB device number 31 using dummy_hcd
[   74.766074][  T366] usb 3-1: new high-speed USB device number 29 using dummy_hcd
[   74.817114][  T942] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   74.826965][  T942] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   74.836630][  T942] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   74.851724][  T942] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   74.860853][  T942] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.868912][  T942] usb 1-1: Product: syz
[   74.873088][  T942] usb 1-1: Manufacturer: syz
[   74.877705][  T942] usb 1-1: SerialNumber: syz
[   74.884384][  T942] hub 1-1:1.0: bad descriptor, ignoring hub
[   74.890489][  T942] hub 1-1:1.0: probe with driver hub failed with error -5
[   74.926075][  T366] usb 3-1: Using ep0 maxpacket: 8
[   74.932179][  T366] usb 3-1: config 0 has no interfaces?
[   74.939020][  T366] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   74.948115][  T955] usb 2-1: new high-speed USB device number 35 using dummy_hcd
[   74.955702][  T366] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   74.963813][  T366] usb 3-1: Product: syz
[   74.968033][  T366] usb 3-1: Manufacturer: syz
[   74.972621][  T366] usb 3-1: SerialNumber: syz
[   74.978216][  T955] usb 2-1: device descriptor read/8, error -71
[   74.984626][  T366] usb 3-1: config 0 descriptor??
[   75.087456][  T942] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 31 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   75.107318][  T955] usb 2-1: device descriptor read/8, error -71
[   75.195262][ T1238] FAULT_INJECTION: forcing a failure.
[   75.195262][ T1238] name failslab, interval 1, probability 0, space 0, times 0
[   75.208087][ T1238] CPU: 0 UID: 0 PID: 1238 Comm: syz.2.290 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   75.208127][ T1238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   75.208140][ T1238] Call Trace:
[   75.208147][ T1238]  <TASK>
[   75.208154][ T1238]  __dump_stack+0x21/0x30
[   75.208174][ T1238]  dump_stack_lvl+0x140/0x1c0
[   75.208187][ T1238]  ? __cfi_dump_stack_lvl+0x10/0x10
[   75.208200][ T1238]  dump_stack+0x19/0x20
[   75.208212][ T1238]  should_fail_ex+0x3d7/0x530
[   75.208224][ T1238]  should_failslab+0xac/0x100
[   75.208239][ T1238]  kmem_cache_alloc_noprof+0x42/0x410
[   75.208252][ T1238]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   75.208267][ T1238]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   75.208281][ T1238]  ? mutex_unlock+0x90/0x240
[   75.208295][ T1238]  kvm_mmu_topup_memory_cache+0x24/0x30
[   75.208308][ T1238]  kvm_mmu_load+0xa2/0x2890
[   75.208320][ T1238]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   75.208334][ T1238]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   75.208345][ T1238]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   75.208357][ T1238]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   75.208372][ T1238]  vcpu_run+0x4dad/0x7840
[   75.208390][ T1238]  ? signal_pending+0xc0/0xc0
[   75.208401][ T1238]  ? __kasan_check_write+0x18/0x20
[   75.208413][ T1238]  ? xfd_validate_state+0x68/0x140
[   75.208426][ T1238]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   75.208436][ T1238]  ? __kasan_check_write+0x18/0x20
[   75.208448][ T1238]  ? fpregs_mark_activate+0x68/0x160
[   75.208458][ T1238]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   75.208468][ T1238]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   75.208478][ T1238]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   75.208491][ T1238]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   75.208503][ T1238]  ? kstrtoull+0x13b/0x1e0
[   75.208513][ T1238]  ? kstrtouint+0x78/0xf0
[   75.208522][ T1238]  ? ioctl_has_perm+0x1bc/0x500
[   75.208533][ T1238]  ? __asan_memcpy+0x5a/0x80
[   75.208545][ T1238]  ? ioctl_has_perm+0x408/0x500
[   75.208555][ T1238]  ? has_cap_mac_admin+0xd0/0xd0
[   75.208566][ T1238]  ? __kasan_check_write+0x18/0x20
[   75.208577][ T1238]  ? mutex_lock_killable+0x97/0x1d0
[   75.208589][ T1238]  ? __cfi_mutex_lock_killable+0x10/0x10
[   75.208602][ T1238]  ? proc_fail_nth_write+0x184/0x220
[   75.208613][ T1238]  kvm_vcpu_ioctl+0xa48/0x1000
[   75.208628][ T1238]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   75.208642][ T1238]  ? __cfi_vfs_write+0x10/0x10
[   75.208654][ T1238]  ? __kasan_check_write+0x18/0x20
[   75.208666][ T1238]  ? mutex_unlock+0x90/0x240
[   75.208677][ T1238]  ? __cfi_mutex_unlock+0x10/0x10
[   75.208688][ T1238]  ? __fget_files+0x2c5/0x340
[   75.208703][ T1238]  ? __fget_files+0x2c5/0x340
[   75.208717][ T1238]  ? bpf_lsm_file_ioctl+0xd/0x20
[   75.208726][ T1238]  ? security_file_ioctl+0x3e/0x110
[   75.208736][ T1238]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   75.208750][ T1238]  __se_sys_ioctl+0x135/0x1b0
[   75.208765][ T1238]  __x64_sys_ioctl+0x7f/0xa0
[   75.208778][ T1238]  x64_sys_call+0x1878/0x2ee0
[   75.208792][ T1238]  do_syscall_64+0x57/0xf0
[   75.208802][ T1238]  ? clear_bhb_loop+0x50/0xa0
[   75.208812][ T1238]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   75.208828][ T1238] RIP: 0033:0x7f888259c799
[   75.208838][ T1238] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   75.208847][ T1238] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   75.208862][ T1238] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   75.208870][ T1238] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   75.208877][ T1238] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   75.208884][ T1238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   75.208890][ T1238] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   75.208899][ T1238]  </TASK>
[   75.276155][  T354] usb 4-1: new high-speed USB device number 38 using dummy_hcd
[   75.291734][ T1229] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   75.446049][  T354] usb 4-1: Using ep0 maxpacket: 16
[   75.448963][ T1229] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   75.455629][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   75.516064][  T955] usb 2-1: new high-speed USB device number 36 using dummy_hcd
[   75.516718][  T354] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   75.522847][  T942] usb 3-1: USB disconnect, device number 29
[   75.542535][  T354] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   75.551605][  T955] usb 2-1: device descriptor read/8, error -71
[   75.557614][  T354] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   75.586201][  T953] usb 1-1: USB disconnect, device number 31
[   75.589224][  T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   75.593157][  T953] usblp0: removed
[   75.600664][  T354] usb 4-1: config 0 descriptor??
[   75.697254][  T955] usb 2-1: device descriptor read/8, error -71
[   75.816232][  T955] usb usb2-port1: unable to enumerate USB device
[   76.052013][ T1245] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'.
[   76.082723][ T1247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.294'.
[   76.119500][ T1251] IPv4: Oversized IP packet from 127.202.26.0
[   76.148565][ T1259] netlink: 108 bytes leftover after parsing attributes in process `syz.0.296'.
[   76.183484][ T1261] capability: warning: `syz.0.298' uses 32-bit capabilities (legacy support in use)
[   76.244414][   T36] audit: type=1400 audit(1772418403.429:294): avc:  denied  { bind } for  pid=1263 comm="syz.2.299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   76.284834][ T1270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1270 comm=syz.2.300
[   76.299198][ T1270] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=56 sclass=netlink_route_socket pid=1270 comm=syz.2.300
[   76.312512][  T354] usbhid 4-1:0.0: can't add hid device: -71
[   76.318722][  T354] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   76.329920][  T354] usb 4-1: USB disconnect, device number 38
[   76.422647][ T1276] netlink: 20 bytes leftover after parsing attributes in process `syz.0.303'.
[   76.576127][  T953] usb 3-1: new high-speed USB device number 30 using dummy_hcd
[   76.676085][  T950] usb 2-1: new high-speed USB device number 37 using dummy_hcd
[   76.706087][  T948] usb 1-1: new high-speed USB device number 32 using dummy_hcd
[   76.726058][  T953] usb 3-1: Using ep0 maxpacket: 8
[   76.732093][  T953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config
[   76.742273][  T953] usb 3-1: New USB device found, idVendor=28bd, idProduct=0075, bcdDevice= 0.00
[   76.751367][  T953] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   76.759932][  T953] usb 3-1: config 0 descriptor??
[   76.765679][  T953] usbhid 3-1:0.0: couldn't find an input interrupt endpoint
[   76.826083][  T950] usb 2-1: Using ep0 maxpacket: 8
[   76.832892][  T950] usb 2-1: config 0 has no interfaces?
[   76.838117][ T1280] netlink: 85 bytes leftover after parsing attributes in process `syz.3.305'.
[   76.842689][  T950] usb 2-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   76.857602][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.865643][  T950] usb 2-1: Product: syz
[   76.870079][  T950] usb 2-1: Manufacturer: syz
[   76.874723][  T950] usb 2-1: SerialNumber: syz
[   76.879415][  T948] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   76.889342][  T948] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   76.899285][  T950] usb 2-1: config 0 descriptor??
