last executing test programs: 2.043138111s ago: executing program 0 (id=1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write(0xffffffffffffffff, &(0x7f0000000000), 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x202, 0x40) write(r1, &(0x7f0000000000)='27', 0x2) socket$inet6_udp(0xa, 0x2, 0x0) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000180)=ANY=[], &(0x7f0000000400)={0xa, &(0x7f00000000c0)={0xa, 0x6, 0x250, 0x2, 0x4, 0x9, 0x8, 0x7f}, 0x0, 0x0}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000300)={0x0, 0x1, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0xffe00000, 0x200000, &(0x7f0000200000/0x200000)=nil}) r4 = syz_usb_connect$hid(0x3, 0x97, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc626, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xa0, 0x2, "", [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0xcc28163f40625b84, 0x0, {0x9, 0x21, 0x0, 0x40, 0x1, {0x22, 0x18}}, {{{0x9, 0x5, 0x81, 0x3, 0x440, 0x1, 0x17, 0x87}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="00221800"], 0x0}, 0x0) 1.969400713s ago: executing program 2 (id=3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$packet(0x11, 0xa, 0x300) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) r4 = syz_usb_connect$hid(0x5, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1e7d, 0x3264, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x90, 0x48, "", [{{0x9, 0x4, 0x0, 0xeb, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x8006, 0x41, 0x1, {0x22, 0x14}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x10, 0x24}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f0000000040)={0x24, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="002218"], 0x0}, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000080)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000280)={0x9}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_ublk_setup_io_uring(0x3ff5, &(0x7f0000000040)={0x0, 0xf99e, 0x800, 0x2, 0x1d3}, 0x0, 0x0, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000100)={[{0x8, 0xc000, 0x4, 0xff, 0x0, 0x8, 0x3, 0xa, 0x1, 0x6, 0x12, 0x5, 0x42}, {0x804, 0x2, 0x1, 0x45, 0x3, 0x0, 0x4, 0xff, 0xfc, 0x4, 0x6, 0x6f, 0x20c}, {0xffffffff, 0x3, 0x38, 0x3, 0x84, 0x3, 0x3, 0x50, 0xc, 0x4, 0x6f, 0x8, 0x9}], 0x2}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x2, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r5, 0x4090ae82, &(0x7f00000003c0)={[0x60000000000, 0xd4, 0x8, 0x61, 0x200002000001, 0x1, 0x2004c8, 0x0, 0x0, 0x36ae, 0x5, 0x6, 0x3, 0x400000000, 0x6, 0xf73c], 0x80a0000}) ioctl$KVM_RUN(r5, 0xae80, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0xa6426000) r6 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./cgroup.cpu/memory.force_empty\x00', 0x2, 0x0) pwritev2(r6, &(0x7f0000000000)=[{&(0x7f0000000080)="a760", 0x2}], 0x1, 0x0, 0x0, 0x17) 1.92370374s ago: executing program 1 (id=2): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file2\x00', 0x207) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x4) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x1e5) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000380)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xcda\x9b\x11X\x0e\xa1\xcf\x00\x98S7\xc9\x00\x00\x00\x00\x00\x00\x00\xf3\xff\x00\x00\x00\x00\xdf8\x9c\xc0T\xd2\xa7\v\x9a\xd2b\x8aL\xdd\x9e\x9d0\xb9\xd8K\x7f\x02\xf0\x19?j\x88l)l\xdbO\x88\r\x9c\xc2\x97m\xe0\xd8\xe4\xaaM4\x92\xca\xd7\x03\x11{\x98-\xb3D\xb8L\a\xdc3\xc8\x19\x9dg\x90\xb5?J\xc8\b=\xc5\b\xd9\x9eG[\xa9\xff]\xdaH\xc1Q\x95T\xfe\x9eRq\xdd[\x90MVb\x122m\xef\xeded#\xaf\xb5\xe3 \x8a\xfa\xf6\xdf\n]KbE\xb7\x9cLL\x93\xe7^\xc7\xde\xd0\xc2\xb5\xfe\v\xc3\xe1\x92[\xdbIq\x81\x00\x9b]\xee\xcbk\"\xdc\x89\x1c\xc3\xa1\x04\xa8\x8fF\xe9y\x0f<\xc0\xac\x06/\x8c\xfcP/\x83\x1f\v\xb8\xf1\xb1T\xdf_\xa1}\xf0)\xb3/_X\x9f\xee\tq\xec\xddG\x82\x95\xfe\x00\x94\xcf\xe1\xbd\x95+\xa4\x95\xf3!