last executing test programs: 3.512299992s ago: executing program 1 (id=110): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000001c0)="0f22e30f3566b842000f00d8b805000000f9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet6(r3, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e22, 0x951, @local}, 0x1c, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000000000000029000000040000002f000000000000001800000000000000290000003b00000002000000000000002800"], 0x60}, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.491785342s ago: executing program 1 (id=111): socket(0x400000000010, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000340)={0xa, 0x4e22, 0x0, @loopback}, 0x1c) listen(r0, 0x5a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x281, 0x24040014, &(0x7f00000003c0)={0xa, 0x4e22, 0x40, @empty}, 0x1c) 3.478495303s ago: executing program 1 (id=112): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0xfffff000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x10000}) (async) ioctl$KVM_CAP_DIRTY_LOG_RING(r1, 0x4068aea3, &(0x7f0000000300)={0xc0, 0x0, 0x10000}) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000380)={0x10001, 0x1, 0x30000, 0x2000, &(0x7f0000002000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) (async) mknodat$null(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x100, 0x103) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000002840)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000010000,user_id=', @ANYRESOCT=r0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000440)='./file0\x00') (async) symlink(&(0x7f00000003c0)='.\x00', &(0x7f0000000440)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1c0) mknodat(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file2\x00', 0x1000, 0x0) r4 = landlock_create_ruleset(&(0x7f0000002600)={0x2001, 0x0, 0x0, 0x0, 0xc}, 0x30, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000002640)='./file0\x00', 0x202000, 0x13b) socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002740)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) (async) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000002740)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581d7"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) syz_usb_control_io$hid(r6, &(0x7f0000002780)={0x24, 0x0, 0x0, &(0x7f00000027c0)=ANY=[@ANYBLOB="00220f00000083000021000b034d2500b37488dffc"], 0x0}, 0x0) syz_open_dev$hiddev(&(0x7f0000002800), 0x0, 0x0) (async) r7 = syz_open_dev$hiddev(&(0x7f0000002800), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) (async) ioctl$HIDIOCINITREPORT(r7, 0x4805, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r4, 0x1, &(0x7f0000002680)={0x2001, r5}, 0x0) landlock_restrict_self(r4, 0x0) landlock_restrict_self(r4, 0x5) renameat2(0xffffffffffffff9c, &(0x7f00000026c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x2) (async) renameat2(0xffffffffffffff9c, &(0x7f00000026c0)='./file1/file2\x00', 0xffffffffffffff9c, &(0x7f0000002700)='./file0\x00', 0x2) read$FUSE(r3, &(0x7f0000000540)={0x2020}, 0x2092) (async) read$FUSE(r3, &(0x7f0000000540)={0x2020, 0x0, 0x0}, 0x2092) write$FUSE_INIT(r3, &(0x7f0000002580)={0x50, 0x0, r8, {0x7, 0x9, 0x0, 0x2161850, 0x2, 0xc, 0x0, 0x100, 0x0, 0x0, 0x100}}, 0x50) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="24000000f200010000000000ffdbdf25140000000d0000002cc2ecdb28f85230a9000000"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) (async) sendmsg$netlink(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="24000000f200010000000000ffdbdf25140000000d0000002cc2ecdb28f85230a9000000"], 0x24}], 0x1, 0x0, 0x0, 0xc010}, 0x40080) 583.371685ms ago: executing program 0 (id=143): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000180)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000001c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000200)={0x8, 0x0, &(0x7f0000000240)=[@increfs]}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000280)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f00000002c0)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000300)={0x8, 0x0, &(0x7f0000000340)=[@acquire]}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000380)={0x4c, 0x0, &(0x7f00000003c0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x46, 0x0}, 0x40}]}) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$inet(r5, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYRESDEC=r4], 0x20}, 0x48000) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0x2) ioctl$TCXONC(r4, 0x540a, 0x3) 480.647497ms ago: executing program 3 (id=144): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000031c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3d0, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e1c"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402efff709b64f45f1f28cd27735b12dcc295a3f197d3ebefb9760e61ef97aa66666846acc8e815a63b8b82ef7d4ffb9e330ccdde04b31ddcdb22d9e7970864c838fd192d5401459c92f94d296f2443c123a93251209c8b7a5150d648f1c1a929d17020d65a5e16"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0acaa2"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd47462663309743adfd47dbe78b2c941cbf162933a7c1710e8ccbf9b5d7a13e9df0c6d92c1a2becc8ed48b57b78de7a72fd73ab"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 474.321198ms ago: executing program 0 (id=145): futex(0x0, 0x1, 0x0, 0x0, 0x0, 0x1) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x38, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @loopback}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x38}}, 0x0) pipe2(&(0x7f0000000140), 0x4080) r1 = socket(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000200)={0x87, 0x22, '\x00', [@hao={0xc9, 0x10, @dev={0xfe, 0x80, '\x00', 0x2d}}, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0xff, 0xc9, "cc87770015d6620aa2fdcbef84422795ce0f2f72fe84ab222cccb933ef7c06f16f46c1c403962565ad87e4caba659b1731e3f576cb669ee3be85f9c79eb7cfd22fe4783e57bfae88cf7ae9cb3e0e77822e0136a905f5882b7541edefc32a1f1d8b21a8ab0c3607c8cdba1f1960d24d7fb1f1e514dce7795755e2d519f58aa1dfc1ef5fced188fecdada44b06679b080fea12d4ecafd71034791539d565ae206113e3eaee1e806c393f78e81b277f5d161edd77caa2a47bd60aef82e73c26cd5ca9721d226d6a01e2ce"}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @enc_lim={0x4, 0x1, 0x8}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x120) sendmsg$nl_generic(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c0000004a006b50767fd349b59c00000a"], 0x1c}}, 0x0) 400.371629ms ago: executing program 0 (id=146): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(0x0, 0x0, &(0x7f0000000200)="308205553082033da00302010202147398ea982dd02ea8b1cf57c7f297b3e61afc8c0a300d06092a864886f70d01010b05003034313230300603551f030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b65793020170d3232303531383232333234315a180f32313232303432343232333234315a30343132303006035504030c29436572746966696361746520766572696669636174696f6e2073656c662d74657374696e67206b657930820222300d06092a864886f70d01010105000382020f003082020a028202eeffccac49dd3bcab0157e846ab20a695f1c0a61823b4f2ca3952c08584bb15d99e0c3c179c2b3ebc01e6d3e541dbdb7927b4db59558b2522ec6244b7163803277a7385edb72ae6e0decfbb66d017fe95566dfbf1d76780231e8e507f8b7825c0dd4bbfba2590d2e3a78953a8b4606474446d7cd066a4113e319f6bb6e38f48301a3bf4a394fd70ae938b3f594144eddf743fd24b2493ca5f77a7cd4453d977568f1ed4c420b70ca85f3dee5882cc5beb69734ba2402cd8b869fa973ca73cf9281ee7555bb18675cff3fb5dd331b0ce978db5ccfaa5c4342df5ea96decd7d7ffe6a13a921adaaef68c6f7bd5b46e06e98fe8de093189ed0e11a1fa8ae9e964596253dad170be11d4999711cf99de0b9d947eaab852ea37db907e35bdd9fe6d0a487028ddd50d7f03809314238fb922cd7c29fef172b55c0b12cf9c15f6114c7a45258c450a34ac2d9a81ca0b1322cdeb1a38881897960881aacc8f0f8a327b7668036843bf11ba5560fd801c0d9b69b60972bc0f412f0782c6e3b21391c46d149531be19bdbcede14c74a2e0780bbb94ec4c533aa2b5841d4b657edcf7db367dbe9e3b366642667635bfbef0c13c7ce9425c24530305a86724500275ff24463b358976e670dac5518c9ae505b00bd02dd47d5775946bf90aad0e410015d04fc07f902d18488f28fe5da7cd999ebd026c8a31f31cc74be693cd42a2e46810479dfc210203010001a35d305b300c0603551d130101ff04023000300b0603551d0f040403020780301d0603551d0e04160414f58703bb33ce1b73ee02eccdee5b8817518fe3db301f0603551d23041830168014f58703bb33ce1b73ee02eccdee5b8817518fe3db300d06092a864886f70d01010b05000382020100c02e12417b738516c8db8679e8f5cd44f4c6e281235e47cbab25f11e583e317f78ad85ebfe148860f77fd226a2f4982afdba050c203312cc4d1461648193d333edc8fff178cc5f519f09d7be0d5c74fd9bdf524ac9a871253304106736d0b30bc9a14072ae417b68e6e47bd028f76de73f50fc917c9156d4dfa6bbe84d1b58aa28fac119eb112f248b7cc5a9862b5d6eb79bd5f806fb02527b9c9ea1e0078b5ee4b85529f648521c1b542d46d8e571b960d145b592898a63582ab3c6b276e23c825904ae5ac4997b2e4b4657b82924b2fdee2c0da483fa652a07358b97cfbd962ed17e6cc21e87b66c7665b5b262da8be973e3db33dd133a17636a76de8d8fe04761283a83ff8fe7c7e04aa3e507cfe98c35352ee7806631bf91580ae1253d38d3a4f059344707620fbe30dd818858f028b096e582f805b71301bcfac61f8672ccf9ee8ed9d6048c246cbf0f5d3739cf45c1933ad2ed5c5879748662307e8ebbdd7aa9edca40cb6247f4b49f527f7263a8f02baf452a48196de3fbf9196669c8cc62876c532b2d6e906c543a822541cb186aa422a8a1c447d781001c15510f1aafef9fa6618cbd6b8bede6ac0eb63a4c92e60f910a0f71c7a0b90d3a175a6f35c8e7504f46e870604806828b6658e673919c123d358e46ad5af5b3db692104fdd31cdf949d56b00ad195768dec9edd0b159764ade5f26202fc9e5f56423905b3", 0x559, 0xffffffffffffffff) 398.815279ms ago: executing program 0 (id=147): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="8fa68a274cab49b9c806172798e6a829701bb4eefee6919e0a30fa83a50170b6a3b499361f95ab6ff05f9001332b3a463b64282a924b0dcf6499c8c9b23d7290ab896ed6e2c7280dcda0336864e06d9570ea2cc78330859fa73080f5ddd3fd2b943287b312357816e9cfaa9e8941dd981f837506cabc6e016e507076819ff37d790c0b868166925649c9a74f4afc322ac971832fc3f12ba4dd3931c773134441bd46d9b10095eaabcfb846ac5fa9ea76f3547884091f073880656438f4406cf2051edb37139066dcaed45a544f5f92cccb1db0e2e503de3d4216d961dea1cbd9119a3f49b8bcdfe7078a7706296712eab5bd91b189f0140892b56c46912cc16dbe9fb469502eb67f36e8531dbfbed70615a836d32b5dabcf933201c97b29209e071433edb1b92ba47b514232654a36067c9b241737eb902ede1e18f99757339d2858bbe9c48484ec608e5fae534c4580d22fcd6ad28a786e0f5e675bc264ca03cf081038cb872e039100f94d25a7b5b9f2f18815e948aa65513c63a61e68c6a4ef4888980b54e3b7332112ee424e65172b2076528cd11cf63d7f4ff88c9eabf2c388bcb02beaa7e9c33cbe26149703fd3d511283739fa9638b1d6290a53b679227ee54d0fb232befdc92e59396c5bb818926e8a30a38a0aa358e1c818dbc27646fb4dc43168540cf724358d07124937cb3baa5365970e14240d727a8111d250202b39e8e3d6ff5e250eb09fdd83b8a129015567ae0f71a6b9166cd3718e3a83e711271f2ffd2d968e1153a38a8c5995e5c46fb8f22613690852bbea407b417eff9fd86e685025cbad82174164c3529407c4a27af5c6fdd911a4a87b7365655d5275c5719151b4440752785ff416a8e3a1f83f70e1f5d2538348b839f4e965e586e8b28a8aa94b79bc4e23d97d159af010918721be419234850fbeac52bb5de10a199f6591ab4deea9670e8b3d9f9341cddef4f3fe1b08a4f1943329cfa12c3972fc50525b8ebb5923235bbecd182d486169cf51e8c69259a404c0867328943358e95ad690a9c8eea73ddde677ebfe6f0d5f2e3a03541291e09a30bcce4b66550c28c6ba6cc431bb0fa87848652fb9319577a38a8ad45a87647b523fe3e452d90306c4c690b47d3c840ebbb1d96abb0735b21f557f5de101b7fbb7618d9739fabf89b8fb34c02493d1bfc31e80b1a9fcdac8aaf0fd69a0aee6f456705420ea3e7df30b478dd12ee137a6d6747750e5d6a7e5d308276c0ebd77377f000296108954f5371a9c84a01a18a76bee8ea849ddaf492a35f943ac395b9dddbd5ee05f6d75ac40237a0690584d7afaa3e117135b1406e03c9e49223ee48feccab18a3fd0325ed281bc70fb41b4f13905744afcbb588b8daee6d635007cf96dbd9549726c4cf9e350072702058bb533a4bb598a06e5505e8393b2793cc6ac2d66a0529b2aa7991a30f8bdd2bec5ac7ca2064e7b3a2a2d510de4675a7a6ce5d1729c2b98dbb08ab4a33cbd83484092d48b9c4fac7b7b6191057a2acf109565c6d49d9be0f1f2838650cdc36ad835fd78be83c6df052659ed1e8242d45891442a54205311da1814b18ed7fcc7c5bd979434040cd2133fd35ab946ff87e807a48a4802a1e4cce7cef4f2f555029cdecadaf99c5c3bf65db4be3940bfedb87cc491ac59d027496d87a792961f1f59cb72df3280b1845722282745fa77dfa1fce5e67e09466475c0e988719e528d39815cdfe0d16a6de1d871cfc4778ed47e8a7d3b2dfeea2083a41