[   76.904294][  T948] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   76.919746][  T948] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   76.928874][  T948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   76.936995][  T948] usb 1-1: Product: syz
[   76.941163][  T948] usb 1-1: Manufacturer: syz
[   76.945764][  T948] usb 1-1: SerialNumber: syz
[   76.953652][  T948] hub 1-1:1.0: bad descriptor, ignoring hub
[   76.959683][  T948] hub 1-1:1.0: probe with driver hub failed with error -5
[   76.963650][   T36] audit: type=1400 audit(1772418404.149:295): avc:  denied  { write } for  pid=1283 comm="syz.3.307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[   77.023440][ T1285] bridge0: port 1(bridge_slave_0) entered blocking state
[   77.030657][ T1285] bridge0: port 1(bridge_slave_0) entered forwarding state
[   77.123732][ T1271] FAULT_INJECTION: forcing a failure.
[   77.123732][ T1271] name failslab, interval 1, probability 0, space 0, times 0
[   77.136457][ T1271] CPU: 0 UID: 0 PID: 1271 Comm: syz.1.301 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   77.136489][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   77.136501][ T1271] Call Trace:
[   77.136508][ T1271]  <TASK>
[   77.136514][ T1271]  __dump_stack+0x21/0x30
[   77.136543][ T1271]  dump_stack_lvl+0x140/0x1c0
[   77.136566][ T1271]  ? __cfi_dump_stack_lvl+0x10/0x10
[   77.136587][ T1271]  dump_stack+0x19/0x20
[   77.136599][ T1271]  should_fail_ex+0x3d7/0x530
[   77.136611][ T1271]  should_failslab+0xac/0x100
[   77.136629][ T1271]  kmem_cache_alloc_noprof+0x42/0x410
[   77.136643][ T1271]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   77.136666][ T1271]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   77.136691][ T1271]  ? mutex_unlock+0x90/0x240
[   77.136714][ T1271]  kvm_mmu_topup_memory_cache+0x24/0x30
[   77.136736][ T1271]  kvm_mmu_load+0xa2/0x2890
[   77.136750][ T1271]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   77.136763][ T1271]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   77.136774][ T1271]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   77.136786][ T1271]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   77.136809][ T1271]  vcpu_run+0x4dad/0x7840
[   77.136843][ T1271]  ? signal_pending+0xc0/0xc0
[   77.136863][ T1271]  ? __kasan_check_write+0x18/0x20
[   77.136880][ T1271]  ? xfd_validate_state+0x68/0x140
[   77.136893][ T1271]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   77.136903][ T1271]  ? __kasan_check_write+0x18/0x20
[   77.136915][ T1271]  ? fpregs_mark_activate+0x68/0x160
[   77.136925][ T1271]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   77.136935][ T1271]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   77.136953][ T1271]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   77.136978][ T1271]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   77.137006][ T1271]  ? kstrtoull+0x13b/0x1e0
[   77.137020][ T1271]  ? kstrtouint+0x78/0xf0
[   77.137029][ T1271]  ? ioctl_has_perm+0x1bc/0x500
[   77.137040][ T1271]  ? __asan_memcpy+0x5a/0x80
[   77.137052][ T1271]  ? ioctl_has_perm+0x408/0x500
[   77.137062][ T1271]  ? has_cap_mac_admin+0xd0/0xd0
[   77.137072][ T1271]  ? __kasan_check_write+0x18/0x20
[   77.137088][ T1271]  ? mutex_lock_killable+0x97/0x1d0
[   77.137111][ T1271]  ? __cfi_mutex_lock_killable+0x10/0x10
[   77.137134][ T1271]  ? proc_fail_nth_write+0x184/0x220
[   77.137154][ T1271]  kvm_vcpu_ioctl+0xa48/0x1000
[   77.137171][ T1271]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   77.137185][ T1271]  ? __cfi_vfs_write+0x10/0x10
[   77.137198][ T1271]  ? __kasan_check_write+0x18/0x20
[   77.137210][ T1271]  ? mutex_unlock+0x90/0x240
[   77.137221][ T1271]  ? __cfi_mutex_unlock+0x10/0x10
[   77.137242][ T1271]  ? __fget_files+0x2c5/0x340
[   77.137268][ T1271]  ? __fget_files+0x2c5/0x340
[   77.137294][ T1271]  ? bpf_lsm_file_ioctl+0xd/0x20
[   77.137306][ T1271]  ? security_file_ioctl+0x3e/0x110
[   77.137316][ T1271]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   77.137330][ T1271]  __se_sys_ioctl+0x135/0x1b0
[   77.137345][ T1271]  __x64_sys_ioctl+0x7f/0xa0
[   77.137359][ T1271]  x64_sys_call+0x1878/0x2ee0
[   77.137381][ T1271]  do_syscall_64+0x57/0xf0
[   77.137399][ T1271]  ? clear_bhb_loop+0x50/0xa0
[   77.137418][ T1271]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   77.137443][ T1271] RIP: 0033:0x7f780539c799
[   77.137454][ T1271] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   77.137463][ T1271] RSP: 002b:00007f7806224028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   77.137476][ T1271] RAX: ffffffffffffffda RBX: 00007f7805615fa0 RCX: 00007f780539c799
[   77.137484][ T1271] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   77.137493][ T1271] RBP: 00007f7806224090 R08: 0000000000000000 R09: 0000000000000000
[   77.137500][ T1271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   77.137508][ T1271] R13: 00007f7805616038 R14: 00007f7805615fa0 R15: 00007fff61254a48
[   77.137526][ T1271]  </TASK>
[   77.155231][  T948] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 32 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   77.206067][  T953] usb 4-1: new high-speed USB device number 39 using dummy_hcd
[   77.360252][ T1278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   77.496068][  T953] usb 4-1: device descriptor read/64, error -71
[   77.504055][ T1278] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   77.564541][  T950] usb 2-1: USB disconnect, device number 37
[   77.646171][  T955] usb 1-1: USB disconnect, device number 32
[   77.652644][  T955] usblp0: removed
[   77.736145][  T953] usb 4-1: device descriptor read/64, error -71
[   77.976087][  T953] usb 4-1: new high-speed USB device number 40 using dummy_hcd
[   78.106120][  T953] usb 4-1: device descriptor read/64, error -71
[   78.141786][ T1290] netlink: 128 bytes leftover after parsing attributes in process `syz.0.309'.
[   78.316081][  T950] usb 2-1: new high-speed USB device number 38 using dummy_hcd
[   78.346075][  T953] usb 4-1: device descriptor read/64, error -71
[   78.426097][  T948] usb 1-1: new high-speed USB device number 33 using dummy_hcd
[   78.456161][  T953] usb usb4-port1: attempt power cycle
[   78.476055][  T950] usb 2-1: Using ep0 maxpacket: 8
[   78.482111][  T950] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x82 has invalid maxpacket 8
[   78.492023][  T950] usb 2-1: config 1 interface 0 altsetting 93 bulk endpoint 0x3 has invalid maxpacket 784
[   78.502026][  T950] usb 2-1: config 1 interface 0 altsetting 93 has 3 endpoint descriptors, different from the interface descriptor's value: 18
[   78.515296][  T950] usb 2-1: config 1 interface 0 has no altsetting 0
[   78.522633][  T950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40
[   78.531710][  T950] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1
[   78.539746][  T950] usb 2-1: SerialNumber: syz
[   78.545203][ T1288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.552490][ T1288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.586061][  T948] usb 1-1: Using ep0 maxpacket: 16
[   78.592487][  T948] usb 1-1: unable to get BOS descriptor or descriptor too short
[   78.600871][  T948] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7
[   78.611792][  T948] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0
[   78.622940][  T948] usb 1-1: New USB device found, idVendor=1235, idProduct=8201, bcdDevice= 0.40
[   78.632007][  T948] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   78.640010][  T948] usb 1-1: Product: syz
[   78.644171][  T948] usb 1-1: Manufacturer: syz
[   78.648778][  T948] usb 1-1: SerialNumber: syz
[   78.760828][ T1288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.768111][ T1288] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   78.796100][  T953] usb 4-1: new high-speed USB device number 41 using dummy_hcd
[   78.817083][  T953] usb 4-1: device descriptor read/8, error -71
[   78.857670][  T948] usb 1-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   78.867588][  T948] usb 1-1: USB disconnect, device number 33
[   78.947238][  T953] usb 4-1: device descriptor read/8, error -71
[   79.178486][  T950] cdc_ether 2-1:1.0 usb0: register 'cdc_ether' at usb-dummy_hcd.1-1, CDC Ethernet Device, 42:42:42:42:42:42
[   79.186091][  T953] usb 4-1: new high-speed USB device number 42 using dummy_hcd
[   79.198686][   T36] audit: type=1400 audit(1772418406.389:296): avc:  denied  { read } for  pid=149 comm="dhcpcd" scontext=system_u:system_r:dhcpc_t tcontext=system_u:system_r:dhcpc_t tclass=netlink_kobject_uevent_socket permissive=1
[   79.219640][   T36] audit: type=1400 audit(1772418406.389:297): avc:  denied  { search } for  pid=149 comm="dhcpcd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.232680][  T953] usb 4-1: device descriptor read/8, error -71
[   79.240946][   T36] audit: type=1400 audit(1772418406.389:298): avc:  denied  { read } for  pid=149 comm="dhcpcd" name="n15" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.268431][   T36] audit: type=1400 audit(1772418406.389:299): avc:  denied  { open } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.291339][   T36] audit: type=1400 audit(1772418406.389:300): avc:  denied  { getattr } for  pid=149 comm="dhcpcd" path="/run/udev/data/n15" dev="tmpfs" ino=2618 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[   79.314519][   T36] audit: type=1400 audit(1772418406.439:301): avc:  denied  { read } for  pid=1297 comm="dhcpcd-run-hook" name="resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.343518][  T950] usb 3-1: USB disconnect, device number 30
[   79.350593][   T36] audit: type=1400 audit(1772418406.439:302): avc:  denied  { open } for  pid=1297 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.377784][  T953] usb 4-1: device descriptor read/8, error -71
[   79.389684][   T36] audit: type=1400 audit(1772418406.439:303): avc:  denied  { getattr } for  pid=1297 comm="dhcpcd-run-hook" path="/run/dhcpcd/hook-state/resolv.conf" dev="tmpfs" ino=425 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[   79.438872][ T1316] netlink: 20 bytes leftover after parsing attributes in process `syz.0.313'.