\xabu\xe1i', 0x2) ftruncate(r2, 0xffff) fcntl$addseals(r2, 0x409, 0x7) r3 = ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f0000000000)={r2, 0x0, 0x0, 0x8000}) ioctl$DMA_BUF_IOCTL_SYNC(r3, 0x40086200, 0x0) write(r0, &(0x7f0000000000)='7', 0x1) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x8, 0x9, 0x4, 0x180, 0x4, 0x100000000010, 0xf1, 0x4, 0x7ffffdffffffe, 0x9, 0x8000000000000000, 0x9, 0x0, 0x4, 0x0, 0xbdb], 0x1, 0x3c4210}) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_usb_control_io$cdc_ecm(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x0, &(0x7f0000000040)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) setsockopt$inet6_opts(r4, 0x29, 0x40, &(0x7f0000000000)=ANY=[], 0xd0060) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) syz_ublk_setup_io_uring(0x20, &(0x7f00000002c0)={0x0, 0x5635, 0x1000, 0xfffffffc}, &(0x7f0000000000), &(0x7f0000000540), &(0x7f0000000040)) prlimit64(0x0, 0x0, &(0x7f0000003bc0)={0x5, 0x9}, 0x0) timer_create(0x2, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) renameat2(r0, &(0x7f00000001c0)='./file0\x00', r0, &(0x7f0000000200)='./file0/file1\x00', 0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="80000000000101"], 0x80}}, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) mprotect(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x2000010) r6 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x22441, 0x60) fdatasync(r6) openat$khugepaged_scan(0xffffffffffffff9c, &(0x7f0000000140), 0x1, 0x0) 1.330494365s ago: executing program 1 (id=5): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x3, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000dc0)={0x8, 0x0, 0x0, 0x1, 0xe, "0062ba7d02000000000000f7ffffff00"}) (async, rerun: 32) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (rerun: 32) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) r5 = syz_kvm_setup_syzos_vm$x86(r4, &(0x7f0000bfd000/0x400000)=nil) r6 = syz_kvm_add_vcpu$x86(r5, &(0x7f00000000c0)={0x0, &(0x7f0000000480)=[@enable_nested={0x12c, 0x18}, @nested_vmlaunch={0x12f, 0x18}], 0x30}) ioctl$KVM_SET_REGS(r6, 0x4090ae82, &(0x7f0000002200)={[0x8, 0x3, 0x6, 0x7, 0x100000000, 0x6b3a, 0x800, 0x73, 0xf, 0x3, 0x7, 0x81, 0x3, 0xf64a, 0x29d, 0x20000006], 0x30000, 0x110a00}) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) setxattr$system_posix_acl(&(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='system.posix_acl_access\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="02000000010005000000000002000200", @ANYRES32=0x0, @ANYBLOB="040000000000000008000500", @ANYRES32=0x0, @ANYBLOB="10000200000000002000"], 0x34, 0x3) chmod(&(0x7f0000000040)='./file0\x00', 0x4) (async, rerun: 64) ioctl$KVM_SET_IRQCHIP(r4, 0x8208ae63, &(0x7f0000000780)={0x2, 0x0, @ioapic={0x4, 0x0, 0x0, 0xeffffdff, 0x0, [{0x6, 0x0, 0xfd, '\x00', 0xff}, {0x0, 0x8, 0x3, '\x00', 0x79}, {0xfc, 0x13, 0x4}, {0x13, 0x5}, {0x0, 0x1, 0x3, '\x00', 0xfd}, {0xfe, 0x0, 0x5, '\x00', 0x2}, {0x40, 0x4, 0x26, '\x00', 0x40}, {0x6f, 0x0, 0x3, '\x00', 0xb6}, {0x40, 0x93, 0xf5, '\x00', 0xfc}, {0xb8, 0x6, 0x0, '\x00', 0x21}, {0xf0, 0x0, 0x9, '\x00', 0xd}, {0xc, 0x99, 0x81, '\x00', 0x1}, {0x0, 0x49, 0xb, '\x00', 0x3}, {0x2, 0x0, 0x3}, {0xc3, 0x0, 0x0, '\x00', 0x5}, {0x0, 0x34, 0x84, '\x00', 0xff}, {0x8, 0x0, 0xe7}, {0x0, 0x2, 0x6, '\x00', 0x10}, {0xfe, 0x0, 0xd}, {0x2, 0x80, 0x0, '\x00', 0x2}, {0x4, 0x2, 0xc, '\x00', 0x37}, {0x3, 0x9, 0x0, '\x00', 0x5}, {0xa0, 0x2, 0x9}, {0x4a, 0x1, 0x3}]}}) (rerun: 64) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000983000/0x400000)=nil) 440.630439ms ago: executing program 3 (id=7): r0 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0xf88e470f, 0xed, 0x7}]}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x4e22, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, 