b061848324fe15e90c2dac3303992fdc42ba1a1995b87154a618660094a942074c5e02ed1a11293c5276b06439468f99c9d184c0152c44308c64c432277fe367a7fac9c9fb08d9dc8949e8ab9740a357fdc9d69df07375d011947b43072f554d63831af4319664e735c3eb08c0afe5120bd89b4d0654b6266aa4709ea2beb3dfd0449d2c3fde3f1098c9f73d994a741bb9f3c5322743c310fd7881856e5d529f4a9eb7dc43c0be6c36653b2cda92a7f07247450d666ca88863c6880d656eb8006bfe2f96543bf683fe3126e03ccf2120878a4fc46bdf64e11e323637ae0024a3d6fa52729591758c36a5ddeff1d1c5ba3e1bfedad1ff460f05ce276f1f3c2d70f9c6c5927a8fd15e65bc9c648b7dfccde510f5bf46bab8f2c5e21cb129dbf3f4df7a5a831f198f21fee429d73646eab00b1542941108592708fe8f53613d6b7dc1e4999374317b57c1e4a974fedd089c4295682d1a03d770b7639e80d25b0f428dfd3c46be492fc80b5c4913e476845a359dbe4187fd0027bd9fc814ba6a2877b61b637878f2af7ef18a0858fe5c7e75ecf92e735452456089efae8a13d3e6ac9d28c18cb1ca54522066edbf9e67ab4cf158b63c7b4d25146bafa14163cd4d171ad97f3ef93cfabae0557e237bbbe9cb80144b03f6fdb7d357d253235ddbde503829403657fdde516d3974091c40c6b9dd245f730458e1fd594f6b694af0150cbd31b6d0fb3bc04eb5096e704e039eecf4be9e93eb2f841878538ed1c46d015b1a792b599ed9225577460f72e6b4e271e5e6eeed34f69cfd76683e21d87e3ee8ed88df79901f9354823824fa6b67a91e2626161436327fc58879085d87db5dd94e09a0d24c7c381fb8fdc7198d2c2fece49e6496a119023852fca717d2ff2f9ed5e0715ddebd267ed0b8378ad852b03a539e6d03025b4a04f2483bdb79a4bd233ce3b6bd30d736ad0784b978861badc236e7106d23f26eac50e93d8ab012dc7c5d85d4f944aaa27378efc99572f932344cddc488ffa9210dc6b8f0cc29d07110362485eaa5b4b196a49c7080633c1befe802207ed0a172fa0b61fea6305f04d7b755a6e5e162aa8047f80647ad0bae8143226ce3aa8de3b0c0fc4e7cd6baab274fba47abf95ae88584778325250063855a4b9f0c966efa43dc0196d3dec619c490181c259b341b3fd370bab0b66af3cb1e9365cf6b62e44d939d36ffcc6badb924f44e86337360efbf4e3f9bd716adbc3f0ba6055ec9790504c9f3865f47e422b1c6ba16c07d0df618cc572b36ec8e519db90a499424a7d689e6fbcc9be1abd843512ec16540c6c7c6d6e2cf50ab2014e4208c2abb0ddfd2ef9dece79389f21d7a9985903f7f01b0394d268349fa41a487bacfe8deba2ffca815ad0b1c6ffa5af2eba6d9436ad298c4e11b68451c7ff001c02ddd3ceb153a865327845349e8b817aa8ed24924f49260f8209d0ddcacf5306d9222320776162fe8396914fa22c85bc261661fa547c3063e20ca37c0862c3b9abd3da9b02e3f58d89be00003509bae9b82f60975c0687c500bb213a580f6e9f08b207d7c31748e3fda05a0cc76b1fdd563610a2bb09a57020d85026a57a178c38839b5b88cd8434d1f0308d872c7356a6445de801ff14c133bda3b42b9ca099fb3ee0d5c7a835f56ed30aa75d47cd97c329b682879290faee167334500d2fe596564f3e4064f41cf3469aaae846f1e84f3d8a7f42d98d0b6b67913c376d6bbde3027aa41b753ace165f88379981685f918ada5043800b5e0a0865dcda94df85fefa9348d6ec4e1ffbd940d023fbbd3b77d5db572981dbe40cbae9f010c1ea02718b1c4b7d0447c9d83d1afea58097a0467d6cdd47aef05f97dab63462f6ea61f4b611040b30e7cf60a499aa9d0bc50c08463f25a47d2dbc958fe1d1cf2399dcf1952987b6fcbc97bf73b12177c374c8fd56c8228fc796c958687104f4eb9d46ab80eeeeedb7096a67ee440ae92a65cbf6f81939e3d1050c67245036b5dcc13d577fbb4d9c3fbf2e2e61aa154074ae225c54e23289c4ef41a07a49a9d40f3103f4c9dfd4d750cc646adadd2e1fe24c74ce099d753d4c59d806a0b7f576ac37ac58a51a120f93162c43d16c1f7e5289c75f5f0a5b838d020040c9ce512ca35d08f42acd24cdbc2e6b1ac3c6809a5ed9e272155e9fa55349bc3ce0e3f2d1624dc60e2396b954587bbab275f38911e86b826b85730c6670a92a221cdcbf18ee0c44aec4591fcd12204b3049a1b5da1215a4cf88ecbe2d877ef975f4f661999d17d7d9ec14e0895ce25034dac4705d50ae42ca162778d0dcfc4e9180517be0daca5deb10773f93e2c61a5fe9b823218a97c35d0d7b436b2e1afb670b5a4c6dacd401afd1832c1dd96e8eba7734954070c6796cc80707441404cfe95fabf214bf03a6e4643ca559c2b8dcf1fa871114f3dc973a056c9aee7cd0ed4cbaf18298377e750869551632c1713bd8372e3f11fa02edf0a68d2c01245459d9e78597ac1eec75064024c1f3c98260d34b611ba8fa4b2022babd44b76ea70c718df8268dba447038b1539f0499603cf2d79bcc49c35a8cf38892d982d153d72253a22ae68da65e84d6399e81a14ebf89ba446630814d9dcf8914acafc8603a5396167c5aa99814af62c1c39a6ba76ad2c6c51a6d56d89fbda5334e626540ef1b1ecad53247531fcdd661a48d28a6d48bac8ef70c888b00db57edceee94425df5161e1b1a1bec9c897e01867442ed8ba000b5f75832a8ec57ef0737994b95f40eac48f3c8da5db80e965fcdf3f0bbb4439a7123b59987f0fdac96bc7ce09c013562ff7c0cb23a882828e45a51f7e748db90c5eaacfdf3657d11a348f747ddd860387de41be3376a5dabf4296bc05282cb73fcd60c4a4148d9e872ae86e30b22db1ce5452ad9fe3fea029f94a583d301e74eac1818da3f1279c63690db6e7166ddaacd1278716fa3221daaa27c98fd97b88e63208d604505ad8f31bd2b83a19f89480b71198d8a31c89cadd258ce338afe1a26b0db248c1a39fe027716e417e45bb6c9a68cab1cd6c3445e9796ee1003650e97eccdadc9bea540e2c8253652c8f1586ba7e508cd29d53467bad11eef729796dbe83d3fc0bc157", 0xd84}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) 393.70532ms ago: executing program 1 (id=148): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000008140)={0x0, 0x0, &(0x7f0000008180)={&(0x7f00000081c0)=ANY=[@ANYBLOB="540100001000330600000000000000000000fc0100"/50, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000032000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/212], 0x154}}, 0x0) 360.844271ms ago: executing program 1 (id=149): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc.0', 0xb) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r1, &(0x7f0000000a00)='t', 0x1) 291.584813ms ago: executing program 2 (id=150): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000002100000017000000440006803c00040067636d860465732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 248.606123ms ago: executing program 2 (id=151): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) (async) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x7fffffff) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x280, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe5000/0x18000)=nil, &(0x7f0000000a80)=[@textreal={0x8, 0x0}], 0x1, 0x6f, &(0x7f0000000ac0)=[@cr4={0x1, 0x40d62}], 0x1) rt_sigqueueinfo(0xffffffffffffffff, 0x0, &(0x7f0000000040)={0x1a, 0xd32b, 0xc}) (async) ioctl$KVM_RUN(r1, 0xae80, 0x0) 248.384034ms ago: executing program 2 (id=152): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) symlinkat(&(0x7f0000000600)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000680)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r0, &(0x7f0000000740)='dummy_udc', 0x9) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000040)=0xa, 0x4) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100", 0x14) mkdirat(0xffffffffffffff9c, &(0x7f0000000900)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000900)='./dev\x00', &(0x7f0000000940)='devtmpfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000980)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, &(0x7f0000000a00)='t', 0x1) close(r2) landlock_create_ruleset(&(0x7f0000000240)={0x1fff}, 0x18, 0x0) 248.120203ms ago: executing program 0 (id=153): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ec) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000040)='configfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/functions/hid.usb0/report_length\x00', 0x2, 0x0) write(r0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/thread-self/fail-nth\x00', 0x2002, 0x0) write(r1, &(0x7f00000000c0)='7', 0x1) read$FUSE(r0, &(0x7f0000000380)={0x2020}, 0x2020) 247.748034ms ago: executing program 3 (id=154): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000800)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000008c0), 0x200002, 0x0) openat$cgroup_procs(r0, &(0x7f0000004600)='cgroup.procs\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) unlinkat(0xffffffffffffff9c, &(0x7f0000004680)='./file0\x00', 0x200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f00000006c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000700)='./file0\x00', &(0x7f0000000740), 0x280449c, &(0x7f0000002480)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0x4000}}) r4 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000002500), 0x0, 0x0) read$FUSE(r4, &(0x7f0000002540)={0x2020, 0x0, 0x0}, 0x2020) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x141000, 0x0) r7 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps', 0x0, 0x0) fchmod(r7, 0xd2) syz_open_procfs(0x0, &(0x7f00000003c0)='fd/3\x00') r8 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_CAP_EXIT_HYPERCALL(r8, 0x4068aea3, &(0x7f0000000300)={0x79, 0x0, 0xc}) ioctl$KVM_SET_GSI_ROUTING(r8, 0x4008ae6a, &(0x7f0000000380)={0x0, 0xff0f}) write$FUSE_INIT(r3, &(0x7f0000004580)={0x50, 0x0, r5, {0x7, 0x1f, 0x0, 0xa2012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x3}}, 0x50) setxattr$trusted_overlay_opaque(&(0x7f00000008c0)='./file0/file0\x00', &(0x7f0000004640), &(0x7f00000046c0), 0x2, 0x3) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f0000002240)=[{{&(0x7f0000000000)=@alg, 0x80, &(0x7f0000000340), 0x0, &(0x7f0000000240)=""/136, 0x88}, 0x2}, {{&(0x7f0000000400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000480)=""/147, 0x93}, {&(0x7f0000000080)=""/34, 0x22}, {&(0x7f0000000580)=""/91, 0x5b}, {&(0x7f0000000600)=""/102, 0x66}], 0x4, &(0x7f0000002380)=""/196, 0xc4}, 0x4}, {{&(0x7f0000000780)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000000900)=[{&(0x7f0000000800)}, {&(0x7f0000000840)=""/92, 0x5c}, {&(0x7f00000008c0)}], 0x3, &(0x7f0000000940)=""/218, 0xda}, 0x3}, {{&(0x7f0000000a40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000ac0)=""/90, 0x5a}, {&(0x7f0000000180)=""/129, 0x81}, {&(0x7f0000000c00)=""/74, 0x4a}], 0x3, &(0x7f0000000cc0)=""/4092, 0xffc}, 0x2}, {{0x0, 0x0, &(0x7f0000002180)=[{&(0x7f0000001cc0)=""/118, 0x76}, {&(0x7f0000001d40)=""/179, 0xb3}, {&(0x7f0000001e00)=""/123, 0x7b}, {&(0x7f0000000b40)=""/153, 0x99}, {&(0x7f0000004700)=""/300, 0x12c}, {&(0x7f0000002040)=""/105, 0x69}, {&(0x7f00000020c0)=""/130, 0x82}], 0x7, &(0x7f0000002200)=""/48, 0x30}, 0x1}], 0x5, 0x2, 0x0) 208.619515ms ago: executing program 0 (id=155): r0 = fsopen(&(0x7f00000001c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_SET_FLAG(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) r2 = openat(r1, &(0x7f0000000240)='.\x00', 0x0, 0x0) lseek(r2, 0x2, 0x0) mount$cgroup(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000100), 0x0, &(0x7f0000000140)={[{@cpuset_v2_mode}, {@xattr}]}) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000180), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/timer_list\x00', 0x0, 0x0) listxattr(0x0, 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) setuid(0xee01) r6 = getpgid(0x0) r7 = syz_pidfd_open(r6, 0x0) r8 = pidfd_getfd(r7, r7, 0x0) setns(r8, 0x40000000) ioctl$TCSETSF(r4, 0x5404, &(0x7f0000000000)={0xf, 0x3e, 0x6, 0x3, 0x2, "a0e1c601283700"}) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r3, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) ioctl$XFS_IOC_FSGEOMETRY(r4, 0x8100587e, &(0x7f0000000340)) 208.351395ms ago: executing program 3 (id=156): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x4e) add_key(0x0, 0x0, &(0x7f0000000200)="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", 0x559, 0xffffffffffffffff) 208.256675ms ago: executing program 3 (id=157): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000008140)={0x0, 0x0, &(0x7f0000008180)={&(0x7f00000081c0)=ANY=[@ANYBLOB="540100001000330600000000000000000000fc0100"/50, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414000000000000000000000000000000000032000000fe80000000000000000000000000000b00000000000000000000000000000000000033000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000048000200656362286369706865725f6e756c6c2900"/212], 0x154}}, 0x0) 181.610405ms ago: executing program 3 (id=158): r0 = openat$selinux_policy(0xffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x12, r0, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x4001, 0x0, 0xb, 0x20}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40e41, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="001c86dd0700100000001400000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000980), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000a00)=[@text64={0x40, &(0x7f0000000a40)="0f0013c441fc5a9b31aacf330f3235001000000f3066ba2100ec66baf80cb8402a2484ef66bafc0c66edc4a1f5fbf1f3450f2a89040000006642f4c4e21dbf7939b805000000b97499008c0f01c148b804000000000000000f23c00f21f835020004000f23f8", 