last executing test programs: 58.312425384s ago: executing program 2 (id=667): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, 0x0, 0x0) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, 0x0, 0x310) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={0x0, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, 0x0, 0x410) sendmsg$can_bcm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000090020000", @ANYRES64=0x77359400, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="000000000100000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24000041}, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_GETFSMAP(r3, 0xc0c0583b, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x0, '\x00', [{0x800, 0x5, 0x6, 0x401, 0x101, 0xffffffffffffff01}, {0x8, 0x7fffffff, 0x1, 0x4, 0x9, 0x3}], ['\x00']}) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r4, 0x731, 0x70bd2b, 0x0, {0x38}}, 0x14}, 0x1, 0x2}, 0x20000014) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) unshare(0x60040000) 58.071236474s ago: executing program 2 (id=668): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a40100001000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 57.097286238s ago: executing program 2 (id=672): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='dummy_udc.0', 0xb) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffff9c, 0x0, 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) dup(r2) 57.082947671s ago: executing program 2 (id=673): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(0x0, 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 56.213323183s ago: executing program 2 (id=678): openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x109640, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x11}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/net/netfilter/nfnetlink_queue\x00', 0x0, 0x0) read(r1, &(0x7f00000000c0)=""/7, 0x7) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) capset(&(0x7f0000000040)={0x20080522}, &(0x7f0000000080)={0x0, 0x0, 0x2, 0x0, 0x0, 0x2}) ioctl$sock_SIOCGIFINDEX(r2, 0x89a1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x14, 0x0, 0x301, 0x70bd26, 0x5dfdbfb, {0x1c}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x20000006) socket(0x2c, 0x3, 0xbe76) r4 = syz_open_dev$loop(&(0x7f0000000140), 0x3f4, 0x0) ioctl$BLKROSET(r4, 0x125d, &(0x7f0000000180)=0x100000000) 56.115802983s ago: executing program 2 (id=679): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 40.552217685s ago: executing program 32 (id=679): mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file0\x00', 0x1c0) r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x1}, 0x30, 0x0) landlock_restrict_self(r0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) pivot_root(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='./file0/file0\x00') 28.715495899s ago: executing program 0 (id=923): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/functions/uac2.0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/uac2.0/c_chmask\x00', 0x2, 0x0) write(r0, &(0x7f0000000540)='0', 0x1) symlinkat(&(0x7f0000000280)='./config/usb_gadget/g1/functions/uac2.0\x00', 0xffffffffffffff9c, &(0x7f00000002c0)='./config/usb_gadget/g1/configs/c.1/uac2.0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/UDC\x00', 0x2, 0x0) write(r1, &(0x7f0000000340)='dummy_udc.', 0xa) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$ttyS3(0xffffff9c, 0x0, 0x101000, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, 0x0, 0x0) dup(r2) 28.688883154s ago: executing program 0 (id=924): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/tcp6\x00') socket$inet(0x2, 0x3, 0x2) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f00000000c0)='./tracing\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/uprobe_events\x00', 0x401, 0x0) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f00000003c0)=""/210) write(r1, &(0x7f0000000300)='p:_est/_vent1 ./file0:0x', 0x18) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r3, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendmmsg(r2, &(0x7f0000000340)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x4788, r4}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='G', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000280), 0x1}}], 0x0, 0x0) 28.631735367s ago: executing program 0 (id=925): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, 0x0, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x60}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 28.588460325s ago: executing program 0 (id=926): r0 = openat$sndtimer(0xffffffffffffff9c, &(0x7f00000001c0), 0x400) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f00000083c0)={{0x1, 0x0, 0x0, 0x3}}) r1 = fsopen(&(0x7f0000000040)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) fchownat(r2, &(0x7f0000000340)='.\x00', 0x0, 0x0, 0x0) socket$inet(0x2, 0x5, 0x5) ioctl$SNDRV_TIMER_IOCTL_GINFO(r0, 0xc0f85403, &(0x7f0000000000)={{0x1, 0x0, 0x0, 0x3}, 0x4000000, 0x0, 'id0\x00', 'timer1\x00'}) r3 = socket(0x10, 0x803, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) bind$unix(r4, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netpci0\x00'}) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r5 = fspick(0xffffffffffffffff, &(0x7f0000000140)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x6a) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r6 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x2) getdents64(r6, 0xfffffffffffffffe, 0x29) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) read(r3, 0x0, 0x0) 28.543378785s ago: executing program 0 (id=927): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="280100000000000001000000"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x50}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_audit(0x10, 0x3, 0x9) socket(0x840000000002, 0x3, 0x100) socket$netlink(0x10, 0x3, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x800, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = open(0x0, 0x60840, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), &(0x7f00000003c0)) syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 28.431688508s ago: executing program 0 (id=928): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 28.397769255s ago: executing program 33 (id=928): write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.096839741s ago: executing program 3 (id=1207): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2.081600105s ago: executing program 5 (id=1209): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0x0, 0x0}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000340)=0x1) 2.064745948s ago: executing program 5 (id=1210): setsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, &(0x7f00000000c0)=0xfff, 0x2) 2.017792478s ago: executing program 5 (id=1211): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 1.125910924s ago: executing program 3 (id=1215): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)) 1.095226561s ago: executing program 3 (id=1216): openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) socket$inet6_tcp(0xa, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}], 0x40}, 0x80) clock_gettime(0xfffffffffffffffe, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f00000004c0)={0x0, 0x42c9, 0x10, 0x1, 0x7f}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfd47, 0x1000, 0x1000002, 0x91, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x845, 0x2, 0x8, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe58c, 0x2000, 0x4003bfff, 0x2b9, 0x0, r3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230, 0x0, r3}}], 0x1, 0x0, 0x0) 1.05147713s ago: executing program 3 (id=1217): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 1.035360633s ago: executing program 5 (id=1218): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 1.012920238s ago: executing program 3 (id=1219): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'erspan0\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x10, 0x8, 0x9, 0xf, {{0x15, 0x4, 0x3, 0x7, 0x54, 0x64, 0x0, 0xe, 0x29, 0x0, @private=0xa010102, @empty, {[@timestamp={0x44, 0x1c, 0xb7, 0x0, 0xa, [0x6, 0x6, 0x2, 0x7, 0x223, 0x10]}, @timestamp={0x44, 0x14, 0x63, 0x0, 0x2, [0x3, 0xc0000000, 0xff, 0x7a6]}, @noop, @ssrr={0x89, 0xf, 0xea, [@local, @rand_addr=0x64010100, @local]}]}}}}}) sendmsg(r0, &(0x7f0000001740)={&(0x7f00000000c0)=@ll={0x11, 0x1c, r1, 0x1, 0x6, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2e}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)="d9653cd7e809d3349c527fa46c397361613cf9810dcc2a08379d3588f0918ac97237f22c6080546e535c207899f3f8fbb15a6fc66fbcece2c6a0aa04809100801cb461d1e143ac88ef11aa52eb3b1d68115b0fe38847", 0x56}, {&(0x7f00000001c0)="b31d", 0x2}, {&(0x7f0000000200)="92b119ffdd4fb0d1e75be5ae099bf8f9717afdda8d00bd929cb417882a91c36a5cd0fdf0ff8178223970145f0a4dd50718772a5faf6288e9203963ffb4183b4ff16caa0a0fb28864680f782c038ecc74d44efa2841ae8e6ba0977addbfdc4748e4802971344c8e409db195", 0x6b}], 0x3, &(0x7f00000002c0)=[{0x38, 0x10d, 0xc0000000, "c9e55665d781b480ac3d7a8251548f30bbe8a409c58cac0f34c799ac092ec263f3"}, {0x1010, 0x10a, 0x2da6, "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"}, {0x108, 0x117, 0x0, "35dd1fd296fa2673d622450904325f81241f8c4dda966278a5adc0cc2fbfcaecaca5dca1b444278208fde13316b609d503c457c01155bc08b5011febb92bf76bd99b4c420cea86cfa0b440922a645b2ade73d5345b33af3b87f73cb935d73e2097b8f8bf36b901a9f41ce9a1ea814cc953abd4015008a1e003e960c2306184ab0e1a143eefc23704ff93ad29ae004992bfa9e0240a0af69fa931de0b86a560b41b560f543c0e06c9e828a426c4075b170ecdea4ca832aedca9418b709fd97158850a428271d23faaaa66ae2e0c1ce8edb0cc48a382182edbec938220fc756a470c20164f256dd36933374f88aca8c3c5e8e1"}, {0xb0, 0x113, 0x4, "8cf61208630df57220e1c7fc45a71f51d8f587a041ffdde6b448c1628f855b12f7ef27ca12a4f2fd3ac927c6c5fe09411983440e730fb03e9a186174bc255e9a6ea4d5537476b6741818096da6bd2d234a4c5ac5416990eca941c6efc25f0d17e31a81c7a7f0736c0111d6e1aa3c464ccd18d22faef896921d28f20d716a9f6c03b54d36be480f60034b8d1e06f4f8c43db93c5ef1c3ec4cf1"}, {0xb0, 0x10a, 0x7, "e1cd691ba045485c05e6a74a5687e7f378074f15f78c5326d3f2b4e2266efd2e1cd51038b5ef69a1e24fbb7e86d4f47c7c37896f5554c103d6a168a2718e723e1fa35e99b1da58378de38085034b04c7a6340a3f39da3c3a68be4e735aa72d6e482dc3b6bf502e431ac19956dfc1aea341c404295dbee2bf825db3a7762edd8258233b8b2f6d85997b23635f19173d56829988e90cb00a9e8d799a8760"}, {0xd8, 0x104, 0x1, "d7e2833f8fa2603c27e7d0b49d1108691149439ba6e7333d4d0363897c8e6a08760c98057fd58a9a4bd644aafb0a539db5220d8b51fa160821b5bf53431f26dfb2ef352515f93d06f83777d80043cc6f113457f67c55a39e77d3f584e3fd23617f2dc6088a30ff0e4bb18dfc1aefdc55cca8bac681c8a91188be914aa4ccb07eafe8599f8b964cc85f178bc6026a4f925072d704fec88482a3bbd1f8e1bfc18b0ba8acb9e3fc435f7b47e00623906375386203457d15180f5ef2fe0bec5b4c0af6b93306294c"}, {0xf8, 0x113, 0x7, "b49217ca33256bde0e479b60860ea6845c8f828562a2afd70e798473d2c4c8223309c79452dfe386bdba5cf613e38bd60907c8b655505b167bff57994138afe29ecc6924808e8046f170a83244236c1b6000700dae4ad93178172b2a4e7a98ab21fa51a6788f85c8356438b9672069ee0c5af860ffc7b18a213abe2dfa004d4929fe4afb667f892ab03afe679b6050e3522bb61e9d6cc8109f88aad62e20436f2e98fff5b683c7912c73a39b6e858e485882f5f185c9d80915d44baf5098c474bc6825b7904f8299b968771a51df521e8e1c0fb8d268e424c8ec18d6de88091813"}], 0x1480}, 0x4000000) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000001780), 0x181a81, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r0, 0x8983, &(0x7f00000017c0)={0x1, 'lo\x00', {}, 0x101}) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000001800), r3) r4 = dup(r2) openat$ttynull(0xffffffffffffff9c, &(0x7f0000001840), 0x40842, 0x0) r5 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000001880), 0x101442, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001a00)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000019c0)={&(0x7f0000001940)={0x64, 0x0, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0xfffc]}, @NL80211_ATTR_FRAME={0x3c, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x6}, @broadcast, @device_a, @random="d2f9bed5278f", {0x1}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1}}, 0x13, @val={0x8c, 0x18, {0xc82, "075bf7bd70fc", @long="45d9fb2655c0425ded7acb88a4d52c3f"}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0x80}, 0x4) write$P9_ROPEN(r4, &(0x7f0000001a40)={0x18, 0x71, 0x1, {{0x4, 0x3, 0x6}, 0x3}}, 0x18) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r5, 0x80286722, &(0x7f0000001b00)={&(0x7f0000001a80)=""/95, 0x5f, 0xfffffff8, 0x6}) ioctl$KVM_CAP_HYPERV_ENLIGHTENED_VMCS(r4, 0x4068aea3, &(0x7f0000001b80)={0xa3, 0x0, &(0x7f0000001b40)}) r8 = signalfd4(r0, &(0x7f0000001c00), 0x8, 0x800) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000001c80), r3) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r8, &(0x7f0000001ec0)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000001e80)={&(0x7f0000001cc0)={0x188, r9, 0x2, 0x70bd26, 0x25dfdbfb, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x4}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x800}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x50f}, {0x8, 0x15, 0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x1ff}, {0x6}, {0x8, 0x15, 0xffff}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0xf}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x7}, {0x8, 0x15, 0x10000}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x4}, {0x8, 0x15, 0x8}}]}, 0x188}, 0x1, 0x0, 0x0, 0x20004800}, 0x80) ioctl$sock_SIOCGPGRP(r6, 0x8904, &(0x7f0000001f00)=0x0) ptrace(0x11, r10) syz_kvm_add_vcpu$x86(0x0, &(0x7f0000002140)={0x0, &(0x7f0000001f40)=[@nested_vmresume={0x130, 0x18, 0x1}, @wr_drn={0x68, 0x20, {0x2}}, @nested_load_syzos={0x136, 0xf8, {0x1, 0x2, [@nested_amd_vmsave={0x183, 0x18}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x3, @save_area=0x671, 0x2, 0x1, 0x40}}, @nested_amd_vmload={0x182, 0x18}, @in_dx={0x69, 0x20, {0xfc39, 0x5}}, @nested_amd_inject_event={0x180, 0x38, {0x2, 0x19, 0x1, 0x9, 0x2}}, @cpuid={0x64, 0x18, {0x2, 0x9}}]}}, @nested_amd_vmcb_write_mask={0x17c, 0x38, {0x2, @save_area=0x4d4, 0x76, 0x68e, 0x80000001}}, @nested_amd_vmsave={0x183, 0x18}, @set_irq_handler={0xc8, 0x20, {0x6c, 0x1}}, @nested_amd_vmsave={0x183, 0x18, 0x3}, @in_dx={0x69, 0x20, {0x480a, 0x2}}], 0x1d8}) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r3, 0xf501, 0x0) seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000002180)=0x300) listen(r6, 0x7) ptrace(0x10, r10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002200), r6) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000002300)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000022c0)={&(0x7f0000002240)={0x48, r11, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x20, 0x13, [{0x48}, {0x1b, 0x1}, {0x10, 0x1}, {0x12, 0x1}, {0x3, 0x1}, {0x5}, {0x0, 0x1}, {0x9, 0x1}, {0x18, 0x1}, {0x36}, {0x30, 0x1}, {0x18}, {0x24, 0x1}, {0xb}, {0x60}, {0x1, 0x1}, {0xc, 0x1}, {0x12, 0x1}, {0x5}, {0x4, 0x1}, {0x36}, {0x2, 0x1}, {0x18}, {0x18}, {0x0, 0x1}, {0x1, 0x1}, {0x4, 0x1}, {0x16}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x48}, 0x1, 0x0, 0x0, 0xd0}, 0x8841) write$tun(r2, &(0x7f0000002340)={@val={0x0, 0xf5}, @val={0x2, 0x0, 0x2, 0x8, 0xc2, 0x1}, @eth={@random="532de2fba14c", @empty, @val={@val={0x88a8, 0x2}, {0x8100, 0x0, 0x0, 0x4}}, {@mpls_mc={0x8848, {[{0xa8}, {0x6}], @ipv6=@dccp_packet={0xc, 0x6, "0ca10a", 0x25e, 0x21, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, @private1={0xfc, 0x1, '\x00', 0x1}, {[@fragment={0x89, 0x0, 0x4, 0x0, 0x0, 0x8, 0x68}, @hopopts={0x3a, 0x7, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x2, 0x7f, [0xf6, 0x0]}}, @jumbo={0xc2, 0x4, 0x9a5e}, @pad1, @enc_lim={0x4, 0x1, 0x30}, @calipso={0x7, 0x10, {0x0, 0x2, 0xc6, 0x80, [0x0]}}]}, @srh={0x33, 0xe, 0x4, 0x7, 0x7, 0x50, 0x9, [@dev={0xfe, 0x80, '\x00', 0x15}, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast1, @ipv4={'\x00', '\xff\xff', @loopback}, @remote, @dev={0xfe, 0x80, '\x00', 0x44}, @rand_addr=' \x01\x00']}, @fragment={0x2f, 0x0, 0x8, 0x1, 0x0, 0x5, 0x67}, @srh={0x6, 0x2, 0x4, 0x1, 0xff, 0x8, 0x3, [@mcast2]}, @fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x8, 0x66}, @hopopts={0x3c, 0x15, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x3, 0x6e, [0x5, 0xa]}}, @ra={0x5, 0x2, 0x4}, @hao={0xc9, 0x10, @remote}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x1, [0x0]}, @generic={0x2, 0x6d, "2426dc10af453d2909bf0fa999be395ab99f2d9f30767f4cb50074ed6697af3cb5b8ef11d27afa2ba34fe64bb8f6fb0ce3dcbe4dc4b88afd456666e290db2d54c83a5227a3879ad81355ba492079c97deccc81af9afcf10a7774f360387cf2c06edcec9ddeaa38d5941c10aa5e"}]}, @routing={0xf39730c5c28a3266, 0x8, 0x1, 0x2, 0x0, [@mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast1]}, @srh={0x3b, 0x6, 0x4, 0x3, 0x7f, 0x40, 0x2, [@private2, @remote, @loopback]}], {{0x4e23, 0x4e24, 0x4, 0x1, 0x7, 0x0, 0x0, 0x4, 0x0, "b2d061", 0x2, "d6feaa"}, "bc44e8fd415e1b96458b7750fe9f6dacaa28fd040ab5dd525172b7e0680b5d5153e450568e010adafc5630b2554b"}}}}}}}}, 0x2b2) syz_clone(0x80003000, &(0x7f0000002600)="7c4906d3e6b414c54138fbb488754726d52517dbf0b89f5bcc7c2b7de3cdef8b3d57b629da1d1dc1811967f4f55e2fe84e6aeb5eb3fe2f8de70a2741e6d6616997a335dae3fa2251eadae2b7642b93733d5bfe525609ee42d208aecc29b6264dbc8e7bd502aee4e97a6a418248c77f53d1e9418af2978112022e5224cccc14d2", 0x80, &(0x7f0000002680), &(0x7f00000026c0), &(0x7f0000002700)="d774f733bb0e539ca99010b186351301c008ad9f6dce83d13d731d33d324e4625d0f16fa29c79914b7a6fbfb56f2e0f2f5a5dcebb453bf17219c423d2049a67783fe0746d670d099e2b391ffe9a6912aaada350025c92163fd45d10d2455594e96ab964024d6fe1886b612fb5f3a15d405ba2e355920bdbe88ce29824ed3be498c38a5282399a85ee59a0abdfe7fba5dc8ee6373581d922311e3cfe0e47b8402b62436930d636ca3334d1dda299bce3ccd309c69c54bd7f7a21fa8cc4b024fcbd7240c9d9650646bef95711330626f359c9a50f01b516204192b0761a3f2ad8f0bc2de53a582a9f7cc050d99758576e2e5") 993.593102ms ago: executing program 5 (id=1220): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_udp(0xa, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000000180)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) write(0xffffffffffffffff, &(0x7f0000000140)='p', 0x1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x80042, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) socketpair$unix(0x1, 0x2, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) syz_ublk_setup_io_uring(0x467c, &(0x7f0000000140)={0x0, 0xcfab, 0x8000, 0x0, 0x118}, &(0x7f0000000280), &(0x7f00000002c0), &(0x7f00000003c0)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) syz_ublk_setup_queues(r2, r0, &(0x7f00000004c0)={0x0, 0x42cc, 0x10, 0x1, 0x80}, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe706, 0x1000, 0x3, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3b00, 0x2, 0x4, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93e9, 0x200, 0x4003bfff, 0x2b8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5, 0x800, 0x1, 0x230}}], 0x1, 0x0, 0x0) 869.174138ms ago: executing program 4 (id=1222): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0xa, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8004c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0xa, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x0, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7fff, 0x28, 0x5, 0xd500, 0x8, 0x7b, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0x7, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0xffffffff, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x10001, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0x0, @fixed}, &(0x7f0000000280)=0xe, 