[   79.506224][  T953] usb usb4-port1: unable to enumerate USB device
[   79.589670][    C0] cdc_ether 2-1:1.0 usb0: CDC: unexpected notification 68!
[   79.736233][  T942] usb 1-1: new high-speed USB device number 34 using dummy_hcd
[   79.790105][  T953] usb 2-1: USB disconnect, device number 38
[   79.797320][  T953] cdc_ether 2-1:1.0 usb0: unregister 'cdc_ether' usb-dummy_hcd.1-1, CDC Ethernet Device
[   79.886162][  T942] usb 1-1: Using ep0 maxpacket: 16
[   79.892487][  T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   79.903620][  T942] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   79.913482][  T942] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   79.926538][  T942] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   79.935587][  T942] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   79.944450][  T942] usb 1-1: config 0 descriptor??
[   80.328843][ T1362] overlayfs: conflicting options: userxattr,redirect_dir=on
[   80.348620][ T1367] netlink: 20 bytes leftover after parsing attributes in process `syz.1.322'.
[   80.376093][  T955] usb 4-1: new high-speed USB device number 43 using dummy_hcd
[   80.406119][  T949] usb 3-1: new high-speed USB device number 31 using dummy_hcd
[   80.527049][  T955] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   80.536903][  T955] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   80.546601][  T955] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   80.561217][  T942] usbhid 1-1:0.0: can't add hid device: -71
[   80.567284][  T942] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   80.575573][  T955] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   80.577454][  T949] usb 3-1: Using ep0 maxpacket: 8
[   80.585194][  T942] usb 1-1: USB disconnect, device number 34
[   80.592162][  T949] usb 3-1: config 0 has no interfaces?
[   80.595685][  T955] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.602915][  T949] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   80.611649][  T955] usb 4-1: Product: syz
[   80.618920][  T949] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   80.622632][  T955] usb 4-1: Manufacturer: syz
[   80.632501][  T949] usb 3-1: Product: syz
[   80.635093][  T955] usb 4-1: SerialNumber: syz
[   80.639488][  T949] usb 3-1: Manufacturer: syz
[   80.647388][  T955] hub 4-1:1.0: bad descriptor, ignoring hub
[   80.648611][  T950] usb 2-1: new high-speed USB device number 39 using dummy_hcd
[   80.654671][  T955] hub 4-1:1.0: probe with driver hub failed with error -5
[   80.663778][  T949] usb 3-1: SerialNumber: syz
[   80.674557][  T949] usb 3-1: config 0 descriptor??
[   80.816202][  T950] usb 2-1: Using ep0 maxpacket: 8
[   80.824474][  T950] usb 2-1: unable to get BOS descriptor or descriptor too short
[   80.832740][  T950] usb 2-1: unable to read config index 0 descriptor/start: -71
[   80.840357][  T950] usb 2-1: can't read configurations, error -71
[   80.848261][  T955] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 43 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   80.887652][ T1356] FAULT_INJECTION: forcing a failure.
[   80.887652][ T1356] name failslab, interval 1, probability 0, space 0, times 0
[   80.900315][ T1356] CPU: 0 UID: 0 PID: 1356 Comm: syz.2.318 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   80.900347][ T1356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   80.900358][ T1356] Call Trace:
[   80.900362][ T1356]  <TASK>
[   80.900368][ T1356]  __dump_stack+0x21/0x30
[   80.900387][ T1356]  dump_stack_lvl+0x140/0x1c0
[   80.900400][ T1356]  ? __cfi_dump_stack_lvl+0x10/0x10
[   80.900413][ T1356]  dump_stack+0x19/0x20
[   80.900425][ T1356]  should_fail_ex+0x3d7/0x530
[   80.900436][ T1356]  should_failslab+0xac/0x100
[   80.900451][ T1356]  kmem_cache_alloc_noprof+0x42/0x410
[   80.900464][ T1356]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   80.900479][ T1356]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   80.900493][ T1356]  ? mutex_unlock+0x90/0x240
[   80.900505][ T1356]  kvm_mmu_topup_memory_cache+0x24/0x30
[   80.900519][ T1356]  kvm_mmu_load+0xa2/0x2890
[   80.900531][ T1356]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   80.900544][ T1356]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   80.900560][ T1356]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   80.900572][ T1356]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   80.900588][ T1356]  vcpu_run+0x4dad/0x7840
[   80.900606][ T1356]  ? signal_pending+0xc0/0xc0
[   80.900617][ T1356]  ? __kasan_check_write+0x18/0x20
[   80.900629][ T1356]  ? xfd_validate_state+0x68/0x140
[   80.900642][ T1356]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   80.900652][ T1356]  ? __kasan_check_write+0x18/0x20
[   80.900664][ T1356]  ? fpregs_mark_activate+0x68/0x160
[   80.900674][ T1356]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   80.900684][ T1356]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   80.900694][ T1356]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   80.900707][ T1356]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   80.900719][ T1356]  ? kstrtoull+0x13b/0x1e0
[   80.900728][ T1356]  ? kstrtouint+0x78/0xf0
[   80.900738][ T1356]  ? ioctl_has_perm+0x1bc/0x500
[   80.900749][ T1356]  ? __asan_memcpy+0x5a/0x80
[   80.900761][ T1356]  ? ioctl_has_perm+0x408/0x500
[   80.900771][ T1356]  ? has_cap_mac_admin+0xd0/0xd0
[   80.900781][ T1356]  ? __kasan_check_write+0x18/0x20
[   80.900793][ T1356]  ? mutex_lock_killable+0x97/0x1d0
[   80.900806][ T1356]  ? __cfi_mutex_lock_killable+0x10/0x10
[   80.900818][ T1356]  ? proc_fail_nth_write+0x184/0x220
[   80.900829][ T1356]  kvm_vcpu_ioctl+0xa48/0x1000
[   80.900845][ T1356]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   80.900859][ T1356]  ? __cfi_vfs_write+0x10/0x10
[   80.900872][ T1356]  ? __kasan_check_write+0x18/0x20
[   80.900883][ T1356]  ? mutex_unlock+0x90/0x240
[   80.900895][ T1356]  ? __cfi_mutex_unlock+0x10/0x10
[   80.900906][ T1356]  ? __fget_files+0x2c5/0x340
[   80.900920][ T1356]  ? __fget_files+0x2c5/0x340
[   80.900934][ T1356]  ? bpf_lsm_file_ioctl+0xd/0x20
[   80.900944][ T1356]  ? security_file_ioctl+0x3e/0x110
[   80.900955][ T1356]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   80.900968][ T1356]  __se_sys_ioctl+0x135/0x1b0
[   80.900983][ T1356]  __x64_sys_ioctl+0x7f/0xa0
[   80.900996][ T1356]  x64_sys_call+0x1878/0x2ee0
[   80.901010][ T1356]  do_syscall_64+0x57/0xf0
[   80.901020][ T1356]  ? clear_bhb_loop+0x50/0xa0
[   80.901030][ T1356]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   80.901046][ T1356] RIP: 0033:0x7f888259c799
[   80.901057][ T1356] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   80.901066][ T1356] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   80.901079][ T1356] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   80.901087][ T1356] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   80.901094][ T1356] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   80.901101][ T1356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   80.901108][ T1356] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   80.901117][ T1356]  </TASK>
[   81.288983][ T1354] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   81.297618][ T1354] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   81.307867][  T955] usb 3-1: USB disconnect, device number 31
[   81.391520][ T1374] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=542 sclass=netlink_route_socket pid=1374 comm=syz.0.324
[   81.396579][  T953] usb 4-1: USB disconnect, device number 43
[   81.410615][  T953] usblp0: removed
[   81.693400][   T36] kauditd_printk_skb: 13 callbacks suppressed
[   81.693418][   T36] audit: type=1400 audit(1772418408.879:317): avc:  denied  { read write } for  pid=1376 comm="syz.1.325" name="loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   81.724129][   T36] audit: type=1400 audit(1772418408.879:318): avc:  denied  { open } for  pid=1376 comm="syz.1.325" path="/dev/loop-control" dev="devtmpfs" ino=48 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1
[   82.016115][  T950] usb 2-1: new high-speed USB device number 40 using dummy_hcd
[   82.106073][  T953] usb 3-1: new high-speed USB device number 32 using dummy_hcd
[   82.126068][  T354] usb 4-1: new high-speed USB device number 44 using dummy_hcd
[   82.166060][  T950] usb 2-1: Using ep0 maxpacket: 8
[   82.172613][  T950] usb 2-1: unable to get BOS descriptor or descriptor too short
[   82.181109][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7
[   82.192097][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0
[   82.202288][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0
[   82.212050][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid maxpacket 65535, setting to 1024
[   82.223277][  T950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 1024
[   82.233457][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0
[   82.236135][  T953] usb 3-1: device descriptor read/64, error -71
[   82.243145][  T950] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid maxpacket 32801, setting to 1024
[   82.260484][  T950] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 1024
[   82.271937][  T950] usb 2-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84
[   82.281122][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   82.289210][  T950] usb 2-1: Product: syz
[   82.293399][  T950] usb 2-1: Manufacturer: syz
[   82.298142][  T950] usb 2-1: SerialNumber: syz
[   82.303280][  T354] usb 4-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F
[   82.315093][  T950] usb 2-1: config 0 descriptor??