0xffffffffffffffd5}], 0x1, 0xe8, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) 140.331746ms ago: executing program 1 (id=159): sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) write(0xffffffffffffffff, &(0x7f0000000800)="2c0000001a0001000000000000000000022000000000000000000000080001", 0x1f) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000031c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3d0, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e1c"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402efff709b64f45f1f28cd27735b12dcc295a3f197d3ebefb9760e61ef97aa66666846acc8e815a63b8b82ef7d4ffb9e330ccdde04b31ddcdb22d9e7970864c838fd192d5401459c92f94d296f2443c123a93251209c8b7a5150d648f1c1a929d17020d65a5e16"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0acaa2"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd47462663309743adfd47dbe78b2c941cbf162933a7c1710e8ccbf9b5d7a13e9df0c6d92c1a2becc8ed48b57b78de7a72fd73ab"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text32={0x20, &(0x7f00000000c0)="c20000361e0f01c3660fd2eff30f10f1b961020000b80e000000ba000000000f30b98d0200000f320b99f3530000660f6af7c4e2f91d20", 0x37}], 0x1, 0x11, 0x0, 0x0) syz_kvm_setup_cpu$x86(r4, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 111.412877ms ago: executing program 2 (id=160): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./bus\x00', 0x11d) mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x1a2) mount$overlay(0x0, &(0x7f0000000340)='./file0\x00', &(0x7f0000000380), 0x0, &(0x7f00000003c0)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@volatile}]}) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x100) mount$overlay(0x0, &(0x7f0000000440)='./bus\x00', &(0x7f0000000500), 0x0, &(0x7f0000000540)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) bind$inet(r0, &(0x7f0000000080)={0x2, 0x15, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000300)={0x2, 0x15, @loopback}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./proc\x00', 0x1ff) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./tracing\x00', &(0x7f0000000140)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000180)='./tracing/events/sched/filter\x00', 0x1, 0x0) close_range(r3, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000200)='./proc\x00', &(0x7f0000000240)='proc\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./proc/thread-self/fail-nth\x00', 0x2, 0x10b) write(r4, &(0x7f00000004c0)='7', 0x1) keyctl$read(0xb, 0x0, 0x0, 0x0) sendmsg$xdp(r2, &(0x7f0000002900)={0x0, 0x0, &(0x7f0000002880)=[{&(0x7f00000000c0)="42401f05d6632e8da557", 0xa}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x4}, 0x840) 61.026758ms ago: executing program 2 (id=161): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000002200000017000000440006803c00040067636d860465732900000000000000000000000000000000000000000000000014000000e3de3d7b4cd07ec3ee777de774fc7987cca41989040005"], 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) 283.06µs ago: executing program 2 (id=162): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x8001}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000003c0)=@gcm_128={{0x304}, "d0fd1667ae4a202c", "114f0201045879000000927ca09f9467", 'i~c\r', "f02a681cb6f1bd06"}, 0x28) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001480)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x141) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@ccm_128={{0x303}, "b421eba833d4b156", "56df2295bfda5c4f9fecff61beaa8bb4", "808065e3", "7f1f1c2ab4421d27"}, 0x28) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) recvfrom(r0, &(0x7f0000002800)=""/4071, 0xfffffffffffffdab, 0x17, 0x0, 0x0) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000140)="58ddb007a47a8b1f458ab677d557ca50def8e5bc61dbc50bca64f7e76268cd64007095adfef77465b69ec03139854d6f03d5f9bd019fe046035ef7049f48fcc7321c34faca94ff08f59edaf2ab55eedcc278df823564618627217a527b971bdfa0afd948a6cdb9e05ccaef35c22047246a7b97a8e1b645e51c47b296c759c8dfd56beb8fa15c800ad060ab378a269557bc053d9be903", 0x96}, {&(0x7f0000000300)="2ea63d218bc1023b2e6eceeb92d548803a43d4dddc2433c76650030c188f490311ff86da69fab1539139f6dda31739c2bb4412dd471137e2a53496c5f7707e01ccfb826f2eb96895230862e11d56c19af139de912ac5e68a99080e428443fcfba8b0460290c6275affe9953a97260b0304fd7ef159c9cd30cae1bcc75d568d353575ec3b5293fb80de85c7562804230489274831b2c17dccccc523ada66a46", 0x9f}, {&(0x7f0000000580)="63e73686513c53aec098be4b2dfc27b5be1f5f85f54c24efb8fc94ccaac29f1378e04daa49f8dcbda8b0faff57761a0ce8a311802e5dd07a159721cac7d2250f4359e04727386cc7d1a3e8bf93339f3df1340041f71046f2b1d9a80af70fb8246258d09c310af3bef017fde1fd8ce505cd4858549192a95e512257b6c676a7ebb41230e4e4fb23e9666bfdc8bc2ca77bbd11810836df4a6f3dbe3ee75c34b07c64e1af6d62d54fccb9f281eac16eca7129aa4355fd53", 0xb6}, {&(0x7f0000000500)="de21cff472aa580c2ee9f858", 0xc}, {&(0x7f00000014c0)="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", 0xdbc}], 0x5) setsockopt$sock_int(r0, 0x1, 0x7, &(0x7f00000000c0)=0xffff1884, 0x4) close(0x3) 0s ago: executing program 3 (id=163): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000cc0)={'syz1\x00', {0xfff9, 0x0, 0x248, 0x9b99}, 0x25, [0x9, 0x7, 0x2, 0x6, 0x8, 0x155f, 0x10000006, 0x4, 0x2dcd, 0x1, 0xb4, 0xfa97, 0xa2b9, 0x6, 0x9, 0xe1, 0x6, 0xfc000000, 0x403, 0xbbf, 0x3, 0xfffffff9, 0x101c0, 0xd, 0x0, 0x0, 0x6, 0x4, 0x100002, 0x2, 0x5d6, 0x8001, 0x8a, 0x79, 0x2, 0x10080, 0x2, 0x91, 0x2, 0x4, 0x16, 0x8, 0x5, 0x401, 0x1, 0x405, 0xa7, 0x81, 0x9, 0xf9a2, 0xa9, 0xff, 0xff, 0x2, 0x6, 0x2, 0x1000000, 0x489, 0x7ff, 0x4, 0x4007f, 0xffffffff, 0x6, 0x4], [0x5, 0xfff, 0x1, 0x9, 0x4, 0x8000c66, 0xa8a9, 0x2000086f, 0x7ff, 0x2, 0x7, 0xad, 0x2, 0x809, 0x40, 0xa7, 0x1000, 0x3, 0x200b398, 0x8001, 0x1, 0x6, 0x1c, 0x7, 0x1, 0xfffffffe, 0x3, 0x8, 0xffffff7f, 0x6, 0x6, 0x4c2336d3, 0x4, 0x0, 0xfffbfff4, 0x4, 0x46, 0x5, 0x7, 0xab00060, 0x2, 0x9, 0xffffffff, 0x5, 0x3ff, 0x200, 0x1, 0x7fff, 0x67af, 0x1cc, 0x9, 0x80000004, 0x6, 0x438, 0xa0, 0x9, 0x2, 0x1000, 0x31, 0xfffffff9, 0x18e, 0x1000, 0x2, 0x5], [0x2, 0xfffffffe, 0x9, 0xc, 0x2, 0x69, 0x80000001, 0x5, 0x2, 0x48d, 0x9, 0x200026, 0x7f, 0x400, 0x102, 0x9, 0x41, 0x6, 0xee4b, 0x2800004, 0x1, 0x10, 0x5, 0x9, 0x5, 0x0, 0x9, 0x3, 0xc7, 0xfff, 0x100008, 0x2, 0x400, 0x8, 0x5, 0xd3, 0x8, 0x97f7, 0x3, 0x200000d, 0x3, 0x10010, 0x7, 0xfff, 0x4, 0x7f, 0x9, 0x9, 0x1, 0x100, 0x2, 0x6, 0x7ffe, 0x27, 0xf7cc, 0xd502, 0x8, 0x5, 0x9, 0x6, 0x10000, 0xfffffffd, 0x5, 0xfffffffe], [0xa772, 0x6, 0x5, 0x1af8, 0xbfc, 0x9, 0x5, 0x7f, 0x55, 0x7ff, 0xff, 0x1005, 0x10000001, 0x7, 0x21, 0x4000009, 0x81, 0x7, 0x9d87, 0x8, 0x8, 0x4, 0x140f1, 0x5396, 0x3, 0x6, 0x80008001, 0x7777, 0x1, 0x2, 0x100, 0xd8ce, 0x7fffffff, 0x100009, 0xc, 0x32d, 0x3, 0x1ff, 0x2000803, 0xffffffff, 0x10000, 0x0, 0x8004, 0x7fff, 0x3, 0x6, 0xf, 0xe, 0x408, 0x274, 0x6, 0xfffffff9, 0x4, 0x9, 0x9, 0x4, 0x463f, 0x4, 0x10dab, 0x5, 0x8, 0x13fff, 0xffff, 0x9]}, 0x45c) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)}], 0x1}, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = ioctl$KVM_GET_STATS_FD_cpu(0xffffffffffffffff, 0xaece) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x80) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) move_mount(0xffffffffffffffff, &(0x7f0000000440)='.\x00', 0xffffffffffffff9c, 0x0, 0x262) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000280)={[0x8, 0x4, 0x7, 0x7, 0x5, 0x80000000, 0x1, 0x8001, 0xc646, 0x1, 0x3, 0x3, 0x4, 0x0, 0x8, 0x8000000000000], 0x3000, 0xa402}) sendmsg$TCPDIAG_GETSOCK(r2, &(0x7f00000031c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000880)={0x3d0, 0x12, 0x0, 0x70bd2c, 0x25dfdbff, {0x0, 0x2, 0xc, 0x1, {0x4e23, 0x4e22, [0x1dd, 0x3, 0xffffffff, 0xffffffff], [0x8, 0x7, 0x5, 0x101], 0x0, [0x401, 0x8]}, 0x7fff, 0x6}, [@INET_DIAG_REQ_BYTECODE={0x25, 0x1, "daa516739e470f1c96ec62a2b1ab488f0d48ea84160ea451880859f45886f7f885"}, @INET_DIAG_REQ_BYTECODE={0x92, 0x1, "771d7688fe1fbbdc04a484f4c4085d1dfe2653d0947ef4fef88e741fe24797bceed8c81353d3d004c9eb207ed6831073435371ec0349d3ce7035d4f2687d176edcbcd00ec0912c269942df14eacaec8897dcfb3d36e2cf47b87c0ae5d2c44f3c5b0b17d79c783c6cf18de509f83b9820ae0a17081cbd2f34f65d53c28e8224b4ef9bd65f0945d6edefe89b030e1c"}, @INET_DIAG_REQ_BYTECODE={0xce, 0x1, "cc438cb944e3c00bccb7bc57238af408d28d941f95ebd041a478c31eb88ae688dcfa078b6165bc7f7154f95343f201c9f52578ee8338fe4d88f46fe4287ffe25afc639fbe51458f2e11e0260f05be054bf1c38027977451ed85a94326e9ffc9e78438402efff709b64f45f1f28cd27735b12dcc295a3f197d3ebefb9760e61ef97aa66666846acc8e815a63b8b82ef7d4ffb9e330ccdde04b31ddcdb22d9e7970864c838fd192d5401459c92f94d296f2443c123a93251209c8b7a5150d648f1c1a929d17020d65a5e16"}, @INET_DIAG_REQ_BYTECODE={0x4d, 0x1, "aef303390e61f7e7ee3fb4374e62961a4338bcfe7c103fff2e6cb94fc5f6d19663817921aafb2bce23f07823f4a0b3520b4e412b37b9c8e8f8a38fd8a0c5ab1715224a01f9cc312ed0"}, @INET_DIAG_REQ_BYTECODE={0x35, 0x1, "a84169921566ac06c902af3c3d893a5a85e4f06162a23a4b36a353718054b793b978a21c54952fd301617f5d1ebd7316a6"}, @INET_DIAG_REQ_BYTECODE={0x8e, 0x1, "2b1f9b15364e20e77d6e2a65ccb3ecfc626a0044d37de1c728641c7122dcb6256ff150066c135120ad74ac5e455f75536c0363ac96f7104ff037c1ad181babacf755e7455e4830aaa129a0b4a7aa15ed2149093f7ed385302616adb3bd1427d1a68a4df68652d42068aa560259d2172406141af26ec65e47117d862e75f5149a63bc348a8824ef0acaa2"}, @INET_DIAG_REQ_BYTECODE={0xde, 0x1, "2f86fba2101775eaed143c85ea9c8f16833edffca236e3d5df3750ea577eee944b3b5f55e0c4ae74e43775db6d16cdb3b2e42c27b59c02e2f9e569037e04b203f2202e7fd617f157346e1432f7781f5ee89eeab1ba5446a5f889badb4db52430bd6fea93ef48df5efc69a6688bb858a44cbc50a52611e889b6a360392b68eee841e876bea02a57f274118ec0519df591742588b8cfba05bec230ef7ed6de5c2779694593f86ddd47462663309743adfd47dbe78b2c941cbf162933a7c1710e8ccbf9b5d7a13e9df0c6d92c1a2becc8ed48b57b78de7a72fd73ab"}]}, 0x3d0}, 0x1, 0x0, 0x0, 0x20004880}, 0x4000840) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0xfffffffffffffffe, 0x40000000000180, 0x4, 0x7, 0xf2, 0xd, 0x7fffffffffffe, 0x7, 0x5, 0xb, 0x7, 0xfffffffffffffff8, 0x9, 0xc], 0x25000, 0x304}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = dup(r5) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r5, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text32={0x20, 0x0}], 0x1, 0x50, 0x0, 0x0) ioctl$KVM_RUN(r7, 0xae80, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.159' (ED25519) to the list of known hosts. [ 19.236185][ T36] audit: type=1400 audit(1792452132.580:64): avc: denied { mounton } for pid=286 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 19.237296][ T286] cgroup: Unknown subsys name 'net' [ 19.258823][ T36] audit: type=1400 audit(1792452132.580:65): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.286084][ T36] audit: type=1400 audit(1792452132.610:66): avc: denied { unmount } for pid=286 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 19.286264][ T286] cgroup: Unknown subsys name 'devices' [ 19.410859][ T286] cgroup: Unknown subsys name 'hugetlb' [ 19.416456][ T286] cgroup: Unknown subsys name 'rlimit' [ 19.507725][ T36] audit: type=1400 audit(1792452132.850:67): avc: denied { setattr } for pid=286 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 19.530879][ T36] audit: type=1400 audit(1792452132.850:68): avc: denied { mounton } for pid=286 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 19.555697][ T36] audit: type=1400 audit(1792452132.850:69): avc: denied { mount } for pid=286 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 19.563958][ T288] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 19.587808][ T36] audit: type=1400 audit(1792452132.940:70): avc: denied { relabelto } for pid=288 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.613269][ T36] audit: type=1400 audit(1792452132.940:71): avc: denied { write } for pid=288 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.639983][ T36] audit: type=1400 audit(1792452132.990:72): avc: denied { read } for pid=286 