0x80000) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 866.343338ms ago: executing program 3 (id=1223): r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) socket$inet6(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000180)='net/igmp6\x00') socket$netlink(0x10, 0x3, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2001, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) userfaultfd(0x1) creat(&(0x7f0000000380)='./bus\x00', 0x0) socket$key(0xf, 0x3, 0x2) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f0000000240)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYBLOB='\a'], 0x0) close_range(r0, 0xffffffffffffffff, 0x2) 655.800063ms ago: executing program 4 (id=1227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000100000000000a000000060001001b"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080), r1) sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf2502"], 0x20}, 0x1, 0x0, 0x0, 0x8001}, 0x4000000) 626.633139ms ago: executing program 4 (id=1228): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000004c0)='./file0\x00', 0x4c) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000041c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000380)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x8400040, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000}}, 0x50) link(0x0, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r3 = eventfd(0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0x4008af12, &(0x7f0000000080)={0x1, 0x7f}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r3) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r3}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x1, 0x0, &(0x7f00000001c0)=""/43, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/245, &(0x7f0000000780)=""/87, &(0x7f0000000800)=""/90}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001cc0)={0x1, 0x0, [{0x0, 0xffb, &(0x7f0000001d80)=""/4091}]}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, 0x0) 575.359199ms ago: executing program 4 (id=1229): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x810, r0, 0x98ec2000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001300), 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f0000001440)={r0, &(0x7f0000001340)='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik', 0x200, &(0x7f0000001380)={@align=0x7, {0x5, 0x7f, 0xe9, 0x100}}, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x2}) 575.133209ms ago: executing program 4 (id=1230): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES64], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x120e2) socketpair$unix(0x1, 0x2, 0x0, 0x0) 574.713999ms ago: executing program 4 (id=1231): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101be, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x800, 0xfffffff9, 0x0, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x5, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x4, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0xc6, 0x4637, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) clock_nanosleep(0x1, 0x1, &(0x7f0000000080)={0x77359400}, 0x0) r2 = dup(r1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) pipe(&(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000580)='./file0\x00', 0xc43, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x20c44fb6edc09a38, 0xffffffffffffffff, 0x7000) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) vmsplice(r5, &(0x7f0000000000)=[{&(0x7f0000001940)='c', 0x1}], 0x1, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) flock(r4, 0x5) r6 = timerfd_create(0x0, 0x0) timerfd_settime(r6, 0x3, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) futex_waitv(&(0x7f0000001600)=[{0x8000, &(0x7f0000000240)=0xffffffffffffff7f, 0x2}, {0x101, &(0x7f0000000280)=0x9, 0x2}, {0x401, &(0x7f00000002c0)=0x3, 0x82}, {0xb, &(0x7f0000000300)=0xd, 0x2}, {0x9, &(0x7f0000000340)=0x3, 0x82}, {0x1, &(0x7f0000000380)=0x9a3, 0x82}, {0x7, &(0x7f00000003c0)=0x2, 0x82}, {0x8, &(0x7f0000000400)=0x6c673da8, 0x82}, {0xea6d, &(0x7f0000000440)=0x4, 0x82}, {0x10, &(0x7f0000000480)=0x6, 0x2}, {0xdd41, &(0x7f00000004c0)=0x7, 0x2}, {0xa, &(0x7f0000000500)=0x2, 0x82}, {0x9, &(0x7f0000000540)=0xcf, 0x82}, {0x7, &(0x7f0000000580)=0x5, 0x2}, {0xfffffffffffffff2, &(0x7f00000005c0)=0x1, 0x2}, {0xd, &(0x7f0000000600)=0x400, 0x82}, {0xe000000000000000, &(0x7f0000000640), 0x82}, {0x4, &(0x7f0000000680)=0x3, 0x2}, {0x311, &(0x7f00000006c0)=0x8000, 0x82}, {0x3, &(0x7f0000000700)=0x4, 0x2}, {0x7fffffff, &(0x7f0000000740)=0x80, 0x2}, {0xfffffffffffffffb, &(0x7f0000000780)=0x7, 0x82}, {0x42f, &(0x7f00000007c0)=0x80000000, 0x2}, {0xc, &(0x7f0000000800)=0x4, 0x2}, {0x98, &(0x7f0000000880)=0x100000000, 0x82}, {0x8, &(0x7f00000008c0)=0x2, 0x2}, {0x1, &(0x7f0000000900)=0x9, 0x82}, {0x4, &(0x7f0000000940), 0x2}, {0x8000000000000000, &(0x7f0000000980)=0x100000001, 0x82}, {0xd, &(0x7f00000009c0)=0x80000000, 0x2}, {0xd7c, &(0x7f0000000a00)=0x2780, 0x2}, {0x1, &(0x7f0000000a40)=0xb1, 0x2}, {0x6, &(0x7f0000000a80)=0x8, 0x82}, {0x5, &(0x7f0000000ac0)=0x8, 0x82}, {0x4, &(0x7f0000000b00)=0x3, 0x2}, {0x1, &(0x7f0000000b40)=0x9}, {0x0, &(0x7f0000000b80)=0x6, 0x82}, {0x80, &(0x7f0000000bc0)=0xe665, 0x2}, {0x9e, &(0x7f0000000c00)=0x6, 0x2}, {0x8001, &(0x7f0000000c40)=0x5, 0x82}, {0x0, &(0x7f0000000c80)=0x7, 0x82}, {0x4, &(0x7f0000001140)=0x2, 0x2}, {0x9, &(0x7f0000001180), 0x82}, {0xfffffffffffffffb, &(0x7f00000011c0)=0xc000000000, 0x2}, {0x2, &(0x7f0000001200)=0x5, 0x2}, {0x3, &(0x7f0000001240)=0x3, 0x2}, {0x7, &(0x7f0000001280)=0x5, 0x2}, {0xc, &(0x7f00000012c0)=0x6, 0x82}, {0x6, &(0x7f0000001300)=0x5, 0x2}, {0x100000000, &(0x7f0000001340)=0x1, 0x82}, {0x4, &(0x7f0000001380)=0x10001, 0x2482ad3836575ea8}, {0x7, &(0x7f00000013c0)=0x4, 0x82}, {0xbd, &(0x7f0000001400)=0xf, 0x82}, {0x1, &(0x7f0000001440)=0xff, 0x2}, {0xa50, &(0x7f0000001480)=0x6, 0x82}, {0xc, &(0x7f00000014c0)=0x3, 0x2}, {0x8000, &(0x7f0000001500), 0x2}, {0x6, &(0x7f0000001540)=0x46c9826e, 0x2}, {0x15415c5c, &(0x7f0000001580)=0x1}, {0x1, &(0x7f00000015c0)=0x4, 0x82}], 0x3c, 0x0, &(0x7f0000001bc0), 0x0) close(r6) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x1) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0x3, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x20000000, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0xa, 0x3c1b, 0x1, 0x24, 0x800000d, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xc, 0x0, 0x8071, 0x7, 0x6, 0xffffffff, 0x7, 0x5, 0x3e, 0x8f, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0xfffffff9, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012d, 0x8004, 0x5, 0xfffffff3, 0x129432e2, 0xc8, 0xf9, 0xe, 0x2ff, 0x1, 0x9, 0xfffffffc, 0x4, 0x10001, 0x0, 0x3, 0x2f, 0xe, 0x6, 0x78, 0xea4, 0x0, 0x3, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0x1000d, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x4, 0xf, 0xffff8001, 0x47, 0x31f3, 0x1, 0xfe000000, 0xfffe, 0x202, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x3, 0x42, 0x3], [0x5, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x2, 0x5, 0x8, 0x4, 0x5, 0x5, 0x4, 0x1ef, 0x2, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0xc, 0x2, 0x2, 0x3, 0x20000008, 0x4004, 0xffffff11, 0x6, 0x38, 0x800003, 0x200, 0x83, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x3, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x4002, 0x3, 0x7ff, 0x12b, 0x4, 0x40000001, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x0, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0x9, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x101, 0x10000, 0x9, 0x7fff, 0xffff, 0xa620, 0x1, 0x78b, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x1, 0xc8, 0x1, 0xfffff000, 0x5, 0x3, 0x0, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x1, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf44, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff343e, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) mount(&(0x7f0000000140)=@loop={'/dev/loop', 0x0}, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='binder\x00', 0x400, 0x0) 401.322586ms ago: executing program 5 (id=1233): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)=ANY=[@ANYBLOB="a4010000100001"], 0x1a4}}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="14030000300001000001"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, 0x0}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 318.035573ms ago: executing program 1 (id=1237): landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x3}, 0x10, 0x0) eventfd(0xd33) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x10}}, @rights={{0x10}}, @rights={{0x10}}], 0x80}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r2 = open(0x0, 0x60840, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x100000000004, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r4 = syz_ublk_setup_io_uring(0x3, &(0x7f0000000040)={0x0, 0x4, 0x1000}, &(0x7f0000000000)=0x0, &(0x7f0000000540), 0x0) syz_io_uring_modify_offsets$flags(r5, 0x0, 0x68, 0x1) syz_ublk_setup_queues(r2, r3, &(0x7f0000000340)={0x0, 0x2, 0x0, 0xfffffffe, 0x257}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4704, 0x40, 0xffffff, 0x1c4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xfffffffd, 0x200, 0x0, 0x146, 0x0, r4}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xcf78, 0x20000, 0x1}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x3948, 0xa000, 0x1, 0x2b2}}], 0x1, 0x0, 0x0) 279.138921ms ago: executing program 1 (id=1238): mkdirat(0xffffffffffffff9c, 0x0, 0x1df) mount(0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) syz_clone3(0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='myproc\x00', 0x280, 0x0) mkdirat(r0, &(0x7f0000000000)='./config\x00', 0x84) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) poll(&(0x7f0000000100)=[{r1, 0x3028}], 0x1, 0x1) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000000000)=0x80000003, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f00000001c0)={0x0, 0xea60}, 0x10) openat$cgroup_ro(r0, &(0x7f00000000c0)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r4 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f00000007c0)='asymmetric\x00', 0x0, &(0x7f0000000d80)="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", 0x55a, r4) sendmmsg$unix(r3, &(0x7f00000bd000), 0x0, 0x4) ioctl(r2, 0x400452c8, &(0x7f0000000000)="000000000000000003000000000000000000000001") mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) write(r0, 0x0, 0x0) r5 = openat(r0, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x2080, 0x8) write(r5, &(0x7f0000000240)='2', 0x1) 246.726258ms ago: executing program 1 (id=1239): socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r1 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)={0xffffffffffffffff}) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYRES16=r0, @ANYRES16=r1, @ANYRES64], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) mmap$KVM_VCPU(0x0, 0x50000, 0x3, 0x11, r4, 0x0) recvmsg$unix(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)}, 0x120e2) socketpair$unix(0x1, 0x2, 0x0, 0x0) 246.147438ms ago: executing program 1 (id=1240): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x2, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xd, 0xa2b9, 0x6, 0x7, 0xe1, 0x6, 0xfc000004, 0x403, 0xbbf, 0x3, 0xfffffffd, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0xc3, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x129, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0x0, 0x2, 0x2, 0x2, 0x7, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0xfff, 0x3, 0x6, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000006f, 0x8e, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x0, 0x200b398, 0x8001, 0x1, 0x4, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff8, 0x4, 0x46, 0xf1, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x1ff, 0x1, 0x8000, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0x2, 0x9, 0x2, 0x7fffffff, 0x4, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x2e6bf783, 0x80000001, 0x5, 0x5, 0x491, 0x9, 0x8, 0x7f, 0x400, 0x102, 0x1, 0x41, 0x6, 0xee4b, 0x2000004, 0x1, 0xc, 0x5, 0x9, 0x5, 0x3, 0x9, 0x3, 0xc7, 0xfff, 0x10000a, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xdd81, 0x4, 0x7f, 0x9d27, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x28, 0x5, 0xd500, 0x8, 0x77, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x9, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x5, 0x6, 0xf, 0xe, 0x8, 0x274, 0x6, 0x5, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0xdab, 0x5, 0x8, 0x13fff, 0x1, 0x9]}, 0x45c) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f000000c280)=[{&(0x7f0000000a00)=ANY=[@ANYBLOB="1403000030"], 0x314}], 0x1}, 0x800) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x2, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 105.961297ms ago: executing program 1 (id=1241): mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x3000002, 0x810, 0xffffffffffffffff, 0x98ec2000) r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000001300), 0x2) ioctl$XFS_IOC_FD_TO_HANDLE(r0, 0xc038586a, &(0x7f0000001440)={0xffffffffffffffff, &(0x7f0000001340)='\xd1s(\x99\xf6\x11\xcd\x89\x94\x03M\x7fA=\xc9Wc\x0eT\x93\xc2\x85\xac\xa4\x00e\xcbc\x11\xbeik', 0x200, &(0x7f0000001380)={@align=0x7, {0x5, 0x7f, 0xe9, 0x100}}, 0x1, &(0x7f00000013c0), &(0x7f0000001400)=0x2}) 0s ago: executing program 1 (id=1242): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) (async) prctl$PR_SET_SECCOMP(0x16, 0x1, 0x0) (async, rerun: 64) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x121400, 0x0) (async, rerun: 64) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000100)={0xb, {'syz0\x00', 'syz0\x00', 'syz0\x00', 0x3c, 0x3, 0x1234, 0x5678, 0x1, 0x1000, "05200973a10185010a19031500250775089501b1020a16039501b102850216008026ff7f75100a5304950181020a5404950181020a550495018102c0"}}, 0x154) (async) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') preadv(r3, &(0x7f0000002e40)=[{&(0x7f0000000240)=""/4096, 0x1000}], 0x1, 0x1815ef39, 0x5) (async) capset(&(0x7f0000000040)={0x20071026}, &(0x7f0000000080)={0x0, 0x2}) (async) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0x8}]}) kcmp$KCMP_EPOLL_TFD(r0, r0, 0x7, r1, &(0x7f0000000040)={r3, r1, 0x9}) (async) write$UHID_DESTROY(r2, &(0x7f0000000500), 0x4) (async, rerun: 32) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000d00)) (rerun: 32) ptrace(0x10, r0) (async) ptrace(0x11, r0) (async) fcntl$setown(r1, 0x8, r0) (async, rerun: 32) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000e2793b10d10501200006010203010902120008000000000904"], 0x0) (async, rerun: 32) r4 = socket$netlink(0x10, 0x3, 0x10) (async) r5 = socket$packet(0x11, 0x2, 0x300) bind$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x2, 0x1, 0x0, 0x6, @random="001122334455"}, 0x14) (async) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f00000000c0)=@req={0x1000, 0x4, 0x800, 0x8}, 0x10) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x3, 0x11, r5, 0x0) (async) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000000240)=0x190, 0x4) (async) write(r5, &(0x7f0000000000)="01", 0x1) (async) sendmsg$netlink(r4, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="0c0100002d0001000000000000000000140073000000000000000000000000000000000009000080976b640868000000db0001"], 0x10c}], 0x1}, 0x0) kernel console output (not intermixed with test programs): 70][ T2323] udc dummy_udc.0: failed to start g1: -19 [ 86.282041][ T2323] UDC core: g1: couldn't find an available UDC or it's busy [ 86.659636][ T2336] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 86.692335][ T2336] udc dummy_udc.0: failed to start g1: -19 [ 86.711665][ T2336] UDC core: g1: couldn't find an available UDC or it's busy [ 86.927697][ T36] audit: type=1400 audit(1790849203.140:359): avc: denied { ioctl } for pid=2342 comm="syz.3.760" path="socket:[49812]" dev="sockfs" ino=49812 ioctlcmd=0x5882 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 87.214930][ T2360] netlink: 12 bytes leftover after parsing attributes in process `syz.3.766'. [ 87.307479][ T2362] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 87.338741][ T2362] udc dummy_udc.0: failed to start g1: -19 [ 87.362333][ T2362] UDC core: g1: couldn't find an available UDC or it's busy [ 87.442390][ T2371] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.391048][ T2383] netlink: 12 bytes leftover after parsing attributes in process `syz.1.775'. [ 88.482032][ T2387] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 88.506587][ T2387] udc dummy_udc.0: failed to start g1: -19 [ 88.522051][ T2387] UDC core: g1: couldn't find an available UDC or it's busy [ 88.568680][ T36] audit: type=1400 audit(1790849204.780:360): avc: denied { bind } for pid=2393 comm="syz.3.780" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 88.573435][ T2395] fuse: Unknown parameter 'group_id00000000000000000000' [ 88.920984][ T31] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 89.061008][ T31] usb 4-1: device descriptor read/64, error -71 [ 89.310966][ T31] usb 4-1: device descriptor read/64, error -71 [ 89.570982][ T31] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 89.720970][ T31] usb 4-1: device descriptor read/64, error -71 [ 89.727312][ T45] usb 2-1: new high-speed USB device number 14 using dummy_hcd [ 89.902047][ T45] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 89.920972][ T45] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 89.929890][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 89.960958][ T45] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 89.982035][ T45] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 90.000962][ T31] usb 4-1: device descriptor read/64, error -71 [ 90.007301][ T45] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.020987][ T45] usb 2-1: Product: syz [ 90.025200][ T45] usb 2-1: Manufacturer: syz [ 90.029880][ T45] usb 2-1: SerialNumber: syz [ 90.043970][ T45] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 90.050378][ T45] usb 2-1: No streaming interface found for terminal 2. [ 90.111093][ T31] usb usb4-port1: attempt power cycle [ 90.460987][ T31] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 90.471019][ T660] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 90.482085][ T31] usb 4-1: device descriptor read/8, error -71 [ 90.621340][ T660] usb 1-1: Using ep0 maxpacket: 16 [ 90.623886][ T31] usb 4-1: device descriptor read/8, error -71 [ 90.641643][ T660] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.651839][ T660] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.670735][ T660] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 90.680084][ T660] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 90.688272][ T660] usb 1-1: Product: syz [ 90.692656][ T660] usb 1-1: Manufacturer: syz [ 90.697261][ T660] usb 1-1: SerialNumber: syz [ 90.871034][ T31] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 90.893918][ T31] usb 4-1: device descriptor read/8, error -71 [ 90.904961][ T660] usb 1-1: 0:2 : does not exist [ 90.913468][ T660] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 90.934258][ T660] usb 1-1: USB disconnect, device number 18 [ 90.959658][ T626] udevd[626]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 91.032042][ T31] usb 4-1: device descriptor read/8, error -71 [ 91.141089][ T31] usb