0x0, 0x0) getsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000480)=ANY=[@ANYBLOB="680300000000000002004e207f0000010000000000000000000000000047ef718873190b8e0000000000000000000000000000000000000000000065a63c2c081513d30000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002004e20ac1e010100"/272], 0x110) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x200000000009, 0xfffffffffffffffa, 0xfffffffffffffffe, 0x2, 0x0, 0x9, 0x401004, 0x8000000000000003, 0xc595, 0x8, 0x1, 0xffffffffffffffff, 0x3, 0xb3, 0x8d], 0xeeee8000, 0x8016}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 290.368573ms ago: executing program 3 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'pimreg\x00', 0x5005}) write$tun(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="000402001c0008000f00000108000604000100000000000031ba1fea0180c200000248f938df"], 0x26) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400), 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r3, 0x4188aec6, &(0x7f0000003900)={0x1, [{0x3, 0x8, 0x7fffffff, &(0x7f0000000280)='H'}, {0x0, 0x0, 0x9, 0x0}, {0x2, 0x0, 0x6, 0x0}, {0x7, 0x0, 0x7ffffffe, 0x0}, {0x0, 0x0, 0x5b2, 0x0}, {0x3, 0x0, 0x486, 0x0}, {0x0, 0x0, 0x7, 0x0}, {0x3, 0x0, 0x5, 0x0}, {0x0, 0x0, 0x4, 0x0}, {0x0, 0x0, 0x5, 0x0}, {0x3, 0x0, 0x4, 0x0}, {0x4, 0x0, 0x4, 0x0}, {0x3, 0x0, 0xde56351, 0x0}, {0x0, 0x0, 0x100, 0x0}, {0x2, 0x0, 0x15, 0x0}, {0x1, 0x0, 0xa9c, 0x0}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x200000000000000) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r5) ptrace$setregs(0x1a, r5, 0xfffffffffffffffe, 0x0) socket$xdp(0x2c, 0x3, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000280)="1f80c48b40d7ae03d1f8493a72d8b3a3", 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0xa019, 0x1, 0x3}, 0x18, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) r7 = mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) r8 = syz_io_uring_setup(0x41f4, &(0x7f0000000140)={0x0, 0xf46f, 0x4000, 0x3, 0x3c3}, &(0x7f00000002c0)=0x0, &(0x7f0000000340), &(0x7f0000000380)) syz_ublk_add_dev(0xffffffffffffffff, r9, r7, 0x0, &(0x7f0000000200)={0x2e, 0x22, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000001c0)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) r12 = dup(r11) syz_ublk_setup_queues(r12, r10, &(0x7f00000003c0)={0x0, 0xd67f, 0x10, 0x1, 0x7f}, &(0x7f0000000540)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5e8f, 0x200, 0x2, 0x90}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6283, 0x80, 0x1, 0x23aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x93ea, 0x20, 0x3, 0x2b9, 0x0, r8}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe359, 0x8000, 0x2, 0xbd92}}], 0x1, 0x0, 0x0) r13 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r13, 0xae41, 0x0) 137.893177ms ago: executing program 3 (id=9): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) (async) memfd_create(&(0x7f0000000000)='/dev/sda1\x00', 0x1) (async) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) quotactl$Q_GETQUOTA(0xffffffff80000701, &(0x7f0000000000)=@sg0, 0x0, 0x0) mmap(&(0x7f0000048000/0x1000)=nil, 0x1000, 0x100000b, 0x31, 0xffffffffffffffff, 0x0) openat$kvm(0x0, &(0x7f0000000140), 0x0, 0x0) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000180), 0x24100, 0x0) preadv2(r0, &(0x7f0000001300)=[{0x0}, {0x0}, {&(0x7f0000001580)=""/4101, 0x1005}], 0x3, 0x1, 0x3, 0x10) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x17f) (async) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r1, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000940)}, 0x41) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_buf(r2, 0x0, 0x4, &(0x7f0000000040)="610910bc996c301c8107070408", 0xd) (async, rerun: 64) dup(r0) (async, rerun: 64) recvmsg(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, 