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.665620][ T36] audit: type=1400 audit(1792452132.990:73): avc: denied { open } for pid=286 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 19.665851][ T286] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.472521][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.479721][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.486760][ T296] bridge_slave_0: entered allmulticast mode [ 20.493111][ T296] bridge_slave_0: entered promiscuous mode [ 20.505355][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.512540][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.519624][ T296] bridge_slave_1: entered allmulticast mode [ 20.525761][ T296] bridge_slave_1: entered promiscuous mode [ 20.549649][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.556691][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.563769][ T293] bridge_slave_0: entered allmulticast mode [ 20.569994][ T293] bridge_slave_0: entered promiscuous mode [ 20.576118][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.583238][ T294] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.590398][ T294] bridge_slave_0: entered allmulticast mode [ 20.596524][ T294] bridge_slave_0: entered promiscuous mode [ 20.604096][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.611201][ T294] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.618249][ T294] bridge_slave_1: entered allmulticast mode [ 20.624598][ T294] bridge_slave_1: entered promiscuous mode [ 20.635653][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.642734][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.649794][ T293] bridge_slave_1: entered allmulticast mode [ 20.655890][ T293] bridge_slave_1: entered promiscuous mode [ 20.687493][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.694611][ T295] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.701722][ T295] bridge_slave_0: entered allmulticast mode [ 20.707847][ T295] bridge_slave_0: entered promiscuous mode [ 20.714256][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.721332][ T295] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.728375][ T295] bridge_slave_1: entered allmulticast mode [ 20.734625][ T295] bridge_slave_1: entered promiscuous mode [ 20.870538][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.877583][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.884913][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.891937][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.905603][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.912658][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.919925][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.926938][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.936028][ T296] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.943081][ T296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.950347][ T296] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.957356][ T296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 20.967519][ T294] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.974571][ T294] bridge0: port 2(bridge_slave_1) entered forwarding state [ 20.981849][ T294] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.988887][ T294] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.023549][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.030802][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.037986][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.045280][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.052495][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.059786][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.066964][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.074262][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.094932][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.102003][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.109536][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.116542][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.135791][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.142835][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.162445][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.169485][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.176866][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.183899][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.191761][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.198794][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.207118][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.214158][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.221954][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.228985][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.251463][ T294] veth0_vlan: entered promiscuous mode [ 21.272892][ T296] veth0_vlan: entered promiscuous mode [ 21.289393][ T293] veth0_vlan: entered promiscuous mode [ 21.300670][ T294] veth1_macvtap: entered promiscuous mode [ 21.311268][ T295] veth0_vlan: entered promiscuous mode [ 21.334909][ T295] veth1_macvtap: entered promiscuous mode [ 21.347129][ T294] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 21.349118][ T293] veth1_macvtap: entered promiscuous mode [ 21.369672][ T296] veth1_macvtap: entered promiscuous mode [ 21.448471][ T320] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 21.520203][ T329] ======================================================= [ 21.520203][ T329] WARNING: The mand mount option has been deprecated and [ 21.520203][ T329] and is ignored by this kernel. Remove the mand [ 21.520203][ T329] option from the mount to silence this warning. [ 21.520203][ T329] ======================================================= [ 21.641223][ T339] fuse: Bad value for 'fd' [ 21.665017][ T341] UDC core: g1: couldn't find an available UDC or it's busy [ 21.848742][ T9] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 21.868956][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 22.009684][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 22.028901][ T9] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 22.049301][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 22.054940][ T9] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 22.064130][ T9] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 22.072347][ T9] usb 2-1: Manufacturer: syz [ 22.077342][ T10] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 22.085843][ T10] usb 1-1: config 0 has no interface number 0 [ 22.092357][ T9] usb 2-1: config 0 descriptor?? [ 22.102026][ T10] usb 1-1: config 0 interface 184 has no altsetting 0 [ 22.115552][ T10] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 22.125347][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 22.133624][ T10] usb 1-1: Product: syz [ 22.137798][ T10] usb 1-1: Manufacturer: syz [ 22.142950][ T10] usb 1-1: SerialNumber: syz [ 22.152774][ T10] usb 1-1: config 0 descriptor?? [ 22.160352][ T10] smsc75xx v1.0.0 [ 22.390412][ T364] UDC core: g1: couldn't find an available UDC or it's busy [ 22.769386][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 22.780262][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 22.808673][ T31] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 22.881140][ T387] syzkaller0: entered promiscuous mode [ 22.886686][ T387] syzkaller0: entered allmulticast mode [ 22.959021][ T31] usb 3-1: no configurations [ 22.963641][ T31] usb 3-1: can't read configurations, error -22 [ 23.098680][ T31] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 23.249191][ T31] usb 3-1: no configurations [ 23.253853][ T31] usb 3-1: can't read configurations, error -22 [ 23.260649][ T31] usb usb3-port1: attempt power cycle [ 23.598808][ T31] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 23.619456][ T31] usb 3-1: no configurations [ 23.624086][ T31] usb 3-1: can't read configurations, error -22 [ 23.758723][ T31] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 23.779481][ T31] usb 3-1: no configurations [ 23.784169][ T31] usb 3-1: can't read configurations, error -22 [ 23.790917][ T31] usb usb3-port1: unable to enumerate USB device [ 24.069289][ T398] UDC core: g1: couldn't find an available UDC or it's busy [ 24.199968][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 24.211879][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 24.221648][ T10] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 24.234123][ T10] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -71 [ 24.243566][ T10] usb 1-1: USB disconnect, device number 2 [ 24.563996][ T36] kauditd_printk_skb: 67 callbacks suppressed [ 24.564012][ T36] audit: type=1400 audit(1792452137.910:141): avc: denied { mmap_zero } for pid=412 comm="syz.3.35" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=memprotect permissive=1 [ 24.589643][ T36] audit: type=1400 audit(1792452137.930:142): avc: denied { create } for pid=412 comm="syz.3.35" anonclass=[io_uring] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.610594][ T36] audit: type=1400 audit(1792452137.930:143): avc: denied { map } for pid=412 comm="syz.3.35" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.634539][ T36] audit: type=1400 audit(1792452137.930:144): avc: denied { read write } for pid=412 comm="syz.3.35" path="anon_inode:[io_uring]" dev="anon_inodefs" ino=4224 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 24.636475][ T9] usb 2-1: USB disconnect, device number 2 [ 24.705433][ T36] audit: type=1400 audit(1792452138.050:145): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 24.725408][ T36] audit: type=1400 audit(1792452138.050:146): avc: denied { create } for pid=418 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 24.745914][ T36] audit: type=1400 audit(1792452138.050:147): avc: denied { create } for pid=418 comm="syz.0.38" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 24.767778][ T36] audit: type=1400 audit(1792452138.120:148): avc: denied { map } for pid=418 comm="syz.0.38" path="socket:[3944]" dev="sockfs" ino=3944 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 24.798921][ T36] audit: type=1400 audit(1792452138.150:149): avc: denied { read } for pid=418 comm="syz.0.38" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.819803][ T36] audit: type=1400 audit(1792452138.150:150): avc: denied { open } for pid=418 comm="syz.0.38" path="net:[4026532302]" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 24.848663][ T31] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 24.988656][ T9] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 24.999800][ T31] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 25.007812][ T31] usb 4-1: config 0 has no interface number 0 [ 25.013934][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 25.024839][ T31] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 25.034651][ T31] usb 4-1: New USB device found, idVendor=041e, idProduct=2801, bcdDevice= 0.00 [ 25.043724][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 25.052312][ T31] usb 4-1: config 0 descriptor?? [ 25.140032][ T9] usb 2-1: unable to get BOS descriptor or descriptor too short [ 25.148035][ T9] usb 2-1: not running at top speed; connect to a high speed hub [ 25.157969][ T9] usb 2-1: New USB device found, idVendor=1235, idProduct=000a, bcdDevice= 0.40 [ 25.167324][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.175359][ T9] usb 2-1: Product: syz [ 25.179626][ T9] usb 2-1: Manufacturer: syz [ 25.184207][ T9] usb 2-1: SerialNumber: syz [ 25.393990][ T417] process 'syz.1.37' launched '/dev/fd/8/./file0' with NULL argv: empty string added [ 25.409473][ T417] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 25.419137][ T417] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 25.446877][ T9] usb 2-1: USB disconnect, device number 3 [ 25.460489][ T401] udevd[401]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 