[   82.320356][  T354] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7
[   82.331355][  T354] usb 4-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024
[   82.331548][ T1377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   82.342644][  T354] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00
[   82.349915][ T1377] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22
[   82.359119][  T354] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   82.377119][ T1388] raw-gadget.2 gadget.3: fail, usb_ep_enable returned -22
[   82.380510][  T950] snd-usb-audio 2-1:0.0: probe with driver snd-usb-audio failed with error -12
[   82.401461][  T512] udevd[512]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   82.496105][  T953] usb 3-1: device descriptor read/64, error -71
[   82.583614][  T950] usb 2-1: USB disconnect, device number 40
[   82.595832][   T36] audit: type=1400 audit(1772418409.779:319): avc:  denied  { connect } for  pid=1387 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   82.615521][   T36] audit: type=1400 audit(1772418409.779:320): avc:  denied  { write } for  pid=1387 comm="syz.3.328" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   82.736105][  T953] usb 3-1: new high-speed USB device number 33 using dummy_hcd
[   82.866154][  T953] usb 3-1: device descriptor read/64, error -71
[   83.092587][ T1392] rust_binder: Write failure EFAULT in pid:195
[   83.093619][ T1393] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   83.106108][  T953] usb 3-1: device descriptor read/64, error -71
[   83.108445][ T1393] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   83.216192][  T953] usb usb3-port1: attempt power cycle
[   83.222316][  T354] aiptek 4-1:17.0: Aiptek using 400 ms programming speed
[   83.229907][  T354] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:17.0/input/input11
[   83.242311][  T354] usb 4-1: USB disconnect, device number 44
[   83.242429][    C0] aiptek 4-1:17.0: aiptek_irq - usb_submit_urb failed with result -19
[   83.326086][  T950] usb 2-1: new low-speed USB device number 41 using dummy_hcd
[   83.345131][ T1395] netlink: 20 bytes leftover after parsing attributes in process `syz.0.331'.
[   83.487157][  T950] usb 2-1: config 1 interface 0 altsetting 7 endpoint 0x81 has invalid maxpacket 16, setting to 8
[   83.497845][  T950] usb 2-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1
[   83.510732][  T950] usb 2-1: config 1 interface 0 has no altsetting 0
[   83.556473][  T953] usb 3-1: new high-speed USB device number 34 using dummy_hcd
[   83.577100][  T953] usb 3-1: device descriptor read/8, error -71
[   83.686097][  T942] usb 1-1: new high-speed USB device number 35 using dummy_hcd
[   83.707052][  T953] usb 3-1: device descriptor read/8, error -71
[   83.816178][  T942] usb 1-1: device descriptor read/64, error -71
[   83.946126][  T953] usb 3-1: new high-speed USB device number 35 using dummy_hcd
[   83.967186][  T953] usb 3-1: device descriptor read/8, error -71
[   83.976108][  T955] usb 4-1: new high-speed USB device number 45 using dummy_hcd
[   84.056080][  T942] usb 1-1: device descriptor read/64, error -71
[   84.097187][  T953] usb 3-1: device descriptor read/8, error -71
[   84.126074][  T955] usb 4-1: Using ep0 maxpacket: 16
[   84.132329][  T955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   84.143410][  T955] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   84.153192][  T955] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   84.166117][  T955] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   84.175166][  T955] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   84.184012][  T955] usb 4-1: config 0 descriptor??
[   84.206206][  T953] usb usb3-port1: unable to enumerate USB device
[   84.306093][  T942] usb 1-1: new high-speed USB device number 36 using dummy_hcd
[   84.436224][  T942] usb 1-1: device descriptor read/64, error -71
[   84.676123][  T942] usb 1-1: device descriptor read/64, error -71
[   84.786686][  T942] usb usb1-port1: attempt power cycle
[   84.792661][  T955] usbhid 4-1:0.0: can't add hid device: -71
[   84.798694][  T955] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   84.807432][  T955] usb 4-1: USB disconnect, device number 45
[   85.126088][  T942] usb 1-1: new high-speed USB device number 37 using dummy_hcd
[   85.147147][  T942] usb 1-1: device descriptor read/8, error -71
[   85.266072][  T953] usb 3-1: new high-speed USB device number 36 using dummy_hcd
[   85.277239][  T942] usb 1-1: device descriptor read/8, error -71
[   85.416087][  T953] usb 3-1: Using ep0 maxpacket: 8
[   85.422350][  T953] usb 3-1: config 0 has no interfaces?
[   85.429352][  T953] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   85.438493][  T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   85.446603][  T953] usb 3-1: Product: syz
[   85.450776][  T953] usb 3-1: Manufacturer: syz
[   85.455377][  T953] usb 3-1: SerialNumber: syz
[   85.461425][  T953] usb 3-1: config 0 descriptor??
[   85.516084][  T942] usb 1-1: new high-speed USB device number 38 using dummy_hcd
[   85.537107][  T942] usb 1-1: device descriptor read/8, error -71
[   85.546070][  T354] usb 4-1: new high-speed USB device number 46 using dummy_hcd
[   85.667172][  T942] usb 1-1: device descriptor read/8, error -71
[   85.675761][ T1401] FAULT_INJECTION: forcing a failure.
[   85.675761][ T1401] name failslab, interval 1, probability 0, space 0, times 0
[   85.688501][ T1401] CPU: 0 UID: 0 PID: 1401 Comm: syz.2.334 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   85.688533][ T1401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   85.688545][ T1401] Call Trace:
[   85.688552][ T1401]  <TASK>
[   85.688560][ T1401]  __dump_stack+0x21/0x30
[   85.688590][ T1401]  dump_stack_lvl+0x140/0x1c0
[   85.688613][ T1401]  ? __cfi_dump_stack_lvl+0x10/0x10
[   85.688635][ T1401]  dump_stack+0x19/0x20
[   85.688656][ T1401]  should_fail_ex+0x3d7/0x530
[   85.688675][ T1401]  should_failslab+0xac/0x100
[   85.688700][ T1401]  kmem_cache_alloc_noprof+0x42/0x410
[   85.688723][ T1401]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   85.688750][ T1401]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   85.688768][ T1401]  ? mutex_unlock+0x90/0x240
[   85.688781][ T1401]  kvm_mmu_topup_memory_cache+0x24/0x30
[   85.688795][ T1401]  kvm_mmu_load+0xa2/0x2890
[   85.688807][ T1401]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   85.688822][ T1401]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   85.688839][ T1401]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   85.688870][ T1401]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   85.688899][ T1401]  vcpu_run+0x4dad/0x7840
[   85.688920][ T1401]  ? signal_pending+0xc0/0xc0
[   85.688932][ T1401]  ? __kasan_check_write+0x18/0x20
[   85.688943][ T1401]  ? xfd_validate_state+0x68/0x140
[   85.688956][ T1401]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   85.688967][ T1401]  ? __kasan_check_write+0x18/0x20
[   85.688986][ T1401]  ? fpregs_mark_activate+0x68/0x160
[   85.689005][ T1401]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   85.689023][ T1401]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   85.689043][ T1401]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   85.689060][ T1401]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   85.689072][ T1401]  ? kstrtoull+0x13b/0x1e0
[   85.689081][ T1401]  ? kstrtouint+0x78/0xf0
[   85.689091][ T1401]  ? ioctl_has_perm+0x1bc/0x500
[   85.689102][ T1401]  ? __asan_memcpy+0x5a/0x80
[   85.689130][ T1401]  ? ioctl_has_perm+0x408/0x500
[   85.689150][ T1401]  ? has_cap_mac_admin+0xd0/0xd0
[   85.689169][ T1401]  ? __kasan_check_write+0x18/0x20
[   85.689190][ T1401]  ? mutex_lock_killable+0x97/0x1d0
[   85.689208][ T1401]  ? __cfi_mutex_lock_killable+0x10/0x10
[   85.689221][ T1401]  ? proc_fail_nth_write+0x184/0x220
[   85.689233][ T1401]  kvm_vcpu_ioctl+0xa48/0x1000
[   85.689248][ T1401]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   85.689267][ T1401]  ? __cfi_vfs_write+0x10/0x10
[   85.689290][ T1401]  ? __kasan_check_write+0x18/0x20
[   85.689312][ T1401]  ? mutex_unlock+0x90/0x240
[   85.689332][ T1401]  ? __cfi_mutex_unlock+0x10/0x10
[   85.689346][ T1401]  ? __fget_files+0x2c5/0x340
[   85.689361][ T1401]  ? __fget_files+0x2c5/0x340
[   85.689375][ T1401]  ? bpf_lsm_file_ioctl+0xd/0x20
[   85.689384][ T1401]  ? security_file_ioctl+0x3e/0x110
[   85.689395][ T1401]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   85.689417][ T1401]  __se_sys_ioctl+0x135/0x1b0
[   85.689442][ T1401]  __x64_sys_ioctl+0x7f/0xa0
[   85.689467][ T1401]  x64_sys_call+0x1878/0x2ee0
[   85.689486][ T1401]  do_syscall_64+0x57/0xf0
[   85.689496][ T1401]  ? clear_bhb_loop+0x50/0xa0
[   85.689506][ T1401]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   85.689523][ T1401] RIP: 0033:0x7f888259c799
[   85.689534][ T1401] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   85.689547][ T1401] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   85.689569][ T1401] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   85.689585][ T1401] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   85.689598][ T1401] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   85.689611][ T1401] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   85.689622][ T1401] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   85.689632][ T1401]  </TASK>
[   85.756073][  T354] usb 4-1: Using ep0 maxpacket: 32
[   85.786147][  T942] usb usb1-port1: unable to enumerate USB device
[   85.790933][  T949] usb 3-1: USB disconnect, device number 36
[   86.092125][  T354] usb 4-1: New USB device found, idVendor=041e, idProduct=323b, bcdDevice= 0.40
[   86.101258][  T354] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.109619][  T354] usb 4-1: Product: syz
[   86.113791][  T354] usb 4-1: Manufacturer: syz
[   86.118493][  T354] usb 4-1: SerialNumber: syz
[   86.123160][  T950] usb 2-1: New USB device found, idVendor=060b, idProduct=0001, bcdDevice= 0.40
[   86.132525][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.140874][  T950] usb 2-1: Product: 偢䵼ഃ湸Ꮡ
[   86.146136][  T950] usb 2-1: Manufacturer: љ
[   86.152771][  T950] usb 2-1: can't set config #1, error -71
[   86.159608][  T950] usb 2-1: USB disconnect, device number 41
[   86.466094][  T950] usb 2-1: new high-speed USB device number 42 using dummy_hcd
[   86.500297][  T354] usb 4-1: 1:1 : UAC_AS_GENERAL descriptor not found
[   86.508864][  T354] usb 4-1: 2:1 : UAC_AS_GENERAL descriptor not found
[   86.516639][ T1412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.338'.