0x0}, 0x10001) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.mems\x00', 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x10800, &(0x7f0000000240)={'trans=fd,', {}, 0x2c, {}, 0x2c, {[{@dfltuid}]}}) (async) write$cgroup_subtree(r4, &(0x7f0000000240)=ANY=[@ANYBLOB], 0x6a) (async, rerun: 32) r5 = socket$nl_audit(0x10, 0x3, 0x9) (async, rerun: 32) r6 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r6, 0x89f0, &(0x7f0000000140)={'ip6tnl0\x00', &(0x7f00000000c0)={'syztnl2\x00', 0x0, 0x4, 0x78, 0x5, 0x3, 0x21, @empty, @empty, 0x8000, 0x10, 0x100, 0x10}}) (async) write(r5, &(0x7f0000000000)="13f302f127e62439ac6c10502a662937e4", 0x11) r7 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc/mtrr\x00', 0x2, 0x160) ioctl(r7, 0xd, &(0x7f00000002c0)="f2a83d501e0020df45cd67308dee7c45e0e398009dffd4a945497e1c15d6e80a9cc9d949e04bf1589d3990602980a270bb8064a7f7792f4ae052b873213826b53310d29b33500ddf4acddca16b6b4acb64f352669ff82a1372a1124e46b8a2ba29d1f6990b8f448ca4e842b4f7b3c2871dd42c9acd9b7a3b99e58d6b2a0ee7aeae8d97d7616739ad722d93ee825a1c4b05b15b7049a66d060e229d") 107.987202ms ago: executing program 3 (id=10): r0 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) ioctl$KVM_SET_MSRS(r0, 0x4008ae89, &(0x7f0000000040)) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000180)={0x3000, 0x0, 0x1}) symlinkat(&(0x7f0000000000)='./file0\x00', r0, &(0x7f0000000080)='./file0\x00') r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x12000, 0x1}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 2.557529ms ago: executing program 2 (id=11): syz_usb_connect(0x0, 0x0, 0x0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x4, &(0x7f0000000180)=@lang_id={0x4, 0x3, 0x403}}]}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000012c0)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e24}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000000)=0x1, 0x4) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[], 0x14}}, 0x0) accept$inet(r1, &(0x7f0000000040)={0x2, 0x0, @private}, &(0x7f00000000c0)=0x10) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000140)=@gcm_256={{0x303}, "e400a0ee061000", "19b766c932c05dc4ae5c56bc48624d0aaca57fb0042b97e6a427205b1df98609", "bf7e3d3a", "fc99e624f0f6de7d"}, 0x38) write$binfmt_elf64(r1, &(0x7f0000000740)=ANY=[], 0x4a2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) 1.615219ms ago: executing program 3 (id=12): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCSPGRP(r0, 0x8902, &(0x7f0000002d00)) (async, rerun: 64) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@newqdisc={0x60, 0x24, 0x10, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {0xfff3, 0x4}, {0xa, 0xffff}, {0xc, 0x6}}, [@q_dsmark={{0xb}, {0xc, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x166}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x20}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044855}, 0x20048800) (async) landlock_restrict_self(r1, 0x5) (async) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000037c0)) 0s ago: executing program 3 (id=13): socket(0x10, 0x3, 0x4) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = add_key(&(0x7f0000000000)='keyring\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000000200)="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", 0x559, r0) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000b00)={r1}, &(0x7f0000000780)=ANY=[@ANYBLOB="656e633d706b63733120686173683d736861353132000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008439368d14a1167959f92be30a4482ec235a31284f23a42778fa90520384a52d45d0fb1dd5d076cc3800f1434560121dd88eac361a5d58c7ed572c49142f93dcfc4ba00ace94266bb9332f629f526ff4c385f2b86d3001741e7857da4f8e80865363455f0f442c5d67769f01aa543e8e30002a920ea82ee021b91036ea84edd82fd78692c68a9ae2a3712c1d10c1520e975061078ec1d0fbc913b1e50755c6864a81a000633e40283dfa02bf0cf52f"], 