25.511233][ T433] UDC core: g1: couldn't find an available UDC or it's busy [ 25.527866][ T31] usbhid 4-1:0.1: can't add hid device: -71 [ 25.534096][ T31] usbhid 4-1:0.1: probe with driver usbhid failed with error -71 [ 25.543319][ T31] usb 4-1: USB disconnect, device number 2 [ 25.807429][ T451] FAULT_INJECTION: forcing a failure. [ 25.807429][ T451] name failslab, interval 1, probability 0, space 0, times 1 [ 25.820090][ T451] CPU: 0 UID: 0 PID: 451 Comm: syz.2.46 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 25.820119][ T451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 25.820138][ T451] Call Trace: [ 25.820145][ T451] [ 25.820152][ T451] __dump_stack+0x21/0x30 [ 25.820179][ T451] dump_stack_lvl+0x140/0x1c0 [ 25.820193][ T451] ? __cfi_dump_stack_lvl+0x10/0x10 [ 25.820209][ T451] dump_stack+0x19/0x20 [ 25.820222][ T451] should_fail_ex+0x3c2/0x510 [ 25.820232][ T451] should_failslab+0xac/0x100 [ 25.820243][ T451] kmem_cache_alloc_noprof+0x42/0x410 [ 25.820256][ T451] ? ip6_route_output_flags+0x313/0x470 [ 25.820270][ T451] ? __inet_hash_connect+0x7b9/0x17f0 [ 25.820280][ T451] ? inet_sk_get_local_port_range+0xa2/0x1d0 [ 25.820291][ T451] __inet_hash_connect+0x7b9/0x17f0 [ 25.820301][ T451] ? __cfi___inet6_check_established+0x10/0x10 [ 25.820316][ T451] ? __cfi___inet_hash_connect+0x10/0x10 [ 25.820325][ T451] ? dst_release+0xe3/0x240 [ 25.820339][ T451] ? sk_setup_caps+0x68b/0x8f0 [ 25.820350][ T451] inet6_hash_connect+0x95/0xe0 [ 25.820362][ T451] tcp_v6_connect+0xe06/0x17f0 [ 25.820374][ T451] ? tcp_sendmsg_locked+0x4381/0x4ac0 [ 25.820392][ T451] ? __cfi_tcp_v6_connect+0x10/0x10 [ 25.820403][ T451] ? do_syscall_64+0x57/0xf0 [ 25.820414][ T451] __inet_stream_connect+0x272/0xf10 [ 25.820430][ T451] ? __cfi___inet_stream_connect+0x10/0x10 [ 25.820444][ T451] ? kasan_save_alloc_info+0x3a/0x50 [ 25.820456][ T451] ? __kasan_kmalloc+0x96/0xb0 [ 25.820465][ T451] ? __kmalloc_cache_noprof+0x23c/0x470 [ 25.820482][ T451] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 25.820495][ T451] tcp_sendmsg_locked+0x4431/0x4ac0 [ 25.820508][ T451] ? avc_has_perm_noaudit+0x26b/0x360 [ 25.820519][ T451] ? avc_has_perm_noaudit+0x289/0x360 [ 25.820529][ T451] ? __kasan_check_write+0x18/0x20 [ 25.820542][ T451] ? _raw_spin_lock_bh+0x96/0x130 [ 25.820551][ T451] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 25.820559][ T451] ? kstrtouint_from_user+0x117/0x170 [ 25.820569][ T451] ? _raw_spin_unlock_bh+0x54/0x60 [ 25.820602][ T451] ? lock_sock_nested+0x216/0x2a0 [ 25.820616][ T451] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 25.820629][ T451] ? __kasan_check_write+0x18/0x20 [ 25.820641][ T451] ? check_stack_object+0x10f/0x150 [ 25.820655][ T451] ? __check_object_size+0xdc/0x870 [ 25.820668][ T451] ? __cfi_tcp_sendmsg+0x10/0x10 [ 25.820680][ T451] tcp_sendmsg+0x3e/0xd0 [ 25.820691][ T451] ? __cfi_tcp_sendmsg+0x10/0x10 [ 25.820704][ T451] inet6_sendmsg+0xb7/0x120 [ 25.820718][ T451] ? __cfi_inet6_sendmsg+0x10/0x10 [ 25.820731][ T451] __sys_sendto+0x4aa/0x6e0 [ 25.820742][ T451] ? __cfi___sys_sendto+0x10/0x10 [ 25.820753][ T451] ? __kasan_check_write+0x18/0x20 [ 25.820767][ T451] ? __cfi_ksys_write+0x10/0x10 [ 25.820781][ T451] __x64_sys_sendto+0xe9/0x100 [ 25.820792][ T451] x64_sys_call+0x2c2c/0x2ee0 [ 25.820801][ T451] do_syscall_64+0x57/0xf0 [ 25.820810][ T451] ? clear_bhb_loop+0x50/0xa0 [ 25.820823][ T451] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 25.820834][ T451] RIP: 0033:0x7f76a1f9e559 [ 25.820849][ T451] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 25.820857][ T451] RSP: 002b:00007f76a2dd6028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 25.820874][ T451] RAX: ffffffffffffffda RBX: 00007f76a2225fa0 RCX: 00007f76a1f9e559 [ 25.820882][ T451] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 25.820888][ T451] RBP: 00007f76a2dd6090 R08: 00002000000003c0 R09: 000000000000001c [ 25.820894][ T451] R10: 0000000024040014 R11: 0000000000000246 R12: 0000000000000001 [ 25.820901][ T451] R13: 00007f76a2226038 R14: 00007f76a2225fa0 R15: 00007ffc53bde078 [ 25.820909][ T451] [ 26.252411][ T459] UDC core: g1: couldn't find an available UDC or it's busy [ 26.264116][ T464] UDC core: g1: couldn't find an available UDC or it's busy [ 26.348695][ T9] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 26.412442][ T472] FAULT_INJECTION: forcing a failure. [ 26.412442][ T472] name failslab, interval 1, probability 0, space 0, times 0 [ 26.425094][ T472] CPU: 0 UID: 0 PID: 472 Comm: syz.1.55 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 26.425125][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.425137][ T472] Call Trace: [ 26.425143][ T472] [ 26.425150][ T472] __dump_stack+0x21/0x30 [ 26.425182][ T472] dump_stack_lvl+0x140/0x1c0 [ 26.425209][ T472] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.425236][ T472] dump_stack+0x19/0x20 [ 26.425261][ T472] should_fail_ex+0x3c2/0x510 [ 26.425280][ T472] should_failslab+0xac/0x100 [ 26.425298][ T472] kmem_cache_alloc_noprof+0x42/0x410 [ 26.425322][ T472] ? inet_bind2_bucket_create+0x41/0x610 [ 26.425348][ T472] ? _raw_spin_lock+0x92/0x120 [ 26.425365][ T472] inet_bind2_bucket_create+0x41/0x610 [ 26.425391][ T472] __inet_hash_connect+0xecb/0x17f0 [ 26.425412][ T472] ? __cfi___inet_hash_connect+0x10/0x10 [ 26.425430][ T472] ? dst_release+0xe3/0x240 [ 26.425454][ T472] ? sk_setup_caps+0x68b/0x8f0 [ 26.425476][ T472] inet6_hash_connect+0x95/0xe0 [ 26.425499][ T472] tcp_v6_connect+0xe06/0x17f0 [ 26.425520][ T472] ? tcp_sendmsg_locked+0x4381/0x4ac0 [ 26.425542][ T472] ? __cfi_tcp_v6_connect+0x10/0x10 [ 26.425558][ T472] ? do_syscall_64+0x57/0xf0 [ 26.425579][ T472] __inet_stream_connect+0x272/0xf10 [ 26.425607][ T472] ? __cfi___inet_stream_connect+0x10/0x10 [ 26.425633][ T472] ? kasan_save_alloc_info+0x3a/0x50 [ 26.425656][ T472] ? __kasan_kmalloc+0x96/0xb0 [ 26.425673][ T472] ? __kmalloc_cache_noprof+0x23c/0x470 [ 26.425700][ T472] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 26.425725][ T472] tcp_sendmsg_locked+0x4431/0x4ac0 [ 26.425749][ T472] ? avc_has_perm_noaudit+0x26b/0x360 [ 26.425769][ T472] ? avc_has_perm_noaudit+0x289/0x360 [ 26.425789][ T472] ? __kasan_check_write+0x18/0x20 [ 26.425812][ T472] ? _raw_spin_lock_bh+0x96/0x130 [ 26.425829][ T472] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 26.425846][ T472] ? kstrtouint_from_user+0x117/0x170 [ 26.425865][ T472] ? _raw_spin_unlock_bh+0x54/0x60 [ 26.425881][ T472] ? lock_sock_nested+0x216/0x2a0 [ 26.425904][ T472] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 26.425924][ T472] ? __kasan_check_write+0x18/0x20 [ 26.425946][ T472] ? check_stack_object+0x10f/0x150 [ 26.425972][ T472] ? __check_object_size+0xdc/0x870 [ 26.425997][ T472] ? __cfi_tcp_sendmsg+0x10/0x10 [ 26.426020][ T472] tcp_sendmsg+0x3e/0xd0 [ 26.426052][ T472] ? __cfi_tcp_sendmsg+0x10/0x10 [ 26.426075][ T472] inet6_sendmsg+0xb7/0x120 [ 26.426100][ T472] ? __cfi_inet6_sendmsg+0x10/0x10 [ 26.426126][ T472] __sys_sendto+0x4aa/0x6e0 [ 26.426146][ T472] ? __cfi___sys_sendto+0x10/0x10 [ 26.426168][ T472] ? __kasan_check_write+0x18/0x20 [ 26.426193][ T472] ? __cfi_ksys_write+0x10/0x10 [ 26.426220][ T472] __x64_sys_sendto+0xe9/0x100 [ 26.426241][ T472] x64_sys_call+0x2c2c/0x2ee0 [ 26.426260][ T472] do_syscall_64+0x57/0xf0 [ 26.426277][ T472] ? clear_bhb_loop+0x50/0xa0 [ 26.426300][ T472] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.426321][ T472] RIP: 0033:0x7f7966b9e559 [ 26.426337][ T472] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 26.426352][ T472] RSP: 002b:00007f7967a23028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 26.426373][ T472] RAX: ffffffffffffffda RBX: 00007f7966e25fa0 RCX: 00007f7966b9e559 [ 26.426388][ T472] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 26.426400][ T472] RBP: 00007f7967a23090 R08: 00002000000003c0 R09: 000000000000001c [ 26.426413][ T472] R10: 0000000024040014 R11: 0000000000000246 R12: 0000000000000001 [ 26.426425][ T472] R13: 00007f7966e26038 R14: 00007f7966e25fa0 R15: 00007ffe19e5a988 [ 26.426441][ T472] [ 26.473250][ T477] FAULT_INJECTION: forcing a failure. [ 26.473250][ T477] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 26.514762][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 26.518349][ T482] Zero length message leads to an empty skb [ 26.521108][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 26.527661][ T477] CPU: 1 UID: 0 PID: 477 Comm: syz.3.57 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 26.527689][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 26.527701][ T477] Call Trace: [ 26.527706][ T477] [ 26.527713][ T477] __dump_stack+0x21/0x30 [ 26.527742][ T477] dump_stack_lvl+0x140/0x1c0 [ 26.527767][ T477] ? __cfi_dump_stack_lvl+0x10/0x10 [ 26.527792][ T477] ? check_stack_object+0x138/0x150 [ 26.527816][ T477] dump_stack+0x19/0x20 [ 26.527840][ T477] should_fail_ex+0x3c2/0x510 [ 26.527857][ T477] should_fail+0xf/0x20 [ 26.527873][ T477] should_fail_usercopy+0x1e/0x30 [ 26.527890][ T477] _copy_to_user+0x24/0xa0 [ 26.527911][ T477] simple_read_from_buffer+0xed/0x160 [ 26.527932][ T477] proc_fail_nth_read+0x1aa/0x220 [ 26.527953][ T477] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 26.527973][ T477] ? bpf_lsm_file_permission+0xd/0x20 [ 26.527991][ T477] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 26.528011][ T477] vfs_read+0x28b/0xc70 [ 26.528034][ T477] ? __cfi_vfs_read+0x10/0x10 [ 26.528056][ T477] ? __kasan_check_write+0x18/0x20 [ 26.528079][ T477] ? mutex_lock+0x97/0x1d0 [ 26.528097][ T477] ? __cfi_mutex_lock+0x10/0x10 [ 26.528119][ T477] ksys_read+0x145/0x260 [ 26.528142][ T477] ? __cfi_ksys_read+0x10/0x10 [ 26.528166][ T477] ? __kasan_check_read+0x15/0x20 [ 26.528188][ T477] __x64_sys_read+0x7f/0x90 [ 26.528210][ T477] x64_sys_call+0x2638/0x2ee0 [ 26.528228][ T477] do_syscall_64+0x57/0xf0 [ 26.528244][ T477] ? clear_bhb_loop+0x50/0xa0 [ 26.528264][ T477] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 26.528284][ T477] RIP: 0033:0x7f2675f5ed8e [ 26.528300][ T477] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 26.528314][ T477] RSP: 002b:00007f2676dfcfe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 26.528334][ T477] RAX: ffffffffffffffda RBX: 00007f2676dfd6c0 RCX: 00007f2675f5ed8e [ 26.528347][ T477] RDX: 000000000000000f RSI: 00007f2676dfd0a0 RDI: 0000000000000003 [ 26.528359][ T477] RBP: 00007f2676dfd090 R08: 0000000000000000 R09: 0000000000000000 [ 26.528370][ T477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 26.528381][ T477] R13: 00007f2676226038 R14: 00007f2676225fa0 R15: 00007fff811ff6e8 [ 26.528396][ T477] [ 27.074973][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 27.086281][ T9] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 27.094342][ T9] usb 1-1: Manufacturer: syz [ 27.101500][ T9] usb 1-1: config 0 descriptor?? [ 27.110189][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 27.126151][ T489] UDC core: g1: couldn't find an available UDC or it's busy [ 27.142173][ T494] UDC core: g1: couldn't find an available UDC or it's busy [ 27.348192][ T508] FAULT_INJECTION: forcing a failure. [ 27.348192][ T508] name failslab, interval 1, probability 0, space 0, times 0 [ 27.354522][ T509] syzkaller1: entered promiscuous mode [ 27.361135][ T508] CPU: 1 UID: 0 PID: 508 Comm: syz.3.69 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 27.361162][ T508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 27.361174][ T508] Call Trace: [ 27.361179][ T508] [ 27.361186][ T508] __dump_stack+0x21/0x30 [ 27.361216][ T508] dump_stack_lvl+0x140/0x1c0 [ 27.361241][ T508] ? __cfi_dump_stack_lvl+0x10/0x10 [ 27.361265][ T508] ? stack_trace_save+0xaa/0x100 [ 27.361291][ T508] dump_stack+0x19/0x20 [ 27.361314][ T508] should_fail_ex+0x3c2/0x510 [ 27.361332][ T508] should_failslab+0xac/0x100 [ 27.361349][ T508] kmem_cache_alloc_node_noprof+0x45/0x420 [ 27.361373][ T508] ? __alloc_skb+0x10c/0x360 [ 27.361390][ T508] ? __sys_sendto+0x4aa/0x6e0 [ 27.361409][ T508] ? __x64_sys_sendto+0xe9/0x100 [ 27.361428][ T508] ? x64_sys_call+0x2c2c/0x2ee0 [ 27.361446][ T508] __alloc_skb+0x10c/0x360 [ 27.361468][ T508] tcp_stream_alloc_skb+0x43/0x370 [ 27.361490][ T508] ? __asan_memset+0x39/0x50 [ 27.361510][ T508] tcp_connect+0x1743/0x5ad0 [ 27.361542][ T508] ? kmem_cache_alloc_noprof+0x1e2/0x410 [ 27.361567][ T508] ? __cfi_tcp_connect+0x10/0x10 [ 27.361589][ T508] ? __inet_hash_connect+0x12a4/0x17f0 [ 27.361607][ T508] ? read_tsc+0xd/0x20 [ 27.361632][ T508] ? tcp_fastopen_defer_connect+0x105/0x480 [ 27.361658][ T508] ? __cfi_tcp_fastopen_defer_connect+0x10/0x10 [ 27.361688][ T508] ? inet6_hash_connect+0x95/0xe0 [ 27.361710][ T508] tcp_v6_connect+0x1082/0x17f0 [ 27.361731][ T508] ? tcp_sendmsg_locked+0x4381/0x4ac0 [ 27.361753][ T508] ? __cfi_tcp_v6_connect+0x10/0x10 [ 27.361772][ T508] ? do_syscall_64+0x57/0xf0 [ 27.361792][ T508] __inet_stream_connect+0x272/0xf10 [ 27.361818][ T508] ? __cfi___inet_stream_connect+0x10/0x10 [ 27.361843][ T508] ? kasan_save_alloc_info+0x3a/0x50 [ 27.361864][ T508] ? __kasan_kmalloc+0x96/0xb0 [ 27.361880][ T508] ? __kmalloc_cache_noprof+0x23c/0x470 [ 27.361904][ T508] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 27.361927][ T508] tcp_sendmsg_locked+0x4431/0x4ac0 [ 27.361950][ T508] ? avc_has_perm_noaudit+0x26b/0x360 [ 27.361968][ T508] ? avc_has_perm_noaudit+0x289/0x360 [ 27.361986][ T508] ? __kasan_check_write+0x18/0x20 [ 27.362008][ T508] ? _raw_spin_lock_bh+0x96/0x130 [ 27.362024][ T508] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 27.362040][ T508] ? kstrtouint_from_user+0x117/0x170 [ 27.362061][ T508] ? _raw_spin_unlock_bh+0x54/0x60 [ 27.362077][ T508] ? lock_sock_nested+0x216/0x2a0 [ 27.362100][ T508] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 27.362122][ T508] ? __kasan_check_write+0x18/0x20 [ 27.362144][ T508] ? check_stack_object+0x10f/0x150 [ 27.362167][ T508] ? __check_object_size+0xdc/0x870 [ 27.362189][ T508] ? __cfi_tcp_sendmsg+0x10/0x10 [ 27.362210][ T508] tcp_sendmsg+0x3e/0xd0 [ 27.362231][ T508] ? __cfi_tcp_sendmsg+0x10/0x10 [ 27.362252][ T508] inet6_sendmsg+0xb7/0x120 [ 27.362276][ T508] ? __cfi_inet6_sendmsg+0x10/0x10 [ 27.362300][ T508] __sys_sendto+0x4aa/0x6e0 [ 27.362319][ T508] ? __cfi___sys_sendto+0x10/0x10 [ 27.362340][ T508] ? __kasan_check_write+0x18/0x20 [ 27.362363][ T508] ? __cfi_ksys_write+0x10/0x10 [ 27.362387][ T508] __x64_sys_sendto+0xe9/0x100 [ 27.362406][ T508] x64_sys_call+0x2c2c/0x2ee0 [ 27.362424][ T508] do_syscall_64+0x57/0xf0 [ 27.362439][ T508] ? clear_bhb_loop+0x50/0xa0 [ 27.362460][ T508] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 27.362480][ T508] RIP: 0033:0x7f2675f9e559 [ 27.362495][ T508] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 27.362510][ T508] RSP: 002b:00007f2676dfd028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 27.362529][ T508] RAX: ffffffffffffffda RBX: 00007f2676225fa0 RCX: 00007f2675f9e559 [ 27.362548][ T508] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 27.362559][ T508] RBP: 00007f2676dfd090 R08: 00002000000003c0 R09: 000000000000001c [ 27.362572][ T508] R10: 0000000024040014 R11: 0000000000000246 R12: 0000000000000001 [ 27.362582][ T508] R13: 00007f2676226038 R14: 00007f2676225fa0 R15: 00007fff811ff6e8 [ 27.362598][ T508] [ 27.488666][ T311] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 27.490108][ T509] syzkaller1: entered allmulticast mode [ 27.529746][ T516] netlink: 76 bytes leftover after parsing attributes in process `syz.3.72'. [ 27.844996][ T535] UDC core: g1: couldn't find an available UDC or it's busy [ 27.869287][ T311] usb 3-1: not running at top speed; connect to a high speed hub [ 27.877664][ T311] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 27.888048][ T311] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 27.897354][ T311] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 27.908189][ T311] usb 3-1: Found UVC 1.00 device (046d:0825) [ 27.915472][ T311] usb 3-1: No streaming interface found for terminal 2. [ 27.916938][ T539] UDC core: g1: couldn't find an available UDC or it's busy [ 28.090400][ T545] overlayfs: missing 'workdir' [ 28.097630][ T311] hid-generic 0000:0000:0000.0001: unknown main item tag 0x0 [ 28.119860][ T380] usb 3-1: USB disconnect, device number 6 [ 28.126564][ T311] hid-generic 0000:0000:0000.0001: hidraw0: HID v0.00 Device [syz1] on syz0 [ 28.250123][ T548] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=548 comm=syz.3.78 [ 28.799176][ T547] usb 1-1: USB disconnect, device number 3 [ 28.879385][ T556] FAULT_INJECTION: forcing a failure. [ 28.879385][ T556] name failslab, interval 1, probability 0, space 0, times 0 [ 28.892023][ T556] CPU: 1 UID: 0 PID: 556 Comm: syz.0.82 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 28.892040][ T556] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 28.892048][ T556] Call Trace: [ 28.892052][ T556] [ 28.892056][ T556] __dump_stack+0x21/0x30 [ 28.892077][ T556] dump_stack_lvl+0x140/0x1c0 [ 28.892091][ T556] ? __cfi_dump_stack_lvl+0x10/0x10 [ 28.892105][ T556] ? __cfi_ip6_dst_check+0x10/0x10 [ 28.892118][ T556] ? __sk_dst_check+0x102/0x230 [ 28.892128][ T556] dump_stack+0x19/0x20 [ 28.892142][ T556] should_fail_ex+0x3c2/0x510 [ 28.892153][ T556] should_failslab+0xac/0x100 [ 28.892162][ T556] __kmalloc_cache_noprof+0x41/0x470 [ 28.892176][ T556] ? read_tsc+0xd/0x20 [ 28.892190][ T556] ? tcp_get_metrics+0xd9f/0x13e0 [ 28.892204][ T556] ? ktime_get+0x1df/0x210 [ 28.892216][ T556] tcp_get_metrics+0xd9f/0x13e0 [ 28.892229][ T556] tcp_fastopen_cache_set+0x6b/0x420 [ 28.892243][ T556] tcp_rcv_fastopen_synack+0x2b4/0xe60 [ 28.892256][ T556] ? __kasan_check_read+0x15/0x20 [ 28.892269][ T556] ? tcp_finish_connect+0x32c/0x5c0 [ 28.892279][ T556] tcp_rcv_state_process+0x1d0b/0x43e0 [ 28.892291][ T556] ? __cfi_tcp_rcv_state_process+0x10/0x10 [ 28.892303][ T556] ? tcp_v6_connect+0x10a9/0x17f0 [ 28.892315][ T556] tcp_v6_do_rcv+0x62b/0x1310 [ 28.892325][ T556] ? __cfi_tcp_v6_do_rcv+0x10/0x10 [ 28.892339][ T556] __release_sock+0x15d/0x400 [ 28.892352][ T556] release_sock+0x64/0x1f0 [ 28.892361][ T556] __inet_stream_connect+0x8a1/0xf10 [ 28.892376][ T556] ? __cfi___inet_stream_connect+0x10/0x10 [ 28.892390][ T556] ? kasan_save_alloc_info+0x3a/0x50 [ 28.892404][ T556] ? __cfi_woken_wake_function+0x10/0x10 [ 28.892419][ T556] ? __kmalloc_cache_noprof+0x23c/0x470 [ 28.892433][ T556] tcp_sendmsg_fastopen+0x3aa/0x6f0 [ 28.892446][ T556] tcp_sendmsg_locked+0x4431/0x4ac0 [ 28.892459][ T556] ? avc_has_perm_noaudit+0x26b/0x360 [ 28.892469][ T556] ? avc_has_perm_noaudit+0x289/0x360 [ 28.892479][ T556] ? __kasan_check_write+0x18/0x20 [ 28.892492][ T556] ? _raw_spin_lock_bh+0x96/0x130 [ 28.892501][ T556] ? __cfi__raw_spin_lock_bh+0x10/0x10 [ 28.892509][ T556] ? kstrtouint_from_user+0x117/0x170 [ 28.892519][ T556] ? _raw_spin_unlock_bh+0x54/0x60 [ 28.892528][ T556] ? lock_sock_nested+0x216/0x2a0 [ 28.892542][ T556] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 28.892555][ T556] ? __kasan_check_write+0x18/0x20 [ 28.892568][ T556] ? check_stack_object+0x10f/0x150 [ 28.892582][ T556] ? __check_object_size+0xdc/0x870 [ 28.892595][ T556] ? __cfi_tcp_sendmsg+0x10/0x10 [ 28.892607][ T556] tcp_sendmsg+0x3e/0xd0 [ 28.892618][ T556] ? __cfi_tcp_sendmsg+0x10/0x10 [ 28.892630][ T556] inet6_sendmsg+0xb7/0x120 [ 28.892647][ T556] ? __cfi_inet6_sendmsg+0x10/0x10 [ 28.892660][ T556] __sys_sendto+0x4aa/0x6e0 [ 28.892671][ T556] ? __cfi___sys_sendto+0x10/0x10 [ 28.892682][ T556] ? __kasan_check_write+0x18/0x20 [ 28.892696][ T556] ? __cfi_ksys_write+0x10/0x10 [ 28.892710][ T556] __x64_sys_sendto+0xe9/0x100 [ 28.892721][ T556] x64_sys_call+0x2c2c/0x2ee0 [ 28.892731][ T556] do_syscall_64+0x57/0xf0 [ 28.892740][ T556] ? clear_bhb_loop+0x50/0xa0 [ 28.892753][ T556] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 28.892765][ T556] RIP: 0033:0x7f6e7639e559 [ 28.892774][ T556] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.892783][ T556] RSP: 002b:00007f6e7718f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 28.892794][ T556] RAX: ffffffffffffffda RBX: 00007f6e76625fa0 RCX: 00007f6e7639e559 [ 28.892802][ T556] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 28.892808][ T556] RBP: 00007f6e7718f090 R08: 00002000000003c0 R09: 000000000000001c [ 28.892814][ T556] R10: 0000000024040014 R11: 0000000000000246 R12: 0000000000000001 [ 28.892821][ T556] R13: 00007f6e76626038 R14: 00007f6e76625fa0 R15: 00007ffdfc1d2c08 [ 28.892829][ T556] [ 28.892981][ T380] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 29.119834][ T565] UDC core: g1: couldn't find an available UDC or it's busy [ 29.258650][ T380] usb 3-1: device descriptor read/64, error -71 [ 29.319129][ T570] UDC core: g1: couldn't find an available UDC or it's busy [ 29.497016][ T584] FAULT_INJECTION: forcing a failure. [ 29.497016][ T584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 29.510154][ T584] CPU: 1 UID: 0 PID: 584 Comm: syz.0.92 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 29.510183][ T584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.510194][ T584] Call Trace: [ 29.510200][ T584] [ 29.510207][ T584] __dump_stack+0x21/0x30 [ 29.510236][ T584] dump_stack_lvl+0x140/0x1c0 [ 29.510261][ T584] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.510282][ T584] ? check_stack_object+0x138/0x150 [ 29.510297][ T584] dump_stack+0x19/0x20 [ 29.510310][ T584] should_fail_ex+0x3c2/0x510 [ 29.510328][ T584] should_fail+0xf/0x20 [ 29.510337][ T584] should_fail_usercopy+0x1e/0x30 [ 29.510347][ T584] _copy_to_user+0x24/0xa0 [ 29.510359][ T584] simple_read_from_buffer+0xed/0x160 [ 29.510370][ T584] proc_fail_nth_read+0x1aa/0x220 [ 29.510383][ T584] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 29.510394][ T584] ? _raw_spin_unlock_bh+0x54/0x60 [ 29.510404][ T584] ? bpf_lsm_file_permission+0xd/0x20 [ 29.510415][ T584] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 29.510426][ T584] vfs_read+0x28b/0xc70 [ 29.510439][ T584] ? __kasan_check_write+0x18/0x20 [ 29.510452][ T584] ? __cfi_vfs_read+0x10/0x10 [ 29.510465][ T584] ? __kasan_check_write+0x18/0x20 [ 29.510477][ T584] ? mutex_lock+0x97/0x1d0 [ 29.510488][ T584] ? __cfi_mutex_lock+0x10/0x10 [ 29.510500][ T584] ksys_read+0x145/0x260 [ 29.510517][ T584] ? __cfi_ksys_read+0x10/0x10 [ 29.510530][ T584] ? __kasan_check_read+0x15/0x20 [ 29.510543][ T584] __x64_sys_read+0x7f/0x90 [ 29.510556][ T584] x64_sys_call+0x2638/0x2ee0 [ 29.510565][ T584] do_syscall_64+0x57/0xf0 [ 29.510575][ T584] ? clear_bhb_loop+0x50/0xa0 [ 29.510587][ T584] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.510599][ T584] RIP: 0033:0x7f6e7635ed8e [ 29.510609][ T584] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08 [ 29.510617][ T584] RSP: 002b:00007f6e7718efe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 29.510629][ T584] RAX: ffffffffffffffda RBX: 00007f6e7718f6c0 RCX: 00007f6e7635ed8e [ 29.510636][ T584] RDX: 000000000000000f RSI: 00007f6e7718f0a0 RDI: 0000000000000006 [ 29.510643][ T584] RBP: 00007f6e7718f090 R08: 0000000000000000 R09: 0000000000000000 [ 29.510649][ T584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.510655][ T584] R13: 00007f6e76626038 R14: 00007f6e76625fa0 R15: 00007ffdfc1d2c08 [ 29.510663][ T584] [ 29.761173][ T36] kauditd_printk_skb: 46 callbacks suppressed [ 29.761190][ T36] audit: type=1400 audit(1792452142.870:197): avc: denied { mount } for pid=585 comm="syz.0.93" name="/" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.763499][ T586] FAULT_INJECTION: forcing a failure. [ 29.763499][ T586] name failslab, interval 1, probability 0, space 0, times 0 [ 29.767616][ T380] usb 3-1: device descriptor read/64, error -71 [ 29.788952][ T586] CPU: 0 UID: 0 PID: 586 Comm: syz.0.93 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 29.788981][ T586] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 29.788993][ T586] Call Trace: [ 29.788999][ T586] [ 29.789005][ T586] __dump_stack+0x21/0x30 [ 29.789035][ T586] dump_stack_lvl+0x140/0x1c0 [ 29.789060][ T586] ? __cfi_dump_stack_lvl+0x10/0x10 [ 29.789085][ T586] ? stack_trace_save+0xaa/0x100 [ 29.789110][ T586] dump_stack+0x19/0x20 [ 29.789133][ T586] should_fail_ex+0x3c2/0x510 [ 29.789151][ T586] should_failslab+0xac/0x100 [ 29.789168][ T586] kmem_cache_alloc_lru_noprof+0x44/0x410 [ 29.789192][ T586] ? avc_has_perm_noaudit+0x289/0x360 [ 29.789210][ T586] ? __d_alloc+0x42/0x8c0 [ 29.789231][ T586] __d_alloc+0x42/0x8c0 [ 29.789252][ T586] d_alloc_parallel+0xe4/0x1370 [ 29.789282][ T586] ? avc_has_perm_noaudit+0x26b/0x360 [ 29.789300][ T586] ? __asan_memcpy+0x5a/0x80 [ 29.789323][ T586] ? selinux_inode_permission+0x3f2/0x5d0 [ 29.789345][ T586] ? __cfi_d_alloc_parallel+0x10/0x10 [ 29.789368][ T586] ? __kasan_check_write+0x18/0x20 [ 29.789390][ T586] ? rwsem_read_trylock+0x275/0x5a0 [ 29.789411][ T586] ? downgrade_write+0x470/0x470 [ 29.789430][ T586] ? generic_permission+0x1e2/0x590 [ 29.789455][ T586] __lookup_slow+0x150/0x420 [ 29.789471][ T586] ? __d_lookup+0x4e8/0x550 [ 29.789494][ T586] ? lookup_one_len+0x300/0x300 [ 29.789511][ T586] ? down_read+0x7f/0xe0 [ 29.789531][ T586] ? lookup_one_common+0x320/0x470 [ 29.789549][ T586] lookup_one_unlocked+0x188/0x2d0 [ 29.789567][ T586] ? __cfi_lookup_one_unlocked+0x10/0x10 [ 29.789586][ T586] ovl_lookup_single+0x1de/0xb20 [ 29.789606][ T586] ? ovl_lookup_data_layers+0x440/0x440 [ 29.789625][ T586] ? kmem_cache_alloc_lru_noprof+0x1c2/0x410 [ 29.789648][ T586] ? lookup_one_qstr_excl+0xcf/0x280 [ 29.789664][ T586] ? do_renameat2+0x3e0/0xc30 [ 29.789685][ T586] ? x64_sys_call+0x150b/0x2ee0 [ 29.789702][ T586] ? do_syscall_64+0x57/0xf0 [ 29.789717][ T586] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.789738][ T586] ovl_lookup_layer+0x355/0x420 [ 29.789758][ T586] ovl_lookup+0x3fa/0x1d20 [ 29.789778][ T586] ? __cfi_ovl_lookup+0x10/0x10 [ 29.789795][ T586] ? __kasan_check_write+0x18/0x20 [ 29.789817][ T586] ? _raw_spin_lock+0x92/0x120 [ 29.789832][ T586] ? __cfi__raw_spin_lock+0x10/0x10 [ 29.789848][ T586] ? d_alloc+0x174/0x1c0 [ 29.789873][ T586] lookup_one_qstr_excl+0x12c/0x280 [ 29.789890][ T586] do_renameat2+0x3e0/0xc30 [ 29.789911][ T586] ? __check_object_size+0x99/0x870 [ 29.789936][ T586] ? __cfi_do_renameat2+0x10/0x10 [ 29.789958][ T586] ? getname_flags+0x203/0x6b0 [ 29.789982][ T586] __x64_sys_rename+0x86/0xa0 [ 29.790004][ T586] x64_sys_call+0x150b/0x2ee0 [ 29.790021][ T586] do_syscall_64+0x57/0xf0 [ 29.790044][ T586] ? clear_bhb_loop+0x50/0xa0 [ 29.790064][ T586] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 29.790085][ T586] RIP: 0033:0x7f6e7639e559 [ 29.790100][ T586] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 29.790115][ T586] RSP: 002b:00007f6e7718f028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 29.790134][ T586] RAX: ffffffffffffffda RBX: 00007f6e76625fa0 RCX: 00007f6e7639e559 [ 29.790147][ T586] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 00002000000005c0 [ 29.790158][ T586] RBP: 00007f6e7718f090 R08: 0000000000000000 R09: 0000000000000000 [ 29.790170][ T586] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 29.790181][ T586] R13: 00007f6e76626038 R14: 00007f6e76625fa0 R15: 00007ffdfc1d2c08 [ 29.790196][ T586] [ 29.799063][ T36] audit: type=1400 audit(1792452143.140:198): avc: denied { unmount } for pid=293 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 29.868641][ T31] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 30.318907][ T380] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 30.349790][ T31] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 30.360050][ T31] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 30.374096][ T31] usb 2-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 30.383485][ T31] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 30.392103][ T31] usb 2-1: Manufacturer: syz [ 30.398869][ T31] usb 2-1: config 0 descriptor?? [ 30.406006][ T31] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 30.448646][ T311] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 30.456275][ T380] usb 3-1: device descriptor read/64, error -71 [ 30.610871][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 30.626700][ T311] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 30.636898][ T311] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 30.650246][ T311] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 30.659507][ T311] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 30.669938][ T311] usb 1-1: config 0 descriptor?? [ 30.708697][ T380] usb 3-1: device descriptor read/64, error -71 [ 30.828796][ T380] usb usb3-port1: attempt power cycle [ 31.080267][ T36] audit: type=1400 audit(1792452144.430:199): avc: denied { append } for pid=592 comm="syz.0.97" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.082832][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.104168][ T36] audit: type=1400 audit(1792452144.430:200): avc: denied { open } for pid=592 comm="syz.0.97" path="/dev/rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.132887][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.133841][ T36] audit: type=1400 audit(1792452144.430:201): avc: denied { ioctl } for pid=592 comm="syz.0.97" path="/dev/rtc0" dev="devtmpfs" ino=195 ioctlcmd=0x4c06 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 31.148627][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.172773][ T380] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 31.180413][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.187076][ T598] netlink: 100 bytes leftover after parsing attributes in process `syz.3.98'. [ 31.188066][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.204360][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.211907][ T600] UDC core: g1: couldn't find an available UDC or it's busy [ 31.213159][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.226671][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.234107][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.241997][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.249436][ T380] usb 3-1: device descriptor read/8, error -71 [ 31.255607][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.263132][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.270546][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.277918][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.285631][ T311] plantronics 0003:047F:FFFF.0002: unknown main item tag 0x0 [ 31.293212][ T311] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 31.302108][ T311] plantronics 0003:047F:FFFF.0002: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 31.317085][ T311] usb 1-1: USB disconnect, device number 4 [ 31.379618][ T380] usb 3-1: device descriptor read/8, error -71 [ 31.618646][ T380] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 31.643529][ T380] usb 3-1: device descriptor read/8, error -71 [ 31.691698][ T618] FAULT_INJECTION: forcing a failure. [ 31.691698][ T618] name failslab, interval 1, probability 0, space 0, times 0 [ 31.718644][ T618] CPU: 1 UID: 0 PID: 618 Comm: syz.2.102 Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 31.718679][ T618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 31.718692][ T618] Call Trace: [ 31.718698][ T618] [ 31.718708][ T618] __dump_stack+0x21/0x30 [ 31.718739][ T618] dump_stack_lvl+0x140/0x1c0 [ 31.718765][ T618] ? __cfi_dump_stack_lvl+0x10/0x10 [ 31.718791][ T618] ? ovl_lookup_single+0x692/0xb20 [ 31.718812][ T618] dump_stack+0x19/0x20 [ 31.718837][ T618] should_fail_ex+0x3c2/0x510 [ 31.718855][ T618] ? ovl_stack_alloc+0x31/0xb0 [ 31.718875][ T618] should_failslab+0xac/0x100 [ 31.718893][ T618] __kmalloc_noprof+0x69/0x510 [ 31.718917][ T618] ? ovl_lookup_layer+0x355/0x420 [ 31.718936][ T618] ? ovl_stack_alloc+0x31/0xb0 [ 31.718957][ T618] ovl_stack_alloc+0x31/0xb0 [ 31.718976][ T618] ovl_lookup+0x596/0x1d20 [ 31.718998][ T618] ? __cfi_ovl_lookup+0x10/0x10 [ 31.719016][ T618] ? __kasan_check_write+0x18/0x20 [ 31.719040][ T618] ? _raw_spin_lock+0x92/0x120 [ 31.719057][ T618] ? __cfi__raw_spin_lock+0x10/0x10 [ 31.719075][ T618] ? d_alloc+0x174/0x1c0 [ 31.719098][ T618] lookup_one_qstr_excl+0x12c/0x280 [ 31.719116][ T618] do_renameat2+0x3e0/0xc30 [ 31.719138][ T618] ? __check_object_size+0x99/0x870 [ 31.719171][ T618] ? __cfi_do_renameat2+0x10/0x10 [ 31.719194][ T618] ? getname_flags+0x203/0x6b0 [ 31.719220][ T618] __x64_sys_rename+0x86/0xa0 [ 31.719243][ T618] x64_sys_call+0x150b/0x2ee0 [ 31.719262][ T618] do_syscall_64+0x57/0xf0 [ 31.719279][ T618] ? clear_bhb_loop+0x50/0xa0 [ 31.719301][ T618] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 31.719323][ T618] RIP: 0033:0x7f76a1f9e559 [ 31.719339][ T618] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 31.719355][ T618] RSP: 002b:00007f76a2dd6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 31.719375][ T618] RAX: ffffffffffffffda RBX: 00007f76a2225fa0 RCX: 00007f76a1f9e559 [ 31.719390][ T618] RDX: 0000000000000000 RSI: 0000200000000600 RDI: 00002000000005c0 [ 31.719402][ T618] RBP: 00007f76a2dd6090 R08: 0000000000000000 R09: 0000000000000000 [ 31.719414][ T618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 31.719426][ T618] R13: 00007f76a2226038 R14: 00007f76a2225fa0 R15: 00007ffc53bde078 [ 31.719442][ T618] [ 31.992494][ T380] usb 3-1: device descriptor read/8, error -71 [ 32.005370][ T36] audit: type=1400 audit(1792452145.350:202): avc: denied { ioctl } for pid=622 comm="syz.2.103" path="/dev/fuse" dev="devtmpfs" ino=23 ioctlcmd=0x942c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 32.056976][ T36] audit: type=1400 audit(1792452145.380:203): avc: denied { block_suspend } for pid=621 comm="syz.3.104" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 32.109093][ T380] usb usb3-port1: unable to enumerate USB device [ 32.176257][ T36] audit: type=1400 audit(1792452145.520:204): avc: denied { write } for pid=633 comm="syz.0.107" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 32.346927][ T380] usb 2-1: USB disconnect, device number 4 [ 32.366904][ T636] UDC core: g1: couldn't find an available UDC or it's busy [ 32.438655][ T64] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 32.534191][ T639] netlink: 100 bytes leftover after parsing attributes in process `syz.1.109'. [ 32.588636][ T64] usb 1-1: Using ep0 maxpacket: 8 [ 32.594948][ T64] usb 1-1: config 14 has an invalid interface number: 199 but max is 0 [ 32.612972][ T64] usb 1-1: config 14 has no interface number 0 [ 32.626090][ T64] usb 1-1: config 14 interface 199 altsetting 0 endpoint 0x7 has invalid maxpacket 58144, setting to 64 [ 32.638295][ T36] audit: type=1400 audit(1792452145.990:205): avc: denied { mounton } for pid=645 comm="syz.1.112" path="/22/file0" dev="tmpfs" ino=142 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 32.662878][ T648] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.679335][ T64] usb 1-1: New USB device found, idVendor=5bfe, idProduct=a24d, bcdDevice=3a.07 [ 32.688377][ T64] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.698809][ T648] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.707812][ T648] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=242 sclass=netlink_route_socket pid=648 comm=syz.1.112 [ 32.710405][ T64] usb 1-1: Product: syz [ 32.720709][ T649] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=242 sclass=netlink_route_socket pid=649 comm=syz.1.112 [ 32.738626][ T64] usb 1-1: Manufacturer: syz [ 32.743225][ T64] usb 1-1: SerialNumber: syz [ 32.898646][ T380] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 32.919376][ T36] audit: type=1400 audit(1792452146.270:206): avc: denied { create } for pid=652 comm="syz.2.114" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 32.962126][ T64] cdc_acm 1-1:14.199: invalid descriptor buffer length [ 32.977424][ T64] usb 1-1: USB disconnect, device number 5 [ 