[   86.529772][  T354] usb 4-1: USB disconnect, device number 46
[   86.554774][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   86.597000][ T1421] syzkaller1: entered promiscuous mode
[   86.602511][ T1421] syzkaller1: entered allmulticast mode
[   86.637306][  T950] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   86.650365][  T950] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   86.660604][  T950] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   86.675358][  T950] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   86.685684][  T950] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   86.693929][  T950] usb 2-1: Product: syz
[   86.699208][  T950] usb 2-1: Manufacturer: syz
[   86.703876][  T950] usb 2-1: SerialNumber: syz
[   86.711274][  T950] hub 2-1:1.0: bad descriptor, ignoring hub
[   86.726078][  T950] hub 2-1:1.0: probe with driver hub failed with error -5
[   86.798341][ T1424] netlink: 20 bytes leftover after parsing attributes in process `syz.0.341'.
[   86.914325][  T950] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 42 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   87.024011][ T1430] netlink: 'syz.3.343': attribute type 28 has an invalid length.
[   87.032578][ T1430] netlink: 25 bytes leftover after parsing attributes in process `syz.3.343'.
[   87.116696][ T1406] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   87.125581][ T1406] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   87.133606][  T354] usb 1-1: new full-speed USB device number 39 using dummy_hcd
[   87.236313][  T949] usb 2-1: USB disconnect, device number 42
[   87.242911][  T949] usblp0: removed
[   87.296108][  T950] usb 4-1: new high-speed USB device number 47 using dummy_hcd
[   87.305001][  T354] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   87.315132][  T354] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3
[   87.325568][  T354] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   87.334754][  T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.342810][  T354] usb 1-1: Product: syz
[   87.346991][  T354] usb 1-1: Manufacturer: syz
[   87.351647][  T354] usb 1-1: SerialNumber: syz
[   87.426106][  T953] usb 3-1: new high-speed USB device number 37 using dummy_hcd
[   87.446064][  T950] usb 4-1: Using ep0 maxpacket: 16
[   87.452310][  T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   87.463316][  T950] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   87.473180][  T950] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   87.486051][  T950] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   87.495186][  T950] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   87.503905][  T950] usb 4-1: config 0 descriptor??
[   87.558645][  T354] usb 1-1: 0:2 : does not exist
[   87.565478][  T354] usb 1-1: 5:0: failed to get current value for ch 0 (-22)
[   87.576366][  T354] usb 1-1: USB disconnect, device number 39
[   87.578085][  T953] usb 3-1: Using ep0 maxpacket: 8
[   87.588686][  T953] usb 3-1: config 0 has no interfaces?
[   87.589477][  T345] udevd[345]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory
[   87.595591][  T953] usb 3-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   87.619412][  T953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   87.627435][  T953] usb 3-1: Product: syz
[   87.631610][  T953] usb 3-1: Manufacturer: syz
[   87.636383][  T953] usb 3-1: SerialNumber: syz
[   87.641886][  T953] usb 3-1: config 0 descriptor??
[   87.853192][ T1434] FAULT_INJECTION: forcing a failure.
[   87.853192][ T1434] name failslab, interval 1, probability 0, space 0, times 0
[   87.866071][ T1434] CPU: 1 UID: 0 PID: 1434 Comm: syz.2.345 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   87.866103][ T1434] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   87.866114][ T1434] Call Trace:
[   87.866123][ T1434]  <TASK>
[   87.866130][ T1434]  __dump_stack+0x21/0x30
[   87.866161][ T1434]  dump_stack_lvl+0x140/0x1c0
[   87.866174][ T1434]  ? __cfi_dump_stack_lvl+0x10/0x10
[   87.866188][ T1434]  dump_stack+0x19/0x20
[   87.866199][ T1434]  should_fail_ex+0x3d7/0x530
[   87.866211][ T1434]  should_failslab+0xac/0x100
[   87.866226][ T1434]  kmem_cache_alloc_noprof+0x42/0x410
[   87.866239][ T1434]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   87.866254][ T1434]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   87.866268][ T1434]  ? mutex_unlock+0x90/0x240
[   87.866282][ T1434]  kvm_mmu_topup_memory_cache+0x24/0x30
[   87.866296][ T1434]  kvm_mmu_load+0xa2/0x2890
[   87.866308][ T1434]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   87.866321][ T1434]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   87.866336][ T1434]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   87.866349][ T1434]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   87.866364][ T1434]  vcpu_run+0x4dad/0x7840
[   87.866383][ T1434]  ? signal_pending+0xc0/0xc0
[   87.866394][ T1434]  ? __kasan_check_write+0x18/0x20
[   87.866406][ T1434]  ? xfd_validate_state+0x68/0x140
[   87.866419][ T1434]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   87.866429][ T1434]  ? __kasan_check_write+0x18/0x20
[   87.866441][ T1434]  ? fpregs_mark_activate+0x68/0x160
[   87.866450][ T1434]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   87.866460][ T1434]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   87.866471][ T1434]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   87.866484][ T1434]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   87.866496][ T1434]  ? kstrtoull+0x13b/0x1e0
[   87.866505][ T1434]  ? kstrtouint+0x78/0xf0
[   87.866515][ T1434]  ? ioctl_has_perm+0x1bc/0x500
[   87.866526][ T1434]  ? __asan_memcpy+0x5a/0x80
[   87.866538][ T1434]  ? ioctl_has_perm+0x408/0x500
[   87.866548][ T1434]  ? has_cap_mac_admin+0xd0/0xd0
[   87.866558][ T1434]  ? __kasan_check_write+0x18/0x20
[   87.866570][ T1434]  ? mutex_lock_killable+0x97/0x1d0
[   87.866582][ T1434]  ? __cfi_mutex_lock_killable+0x10/0x10
[   87.866595][ T1434]  ? proc_fail_nth_write+0x184/0x220
[   87.866606][ T1434]  kvm_vcpu_ioctl+0xa48/0x1000
[   87.866621][ T1434]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   87.866635][ T1434]  ? __cfi_vfs_write+0x10/0x10
[   87.866647][ T1434]  ? __kasan_check_write+0x18/0x20
[   87.866658][ T1434]  ? mutex_unlock+0x90/0x240
[   87.866676][ T1434]  ? __cfi_mutex_unlock+0x10/0x10
[   87.866693][ T1434]  ? __fget_files+0x2c5/0x340
[   87.866712][ T1434]  ? __fget_files+0x2c5/0x340
[   87.866726][ T1434]  ? bpf_lsm_file_ioctl+0xd/0x20
[   87.866736][ T1434]  ? security_file_ioctl+0x3e/0x110
[   87.866747][ T1434]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   87.866761][ T1434]  __se_sys_ioctl+0x135/0x1b0
[   87.866776][ T1434]  __x64_sys_ioctl+0x7f/0xa0
[   87.866790][ T1434]  x64_sys_call+0x1878/0x2ee0
[   87.866803][ T1434]  do_syscall_64+0x57/0xf0
[   87.866813][ T1434]  ? clear_bhb_loop+0x50/0xa0
[   87.866823][ T1434]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   87.866839][ T1434] RIP: 0033:0x7f888259c799
[   87.866850][ T1434] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   87.866859][ T1434] RSP: 002b:00007f8880ff7028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   87.866872][ T1434] RAX: ffffffffffffffda RBX: 00007f8882815fa0 RCX: 00007f888259c799
[   87.866880][ T1434] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   87.866887][ T1434] RBP: 00007f8880ff7090 R08: 0000000000000000 R09: 0000000000000000
[   87.866894][ T1434] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   87.866900][ T1434] R13: 00007f8882816038 R14: 00007f8882815fa0 R15: 00007ffceb42e7c8
[   87.866917][ T1434]  </TASK>
[   88.006100][  T953] usb 2-1: new high-speed USB device number 43 using dummy_hcd
[   88.144050][ T1449] netlink: 20 bytes leftover after parsing attributes in process `syz.0.350'.