0x0, 0x0) add_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f00000000c0)={'syz', 0x1}, 0x0, 0x0, r0) openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) userfaultfd(0x80001) r4 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) r5 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r5, &(0x7f0000000000)='3', 0x4e) r6 = syz_clone(0x20400, &(0x7f0000000880)="7f5710f2beb683650d70f2c41c97a9fafd36a59495e2983ad431f9c845e669a81ea6058d48bef7778745df5ba419c2faac4318b3b894bcbc3d977e17c316439cdd8a21c9b7b049a6c770088b2f34200debf5cc6c3abe590b9d56f4b759ea3d45a0ebf3e0a66ceee45f852b11967bbd9d9ddc919b9778b910429f9d8e26dd2eab4d4309142f4d5f64721842a881b8fe6504fa947cbec8b94c35f3c3bd8b75b346f25007950ae13884adc91027d8de774ef7cc069e224e8cd3d70fb151eeccea3c0afb1bfee6f403b2e8a62698708bd49e174a44b293e6000605408e194e1d189f51646036", 0xe4, &(0x7f0000000980), &(0x7f00000009c0), &(0x7f0000000a00)="d5ce33e10f5c3439226496d3fe048396c34eac9deed2462f1a6f29a68d926ad265892103ce1fd285443bc85a062c3f7b952e71bc3276599dc42d66d40a2dfaf49c23b5b56c5f6490c27aa559e5cf67f3cbc11b6b40f92ecb1c6eb55246c21a3cadf27a209c22134bb27e85a897ac0eb387e8270206067325d0a05676e3d227c82f5039b48245377caa71694951e79906d09f376a1572e7239bd1d1dc88090de1") write$cgroup_pid(r5, &(0x7f0000000ac0)=r6, 0x12) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r4, 0x8983, &(0x7f0000000180)={0x1, 'ip6gretap0\x00', {}, 0xfff9}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYRES16=r4], 0x448}}, 0x0) sendmmsg$inet(r4, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x2}}], 0x40000000000003a, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) mmap$IORING_MAP_OFF_PARAM_REGION(0x0, 0x9, 0x100000a, 0x20910, r2, 0x20000000) mkdirat$cgroup(r2, &(0x7f0000000100)='syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. [ 21.827338][ T36] audit: type=1400 audit(1790675788.399:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.828469][ T286] cgroup: Unknown subsys name 'net' [ 21.850324][ T36] audit: type=1400 audit(1790675788.399:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.877867][ T36] audit: type=1400 audit(1790675788.429:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.878067][ T286] cgroup: Unknown subsys name 'devices' [ 22.003405][ T286] cgroup: Unknown subsys name 'hugetlb' [ 22.009036][ T286] cgroup: Unknown subsys name 'rlimit' [ 22.101342][ T36] audit: type=1400 audit(1790675788.669:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.124590][ T36] audit: type=1400 audit(1790675788.669:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.133902][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.149445][ T36] audit: type=1400 audit(1790675788.679:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.180951][ T36] audit: type=1400 audit(1790675788.739:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.189867][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.206458][ T36] audit: type=1400 audit(1790675788.739:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.240589][ T36] audit: type=1400 audit(1790675788.769:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.266266][ T36] audit: type=1400 audit(1790675788.769:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.582485][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.589532][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.596928][ T294] bridge_slave_0: entered allmulticast mode [ 23.603287][ T294] bridge_slave_0: entered promiscuous mode [ 23.609562][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.616672][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.623821][ T293] bridge_slave_0: entered allmulticast mode [ 23.629974][ T293] bridge_slave_0: entered promiscuous mode [ 23.637795][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.644849][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.651953][ T294] bridge_slave_1: entered allmulticast mode [ 23.658079][ T294] bridge_slave_1: entered promiscuous mode [ 23.670904][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.677973][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.685077][ T293] bridge_slave_1: entered allmulticast mode [ 23.691209][ T293] bridge_slave_1: entered promiscuous mode [ 23.707747][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.714932][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.722049][ T295] bridge_slave_0: entered allmulticast mode [ 23.728166][ T295] bridge_slave_0: entered promiscuous mode [ 23.737025][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.744085][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.751125][ T295] bridge_slave_1: entered allmulticast mode [ 23.757383][ T295] bridge_slave_1: entered promiscuous mode [ 23.806435][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.813563][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.820618][ T296] bridge_slave_0: entered allmulticast mode [ 23.826965][ T296] bridge_slave_0: entered promiscuous mode [ 23.835950][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.843077][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.850247][ T296] bridge_slave_1: entered allmulticast mode [ 23.856559][ T296] bridge_slave_1: entered promiscuous mode [ 23.964456][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.971533][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.978893][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.985946][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.998592][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.005654][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.012935][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.019951][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.038290][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.045356][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.052630][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.059655][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.085054][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.092140][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.099390][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.106433][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.130145][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.138360][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.145682][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.153495][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.160690][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.167921][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.175225][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.182443][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.196098][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.203154][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.214795][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.221855][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.242841][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.249867][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.257580][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.264618][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.292320][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.299358][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.306874][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.313961][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.324906][ T294] veth0_vlan: entered promiscuous mode [ 24.346588][ T294] veth1_macvtap: entered promiscuous mode [ 