33.056339][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.073214][ T380] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.075686][ T661] UDC core: g1: couldn't find an available UDC or it's busy [ 33.083621][ T380] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.103189][ T311] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 33.110669][ T380] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.119851][ T380] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.128485][ T380] usb 2-1: config 0 descriptor?? [ 33.269725][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 33.280765][ T311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.290532][ T311] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 33.303438][ T311] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 33.312513][ T311] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.321342][ T311] usb 4-1: config 0 descriptor?? [ 33.499481][ T64] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 33.510977][ T668] UDC core: g1: couldn't find an available UDC or it's busy [ 33.662042][ T64] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 196, using maximum allowed: 30 [ 33.672928][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 33.684072][ T64] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 33.693854][ T64] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 196 [ 33.706845][ T64] usb 3-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.00 [ 33.715913][ T64] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 33.726699][ T64] usb 3-1: config 0 descriptor?? [ 33.735890][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.743678][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.751216][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.758735][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.766128][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.773566][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.780987][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.788445][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.795895][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.803368][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.810804][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.818269][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.825702][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.833161][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.840774][ T311] plantronics 0003:047F:FFFF.0003: unknown main item tag 0x0 [ 33.848449][ T311] plantronics 0003:047F:FFFF.0003: No inputs registered, leaving [ 33.865642][ T311] plantronics 0003:047F:FFFF.0003: hiddev96,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 33.935710][ T64] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 33.948649][ T64] holtek_kbd 0003:04D9:A055.0004: unknown main item tag 0x0 [ 33.968891][ T64] holtek_kbd 0003:04D9:A055.0004: hidraw1: USB HID v10.00 Device [HID 04d9:a055] on usb-dummy_hcd.2-1/input0 [ 34.009389][ T64] usb 4-1: USB disconnect, device number 3 [ 34.135252][ T311] usb 3-1: USB disconnect, device number 11 [ 34.722242][ T692] UDC core: g1: couldn't find an available UDC or it's busy [ 34.841641][ T701] UDC core: g1: couldn't find an available UDC or it's busy [ 35.020198][ T717] netlink: 100 bytes leftover after parsing attributes in process `syz.3.134'. [ 35.101769][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 35.101787][ T36] audit: type=1400 audit(1792452148.450:208): avc: denied { connect } for pid=722 comm="syz.3.137" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.151905][ T36] audit: type=1400 audit(1792452148.480:209): avc: denied { write } for pid=722 comm="syz.3.137" path="socket:[5771]" dev="sockfs" ino=5771 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 35.217695][ T726] UDC core: g1: couldn't find an available UDC or it's busy [ 35.316994][ T36] audit: type=1400 audit(1792452148.660:210): avc: denied { create } for pid=730 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.339403][ T36] audit: type=1400 audit(1792452148.690:211): avc: denied { setopt } for pid=730 comm="syz.0.140" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 35.341565][ T731] kvm: pic: level sensitive irq not supported [ 35.364558][ T731] kvm: pic: non byte read [ 35.426120][ T736] UDC core: g1: couldn't find an available UDC or it's busy [ 35.473732][ T36] audit: type=1400 audit(1792452148.820:212): avc: denied { read } for pid=738 comm="syz.0.143" name="binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.497382][ T36] audit: type=1400 audit(1792452148.820:213): avc: denied { open } for pid=738 comm="syz.0.143" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.521870][ T36] audit: type=1400 audit(1792452148.850:214): avc: denied { ioctl } for pid=738 comm="syz.0.143" path="/dev/binderfs/binder0" dev="binder" ino=7 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 35.547491][ T36] audit: type=1400 audit(1792452148.850:215): avc: denied { set_context_mgr } for pid=738 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 35.567708][ T36] audit: type=1400 audit(1792452148.920:216): avc: denied { call } for pid=738 comm="syz.0.143" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 35.567746][ T739] rust_binder: 738:739 transaction call to 738:0 failed EINVAL, code 0 size 0-70 line thread.rs:1173 [ 35.612157][ T547] rust_binder: 738: undelivered TRANSACTION_ERROR: 29201 [ 35.661899][ T380] usbhid 2-1:0.0: can't add hid device: -71 [ 35.670326][ T380] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 35.681021][ T380] usb 2-1: USB disconnect, device number 5 [ 35.718521][ T752] netlink: 100 bytes leftover after parsing attributes in process `syz.1.148'. [ 35.873995][ T36] audit: type=1400 audit(1792452149.220:217): avc: denied { read } for pid=771 comm="syz.0.155" name="/" dev="configfs" ino=2633 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 35.900746][ T777] netlink: 100 bytes leftover after parsing attributes in process `syz.3.157'. [ 35.998675][ T547] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 36.010567][ T787] overlayfs: workdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 36.025124][ T787] overlayfs: overlay with incompat feature 'volatile' cannot be mounted [ 36.177637][ T547] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 36.189698][ T547] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 36.200469][ T547] usb 1-1: Dual-Role OTG device on HNP port [ 36.206611][ T547] usb 1-1: New USB device found, idVendor=1234, idProduct=5678, bcdDevice= 6.12 [ 36.218848][ T547] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 36.243964][ T547] usb 1-1: SerialNumber: 1234 [ 36.259436][ C1] ------------[ cut here ]------------ [ 36.264916][ C1] usb_ep_enable: ep129 (ep1in-bulk) has maxpacket 0 [ 36.271698][ C1] WARNING: CPU: 1 PID: 334 at drivers/usb/gadget/udc/core.c:134 usb_ep_enable+0x210/0x3c0 [ 36.281622][ C1] Modules linked in: [ 36.285527][ C1] CPU: 1 UID: 0 PID: 334 Comm: udevd Not tainted syzkaller #0 d636eca9d172ec8b7f35b39457632062ecba35ed [ 36.296564][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 36.306628][ C1] RIP: 0010:usb_ep_enable+0x210/0x3c0 [ 36.312027][ C1] Code: 4d 00 48 c7 c0 60 a0 6d 86 49 c7 c0 80 a0 6d 86 4c 0f 44 c0 48 c7 c7 20 a0 6d 86 48 c7 c6 b2 37 1f 87 44 89 f2 e8 e0 ba 48 fd <0f> 0b e9 4c ff ff ff e8 e4 bb cd fd 49 bc 00 00 00 00 00 fc ff df [ 36.331652][ C1] RSP: 0018:ffffc90000230878 EFLAGS: 00010046 [ 36.337734][ C1] RAX: 00adc076dd4be000 RBX: ffff8881053380b0 RCX: ffff88810d744f00 [ 36.345721][ C1] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 36.353704][ C1] RBP: ffffc900002308a0 R08: ffff8881f6d29593 R09: 1ffff1103eda52b2 [ 36.361707][ C1] R10: dffffc0000000000 R11: ffffed103eda52b3 R12: dffffc0000000000 [ 36.369692][ C1] R13: ffff8881053380b8 R14: 0000000000000081 R15: ffff8881172d21ba [ 36.377658][ C1] FS: 00007f30a624b880(0000) GS:ffff8881f6d00000(0000) knlGS:0000000000000000 [ 36.386605][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.393203][ C1] CR2: 0000001b2f322ff8 CR3: 000000010ebd4000 CR4: 00000000003526b0 [ 36.401189][ C1] Call Trace: [ 36.404478][ C1] [ 36.407328][ C1] hidg_set_alt+0x138/0xa70 [ 36.411873][ C1] set_config+0x812/0xd10 [ 36.416230][ C1] composite_setup+0x18b0/0x3320 [ 36.421194][ C1] ? __kasan_check_write+0x18/0x20 [ 36.426323][ C1] configfs_composite_setup+0xc6/0x110 [ 36.431799][ C1] dummy_timer+0x2eee/0x4900 [ 36.436413][ C1] ? __kasan_check_write+0x18/0x20 [ 36.441542][ C1] ? _raw_spin_lock_irq+0x93/0x120 [ 36.446659][ C1] ? posix_timer_fn+0x2f6/0x3f0 [ 36.451523][ C1] ? __hrtimer_run_queues+0x877/0x8e0 [ 36.456911][ C1] ? ktime_get+0x1df/0x210 [ 36.461340][ C1] ? lapic_next_event+0x15/0x20 [ 36.466197][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.471145][ C1] ? sched_clock+0x44/0x60 [ 36.475559][ C1] ? timerqueue_del+0xd7/0x130 [ 36.480317][ C1] ? __hrtimer_run_queues+0x2bd/0x8e0 [ 36.485699][ C1] ? __cfi_dummy_timer+0x10/0x10 [ 36.490655][ C1] __hrtimer_run_queues+0x3ab/0x8e0 [ 36.495864][ C1] ? hrtimer_interrupt+0xf30/0xf30 [ 36.500971][ C1] ? read_tsc+0xd/0x20 [ 36.505058][ C1] ? ktime_get_update_offsets_now+0x3c0/0x3e0 [ 36.511128][ C1] hrtimer_run_softirq+0x159/0x560 [ 36.516248][ C1] handle_softirqs+0x1aa/0x5b0 [ 36.521008][ C1] __irq_exit_rcu+0x47/0xb0 [ 36.525527][ C1] irq_exit_rcu+0xd/0x30 [ 36.529771][ C1] sysvec_apic_timer_interrupt+0x82/0x90 [ 36.535415][ C1] [ 36.538334][ C1] [ 36.541249][ C1] asm_sysvec_apic_timer_interrupt+0x1f/0x30 [ 36.547241][ C1] RIP: 0010:strncpy_from_user+0x0/0x280 [ 36.552781][ C1] Code: 38 c1 0f 8c 11 fb ff ff 4c 89 ff e8 4a aa f9 fe e9 04 fb ff ff cc cc cc cc cc b8 3c 26 23 8b 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 55 48 89 e5 41 57 41 56 41 55 41 54 53 48 83 ec 18 49 [ 36.572376][ C1] RSP: 0018:ffffc9000b8cfdb8 EFLAGS: 00000246 [ 36.578433][ C1] RAX: 1ffff1102383e220 RBX: ffff88811c1f1100 RCX: 00adc076dd4be000 [ 36.586392][ C1] RDX: 0000000000000fe0 RSI: 00007fffb19ecf60 RDI: ffff88811c1f1120 [ 36.594356][ C1] RBP: ffffc9000b8cfe10 R08: 000000008d225e83 R09: 0000000000000000 [ 36.602321][ C1] R10: ffff88811c1f1100 R11: ffffffff81777ac0 R12: ffff88811c1f1120 [ 36.610299][ C1] R13: 1ffff11021ae8b17 R14: ffff88810d7458b8 R15: dffffc0000000000 [ 36.618275][ C1] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 36.624440][ C1] ? getname_flags+0x106/0x6b0 [ 36.629239][ C1] do_readlinkat+0xcd/0x520 [ 36.633766][ C1] ? cp_old_stat+0x4d0/0x4d0 [ 36.638350][ C1] ? __kasan_check_write+0x18/0x20 [ 36.643458][ C1] ? fpregs_restore_userregs+0x11c/0x260 [ 36.649107][ C1] __x64_sys_readlink+0x83/0xa0 [ 36.653965][ C1] x64_sys_call+0x155b/0x2ee0 [ 36.658634][ C1] do_syscall_64+0x57/0xf0 [ 36.663058][ C1] ? clear_bhb_loop+0x50/0xa0 [ 36.667750][ C1] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 36.673636][ C1] RIP: 0033:0x7f30a5b153a7 [ 36.678066][ C1] Code: 00 00 90 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 00 31 c9 e8 8a 20 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 59 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 21 ba 0d 00 f7 d8 64 89 02 48 [ 36.697666][ C1] RSP: 002b:00007fffb19eca88 EFLAGS: 00000246 ORIG_RAX: 0000000000000059 [ 36.706081][ C1] RAX: ffffffffffffffda RBX: 00007fffb19ecf60 RCX: 00007f30a5b153a7 [ 36.714063][ C1] RDX: 0000000000000400 RSI: 00007fffb19eca90 RDI: 00007fffb19ecf60 [ 36.722029][ C1] RBP: 00007fffb19eca90 R08: 00007fffb19ed795 R09: 0000000000000020 [ 36.730003][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000400 [ 36.737974][ C1] R13: 00007fffb19ed795 R14: 0000562cc4ec6ca4 R15: 0000562cc4ec6bcc [ 36.745944][ C1] [ 36.748963][ C1] ---[ end trace 0000000000000000 ]--- [ 36.754416][ C1] configfs-gadget.g1 gadget.0: Enable IN endpoint FAILED! [ 36.763121][ T547] usb 1-1: can't set config #1, error -32 [ 36.786521][ T801] netlink: 'syz.2.165': attribute type 4 has an invalid length.