[   88.268291][  T950] usbhid 4-1:0.0: can't add hid device: -71
[   88.274295][  T950] usbhid 4-1:0.0: probe with driver usbhid failed with error -71
[   88.283371][  T950] usb 4-1: USB disconnect, device number 47
[   88.284789][  T942] usb 3-1: USB disconnect, device number 37
[   88.326066][  T953] usb 2-1: Using ep0 maxpacket: 8
[   88.332676][  T953] usb 2-1: config 179 has an invalid interface number: 65 but max is 0
[   88.341410][  T953] usb 2-1: config 179 has no interface number 0
[   88.348034][  T953] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9
[   88.362560][  T953] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024
[   88.374284][  T953] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7
[   88.385752][  T953] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0
[   88.395917][  T953] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23
[   88.409247][  T953] usb 2-1: config 179 interface 65 has no altsetting 0
[   88.416205][  T953] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00
[   88.425255][  T953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.439066][  T953] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input12
[   88.596827][  T354] usb 1-1: new high-speed USB device number 40 using dummy_hcd
[   88.637282][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.645877][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.654407][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.663077][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.672407][ T1446] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.681013][ T1457] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   88.681435][ T1446] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.690012][ T1457] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   88.708099][  T949] usb 2-1: USB disconnect, device number 43
[   88.714334][  T949] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19
[   88.723092][   T36] audit: type=1400 audit(1772418415.899:321): avc:  denied  { setopt } for  pid=1459 comm="syz.1.353" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1
[   88.746061][  T354] usb 1-1: Using ep0 maxpacket: 32
[   88.752199][  T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   88.763091][  T354] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   88.772858][  T354] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40
[   88.781971][  T354] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   88.790535][  T354] usb 1-1: config 0 descriptor??
[   88.796377][  T354] hub 1-1:0.0: USB hub found
[   88.986176][  T950] usb 4-1: new high-speed USB device number 48 using dummy_hcd
[   88.997280][  T354] hub 1-1:0.0: config failed, can't read hub descriptor (err -22)
[   89.007993][  T354] usbhid 1-1:0.0: can't add hid device: -71
[   89.015509][  T354] usbhid 1-1:0.0: probe with driver usbhid failed with error -71
[   89.021260][   T36] audit: type=1400 audit(1772418416.209:322): avc:  denied  { write } for  pid=1474 comm="syz.0.359" name="anycast6" dev="proc" ino=4026532426 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1
[   89.028132][ T1475] netlink: 20 bytes leftover after parsing attributes in process `syz.0.359'.
[   89.056648][  T354] usb 1-1: USB disconnect, device number 40
[   89.062689][  T949] usb 2-1: new low-speed USB device number 44 using dummy_hcd
[   89.147397][  T950] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   89.157109][  T950] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   89.166883][  T950] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   89.181056][  T950] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   89.190242][  T950] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.198292][  T950] usb 4-1: Product: syz
[   89.202458][  T950] usb 4-1: Manufacturer: syz
[   89.207206][  T950] usb 4-1: SerialNumber: syz
[   89.213539][  T950] hub 4-1:1.0: bad descriptor, ignoring hub
[   89.216071][  T942] usb 3-1: new full-speed USB device number 38 using dummy_hcd
[   89.219504][  T950] hub 4-1:1.0: probe with driver hub failed with error -5
[   89.234579][  T949] usb 2-1: too many configurations: 129, using maximum allowed: 8
[   89.248645][  T949] usb 2-1: New USB device found, idVendor=1199, idProduct=9829, bcdDevice=8c.aa
[   89.257762][  T949] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   89.266372][  T949] usb 2-1: config 0 descriptor??
[   89.272252][  T949] hub 2-1:0.0: Invalid hub with more than one config or interface
[   89.280405][  T949] hub 2-1:0.0: probe with driver hub failed with error -22
[   89.377156][  T942] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config
[   89.387336][  T942] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3
[   89.397739][  T942] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40
[   89.406113][  T354] usb 1-1: new high-speed USB device number 41 using dummy_hcd
[   89.406932][  T942] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.416786][  T950] usblp 4-1:1.0: usblp0: USB Unidirectional printer dev 48 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   89.422799][  T942] usb 3-1: Product: syz
[   89.437481][  T942] usb 3-1: Manufacturer: syz
[   89.442098][  T942] usb 3-1: SerialNumber: syz
[   89.473827][  T950] usb 2-1: USB disconnect, device number 44
[   89.576122][  T354] usb 1-1: Using ep0 maxpacket: 32
[   89.582371][  T354] usb 1-1: config 0 has an invalid interface number: 67 but max is 0
[   89.590496][  T354] usb 1-1: config 0 has no interface number 0
[   89.598130][  T354] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57
[   89.607229][  T354] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   89.615213][  T354] usb 1-1: Product: syz
[   89.619385][  T354] usb 1-1: Manufacturer: syz
[   89.623985][  T354] usb 1-1: SerialNumber: syz
[   89.629467][  T354] usb 1-1: config 0 descriptor??
[   89.635500][  T354] smsc95xx v2.0.0
[   89.642273][ T1462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.650872][ T1462] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.653288][ T1470] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   89.667318][ T1470] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   89.679030][  T942] usb 3-1: 0:2 : does not exist
[   89.687871][  T942] usb 3-1: USB disconnect, device number 38
[   89.746296][  T949] usb 4-1: USB disconnect, device number 48
[   89.753087][  T949] usblp0: removed
[   90.036439][  T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32
[   90.047172][  T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD
[   90.118043][ T1481] rust_binder: Write failure EINVAL in pid:217
[   90.260350][  T354] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -32
[   90.277437][  T354] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -32
[   90.308396][ T1491] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[   90.426065][  T942] usb 3-1: new high-speed USB device number 39 using dummy_hcd
[   90.476075][  T953] usb 4-1: new high-speed USB device number 49 using dummy_hcd
[   90.576076][  T942] usb 3-1: Using ep0 maxpacket: 16
[   90.582212][  T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7
[   90.593159][  T942] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0
[   90.603084][  T942] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9
[   90.616023][  T942] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00
[   90.625234][  T942] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   90.634010][  T942] usb 3-1: config 0 descriptor??
[   90.646051][  T953] usb 4-1: Using ep0 maxpacket: 8
[   90.652138][  T953] usb 4-1: config 0 has no interfaces?
[   90.659012][  T953] usb 4-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16
[   90.668093][  T953] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   90.676147][  T953] usb 4-1: Product: syz
[   90.680355][  T953] usb 4-1: Manufacturer: syz
[   90.684939][  T953] usb 4-1: SerialNumber: syz
[   90.690265][  T953] usb 4-1: config 0 descriptor??
[   90.900653][ T1489] FAULT_INJECTION: forcing a failure.