24.367535][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.374630][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.382812][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.389844][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.400003][ T293] veth0_vlan: entered promiscuous mode [ 24.416841][ T295] veth0_vlan: entered promiscuous mode [ 24.430688][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.432677][ T293] veth1_macvtap: entered promiscuous mode [ 24.461472][ T295] veth1_macvtap: entered promiscuous mode [ 24.499848][ T296] veth0_vlan: entered promiscuous mode [ 24.527984][ T296] veth1_macvtap: entered promiscuous mode [ 24.548729][ T323] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.589626][ T326] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.607695][ T326] netlink: 108 bytes leftover after parsing attributes in process `syz.1.2'. [ 24.741562][ T66] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 24.781542][ T320] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 24.801700][ T310] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 24.881629][ T66] usb 1-1: device descriptor read/64, error -71 [ 24.932709][ T320] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 24.940762][ T320] usb 4-1: config 0 has no interface number 0 [ 24.947147][ T320] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 24.958404][ T310] usb 3-1: Using ep0 maxpacket: 8 [ 24.963811][ T320] usb 4-1: config 0 interface 1 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 24.973975][ T320] usb 4-1: config 0 interface 1 altsetting 128 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 24.987144][ T320] usb 4-1: config 0 interface 1 has no altsetting 0 [ 24.994764][ T310] usb 3-1: config 0 interface 0 altsetting 235 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 25.007853][ T310] usb 3-1: config 0 interface 0 has no altsetting 0 [ 25.014786][ T310] usb 3-1: New USB device found, idVendor=1e7d, idProduct=3264, bcdDevice= 0.00 [ 25.023973][ T320] usb 4-1: New USB device found, idVendor=145f, idProduct=0212, bcdDevice= 0.00 [ 25.033064][ T320] usb 4-1: New USB device strings: Mfr=93, Product=0, SerialNumber=0 [ 25.041135][ T320] usb 4-1: Manufacturer: syz [ 25.046039][ T310] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.055089][ T310] usb 3-1: config 0 descriptor?? [ 25.060363][ T320] usb 4-1: config 0 descriptor?? [ 25.131503][ T66] usb 1-1: device descriptor read/64, error -71 [ 25.371512][ T66] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 25.470349][ T320] usbhid 4-1:0.1: can't add hid device: -71 [ 25.476388][ T320] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 25.485318][ T320] usb 4-1: USB disconnect, device number 2 [ 25.501566][ T66] usb 1-1: device descriptor read/64, error -71 [ 25.741624][ T66] usb 1-1: device descriptor read/64, error -71 [ 25.812186][ T310] usbhid 3-1:0.0: can't add hid device: -71 [ 25.818251][ T310] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 25.829536][ T310] usb 3-1: USB disconnect, device number 2 [ 25.851759][ T66] usb usb1-port1: attempt power cycle [ 26.078731][ T337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.088006][ T337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.097097][ T337] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.221567][ T66] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 26.242975][ T66] usb 1-1: device descriptor read/8, error -71 [ 26.372451][ T343] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 26.374530][ T66] usb 1-1: device descriptor read/8, error -71 [ 26.506370][ T358] ------------[ cut here ]------------ [ 26.511921][ T358] WARNING: CPU: 1 PID: 358 at crypto/rsa-pkcs1pad.c:560 pkcs1pad_verify+0x4e4/0x700 [ 26.521313][ T358] Modules linked in: [ 26.525273][ T358] CPU: 1 UID: 0 PID: 358 Comm: syz.3.13 Not tainted syzkaller #0 93cd2a7db6251899ee82c41fb24ebb4b8e8a6534 [ 26.536610][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 26.546743][ T358] RIP: 0010:pkcs1pad_verify+0x4e4/0x700 [ 26.552410][ T358] Code: 11 00 00 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 80 6b 26 03 cc e8 4a 23 06 ff 0f 0b b8 ea ff ff ff eb de e8 3c 23 06 ff <0f> 0b b8 ea ff ff ff eb d0 89 f9 80 e1 07 80 c1 03 38 c1 0f 8c 5d [ 26.572116][ T358] RSP: 0018:ffffc9000d29f728 EFLAGS: 00010287 [ 26.578206][ T358] RAX: ffffffff82815634 RBX: ffff888113c58200 RCX: 0000000000080000 [ 26.586230][ T358] RDX: ffffc90002204000 RSI: 0000000000000b6e RDI: 0000000000000b6f [ 26.594244][ T358] RBP: ffffc9000d29f770 R08: ffffc9000d29f82f R09: 0000000000000000 [ 26.602314][ T358] R10: 0000000000000000 R11: ffffffff82815150 R12: ffff888113ef7208 [ 26.610314][ T358] R13: 0000000000000000 R14: dffffc0000000000 R15: ffff888113c58238 [ 26.618414][ T358] FS: 00007f4cd05056c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 26.627395][ T358] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.634055][ T358] CR2: 0000200000000000 CR3: 0000000132b50000 CR4: 00000000003526b0 [ 26.642075][ T358] Call Trace: [ 26.645361][ T358] [ 26.648298][ T358] ? __asan_memcpy+0x5a/0x80 [ 26.651514][ T66] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 26.652942][ T358] crypto_sig_verify+0x1cd/0x260 [ 26.665329][ T358] ? __cfi_crypto_sig_verify+0x10/0x10 [ 26.670797][ T358] ? crypto_sig_set_pubkey+0x9a/0xb0 [ 26.676127][ T358] public_key_verify_signature+0x654/0xa40 [ 26.682067][ T358] ? __cfi_public_key_verify_signature+0x10/0x10 [ 26.682584][ T66] usb 1-1: device descriptor read/8, error -71 [ 26.688422][ T358] ? keyctl_pkey_params_get+0x3b8/0x4c0 [ 26.688455][ T358] ? __cfi_public_key_verify_signature_2+0x10/0x10 [ 26.706669][ T358] public_key_verify_signature_2+0x47/0x60 [ 26.712502][ T358] verify_signature+0xf0/0x120 [ 26.717276][ T358] asymmetric_key_verify_signature+0x160/0x200 [ 26.723456][ T358] ? __cfi_asymmetric_key_verify_signature+0x10/0x10 [ 26.730143][ T358] ? should_fail+0xf/0x20 [ 26.734510][ T358] ? __kasan_check_write+0x18/0x20 [ 26.739623][ T358] ? _copy_from_user+0x87/0xa0 [ 26.744410][ T358] ? memdup_user+0xb1/0x170 [ 26.748934][ T358] keyctl_pkey_verify+0x200/0x290 [ 26.753972][ T358] ? __cfi_keyctl_pkey_verify+0x10/0x10 [ 26.759521][ T358] __se_sys_keyctl+0x743/0xe40 [ 26.764323][ T358] ? __x64_sys_keyctl+0xf0/0xf0 [ 26.769177][ T358] ? __cfi_do_futex+0x10/0x10 [ 26.773904][ T358] ? kvfree_sensitive+0x51/0x70 [ 26.778765][ T358] ? __se_sys_futex+0x13c/0x320 [ 26.783649][ T358] ? xfd_validate_state+0x68/0x140 [ 26.788766][ T358] ? __kasan_check_write+0x18/0x20 [ 26.793894][ T358] ? fpregs_restore_userregs+0x11c/0x260 [ 26.799530][ T358] __x64_sys_keyctl+0xc3/0xf0 [ 26.804234][ T358] x64_sys_call+0x996/0x2ee0 [ 26.808836][ T358] do_syscall_64+0x57/0xf0 [ 26.813273][ T358] ? clear_bhb_loop+0x50/0xa0 [ 26.817951][ T358] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.823888][ T358] RIP: 0033:0x7f4ccf59e159 [ 26.828317][ T358] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.832530][ T66] usb 1-1: device descriptor read/8, error -71 [ 26.847973][ T358] RSP: 002b:00007f4cd0505028 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 26.848001][ T358] RAX: ffffffffffffffda RBX: 00007f4ccf825fa0 RCX: 00007f4ccf59e159 [ 26.848015][ T358] RDX: 0000200000000780 RSI: 0000200000000b00 RDI: 000000000000001c [ 26.878873][ T358] RBP: 00007f4ccf63506b R08: 0000000000000000 R09: 0000000000000000 [ 26.886885][ T358] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 26.894922][ T358] R13: 00007f4ccf826038 R14: 00007f4ccf825fa0 R15: 00007ffc8228d658 [ 26.902946][ T358] [ 26.905991][ T358] ---[ end trace 0000000000000000 ]--- [ 26.961842][ T66] usb usb1-port1: unable to enumerate USB device