usb4-port1: unable to enumerate USB device [ 91.348206][ T36] audit: type=1400 audit(1790849207.560:361): avc: denied { mounton } for pid=2428 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 91.383509][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.390607][ T2428] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.397758][ T2428] bridge_slave_0: entered allmulticast mode [ 91.404094][ T2428] bridge_slave_0: entered promiscuous mode [ 91.410486][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.417642][ T2428] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.425114][ T2428] bridge_slave_1: entered allmulticast mode [ 91.431400][ T2428] bridge_slave_1: entered promiscuous mode [ 91.437536][ T803] bridge_slave_1: left allmulticast mode [ 91.443338][ T803] bridge_slave_1: left promiscuous mode [ 91.448937][ T803] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.456767][ T803] bridge_slave_0: left allmulticast mode [ 91.462556][ T803] bridge_slave_0: left promiscuous mode [ 91.468232][ T803] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.552589][ T2428] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.559636][ T2428] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.566933][ T2428] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.573988][ T2428] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.606428][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.622087][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.642657][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.649739][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.669055][ T803] veth1_macvtap: left promiscuous mode [ 91.680579][ T803] veth0_vlan: left promiscuous mode [ 91.753895][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.761019][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.775348][ T2443] FAULT_INJECTION: forcing a failure. [ 91.775348][ T2443] name failslab, interval 1, probability 0, space 0, times 0 [ 91.789522][ T2443] CPU: 1 UID: 0 PID: 2443 Comm: syz.3.792 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 91.789558][ T2443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 91.789572][ T2443] Call Trace: [ 91.789579][ T2443] [ 91.789587][ T2443] __dump_stack+0x21/0x30 [ 91.789623][ T2443] dump_stack_lvl+0x140/0x1c0 [ 91.789651][ T2443] ? __cfi_dump_stack_lvl+0x10/0x10 [ 91.789681][ T2443] dump_stack+0x19/0x20 [ 91.789708][ T2443] should_fail_ex+0x3c2/0x510 [ 91.789731][ T2443] should_failslab+0xac/0x100 [ 91.789755][ T2443] kmem_cache_alloc_noprof+0x42/0x410 [ 91.789786][ T2443] ? security_inode_alloc+0x51/0x230 [ 91.789813][ T2443] ? __cfi_make_kgid+0x10/0x10 [ 91.789836][ T2443] security_inode_alloc+0x51/0x230 [ 91.789857][ T2443] inode_init_always_gfp+0x756/0x9e0 [ 91.789880][ T2443] ? __cfi_sock_alloc_inode+0x10/0x10 [ 91.789922][ T2443] alloc_inode+0xc5/0x270 [ 91.789947][ T2443] ? bpf_lsm_socket_create+0xd/0x20 [ 91.789971][ T2443] new_inode_pseudo+0x19/0x40 [ 91.789994][ T2443] sock_create_lite+0x8f/0x500 [ 91.790017][ T2443] __netlink_kernel_create+0xcf/0x8a0 [ 91.790044][ T2443] ? __cfi___netlink_kernel_create+0x10/0x10 [ 91.790072][ T2443] ? __asan_memcpy+0x5a/0x80 [ 91.790091][ T2443] audit_net_init+0x108/0x240 [ 91.790111][ T2443] ? __cfi_audit_net_init+0x10/0x10 [ 91.790131][ T2443] ? __cfi_audit_receive+0x10/0x10 [ 91.790150][ T2443] ? __cfi_audit_multicast_bind+0x10/0x10 [ 91.790170][ T2443] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 91.790189][ T2443] ? __kmalloc_noprof+0x261/0x510 [ 91.790208][ T2443] ? ops_init+0x81/0x5d0 [ 91.790229][ T2443] ops_init+0x302/0x5d0 [ 91.790249][ T2443] ? __kasan_check_write+0x18/0x20 [ 91.790268][ T2443] ? rwsem_read_trylock+0x275/0x5a0 [ 91.790301][ T2443] setup_net+0x227/0x9b0 [ 91.790319][ T2443] ? copy_net_ns+0xa20/0xa20 [ 91.790339][ T2443] ? down_read_killable+0x7f/0x100 [ 91.790366][ T2443] ? __cfi_down_read_killable+0x10/0x10 [ 91.790394][ T2443] copy_net_ns+0x4fc/0xa20 [ 91.790413][ T2443] create_new_namespaces+0x390/0x6f0 [ 91.790441][ T2443] unshare_nsproxy_namespaces+0x124/0x180 [ 91.790468][ T2443] ksys_unshare+0x4f9/0x920 [ 91.790494][ T2443] ? fput+0x1a4/0x230 [ 91.790519][ T2443] ? __cfi_ksys_unshare+0x10/0x10 [ 91.790550][ T2443] ? __kasan_check_write+0x18/0x20 [ 91.790572][ T2443] __x64_sys_unshare+0x3c/0x50 [ 91.790599][ T2443] x64_sys_call+0x2998/0x2ee0 [ 91.790619][ T2443] do_syscall_64+0x57/0xf0 [ 91.790639][ T2443] ? clear_bhb_loop+0x50/0xa0 [ 91.790665][ T2443] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 91.790691][ T2443] RIP: 0033:0x7f4ae479e159 [ 91.790709][ T2443] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.790728][ T2443] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 91.790750][ T2443] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 91.790776][ T2443] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 91.790790][ T2443] RBP: 00007f4ae483506b R08: 0000000000000000 R09: 0000000000000000 [ 91.790803][ T2443] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.790815][ T2443] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 91.790832][ T2443] [ 91.794933][ T2428] veth0_vlan: entered promiscuous mode [ 91.827909][ T2443] audit: cannot initialize netlink socket in namespace [ 91.876363][ T2428] veth1_macvtap: entered promiscuous mode [ 92.162257][ T36] audit: type=1400 audit(1790849208.380:362): avc: denied { mounton } for pid=2428 comm="syz-executor" path="/root/syzkaller.GaD581/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 92.438362][ T31] usb 2-1: USB disconnect, device number 14 [ 92.514606][ T2466] tipc: New replicast peer: 0.0.0.0 [ 92.526300][ T2466] tipc: Enabled bearer , priority 10 [ 92.546206][ T2466] ./dev/sda1: Can't lookup blockdev [ 92.587280][ T2471] FAULT_INJECTION: forcing a failure. [ 92.587280][ T2471] name failslab, interval 1, probability 0, space 0, times 0 [ 92.601779][ T2471] CPU: 0 UID: 0 PID: 2471 Comm: syz.1.804 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 92.601817][ T2471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 92.601832][ T2471] Call Trace: [ 92.601839][ T2471] [ 92.601849][ T2471] __dump_stack+0x21/0x30 [ 92.601930][ T2471] dump_stack_lvl+0x140/0x1c0 [ 92.601972][ T2471] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.602004][ T2471] dump_stack+0x19/0x20 [ 92.602032][ T2471] should_fail_ex+0x3c2/0x510 [ 92.602058][ T2471] should_failslab+0xac/0x100 [ 92.602084][ T2471] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 92.602108][ T2471] ? sock_alloc_inode+0x48/0x150 [ 92.602130][ T2471] ? __cfi_selinux_socket_create+0x10/0x10 [ 92.602162][ T2471] sock_alloc_inode+0x48/0x150 [ 92.602185][ T2471] ? __cfi_sock_alloc_inode+0x10/0x10 [ 92.602207][ T2471] alloc_inode+0x7a/0x270 [ 92.602235][ T2471] ? bpf_lsm_socket_create+0xd/0x20 [ 92.602259][ T2471] new_inode_pseudo+0x19/0x40 [ 92.602286][ T2471] sock_create_lite+0x8f/0x500 [ 92.602310][ T2471] __netlink_kernel_create+0xcf/0x8a0 [ 92.602339][ T2471] ? __cfi___netlink_kernel_create+0x10/0x10 [ 92.602364][ T2471] ? __asan_memcpy+0x5a/0x80 [ 92.602383][ T2471] audit_net_init+0x108/0x240 [ 92.602404][ T2471] ? __cfi_audit_net_init+0x10/0x10 [ 92.602424][ T2471] ? __cfi_audit_receive+0x10/0x10 [ 92.602446][ T2471] ? __cfi_audit_multicast_bind+0x10/0x10 [ 92.602467][ T2471] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 92.602490][ T2471] ? __kmalloc_noprof+0x261/0x510 [ 92.602511][ T2471] ? ops_init+0x81/0x5d0 [ 92.602534][ T2471] ops_init+0x302/0x5d0 [ 92.602555][ T2471] ? __kasan_check_write+0x18/0x20 [ 92.602575][ T2471] ? rwsem_read_trylock+0x275/0x5a0 [ 92.602616][ T2471] setup_net+0x227/0x9b0 [ 92.602638][ T2471] ? copy_net_ns+0xa20/0xa20 [ 92.602660][ T2471] ? down_read_killable+0x7f/0x100 [ 92.602690][ T2471] ? __cfi_down_read_killable+0x10/0x10 [ 92.602721][ T2471] copy_net_ns+0x4fc/0xa20 [ 92.602743][ T2471] create_new_namespaces+0x390/0x6f0 [ 92.602775][ T2471] unshare_nsproxy_namespaces+0x124/0x180 [ 92.602805][ T2471] ksys_unshare+0x4f9/0x920 [ 92.602832][ T2471] ? fput+0x1a4/0x230 [ 92.602858][ T2471] ? __cfi_ksys_unshare+0x10/0x10 [ 92.602886][ T2471] ? __kasan_check_write+0x18/0x20 [ 92.602908][ T2471] __x64_sys_unshare+0x3c/0x50 [ 92.602935][ T2471] x64_sys_call+0x2998/0x2ee0 [ 92.602955][ T2471] do_syscall_64+0x57/0xf0 [ 92.602976][ T2471] ? clear_bhb_loop+0x50/0xa0 [ 92.603004][ T2471] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.603029][ T2471] RIP: 0033:0x7fc0dbf9e159 [ 92.603048][ T2471] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 92.603066][ T2471] RSP: 002b:00007fc0dce93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 92.603088][ T2471] RAX: ffffffffffffffda RBX: 00007fc0dc225fa0 RCX: 00007fc0dbf9e159 [ 92.603103][ T2471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 92.603118][ T2471] RBP: 00007fc0dc03506b R08: 0000000000000000 R09: 0000000000000000 [ 92.603133][ T2471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 92.603146][ T2471] R13: 00007fc0dc226038 R14: 00007fc0dc225fa0 R15: 00007ffce2839e18 [ 92.603166][ T2471] [ 92.603234][ T2471] audit: cannot initialize netlink socket in namespace [ 93.404237][ T2483] fuse: Bad value for 'fd' [ 93.445048][ T2486] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 93.454435][ T2486] udc dummy_udc.0: failed to start g1: -19 [ 93.460667][ T2486] UDC core: g1: couldn't find an available UDC or it's busy [ 93.529573][ T36] audit: type=1400 audit(1790849209.740:363): avc: denied { mounton } for pid=2491 comm="syz.4.813" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 93.639655][ T2500] FAULT_INJECTION: forcing a failure. [ 93.639655][ T2500] name failslab, interval 1, probability 0, space 0, times 0 [ 93.662416][ T31] tipc: Node number set to 439293498 [ 93.663214][ T2500] CPU: 0 UID: 0 PID: 2500 Comm: syz.3.815 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 93.663246][ T2500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 93.663259][ T2500] Call Trace: [ 93.663265][ T2500] [ 93.663274][ T2500] __dump_stack+0x21/0x30 [ 93.663308][ T2500] dump_stack_lvl+0x140/0x1c0 [ 93.663335][ T2500] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.663364][ T2500] dump_stack+0x19/0x20 [ 93.663388][ T2500] should_fail_ex+0x3c2/0x510 [ 93.663412][ T2500] should_failslab+0xac/0x100 [ 93.663436][ T2500] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 93.663456][ T2500] ? sock_alloc_inode+0x48/0x150 [ 93.663478][ T2500] ? __cfi_selinux_socket_create+0x10/0x10 [ 93.663504][ T2500] sock_alloc_inode+0x48/0x150 [ 93.663523][ T2500] ? __cfi_sock_alloc_inode+0x10/0x10 [ 93.663543][ T2500] alloc_inode+0x7a/0x270 [ 93.663567][ T2500] ? bpf_lsm_socket_create+0xd/0x20 [ 93.663588][ T2500] new_inode_pseudo+0x19/0x40 [ 93.663612][ T2500] sock_create_lite+0x8f/0x500 [ 93.663634][ T2500] __netlink_kernel_create+0xcf/0x8a0 [ 93.663660][ T2500] ? __cfi___netlink_kernel_create+0x10/0x10 [ 93.663686][ T2500] ? __asan_memcpy+0x5a/0x80 [ 93.663705][ T2500] audit_net_init+0x108/0x240 [ 93.663725][ T2500] ? __cfi_audit_net_init+0x10/0x10 [ 93.663743][ T2500] ? __cfi_audit_receive+0x10/0x10 [ 93.663762][ T2500] ? __cfi_audit_multicast_bind+0x10/0x10 [ 93.663782][ T2500] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 93.663803][ T2500] ? __kmalloc_noprof+0x261/0x510 [ 93.663822][ T2500] ? ops_init+0x81/0x5d0 [ 93.663842][ T2500] ops_init+0x302/0x5d0 [ 93.663860][ T2500] ? __kasan_check_write+0x18/0x20 [ 93.663880][ T2500] ? rwsem_read_trylock+0x275/0x5a0 [ 93.663908][ T2500] setup_net+0x227/0x9b0 [ 93.663927][ T2500] ? copy_net_ns+0xa20/0xa20 [ 93.663945][ T2500] ? down_read_killable+0x7f/0x100 [ 93.663971][ T2500] ? __cfi_down_read_killable+0x10/0x10 [ 93.663997][ T2500] copy_net_ns+0x4fc/0xa20 [ 93.664016][ T2500] create_new_namespaces+0x390/0x6f0 [ 93.664044][ T2500] unshare_nsproxy_namespaces+0x124/0x180 [ 93.664070][ T2500] ksys_unshare+0x4f9/0x920 [ 93.664094][ T2500] ? fput+0x1a4/0x230 [ 93.664128][ T2500] ? __cfi_ksys_unshare+0x10/0x10 [ 93.664154][ T2500] ? __kasan_check_write+0x18/0x20 [ 93.664175][ T2500] __x64_sys_unshare+0x3c/0x50 [ 93.664201][ T2500] x64_sys_call+0x2998/0x2ee0 [ 93.664220][ T2500] do_syscall_64+0x57/0xf0 [ 93.664239][ T2500] ? clear_bhb_loop+0x50/0xa0 [ 93.664267][ T2500] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.664290][ T2500] RIP: 0033:0x7f4ae479e159 [ 93.664309][ T2500] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 93.664326][ T2500] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 93.664349][ T2500] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 93.664365][ T2500] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 93.664377][ T2500] RBP: 00007f4ae483506b R08: 0000000000000000 R09: 0000000000000000 [ 93.664390][ T2500] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 93.664403][ T2500] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 93.664420][ T2500] [ 93.665564][ T2500] audit: cannot initialize netlink socket in namespace [ 94.086695][ T2506] fuse: Bad value for 'fd' [ 94.133267][ T2509] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 94.162411][ T2509] udc dummy_udc.0: failed to start g1: -19 [ 94.181184][ T2509] UDC core: g1: couldn't find an available UDC or it's busy [ 94.521004][ T460] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 94.690991][ T460] usb 2-1: Using ep0 maxpacket: 16 [ 94.698517][ T460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 94.715373][ T460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 94.734862][ T460] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 94.745387][ T460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.768152][ T460] usb 2-1: Product: syz [ 94.777204][ T460] usb 2-1: Manufacturer: syz [ 94.787359][ T460] usb 2-1: SerialNumber: syz [ 94.977261][ T2529] FAULT_INJECTION: forcing a failure. [ 94.977261][ T2529] name failslab, interval 1, probability 0, space 0, times 0 [ 94.997663][ T2529] CPU: 0 UID: 0 PID: 2529 Comm: syz.0.825 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 94.997700][ T2529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 94.997715][ T2529] Call Trace: [ 94.997723][ T2529] [ 94.997734][ T2529] __dump_stack+0x21/0x30 [ 94.997773][ T2529] dump_stack_lvl+0x140/0x1c0 [ 94.997804][ T2529] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.997833][ T2529] dump_stack+0x19/0x20 [ 94.997861][ T2529] should_fail_ex+0x3c2/0x510 [ 94.997888][ T2529] should_failslab+0xac/0x100 [ 94.997916][ T2529] kmem_cache_alloc_noprof+0x42/0x410 [ 94.997938][ T2529] ? security_inode_alloc+0x51/0x230 [ 94.997967][ T2529] ? __cfi_make_kgid+0x10/0x10 [ 94.997993][ T2529] security_inode_alloc+0x51/0x230 [ 94.998021][ T2529] inode_init_always_gfp+0x756/0x9e0 [ 94.998048][ T2529] ? __cfi_sock_alloc_inode+0x10/0x10 [ 94.998073][ T2529] alloc_inode+0xc5/0x270 [ 94.998099][ T2529] ? bpf_lsm_socket_create+0xd/0x20 [ 94.998123][ T2529] new_inode_pseudo+0x19/0x40 [ 94.998148][ T2529] sock_create_lite+0x8f/0x500 [ 94.998169][ T2529] __netlink_kernel_create+0xcf/0x8a0 [ 94.998194][ T2529] ? __cfi___netlink_kernel_create+0x10/0x10 [ 94.998218][ T2529] ? __asan_memcpy+0x5a/0x80 [ 94.998234][ T2529] audit_net_init+0x108/0x240 [ 94.998253][ T2529] ? __cfi_audit_net_init+0x10/0x10 [ 94.998273][ T2529] ? __cfi_audit_receive+0x10/0x10 [ 94.998292][ T2529] ? __cfi_audit_multicast_bind+0x10/0x10 [ 94.998312][ T2529] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 94.998331][ T2529] ? __kmalloc_noprof+0x261/0x510 [ 94.998351][ T2529] ? ops_init+0x81/0x5d0 [ 94.998372][ T2529] ops_init+0x302/0x5d0 [ 94.998393][ T2529] ? __kasan_check_write+0x18/0x20 [ 94.998413][ T2529] ? rwsem_read_trylock+0x275/0x5a0 [ 94.998455][ T2529] setup_net+0x227/0x9b0 [ 94.998474][ T2529] ? copy_net_ns+0xa20/0xa20 [ 94.998493][ T2529] ? down_read_killable+0x7f/0x100 [ 94.998518][ T2529] ? __cfi_down_read_killable+0x10/0x10 [ 94.998545][ T2529] copy_net_ns+0x4fc/0xa20 [ 94.998563][ T2529] create_new_namespaces+0x390/0x6f0 [ 94.998591][ T2529] unshare_nsproxy_namespaces+0x124/0x180 [ 94.998618][ T2529] ksys_unshare+0x4f9/0x920 [ 94.998643][ T2529] ? fput+0x1a4/0x230 [ 94.998672][ T2529] ? __cfi_ksys_unshare+0x10/0x10 [ 94.998695][ T2529] ? __kasan_check_write+0x18/0x20 [ 94.998718][ T2529] __x64_sys_unshare+0x3c/0x50 [ 94.998744][ T2529] x64_sys_call+0x2998/0x2ee0 [ 94.998763][ T2529] do_syscall_64+0x57/0xf0 [ 94.998783][ T2529] ? clear_bhb_loop+0x50/0xa0 [ 94.998809][ T2529] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.998835][ T2529] RIP: 0033:0x7f3db7f9e159 [ 94.998859][ T2529] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 94.998878][ T2529] RSP: 002b:00007f3db8e7d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 94.998899][ T2529] RAX: ffffffffffffffda RBX: 00007f3db8225fa0 RCX: 00007f3db7f9e159 [ 94.998914][ T2529] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 94.998929][ T2529] RBP: 00007f3db803506b R08: 0000000000000000 R09: 0000000000000000 [ 94.998943][ T2529] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 94.998956][ T2529] R13: 00007f3db8226038 R14: 00007f3db8225fa0 R15: 00007fff4d839918 [ 94.998974][ T2529] [ 94.999055][ T2529] audit: cannot initialize netlink socket in namespace [ 95.008787][ T460] usb 2-1: 0:2 : does not exist [ 95.343075][ T460] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 95.356330][ T460] usb 2-1: USB disconnect, device number 15 [ 95.371776][ T626] udevd[626]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 95.458160][ T2533] fuse: Unknown parameter '0x0000000000000004' [ 95.485706][ T2536] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 95.498026][ T2536] udc dummy_udc.0: failed to start g1: -19 [ 95.505010][ T2536] UDC core: g1: couldn't find an available UDC or it's busy [ 95.804486][ T2554] overlay: Unknown parameter 'dont_hash' [ 95.859582][ T2556] FAULT_INJECTION: forcing a failure. [ 95.859582][ T2556] name failslab, interval 1, probability 0, space 0, times 0 [ 95.891847][ T2556] CPU: 1 UID: 0 PID: 2556 Comm: syz.3.835 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 95.891887][ T2556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 95.891902][ T2556] Call Trace: [ 95.891912][ T2556] [ 95.891923][ T2556] __dump_stack+0x21/0x30 [ 95.891960][ T2556] dump_stack_lvl+0x140/0x1c0 [ 95.891991][ T2556] ? __cfi_dump_stack_lvl+0x10/0x10 [ 95.892020][ T2556] ? __cfi___netlink_kernel_create+0x10/0x10 [ 95.892052][ T2556] dump_stack+0x19/0x20 [ 95.892076][ T2556] should_fail_ex+0x3c2/0x510 [ 95.892100][ T2556] ? ops_init+0x81/0x5d0 [ 95.892122][ T2556] should_failslab+0xac/0x100 [ 95.892150][ T2556] __kmalloc_noprof+0x69/0x510 [ 95.892172][ T2556] ? ops_init+0x81/0x5d0 [ 95.892192][ T2556] ? __mutex_init+0xa6/0x1a0 [ 95.892222][ T2556] ops_init+0x81/0x5d0 [ 95.892244][ T2556] ? __kasan_check_write+0x18/0x20 [ 95.892266][ T2556] ? rwsem_read_trylock+0x275/0x5a0 [ 95.892296][ T2556] setup_net+0x227/0x9b0 [ 95.892317][ T2556] ? copy_net_ns+0xa20/0xa20 [ 95.892337][ T2556] ? down_read_killable+0x7f/0x100 [ 95.892374][ T2556] ? __cfi_down_read_killable+0x10/0x10 [ 95.892408][ T2556] copy_net_ns+0x4fc/0xa20 [ 95.892431][ T2556] create_new_namespaces+0x390/0x6f0 [ 95.892467][ T2556] unshare_nsproxy_namespaces+0x124/0x180 [ 95.892501][ T2556] ksys_unshare+0x4f9/0x920 [ 95.892530][ T2556] ? fput+0x1a4/0x230 [ 95.892558][ T2556] ? __cfi_ksys_unshare+0x10/0x10 [ 95.892586][ T2556] ? __kasan_check_write+0x18/0x20 [ 95.892609][ T2556] __x64_sys_unshare+0x3c/0x50 [ 95.892637][ T2556] x64_sys_call+0x2998/0x2ee0 [ 95.892658][ T2556] do_syscall_64+0x57/0xf0 [ 95.892679][ T2556] ? clear_bhb_loop+0x50/0xa0 [ 95.892707][ T2556] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 95.892733][ T2556] RIP: 0033:0x7f4ae479e159 [ 95.892754][ T2556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.892775][ T2556] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 95.892800][ T2556] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 95.892817][ T2556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 95.892832][ T2556] RBP: 00007f4ae483506b R08: 0000000000000000 R09: 0000000000000000 [ 95.892846][ T2556] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.892862][ T2556] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 95.892880][ T2556] [ 96.189693][ T2561] fuse: Unknown parameter '0x0000000000000004' [ 96.203645][ T2558] SELinux: Context system_u:object_r:apt_exec_t:s0 is not valid (left unmapped). [ 96.223664][ T36] audit: type=1400 audit(1790849212.430:364): avc: denied { relabelto } for pid=2557 comm="syz.1.836" name="cgroup" dev="tmpfs" ino=1479 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=lnk_file permissive=1 trawcon="system_u:object_r:apt_exec_t:s0" [ 96.326875][ T36] audit: type=1400 audit(1790849212.430:365): avc: denied { associate } for pid=2557 comm="syz.1.836" name="cgroup" dev="tmpfs" ino=1479 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:apt_exec_t:s0" [ 96.861027][ T515] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 96.942860][ T2587] fuse: Unknown parameter '0x0000000000000004' [ 97.032165][ T515] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.051275][ T515] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 97.069280][ T515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 97.090629][ T515] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 97.112398][ T515] usb 2-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 97.130950][ T515] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.139077][ T515] usb 2-1: Product: syz [ 97.146855][ T515] usb 2-1: Manufacturer: syz [ 97.160958][ T515] usb 2-1: SerialNumber: syz [ 97.168318][ T515] usb 2-1: Found UVC 1.00 device syz (046d:0821) [ 97.181011][ T515] usb 2-1: No streaming interface found for terminal 2. [ 97.587476][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.601282][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.620642][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.629252][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.655578][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.664583][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.672174][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.684197][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.693547][ T2603] overlay: filesystem on ./file0 not supported as upperdir [ 97.818959][ T2615] fuse: Unknown parameter '0x0000000000000004' [ 97.877687][ T2622] FAULT_INJECTION: forcing a failure. [ 97.877687][ T2622] name failslab, interval 1, probability 0, space 0, times 0 [ 97.893186][ T2622] CPU: 1 UID: 0 PID: 2622 Comm: syz.4.858 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 97.893229][ T2622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.893243][ T2622] Call Trace: [ 97.893249][ T2622] [ 97.893258][ T2622] __dump_stack+0x21/0x30 [ 97.893290][ T2622] dump_stack_lvl+0x140/0x1c0 [ 97.893316][ T2622] ? __cfi_dump_stack_lvl+0x10/0x10 [ 97.893341][ T2622] ? __cfi___netlink_kernel_create+0x10/0x10 [ 97.893368][ T2622] dump_stack+0x19/0x20 [ 97.893390][ T2622] should_fail_ex+0x3c2/0x510 [ 97.893411][ T2622] ? ops_init+0x81/0x5d0 [ 97.893430][ T2622] should_failslab+0xac/0x100 [ 97.893452][ T2622] __kmalloc_noprof+0x69/0x510 [ 97.893470][ T2622] ? ops_init+0x81/0x5d0 [ 97.893489][ T2622] ? __mutex_init+0xa6/0x1a0 [ 97.893512][ T2622] ops_init+0x81/0x5d0 [ 97.893530][ T2622] ? __kasan_check_write+0x18/0x20 [ 97.893549][ T2622] ? rwsem_read_trylock+0x275/0x5a0 [ 97.893575][ T2622] setup_net+0x227/0x9b0 [ 97.893592][ T2622] ? copy_net_ns+0xa20/0xa20 [ 97.893609][ T2622] ? down_read_killable+0x7f/0x100 [ 97.893634][ T2622] ? __cfi_down_read_killable+0x10/0x10 [ 97.893658][ T2622] copy_net_ns+0x4fc/0xa20 [ 97.893676][ T2622] create_new_namespaces+0x390/0x6f0 [ 97.893702][ T2622] unshare_nsproxy_namespaces+0x124/0x180 [ 97.893728][ T2622] ksys_unshare+0x4f9/0x920 [ 97.893751][ T2622] ? fput+0x1a4/0x230 [ 97.893782][ T2622] ? __cfi_ksys_unshare+0x10/0x10 [ 97.893806][ T2622] ? __kasan_check_write+0x18/0x20 [ 97.893826][ T2622] __x64_sys_unshare+0x3c/0x50 [ 97.893851][ T2622] x64_sys_call+0x2998/0x2ee0 [ 97.893869][ T2622] do_syscall_64+0x57/0xf0 [ 97.893888][ T2622] ? clear_bhb_loop+0x50/0xa0 [ 97.893912][ T2622] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 97.893936][ T2622] RIP: 0033:0x7faf97f9e159 [ 97.893952][ T2622] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.893968][ T2622] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 97.893992][ T2622] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 97.894007][ T2622] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 97.894019][ T2622] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 97.894031][ T2622] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.894043][ T2622] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 97.894059][ T2622] [ 98.330476][ T2633] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 98.346613][ T2633] udc dummy_udc.0: failed to start g1: -19 [ 98.354612][ T2633] UDC core: g1: couldn't find an available UDC or it's busy [ 98.495277][ T2642] fuse: Unknown parameter '0x0000000000000004' [ 98.529237][ T2645] UDC core: g1: couldn't find an available UDC or it's busy [ 98.630965][ T460] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 98.770974][ T460] usb 4-1: device descriptor read/64, error -71 [ 99.021053][ T460] usb 4-1: device descriptor read/64, error -71 [ 99.052934][ T2656] FAULT_INJECTION: forcing a failure. [ 99.052934][ T2656] name failslab, interval 1, probability 0, space 0, times 0 [ 99.070997][ T2656] CPU: 1 UID: 0 PID: 2656 Comm: syz.4.870 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 99.071035][ T2656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.071050][ T2656] Call Trace: [ 99.071058][ T2656] [ 99.071068][ T2656] __dump_stack+0x21/0x30 [ 99.071099][ T2656] dump_stack_lvl+0x140/0x1c0 [ 99.071126][ T2656] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.071154][ T2656] dump_stack+0x19/0x20 [ 99.071178][ T2656] should_fail_ex+0x3c2/0x510 [ 99.071213][ T2656] should_failslab+0xac/0x100 [ 99.071240][ T2656] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 99.071264][ T2656] ? sock_alloc_inode+0x48/0x150 [ 99.071287][ T2656] ? __cfi_selinux_socket_create+0x10/0x10 [ 99.071315][ T2656] sock_alloc_inode+0x48/0x150 [ 99.071338][ T2656] ? __cfi_sock_alloc_inode+0x10/0x10 [ 99.071359][ T2656] alloc_inode+0x7a/0x270 [ 99.071383][ T2656] ? bpf_lsm_socket_create+0xd/0x20 [ 99.071406][ T2656] new_inode_pseudo+0x19/0x40 [ 99.071434][ T2656] sock_create_lite+0x8f/0x500 [ 99.071456][ T2656] __netlink_kernel_create+0xcf/0x8a0 [ 99.071484][ T2656] ? __cfi___netlink_kernel_create+0x10/0x10 [ 99.071510][ T2656] ? __asan_memcpy+0x5a/0x80 [ 99.071528][ T2656] audit_net_init+0x108/0x240 [ 99.071548][ T2656] ? __cfi_audit_net_init+0x10/0x10 [ 99.071568][ T2656] ? __cfi_audit_receive+0x10/0x10 [ 99.071587][ T2656] ? __cfi_audit_multicast_bind+0x10/0x10 [ 99.071607][ T2656] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 99.071628][ T2656] ? __kmalloc_noprof+0x261/0x510 [ 99.071648][ T2656] ? ops_init+0x81/0x5d0 [ 99.071671][ T2656] ops_init+0x302/0x5d0 [ 99.071690][ T2656] ? __kasan_check_write+0x18/0x20 [ 99.071712][ T2656] ? rwsem_read_trylock+0x275/0x5a0 [ 99.071745][ T2656] setup_net+0x227/0x9b0 [ 99.071766][ T2656] ? copy_net_ns+0xa20/0xa20 [ 99.071787][ T2656] ? down_read_killable+0x7f/0x100 [ 99.071817][ T2656] ? __cfi_down_read_killable+0x10/0x10 [ 99.071845][ T2656] copy_net_ns+0x4fc/0xa20 [ 99.071867][ T2656] create_new_namespaces+0x390/0x6f0 [ 99.071899][ T2656] unshare_nsproxy_namespaces+0x124/0x180 [ 99.071930][ T2656] ksys_unshare+0x4f9/0x920 [ 99.071957][ T2656] ? fput+0x1a4/0x230 [ 99.071985][ T2656] ? __cfi_ksys_unshare+0x10/0x10 [ 99.072013][ T2656] ? __kasan_check_write+0x18/0x20 [ 99.072036][ T2656] __x64_sys_unshare+0x3c/0x50 [ 99.072064][ T2656] x64_sys_call+0x2998/0x2ee0 [ 99.072084][ T2656] do_syscall_64+0x57/0xf0 [ 99.072107][ T2656] ? clear_bhb_loop+0x50/0xa0 [ 99.072134][ T2656] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.072161][ T2656] RIP: 0033:0x7faf97f9e159 [ 99.072181][ T2656] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.072210][ T2656] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.072235][ T2656] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 99.072253][ T2656] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 99.072268][ T2656] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 99.072284][ T2656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.072300][ T2656] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 99.072320][ T2656] [ 99.072352][ T2656] audit: cannot initialize netlink socket in namespace [ 99.475799][ T2661] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 99.484750][ T2661] udc dummy_udc.0: failed to start g1: -19 [ 99.491000][ T2661] UDC core: g1: couldn't find an available UDC or it's busy [ 99.518946][ T2666] FAULT_INJECTION: forcing a failure. [ 99.518946][ T2666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 99.532244][ T460] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 99.537796][ T2666] CPU: 0 UID: 0 PID: 2666 Comm: syz.0.874 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 99.537830][ T2666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.537843][ T2666] Call Trace: [ 99.537851][ T2666] [ 99.537859][ T2666] __dump_stack+0x21/0x30 [ 99.537890][ T2666] dump_stack_lvl+0x140/0x1c0 [ 99.537915][ T2666] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.537941][ T2666] ? __seccomp_filter+0x897/0x1b70 [ 99.537967][ T2666] dump_stack+0x19/0x20 [ 99.537991][ T2666] should_fail_ex+0x3c2/0x510 [ 99.538015][ T2666] should_fail+0xf/0x20 [ 99.538035][ T2666] should_fail_usercopy+0x1e/0x30 [ 99.538059][ T2666] _copy_from_user+0x20/0xa0 [ 99.538086][ T2666] __se_sys_io_uring_setup+0x170/0x2b0 [ 99.538114][ T2666] ? __x64_sys_io_uring_setup+0x80/0x80 [ 99.538142][ T2666] ? __secure_computing+0xee/0x2b0 [ 99.538174][ T2666] __x64_sys_io_uring_setup+0x5f/0x80 [ 99.538201][ T2666] x64_sys_call+0x22c0/0x2ee0 [ 99.538220][ T2666] do_syscall_64+0x57/0xf0 [ 99.538240][ T2666] ? clear_bhb_loop+0x50/0xa0 [ 99.538266][ T2666] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.538293][ T2666] RIP: 0033:0x7f3db7f9e159 [ 99.538310][ T2666] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.538333][ T2666] RSP: 002b:00007f3db8e7cee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 99.538355][ T2666] RAX: ffffffffffffffda RBX: 0000200000000508 RCX: 00007f3db7f9e159 [ 99.538371][ T2666] RDX: 0000200000000588 RSI: 0000200000000508 RDI: 00000000000003c9 [ 99.538385][ T2666] RBP: 0000200000000500 R08: 0000000000000000 R09: 0000000000000000 [ 99.538399][ T2666] R10: 0000200000000590 R11: 0000000000000206 R12: 0000200000000588 [ 99.538413][ T2666] R13: 0000200000000590 R14: 00007f3db8e7cfd8 R15: 0000000000000000 [ 99.538429][ T2666] [ 99.579772][ T2668] fuse: Unknown parameter '0x0000000000000004' [ 99.701056][ T45] usb 2-1: USB disconnect, device number 16 [ 99.741270][ T460] usb 4-1: device descriptor read/64, error -71 [ 99.756693][ T2672] UDC core: g1: couldn't find an available UDC or it's busy [ 99.816341][ T2678] FAULT_INJECTION: forcing a failure. [ 99.816341][ T2678] name failslab, interval 1, probability 0, space 0, times 0 [ 99.846473][ T2678] CPU: 0 UID: 0 PID: 2678 Comm: syz.1.879 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 99.846510][ T2678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 99.846525][ T2678] Call Trace: [ 99.846533][ T2678] [ 99.846542][ T2678] __dump_stack+0x21/0x30 [ 99.846578][ T2678] dump_stack_lvl+0x140/0x1c0 [ 99.846607][ T2678] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.846636][ T2678] dump_stack+0x19/0x20 [ 99.846662][ T2678] should_fail_ex+0x3c2/0x510 [ 99.846687][ T2678] should_failslab+0xac/0x100 [ 99.846712][ T2678] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 99.846737][ T2678] ? sock_alloc_inode+0x48/0x150 [ 99.846760][ T2678] ? __cfi_selinux_socket_create+0x10/0x10 [ 99.846787][ T2678] sock_alloc_inode+0x48/0x150 [ 99.846809][ T2678] ? __cfi_sock_alloc_inode+0x10/0x10 [ 99.846831][ T2678] alloc_inode+0x7a/0x270 [ 99.846856][ T2678] ? bpf_lsm_socket_create+0xd/0x20 [ 99.846880][ T2678] new_inode_pseudo+0x19/0x40 [ 99.846905][ T2678] sock_create_lite+0x8f/0x500 [ 99.846929][ T2678] __netlink_kernel_create+0xcf/0x8a0 [ 99.846958][ T2678] ? __cfi___netlink_kernel_create+0x10/0x10 [ 99.846986][ T2678] ? __asan_memcpy+0x5a/0x80 [ 99.847007][ T2678] audit_net_init+0x108/0x240 [ 99.847030][ T2678] ? __cfi_audit_net_init+0x10/0x10 [ 99.847051][ T2678] ? __cfi_audit_receive+0x10/0x10 [ 99.847072][ T2678] ? __cfi_audit_multicast_bind+0x10/0x10 [ 99.847093][ T2678] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 99.847117][ T2678] ? __kmalloc_noprof+0x261/0x510 [ 99.847138][ T2678] ? ops_init+0x81/0x5d0 [ 99.847160][ T2678] ops_init+0x302/0x5d0 [ 99.847181][ T2678] ? __kasan_check_write+0x18/0x20 [ 99.847202][ T2678] ? rwsem_read_trylock+0x275/0x5a0 [ 99.847232][ T2678] setup_net+0x227/0x9b0 [ 99.847252][ T2678] ? copy_net_ns+0xa20/0xa20 [ 99.847271][ T2678] ? down_read_killable+0x7f/0x100 [ 99.847312][ T2678] ? __cfi_down_read_killable+0x10/0x10 [ 99.847343][ T2678] copy_net_ns+0x4fc/0xa20 [ 99.847364][ T2678] create_new_namespaces+0x390/0x6f0 [ 99.847393][ T2678] unshare_nsproxy_namespaces+0x124/0x180 [ 99.847439][ T2678] ksys_unshare+0x4f9/0x920 [ 99.847470][ T2678] ? fput+0x1a4/0x230 [ 99.847500][ T2678] ? __cfi_ksys_unshare+0x10/0x10 [ 99.847527][ T2678] ? __kasan_check_write+0x18/0x20 [ 99.847548][ T2678] __x64_sys_unshare+0x3c/0x50 [ 99.847574][ T2678] x64_sys_call+0x2998/0x2ee0 [ 99.847594][ T2678] do_syscall_64+0x57/0xf0 [ 99.847615][ T2678] ? clear_bhb_loop+0x50/0xa0 [ 99.847641][ T2678] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.847666][ T2678] RIP: 0033:0x7fc0dbf9e159 [ 99.847685][ T2678] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 99.847704][ T2678] RSP: 002b:00007fc0dce93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 99.847728][ T2678] RAX: ffffffffffffffda RBX: 00007fc0dc225fa0 RCX: 00007fc0dbf9e159 [ 99.847744][ T2678] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 99.847759][ T2678] RBP: 00007fc0dc03506b R08: 0000000000000000 R09: 0000000000000000 [ 99.847773][ T2678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 99.847786][ T2678] R13: 00007fc0dc226038 R14: 00007fc0dc225fa0 R15: 00007ffce2839e18 [ 99.847805][ T2678] [ 99.847905][ T2678] audit: cannot initialize netlink socket in namespace [ 99.991107][ T460] usb 4-1: device descriptor read/64, error -71 [ 100.244723][ T2687] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 100.256520][ T2687] udc dummy_udc.0: failed to start g1: -19 [ 100.264230][ T2687] UDC core: g1: couldn't find an available UDC or it's busy [ 100.271908][ T36] audit: type=1400 audit(1790849216.490:366): avc: denied { append } for pid=2688 comm="syz.0.883" name="event2" dev="devtmpfs" ino=209 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 100.298968][ T460] usb usb4-port1: attempt power cycle [ 100.311627][ T36] audit: type=1400 audit(1790849216.510:367): avc: denied { ioctl } for pid=2638 comm="syz.3.864" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 100.513250][ T2699] fuse: Unknown parameter 'fd0x0000000000000004' [ 100.530659][ T2702] UDC core: g1: couldn't find an available UDC or it's busy [ 100.651068][ T460] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 100.672051][ T460] usb 4-1: device descriptor read/8, error -71 [ 100.802181][ T460] usb 4-1: device descriptor read/8, error -71 [ 101.041420][ T460] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 101.062084][ T460] usb 4-1: device descriptor read/8, error -71 [ 101.125759][ T2727] fuse: Unknown parameter 'fd0x0000000000000004' [ 101.150001][ T2730] UDC core: g1: couldn't find an available UDC or it's busy [ 101.193698][ T460] usb 4-1: device descriptor read/8, error -71 [ 101.312010][ T460] usb usb4-port1: unable to enumerate USB device [ 101.589673][ T2751] fuse: Unknown parameter 'fd0x0000000000000004' [ 101.660697][ T2755] UDC core: g1: couldn't find an available UDC or it's busy [ 101.945278][ T2761] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 101.970599][ T2761] udc dummy_udc.0: failed to start g1: -19 [ 101.986761][ T2761] UDC core: g1: couldn't find an available UDC or it's busy [ 102.219314][ T2769] FAULT_INJECTION: forcing a failure. [ 102.219314][ T2769] name failslab, interval 1, probability 0, space 0, times 0 [ 102.232249][ T2769] CPU: 0 UID: 0 PID: 2769 Comm: syz.4.910 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 102.232283][ T2769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 102.232300][ T2769] Call Trace: [ 102.232308][ T2769] [ 102.232318][ T2769] __dump_stack+0x21/0x30 [ 102.232350][ T2769] dump_stack_lvl+0x140/0x1c0 [ 102.232376][ T2769] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.232408][ T2769] dump_stack+0x19/0x20 [ 102.232436][ T2769] should_fail_ex+0x3c2/0x510 [ 102.232462][ T2769] ? security_sk_alloc+0x65/0x260 [ 102.232494][ T2769] should_failslab+0xac/0x100 [ 102.232523][ T2769] __kmalloc_noprof+0x69/0x510 [ 102.232547][ T2769] ? kasan_save_alloc_info+0x3a/0x50 [ 102.232567][ T2769] ? security_sk_alloc+0x65/0x260 [ 102.232597][ T2769] ? __kasan_kmalloc+0x96/0xb0 [ 102.232625][ T2769] security_sk_alloc+0x65/0x260 [ 102.232654][ T2769] sk_prot_alloc+0x123/0x3a0 [ 102.232682][ T2769] ? security_socket_post_create+0x48/0x140 [ 102.232713][ T2769] sk_alloc+0x40/0x590 [ 102.232740][ T2769] __netlink_kernel_create+0x173/0x8a0 [ 102.232769][ T2769] ? __netlink_kernel_create+0x6ff/0x8a0 [ 102.232797][ T2769] ? __cfi___netlink_kernel_create+0x10/0x10 [ 102.232828][ T2769] ? __asan_memcpy+0x5a/0x80 [ 102.232850][ T2769] genl_pernet_init+0xb8/0x170 [ 102.232872][ T2769] ? __cfi_genl_pernet_init+0x10/0x10 [ 102.232894][ T2769] ? rtnetlink_net_init+0xbf/0x140 [ 102.232919][ T2769] ? __cfi_genl_rcv+0x10/0x10 [ 102.232940][ T2769] ? __cfi_genl_bind+0x10/0x10 [ 102.232960][ T2769] ? __cfi_genl_unbind+0x10/0x10 [ 102.232995][ T2769] ? __cfi_genl_release+0x10/0x10 [ 102.233017][ T2769] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 102.233041][ T2769] ? __cfi_rtnetlink_bind+0x10/0x10 [ 102.233066][ T2769] ? __kasan_check_write+0x18/0x20 [ 102.233089][ T2769] ? __mutex_init+0xa6/0x1a0 [ 102.233121][ T2769] ops_init+0x302/0x5d0 [ 102.233142][ T2769] ? __kasan_check_write+0x18/0x20 [ 102.233164][ T2769] ? rwsem_read_trylock+0x275/0x5a0 [ 102.233191][ T2769] setup_net+0x227/0x9b0 [ 102.233208][ T2769] ? copy_net_ns+0xa20/0xa20 [ 102.233226][ T2769] ? down_read_killable+0x7f/0x100 [ 102.233256][ T2769] ? __cfi_down_read_killable+0x10/0x10 [ 102.233286][ T2769] copy_net_ns+0x4fc/0xa20 [ 102.233306][ T2769] create_new_namespaces+0x390/0x6f0 [ 102.233338][ T2769] unshare_nsproxy_namespaces+0x124/0x180 [ 102.233368][ T2769] ksys_unshare+0x4f9/0x920 [ 102.233397][ T2769] ? fput+0x1a4/0x230 [ 102.233426][ T2769] ? __cfi_ksys_unshare+0x10/0x10 [ 102.233454][ T2769] ? __kasan_check_write+0x18/0x20 [ 102.233477][ T2769] __x64_sys_unshare+0x3c/0x50 [ 102.233505][ T2769] x64_sys_call+0x2998/0x2ee0 [ 102.233526][ T2769] do_syscall_64+0x57/0xf0 [ 102.233547][ T2769] ? clear_bhb_loop+0x50/0xa0 [ 102.233577][ T2769] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.233604][ T2769] RIP: 0033:0x7faf97f9e159 [ 102.233623][ T2769] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 102.233643][ T2769] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 102.233668][ T2769] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 102.233685][ T2769] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 102.233700][ T2769] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 102.233714][ T2769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 102.233728][ T2769] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 102.233747][ T2769] [ 102.611395][ T36] audit: type=1400 audit(1790849218.830:368): avc: denied { read write } for pid=2770 comm="syz.3.911" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.653277][ T36] audit: type=1400 audit(1790849218.850:369): avc: denied { open } for pid=2770 comm="syz.3.911" path="/dev/raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 102.698414][ T2778] UDC core: g1: couldn't find an available UDC or it's busy [ 102.849677][ T2785] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 102.863108][ T2785] udc dummy_udc.0: failed to start g1: -19 [ 102.874772][ T2785] UDC core: g1: couldn't find an available UDC or it's busy [ 102.882298][ T460] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 103.030999][ T460] usb 4-1: device descriptor read/64, error -71 [ 103.040013][ T36] audit: type=1400 audit(1790849219.250:370): avc: denied { read write } for pid=2799 comm="syz.0.921" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.075168][ T36] audit: type=1400 audit(1790849219.250:371): avc: denied { open } for pid=2799 comm="syz.0.921" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 103.124348][ T2805] UDC core: g1: couldn't find an available UDC or it's busy [ 103.150952][ T36] audit: type=1400 audit(1790849219.360:372): avc: denied { append } for pid=2806 comm="syz.0.924" name="uprobe_events" dev="tracefs" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 103.247612][ T36] audit: type=1400 audit(1790849219.460:373): avc: denied { setattr } for pid=2810 comm="syz.0.926" name="/" dev="configfs" ino=2207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 103.271642][ T460] usb 4-1: device descriptor read/64, error -71 [ 103.334544][ T12] bridge_slave_1: left allmulticast mode [ 103.341246][ T12] bridge_slave_1: left promiscuous mode [ 103.347133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.355870][ T12] bridge_slave_0: left allmulticast mode [ 103.368085][ T12] bridge_slave_0: left promiscuous mode [ 103.381589][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.521051][ T460] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 103.532962][ T12] tipc: Disabling bearer [ 103.543886][ T12] tipc: Left network mode [ 103.556688][ T12] veth1_macvtap: left promiscuous mode [ 103.562468][ T12] veth0_vlan: left promiscuous mode [ 103.621869][ T2815] FAULT_INJECTION: forcing a failure. [ 103.621869][ T2815] name failslab, interval 1, probability 0, space 0, times 0 [ 103.635719][ T2815] CPU: 0 UID: 0 PID: 2815 Comm: syz.1.930 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 103.635753][ T2815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 103.635766][ T2815] Call Trace: [ 103.635775][ T2815] [ 103.635783][ T2815] __dump_stack+0x21/0x30 [ 103.635817][ T2815] dump_stack_lvl+0x140/0x1c0 [ 103.635846][ T2815] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.635873][ T2815] ? ref_tracker_alloc+0x356/0x5b0 [ 103.635899][ T2815] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 103.635925][ T2815] ? __netlink_kernel_create+0x173/0x8a0 [ 103.635952][ T2815] ? genl_pernet_init+0xb8/0x170 [ 103.635974][ T2815] dump_stack+0x19/0x20 [ 103.636000][ T2815] should_fail_ex+0x3c2/0x510 [ 103.636024][ T2815] ? __netlink_kernel_create+0x2bb/0x8a0 [ 103.636050][ T2815] should_failslab+0xac/0x100 [ 103.636075][ T2815] __kmalloc_noprof+0x69/0x510 [ 103.636096][ T2815] ? sock_init_data_uid+0x5da/0x870 [ 103.636118][ T2815] ? __netlink_kernel_create+0x2bb/0x8a0 [ 103.636146][ T2815] __netlink_kernel_create+0x2bb/0x8a0 [ 103.636173][ T2815] ? __netlink_kernel_create+0x6ff/0x8a0 [ 103.636199][ T2815] ? __cfi___netlink_kernel_create+0x10/0x10 [ 103.636227][ T2815] ? __asan_memcpy+0x5a/0x80 [ 103.636248][ T2815] genl_pernet_init+0xb8/0x170 [ 103.636269][ T2815] ? __cfi_genl_pernet_init+0x10/0x10 [ 103.636289][ T2815] ? rtnetlink_net_init+0xbf/0x140 [ 103.636312][ T2815] ? __cfi_genl_rcv+0x10/0x10 [ 103.636338][ T2815] ? __cfi_genl_bind+0x10/0x10 [ 103.636358][ T2815] ? __cfi_genl_unbind+0x10/0x10 [ 103.636378][ T2815] ? __cfi_genl_release+0x10/0x10 [ 103.636399][ T2815] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 103.636421][ T2815] ? __cfi_rtnetlink_bind+0x10/0x10 [ 103.636445][ T2815] ? __kasan_check_write+0x18/0x20 [ 103.636467][ T2815] ? __mutex_init+0xa6/0x1a0 [ 103.636497][ T2815] ops_init+0x302/0x5d0 [ 103.636518][ T2815] ? __kasan_check_write+0x18/0x20 [ 103.636539][ T2815] ? rwsem_read_trylock+0x275/0x5a0 [ 103.636575][ T2815] setup_net+0x227/0x9b0 [ 103.636595][ T2815] ? copy_net_ns+0xa20/0xa20 [ 103.636616][ T2815] ? down_read_killable+0x7f/0x100 [ 103.636645][ T2815] ? __cfi_down_read_killable+0x10/0x10 [ 103.636675][ T2815] copy_net_ns+0x4fc/0xa20 [ 103.636697][ T2815] create_new_namespaces+0x390/0x6f0 [ 103.636726][ T2815] unshare_nsproxy_namespaces+0x124/0x180 [ 103.636756][ T2815] ksys_unshare+0x4f9/0x920 [ 103.636782][ T2815] ? fput+0x1a4/0x230 [ 103.636809][ T2815] ? __cfi_ksys_unshare+0x10/0x10 [ 103.636835][ T2815] ? __kasan_check_write+0x18/0x20 [ 103.636858][ T2815] __x64_sys_unshare+0x3c/0x50 [ 103.636884][ T2815] x64_sys_call+0x2998/0x2ee0 [ 103.636903][ T2815] do_syscall_64+0x57/0xf0 [ 103.636923][ T2815] ? clear_bhb_loop+0x50/0xa0 [ 103.636950][ T2815] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.636975][ T2815] RIP: 0033:0x7fc0dbf9e159 [ 103.636993][ T2815] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.637011][ T2815] RSP: 002b:00007fc0dce93028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 103.637035][ T2815] RAX: ffffffffffffffda RBX: 00007fc0dc225fa0 RCX: 00007fc0dbf9e159 [ 103.637050][ T2815] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 103.637065][ T2815] RBP: 00007fc0dc03506b R08: 0000000000000000 R09: 0000000000000000 [ 103.637079][ T2815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.637093][ T2815] R13: 00007fc0dc226038 R14: 00007fc0dc225fa0 R15: 00007ffce2839e18 [ 103.637112][ T2815] [ 103.690993][ T460] usb 4-1: device descriptor read/64, error -71 [ 103.698225][ T2813] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.950950][ T460] usb 4-1: device descriptor read/64, error -71 [ 103.958808][ T2813] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.013194][ T2813] bridge_slave_0: entered allmulticast mode [ 104.019815][ T2813] bridge_slave_0: entered promiscuous mode [ 104.026626][ T2813] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.033909][ T2813] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.035787][ T2823] UDC core: g1: couldn't find an available UDC or it's busy [ 104.043050][ T2813] bridge_slave_1: entered allmulticast mode [ 104.055601][ T2813] bridge_slave_1: entered promiscuous mode [ 104.082462][ T460] usb usb4-port1: attempt power cycle [ 104.088560][ T2825] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 104.105772][ T2825] udc dummy_udc.0: failed to start g1: -19 [ 104.114369][ T2825] UDC core: g1: couldn't find an available UDC or it's busy [ 104.144210][ T2813] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.151325][ T2813] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.158626][ T2813] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.165712][ T2813] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.199835][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.207838][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.225795][ T310] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.232906][ T310] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.246344][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.253425][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.296837][ T2813] veth0_vlan: entered promiscuous mode [ 104.310318][ T2813] veth1_macvtap: entered promiscuous mode [ 104.429461][ T2845] FAULT_INJECTION: forcing a failure. [ 104.429461][ T2845] name failslab, interval 1, probability 0, space 0, times 0 [ 104.451635][ T460] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 104.461556][ T2845] CPU: 0 UID: 0 PID: 2845 Comm: syz.5.940 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 104.461587][ T2845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 104.461600][ T2845] Call Trace: [ 104.461607][ T2845] [ 104.461616][ T2845] __dump_stack+0x21/0x30 [ 104.461650][ T2845] dump_stack_lvl+0x140/0x1c0 [ 104.461677][ T2845] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.461702][ T2845] ? __cfi___netlink_kernel_create+0x10/0x10 [ 104.461731][ T2845] dump_stack+0x19/0x20 [ 104.461755][ T2845] should_fail_ex+0x3c2/0x510 [ 104.461779][ T2845] ? ops_init+0x81/0x5d0 [ 104.461799][ T2845] should_failslab+0xac/0x100 [ 104.461825][ T2845] __kmalloc_noprof+0x69/0x510 [ 104.461847][ T2845] ? ops_init+0x81/0x5d0 [ 104.461867][ T2845] ? __mutex_init+0xa6/0x1a0 [ 104.461893][ T2845] ops_init+0x81/0x5d0 [ 104.461904][ T2845] ? __kasan_check_write+0x18/0x20 [ 104.461915][ T2845] ? rwsem_read_trylock+0x275/0x5a0 [ 104.461931][ T2845] setup_net+0x227/0x9b0 [ 104.461941][ T2845] ? copy_net_ns+0xa20/0xa20 [ 104.461951][ T2845] ? down_read_killable+0x7f/0x100 [ 104.461966][ T2845] ? __cfi_down_read_killable+0x10/0x10 [ 104.461981][ T2845] copy_net_ns+0x4fc/0xa20 [ 104.461992][ T2845] create_new_namespaces+0x390/0x6f0 [ 104.462008][ T2845] unshare_nsproxy_namespaces+0x124/0x180 [ 104.462023][ T2845] ksys_unshare+0x4f9/0x920 [ 104.462037][ T2845] ? fput+0x1a4/0x230 [ 104.462051][ T2845] ? __cfi_ksys_unshare+0x10/0x10 [ 104.462065][ T2845] ? __kasan_check_write+0x18/0x20 [ 104.462077][ T2845] __x64_sys_unshare+0x3c/0x50 [ 104.462091][ T2845] x64_sys_call+0x2998/0x2ee0 [ 104.462101][ T2845] do_syscall_64+0x57/0xf0 [ 104.462112][ T2845] ? clear_bhb_loop+0x50/0xa0 [ 104.462126][ T2845] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.462140][ T2845] RIP: 0033:0x7f2d7739e159 [ 104.462151][ T2845] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.462161][ T2845] RSP: 002b:00007f2d781ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 104.462175][ T2845] RAX: ffffffffffffffda RBX: 00007f2d77625fa0 RCX: 00007f2d7739e159 [ 104.462184][ T2845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 104.462191][ T2845] RBP: 00007f2d7743506b R08: 0000000000000000 R09: 0000000000000000 [ 104.462199][ T2845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.462206][ T2845] R13: 00007f2d77626038 R14: 00007f2d77625fa0 R15: 00007ffe3882dcd8 [ 104.462215][ T2845] [ 104.472192][ T460] usb 4-1: device descriptor read/8, error -71 [ 104.783282][ T2847] UDC core: g1: couldn't find an available UDC or it's busy [ 104.808953][ T2849] fuse: Unknown parameter '0x0000000000000003' [ 104.865534][ T460] usb 4-1: device descriptor read/8, error -71 [ 105.121027][ T460] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 105.152075][ T460] usb 4-1: device descriptor read/8, error -71 [ 105.312164][ T460] usb 4-1: device descriptor read/8, error -71 [ 105.428498][ T2870] FAULT_INJECTION: forcing a failure. [ 105.428498][ T2870] name failslab, interval 1, probability 0, space 0, times 0 [ 105.449194][ T460] usb usb4-port1: unable to enumerate USB device [ 105.472618][ T2870] CPU: 1 UID: 0 PID: 2870 Comm: syz.4.949 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 105.472656][ T2870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 105.472672][ T2870] Call Trace: [ 105.472681][ T2870] [ 105.472691][ T2870] __dump_stack+0x21/0x30 [ 105.472727][ T2870] dump_stack_lvl+0x140/0x1c0 [ 105.472759][ T2870] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.472789][ T2870] ? ref_tracker_alloc+0x356/0x5b0 [ 105.472818][ T2870] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 105.472845][ T2870] ? __netlink_kernel_create+0x173/0x8a0 [ 105.472874][ T2870] ? genl_pernet_init+0xb8/0x170 [ 105.472905][ T2870] dump_stack+0x19/0x20 [ 105.472933][ T2870] should_fail_ex+0x3c2/0x510 [ 105.472961][ T2870] ? __netlink_kernel_create+0x2bb/0x8a0 [ 105.472991][ T2870] should_failslab+0xac/0x100 [ 105.473019][ T2870] __kmalloc_noprof+0x69/0x510 [ 105.473043][ T2870] ? sock_init_data_uid+0x5da/0x870 [ 105.473066][ T2870] ? __netlink_kernel_create+0x2bb/0x8a0 [ 105.473095][ T2870] __netlink_kernel_create+0x2bb/0x8a0 [ 105.473124][ T2870] ? __netlink_kernel_create+0x6ff/0x8a0 [ 105.473152][ T2870] ? __cfi___netlink_kernel_create+0x10/0x10 [ 105.473186][ T2870] ? __asan_memcpy+0x5a/0x80 [ 105.473208][ T2870] genl_pernet_init+0xb8/0x170 [ 105.473231][ T2870] ? __cfi_genl_pernet_init+0x10/0x10 [ 105.473252][ T2870] ? rtnetlink_net_init+0xbf/0x140 [ 105.473277][ T2870] ? __cfi_genl_rcv+0x10/0x10 [ 105.473297][ T2870] ? __cfi_genl_bind+0x10/0x10 [ 105.473319][ T2870] ? __cfi_genl_unbind+0x10/0x10 [ 105.473340][ T2870] ? __cfi_genl_release+0x10/0x10 [ 105.473361][ T2870] ? __cfi_rtnetlink_rcv+0x10/0x10 [ 105.473384][ T2870] ? __cfi_rtnetlink_bind+0x10/0x10 [ 105.473403][ T2870] ? __kasan_check_write+0x18/0x20 [ 105.473421][ T2870] ? __mutex_init+0xa6/0x1a0 [ 105.473451][ T2870] ops_init+0x302/0x5d0 [ 105.473475][ T2870] ? __kasan_check_write+0x18/0x20 [ 105.473497][ T2870] ? rwsem_read_trylock+0x275/0x5a0 [ 105.473544][ T2870] setup_net+0x227/0x9b0 [ 105.473571][ T2870] ? copy_net_ns+0xa20/0xa20 [ 105.473593][ T2870] ? down_read_killable+0x7f/0x100 [ 105.473625][ T2870] ? __cfi_down_read_killable+0x10/0x10 [ 105.473658][ T2870] copy_net_ns+0x4fc/0xa20 [ 105.473680][ T2870] create_new_namespaces+0x390/0x6f0 [ 105.473711][ T2870] unshare_nsproxy_namespaces+0x124/0x180 [ 105.473741][ T2870] ksys_unshare+0x4f9/0x920 [ 105.473770][ T2870] ? fput+0x1a4/0x230 [ 105.473798][ T2870] ? __cfi_ksys_unshare+0x10/0x10 [ 105.473826][ T2870] ? __kasan_check_write+0x18/0x20 [ 105.473851][ T2870] __x64_sys_unshare+0x3c/0x50 [ 105.473878][ T2870] x64_sys_call+0x2998/0x2ee0 [ 105.473909][ T2870] do_syscall_64+0x57/0xf0 [ 105.473933][ T2870] ? clear_bhb_loop+0x50/0xa0 [ 105.473962][ T2870] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.473991][ T2870] RIP: 0033:0x7faf97f9e159 [ 105.474010][ T2870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 105.474031][ T2870] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 105.474055][ T2870] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 105.474073][ T2870] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 105.474088][ T2870] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 105.474102][ T2870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 105.474118][ T2870] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 105.474137][ T2870] [ 105.882127][ T2872] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 105.928222][ T2872] udc dummy_udc.0: failed to start g1: -19 [ 105.966137][ T2872] UDC core: g1: couldn't find an available UDC or it's busy [ 106.271062][ T10] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 106.293930][ T45] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 106.421291][ T10] usb 6-1: Using ep0 maxpacket: 16 [ 106.427638][ T10] usb 6-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 106.439131][ T10] usb 6-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 106.451032][ T45] usb 4-1: Using ep0 maxpacket: 16 [ 106.452096][ T10] usb 6-1: config 0 interface 0 has no altsetting 0 [ 106.458445][ T45] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 106.463841][ T10] usb 6-1: New USB device found, idVendor=0b05, idProduct=18c6, bcdDevice= 0.00 [ 106.474591][ T45] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 106.484689][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 106.495176][ T45] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 106.504045][ T10] usb 6-1: config 0 descriptor?? [ 106.510648][ T45] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 106.523701][ T45] usb 4-1: Product: syz [ 106.527912][ T45] usb 4-1: Manufacturer: syz [ 106.532542][ T45] usb 4-1: SerialNumber: syz [ 106.740897][ T45] usb 4-1: 0:2 : does not exist [ 106.747840][ T45] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 106.760250][ T45] usb 4-1: USB disconnect, device number 32 [ 106.768529][ T626] udevd[626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.893344][ T2901] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 106.903063][ T2901] udc dummy_udc.0: failed to start g1: -19 [ 106.909170][ T2901] UDC core: g1: couldn't find an available UDC or it's busy [ 106.919657][ T10] hid-generic 0003:0B05:18C6.0007: unknown main item tag 0x0 [ 106.927835][ T10] hid-generic 0003:0B05:18C6.0007: unknown main item tag 0x0 [ 106.935573][ T10] hid-generic 0003:0B05:18C6.0007: unknown main item tag 0x0 [ 106.943313][ T10] hid-generic 0003:0B05:18C6.0007: unknown main item tag 0x0 [ 106.947384][ T2903] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 106.950719][ T10] hid-generic 0003:0B05:18C6.0007: unknown main item tag 0x0 [ 106.962009][ T2903] udc dummy_udc.0: failed to start g1: -19 [ 106.965836][ T801] udevd[801]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 106.972061][ T2903] UDC core: g1: couldn't find an available UDC or it's busy [ 106.988381][ T10] hid-generic 0003:0B05:18C6.0007: hiddev96,hidraw0: USB HID v0.00 Device [HID 0b05:18c6] on usb-dummy_hcd.5-1/input0 [ 107.071334][ T2907] rust_binder: Error in use_page_slow: ESRCH [ 107.071360][ T2907] rust_binder: use_range failure ESRCH [ 107.077705][ T2907] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 107.083376][ T2907] rust_binder: Failure in copy_transaction_data: ESRCH [ 107.091465][ T2907] rust_binder: 2906:2907 transaction call to 2906:0 failed ESRCH, code 0 size 88-24 [ 107.157831][ T45] rust_binder: 2906: undelivered TRANSACTION_ERROR: 29201 [ 107.167965][ T2909] FAULT_INJECTION: forcing a failure. [ 107.167965][ T2909] name failslab, interval 1, probability 0, space 0, times 0 [ 107.180991][ T2909] CPU: 1 UID: 0 PID: 2909 Comm: syz.4.963 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 107.181024][ T2909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 107.181037][ T2909] Call Trace: [ 107.181045][ T2909] [ 107.181054][ T2909] __dump_stack+0x21/0x30 [ 107.181087][ T2909] dump_stack_lvl+0x140/0x1c0 [ 107.181115][ T2909] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.181149][ T2909] dump_stack+0x19/0x20 [ 107.181164][ T2909] should_fail_ex+0x3c2/0x510 [ 107.181178][ T2909] should_failslab+0xac/0x100 [ 107.181194][ T2909] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 107.181207][ T2909] ? sock_alloc_inode+0x48/0x150 [ 107.181220][ T2909] ? __cfi_selinux_socket_create+0x10/0x10 [ 107.181235][ T2909] sock_alloc_inode+0x48/0x150 [ 107.181246][ T2909] ? __cfi_sock_alloc_inode+0x10/0x10 [ 107.181257][ T2909] alloc_inode+0x7a/0x270 [ 107.181270][ T2909] ? bpf_lsm_socket_create+0xd/0x20 [ 107.181283][ T2909] new_inode_pseudo+0x19/0x40 [ 107.181298][ T2909] sock_create_lite+0x8f/0x500 [ 107.181310][ T2909] __netlink_kernel_create+0xcf/0x8a0 [ 107.181326][ T2909] ? __cfi___netlink_kernel_create+0x10/0x10 [ 107.181340][ T2909] ? __asan_memcpy+0x5a/0x80 [ 107.181351][ T2909] audit_net_init+0x108/0x240 [ 107.181362][ T2909] ? __cfi_audit_net_init+0x10/0x10 [ 107.181373][ T2909] ? __cfi_audit_receive+0x10/0x10 [ 107.181384][ T2909] ? __cfi_audit_multicast_bind+0x10/0x10 [ 107.181396][ T2909] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 107.181407][ T2909] ? __kmalloc_noprof+0x261/0x510 [ 107.181419][ T2909] ? ops_init+0x81/0x5d0 [ 107.181430][ T2909] ops_init+0x302/0x5d0 [ 107.181441][ T2909] ? __kasan_check_write+0x18/0x20 [ 107.181452][ T2909] ? rwsem_read_trylock+0x275/0x5a0 [ 107.181468][ T2909] setup_net+0x227/0x9b0 [ 107.181479][ T2909] ? copy_net_ns+0xa20/0xa20 [ 107.181489][ T2909] ? down_read_killable+0x7f/0x100 [ 107.181505][ T2909] ? __cfi_down_read_killable+0x10/0x10 [ 107.181520][ T2909] copy_net_ns+0x4fc/0xa20 [ 107.181532][ T2909] create_new_namespaces+0x390/0x6f0 [ 107.181549][ T2909] unshare_nsproxy_namespaces+0x124/0x180 [ 107.181565][ T2909] ksys_unshare+0x4f9/0x920 [ 107.181579][ T2909] ? fput+0x1a4/0x230 [ 107.181593][ T2909] ? __cfi_ksys_unshare+0x10/0x10 [ 107.181607][ T2909] ? __kasan_check_write+0x18/0x20 [ 107.181619][ T2909] __x64_sys_unshare+0x3c/0x50 [ 107.181633][ T2909] x64_sys_call+0x2998/0x2ee0 [ 107.181646][ T2909] do_syscall_64+0x57/0xf0 [ 107.181657][ T2909] ? clear_bhb_loop+0x50/0xa0 [ 107.181671][ T2909] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.181685][ T2909] RIP: 0033:0x7faf97f9e159 [ 107.181696][ T2909] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.181706][ T2909] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 107.181719][ T2909] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 107.181728][ T2909] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 107.181736][ T2909] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 107.181743][ T2909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.181750][ T2909] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 107.181759][ T2909] [ 107.181766][ T2909] audit: cannot initialize netlink socket in namespace [ 107.614851][ T2927] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 107.623187][ T2927] udc dummy_udc.0: failed to start g1: -19 [ 107.629855][ T2927] UDC core: g1: couldn't find an available UDC or it's busy [ 107.639371][ T2929] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 107.648778][ T2929] udc dummy_udc.0: failed to start g1: -19 [ 107.656373][ T801] udevd[801]: error opening ATTR{/sys/devices/platform/dummy_udc.0/gadget.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 107.673235][ T2929] UDC core: g1: couldn't find an available UDC or it's busy [ 107.741060][ T515] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 107.749448][ T460] usb 6-1: USB disconnect, device number 2 [ 107.820408][ T36] audit: type=1400 audit(1790849224.030:374): avc: denied { map } for pid=2936 comm="syz.3.973" path="/dev/uinput" dev="devtmpfs" ino=194 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 107.880978][ T515] usb 2-1: device descriptor read/64, error -71 [ 107.940992][ T10] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 108.021807][ T2941] FAULT_INJECTION: forcing a failure. [ 108.021807][ T2941] name failslab, interval 1, probability 0, space 0, times 0 [ 108.034563][ T2941] CPU: 0 UID: 0 PID: 2941 Comm: syz.3.975 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 108.034599][ T2941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.034613][ T2941] Call Trace: [ 108.034620][ T2941] [ 108.034630][ T2941] __dump_stack+0x21/0x30 [ 108.034662][ T2941] dump_stack_lvl+0x140/0x1c0 [ 108.034677][ T2941] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.034694][ T2941] dump_stack+0x19/0x20 [ 108.034708][ T2941] should_fail_ex+0x3c2/0x510 [ 108.034722][ T2941] should_failslab+0xac/0x100 [ 108.034736][ T2941] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 108.034748][ T2941] ? sock_alloc_inode+0x48/0x150 [ 108.034761][ T2941] ? __cfi_selinux_socket_create+0x10/0x10 [ 108.034776][ T2941] sock_alloc_inode+0x48/0x150 [ 108.034788][ T2941] ? __cfi_sock_alloc_inode+0x10/0x10 [ 108.034799][ T2941] alloc_inode+0x7a/0x270 [ 108.034813][ T2941] ? bpf_lsm_socket_create+0xd/0x20 [ 108.034826][ T2941] new_inode_pseudo+0x19/0x40 [ 108.034840][ T2941] sock_create_lite+0x8f/0x500 [ 108.034854][ T2941] __netlink_kernel_create+0xcf/0x8a0 [ 108.034881][ T2941] ? __cfi___netlink_kernel_create+0x10/0x10 [ 108.034897][ T2941] ? __asan_memcpy+0x5a/0x80 [ 108.034908][ T2941] audit_net_init+0x108/0x240 [ 108.034921][ T2941] ? __cfi_audit_net_init+0x10/0x10 [ 108.034933][ T2941] ? __cfi_audit_receive+0x10/0x10 [ 108.034944][ T2941] ? __cfi_audit_multicast_bind+0x10/0x10 [ 108.034957][ T2941] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 108.034970][ T2941] ? __kmalloc_noprof+0x261/0x510 [ 108.034982][ T2941] ? ops_init+0x81/0x5d0 [ 108.034996][ T2941] ops_init+0x302/0x5d0 [ 108.035007][ T2941] ? __kasan_check_write+0x18/0x20 [ 108.035018][ T2941] ? rwsem_read_trylock+0x275/0x5a0 [ 108.035035][ T2941] setup_net+0x227/0x9b0 [ 108.035045][ T2941] ? copy_net_ns+0xa20/0xa20 [ 108.035056][ T2941] ? down_read_killable+0x7f/0x100 [ 108.035071][ T2941] ? __cfi_down_read_killable+0x10/0x10 [ 108.035086][ T2941] copy_net_ns+0x4fc/0xa20 [ 108.035097][ T2941] create_new_namespaces+0x390/0x6f0 [ 108.035121][ T2941] unshare_nsproxy_namespaces+0x124/0x180 [ 108.035138][ T2941] ksys_unshare+0x4f9/0x920 [ 108.035154][ T2941] ? fput+0x1a4/0x230 [ 108.035169][ T2941] ? __cfi_ksys_unshare+0x10/0x10 [ 108.035184][ T2941] ? __kasan_check_write+0x18/0x20 [ 108.035195][ T2941] __x64_sys_unshare+0x3c/0x50 [ 108.035210][ T2941] x64_sys_call+0x2998/0x2ee0 [ 108.035221][ T2941] do_syscall_64+0x57/0xf0 [ 108.035232][ T2941] ? clear_bhb_loop+0x50/0xa0 [ 108.035246][ T2941] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.035260][ T2941] RIP: 0033:0x7f4ae479e159 [ 108.035272][ T2941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.035282][ T2941] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.035296][ T2941] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 108.035305][ T2941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 108.035313][ T2941] RBP: 00007f4ae483506b R08: 0000000000000000 R09: 0000000000000000 [ 108.035320][ T2941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.035327][ T2941] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 108.035337][ T2941] [ 108.035343][ T2941] audit: cannot initialize netlink socket in namespace [ 108.380974][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 108.387190][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 108.400009][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 108.410638][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 108.419763][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 108.427994][ T515] usb 2-1: device descriptor read/64, error -71 [ 108.434544][ T10] usb 5-1: Product: syz [ 108.438852][ T10] usb 5-1: Manufacturer: syz [ 108.443496][ T10] usb 5-1: SerialNumber: syz [ 108.621251][ T2956] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 108.629738][ T2956] udc dummy_udc.0: failed to start g1: -19 [ 108.639469][ T2956] UDC core: g1: couldn't find an available UDC or it's busy [ 108.656032][ T10] usb 5-1: 0:2 : does not exist [ 108.671098][ T515] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 108.681474][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 108.701143][ T10] usb 5-1: USB disconnect, device number 2 [ 108.795288][ T2974] FAULT_INJECTION: forcing a failure. [ 108.795288][ T2974] name failslab, interval 1, probability 0, space 0, times 0 [ 108.808031][ T2974] CPU: 1 UID: 0 PID: 2974 Comm: syz.5.986 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 108.808063][ T2974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 108.808077][ T2974] Call Trace: [ 108.808084][ T2974] [ 108.808093][ T2974] __dump_stack+0x21/0x30 [ 108.808128][ T2974] dump_stack_lvl+0x140/0x1c0 [ 108.808155][ T2974] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.808184][ T2974] dump_stack+0x19/0x20 [ 108.808207][ T2974] should_fail_ex+0x3c2/0x510 [ 108.808232][ T2974] should_failslab+0xac/0x100 [ 108.808257][ T2974] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 108.808280][ T2974] ? sock_alloc_inode+0x48/0x150 [ 108.808303][ T2974] ? __cfi_selinux_socket_create+0x10/0x10 [ 108.808331][ T2974] sock_alloc_inode+0x48/0x150 [ 108.808353][ T2974] ? __cfi_sock_alloc_inode+0x10/0x10 [ 108.808376][ T2974] alloc_inode+0x7a/0x270 [ 108.808403][ T2974] ? bpf_lsm_socket_create+0xd/0x20 [ 108.808427][ T2974] new_inode_pseudo+0x19/0x40 [ 108.808452][ T2974] sock_create_lite+0x8f/0x500 [ 108.808477][ T2974] __netlink_kernel_create+0xcf/0x8a0 [ 108.808506][ T2974] ? __cfi___netlink_kernel_create+0x10/0x10 [ 108.808533][ T2974] ? __asan_memcpy+0x5a/0x80 [ 108.808552][ T2974] audit_net_init+0x108/0x240 [ 108.808581][ T2974] ? __cfi_audit_net_init+0x10/0x10 [ 108.808602][ T2974] ? __cfi_audit_receive+0x10/0x10 [ 108.808624][ T2974] ? __cfi_audit_multicast_bind+0x10/0x10 [ 108.808646][ T2974] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 108.808669][ T2974] ? __kmalloc_noprof+0x261/0x510 [ 108.808691][ T2974] ? ops_init+0x81/0x5d0 [ 108.808714][ T2974] ops_init+0x302/0x5d0 [ 108.808735][ T2974] ? __kasan_check_write+0x18/0x20 [ 108.808755][ T2974] ? rwsem_read_trylock+0x275/0x5a0 [ 108.808804][ T2974] setup_net+0x227/0x9b0 [ 108.808825][ T2974] ? copy_net_ns+0xa20/0xa20 [ 108.808846][ T2974] ? down_read_killable+0x7f/0x100 [ 108.808875][ T2974] ? __cfi_down_read_killable+0x10/0x10 [ 108.808903][ T2974] copy_net_ns+0x4fc/0xa20 [ 108.808928][ T2974] create_new_namespaces+0x390/0x6f0 [ 108.808959][ T2974] unshare_nsproxy_namespaces+0x124/0x180 [ 108.808989][ T2974] ksys_unshare+0x4f9/0x920 [ 108.809019][ T2974] ? fput+0x1a4/0x230 [ 108.809043][ T2974] ? __cfi_ksys_unshare+0x10/0x10 [ 108.809068][ T2974] ? __kasan_check_write+0x18/0x20 [ 108.809089][ T2974] __x64_sys_unshare+0x3c/0x50 [ 108.809114][ T2974] x64_sys_call+0x2998/0x2ee0 [ 108.809134][ T2974] do_syscall_64+0x57/0xf0 [ 108.809154][ T2974] ? clear_bhb_loop+0x50/0xa0 [ 108.809181][ T2974] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.809207][ T2974] RIP: 0033:0x7f2d7739e159 [ 108.809225][ T2974] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 108.809244][ T2974] RSP: 002b:00007f2d781ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 108.809267][ T2974] RAX: ffffffffffffffda RBX: 00007f2d77625fa0 RCX: 00007f2d7739e159 [ 108.809284][ T2974] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 108.809298][ T2974] RBP: 00007f2d7743506b R08: 0000000000000000 R09: 0000000000000000 [ 108.809310][ T2974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 108.809323][ T2974] R13: 00007f2d77626038 R14: 00007f2d77625fa0 R15: 00007ffe3882dcd8 [ 108.809341][ T2974] [ 108.809352][ T2974] audit: cannot initialize netlink socket in namespace [ 108.820982][ T515] usb 2-1: device descriptor read/64, error -71 [ 109.291948][ T2985] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 109.301964][ T2985] udc dummy_udc.0: failed to start g1: -19 [ 109.308597][ T2985] UDC core: g1: couldn't find an available UDC or it's busy [ 109.328401][ T2988] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 109.337122][ T2988] udc dummy_udc.0: failed to start g1: -19 [ 109.343348][ T2988] UDC core: g1: couldn't find an available UDC or it's busy [ 109.365654][ T36] audit: type=1400 audit(1790849225.580:375): avc: denied { create } for pid=2989 comm="syz.5.992" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 109.386565][ T515] usb 2-1: device descriptor read/64, error -71 [ 109.440984][ T311] usb 4-1: new high-speed USB device number 33 using dummy_hcd [ 109.511116][ T515] usb usb2-port1: attempt power cycle [ 109.592083][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 109.602293][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 109.611557][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 109.622811][ T311] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 109.633887][ T311] usb 4-1: New USB device found, idVendor=046d, idProduct=0821, bcdDevice= 1.00 [ 109.643019][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.651103][ T311] usb 4-1: Product: syz [ 109.655287][ T311] usb 4-1: Manufacturer: syz [ 109.659878][ T311] usb 4-1: SerialNumber: syz [ 109.666207][ T311] usb 4-1: Found UVC 1.00 device syz (046d:0821) [ 109.672625][ T311] usb 4-1: No streaming interface found for terminal 2. [ 109.680962][ T10] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 109.821006][ T10] usb 6-1: device descriptor read/64, error -71 [ 109.861036][ T515] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 109.881966][ T515] usb 2-1: device descriptor read/8, error -71 [ 110.012251][ T515] usb 2-1: device descriptor read/8, error -71 [ 110.060987][ T10] usb 6-1: device descriptor read/64, error -71 [ 110.133362][ T3003] FAULT_INJECTION: forcing a failure. [ 110.133362][ T3003] name failslab, interval 1, probability 0, space 0, times 0 [ 110.146059][ T3003] CPU: 0 UID: 0 PID: 3003 Comm: syz.4.996 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 110.146096][ T3003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.146110][ T3003] Call Trace: [ 110.146119][ T3003] [ 110.146129][ T3003] __dump_stack+0x21/0x30 [ 110.146150][ T3003] dump_stack_lvl+0x140/0x1c0 [ 110.146165][ T3003] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.146182][ T3003] dump_stack+0x19/0x20 [ 110.146197][ T3003] should_fail_ex+0x3c2/0x510 [ 110.146210][ T3003] should_failslab+0xac/0x100 [ 110.146227][ T3003] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 110.146241][ T3003] ? sock_alloc_inode+0x48/0x150 [ 110.146255][ T3003] ? __cfi_selinux_socket_create+0x10/0x10 [ 110.146272][ T3003] sock_alloc_inode+0x48/0x150 [ 110.146284][ T3003] ? __cfi_sock_alloc_inode+0x10/0x10 [ 110.146297][ T3003] alloc_inode+0x7a/0x270 [ 110.146311][ T3003] ? bpf_lsm_socket_create+0xd/0x20 [ 110.146325][ T3003] new_inode_pseudo+0x19/0x40 [ 110.146341][ T3003] sock_create_lite+0x8f/0x500 [ 110.146356][ T3003] __netlink_kernel_create+0xcf/0x8a0 [ 110.146373][ T3003] ? __cfi___netlink_kernel_create+0x10/0x10 [ 110.146389][ T3003] ? __asan_memcpy+0x5a/0x80 [ 110.146400][ T3003] audit_net_init+0x108/0x240 [ 110.146413][ T3003] ? __cfi_audit_net_init+0x10/0x10 [ 110.146424][ T3003] ? __cfi_audit_receive+0x10/0x10 [ 110.146434][ T3003] ? __cfi_audit_multicast_bind+0x10/0x10 [ 110.146445][ T3003] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 110.146457][ T3003] ? __kmalloc_noprof+0x261/0x510 [ 110.146471][ T3003] ? ops_init+0x81/0x5d0 [ 110.146483][ T3003] ops_init+0x302/0x5d0 [ 110.146493][ T3003] ? __kasan_check_write+0x18/0x20 [ 110.146504][ T3003] ? rwsem_read_trylock+0x275/0x5a0 [ 110.146520][ T3003] setup_net+0x227/0x9b0 [ 110.146530][ T3003] ? copy_net_ns+0xa20/0xa20 [ 110.146541][ T3003] ? down_read_killable+0x7f/0x100 [ 110.146557][ T3003] ? __cfi_down_read_killable+0x10/0x10 [ 110.146572][ T3003] copy_net_ns+0x4fc/0xa20 [ 110.146583][ T3003] create_new_namespaces+0x390/0x6f0 [ 110.146602][ T3003] unshare_nsproxy_namespaces+0x124/0x180 [ 110.146619][ T3003] ksys_unshare+0x4f9/0x920 [ 110.146633][ T3003] ? fput+0x1a4/0x230 [ 110.146647][ T3003] ? __cfi_ksys_unshare+0x10/0x10 [ 110.146661][ T3003] ? __kasan_check_write+0x18/0x20 [ 110.146672][ T3003] __x64_sys_unshare+0x3c/0x50 [ 110.146686][ T3003] x64_sys_call+0x2998/0x2ee0 [ 110.146697][ T3003] do_syscall_64+0x57/0xf0 [ 110.146707][ T3003] ? clear_bhb_loop+0x50/0xa0 [ 110.146722][ T3003] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.146735][ T3003] RIP: 0033:0x7faf97f9e159 [ 110.146746][ T3003] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.146756][ T3003] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.146770][ T3003] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 110.146779][ T3003] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 110.146786][ T3003] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 110.146794][ T3003] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.146801][ T3003] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 110.146810][ T3003] [ 110.146834][ T3003] audit: cannot initialize netlink socket in namespace [ 110.611031][ T10] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 110.741045][ T10] usb 6-1: device descriptor read/64, error -71 [ 110.792500][ T3013] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 110.801714][ T3013] udc dummy_udc.0: failed to start g1: -19 [ 110.807823][ T3013] UDC core: g1: couldn't find an available UDC or it's busy [ 110.910842][ T3017] FAULT_INJECTION: forcing a failure. [ 110.910842][ T3017] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.923939][ T3017] CPU: 1 UID: 0 PID: 3017 Comm: syz.1.1002 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 110.923972][ T3017] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 110.923982][ T3017] Call Trace: [ 110.923986][ T3017] [ 110.923992][ T3017] __dump_stack+0x21/0x30 [ 110.924013][ T3017] dump_stack_lvl+0x140/0x1c0 [ 110.924028][ T3017] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.924057][ T3017] ? vfs_write+0xbcf/0xfd0 [ 110.924070][ T3017] dump_stack+0x19/0x20 [ 110.924084][ T3017] should_fail_ex+0x3c2/0x510 [ 110.924098][ T3017] should_fail+0xf/0x20 [ 110.924111][ T3017] should_fail_usercopy+0x1e/0x30 [ 110.924125][ T3017] _copy_from_user+0x20/0xa0 [ 110.924141][ T3017] __se_sys_io_uring_setup+0x170/0x2b0 [ 110.924157][ T3017] ? __kasan_check_write+0x18/0x20 [ 110.924169][ T3017] ? __x64_sys_io_uring_setup+0x80/0x80 [ 110.924186][ T3017] ? __kasan_check_read+0x15/0x20 [ 110.924197][ T3017] __x64_sys_io_uring_setup+0x5f/0x80 [ 110.924212][ T3017] x64_sys_call+0x22c0/0x2ee0 [ 110.924223][ T3017] do_syscall_64+0x57/0xf0 [ 110.924235][ T3017] ? clear_bhb_loop+0x50/0xa0 [ 110.924250][ T3017] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.924264][ T3017] RIP: 0033:0x7fc0dbf9e159 [ 110.924275][ T3017] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 110.924284][ T3017] RSP: 002b:00007fc0dce92ee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 110.924297][ T3017] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007fc0dbf9e159 [ 110.924307][ T3017] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 110.924315][ T3017] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 110.924322][ T3017] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 110.924330][ T3017] R13: 0000200000000b10 R14: 00007fc0dce92fd8 R15: 0000000000000000 [ 110.924339][ T3017] [ 110.980987][ T10] usb 6-1: device descriptor read/64, error -71 [ 111.231249][ T10] usb usb6-port1: attempt power cycle [ 111.425886][ T3033] fuse: Unknown parameter 'fd0x0000000000000003' [ 111.571041][ T10] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 111.592225][ T10] usb 6-1: device descriptor read/8, error -71 [ 111.731657][ T10] usb 6-1: device descriptor read/8, error -71 [ 111.971104][ T10] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 112.002004][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.132044][ T10] usb 6-1: device descriptor read/8, error -71 [ 112.160032][ T460] usb 4-1: USB disconnect, device number 33 [ 112.242042][ T10] usb usb6-port1: unable to enumerate USB device [ 112.533156][ T3069] veth1_to_bond: entered allmulticast mode [ 112.539106][ T3070] veth1_to_bond: entered promiscuous mode [ 112.545292][ T3068] veth1_to_bond: left promiscuous mode [ 112.550868][ T3068] veth1_to_bond: left allmulticast mode [ 112.807564][ T36] audit: type=1400 audit(1790849229.020:376): avc: denied { read } for pid=3073 comm="syz.3.1021" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 113.605255][ T3114] netlink: 'syz.5.1032': attribute type 4 has an invalid length. [ 113.627468][ T3114] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.1032'. [ 113.944453][ T3128] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 114.211924][ T3131] rust_binder: Error in use_page_slow: ESRCH [ 114.218608][ T3131] rust_binder: use_range failure ESRCH [ 114.226017][ T3131] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 114.231855][ T3131] rust_binder: Failure in copy_transaction_data: ESRCH [ 114.239953][ T3131] rust_binder: 3130:3131 transaction call to 3130:0 failed ESRCH, code 0 size 88-24 [ 114.304569][ T311] rust_binder: 3130: undelivered TRANSACTION_ERROR: 29201 [ 114.411048][ T460] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 114.505953][ T3155] rust_binder: Error in use_page_slow: ESRCH [ 114.505979][ T3155] rust_binder: use_range failure ESRCH [ 114.512394][ T3155] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 114.517873][ T3155] rust_binder: Failure in copy_transaction_data: ESRCH [ 114.525874][ T3155] rust_binder: 3154:3155 transaction call to 3154:0 failed ESRCH, code 0 size 88-24 [ 114.543034][ T10] rust_binder: 3154: undelivered TRANSACTION_ERROR: 29201 [ 114.558882][ T3159] FAULT_INJECTION: forcing a failure. [ 114.558882][ T3159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 114.570996][ T460] usb 2-1: Using ep0 maxpacket: 16 [ 114.571963][ T3159] CPU: 0 UID: 0 PID: 3159 Comm: syz.3.1048 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 114.571993][ T3159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 114.572006][ T3159] Call Trace: [ 114.572014][ T3159] [ 114.572023][ T3159] __dump_stack+0x21/0x30 [ 114.572054][ T3159] dump_stack_lvl+0x140/0x1c0 [ 114.572079][ T3159] ? __cfi_dump_stack_lvl+0x10/0x10 [ 114.572106][ T3159] ? check_stack_object+0x81/0x150 [ 114.572128][ T3159] dump_stack+0x19/0x20 [ 114.572152][ T3159] should_fail_ex+0x3c2/0x510 [ 114.572175][ T3159] should_fail+0xf/0x20 [ 114.572196][ T3159] should_fail_usercopy+0x1e/0x30 [ 114.572220][ T3159] _copy_from_user+0x20/0xa0 [ 114.572245][ T3159] memdup_user+0x81/0x170 [ 114.572263][ T3159] ? strndup_user+0x40/0xd0 [ 114.572281][ T3159] strndup_user+0x6c/0xd0 [ 114.572299][ T3159] __se_sys_mount+0x9f/0x480 [ 114.572320][ T3159] ? ksys_write+0x1f3/0x260 [ 114.572339][ T3159] ? __x64_sys_mount+0xf0/0xf0 [ 114.572359][ T3159] ? sysvec_call_function_single+0x4d/0x90 [ 114.572386][ T3159] __x64_sys_mount+0xc3/0xf0 [ 114.572407][ T3159] x64_sys_call+0x2021/0x2ee0 [ 114.572425][ T3159] do_syscall_64+0x57/0xf0 [ 114.572444][ T3159] ? clear_bhb_loop+0x50/0xa0 [ 114.572467][ T3159] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 114.572491][ T3159] RIP: 0033:0x7f4ae479e159 [ 114.572508][ T3159] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 114.572525][ T3159] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 114.572547][ T3159] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 114.572562][ T3159] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 114.572575][ T3159] RBP: 00007f4ae568f090 R08: 0000000000000000 R09: 0000000000000000 [ 114.572588][ T3159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.572601][ T3159] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 114.572618][ T3159] [ 114.782296][ T460] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 114.803150][ T460] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 114.823856][ T460] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 114.840967][ T460] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.849001][ T460] usb 2-1: Product: syz [ 114.853258][ T460] usb 2-1: Manufacturer: syz [ 114.858031][ T460] usb 2-1: SerialNumber: syz [ 114.900373][ T36] audit: type=1400 audit(1790849231.110:377): avc: denied { watch_reads } for pid=3165 comm="syz.4.1051" path="/" dev="tmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 115.085835][ T460] usb 2-1: 0:2 : does not exist [ 115.101216][ T460] usb 2-1: USB disconnect, device number 21 [ 115.773915][ T3196] random: crng reseeded on system resumption [ 116.422140][ T460] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 116.571019][ T460] usb 5-1: Using ep0 maxpacket: 16 [ 116.585524][ T460] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 116.597180][ T460] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 116.609597][ T460] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 116.619958][ T460] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 116.629831][ T460] usb 5-1: Product: syz [ 116.634444][ T460] usb 5-1: Manufacturer: syz [ 116.639107][ T460] usb 5-1: SerialNumber: syz [ 116.861319][ T460] usb 5-1: 0:2 : does not exist [ 116.873307][ T460] usb 5-1: USB disconnect, device number 3 [ 116.884042][ T3222] FAULT_INJECTION: forcing a failure. [ 116.884042][ T3222] name failslab, interval 1, probability 0, space 0, times 0 [ 116.897141][ T3222] CPU: 1 UID: 0 PID: 3222 Comm: syz.5.1072 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 116.897174][ T3222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 116.897187][ T3222] Call Trace: [ 116.897193][ T3222] [ 116.897201][ T3222] __dump_stack+0x21/0x30 [ 116.897233][ T3222] dump_stack_lvl+0x140/0x1c0 [ 116.897259][ T3222] ? __cfi_dump_stack_lvl+0x10/0x10 [ 116.897284][ T3222] ? __kasan_check_write+0x18/0x20 [ 116.897308][ T3222] ? proc_fail_nth_write+0x184/0x220 [ 116.897336][ T3222] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 116.897367][ T3222] dump_stack+0x19/0x20 [ 116.897394][ T3222] should_fail_ex+0x3c2/0x510 [ 116.897420][ T3222] should_failslab+0xac/0x100 [ 116.897446][ T3222] kmem_cache_alloc_noprof+0x42/0x410 [ 116.897469][ T3222] ? getname_flags+0xcc/0x6b0 [ 116.897493][ T3222] ? __cfi_vfs_write+0x10/0x10 [ 116.897515][ T3222] getname_flags+0xcc/0x6b0 [ 116.897539][ T3222] getname+0x1b/0x30 [ 116.897561][ T3222] do_sys_openat2+0xda/0x1d0 [ 116.897589][ T3222] ? fput+0x1a4/0x230 [ 116.897615][ T3222] ? do_sys_open+0x100/0x100 [ 116.897643][ T3222] ? ksys_write+0x1f3/0x260 [ 116.897665][ T3222] ? __cfi_ksys_write+0x10/0x10 [ 116.897689][ T3222] __x64_sys_openat+0x13a/0x170 [ 116.897718][ T3222] x64_sys_call+0xe69/0x2ee0 [ 116.897739][ T3222] do_syscall_64+0x57/0xf0 [ 116.897761][ T3222] ? clear_bhb_loop+0x50/0xa0 [ 116.897793][ T3222] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 116.897820][ T3222] RIP: 0033:0x7f2d7739e159 [ 116.897838][ T3222] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 116.897858][ T3222] RSP: 002b:00007f2d781ee028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.897880][ T3222] RAX: ffffffffffffffda RBX: 00007f2d77625fa0 RCX: 00007f2d7739e159 [ 116.897895][ T3222] RDX: 0000000000002c41 RSI: 0000200000000580 RDI: ffffffffffffff9c [ 116.897909][ T3222] RBP: 00007f2d781ee090 R08: 0000000000000000 R09: 0000000000000000 [ 116.897922][ T3222] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 116.897936][ T3222] R13: 00007f2d77626038 R14: 00007f2d77625fa0 R15: 00007ffe3882dcd8 [ 116.897954][ T3222] [ 117.711076][ T515] usb 4-1: new high-speed USB device number 34 using dummy_hcd [ 117.840984][ T515] usb 4-1: device descriptor read/64, error -71 [ 118.091032][ T515] usb 4-1: device descriptor read/64, error -71 [ 118.300980][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 118.330991][ T515] usb 4-1: new high-speed USB device number 35 using dummy_hcd [ 118.460984][ T515] usb 4-1: device descriptor read/64, error -71 [ 118.591794][ T36] audit: type=1400 audit(1790849234.810:378): avc: denied { read } for pid=3266 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 118.649566][ T36] audit: type=1400 audit(1790849234.860:379): avc: denied { bind } for pid=3266 comm="syz.4.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 118.702042][ T515] usb 4-1: device descriptor read/64, error -71 [ 118.811133][ T515] usb usb4-port1: attempt power cycle [ 119.160975][ T515] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 119.182194][ T515] usb 4-1: device descriptor read/8, error -71 [ 119.295593][ T36] audit: type=1400 audit(1790849235.510:380): avc: denied { execute } for pid=3288 comm="syz.4.1098" path="/103/blkio.bfq.io_service_bytes" dev="tmpfs" ino=583 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 119.326533][ T515] usb 4-1: device descriptor read/8, error -71 [ 119.381026][ T9] usb 6-1: device descriptor read/64, error -71 [ 119.580977][ T515] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 119.609362][ T3301] UDC core: g1: couldn't find an available UDC or it's busy [ 119.614624][ T515] usb 4-1: device descriptor read/8, error -71 [ 119.642722][ T9] usb 6-1: config 2 has an invalid interface number: 79 but max is 0 [ 119.654921][ T9] usb 6-1: config 2 has no interface number 0 [ 119.661818][ T9] usb 6-1: config 2 interface 79 has no altsetting 0 [ 119.671337][ T9] usb 6-1: New USB device found, idVendor=0659, idProduct=0020, bcdDevice=13.6c [ 119.680476][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 119.688791][ T9] usb 6-1: Product: ⠸區˖䓴ķ炮ꬋ걌ಌꬦ㌩苪蔄镉爽躞ě쒏䋶桔꯹紫솳ﳣ댏ླ萀創私뢶庰ჾ㍼埖흵綽嬟 [ 119.703883][ T9] usb 6-1: Manufacturer: М [ 119.708415][ T9] usb 6-1: SerialNumber: syz [ 119.752052][ T515] usb 4-1: device descriptor read/8, error -71 [ 119.810573][ T3308] kernel profiling enabled (shift: 4) [ 119.861730][ T515] usb usb4-port1: unable to enumerate USB device [ 119.928988][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.937562][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.946120][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.954717][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 119.963494][ T3285] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 119.972098][ T3285] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 120.130991][ T311] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 120.280970][ T311] usb 2-1: Using ep0 maxpacket: 8 [ 120.287310][ T311] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 120.300111][ T311] usb 2-1: New USB device found, idVendor=0e41, idProduct=4248, bcdDevice= 0.40 [ 120.309483][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 120.317654][ T311] usb 2-1: Product: syz [ 120.321997][ T311] usb 2-1: Manufacturer: syz [ 120.326678][ T311] usb 2-1: SerialNumber: syz [ 120.329335][ T3315] rust_binder: Error in use_page_slow: ESRCH [ 120.331583][ T3315] rust_binder: use_range failure ESRCH [ 120.337853][ T3315] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 120.343410][ T3315] rust_binder: Failure in copy_transaction_data: ESRCH [ 120.351357][ T3315] rust_binder: 3314:3315 transaction call to 3314:0 failed ESRCH, code 0 size 88-24 [ 120.369012][ T515] rust_binder: 3314: undelivered TRANSACTION_ERROR: 29201 [ 120.548514][ T311] usb 2-1: unit 4 not found! [ 120.559865][ T311] usb 2-1: unit 2 not found! [ 120.580352][ T311] usb 2-1: USB disconnect, device number 22 [ 120.583164][ T3325] UDC core: g1: couldn't find an available UDC or it's busy [ 120.688525][ T3329] futex_wake_op: syz.3.1113 tries to shift op by 144; fix this program [ 120.697032][ T3329] futex_wake_op: syz.3.1113 tries to shift op by 144; fix this program [ 120.941001][ T515] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 121.112050][ T515] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.140960][ T515] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid maxpacket 1983, setting to 1024 [ 121.152322][ T515] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 121.167222][ T515] usb 4-1: config 0 interface 0 has no altsetting 0 [ 121.175444][ T515] usb 4-1: New USB device found, idVendor=2006, idProduct=0118, bcdDevice= 0.00 [ 121.187189][ T515] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.200247][ T515] usb 4-1: config 0 descriptor?? [ 121.205899][ T3329] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 121.418776][ T36] audit: type=1400 audit(1790849237.630:381): avc: denied { write } for pid=3326 comm="syz.3.1113" path="socket:[104061]" dev="sockfs" ino=104061 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 121.518053][ T3345] rust_binder: Error in use_page_slow: ESRCH [ 121.518079][ T3345] rust_binder: use_range failure ESRCH [ 121.524143][ T3345] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 121.530005][ T3345] rust_binder: Failure in copy_transaction_data: ESRCH [ 121.538403][ T3345] rust_binder: 3344:3345 transaction call to 3344:0 failed ESRCH, code 0 size 88-24 [ 121.555863][ T460] rust_binder: 3344: undelivered TRANSACTION_ERROR: 29201 [ 121.620347][ T515] hkems 0003:2006:0118.0008: report_id 7630445 is invalid [ 121.629780][ T515] hkems 0003:2006:0118.0008: item 0 4 1 8 parsing failed [ 121.637125][ T515] hkems 0003:2006:0118.0008: parse failed [ 121.643262][ T515] hkems 0003:2006:0118.0008: probe with driver hkems failed with error -22 [ 121.648359][ T3351] UDC core: g1: couldn't find an available UDC or it's busy [ 121.820982][ T625] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 121.831582][ T460] usb 4-1: USB disconnect, device number 38 [ 121.927778][ T9] usb 6-1: USB disconnect, device number 7 [ 121.950996][ T625] usb 2-1: device descriptor read/64, error -71 [ 122.190996][ T625] usb 2-1: device descriptor read/64, error -71 [ 122.221029][ T9] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 122.382498][ T9] usb 6-1: not running at top speed; connect to a high speed hub [ 122.394613][ T9] usb 6-1: config 5 has an invalid interface number: 114 but max is 2 [ 122.403071][ T9] usb 6-1: config 5 has an invalid interface descriptor of length 5, skipping [ 122.420970][ T9] usb 6-1: config 5 has 1 interface, different from the descriptor's value: 3 [ 122.431007][ T625] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 122.440012][ T9] usb 6-1: config 5 has no interface number 0 [ 122.452478][ T9] usb 6-1: Dual-Role OTG device on HNP port [ 122.461174][ T9] usb 6-1: New USB device found, idVendor=07d1, idProduct=3e02, bcdDevice=f1.49 [ 122.475736][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.489214][ T9] usb 6-1: Product: syz [ 122.500970][ T9] usb 6-1: Manufacturer: syz [ 122.505609][ T9] usb 6-1: SerialNumber: syz [ 122.580985][ T625] usb 2-1: device descriptor read/64, error -71 [ 122.740013][ T9] usb 6-1: USB disconnect, device number 8 [ 122.831087][ T625] usb 2-1: device descriptor read/64, error -71 [ 122.941113][ T625] usb usb2-port1: attempt power cycle [ 123.292320][ T3374] rust_binder: Error in use_page_slow: ESRCH [ 123.292345][ T3374] rust_binder: use_range failure ESRCH [ 123.297708][ T625] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 123.303184][ T3374] rust_binder: Failed to allocate buffer. len:128, is_oneway:false [ 123.308600][ T3376] UDC core: g1: couldn't find an available UDC or it's busy [ 123.311771][ T3374] rust_binder: Failure in copy_transaction_data: ESRCH [ 123.327736][ T3374] rust_binder: 3373:3374 transaction call to 3373:0 failed ESRCH, code 0 size 88-24 [ 123.340900][ T3378] FAULT_INJECTION: forcing a failure. [ 123.340900][ T3378] name failslab, interval 1, probability 0, space 0, times 0 [ 123.345630][ T625] usb 2-1: device descriptor read/8, error -71 [ 123.357278][ T3378] CPU: 1 UID: 0 PID: 3378 Comm: syz.4.1131 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 123.357317][ T3378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 123.357330][ T3378] Call Trace: [ 123.357337][ T3378] [ 123.357345][ T3378] __dump_stack+0x21/0x30 [ 123.357375][ T3378] dump_stack_lvl+0x140/0x1c0 [ 123.357400][ T3378] ? __cfi_dump_stack_lvl+0x10/0x10 [ 123.357424][ T3378] ? selinux_file_permission+0x318/0xb60 [ 123.357448][ T3378] dump_stack+0x19/0x20 [ 123.357472][ T3378] should_fail_ex+0x3c2/0x510 [ 123.357495][ T3378] should_failslab+0xac/0x100 [ 123.357519][ T3378] __kmalloc_cache_noprof+0x41/0x470 [ 123.357540][ T3378] ? io_ring_ctx_alloc+0x61/0x1dc0 [ 123.357561][ T3378] io_ring_ctx_alloc+0x61/0x1dc0 [ 123.357580][ T3378] ? __cfi_vfs_write+0x10/0x10 [ 123.357601][ T3378] io_uring_create+0x2e0/0x13f0 [ 123.357619][ T3378] ? __kasan_check_write+0x18/0x20 [ 123.357640][ T3378] __se_sys_io_uring_setup+0x2a4/0x2b0 [ 123.357667][ T3378] ? __kasan_check_write+0x18/0x20 [ 123.357687][ T3378] ? __x64_sys_io_uring_setup+0x80/0x80 [ 123.357715][ T3378] ? __kasan_check_read+0x15/0x20 [ 123.357735][ T3378] __x64_sys_io_uring_setup+0x5f/0x80 [ 123.357761][ T3378] x64_sys_call+0x22c0/0x2ee0 [ 123.357779][ T3378] do_syscall_64+0x57/0xf0 [ 123.357799][ T3378] ? clear_bhb_loop+0x50/0xa0 [ 123.357824][ T3378] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 123.357848][ T3378] RIP: 0033:0x7faf97f9e159 [ 123.357866][ T3378] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 123.357882][ T3378] RSP: 002b:00007faf98efcee8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 123.357904][ T3378] RAX: ffffffffffffffda RBX: 0000200000000a88 RCX: 00007faf97f9e159 [ 123.357920][ T3378] RDX: 0000200000000b08 RSI: 0000200000000a88 RDI: 00000000000003c9 [ 123.357933][ T3378] RBP: 0000200000000a80 R08: 0000000000000000 R09: 0000000000000000 [ 123.357946][ T3378] R10: 0000200000000b10 R11: 0000000000000206 R12: 0000200000000b08 [ 123.357961][ T3378] R13: 0000200000000b10 R14: 00007faf98efcfd8 R15: 0000000000000000 [ 123.357977][ T3378] [ 123.409665][ T311] rust_binder: 3373: undelivered TRANSACTION_ERROR: 29201 [ 123.429758][ T3380] rust_binder: Write failure EINVAL in pid:336 [ 123.602097][ T625] usb 2-1: device descriptor read/8, error -71 [ 123.850991][ T625] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 123.872061][ T625] usb 2-1: device descriptor read/8, error -71 [ 124.002042][ T625] usb 2-1: device descriptor read/8, error -71 [ 124.020989][ T10] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 124.111094][ T625] usb usb2-port1: unable to enumerate USB device [ 124.170973][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 124.181223][ T10] usb 4-1: unable to get BOS descriptor or descriptor too short [ 124.189712][ T10] usb 4-1: config 1 has an invalid descriptor of length 102, skipping remainder of the config [ 124.200149][ T10] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 124.211084][ T10] usb 4-1: New USB device found, idVendor=200c, idProduct=1018, bcdDevice= 0.40 [ 124.220252][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 124.228831][ T10] usb 4-1: Product: syz [ 124.236390][ T10] usb 4-1: Manufacturer: syz [ 124.241395][ T10] usb 4-1: SerialNumber: syz [ 124.453618][ T10] usb 4-1: 3:0: cannot get min/max values for control 2 (id 3) [ 124.462390][ T10] usb 4-1: 3:0: cannot get min/max values for control 3 (id 3) [ 124.471165][ T10] usb 4-1: 3:0: cannot get min/max values for control 4 (id 3) [ 124.479924][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 