[   90.900653][ T1489] name failslab, interval 1, probability 0, space 0, times 0
[   90.913390][ T1489] CPU: 0 UID: 0 PID: 1489 Comm: syz.3.364 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   90.913421][ T1489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   90.913435][ T1489] Call Trace:
[   90.913440][ T1489]  <TASK>
[   90.913446][ T1489]  __dump_stack+0x21/0x30
[   90.913465][ T1489]  dump_stack_lvl+0x140/0x1c0
[   90.913478][ T1489]  ? __cfi_dump_stack_lvl+0x10/0x10
[   90.913492][ T1489]  dump_stack+0x19/0x20
[   90.913504][ T1489]  should_fail_ex+0x3d7/0x530
[   90.913516][ T1489]  should_failslab+0xac/0x100
[   90.913531][ T1489]  kmem_cache_alloc_noprof+0x42/0x410
[   90.913545][ T1489]  ? __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   90.913560][ T1489]  __kvm_mmu_topup_memory_cache+0x1eb/0x850
[   90.913574][ T1489]  ? mutex_unlock+0x90/0x240
[   90.913587][ T1489]  kvm_mmu_topup_memory_cache+0x24/0x30
[   90.913601][ T1489]  kvm_mmu_load+0xa2/0x2890
[   90.913614][ T1489]  ? kvm_hv_setup_tsc_page+0x5f4/0xa80
[   90.913627][ T1489]  ? vmx_flush_tlb_guest+0x1d3/0x3b0
[   90.913638][ T1489]  ? kvm_apic_has_interrupt+0x793/0x7a0
[   90.913651][ T1489]  ? kvm_service_local_tlb_flush_requests+0x81/0x150
[   90.913673][ T1489]  vcpu_run+0x4dad/0x7840
[   90.913691][ T1489]  ? signal_pending+0xc0/0xc0
[   90.913703][ T1489]  ? __kasan_check_write+0x18/0x20
[   90.913716][ T1489]  ? xfd_validate_state+0x68/0x140
[   90.913728][ T1489]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   90.913739][ T1489]  ? __kasan_check_write+0x18/0x20
[   90.913751][ T1489]  ? fpregs_mark_activate+0x68/0x160
[   90.913761][ T1489]  ? fpu_swap_kvm_fpstate+0x44c/0x5e0
[   90.913772][ T1489]  ? fpu_swap_kvm_fpstate+0x92/0x5e0
[   90.913783][ T1489]  kvm_arch_vcpu_ioctl_run+0x1167/0x1bd0
[   90.913796][ T1489]  ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10
[   90.913808][ T1489]  ? kstrtoull+0x13b/0x1e0
[   90.913818][ T1489]  ? kstrtouint+0x78/0xf0
[   90.913828][ T1489]  ? ioctl_has_perm+0x1bc/0x500
[   90.913840][ T1489]  ? __asan_memcpy+0x5a/0x80
[   90.913852][ T1489]  ? ioctl_has_perm+0x408/0x500
[   90.913862][ T1489]  ? has_cap_mac_admin+0xd0/0xd0
[   90.913873][ T1489]  ? __kasan_check_write+0x18/0x20
[   90.913885][ T1489]  ? mutex_lock_killable+0x97/0x1d0
[   90.913898][ T1489]  ? __cfi_mutex_lock_killable+0x10/0x10
[   90.913911][ T1489]  ? proc_fail_nth_write+0x184/0x220
[   90.913923][ T1489]  kvm_vcpu_ioctl+0xa48/0x1000
[   90.913938][ T1489]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   90.913952][ T1489]  ? __cfi_vfs_write+0x10/0x10
[   90.913965][ T1489]  ? __kasan_check_write+0x18/0x20
[   90.913977][ T1489]  ? mutex_unlock+0x90/0x240
[   90.913989][ T1489]  ? __cfi_mutex_unlock+0x10/0x10
[   90.914001][ T1489]  ? __fget_files+0x2c5/0x340
[   90.914016][ T1489]  ? __fget_files+0x2c5/0x340
[   90.914030][ T1489]  ? bpf_lsm_file_ioctl+0xd/0x20
[   90.914041][ T1489]  ? security_file_ioctl+0x3e/0x110
[   90.914051][ T1489]  ? __cfi_kvm_vcpu_ioctl+0x10/0x10
[   90.914065][ T1489]  __se_sys_ioctl+0x135/0x1b0
[   90.914080][ T1489]  __x64_sys_ioctl+0x7f/0xa0
[   90.914094][ T1489]  x64_sys_call+0x1878/0x2ee0
[   90.914108][ T1489]  do_syscall_64+0x57/0xf0
[   90.914118][ T1489]  ? clear_bhb_loop+0x50/0xa0
[   90.914129][ T1489]  entry_SYSCALL_64_after_hwframe+0x76/0x7e
[   90.914146][ T1489] RIP: 0033:0x7f6a73b9c799
[   90.914157][ T1489] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[   90.914168][ T1489] RSP: 002b:00007f6a74970028 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[   90.914181][ T1489] RAX: ffffffffffffffda RBX: 00007f6a73e15fa0 RCX: 00007f6a73b9c799
[   90.914190][ T1489] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000006
[   90.914198][ T1489] RBP: 00007f6a74970090 R08: 0000000000000000 R09: 0000000000000000
[   90.914205][ T1489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002
[   90.914212][ T1489] R13: 00007f6a73e16038 R14: 00007f6a73e15fa0 R15: 00007ffcef7bb4b8
[   90.914222][ T1489]  </TASK>
[   91.326540][  T955] usb 4-1: USB disconnect, device number 49
[   91.377592][   T36] audit: type=1400 audit(1772418418.569:323): avc:  denied  { mounton } for  pid=1500 comm="syz.1.366" path="/79/file0" dev="proc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1
[   91.420732][   T36] audit: type=1400 audit(1772418418.609:324): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1
[   91.440746][   T36] audit: type=1400 audit(1772418418.629:325): avc:  denied  { unmount } for  pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   91.493976][  T942] usbhid 3-1:0.0: can't add hid device: -71
[   91.499981][  T942] usbhid 3-1:0.0: probe with driver usbhid failed with error -71
[   91.508702][  T942] usb 3-1: USB disconnect, device number 39
[   91.638353][  T329] bridge_slave_1: left allmulticast mode
[   91.644075][  T329] bridge_slave_1: left promiscuous mode
[   91.649768][  T329] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.657396][  T329] bridge_slave_0: left allmulticast mode
[   91.663060][  T329] bridge_slave_0: left promiscuous mode
[   91.668856][  T329] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.752531][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.759651][ T1506] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.767023][ T1506] bridge_slave_0: entered allmulticast mode
[   91.773289][ T1506] bridge_slave_0: entered promiscuous mode
[   91.779880][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.787037][ T1506] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.794171][ T1506] bridge_slave_1: entered allmulticast mode
[   91.800781][ T1506] bridge_slave_1: entered promiscuous mode
[   91.872227][ T1506] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.879328][ T1506] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.886819][ T1506] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.893845][ T1506] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.918095][   T45] bridge0: port 1(bridge_slave_0) entered disabled state
[   91.925355][   T45] bridge0: port 2(bridge_slave_1) entered disabled state
[   91.933930][   T13] bridge0: port 1(bridge_slave_0) entered blocking state
[   91.941012][   T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[   91.949922][   T13] bridge0: port 2(bridge_slave_1) entered blocking state
[   91.956988][   T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[   91.979300][ T1506] veth0_vlan: entered promiscuous mode
[   91.990713][ T1506] veth1_macvtap: entered promiscuous mode
[   92.012913][   T36] audit: type=1400 audit(1772418419.199:326): avc:  denied  { mount } for  pid=1506 comm="syz-executor" name="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[   92.039442][  T329] ------------[ cut here ]------------
[   92.044970][  T329] WARNING: CPU: 0 PID: 329 at net/ipv6/xfrm6_tunnel.c:341 xfrm6_tunnel_net_exit+0xc4/0x140
[   92.055039][  T329] Modules linked in:
[   92.059000][  T329] CPU: 0 UID: 0 PID: 329 Comm: kworker/u8:3 Not tainted syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   92.070663][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.080769][  T329] Workqueue: netns cleanup_net
[   92.085644][  T329] RIP: 0010:xfrm6_tunnel_net_exit+0xc4/0x140
[   92.091719][  T329] Code: e8 e1 99 db fc 4b 83 3c 3e 00 75 19 e8 b5 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 a7 b7 83 fc 49 83 c7 08 eb c9 e8 9c b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 49 8d 9e 00 08 00 00 45 31 ff 4a
[   92.093377][  T950] usb 1-1: USB disconnect, device number 41
[   92.111360][  T329] RSP: 0018:ffffc9000b8dfb90 EFLAGS: 00010293
[   92.111388][  T329] RAX: ffffffff8503e7c4 RBX: ffff888120788000 RCX: ffff88810779cc00
[   92.111402][  T329] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103b80000
[   92.111416][  T329] RBP: ffffc9000b8dfbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20
[   92.111429][  T329] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000
[   92.126667][  T354] usb 4-1: new high-speed USB device number 50 using dummy_hcd
[   92.131408][  T329] R13: dffffc0000000000 R14: ffff888103b80000 R15: 0000000000000000
[   92.171023][  T329] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   92.180001][  T329] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.186619][  T329] CR2: 00007f9851039fe0 CR3: 00000000074a8000 CR4: 00000000003526b0
[   92.194591][  T329] Call Trace:
[   92.197906][  T329]  <TASK>
[   92.200836][  T329]  cleanup_net+0x6bd/0xc90
[   92.205243][  T329]  ? __cfi_cleanup_net+0x10/0x10
[   92.210208][  T329]  ? kick_pool+0xb9/0x550
[   92.214549][  T329]  process_scheduled_works+0x7d4/0x1020
[   92.220135][  T329]  worker_thread+0xc70/0x10b0