124.490443][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 124.499336][ T10] usb 4-1: 3:0: cannot get min/max values for control 8 (id 3) [ 124.507874][ T10] usb 4-1: 3:0: failed to get current value for ch 1 (-71) [ 124.515714][ T10] usb 4-1: 3:0: failed to get current value for ch 2 (-71) [ 124.531145][ T10] usb 4-1: 3:0: failed to get current value for ch 0 (-71) [ 124.539403][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 124.547836][ T10] usb 4-1: 3:0: cannot get min/max values for control 12 (id 3) [ 124.551013][ T460] usb 6-1: new full-speed USB device number 9 using dummy_hcd [ 124.559904][ T10] usb 4-1: USB disconnect, device number 39 [ 124.692396][ T3425] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 124.701205][ T3425] udc dummy_udc.0: failed to start g1: -19 [ 124.707583][ T3425] UDC core: g1: couldn't find an available UDC or it's busy [ 124.712078][ T460] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 124.724194][ T460] usb 6-1: config 179 has no interface number 0 [ 124.730474][ T460] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 124.742735][ T460] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid maxpacket 1025, setting to 64 [ 124.755779][ T460] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 124.768380][ T460] usb 6-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 45824, setting to 64 [ 124.779979][ T36] audit: type=1400 audit(1790849241.000:382): avc: denied { map } for pid=3428 comm="syz.1.1149" path="socket:[104813]" dev="sockfs" ino=104813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.780117][ T460] usb 6-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 124.826785][ T460] usb 6-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 124.833434][ T36] audit: type=1400 audit(1790849241.000:383): avc: denied { read } for pid=3428 comm="syz.1.1149" path="socket:[104813]" dev="sockfs" ino=104813 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.850664][ T36] audit: type=1400 audit(1790849241.040:384): avc: denied { ioctl } for pid=3428 comm="syz.1.1149" path="socket:[104813]" dev="sockfs" ino=104813 ioctlcmd=0x5872 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 124.866748][ T460] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.914858][ T3414] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 124.922135][ T3414] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 125.080987][ T311] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 125.148255][ T460] usb 6-1: USB disconnect, device number 9 [ 125.148298][ C1] xpad 6-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 125.162432][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 125.250989][ T311] usb 2-1: Using ep0 maxpacket: 16 [ 125.257682][ T311] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 125.268220][ T311] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 125.279107][ T311] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 125.288568][ T311] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 125.296918][ T311] usb 2-1: Product: syz [ 125.301425][ T311] usb 2-1: Manufacturer: syz [ 125.306093][ T311] usb 2-1: SerialNumber: syz [ 125.534995][ T311] usb 2-1: 0:2 : does not exist [ 125.539918][ T311] usb 2-1: unit 6 not found! [ 125.548857][ T311] usb 2-1: USB disconnect, device number 27 [ 125.715114][ T3442] rust_binder: Write failure EINVAL in pid:151 [ 125.932224][ T3456] FAULT_INJECTION: forcing a failure. [ 125.932224][ T3456] name failslab, interval 1, probability 0, space 0, times 0 [ 125.951248][ T3456] CPU: 1 UID: 0 PID: 3456 Comm: syz.4.1159 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 125.951283][ T3456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 125.951298][ T3456] Call Trace: [ 125.951306][ T3456] [ 125.951314][ T3456] __dump_stack+0x21/0x30 [ 125.951347][ T3456] dump_stack_lvl+0x140/0x1c0 [ 125.951369][ T3456] ? __cfi_dump_stack_lvl+0x10/0x10 [ 125.951393][ T3456] dump_stack+0x19/0x20 [ 125.951416][ T3456] should_fail_ex+0x3c2/0x510 [ 125.951441][ T3456] should_failslab+0xac/0x100 [ 125.951466][ T3456] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 125.951492][ T3456] ? sock_alloc_inode+0x48/0x150 [ 125.951534][ T3456] ? __cfi_selinux_socket_create+0x10/0x10 [ 125.951564][ T3456] sock_alloc_inode+0x48/0x150 [ 125.951587][ T3456] ? __cfi_sock_alloc_inode+0x10/0x10 [ 125.951610][ T3456] alloc_inode+0x7a/0x270 [ 125.951636][ T3456] ? bpf_lsm_socket_create+0xd/0x20 [ 125.951659][ T3456] new_inode_pseudo+0x19/0x40 [ 125.951684][ T3456] sock_create_lite+0x8f/0x500 [ 125.951709][ T3456] __netlink_kernel_create+0xcf/0x8a0 [ 125.951737][ T3456] ? __cfi___netlink_kernel_create+0x10/0x10 [ 125.951765][ T3456] ? __asan_memcpy+0x5a/0x80 [ 125.951786][ T3456] audit_net_init+0x108/0x240 [ 125.951807][ T3456] ? __cfi_audit_net_init+0x10/0x10 [ 125.951827][ T3456] ? __cfi_audit_receive+0x10/0x10 [ 125.951846][ T3456] ? __cfi_audit_multicast_bind+0x10/0x10 [ 125.951864][ T3456] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 125.951886][ T3456] ? __kmalloc_noprof+0x261/0x510 [ 125.951908][ T3456] ? ops_init+0x81/0x5d0 [ 125.951930][ T3456] ops_init+0x302/0x5d0 [ 125.951950][ T3456] ? __kasan_check_write+0x18/0x20 [ 125.951971][ T3456] ? rwsem_read_trylock+0x275/0x5a0 [ 125.952019][ T3456] setup_net+0x227/0x9b0 [ 125.952039][ T3456] ? copy_net_ns+0xa20/0xa20 [ 125.952060][ T3456] ? down_read_killable+0x7f/0x100 [ 125.952090][ T3456] ? __cfi_down_read_killable+0x10/0x10 [ 125.952116][ T3456] copy_net_ns+0x4fc/0xa20 [ 125.952135][ T3456] create_new_namespaces+0x390/0x6f0 [ 125.952162][ T3456] unshare_nsproxy_namespaces+0x124/0x180 [ 125.952189][ T3456] ksys_unshare+0x4f9/0x920 [ 125.952213][ T3456] ? fput+0x1a4/0x230 [ 125.952237][ T3456] ? __cfi_ksys_unshare+0x10/0x10 [ 125.952263][ T3456] ? __kasan_check_write+0x18/0x20 [ 125.952285][ T3456] __x64_sys_unshare+0x3c/0x50 [ 125.952309][ T3456] x64_sys_call+0x2998/0x2ee0 [ 125.952322][ T3456] do_syscall_64+0x57/0xf0 [ 125.952334][ T3456] ? clear_bhb_loop+0x50/0xa0 [ 125.952348][ T3456] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 125.952361][ T3456] RIP: 0033:0x7faf97f9e159 [ 125.952373][ T3456] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 125.952382][ T3456] RSP: 002b:00007faf98efd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 125.952396][ T3456] RAX: ffffffffffffffda RBX: 00007faf98225fa0 RCX: 00007faf97f9e159 [ 125.952405][ T3456] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 125.952413][ T3456] RBP: 00007faf9803506b R08: 0000000000000000 R09: 0000000000000000 [ 125.952420][ T3456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.952427][ T3456] R13: 00007faf98226038 R14: 00007faf98225fa0 R15: 00007ffcd35a2ed8 [ 125.952437][ T3456] [ 125.952460][ T3456] audit: cannot initialize netlink socket in namespace [ 126.285063][ T311] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 126.440994][ T311] usb 6-1: Using ep0 maxpacket: 16 [ 126.447340][ T311] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.462614][ T311] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.473012][ T311] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 126.482127][ T311] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.491462][ T311] usb 6-1: Product: syz [ 126.497666][ T311] usb 6-1: Manufacturer: syz [ 126.502460][ T311] usb 6-1: SerialNumber: syz [ 126.669870][ T36] audit: type=1400 audit(1790849242.880:385): avc: denied { lock } for pid=3488 comm="syz.1.1170" path="/dev/loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 126.711582][ T311] usb 6-1: 0:2 : does not exist [ 126.719507][ T311] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 126.745963][ T311] usb 6-1: USB disconnect, device number 10 [ 127.772440][ T3535] can0: slcan on ttynull. [ 128.234784][ T45] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 128.402069][ T45] usb 5-1: Using ep0 maxpacket: 32 [ 128.415203][ T45] usb 5-1: config 0 has no interfaces? [ 128.426940][ T45] usb 5-1: New USB device found, idVendor=0cf3, idProduct=817a, bcdDevice=eb.19 [ 128.448831][ T45] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 128.460256][ T45] usb 5-1: Product: syz [ 128.468916][ T45] usb 5-1: Manufacturer: syz [ 128.490988][ T45] usb 5-1: SerialNumber: syz [ 128.497156][ T45] usb 5-1: config 0 descriptor?? [ 128.859866][ T3586] rust_binder: Write failure EINVAL in pid:731 [ 129.221958][ T3603] FAULT_INJECTION: forcing a failure. [ 129.221958][ T3603] name failslab, interval 1, probability 0, space 0, times 0 [ 129.254703][ T3603] CPU: 1 UID: 0 PID: 3603 Comm: syz.3.1202 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 129.254744][ T3603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 129.254759][ T3603] Call Trace: [ 129.254768][ T3603] [ 129.254777][ T3603] __dump_stack+0x21/0x30 [ 129.254814][ T3603] dump_stack_lvl+0x140/0x1c0 [ 129.254844][ T3603] ? __cfi_dump_stack_lvl+0x10/0x10 [ 129.254875][ T3603] dump_stack+0x19/0x20 [ 129.254903][ T3603] should_fail_ex+0x3c2/0x510 [ 129.254929][ T3603] should_failslab+0xac/0x100 [ 129.254957][ T3603] kmem_cache_alloc_noprof+0x42/0x410 [ 129.254980][ T3603] ? security_inode_alloc+0x51/0x230 [ 129.255008][ T3603] ? __cfi_make_kgid+0x10/0x10 [ 129.255035][ T3603] security_inode_alloc+0x51/0x230 [ 129.255062][ T3603] inode_init_always_gfp+0x756/0x9e0 [ 129.255091][ T3603] ? __cfi_sock_alloc_inode+0x10/0x10 [ 129.255115][ T3603] alloc_inode+0xc5/0x270 [ 129.255142][ T3603] ? bpf_lsm_socket_create+0xd/0x20 [ 129.255165][ T3603] new_inode_pseudo+0x19/0x40 [ 129.255191][ T3603] sock_create_lite+0x8f/0x500 [ 129.255223][ T3603] __netlink_kernel_create+0xcf/0x8a0 [ 129.255254][ T3603] ? __cfi___netlink_kernel_create+0x10/0x10 [ 129.255284][ T3603] ? __asan_memcpy+0x5a/0x80 [ 129.255306][ T3603] audit_net_init+0x108/0x240 [ 129.255329][ T3603] ? __cfi_audit_net_init+0x10/0x10 [ 129.255350][ T3603] ? __cfi_audit_receive+0x10/0x10 [ 129.255373][ T3603] ? __cfi_audit_multicast_bind+0x10/0x10 [ 129.255395][ T3603] ? __cfi_audit_multicast_unbind+0x10/0x10 [ 129.255419][ T3603] ? __kmalloc_noprof+0x261/0x510 [ 129.255442][ T3603] ? ops_init+0x81/0x5d0 [ 129.255466][ T3603] ops_init+0x302/0x5d0 [ 129.255488][ T3603] ? __kasan_check_write+0x18/0x20 [ 129.255509][ T3603] ? rwsem_read_trylock+0x275/0x5a0 [ 129.255540][ T3603] setup_net+0x227/0x9b0 [ 129.255562][ T3603] ? copy_net_ns+0xa20/0xa20 [ 129.255582][ T3603] ? down_read_killable+0x7f/0x100 [ 129.255612][ T3603] ? __cfi_down_read_killable+0x10/0x10 [ 129.255643][ T3603] copy_net_ns+0x4fc/0xa20 [ 129.255664][ T3603] create_new_namespaces+0x390/0x6f0 [ 129.255698][ T3603] unshare_nsproxy_namespaces+0x124/0x180 [ 129.255729][ T3603] ksys_unshare+0x4f9/0x920 [ 129.255757][ T3603] ? fput+0x1a4/0x230 [ 129.255786][ T3603] ? __cfi_ksys_unshare+0x10/0x10 [ 129.255814][ T3603] ? __kasan_check_write+0x18/0x20 [ 129.255837][ T3603] __x64_sys_unshare+0x3c/0x50 [ 129.255865][ T3603] x64_sys_call+0x2998/0x2ee0 [ 129.255887][ T3603] do_syscall_64+0x57/0xf0 [ 129.255908][ T3603] ? clear_bhb_loop+0x50/0xa0 [ 129.255942][ T3603] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 129.255973][ T3603] RIP: 0033:0x7f4ae479e159 [ 129.255994][ T3603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 129.256014][ T3603] RSP: 002b:00007f4ae568f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 129.256039][ T3603] RAX: ffffffffffffffda RBX: 00007f4ae4a25fa0 RCX: 00007f4ae479e159 [ 129.256057][ T3603] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060040000 [ 129.256073][ T3603] RBP: 00007f4ae483506b R08: 0000000000000000 R09: 0000000000000000 [ 129.256089][ T3603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 129.256102][ T3603] R13: 00007f4ae4a26038 R14: 00007f4ae4a25fa0 R15: 00007fff955001f8 [ 129.256122][ T3603] [ 129.256211][ T3603] audit: cannot initialize netlink socket in namespace [ 129.858553][ T36] audit: type=1400 audit(1790849246.070:386): avc: denied { accept } for pid=3628 comm="syz.1.1212" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 129.908032][ T36] audit: type=1400 audit(1790849246.120:387): avc: denied { mounton } for pid=3630 comm="syz.1.1213" path="/334/file0" dev="tmpfs" ino=1866 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 130.797208][ T45] usb 5-1: USB disconnect, device number 4 [ 130.839830][ T3648] raw_sendmsg: syz.3.1219 forgot to set AF_INET. Fix it! [ 130.870875][ T3602] can0 (unregistered): slcan off ttynull. [ 130.883629][ T36] audit: type=1400 audit(1790849247.090:388): avc: denied { append } for pid=3647 comm="syz.3.1219" name="snapshot" dev="devtmpfs" ino=21 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 130.931268][ T36] audit: type=1400 audit(1790849247.090:389): avc: denied { listen } for pid=3647 comm="syz.3.1219" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 131.032152][ T3673] rust_binder: Write failure EINVAL in pid:891 [ 131.230968][ T311] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 131.401009][ T311] usb 4-1: Using ep0 maxpacket: 16 [ 131.407374][ T311] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 131.417991][ T311] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 131.431798][ T311] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 131.444757][ T311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.452812][ T311] usb 4-1: Product: syz [ 131.457132][ T311] usb 4-1: Manufacturer: syz [ 131.462020][ T311] usb 4-1: SerialNumber: syz [ 131.671679][ T311] usb 4-1: 0:2 : does not exist [ 131.684915][ T311] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 131.697307][ T311] usb 4-1: USB disconnect, device number 40 [ 131.712735][ T626] udevd[626]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 131.757204][ T36] audit: type=1326 audit(1790849247.970:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=3743 comm="syz.1.1242" exe="/root/ci2-android-6-12-rust/syz-executor" sig=9 arch=c000003e syscall=157 compat=0 ip=0x7fc0dbf9e159 code=0x0 [ 131.785022][ T3747] ------------[ cut here ]------------ [ 131.786664][ T36] audit: type=1400 audit(1790849247.970:391): avc: denied { append } for pid=3743 comm="syz.1.1242" name="uhid" dev="devtmpfs" ino=199 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.790511][ T3747] skb_assert_len [ 131.790719][ T3747] WARNING: CPU: 0 PID: 3747 at include/linux/skbuff.h:2720 __dev_queue_xmit+0x1e1d/0x3780 [ 131.813860][ T45] hid-sensor-hub 0003:1234:5678.0009: hidraw0: USB HID v0.01 Device [syz0] on syz0 [ 131.817119][ T3747] Modules linked in: [ 131.817134][ T3747] CPU: 0 UID: 0 PID: 3747 Comm: syz.1.1242 Not tainted syzkaller #0 84c4865013cb051b9e1c8192e6ebfa0ba91d02b9 [ 131.817159][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 131.817171][ T3747] RIP: 0010:__dev_queue_xmit+0x1e1d/0x3780 [ 131.828747][ T36] audit: type=1400 audit(1790849248.000:392): avc: denied { ioctl } for pid=3743 comm="syz.1.1242" path="/dev/uhid" dev="devtmpfs" ino=199 ioctlcmd=0x5401 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 131.836848][ T3747] Code: 00 00 00 fc ff df e9 ea e6 ff ff e8 9d d1 04 fd c6 05 25 c5 62 03 01 48 c7 c7 e0 2c 8b 86 48 c7 c6 47 ce 19 87 e8 03 a3 81 fc <0f> 0b 80 3d 0a c5 62 03 01 0f 84 af e3 ff ff e8 6f d1 04 fd c6 05 [ 131.913245][ T3747] RSP: 0018:ffffc9000124f500 EFLAGS: 00010246 [ 131.919341][ T3747] RAX: 05569d591c6dc100 RBX: ffff888116f11930 RCX: ffff888139f3cc00 [ 131.927368][ T3747] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 131.935417][ T3747] RBP: ffffc9000124f7e0 R08: ffff8881f6e294d3 R09: 1ffff1103edc529a [ 131.943431][ T3747] R10: dffffc0000000000 R11: ffffed103edc529b R12: 1ffff11022de231a [ 131.951458][ T3747] R13: ffff888116f118c0 R14: 0000000000000000 R15: dffffc0000000000 [ 131.959445][ T3747] FS: 00007fc0dce516c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 131.968516][ T3747] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 131.975229][ T3747] CR2: 00007fc0dcdebf60 CR3: 000000011ce18000 CR4: 00000000003526b0 [ 131.983505][ T3747] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 131.991878][ T3747] DR3: 000000008000000f DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 131.999867][ T3747] Call Trace: [ 132.003195][ T3747] [ 132.006133][ T3747] ? __kasan_check_write+0x18/0x20 [ 132.011515][ T3747] ? alloc_skb_with_frags+0x80b/0x8b0 [ 132.016918][ T3747] ? __cfi___dev_queue_xmit+0x10/0x10 [ 132.022433][ T3747] ? __kasan_check_write+0x18/0x20 [ 132.027572][ T3747] ? skb_set_owner_w+0x280/0x3d0 [ 132.032671][ T3747] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 132.038075][ T3747] ? packet_parse_headers+0x7f0/0xb10 [ 132.043582][ T3747] ? packet_parse_headers+0x883/0xb10 [ 132.048972][ T3747] ? __cfi_sock_alloc_send_pskb+0x10/0x10 [ 132.054758][ T3747] ? skb_setup_tx_timestamp+0x210/0x210 [ 132.060317][ T3747] packet_xmit+0x76/0x360 [ 132.064698][ T3747] ? is_vmalloc_addr+0x11/0x40 [ 132.069512][ T3747] packet_sendmsg+0x228b/0x56b0 [ 132.074432][ T3747] ? avc_has_perm_noaudit+0x26b/0x360 [ 132.079828][ T3747] ? __cfi_packet_sendmsg+0x10/0x10 [ 132.085088][ T3747] ? avc_has_perm+0x155/0x240 [ 132.089792][ T3747] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 132.095166][ T3747] ? security_socket_sendmsg+0x3d/0x100 [ 132.100729][ T3747] ? __cfi_packet_sendmsg+0x10/0x10 [ 132.105985][ T3747] sock_write_iter+0x442/0x490 [ 132.110768][ T3747] ? __cfi_sock_write_iter+0x10/0x10 [ 132.116106][ T3747] ? __cfi_futex_wait+0x10/0x10 [ 132.121018][ T3747] ? selinux_socket_setsockopt+0x324/0x3d0 [ 132.126854][ T3747] vfs_write+0x762/0xfd0 [ 132.131157][ T3747] ? __cfi_vfs_write+0x10/0x10 [ 132.135944][ T3747] ksys_write+0x145/0x260 [ 132.140295][ T3747] ? xfd_validate_state+0x68/0x140 [ 132.145476][ T3747] ? __cfi_ksys_write+0x10/0x10 [ 132.150345][ T3747] ? __kasan_check_write+0x18/0x20 [ 132.155510][ T3747] ? fpregs_restore_userregs+0x11c/0x260 [ 132.161181][ T3747] __x64_sys_write+0x7f/0x90 [ 132.165791][ T3747] x64_sys_call+0x271c/0x2ee0 [ 132.170479][ T3747] do_syscall_64+0x57/0xf0 [ 132.174949][ T3747] ? clear_bhb_loop+0x50/0xa0 [ 132.179645][ T3747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 132.185601][ T3747] RIP: 0033:0x7fc0dbf9e159 [ 132.190024][ T3747] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 132.209697][ T3747] RSP: 002b:00007fc0dce51028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.218149][ T3747] RAX: ffffffffffffffda RBX: 00007fc0dc226180 RCX: 00007fc0dbf9e159 [ 132.226269][ T3747] RDX: 0000000000000001 RSI: 0000200000000000 RDI: 0000000000000046 [ 132.234321][ T3747] RBP: 00007fc0dc03506b R08: 0000000000000000 R09: 0000000000000000 [ 132.242341][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.250327][ T3747] R13: 00007fc0dc226218 R14: 00007fc0dc226180 R15: 00007ffce2839e18 [ 132.258355][ T3747] [ 132.261412][ T3747] ---[ end trace 0000000000000000 ]--- [ 132.267031][ T3747] skb len=0 headroom=128 headlen=0 tailroom=256 [ 132.267031][ T3747] mac=(128,0) mac_len=0 net=(128,-1) trans=-1 [ 132.267031][ T3747] shinfo(txflags=64 nr_frags=0 gso(size=0 type=0 segs=0)) [ 132.267031][ T3747] csum(0x0 start=0 offset=0 ip_summed=0 complete_sw=0 valid=0 level=0) [ 132.267031][ T3747] hash(0x0 sw=0 l4=0) proto=0x0003 pkttype=0 iif=0 [ 132.267031][ T3747] priority=0x0 mark=0x0 alloc_cpu=0 vlan_all=0x0 [ 132.267031][ T3747] encapsulation=0 inner(proto=0x0000, mac=0, net=0, trans=0) [ 132.314073][ T3747] dev name=tunl0 feat=0x00000006401d4869 [ 132.319759][ T3747] sk family=17 type=2 proto=0