[   92.224824][  T329]  ? __cfi_try_to_wake_up+0x10/0x10
[   92.230052][  T329]  kthread+0x2c9/0x370
[   92.234122][  T329]  ? __cfi_worker_thread+0x10/0x10
[   92.239277][  T329]  ? __cfi_kthread+0x10/0x10
[   92.243873][  T329]  ret_from_fork+0x64/0xa0
[   92.248347][  T329]  ? __cfi_kthread+0x10/0x10
[   92.252940][  T329]  ret_from_fork_asm+0x1a/0x30
[   92.257758][  T329]  </TASK>
[   92.260771][  T329] ---[ end trace 0000000000000000 ]---
[   92.266598][  T329] ------------[ cut here ]------------
[   92.272113][  T329] WARNING: CPU: 1 PID: 329 at net/ipv6/xfrm6_tunnel.c:344 xfrm6_tunnel_net_exit+0x119/0x140
[   92.282311][  T329] Modules linked in:
[   92.286271][  T329] CPU: 1 UID: 0 PID: 329 Comm: kworker/u8:3 Tainted: G        W          syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   92.299409][  T329] Tainted: [W]=WARN
[   92.303205][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.313288][  T329] Workqueue: netns cleanup_net
[   92.318196][  T329] RIP: 0010:xfrm6_tunnel_net_exit+0x119/0x140
[   92.324273][  T329] Code: fc 4b 83 bc 3e 00 08 00 00 00 75 19 e8 60 b7 83 fc 49 81 ff f8 07 00 00 74 1b e8 52 b7 83 fc 49 83 c7 08 eb c5 e8 47 b7 83 fc <0f> 0b 49 81 ff f8 07 00 00 75 e5 e8 37 b7 83 fc 5b 41 5c 41 5e 41
[   92.344014][  T329] RSP: 0018:ffffc9000b8dfb90 EFLAGS: 00010293
[   92.350113][  T329] RAX: ffffffff8503e819 RBX: ffff888103b80800 RCX: ffff88810779cc00
[   92.358134][  T329] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff888103b80808
[   92.366238][  T329] RBP: ffffc9000b8dfbb0 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20
[   92.374229][  T329] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: dffffc0000000000
[   92.382271][  T329] R13: dffffc0000000000 R14: ffff888103b80000 R15: 0000000000000008
[   92.390383][  T329] FS:  0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[   92.399337][  T329] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.405921][  T329] CR2: 00007f98503e82f8 CR3: 000000010b3e0000 CR4: 00000000003526b0
[   92.406107][  T955] usb 3-1: new high-speed USB device number 40 using dummy_hcd
[   92.413959][  T329] DR0: 0000000000000000 DR1: 000000000000000a DR2: 0000000000000000
[   92.429438][  T329] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[   92.437616][  T329] Call Trace:
[   92.440968][  T329]  <TASK>
[   92.443971][  T329]  cleanup_net+0x6bd/0xc90
[   92.448517][  T329]  ? __cfi_cleanup_net+0x10/0x10
[   92.453471][  T329]  ? kick_pool+0xb9/0x550
[   92.457849][  T329]  process_scheduled_works+0x7d4/0x1020
[   92.463408][  T329]  worker_thread+0xc70/0x10b0
[   92.468116][  T329]  ? __cfi_try_to_wake_up+0x10/0x10
[   92.473332][  T329]  kthread+0x2c9/0x370
[   92.477513][  T329]  ? __cfi_worker_thread+0x10/0x10
[   92.482672][  T329]  ? __cfi_kthread+0x10/0x10
[   92.487321][  T329]  ret_from_fork+0x64/0xa0
[   92.491756][  T329]  ? __cfi_kthread+0x10/0x10
[   92.496419][  T329]  ret_from_fork_asm+0x1a/0x30
[   92.501199][  T329]  </TASK>
[   92.504209][  T329] ---[ end trace 0000000000000000 ]---
[   92.510171][  T354] usb 4-1: device descriptor read/64, error -71
[   92.516632][  T949] usb 5-1: new full-speed USB device number 2 using dummy_hcd
[   92.520633][  T329] ------------[ cut here ]------------
[   92.529638][  T329] WARNING: CPU: 0 PID: 329 at net/xfrm/xfrm_state.c:3216 xfrm_state_fini+0x2be/0x310
[   92.539156][  T329] Modules linked in:
[   92.543053][  T329] CPU: 0 UID: 0 PID: 329 Comm: kworker/u8:3 Tainted: G        W          syzkaller #0 a88889f1fd4bd040639a1a4060abea1bc20e1fef
[   92.556201][  T329] Tainted: [W]=WARN
[   92.559997][  T329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[   92.570067][  T329] Workqueue: netns cleanup_net
[   92.574844][  T329] RIP: 0010:xfrm_state_fini+0x2be/0x310
[   92.580426][  T329] Code: 3c 20 00 74 08 48 89 df e8 8f 63 f6 fc 48 8b 3b e8 27 9e e1 fc 5b 41 5c 41 5d 41 5e 41 5f 5d e9 18 c3 b7 00 cc e8 52 81 9e fc <0f> 0b e9 b0 fd ff ff e8 46 81 9e fc 0f 0b e9 18 fe ff ff e8 3a 81
[   92.600062][  T329] RSP: 0018:ffffc9000b8dfb70 EFLAGS: 00010293
[   92.606154][  T329] RAX: ffffffff84e91e0e RBX: ffff888120788000 RCX: ffff88810779cc00
[   92.614146][  T329] RDX: 0000000000000000 RSI: 0000000000400000 RDI: ffff88810779cc00
[   92.622210][  T329] RBP: ffffc9000b8dfb98 R08: ffffffff87d35907 R09: 1ffffffff0fa6b20
[   92.630222][  T329] R10: dffffc0000000000 R11: fffffbfff0fa6b21 R12: 1ffffffff0fa6870
[   92.638235][  T329] R13: dffffc0000000000 R14: ffff888120788c00 R15: dffffc0000000000
[   92.646294][  T329] FS:  0000000000000000(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[   92.655319][  T329] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[   92.661924][  T329] CR2: 00007f9851039fe0 CR3: 0000000121838000 CR4: 00000000003526b0
[   92.669950][  T329] Call Trace:
[   92.673231][  T329]  <TASK>
[   92.676231][  T329]  xfrm_net_exit+0x31/0x80
[   92.680670][  T329]  cleanup_net+0x6bd/0xc90
[   92.685084][  T329]  ? __cfi_cleanup_net+0x10/0x10
[   92.690080][  T329]  ? kick_pool+0xb9/0x550
[   92.694427][  T329]  process_scheduled_works+0x7d4/0x1020
[   92.700005][  T329]  worker_thread+0xc70/0x10b0
[   92.704693][  T329]  ? __cfi_try_to_wake_up+0x10/0x10
[   92.707237][  T949] usb 5-1: config index 0 descriptor too short (expected 26148, got 36)
[   92.709925][  T329]  kthread+0x2c9/0x370
[   92.718775][  T949] usb 5-1: config 248 has too many interfaces: 187, using maximum allowed: 32
[   92.722313][  T329]  ? __cfi_worker_thread+0x10/0x10
[   92.731522][  T949] usb 5-1: config 248 has an invalid descriptor of length 0, skipping remainder of the config
[   92.736318][  T329]  ? __cfi_kthread+0x10/0x10
[   92.746984][  T949] usb 5-1: config 248 has 1 interface, different from the descriptor's value: 187
[   92.751246][  T329]  ret_from_fork+0x64/0xa0
[   92.761497][  T949] usb 5-1: config 248 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 1
[   92.765099][  T329]  ? __cfi_kthread+0x10/0x10
[   92.778337][  T354] usb 4-1: device descriptor read/64, error -71
[   92.782779][  T329]  ret_from_fork_asm+0x1a/0x30
[   92.789467][  T949] usb 5-1: config 248 interface 0 has no altsetting 0
[   92.793794][  T329]  </TASK>
[   92.793807][  T329] ---[ end trace 0000000000000000 ]---
[   92.807153][  T955] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0
[   92.809317][  T949] usb 5-1: New USB device found, idVendor=056a, idProduct=0044, bcdDevice= 0.00
[   92.819264][  T955] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0
[   92.828359][  T949] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0
[   92.838145][  T955] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2
[   92.860060][  T955] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40
[   92.869310][  T955] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[   92.877373][  T955] usb 3-1: Product: syz
[   92.881635][  T955] usb 3-1: Manufacturer: syz
[   92.886246][  T955] usb 3-1: SerialNumber: syz
[   92.893364][  T955] hub 3-1:1.0: bad descriptor, ignoring hub
[   92.899378][  T955] hub 3-1:1.0: probe with driver hub failed with error -5
[   93.026091][  T354] usb 4-1: new high-speed USB device number 51 using dummy_hcd
[   93.077864][   T36] audit: type=1326 audit(1772418420.269:327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1526 comm="syz.4.369" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f8cdc19c799 code=0x0
[   93.102758][  T955] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 40 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8
[   93.128726][  T949] usb 5-1: string descriptor 0 read error: -71
[   93.142425][  T949] usbhid 5-1:248.0: couldn't find an input interrupt endpoint
[   93.152409][  T949] usb 5-1: USB disconnect, device number 2
[   93.160566][  T354] usb 4-1: device descriptor read/64, error -71
[   93.309021][ T1524] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy
[   93.317646][ T1524] misc raw-gadget: fail, usb_gadget_register_driver returned -16
[   93.406096][  T354] usb 4-1: device descriptor read/64, error -71
[   93.416296][  T955] usb 3-1: USB disconnect, device number 40
[   93.422858][  T955] usblp0: removed
[   93.526286][  T354] usb usb4-port1: attempt power cycle
[   93.866157][  T354] usb 4-1: new high-speed USB device number 52 using dummy_hcd
[   93.887379][  T354] usb 4-1: device descriptor read/8, error -71
[   94.017149][  T354] usb 4-1: device descriptor read/8, error -71
[   94.256083][  T354] usb 4-1: new high-speed USB device number 53 using dummy_hcd
[   94.277161][  T354] usb 4-1: device descriptor read/8, error -71
[   94.407161][  T354] usb 4-1: device descriptor read/8, error -71
[   94.516147][  T354] usb usb4-port1: unable to enumerate USB device